13.1.0

✨ New Features

Read-Only Mode

• Added read-only instance option for deploying separate public/protected instances
• Read-only mode disables secret creation endpoints while keeping retrieval active
• Allows sharing database between authenticated creation instance and public retrieval instance
• Frontend displays dedicated read-only landing page when enabled
• Enable with --read-only flag

Health Check Endpoint

• Added /health endpoint for health checks
• Added /ready endpoint for readiness checks (separate from health)
• Includes dedicated yopass-server health command for monitoring
• Separate health and readiness checks for better container orchestration support

Configurable Default Expiry

• Added configurable default expiration time for secrets and file uploads
• Allows customizing the default TTL per deployment
• Comprehensive Playwright test coverage for expiry configuration

🐛 Bug Fixes & Improvements

Error Handling

• Improved error handling in upload functionality
• Added rendering fallback for upload component
• Better handling of nil database scenarios

UI/UX Enhancements

• Added visual feedback to copy buttons in Result component
• Code formatting improvements across the codebase

Testing

• Added Playwright E2E tests for read-only mode
• Added comprehensive tests for default expiry configuration
• Fixed configuration handling for non-boolean config values
• Improved Viper config reset in test suite

📦 Dependency Updates

Multiple dependency updates including i18next, react-i18next, TypeScript ESLint, Node types, and various build tools to keep the project secure and up-to-date.

13.0.0

The most notable change in this release is the separation of write endpoints introduced in #3309. Previously fetching and creating a secret happened on the same http endpoint which made it tricky to add access restrictions where you want your organization to be able to create secrets but the world to be able to access them. With this change a secret is accessed via the api on /secret but creation happen on /create/secret. This greatly simplifies oauth proxy setups with yopass. This is a breaking change for api users so have that in mind if you access yopass directly using api tools as those need to be updated as well.

