跳转到正文Changelog
2.8.12 (2026-09-17)
Bug Fixes
- p2p: select 接口对 P2P 分享去掉死链并打标,取件不再误报「文件已过期删除」 (f5b86ce)
2.8.11 (2026-09-17)
Bug Fixes
- p2p: 单文件上限放开为不限制 + STUN 追加公共兜底;前端 ref 更新到 f50ee4c (eaca8cc)
2.8.10 (2026-09-17)
Bug Fixes
- p2p: 前端 ref 更新到 a8295f7(HTTP 环境内存暂存上限提至 2GB) (28b2658)
2.8.9 (2026-09-16)
Bug Fixes
2.8.8 (2026-09-16)
Bug Fixes
- ci: 前端 ref 指向 TS2367 冗余比较修复后的提交 (45a77b5)
2.8.7 (2026-09-16)
Bug Fixes
- ci: 前端 ref 指向信令断开不杀直连修复后的提交 (d5d982e)
2.8.6 (2026-09-16)
Bug Fixes
- ci: 前端 ref 指向 send 重载收窄修复后的提交 (25e0e19)
2.8.5 (2026-09-16)
Bug Fixes
- ci: 前端 ref 指向数据通道竞态修复后的提交 (df3c161)
- p2p: 后台文件管理、仪表盘与配额统计排除 P2P 直传记录 (31dd14a)
2.8.4 (2026-09-16)
Bug Fixes
2.8.3 (2026-09-16)
Bug Fixes
2.8.2 (2026-09-16)
Bug Fixes
- ci: 前端 2024 主题 ref 指向类型修复后的提交,恢复镜像构建 (e757719)
2.8.1 (2026-09-16)
Bug Fixes
- ci: 前端 2024 主题 ref 指向修复架构检查后的提交,恢复镜像构建 (e119a4e)
2.8.0 (2026-09-16)
Features
- p2p: 前端 2024 主题切换至 fork 自维护仓库并启用 P2P 直传 (3213f2b)
2.7.0 (2026-09-16)
Features
- p2p: 内置 STUN 服务,不再依赖第三方 STUN (d88ffdc)
2.6.2 (2026-09-16)
Bug Fixes
- build: 钉死前端主题版本,修复部署后 /#/send 白屏 (69cdc7b)
2.6.1 (2026-09-15)
Bug Fixes
- docs: 修正 GitHub Pages 子路径部署的资源路径(base) (00e2836)
2.6.0 (2026-09-15)
Features
Bug Fixes
- @issue48 (77e6e76)
- #204 (8359895)
- #256 (591441e)
- #266 (df6722a)
- #272 #283 #273 (45be97a)
- #277 (fbd741e)
- #278 #297 (7ed09e2)
- #290 #292 (9f8e6d4)
- #349 (eeb70c7)
- #350 需要通过添加反代确保真实IP来源 (9a80d7a)
- #461 support s3 path style addressing (3fe1365)
- #464 serialize admin file list items safely (135dfdd)
- #465 restrict uploads by allowed file types (aa6904a)
- #473 normalize retrieve codes before lookup (c1fb802)
- #476 serve assets from selected theme (1d03337)
- #478 make s3 upload confirmation resilient (8d6eaac)
- #94 add s3_proxy and onedrive_proxy config (d7d2b5f)
- #94 add s3_proxy and onedrive_proxy config (0f32265)
- 2023版本取文本错误 #234 (3592db0)
- accept form payloads for chunk uploads (75d345e)
- add magic-byte checks, login rate limits, and non-root Docker (eda0a31)
- base: 修复文件名中的中文编码问题 (c0984bf)
- base: 修复文件名中的中文编码问题 (62d1a23)
- build frontend on native Docker platform (2c51384)
- build frontend with pnpm in Docker (e3ea782)
- chunk-upload: persist sanitized filenames (da1dd06)
- error (2093f19)
- error (7c98046)
- Fix abnormal Chinese names in downloaded files in the background #200 (4d7c9de)
- harden automated release workflow (46883c9)
- harden chunk upload filename metadata (5a7195c)
- harden share expiry, download token, quota SQL, and CORS (ae77026)
