Changelog

2.6.1 (2026-09-14)

Bug Fixes

• don't let a legacy background value block settings saves (eb2db8f)
• 存量 background 值不再阻塞后台设置保存（#514 升级回归） (0d82fbe)

2.6.0 (2026-09-14)

Features

• declare missing config keys (opendal_scheme, chunk_expire_hours) and add config schema guard (c5d525d)
• rename all config keys to snake_case with DB migration 007 (5121db6)
• upgrade password hashing to memory-hard scrypt with transparent rehash (443cfe7)

Bug Fixes

• FileCodes.expired_count defaults to -1 (time-based) instead of instantly-expired 0 (D4) (3c93718)
• save_file accepts plain binary streams; repair admin local file share (D2) (bb95017)
• serialize KeyValue JSON read-modify-write sections behind a process lock (D5) (0038636)
• snake_case the public config contract (D7 follow-up) (800bac0)
• validate background config as http(s) URL to close CSS quote-breakout in 2023 theme (4cab625)

Performance Improvements

• cache settings refresh behind a 2s TTL, force refresh on write paths (D6) (61d72ab)
• dashboard counters and storage quota use SQL aggregation (D3) (baecebd)
• make is_config_initialized cheap — no scrypt on the per-request probe (D1) (ec424dd)

2.5.6 (2026-09-01)

Bug Fixes

• logging: reduce production log noise (5537f56)

2.5.5 (2026-08-29)

Bug Fixes

• chunk-upload: persist sanitized filenames (da1dd06)
• harden chunk upload filename metadata (5a7195c)
• sanitize chunk upload file_name to prevent path traversal (cebac32)

2.5.4 (2026-07-23)

Bug Fixes

• run Docker as root for volume compatibility (fbcd4a5)
• run Docker image as root for data volume compatibility (fc0cbeb)

2.5.3 (2026-07-23)

Bug Fixes

• add magic-byte checks, login rate limits, and non-root Docker (eda0a31)
• magic-byte file checks, admin login rate limit, non-root Docker (0ee2f04)

2.5.2 (2026-07-23)

Bug Fixes

• harden share expiry, download token, quota SQL, and CORS (ae77026)
• harden share expiry, download token, quota SQL, and CORS (a41693f)

2.5.1 (2026-07-21)

Bug Fixes

• patch CVE dependencies and path traversal risks (00f3abd)

2.5.0 (2026-07-11)

Features

• add global storage capacity limit (818dd47)
• automate version releases (ee8f908)
• configure admin session lifetime (#484) (93ff291)

Bug Fixes

• build frontend on native Docker platform (2c51384)
• harden automated release workflow (46883c9)
• harden share retrieval and admin visibility (#482, #480) (8d7d856)
• resolve docs dependency audit warnings (36300ef)

[Unreleased]

Added

• 增加全局存储容量上限配置，并对普通上传、分片上传、预签名直传和后台文件分享统一执行并发安全的容量预留。
• 增加存储预留迁移及过期上传清理，失败、取消或过期的上传会释放预留容量。