What's Changed

Features

• feat: add cert configuration by @Renizmy in #970

Bug Fixes

• fix: ci job authz by @Renizmy in #993

Dependencies

• deps: Bump the minor-and-patch group in /web with 7 updates by @dependabot[bot] in #988
• deps: Bump the dev-dependencies group in /web with 3 updates by @dependabot[bot] in #987
• deps: Bump the minor-and-patch group with 6 updates by @dependabot[bot] in #990

Other Changes

• chore: update readme by @yohanleb in #958
• chore: update readme by @yohanleb in #973
• ci: trigger build on each commit on main by @Renizmy in #974
• ci: add trivy by @Renizmy in #966
• chore: fix module name and imports by @yohanleb in #976
• chore: update readme and default image registry by @yohanleb in #977
• ci: add hadolint by @Renizmy in #980
• ci: trivy moove configuration file by @Renizmy in #981
• chore: refactor and add tests by @yohanleb in #992
• ci: refacto build by @Renizmy in #982
• ci: auto labeler init by @Renizmy in #994
• ci: alpha releases shouldn't be shown has latest release by @Renizmy in #1000
• chore: revert labels on dependabot by @yohanleb in #1002

Full Changelog: v0.4.0...v0.4.1

What's Changed

• fix: config.json should be served from memory by @yohanleb in #903
• feature: add local activity provider by @Renizmy in #901
• feat: add file expiration by @yohanleb in #900
• feat: redesign upload dialog by @yohanleb in #907
• fix: loki error on boot and healthcheck by @yohanleb in #909
• docker-compose:dev: Bump axllent/mailpit from v1.29.0 to v1.29.1 in /deployments/dev in the minor-and-patch group by @dependabot[bot] in #915
• feat: redesign upload progress component by @yohanleb in #910
• chore: silent useless linter rule by @yohanleb in #918
• chore: refactor emails and reduce boilerplate by @yohanleb in #917
• feat: add local queuing system by @Renizmy in #908
• feature : Garbage collector by @Renizmy in #905
• deps: Bump the dev-dependencies group across 1 directory with 7 updates by @dependabot[bot] in #921
• deps: Bump the minor-and-patch group across 1 directory with 5 updates by @dependabot[bot] in #922
• deps: Bump the minor-and-patch group across 1 directory with 11 updates by @dependabot[bot] in #923
• feat: add local notifier by @Renizmy in #924
• docker-compose:dev: Bump grafana/loki from 3.6.5 to 3.6.6 in /deployments/dev in the minor-and-patch group by @dependabot[bot] in #920
• docker-compose:local-full: Bump grafana/loki from 3.6.5 to 3.6.6 in /deployments/local/full in the minor-and-patch group by @dependabot[bot] in #919
• deps: Bump github.com/pressly/goose/v3 from 3.26.0 to 3.27.0 in the minor-and-patch group by @dependabot[bot] in #928
• deps: Bump the dev-dependencies group in /web with 2 updates by @dependabot[bot] in #929
• deps: Bump the minor-and-patch group in /web with 4 updates by @dependabot[bot] in #930
• feat: add UPX binary compression and modernize build by @Renizmy in #927
• feat: add in memory cache by @yohanleb in #925
• fix npm version by @Renizmy in #935
• fix: file expiration date picker placeholder by @Renizmy in #936
• ci: restrict ci token access by @Renizmy in #937
• feat: add upload/download notifications by @yohanleb in #931
• feat: invite migrate routes by @Renizmy in #939
• feat: add config deprecation by @Renizmy in #938
• fix: dockerfile binary permission by @Renizmy in #940
• deps: Bump the minor-and-patch group with 5 updates by @dependabot[bot] in #944
• deps: Bump the dev-dependencies group in /web with 2 updates by @dependabot[bot] in #942
• deps: Bump the minor-and-patch group across 1 directory with 7 updates by @dependabot[bot] in #947
• feat: add sqlite db by @Renizmy in #932
• fix: scroll on bucket list view by @yohanleb in #950
• docker-compose:local-full: Bump grafana/loki from 3.6.6 to 3.6.7 in /deployments/local/full in the minor-and-patch group by @dependabot[bot] in #949
• docker-compose:dev: Bump the minor-and-patch group in /deployments/dev with 2 updates by @dependabot[bot] in #948
• fix: ci terraform deps analysis by @Renizmy in #945
• deps: Bump i18next-cli from 1.47.3 to 1.47.6 in /web in the dev-dependencies group by @dependabot[bot] in #954
• fix: fatal error on startup by @yohanleb in #951
• fix: scroll on bucket list view and activity by @yohanleb in #955
• fix: folder activity not returned by @yohanleb in #956
• fix: delete bucket card colour in dark mode by @yohanleb in #957
• ci: fix arm build by @Renizmy in #960
• fix: components poorly rendered on mobile by @yohanleb in #962
• fix: smtp tls configuration by @Renizmy in #963
• fix: address feedback from demo by @yohanleb in #964
• ci: remove manual docker trigger build by @Renizmy in #968
• ci: add image signing by @Renizmy in #967
• feat: embed static content by @Renizmy in #941
• fix: jwt var shadowing and audience lengh validation by @Renizmy in #965
• ci: fix cosign action version by @Renizmy in #969
• fix: cosign sign by digest instead of tag name by @Renizmy in #971
• fix: downgrade cosign installer version by @Renizmy in #972
• chore: update readme by @yohanleb in #958
• chore: update readme by @yohanleb in #973
• ci: trigger build on each commit on main by @Renizmy in #974
• ci: add trivy by @Renizmy in #966
• chore: fix module name and imports by @yohanleb in #976
• chore: update readme and default image registry by @yohanleb in #977
• feat: add cert configuration by @Renizmy in #970
• ci: add hadolint by @Renizmy in #980
• ci: trivy moove configuration file by @Renizmy in #981
• deps: Bump the minor-and-patch group in /web with 7 updates by @dependabot[bot] in #988
• deps: Bump the dev-dependencies group in /web with 3 updates by @dependabot[bot] in #987
• deps: Bump the minor-and-patch group with 6 updates by @dependabot[bot] in #990
• chore: refactor and add tests by @yohanleb in #992
• ci: refacto build by @Renizmy in #982
• fix: ci job authz by @Renizmy in #993