New Translations added 👏

What's Changed

• build(deps): bump react-i18next from 16.3.5 to 16.4.0 in /website by @dependabot[bot] in #3211
• build(deps-dev): bump vite from 7.2.6 to 7.2.7 in /website by @dependabot[bot] in #3212
• build(deps-dev): bump @types/node from 24.10.1 to 24.10.2 in /website by @dependabot[bot] in #3216
• build(deps-dev): bump @vitejs/plugin-react from 5.1.1 to 5.1.2 in /website by @dependabot[bot] in #3215
• build(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 by @dependabot[bot] in #3217
• build(deps-dev): bump typescript-eslint from 8.48.1 to 8.49.0 in /website by @dependabot[bot] in #3213
• Fix multiple UI issues for secret display by @jhaals in #3209
• build(deps): bump openpgp from 6.2.2 to 6.3.0 in /website by @dependabot[bot] in #3218
• build(deps): bump i18next from 25.7.1 to 25.7.2 in /website by @dependabot[bot] in #3214
• build(deps): bump react-i18next from 16.4.0 to 16.4.1 in /website by @dependabot[bot] in #3219
• build(deps-dev): bump daisyui from 5.5.8 to 5.5.11 in /website by @dependabot[bot] in #3220
• build(deps-dev): bump tailwindcss from 4.1.17 to 4.1.18 in /website by @dependabot[bot] in #3223
• build(deps-dev): bump daisyui from 5.5.11 to 5.5.13 in /website by @dependabot[bot] in #3227
• build(deps-dev): bump @tailwindcss/vite from 4.1.17 to 4.1.18 in /website by @dependabot[bot] in #3226
• build(deps-dev): bump autoprefixer from 10.4.22 to 10.4.23 in /website by @dependabot[bot] in #3228
• build(deps): bump react-i18next from 16.4.1 to 16.5.0 in /website by @dependabot[bot] in #3230
• build(deps-dev): bump eslint-plugin-react-refresh from 0.4.24 to 0.4.25 in /website by @dependabot[bot] in #3229
• build(deps-dev): bump @eslint/js from 9.39.1 to 9.39.2 in /website by @dependabot[bot] in #3231
• build(deps-dev): bump daisyui from 5.5.13 to 5.5.14 in /website by @dependabot[bot] in #3232
• build(deps-dev): bump eslint from 9.39.1 to 9.39.2 in /website by @dependabot[bot] in #3233
• build(deps-dev): bump vite from 7.2.7 to 7.3.0 in /website by @dependabot[bot] in #3235
• build(deps): bump i18next from 25.7.2 to 25.7.3 in /website by @dependabot[bot] in #3236
• build(deps-dev): bump typescript-eslint from 8.49.0 to 8.50.0 in /website by @dependabot[bot] in #3237
• build(deps-dev): bump eslint-plugin-react-refresh from 0.4.25 to 0.4.26 in /website by @dependabot[bot] in #3239
• build(deps): bump react-router-dom from 7.10.1 to 7.11.0 in /website by @dependabot[bot] in #3240
• build(deps): bump react-hook-form from 7.68.0 to 7.69.0 in /website by @dependabot[bot] in #3241
• build(deps-dev): bump typescript-eslint from 8.50.0 to 8.50.1 in /website by @dependabot[bot] in #3242
• build(deps-dev): bump typescript-eslint from 8.50.1 to 8.51.0 in /website by @dependabot[bot] in #3244
• build(deps): bump react-i18next from 16.5.0 to 16.5.1 in /website by @dependabot[bot] in #3245
• feat: Add Czech translation (cs) by @vladimirandel in #3222
• build(deps-dev): bump @types/node from 24.10.2 to 25.0.3 in /website by @dependabot[bot] in #3238
• build(deps-dev): bump globals from 16.5.0 to 17.0.0 in /website by @dependabot[bot] in #3246
• build(deps): bump react-hook-form from 7.69.0 to 7.70.0 in /website by @dependabot[bot] in #3247
• build(deps-dev): bump typescript-eslint from 8.51.0 to 8.52.0 in /website by @dependabot[bot] in #3248
• feat(i18n): Add Polish translation (pl) by @pr0way in #3243
• build(deps-dev): bump vite from 7.3.0 to 7.3.1 in /website by @dependabot[bot] in #3249
• build(deps): bump i18next from 25.7.3 to 25.7.4 in /website by @dependabot[bot] in #3250
• build(deps): bump react-router-dom from 7.11.0 to 7.12.0 in /website by @dependabot[bot] in #3251
• build(deps-dev): bump @types/node from 25.0.3 to 25.0.6 in /website by @dependabot[bot] in #3252
• build(deps): bump react-hook-form from 7.70.0 to 7.71.0 in /website by @dependabot[bot] in #3253
• build(deps): bump react-i18next from 16.5.1 to 16.5.2 in /website by @dependabot[bot] in #3254
• build(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 by @dependabot[bot] in #3257
• build(deps-dev): bump @types/node from 25.0.6 to 25.0.8 in /website by @dependabot[bot] in #3258
• build(deps): bump react-i18next from 16.5.2 to 16.5.3 in /website by @dependabot[bot] in #3259
• build(deps): bump react-hook-form from 7.71.0 to 7.71.1 in /website by @dependabot[bot] in #3260
• build(deps-dev): bump prettier from 3.7.4 to 3.8.0 in /website by @dependabot[bot] in #3261
• build(deps-dev): bump typescript-eslint from 8.52.0 to 8.53.0 in /website by @dependabot[bot] in #3255
• build(deps-dev): bump @types/node from 25.0.8 to 25.0.9 in /website by @dependabot[bot] in #3262
• build(deps-dev): bump typescript-eslint from 8.53.0 to 8.53.1 in /website by @dependabot[bot] in #3263
• build(deps): bump i18next from 25.7.4 to 25.8.0 in /website by @dependabot[bot] in #3264
• build(deps-dev): bump prettier from 3.8.0 to 3.8.1 in /website by @dependabot[bot] in #3266
• build(deps-dev): bump @types/node from 25.0.9 to 25.0.10 in /website by @dependabot[bot] in #3267
• build(deps-dev): bump globals from 17.0.0 to 17.1.0 in /website by @dependabot[bot] in #3268
• build(deps-dev): bump @playwright/test from 1.57.0 to 1.58.0 in /website by @dependabot[bot] in #3270
• build(deps-dev): bump typescript-eslint from 8.53.1 to 8.54.0 in /website by @dependabot[bot] in #3272
• build(deps-dev): bump globals from 17.1.0 to 17.2.0 in /website by @dependabot[bot] in #3273
• build(deps): bump react-i18next from 16.5.3 to 16.5.4 in /website by @dependabot[bot] in #3274
• build(deps): bump react-router-dom from 7.12.0 to 7.13.0 in /website by @dependabot[bot] in #3269
• build(deps-dev): bump @types/node from 25.0.10 to 25.1.0 in /website by @dependabot[bot] in #3275
• build(deps-dev): bump eslint-plugin-react-refresh from 0.4.26 to 0.5.0 in /website by @dependabot[bot] in #3277
• build(deps-dev): bump @types/node from 25.1.0 to 25.2.0 in /website by @dependabot[bot] in #3279
• build(deps-dev): bump @playwright/test from 1.58.0 to 1.58.1 in /website by @dependabot[bot] in #3280
• build(deps-dev): bump globals from 17.2.0 to 17.3.0 in /website by @dependabot[bot] in #3278
• build(deps-dev): bump autoprefixer from 10.4.23 to 10.4.24 in /website by @dependabot[bot] in #3281
• build(deps-dev): bump daisyui from 5.5.14 to 5.5.17 in /website by @dependabot[bot] in #3283
• build(deps-dev): bump @vitejs/plugin-react from 5.1.2 to 5.1.3 in /website by @dependabot[bot] in #3284
• build(deps): bump i18next from 25.8.0 to 25.8.1 in /website by @dependabot[bot] in #3285
• build(deps): bump i18next from 25.8.1 to 25.8.3 in /website by @dependabot[bot] in #3286
• build(deps): bump i18next from 25.8.3 to 25.8.4 in /website by @dependabot[bot] in #3288
• build(d...

