• v0.12.3 1a8f681b51

    v0.12.3
    All checks were successful
    CI / frontend (push) Successful in 40s
    CI / backend (push) Successful in 1m12s
    Release / docker (push) Successful in 1m37s
    Release / goreleaser (push) Successful in 2m25s
    Stable

    nhpro released this 2026-07-22 18:37:52 +02:00 | 83 commits to main since this release

    Changelog

    • 4dfe6a068b docs(compose): reflect the security-hardening config changes
    • 1a8f681b51 feat(ui): categorized context and New menus with an "Open with" submenu
    Downloads
  • v0.12.2 8a9e907b27

    v0.12.2
    All checks were successful
    CI / frontend (push) Successful in 38s
    CI / backend (push) Successful in 1m4s
    Release / docker (push) Successful in 2m6s
    Release / goreleaser (push) Successful in 2m47s
    Stable

    nhpro released this 2026-07-22 01:30:50 +02:00 | 85 commits to main since this release

    Changelog

    • 8a9e907b27 fix(security): bound remote slave HTTP timeouts
    • b262bb1fcf fix(security): low-severity public-share hardening
    • 803ca3cc9d fix(security): revalidate the share on every WOPI call so revocation applies
    Downloads
  • v0.12.1 27eabf4982

    v0.12.1
    All checks were successful
    CI / frontend (push) Successful in 52s
    CI / backend (push) Successful in 1m18s
    Release / docker (push) Successful in 2m20s
    Release / goreleaser (push) Successful in 3m4s
    Stable

    nhpro released this 2026-07-21 23:12:04 +02:00 | 88 commits to main since this release

    Changelog

    • 70193cc848 fix(security): close share download-cap race and pre-auth metadata leak
    • 8354cf8942 fix(security): only trust configured reverse proxies for client IP
    • 7b7d470bc9 fix(security): restrict CORS to the configured site origin
    • 27eabf4982 fix(security): return generic internal errors, log the detail server-side
    • ec31e4f264 fix(security): set the session cookie Secure behind a TLS proxy
    Downloads
  • v0.12.0 3b76ff718e

    v0.12.0
    All checks were successful
    CI / frontend (push) Successful in 34s
    CI / backend (push) Successful in 56s
    Release / docker (push) Successful in 1m42s
    Release / goreleaser (push) Successful in 2m42s
    Stable

    nhpro released this 2026-07-21 22:55:52 +02:00 | 93 commits to main since this release

    Changelog

    • 3b76ff718e ci(release): stop building and publishing the RPM
    • b630465693 fix(security): cap upload chunk size to prevent disk exhaustion
    • 4a4472a7c0 fix(security): compile the unauthenticated dev-login only with -tags dev
    • d2f6cda0f9 fix(security): fail closed on a weak session secret; default to release mode
    • d1df2e7b68 fix(security): guard thumbnailing against image decompression bombs
    Downloads
  • v0.11.11 4e237c8276

    v0.11.11
    Some checks failed
    CI / frontend (push) Successful in 1m10s
    CI / backend (push) Successful in 1m29s
    Release / docker (push) Successful in 2m37s
    Release / goreleaser (push) Failing after 3m22s
    Stable

    nhpro released this 2026-07-21 11:22:53 +02:00 | 98 commits to main since this release

    Changelog

    • 4e237c8276 ci(rpm): build an RPM with GoReleaser and push to the Forgejo registry
    • 91d210cfaf feat(auth): personal access tokens (Bearer) for non-interactive clients
    Downloads
  • v0.11.10 3ee3e90f50

    v0.11.10
    All checks were successful
    CI / frontend (push) Successful in 36s
    CI / backend (push) Successful in 1m3s
    Release / docker (push) Successful in 2m1s
    Release / goreleaser (push) Successful in 2m46s
    Stable

    nhpro released this 2026-07-20 17:52:47 +02:00 | 100 commits to main since this release

    Changelog

    • 3ee3e90f50 fix(upload): steadier speed/ETA estimate and no more panel jitter
    Downloads
  • v0.11.9 5bb5f852f2

    v0.11.9
    All checks were successful
    CI / frontend (push) Successful in 35s
    CI / backend (push) Successful in 1m10s
    Release / docker (push) Successful in 1m58s
    Release / goreleaser (push) Successful in 2m46s
    Stable

    nhpro released this 2026-07-20 14:06:49 +02:00 | 101 commits to main since this release

    Changelog

    • 5bb5f852f2 feat(webdav): dead properties, RFC 4331 quota, and persistent locks
    Downloads
  • v0.11.8 1ada0ead08

    v0.11.8
    All checks were successful
    CI / frontend (push) Successful in 49s
    CI / backend (push) Successful in 1m33s
    Release / docker (push) Successful in 2m25s
    Release / goreleaser (push) Successful in 3m8s
    Stable

    nhpro released this 2026-07-20 13:16:44 +02:00 | 102 commits to main since this release

    Changelog

    • 305f4245fa feat(share): rate-limit public share endpoints
    • 1ada0ead08 feat(thumbnail): configurable generators, built-in WebP/BMP/TIFF, concurrency guard
    Downloads
  • v0.11.7 9321909a19

    v0.11.7
    All checks were successful
    CI / frontend (push) Successful in 35s
    CI / backend (push) Successful in 1m7s
    Release / docker (push) Successful in 1m58s
    Release / goreleaser (push) Successful in 2m46s
    Stable

    nhpro released this 2026-07-18 13:47:07 +02:00 | 104 commits to main since this release

    Changelog

    • 8a68e6f353 feat(ui): notification bell with history; cap floating toasts
    • 9321909a19 fix(archive): enforce quota and guard against zip bombs on extraction
    Downloads
  • v0.11.6 1d8d45bba7

    v0.11.6
    All checks were successful
    CI / frontend (push) Successful in 26s
    CI / backend (push) Successful in 1m9s
    Release / docker (push) Successful in 2m17s
    Release / goreleaser (push) Successful in 2m50s
    Stable

    nhpro released this 2026-07-18 13:05:29 +02:00 | 106 commits to main since this release

    Changelog

    • 1d8d45bba7 feat(upload): scrollable upload list with throughput and ETA
    • d2675b14d9 feat(wopi): offer Office document creation in the background context menu
    Downloads