# Sunshine: what changed from 2025 to 2026

- Product: Sunshine (https://whatsnew.fyi/product/sunshine)
- Vendor: LizardByte
- Range: changelog entries numbered after v2025.924.154138 up to and including v2026.516.143833, stable releases only
- Entries below: 1 release (newest first)
- Resolved: 2025 is v2025.924.154138 and 2026 is v2026.516.143833, the newest stable release of each major we track
- Carrying security changes: 1 · CVEs mentioned: 0 · Mentioning breaking changes: 1 · Removing or deprecating something: 1
- Page: https://whatsnew.fyi/product/sunshine/compare/2025...2026

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## What changed (20 changes, grouped by kind)

### Added

#### v2026.516.143833 (2026-05-16)

- XDG, Pipewire, and KWin direct screencast capture on Linux
- Vulkan encoding on Linux
- Official OpenSUSE packages to LizardByte copr repos
- FreeBSD packages
- Sunshine can now bind to a specific network interface
- MSI/WIX installer for Windows
- Windows support for ARM64
- Signed dmg package for macOS
- New endpoints for Rest API /api/covers
- Capture audio on macOS using Tap API
- Add client enable/disable access control from web-ui
- Support for clients to request fractional NTSC framerates
- Support for split frame encoding on GPUs with 2+ nvenc blocks

### Changed

#### v2026.516.143833 (2026-05-16)

- CSRF protection has been added to web-ui
- Windows executables and installers are now signed for AMD64 packages
- Updated icons, added themes, and modernized web-ui
- Updated FFmpeg to 8.1 branch

### Fixed

#### v2026.516.143833 (2026-05-16)

- Memory leak when EnumAdapters1 uses dxgi::adapter_t address as parameter on Windows

### Removed

#### v2026.516.143833 (2026-05-16)

- ViGEmBus is no longer installed automatically

### Security

#### v2026.516.143833 (2026-05-16)

- Critical security update for GHSA-ph75-mgxh-mv57

## Release notes

### v2026.516.143833

- Date: 2026-05-16
- Version: v2026.516.143833
- Original notes: https://github.com/LizardByte/Sunshine/releases/tag/v2026.516.143833
- Permalink: https://whatsnew.fyi/product/sunshine/releases/v2026.516.143833
- Labels: Platforms: Desktop

- **security** — Critical security update for GHSA-ph75-mgxh-mv57
- **removed** — ViGEmBus is no longer installed automatically
- **changed** — CSRF protection has been added to web-ui
- **added** — XDG, Pipewire, and KWin direct screencast capture on Linux
- **added** — Vulkan encoding on Linux
- **added** — Official OpenSUSE packages to LizardByte copr repos
- **added** — FreeBSD packages
- **added** — Sunshine can now bind to a specific network interface
- **added** — MSI/WIX installer for Windows
- **added** — Windows support for ARM64
- **added** — Signed dmg package for macOS
- **changed** — Windows executables and installers are now signed for AMD64 packages
- **added** — New endpoints for Rest API /api/covers
- **changed** — Updated icons, added themes, and modernized web-ui
- **added** — Capture audio on macOS using Tap API
- **added** — Add client enable/disable access control from web-ui
- **added** — Support for clients to request fractional NTSC framerates
- **added** — Support for split frame encoding on GPUs with 2+ nvenc blocks
- **changed** — Updated FFmpeg to 8.1 branch
- **fixed** — Memory leak when EnumAdapters1 uses dxgi::adapter_t address as parameter on Windows

##### Attention

This release contains critical security updates. For more information see the following:

- [GHSA-ph75-mgxh-mv57](https://github.com/LizardByte/Sunshine/security/advisories/GHSA-ph75-mgxh-mv57)

Please update as soon as possible!

