Release Notes - Homebox Companion v3.0.0

💥 Homebox 0.26+ Required — Unified Entities API #127

This release migrates to the unified entities API introduced in Homebox v0.26.0. Items and locations are now managed through a single endpoint. Homebox Companion v2.7.0 will not work with Homebox versions older than 0.26.0.

⚠️ Before upgrading, please review the Homebox v0.26.0 release discussion. Key things to note:

• Back up your database before upgrading Homebox — this is a major schema migration on the Homebox side.
• You must set the new HBOX_AUTH_API_KEY_PEPPER environment variable on your Homebox instance (minimum 32 bytes).
• The demo user password changed from demo to demodemo.

🚀 Features

🏢 Multi-Tenancy — Collection Switching

If your Homebox instance has multiple groups (collections), you can now switch between them directly from the app header without re-authenticating.

• Collection selector dropdown appears when you belong to more than one group
• Selection persists across page refreshes
• Switching collections automatically reloads locations, tags, and resets scan state

🔧 Improvements & Bug Fixes

📸 Enforce HBC_IMAGE_QUALITY on All Uploads #135

Previously, when the frontend fell back to the original file (e.g. for cropped thumbnails or after state loss), the raw camera image was uploaded regardless of the configured quality. The upload endpoint now enforces HBC_IMAGE_QUALITY for every upload path. raw quality still passes through unchanged, and smaller images are never upscaled.

Shoutout to afs25 for the contribution in PR #136.

⚡ Vite 8 & Rolldown

Upgraded the frontend bundler from Vite 7 to Vite 8, which replaces esbuild + Rollup with the Rust-based Rolldown bundler. This resolves 4 high-severity esbuild vulnerabilities.

🗺️ Roadmap

• API Key Authentication – Homebox 0.26 introduced static API keys for programmatic access (hb_ prefixed tokens). Support for authenticating with API keys is planned for a future release.