v0.6.6 v2.0.8-beta
longbridge/gpui-kitSep 21, 2026 → Sep 21, 20260 days between releases
What's New
Major version jump introduces critical JWT security fix and API error handling changes.
Breaking Changes
- JWT signing keys are now persisted in the database and require configuration to prevent authentication failures.
- API endpoints now return 404 or 400 status codes for missing resources instead of 500.
- OnlyOffice callbacks now require JWT verification and matching document keys.
New Features
- New 'Upload only what's missing' option in upload conflict prompts.
- UI responsiveness improvements for larger directories and Firefox.
Improvements
- Enhanced OnlyOffice document-server callback verification.
- Public upload shares with replacements disabled now reject overwrites.
- API error handling now returns appropriate HTTP status codes.
Bug Fixes
- Fixed empty ZIP downloads for anonymous visitors on public shares.
- Fixed 401 errors occurring on PDFs.
- Fixed public upload shares rejecting overwrites when replacements disabled.
Upgrade Notes
Migrate JWT signing keys to the database and ensure a key is configured. Update clients to handle 404 and 400 status codes for missing resources instead of 500.
The Two Releases
v0.6.6
Sep 21, 2026· 1 month ago
This release focuses on improving UI rendering logic and build stability. It introduces a fix to skip highlights when masked and ensures the gpui-pre dependency is locked to the specific snapshot used during the build process.
Full release notesv2.0.8-beta
Sep 21, 2026· 1 month ago
This beta release prioritizes security fixes, specifically addressing a critical JWT vulnerability and enhancing OnlyOffice callback verification. It introduces a new upload conflict resolution option and improves API error handling by returning appropriate HTTP status codes.
Full release notes