12.5.0

What's Changed

• build(deps-dev): bump @playwright/test from 1.56.0 to 1.56.1 in /website by @dependabot[bot] in #3113
• build(deps-dev): bump @types/node from 24.7.2 to 24.8.1 in /website by @dependabot[bot] in #3111
• build(deps-dev): bump daisyui from 5.3.3 to 5.3.7 in /website by @dependabot[bot] in #3112
• build(deps): bump react-i18next from 16.0.1 to 16.1.0 in /website by @dependabot[bot] in #3116
• build(deps-dev): bump @eslint/js from 9.37.0 to 9.38.0 in /website by @dependabot[bot] in #3118
• build(deps-dev): bump eslint from 9.37.0 to 9.38.0 in /website by @dependabot[bot] in #3117
• cdk: support configuring force-onetime-secrets by @cfbao in #3115
• build(deps-dev): bump vite from 7.1.10 to 7.1.11 in /website by @dependabot[bot] in #3120
• build(deps-dev): bump @tailwindcss/vite from 4.1.14 to 4.1.15 in /website by @dependabot[bot] in #3121
• build(deps-dev): bump typescript-eslint from 8.46.1 to 8.46.2 in /website by @dependabot[bot] in #3124
• build(deps-dev): bump @types/node from 24.8.1 to 24.9.1 in /website by @dependabot[bot] in #3125
• build(deps): bump react-i18next from 16.1.0 to 16.1.2 in /website by @dependabot[bot] in #3122
• build(deps): bump react-i18next from 16.1.2 to 16.1.4 in /website by @dependabot[bot] in #3126
• build(deps): bump react-i18next from 16.1.4 to 16.1.5 in /website by @dependabot[bot] in #3130
• build(deps-dev): bump daisyui from 5.3.7 to 5.3.8 in /website by @dependabot[bot] in #3129
• Fix Safari form field access issue in CreateSecret and Upload by @jhaals in #3128
• build(deps-dev): bump vite from 7.1.11 to 7.1.12 in /website by @dependabot[bot] in #3131
• build(deps-dev): bump @tailwindcss/vite from 4.1.15 to 4.1.16 in /website by @dependabot[bot] in #3133
• build(deps): bump react-i18next from 16.1.5 to 16.1.6 in /website by @dependabot[bot] in #3134
• Improve french translation by @ga-lep in #3136
• Improve Go code quality by @jhaals in #3137
• build(deps): bump react-i18next from 16.1.6 to 16.2.0 in /website by @dependabot[bot] in #3138
• build(deps-dev): bump eslint-plugin-react-hooks from 7.0.0 to 7.0.1 in /website by @dependabot[bot] in #3140
• build(deps-dev): bump @vitejs/plugin-react from 5.0.4 to 5.1.0 in /website by @dependabot[bot] in #3141
• build(deps-dev): bump daisyui from 5.3.8 to 5.3.10 in /website by @dependabot[bot] in #3139
• build(deps): bump react-i18next from 16.2.0 to 16.2.1 in /website by @dependabot[bot] in #3142
• build(deps-dev): bump @types/node from 24.9.1 to 24.9.2 in /website by @dependabot[bot] in #3143
• build(deps): bump react-router-dom from 7.9.4 to 7.9.5 in /website by @dependabot[bot] in #3145
• build(deps): bump react-i18next from 16.2.1 to 16.2.3 in /website by @dependabot[bot] in #3146
• build(deps-dev): bump eslint from 9.38.0 to 9.39.0 in /website by @dependabot[bot] in #3148
• build(deps-dev): bump @types/node from 24.9.2 to 24.10.0 in /website by @dependabot[bot] in #3150
• build(deps): bump react-hook-form from 7.65.0 to 7.66.0 in /website by @dependabot[bot] in #3151
• build(deps-dev): bump globals from 16.4.0 to 16.5.0 in /website by @dependabot[bot] in #3149
• build(deps-dev): bump daisyui from 5.3.10 to 5.4.2 in /website by @dependabot[bot] in #3152
• build(deps-dev): bump eslint from 9.39.0 to 9.39.1 in /website by @dependabot[bot] in #3155
• build(deps-dev): bump typescript-eslint from 8.46.2 to 8.46.3 in /website by @dependabot[bot] in #3156
• build(deps): bump react-i18next from 16.2.3 to 16.2.4 in /website by @dependabot[bot] in #3158
• build(deps-dev): bump daisyui from 5.4.2 to 5.4.3 in /website by @dependabot[bot] in #3157
• build(deps-dev): bump daisyui from 5.4.3 to 5.4.5 in /website by @dependabot[bot] in #3161
• build(deps-dev): bump vite from 7.1.12 to 7.2.1 in /website by @dependabot[bot] in #3162
• build(deps): bump i18next from 25.6.0 to 25.6.1 in /website by @dependabot[bot] in #3165
• build(deps-dev): bump @tailwindcss/vite from 4.1.16 to 4.1.17 in /website by @dependabot[bot] in #3163
• build(deps-dev): bump daisyui from 5.4.5 to 5.4.7 in /website by @dependabot[bot] in #3164
• build(deps-dev): bump vite from 7.2.1 to 7.2.2 in /website by @dependabot[bot] in #3167
• build(deps-dev): bump typescript-eslint from 8.46.3 to 8.46.4 in /website by @dependabot[bot] in #3168
• build(deps-dev): bump autoprefixer from 10.4.21 to 10.4.22 in /website by @dependabot[bot] in #3169
• build(deps): bump i18next from 25.6.1 to 25.6.2 in /website by @dependabot[bot] in #3170
• build(deps-dev): bump daisyui from 5.4.7 to 5.5.0 in /website by @dependabot[bot] in #3171
• build(deps-dev): bump @types/node from 24.10.0 to 24.10.1 in /website by @dependabot[bot] in #3172
• build(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 by @dependabot[bot] in #3173
• build(deps): bump react-i18next from 16.2.4 to 16.3.1 in /website by @dependabot[bot] in #3175
• build(deps): bump react-i18next from 16.3.1 to 16.3.3 in /website by @dependabot[bot] in #3176
• build(deps): bump react-router-dom from 7.9.5 to 7.9.6 in /website by @dependabot[bot] in #3177
• build(deps-dev): bump daisyui from 5.5.0 to 5.5.3 in /website by @dependabot[bot] in #3178
• build(deps-dev): bump @vitejs/plugin-react from 5.1.0 to 5.1.1 in /website by @dependabot[bot] in #3174
• build(deps-dev): bump daisyui from 5.5.3 to 5.5.5 in /website by @dependabot[bot] in #3180
• build(deps): bump js-yaml from 4.1.0 to 4.1.1 in /website by @dependabot[bot] in #3181
• build(deps): bump react-hook-form from 7.66.0 to 7.66.1 in /website by @dependabot[bot] in #3182
• build(deps-dev): bump typescript-eslint from 8.46.4 to 8.47.0 in /website by @dependabot[bot] in #3183
• build(deps): bump js-yaml from 3.14.1 to 3.14.2 in /deploy/cdk by @dependabot[bot] in #3184
• build(deps): bump glob from 10.4.5 to 10.5.0 in /deploy/cdk by @dependabot[bot] in #3185
• build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /deploy/cdk by @dependabot[bot] in #3186
• build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @dependabot[bot] in #3187
• build(deps): bump react-i18next from 16.3.3 to 16.3.5 in /website by @dependabot[bot] in #3189
• build(deps): bump i18next from 25.6.2 to 25.6.3 in /website by @dependabot[bot] in #3188
• build(deps): bump go.uber.org/zap from 1.27.0 to 1.27.1 by @dependabot[bot] in #3190
• build(deps-dev): bump vite from 7.2.2 to 7.2.4 in /website by @dependabot[bot] in #3192
• build(deps-dev): bump typescript-eslint from 8.47.0 to 8.48.0 in /website by @dependabot[bot] in #3193
• build(deps-dev): bump @playwright/test from 1.56.1 to 1.57.0 in /website by @dependabot[bot] in #3194
• build(deps-dev): bump prettier from 3.6.2 to 3.7.1 in /website by @dependabot[bot] in #3195
• build(deps): bump react-hook-form from 7.66.1 to 7.67.0 in /website by @dependabot[bot] in #3196
• build(deps-dev): bump prettier from 3.7.1 to 3.7.3 in /website by @dependabot[bot] in #3197
• build(deps): bump i18next from 25.6.3 to 25.7.1 in /website by @dependabot[bot] in #3198
• build(deps-dev): bump vite from 7.2.4 to 7.2.6 in /website by @dependabot[bot] in #3199
• build(deps): bump react-router-dom from 7.9.6 to 7.10.0 in /website by @dependabot[bot] in #3201
  *...

