ShenLin
c3d3da9286
fix(drivers/189): decode JSON strings before parsing timestamps ( #3033 )
...
- Decode JSON time strings before normalizing Unicode spaces in both 189 drivers
- Exercise escaped spaces and existing date formats through JSON unmarshalling
- Cover invalid JSON input and XML time parsing
Signed-off-by: jyxjjj <16695261+jyxjjj@users.noreply.github.com >
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
2026-09-05 00:12:20 +08:00
renovate[bot]
2bdf16d596
chore(deps): pin dependencies ( #2736 )
...
* chore(deps): pin dependencies
* chore: exclude docker from renovate
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Yinan Qin <elysia-best@simplelinux.cn.eu.org >
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
v4.2.6
2026-09-01 22:58:15 +08:00
renovate[bot]
f8ebaec4f1
fix(deps): update module google.golang.org/grpc to v1.85.0-dev ( #3015 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-01 22:58:10 +08:00
renovate[bot]
fc23f4e781
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.8 ( #3014 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-01 22:58:05 +08:00
renovate[bot]
3ea9984aea
fix(deps): update module golang.org/x/image to v0.45.0 ( #2994 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-01 22:58:00 +08:00
renovate[bot]
cc11f354f1
fix(deps): update module github.com/go-webauthn/webauthn to v0.18.0 ( #2988 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
2026-09-01 22:57:54 +08:00
renovate[bot]
8869874b76
fix(deps): update module github.com/bmatcuk/doublestar/v4 to v4.10.0 ( #2987 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-01 22:57:48 +08:00
ShenLin
523af855ba
fix(auth): secure SSO account binding
...
- Issue and verify short-lived SSO binding state and proof tokens
- Bind provider callbacks to an HttpOnly browser session cookie
- Reject invalid or already-associated SSO identities during profile updates
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
Signed-off-by: jyxjjj <16695261+jyxjjj@users.noreply.github.com >
2026-09-01 18:45:40 +08:00
ShenLin
bba3516693
fix(upload): authorize direct upload destinations
...
- Resolve and authorize the canonical destination from the request payload
- Reject upload capabilities that cross virtual storage mount boundaries
- Remove the unrelated File-Path middleware authorization check
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
Signed-off-by: jyxjjj <16695261+jyxjjj@users.noreply.github.com >
2026-09-01 18:45:39 +08:00
ShenLin
f244adf60e
fix(meta): enforce case-insensitive access controls
...
- Add an invalidated metadata snapshot for case-insensitive fallback lookups
- Enforce segment-aware metadata coverage for passwords and download signatures
- Add regression tests while preserving case-sensitive write authorization
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
Signed-off-by: jyxjjj <16695261+jyxjjj@users.noreply.github.com >
2026-09-01 18:45:39 +08:00
abcqqoo
ce87b45d2d
fix(cmd/start): use absolute executable path for child process ( #2125 )
...
* fix(cmd/start): use absolute executable path for child process
* fix(cmd/start): detect force-bin-dir flag variants
---------
Co-authored-by: Zoe Lee <zoelee@gmail.com >
2026-09-01 18:15:06 +08:00
renovate[bot]
4031b31837
fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/azcore to v1.23.1 ( #2985 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-01 18:01:59 +08:00
renovate[bot]
9b34ca5bf1
fix(deps): update module github.com/coreos/go-oidc to v2.5.0+incompatible ( #2711 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-01 17:59:51 +08:00
renovate[bot]
666b1a039d
fix(deps): update module golang.org/x/crypto to v0.55.0 ( #2993 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-01 17:57:45 +08:00
hugcabbage
8f9a09d359
fix(drivers/guangyapan): report multipart upload progress to copy task ( #2989 )
...
multipartUploadToOSS passed the UpdateProgress callback into
stream.NewStreamSectionReader, which ignores the up argument, so the
callback was never invoked while uploading parts. As a result,
cross-storage copy tasks targeting GuangYaPan stayed at 0% and showed no
progress bar or speed in the task list.
