Skip to content

S3 Explorer v0.3.6

Choose a tag to compare

View all tags
@cbarange cbarange released this 07 May 11:42
· 1 commit to main since this release
v0.3.6
67114a1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

S3 Explorer — manage S3-compatible object storage from your desktop

Cross-platform Tauri + Vue 3 client supporting AWS S3, MinIO, Backblaze B2, Cloudflare R2, and 17+ other S3-compatible providers.

What's new in v0.3.6

Major release focused on corporate network compatibility. v0.3.5 was skipped (folded into this release). Two related but distinct improvements ship together.

🌐 Real corporate proxy support (transparent + manual)

v0.3.4 added rustls + DoH for SSL-inspection / DNS sinkholing networks, but missed the most common corporate scenario: HTTP proxies (Zscaler, Cisco Umbrella, Palo Alto, etc.) where all traffic must transit through 127.0.0.1:9000 or a corporate gateway. A native Rust app didn't see those proxies the way the system browser does.

v0.3.6 adds a proper Network section in Settings → Advanced:

  • Auto-detect (default) — reads system proxy from Windows registry (HKCU + HKLM Group Policy fallback), macOS SCDynamicStore, and Linux env vars (HTTPS_PROXY, HTTP_PROXY, ALL_PROXY with both upper/lower case). Works transparently for ~80% of corporate setups.
  • Manual proxy — paste an http://, https:// or socks5:// URL. Import a Zscaler/corporate .pac file from disk or fetch from URL — we extract the first PROXY directive automatically.
  • No proxy — explicit bypass for testing.
  • Test connectivity button — sends a probe to LemonSqueezy with a synthetic key (no activation slot consumed) and reports DNS / TCP / TLS / proxy errors with empathetic messages.

When activation fails on a network error, a contextual hint banner now appears in the License tab pointing the user directly to the Network settings — one click to diagnose and configure.

🐛 Critical fixes

  • Google DoH fallback was broken since v0.3.3 — wrong endpoint URL (/dns-query is wireformat-only on Google, JSON requires /resolve). The cascade was effectively a single point of failure on Cloudflare. Now fixed.
  • Lemon Squeezy live mode migration — product IDs updated to live mode following copyToLiveMode.

🔒 Security improvements

  • PAC parser rejects directives pointing to loopback (127/8), link-local incl. cloud metadata (169.254.169.254), and IPv6 equivalents (::1, fe80::/10). RFC1918 ranges (10/8, 172.16/12, 192.168/16) remain allowed for legitimate corporate use.
  • Detected proxy URLs are sanitized — user:pass@ Basic Auth credentials in env vars are stripped before display in the UI or logs.
  • Connectivity probe is rate-limited (2 seconds minimum between calls) to prevent IP bans on Lemon's API from accidental UI spam.

Coverage matrix

Network configuration v0.3.4 v0.3.6
Open Internet ✅ ✅
DNS sinkhole only 🟡 (Cloudflare DoH only — Google branch broken) ✅ (cascade actually has 2 working branches now)
SSL inspection proxy only ✅ ✅
DNS sinkhole + SSL inspection ✅ ✅
Corporate HTTP proxy (Zscaler/Cisco/Palo Alto) ❌ ✅
Whitelist-by-destination only (paranoid IT) ❌ ❌ (still requires IT whitelist)

Downloads

Platform Download
macOS (Universal — Intel + Apple Silicon) .dmg
Windows x64 .exe · .msi
Windows ARM64 (Snapdragon, Surface Pro X) .exe · .msi
Linux x64 .AppImage · .deb · .rpm
Linux ARM64 .AppImage · .deb · .rpm

Existing v0.3.4 users on Linux/Windows will receive v0.3.6 automatically via the in-app updater. macOS users will receive it once the macOS bundle is uploaded.

Assets 24
Loading