v0.1.7

Changelog

Features

• 3433611 feat(admin): list only the admin's own platform tokens and count the rest
• d87a626 feat(android): real update check instead of a false up to date
• 2e9ec8a feat(app): actionable health banner, Send storage panel, update pill, faster folder links, cross-tab sign-in sync, and drag-and-drop and blank-screen fixes
• a60814f feat(app): guided tour, report a bug, reviews, redesigned Spaces and eight languages
• b087751 feat(backend): bug reports, reviews and stricter Spaces roles
• f0430ca feat(i18n): use the translate icon for the language picker
• 9ee3fdb feat(marketing): move the language picker into the nav beside the theme toggle
• d9ed195 feat(send): cap anonymous sends at 50 MB per file and 500 MB per day, delete on burn, and let an admin see and choose where Send files are stored
• 2170131 feat(storage): admin token panel shows own tokens, and nudge shared-storage users to connect their own
• 18d8235 feat(tools): put pad, send and transfer on the site design

Bug fixes

• 2d65d8c fix(admin): tolerate legacy array token response so overview can't crash on deploy skew
• e41cce0 fix(admin): version the overview query key so stale persisted snapshots are dropped
• 7ef0433 fix(app): refresh through the desktop engine, upload into the open folder, one-click resume for this device's uploads
• 8ae7176 fix(app): satisfy the strict type check in the cross-tab refresh lock
• 233a10f fix(auth): keep a rotated refresh token valid for 60s so racing clients don't log the user out
• 869f287 fix(desktop): one shared session for the engine and webview, and file uploads into the open folder
• 2c8ebb1 fix(desktop): seal file names and use a keyed content hash on desktop and Android uploads
• ee75a39 fix(download): stop pinning the first release lookup for the life of the server
• 1830ebe fix(marketing): color html so trackpad overscroll doesn't flash gray
• a0fd33b fix(marketing): stop the hero window body going blank mid-scroll
• c434ca1 fix(security, shares): transfer key off the relay, 2FA on every login, approved desktop OAuth, server-counted share downloads, drained shutdown (#23)
• 190c462 fix(send): replace a deleted storage repo and retry, let a burn-after-read link be read to the end, and accept sends up to 50 MB
• 1b0627c fix(share): give shared files and folders their real names
• 8af1703 fix: 39 audit action items, desktop speed, and Next.js RCE patch (#30)
• 03544e1 fix: admin-only token sharing, own-account direct confirms, authz matrix test, and e2e repairs (#31)

Performance

• f02b002 perf(app): cached, parallel vault loading and stale-while-revalidate pages
• 80d9072 perf(landing): lighter hero, and run every quality gate in CI instead of on the laptop (#25)
• 4f23e31 perf(landing): make the hero scroll smooth

Other changes

• dac2514 Merge branch 'main' of https://github.com/Wosmos/zcrypt
• e56f17c Merge branch 'main' of https://github.com/Wosmos/zcrypt
• 39c732f Merge pull request #20: wave 1 (share names, cached vault, Android updates, smooth hero, tool pages, smoke e2e)
• baf2594 Merge pull request #21 from Wosmos/fix/ci-e2e-api-url
• 978467a Merge pull request #22: wave 2 (tour, bug reports, reviews, Spaces roles, 8 languages)
• 8afb628 build(deps): bump the frontend group across 1 directory with 9 updates (#11)
• d86e745 chore(deps): bump the actions group across 1 directory with 10 updates (#26)
• fcf25ad chore(deps): bump the go-backend group across 1 directory with 2 updates (#12)
• a4711cc chore(deps): bump the rust-desktop group across 1 directory with 13 updates (#24)
• 5eb6ee1 chore(release): 0.1.7
• 174f925 test(e2e): add a mocked smoke suite and fix what it caught
• 096cc44 test(e2e): cover dragging several files onto a folder and settle the tour and remember-device assumptions
• e156e63 test(e2e): cover the tour, bug reports, review moderation and Arabic RTL
• b907de1 test(frontend): cover connect-storage store, shared-full upload gate, and token response defaults