Release Release v0.18.0 · devld/go-drive

Highlights

Connect MEGA cloud storage, including two-factor sign-in, encrypted transfers, and reusable sessions.
Browse ZIP, 7z, and RAR archives, preview their contents, and download selected files or folders as ZIP packages.
Edit Markdown visually with Mermaid diagram rendering, and enjoy improved video controls on desktop and mobile.
Stored Drive credentials and OAuth data are now encrypted at rest.

Encryption key. Existing stored secrets are encrypted automatically on startup. Preserve data-dir/encryption.key, or keep using the same GO_DRIVE_ENCRYPTION_KEY if configured. Database backups require the same key to restore. If both sources exist, they must match.
Unfinished uploads. The temporary storage format for chunked uploads has changed. Uploads left unfinished before upgrading must be restarted.
Custom Script Drives. Update scripts to the current template and declarations. The Drive environment uses env / DriveEnv in place of utils / DriveUtils; reader methods now receive a ReaderRange instead of separate start and size arguments. Host Entry.name has been removed; derive names from Entry.path. Thumbnail metadata now uses hasThumbnail in place of selfThumbnail and thumbnailUrl.
Custom integrations. The old POST /archive endpoint is replaced by artifact-based ZIP preparation and download. Go extensions must also adapt to the updated entry and reader interfaces, consolidated error types, and NewClassSet / With in place of the exported BuiltinClasses catalog.
Local filesystem paths. Paths must use the exact names stored on disk. Alternate casing and other filesystem aliases are rejected to prevent permission bypasses. Parent directories must be readable so names can be verified.

MEGA supports configurable root folders and content caching. Deleted or replaced files go to the MEGA rubbish bin by default, with an option for permanent deletion.
Archive previews show directory contents and symbolic-link targets. Selected archive members and ordinary Drive files can be packaged for download.
Markdown files open in a visual editor with Mermaid diagrams. Diagram source can be shown or hidden while editing, and Mermaid loads only when needed.
Video previews offer mouse and touch controls, automatic control hiding, double-tap playback, and swipe-down dismissal on touch devices.
WebP is included in the default image previews.
Drive configuration reloads run in the background with progress feedback. Admin Drive controls work better on mobile and include contextual documentation links.
File menus can start downloads directly, and rename dialogs select the filename without its extension.
Chunked uploads report progress more consistently and reject simultaneous writes to the same chunk.
Shared file-content caches expire after five minutes by default, reducing stale reads after external changes. Archive work has configurable concurrency limits.
Editor loading is lighter, and frontend dependencies have been updated.

Fixed a local filesystem permission bypass involving alternate path spellings on filesystems that treat different names as equivalent.
Pasting images into the Markdown editor no longer embeds them as base64 data. Image uploads and text pasting remain available.
Interrupted WebDAV uploads no longer replace existing files with incomplete data.
Remote storage authentication failures no longer appear as an expired go-drive login; Drive initialization errors are shown in the admin form.
Background task errors display translated messages, and streaming responses stop safely when requests end.
Partial file caches are reused correctly, and writes through the shared file layer are saved back to the Drive.
Nested custom request-header fields retain their form types when saved.
Entry menus behave more reliably on iOS, and the upload-task button stays hidden when there are no tasks.

Full Changelog: v0.17.0...v0.18.0