Recent Releases

1.69.202 May 2025 12:40 major feature: accounting: percentDiff calculation -- (Anagh Kumar Baranwal). build.. Update github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 to CVE-2025-30204 (dependabot bot ). Update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to CVE-2025-30204 (dependabot bot ). Update golang.org/x/crypto to v0.35.0 to CVE-2025-22869 (Nick Craig-Wood). Update golang.org/x/net from 0.36.0 to 0.38.0 to CVE-2025-22870 (dependabot bot ). Update golang.org/x/net to 0.36.0. to CVE-2025-22869 (dependabot bot ). Stop building with go go1.23 as security updates forbade it (Nick Craig-Wood). docker plugin build (Anagh Kumar Baranwal) cmd: crash if rclone is invoked without any arguments (Janne Hellsten). config: Read configuration passwords from stdin even when terminated with EOF (Samantha Bowen). doc (Andrew Kreimer, Danny Garside, eccoisle, Ed Craig-Wood, emyarod, jack, Jugal Kishore, Markus Gerstel, Michael Kebe, Nick Craig-Wood, simonmcnair, simwai, Zachary Vorhies). fs: corruption of SizeSufwith "B" sufin config (eg --min-size) (Nick Craig-Wood). lib/http: race between Serve() and Shutdown() (Nick Craig-Wood). object: memory object out of bounds Seek (Nick Craig-Wood). operations: call fmt.Errorf with wrong err (alingse). rc.. Disable the metrics server when running. rclone rc (hiddenmarten). de/ commands not being available over unix sockets (Nick Craig-Wood). serve nfs: unlikely crash (Nick Craig-Wood). stats: the speed not getting updated after a pause in the processing (Anagh Kumar Baranwal). sync.. cpu spinning when empty directory finding with leading slashes (Nick Craig-Wood). Copy dir modtimes even when copyEmptySrcDirs is false (ll3006). VFS.. directory cache serving stale data (Lorenz Brun). inefficient directory caching when directory reads are slow (huanghaojun). integration test failures (Nick Craig-Wood). Drive.. Metadata: error when setting copy-requires-writer-permission on a folder (Nick Craig-Wood). Dropbox.. Retry link without expiry (Dave Vasilevsky). HTTP.. Correct root
1.69.016 Feb 2025 15:42 major feature: * New backends * ICloud Drive (https://rclone.org/iclouddrive/) (lostb1t) * Cloudinary (https://rclone.org/cloudinary/) (yuval-cloudinary) * New S3 providers: * Outscale (https://rclone.org/s3/#outscale) (Matthias Gatto) * Selectel (https://rclone.org/s3/#selectel) (Nick Craig-Wood) * Security fixes * serve sftp: Resolve CVE-2024-45337 - Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (dependabot) * Rclone was **not** vulnerable to this. * See https://github.com/advisories/GHSA-v778-237x-gjrc * build: Update golang.org/x/net to v0.33.0 to fix CVE-2024-45338 - Non-linear parsing of case-insensitive content (Nick Craig-Wood) * Rclone was **not** vulnerable to this. * See https://github.com/advisories/GHSA-w32m-9786-jp63 * New Features * accounting: Write the current bwlimit to the log on SIGUSR2 (Nick Craig-Wood) * bisync: Change exit code from 2 to 7 for critically aborted run (albertony) * build * Update all dependencies (Nick Craig-Wood) * Replace Windows-specific `NewLazyDLL` with `NewLazySystemDLL` (albertony) * cmd: Change exit code from 1 to 2 for syntax and usage errors (albertony) * docker serve: make sure all mount and VFS options are parsed (Nick Craig-Wood) * doc fixes (albertony, Alexandre Hamez, Anthony Metzidis, buengese, Dan McArdle, David Seifert, Francesco Frassinelli, Michael R. Davis, Nick Craig-Wood, Pawel Palucha, Randy Bush, remygrandin, Sam Harrison, shenpengfeng, tgfisher, Thomas ten Cate, ToM, Tony Metzidis, vintagefuture, Yxxx) * fs: Make `--links` flag global and add new `--local-links` and `--vfs-links` flags (Nick Craig-Wood) * http servers: Disable automatic authentication skipping for unix sockets in http servers (Moises Lima) * This was making it impossible to use unix sockets with an proxy * This might now cause rclone to need authenticaton where it didn't before * oauthutil: a