tag:github.com,2008:https://github.com/Sync-in/server/releases 2026-03-13T15:42:30Z tag:github.com,2008:Repository/1019052443/v2.1.0 2026-03-15T17:44:09Z <h2>⭐ Highlights</h2> <ul> <li>🎨 Major frontend UI refresh for a cleaner, more modern experience</li> <li>🔐 New OIDC provider toggle: <code>security.supportPKCE</code> for PKCE flow control</li> <li>🐳 Docker enhancement: new <code>FORCE_PERMISSIONS</code> env var to enforce data file permissions (<a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/7185/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/7185">@7185</a>)</li> <li>🌍 Internationalization update: Dutch (<code>nl</code>) locale added (<a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Stephan-P/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Stephan-P">@Stephan-P</a>)</li> <li>🕒 Database reliability: MySQL connections now consistently use UTC timezone</li> <li>📂 File handling hardening: better PDF cleanup and safer directory scanning (skips unreadable paths)</li> <li>➕ Additional quality and stability improvements across backend and frontend</li> </ul> <p>➡️ <a href="https://sync-in.com/news/sync-in-2-1-ui-refresh" rel="nofollow">Read the release announcement</a></p> <h3>Features</h3> <ul> <li><strong>frontend</strong> refresh UI (<a href="https://github.com/Sync-in/server/pull/127" data-hovercard-type="pull_request" data-hovercard-url="/Sync-in/server/pull/127/hovercard">#127</a>)</li> <li><strong>backend:auth:</strong> add toggle for security.supportPKCE in OIDC provider (<a href="https://github.com/Sync-in/server/commit/d90cbf73e63336865c7aee91f3d8c7e727522cc1">d90cbf7</a>)</li> <li><strong>docker:</strong> add FORCE_PERMISSIONS variable to set permissions on data files (<a href="https://github.com/Sync-in/server/commit/1eb57d60d1937be3261b0f4a3aad3082092d40a2">1eb57d6</a>)</li> <li><strong>frontend:i18n:</strong> add nl (<a href="https://github.com/Sync-in/server/commit/4c3a0cb8695d6387259ee48273b66faba938f8ce">4c3a0cb</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>backend:database:</strong> ensure MySQL connection uses UTC timezone (<a href="https://github.com/Sync-in/server/commit/e7d2ed9d2a09ad8374f61f6d33b7fec60592e428">e7d2ed9</a>)</li> <li><strong>backend:files:</strong> avoid buffer copy and ensure PDF document cleanup (<a href="https://github.com/Sync-in/server/commit/f28c71bdf53ba524d6745746b805cd741776324f">f28c71b</a>)</li> <li><strong>backend:files:</strong> skip unreadable directories when walking for size and entry counts (<a href="https://github.com/Sync-in/server/commit/6b0a6a70e70425ae2d0df2fdbb3b19c41ac8bd95">6b0a6a7</a>)</li> <li><strong>frontend:recents:</strong> move user avatar tooltip container to body to fix overlap with card (<a href="https://github.com/Sync-in/server/commit/50299116b627817233021069a641a4514258f37b">5029911</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/1019052443/v2.0.0 2026-02-09T23:27:38Z <h2>⭐ Highlights</h2> <ul> <li>🆔 OpenID Connect (OIDC) authentication support</li> <li><g-emoji class="g-emoji" alias="warning">⚠️</g-emoji> Breaking change: authentication configuration renamed and refactored</li> <li>🔐 New authentication architecture enabling Desktop &amp; CLI registration via OIDC</li> <li>🏢 Advanced LDAP support (service bind, admin break-glass, DN/CN, auto user &amp; permissions)</li> <li>🔑 Support for OTP recovery codes and application-based client registration</li> <li>🧩 Improved configuration validation and error diagnostics</li> <li>✨ User experience improvements (recent items redesign, file rename behavior)</li> <li>📊 JSON logging output for improved observability</li> <li>➕ And many other improvements and refinements</li> </ul> <p>➡️ <a href="https://sync-in.com/news/sync-in-2-oidc" rel="nofollow">Read the