| Website | https://sandstorm.org |
| Donate via OpenCollective | https://opencollective.com/sandstormcommunity/donate |
| GitHub | https://github.com/sandstorm-io |
| Chat via Zulip | https://sandstorm.zulipchat.com/ |
Note that when this is done, it will be a manual upgrade, not automatic as most Sandstorm updates have been. We will be changing maintainers and thus signing keys. We also want to make sure that users apply this update deliberately and with care, as it will be a big change.
The PR is here: https://github.com/sandstorm-io/sandstorm/pull/3745
More info here: https://groups.io/g/sandstorm-dev-group/message/16
Join the discussion on Zulip: https://sandstorm.zulipchat.com/#narrow/channel/474439-general/topic/Upgrading.20sandstorm's.20meteor.2Fmongo.20dependencies/with/574644436
😺 Big things in progress:
We are working on some much needed upgrades to #Sandstorm. We have a pull request out (Huge thanks to Michael Nutt!), and this will hopefully be the first of many! In particular, this upgrades:
* Mongo 2.6 -> Mongo 7.0
* Meteor 2.3 -> Meteor 2.16
Would you like to help out? We would greatly appreciate anybody who can help with:
* Code feedback and review - particularly anybody comfortable with C++ and Meteor
* Extensive testing once it is merged
🧵
#ntfy released v2.14.0 (https://github.com/binwiederhier/ntfy/releases/tag/v2.14.0) so I've upgraded the Sandatorm package: https://apps.sandstorm.io/app/c6rk81r4qk6dm3k04x1kxmyccqewhh4npuxeyg1xrpfypn2ddy0h
This adds a couple features for "templates" that will work on the Sandstorm version:
* a few pre-defined templates (github, grafana, etc)
* sprig template functions
Templates are useful when a service like Github has a webhook with a json body with info about the event. The template shows how to transform it into a useful notification. Pretty cool.
I've released my #ntfy package for #Sandstorm https://apps.sandstorm.io/app/c6rk81r4qk6dm3k04x1kxmyccqewhh4npuxeyg1xrpfypn2ddy0h
If you're using the "experimental" (pre-release) app: This is a new app, not an upgrade. Please *install* this new app and *uninstall* the experimental app. (The reason has to do with token permissions).
Ntfy (https://ntfy.sh) is a FOSS push notification system that doesn't require Google services. Now you can host it on Sandstorm.
If you try it out, let me know how it works for you, and what more you want from it!
We found a vulnerability in the following apps, which allows unauthorized grain access via API tokens:
* Sandstorm Error Collector
* XRF Sync
* Hummingbird
This was ultimately due to poorly worded documentation for Sandstorm "offer templates", which issue API keys.
Read more about it here:
https://sandstorm.org/news/2025-05-12-forsharingaccidentally
Cleaned up the README some more for my #ntfy package for #sandstorm. Hopefully it's easier to understand what I'm doing and have left. Also added useful links.
Target audience is people who are familiar with ntfy but less so Sandstorm. Eager for interested parties to give feedback and/or test!
Right now it's usable but I have some UI cleanup (removing features that won't work), some warnings for users, and some edge case functionality to check.
https://github.com/orblivion/ntfy/blob/sandstorm/.sandstorm/README.md
A few days ago someone dropped a #SelfHosted expense tracking web app called ExpenseOwl on Hacker News: https://news.ycombinator.com/item?id=42977388
It's small, simple, and doesn't have authentication. Perfect for Sandstorm! Jacob (with some help from Dan) made a package: https://apps.sandstorm.io/app/vfdve0w8ms2fh5te77evwh9nk1w1jj4thfsuspszzx9kaakrz5ch?experimental=true
It's still an "experimental" app, but we'd enjoy your feedback: https://sandstorm.zulipchat.com/#narrow/channel/476196-app-updates/topic/ExpenseOwl
Weekly meetings have really picked up the last few weeks! Wednesday night:
📃 Jacob is packaging Paperless NGX. Only a couple hurdles left. https://sandstorm.zulipchat.com/#narrow/channel/482374-app-wishlist/topic/Paperless.20NGX
🌀 Troy is making progress on Tempest build tools. https://sandstorm.zulipchat.com/#narrow/channel/477894-tempest/topic/tempest-build-tools
☑ Dan will get us "synergized" on Github Projects for priority tracking. https://sandstorm.zulipchat.com/#narrow/channel/474439-general/topic/Github.20Projects.20for.20priority.20tracking
Join us for future meetings: https://sandstorm.org/community
I'm working on being able to set up #UnifiedPush on @sandstorm with the #ntfy app (Note that this is *experimental*, not production ready yet):
https://apps.sandstorm.io/app/pxm3ugzn7sfhtw4kz9ktdfkyphdq0qa1y2n1g0yfnzkn0mqcszhh?experimental=true
Sandstorm makes it really easy to install web apps, but it adds some challenges and limitations. I'm also learning about ntfy as I go. But, in principle it works; I am successfully using it right now for Tusky.
I'd love to get feedback from anyone familiar with ntfy who is interested in seeing it on a new platform.
Dan
