⚠️ This update contains important security fixes. We recommend all users to update to this version, especially if more than one user is registered at your Gokapi instance. More details regarding the security fixes will be shown here within the next 24 hours.
Changelog
-
Fixed one vulnerability with high severity and four with medium severity
-
Fixed severe bug that deleted all files if a user with a file request was manually deleted from the database #373
-
Add
GOKAPI_AWS_PROXY_DOWNLOADenvironment variable by @Nerahikada #372 -
Added DISABLE_API_MENU env to hide API menu and disable generation of new API keys for non-admin users #377
-
Fixed S3 environment variables not being applied during initial setup by @Nerahikada #370
-
Fixed MinPasswordLength in reconfiguration setup view by @Nerahikada #371
-
Fixed OIDC bug which prevented error check #369
-
Fixed API download / download button always proxying AWS files #375
-
Better error handling for setup CORS check
-
Added better rate limiting
-
Replace space with underscore instead of url escaping it
-
More minor changes and fixes
-
Changed to Go1.26
-
Gokapi-cli: Fixed logout not working, fixed upload not working #363
-
Gokapi-cli: Fixed download and add E2E download support by @Upellift99 #365
Breaking Changes
- SVG images cannot be hotlinked anymore and old hotlinks to SVG images will be removed on startup
New Contributors
- @Upellift99 made their first contribution in #365
- @anlar made their first contribution in #366
- @Nerahikada made their first contribution in #370
Full Changelog: v2.2.2...v2.2.3