- harden share expiry, download token, quota SQL, and CORS (a41693f)
- harden share rate limit and code generation (#479) (1b6d8e7)
- harden share retrieval and admin visibility (#482, #480) (8d7d856)
- https://github.com/vastsa/FileCodeBox/issues/362 (e80be56)
- https://github.com/vastsa/FileCodeBox/issues/407 (e87bcfc)
- https://github.com/vastsa/FileCodeBox/issues/420 (5f82650)
- https://github.com/vastsa/FileCodeBox/issues/420 (d3fe7b2)
- https://github.com/vastsa/FileCodeBox/issues/444 (8cdb972)
- https://github.com/vastsa/FileCodeBox/issues/446 (736e16a)
- https://github.com/vastsa/FileCodeBox/issues/449 (69972e2)
- i18n (206c37f)
- implement async database startup lock and refactor db configuration (843a237)
- int replace (2417ca9)
- int replace (979d311)
- issue #103 (f6cbec5)
- issue #186 (fafc56b)
- issue #189 (8136c85)
- issue #96 (2b8ec05)
- issue #99 (afa412c)
- issue #99 (0fd31b4)
- issue 81 @Do1e (c4e14be)
- jwt token (cbc356a)
- logging: reduce production log noise (5537f56)
- logo file (0dca661)
- magic-byte file checks, admin login rate limit, non-root Docker (0ee2f04)
- make detail field optional in APIResponse model (7301793)
- OneDriveFileStorage下载文件的文件名与上传时不一致的问题 (46c0725)
- OneDriveFileStorage下载文件的文件名与上传时不一致的问题 (c38ffe3)
- patch CVE dependencies and path traversal risks (00f3abd)
- qrcode (5238975)
- reduce default number of workers in Dockerfile to improve resource management (f1c09b0)
- resolve docs dependency audit warnings (36300ef)
- return a dictionary from get_config method in ConfigService (da5dc37)
- run Docker as root for volume compatibility (fbcd4a5)
- run Docker image as root for data volume compatibility (fc0cbeb)
- s3 下载为 文本 #245 (7ca840c)
- sanitize chunk upload file_name to prevent path traversal (cebac32)
- share auth (c4e398b)
- share text (39264cc)
- share text (7a15b6a)
- some bug (6fcf26f)
- some bug (3005ed1)
- some bug (f7876c6)
- some bug (7c6aedb)
- some bug (63b5be3)
- some error (bd6f646)
- support legacy presign proxy upload URLs (6fe68be)
- tolerate partial config updates (6805206)
- 下载文件类型不符的问题 #372 (e513800)
- 下载文件类型不符的问题 #372 (e41b3e1)
- 二维码问题 (ec0f4c0)
- 仅在获取到文件大小时才设置 Content-Length 头 (ade5799)
- 使用标准方法编码下载文件名 (ff1943d)
- 修复webdav空文件夹未删除 (8973abd)
- 修复文本取件问题 (8215ef9)
- 先转同步,不然并发多了,慢慢优化 (373d6b5)
- 兼容1.6版本env (8c4f9d3)
- 兼容后台修改永久取件 (41b01b3)
- 初次不显示通知 (ea05fe1)
- 前端去除/ (e341e1a)
- 前端去除/ (4037ddb)
- 前端去除/ (7219033)
- 剪切板 (b72c621)
- 后台亮色模式small字看不见 (de129c2)
- 后台保存设置字符串问题,新增背景透明度设置项 (8afae1f)
- 后台无法修改永久取件码的信息 (c02fb7c)
