alist

System UtilitiesAGPL-3.0

alist release notes.

Latest v3.64.0 · by alistWritten in GoWebsiteAlistGo/alistRSS

Release activity

Release activity — 11 releases across 11 days in the last year. Each cell is one day; darker means more releases that day. Older weeks are hidden at this screen width.
JunJulAugSep
SundayNo releases on May 24, 2026No releases on May 31, 2026No releases on Jun 7, 2026No releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026No releases on Aug 16, 2026No releases on Aug 23, 2026No releases on Aug 30, 2026No releases on Sep 6, 2026
MondayNo releases on May 25, 2026No releases on Jun 1, 2026No releases on Jun 8, 2026No releases on Jun 15, 2026No releases on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 2026No releases on Aug 10, 2026No releases on Aug 17, 2026No releases on Aug 24, 2026No releases on Aug 31, 2026No releases on Sep 7, 2026
TuesdayNo releases on May 26, 20261 release on Jun 2, 2026No releases on Jun 9, 2026No releases on Jun 16, 2026No releases on Jun 23, 2026No releases on Jun 30, 2026No releases on Jul 7, 20261 release on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026No releases on Aug 11, 2026No releases on Aug 18, 2026No releases on Aug 25, 2026No releases on Sep 1, 2026No releases on Sep 8, 2026
WednesdayNo releases on May 27, 2026No releases on Jun 3, 2026No releases on Jun 10, 2026No releases on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 20261 release on Aug 5, 2026No releases on Aug 12, 2026No releases on Aug 19, 2026No releases on Aug 26, 2026No releases on Sep 2, 2026
ThursdayNo releases on May 28, 2026No releases on Jun 4, 2026No releases on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 2026No releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 2026No releases on Aug 13, 2026No releases on Aug 20, 2026No releases on Aug 27, 20261 release on Sep 3, 2026
FridayNo releases on May 29, 2026No releases on Jun 5, 2026No releases on Jun 12, 2026No releases on Jun 19, 2026No releases on Jun 26, 2026No releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026No releases on Aug 14, 2026No releases on Aug 21, 2026No releases on Aug 28, 2026No releases on Sep 4, 2026
SaturdayNo releases on May 30, 2026No releases on Jun 6, 2026No releases on Jun 13, 2026No releases on Jun 20, 2026No releases on Jun 27, 2026No releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026No releases on Aug 15, 2026No releases on Aug 22, 2026No releases on Aug 29, 2026No releases on Sep 5, 2026

11 releases in the last year

Changelog

v3.64.0

Latest
Changed 1
  • Migrate SMB to cloudsoda go-smb2
Fixed 7
  • Support localized time format in 189pc
  • Handle root path listing in azure_blob
  • Support new password download pages in lanzou
  • Drop the polyfill.io script left in customize_head
  • Normalize empty dir to / for dm domain API in terabox
  • Retry stale digest authentication in webdav
  • Avoid duplicate base path resolution in webdav

From alist

   🐞 Bug Fixes
    View changes on GitHub
View originalPermalink
How v3.64.0 went

v3.63.0

Added 4
  • Add an opt-in parallel upload mode for personal_new
  • Add CSTCloud Capsule (数据胶囊) driver
  • Make ranged download concurrency and part size configurable for quark_uc
  • Add optional User-Agent override for client-gated providers in S3
Fixed 11
  • Wire the offline download temp dir like the other cloud tools in 123_open
  • Keep polling while the server merges an upload in 123_open
  • Include part 101 when fetching remaining upload URLs in 139
  • Declare the PC client type to lift the 50 GB upload cap in 139
  • Limit total decompressed size to prevent disk exhaustion in archive
  • Stream upload slices to avoid buffering whole parts in memory in baidu_netdisk
Security 1
  • Enforce user base path on all request paths