12.4.0

What's Changed

• build(deps-dev): bump typescript-eslint from 8.44.1 to 8.45.0 in /website by @dependabot[bot] in #3055
• build(deps-dev): bump @types/node from 24.5.2 to 24.6.0 in /website by @dependabot[bot] in #3054
• build(deps-dev): bump typescript from 5.9.2 to 5.9.3 in /website by @dependabot[bot] in #3059
• build(deps-dev): bump daisyui from 5.1.25 to 5.1.26 in /website by @dependabot[bot] in #3058
• build(deps-dev): bump @types/node from 24.6.0 to 24.6.1 in /website by @dependabot[bot] in #3060
• Fix result page on small screens by @jhaals in #3062
• Reject malformed PGP messages by @jhaals in #3061
• Enforce function declarations over arrow functions with ESLint by @jhaals in #3063
• Clarify translations by @jhaals in #3065
• Improve contributing guide by @jhaals in #3066
• Update security.md by @jhaals in #3067
• Changes url for current translation in README.md by @ga-lep in #3068
• build(deps-dev): bump tailwindcss from 4.1.13 to 4.1.14 in /website by @dependabot[bot] in #3072
• build(deps): bump i18next from 25.5.2 to 25.5.3 in /website by @dependabot[bot] in #3073
• build(deps-dev): bump eslint-plugin-react-refresh from 0.4.22 to 0.4.23 in /website by @dependabot[bot] in #3071
• build(deps-dev): bump @types/node from 24.6.1 to 24.6.2 in /website by @dependabot[bot] in #3075
• build(deps-dev): bump @tailwindcss/vite from 4.1.13 to 4.1.14 in /website by @dependabot[bot] in #3074
• build(deps-dev): bump eslint-plugin-react-hooks from 5.2.0 to 6.1.0 in /website by @dependabot[bot] in #3070
• build(deps-dev): bump vite from 7.1.7 to 7.1.9 in /website by @dependabot[bot] in #3076
• build(deps-dev): bump eslint from 9.36.0 to 9.37.0 in /website by @dependabot[bot] in #3079
• build(deps): bump react-hook-form from 7.63.0 to 7.64.0 in /website by @dependabot[bot] in #3080
• build(deps-dev): bump daisyui from 5.1.26 to 5.1.27 in /website by @dependabot[bot] in #3081
• build(deps-dev): bump eslint-plugin-react-hooks from 6.1.0 to 6.1.1 in /website by @dependabot[bot] in #3083
• build(deps-dev): bump @types/node from 24.6.2 to 24.7.0 in /website by @dependabot[bot] in #3086
• build(deps-dev): bump @playwright/test from 1.55.1 to 1.56.0 in /website by @dependabot[bot] in #3087
• build(deps-dev): bump typescript-eslint from 8.45.0 to 8.46.0 in /website by @dependabot[bot] in #3088
• Dutch Language by @kevinrosendaal in #3078
• build(deps-dev): bump daisyui from 5.1.27 to 5.1.29 in /website by @dependabot[bot] in #3090
• Switch from pid 0 to pid 1000 by @jhaals in #3091
• cdk: Remove hardcoded values by @jhaals in #3092
• build(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in #3095
• build(deps): bump react-router-dom from 7.9.3 to 7.9.4 in /website by @dependabot[bot] in #3093
• build(deps-dev): bump daisyui from 5.1.29 to 5.1.30 in /website by @dependabot[bot] in #3098
• build(deps-dev): bump @types/node from 24.7.0 to 24.7.1 in /website by @dependabot[bot] in #3097
• build(deps-dev): bump eslint-plugin-react-hooks from 6.1.1 to 7.0.0 in /website by @dependabot[bot] in #3094
• build(deps): bump i18next from 25.5.3 to 25.6.0 in /website by @dependabot[bot] in #3099
• build(deps-dev): bump daisyui from 5.1.30 to 5.2.3 in /website by @dependabot[bot] in #3100
• build(deps-dev): bump @types/node from 24.7.1 to 24.7.2 in /website by @dependabot[bot] in #3102
• build(deps): bump react-hook-form from 7.64.0 to 7.65.0 in /website by @dependabot[bot] in #3101
• build(deps-dev): bump typescript-eslint from 8.46.0 to 8.46.1 in /website by @dependabot[bot] in #3106
• build(deps): bump react-i18next from 16.0.0 to 16.0.1 in /website by @dependabot[bot] in #3104
• build(deps-dev): bump daisyui from 5.2.3 to 5.3.0 in /website by @dependabot[bot] in #3105
• build(deps-dev): bump vite from 7.1.9 to 7.1.10 in /website by @dependabot[bot] in #3107
• build(deps-dev): bump daisyui from 5.3.0 to 5.3.2 in /website by @dependabot[bot] in #3108
• build(deps-dev): bump daisyui from 5.3.2 to 5.3.3 in /website by @dependabot[bot] in #3109
• build(deps-dev): bump eslint-plugin-react-refresh from 0.4.23 to 0.4.24 in /website by @dependabot[bot] in #3110
• Support for the Spanish language by @morhine in #3096

