v2.0.6-beta

max-sixty/worktrunkv2.0.6-betaSep 11, 2026by gtsteffaniak

Upgrading?

AI Summary

Addresses security concerns by changing share link handling to require password prompts instead of direct download tokens, and fixes disk usage reporting and sidebar link management.

Key Highlights

  • Security update: Share links no longer use tokens; require password prompt
  • Fixed disk usage overstatement on virtiofs bind mounts
  • Fixed sidebar link persistence across restarts and non-ASCII share passwords

Breaking Changes

  • Removal of direct download tokens for share links (now requires password prompt)

New Features

  • Non-ASCII share passwords
  • Buffered copy fallbacks when FUSE rejects fast paths

Full Release Notes

## What's Changed

 **Security**:
 - Share download links no longer create links with token, instead they link to the UI prompting for password before download. If a direct download is required, the `/api/share/direct` api exists and documented by swagger. (#2888)

 **Notes**:
 - renaming sources updates sidebar links (#2878)
 - disabling/deleting a user source removes that source from sidebar links (#2942)

 **Bugfixes**:
 - Fix disk-usage overstatement on virtiofs bind mounts (#2894) (#2894)
 - Support non-ASCII share passwords (#2933)
 - Fall back to buffered copies when FUSE rejects fast paths (#2938) (#2924)
 - Preserve deleted sidebar links across restarts (#2935)

## All Changes
* fix(contributing): typo from improtant to important by @ingStudiosOfficial in https://github.com/gtsteffaniak/filebrowser/pull/2873
* fix onlyoffice csp security regression (#2876) by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2900
* Fix disk-usage overstatement on virtiofs bind mounts (#2894) by @chiliec in https://github.com/gtsteffaniak/filebrowser/pull/2928
* scope padding to listing view by @Kurami32 in https://github.com/gtsteffaniak/filebrowser/pull/2934
* remove direct download tokens by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2943
* Preserve deleted sidebar links across restarts by @justadityaraj in https://github.com/gtsteffaniak/filebrowser/pull/2935
* Fall back to buffered copies when FUSE rejects fast paths by @justadityaraj in https://github.com/gtsteffaniak/filebrowser/pull/2938
* updated with token change for backwards compatiblity by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2944
* Sidebar link name fixes by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2945

## New Contributors
* @chiliec made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/2928

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v2.0.5-beta...v2.0.6-beta

Related Repositories