1189 Commits

Author SHA1 Message Date
Darren Yu 20c95ad73f fix(upload): set concurrent chunk upload to 1 when disk pre-allocation is disabled (#3501)
* fix(upload): set concurrent chunk upload to 1 when disk pre-allocation is disabled

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-08-02 09:59:50 +08:00
Aaron Liu 0bb0ab8335 fix(dbfs): thumbnail not generated for shared files (close #3495) 4.18.0 2026-07-15 16:08:45 +08:00
Aaron Liu d00f447739 fix(conf): enhance environment variable parsing for configuration overrides (close #3498) 2026-07-15 15:50:26 +08:00
dependabot[bot] ef0862dcbd chore(deps): bump golang.org/x/image from 0.38.0 to 0.41.0 (#3488)
Bumps [golang.org/x/image](https://github.com/golang/image) from 0.38.0 to 0.41.0.
- [Commits](https://github.com/golang/image/compare/v0.38.0...v0.41.0)

---
updated-dependencies:
- dependency-name: golang.org/x/image
  dependency-version: 0.41.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 15:32:34 +08:00
dependabot[bot] c098983dc4 chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 (#3487)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.
- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.55.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 15:32:07 +08:00
dependabot[bot] 88498a42bd chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.52.0 (#3492)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.48.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.48.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 15:30:05 +08:00
Aaron Liu 1c5cad6dec fix(ssrf): implement effectiveIP function to normalize IPv4-in-IPv6 addresses 2026-07-15 15:28:53 +08:00
Aaron Liu bce08f88e9 fix(router): require AdminWrite scope for URL test related routes 2026-07-15 15:01:10 +08:00
Hao Chen c278c6af39 fix(callback): validate upload callback secret (#3497) 2026-07-15 14:53:27 +08:00
Aaron Liu 7329602751 fix(dbfs): enforce storage pre allocate before creating file placeholders
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-07-15 10:56:21 +08:00
Aaron Liu 7a211bceb5 fix(upload): implement chunk upload tracking and completion logic for concurrent chunk upload
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-07-15 10:37:11 +08:00
Aaron Liu aa78c4ce09 doc: add contributing guidance 2026-07-08 10:19:04 +08:00
Aaron Liu b2e808e6ca feat(explorer): add empty recycle bin button & move restore action to top quick actions (close #3473) 2026-07-08 09:45:56 +08:00
Aaron Liu 1d091c4100 fix(router): require admin write scope for test node routes 2026-06-26 14:03:21 +08:00
Aaron Liu d4a145c3ac Update submodule 4.17.0 2026-06-26 12:53:22 +08:00
Aaron Liu 332a9d8002 fix(router): require admin write scope for test node routes 2026-06-26 10:27:35 +08:00
Aaron Liu f3347130ac fix(middleware): improve access token validation in ViewerSessionValidation 2026-06-26 10:24:33 +08:00
Aaron Liu 83375198c8 fix(oauth): admin read scope should not be required for all authed routes (close #3471) 2026-06-26 10:15:06 +08:00
Aaron Liu ba2e870bbd feat(user): options to disable exposing user emails to other users 2026-06-13 11:40:48 +08:00
Aaron Liu 9e9fb43e72 fix(router): AdminWrite scope should be required for OneDrive OAuth callback 2026-06-13 11:09:54 +08:00
Aaron Liu 0b00dd308f fix(sse): block subscribing to single share file 2026-06-13 11:02:15 +08:00
Aaron Liu 3607f79bb4 fix(thumb): max pixel dimensions constraint in builtin thumb generator 2026-06-13 10:44:11 +08:00
Aaron Liu 7e1289d552 fix(user): search user endpoint should only search in active users 2026-06-13 10:39:21 +08:00
Aaron Liu 7968e50429 fix(WOPI): SuggestedTarget header should not accept file path 2026-06-13 10:31:50 +08:00
Aaron Liu 26b6b1044b doc: update security policy 4.16.1 2026-06-06 11:28:13 +08:00
Aaron Liu 78a731ffad fix(route): require AdminWrite scope for thumbnail generator executable test 2026-06-06 11:19:38 +08:00
dependabot[bot] b2f0406006 chore(deps): bump github.com/aws/aws-sdk-go from 1.31.5 to 1.34.0 (#3462)
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.31.5 to 1.34.0.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/v1.34.0/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.31.5...v1.34.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-version: 1.34.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-06 11:14:55 +08:00
dependabot[bot] 63fa7b4c65 chore(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 (#3461)
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.57.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.59.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-06 11:14:40 +08:00
Aaron Liu aaebf317a7 feat(remote download): configurable SSRF check for target URL 2026-06-06 10:54:11 +08:00
Aaron Liu ed20843dc3 fix(oauth): scope limitation does not take effects in jwt 2026-06-06 09:55:57 +08:00
Aaron Liu 54dc81deef update submodule 4.16.0 2026-05-10 10:23:32 +08:00
Aaron Liu 3487407131 fix(fts): context menu inconsistently shown items caused by missing capability bits in file traversing (fix #3385) 2026-05-09 14:14:50 +08:00
Aaron Liu a9a0c1ee78 fix(fts): full-text search should not retrieve files in trash bin (fix #3386) 2026-05-09 13:14:19 +08:00
Aaron Liu 9792a5c84f fix(s3): throw error is content length is missing (fix #3394) 2026-05-09 11:17:40 +08:00
Aaron Liu 8acc57420a feat(ent): add index for created_at 2026-05-09 11:14:11 +08:00
Howard Yin c33273b36d fix: implement orderby create_at api (#3437) 2026-05-09 10:59:19 +08:00
dependabot[bot] 5994f7864f chore(deps): bump golang.org/x/image from 0.18.0 to 0.38.0 (#3403)
Bumps [golang.org/x/image](https://github.com/golang/image) from 0.18.0 to 0.38.0.
- [Commits](https://github.com/golang/image/compare/v0.18.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/image
  dependency-version: 0.38.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 11:56:53 +08:00
WittF 58b83ea1e4 fix(deps): bump github.com/wneessen/go-mail from 0.7.1 to 0.7.2 (#3372)
Fix From header display name being stripped, which causes Tencent Cloud
SES to reject emails with "NotAuthenticatedSender".
2026-03-26 08:39:42 +08:00
scholar7r 0e19b28e81 feat: implement batch delete share service (#3356)
* feat: implement batch delete service