New Contributors

• @ga-lep made their first contribution in #3068
• @morhine made their first contribution in #3096

Full Changelog: 12.3.0...12.4.0

12.3.0

What's Changed

• Norwegian translation by @jksolbakken in #3024

• Add French translation by @greedybro in #3036

• build(deps): bump react-router-dom from 7.8.2 to 7.9.1 in /website by @dependabot[bot] in #3022

• build(deps-dev): bump daisyui from 5.1.10 to 5.1.12 in /website by @dependabot[bot] in #3023

• build(deps-dev): bump @types/node from 24.3.1 to 24.4.0 in /website by @dependabot[bot] in #3021

• build(deps-dev): bump @types/node from 24.4.0 to 24.5.0 in /website by @dependabot[bot] in #3025

• build(deps-dev): bump typescript-eslint from 8.43.0 to 8.44.0 in /website by @dependabot[bot] in #3026

• build(deps-dev): bump @types/node from 24.5.0 to 24.5.1 in /website by @dependabot[bot] in #3027

• build(deps-dev): bump daisyui from 5.1.12 to 5.1.13 in /website by @dependabot[bot] in #3028

• build(deps-dev): bump vite from 7.1.5 to 7.1.6 in /website by @dependabot[bot] in #3029

• build(deps-dev): bump @vitejs/plugin-react from 5.0.2 to 5.0.3 in /website by @dependabot[bot] in #3031

• build(deps-dev): bump @types/node from 24.5.1 to 24.5.2 in /website by @dependabot[bot] in #3030

• build(deps): bump react-hook-form from 7.62.0 to 7.63.0 in /website by @dependabot[bot] in #3034

• build(deps-dev): bump eslint from 9.35.0 to 9.36.0 in /website by @dependabot[bot] in #3033

• build(deps-dev): bump daisyui from 5.1.13 to 5.1.14 in /website by @dependabot[bot] in #3038

• build(deps-dev): bump vite from 7.1.6 to 7.1.7 in /website by @dependabot[bot] in #3040

• build(deps-dev): bump eslint-plugin-react-refresh from 0.4.20 to 0.4.21 in /website by @dependabot[bot] in #3039

• build(deps-dev): bump @playwright/test from 1.55.0 to 1.55.1 in /website by @dependabot[bot] in #3041

• build(deps-dev): bump typescript-eslint from 8.44.0 to 8.44.1 in /website by @dependabot[bot] in #3037

• build(deps-dev): bump daisyui from 5.1.14 to 5.1.18 in /website by @dependabot[bot] in #3043

• build(deps): bump react-router-dom from 7.9.1 to 7.9.2 in /website by @dependabot[bot] in #3042

• build(deps-dev): bump daisyui from 5.1.18 to 5.1.23 in /website by @dependabot[bot] in #3044

• build(deps-dev): bump eslint-plugin-react-refresh from 0.4.21 to 0.4.22 in /website by @dependabot[bot] in #3045