From alist

   🚀 Features
  • 139: Add an opt-in parallel upload mode for personal_new  -  by @okatu-loli (6ff46)
  • driver: Add CSTCloud Capsule (数据胶囊) driver  -  by @okatu-loli (1e327)
  • quark_uc: Make ranged download concurrency and part size configurable  -  by @okatu-loli (60009)
  • s3: Add optional User-Agent override for client-gated providers  -  by @okatu-loli (32e7e)
   🐞 Bug Fixes
  • 123_open:
    • Wire the offline download temp dir like the other cloud tools  -  by @okatu-loli (c098f)
    • Keep polling while the server merges an upload  -  by @okatu-loli (ab84a)
  • 139:
    • Include part 101 when fetching remaining upload URLs  -  by @okatu-loli (0d4aa)
    • Declare the PC client type to lift the 50 GB upload cap  -  by @okatu-loli (33ede)
  • archive:
    • Limit total decompressed size to prevent disk exhaustion  -  by @okatu-loli (cb529)
  • baidu_netdisk:
    • Stream upload slices to avoid buffering whole parts in memory  -  by @okatu-loli (1c360)
  • lanzou:
    • Handle acw_sc__v2 anti-bot challenge on login  -  by @okatu-loli (9246a)
  • net:
    • Bound overload retries with backoff and fail fast on unrecoverable download errors  -  by @okatu-loli (e79d3)
  • quark:
    • Refresh __puus cookie periodically to keep download signature valid  -  by alist-dev (fdcd8)
  • security:
    • Enforce user base path on all request paths  -  by @okatu-loli (e9a7d)
  • thunder:
    • Persist login token and clear consumed credit key  -  by alist-dev (dd472)
    • Tolerate refresh responses without rotated refresh token  -  by alist-dev (d358f)
    View changes on GitHub
View originalPermalink
How v3.63.0 went

v3.62.0

Added 5
  • Add sjtu netdisk driver
  • Add emby driver
  • Support skipping existing files in copy tasks
  • Add index-free (no_index) live search mode
  • Support custom download params with magic variables for url_tree
Changed 2
  • Optimize login credential flow for 139 driver
  • Make API and download-link domains configurable for pikpak
Fixed 6
  • Restore Cookie on download link header in 115 driver so proxied downloads work
  • Update 123pan domain from www.123pan.com to yun.123pan.com
  • Honor use_large_thumbnail for family/personal/group clouds in 139 driver
  • Rate-limit API requests in guangyapan driver to avoid flooding on batch copy
  • Don't auto-index wrapper drivers' underlying storage in index
  • Bump weiyun-sdk-go to v0.1.4 to fix nil pointer panic on Init in weiyun driver
Security 2
  • Fix V-001 security vulnerability
  • Sanitize shell/subprocess call in util.go

From alist

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
View originalPermalink
How v3.62.0 went

v3.61.0

Added 6
  • Add GuangYaPan offline download
  • Support mounting and HLS playback for 139-share
  • Add virtual_path field on fs/list and fs/get responses
  • Add export tools API for lark
  • Add frontend sort memory switch
  • Add preview_settings for per-extension preview management
Fixed 10
  • Support all pagination mode
  • Fix modification time parsing for 139-share
  • Allow user input folder path in driver root path for guangyapan
  • Expose sorting options for guangyapan
  • Resolve offline root folder lookup for guangyapan
  • Handle acw_sc__v2 anti-crawler challenge on all requests for lanzou
Security 2
  • Fix V-002 security vulnerability
  • Fix CVE-2026-34986 security vulnerability

From alist

   🚀 Features
  • Add GuangYaPan offline download  -  by @okatu-loli in https://github.com/AlistGo/alist/issues/9505 (fc26c)
  • 139-share:
    • Support mounting and HLS playback  -  by ** 139云盘分享链接在M3U8中使用相对TS路径,导致代理请求无法正常解析。此外,AList下载器会严格校验文件元数据与实际流的大小一致性,导致动态生成的M3U8因长度不匹配触发416或EOF错误。我们采用了1MB填充技术以兼容AList的严格校验,且1MB足以容纳绝大多数M3U8文件而不影响性能。 Changes: alist/drivers/139/types.go - Added ShareCatalog and ShareContent structs for API response mapping ** [( 支持分享)](https://github.com/AlistGo/alist/commit/ 支持分享链接挂载与播放 Root cause: 139 Cloud share links use relative TS paths in M3U8 playlists which cannot be resolved by proxied clients. Additionally, AList's downloader enforces strict metadata-to-stream size validation, leading to 416 (Range) or EOF errors when serving dynamic M3U8 content. We implemented a 1MB padding technique to ensure compatibility with AList's strict size checks; 1MB is sufficient for almost all M3U8 files without impacting performance. )
  • api:
    • Add virtual_path field on fs/list and fs/get responses  -  by @okatu-loli (e36c6)
  • lark:
  • settings:
    • Add frontend sort memory switch  -  by @okatu-loli (cbeb0)
    • Add preview_settings for per-extension preview management  -  by @okatu-loli (1db7a)
   🐞 Bug Fixes
    View changes on GitHub
View originalPermalink
How v3.61.0 went

