chore: release main

[cipherbox-release-bot]

🤖 I have created a release beep boop

0.27.0

0.27.0 (2026-03-23)

Features

• 05: Folder System - IPNS metadata, folder hierarchy, and operations (#39) (8793004)
• 12.1: AES-CTR streaming encryption for media files (#135) (433ae35)
• 12.2: Encrypted Device Registry (#125) (f3e354e)
• 12.3.1: Pre-wipe identity cleanup (#127) (6806153)
• 12.4: MFA + Cross-Device Approval (#128) (e9de010)
• 12.5: MFA polishing, UAT & E2E testing (#131) (7bd4067)
• 12.6: per-file IPNS metadata split (#133) (dee300a)
• 12: Core Kit Identity Provider Foundation (#123) (a07cb26)
• 14: user-to-user encrypted sharing (#183) (84a232d)
• add client-side IPNS signature validation (#88) (8d18b65)
• add desktop binary build to staging deploy (#155) (2cee04e)
• add external file drag-and-drop from Finder/Explorer (#78) (a776885)
• add file/folder details modal with CID and encryption metadata (#82) (96dca2d)
• add image file preview to web UI file browser (#94) (405142b)
• add in-browser text file editor modal (#87) (04bfc8c)
• add matrix background effect to logged-in app shell (#91) (175f26e)
• Add multi-selection and batch operations to file browser (#114) (c2fef51)
• add PDF, audio, and video file preview (#100) (91da9b2)
• add performance instrumentation for IPFS/IPNS and TEE operations (#281) (509188d)
• add staging environment warning banner (#73) (e8b6079)
• add vault export, recovery tool, and export format documentation (Phase 10) (#98) (9e7fe8e)
• api: Add Prometheus metrics and Grafana dashboard for staging monitoring (#141) (835d6c3)
• api: Phase 4.2 - Local IPFS Testing Infrastructure (#38) (56d1c38)
• atomic file upload with server-side quota tracking (#56) (34c0eca)
• ci: add Windows desktop build to staging deployment (d5b1c0a)
• cross-platform desktop E2E testing - phase 11.4 (#223) (c8329c6)
• design: add /design:sync skill for detecting UI drift (#122) (c75b127)
• desktop: macOS desktop catch-up and hybrid metadata fix (#148) (ccad747)
• enhance IPNS functionality with client-side publishing and per-folder keypairs (c0283ba)
• extract core crypto SDK as shared packages (#296) (2cdc3fb)
• IPNS resolution improvement with Someguy sidecar and latency metrics (#284) (c1c96de)
• Linux desktop app with FUSE mount (#220) (0f7cf95)
• phase 10 data portability (#95) (787d881)
• Phase 13 — File Versioning (#161) (60a2dc7)
• phase 15 link sharing (#190) (76258cf)
• phase 15.1 client-side encrypted search (#198) (3236f4a)
• Phase 16 — conflict detection via optimistic concurrency (#253) (f864e50)
• Phase 17 — Recycle Bin (#262) (c0af622)
• Phase 9 — Tauri desktop client with FUSE mount (#63) (07884ee)
• Phase 9.1 — Environment, DevOps & Staging Deployment (#64) (73b5aac)
• remove v1 folder metadata, make v2 FilePointer canonical (#150) (30d982c)
• replace upload modal with collapsible bottom-right popup widget (#90) (e43af30)
• roadmap: update phases and add Webapp Automation Testing (#40) (6e444e5)
• SIWE wallet login + unified identity (Phase 12.3) (#126) (40e704b)
• switch file IPNS keys from deterministic HKDF to random (#181) (7f01f98)
• TEE integration for automatic IPNS republishing (#61) (8f54c59)
• test: add SDK-driven E2E and load test suites (#318) (02ef044)
• web: GDPR account deletion with IPFS unpin (#202) (b981d41)
• web: move multi-select action bar to bottom of file list (#117) (a888781)