Fix by tracking the uploaded byte count and invoking up after every
part is uploaded, keeping consistent with other drivers' upload flow.
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
2026-09-01 17:22:50 +08:00
renovate[bot]
394bb8f80e
chore(deps): update go toolchain directive to v1.26.5 ( #2733 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-30 17:25:38 +08:00
无知的错
819fdbd518
fix(drivers/189pc,drivers/189tv): fix extra requests when viewing files ( #2791 )
...
* fix(drivers/189pc,drivers/189tv): fix extra requests when viewing files
* fix(drivers/189pc,drivers/189tv): fix extra requests when viewing files
2026-08-29 01:33:16 +08:00
qbisicwate
d220b8b005
fix(drivers/189pc)!: normalize escaped apostrophes in names ( #2792 )
...
fix(189pc): normalize escaped apostrophes in names
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
2026-08-29 01:32:57 +08:00
jiwangyihao
d12bd4c71e
feat(drivers/github): add optional accurate modified time ( #2388 )
...
* feat(drivers/github): add optional accurate modified time
* refactor(github): 简化准确修改时间查询
- 将最多 200 个路径合并到一次 GraphQL history 查询,并用 ^{commit} 统一解析 ref
- 删除分批和冗余响应解析,保留失败降级、tree fallback 与缓存行为
- 使用 JSON 字符串字面量支持控制字符路径,并收敛行为测试
---------
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
2026-08-29 01:31:11 +08:00
renovate[bot]
4c611ef8de
fix(deps): update github.com/cloudsoda/go-smb2 digest to 0b399b9 ( #2976 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 01:28:32 +08:00
beardthelion
eea8fee7f1
fix(drivers): stop the upload retry loop when the context is canceled ( #2892 )
...
The 115 and pikpak multipart uploaders checked for cancellation with a
`case <-ctx.Done()` inside a select, and a break there only leaves the
select, not the enclosing `for retry := 0; retry < 3; retry++` loop.
Cancelling an upload therefore ran all three attempts for every
remaining chunk, each allocating a chunk-sized buffer and reading it
off disk before firing a request that could not succeed, and reported
a transport error instead of the cancellation.
Move the check ahead of the select and use utils.IsCanceled, matching
the pattern the other drivers already use. Assigning ctx.Err() to err
is load-bearing: without it a cancelled chunk takes the success branch,
counts toward progress, and appends a zero-value UploadPart.
Found with staticcheck (SA4011).
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
2026-08-29 01:27:00 +08:00
AmPlace
c06656958c
fix(offline): expose native 115 tools for ED2K downloads ( #2920 )
...
* fix(offline): allow ED2K downloads through 115 tools
- Treat 115 Cloud and 115 Open as ED2K-capable tools.
- Keep automatic fallback limited to Thunder tools.
- Add regression coverage for supported and unsupported tools.
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
* fix(offline): route ED2K to native 115 tools
- Allow ED2K requests initially using SimpleHttp to enter tool routing.
- Prefer the matching 115 tool for 115 Cloud and 115 Open destinations.
- Add regression coverage for native storage tool selection.
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
* fix(offline): expose native tools for destination storage
- Include the native destination tool in the path-aware tool list.
- Keep existing ready-tool filtering for external destinations.
- Add coverage for native storage to tool mapping.
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
---------
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
2026-08-29 01:22:29 +08:00
Strom
0d277b8550
fix(drivers/strm): respect deployment umask for local directories ( #2931 )
...
* feat(strm): add local save permission mode
- add private and shared permission modes for local STRM files
- repair shared-mode directory and file permissions during generation
- add permission handling tests
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
* fix(strm): respect deployment umask for local directories
- remove application-level permission modes and chmod operations
- create local STRM directories with umask-controlled permissions
- preserve existing permissions and test the behavior
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
---------
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
2026-08-29 01:20:44 +08:00
Nostalgia
e0e4de5e82
fix(server/s3): paginate recursive object listings ( #2968 )
...
fix(s3): paginate recursive object listings
- stop recursive traversal after filling the requested S3 page
- preserve lexicographic marker ordering and request cancellation
- cover bounded traversal, continuation, prefixes, and cache safety
Co-authored-by: nostalume <nostalucent@gmail.com >
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
2026-08-29 01:18:42 +08:00
Lythen
39fcaf488b
feat(ilanzou): modernize console API session and copy ( #2962 )
...
