chore(master): release 2.5.5 (#507)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: github-actions[bot]

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "2.5.4"
+  ".": "2.5.5"
 }

VERSION

@@ -1 +1 @@
-2.5.4
+2.5.5

docker-compose.yml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   file-code-box:
-    image: lanol/filecodebox:2.5.4 # x-release-please-version
+    image: lanol/filecodebox:2.5.5 # x-release-please-version
     volumes:
       - fcb-data:/app/data:rw
     restart: unless-stopped

docs/changelog.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## [2.5.5](https://github.com/vastsa/FileCodeBox/compare/v2.5.4...v2.5.5) (2026-08-29)
+
+
+### Bug Fixes
+
+* **chunk-upload:** persist sanitized filenames ([da1dd06](https://github.com/vastsa/FileCodeBox/commit/da1dd066551cc7cc9a631a0c982b5675bd4b1967))
+* harden chunk upload filename metadata ([5a7195c](https://github.com/vastsa/FileCodeBox/commit/5a7195c5c7d1028500b0e363c6b47130d260e11c))
+* sanitize chunk upload file_name to prevent path traversal ([cebac32](https://github.com/vastsa/FileCodeBox/commit/cebac32145f948bfca7c44c663a0bcdcd9c56830))
+
 ## [2.5.4](https://github.com/vastsa/FileCodeBox/compare/v2.5.3...v2.5.4) (2026-07-23)
 
 

docs/en/changelog.md

@@ -1,6 +1,6 @@
 ## [Unreleased]
 
-<!-- Current release: 2.5.4 x-release-please-version -->
+<!-- Current release: 2.5.5 x-release-please-version -->
 
 ### Added
 

docs/en/index.md

@@ -38,7 +38,7 @@ docker run -d --restart unless-stopped \
   -p 12345:12345 \
   -v ./data:/app/data \
   --name filecodebox \
-  lanol/filecodebox:2.5.4 # x-release-please-version
+  lanol/filecodebox:2.5.5 # x-release-please-version
 ```
 
 Open `http://localhost:12345` and complete the first-run setup.

docs/index.md

@@ -38,7 +38,7 @@ docker run -d --restart unless-stopped \
   -p 12345:12345 \
   -v ./data:/app/data \
   --name filecodebox \
-  lanol/filecodebox:2.5.4 # x-release-please-version
+  lanol/filecodebox:2.5.5 # x-release-please-version
 ```
 
 打开 `http://localhost:12345`，按引导完成首次初始化。

readme.md

@@ -24,7 +24,7 @@
 ## 一条命令开始
 
 ```bash
-docker run -d --restart unless-stopped -p 12345:12345 -v ./data:/app/data --name filecodebox lanol/filecodebox:2.5.4 # x-release-please-version
+docker run -d --restart unless-stopped -p 12345:12345 -v ./data:/app/data --name filecodebox lanol/filecodebox:2.5.5 # x-release-please-version
 ```
 
 访问 `http://localhost:12345`，完成首次初始化。生产环境建议固定版本号；`latest` 指向最新正式版。

readme_en.md

@@ -24,7 +24,7 @@ A lightweight, modern, self-hosted file sharing service. No account required—u
 ## Start with one command
 
 ```bash
-docker run -d --restart unless-stopped -p 12345:12345 -v ./data:/app/data --name filecodebox lanol/filecodebox:2.5.4 # x-release-please-version
+docker run -d --restart unless-stopped -p 12345:12345 -v ./data:/app/data --name filecodebox lanol/filecodebox:2.5.5 # x-release-please-version
 ```
 
 Open `http://localhost:12345` and complete first-run setup. Pin a version in production; `latest` tracks the newest stable release.