release announcement</a></p> <h3>⚠ BREAKING CHANGES</h3> <ul> <li><strong>auth:</strong> rename method to provider in AuthConfig and replace authMethod with authProvider for naming consistency (<a href="https://github.com/Sync-in/server/commit/9d187e06f848b6c56f0dfa6d904f22e71f485012">9d187e0</a>)</li> <li><strong>backend:auth:ldap:</strong> move adminGroup to options (<a href="https://github.com/Sync-in/server/commit/96d52c95585eef6a6c8498f14a1ba07dce44f6cb">96d52c9</a>)</li> </ul> <h3>Features</h3> <ul> <li><strong>auth:oidc:</strong> enhance OIDC configuration (<a href="https://github.com/Sync-in/server/commit/8bcf35d2639c6067d53c13cafb14897155c952c5">8bcf35d</a>)</li> <li><strong>auth:oidc:</strong> revise authentication flow logic (<a href="https://github.com/Sync-in/server/commit/abb9979ed8f1d00aa241876b4b0519f013f88bfc">abb9979</a>)</li> <li><strong>auth:sync:</strong> introduce <code>registerWithAuth</code> to enable desktop client registration from external process (OIDC) (<a href="https://github.com/Sync-in/server/commit/b6525ecd8b5e524ca390decde7c969395a5ad1ba">b6525ec</a>)</li> <li><strong>auth:</strong> implement OIDC authentication support and refactor auth providers (<a href="https://github.com/Sync-in/server/commit/28bbf1df2f2ab7e9060cc48b5893708fb83a123e">28bbf1d</a>)</li> <li><strong>auth:</strong> refactor authentication services and add desktop client registration support (<a href="https://github.com/Sync-in/server/commit/08c6e0faf84d3131ab9462052a60c73ab59b031e">08c6e0f</a>)</li> <li><strong>auth:</strong> support desktop app OIDC authentication flow (<a href="https://github.com/Sync-in/server/commit/0d6963f95a86cae7e9283557a2e5961108ead65e">0d6963f</a>)</li> <li><strong>backend:auth:ldap:</strong> add service bind support, adminGroup DN/CN handling, optimized search flow, tests, and updated docs (<a href="https://github.com/Sync-in/server/commit/f7b9d0f22fa8ddf815fbde1bc25279bee225b792">f7b9d0f</a>)</li> <li><strong>backend:auth:ldap:</strong> add autoCreateUser and autoCreatePermissions (<a href="https://github.com/Sync-in/server/commit/96d52c95585eef6a6c8498f14a1ba07dce44f6cb">96d52c9</a>)</li> <li><strong>backend:auth:</strong> add LDAP/OIDC local password fallback and admin break-glass access (<a href="https://github.com/Sync-in/server/commit/23a93b5ae104e669a58947590959f2f9a06f2d33">23a93b5</a>)</li> <li><strong>backend:config:</strong> improve error messages for environment config validation (<a href="https://github.com/Sync-in/server/commit/a5df5295f0f9047e77fd749bba9a4cb2e523bebe">a5df529</a>)</li> <li><strong>backend:sync:</strong> add support for TOTP recovery codes during client registration (<a href="https://github.com/Sync-in/server/commit/3cb3ea41eefe7625497a699dd12c55da85007188">3cb3ea4</a>)</li> <li><strong>backend:sync:</strong> improve sync path error handling and enforce subdirectory selection (<a href="https://github.com/Sync-in/server/commit/549ada3a68dc853ec7e4beb987bcdfba9ebbe033">549ada3</a>)</li> <li><strong>backend:</strong> add <code>jsonOutput</code> option to logger (<a href="https://github.com/Sync-in/server/commit/02cbe0497d0b973f4b321f1b7d113813eb86e021">02cbe04</a>)</li> <li><strong>frontend:spaces:</strong> improve server connection error handling and UI feedback (<a href="https://github.com/Sync-in/server/commit/097b2307a586b4366da026508b592a964adbc30d">097b230</a>)</li> <li><strong>frontend/backend:</strong> add <code>client</code> auth scope for password-based apps to register servers across desktop apps and CLI (<a href="https://github.com/Sync-in/server/commit/5f131bff00519264f8513af4f67210c30b7e9234">5f131bf</a>)</li> <li><strong>frontend:</strong> allow filename rename validation on blur (<a