July 2026: What I've Been Working On

2nd of August 2026

#WorkUpdates

Heat waves in the UK have continued in July which, when combined with a little arthritis flaring, has kept me in a mind-melted sleepy mode for much of the month 🫠.

BookStack

It’s mostly been maintenance work this month while focusing on other things.

Another couple of security releases pushed out this month. The rate of, and therefore time consumed by, security reports is still quite intense. Within 24 hours of releasing v26.05.3 I was sent a further 7 vulnerability reports to handle. Most of these are invalid or need no action, but even with those they require time to review, check and respond to.

yphp

Finished off my PHP implementation of Yrs/Y.js. All main functions of the underlying C library are now implemented, providing a high level of feature coverage, with testing to cover. Quite enjoyed putting together some hand-written user guidance for the library.

xemlock/htmlpurifier

Created a pull request for this HTMLPurifier addon to add full srcset attribute parsing. It was interesting to read & follow the exact parsing logic of a WHATWG spec for the first time.

This was essentially an upstreaming of code created to address a reported BookStack vulnerability scenario.

IsItReallyFOSS

Made a few small updates this month, although still going slow. Still trying to find the best way to work on this more frequently.

The most interesting project for the month was for OpenVPN, added by frequent contributor Esmenard. Shame to see yet another project with “Open” in the name use its branding to mostly push non-FOSS offerings.

danb/rss

Put out a little release mainly to bump up dependencies. Ran into issues testing locally since recently switching to podman, so also made the container work better in rootless environments by allowing the webserver port to be configured via env variable.

I did think about maybe upgrading the container to use FrankenPHP, but the FrankenPHP binary alone is a lot larger than my existing container image build, so I decided against that to keep things small and efficient.

Blog Posts

3D Print Models

Just one model this month, this time being my first (published) modification of an existing SV08 toolhead cover:

On Printables here.

Unfortunately it’s under Prusa’s dodgy “Open Community License” which I have some opinions about.