1.5.1 (2026-04-25)

Features

• Stalwart: OAuth auto-setup with dialog and validation for origin and issuer URLs
• Mail: Right-click context menu on the folders sidebar
• Mail: Replace folder prompt() calls with a proper modal dialog
• Calendar: Add 'Today' button to the desktop calendar toolbar
• Junk: Setting to show avatars in the Junk folder

Fixes

• Admin: Restore admin panel after Stalwart v0.16 REST API removal
• Viewer: Restore broken viewer toolbar actions and improve the mobile menu (#220)
• Folders: Stop flicker on background folder refresh
• Email: Preserve search/filter on batch move and archive
• Email: Preserve search/filter when moving emails via drag-drop
• i18n: Improve Korean flag

📦 Downloads available at

• https://user.bitfocus.io/download

💵 Donate to the project at

• open collective https://opencollective.com/companion

Companion v4.3.1 - Release Notes

🐞 BUG FIXES

• update release notes to include section on the sidebar
• canvas crashing on empty png buffers #4107
• ensure processes exit when parent terminates
• unable to change module version when current is invalid
• missing pageNumber for surface plugins #4057
• update elgato-stream-deck
• low contrast in browse-entities table (#4106)
• rotate buttons on locked surfaces #4105
• show description for surface option fields
• restore legacy rotation for stream decks #4105
• field with allowInvalidValues: true should not show error on value preview
• multidropdown should indicate when no more elements can be removed
• handle variable replacement for nested variables in presets
• include rotation in satellite LOCKED-STATE message
• dont repeat manufacturer for modules with many products #4121

Full Changelog: v4.3.0...v4.3.1

The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Voyager Live is an Ubuntu-based distribution which includes large language model (LLM) tools. An English translation of the French release announcement states: "We are presenting Voyager 26.04 LTS based on Ubuntu 'Resolute Raccoon'. Two standard editions are offered: one based on the Ubuntu Snap and Deb packages, and....

[0.16.1] - 2026-04-25

This version includes multiple breaking changes. If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

• OIDC: Extract username from JWT token.
• system('node_hostname') and system('node_role') expression variables to retrieve the local node hostname and cluster role respectively.

Changed

Fixed

• JMAP:
  • Invalid receivedAt headers after importing (#2939).
  • Sorting order issues when emails lack receivedAt headers.
• IMAP: Fix BINARY fetch responses (#2940).
• WebDAV: Fix ACL validation for target folders.
• ACME: Allow requesting apex domain certificates.
• Hostname issues:
  • Accept RFC 6761 reserved TLDs during bootstrap.
  • Allow hostnames without TLDs in remote server settings.
• Reverse proxy issues.
• OSS builds.
• DNS Updater:
  • RFC2136: TSIG secret not base64 decoded.
  • Google DNS: Chunk TXT records when they exceed 255 characters.
  • Cloudflare:
    • Fix CAA record updates.
    • Check zone subdomains when finding zones

---

Check binary attestation here

[p]\[ ANIMGRAPH 2 ][/p]

• [p]Fixed XM1014 shells flickering when starting a reload.[/p][/*]
• [p]Fixed bugs with dual berettas in first person and in spectator mode.[/p][/*]
• [p]Fixed inspect/cancel causing multiple worldmodel deploys.[/p][/*]
• [p]Fixed a bug where players can get stuck in a planted-turn state.[/p][/*]
• [p]Made foot IK transitions smoother.[/p][/*]
• [p]Adjusted the firstperson in-air crouch transition time to match the thirdperson animation better.[/p][/*]
• [p]Fixed a case where high frequency stutter steps would cause large pose changes.[/p][/*]
• [p]Fixed a case where legs would snap when quickly stopping and then continuing in same direction.[/p][/*]
• [p]Adjusted thirdperson bomb plant animation to more closely match firstperson animation.[/p][/*]
• [p]Minor adjustments to viewmodel animations.[/p][/*]

[p][/p][p]\[ MISC ][/p]

• [p]Fixed random crash on startup when a non-default Audio Device was specified in settings or when sound_device_override was specified in a config file or on the command line.[/p][/*]
• [p]Adjusted official map guides to match new surface smoothing.[/p][/*]
• [p]Dropped weapons with silencers now correctly reflect the silenced state.[/p][/*]

• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2026-03-08)

recent important news

• v1.20.9 (2025-02-25) fixed CVE-2026-27948 (XSS)

