v0.4.3

KyDrive 0.4.3: everything since v0.4.2 (79 commits, about 26 PRs).

Upgrade: 0.4.3 migrates the SQLite schema at startup (5 migrations: client mtimes, the change log, devices and device codes, and app-password scopes). Back up before upgrading. See docs/DEPLOYMENT.md for upgrade notes, including Compose now defaulting to :stable.

Restore

• Offline restore-reset of access grants before restored data starts (#67). KyQuickStart requires it before restoring KyDrive.

Desktop access and sync groundwork

• Device credentials with loopback PKCE linking, and device management UI (#45, #47)
• Per-workspace change log and changes API (#43, #46), client mtime on versions (#44)
• DAV ETag reuse fix (#40)

Agents

• MCP endpoint with AI agent tokens, scoped read/write and limited to a folder root (#58)

Product

• Content search: find files by the words inside them, encrypted and permission-scoped (#61)
• UI pass and launch bug fixes (#54, #60, #63), setup gap fixes (#56)

Security and build

• Go 1.27.3 for GO-2026-6809, KaTeX 0.18, DOMPurify 3.4.17, Node 26.12.1 (#64, #66)
• Daily Dependabot releases as vX.Y.Z.N; Compose defaults to the published :stable image (#65)

Docs: #39, #41, #42, #48, #53, #55, #57, #59.

v0.4.2

What's Changed

• chore(deps): bump github.com/Busnes-app/ky-primitives from 0.8.0 to 0.9.0 in the ky-primitives group across 1 directory by @dependabot[bot] in #1
• chore(deps): bump the go group across 1 directory with 2 updates by @dependabot[bot] in #2
• drive: add whiteboard editor and extra document templates by @Yoshiofthewire in #3
• deps: bump source-map-js past GHSA-68fv-2mgg-jv7q by @Yoshiofthewire in #4
• whiteboard: run upstream Excalidraw; build web/dist in CI by @Yoshiofthewire in #5
• chore(deps): bump the web group in /web with 11 updates by @dependabot[bot] in #6
• drive: per-user setting to open files in a new tab by @Yoshiofthewire in #7
• drive: file management, permanent delete and opt-in retention (M1) by @Yoshiofthewire in #8
• drive: bring M1 file management to master by @Yoshiofthewire in #9
• ci: add OpenSSF Scorecard workflow by @Yoshiofthewire in #11
• fix: build with Go 1.27.2; raise go.mod floor to 1.26.9 by @Yoshiofthewire in #10
• chore: standard Go bump method by @Yoshiofthewire in #12
• chore(deps): bump golang.org/x/sys from 0.48.0 to 0.49.0 in the go group by @dependabot[bot] in #13
• chore(ci): bump the actions group with 3 updates by @dependabot[bot] in #14
• chore(deps): bump the web group in /web with 5 updates by @dependabot[bot] in #15
• feat: apply-setup for KyQuickStart installs by @Yoshiofthewire in #17
• ci: publish an attested :X.Y.Z image and move :stable on release by @Yoshiofthewire in #18
• chore(release): set every version source to 0.4.0 by @Yoshiofthewire in #19
• ci(release): publish :X.Y.Z only; no :stable for KyDrive by @Yoshiofthewire in #20
• drive: encrypt file contents at rest by @Yoshiofthewire in #21
• drive: hand a leaver's My files to a workspace or colleague by @Yoshiofthewire in #22
• backup: opt-in retention that prunes old bulk snapshots by @Yoshiofthewire in #23
• drive: encrypt file and folder names at rest by @Yoshiofthewire in #24
• Harden auth, directory sync, editor and backup (hostile review fixes) by @Yoshiofthewire in #25
• drive: resumable uploads, drag-and-drop, search and folder zip (M2) by @Yoshiofthewire in #26
• drive: claim an upload session before re-sealing it by @Yoshiofthewire in #27
• WebDAV at /dav/ with per-user app passwords (M4) by @Yoshiofthewire in #28
• drive: one definition of access (M3.1) by @Yoshiofthewire in #29
• drive: share folders and files with people and groups (M3.2–3.4) by @Yoshiofthewire in #30
• drive: organisation links (M3.5) by @Yoshiofthewire in #31
• drive: guest links for people without an account (M3.6) by @Yoshiofthewire in #32
• drive: quick look previews (M5 A) by @Yoshiofthewire in #33
• drive: image thumbnails and type icons (M5 B) by @Yoshiofthewire in #34
• drive: Office and PDF thumbnails through Euro-Office (M5 C) by @Yoshiofthewire in #35
• backup: offsite bulk repositories and weekly integrity check (M6) by @Yoshiofthewire in #36
• release: v0.4.2 by @Yoshiofthewire in #37
• ci(release): check out the release tag, not a same-named branch by @Yoshiofthewire in #38

New Contributors

• @dependabot[bot] made their first contribution in #1
• @Yoshiofthewire made their first contribution in #3

Full Changelog: https://github.com/Busnes-app/kydrive-server/commits/v0.4.2