From c72f71bd028d5a18a36b5ca1a348152954a4f675 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Fri, 14 Feb 2025 13:02:54 +0000
Subject: [PATCH 01/73] Start v1.69.1-DEV development

---
 VERSION                            | 2 +-
 docs/layouts/partials/version.html | 2 +-
 fs/versiontag.go                   | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/VERSION b/VERSION
index 6439851b65393..5f8853011028d 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-v1.69.0
+v1.69.1
diff --git a/docs/layouts/partials/version.html b/docs/layouts/partials/version.html
index 294e240e96106..003a53d3b0e53 100644
--- a/docs/layouts/partials/version.html
+++ b/docs/layouts/partials/version.html
@@ -1 +1 @@
-v1.69.0
\ No newline at end of file
+v1.69.1
\ No newline at end of file
diff --git a/fs/versiontag.go b/fs/versiontag.go
index 0080a00a56981..715d12ab0a0bd 100644
--- a/fs/versiontag.go
+++ b/fs/versiontag.go
@@ -1,4 +1,4 @@
 package fs
 
 // VersionTag of rclone
-var VersionTag = "v1.69.0"
+var VersionTag = "v1.69.1"

From ddaeb0701968ba622a362faad58256f04fa52cb8 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Mon, 13 Jan 2025 18:35:27 +0000
Subject: [PATCH 02/73] doc: make man page well formed for whatis - fixes #7430

---
 bin/make_manual.py | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/bin/make_manual.py b/bin/make_manual.py
index d2e756457431d..2d0fd580e6c5a 100755
--- a/bin/make_manual.py
+++ b/bin/make_manual.py
@@ -7,6 +7,7 @@
 import os
 import re
 import time
+import subprocess
 from datetime import datetime
 
 docpath = "docs/content"
@@ -192,13 +193,23 @@ def main():
     command_docs = read_commands(docpath).replace("\\", "\\\\") # escape \ so we can use command_docs in re.sub
     build_date = datetime.utcfromtimestamp(
             int(os.environ.get('SOURCE_DATE_EPOCH', time.time())))
+    help_output = subprocess.check_output(["rclone", "help"]).decode("utf-8")
     with open(outfile, "w") as out:
         out.write("""\
 %% rclone(1) User Manual
 %% Nick Craig-Wood
 %% %s
 
-""" % build_date.strftime("%b %d, %Y"))
+# NAME
+
+rclone - manage files on cloud storage
+
+# SYNOPSIS
+
+```
+%s
+```
+""" % (build_date.strftime("%b %d, %Y"), help_output))
         for doc in docs:
             contents = read_doc(doc)
             # Substitute the commands into doc.md

From 376a5b1a836db9df21c72ca45bc0781011c2e6b3 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Sat, 28 Dec 2024 16:29:55 +0000
Subject: [PATCH 03/73] serve s3: fix list objects encoding-type

Before this change rclone would always use encoding-type url even if
the client hadn't asked for it.

This confused some clients.

This fixes the problem by leaving the URL encoding to the gofakes3
library which has also been fixed.

Fixes #7836
---
 cmd/serve/s3/backend.go | 4 ++--
 cmd/serve/s3/list.go    | 4 ++--
 go.mod                  | 3 ++-
 go.sum                  | 6 ++++--
 4 files changed, 10 insertions(+), 7 deletions(-)

diff --git a/cmd/serve/s3/backend.go b/cmd/serve/s3/backend.go
index ac0244dfdf78f..42671b11e5441 100644
--- a/cmd/serve/s3/backend.go
+++ b/cmd/serve/s3/backend.go
@@ -52,7 +52,7 @@ func (b *s3Backend) ListBuckets(ctx context.Context) ([]gofakes3.BucketInfo, err
 	for _, entry := range dirEntries {
 		if entry.IsDir() {
 			response = append(response, gofakes3.BucketInfo{
-				Name:         gofakes3.URLEncode(entry.Name()),
+				Name:         entry.Name(),
 				CreationDate: gofakes3.NewContentTime(entry.ModTime()),
 			})
 		}
@@ -227,7 +227,7 @@ func (b *s3Backend) GetObject(ctx context.Context, bucketName, objectName string
 	}
 
 	return &gofakes3.Object{
-		Name:     gofakes3.URLEncode(objectName),
+		Name:     objectName,
 		Hash:     hash,
 		Metadata: meta,
 		Size:     size,
diff --git a/cmd/serve/s3/list.go b/cmd/serve/s3/list.go
index 1bec58d056360..554d152ab4062 100644
--- a/cmd/serve/s3/list.go
+++ b/cmd/serve/s3/list.go
@@ -28,7 +28,7 @@ func (b *s3Backend) entryListR(_vfs *vfs.VFS, bucket, fdPath, name string, addPr
 
 		if entry.IsDir() {
 			if addPrefix {
-				response.AddPrefix(gofakes3.URLEncode(objectPath))
+				response.AddPrefix(objectPath)
 				continue
 			}
 			err := b.entryListR(_vfs, bucket, path.Join(fdPath, object), "", false, response)
@@ -37,7 +37,7 @@ func (b *s3Backend) entryListR(_vfs *vfs.VFS, bucket, fdPath, name string, addPr
 			}
 		} else {
 			item := &gofakes3.Content{
-				Key:          gofakes3.URLEncode(objectPath),
+				Key:          objectPath,
 				LastModified: gofakes3.NewContentTime(entry.ModTime()),
 				ETag:         getFileHash(entry),
 				Size:         entry.Size(),
diff --git a/go.mod b/go.mod
index 962aaea79e310..f4d830b8925ec 100644
--- a/go.mod
+++ b/go.mod
@@ -60,7 +60,7 @@ require (
 	github.com/prometheus/client_golang v1.20.5
 	github.com/putdotio/go-putio/putio v0.0.0-20200123120452-16d982cac2b8
 	github.com/quasilyte/go-ruleguard/dsl v0.3.22
-	github.com/rclone/gofakes3 v0.0.3
+	github.com/rclone/gofakes3 v0.0.4
 	github.com/rfjakob/eme v1.1.2
 	github.com/rivo/uniseg v0.4.7
 	github.com/rogpeppe/go-internal v1.12.0
@@ -177,6 +177,7 @@ require (
 	github.com/lufia/plan9stats v0.0.0-20231016141302-07b5767bb0ed // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/minio/md5-simd v1.1.2 // indirect
+	github.com/minio/xxml v0.0.3 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/onsi/ginkgo v1.16.5 // indirect
 	github.com/panjf2000/ants/v2 v2.9.1 // indirect
diff --git a/go.sum b/go.sum
index 1b0f4578f4019..06a76c5ef9a23 100644
--- a/go.sum
+++ b/go.sum
@@ -461,6 +461,8 @@ github.com/minio/minio-go/v6 v6.0.46/go.mod h1:qD0lajrGW49lKZLtXKtCB4X/qkMf0a5tB
 github.com/minio/minio-go/v7 v7.0.74 h1:fTo/XlPBTSpo3BAMshlwKL5RspXRv9us5UeHEGYCFe0=
 github.com/minio/minio-go/v7 v7.0.74/go.mod h1:qydcVzV8Hqtj1VtEocfxbmVFa2siu6HGa+LDEPogjD8=
 github.com/minio/sha256-simd v0.1.1/go.mod h1:B5e1o+1/KgNmWrSQK08Y6Z1Vb5pwIktudl0J58iy0KM=
+github.com/minio/xxml v0.0.3 h1:ZIpPQpfyG5uZQnqqC0LZuWtPk/WT8G/qkxvO6jb7zMU=
+github.com/minio/xxml v0.0.3/go.mod h1:wcXErosl6IezQIMEWSK/LYC2VS7LJ1dAkgvuyIN3aH4=
 github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
 github.com/moby/sys/mountinfo v0.7.2 h1:1shs6aH5s4o5H2zQLn796ADW1wMrIwHsyJ2v9KouLrg=
@@ -529,8 +531,8 @@ github.com/quic-go/quic-go v0.40.1 h1:X3AGzUNFs0jVuO3esAGnTfvdgvL4fq655WaOi1snv1
 github.com/quic-go/quic-go v0.40.1/go.mod h1:PeN7kuVJ4xZbxSv/4OX6S1USOX8MJvydwpTx31vx60c=
 github.com/rasky/go-xdr v0.0.0-20170124162913-1a41d1a06c93 h1:UVArwN/wkKjMVhh2EQGC0tEc1+FqiLlvYXY5mQ2f8Wg=
 github.com/rasky/go-xdr v0.0.0-20170124162913-1a41d1a06c93/go.mod h1:Nfe4efndBz4TibWycNE+lqyJZiMX4ycx+QKV8Ta0f/o=
-github.com/rclone/gofakes3 v0.0.3 h1:0sKCxJ8TUUAG5KXGuc/fcDKGnzB/j6IjNQui9ntIZPo=
-github.com/rclone/gofakes3 v0.0.3/go.mod h1:z7+o2VUwitO0WuVHReQlOW9jZ03LpeJ0PUFSULyTIds=
+github.com/rclone/gofakes3 v0.0.4 h1:LswpC49VY/UJ1zucoL5ktnOEX6lq3qK7e1aFIAfqCbk=
+github.com/rclone/gofakes3 v0.0.4/go.mod h1:j/UoS+2/Mr7xAlfKhyVC58YyFQmh9uoQA5YZQXQUqmg=
 github.com/redis/go-redis/v9 v9.6.1 h1:HHDteefn6ZkTtY5fGUE8tj8uy85AHk6zP7CpzIAM0y4=
 github.com/redis/go-redis/v9 v9.6.1/go.mod h1:0C0c6ycQsdpVNQpxb1njEQIqkx5UcsM8FJCQLgE9+RA=
 github.com/relvacode/iso8601 v1.3.0 h1:HguUjsGpIMh/zsTczGN3DVJFxTU/GX+MMmzcKoMO7ko=

