Releases: 9001/copyparty
Releases · 9001/copyparty
Logtail
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- textfile-viewer can now livestream logfiles (and other growing files) 17fa490 77df17d a1c7a09 6ecf4fd
- IdP-volumes: extend syntax for excluding certain users/groups 2e53f79
- the commit-message explains it well enough
- new option
--see-dotsto show dotfiles in the web-ui by default c599e2a - #171 automatic mimetype detection for files without extensions (thx @Morganamilo!) ec05f8c 9dd5dec
- default-disabled since it has a performance impact on webdav
- there are plans to fix this by using the db instead
- default-disabled since it has a performance impact on webdav
- #170 improve custom filetype icons
🩹 bugfixes
- cosmetic: get rid of some noise along the bottom of some cards in the gridview 8cae7a7
- cosmetic: satisfy a new syntax warning in cpython-3.14 5ac3864
🔧 other changes
- properly document how to build from source / build from scratch f61511d
- update deps
🌠 fun facts
- this release was cooked up in a swedish forest cabin
💾 what to download?
| download link | is it good? | description |
|---|---|---|
| copyparty-sfx.py | ✅ the best 👍 | runs anywhere! only needs python |
| a docker image | it's ok | good if you prefer docker 🐋 |
| copyparty.exe | for win8 or later; built-in thumbnailer | |
| u2c.exe | CLI uploader as a win7+ exe (video) | |
| copyparty.pyz | similar to the regular sfx, mostly worse | |
| copyparty32.exe | ⛔️ dangerous | for win7 -- never expose to the internet! |
| cpp-winpe64.exe | ⛔️ dangerous | runs on 64bit WinPE, otherwise useless |
| bootable usb | ┐(ﾟ∀ﾟ)┌ | a surprisingly useful joke (x86_64) |
Contributors
Morganamilo
Assets 9
pushing chrome to the limits (and then some)
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- not this time
🩹 bugfixes
- up2k: improve file-hashing speed on recent versions of google chrome e3e51fb
- speed increased from 319 to 513 MiB/s by default (but older chrome versions did 748...)
- read the commit message for the full story, but basically chrome has gotten gradually slower over the past couple versions (starting from v133) and this makes it slightly less bad again
- hashing speed can be further improved from
0.5to1.1GiB/s by enabling the[wasm]option in the[⚙️] settingstab- this option can be made default-enabled with
--nosubtle 137but beware that this increases the chances of running into browser-bugs (foreshadowing...)
- this option can be made default-enabled with
- up2k: fix errorhandler for browser-bugs (oom and such) 49c7124
- because chrome-bug 383568268 is about to make a surprise return?!
- #168 fix uploading into shares if path-based proxying is used 9cb93ae
- #165 unconditionally heed
--r 8000 p-loc84f5f41- the config-option for path-based proxying was ignored if the reverse-proxy was untrusted; this was confusing and not strictly necessary
🔧 other changes
- #166 the nixos module was improved once more (thx @msfjarvis!) 48470f6 60fb120
- added usage instructions to minimal-up2k.js, the up2k-ui simplifier 1d308ee
- docker: improve feedback if config is bad or missing 28b63e5
🌠 fun facts
- this release was tested using an unreliable rdp connection through two ssh-jumphosts to a qemu win10 vm back home from the bergen-oslo night train wifi
⚠️ not the latest version!
Contributors
msfjarvis
Assets 9
as seen on archlinux
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- new toolbar button to zip/tar the currently open folder 256dad8
- new options to specify the default checksum algorithm for PUT/bup/WebDAV uploads 0de0986
- #164 new option
--put-nameto specify the filename of nameless uploads 5dcd88a- the default is still
put-TIMESTAMP-IPADDRESS.bin
- the default is still
🩹 bugfixes
- #162 password-protected shares was incompatible with password-hashing c3ef3fd
- #161 m3u playlist creation was only possible over https 94352f2
- when relocating/redirecting an upload from an xbu hook (execute-before-upload), could miss an already existing file at the destination and create another copy 0a9a807
- some edgecases when moving files between filesystems f425ff5
- improve tagscan-resume after a server restart (primarily for dupes) 41fa6b2
- support prehistoric timestamps in fat16 vhd-drives on windows 261236e
🔧 other changes
- #159 the nixos module was improved (thx @gabevenberg and @chinponya!) d1bca1f
- an archlinux maintainer adopted the aur package; copyparty is now officially in arch b9ba783
- #162 add KDE Dolphin instructions to the conect-page d4a8071
- audioplayer now knows that
.ogameans.ogg
🌠 fun facts
- this release contains code pair-programmed during an anime rave
⚠️ not the latest version!
