AList Beta Version

   🚀 Features

• drivers/139: Optimize login credential flow  -  by ucnacdx2 (51818)
• url_tree: Support custom download params with magic variables  -  by 千石 (e8f5d)

   🐞 Bug Fixes

• V-001 security vulnerability  -  by orbisai0security (dcefe)
• Sanitize shell/subprocess call in util.go  -  by orbisai0security (6554b)
• 123pan: Update domain www.123pan.com -> yun.123pan.com  -  by 千石 in #9571 (3adad)

    View changes on GitHub

v3.61.0

   🚀 Features

• Add GuangYaPan offline download  -  by @okatu-loli in #9505 (fc26c)
• 139-share:
  • Support mounting and HLS playback  -  by ** 139云盘分享链接在M3U8中使用相对TS路径，导致代理请求无法正常解析。此外，AList下载器会严格校验文件元数据与实际流的大小一致性，导致动态生成的M3U8因长度不匹配触发416或EOF错误。我们采用了1MB填充技术以兼容AList的严格校验，且1MB足以容纳绝大多数M3U8文件而不影响性能。 Changes: alist/drivers/139/types.go - Added ShareCatalog and ShareContent structs for API response mapping ** [( 支持分享)](https://github.com/AlistGo/alist/commit/ 支持分享链接挂载与播放 Root cause: 139 Cloud share links use relative TS paths in M3U8 playlists which cannot be resolved by proxied clients. Additionally, AList's downloader enforces strict metadata-to-stream size validation, leading to 416 (Range) or EOF errors when serving dynamic M3U8 content. We implemented a 1MB padding technique to ensure compatibility with AList's strict size checks; 1MB is sufficient for almost all M3U8 files without impacting performance. )
• api:
  • Add virtual_path field on fs/list and fs/get responses  -  by @okatu-loli (e36c6)
• lark:
  • Add export tools API  -  by @okatu-loli in #9511 (d509a)
• settings:
  • Add frontend sort memory switch  -  by @okatu-loli (cbeb0)
  • Add preview_settings for per-extension preview management  -  by @okatu-loli (1db7a)

   🐞 Bug Fixes

• V-002 security vulnerability  -  by @orbisai0security (e35ab)
• Support all pagination mode  -  by @okatu-loli in #9512 (0fa86)
• CVE-2026-34986 security vulnerability  -  by @orbisai0security (02c09)
• 139-share:
  • Fix modification time parsing  -  by 45daac9 [( 修复分享)](https://github.com/AlistGo/alist/commit/ 修复分享模式下的修改时间解析)
• guangyapan:
  • Allow user input folder path in driver root path  -  by @abandonstudy (dba5c)
  • Expose sorting options  -  by @okatu-loli (4a23e)
  • Resolve offline root folder lookup  -  by @okatu-loli in #9516 (de569)
• lanzou:
  • Handle acw_sc__v2 anti-crawler challenge on all requests  -  by @okatu-loli in #9548 (d0cec)
• mcp:
  • Initialize task manager so async fs operations don't panic  -  by @okatu-loli and Claude Opus 4.7 (69464)
• meta:
  • Expire missing meta cache  -  by @okatu-loli in #9504 (f4459)
• net:
  • Synchronize Buf.Close with Write/Read to prevent nil-pointer panic  -  by @okatu-loli and Claude Opus 4.7 (0e9f8)
• storage:
  • Clear list cache after storage updates  -  by @okatu-loli (ffbbe)

    View changes on GitHub

v3.60.0

   🚀 Features

• frp:
  • Add runtime log API and stop endpoint  -  by @okatu-loli (ee272)
  • Wire bootstrap settings and runtime dependencies  -  by @okatu-loli (51114)
• guangyapan:
  • Add full GuangYaPan driver integration  -  by @okatu-loli (06cb5)

    View changes on GitHub

v3.59.0

   🚀 Features

• Add public share support  -  by @okatu-loli (a8ff7)
• Add burn-after-read support for shares  -  by @okatu-loli (bd725)
• Extend share lifecycle controls  -  by @okatu-loli (4f60c)
• Add 360AI YunPan driver  -  by @okatu-loli (71898)
• chunker:
  • Add storage driver  -  by @okatu-loli (09476)
  • Support multi-target chunk storage  -  by @okatu-loli (ce6a1)
• driver:
  • Add baidu youth driver  -  by @okatu-loli (c07cd)
  • Add Darkibox driver  -  by darkizone and Claude Opus 4.6 (1M context) (9b697)
• driver/streamtape:
  • Add response types for remote download, file info, and conversion status  -  by @xiaoqingwanga (fe0c5)
  • Add remote upload ID helpers  -  by @xiaoqingwanga (11254)
  • Implement PutURL for remote uploads  -  by @xiaoqingwanga (d59c5)
  • Implement Other method with remotedl_status, remotedl_remove, file_info, thumbnail, conversion_status  -  by @xiaoqingwanga (6761f)
  • Add Sha256 upload support and move-to-root alert  -  by @xiaoqingwanga (06638)
• s3:
  • Add placeholder toggle and fix empty-folder delete behavior  -  by @okatu-loli (a6735)

