v2.0.6-beta

codewhale-hq/Codewhalev2.0.6-betaSep 11, 2026by gtsteffaniak

Upgrading?

AI Summary

This beta release introduces security enhancements regarding download links and fixes several bugs related to disk usage, share passwords, and FUSE filesystem handling.

Key Highlights

  • Share download links now require UI password prompts instead of direct token links.
  • New `/api/share/direct` endpoint available for direct downloads.
  • Support added for non-ASCII share passwords.
  • Fixed disk usage overstatement on virtiofs bind mounts.

Breaking Changes

  • Direct download tokens in share links have been removed; clients must use the new `/api/share/direct` endpoint.

New Features

  • Direct download API endpoint

Full Release Notes

## What's Changed

 **Security**:
 - Share download links no longer create links with token, instead they link to the UI prompting for password before download. If a direct download is required, the `/api/share/direct` api exists and documented by swagger. (#2888)

 **Notes**:
 - renaming sources updates sidebar links (#2878)
 - disabling/deleting a user source removes that source from sidebar links (#2942)

 **Bugfixes**:
 - Fix disk-usage overstatement on virtiofs bind mounts (#2894) (#2894)
 - Support non-ASCII share passwords (#2933)
 - Fall back to buffered copies when FUSE rejects fast paths (#2938) (#2924)
 - Preserve deleted sidebar links across restarts (#2935)

## All Changes
* fix(contributing): typo from improtant to important by @ingStudiosOfficial in https://github.com/gtsteffaniak/filebrowser/pull/2873
* fix onlyoffice csp security regression (#2876) by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2900
* Fix disk-usage overstatement on virtiofs bind mounts (#2894) by @chiliec in https://github.com/gtsteffaniak/filebrowser/pull/2928
* scope padding to listing view by @Kurami32 in https://github.com/gtsteffaniak/filebrowser/pull/2934
* remove direct download tokens by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2943
* Preserve deleted sidebar links across restarts by @justadityaraj in https://github.com/gtsteffaniak/filebrowser/pull/2935
* Fall back to buffered copies when FUSE rejects fast paths by @justadityaraj in https://github.com/gtsteffaniak/filebrowser/pull/2938
* updated with token change for backwards compatiblity by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2944
* Sidebar link name fixes by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2945

## New Contributors
* @chiliec made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/2928

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v2.0.5-beta...v2.0.6-beta

Related Repositories