From 1ef2da31a7c3bed602124f7b049532fce0a59706 Mon Sep 17 00:00:00 2001
From: Matt Ickstadt <mattico8@gmail.com>
Date: Tue, 14 Jan 2025 10:18:53 -0600
Subject: [PATCH 04/73] docs: fix link to Rclone Serve S3

---
 docs/content/s3.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/content/s3.md b/docs/content/s3.md
index 280f5dd6d3d2c..c0565a978ba53 100644
--- a/docs/content/s3.md
+++ b/docs/content/s3.md
@@ -31,7 +31,7 @@ The S3 backend can be used with a number of different providers:
 {{< provider name="Petabox" home="https://petabox.io/" config="/s3/#petabox" >}}
 {{< provider name="Qiniu Cloud Object Storage (Kodo)" home="https://www.qiniu.com/en/products/kodo" config="/s3/#qiniu" >}}
 {{< provider name="RackCorp Object Storage" home="https://www.rackcorp.com/" config="/s3/#RackCorp" >}}
-{{< provider name="Rclone Serve S3" home="/commands/rclone_serve_http/" config="/s3/#rclone" >}}
+{{< provider name="Rclone Serve S3" home="/commands/rclone_serve_s3/" config="/s3/#rclone" >}}
 {{< provider name="Scaleway" home="https://www.scaleway.com/en/object-storage/" config="/s3/#scaleway" >}}
 {{< provider name="Seagate Lyve Cloud" home="https://www.seagate.com/gb/en/services/cloud/storage/" config="/s3/#lyve" >}}
 {{< provider name="SeaweedFS" home="https://github.com/chrislusf/seaweedfs/" config="/s3/#seaweedfs" >}}
@@ -3728,7 +3728,7 @@ location_constraint = au-nsw
 ### Rclone Serve S3 {#rclone}
 
 Rclone can serve any remote over the S3 protocol. For details see the
-[rclone serve s3](/commands/rclone_serve_http/) documentation.
+[rclone serve s3](/commands/rclone_serve_s3/) documentation.
 
 For example, to serve `remote:path` over s3, run the server like this:
 
@@ -3749,7 +3749,7 @@ use_multipart_uploads = false
 ```
 
 Note that setting `disable_multipart_uploads = true` is to work around
-[a bug](/commands/rclone_serve_http/#bugs) which will be fixed in due course.
+[a bug](/commands/rclone_serve_s3/#bugs) which will be fixed in due course.
 
 ### Scaleway
 

From 626bdacd59182621d5a868536b5d2211d8a752c8 Mon Sep 17 00:00:00 2001
From: Matt Ickstadt <matt@beckenterprises.com>
Date: Tue, 14 Jan 2025 10:37:25 -0600
Subject: [PATCH 05/73] docs: fix reference to serves3 setting
 disable_multipart_uploads which was renamed

---
 cmd/serve/s3/serve_s3.md | 2 +-
 docs/content/s3.md       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cmd/serve/s3/serve_s3.md b/cmd/serve/s3/serve_s3.md
index a7cda62326173..1c805ab4809c9 100644
--- a/cmd/serve/s3/serve_s3.md
+++ b/cmd/serve/s3/serve_s3.md
@@ -69,7 +69,7 @@ secret_access_key = SECRET_ACCESS_KEY
 use_multipart_uploads = false
 ```
 
-Note that setting `disable_multipart_uploads = true` is to work around
+Note that setting `use_multipart_uploads = false` is to work around
 [a bug](#bugs) which will be fixed in due course.
 
