What’s New

alist

Developer Tools

alist release notes.

Latest v3.62.0 · by alistWebsiteAlistGo/alist

Changelog

v3.62.0

Added
  • Add sjtu netdisk driver
  • Add emby driver
  • Support skipping existing files in copy tasks
  • Add index-free (no_index) live search mode
  • Support custom download params with magic variables for url_tree
Changed
  • Optimize login credential flow for 139 driver
  • Make API and download-link domains configurable for pikpak
Fixed
  • Restore Cookie on download link header in 115 driver so proxied downloads work
  • Update 123pan domain from www.123pan.com to yun.123pan.com
  • Honor use_large_thumbnail for family/personal/group clouds in 139 driver
  • Rate-limit API requests in guangyapan driver to avoid flooding on batch copy
  • Don't auto-index wrapper drivers' underlying storage in index
  • Bump weiyun-sdk-go to v0.1.4 to fix nil pointer panic on Init in weiyun driver
Security
  • Fix V-001 security vulnerability
  • Sanitize shell/subprocess call in util.go
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
View originalPermalink

v3.61.0

Added
  • Add GuangYaPan offline download
  • Support mounting and HLS playback for 139-share
  • Add virtual_path field on fs/list and fs/get responses
  • Add export tools API for lark
  • Add frontend sort memory switch
  • Add preview_settings for per-extension preview management
Fixed
  • Support all pagination mode
  • Fix modification time parsing for 139-share
  • Allow user input folder path in driver root path for guangyapan
  • Expose sorting options for guangyapan
  • Resolve offline root folder lookup for guangyapan
  • Handle acw_sc__v2 anti-crawler challenge on all requests for lanzou
  • Initialize task manager so async fs operations don't panic for mcp
  • Expire missing meta cache
  • Synchronize Buf.Close with Write/Read to prevent nil-pointer panic for net
  • Clear list cache after storage updates
Security
  • Fix V-002 security vulnerability
  • Fix CVE-2026-34986 security vulnerability
   🚀 Features
  • Add GuangYaPan offline download  -  by @okatu-loli in https://github.com/AlistGo/alist/issues/9505 (fc26c)
  • 139-share:
    • Support mounting and HLS playback  -  by ** 139云盘分享链接在M3U8中使用相对TS路径，导致代理请求无法正常解析。此外，AList下载器会严格校验文件元数据与实际流的大小一致性，导致动态生成的M3U8因长度不匹配触发416或EOF错误。我们采用了1MB填充技术以兼容AList的严格校验，且1MB足以容纳绝大多数M3U8文件而不影响性能。 Changes: alist/drivers/139/types.go - Added ShareCatalog and ShareContent structs for API response mapping ** [( 支持分享)](https://github.com/AlistGo/alist/commit/ 支持分享链接挂载与播放 Root cause: 139 Cloud share links use relative TS paths in M3U8 playlists which cannot be resolved by proxied clients. Additionally, AList's downloader enforces strict metadata-to-stream size validation, leading to 416 (Range) or EOF errors when serving dynamic M3U8 content. We implemented a 1MB padding technique to ensure compatibility with AList's strict size checks; 1MB is sufficient for almost all M3U8 files without impacting performance. )
  • api:
    • Add virtual_path field on fs/list and fs/get responses  -  by @okatu-loli (e36c6)
  • lark:
  • settings:
    • Add frontend sort memory switch  -  by @okatu-loli (cbeb0)
    • Add preview_settings for per-extension preview management  -  by @okatu-loli (1db7a)
   🐞 Bug Fixes
    View changes on GitHub
View originalPermalink

v3.60.0

Added
  • Add runtime log API and stop endpoint for frp
  • Wire bootstrap settings and runtime dependencies for frp
  • Add full GuangYaPan driver integration
   🚀 Features
  • frp:
    • Add runtime log API and stop endpoint  -  by @okatu-loli (ee272)
    • Wire bootstrap settings and runtime dependencies  -  by @okatu-loli (51114)
  • guangyapan:
    • Add full GuangYaPan driver integration  -  by @okatu-loli (06cb5)
    View changes on GitHub
View originalPermalink