v3.60.0

Added 3
  • Add runtime log API and stop endpoint for frp
  • Wire bootstrap settings and runtime dependencies for frp
  • Add full GuangYaPan driver integration

From alist

   🚀 Features
  • frp:
    • Add runtime log API and stop endpoint  -  by @okatu-loli (ee272)
    • Wire bootstrap settings and runtime dependencies  -  by @okatu-loli (51114)
  • guangyapan:
    • Add full GuangYaPan driver integration  -  by @okatu-loli (06cb5)
    View changes on GitHub
View originalPermalink
How v3.60.0 went

v3.59.0

Added 14
  • Add public share support
  • Add burn-after-read support for shares
  • Extend share lifecycle controls
  • Add 360AI YunPan driver
  • Add chunker storage driver
  • Support multi-target chunk storage
Fixed 6
  • Handle aliyundrive open rate limits
  • Enable GFM extension for markdown rendering in proxy mode
  • Recover personal host for 139 personal_new requests
  • Add warning type prefix to streamtape Alert message
  • Fix misskey FolderId format validation and root directory handling
  • Fix s3 empty-folder delete behavior

From alist

   🚀 Features
  • Add public share support  -  by @okatu-loli (a8ff7)
  • Add burn-after-read support for shares  -  by @okatu-loli (bd725)
  • Extend share lifecycle controls  -  by @okatu-loli (4f60c)
  • Add 360AI YunPan driver  -  by @okatu-loli (71898)
  • chunker:
    • Add storage driver  -  by @okatu-loli (09476)
    • Support multi-target chunk storage  -  by @okatu-loli (ce6a1)
  • driver:
    • Add baidu youth driver  -  by @okatu-loli (c07cd)
    • Add Darkibox driver  -  by darkizone and Claude Opus 4.6 (1M context) (9b697)
  • driver/streamtape:
    • Add response types for remote download, file info, and conversion status  -  by @xiaoqingwanga (fe0c5)
    • Add remote upload ID helpers  -  by @xiaoqingwanga (11254)
    • Implement PutURL for remote uploads  -  by @xiaoqingwanga (d59c5)
    • Implement Other method with remotedl_status, remotedl_remove, file_info, thumbnail, conversion_status  -  by @xiaoqingwanga (6761f)
    • Add Sha256 upload support and move-to-root alert  -  by @xiaoqingwanga (06638)
  • s3:
    • Add placeholder toggle and fix empty-folder delete behavior  -  by @okatu-loli (a6735)
   🐞 Bug Fixes
  • Handle aliyundrive open rate limits  -  by @okatu-loli (37a6b)
  • Enable GFM extension for markdown rendering in proxy mode  -  by @icebear0828 (97a4b)
  • 139: Recover personal host for personal_new requests  -  by @okatu-loli (35832)
  • driver/streamtape: Add warning type prefix to Alert message  -  by @xiaoqingwanga (9dd68)
  • misskey: FolderId format validation and root directory handling  -  by @vxtls (12989)
    View changes on GitHub
View originalPermalink
How v3.59.0 went

v3.58.0

Added 9
  • Add FTPS driver
  • Add streamtape driver
  • Add consistent error messaging for invalid login credentials
  • Add pagination support and enhance response structure
  • Add options to use ffmpeg to generate thumbnail
  • Add STRM driver with independent sync flow
Changed 2
  • Upgrade dependencies and enhance 115 cloud functionality
  • Support 302 with transcoding and stable video preview
Fixed 6
  • Unescape URL path to handle '#' in filenames
  • Reduce WebDAV logging for NotFoundError
  • Handle nil buffer case in resizeImageToBufferWithFFmpegGo
  • Prevent and heal dirty admin permissions
  • Add host parsing for TLS configuration in login function
  • Block rename for password-protected paths

