Kiwi TCMS 16.4

Dear testers, we're happy to announce Kiwi TCMS version 16.4!

IMPORTANT:

This is a minor version release which includes critical security related updates and several improvements.

You can explore everything at https://public.tenant.kiwitcms.org!

---

Public container image (x86_64):
pub.kiwitcms.eu/kiwitcms/kiwi   latest  1cefd747576b    806MB

IMPORTANT: version tagged and multi-arch container images are available only to subscribers!

Changes since Kiwi TCMS 16.3

Security

Overwrite all fields when saving BugSystem via Admin. Fixes GHSA-38fx-5xmx-c3r8
Improve field arguments restriction for JSON-RPC API method calls. Fixes GHSA-9g83-4wjw-77gx
Validate BugSystem.tracker_type field against settings.EXTERNAL_BUG_TRACKERS. Fixes GHSA-vm6v-85rx-3mr2

Improvements

Update django from 6.0.8 to 6.1.1
Update django-guardian from 3.3.3 to 3.4.1
Update django-tree-queries from 0.24.0 to 0.25.1
Update psycopg from 3.3.4 to 3.3.5
Update pygithub from 2.9.1 to 2.10.0
Update node_modules/browserslist from 4.28.1 to 4.28.8
Update node_modules/webpack from 5.109.2 to 5.110.3
Update node_modules/webpack-cli from 7.2.2 to 7.2.3
Convert BugSystem.base_url and BugSystem.api_url to URLField
Add --database option to initial_setup & set_domain commands

Database

Introduce new migration testcases.0025_alter_bugsystem_api_url_alter_bugsystem_base_url

Refactoring and testing

Update isort from 8.0.1 to 9.0.1
Update locust from 2.46.3 to 2.46.4
Update pylint from 4.0.7 to 4.0.8

Changes since Kiwi TCMS Enterprise v16.3-mt

Based on Kiwi TCMS v16.4
Update certbot from 5.7.0 to 5.8.0
Update django-ses from 4.7.2 to 4.8.0
Update sentry-sdk from 2.68.0 to 2.68.1
Fix TypeError on /accounts/passwordreset/ when PASSWORD_LOGIN_ENABLED=False

Private container images

hub.kiwitcms.eu/kiwitcms/version            16.4 (aarch64)          d7a6828acb2c    07 Sep 2026     718MB
hub.kiwitcms.eu/kiwitcms/version            16.4 (x86_64)           d421c55fd66d    07 Sep 2026     698MB
hub.kiwitcms.eu/kiwitcms/enterprise         16.4-mt (aarch64)       5c3cba332923    07 Sep 2026     947MB
hub.kiwitcms.eu/kiwitcms/enterprise         16.4-mt (x86_64)        d75c06f712d6    07 Sep 2026     926MB

IMPORTANT: version tagged, multi-arch and Enterprise container images are available only to subscribers!

How to upgrade

Follow the Upgrading instructions from our documentation.

Happy testing!

---

If you like what we're doing please help us grow:

Give ⭐ on GitHub;
Join our newsletter and follow all news;
Become a subscriber and help us sustain development
Become a reseller and help us serve your community