v3.59.0

Added
  • Add public share support
  • Add burn-after-read support for shares
  • Extend share lifecycle controls
  • Add 360AI YunPan driver
  • Add chunker storage driver
  • Support multi-target chunk storage
  • Add baidu youth driver
  • Add Darkibox driver
  • Add response types for streamtape remote download, file info, and conversion status
  • Add streamtape remote upload ID helpers
  • Implement PutURL for streamtape remote uploads
  • Implement streamtape Other method with remotedl_status, remotedl_remove, file_info, thumbnail, conversion_status
  • Add streamtape Sha256 upload support
  • Add s3 placeholder toggle
Fixed
  • Handle aliyundrive open rate limits
  • Enable GFM extension for markdown rendering in proxy mode
  • Recover personal host for 139 personal_new requests
  • Add warning type prefix to streamtape Alert message
  • Fix misskey FolderId format validation and root directory handling
  • Fix s3 empty-folder delete behavior
   🚀 Features
  • Add public share support  -  by @okatu-loli (a8ff7)
  • Add burn-after-read support for shares  -  by @okatu-loli (bd725)
  • Extend share lifecycle controls  -  by @okatu-loli (4f60c)
  • Add 360AI YunPan driver  -  by @okatu-loli (71898)
  • chunker:
    • Add storage driver  -  by @okatu-loli (09476)
    • Support multi-target chunk storage  -  by @okatu-loli (ce6a1)
  • driver:
    • Add baidu youth driver  -  by @okatu-loli (c07cd)
    • Add Darkibox driver  -  by darkizone and Claude Opus 4.6 (1M context) (9b697)
  • driver/streamtape:
    • Add response types for remote download, file info, and conversion status  -  by @xiaoqingwanga (fe0c5)
    • Add remote upload ID helpers  -  by @xiaoqingwanga (11254)
    • Implement PutURL for remote uploads  -  by @xiaoqingwanga (d59c5)
    • Implement Other method with remotedl_status, remotedl_remove, file_info, thumbnail, conversion_status  -  by @xiaoqingwanga (6761f)
    • Add Sha256 upload support and move-to-root alert  -  by @xiaoqingwanga (06638)
  • s3:
    • Add placeholder toggle and fix empty-folder delete behavior  -  by @okatu-loli (a6735)
   🐞 Bug Fixes
  • Handle aliyundrive open rate limits  -  by @okatu-loli (37a6b)
  • Enable GFM extension for markdown rendering in proxy mode  -  by @icebear0828 (97a4b)
  • 139: Recover personal host for personal_new requests  -  by @okatu-loli (35832)
  • driver/streamtape: Add warning type prefix to Alert message  -  by @xiaoqingwanga (9dd68)
  • misskey: FolderId format validation and root directory handling  -  by @vxtls (12989)
    View changes on GitHub
View originalPermalink

