This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
Summary
AI summaryAdded scoped content token authentication, tracker warning disable setting, torrent selected size field, and PWA OS handler for .torrent files.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds scoped content token authentication for torrent data routes Adds scoped content token authentication for torrent data routes Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds setting to disable tracker warning status Adds setting to disable tracker warning status Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds selectedSizeBytes field to TorrentProperties and frontend column Adds selectedSizeBytes field to TorrentProperties and frontend column Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Registers PWA as OS handler for .torrent files and magnet links Registers PWA as OS handler for .torrent files and magnet links Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Dependency | High |
Downgrades yargs to version 17 as breaking change mitigation Downgrades yargs to version 17 as breaking change mitigation Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Restores color: inherit on button elements removed in ress v5 Restores color: inherit on button elements removed in ress v5 Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Reverts Math.round to Math.floor for percentComplete calculations Reverts Math.round to Math.floor for percentComplete calculations Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Stops ignoring dotfiles in core processing Stops ignoring dotfiles in core processing Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Refactor | Low |
Migrates from deprecated disableRequestLogging to logController API Migrates from deprecated disableRequestLogging to logController API Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Refactor | Low |
Replaces deprecated fs.rmdir with fs.rm utility Replaces deprecated fs.rmdir with fs.rm utility Source: llm_adapter@2026-07-16 Confidence: high |
— |
Full changelog
✨ Features
- auth: Added scoped content token authentication for torrent data routes (#1280)
- tracker: Added setting to disable tracker warning status (#1168)
- torrent: Added selectedSizeBytes to TorrentProperties and frontend column (#1172)
- pwa: Registered as OS handler for
.torrentfiles and magnet links (#1167)
🐞 Bug Fixes
- css: Restored
color: inheriton button elements removed in ress v5 (#1278) - deps: Downgraded yargs to v17 (breaking change mitigation) (#1277)
- core: Migrated from deprecated
disableRequestLoggingtologController(#1224) - core: Reverted
Math.roundtoMath.floorfor percentComplete calculations (#1181) - core: Replaced deprecated
fs.rmdirwithfs.rm(#1175) - core: Dont ignore dotfiles anymore (#1165)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About flood
A modern web UI for various torrent clients with a Node.js backend and React frontend.
Related context
Related tools
Beta — feedback welcome: [email protected]