Here is the latest release of wallabag.

📈 To update your instance, just run make update. Don't forget to make a backup of your instance (database and files).

🤝 A little reminder that you can support our work on wallabag by sponsoring us on Liberapay or subscribe on wallabag.it. Thanks!

Human summary

wallabag 2.6.15 supports PHP 8.4, while keeping compatibility with PHP 7.4. The 2.6 series still uses legacy dependencies, so deprecation notices may appear. See the PHP requirements for installation and production configuration advice.

This release also improves article fetching: supplied HTML is reused, prefetched content is kept separate between entries, and available metadata is preserved when fetching fails.

Graby receives a security update, and site extraction configurations catch up with a year of updates.

Redis configuration is more flexible with the new REDIS_URL environment variable for imports. Existing connection settings, including passwords with special characters, continue to work when it is not set: no Redis configuration change is required when upgrading from 2.6.14. See the Redis configuration documentation for details.

A note about the Docker image 2.6.14.1

We published Docker image 2.6.14.1 to deliver important security fixes without waiting for wallabag 2.6.15. This rebuild updated system packages, notably addressing the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, without changing the wallabag application version. A new Docker image for wallabag 2.6.15 will follow.

What's Changed

Improvements

• Support PHP 8.4 while retaining PHP 7.4 compatibility by @j0k3r in #9099
• Introduce REDIS_URL for Redis-backed imports by @Kdecherf in #8868

Fixes

• Hide the delete public link action when no public link exists by @nicosomb in #8878
• Reuse supplied HTML when fetching entry metadata by @Kdecherf in #8889
• Escape dynamic data in ePub exports by @j0k3r in #8968
• Fix merging of existing and fetched entry content by @Simounet in #8985
• Isolate prefetched HTML between entries and preserve available metadata when fetching fails by @j0k3r in #9099
• Preserve existing Redis connection parameters and authentication when REDIS_URL is not set, and fix Redis-backed sessions in the Docker configuration example by @j0k3r in #9099

Technical stuff

• Include the documentation in the main repository by @yguedidi in #8780
• Update Graby and PHP Readability dependencies by @Kdecherf in #8891
• Fix volatile test URLs by @Kdecherf in #8892
• Update phpseclib to 3.0.55 by @Kdecherf in #8919
• Update Graby for security fixes and refresh site extraction configurations by @j0k3r in #9099
• Update translations by @j0k3r in #9113

You can read the full changelog on GitHub.

Download wallabag 2.6.15

To download, install/upgrade wallabag, please read our downloads page.

Need help?

We are on Matrix, ping us!

You can also open a new issue on GitHub.

How can you help us?

By using wallabag, by reporting bugs, by translating wallabag and its documentation, by talking about wallabag to your friends, ...

You can also help us by donating via Liberapay.