href="https://github.com/Sync-in/server/commit/da930b8be9d5a2920ccea8c468a761dce68436f7">da930b8</a>)</li> <li><strong>frontend:</strong> restyle recents widget (<a href="https://github.com/Sync-in/server/commit/9845502df5d71d69b59a3df5fed9a6b3916acd3e">9845502</a>)</li> <li><strong>frontend:</strong> update widget badge styles and color scheme (<a href="https://github.com/Sync-in/server/commit/10feb97a2b45cf982ad2c3de12857df5fac3b358">10feb97</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>backend:webdav:</strong> ensure lock paths in headers are decoded correctly (<a href="https://github.com/Sync-in/server/commit/ceb2f38803270072c49b887de6be8988b9041f72">ceb2f38</a>)</li> <li><strong>backend:webdav:</strong> set correct http status line (<a href="https://github.com/Sync-in/server/commit/a651fc33d5081a2fdc808dc00468a41699280da6">a651fc3</a>)</li> <li><strong>frontend:routes:</strong> remove redundant <code>canActivateChild</code> guard from app routes (<a href="https://github.com/Sync-in/server/commit/3b5a80a762373047217234456f347c80e21d77e2">3b5a80a</a>)</li> <li><strong>frontend:spaces:</strong> remove tap directive keyboard handler blocking spaces in edit input and preserve whitespace in displayed file name (<a href="https://github.com/Sync-in/server/commit/e0b328b4222b3aec9b99476f3de170a2a9a5c7ac">e0b328b</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/1019052443/v1.11.0 2026-01-21T00:06:50Z <h3>Security</h3> <ul> <li><strong>backend:</strong> upgrade tar to 7.5.4 (<a title="GHSA-8qq5-rm4j-mr97" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-8qq5-rm4j-mr97/hovercard" href="https://github.com/advisories/GHSA-8qq5-rm4j-mr97">GHSA-8qq5-rm4j-mr97</a>) (<a href="https://github.com/Sync-in/server/commit/a42c107904852f32db3ede01b7ee5a0a039bd6bf">a42c1079</a>)</li> </ul> <h3>Features</h3> <ul> <li><strong>frontend:</strong> add delayed auto-collapse functionality for right sidebar (<a href="https://github.com/Sync-in/server/commit/315bad25980d1b7596f86d4cd4f9045137bf7d4d">315bad2</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/1019052443/v1.10.1 2026-01-12T00:56:50Z <h3>Bug Fixes</h3> <ul> <li><strong>auth:webdav</strong> basic auth fails with ":" in password (<a href="https://github.com/Sync-in/server/issues/104" data-hovercard-type="pull_request" data-hovercard-url="/Sync-in/server/pull/104/hovercard">#104</a>) (<a href="https://github.com/Sync-in/server/commit/9671b71e5a4fcbfb659b5eb1e2818f55f3df7976">9671b71</a>)</li> <li><strong>backend:comments:</strong> refine file path query for better handling of space roots (<a href="https://github.com/Sync-in/server/commit/5b0c8fff0aa3eba9d3e0308e2ae012992f1fa91b">5b0c8ff</a>)</li> <li><strong>backend:webdav:</strong> treat PUT requests as binary streams to avoid body parsing (<a href="https://github.com/Sync-in/server/commit/edc291ccc634e03843c4db9f7000969e6fc9946f">edc291c</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/1019052443/v1.10.0 2026-01-07T10:04:24Z <h2>⭐ Highlights</h2> <ul> <li> <p>📝 <strong>Collabora Online integration</strong><br> Collaborative online editing based on open standards, with native support for OpenDocument formats and compatibility with Microsoft Office formats.</p> </li> <li> <p>🔀 <strong>Intelligent multi-editor management</strong><br> Automatic selection of the most appropriate editor based on the document format, with the ability to set a default editor.</p> </li> <li> <p>🔗 <strong>Enhanced public links</strong><br> Access, view, and edit documents directly through public links, depending on formats and access rights.</p> </li> <li> <p>⚙️ <strong>Platform evolution</strong><br> Migration to <strong>Node.js 24</strong>, while maintaining compatibility with <strong>Node.js 22</strong>, improving stability and performance.