v0.6.1 v2.0.9-beta
BITyia/DroneSplatSep 25, 2026 → Sep 25, 20261 day between releases
What's New
Major security hardening and SQLite connection changes in v2.0.9-beta.
Breaking Changes
- SQLite shared cache removed from connection.
- WebDAV always shows hidden files.
- Public shares reject `/office/config` when disabled.
New Features
- OnlyOffice download validation.
- External JWT session reuse.
- SQLite busy timeout configuration.
- Database connection pooling improvements.
Improvements
- Security hardening against open redirects.
- OIDC login binds OAuth state to HttpOnly cookie.
- Random initial password for fresh installs.
Bug Fixes
- Fixed token migration lockout regression from v2.0.8-beta.
- Fixed intermittent blank page / blocked inline SPA script after CSP hardening.
- ffmpeg unresponsive lock issue.
- Public shares with OnlyOffice disabled now reject `/office/config`.
Upgrade Notes
Remove SQLite `cache=shared` from connection strings. WebDAV now ignores user preferences and always shows hidden files. Ensure OnlyOffice is enabled if you rely on `/office/config`.
The Two Releases
v0.6.1
Sep 25, 2026· 27 days ago
This version introduces support for new AI code installer tools and optimizes the MCP index caching mechanism with an idle time-to-live (TTL) setting. It also includes general cleanup tasks like removing dead code and simplifying configuration handling.
Full release notesv2.0.9-beta
Sep 25, 2026· 26 days ago
Security hardening with random admin passwords, OIDC improvements, and bug fixes for OnlyOffice, sessions, and database handling.
Full release notes