SkySend

v2.9.5 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 2mo File Storage & Sync

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

aes-256-gcm docker encryption end-to-end-encryption file-sharing privacy

+5 more

react s3-storage self-hosted typescript zero-knowledge

Summary

AI summary

Cache-Control headers now use no-store to prevent Traefik from serving stale content.

Full changelog

server: Changed Cache-Control for index.html and download-sw.js from no-cache, must-revalidate to no-store. no-cache permits storing the response and requires proxy revalidation via ETag or Last-Modified headers, which SkySend does not set - causing Traefik's caching middleware to fall back to its own TTL and serve stale HTML after a deployment. no-store is unconditional and prevents any proxy from storing the response, eliminating the need for a Traefik restart after updates.
server: Added a global Cache-Control: no-store middleware to all /api/* routes. Previously only the successful download stream response carried this header. Error responses from any API endpoint (e.g. a transient 500 from the download route) had no cache directive, allowing Traefik to cache them. A single cached error response caused all subsequent requests to the same URL to receive the cached error until the proxy was restarted.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track SkySend

Get notified when new releases ship.

About SkySend

Encrypted file and note sharing