v2.6.0

2.6.0 (2026-09-14)

Features

• declare missing config keys (opendal_scheme, chunk_expire_hours) and add config schema guard (c5d525d)
• rename all config keys to snake_case with DB migration 007 (5121db6)
• upgrade password hashing to memory-hard scrypt with transparent rehash (443cfe7)

Bug Fixes

• FileCodes.expired_count defaults to -1 (time-based) instead of instantly-expired 0 (D4) (3c93718)
• save_file accepts plain binary streams; repair admin local file share (D2) (bb95017)
• serialize KeyValue JSON read-modify-write sections behind a process lock (D5) (0038636)
• snake_case the public config contract (D7 follow-up) (800bac0)
• validate background config as http(s) URL to close CSS quote-breakout in 2023 theme (4cab625)

Performance Improvements

• cache settings refresh behind a 2s TTL, force refresh on write paths (D6) (61d72ab)
• dashboard counters and storage quota use SQL aggregation (D3) (baecebd)
• make is_config_initialized cheap — no scrypt on the per-request probe (D1) (ec424dd)