Full Changelog: v0.3.1...v0.4.1-alpha

Features

• feature: add local activity provider by @Renizmy in #901
• feat: add file expiration by @yohanleb in #900
• feat: redesign upload dialog by @yohanleb in #907
• feat: redesign upload progress component by @yohanleb in #910
• feat: add local queuing system by @Renizmy in #908
• feature : Garbage collector by @Renizmy in #905
• feat: add local notifier by @Renizmy in #924
• feat: add UPX binary compression and modernize build by @Renizmy in #927
• feat: add in memory cache by @yohanleb in #925
• feat: add upload/download notifications by @yohanleb in #931
• feat: invite migrate routes by @Renizmy in #939
• feat: add config deprecation by @Renizmy in #938
• feat: add sqlite db by @Renizmy in #932
• feat: embed static content by @Renizmy in #941

Bug Fixes

• fix: config.json should be served from memory by @yohanleb in #903
• fix: loki error on boot and healthcheck by @yohanleb in #909
• fix npm version by @Renizmy in #935
• fix: file expiration date picker placeholder by @Renizmy in #936
• fix: dockerfile binary permission by @Renizmy in #940
• fix: scroll on bucket list view by @yohanleb in #950
• fix: ci terraform deps analysis by @Renizmy in #945
• fix: fatal error on startup by @yohanleb in #951
• fix: scroll on bucket list view and activity by @yohanleb in #955
• fix: folder activity not returned by @yohanleb in #956
• fix: delete bucket card colour in dark mode by @yohanleb in #957
• fix: components poorly rendered on mobile by @yohanleb in #962
• fix: smtp tls configuration by @Renizmy in #963
• fix: address feedback from demo by @yohanleb in #964
• fix: jwt var shadowing and audience lengh validation by @Renizmy in #965
• fix: cosign sign by digest instead of tag name by @Renizmy in #971
• fix: downgrade cosign installer version by @Renizmy in #972

Chores & Refactoring

• chore: silent useless linter rule by @yohanleb in #918
• chore: refactor emails and reduce boilerplate by @yohanleb in #917
• ci: restrict ci token access by @Renizmy in #937
• ci: fix arm build by @Renizmy in #960
• ci: remove manual docker trigger build by @Renizmy in #968
• ci: add image signing by @Renizmy in #967
• ci: fix cosign action version by @Renizmy in #969

Dependencies (Frontend)

• deps: Bump the dev-dependencies group across 1 directory with 7 updates by @dependabot[bot] in #921
• deps: Bump the dev-dependencies group in /web with 2 updates by @dependabot[bot] in #929
• deps: Bump the minor-and-patch group in /web with 4 updates by @dependabot[bot] in #930
• deps: Bump the dev-dependencies group in /web with 2 updates by @dependabot[bot] in #942
• deps: Bump i18next-cli from 1.47.3 to 1.47.6 in /web in the dev-dependencies group by @dependabot[bot] in #954