 ### Bugs
diff --git a/docs/content/s3.md b/docs/content/s3.md
index c0565a978ba53..fa1fbe2e57ae8 100644
--- a/docs/content/s3.md
+++ b/docs/content/s3.md
@@ -3748,7 +3748,7 @@ secret_access_key = SECRET_ACCESS_KEY
 use_multipart_uploads = false
 ```
 
-Note that setting `disable_multipart_uploads = true` is to work around
+Note that setting `use_multipart_uploads = false` is to work around
 [a bug](/commands/rclone_serve_s3/#bugs) which will be fixed in due course.
 
 ### Scaleway

From 1b47b7a6bb77f92f48cd99520f3f51c446d64b4b Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Tue, 14 Jan 2025 20:21:40 +0000
Subject: [PATCH 06/73] vfs: fix race detected by race detector

This race would only happen when --dir-cache-time was very small.

This was noticed in the VFS tests when --dir-cache-time was 100 mS so
is unlikely to affect normal users.
---
 vfs/dir.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/vfs/dir.go b/vfs/dir.go
index da0f8d47c01f1..c72494eee80b3 100644
--- a/vfs/dir.go
+++ b/vfs/dir.go
@@ -66,7 +66,10 @@ func newDir(vfs *VFS, f fs.Fs, parent *Dir, fsDir fs.Directory) *Dir {
 		inode:   newInode(),
 		items:   make(map[string]Node),
 	}
-	d.cleanupTimer = time.AfterFunc(time.Duration(vfs.Opt.DirCacheTime*2), d.cacheCleanup)
+	// Set timer up like this to avoid race of d.cacheCleanup being called
+	// before d.cleanupTimer is assigned to
+	d.cleanupTimer = time.AfterFunc(time.Hour, d.cacheCleanup)
+	d.cleanupTimer.Reset(time.Duration(vfs.Opt.DirCacheTime * 2))
 	return d
 }
 

From 7988300f50ed34a8f86b68c3aa5575787f9b02be Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 15 Jan 2025 16:32:59 +0000
Subject: [PATCH 07/73] fs: fix confusing "didn't find section in config file"
 error

This change decorates the error with the section name not found which
will hopefully save user confusion.

Fixes #8170
---
 backend/googlephotos/googlephotos_test.go | 3 ++-
 fs/cache/cache_test.go                    | 4 ++--
 fs/newfs.go                               | 3 ++-
 fs/rc/rcserver/rcserver_test.go           | 2 +-
 fstest/fstests/fstests.go                 | 2 +-
 5 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/backend/googlephotos/googlephotos_test.go b/backend/googlephotos/googlephotos_test.go
index cd1e0943f8411..0eeb99bcebe91 100644
--- a/backend/googlephotos/googlephotos_test.go
+++ b/backend/googlephotos/googlephotos_test.go
@@ -2,6 +2,7 @@ package googlephotos
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"io"
 	"net/http"
@@ -35,7 +36,7 @@ func TestIntegration(t *testing.T) {
 		*fstest.RemoteName = "TestGooglePhotos:"
 	}
 	f, err := fs.NewFs(ctx, *fstest.RemoteName)
-	if err == fs.ErrorNotFoundInConfigFile {
+	if errors.Is(err, fs.ErrorNotFoundInConfigFile) {
 		t.Skipf("Couldn't create google photos backend - skipping tests: %v", err)
 	}
 	require.NoError(t, err)
diff --git a/fs/cache/cache_test.go b/fs/cache/cache_test.go
index d9d54fa2e13c3..0448f02440e2b 100644
--- a/fs/cache/cache_test.go
+++ b/fs/cache/cache_test.go
@@ -131,7 +131,7 @@ func TestPutErr(t *testing.T) {
 	assert.Equal(t, 1, Entries())
 
 	fNew, err := GetFn(context.Background(), "mock:/", create)
-	require.Equal(t, fs.ErrorNotFoundInConfigFile, err)
+	require.True(t, errors.Is(err, fs.ErrorNotFoundInConfigFile))
 	require.Equal(t, f, fNew)
 
 	assert.Equal(t, 1, Entries())
@@ -141,7 +141,7 @@ func TestPutErr(t *testing.T) {
 	PutErr("mock:/file.txt", f, fs.ErrorNotFoundInConfigFile)
 
 	fNew, err = GetFn(context.Background(), "mock:/file.txt", create)
-	require.Equal(t, fs.ErrorNotFoundInConfigFile, err)
+	require.True(t, errors.Is(err, fs.ErrorNotFoundInConfigFile))
 	require.Equal(t, f, fNew)
 
 	assert.Equal(t, 1, Entries())
diff --git a/fs/newfs.go b/fs/newfs.go
index d59a505a64eb2..f4f7dd346b28c 100644
--- a/fs/newfs.go
+++ b/fs/newfs.go
@@ -6,6 +6,7 @@ import (
 	"context"
 	"crypto/md5"
 	"encoding/base64"
+	"fmt"
 	"os"
 	"path/filepath"
 	"strings"
@@ -104,7 +105,7 @@ func ParseRemote(path string) (fsInfo *RegInfo, configName, fsPath string, conne
 			m := ConfigMap("", nil, configName, parsed.Config)
 			fsName, ok = m.Get("type")
 			if !ok {
-				return nil, "", "", nil, ErrorNotFoundInConfigFile
+				return nil, "", "", nil, fmt.Errorf("%w (%q)", ErrorNotFoundInConfigFile, configName)
 			}
 		}
 	} else {
diff --git a/fs/rc/rcserver/rcserver_test.go b/fs/rc/rcserver/rcserver_test.go
index 29738b614fc24..f79a926cff582 100644
--- a/fs/rc/rcserver/rcserver_test.go
+++ b/fs/rc/rcserver/rcserver_test.go
@@ -358,7 +358,7 @@ func TestRemoteServing(t *testing.T) {
 			URL:    "[notfoundremote:]/",
 			Status: http.StatusInternalServerError,
 			Expected: `{
-	"error": "failed to make Fs: didn't find section in config file",
+	"error": "failed to make Fs: didn't find section in config file (\"notfoundremote\")",
 	"input": null,
 	"path": "/",
 	"status": 500
diff --git a/fstest/fstests/fstests.go b/fstest/fstests/fstests.go
index 2e840cd0c3baa..6024177c65e5c 100644
--- a/fstest/fstests/fstests.go
+++ b/fstest/fstests/fstests.go
@@ -459,7 +459,7 @@ func Run(t *testing.T, opt *Opt) {
 	subRemoteName, subRemoteLeaf, err = fstest.RandomRemoteName(remoteName)
 	require.NoError(t, err)
 	f, err = fs.NewFs(context.Background(), subRemoteName)
-	if err == fs.ErrorNotFoundInConfigFile {
+	if errors.Is(err, fs.ErrorNotFoundInConfigFile) {
 		t.Logf("Didn't find %q in config file - skipping tests", remoteName)
 		return
 	}

From 6cbb9fd7cbfb500517c2c78e7833e0b4ef4fd952 Mon Sep 17 00:00:00 2001
From: Dimitri Papadopoulos
 <3234522+DimitriPapadopoulos@users.noreply.github.com>
Date: Wed, 15 Jan 2025 14:01:06 +0100
Subject: [PATCH 08/73] docs: fix typos found by codespell in docs and code
 comments

---
 backend/azurefiles/azurefiles.go                |  2 +-
 backend/iclouddrive/iclouddrive.go              |  2 +-
 backend/imagekit/client/media.go                |  2 +-
 backend/pcloud/pcloud.go                        |  2 +-
 backend/s3/s3.go                                |  4 ++--
 bin/not-in-stable.go                            | 10 +++++-----
 cmd/bisync/compare.go                           |  2 +-
 cmd/bisync/listing.go                           |  2 +-
 cmd/bisync/testdata/test_resync/golden/test.log |  2 +-
 cmd/bisync/testdata/test_resync/scenario.txt    |  4 ++--
 cmd/config/config.go                            |  4 ++--
 cmd/copyurl/copyurl.go                          |  2 +-
 cmd/serve/nfs/filesystem.go                     |  2 +-
 cmd/serve/nfs/nfs.go                            |  2 +-
 cmd/serve/s3/backend.go                         |  4 ++--
 cmd/serve/s3/list.go                            |  2 +-
 docs/content/bisync.md                          | 12 ++++++------
 docs/content/crypt.md                           |  2 +-
 docs/content/docs.md                            |  2 +-
