v1.7.3

What's Changed

• 1.7.3
• fix auth handler
• rate limiting, cleanup, mime-type checks
• bunch of clean up
• new paths lib
• limit schemes

Docker Images

• docker.io/flintsh/flare:1.7.3
• ghcr.io/flintsh/flare:1.7.3

Deploy with Railway: https://railway.com/template/JVT41u?referralCode=R5s8WT

v1.7.2

What's Changed

Fixes vulnerable deps, addresses GHSA-3x7v-x3r6-mjh7 and GHSA-gwqr-xf5c-5569 - standardizing file access control to a single unified lib.

• up deps, 1.7.2
• prettier
• more robust/centralizedfile permission handling
• Bump fast-xml-parser and @aws-sdk/xml-builder (#147)
• Bump minimatch (#150)

Docker Images

• docker.io/flintsh/flare:1.7.2
• ghcr.io/flintsh/flare:1.7.2

Deploy with Railway: https://railway.com/template/JVT41u?referralCode=R5s8WT

v1.7.1

What's Changed

This release patches a possible XSS in the /raw file viewer. See GHSA-q8fp-w6m5-4gjm for details.

• 1.7.1
• add sandbox headers

Docker Images

• docker.io/flintsh/flare:1.7.1
• ghcr.io/flintsh/flare:1.7.1

Deploy with Railway: https://railway.com/template/JVT41u?referralCode=R5s8WT

v1.7.0

A modern, lightning-fast file sharing platform built for self-hosting

✨ New Features and Changes

It's about time for a new release! Development on Flare will be ramping again as I'm beginning to find more free time. If anything is pressing, lmk!

This release fixes a couple known bugs as well as adds support for vanity URLs.

• Vanity URLs are now supported. You can add a vanity URL to your account in the profile page.
• No changes are required in existing screenshot profiles and updated instances should work with vanity URLs out of the box.
• Admins can also change user's vanity URLs via the users admin page.
• PDFs will now render at a proper width instead of feeling cramped on the preview page.
• The footer will no longer block the action buttons on file routes on mobile.
• Updates dependencies.

📝 Commits

• add back uuid
• prefer vanity IDs in upload endpoints
• vanity urls pt 1
• upgrade deps
• fix #135
• fix #139
• Bump lodash from 4.17.21 to 4.17.23 (#145)
• Bump @smithy/config-resolver from 4.2.2 to 4.4.5 (#144)
• Bump preact from 10.27.2 to 10.28.2 (#143)
• Bump next from 15.5.7 to 15.5.9 (#142)

📦 Download & Deploy

🐳 Docker Images

# Docker Hub
docker pull docker.io/flintsh/flare:1.7.0

# GitHub Container Registry
docker pull ghcr.io/flintsh/flare:1.7.0

☁️ Deploy with Railway

Deploy Flare in a few clicks with its Railway template.

v1.6.2

What's Changed

• add back uuid
• prefer vanity IDs in upload endpoints
• vanity urls pt 1
• upgrade deps
• fix #135
• fix #139
• Bump lodash from 4.17.21 to 4.17.23 (#145)
• Bump @smithy/config-resolver from 4.2.2 to 4.4.5 (#144)
• Bump preact from 10.27.2 to 10.28.2 (#143)
• Bump next from 15.5.7 to 15.5.9 (#142)

Docker Images

• docker.io/flintsh/flare:1.6.2
• ghcr.io/flintsh/flare:1.6.2

Deploy with Railway: https://railway.com/template/JVT41u?referralCode=R5s8WT

v1.6.1

What's Changed

• security: 1.6.1
• Bump next from 15.5.2 to 15.5.7 (#140)
• Bump glob from 10.4.5 to 10.5.0 (#137)
• Bump js-yaml from 4.1.0 to 4.1.1 (#136)
• Bump next-auth from 4.24.11 to 4.24.12 (#133)
• Support setting default options for file expiry (#129)
• fix lockfile & config

Docker Images

• docker.io/flintsh/flare:1.6.1
• ghcr.io/flintsh/flare:1.6.1

Deploy with Railway: https://railway.com/template/JVT41u?referralCode=R5s8WT

v1.6.0

A modern, lightning-fast file sharing platform built for self-hosting

✨ New Features and Changes

This is Flare's next major release. It adds 1 core new feature and fixes 4 bugs, although there are not many user-facing changes.

• Flare now has proper JSON-based logging as of this release. Your instance should now show not just a higher volume of logs, but also more useful logs.
• All API routes and their requests have a unique ID attached to make tracing issues with your instance & users easier, and all have logging implemented.
• Flare's dockerfile now uses a debian-based base image over alpine. While this did lead to a slight increase in image size, it makes Flare considerably more resilient.
• Suggested by @parabirb, dashboard pagination now has an ellipsis to make scanning through your uploads easier (closing #122).
• Reported by @muerwre, avatars now upload to the uploads path, ensuring the app can render them properly (closing #121).