</p> </li> </ul> <h3>Features</h3> <ul> <li><strong>backend/frontend:files:</strong> improve file locking logic, enhance compatibility across apps such as WebDAV and Collabora and OnlyOffice (<a href="https://github.com/Sync-in/server/commit/9eb5a17b26cc6c0928be6a16c71002e9bd4082de">9eb5a17</a>)</li> <li><strong>files:</strong> add Collabora Online integration to Docker setup (<a href="https://github.com/Sync-in/server/commit/abe4fa4f89edbb79265d3cdb94aa01725a35ddce">abe4fa4</a>)</li> <li><strong>files:</strong> collabora online integration (<a href="https://github.com/Sync-in/server/commit/dabeff62d522cd2af4acb93c20d287221e0f2c30">dabeff6</a>)</li> <li><strong>files:</strong> Collabora Online integration, multi-editor support, and improved file locking (<a href="https://github.com/Sync-in/server/commit/e6bedc1bff837ce477ff4e791f78e66e038209b2">e6bedc1</a>)</li> <li><strong>files:</strong> improve editor selection and add editor preference support (<a href="https://github.com/Sync-in/server/commit/8fea357925a6671393d4f02b1ff790134ca87912">8fea357</a>)</li> <li><strong>frontend/backend:files:</strong> simplify file opening flow and improve readonly handling (<a href="https://github.com/Sync-in/server/commit/6563f445441c755f392508d98caa9ba261e5c2d7">6563f44</a>)</li> <li><strong>links:</strong> allow direct access to spaces via public links; add file preview/edit/download; improve password validation (<a href="https://github.com/Sync-in/server/commit/5102e9ae6b17b9924969839c69b7cbdc2421c518">5102e9a</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>backend:files-scheduler:</strong> correct ordering of recent files (<a href="https://github.com/Sync-in/server/commit/aea6bcdf79763bf392b105e1c806bb70da0f00be">aea6bcd</a>)</li> <li><strong>backend:shares:</strong> clear cached permissions when share link permissions are changed (<a href="https://github.com/Sync-in/server/commit/95a455b07d44ac4761e1f9583f8be7d90939e614">95a455b</a>)</li> <li><strong>backend:spaces:</strong> apply MODIFY permission for PUT requests on existing files instead of ADD when the resource exists (<a href="https://github.com/Sync-in/server/commit/e73ae93251e090f4f9f4aaf455f5098a3ee47a4b">e73ae93</a>)</li> <li><strong>backend:webdav:</strong> properly handle HEAD requests on directories, match lock source file when the file is a space root and extend lock owner information (<a href="https://github.com/Sync-in/server/commit/f1f4836d4038eb3960a1f08cc8579176d05d1b55">f1f4836</a>)</li> <li><strong>docker:collabora:</strong> add capabilities for debian based hosts (<a href="https://github.com/Sync-in/server/commit/9275df653acde8a8abfa6dad5c92859a064021be">9275df6</a>)</li> <li><strong>frontend:auth:</strong> ensure server config is initialized during authentication to prevent OTP prompt from not appearing on desktop (<a href="https://github.com/Sync-in/server/commit/e0053ae608954be7a1a85b7736e150c03ecb43cb">e0053ae</a>)</li> <li><strong>frontend:files:</strong> adjust badge styles to use <code>white-space-normal</code> for consistent text wrapping (<a href="https://github.com/Sync-in/server/commit/615ea00bc79efe0cb3afa4e905dc3e0226336b84">615ea00</a>)</li> <li><strong>frontend:files:</strong> correct writeable condition (<a href="https://github.com/Sync-in/server/commit/288193e3d8f0afb95db9212a33579fb33867bb30">288193e</a>)</li> <li><strong>frontend:files:</strong> load tasks only when a user is logged in to prevent interceptor redirects when refreshing a public link URL (<a href="https://github.com/Sync-in/server/commit/bda58d6094659231ead9c7c51878e57ed13b3d87">bda58d6</a>)</li> <li><strong>frontend:i18n:</strong> remove explicit 'en' locale definition to prevent bs-datepicker translation conflicts (<a href="https://github.com/Sync-in/server/commit/13529f1b7c68e468c3aa195c81c4ce20bcd31c66">13529f1</a>)</li> <li><strong>frontend:spaces:</strong> display