Changelog for epiphany: 50.6 -> 51.0
Source: NEWS

51.0 - September 10, 2026
=========================
  - #2617 session: Append closed tab at end if recorded position is out of bounds
    (John Cardullo)
  - #2897 (CVE-2026-18487) Address Bar / Host Spoofing via userinfo in
    ephy_uri_get_decoded_host (Michael Catanzaro)
  - #2931 Code Injection via ephy_web_view_get_best_web_app_icon in `data:` URI
    (Michael Catanzaro)
  - #2934 `data` URI prettification returns invalid domain (Michael Catanzaro)
  - !2144 Some fixes for EphyHistoryDialogRow (Michael Catanzaro)
* Translation updates:
  - Basque (Asier Saratsua Garmendia)
  - Danish (Alan Mortensen)
  - English (United Kingdom) (Bruce Cowan)
  - French (Guillaume Bernard)
  - Hungarian (Balázs Úr)
  - Korean (ChangSeok Oh)
  - Norwegian Bokmål (Kjartan Maraas)
  - Serbian (Марко Костић)
  - Spanish (Daniel Mustieles García)
  - Turkish (Emin Tufan Çetin)

51.rc - August 27, 2026
=======================
  - #2898 Invalid bookmark import crashes browser (Fernando Muñoz)
  - #2903 XSS/HTML injection in error page (Michael Catanzaro)
  - #2921 (CVE-2026-77682) Autofill JS Code Injection via CSS Selector (Michael
    Catanzaro)
  - #2922 (CVE-2026-77679) WebExtension XPI Path Traversal ZIPSLIP (Fernando
    Muñoz)
  - #2928 Link clicked in another app opens in the fullscreen window during
    fullscreen video (Semen Fomchenkov)
  - #2929 Caret in the address bar jumps to the start when I switch keyboard
    layout (Semen Fomchenkov)
  - #2938 "Not Secure" label in the address bar is truncated and glued to the
    domain in translated locales (Semen Fomchenkov)
  - #2940 Epiphany offers to save a password that it just autofilled itself
    (after CSV import) (Semen Fomchenkov)
  - !2145 Update to highlight.js 11.2.0 (Michael Catanzaro)
  - !2148 web-process-extension: Target active frame when generating password
    from context menu (John Cardullo)
  - !2152 Canary: Fix WebKitGTK injected bundle path (Philippe Normand)
  - !2159 Do not trigger downloads on missing MIME type or failed HTTP responses
    (John Cardullo)

* Translation updates:
  - Bulgarian (Alexander Alexandrov Shopov)
  - Catalan (Xavi Ivars)
  - Chinese (Taiwan) (Chao-Hsiung Liao)
  - Finnish (Jiri Grönroos)
  - Kazakh (Baurzhan Muftakhidinov)
  - Lithuanian (Aurimas Aurimas Černius)
  - Portuguese (Brazil) (Luiggi Cardoso)
  - Romanian (Antonio Marin)
  - Swedish (Anders Jonsson)
  - Uighur (Abduqadir Abliz)