From alist

   🚀 Features
  • Add FTPS driver  -  by @okatu-loli (f3d62)
  • Add streamtape driver  -  by @okatu-loli (1175f)
  • auth:
    • Add consistent error messaging for invalid login credentials  -  by @okatu-loli (3bc7d)
  • driver:
    • Upgrade dependencies and enhance 115 cloud functionality  -  by @okatu-loli (39962)
  • drivers:
    • Add FTPS driver with TLS support  -  by @RedwindA (1880b)
  • fs:
    • Add pagination support and enhance response structure  -  by @okatu-loli (33856)
  • local:
    • Add options to use ffmpeg to generate thumbnail  -  by @Muione (60c20)
  • quark:
    • Support 302 with transcoding and stable video preview  -  by @okatu-loli (faa59)
  • strm:
    • Add STRM driver with independent sync flow  -  by @okatu-loli (5852a)
    • Add driver-level sign expiry and rotate action  -  by @okatu-loli (866d4)
  • thumbnail:
    • Add configurable thumbnail size setting and update thumbnail generation  -  by Sky_slience (cf01f)
  • wukong:
   🐞 Bug Fixes
  • Unescape URL path to handle '#' in filenames Fixes AlistGo/alist#9361  -  by @bintocher in https://github.com/AlistGo/alist/issues/9361 (3f993)
  • Reduce WebDAV logging for NotFoundError  -  by @hgkdzbf6 (d4cc6)
  • Handle nil buffer case in resizeImageToBufferWithFFmpegGo  -  by @Muione (5773c)
  • auth: Prevent and heal dirty admin permissions  -  by @okatu-loli (82ab5)
  • ftps: Add host parsing for TLS configuration in login function  -  by @RedwindA (426d5)
  • rename: Block rename for password-protected paths  -  by Sky_slience (7dc82)
    View changes on GitHub
View originalPermalink
How v3.58.0 went

v3.57.0

Added 1
  • Add doubao new driver
Changed 1
  • Refactor path handling in iso9660 for secure file extraction
Fixed 3
  • Prevent Zip Slip in archive extraction
  • Block path traversal in handlers
  • Harden TLS defaults and warn on insecure mode

From alist

   🚀 Features
   🐞 Bug Fixes
  • archive: Prevent Zip Slip in extraction  -  by @okatu-loli (c258b)
  • fs: Block path traversal in handlers  -  by @okatu-loli (13286)
  • tls: Harden defaults and warn on insecure mode  -  by @okatu-loli (66a52)
    View changes on GitHub
View originalPermalink
How v3.57.0 went

v3.56.0

Added 2
  • Configurable signature for down proxy URLs
  • SetToken endpoint for updating token settings
Changed 1
  • Enhanced Baidu Netdisk upload logic with dynamic URL retrieval

From alist

   🚀 Features
  • driver: Enhanced Baidu Netdisk upload logic with dynamic URL retrieval  -  by @okatu-loli (e5662)
  • proxy: Added configurable signature for down proxy URLs  -  by @okatu-loli (5f244)
  • settings: Add SetToken endpoint for updating token settings  -  by @okatu-loli (99802)
    View changes on GitHub
View originalPermalink
How v3.56.0 went

v3.55.0

Added 2
  • Add new driver bitqiu support
  • Add support for Gitee driver
Changed 1
  • Add sanitization for file and folder names in cloud189 driver
Fixed 2
  • Add support for X-Device-Fingerprint header in Mediatrack
  • Handle Lanzou anti-crawler challenge by recalculating cookies

From alist

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
View originalPermalink
How v3.55.0 went

v3.54.0

Added 5
  • Add pCloud driver support
  • Add URL signing support to driver
  • Add OSS Archive Support to S3 driver
  • Add ProtonDrive driver
  • Add configurable link expiration handling to gofile

From alist

   🚀 Features
    View changes on GitHub
View originalPermalink
How v3.54.0 went
View all

Discussion

If you publish alist, you can claim this product by proving you administer its repository.