deactivation date when space is disabled (<a href="https://github.com/Sync-in/server/commit/7df2535f3f54e3ec6bced3525b16fb90edf1560b">7df2535</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/1019052443/v1.9.6 2025-12-16T23:59:16Z <h3>Bug Fixes</h3> <ul> <li><strong>backend:files:</strong> skip adding recents for trashed files (<a href="https://github.com/Sync-in/server/commit/c445196914b2d351fba9218698a24496b1d6036c">c445196</a>)</li> <li><strong>backend:schedulers:</strong> resolve scheduled methods being skipped because of Timeout decorator overlap (<a href="https://github.com/Sync-in/server/commit/50f4140a7b0b478e6b499ea8884b43f13595bb71">50f4140</a>)</li> <li><strong>frontend:files:</strong> enable autoplay for video in media viewer component (<a href="https://github.com/Sync-in/server/commit/20fe25fba00987994076d09489febd5593e08cef">20fe25f</a>)</li> <li><strong>frontend:files:</strong> remove hidden class from buttons for consistent visibility across breakpoints (<a href="https://github.com/Sync-in/server/commit/a60538ad01c675dacdac7ed4d80ca2bdf5f369ba">a60538a</a>)</li> <li><strong>frontend:files:</strong> update file metadata timestamps on save and align OnlyOffice state change handlers (<a href="https://github.com/Sync-in/server/commit/db768e14452f4712df9f443350c214e0700b7270">db768e1</a>)</li> <li><strong>frontend:search:</strong> improve search input layout and update filter button visibility for responsiveness (<a href="https://github.com/Sync-in/server/commit/09ebce612fa2d72699a4d60bf9896f8e3c0fc4e4">09ebce6</a>)</li> <li><strong>frontend:spaces:</strong> show disabled space message to space managers (<a href="https://github.com/Sync-in/server/commit/f8bcdf7fdd4b25abc2ba4b74715adbb0ae04a3e3">f8bcdf7</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/1019052443/v1.9.5 2025-12-16T22:55:43Z <p>chore(release): 1.9.5</p> johaven tag:github.com,2008:Repository/1019052443/v1.9.4 2025-12-16T22:21:31Z <p>chore(release): 1.9.4</p> johaven tag:github.com,2008:Repository/1019052443/v1.9.3 2025-12-07T00:45:25Z <h3>Security Fixes</h3> <ul> <li><strong>backend:security:</strong> prevent stored XSS by serving files with <code>Content-Disposition: attachment</code> to avoid arbitrary JavaScript execution in the browser (<a href="https://github.com/Sync-in/server/commit/a6276d067725637310e4e83a3eee337aae81f439">a6276d0</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>ci:</strong> update Dockerfile to use alpine3.22 to avoid errors with busybox-1.37.0-r29 (<a href="https://github.com/Sync-in/server/commit/ede1bec4b3c33f17c3b94c32d68c4b642ee710c0">ede1bec</a>)</li> <li><strong>backend:users:</strong> clear whitelist caches when group visibility changes (<a href="https://github.com/Sync-in/server/commit/071c3aed68d3bdacead571d39a1f4006b2380915">071c3ae</a>)</li> <li><strong>frontend:files:</strong> fix DataTransfer usage after async operations and delay overwrite until analysis completes to restore overwrite on dropped files (<a href="https://github.com/Sync-in/server/commit/d9935e5a3887448635c30fd49f22657461177610">d9935e5</a>)</li> <li><strong>frontend:styles:</strong> add min-width on app-auth background class (<a href="https://github.com/Sync-in/server/commit/dffd5e5c7a1a65994970bedf33a95dd00827aa94">dffd5e5</a>)</li> </ul> <h3>Community Highlights ❤️</h3> <p>We would like to thank <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/x0root/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/x0root">@x0root</a> for reporting this vulnerability and helping improve the security of the project.</p> github-actions[bot] tag:github.com,2008:Repository/1019052443/v1.9.2 2025-12-06T23:57:06Z <p>chore(release): 1.9.2</p> johaven