Contributors
gabevenberg and chinponya
Assets 10
mixtape.m3u
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- m3u playlists 897f9d3 ad200f2 4195762 fff4555
- create and play m3u / m3u8 files
🩹 bugfixes
- improve support for ie11 (yes, internet explorer 11) 3090c74 95157d0
- now possible to launch the password-hasher cli while another instance is running dbfc899
🔧 other changes
- make better decisions when running in a VM with less than 1 GiB RAM dc3b7a2
🌠 fun facts
- this release contains code written less than 1masl and was gonna be named hash again since it was originally just the password-hasher fix, but then kipun suggested adding playlist support (thx kipun)
- donations are now also possible through github -- good alternative to paypal (y)
- and thanks a lot for the support (and kind words therein) so far, appreciate it :>
⚠️ not the latest version!
unzip-compat
a couple guys have been asking if I accept donations -- thanks a lot!! added a few options on my github page :>
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
🩹 bugfixes
- #155 download-as-zip: increase compatibility with the unix
unzipcommand db33d68- this unfortunately reduces support for huge zipfiles on old software (WinXP and such)
- and makes it less safe to stream zips into unzippers, so use tar.gz instead
- and is perhaps not even a copyparty bug; see commit-message for the full story
🔧 other changes
- show warning on Ctrl-A in lazy-loaded folders 5b3a5fe
- docker: hide keepalive pings from logs d5a9bd8
⚠️ not the latest version!
all sorted
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- when enabled, natural-sort will now also apply to tags, not just filenames 7b2bd6d
🩹 bugfixes
- some sorting-related stuff 7b2bd6d
- folders with non-ascii names would sort incorrectly in the navpane/sidebar
- natural-sort didn't apply correctly after changing the sort order
- workaround ffmpeg-bug 10797 98dcaee
- reduces ram usage from 1534 to 230 MiB when generating spectrograms of s3xmodit songs (amiga chiptunes)
- disable mdns if only listening on uds (unix-sockets) ffc1610 361aebf
🔧 other changes
- hotkey CTRL-A will now select all files in gridview 233075a
- and it toggles (just like in list-view) so try pressing it again
- copyparty.exe: upgrade to pillow v11.2.1 c7aa1a3
⚠️ not the latest version!
GHOST
did you know that every song named GHOST is a banger? it's true! ghost // ghost // ghost
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- option to store markdown backups out-of-volume fc88341
- the default is still a subfolder named
.histnext to the markdown file --md-hist vputs them in the volume's hist-folder instead--md-hist ndisables markdown-backups entirely
- the default is still a subfolder named
- #149 option to store the volume sqlite databases at a custom locations outside the hist-folder e1b9ac6
- new option
--dbpathworks like--histbut it only moves the database file, not the thumbnails - they can be combined, in which case
--histis applied to thumbnails,--dbpathto the db - useful when you're squeezing every last drop of performance out of your filesystem (see the issue)
- new option
- actively prevent sharing certain databases (sessions/shares) between multiple copyparty instances acfaacb
- an errormessage was added to explain some different alternatives for doing this safely
- for example by setting
XDG_CONFIG_HOMEwhich now works on all platforms b17ccc3
- for example by setting
- an errormessage was added to explain some different alternatives for doing this safely
🩹 bugfixes
- #151 mkdir did not work in locations outside the volume root (via symlinks) 2b50fc2
- improve the ui feedback when trying to play an audio file which failed to transcode f9954bc
- also helps with server-filesystem issues, including image-thumbs
🔧 other changes
- #152 custom fonts are also applied to textboxes and buttons (thx @thaddeuskkr) d450f61
- be more careful with the shares-db 8e0364e
- be less careful with the sessions-db 8e0364e
- update deps c0becc6
- web: dompurify
- copyparty.exe: python 3.12.10
- rephrase
-j0warning on windows to also mention that Microsoft Defender will freak out c0becc6 - #149 add a script to optimize the sqlite databases for storage on zfs 4f397b9
- block
GoogleOther(another recalcitrant bot) from zip-downloads c2034f7 - rephrase
-j0warning on windows to also mention that Microsoft Defender will freak out c0becc6 - update contributing.md with a section regarding LLM/AI-written code cec3bee
- the helptext will also be uploaded to each github release from now on, permalink
- add review from ixbt forums b383c08
⚠️ not the latest version!
