• v0.8.0 1c262a6d61

    mward4 released this 2026-06-21 23:55:35 -04:00 | 1 commits to main since this release

    Dependency prune, a memtest mislabel fix, concurrent multi-file uploads, and an operator API key for driving the HTTP API outside the browser.

    docker pull gitea.milesward.dev/mward4/openpxe:0.8.0
    docker pull gitea.milesward.dev/mward4/openpxe:latest
    

    Operator API key (x-api-key)

    /api/* is no longer cookie-only. A persisted key — generated on first run, shown in Settings → Advanced → API with Copy + Regenerate — authenticates API calls when sent as the x-api-key header, with the same access as a logged-in operator. Drive uploads, deletes, and config from Postman / scripts / CI without a browser session. Constant-time verified; regenerating invalidates the old key immediately.

    Concurrent, stackable uploads

    Drop several .iso files at once — each gets its own progress row and uploads independently (the browser's per-origin connection cap paces them) instead of the second drop clobbering the first. A page-leave warning fires while uploads are in flight, and a pagehide keepalive-abort tells the server to clean up if you navigate away.

    Abandoned uploads self-heal

    Refreshing or closing the tab mid-upload used to strand a .partial that blocked the next attempt with "already uploading." begin_upload now reclaims a stale .partial (refresh / crash / dropped connection all safe) — the chunked protocol can't resume a dead session anyway.

    memtest86 (and other signed bootables) no longer flagged Windows

    The bulk Windows scan dropped its over-broad "microsoft" UTF-16 marker, which matched the Microsoft-signed Secure-Boot EFI loader that memtest86 — and signed BSDs / firmware tools — ship (the string lives in the loader's FAT long-filename entries). The remaining markers are all Windows-exclusive filenames. INTROSPECT_REV 3 → 4, so existing local ISOs re-probe on first startup and shed the bogus label automatically.

    Leaner dependency tree

    14 unused dependency declarations removed across 7 crates (ponytail audit); quick-xml and x509-parser leave the build entirely. No behavior change — just less to compile and audit.

    Downloads