 docs/content/googlephotos.md                    |  2 +-
 docs/content/rc.md                              |  2 +-
 docs/content/s3.md                              |  2 +-
 fs/fshttp/http_test.go                          |  2 +-
 fs/log.go                                       |  2 +-
 fs/object/object.go                             |  2 +-
 fs/object/object_test.go                        |  2 +-
 fstest/fstests/fstests.go                       |  2 +-
 vfs/rc.go                                       |  2 +-
 vfs/vfs.go                                      |  2 +-
 vfs/vfscache/item_test.go                       |  2 +-
 30 files changed, 43 insertions(+), 43 deletions(-)

diff --git a/backend/azurefiles/azurefiles.go b/backend/azurefiles/azurefiles.go
index acff5be19fd2d..7d9a53075591a 100644
--- a/backend/azurefiles/azurefiles.go
+++ b/backend/azurefiles/azurefiles.go
@@ -899,7 +899,7 @@ func (o *Object) getMetadata(ctx context.Context) error {
 
 // Hash returns the MD5 of an object returning a lowercase hex string
 //
-// May make a network request becaue the [fs.List] method does not
+// May make a network request because the [fs.List] method does not
 // return MD5 hashes for DirEntry
 func (o *Object) Hash(ctx context.Context, ty hash.Type) (string, error) {
 	if ty != hash.MD5 {
diff --git a/backend/iclouddrive/iclouddrive.go b/backend/iclouddrive/iclouddrive.go
index 591d817182069..7228db0609874 100644
--- a/backend/iclouddrive/iclouddrive.go
+++ b/backend/iclouddrive/iclouddrive.go
@@ -445,7 +445,7 @@ func (f *Fs) Copy(ctx context.Context, src fs.Object, remote string) (fs.Object,
 	}
 
 	// build request
-	// cant use normal rename as file needs to be "activated" first
+	// can't use normal rename as file needs to be "activated" first
 
 	r := api.NewUpdateFileInfo()
 	r.DocumentID = doc.DocumentID
diff --git a/backend/imagekit/client/media.go b/backend/imagekit/client/media.go
index d495b713b152e..1d4ee030bd2db 100644
--- a/backend/imagekit/client/media.go
+++ b/backend/imagekit/client/media.go
@@ -75,7 +75,7 @@ type MoveFolderParam struct {
 	DestinationPath  string `validate:"nonzero" json:"destinationPath"`
 }
 
-// JobIDResponse respresents response struct with JobID for folder operations
+// JobIDResponse represents response struct with JobID for folder operations
 type JobIDResponse struct {
 	JobID string `json:"jobId"`
 }
diff --git a/backend/pcloud/pcloud.go b/backend/pcloud/pcloud.go
index f198c556383f7..763784645c696 100644
--- a/backend/pcloud/pcloud.go
+++ b/backend/pcloud/pcloud.go
@@ -424,7 +424,7 @@ func (f *Fs) newSingleConnClient(ctx context.Context) (*rest.Client, error) {
 	})
 	// Set our own http client in the context
 	ctx = oauthutil.Context(ctx, baseClient)
-	// create a new oauth client, re-use the token source
+	// create a new oauth client, reuse the token source
 	oAuthClient := oauth2.NewClient(ctx, f.ts)
 	return rest.NewClient(oAuthClient).SetRoot("https://" + f.opt.Hostname), nil
 }
diff --git a/backend/s3/s3.go b/backend/s3/s3.go
index a0eda19ab23ae..d487d9404ba1a 100644
--- a/backend/s3/s3.go
+++ b/backend/s3/s3.go
@@ -3344,7 +3344,7 @@ func setQuirks(opt *Options) {
 		listObjectsV2         = true // Always use ListObjectsV2 instead of ListObjects
 		virtualHostStyle      = true // Use bucket.provider.com instead of putting the bucket in the URL
 		urlEncodeListings     = true // URL encode the listings to help with control characters
-		useMultipartEtag      = true // Set if Etags for multpart uploads are compatible with AWS
+		useMultipartEtag      = true // Set if Etags for multipart uploads are compatible with AWS
 		useAcceptEncodingGzip = true // Set Accept-Encoding: gzip
 		mightGzip             = true // assume all providers might use content encoding gzip until proven otherwise
 		useAlreadyExists      = true // Set if provider returns AlreadyOwnedByYou or no error if you try to remake your own bucket
@@ -6057,7 +6057,7 @@ func (f *Fs) OpenChunkWriter(ctx context.Context, remote string, src fs.ObjectIn
 			if mOut == nil {
 				err = fserrors.RetryErrorf("internal error: no info from multipart upload")
 			} else if mOut.UploadId == nil {
-				err = fserrors.RetryErrorf("internal error: no UploadId in multpart upload: %#v", *mOut)
+				err = fserrors.RetryErrorf("internal error: no UploadId in multipart upload: %#v", *mOut)
 			}
 		}
 		return f.shouldRetry(ctx, err)
diff --git a/bin/not-in-stable.go b/bin/not-in-stable.go
index 57a0257600b43..5f988af8271c2 100644
--- a/bin/not-in-stable.go
+++ b/bin/not-in-stable.go
@@ -29,7 +29,7 @@ func readCommits(from, to string) (logMap map[string]string, logs []string) {
 	cmd := exec.Command("git", "log", "--oneline", from+".."+to)
 	out, err := cmd.Output()
 	if err != nil {
-		log.Fatalf("failed to run git log %s: %v", from+".."+to, err) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. intead of log.
+		log.Fatalf("failed to run git log %s: %v", from+".."+to, err) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. instead of log.
 	}
 	logMap = map[string]string{}
 	logs = []string{}
@@ -39,7 +39,7 @@ func readCommits(from, to string) (logMap map[string]string, logs []string) {
 		}
 		match := logRe.FindSubmatch(line)
 		if match == nil {
-			log.Fatalf("failed to parse line: %q", line) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. intead of log.
+			log.Fatalf("failed to parse line: %q", line) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. instead of log.
 		}
 		var hash, logMessage = string(match[1]), string(match[2])
 		logMap[logMessage] = hash
@@ -52,12 +52,12 @@ func main() {
 	flag.Parse()
 	args := flag.Args()
 	if len(args) != 0 {
-		log.Fatalf("Syntax: %s", os.Args[0]) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. intead of log.
+		log.Fatalf("Syntax: %s", os.Args[0]) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. instead of log.
 	}
 	// v1.54.0
 	versionBytes, err := os.ReadFile("VERSION")
 	if err != nil {
-		log.Fatalf("Failed to read version: %v", err) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. intead of log.
+		log.Fatalf("Failed to read version: %v", err) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. instead of log.
 	}
 	if versionBytes[0] == 'v' {
 		versionBytes = versionBytes[1:]
@@ -65,7 +65,7 @@ func main() {
 	versionBytes = bytes.TrimSpace(versionBytes)
 	semver := semver.New(string(versionBytes))
 	stable := fmt.Sprintf("v%d.%d", semver.Major, semver.Minor-1)
-	log.Printf("Finding commits in %v not in stable %s", semver, stable) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. intead of log.
+	log.Printf("Finding commits in %v not in stable %s", semver, stable) //nolint:gocritic // Don't include gocritic when running golangci-lint to avoid ruleguard suggesting fs. instead of log.
 	masterMap, masterLogs := readCommits(stable+".0", "master")