Dependencies (Backend)

• docker-compose:dev: Bump axllent/mailpit from v1.29.0 to v1.29.1 in /deployments/dev in the minor-and-patch group by @dependabot[bot] in #915
• deps: Bump the minor-and-patch group across 1 directory with 5 updates by @dependabot[bot] in #922
• deps: Bump the minor-and-patch group across 1 directory with 11 updates by @dependabot[bot] in #923
• docker-compose:dev: Bump grafana/loki from 3.6.5 to 3.6.6 in /deployments/dev in the minor-and-patch group by @dependabot[bot] in #920
• docker-compose:local-full: Bump grafana/loki from 3.6.5 to 3.6.6 in /deployments/local/full in the minor-and-patch group by @dependabot[bot] in #919
• deps: Bump github.com/pressly/goose/v3 from 3.26.0 to 3.27.0 in the minor-and-patch group by @dependabot[bot] in #928
• deps: Bump the minor-and-patch group with 5 updates by @dependabot[bot] in #944
• deps: Bump the minor-and-patch group across 1 directory with 7 updates by @dependabot[bot] in #947
• docker-compose:local-full: Bump grafana/loki from 3.6.6 to 3.6.7 in /deployments/local/full in the minor-and-patch group by @dependabot[bot] in #949
• docker-compose:dev: Bump the minor-and-patch group in /deployments/dev with 2 updates by @dependabot[bot] in #948

v0.3.1 Release Notes

Bug Fixes

• fix: long boot time for local stacks by @Renizmy in #895
• fix: set secure cookie only on https by @yohanleb in #904
• fix: typo in dependabot file by @yohanleb in #897

Chores & Refactoring

• chore: update readme by @yohanleb in #884
• chore: reduce dependabot noise by @yohanleb in #896

Dependencies (Frontend)

• bump @types/react from 19.2.8 to 19.2.13
• bump @types/node from 25.2.0 to 25.2.1
• bump @tanstack/react-router from 1.158.0 to 1.159.4
• bump @tanstack/router-plugin from 1.158.0 to 1.159.4
• bump @tanstack/react-devtools from 0.9.4 to 0.9.5
• bump i18next from 25.8.1 to 25.8.4
• bump i18next-cli from 1.41.4 to 1.42.5
• bump knip from 5.83.0 to 5.83.1

Dependencies (Backend)

• bump github.com/go-chi/chi/v5 from 5.2.4 to 5.2.5
• bump google.golang.org/api from 0.264.0 to 0.265.0
• bump golang.org/x/oauth2 from 0.34.0 to 0.35.0

Full Changelog: v0.3.0...v0.3.1

v0.3.0 Release Notes

Features

• feat: add instance profiles by @yohanleb in #765
• feat: add generic s3 provider by @Renizmy in #860
• feat: add configurable max upload size by @yohanleb in #870
• feat: add trash worker by @yohanleb in #869

Bug Fixes

• fix: trash worker not removing file from storage for generic s3 provider by @yohanleb in #877
• fix: ignored minio bucket events by @yohanleb in #879
• fix: endpoint configuration by @Renizmy in #880
• fix: default configuration not set by @yohanleb in #881

Chores & Refactoring

• chore: upgrade Go version to 1.25.6 by @yohanleb in #834
• chore: update readme by @yohanleb in #876

Dependencies (Frontend)

• bump react-hook-form from 7.70.0 to 7.71.1
• bump @types/react from 19.2.7 to 19.2.8
• bump i18next-cli from 1.34.1 to 1.41.4
• bump vitest from 4.0.16 to 4.0.18
• bump @tanstack/react-query from 5.90.16 to 5.90.20
• bump @tanstack/router-plugin from 1.146.3 to 1.158.0
• bump react-i18next from 16.5.1 to 16.5.3
• bump @types/node from 25.0.3 to 25.2.0
• bump @tanstack/react-router-devtools from 1.147.1 to 1.158.0
• bump @tanstack/react-devtools from 0.9.2 to 0.9.4
• bump react-dom from 19.2.3 to 19.2.4
• bump i18next from 25.7.4 to 25.8.1
• bump prettier from 3.7.4 to 3.8.1
• bump @testing-library/react from 16.3.1 to 16.3.2
• bump @vitejs/plugin-react from 5.1.2 to 5.1.3
• bump knip from 5.80.2 to 5.83.0
• bump lucide-react from 0.562.0 to 0.563.0
• bump jsdom from 27.4.0 to 28.0.0

