take two (fix cfg vols)

Door: 9001

23 Augustus 2025 om 19:56

this release is a hotfix for #624; v1.19.2 broke volumes defined in config files

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-30)

recent important news

v1.18.9 (2025-08-01) fixed CVE-2025-54796 (Denial-of-Service)
v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details

your up2k database (.hist/up2k.db), used by the e2d filesystem indexing feature, will be upgraded to a new format which older copyparty versions cannot read. A backup of each database will be created automatically, named up2k.db.bak.SOMETHING.v5. If you need to downgrade to a previous version: Shutdown copyparty, delete these files: up2k.db up2k.db-shm up2k.db-wal and then copy up2k.db.bak.*.v5 to up2k.db

new translations:
- #551 Swedish (thx @Bevinsky!) d676a86
- #551 Korean (thx @nyqui!) 4e878d2
#581 new theme: phi95 (thx @varphi-online!) d8662ae
#567 .raw image thumbnails (thx @ar-nelson!) 0177a9b
- available in docker-images iv and dj
#561 epub thumbnails (thx @Scotsguy!) 9435e6b
#252 music thumbnails use embdded coverart if available 98d117b
- thumbnails folder .hist/th must be deleted to take effect
#530 show username of uploaders in file listings; requires a (admin) permission 4df033e
#604 a new group @acct which automatically contains all known usernames 68907ea
controlpanel has a dedicated "logout all sessions" button, similar to the logout-link in the browser f4a3fba
#397 accounts can be restricted to certian IPs 62e072a
#504 automatic login through tailscale auth a4649d1
#533 sticky qr-code with --qr-pin 1 1ebe06f
#572 button to abort copy/move 715d374
#618 "download selected files" didn't work on firefox 52 (winxp) dcc6b1b
max number of cookies to allow can be configured 6303eff
- good if you have too many selfhosted services on one domain (but will beware of the spec-mandataed max length of the cookie field!)

fix xvol/xdev edgecases:
- #603 rootless vfs 554cc2f
- false-positive with overlapping volumes d9046f7
#573 ftp: attempting an upload into read-only folder no longer kills the connection 3aa8b7a
#306 adjust navpane for --rp-loc (location-based proxying)
#556 more sensible config expansion order f4727f8
- #624 ...which broke things bf1fdca
the video player now stays fullscreen between videos 782e2f1
heif thumbnailing with libvips