• build(deps-dev): bump daisyui from 5.1.23 to 5.1.25 in /website by @dependabot[bot] in #3048

• build(deps-dev): bump @vitejs/plugin-react from 5.0.3 to 5.0.4 in /website by @dependabot[bot] in #3047

• build(deps): bump react-router-dom from 7.9.2 to 7.9.3 in /website by @dependabot[bot] in #3049

• build(deps): bump react-i18next from 15.7.3 to 16.0.0 in /website by @dependabot[bot] in #3046

New Contributors

• @jksolbakken made their first contribution in #3024
• @greedybro made their first contribution in #3036

Full Changelog: 12.2.0...12.3.0

12.2.0

What's Changed

• Add trusted proxy support for accurate client IP logging by @jhaals in #3008
• Switch navbar button between Upload and Text based on current route by @jhaals in #3011
• Add privacy notice and imprint footer links controlled by backend by @jhaals in #3012
• Overall styling improvements by @jhaals in #3016
• Fix expiration label overflow in small screens by @piqusy in #3019
• Add support for --force-onetime-secrets by @jhaals in #3020
• Add BY and RU Languages by @lifeindarkside in #3015
• build(deps-dev): bump globals from 16.3.0 to 16.4.0 in /website by @dependabot[bot] in #3009
• build(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 by @dependabot[bot] in #3004
• build(deps-dev): bump daisyui from 5.1.9 to 5.1.10 in /website by @dependabot[bot] in #3013

New Contributors

• @piqusy made their first contribution in #3019
• @lifeindarkside made their first contribution in #3015

Full Changelog: 12.1.0...12.2.0

12.1.0

What's Changed

Most notably German translations thanks to @DerLinkman. Also some csp warnings have been fixed including build bundle optimizations

• build(deps): bump github.com/spf13/pflag from 1.0.9 to 1.0.10 by @dependabot[bot] in #2975
• build(deps): bump openpgp from 6.2.1 to 6.2.2 in /website by @dependabot[bot] in #2977
• build(deps-dev): bump typescript-eslint from 8.41.0 to 8.42.0 in /website by @dependabot[bot] in #2976
• build(deps-dev): bump daisyui from 5.1.3 to 5.1.6 in /website by @dependabot[bot] in #2978
• build(deps): bump react-hook-form from 7.56.4 to 7.62.0 in /website by @dependabot[bot] in #2979
• Remove legacy site by @jhaals in #2980
• build(deps): bump react-qr-code from 2.0.15 to 2.0.18 in /website by @dependabot[bot] in #2984
• build(deps-dev): bump daisyui from 5.1.6 to 5.1.7 in /website by @dependabot[bot] in #2983
• build(deps-dev): bump @types/node from 24.3.0 to 24.3.1 in /website by @dependabot[bot] in #2989
• build(deps-dev): bump tailwindcss from 4.1.12 to 4.1.13 in /website by @dependabot[bot] in #2985
• build(deps): bump i18next from 25.4.2 to 25.5.0 in /website by @dependabot[bot] in #2988
• build(deps): bump github.com/prometheus/client_golang from 1.23.0 to 1.23.1 by @dependabot[bot] in #2986
• build(deps-dev): bump @tailwindcss/vite from 4.1.12 to 4.1.13 in /website by @dependabot[bot] in #2987
• build(deps-dev): bump typescript from 5.8.3 to 5.9.2 in /website by @dependabot[bot] in #2990
• Refactor button styles and update localization strings by @jhaals in #2982
• chore(deps): update Go module dependencies and package-lock.json by @jhaals in #2981
• Fix type casting for Blob creation in Decryptor component by @jhaals in #2992
• Enforce prettier code style by @jhaals in #2993
• build(deps): bump github.com/prometheus/client_golang from 1.23.1 to 1.23.2 by @dependabot[bot] in #2999
• build(deps-dev): bump daisyui from 5.1.7 to 5.1.8 in /website by @dependabot[bot] in #2995
• build(deps): bump i18next from 25.5.0 to 25.5.2 in /website by @dependabot[bot] in #2998
• build(deps-dev): bump @eslint/js from 9.34.0 to 9.35.0 in /website by @dependabot[bot] in #2996
• build(deps-dev): bump eslint from 9.34.0 to 9.35.0 in /website by @dependabot[bot] in #2997
• build(deps-dev): bump typescript-eslint from 8.42.0 to 8.43.0 in /website by @dependabot[bot] in #3002
• build(deps-dev): bump daisyui from 5.1.8 to 5.1.9 in /website by @dependabot[bot] in #3005
• build(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 by @dependabot[bot] in #3003
• build(deps-dev): bump vite from 7.1.4 to 7.1.5 in /website by @dependabot[bot] in #3001
• Add German Translation by @DerLinkman in #2991
• Fix console errors by @jhaals in #3006
• Enhance Vite configuration for optimized builds by @jhaals in #3007

New Contributors

• @DerLinkman made their first contribution in #2991

Full Changelog: 12.0.0...12.1.0

12.0.0

I'm happy to announce Yopass 12.0.0, featuring a completely rewritten modern frontend and enhanced configurability!

