cloudreve version history

- Added thumbnail display in list view. - Introduced initial user group mapping for OIDC login (Pro feature). - Added a global toggle to manage visibility of registered users' email addresses. - Fixed security vulnerabilities and API endpoint access issues.

* Fix: Multiple security vulnerabilities. Full details will be disclosed one month after this release. Thanks to @EaEa0001, @baradika, and @riodrwn for the responsible disclosures.

* Added: Indicate download progress when batch downloading files to a local directory (cloudreve/frontend#332 @OnAirGame) <details> <summary>Details</summary> <br> <img width="1271" height="358" alt="image" src="https://github.com/user-attachments/assets/eff3b7b6-8227-4509-a320-f1fbc91365ec" /> </details> * Optimized: File list query speed when sorting by creation date * Optimized: Error handling for unexpected S3 Meta API responses (#3394) * Fixed: Invalid Cap CAPTCHA static resource URL (cloudreve/frontend#331 @1332881954) * Fixed: Page crashed when scrolling down with cursor pagination (cloudreve/frontend#330 @YUDONGLING) * Fixed: Page crashed when creating a "rating" type custom property (cloudreve/frontend#334 @YUDONGLING) * Fixed: No error prompt displayed when accessing an invalid share shortcut in the Community Edition (cloudreve/frontend#336 @AnranYus) * Fixed: Unable to send emails using email services such as Tencent Cloud SES (#3372 @WittF) * Fixed: Sorting by creation date did not respect the actual creation date of the files (#3437 @yindaheng98) * Fixed: Unable to copy exported images in the DrawIO editor (#3448) * Fixed: Incorrect display of

* Added: [Pro] Generate direct links for directories, allowing access to all child files by appending their relative paths to the directory's direct link URL (#3174) <details> <summary>Details</summary> <br> <img width="651" height="228" alt="image" src="https://github.com/user-attachments/assets/decddccc-98d8-49f3-b4a5-b81c614ba8e9" /> <br> <em>Note: This requires enabling the corresponding permissions in the user group settings.</em> </details> * Added: Set a specific file application as the global default opening method (#2304) <details> <summary>Details</summary> <br> <img width="1167" height="306" alt="image" src="https://github.com/user-attachments/assets/c581519a-c76a-46b8-a200-d1d3cc68128b" /> </details> * Added: Batch edit custom props for multiple selected files in the list view (#3322) * Fixed: Automatically generated client secrets were invalid when creating OAuth applications (#3337) * Fixed: Page crashed when the number of deleted files exactly matched the pagination size (#3329) * Fixed: [Pro] Gift code usage status did not roll back after a verification failure (#3339) * Fixed: Incomplete file list displayed on the web inter

* Fix: incorrect document link for full-text search * Fix: panic when trying to transfer files in slave node

* Full-Text Search and AI Semantic Search (#2895) * <details> <summary> Details </summary> <img width="1916" height="1190" alt="image" src="https://github.com/user-attachments/assets/1b549685-8690-4566-bd24-9af5ac38afb1" /> For details, please refer to [Full-Text Search](https://docs.cloudreve.org/usage/search/fts) and [AI Semantic Search](https://docs.cloudreve.org/usage/search/ai-semantic-search). </details> * New: Edit custom file propertities directly in the list view (#3254) * <details> <summary> Details </summary> <img width="1670" height="634" alt="image" src="https://github.com/user-attachments/assets/d6b66c6c-8107-4e73-a635-34314c320cde" /> </details> * New: Rename files directly in list or grid view * <details> <summary> Details </summary> <img width="492" height="264" alt="image" src="https://github.com/user-attachments/assets/3cf70812-ec2f-43de-8393-b183d5ff5185" /> </details> * New: Option to configure clicking behavior on folders (enter folder or select folder) (#3266) * <details> <summary> Details </summary> <img width="74

> [!CAUTION] > **This release contains critical security updates for **CVE-2026-25726;** please update as soon as possible.** > Updating to this version will cause the following unavoidable side effects: > * All active login sessions will be invalidated; > * Existing direct links for non-redirected local storage policies will become invalid (URLs containing `?sign=xxx`); > * Other signed temporary links that have not yet expired will become invalid (URLs containing `?sign=xxx`). > > --- > > * *If your database was first initialized with Cloudreve version >= 4.10.0, this security vulnerability does not affect you.* > * *Specific details will be disclosed 60 days after this release.* * Fix: Use cryptographically secure random number generator for sensitive fields (Kudos to @orenyomtov) * Improvement: File list tooltips should no longer obstruct downward mouse movement (#3170) * Improvement: Performance optimization for drag-selection of files * Fix: Unable to drag and drop files in list view (#2937) * Fix: Inaccessible direct links for newly created empty files (#3239) * Fix: 500 error when uploading to SeaweedFS S3 storage policies (#3265) * Fix: OAuth endpoi

* Third-party App OAuth Integration * <details> <summary> Details </summary> <img width="1399" height="492" alt="image" src="https://github.com/user-attachments/assets/832f5726-2791-4115-9a9c-b1b6b432d5fd" /> External app integrations can be managed or added in the admin panel. </details> * New [Pro] Enable "Share" permission for other users, allowing them to create new share links (#3028) * <details> <summary> Details </summary> <img width="471" height="706" alt="image" src="https://github.com/user-attachments/assets/96d20373-00a1-4334-a237-c383215a1bd0" /> </details> * New Support for share card thumbnails and descriptions when sending share links on social media platforms (#3234 @WittF) * <details> <summary> Details </summary> <table> <tr> <td align="center"><strong>Discord</strong></td> <td align="center"><strong>X/Twitter</strong></td> </tr> <tr> <td><img src="https://github.com/user-attachments/assets/b34462b4-99c2-40ca-826d-c4573882dcbd" width="320" /></td> <td><img src="https://github.com/user-attachme

* Fixed a CI failure on self-hosted VSTS agent

* Added Polish localization (#3136 @LukaszOn) * Added Option to enable pprof HTTP service in the configuration file * Added Unsaved changes confirmation dialog for Text and Markdown editors (https://github.com/cloudreve/frontend/pull/322 @YUDONGLING) * Added Endpoint for real-time server-side file change events (reserved for desktop client) * Added Support for switching the current user via URL Query parameter (reserved for desktop client) * Added Optional ETag verification when creating upload sessions (reserved for desktop client) * Fix Abnormal filenames for Kingsoft Cloud KS3 downloads (#3057 @YUDONGLING) * Fix Inconsistent path separators for thumbnail Blobs on Windows (#3116 @YUDONGLING) * Fix Security vulnerabilities reported by Kolega.dev * Fix File size not updated after version rollback * Fix Admin panel rendering error when duplicate names exist for nodes or storage policies (cloudreve/frontend#320 @YUDONGLING) * Optimize Memory usage when importing large numbers of files externally (#3059) * Optimize Upload session creation to automatically inherit parent directory's storage policy if unspecified * Optimize Wording of some text descriptions (cloudreve/front