 	stableMap, _ := readCommits(stable+".0", stable+"-stable")
 	for _, logMessage := range masterLogs {
diff --git a/cmd/bisync/compare.go b/cmd/bisync/compare.go
index 75eac3b304fbf..774875dbb1580 100644
--- a/cmd/bisync/compare.go
+++ b/cmd/bisync/compare.go
@@ -218,7 +218,7 @@ func (b *bisyncRun) setFromCompareFlag(ctx context.Context) error {
 	if b.opt.CompareFlag == "" {
 		return nil
 	}
-	var CompareFlag CompareOpt // for exlcusions
+	var CompareFlag CompareOpt // for exclusions
 	opts := strings.Split(b.opt.CompareFlag, ",")
 	for _, opt := range opts {
 		switch strings.ToLower(strings.TrimSpace(opt)) {
diff --git a/cmd/bisync/listing.go b/cmd/bisync/listing.go
index 13179b26f106e..7451a5cbb4dc9 100644
--- a/cmd/bisync/listing.go
+++ b/cmd/bisync/listing.go
@@ -394,7 +394,7 @@ func parseHash(str string) (string, string, error) {
 	return "", "", fmt.Errorf("invalid hash %q", str)
 }
 
-// checkListing verifies that listing is not empty (unless resynching)
+// checkListing verifies that listing is not empty (unless resyncing)
 func (b *bisyncRun) checkListing(ls *fileList, listing, msg string) error {
 	if b.opt.Resync || !ls.empty() {
 		return nil
diff --git a/cmd/bisync/testdata/test_resync/golden/test.log b/cmd/bisync/testdata/test_resync/golden/test.log
index f9488a672573b..13a3bddcb6e0a 100644
--- a/cmd/bisync/testdata/test_resync/golden/test.log
+++ b/cmd/bisync/testdata/test_resync/golden/test.log
@@ -23,7 +23,7 @@ INFO  : Validating listings for Path1 "{path1/}" vs Path2 "{path2/}"
 INFO  : Bisync successful
 (05)  : move-listings empty-path1
 
-(06)  : test 2. resync with empty path2, resulting in synching all content to path2.
+(06)  : test 2. resync with empty path2, resulting in syncing all content to path2.
 (07)  : purge-children {path2/}
 (08)  : bisync resync
 INFO  : Setting --ignore-listing-checksum as neither --checksum nor --compare checksum are set.
diff --git a/cmd/bisync/testdata/test_resync/scenario.txt b/cmd/bisync/testdata/test_resync/scenario.txt
index 078254646fa85..4a0e864752264 100644
--- a/cmd/bisync/testdata/test_resync/scenario.txt
+++ b/cmd/bisync/testdata/test_resync/scenario.txt
@@ -1,6 +1,6 @@
 test resync
 # 1. Resync with empty Path1, resulting in copying all content FROM Path2
-# 2. Resync with empty Path2, resulting in synching all content TO Path2
+# 2. Resync with empty Path2, resulting in syncing all content TO Path2
 # 3. Exercise all of the various file difference scenarios during a resync:
 #    File       Path1       Path2           Expected action     Who wins
 #  - file1.txt  Exists      Missing         Sync Path1 >Path2   Path1
@@ -17,7 +17,7 @@ purge-children {path1/}
 bisync resync
 move-listings empty-path1
 
-test 2. resync with empty path2, resulting in synching all content to path2.
+test 2. resync with empty path2, resulting in syncing all content to path2.
 purge-children {path2/}
 bisync resync
 move-listings empty-path2
diff --git a/cmd/config/config.go b/cmd/config/config.go
index 4aefe62c02834..90630a9bca274 100644
--- a/cmd/config/config.go
+++ b/cmd/config/config.go
@@ -549,12 +549,12 @@ password to re-encrypt the config.
 
 When |--password-command| is called to change the password then the
 environment variable |RCLONE_PASSWORD_CHANGE=1| will be set. So if
-changing passwords programatically you can use the environment
+changing passwords programmatically you can use the environment
 variable to distinguish which password you must supply.
 
 Alternatively you can remove the password first (with |rclone config
 encryption remove|), then set it again with this command which may be
-easier if you don't mind the unecrypted config file being on the disk
+easier if you don't mind the unencrypted config file being on the disk
 briefly.
 `, "|", "`"),
 	RunE: func(command *cobra.Command, args []string) error {
diff --git a/cmd/copyurl/copyurl.go b/cmd/copyurl/copyurl.go
index 2a615de28977b..c5f46cbc70078 100644
--- a/cmd/copyurl/copyurl.go
+++ b/cmd/copyurl/copyurl.go
@@ -54,7 +54,7 @@ destination if there is one with the same name.
 Setting |--stdout| or making the output file name |-|
 will cause the output to be written to standard output.
 
-### Troublshooting
+### Troubleshooting
 
 If you can't get |rclone copyurl| to work then here are some things you can try:
 
diff --git a/cmd/serve/nfs/filesystem.go b/cmd/serve/nfs/filesystem.go
index 15e786c49c993..fe30326cb3846 100644
--- a/cmd/serve/nfs/filesystem.go
+++ b/cmd/serve/nfs/filesystem.go
@@ -194,7 +194,7 @@ func (f *FS) Chown(name string, uid, gid int) (err error) {
 	return file.Chown(uid, gid)
 }
 
-// Chtimes changes the acces time and modified time
+// Chtimes changes the access time and modified time
 func (f *FS) Chtimes(name string, atime time.Time, mtime time.Time) (err error) {
 	defer log.Trace(name, "atime=%v, mtime=%v", atime, mtime)("err=%v", &err)
 	return f.vfs.Chtimes(name, atime, mtime)
diff --git a/cmd/serve/nfs/nfs.go b/cmd/serve/nfs/nfs.go
index acbe943f59dc2..ad94c5a496575 100644
--- a/cmd/serve/nfs/nfs.go
+++ b/cmd/serve/nfs/nfs.go
@@ -145,7 +145,7 @@ that it uses an on disk cache, but the cache entries are held as
 symlinks. Rclone will use the handle of the underlying file as the NFS
 handle which improves performance. This sort of cache can't be backed
 up and restored as the underlying handles will change. This is Linux
-only. It requres running rclone as root or with |CAP_DAC_READ_SEARCH|.
+only. It requires running rclone as root or with |CAP_DAC_READ_SEARCH|.
 You can run rclone with this extra permission by doing this to the
 rclone binary |sudo setcap cap_dac_read_search+ep /path/to/rclone|.
 
diff --git a/cmd/serve/s3/backend.go b/cmd/serve/s3/backend.go
index 42671b11e5441..33ff6387b96d5 100644
--- a/cmd/serve/s3/backend.go
+++ b/cmd/serve/s3/backend.go
@@ -158,7 +158,7 @@ func (b *s3Backend) HeadObject(ctx context.Context, bucketName, objectName strin
 	}, nil
 }
 
-// GetObject fetchs the object from the filesystem.
+// GetObject fetches the object from the filesystem.
 func (b *s3Backend) GetObject(ctx context.Context, bucketName, objectName string, rangeRequest *gofakes3.ObjectRangeRequest) (obj *gofakes3.Object, err error) {
 	_vfs, err := b.s.getVFS(ctx)
 	if err != nil {
@@ -400,7 +400,7 @@ func (b *s3Backend) deleteObject(ctx context.Context, bucketName, objectName str
 	}
 
 	fp := path.Join(bucketName, objectName)
-	// S3 does not report an error when attemping to delete a key that does not exist, so
+	// S3 does not report an error when attempting to delete a key that does not exist, so
 	// we need to skip IsNotExist errors.
 	if err := _vfs.Remove(fp); err != nil && !os.IsNotExist(err) {
 		return err
diff --git a/cmd/serve/s3/list.go b/cmd/serve/s3/list.go
index 554d152ab4062..9b0a2e11ed234 100644
--- a/cmd/serve/s3/list.go
