This release includes 1 breaking change for platform teams planning a safe upgrade.
Published 2mo
File Storage & Sync
β No known CVEs patched
✓ No known CVEs patched in this version
Topics
aes-256-gcm
docker
encryption
end-to-end-encryption
file-sharing
privacy
+5 more
react
s3-storage
self-hosted
typescript
zero-knowledge
Affected surfaces
auth
Summary
AI summaryUpdates β¨ Features, π³ Docker, and π Bug Fixes across a mixed release.
Full changelog
New Customization Options, Added Chinese Language and Bug Fixes
β¨ Features
- web: Added Simplified Chinese (zh-CN) translation. Thanks @Liyouran-center (#36)
- server: Added
DEFAULT_THEMEenv var to set the default UI theme (dark,light, orsystem) for users who have not stored a preference. The user's own choice always takes precedence. (#35) - server: Added
DEFAULT_TABenv var to set the default upload tab (file,text,password,code, orsshkey). Falls back to the first enabled tab if the configured tab is unavailable. (#35) - server: Added
FORCE_FILE_PASSWORDenv var - when set totrue, all file uploads must be password-protected. Enforced on both the server (HTTP 400) and in the UI. (#35) - server: Added
FORCE_NOTE_PASSWORDenv var - when set totrue, all note uploads (text, password, code, SSH key) must be password-protected. Enforced on both the server (HTTP 400) and in the UI. (#35) - client:
FORCE_FILE_PASSWORDandFORCE_NOTE_PASSWORDare now respected by the CLI client. When enforced, the CLI automatically prompts for a password if-pwas not provided. The interactive TUI skips the "Password protect?" question and goes directly to the password input prompt. (#35)
π Bug Fixes
- docker: Fixed health check failing when a custom
PORTis set - theHEALTHCHECKcommand hardcoded port 3000 instead of reading thePORTenvironment variable. (#34)
π Changed
- client: WebSocket upload transport is globally disabled. Large file transfers via WebSocket over HTTPS connections fail mid-transfer due to an unresolved issue. HTTP chunked upload is now always used. The per-server toggle has been removed from the settings until the root cause is fixed.
π³ Docker
- Image:
skyfay/skysend:v2.6.0 - Also tagged as:
latest,v2 - Platforms: linux/amd64, linux/arm64
Breaking Changes
- WebSocket upload transport is globally disabled; the perβserver toggle has been removed.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]