Paint Weaver Changelog – October 2026
New features
Added nine Vallejo paint ranges
Added AI matching for tutorial paints whose names in the video don't match the catalogue, such as a misheard "Corn Red" for Khorne Red, choosing only from paints in the catalogue
Redesigned search, with results grouped into paints, tutorials, authors, and armies and factions, and a full search results page
Added CSV and JSON export for your collection and wishlist
Added account settings to change your display name, email or password, download your data, or delete your account
Added a privacy page
The new search, with results grouped by type.
Improvements
Added product codes to the Vallejo Game Air range
Improved tutorial paint matching when a video names the paint type, such as "Grey Primer"
Split paint mixes in tutorials into one step per paint
Redesigned the tutorials list , with jump-to links for each game and clearer headings
Added the author to tutorial addresses, such as /tutorial/duncan-rhodes/commander-farsight/
Limited the type filter to types found in the selected paint range
Switched tutorial videos to YouTube's privacy-enhanced mode, so YouTube sets no cookies until you press play
Improved accessibility, so screen readers announce buttons and links by the words they show
Added "page not found" and error pages
The tutorials list, with jump-to links for each game and clearer headings.
Bug fixes
Fixed eight Vallejo Model Color paints missing from the range
Fixed 128 swatch colours and 17 paint names in Vallejo Model Color, Model Air, Game Color and Xpress Color, checked against Vallejo's 2026 catalogue
Fixed tutorial paints from brands that aren't in the catalogue, such as Reaper or P3, being matched to another brand's paint of the same name
Fixed airbrush-only and spray-only ranges, such as Vallejo Model Air, showing no paints
Fixed an out-of-date Paint Range selection being kept when a page reloaded
Fixed the highlighted search result sometimes being lost while results updated
Optimisations
Moved hosting from Railway to Render following the Railway security incident , and the database to Postgres 18
Added long-term browser caching for stylesheets and scripts, using content-hashed file names
Made the site start about 24 seconds faster on each deploy and restart, by preparing static files when it's built
Hardened security with secure cookies and a Content-Security-Policy
✕