* refactor: implement `GetByHashIDs` to make sure only query database once

* refactor: use decode instead of `Get` before `Delete`

- fix incorrect `DeleteBatch` method (for admin) calling
- implement DeleteBatchByUserID
2026-03-18 09:23:43 +08:00
Aaron Liu 006680c5df update submodule 4.15.0 2026-03-14 10:12:48 +08:00
Aaron Liu 2628c98aae update submodule 2026-03-14 10:05:28 +08:00
Aaron Liu 457926e8cb feat(dashboard): set global default file apps (close cloudreve/cloudreve#2304) 2026-03-13 10:28:11 +08:00
Aaron Liu cb0b5d2a39 fix(dashboard): cannot delete user with OAuth grants (close #3354) 2026-03-13 10:28:11 +08:00
scholar7r 7a430058b4 fix(controller): response of AdminBatchDeleteShare (#3350) 2026-03-12 14:14:00 +08:00
Darren Yu 50017060f1 fix: skip 0kb placeholder object as directory in file listing (#3347) 2026-03-12 14:12:54 +08:00
Aaron Liu 0f2f35d7d4 fix(dbfs): default view can be overwritten accidently (close #3330) 2026-03-04 16:59:38 +08:00
Aaron Liu 0be493c6e2 fix(oauth): client secret cannot be saved (close #3337) 2026-03-04 14:40:37 +08:00
Aaron Liu 3fd8aaa398 fix: expose aria2 udp port 2026-03-04 14:40:04 +08:00
Aaron Liu 5b823305d5 fix: typo in issue contact links 2026-02-24 16:46:50 +08:00
Aaron Liu edf16a9ed8 misc: issue templaye syntax issue 2026-02-24 16:45:19 +08:00