github AtalayaLabs/OxiCloud v0.6.0
OxiCloud v0.6.0 — Open Skies
on GitHub

3 hours ago

🚀 OxiCloud v0.6.0 — "Open Skies"

Eight months. Two hundred and ten commits. One mission: turn a fast Rust file server into a full, self-hostable cloud you actually want to live in.

OxiCloud 0.6.0 is, without exaggeration, the largest release in the project's history. It is the version where OxiCloud stops being "a place to store files" and becomes a complete personal cloud — your files, your calendar, your contacts, your office, your photos — all served from a single, blazing-fast Rust binary, on your hardware, under your rules.

This is open skies. No vendor. No lock-in. No telemetry. Just your data, where it belongs.

✨ Headline features

🔌 Speak every protocol

OxiCloud now talks to the whole ecosystem out of the box:

  • WebDAV (RFC 4918) — including LOCK/UNLOCK so Office and OS clients play nice.
  • CalDAV — a real calendar server, with month/week/day UI and correct timezone handling for recurring events.
  • CardDAV — contacts with full vCard import/export.
  • NextCloud-compatible API — point the official NextCloud mobile & desktop apps straight at OxiCloud.
  • WOPI — edit Office documents in the browser.

Your phone, your laptop, your calendar app — they all just connect.

🔐 Authentication, done right

  • OIDC / OAuth2 single sign-on.
  • Two-factor authentication (TOTP).
  • Device flow for CLI and mobile clients.
  • App passwords for third-party apps.
  • Hardened internals: timing-attack-safe password comparison, fixed JWT expiry & OIDC token refresh, clean session teardown on logout.

💾 Smarter storage

  • Content-addressable storage with BLAKE3 deduplication — store the same file a thousand times, pay for it once.
  • Transparent compression for compressible content.
  • Chunked & resumable uploads for large files over flaky connections.
  • Per-user quotas with correct accounting after deletes.

🔎 Find anything

  • Full-text search powered by PostgreSQL pg_trgm, with relevance ranking and safe query escaping.

🗂️ A real workspace

  • Trash / recycle bin, favorites, recent items, and file version history.
  • Public sharing with password protection and expiration dates.
  • Smart image thumbnails with intelligent cropping and dimension hints.

🎨 A frontend that delights

  • Dark mode, mobile-responsive layout, drag-and-drop upload, grid/list toggle, multi-select with shift-click, keyboard navigation, upload progress, and an improved preview modal.
  • Cursor-based pagination on the main lists for instant, smooth scrolling at any scale.
  • Multi-language support: 🇬🇧 English · 🇪🇸 Español · 🇫🇷 Français · 🇩🇪 Deutsch.
  • A new user profile page with avatar upload, plus an admin panel for user management and system settings.

🛠️ For developers & operators

  • OpenAPI spec generation + Swagger UI.
  • GitHub Actions CI for tests and linting, and an automated release workflow.
  • The server no longer reuses the port by default — safer, more predictable startup.

🐛 Reliability & security

64 fixes landed in this cycle. The highlights that matter most:

  • 🔒 Patched a path-traversal vulnerability in file download.
  • 🔒 Filename sanitization to prevent XSS.
  • ⚡ Fixed connection-pool exhaustion under load and optimized folder-listing queries.
  • 🧠 Closed a memory leak in image processing and tightened thumbnail caching.
  • 🧩 Correct CalDAV recurring-event timezones, NextCloud PROPFIND format, WebDAV LOCK token validation, chunked-upload reassembly, and dedup ref-counting on delete.

⚙️ Upgrade notes

  • Requires Rust 1.93+ (edition 2024) and PostgreSQL 13+ with the pg_trgm and ltree extensions.
  • Database migrations apply automatically on startup.
  • Heads-up: the server no longer reuses the listening port by default. If you relied on the old behavior, adjust your deployment config.

💛 Thank you — this release belongs to the community

OxiCloud 0.6.0 was built by people who believe self-hosting should be a joy, not a chore. To everyone who filed an issue, tested a nightly, translated a string, or sent a patch: thank you.

🏆 A special, heartfelt thank you to Edouard Vanbelle (@EdouardVanbelle)

Edouard is, quite simply, a crack. The most prolific community contributor of this entire cycle — 21 commits of consistently excellent work. He gave us cursor-based pagination on the main lists, hardened the server's startup behavior, polished the resource list UX with owner swimlanes and user vignettes, and showed up, again and again, with care and craft. This release would not be what it is without him. Edouard — you deserve everything good in this world. 🙏👑

🙌 And huge thanks to:

  • Davide Lettieri (@davidelettieri) — for solid, thoughtful contributions across the codebase.
  • Stefano Gennari — for jumping in and making OxiCloud better.

To every star-gazer, every self-hoster, every person running OxiCloud on a Raspberry Pi in a closet: this one's for you. ❤️

Full Changelog: v0.5.0...v0.6.0

Built with 🦀 and stubborn love for open source.

What's Changed

New Contributors

Full Changelog: v0.5.6...v0.6.0

Check out latest releases or
releases around AtalayaLabs/OxiCloud v0.6.0

Don't miss a new OxiCloud release

NewReleases is sending notifications on new releases.

Get notifications