# Changelog

All notable changes to this project will be documented in this file.

## [2.0.3] - 2026-11-04

### Changed
- Updated dependencies, including `zip` 9.

### Security
- Updated `rustls`, `quinn-proto` and `ctutils` to releases that fix known vulnerabilities.
- Moved to `zip` 9, which fixes known vulnerabilities in archive extraction. `selfupdate` reads the binary out of the archive directly and was not affected.

## [2.0.2] - 2026-09-04

### Added
- Accepted `-e` as the short form of `download --exclude`.

### Changed
- Transferred files larger than the memory available, in both directions.
- Left an existing local file intact when a download fails part way through.
- Showed the reason the server gave when it refused a request.
- Updated dependencies.

### Fixed
- Kept a session working across concurrent runs, long server queues, and providers that rotate refresh tokens.
- Listed a tree containing locked folders with `ls --json --recursive` instead of failing on the first one.
- Other minor fixes to `ls --json` output, remote path handling, and the login cache.

### Security
- Verified the downloaded archive against the release checksum before `selfupdate` replaces the binary.

## [2.0.1] - 2026-06-12

### Added
- Accepted a DOI in place of a path, as `remote:10.xxxx/prefix.ID[/sub/path]`.
- Allowed `download` and the read-only commands to run without signing in.

## [2.0.0] - 2026-04-20

First release of the command-line client.

### Added
- Commands `config`, `login`, `logout`, `whoami`, `labs`, `ls`, `mkdir`, `upload`, `download`, `mv`, `cp`, `rm`, `chacl`, `metadata`, `file-metadata`, `version`, and `selfupdate`.
- Release build scripts for Linux, macOS, and Windows.

### Changed
- Sped up transfers by working on folders and files in parallel, bounded by `MDRS_CLIENT_CONCURRENT`.

### Fixed
- Kept the session valid throughout a long-running transfer, and across concurrent runs.
- Handled file and folder names with combining characters consistently.