- 后台滚动+s3设置sign版本 (72ad733)
- 后台滚动+s3设置sign版本 (f0aca7d)
- 后台滚动+s3设置sign版本 (c93c5b0)
- 后台设置项名称 (ab1d3e1)
- 后台设置项名称 (f9196ad)
- 后台设置项名称 (42843a7)
- 后台设置项名称 (7c921d4)
- 后台设置项名称 (22b2a96)
- 后台默认请求 (f0b2e4a)
- 基础目录设置 (7998607)
- 基础目录设置 (c6d538b)
- 基础目录设置 (029307a)
- 密码修改失败问题 (802d255)
- 按单次取件过期问题 (4e9d859)
- 按时间过期问题 (c6e0d32)
- 支持自定义s3协议region name和signature version,解决cloudflare r2文件取回问题 (e1e010e)
- 支持自定义s3协议region name和signature version,解决cloudflare r2文件取回问题 (4a35305)
- 文件二维码在前端拼接结果好像错误 (686125e)
- 文件二维码在前端拼接结果好像错误 (8d950c5)
- 文件二维码在前端拼接结果好像错误 (9602ad3)
- 文件二维码在前端拼接结果好像错误 (9a4af69)
- 文件大小变成字符串 (af83340)
- 文件大小和过期方式以及请求时间 (a884bf1)
- 文件大小和过期方式以及请求时间 (bf758ea)
- 文本传输存在xss问题 (7be3b27)
- 永久取件失效问题 (873eac1)
- 游客上传 (d35c84c)
- 游客上传 (51b5d5e)
- 游客上传 (9ffad40)
- 游客上传 (282f44e)
- 翻页非整数 (d1f6032)
- 自动清理过期的chunk (e854eb0)
- 适配webdav在window环境下路径 (136ea58)
- 阻止将管理员口令置空 (7b37269)
- 阻止按日期授权时剩余次数无限减少 (2b3c524)
- 页码整数 (243380a)
- 页面二维码和预览文本 (efbfec2)
- 页面颜色 (9348a7b)
- 页面颜色 (7a4fc10)
- 验证码复制 (799b89d)
- 默认使用中文 (fe3bc59)
- optimize memory usage for large file uploads (2e5dc53)
- 复用ClientSession提升文件下载性能 (6b728ab)
Reverts
2.5.6 (2026-09-01)
Bug Fixes
- logging: reduce production log noise (5537f56)
2.5.5 (2026-08-29)
Bug Fixes
- chunk-upload: persist sanitized filenames (da1dd06)
- harden chunk upload filename metadata (5a7195c)
- sanitize chunk upload file_name to prevent path traversal (cebac32)
2.5.4 (2026-07-23)
Bug Fixes
- run Docker as root for volume compatibility (fbcd4a5)
- run Docker image as root for data volume compatibility (fc0cbeb)
2.5.3 (2026-07-23)
Bug Fixes
- add magic-byte checks, login rate limits, and non-root Docker (eda0a31)
- magic-byte file checks, admin login rate limit, non-root Docker (0ee2f04)
2.5.2 (2026-07-23)
Bug Fixes
- harden share expiry, download token, quota SQL, and CORS (ae77026)
- harden share expiry, download token, quota SQL, and CORS (a41693f)
2.5.1 (2026-07-21)
Bug Fixes
- patch CVE dependencies and path traversal risks (00f3abd)
2.5.0 (2026-07-11)
Features
- add global storage capacity limit (818dd47)
- automate version releases (ee8f908)
- configure admin session lifetime (#484) (93ff291)
Bug Fixes
- build frontend on native Docker platform (2c51384)
- harden automated release workflow (46883c9)
- harden share retrieval and admin visibility (#482, #480) (8d7d856)
- resolve docs dependency audit warnings (36300ef)
[Unreleased]
Added
- 增加全局存储容量上限配置,并对普通上传、分片上传、预签名直传和后台文件分享统一执行并发安全的容量预留。
- 增加存储预留迁移及过期上传清理,失败、取消或过期的上传会释放预留容量。