Dependencies (Backend)

• bump google.golang.org/api from 0.261.0 to 0.264.0
• bump cloud.google.com/go/storage from 1.59.1 to 1.59.2
• bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.1 to 1.96.0
• bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1
• bump github.com/knadh/koanf/v2 from 2.3.0 to 2.3.2
• bump github.com/aws/aws-sdk-go-v2/config from 1.32.6 to 1.32.7
• bump github.com/minio/minio-go/v7 from 7.0.97 to 7.0.98
• bump github.com/redis/rueidis from 1.0.69 to 1.0.71

Infrastructure

• bump axllent/mailpit from v1.28.3 to v1.29.0

Full Changelog: v0.2.0...v0.3.0

v0.2.0 Release Notes

Features

• feat: add admin page to manage users by @yohanleb in #743
• feat: add admin dashboard with statistics by @yohanleb in #746
• feat: add admin platform activity view by @yohanleb in #747
• feat: add admin buckets view by @yohanleb in #752
• feature: add MFA TOTP Devices by @Renizmy in #754
• feat: upgrade rustfs for local and dev deployment by @yohanleb in #789
• feature: wrap invite attempts into a dedicated lock by @Renizmy in #780
• feature: include mfa in password reset flow by @Renizmy in #807

Bug Fixes

• fix: MFA flow, errors and low hanging fruits by @yohanleb in #790
• fix: db record not found error by @yohanleb in #792
• fix: flaky ci pipeline by @yohanleb in #806
• fix: mfa device duplicate name check by @yohanleb in #828

Chores & Refactoring

• chore: refactor admin pages and address feedback by @yohanleb in #760
• chore: refactor and simplify mfa components by @yohanleb in #791
• chore: improve frontend quality and enforce it by @yohanleb in #793

Dependencies (Frontend)

• bump @tanstack/react-router from 1.143.2 to 1.146.2
• bump @tanstack/router-plugin from 1.143.2 to 1.146.3
• bump @tanstack/react-router-devtools from 1.143.2 to 1.146.2
• bump @tanstack/react-query from 5.90.12 to 5.90.16
• bump @tanstack/react-devtools from 0.8.4 to 0.9.2
• bump @testing-library/react from 16.3.0 to 16.3.1
• bump react-day-picker from 9.12.0 to 9.13.0
• bump react-i18next from 16.5.0 to 16.5.1
• bump react-hook-form from 7.69.0 to 7.70.0
• bump i18next from 25.7.3 to 25.7.4
• bump jsdom from 27.3.0 to 27.4.0
• bump prettier from 3.6.2 to 3.7.4
• bump vite from 7.3.0 to 7.3.1
• bump @trivago/prettier-plugin-sort-imports from 6.0.0 to 6.0.2

Dependencies (Backend)

• bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.94.0 to 1.95.1
• bump github.com/go-playground/validator/v10 from 10.30.0 to 10.30.1
• bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.4
• bump google.golang.org/api from 0.258.0 to 0.261.0
• bump cloud.google.com/go/storage from 1.58.0 to 1.59.1

Infrastructure

• bump axllent/mailpit from v1.27.10 to v1.28.3
• bump grafana/loki from 3.5 to 3.6

Full Changelog: v0.1.0...v0.2.0

Safebucket v0.1.0 - Self-hosted file sharing

Hello! We're two friends working in the tech industry, and we created a simple,
S3 provider-agnostic and open-source alternative to Wetransfer, Dropbox, and Lockself.

Features:

• Secure File Sharing: Create a bucket to start sharing files and folders with colleagues, customers, and teams
• Role-Based Access Control: Fine grained sharing permissions with owner, contributor, and viewer roles
• SSO Integration: Single sign-on with any/multiple auth providers and manage their sharing capabilities
• User Invitation System: Invite external collaborators via email
• Real-Time Activity Tracking: Monitor file sharing activity with comprehensive audit trails
• Multi-Storage Integration: Store and share files across AWS S3, GCP Cloud Storage, MinIO or RustFS (no local storage!)
• Highly Scalable: Event-driven and cloud native architecture for high-performance operations

Upcoming features:

• Sharing options: Password-protected files (client side encryption), expiration dates, and max downloads
• MFA
• Quick share
• GCP and Azure deployments
• Quotas
• Admin dashboard

Tech stack: Go 1.24 backend, React 19 frontend

We're open to feedback, contributions, and questions.
Let us know what features you'd actually want to see and help us prioritise the roadmap!

Full Changelog: https://github.com/safebucket/safebucket/commits/v0.1.0