🎉 Major Features

✨ Complete Frontend Rewrite

• Modern Technology Stack: Complete rewrite of the frontend using Tailwind CSS and DaisyUI components for improved performance and maintainability
• Enhanced User Experience: Cleaner, more intuitive interface with improved accessibility and responsive design
• New frontend configuration system

🌍 Internationalization Support

• Multi-language Support: Built-in internationalization using react-i18next
• Language Switcher: Dynamic language switching in the UI (currently supports English and Swedish)
• Browser Language Detection: Automatic language detection based on browser preferences
• Extensible Translation System: Easy to add new languages via JSON translation files

🎨 Dark Mode & Theming

• Theme Toggle: Native dark/light mode support with persistent user preference
• Modern Design System: Consistent design language using DaisyUI components
• Improved Visual Design: Enhanced styling with better contrast and readability

🧪 Comprehensive Testing

• Playwright Integration: Modern end-to-end testing framework replacing Cypress
• Extensive Test Coverage: Comprehensive test suites for all major functionality
• Cross-browser Testing: Tests run across Chrome, Firefox, and Safari
• CI/CD Integration: Automated testing in GitHub Actions

🔧 New Configuration Options

Yopass 12.0.0 introduces a powerful dynamic configuration system that allows the frontend to adapt its behavior based on server-side settings. All configuration is now delivered via the /config API endpoint, enabling administrators to control frontend features without requiring frontend rebuilds.

--disable-upload / DISABLE_UPLOAD

• Purpose: Completely disables file upload functionality
• Server Impact: Removes all /file endpoints from the server
• Frontend Impact: Hides upload buttons, routes, and related UI elements
• Use Case: Ideal for deployments that only need text secret sharing
• Default: false (uploads enabled)

--prefetch-secret / PREFETCH_SECRET

• Purpose: Controls whether secrets are prefetched for one-time viewing optimization
• Server Impact: Enables/disables /secret/{id}/status and /file/{id}/status endpoints
• Frontend Impact:
  • When enabled: Shows prefetch information and one-time download warnings
  • When disabled: Secrets are fetched immediately without status checks
• Use Case: Disable for improved privacy (no metadata requests) or simplified UX
• Default: true (prefetching enabled)

--disable-features / DISABLE_FEATURES

• Purpose: Hides the features section on the homepage
• Server Impact: No server-side changes
• Frontend Impact: Removes the features showcase section from the main page
• Use Case: Clean, minimal interface for corporate deployments
• Default: false (features section visible)

--no-language-switcher / NO_LANGUAGE_SWITCHER (New in 12.0.0)

• Purpose: Hides the language switcher from the navigation bar
• Server Impact: No server-side changes
• Frontend Impact: Removes language selection dropdown from the UI
• Use Case: Single-language deployments or custom language handling
• Default: false (language switcher visible)

🔄 Dynamic Configuration Loading

The frontend automatically:

• Fetches configuration on startup from /config endpoint
• Adapts the UI based on server settings without requiring rebuilds
• Caches configuration for improved performance
• Gracefully degrades with default settings if config loading fails

🌐 Environment Variable Support

All configuration flags support environment variables with _ replacing -:

• DISABLE_UPLOAD=true
• PREFETCH_SECRET=false
• DISABLE_FEATURES=true
• NO_LANGUAGE_SWITCHER=true

🛠 Technical Improvements

📁 Project Structure

The frontend has been completely reorganized:

• website/: New modern frontend (Tailwind CSS + DaisyUI)
• legacy-site/: Previous Material-UI frontend (will be removed in the future)

🔄 Migration Notes

• The new frontend maintains full API compatibility with existing deployments
• All existing configuration options continue to work

11.20.0

• Dark mode added thanks to @abjugard 👏
• Fixes a rendering bug for large secrets

