1.8.9

Changelog

1.8.9

Hats, headbands and costumes sit on the real head in real calls, 19 new 3D
effects (411 in all), a search box for the 3D effects, the fix for Node's
Brotli flaw, and a nightly automatic update that now also brings new Node,
Alpine and coturn.

Added

• 19 new 3D effects, made on the measured real head: fedora (tips itself
  when you raise your brows), straw boater, flat cap, Robin Hood hat with a
  swinging feather, Nordic pom-pom beanie, Christmas stocking cap with a bell,
  earmuffs with frosty breath, alien antennae, New Year 2027 crown with
  confetti, holly headband, 80s sweatband, ski goggles on the forehead that
  drop onto your eyes, swim cap and goggles with bubbles, Saturn rings, a
  sleepy panda on your head that wakes up, mirrored aviators that slide down
  your nose, hippie shades, retro cat-eye glasses, googly-eye glasses
• Search the 3D effects: a box at the top of the 3D effects tab filters as
  you type, in every language of the app (Italian, English, French, German),
  by section ("masks", "costumes"…) or just "animals". Partial words work
  ("kitt" finds kittens); several words must all match. Esc or × clears it,
  Enter jumps to the first result
• Nightly automatic update, rebuilt:
  aggiorna-tutto.sh, scheduled by installa-aggiornamento.sh every night at
  05:00 Italian time (systemd timer, cron as a fallback). Every night it
  downloads the latest node:22-alpine, so security fixes in Node and Alpine
  actually arrive (before, the image downloaded the first time stayed forever);
  updates coturn when a new image is out, with its own check and rollback;
  rebuilds by itself after a patch, when Dockerfile or code differ from the
  last successful build; computes the npm updates in a throwaway container
  that only gets package.json and the lock file; holds back a dependency
  that has an upper limit (e.g. "mediasoup": ">=3.14 <4"); after the
  restart the app must answer and must not restart by itself for 20 seconds,
  otherwise everything goes back as it was. The email says what happened (app,
  Node, coturn) and gives the exact command to go back. Postponing during
  meetings, --force, realigning old versions inside the image and the
  major/minor/patch table all stay. auto-update.sh and install-cron.sh
  still work and hand over to the new names; the new installer removes the
  old 08:00 schedule

Security

• Node's Brotli flaw (CVE-2026-111497, October 2026): the server no longer
  accepts compressed request bodies (gzip, deflate, brotli: no Tiditalk client
  sends them), so the flaw can't be reached whatever the Node version. The
  Dockerfile stops the build with a clear message if the Node image is still
  an affected one (fixed in 22.23.4 / 24.22.1 / 26.12.1) and tells you to
  rebuild with docker compose build --pull. The nightly report also lists
  the Node version

Fixed

• Hats and headbands sit on the real head in real calls. With a webcam a
  bit below the face, hats floated above the head and you could see inside
  them. The causes, rebuilt from real call screenshots:
  • the head the effects are drawn against stopped at the hairline: now it
    has the real skull (3–4 cm taller and longer), so the inside of hats and
    the back of bands and brims no longer show;
  • the head rotation from MediaPipe was off by 5–10° with a beard, a hand in
    front of the mouth or a turned head: now it is refined on the points of
    the upper face, on webcams only;
  • scarves, collars and capes followed the whole tilt of the head: now they
    bend less than the head, like a real neck;
  • many hats had their crown about 5 cm in front of the real axis of the head
    and some effects were fitted on thick hair: hats, caps, helmets,
    headbands, headphones, horns, ears and wigs were moved one by one onto the
    real head (bowler, fisherman, witch, wizard, chef, party, top hat, elf,
    bucket, cowboy, beanie, cat-ear headphones and the others)
• Costumes and accessories: Italy fan and Halloween witch hats now fit
  over the forehead with a dark lining (no light "lid" seen from below);
  scarves, ruffs, capes, wings, tail and the pirate's parrot follow the body;
  the starry and bunny hoods frame the face instead of sticking out in front
  of the cheeks; the far side of the Venetian mask hides when you turn; the
  puppy and hamster stay on your shoulder when you tilt your head; mushroom,
  strawberry, froggy and teddy hats and the sleepy zzz got dark linings

1.8.8

175 new 3D face effects (392 in all): animals with real fur, kawaii animals,
characters and costumes, cute accessories, fun and Halloween effects, new face
paints. Plus the fixes from a full check of 1.8.0–1.8.7.