+++ b/cmd/serve/s3/list.go
@@ -19,7 +19,7 @@ func (b *s3Backend) entryListR(_vfs *vfs.VFS, bucket, fdPath, name string, addPr
 	for _, entry := range dirEntries {
 		object := entry.Name()
 
-		// workround for control-chars detect
+		// workaround for control-chars detect
 		objectPath := path.Join(fdPath, object)
 
 		if !strings.HasPrefix(object, name) {
diff --git a/docs/content/bisync.md b/docs/content/bisync.md
index 94a51fd9e054c..458f92eab7246 100644
--- a/docs/content/bisync.md
+++ b/docs/content/bisync.md
@@ -487,7 +487,7 @@ See the [bisync filters](#filtering) section and generic
 [--filter-from](/filtering/#filter-from-read-filtering-patterns-from-a-file)
 documentation.
 An [example filters file](#example-filters-file) contains filters for
-non-allowed files for synching with Dropbox.
+non-allowed files for syncing with Dropbox.
 
 If you make changes to your filters file then bisync requires a run
 with `--resync`. This is a safety feature, which prevents existing files
@@ -664,7 +664,7 @@ Using `--check-sync=false` will disable it and may significantly reduce the
 sync run times for very large numbers of files.
 
 The check may be run manually with `--check-sync=only`. It runs only the
-integrity check and terminates without actually synching.
+integrity check and terminates without actually syncing.
 
 Note that currently, `--check-sync` **only checks listing snapshots and NOT the
 actual files on the remotes.** Note also that the listing snapshots will not
@@ -1141,7 +1141,7 @@ The `--include*`, `--exclude*`, and `--filter` flags are also supported.
 
 ### How to filter directories
 
-Filtering portions of the directory tree is a critical feature for synching.
+Filtering portions of the directory tree is a critical feature for syncing.
 
 Examples of directory trees (always beneath the Path1/Path2 root level)
 you may want to exclude from your sync:
@@ -1250,7 +1250,7 @@ quashed by adding `--quiet` to the bisync command line.
 
 ## Example exclude-style filters files for use with Dropbox {#exclude-filters}
 
-- Dropbox disallows synching the listed temporary and configuration/data files.
+- Dropbox disallows syncing the listed temporary and configuration/data files.
   The `- <filename>` filters exclude these files where ever they may occur
   in the sync tree. Consider adding similar exclusions for file types
   you don't need to sync, such as core dump and software build files.
@@ -1584,7 +1584,7 @@ test command flags can be equally prefixed by a single `-` or double dash.
 
 - `go test . -case basic -remote local -remote2 local`
   runs the `test_basic` test case using only the local filesystem,
-  synching one local directory with another local directory.
+  syncing one local directory with another local directory.
   Test script output is to the console, while commands within scenario.txt
   have their output sent to the `.../workdir/test.log` file,
   which is finally compared to the golden copy.
@@ -1860,4 +1860,4 @@ causing bisync to consider more files than necessary due to overbroad filters du
 * Added [new `--ignore-listing-checksum` flag](https://forum.rclone.org/t/bisync-bugs-and-feature-requests/37636#:~:text=6.%20%2D%2Dignore%2Dchecksum%20should%20be%20split%20into%20two%20flags%20for%20separate%20purposes) 
 to distinguish from `--ignore-checksum`
 * [Performance improvements](https://forum.rclone.org/t/bisync-bugs-and-feature-requests/37636#:~:text=6.%20Deletes%20take%20several%20times%20longer%20than%20copies) for large remotes
-* Documentation and testing improvements
\ No newline at end of file
+* Documentation and testing improvements
diff --git a/docs/content/crypt.md b/docs/content/crypt.md
index 2ea2bf7d5f4e4..db3edcc74fa02 100644
--- a/docs/content/crypt.md
+++ b/docs/content/crypt.md
@@ -741,7 +741,7 @@ strong random number generator.  The nonce is incremented for each
 chunk read making sure each nonce is unique for each block written.
 The chance of a nonce being reused is minuscule.  If you wrote an
 exabyte of data (10¹⁸ bytes) you would have a probability of
-approximately 2×10⁻³² of re-using a nonce.
+approximately 2×10⁻³² of reusing a nonce.
 
 #### Chunk
 
diff --git a/docs/content/docs.md b/docs/content/docs.md
index dccb5c5f7ae6b..8b221f1307254 100644
--- a/docs/content/docs.md
+++ b/docs/content/docs.md
@@ -2930,7 +2930,7 @@ so they take exactly the same form.
 The options set by environment variables can be seen with the `-vv` flag, e.g. `rclone version -vv`.
 
 Options that can appear multiple times (type `stringArray`) are
-treated slighly differently as environment variables can only be
+treated slightly differently as environment variables can only be
 defined once. In order to allow a simple mechanism for adding one or
 many items, the input is treated as a [CSV encoded](https://godoc.org/encoding/csv)
 string. For example
diff --git a/docs/content/googlephotos.md b/docs/content/googlephotos.md
index 26faedcc6b7f1..c3549d1589053 100644
--- a/docs/content/googlephotos.md
+++ b/docs/content/googlephotos.md
@@ -384,7 +384,7 @@ Use the gphotosdl proxy for downloading the full resolution images
 The Google API will deliver images and video which aren't full
 resolution, and/or have EXIF data missing.
 
-However if you ue the gphotosdl proxy tnen you can download original,
+However if you use the gphotosdl proxy then you can download original,
 unchanged images.
 
 This runs a headless browser in the background.
diff --git a/docs/content/rc.md b/docs/content/rc.md
index 541093bb9fb15..4f54bb1700281 100644
--- a/docs/content/rc.md
+++ b/docs/content/rc.md
@@ -2068,7 +2068,7 @@ the `--vfs-cache-mode` is off, it will return an empty result.
        ],
     }
 
-The `expiry` time is the time until the file is elegible for being
+The `expiry` time is the time until the file is eligible for being
 uploaded in floating point seconds. This may go negative. As rclone
 only transfers `--transfers` files at once, only the lowest
 `--transfers` expiry times will have `uploading` as `true`. So there
diff --git a/docs/content/s3.md b/docs/content/s3.md
index fa1fbe2e57ae8..a71549e94be0b 100644
--- a/docs/content/s3.md
+++ b/docs/content/s3.md
@@ -750,7 +750,7 @@ Notes on above:
    that `USER_NAME` has been created.
 2. The Resource entry must include both resource ARNs, as one implies
    the bucket and the other implies the bucket's objects.
-3. When using [s3-no-check-bucket](#s3-no-check-bucket) and the bucket already exsits, the `"arn:aws:s3:::BUCKET_NAME"` doesn't have to be included.
+3. When using [s3-no-check-bucket](#s3-no-check-bucket) and the bucket already exists, the `"arn:aws:s3:::BUCKET_NAME"` doesn't have to be included.
 
 For reference, [here's an Ansible script](https://gist.github.com/ebridges/ebfc9042dd7c756cd101cfa807b7ae2b)
