v1.18.3

9001/copypartyv1.18.3Jul 21, 2025by 9001

AI Summary

Removes the default umask behavior, allowing users to configure default file and directory permissions via new command-line options. Fixes several UI and platform-specific bugs.

Key Highlights

  • Configurable default chmod for files and directories.
  • Fixes for combining shares and symlink-guard.
  • iOS video playback now behaves like other platforms.

New Features

  • Configurable default chmod for directories (--chmod-d)
  • Configurable default chmod for files (--chmod-f)

Full Release Notes

<img src="https://github.com/9001/copyparty/raw/hovudstraum/docs/logo.svg" width="250" align="right"/>

* read-only demo server at https://a.ocv.me/pub/demo/
* [docker image](https://github.com/9001/copyparty/tree/hovudstraum/scripts/docker) ╱ [similar software](https://github.com/9001/copyparty/blob/hovudstraum/docs/versus.md) ╱ [client testbed](https://cd.ocv.me/b/)

there is a [discord server](https://discord.gg/25J8CdTT6G) with an `@everyone` in case of future important updates, such as [vulnerabilities](https://github.com/9001/copyparty/security) (most recently 2025-02-25)

## recent important news

* [v1.16.15 (2025-02-25)](https://github.com/9001/copyparty/releases/tag/v1.16.15) fixed low-severity xss when uploading maliciously-named files
* [v1.15.0 (2024-09-08)](https://github.com/9001/copyparty/releases/tag/v1.15.0) changed upload deduplication to be default-disabled
* [v1.14.3 (2024-08-30)](https://github.com/9001/copyparty/releases/tag/v1.14.3) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to **data loss** -- see the v1.14.3 release-notes for details

## 🧪 new features

* #181 the default chmod (unix-permissions) of new files and folders can now be changed 9921c43e
  * `--chmod-d` or volflag `chmod_d` sets directory permissions; default is 755
  * `--chmod-f` or volflag `chmod_f` sets file permissions; default is usually 644 (OS-defined)
  * see `--help-chmod` which explains the numbers

## 🩹 bugfixes

* #179 couldn't combine `--shr` (shares) and `--xvol` (symlink-guard) 0f0f8d90
* #180 gallery buttons could still be clicked when faded-out 8c32b0e7
* rss-feeds were slightly busted when combined with rp-loc (location-based proxying) 56d3bcf5
* music-playback within search-results no longer jumps into the next folder at end-of-list 9bc4c5d2
* video-playback on iOS now behaves like on all other platforms 78605d9a
  * (it would force-switch into fullscreen because that's their default)

----

## ⚠️ not the [latest version](https://github.com/9001/copyparty/releases/latest/)!