🧪 new features

• #1410 #376 #1224 new option --glang to autoselect UI-translation based on webbrowser's language (thx @stackxp!) ec3e0e7
• #1407 #1384 option to automatically switch between list-view and grid-view depending on folder contents (thx @icxes!) 822fa71 660ed7a 961a273
• #1447 audioplayer can now play bcstm / bfstm / brstm files (nintendo 3ds/wii bgm) 3a9ff67
• #1389 add 1000-based filesize-units in addition to 1024-based 43773f2
• #1395 reloc-by-wark, a pair of hooks to rename incoming uploads to a hash of the file contents 1e7de5d
• option --rlo to change the logrotate-counter for -lo 8b98688
• add --certkey to specify certificate and key as separate files 8c7cdf8
  • but the built-in HTTPS server should still not be trusted
• config-files can now use OS environment-variables anywhere in the [global] config section cbd82b6 e52bbed
  • by default, only the syntax ${VAR} is supported, not $VAR or %VAR%
  • previously, a small handful of global-options already supported this (c lo hist dbpath ssl_log), but they also supported the $VAR syntax, which is no longer the case
  • if the old $VAR syntax is detected, copyparty will crash on startup, suggesting the following remedies (choose one!) in the log:
    1. update the config-value to the new ${VAR} syntax (recommended)
    2. allow the old syntax with global-option --env-expand 1 (risky)
    3. ignore the old syntax and only expand the new syntax with global-option --env-expand 2
    4. disable all environment-variable expansions with PRTY_NO_ENVEXPAND=1

🩹 bugfixes

• #1437 webdav clients can now PROPFIND a file with depth: infinite which at least webdav4 does e00f2b4
• #1392 navigating into a subfolder using a dks dirkey (default-disabled) could fail 228c3df
• #1446 #1330 #1362 fix some small edgecases with the rightclick-menu (thx @icxes!) 874e0e7
• #1403 #1396 audioplayer: fix ui-crash when folder contains an m3u-file and sort-order is changed during playback (thx @icxes!) 198f631
• #1428 #1427 when --magic was enabled, nameless uploads of textfiles would get the file-extension .ssa instead of .txt (thx @Scotsguy!) ed516dd
• #1449 on some filesystems, the tail/follow function would spam the log with reopened at byte XXX 8173018
• #1401 on windows, a spec-violating basic-upload could delay that upload by a few seconds 6fb1287
• on macOS, u2c would clear the terminal on exit, even with -ns 238887c
• audio-files in a videofile trenchcoat did not thumbnail correctly 1066dc3

🔧 other changes

• #1387 added gentoo packaging (thx @mid-kid!) fb5384f
• #1425 improved FreeBSD / OpenBSD support (thx @chilledfrogs!) f561318 745d82f
• #1352 new handler: fail2ban (thx @Lomaiin!) 26e663d
• improve errormessage when the server's OS-HDD blips out of existence d1517d0
• #1439 improve IPv6 autoban IP-range (thx @SnowSquire!) f6dc1e2
• ensure opus transcodes will at most have 2 audio channels (stereo) b31f290
• #1417 smb-server: probably add IPv6 support a5d859d
• --list-nics and --list-ips to show autodetected network-adapters and IPs 8d4363d
• docs:
  • nixos module-override example (thx @Scotsguy!) 0b16e87
  • make it even more obvious that --allow-csrf is a bad idea 9a724b0
  • mention --urlform get to disable message-to-serverlog ac05b4f
  • readme: improve shadowing phrasing 003c68d
  • devnotes: explain the vendored dependencies 971f8ef

🌠 fun facts

• this release includes code written at abs(unit)
  • btw that pdp had an IPv6 lease and browsed the internet :^)
    • hasn't connected to copyparty though (yet...)
• this release was powered by 一体いつから (TaKo Hardcore bootleg) followed by Fighting My Way (YUPPUN Hardcore Remix) (shd is a good dj)

---

💾 what to download?

download link	is it good?	description
copyparty-sfx.py	✅ the best 👍	runs anywhere! only needs python
copyparty-en.py	✅ also good	same but english-only, no i18n
a docker image	it's ok	good if you prefer docker 🐋
copyparty.exe	⚠️ acceptable	for win8 or later; built-in thumbnailer
u2c.exe	⚠️ acceptable	CLI uploader as a win7+ exe (video)
copyparty.pyz	⚠️ acceptable	similar to the regular sfx, mostly worse
copyparty-en.pyz	⚠️ acceptable	english-only, no smb-server
copyparty32.exe	⛔️ dangerous	for win7 -- never expose to the internet!
cpp-winpe64.exe	⛔️ dangerous	runs on 64bit WinPE, otherwise useless
bootable usb	┐(ﾟ∀ﾟ)┌	a surprisingly useful joke (x86_64)

• except for u2c.exe, all of the options above are mostly equivalent
• the zip and tar.gz files below are just source code
• python packages are available at PyPI