v3.58.0

Added
  • Add FTPS driver
  • Add streamtape driver
  • Add consistent error messaging for invalid login credentials
  • Add pagination support and enhance response structure
  • Add options to use ffmpeg to generate thumbnail
  • Add STRM driver with independent sync flow
  • Add driver-level sign expiry and rotate action
  • Add configurable thumbnail size setting and update thumbnail generation
  • Add WuKongNetdisk driver with read-write support
Changed
  • Upgrade dependencies and enhance 115 cloud functionality
  • Support 302 with transcoding and stable video preview
Fixed
  • Unescape URL path to handle '#' in filenames
  • Reduce WebDAV logging for NotFoundError
  • Handle nil buffer case in resizeImageToBufferWithFFmpegGo
  • Prevent and heal dirty admin permissions
  • Add host parsing for TLS configuration in login function
  • Block rename for password-protected paths
   🚀 Features
  • Add FTPS driver  -  by @okatu-loli (f3d62)
  • Add streamtape driver  -  by @okatu-loli (1175f)
  • auth:
    • Add consistent error messaging for invalid login credentials  -  by @okatu-loli (3bc7d)
  • driver:
    • Upgrade dependencies and enhance 115 cloud functionality  -  by @okatu-loli (39962)
  • drivers:
    • Add FTPS driver with TLS support  -  by @RedwindA (1880b)
  • fs:
    • Add pagination support and enhance response structure  -  by @okatu-loli (33856)
  • local:
    • Add options to use ffmpeg to generate thumbnail  -  by @Muione (60c20)
  • quark:
    • Support 302 with transcoding and stable video preview  -  by @okatu-loli (faa59)
  • strm:
    • Add STRM driver with independent sync flow  -  by @okatu-loli (5852a)
    • Add driver-level sign expiry and rotate action  -  by @okatu-loli (866d4)
  • thumbnail:
    • Add configurable thumbnail size setting and update thumbnail generation  -  by Sky_slience (cf01f)
  • wukong:
   🐞 Bug Fixes
  • Unescape URL path to handle '#' in filenames Fixes AlistGo/alist#9361  -  by @bintocher in https://github.com/AlistGo/alist/issues/9361 (3f993)
  • Reduce WebDAV logging for NotFoundError  -  by @hgkdzbf6 (d4cc6)
  • Handle nil buffer case in resizeImageToBufferWithFFmpegGo  -  by @Muione (5773c)
  • auth: Prevent and heal dirty admin permissions  -  by @okatu-loli (82ab5)
  • ftps: Add host parsing for TLS configuration in login function  -  by @RedwindA (426d5)
  • rename: Block rename for password-protected paths  -  by Sky_slience (7dc82)
    View changes on GitHub
View originalPermalink

v3.57.0

Added
  • Add doubao new driver
Changed
  • Refactor path handling in iso9660 for secure file extraction
Fixed
  • Prevent Zip Slip in archive extraction
  • Block path traversal in handlers
  • Harden TLS defaults and warn on insecure mode
   🚀 Features
   🐞 Bug Fixes
  • archive: Prevent Zip Slip in extraction  -  by @okatu-loli (c258b)
  • fs: Block path traversal in handlers  -  by @okatu-loli (13286)
  • tls: Harden defaults and warn on insecure mode  -  by @okatu-loli (66a52)
    View changes on GitHub
View originalPermalink

v3.56.0

Added
  • Configurable signature for down proxy URLs
  • SetToken endpoint for updating token settings
Changed
  • Enhanced Baidu Netdisk upload logic with dynamic URL retrieval
   🚀 Features
  • driver: Enhanced Baidu Netdisk upload logic with dynamic URL retrieval  -  by @okatu-loli (e5662)
  • proxy: Added configurable signature for down proxy URLs  -  by @okatu-loli (5f244)
  • settings: Add SetToken endpoint for updating token settings  -  by @okatu-loli (99802)
    View changes on GitHub
View originalPermalink

v3.55.0

Added
  • Add new driver bitqiu support
  • Add support for Gitee driver
Changed
  • Add sanitization for file and folder names in cloud189 driver
Fixed
  • Add support for X-Device-Fingerprint header in Mediatrack
  • Handle Lanzou anti-crawler challenge by recalculating cookies
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
View originalPermalink

v3.54.0

Added
  • Add pCloud driver support
  • Add URL signing support to driver
  • Add OSS Archive Support to S3 driver
  • Add ProtonDrive driver
  • Add configurable link expiration handling to gofile
   🚀 Features
    View changes on GitHub
View originalPermalink
betaPre-release

AList Beta Version

Added
  • Add sjtu netdisk driver
  • Add emby driver
  • Support skipping existing files in copy tasks
  • Add index-free (no_index) live search mode
  • Support custom download params with magic variables for url_tree
Changed
  • Optimize login credential flow for 139 driver
  • Make API and download-link domains configurable for pikpak
Fixed
  • Restore Cookie on download link header for 115 driver so proxied downloads work
  • Update 123pan domain from www.123pan.com to yun.123pan.com
  • Honor use_large_thumbnail for family/personal/group clouds in 139 driver
  • Rate-limit API requests in guangyapan driver to avoid flooding on batch copy
  • Don't auto-index wrapper drivers' underlying storage
  • Bump weiyun-sdk-go to v0.1.4 to fix nil pointer panic on Init
Security
  • Fix V-001 security vulnerability
  • Sanitize shell/subprocess call in util.go
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
View originalPermalink