Flare

What's Changed

Fixes vulnerable deps, addresses GHSA-3x7v-x3r6-mjh7 and GHSA-gwqr-xf5c-5569 - standardizing file access control to a single unified lib.

• up deps, 1.7.2
• prettier
• more robust/centralizedfile permission handling
• Bump fast-xml-parser and @aws-sdk/xml-builder (#147)
• Bump minimatch (#150)

Docker Images

• docker.io/flintsh/flare:1.7.2
• ghcr.io/flintsh/flare:1.7.2

Deploy with Railway: https://railway.com/template/JVT41u?referralCode=R5s8WT

What's Changed

This release patches a possible XSS in the /raw file viewer. See GHSA-q8fp-w6m5-4gjm for details.

• 1.7.1
• add sandbox headers

Docker Images

• docker.io/flintsh/flare:1.7.1
• ghcr.io/flintsh/flare:1.7.1

Deploy with Railway: https://railway.com/template/JVT41u?referralCode=R5s8WT

A modern, lightning-fast file sharing platform built for self-hosting

✨ New Features and Changes

It's about time for a new release! Development on Flare will be ramping again as I'm beginning to find more free time. If anything is pressing, lmk!

This release fixes a couple known bugs as well as adds support for vanity URLs.

• Vanity URLs are now supported. You can add a vanity URL to your account in the profile page.
• No changes are required in existing screenshot profiles and updated instances should work with vanity URLs out of the box.
• Admins can also change user's vanity URLs via the users admin page.
• PDFs will now render at a proper width instead of feeling cramped on the preview page.
• The footer will no longer block the action buttons on file routes on mobile.
• Updates dependencies.

📝 Commits

• add back uuid
• prefer vanity IDs in upload endpoints
• vanity urls pt 1
• upgrade deps
• fix #135
• fix #139
• Bump lodash from 4.17.21 to 4.17.23 (#145)
• Bump @smithy/config-resolver from 4.2.2 to 4.4.5 (#144)
• Bump preact from 10.27.2 to 10.28.2 (#143)
• Bump next from 15.5.7 to 15.5.9 (#142)

📦 Download & Deploy

🐳 Docker Images

# Docker Hub
docker pull docker.io/flintsh/flare:1.7.0

# GitHub Container Registry
docker pull ghcr.io/flintsh/flare:1.7.0

☁️ Deploy with Railway

Deploy Flare in a few clicks with its Railway template.