 that will generate one or more buckets that will work with `rclone sync`.
diff --git a/fs/fshttp/http_test.go b/fs/fshttp/http_test.go
index 2c10e84a2a7d7..18f191e73a05c 100644
--- a/fs/fshttp/http_test.go
+++ b/fs/fshttp/http_test.go
@@ -133,7 +133,7 @@ func TestCertificates(t *testing.T) {
 			assert.Fail(t, "Certificate expired", "Certificate expires at %s, current time is %s", cert[0].NotAfter.Sub(startTime), time.Since(startTime))
 		}
 
-		// Write some test data to fullfil the request
+		// Write some test data to fulfill the request
 		w.Header().Set("Content-Type", "text/plain")
 		_, _ = fmt.Fprintln(w, "test data")
 	}))
diff --git a/fs/log.go b/fs/log.go
index 4b3abf6111d98..5088d1600466b 100644
--- a/fs/log.go
+++ b/fs/log.go
@@ -95,7 +95,7 @@ func LogValueHide(key string, value interface{}) LogValueItem {
 	return LogValueItem{key: key, value: value, render: false}
 }
 
-// String returns the representation of value. If render is fals this
+// String returns the representation of value. If render is false this
 // is an empty string so LogValueItem entries won't show in the
 // textual representation of logs.
 func (j LogValueItem) String() string {
diff --git a/fs/object/object.go b/fs/object/object.go
index a8346edee5bbf..40aee8dec279b 100644
--- a/fs/object/object.go
+++ b/fs/object/object.go
@@ -297,7 +297,7 @@ func (o *MemoryObject) Open(ctx context.Context, options ...fs.OpenOption) (io.R
 
 // Update in to the object with the modTime given of the given size
 //
-// This re-uses the internal buffer if at all possible.
+// This reuses the internal buffer if at all possible.
 func (o *MemoryObject) Update(ctx context.Context, in io.Reader, src fs.ObjectInfo, options ...fs.OpenOption) (err error) {
 	size := src.Size()
 	if size == 0 {
diff --git a/fs/object/object_test.go b/fs/object/object_test.go
index 64bb361401347..2a423627281b6 100644
--- a/fs/object/object_test.go
+++ b/fs/object/object_test.go
@@ -142,7 +142,7 @@ func TestMemoryObject(t *testing.T) {
 	assert.NoError(t, err)
 	checkContent(o, "Rutabaga")
 	assert.Equal(t, newNow, o.ModTime(context.Background()))
-	assert.Equal(t, "Rutaba", string(content)) // check we re-used the buffer
+	assert.Equal(t, "Rutaba", string(content)) // check we reused the buffer
 
 	// not within the buffer
 	newStr := "0123456789"
diff --git a/fstest/fstests/fstests.go b/fstest/fstests/fstests.go
index 6024177c65e5c..2369e7c2dae66 100644
--- a/fstest/fstests/fstests.go
+++ b/fstest/fstests/fstests.go
@@ -2391,7 +2391,7 @@ func Run(t *testing.T, opt *Opt) {
 					var itemCopy = item
 					itemCopy.Path += ".copy"
 
-					// Set copy cutoff to mininum value so we make chunks
+					// Set copy cutoff to minimum value so we make chunks
 					origCutoff, err := do.SetCopyCutoff(minChunkSize)
 					require.NoError(t, err)
 					defer func() {
diff --git a/vfs/rc.go b/vfs/rc.go
index 5c74e9f91e174..c2ad3caca85f0 100644
--- a/vfs/rc.go
+++ b/vfs/rc.go
@@ -464,7 +464,7 @@ the |--vfs-cache-mode| is off, it will return an empty result.
        ],
     }
 
-The |expiry| time is the time until the file is elegible for being
+The |expiry| time is the time until the file is eligible for being
 uploaded in floating point seconds. This may go negative. As rclone
 only transfers |--transfers| files at once, only the lowest
 |--transfers| expiry times will have |uploading| as |true|. So there
diff --git a/vfs/vfs.go b/vfs/vfs.go
index aa6fe15eb8a08..68b17f483ae46 100644
--- a/vfs/vfs.go
+++ b/vfs/vfs.go
@@ -216,7 +216,7 @@ func New(f fs.Fs, opt *vfscommon.Options) *VFS {
 	configName := fs.ConfigString(f)
 	for _, activeVFS := range active[configName] {
 		if vfs.Opt == activeVFS.Opt {
-			fs.Debugf(f, "Re-using VFS from active cache")
+			fs.Debugf(f, "Reusing VFS from active cache")
 			activeVFS.inUse.Add(1)
 			return activeVFS
 		}
diff --git a/vfs/vfscache/item_test.go b/vfs/vfscache/item_test.go
index 9fa2f3dbeeac0..fa5840e010685 100644
--- a/vfs/vfscache/item_test.go
+++ b/vfs/vfscache/item_test.go
@@ -428,7 +428,7 @@ func TestItemReloadCacheStale(t *testing.T) {
 	assert.Equal(t, int64(110), fi.Size())
 
 	// Write to the file to make it dirty
-	// This checks we aren't re-using stale data
+	// This checks we aren't reusing stale data
 	n, err := item.WriteAt([]byte("HELLO"), 0)
 	require.NoError(t, err)
 	assert.Equal(t, 5, n)

From ad941655c54c0f329d360583f0acc0528d145e99 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 15 Jan 2025 17:58:49 +0000
Subject: [PATCH 09/73] iclouddrive: add notes on ADP and Missing PCS cookies -
 fixes #8310

---
 docs/content/iclouddrive.md | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/docs/content/iclouddrive.md b/docs/content/iclouddrive.md
index 63023969b9f27..299cb064a3be8 100644
--- a/docs/content/iclouddrive.md
+++ b/docs/content/iclouddrive.md
@@ -61,7 +61,7 @@ Enter a value.
 config_2fa> 2FACODE
 Remote config
 --------------------
-[koofr]
+[iclouddrive]
 - type: iclouddrive
 - apple_id: APPLEID
 - password: *** ENCRYPTED ***
@@ -78,6 +78,20 @@ y/e/d> y
 
 ADP is currently unsupported and need to be disabled
 
+On iPhone, Settings `>` Apple Account `>` iCloud `>` 'Access iCloud Data on the Web' must be ON, and 'Advanced Data Protection' OFF.
+
+## Troubleshooting
+
+### Missing PCS cookies from the request
+
+This means you have Advanced Data Protection (ADP) turned on. This is not supported at the moment. If you want to use rclone you will have to turn it off. See above for how to turn it off.
+
+You will need to clear the `cookies` and the `trust_token` fields in the config. Or you can delete the remote config and start again.
+
+You should then run `rclone reconnect remote:`.
+
+Note that changing the ADP setting may not take effect immediately - you may need to wait a few hours or a day before you can get rclone to work - keep clearing the config entry and running `rclone reconnect remote:` until rclone functions properly.
+
 {{< rem autogenerated options start" - DO NOT EDIT - instead edit fs.RegInfo in backend/iclouddrive/iclouddrive.go then run make backenddocs" >}}
 ### Standard options
 

From de69448565115b2f1f3c612cd1c407ab26dccbfd Mon Sep 17 00:00:00 2001
From: Christoph Berger <github@christophberger.com>
Date: Fri, 17 Jan 2025 09:50:22 +0100
Subject: [PATCH 10/73] docs: explain the stringArray flag parameter descriptor

---
 docs/content/docs.md  | 5 +++++
 docs/content/flags.md | 2 ++
 2 files changed, 7 insertions(+)

diff --git a/docs/content/docs.md b/docs/content/docs.md
index 8b221f1307254..17c909fea20f7 100644
--- a/docs/content/docs.md
+++ b/docs/content/docs.md
@@ -619,6 +619,11 @@ it to `false`.  It is also possible to specify `--boolean=false` or
 parsed as `--boolean` and the `false` is parsed as an extra command
 line argument for rclone.
 
+Options documented to take a `stringArray` parameter accept multiple 