   🐞 Bug Fixes

• Handle aliyundrive open rate limits  -  by @okatu-loli (37a6b)
• Enable GFM extension for markdown rendering in proxy mode  -  by @icebear0828 (97a4b)
• 139: Recover personal host for personal_new requests  -  by @okatu-loli (35832)
• driver/streamtape: Add warning type prefix to Alert message  -  by @xiaoqingwanga (9dd68)
• misskey: FolderId format validation and root directory handling  -  by @vxtls (12989)

    View changes on GitHub

v3.58.0

   🚀 Features

• Add FTPS driver  -  by @okatu-loli (f3d62)
• Add streamtape driver  -  by @okatu-loli (1175f)
• auth:
  • Add consistent error messaging for invalid login credentials  -  by @okatu-loli (3bc7d)
• driver:
  • Upgrade dependencies and enhance 115 cloud functionality  -  by @okatu-loli (39962)
• drivers:
  • Add FTPS driver with TLS support  -  by @RedwindA (1880b)
• fs:
  • Add pagination support and enhance response structure  -  by @okatu-loli (33856)
• local:
  • Add options to use ffmpeg to generate thumbnail  -  by @Muione (60c20)
• quark:
  • Support 302 with transcoding and stable video preview  -  by @okatu-loli (faa59)
• strm:
  • Add STRM driver with independent sync flow  -  by @okatu-loli (5852a)
  • Add driver-level sign expiry and rotate action  -  by @okatu-loli (866d4)
• thumbnail:
  • Add configurable thumbnail size setting and update thumbnail generation  -  by Sky_slience (cf01f)
• wukong:
  • Add WuKongNetdisk driver with read-write support  -  by @okatu-loli in #9449 (6bde8)

   🐞 Bug Fixes

• Unescape URL path to handle '#' in filenames Fixes #9361  -  by @bintocher in #9361 (3f993)
• Reduce WebDAV logging for NotFoundError  -  by @hgkdzbf6 (d4cc6)
• Handle nil buffer case in resizeImageToBufferWithFFmpegGo  -  by @Muione (5773c)
• auth: Prevent and heal dirty admin permissions  -  by @okatu-loli (82ab5)
• ftps: Add host parsing for TLS configuration in login function  -  by @RedwindA (426d5)
• rename: Block rename for password-protected paths  -  by Sky_slience (7dc82)

    View changes on GitHub

v3.57.0

   🚀 Features

• Add doubao new driver  -  by @okatu-loli in #9416 (42fce)
• iso9660: Refactor path handling for secure file extraction  -  by @okatu-loli (a0389)

   🐞 Bug Fixes

• archive: Prevent Zip Slip in extraction  -  by @okatu-loli (c258b)
• fs: Block path traversal in handlers  -  by @okatu-loli (13286)
• tls: Harden defaults and warn on insecure mode  -  by @okatu-loli (66a52)

    View changes on GitHub

v3.56.0

   🚀 Features

• driver: Enhanced Baidu Netdisk upload logic with dynamic URL retrieval  -  by @okatu-loli (e5662)
• proxy: Added configurable signature for down proxy URLs  -  by @okatu-loli (5f244)
• settings: Add SetToken endpoint for updating token settings  -  by @okatu-loli (99802)

    View changes on GitHub

v3.55.0

   🚀 Features

• Add new driver bitqiu support  -  by @okatu-loli in #9355 (4c840)
• cloud189: Added sanitization for file and folder names  -  by @okatu-loli in #9366 (ce415)
• driver: Added support for Gitee driver  -  by @okatu-loli in #9368 (0cbc7)

   🐞 Bug Fixes

• Mediatrack: Add support for X-Device-Fingerprint header  -  by @okatu-loli in #9354 (b4d9b)
• driver: Handle Lanzou anti-crawler challenge by recalculating cookies  -  by @okatu-loli in #9364 (3cddb)

    View changes on GitHub

v3.54.0

   🚀 Features

• Add pCloud driver support  -  by @textrix in #9339 (fe564)
• driver: Add URL signing support  -  by @okatu-loli in #9347 (35d32)
• driver/s3: Add OSS Archive Support  -  by @okatu-loli in #9350 (a6bd9)
• drivers: Add ProtonDrive driver  -  by @Da3zKi7 in #9331 (81a7f)
• gofile: Add configurable link expiration handling  -  by @Chesyre in #9329 (d1788)

    View changes on GitHub

v3.53.0

   🚀 Features

• Support 123pan safebox  -  by @okatu-loli in #9311 (fcbc7)
• Check usage before deleting storage  -  by @okatu-loli in #9322 (e1800)
• driver: Add Gofile storage driver  -  by @Chesyre in #9318 (28a84)
• drivers: Add MediaFire driver support  -  by @Da3zKi7 and Da3zKi7 in #9319 (d0026)

   🐞 Bug Fixes

• drivers: Add session renewal cron for MediaFire driver  -  by @Da3zKi7 and Da3zKi7 in #9321 (16cce)
• ssologin: Missing role in SSO auto-registration and minor callback issue  -  by @sakkyoi in #9305 (930f9)

    View changes on GitHub