What's Changed

• build(deps): bump golang.org/x/crypto from 0.36.0 to 0.37.0 by @dependabot in #2772
• build(deps-dev): bump typescript from 5.8.2 to 5.8.3 in /website by @dependabot in #2773
• build(deps): bump react-router-dom from 7.4.1 to 7.5.0 in /website by @dependabot in #2774
• build(deps): bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 by @dependabot in #2776
• build(deps-dev): bump cypress from 14.2.1 to 14.3.0 in /website by @dependabot in #2777
• build(deps-dev): bump eslint-plugin-cypress from 4.2.0 to 4.2.1 in /website by @dependabot in #2778
• build(deps): bump aws-cdk-lib from 2.187.0 to 2.189.0 in /deploy/cdk by @dependabot in #2780
• build(deps-dev): bump dotenv from 16.4.7 to 16.5.0 in /website by @dependabot in #2781
• build(deps-dev): bump vite from 6.2.5 to 6.2.6 in /website by @dependabot in #2782
• build(deps-dev): bump @types/node from 22.14.0 to 22.14.1 in /website by @dependabot in #2783
• build(deps): bump aws-cdk-lib from 2.189.0 to 2.189.1 in /deploy/cdk by @dependabot in #2784
• build(deps-dev): bump @vitejs/plugin-react from 4.3.4 to 4.4.0 in /website by @dependabot in #2786
• build(deps-dev): bump vite from 6.2.6 to 6.3.1 in /website by @dependabot in #2787
• build(deps): bump react-router-dom from 7.5.0 to 7.5.1 in /website by @dependabot in #2788
• build(deps-dev): bump cypress from 14.3.0 to 14.3.1 in /website by @dependabot in #2789
• build(deps-dev): bump vite from 6.3.1 to 6.3.2 in /website by @dependabot in #2790
• build(deps): bump i18next-browser-languagedetector from 8.0.4 to 8.0.5 in /website by @dependabot in #2791
• build(deps-dev): bump @vitejs/plugin-react from 4.4.0 to 4.4.1 in /website by @dependabot in #2792
• build(deps): bump react-hook-form from 7.55.0 to 7.56.0 in /website by @dependabot in #2793
• build(deps): bump react-hook-form from 7.56.0 to 7.56.1 in /website by @dependabot in #2796
• build(deps-dev): bump cypress from 14.3.1 to 14.3.2 in /website by @dependabot in #2797
• build(deps-dev): bump eslint-plugin-cypress from 4.2.1 to 4.3.0 in /website by @dependabot in #2798
• build(deps-dev): bump vite from 6.3.2 to 6.3.3 in /website by @dependabot in #2799
• build(deps): bump react-i18next from 15.4.1 to 15.5.1 in /website by @dependabot in #2800
• build(deps): bump react-router-dom from 7.5.1 to 7.5.2 in /website by @dependabot in #2802
• build(deps-dev): bump @types/node from 22.14.1 to 22.15.1 in /website by @dependabot in #2801
• build(deps-dev): bump @types/node from 22.15.1 to 22.15.2 in /website by @dependabot in #2803
• build(deps): bump react-router-dom from 7.5.2 to 7.5.3 in /website by @dependabot in #2804
• build(deps-dev): bump @types/node from 22.15.2 to 22.15.3 in /website by @dependabot in #2806
• build(deps-dev): bump vite from 6.3.3 to 6.3.4 in /website by @dependabot in #2807
• build(deps): bump i18next-browser-languagedetector from 8.0.5 to 8.1.0 in /website by @dependabot in #2808
• build(deps): bump react-hook-form from 7.56.1 to 7.56.2 in /website by @dependabot in #2811
• build(deps): bump golang.org/x/crypto from 0.37.0 to 0.38.0 by @dependabot in #2812
• build(deps-dev): bump vite from 6.3.4 to 6.3.5 in /website by @dependabot in #2814
• build(deps-dev): bump @types/node from 22.15.3 to 22.15.11 in /website by @dependabot in #2813
• build(deps-dev): bump cypress from 14.3.2 to 14.3.3 in /website by @dependabot in #2816
• build(deps-dev): bump @types/node from 22.15.11 to 22.15.14 in /website by @dependabot in #2818
• build(deps-dev): bump @types/node from 22.15.14 to 22.15.16 in /website by @dependabot in #2820
• build(deps): bump react-hook-form from 7.56.2 to 7.56.3 in /website by @dependabot in #2819
• build(deps): bump react-router-dom from 7.5.3 to 7.6.0 in /website by @dependabot in #2821
• build(deps-dev): bump @types/node from 22.15.16 to 22.15.17 in /website by @dependabot in #2822
• build(deps-dev): bump @types/node from 22.15.17 to 22.15.18 in /website by @dependabot in #2824
• build(deps-dev): bump start-server-and-test from 2.0.11 to 2.0.12 in /website by @dependabot in #2826
• build(deps-dev): bump @types/node from 22.15.18 to 22.15.19 in /website by @dependabot in #2828
• Add dark mode by @abjugard in #2809
• build(deps): bump i18next from 24.2.3 to 25.1.3 in /website by @dependabot in #2825
• build(deps): bump react-hook-form from 7.56.3 to 7.56.4 in /website by @dependabot in #2827
• adding Bahasa Indonesia translation by @erolj in #2795
• fix: Do not display QR code for large secrets by @jhaals in #2829

New Contributors

• @abjugard made their first contribution in #2809
• @erolj made their first contribution in #2795

Full Changelog: 11.19.1...11.20.0

11.19.1

This release fixes an accidental breaking change introduced in 11.19.0 #2771

What's Changed

• build(deps-dev): bump @types/node from 22.13.10 to 22.13.11 in /website by @dependabot in #2749
• build(deps): bump aws-cdk-lib from 2.177.0 to 2.184.0 in /deploy/cdk by @dependabot in #2751
• build(deps-dev): bump vite from 6.2.2 to 6.2.3 in /website by @dependabot in #2752
• build(deps-dev): bump cypress from 14.2.0 to 14.2.1 in /website by @dependabot in #2755
• build(deps-dev): bump @types/node from 22.13.11 to 22.13.14 in /website by @dependabot in #2757
• build(deps): bump github.com/spf13/viper from 1.20.0 to 1.20.1 by @dependabot in #2758
• build(deps): bump react-hook-form from 7.54.2 to 7.55.0 in /website by @dependabot in #2763
• build(deps): bump react-router-dom from 7.4.0 to 7.4.1 in /website by @dependabot in #2761
• build(deps-dev): bump vite from 6.2.3 to 6.2.4 in /website by @dependabot in #2765
• build(deps-dev): bump @types/node from 22.13.14 to 22.13.17 in /website by @dependabot in #2766
• build(deps): bump aws-cdk-lib from 2.184.0 to 2.187.0 in /deploy/cdk by @dependabot in #2767
• build(deps-dev): bump @types/node from 22.13.17 to 22.14.0 in /website by @dependabot in #2768
• build(deps-dev): bump vite from 6.2.4 to 6.2.5 in /website by @dependabot in #2770
• Revert "Merge pull request #2143 from 24367dfa/feat/env-var-config" by @jhaals in #2771

Full Changelog: 11.19.0...11.19.1