This release includes breaking changes for platform teams planning a safe upgrade.
Published 2mo
File Storage & Sync
โ No known CVEs patched
✓ No known CVEs patched in this version
Topics
aes-256-gcm
docker
encryption
end-to-end-encryption
file-sharing
privacy
+5 more
react
s3-storage
self-hosted
typescript
zero-knowledge
Summary
AI summaryUpdates โจ Features, ๐ Bug Fixes, and ๐จ Improvements across a mixed release.
Full changelog
New Copy & Share Features, Download UX Improvements, and Bug Fixes
โจ Features
- web: Added a copy button and a password generator button to the "Password protection" input on all upload types.
- web: Added a "View" button (eye icon) to note cards in "My Uploads" to open the share link directly in the browser.
- web: The browser favicon now shows a circular progress indicator during active downloads and is restored once the download finishes, fails, or is cancelled.
- web: Added a "Cancel Download" button that aborts the active download across all tiers (Service Worker, File System Access, Blob).
- web: Added an in-app Debug Info Panel with runtime details (download tier, browser, DevTools status, file size, transport, event timeline) and a "Copy to clipboard" button.
- web: Added a Firefox DevTools detection warning modal when DevTools are docked at download start, with a retry button and an escape-hatch to proceed anyway.
- web: Average download speed is now shown in the download completion card (e.g. "ร 85.3 MB/s"), matching the existing upload display.
- client: Average download speed is now shown in the CLI output and TUI completion screen after a successful download.
- web: Replaced inline error messages with a global toast notification system for upload, note, SSH key, and decryption errors.
- web: Added a
showToast()helper with optional Copy and Docs action buttons for enriched toast notifications. - web: Added
showKnownErrorToast()that automatically enriches crypto pipeline errors (e.g. missing HTTPS) with a title, Copy button, and Docs link. - web: Added an
isOriginNotAllowedError()pattern toshowKnownErrorToast()for misconfiguredALLOWED_ORIGINSWebSocket rejections.
๐ Bug Fixes
- web: Fixed the note password input becoming permanently disabled after a wrong password attempt.
- web: Fixed the SSH key fingerprint overflowing its container on narrow screens.
- web: Fixed the remove button and file-size badge being pushed off-screen for files with very long names in the upload list.
- web: Removed per-record
console.debugcalls from the Service Worker download pipeline that caused multi-minute Firefox UI freezes on large files.
๐จ Improvements
- web: Replaced the
clients.matchAll()broadcast in the Service Worker with aBroadcastChannel("skysend-download")for all SW-to-main-thread and config messages. - web: Increased the Service Worker ReadableStream
highWaterMarkfrom2to8to prevent brief download UI freezes on slow or jittery connections. - web: Added lightweight diagnostic logging to the Service Worker (stream-start summary, per-1000-record checkpoints, slow-read alerts, double-
readMore()detection).
๐งช Tests
- web: Brought
apps/webtest coverage to 100% - added tests forisFirefox,isDevToolsOpen, andgetBrowserInfoin utils, dismiss-all and multi-toast UPDATE inuseToast,loadInfonon-ApiErrorpath andview()without priorloadInfoinuseNoteView, transport worker messages inuseUpload, and 410/multi-upload branch coverage inuseUploadHistory. Added/* v8 ignore next */annotations on dead-code and unreachable branches inuseUpload,useToast, anduseNoteView. - client: Brought
apps/clienttest coverage to 100% - added token storage tests (array JSON, corrupt JSON,clearStoredToken) toconfig, rejection-sampling branch test topassword-generator. Added/* v8 ignore next */annotations on dead-code branches inprogressandoidc.
๐ณ Docker
- Image:
skyfay/skysend:v2.10.0 - Also tagged as:
latest,v2 - Platforms: linux/amd64, linux/arm64
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]