v1.0.2

• The sign-in screen says how to reset a forgotten passphrase.
• Security updates: Go 1.27.3 (crypto/x509), excelize with fixes for four
  workbook parsing advisories, and DOMPurify 3.4.17 for the Markdown preview.

Image

ghcr.io/ah410/strata:1.0.2@sha256:0316e520e8e121b4525e1caf68390bfcdf7d77937b42cfc3f157be0624feedb6

Verify with:

cosign verify ghcr.io/ah410/strata@sha256:0316e520e8e121b4525e1caf68390bfcdf7d77937b42cfc3f157be0624feedb6 \
  --certificate-identity-regexp "^https://github.com/ah410/strata/" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v1.0.1

• The container health check no longer reports a running server as unhealthy
  when the certificate it was given has expired. It still trusts only that
  exact certificate.

Image

ghcr.io/ah410/strata:1.0.1@sha256:40cb09e6a4e72ccf4691bb751d4df4d66c217d7583231575b23ed8872239a61c

Verify with:

cosign verify ghcr.io/ah410/strata@sha256:40cb09e6a4e72ccf4691bb751d4df4d66c217d7583231575b23ed8872239a61c \
  --certificate-identity-regexp "^https://github.com/ah410/strata/" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

v1.0.0

The first release, and the first one meant for people other than its author.

Files

• Search names below any folder as you type.
• Select many items and move, copy, download or delete them together. Move
  and copy open a folder picker; rows can also be dragged onto folders or
  the breadcrumb.
• Download folders or a selection as a zip, streamed as it's built.
• Upload whole folders, keeping their structure.
• Large uploads (16 MB and up) go in resumable chunks and pick up where they
  left off after a dropped connection or a page reload.

Safety net

• Deleting moves items to a per-dataset Trash with Undo. Items are kept 30
  days by default.
• Every time Strata replaces a file, the previous copy is kept (the last 20,
  up to 90 days) and can be downloaded or restored.

Viewing and editing

• Grid view with image thumbnails.
• A text editor with Markdown preview. Saves are versioned, and a save is
  refused if the file changed elsewhere since you opened it.
• Favorites and recently opened files.
• The .xlsx editor keeps formulas intact and refuses stale saves.
• Light, dark and well-known themes, chosen per file type.

Security and deployment

• Passphrase sign-in (argon2id) with a first-run setup code printed in the
  logs, so whoever reaches the port first can't claim the instance.
• HTTPS by default, with your certificate or a self-signed one.
• Distroless, non-root image for amd64 and arm64, signed with cosign, with
  SBOM and provenance attestations.

Image

ghcr.io/ah410/strata:1.0.0@sha256:0c85b8870c6e8b76e87cf95ff7663cfdd8bcfac44f25e4eb00dd3f1de425e4ac

Verify with:

cosign verify ghcr.io/ah410/strata@sha256:0c85b8870c6e8b76e87cf95ff7663cfdd8bcfac44f25e4eb00dd3f1de425e4ac \
  --certificate-identity-regexp "^https://github.com/ah410/strata/" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com