##### Breaking Changes

* ViGEmBus is no longer installed automatically. Instead you can install it from the troubleshooting page of the web-ui if needed.
* CSRF protection has been added to web-ui. If you access Sunshine through an address other than localhost you must add this to your sunshine.conf file manually. See https://docs.lizardbyte.dev/projects/sunshine/latest/md_docs_2configuration.html#csrf_allowed_origins

##### Highlighted Changes

* Added XDG, Pipewire, and KWin direct screencast capture on Linux
* Added Vulkan encoding on Linux
* Added official OpenSUSE packages to LizardByte copr repos
* Added FreeBSD packages
* Sunshine can now bind to a specific network interface
* Added msi/wix installer for Windows
* Added Windows support for ARM64
* Added signed dmg package for macOS
* Windows executables and installers are now signed for AMD64 packages
* New endpoints for Rest API [/api/covers]
* Updated icons, added themes, and modernized web-ui
* Capture audio on macOS using Tap API
* Add client enable/disable access control from web-ui
* Support for clients to request fractional NTSC framerates
* Support for split frame encoding on GPUs with 2+ nvenc blocks
* Updated FFmpeg to 8.1 branch

For a comprehensive list of changes, see below.

##### What's Changed
* ci(copr): Trigger release job only for non-prereleases by [@ReenigneArcher](https://github.com/ReenigneArcher) in [#4297](https://github.com/LizardByte/Sunshine/pull/4297)
* build(Linux): Refactor Dockerfiles and build script for multi-stage, step-based builds by [@ReenigneArcher](https://github.com/ReenigneArcher) in [#4299](https://github.com/LizardByte/Sunshine/pull/4299)
* build(deps): bump vue from 3.5.21 to 3.5.22 by [@dependabot[bot]](https://github.com/apps/dependabot) in [#4301](https://github.com/LizardByte/Sunshine/pull/4301)
* build(linux): update pkg-config systemd variable names by [@PVermeer](https://github.com/PVermeer) in [#4303](https://github.com/LizardByte/Sunshine/pull/4303)
* build(deps): bump third-party/build-deps from `c38829d` to `2840c8a` by [@dependabot[bot]](https://github.com/apps/dependabot) in [#4307](https://github.com/LizardByte/Sunshine/pull/4307)
* build(packaging/homebrew): Rename class from @PROJECT_NAME@ to Sunshine by [@ReenigneArcher](https://github.com/ReenigneArcher) in [#4308](https://github.com/LizardByte/Sunshine/pull/4308)
* build(deps): bump LizardByte/actions from 2025.917.25039 to 2025.927.193939 in the lizardbyte-actions group by [@dependabot[bot]](https://github.com/apps/dependabot) in [#4309](https://github.com/LizardByte/Sunshine/pull/4309)
* build(deps): bump LizardByte/actions from 2025.927.193939 to 2025.929.125237 in the lizardbyte-actions group by [@dependabot[bot]](https://github.com/apps/dependabot) in [#4313](https://github.com/LizardByte/Sunshine/pull/4313)
* fix(linux): service file for Trixie by [@ReenigneArcher](https://github.com/ReenigneArcher) in [#4319](https://github.com/LizardByte/Sunshine/pull/4319)
* build(linux): static link std libraries by [@PVermeer](https://github.com/PVermeer) in [#4321](https://github.com/LizardByte/Sunshine/pull/4321)
* build(linux): enable cpack auto dependencies by [@PVermeer](https://github.com/PVermeer) in [#4323](https://github.com/LizardByte/Sunshine/pull/4323)
* build(linux): explicitely set CC and CXX compilers by [@PVermeer](https://github.com/PVermeer) in [#4325](https://github.com/LizardByte/Sunshine/pull/4325)
* feat(audio): allow sending continuous audio by [@mariotaku](https://github.com/mariotaku) in [#4261](https://github.com/LizardByte/Sunshine/pull/4261)
* build(deps): bump LizardByte/actions from 2025.929.125237 to 2025.1011.184228 in the lizardbyte-action

_[Truncated at 4000 characters — full notes: https://github.com/LizardByte/Sunshine/releases/tag/v2026.516.143833]_