🚀 Features
- 123_open: Show only the fields of the selected auth mode - by @okatu-loli (8d6e8)
🐞 Bug Fixes
- V-001 security vulnerability - by @anupamme (32ebb)
- Multi_agent.cwe-78 security vulnerability - by @anupamme (55d3f)
- auth:
- Migrate user base paths to scoped roles - by @okatu-loli (c45dd)
- ci:
- Use archived FreeBSD sysroots for beta builds - by @okatu-loli (75433)
- copy:
- Create destination dir before copying within same storage - by @cipherprofessor in https://github.com/AlistGo/alist/issues/9662 (c7af2)
- drivers:
- Refresh Baidu tokens and update 360 authentication - by @okatu-loli (656e3)
- fs:
- Accept uploads without Content-Length - by CaoBochun (cc1b3)
- Validate explicit content length - by CaoBochun (af056)
- local:
- Key thumbnail cache by rendered width - by @okatu-loli in https://github.com/AlistGo/alist/issues/9654 (1a8fc)
- move:
- Create the destination dir before moving into it - by Abdellatif Anaflous (00a23)
- Resolve conflict with latest main - by @okatu-loli (4a153)
- net:
- Guard downloader.interrupt() against a repeat close - by @cipherprofessor in https://github.com/AlistGo/alist/issues/9663 (f6771)
- proxy:
- Block inline rendering only for unsafe content types - by @kah-ja (fd126)
- quark:
- Recover transient upload control errors - by @NovumOrbis (ff17a)
- Handle delayed directory visibility after mkdir - by @NovumOrbis (54b97)
- Recover transient delete failures - by @NovumOrbis (c90db)
- Fail closed on invalid delete verification - by @NovumOrbis (fb1d3)
- Verify ambiguous deletes via file info - by @NovumOrbis (c8b8a)
- Close delete request ambiguity gaps - by @NovumOrbis (223f4)
- Preserve fid in delete verification - by @NovumOrbis (8f40f)
- Fail closed on ambiguous upload pre responses - by @NovumOrbis in https://github.com/AlistGo/alist/issues/9660 (bf11e)
- Preserve post-upload identity across stale listings - by @NovumOrbis (bfa46)
- uc:
- Generate persistent device tokens for downloads - by @okatu-loli (9d327)