Bug Fixes

• 15.1: prevent logout race in search index init (#200) (11abcfa)
• 17.1: close bin integration gaps - CID unpinning + Windows bin (#268) (15a7ece)
• api,crypto: address 6 security review findings (#172) (d222bd0)
• api,crypto: address 6 security review findings (H-01, H-06, H-07, M-01, M-04, M-06) (d222bd0)
• api,web: MFA REQUIRED_SHARE auth flow + E2E test coverage (#213) (133a541)
• api: add missing migration to create shares tables (#186) (26c9d9c)
• api: derive SIWE allowed domains from CORS origins (#207) (4723063)
• api: disable synchronize:true in all environments (#216) (4b4a3b3)
• api: make delegated routing publish fire-and-forget (#308) (e49973a)
• api: save IPNS record to DB before delegated routing publish (#151) (28edbc2)
• api: start new IPNS entries at seq 1 to match client expectation (#255) (493111d)
• auth: google OAuth brave fallback, wallet SIWE, sync & UX fixes (#137) (6e3bbde)
• auth: resolve tab crash, JWKS persistence, and CoreKit auth UAT (#130) (33a4667)
• auto-provision Grafana dashboard on staging deploy (#282) (904663b)
• ci: add bootstrap-sha to skip old unparseable release PRs (#311) (23fecee)
• ci: add Windows desktop build to staging deployment (#196) (d5b1c0a)
• ci: build new shared packages before web/desktop in all workflows (95a511e)
• ci: build shared packages before web/desktop in all workflows (#299) (95a511e)
• ci: chain tag-staging to deploy-staging via workflow_call (#85) (1c41f6d)
• ci: change staging tag format to avoid release-please collision (#326) (293019b)
• ci: consolidate desktop E2E pipeline and add Rust tests (#227) (52159dc)
• ci: enable test-login on staging API (#146) (63b0a69)
• ci: fix desktop E2E failures on macOS and Linux (#228) (dbc4e3d)
• ci: fix desktop E2E on all three platforms (#230) (232e7e8)
• ci: fix desktop E2E warnings and gate staging on E2E results (#240) (fec66f7)
• ci: fix Windows desktop staging build and add Linux desktop build (#232) (62d8319)
• ci: grant contents:write to staging deploy for release upload (#157) (0312006)
• ci: include run ID in release gate success message (#260) (f929643)
• ci: install FUSE-T instead of macFUSE for desktop build (#159) (d151a07)
• ci: poll for E2E completion in release gate (#252) (308619f)
• ci: pre-create GitHub release to avoid desktop build race (#238) (37e46ec)
• ci: pre-create GitHub release to avoid race between desktop builds (37e46ec)
• ci: prevent bash -e from killing release gate on skipped desktop tests (#259) (13d805f)
• ci: prevent bash -e from killing script on run_executed_tests (13d805f)
• ci: prevent parenthesized text in commit subjects breaking Release Please (#192) (1942b80)
• ci: remove custom title pattern, use release-please default (#312) (b865863)
• ci: remove packages/crypto from release-please extra-files (#316) (8f42601)
• ci: remove stale workspace package from API Dockerfile (#305) (1634028)
• ci: resolve parent SHA for paths-filter base in desktop E2E (e5afc27)
• ci: resolve parent SHA for paths-filter in desktop E2E (#242) (e5afc27)
• ci: restart Caddy after web deploy to fix stale bind mount (#68) (9b85dd3)
• ci: scope API client drift check to generated paths only (#310) (f78a87d)
• ci: set explicit empty component for root release-please package (#330) (4fb0ace)
• ci: set release-please title pattern to 'chore: release v${version}' (9cdea31)
• ci: set release-please title pattern to use version instead of component (#317) (9cdea31)
• ci: symlink FUSE-T pkgconfig as fuse.pc for macOS builds (#225) (f2cfb0f)
• ci: use backslash paths for msiexec in WinFsp install (#236) (2d3ec01)
• ci: use bash shell for find-run step in e2e-desktop (#226) (a6e1c4c)
• ci: use bash shell for find-run step in e2e-desktop workflow (a6e1c4c)
• ci: use explicit SHA for paths-filter ref in desktop E2E (#244) (24570e8)
