v2.8.3

2.8.3 (2026-10-10)

Bug Fixes

• remove HTML preview endpoint (65f4929)

v2.8.2

2.8.2 (2026-10-10)

Bug Fixes

• type MCP protocol results (da374b4)

v2.8.1

2.8.1 (2026-10-10)

Bug Fixes

• restore lint and Docker theme build (2f5eab1)

v2.8.0

2.8.0 (2026-10-10)

Features

• add MCP quick share and safe HTML preview (63e72c1)

v2.7.1

2.7.1 (2026-09-19)

Bug Fixes

• keep Docker as root, close s3_hostname SSRF, unbreak 404 tests (031d300)

v2.7.0

2.7.0 (2026-09-16)

Features

• mint extract codes from data/local without re-upload (93a30a2)

v2.6.1

2.6.1 (2026-09-14)

Bug Fixes

• don't let a legacy background value block settings saves (eb2db8f)
• 存量 background 值不再阻塞后台设置保存（#514 升级回归） (0d82fbe)

v2.6.0

2.6.0 (2026-09-14)

Features

• declare missing config keys (opendal_scheme, chunk_expire_hours) and add config schema guard (c5d525d)
• rename all config keys to snake_case with DB migration 007 (5121db6)
• upgrade password hashing to memory-hard scrypt with transparent rehash (443cfe7)

Bug Fixes

• FileCodes.expired_count defaults to -1 (time-based) instead of instantly-expired 0 (D4) (3c93718)
• save_file accepts plain binary streams; repair admin local file share (D2) (bb95017)
• serialize KeyValue JSON read-modify-write sections behind a process lock (D5) (0038636)
• snake_case the public config contract (D7 follow-up) (800bac0)
• validate background config as http(s) URL to close CSS quote-breakout in 2023 theme (4cab625)

Performance Improvements

• cache settings refresh behind a 2s TTL, force refresh on write paths (D6) (61d72ab)
• dashboard counters and storage quota use SQL aggregation (D3) (baecebd)
• make is_config_initialized cheap — no scrypt on the per-request probe (D1) (ec424dd)

v2.5.6

2.5.6 (2026-09-01)

Bug Fixes

• logging: reduce production log noise (5537f56)

v2.5.5

2.5.5 (2026-08-29)

Bug Fixes

• chunk-upload: persist sanitized filenames (da1dd06)
• harden chunk upload filename metadata (5a7195c)
• sanitize chunk upload file_name to prevent path traversal (cebac32)