* feat(ilanzou): modernize console API session and copy
Use an isolated cookie-backed API session and preserve raw appToken syntax required by current iLanzou endpoints.
Resolve CDN download responses more robustly, align upload metadata with the console protocol, and delegate copies to OpenList background tasks instead of blocking requests.
* fix(ilanzou): escape appToken query values
Escape opaque appToken values while preserving the literal colon required by iLanzou endpoints. Ignore CDN HEAD response lengths unless the response status is successful.
* fix(ilanzou): address driver review feedback
Use the ilanzou package name consistently, document upload result polling, and bound CDN size probes. Keep the appToken and CDN challenge handling covered by focused tests and comments.
* fix(ilanzou): use context timeout for HEAD probe
2026-08-29 01:17:04 +08:00
ShenLin
31ae0f5bc9
fix(drivers/onedrive_sharelink): reuse shared HTTP clients ( #2961 )
...
fix(onedrive_sharelink): reuse shared HTTP clients
- Reuse shared client settings for redirect and GraphQL requests
- Propagate request contexts through password and pagination requests
- Close OneDrive response bodies that were missing cleanup
- Add tests for shared client settings and redirect handling
Signed-off-by: jyxjjj <16695261+jyxjjj@users.noreply.github.com >
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
2026-08-29 01:10:01 +08:00
renovate[bot]
3943180898
fix(deps): update module github.com/antchfx/xpath to v1.3.8 ( #2977 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 01:04:56 +08:00
renovate[bot]
b1cc7c6a93
fix(deps): update module github.com/jlaffaye/ftp to v0.2.4 ( #2979 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 01:04:00 +08:00
renovate[bot]
f6557f3d62
chore(deps): update docker/setup-buildx-action digest to 37fe631 ( #2975 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 01:03:14 +08:00
renovate[bot]
9dc6cb29d9
chore(deps): update docker/login-action digest to dbcb813 ( #2974 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 01:02:56 +08:00
renovate[bot]
b86e4cb8dc
fix(deps): update module github.com/pkg/sftp to v1.13.11 ( #2980 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 01:00:46 +08:00
renovate[bot]
fd7fb04ed1
fix(deps): update module github.com/rclone/rclone to v1.75.0 ( #2900 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 00:59:42 +08:00
renovate[bot]
80795b8ec3
fix(deps): update module github.com/sirupsen/logrus to v1.10.2 ( #2982 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 00:52:48 +08:00
renovate[bot]
c2b3666818
fix(deps): update module gorm.io/driver/postgres to v1.6.2 ( #2981 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 00:52:36 +08:00
renovate[bot]
edbf42898b
fix(deps): update module github.com/blevesearch/bleve/v2 to v2.6.1 ( #2978 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-29 00:50:49 +08:00
renovate[bot]
ab51cd6eae
fix(deps): update module github.com/quic-go/quic-go to v0.61.0 ( #2899 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-28 22:09:24 +08:00
renovate[bot]
4619aa2bc5
fix(deps): update module github.com/nwaples/rardecode/v2 to v2.4.1 ( #2973 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-28 22:07:52 +08:00
UcnacDx2
376cada3d4
fix(drivers/139): optimize login flow with cookie reuse and robust fallback ( #2067 )
...
