The Briefing

28 October 2026

After a seven-day pause in this brief, the whole October release train has landed. ESPHome 2026.10 is stable with native ESP8266 builds and smaller OTA updates, HAOS 18.4 fixes 18.3's kernel regressions and ships signed images, and Core is at 2026.10.4. New on the site today is a step-by-step guide to installing Home Assistant on a Raspberry Pi, updated for HAOS 18.4.

01 · ESPHome

ESPHome 2026.10 is stable: native ESP8266 builds and a third off every OTA

What happened: ESPHome 2026.10.0 went stable on 21 Oct and the first patch, 2026.10.1, followed on 27 Oct. The headline changes: ESP8266 builds now use the native Arduino toolchain by default, so they are considerably quicker end to end and no longer need Rosetta on recent Apple Silicon Macs, and OTA updates install about a third smaller on every platform ESPHome supports. There are 20 new components, among them ESPectre Wi-Fi motion sensing, a persistent counter, the STCC4 CO2 sensor, and USB-UART and TCP-UART bridging.

Why it matters: Four config changes need attention before you update. Lights with initial_state now honor it at boot. codec_support_enabled on speaker media players is gone, so remove it or the config will not validate. IR climate devices with supports_heat: false or supports_cool: false lose the combined heat/cool mode unless you add supports_heat_cool: true. Sendspin speakers need Music Assistant 2.10.7 or 2.11.0b4 or newer. 2026.10.1 is a fix-only patch (OTA watchdog on esp32_hosted, MQTT fan state resend, lambda include ordering).

Primary source: ESPHome blog: 2026.10.0; 2026.10.1 release notes

02 · Home Assistant OS

HAOS 18.4 ships: kernel regression fixes and signed images

What happened: HAOS 18.4 released 27 Oct after two release candidates. It is a bugfix and security release that mainly repairs kernel regressions from 18.3: VLAN networking on Realtek adapters and RTL8761B (0bda:a728) Bluetooth adapters, which broke with kernel 6.18.45, plus several boot and USB storage issues. The kernel moves to 6.18.58. Docker (29.8.2), containerd and Buildroot carry security fixes, and the new CA bundle drops trust in the eMudhra roots tied to compromised intermediates. Release downloads now include SHA256SUMS with a Sigstore bundle, so you can verify images with Cosign.

Why it matters: If 18.3 cost you a Realtek VLAN or a USB Bluetooth stick, this is the fix. On Raspberry Pi, UAS is now disabled for the Argon ONE M.2 and UGREEN CM300 adapters, which should help people booting from USB SSDs. The project says all users should upgrade. stable.json already lists 18.4 for the Pi 5.

Primary source: operating-system 18.4; stable.json

03 · Home Assistant

Core 2026.10.3 and 2026.10.4 land; 2026.10.4 is the stable default

What happened: Two patch releases arrived since our last brief: 2026.10.3 (23 Oct) and 2026.10.4 (24 Oct). 2026.10.4 is small. It raises the aiohttp client header limit to 64 KiB and bumps pylutron-caseta to 0.30.0. stable.json advertises 2026.10.4 as the default.

Why it matters: This is routine patching. If you use Lutron Caséta or ran into header-size errors on integrations that talk to chatty cloud APIs, update.

Primary source: core 2026.10.4; core 2026.10.3

04 · Home Assistant / Supervisor

Supervisor 2026.10.4: log timestamps gain a UTC offset

What happened: Supervisor moved through 2026.10.3 (19 Oct) to 2026.10.4 (24 Oct), which is now the stable pin. Its one breaking change adds a UTC offset to log timestamps. New features let apps set a default log format and forward the Core user's groups to apps over ingress. Fixes cover Core not starting after a Supervisor restart when its container is missing, and a starting healthcheck being treated as unhealthy.

Why it matters: If you parse Supervisor logs with a script or ship them to a log stack, expect the timestamp format to change.

Primary source: supervisor 2026.10.4

05 · Z-Wave

Z-Wave JS UI 11.25.x: Node 24 in Docker, then a cert fix

What happened: v11.25.0 (21 Oct) added an option to enable Configuration CC entities by default and showed min/max/step in value hints, and its Docker image moved to Node 24. v11.25.2 (26 Oct) regenerates self-signed HTTPS certificates that Node 24 rejects. The driver, node-zwave-js, is at v15.31.2 (22 Oct).

Why it matters: If you run Z-Wave JS UI in Docker with its own HTTPS and it broke after 11.25.0, skip straight to 11.25.2.

Primary source: zwave-js-ui v11.25.2; v11.25.0

06 · Zigbee

Zigbee2MQTT still 2.14.2

What happened: No new tag since 2.14.2 (1 Oct). The usual monthly release would be due around the start of November.

Primary source: Zigbee2MQTT releases

07 · Matter & Thread

matter.js 0.18.0 is out

What happened: matter.js v0.18.0 tagged 20 Oct. It is the open-source TypeScript implementation of the Matter protocol.

Primary source: matter.js v0.18.0