Release history
OxiCloud releases
☁ Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust.
All releases
17 shown
- Hardened OIDC authentication with email-style username provisioning and sanitized claims.sub
- Fixed session-expiry issues on HTTP deployments
- Pluggable storage backends with admin UI for S3, Azure, and local environments
- CDC-based sub-file deduplication with FastCDC, BLAKE3 hashing, and parallel uploads
- Public share page with direct download support
Full changelog
OxiCloud 0.5.6 is a substantial release built from 99 commits across 191 changed files since v0.5.5. The main themes of this release are storage flexibility, smarter deduplication, stronger authentication compatibility, and a much more polished web experience.
Highlights
- Added pluggable storage backends with admin UI support for S3, Azure, and local storage.
- Introduced CDC-based sub-file deduplication powered by FastCDC, BLAKE3 chunk hashing, parallel chunk storage, and manifest-based reconstruction.
- Added a public share page with download support and improved shared, recent, and classic navigation flows.
- Hardened OIDC and auth handling for email-style usernames, sanitized
claims.sub, addedWWW-Authenticatehandshake behavior, and fixed session-expiry issues on HTTP deployments. - Delivered broad frontend and CSS refactors that simplify the codebase while improving shared items, multi-select actions, search, music navigation, icons, and theming.
- Improved deployment and operations with rustls-only Azure Docker builds, Windows CRLF fixes, PostgreSQL data path fixes, updated docs, and the first steps toward Nix packaging.
New Features
- Pluggable storage backends with admin UI integration for S3, Azure, and local environments.
- Content-defined chunking deduplication with smarter chunk reuse and parallel upload paths.
- Public share page with direct download support.
- Shared-state visibility in the classic file view.
- Better section controls and multi-select action layout in the frontend.
- VitePress documentation site work and expanded localization coverage.
Fixes And Improvements
- Fixed OIDC username provisioning edge cases and claim sanitization.
- Fixed recent-section routing, hash navigation, shared-view behavior, file-list display, device-verification styling, and select-all wiring.
- Restored external thumbnail lookup and switched thumbnail deduplication to
blob_hash. - Reduced Docker build friction by moving Azure crates to rustls and correcting image references.
- Improved performance for hashing, thumbnail generation, audio metadata extraction, cache invalidation, and upload timeout scaling.
- Applied broad JS/CSS/Biome cleanup, improved JS module bundling, and simplified icon handling and theme styling.
- Added Windows CRLF compatibility and PostgreSQL data-location fixes.
Thanks
A huge thank you to everyone who contributed to this release.
Special thanks to Edouard Vanbelle for the large wave of frontend and UX improvements, Dionisio Pozo / DioCrafts for the core platform, storage, deduplication, and release work, Chris Mann and the Les Grands Voisins side of the project for collaboration and incoming changes, BillionClaw for authentication and documentation fixes, Mathieu Boutolleau for deployment improvements, Subhranil Sarkar for Windows compatibility, and su77ungr for standards-compliance improvements.
Thank you all for the code, reviews, ideas, testing, polish, and persistence that made OxiCloud 0.5.6 possible.
- music player with queue, shuffle, repeat
- drag-and-drop playlist reordering
- file URL bookmarking
- Docker image publishing restored for v0.5.4 and latest
- Browser history navigation with bookmarkable folder URLs
- OpenAPI spec generation for REST API
- Fix RUSTSEC-2026-0037 (quinn-proto vulnerability)
- Kubernetes Helm Chart
- SQLx migration system
- Drag & drop into breadcrumbs
- Client-side video thumbnails
- i18n expansion to 14 locales
- Frontend minification
- IDOR and auth vulnerability patches (VULN-01 through VULN-16)
- IP rate limiting and account lockout
- CSRF double-submit protection
- Photos timeline with EXIF metadata
- Nextcloud-compatible API
- OAuth 2.0 Device Authorization
- WOPI collaborative editing
- Audio/Video modal player
- Breadcrumb navigation
- Frontend modular architecture
- Dutch translations
Fixed upload failures, double uploads, share context menu issues, dark mode styling, and internationalization key mismatches in the file sharing UI.
- Complete storage model migration from file-based to blob-based
- Fixed IDOR on file access
- Fixed ownership bypass on folder operations
- Fixed XSS in file name rendering
- 10x upload performance
- Content-addressable blob storage with deduplication
- OIDC SSO support
- Scope folder listing to authenticated user
- OIDC SSO login support
- File upload progress indicator
- Clean URL routing
Fixed multiple UI bugs including non-functional share dialog, delete confirmation, authentication issues with shares, and visual overlapping of favorite star with selection checkbox.
- Hexagonal architecture refactoring
- RTL support
- German localization
- Persian translation