Release v4.3.1

• Make theme button always at the bottom of sidebar
• Remove legacy font formats from static assets
• Slightly tweak styles of country flags in peer list
  • Better accommodate longer flags
  • Display country code on hover
• qBittorrent fixes:
  • Attach cookies to URL downloads
  • Set trackers
• Transmission fixes:
  • Percentage downloaded of contents of a torrent
• Bug fixes:
  • API call to get peer list of a non-existent torrent no longer crash Flood server
  • Handle file not exist and access denied cases in content download
  • Properly handle API call to update password of a user
• Security enhancements:
  • Rate limit resource-intensive mediainfo request
  • Ensure path is allowed for mediainfo request
  • API call to list users no longer receive hashed passwords and client connection settings
    • Note: only an authenticated admin user may list users
• New translations
  • Czech, thanks to @brezinajn
  • Romanian, thanks to @T-z3P
• Bump dependencies

Release v4.3.0

• Generate magnet link from torrent
• Add a button to allow user to switch color scheme
• Multi architecture Docker images
  • linux/amd64
  • linux/arm64 (new)
  • linux/arm/v7 (new)
• Allow to display precise percentage
  • Expanded view: 1 decimal place
  • Details: 3 decimal places
• Mountpoints with very long paths are ignored by disk usage
• Tags can be attached while adding torrents to qBittorrent (needs qbittorrent/qBittorrent#13882)
• Bug fixes:
  • Download destination fallback to rTorrent default destination (Mika-/torrent-control#105)
  • Properly catch errors of AddFiles and AddURLs when using qBittorrent
  • Display existing trackers in set trackers modal
• New translations
  • Spanish, thanks to @vain4us
• Bump dependencies

Side note:

I am starting to maintain a distribution of rTorrent, available at jesec/rtorrent. It is optimized and small. It uses modern CMake and Bazel build systems. Bazel can also be used for dependency management and to produce statically linked reproducible builds.

Static binaries (amd64, arm64) can be downloaded via Github Actions. Docker images are also available at jesec/rtorrent.

I made a simple Dockerfile to demonstrate how to integrate rTorrent with Flood.

Release v4.2.0

flood.js.org/Changelog-4.2

• Allow content of a torrent to be streamed directly if supported by browser
• New translations
  • Chinese (Traditional), thanks to @vongola12324
  • Dutch, thanks to @vain4us
  • French, thanks to @Coosos
• Bump dependencies

Release v4.1.2

• qBittorrent fixes:
  • Remove existing tags
• New translations
  • Dutch, thanks to @vain4us
  • German, thanks to @chint95

Release v4.1.1

• Transmission fixes:
  • Set tags while adding torrents
  • Set trackers
• New translations
  • Czech, thanks to Jan Březina
  • French, thanks to @Carryozor
  • German, thanks to @chint95
  • Romanian, thanks to @T-z3P

Release v4.1.0

flood.js.org/Changelog-4.1

⚠️ Changes that may require manual attention: ⚠️

• Configuration is now schema validated before the start of Flood server
  • No action required if you use (preferred and default) CLI configuration interface
  • This ensures that when the config.js needs to be updated, the failure happens loud and early
  • Check shared/schema/Config.ts for more details
• Enforces that the length of secret must be larger than 30
  • Secret can be brute forced locally without interaction with the server
    • However, an attacker must get a valid token (generated by proper authentication) first
      • If all users are trusted, attackers have no way to get a valid token
  • Secret is used to sign authentication tokens but it is NOT linked to the password
    • Attacker may log into Flood as any user if they have the secret
      • However, they are still constrained by capabilities and settings (such as --allowedpath) of Flood

Other changes:

• Tag selector preference:
  • Single selection
  • Multi selection
• UX enhancements to tag selector
• Suggest destination based on selected tag
• add-urls and add-files API endpoints no longer fail if destination property is not provided
  • Download destination fallback has been implemented:
    • Tag-specific preferred download destination
    • Last used download destination
    • Default download destination of connected torrent client
  • This makes things easier for API users
  • No direct impact on Flood itself
• Remember last used "Add Torrents" tab
• Remove center alignment of certain modals to align with global styles
• Disallow browser's input suggestion when tag selector or folder browser is open
• Don't pop up the browser menu on right click while context menu is open
• Experimental standalone (single-executable) builds
• New translations
  • German, thanks to @chint95
  • Romanian, thanks to @T-z3P
• Bump dependencies
• Bug fixes:
  • Properly handle "error" alerts (display "❗" icon instead of "✅" icon)

Release v4.0.2

• New translations

  • German, thanks to @chint95
  • Romanian, thanks to @T-z3P

Release v4.0.1

* Fix the unreliable clear all notification button

* Bump dependencies

Release v4.0.0

• Experimental multi-client support
  • qBittorrent
  • Transmission
• Stabilized and documented public API endpoints
• Defined and documented internal interfaces, data structures and APIs
• Better documentation for users and developers
• Full migration to TypeScript
• Reasonable test coverages for API endpoints
• Torrent creation support
• Add torrents as completed
• Dropdown selector for existing tags
• Seeding status in status filter
• Set tracker URLs of torrents
• Improved handling of rendering, updating and scrolling of torrent list
  • Preliminary tests show that Flood can now handle 500,000 torrents at least in the frontend.
  • Note: real-world performance depends on other factors such as method call and deserialization operations in the backend and data transfer between backend and frontend.
• Better performance, less memory and CPU consumption in both frontend and backend
• New translations
  • Chinese (Traditional), thanks to @vongola12324
  • Czech, thanks to Jan Březina
  • French, thanks to @zopieux and @Mystere98
  • German, thanks to @chint95
• Bug fixes
• Security enhancements
• Dockerfile revamp
• Native build tools no longer needed as native dependency is replaced with WebAssembly variant
• Server is packed before distribution, reduced number of dependencies in production, faster installation

-----BEGIN PGP SIGNATURE-----

iQFBBAABCgArFiEElsZPMCZQTUzZLTai0uSYfcYwogQFAl+pCwYNHGpjQGxpbnV4
LmNvbQAKCRDS5Jh9xjCiBOEXB/4rJpAlosbFPg6cZEzn94CQk17qSJKKh8lHfWrv
CwS2hN2rZ/2/eazQNc9VzbvKfN9tlNXbPEx2RtRheqPVDbchh0Kd9cR/F91AzUvk
8X656iSLt6PwmjWfrES9MbwHcH4uOImjLt1tWKvTNFCtjj0Rff6YytQEBG2dATwu
NhtS7f/T31vXNkvmTAmK/mjeMU5v8uJhXuRRTQgLL7Mh3CXcINNNJZ3XPMOpmt1Y
UQ57tSSdPQlnj/ZFyHH+VjLFuofV6k5gsj0Ymu+NSH7cC0hGNme6hAt8yEdwkeCS
419UUOYNZqZ2xV8i1ph/S6Wn+l1OCfAF3753oAxmZF4pdqaT
=ugQL
-----END PGP SIGNATURE-----