Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Updated OIDC state handling to prevent other requests causing the process to fail, which was occurring in Chromium based browsers. (#5929)
• Updated session history handling to prevent redirects to common asset locations. (#5925)
• Updated PHP dependency versions.

What's Changed

• Add quiet hours to silence alerts during specific time periods. (#265)
• Add dedicated S.M.A.R.T. page.
• Add alerts for S.M.A.R.T. failures.
• Add DISK_USAGE_CACHE environment variable. (#1426)
• Add SKIP_SYSTEMD environment variable. (#1448)
• Add hub builds for Windows and FreeBSD.
• Change extra disk indicators in systems table to display usage range as dots. (#1409)
• Strip ANSI escape sequences from docker logs. (#1478)
• Font ligatures create unwanted artifacts in random ids by @m90 in #1434
• fix: Fix the issue where the Add System button is visible to read-only users. by @zjkal in #1442
• [Feature] Add crossorigin attribute to manifest link by @pavelpikta in #1457
• Update Go dependencies.

New Contributors

• @m90 made their first contribution in #1434
• @pavelpikta made their first contribution in #1457

Full Changelog: v0.16.1...v0.17.0

• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)

recent important news

• v1.19.8 (2025-09-07) fixed CVE-2025-58753 (a missing permission-check inside single-file shares)
• v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
• v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details

🧪 new features

• hooks now behave more usefully/predictably; 889bd32
  • hooks returning 0 will run the next hook (if any), and let the initiating action proceed if no other hooks object
  • hooks returning 100 will stop processing successive hooks, but return success, letting the initiating action proceed
  • hooks returning anything else will stop processing successive hooks (like the documentation always said) and also fail the initiating action (if hook is checked)
  • zmq hooks can now respond with json, doing relocations and all that stuff
• new mtag plugin, geotag.py: read image geotags with exiftool (demo) 1c15c0d ac085b8
• #972 markdown-links are rewritten to open in the markdown-viewer 278a0d8
• #794 add json beautifier / minifier
  • ...in the textfile-editor fd8c5bf
  • ...in the textfile-viewer 89cab5b
• #1058 ui-option and server-config to force download instead of showing files inline a9174e5
• option stats-u to grant access to prometheus-metrics based on username, not just permissions b427d78

🩹 bugfixes

• #1003 u2c.py (commandline uploader) did not install correctly on archlinux and/or pypi 9385dae
• #1035 uploader could fail to initialize if: 98701b7
  • the mt button (webworkers) was enabled in the settings tab
  • and the network was severely strained during intial page load
• possible deadlock on shutdown if thumbnailer queue was hella busy fb9f044
• #971 windows: fix deadlock on startup if trying to use a nonexistant driveletter as a volume 945b227
• #1022 js-panic if audio playback is set to stay-in-folder a28503e
• links to ongoing file transfers in the controlpanel could 404 (thx @Habetdin!) 77f74dd f4d67ff
• video scrubbing on iOS dba7c5d
• #1054 audio volume slider could skip one percent (thx @shermanhlc!) ca6d3a5
• detect invalid config:
  • #959 panic if ipu user doesn't exist 79e1078
  • panic if share config overlaps with a volume cedfc44
• #943

🔧 other changes

• the "new-markdown" feature was repurposed into "new-file", accepting any file extension 7d62335
• #1023 the option to grant delete-access when creating a share was removed due to never having been implemented in the backend 04ac7fb
• #1012 rephrased the controlpanel login-text when logged in to avoid confusion 7a29140
• add hints that the serverlog is a good place to look in some situations c424a55
• all thumbnail types and combinations can now be pregenerated a359b89
• #1030 add debug if cfssl is misbehaving ec00dc1
• #871 grid volflag is applied during navigation if user has not set a preference a9378a8
• cosmetic:
  • show column number in markdown editor b9aacba
  • reduced grid margins in theme2 e469bc9
  • reduced redirect delay after logging in f7e7b03
  • controlpanel greeting in some fail-early responses acde21d
  • update hooks to ignore the new upload-queue-empty message 3f4b79f
• docs:
  • #1032 fix typo in example docker idp config (thx @tuetenk0pp!) 867237d
  • warn that using/changing -j is usually a bad idea cad15fb
  • add hotlink anchors to https://copyparty.eu/cli/ 7f9c139
• nixos:
  • #868 option to install from git-head (thx @shelvacu!) c734530
  • #962 support idp volumes (thx @nicomem!) 904c984
  • #963 use configured chmod-d when creating volumes (thx @nicomem!) 3242145
• copyparty.exe: update to python 3.13.10, pillow 12.0 cdffde7

🌠 fun facts

• copyparty has been observed running on a wristwatch and on an android tv-box running in big-endian mode, so copyparty is BE-certified
• also... it's december! you know what that means :^)

⚠️ not the latest version!