51.beta - August 10, 2026
=========================

* Bugs fixed:
  - #1671 Colons in URL for Epiphany's app mode are converted to "A" (John
    Cardullo)
  - #2892 Compile failures against libnettle 4.0 (Fernando Muñoz)
    (Michael Catanzaro)
  - #2902 Out-of-bounds crash/assert failure in
    ephy_json_array_get_string_with_default (Michael Catanzaro)
  - #2904 Invalid view-source: crashes browser (John Cardullo)
  - !2079 CI: Add gobject-linter (Jan-Michael Brummer)
  - !2109 add pinning support for URLs in history and overview model (John
    Cardullo)
  - !2110 window: update message when saving a password (Michael Catanzaro)
  - !2111 Remove incorrect use of G_GNUC_CONST for get_type() functions (Michael
    Catanzaro)
  - !2112 Update highlight.js to 11.11.2 (Michael Catanzaro)
  - !2113 Add libpwquality to Canary manifest (Michael Catanzaro)
  - !2114 history-service: use G_SOURCE_REMOVE (Michael Catanzaro)
  - !2117 fix: check for invalid icon (Fernando Munoz)
  - !2121 Fix code style check (Michael Catanzaro)
  - !2125 Adjust Reader Mode Line Spacing (John Cardullo)
  - !2130 view-source-handler: fix crash when loading invalid URI (jcardullo)
  - !2134 Fix CI failures (Jan-Michael Brummer)
  - !2136 Canary: Disable WebRTC for now (Philippe Normand)
  - !2138 Reland property registration code style changes (Michael Catanzaro)
  - !2139 ci: move check-potfiles to lint stage (Michael Catanzaro)
  - !2140 ci: ignore blueprint-compiler failures during style check (Michael
    Catanzaro)
  - !2141 Canary: Re-enable WebRTC (Philippe Normand)
  - Basque (Asier Saratsua Garmendia)
  - Catalan (Xavi Ivars)
  - Chinese (China) (luming zh)
  - Czech (Daniel Rusek, Patrik Sivek)
  - Dutch (Nathan Follens)
  - Galician (Francisco Diéguez Souto)
  - Georgian (Ekaterine Papava)
  - Hebrew (Yaron Shahrabani)
  - Italian (Davide Ferracin)
  - Kazakh (Baurzhan Muftakhidinov)
  - Occitan (post 1500) (Quentin PAGÈS)
  - Persian (Danial Behzadi)
  - Romanian (Antonio Marin)
  - Russian (Artur S0)
  - Slovenian (Martin)
  - Ukrainian (Yuri Chornoivan)

51.alpha - June 25, 2026
========================

* Bugs fixed:
  - #2712 Crash when opening preferences dialog after deleting default search
    engine (Michael Catanzaro)
  - #2769 [Feature Request] Keyboard shortcut to copy the current page URL
    (Aygyun)
  - #2834 Search engine suggestions in addressbar autocompletion dropdown are
    visually overloading due to their URLs being shown (ARAKHNID)
  - #2868 Addressbar URL prettification does not understand IPv6 addresses
    (Achu94)
  - #2875 Editing password username creates duplicate entries (Michael
    Catanzaro)
  - !1987 webextension: Replace EphyWebExtension with WebKitWebExtension (Jamie
    Murphy)
  - !2052 Firefox sync OAuth token flow (Dyego Aurélio)
  - !2077 Use libportal API to detect sandbox (ARAKHNID)
  - !2082 window-commands: improve notification when failing to install (Simon
    Pena)
  - !2085 Change default adblock filters back to bnema (Michael Catanzaro)
  - !2086 window: Set devel CSS also for Canary builds (Philippe Normand)
  - !2089 canary: Disable Vulkan support (Philippe Normand)
  - !2090 site-menu-button: add rudimentary debug logging (Michael Catanzaro)
  - !2091 password-manager: fix crash when deleting password record (Michael
    Catanzaro)
  - !2094 Quote command line input before passing to shell (Michael Catanzaro)
  - !2098 password-manager: avoid duplicate record when changing username
    (Michael Catanzaro)
  - !2099 Fix crash when opening preferences dialog after deleting a search
    engine (Michael Catanzaro)
  - !2100 bookmark-props: Save bookmark on Ctrl + Enter (Zoey Ahmed)
  - !2101 bookmark-props: Select tag when row is clicked on (Zoey Ahmed)
  - !2102 web-view: fix memory corruption caused by previous memory corruption
    fix (Michael Catanzaro)
  - !2103 docs: clarify HiDPI snapshot sizing requirements and refactor
    about.css for readability (IGS_GIT)
  - !2104 Fix crash after adding a new OpenSearch engine (Michael Catanzaro)
  - !2105 feat: add undo functionality to overview item removal via toast
    notifications (IGS_GIT)
  - !2106 site-menu-button: remove unused function (Michael Catanzaro)
  - !2107 shortcuts: document F6 shortcut (YukiCodepth)
  - !2108 Allow user to generate secure passwords with libpwquality (Michael
    Catanzaro, IGS_GIT, John Cardullo)

* Translation updates:
  - Belarusian (Vasil Pupkin)
  - Czech (Patrik Sivek)
  - Lao (Saikeo Kavhanxay)
  - Romanian (Antonio Marin)
  - Slovenian (Martin)