Syncthing

Recent Commits

• Jakob Borg(07 Oct 26)

  fix(sqlite): do not generate unbounded prepared statements (ref #10913) (#10915) The API can use arbitrary paging parameters, causing arbitrary numbers of prepared statements, which becomes a memory leak. Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(07 Oct 26)

  fix(sqlite): avoid early garbage collection of deleted recv-enc files (#10916) Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(07 Oct 26)

  fix: handle missing max-sequence file entries (#10912) This could happen when a folder has deleted files as the latest entries, and nothing else happened for 180 days (the default tombstone cleanup time). Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(06 Oct 26)

  build: skip defunct loki sending Signed-off-by: Jakob Borg <[email protected]>

• Syncthing Release Automation(05 Oct 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Jakob Borg(04 Oct 26)

  fix: remove unnecessary delay in index transmission (#10908) Prior to refactoring, this delay kicked in once all batches were sent. Now, it came between each batch. Fix that. --------- Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(30 Sept 26)

  fix: use global short lived HTTP client with proper HTTP/2 support (#10901) In e7b8efb41 I disabled keepalives in several HTTP clients, which inadvertently also disabled HTTP/2. However, the TLS setup announced h2 as a supported protocol, which caused confusion. This fixes that, and makes sure to use the same client in all relevant places. The old option to do usage reporting posts with InsecureSkipVerify goes away -- nobody should have ever used it. --------- Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(30 Sept 26)

  fix(watchaggregator): properly convert floating-point time duration (fixes #10899) (#10900) Signed-off-by: Jakob Borg <[email protected]>

• Syncthing Release Automation(28 Sept 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Giridhar(22 Sept 26)

  fix(gui): improve header and button color contrast (fixes #10488) (#10815) ### Purpose Improve the contrast of semantic request-dialog headers and buttons in the light, dark, and black GUI themes. The light theme keeps its bright semantic colors and uses black text for success, warning, and danger alerts plus success/warning buttons. Danger buttons use the existing darker red with white text. The dark themes use darker success, warning, and danger backgrounds with white text. The lowest enabled-state contrast ratio is 4.509:1, meeting WCAG AA for normal text. ### Testing - `go run build.go assets` - `go run build.go build syncthing` - `git diff --check` - Checked the base and interactive semantic color pairs with a WCAG contrast calculation; all enabled states are at least 4.5:1. - Loaded the generated GUI assets in Chromium and verified the computed foreground/background colors for success, warning, and danger alerts and buttons in both light and dark themes. ### Screenshots Rendered light and dark fixtures locally to verify the complete alert and button combinations. The computed colors matched the intended theme rules and no clipping or layout changes were introduced. ### Documentation No documentation changes are required; this only corrects existing theme colors. Signed-off-by: Giridhar <[email protected]> Co-authored-by: Giridhar <[email protected]>

• Shablone(22 Sept 26)

  fix(monitor): continue log writes when stdout is unavailable on detached Windows consoles (fixes #10882) (#10889) ### Purpose #10726 introduces a problematic side effect which only surfaced recently in #10882: On Windows 24H2 stdout will be invalid when Syncthing is started detached from a console. This caused the monitors logwriter to fail silently before it writes it a log file. This PR fixes this by letting the multiwriter continue even after failing on stdout. ### Testing #10882 can be reproduced without this PRs commit. With this PR logging does work again. Following scenarios are tested in which the logfile will be written again -console: syncthing.exe -console: start "" syncthing.exe -console: start "" syncthing.exe serve --log-file=path -explorer: double click `go test ./lib/osutil ` checks if the introduced tolerantMultiWriter writes to all targets even on errors. --------- Signed-off-by: Elias <[email protected]> Co-authored-by: Elias <[email protected]>

• Jakob Borg(22 Sept 26)

  fix: disable keepalive on most outgoing HTTP connections (#10891) Where we don't expect connection reuse for further requests this reduces the number of open connection server-side. Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(14 Sept 26)

  fix(model): properly error out when a temp file can't be created (#10883) Such as when the base filename contains a character disallowed on the current filesystem... Signed-off-by: Jakob Borg <[email protected]>

• Syncthing Release Automation(14 Sept 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Jakob Borg(12 Sept 26)

  doc: simplify security reporting note Signed-off-by: Jakob Borg <[email protected]>

• Tomasz Wilczyński(12 Sept 26)

  fix(gui): add accessible labels to buttons in Edit Device modal (fixes #10873) (#10874) fix(gui): add accessible labels to buttons in Edit Device modal (fixes #10873) Currently, the buttons show text on mouse hover or keyboard focus, but they are inaccessible to screen readers due to a lack of any readable labels. However, there is not enough space to add full-length textual labels that would be visible to everyone. Therefore, add only aria labels for screen readers, while keyboard and mouse users can still learn their function via the tooltips. Signed-off-by: Tomasz Wilczyński <[email protected]> Signed-off-by: Tomasz Wilczyński <[email protected]>

• Jakob Borg(12 Sept 26)

  fix(model): introducers should not be able to add themselves to folders (#10880) As documented and intended, introducers should be able to vouch for folders shared with them, but not other folders. Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(08 Sept 26)

  build: give macos security set-key-partition-list the correct password Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(08 Sept 26)

  Merge branch 'infrastructure' * infrastructure: chore(discosrv): add debug headers to ping response chore(stupgrades): allow templating the asset URL

• Jakob Borg(22 Aug 26)

  chore(discosrv): add debug headers to ping response Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(19 Aug 26)

  chore(stupgrades): allow templating the asset URL Signed-off-by: Jakob Borg <[email protected]>

• Syncthing Release Automation(07 Sept 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Jakob Borg(24 Aug 26)

  chore: set User-Agent on all outgoing HTTP requests (#10867) It's only polite, and it enables better troubleshooting in situations like weird-ass requests to the upgrades download service. --------- Signed-off-by: Jakob Borg <[email protected]>

• Syncthing Release Automation(24 Aug 26)

  chore(gui, man, authors): update docs, translations, and contributors

• Jakob Borg(20 Aug 26)

  build(deps): update dependencies (#10865) Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(19 Aug 26)

  build: use Go 1.27, minimum version is Go 1.26 (#10864) ### Purpose 🎉 Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(18 Aug 26)

  Merge branch 'infrastructure' * infrastructure: fix(stdiscosrv): slightly increase reannounce times and smoothing fix(stdiscosrv): 500 errors should be accompanied by log entry fix(ursrv): data problems are the clients fault build: sign docker images

• Jakob Borg(16 Aug 26)

  fix(stdiscosrv): slightly increase reannounce times and smoothing Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(15 Aug 26)

  fix(stdiscosrv): 500 errors should be accompanied by log entry Signed-off-by: Jakob Borg <[email protected]>

• Jakob Borg(15 Aug 26)

  fix(ursrv): data problems are the clients fault Signed-off-by: Jakob Borg <[email protected]>