Contributors
thaddeuskkr
Assets 9
zlib-ng
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
NEW: make it a bootable usb flashdrive
get the party going anywhere, anytime, no OS required! download flashdrive image or watch the low-effort demo video which eventually gets to the copyparty part after showing off a bunch of other stuff on there
- there is source code and build instructions too
- please don't take this too seriously
🧪 new features
- prefer zlib-ng when available 57a5607
- download-as-tar-gz becomes 2.5x faster
- default-enabled in docker-images
- not enabled in copyparty.exe yet; coming in a future python version
- docker: add mimalloc (optional, default-disabled) de2c978
- gives twice the speed, and twice the ram usage
🩹 bugfixes
- small up2k glitch 3c90cec
🔧 other changes
- rename logues/readmes when uploaded with write-only access 2525d59
- since they are used as helptext when viewing the page
- try to block google and other bad bots from
?docand?zip99f63ad- apparently
rel="nofollow"means nothing these days
- apparently
the docker images for this release were built from e1dea7e
⚠️ not the latest version!
boot2party
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
NEW: make it a bootable usb flashdrive
get the party going anywhere, anytime, no OS required! download flashdrive image or watch the low-effort demo video which eventually gets to the copyparty part after showing off a bunch of other stuff on there
- there is source code and build instructions too
- please don't take this too seriously
🧪 new features
- option to specify max-size for download-as-zip/tar 494179b 0a33336
- either the total download size (
--zipmaxs 500M), and/or max number of files (--zipmaxn 9k) - applies to all uesrs by default; can also ignore limits for authorized users (
--zipmaxu) - errormessage can be customized with
--zipmaxt "winter is coming... but this download isn't"
- either the total download size (
- appledoubles are detected and skipped when uploading with the browser-UI 7820840
- IdP-volumes can be filtered by group 9c2c423
[/users/${u}]in a config-file creates the volume for all users like before[/users/${u%+canwrite}]only if the user is in thecanwritegroup[/users/${u%-admins}]only if the user is NOT in theadminsgroup
🩹 bugfixes
- when moving a folder with symlinks, don't expand them into full files 5ab0976
- absolute symlinks are moved as-is; relative symlinks are rewritten so they still point to the same file when possible (if both source and destination are indexed in the db)
- the previous behavior was good for un-deduplicating files after changing the server-settings, but was too inconvenient for all other usecases
- #146 fix downloading from shares when
-j0enabled 8417098 - only show the download-as-zip link when the user is actually allowed to 14bb299
- the suggestions in the serverlog regarding how to fix incorrect X-Forwarded-For settings would be incorrect if the reverse-proxy used IPv6 to communicate with copyparty 16462ee
- set nofollow on
?doclinks so crawlers don't download binary files as text 6a2644f
🔧 other changes
- #147 IdP: fix the warning about dangerous misconfigurations to be more accurate 29a17ae
- #143 print a warning on incorrect character-encoding in textfiles (config-files, logues, readmes etc.) 25974d6
- copyparty.exe: update to jinja 3.1.6 (copyparty was not affected by the jinja-3.1.5 vuln)
⚠️ not the latest version!
lemon melon cookie
webdev is like a lemon sometimes
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)
recent important news
- v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- #142 workaround android-chrome timestamp bug 5e12abb
- all files were uploaded with last-modified year 1601 in specific recent versions of chrome
- https://issues.chromium.org/issues/393149335 has the actual fix; will be out soon
🩹 bugfixes
- add helptext for volflags
dk,dks,dky65a7706 - fix false-positive warning when disabling a global option per-volume by unsetting the volflag
🔧 other changes
- #140 nixos: @daimond113 fixed a warning in the nixpkg (thx!) e0fe2b9
⚠️ not the latest version!
Contributors
daimond113