* fix(drivers/139): optimize login flow with robust tests
* fix(drivers/139): preserve configured HTTP client settings
2026-08-28 20:29:09 +08:00
没空的人
1a6cabf45a
fix(drivers/lanzou): fix file download ( #2960 )
2026-08-24 21:39:39 +08:00
renovate[bot]
0b1e9d0943
fix(deps): update module github.com/blevesearch/bleve/v2 to v2.6.0 ( #2704 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-19 20:38:12 +08:00
quan-ge
18823a23d5
fix(drivers/emby): allow username‑only login ( #2949 )
...
fix(drivers/emby): Emby允许仅用户名登录
Signed-off-by: quan-ge <quan13177379368@qq.com >
2026-08-19 20:11:08 +08:00
kanoshiou
150a90f2ac
feat(strm): add file size filtering for STRM generation ( #2911 )
...
* feat(strm): add file size filtering for STRM generation
- add ParseSize helper function in pkg/utils to parse human-readable byte sizes
- add minFileSize setting field to STRM driver Addition struct
- filter out files below minFileSize threshold during STRM generation
* refactor(strm): use MB as default unit for minFileSize instead of ParseSize
Replace string-based ParseSize auto-conversion with a simple int64 number
field defaulting to MB, consistent with other drivers (Google Drive,
Teldrive). Remove the now-unused ParseSize function and its tests.
2026-08-14 15:34:58 +08:00
Shelken
e80ee006ad
fix(drivers/189): support updated 189 time format ( #2919 )
...
fix(drivers/189): support updated 189 time format with comma, timezone and unicode spaces
189 API 变更了时间返回格式,现有 Time.Unmarshal 无法解析,导致 189pc/189_tv
驱动所有写操作失败(Put → 500)。
新格式有三种形态,现有两个模板均无法覆盖:
1. "Aug 11, 2026, 10:37:18 PM +08" — 年份后多逗号,且自带时区
2. "Aug 12, 2026, 12:35:41\u202fAM +08" — AM/PM 前为 U+202F 窄不换行空格
3. "Aug 12, 2026, 12:35:41\u00a0AM +08" — AM/PM 前为 U+00A0 不换行空格
修复(189pc/help.go、189_tv/help.go 的 Time.Unmarshal):
- 解析前将 U+202F 和 U+00A0 统一替换为普通空格
- 新增模板 "Jan 2, 2006, 3:04:05 PM -07"(带逗号,3 为 12 小时制配 PM)
- 对可能不带时区的串,先试原串再试追加 " +08"(向后兼容)
新增 help_test.go 覆盖:数字日期、旧月份格式、新格式带/不带时区、
U+202F/U+00A0 空格、非法输入。
Fixes #2917
Generated-By: pi 0.84.1
Co-authored-by: Advanced <noreply@pi.dev >
2026-08-14 11:49:51 +08:00
UVJkiNTQ
89077c35a7
feat(setting): add move transfer threads option ( #2907 )
2026-08-08 19:05:49 +08:00
renovate[bot]
cc87e88f03
fix(deps): update module gorm.io/driver/mysql to v1.6.0 ( #819 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
v4.2.5
2026-08-07 23:20:41 +08:00
Ovear
7e9082f90e
fix(stream): allow seeking beyond file size per Go convention ( #2667 )
...
Remove `offset > size` guard from RangeReadReadAtSeeker.Seek and
DynamicReadAtSeeker.Seek. Go's io.Seeker convention allows seeking
past EOF.
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
2026-08-07 22:53:49 +08:00
renovate[bot]
6d4ad58678
fix(deps): update module golang.org/x/net to v0.57.0 ( #2748 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Pikachu Ren <40362270+PIKACHUIM@users.noreply.github.com >
2026-08-07 22:50:11 +08:00
renovate[bot]
d8ad28f5b7
fix(deps): update module github.com/ipfs/go-cid to v0.6.2 ( #2738 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-07 22:44:19 +08:00
renovate[bot]
2e27852952
fix(deps): update azure-sdk-for-go monorepo ( #2700 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-07 22:43:31 +08:00
renovate[bot]
194f941f15
fix(deps): update module golang.org/x/sys to v0.47.0 ( #2751 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-07 22:42:26 +08:00