v2.0.5-beta v2.0.6-beta

high risk

nari-labs/dia2Sep 7, 2026 → Sep 11, 20263 days between releases

What's New

Share links no longer contain tokens, requiring UI authentication for downloads.

Breaking Changes

  • Share links no longer contain tokens, requiring UI authentication for downloads.

New Features

  • /api/share/direct endpoint added for direct downloads
  • Non-ASCII characters now supported in share passwords
  • Deleted sidebar links are preserved across restarts

Improvements

  • Share link security hardened by removing tokens
  • FUSE operations fall back to buffered copies for reliability
  • Sidebar link management improved for sources

Bug Fixes

  • Fixed disk usage overstatement on virtiofs bind mounts
  • Support added for non-ASCII share passwords
  • FUSE operations now handle fast path rejections
  • Sidebar links updated when sources are disabled

Upgrade Notes

Clients relying on direct share downloads via tokens must migrate to the new `/api/share/direct` endpoint. Ensure your UI handles authentication prompts for share downloads. Note that share passwords now support non-ASCII characters.

The Two Releases

v2.0.5-beta

v2.0.5-beta

Sep 7, 2026· 1 month ago

A beta release introducing user preference management features and fixing critical security vulnerabilities regarding public metadata access.

Full release notes
v2.0.6-beta

v2.0.6-beta

Sep 11, 2026· 1 month ago

A beta release focused on security improvements regarding share download links, bug fixes for disk usage and FUSE operations, and updates to sidebar link management and persistence.

Full release notes