RTL v0.15.9
🔒 Security & dependencies — zero production vulnerabilities. Production npm audit goes from 13 findings (2 critical) to 0. The deprecated, unmaintained dependencies behind them were retired via code changes, not just version bumps: request/request-promise → axios, csurf → csrf-csrf (with session-bound CSRF tokens), and the crypto-browserify polyfill chain removed by moving 2FA TOTP to WebCrypto — plus a batch update clearing all outstanding Dependabot security PRs.
Multi-node reliability. Fixed per-node authentication being corrupted when saving application settings, and a node whose credentials load late (e.g. a CLN rune written after startup) being permanently blocked until a restart.
Core Lightning. Corrected contradictory channel connection status between the list and detail views, and fixed the channel View Info modal rendering blank for disconnected channels.
UI/UX & accessibility. Restored the "items per page" selector and first/last-page buttons on tables; fixed a dashboard page-load error on missing channel aliases; realigned the Reports date controls; added missing form-field labels and removed positive tab indexes.
Enhancements. Added an option to disable RTL's built-in login (for platforms that front their own auth), and surfaced "Blocks till Maturity" by default on the pending force-closing list.
Reliability. Bounded peer/route alias resolution to stop clnrest "Resource temporarily unavailable" errors on nodes with many peers.
Developer tooling. Rebuilt the regtest docker fixture to cover all three implementations (LND, Core Lightning, Eclair), and documented the Dependabot / dependency-update process.
Full details: release-notes/Release-notes-0.15.9.md
Contributors:
@ShahanaFarooqui @SIDHARTH20K4 @MattDHill @CosimoRicciardi @saubyk
PGP Key: https://keybase.io/suheb
Retrieve the source code repository, check for the latest release and verify the code signature
$ git clone https://github.com/Ride-The-Lightning/RTL.git
$ cd RTL
$ git checkout v0.15.9
$ git verify-tag v0.15.9
gpg: Signature made Sun Jul 19 22:02:47 2026 PDT
gpg: using RSA key 3E9BD4436C288039CA827A9200C9E2BC2E45666F
gpg: Good signature from "saubyk (added uid) <39208279+saubyk@users.noreply.github.com>" [ultimate]
gpg: aka "Suheb <39208279+saubyk@users.noreply.github.com>" [ultimate]
Install RTL via npm
npm ci --omit=dev --legacy-peer-deps
Docker images available at https://hub.docker.com/r/shahanafarooqui/rtl/tags
