v0.3.1

0.3.1 (2026-09-26)

Bug Fixes

• ci: put a ceiling on how long a job may run (d30de4f)
• ci: run the S3 tests against a store that can be pulled (86d8334)
• ci: stop the object store fixture downloading an archived client (ac7abf1)
• web: stop the instance's defaults overwriting a choice (1ba79b9)

v0.3.0

0.3.0 (2026-09-10)

Features

• web: offer a random-character password, and say what the strength means (e3b7a42)
• web: offer the system share sheet beside Copy link (1e7849c)

Bug Fixes

• web: let the progress bar move on a slow connection (48ca0dc)
• web: put the source link back on the footer's baseline (0b19171)

v0.2.1

0.2.1 (2026-09-08)

Bug Fixes

• web: name the client build after the commit, not the clock (2e038e1)
• web: offer the lifetime an instance actually allows (b356b16)

v0.2.0

0.2.0 (2026-09-07)

Features

• ci: remove old edge builds from the registry (7b8d3b1)
• compile in the release signing keys (95861a0)
• web: reach the changelog from the footer (a2d5fbf), closes #200
• web: render the changelog as a page (d90ee77)

Bug Fixes

• build: copy the step that places the changelog, not only the changelog (942abf3)
• ci: call the release workflow instead of waiting for its tag (1c55b08), closes #172
• ci: check the third-party notices where it matters (7334f4c)
• ci: repair the release workflow, and check for what broke it (7708d13)
• release: tag the image, and record the commit that was built (694c56e)
• tools: rewrite the e2e proxy off a deprecated hook (2493a72)
• web: accept a dropped file in Firefox (71924d3)
• web: let a dropped file actually be sent (72cae2b)
• web: override cookie to a version without the parsing flaw (c7116aa)
• web: pin TypeScript exactly again (92b129c)
• web: serve a robots.txt instead of the application (469e4d1)
• web: show the link once, whole (6cbe4a2)
• web: stop answering No to a question it could not ask (7b5b77b)
• web: stop reporting a deadline as none (172122b)
• web: stop violating our own Content-Security-Policy (8957de2)

v0.1.0

0.1.0 (2026-08-31)

⚠ BREAKING CHANGES

• spec: fileID is generated by the client and sent in Upload-Metadata at creation. The key schedule is unchanged and no test vectors are affected.

Features

• blob: add an S3-compatible backend and a blob conformance suite (43973e5)
• blob: add an S3-compatible backend and a blob conformance suite (d8dbba9), closes #20
• blob: add streaming blob storage with crypto-shredding (557650b)
• blob: add streaming blob storage with crypto-shredding (25b7832), closes #19 #21 #13
• blob: store chunked uploads as S3 multipart uploads (502c68c)
• blob: store chunked uploads as S3 multipart uploads (799dc1b), closes #111
• blob: support resumable writes on both backends (10b1f80)
• blob: support resumable writes on both backends (24489d6)
• cli: hide the password as it is typed, and let return mean none (4e9b9db)
• cli: password, expiry and download limit for uploads (0ff5d69)
• cli: password, expiry and download limit for uploads (ba6d9e1), closes #43
• cli: reproducible cross-platform builds with published checksums (d28c995)
• cli: reproducible cross-platform builds with published checksums (cdcc10a), closes #44 #45
• cli: require a signature on the client asset manifest (1b2c043)
• cli: require a signature on the client asset manifest (fdc9b16), closes #104
• cli: send and receive from the command line (f857b46)
• cli: send and receive from the command line (a64dcf4), closes #42
• cli: sendan verify - check an instance serves the published client (a29fe21), closes #103
• cli: sendan verify — check an instance serves the published client (ca40af6)
• compat: apply the bounded-upload rule here too (0e2e8e0)
• compat: the password model, and marking what it protects (713134e)
• compat: the password model, and marking what it protects (e202360), closes #52
• compat: third-party client compatibility endpoints (21305f8)
• compat: third-party client compatibility endpoints (60f4f25), closes #51 #53
• crypto: add streaming content encryption and decryption (8cffe31)
• crypto: add streaming content encryption and decryption (ad8710b), closes #3
• crypto: add the key schedule, password derivation and wrapping (3d6aa48)
• crypto: add the key schedule, password derivation and wrapping (d046eaf), closes #15 #2 #4 #5 #6
• deploy: compose example, and the proxy settings that make it work (8bb0a0d)
• deploy: compose example, and the proxy settings that make it work (27bd309), closes #58
• docker: multi-stage Dockerfile producing a scratch-based image (e749e8e)
• docker: multi-stage Dockerfile producing a scratch-based image (595b7dc), closes #46
• http: accept resumable uploads over tus (db56ea2)
• http: accept resumable uploads over tus (c4e21ee)
• http: allow the client's inline bootstrap by hash (dc7c6d5)
• http: allow the client's inline bootstrap by hash (10ce0a4)
• http: apply security headers to every response (337b3fb)
• http: apply security headers to every response (b176653)
• http: rate limit requests per client address (ec106f7)
• http: rate limit requests per client address (084c5e0)
• http: report the running build at /api/source (67cf858)
• http: report the running build at /api/source (e7140de)
• http: serve encrypted upload metadata (7a6a3b5)
• http: serve encrypted upload metadata (f87238a)
• http: stream ciphertext with range support (81cd74c)
• http: stream ciphertext with range support (7e37c95)
• http: verify download tokens before serving anything (e3437ee)
• http: verify download tokens before serving anything (6d674b0)
• let an operator display a banner (24ff59e), closes #198
• publish what an instance permits, and show it before an upload (2733a06), closes #195
• ratelimit: add structural abuse controls (fc9aa30)
• ratelimit: add structural abuse controls (0dcb871), closes #25
• server: add the module layout, configuration and structured logging (175c054)
• server: add the module layout, configuration and structured logging ...