v2.0.6-beta

gtsteffaniak/filebrowserv2.0.6-betaSep 11, 2026by gtsteffaniak

Upgrading?

AI Summary

This beta release focuses on security improvements by removing tokens from standard share links and introduces several bug fixes regarding disk usage, FUSE operations, and sidebar link management.

Key Highlights

  • Security enhancement: Share download links now require a password via the UI instead of using direct tokens.
  • Bugfix: Fixed disk usage overstatement on virtiofs bind mounts.
  • Bugfix: Added support for non-ASCII characters in share passwords.
  • UX Improvement: Renaming or deleting user sources now immediately updates the sidebar links.

Breaking Changes

  • Share download links no longer contain tokens; direct downloads now require the `/api/share/direct` endpoint.

New Features

  • Renaming sources updates sidebar links.
  • Disabling or deleting a user source removes the link from the sidebar.
  • Support for non-ASCII share passwords.
  • Fallback to buffered copies when FUSE rejects fast paths.

Full Release Notes

## What's Changed

 **Security**:
 - Share download links no longer create links with token, instead they link to the UI prompting for password before download. If a direct download is required, the `/api/share/direct` api exists and documented by swagger. (#2888)

 **Notes**:
 - renaming sources updates sidebar links (#2878)
 - disabling/deleting a user source removes that source from sidebar links (#2942)

 **Bugfixes**:
 - Fix disk-usage overstatement on virtiofs bind mounts (#2894) (#2894)
 - Support non-ASCII share passwords (#2933)
 - Fall back to buffered copies when FUSE rejects fast paths (#2938) (#2924)
 - Preserve deleted sidebar links across restarts (#2935)

## All Changes
* fix(contributing): typo from improtant to important by @ingStudiosOfficial in https://github.com/gtsteffaniak/filebrowser/pull/2873
* fix onlyoffice csp security regression (#2876) by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2900
* Fix disk-usage overstatement on virtiofs bind mounts (#2894) by @chiliec in https://github.com/gtsteffaniak/filebrowser/pull/2928
* scope padding to listing view by @Kurami32 in https://github.com/gtsteffaniak/filebrowser/pull/2934
* remove direct download tokens by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2943
* Preserve deleted sidebar links across restarts by @justadityaraj in https://github.com/gtsteffaniak/filebrowser/pull/2935
* Fall back to buffered copies when FUSE rejects fast paths by @justadityaraj in https://github.com/gtsteffaniak/filebrowser/pull/2938
* updated with token change for backwards compatiblity by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2944
* Sidebar link name fixes by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2945

## New Contributors
* @chiliec made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/2928

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v2.0.5-beta...v2.0.6-beta

Related Repositories