Added

• Animals with real fur (32): tabby kitten, black cat, white Persian,
  Siamese, ginger cat, shiba, golden and pug puppies, tiger and lion cubs, red
  panda, giant panda, raccoon, lop-eared bunny, hamster, red fox, koala joey,
  polar bear cub, wolf pup, piglet, penguin chick, little owl, unicorn. Soft fur
  that lags a little behind the head, glossy eyes that blink one at a time and
  look where you look, a real mouth with tongue that opens, smiles, frowns and
  kisses. On your own face: puppy, kitty, bunny, teddy and fawn faces, a kitten
  or a hamster on your head, kittens peeking from behind your shoulders, a
  puppy on your shoulder. On slow computers the fur gets lighter by itself
• Kawaii animals (29): round toy-like heads with big shiny eyes and pink
  cheeks — bunny, kitten, puppy, plush teddy, froggy, chick, chubby hamster,
  penguin, piglet, axolotl, fox cub, fawn, panda, koala, calf, lamb, baby seal,
  otter, hedgehog, octopus, sloth, mouse, lion cub, unicorn, baby dragon — plus
  a froggy and a duckling on your head, a bunny peeking from your shoulder and a
  hamster on your shoulder
• Characters and costumes (25): bearded pirate, viking, wizard, witch,
  Santa, Christmas elf, vampire count, fairy, caped hero and heroine, screen-face
  robot, hooded skeleton, mummy, stitched monster, Halloween zombie; Roman
  centurion, pirate with a parrot that squawks when you open your mouth, king,
  starry hood, samurai, pharaoh, fairy-tale princess, detective with a pipe,
  firefighter, snow queen. Picking an effect again is instant, and the video
  doesn't freeze while a character is prepared
• Fun and Halloween (37), triggered by your face: confetti, balloons,
  fireworks, fairy dust, autumn leaves and cherry blossoms when you smile; a
  rainbow, a ghost parade, a pie in the face or a jack-o'-lantern hat when you
  open your mouth wide; a head on fire or a storm cloud (sun and rainbow when you
  smile) when you frown; laser eyes or falling shades when you raise your
  brows; bubbles, a party blower, birthday candles and flying kisses when you
  blow; dizzy stars with your eyes closed; butterflies, heart eyes, cartoon
  tears, comic BOOM, angel wings, devil horns and tail, witch with bats, Santa
  hat with snow, reindeer, jester, Venetian mask, Easter bunny, Italy fan,
  chef, firefighter with hose, doctor, miner, pilot. Talking doesn't set them off
• Cute accessories (27): bouncy ear headbands (teddy, mouse with cheese,
  kitty with bow and bell, fox, floppy bunny) that perk up when you raise your
  brows and droop when you frown, blossom antlers, polka-dot and twin bows,
  teddy beanie, bunny hood, froggy hat whose eyes blink with yours, strawberry
  and toadstool hats, a chick in its eggshell, a cupcake, a melting ice cream, a
  donut, a smiling avocado and kawaii sushi on your head, kawaii blush, rainbow
  and little clouds, anime sweat drop and anger mark, sleepy zzz with a nose
  bubble when you close your eyes, a singing birdie, a little snail, a strolling
  ladybug and a buzzy bee that lands on your nose
• 25 new face paints: tabby cat, white tiger, snow leopard, arctic fox,
  scaled dragon, mermaid, monarch butterfly, painted flower crown, Catrina, gold
  and black skull, harlequin, Colombina, black half-mask, Pierrot, spiral tattoo,
  neon cyber make-up, geometric glitter, festival gems, and the flags of
  Portugal, the Netherlands, Belgium, Switzerland, Japan, Mexico and Canada

Fixed

• Present again with audio: cancelling the browser's screen picker ended
  the presentation that was running. Now you choose the screen first and the
  old presentation stops only after that
• Use an audio device: if sending the chosen input failed, it was left open
  (a microphone or BlackHole stayed on); now it is closed again
• +N tile: someone hidden in it who raises their hand now comes into view by
  themselves
• Zoom on a shared screen: Ctrl/⌘ + plus, minus and 0 did nothing (and
  Ctrl + plus zoomed the whole page) when the shared screen appeared under a
  mouse that had not moved
• Pre-join: initials of names with parentheses or symbols follow the 1.8.0
  rule there too («Giuseppe (Sciarra)» is GS, it was «G(»)
• Questions: the Ask a question… placeholder is translated in English,
  French and German

Repository

• The 1.8.7 commit on GitHub contained only the 12 files of the update and
  removed the other 626 files of the project (styles, scripts, part of the
  server, fonts, sounds, backgrounds and all the 3D effects). They are back: the
  repository is again the complete program. Servers updated with the 1.8.7 zip
  were not affected

Update

• Only docker compose up -d --build