📝 Commits

• release: 1.6.0
• remove all the segfault debug and FUCK ALPINE
• dockerfile changes
• alpine friendly
• [TEMP] dockerfile debugger deps
• better debugger
• more temp segfault shit
• feat: add segfault handler and memory monitoring for production debugging
• fix: update thumbnail endpoint permissions to match main file endpoint
• Bump next from 15.4.4 to 15.5.2 (#124)
• A
• roll back next for now
• nuke sharp (sadly too flakey)
• trying LTS
• build sharp from source for the dockerfile
• turn compiler back on + new package-lock
• turn off the react compiler?
• while loops > regex (codeql issue)
• Bump next from 15.4.4 to 15.5.2 (#120)
• cleanup
• rest of the apis
• more api routes
• logging for core apis
• hook logging into libs
• logging system init
• disable global drop zone on upload route
• add ellipsis to pagination (closes #122)
• use uploads for avatars (closing #121)

📦 Download & Deploy

🐳 Docker Images

# Docker Hub
docker pull docker.io/flintsh/flare:1.6.0

# GitHub Container Registry
docker pull ghcr.io/flintsh/flare:1.6.0

☁️ Deploy with Railway

Deploy Flare in a few clicks with its Railway template.

v1.5.2

What's Changed

• respect NEXTAUTH environment variables
• fix spaces in filenames
• fix some typing
• remove bun from contributing guidelines
• fix: upgrade lucide-react from 0.510.0 to 0.525.0 (#110)
• fix some text viewer bugs
• more deps
• deps
• remove react-player
• file viewer component refactor

Docker Images

• docker.io/flintsh/flare:1.5.2
• ghcr.io/flintsh/flare:1.5.2

Deploy with Railway: https://railway.com/template/JVT41u?referralCode=R5s8WT

v1.5.1

A modern, lightning-fast file sharing platform built for self-hosting

✨ New Features and Changes

This is a minor release adding KDE Spectacle upload support and fixes and improvements.

• KDE Spectacle is now supported for uploads, meaning linux users can now use Spectacle for their screenshots and have them automatically uploaded to Flare. You are no longer forced to use Flameshot with Flare. You can find how to get started in the profile page by clicking your profile picture.

• File passwords are now hashed just like account passwords. Securing file passwords wasn't important to me in the beginning as they weren't account passwords, but I decided to add it in as its not a big uplift in this release. If you have files that had passwords set before v1.5.1, a script will run on startup to automatically hash your old passwords for you.

• Fixed a bug with data parsing on the users page in which the website would return a 500 incorrectly.

• Fixed a bug with the file viewer in which in some cases with very large files, they would automatically download.

📝 Commits

• push 1.5.1
• followup
• add spectacle support to the readme
• hash file passwords
• fix unexpected downloads on viewer (closes #108)
• fix data fetching in use-user-management
• login/register styles
• styling
• add spectacle support

📦 Download & Deploy

🐳 Docker Images

# Docker Hub
docker pull docker.io/flintsh/flare:1.5.1

# GitHub Container Registry
docker pull ghcr.io/flintsh/flare:1.5.1

☁️ Deploy with Railway

Deploy Flare in a few clicks with its Railway template.

v1.5.0

A modern, lightning-fast file sharing platform built for self-hosting

✨ New Features and Changes

This release is a big one, adding 4 major new features and fixing several bugs and issues.

• Suggested by @kz-n, the toast for uploaded files now contains two quick actions that can either take you directly to your newly uploaded file or copy its URL(s).

• Also suggested by @kz-n, you can now upload files from anywhere on the dashboard just by dragging and dropping your file(s) onto the UI.

• Suggested by @baldemar-wuda (closing #6), you can now set an expiration date for files. You can schedule a time at which the file will expire and at that date, it will either be removed or set to private, per user choice.

• Added brand new file filters to sort your files by most viewed or most downloaded. The file filters UI in general has been uplifted as well.

• Cleaned up and fixed the new setup checking logic introduced in the last release, fixing a bug where the /setup page was accessible even if Flare's initial setup was already completed.

• Fixed a bug with the /raw endpoint in which files would only be partially streamed back to the client - leading to partial or incomplete downloads.

• Switched Flare's base images back over to Node rather than Bun. Unfortunately, Bun is no longer working for Flare due to runtime issues. See oven-sh/bun#21098

📝 Commits

• deps + version bump
• fix setup bug
• nits
• add global drop zone
• build sharp for x64 dep on environment
• fix arm builds
• stop using bun's runtime (sad)
• real #ihatedocker
• test
• readme
• add file actions to the upload toast
• old setup logic clean up
• more ui
• ui changes
• add ExpiryAction
• file expiration frontend
• add file expiration events
• scaffold event-driven architecture
• make /raw streaming more robust
• fix dev release workflow
• overhauled file filters + new filters

📦 Download & Deploy

🐳 Docker Images

# Docker Hub
docker pull docker.io/flintsh/flare:1.5.0

# GitHub Container Registry
docker pull ghcr.io/flintsh/flare:1.5.0

☁️ Deploy with Railway

Deploy Flare in a few clicks with its Railway template.