1.5.0-beta1

Happy Birthday, Cryptomator! 🎉

Today, Cryptomator Turns 10. What once began as a small idea has become a tool trusted by millions of people worldwide to keep their data private in an increasingly connected world.

What's Changed

Added

• User and group management (#376)
• Emergency Access: Allow a council to restore access to a orphaned vault (#390)
• Show pictures of the groups in the Vaults member list (#375)
• Added helm chart

Changed

• Updated Keycloak to 26.5.4
• Update Quarkus to 3.27.2 LTS
• Improved browser locale detection (#371)
• Improved efficiency of keycloak-to-hub data sync (#377)
• Improved efficiency of group-based access permission checks (#372)
• Migrated aes-siv and base encoding libraries to @noble/ciphers and @scure/base (#373)
• Move health check to separate service port (see Required actions for the 1.5.0-beta1 Update for further information)

Security

• CVE-2025-64756, CVE-2025-64118: removed glob and tar dependencies
• CVE-2025-64718, CVE-2025-62522: updated js-yaml and `vite

Required actions for the 1.5.0-beta1 Update

We highly recommend updating Keycloak to version 26.4.1.

The default health check port changed from 8080 to 9000, please consider this change during update:

Docker Compose:

    healthcheck:
      test:
        - CMD-SHELL
---        - (curl -f http://localhost:8080/q/health/live && curl -f http://localhost:8080/api/config) || exit 1
+++        - (curl -f http://localhost:9000/q/health/live && curl -f http://localhost:8080/api/config) || exit 1
      interval: 10s
      timeout: 3s

Kubernetes:

          startupProbe:
            httpGet:
              path: /q/health/started
---           port: 8080
+++           port: 9000
          ...

Full Changelog: 1.4.6...1.5.0-beta1