• ci: use query param instead of -f flag in codecov-base gh api call (f1cadfa)
• ci: verify desktop E2E jobs actually ran in release gate (#258) (5b641ca)
• ci: write WinFsp registry key for winfsp-sys build script (#234) (db84431)
• crypto: correct DeviceEntry publicKey validator from 130 to 64 hex chars (f5be3cb)
• crypto: correct DeviceEntry publicKey validator length (#178) (f5be3cb)
• deduplicate auth token refresh with shared Promise (#58) (1bf335c)
• desktop E2E tests pass on all platforms (#231) (30bbaa4)
• desktop: allow FUSE rename on SMB backend (#174) (049ac7b)
• desktop: fix Windows FUSE overwrite race and bin E2E test (#271) (42bbdd7)
• desktop: session restore on cold start and Google OAuth storage fix (#153) (967bcc0)
• desktop: wrap get_dev_key invoke in try/catch for release builds (#167) (1699b5e)
• docker: add database name to postgres healthcheck (#116) (3f58d46)
• docker: restore someguy sidecar with corrected IPNS config (#325) (0e9cb1e)
• docker: use bytes for someguy LIBP2P_MAX_MEMORY flag (#290) (51c22c7)
• docker: use raw byte count for SOMEGUY_LIBP2P_MAX_MEMORY (#328) (89c11c0)
• e2e: clear file input before setInputFiles to fix TC08 (#270) (ec34d0a)
• e2e: clear file input before setInputFiles to fix TC08 re-upload (ec34d0a)
• e2e: eliminate all Zustand store access from E2E tests (#304) (43d7848)
• e2e: use Edit instead of Preview for text files in sharing tests (#250) (ef90514)
• em dash rendering in StagingBanner component (#92) (6bd93ee)
• fall back to DB-cached CID when IPNS delegated routing fails (#60) (83047dd)
• fetch storage quota from backend on mount (#76) (713292e)
• file browser scrolling and layout overflow issues (#89) (8d3f190)
• ipns: prefer DB cache over stale network IPNS records (#203) (8d3c989)
• multi-select action bar button visibility (#120) (d0d41ed)
• remove project-level statusLine config (#276) (a6878a4)
• security: harden auth and sharing subsystems (#267) (4f53611)
• show loading state during vault sync and fix stale closure bug (#65) (b5e30e2)
• strip trailing slash from GRAFANA_URL (#285) (09ced7d)
• strip trailing slash from GRAFANA_URL to prevent 301 redirect (09ced7d)
• subfolder navigation after reload with E2E coverage (#70) (836d53e)
• unpin orphaned IPFS CIDs on failed folder registration (#59) (5842b83)
• web: align MFA enrollment banner with Pencil design (#143) (24d5cd1)
• web: clear share and quota stores on logout (#265) (11dada9)
• web: correct GitHub URL in app footer (#102) (6531077)
• web: Display file encryption metadata in details dialog (#139) (a06fb22)
• web: guard against undefined ipnsName in text editor and details dialog (#145) (8105af9)
• web: Implement lazy file size resolution from per-file IPNS metadata (#163) (6197064)
• web: improve mobile layout for file browser, toolbar, and footer (#154) (f1fa934)
• web: improve modal-close focus styling per PR review (b1f5141)
• web: matrix rain effect visibility improvements (#104) (e4ba8fb)
• web: MFA auth flow + Security tab display bugs (#210) (9fd64d1)
• web: MFA status detection false positive + auth architecture docs (#205) (a395b82)
• web: navigate back to parent on subfolder load failure (#166) (ec24fab)
• web: remove isLoaded check from ensureFolderRegistered guard (#301) (e6fe6ee)
• web: replace double-outline focus style with thicker border (#111) (b1f5141)
• web: restore login footer with API status indicator (#107) (3eaeb89)
• web: update sequence numbers after single-item folder mutations (#256) (e7e8f5f)
• web: use static import for vault store in __E2E helpers (#303) (a09b502)

Build System

• ci,docker: add release-please changelog-sections and remove broken someguy sidecar (#322) (e806cb9)
• docker: upgrade Kubo from v0.34.0 to v0.40.0 (#321) (c2590eb)

---

This PR was generated with Release Please. See documentation.