+values. To pass more than one value, repeat the option; for example: 
+`--include value1 --include value2`.
+
+
 ### Time or duration options {#time-option}
 
 TIME or DURATION options can be specified as a duration string or a
diff --git a/docs/content/flags.md b/docs/content/flags.md
index aefd4dc6443b1..f9d32c490d527 100644
--- a/docs/content/flags.md
+++ b/docs/content/flags.md
@@ -9,6 +9,8 @@ description: "Rclone Global Flags"
 This describes the global flags available to every rclone command
 split into groups.
 
+See the [Options section](/docs/#options) for syntax and usage advice.
+
 
 ## Copy
 

From 64556d4ca226435a5dde3c4dc8bcad58c284af7f Mon Sep 17 00:00:00 2001
From: Tim White <tim.white@su.org.au>
Date: Wed, 15 Jan 2025 14:17:17 +0800
Subject: [PATCH 11/73] docs: add OneDrive Impersonate instructions - fixes
 #5610

---
 docs/content/onedrive.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/docs/content/onedrive.md b/docs/content/onedrive.md
index a14b7a79e3ee2..91c8520831d1a 100644
--- a/docs/content/onedrive.md
+++ b/docs/content/onedrive.md
@@ -936,6 +936,28 @@ See the [metadata](/docs/#metadata) docs for more info.
 
 {{< rem autogenerated options stop >}}
 
+### Impersonate other users as Admin
+
+Unlike Google Drive and impersonating any domain user via service accounts, OneDrive requires you to authenticate as an admin account, and manually setup a remote per user you wish to impersonate.
+
+1. In [Microsoft 365 Admin Center](https://admin.microsoft.com), open each user you need to "impersonate" and go to the OneDrive section. There is a heading called "Get access to files", you need to click to create the link, this creates the link of the format `https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/` but also changes the permissions so you your admin user has access.
+2. Then in powershell run the following commands:
+```console
+Install-Module Microsoft.Graph -Scope CurrentUser -Repository PSGallery -Force
+Import-Module Microsoft.Graph.Files
+Connect-MgGraph -Scopes "Files.ReadWrite.All"
+# Follow the steps to allow access to your admin user
+# Then run this for each user you want to impersonate to get the Drive ID
+Get-MgUserDefaultDrive -UserId '{emailaddress}'
+# This will give you output of the format:
+# Name     Id                                                                 DriveType CreatedDateTime
+# ----     --                                                                 --------- ---------------
+# OneDrive b!XYZ123                                                           business  14/10/2023 1:00:58 pm
+
+```
+3. Then in rclone add a onedrive remote type, and use the `Type in driveID` with the DriveID you got in the previous step. One remote per user. It will then confirm the drive ID, and hopefully give you a message of `Found drive "root" of type "business"` and then include the URL of the format `https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/Documents`
+
+
 ## Limitations
 
 If you don't use rclone for 90 days the refresh token will

From 642d1415d15d311a46286b489d7a4403e6fed71d Mon Sep 17 00:00:00 2001
From: izouxv <izouxv@users.noreply.github.com>
Date: Fri, 17 Jan 2025 23:38:09 +0800
Subject: [PATCH 12/73] vfs: close the change notify channel on Shutdown

---
 vfs/vfs.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/vfs/vfs.go b/vfs/vfs.go
index 68b17f483ae46..8907a6e507828 100644
--- a/vfs/vfs.go
+++ b/vfs/vfs.go
@@ -365,6 +365,11 @@ func (vfs *VFS) Shutdown() {
 	activeMu.Unlock()
 
 	vfs.shutdownCache()
+
+	if vfs.pollChan != nil {
+		close(vfs.pollChan)
+		vfs.pollChan = nil
+	}
 }
 
 // CleanUp deletes the contents of the on disk cache

From c4b592e5498b56ff0592f86acc99a124d0911dbd Mon Sep 17 00:00:00 2001
From: Bruno Fernandes <bruno.fernandes1996@hotmail.com>
Date: Tue, 15 Oct 2024 16:18:33 -0300
Subject: [PATCH 13/73] s3: Added new storage class to magalu provider

---
 backend/s3/s3.go | 15 +++++----------
 1 file changed, 5 insertions(+), 10 deletions(-)

diff --git a/backend/s3/s3.go b/backend/s3/s3.go
index d487d9404ba1a..c26d63a3cb703 100644
--- a/backend/s3/s3.go
+++ b/backend/s3/s3.go
@@ -1343,7 +1343,7 @@ func init() {
 		}, {
 			Name:     "endpoint",
 			Help:     "Endpoint for S3 API.\n\nRequired when using an S3 clone.",
-			Provider: "!AWS,ArvanCloud,IBMCOS,IDrive,IONOS,TencentCOS,HuaweiOBS,Alibaba,ChinaMobile,GCS,Liara,Linode,MagaluCloud,Scaleway,Selectel,StackPath,Storj,Synology,RackCorp,Qiniu,Petabox",
+			Provider: "!AWS,ArvanCloud,IBMCOS,IDrive,IONOS,TencentCOS,HuaweiOBS,Alibaba,ChinaMobile,GCS,Liara,Linode,Magalu,Scaleway,Selectel,StackPath,Storj,Synology,RackCorp,Qiniu,Petabox",
 			Examples: []fs.OptionExample{{
 				Value:    "objects-us-east-1.dream.io",
 				Help:     "Dream Objects endpoint",
@@ -1476,14 +1476,6 @@ func init() {
 				Value:    "s3.ir-tbz-sh1.arvanstorage.ir",
 				Help:     "ArvanCloud Tabriz Iran (Shahriar) endpoint",
 				Provider: "ArvanCloud",
-			}, {
-				Value:    "br-se1.magaluobjects.com",
-				Help:     "Magalu BR Southeast 1 endpoint",
-				Provider: "Magalu",
-			}, {
-				Value:    "br-ne1.magaluobjects.com",
-				Help:     "Magalu BR Northeast 1 endpoint",
-				Provider: "Magalu",
 			}},
 		}, {
 			Name:     "location_constraint",
@@ -2122,13 +2114,16 @@ If you leave it blank, this is calculated automatically from the sse_customer_ke
 				Help:  "Standard storage class",
 			}},
 		}, {
-			// Mapping from here: #todo
+			// Mapping from here: https://docs.magalu.cloud/docs/storage/object-storage/Classes-de-Armazenamento/standard
 			Name:     "storage_class",
 			Help:     "The storage class to use when storing new objects in Magalu.",
 			Provider: "Magalu",
 			Examples: []fs.OptionExample{{
 				Value: "STANDARD",
 				Help:  "Standard storage class",
+			}, {
+				Value: "GLACIER_IR",
+				Help:  "Glacier Instant Retrieval storage class",
 			}},
 		}, {
 			// Mapping from here: https://intl.cloud.tencent.com/document/product/436/30925

From 1a95a23fdcb50136859eac589025e2400a3dbc6d Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 22 Jan 2025 10:59:57 +0000
Subject: [PATCH 14/73] onedrive: mark German (de) region as deprecated

See: https://learn.microsoft.com/en-us/previous-versions/azure/germany/
---
 backend/onedrive/onedrive.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/onedrive/onedrive.go b/backend/onedrive/onedrive.go
index 980eec8c908c9..046f0605e2b7d 100644
--- a/backend/onedrive/onedrive.go
+++ b/backend/onedrive/onedrive.go
@@ -131,7 +131,7 @@ func init() {
 					Help:  "Microsoft Cloud for US Government",
 				}, {
 					Value: regionDE,
-					Help:  "Microsoft Cloud Germany",
+					Help:  "Microsoft Cloud Germany (deprecated - try " + regionGlobal + " region first).",
 				}, {
 					Value: regionCN,
 					Help:  "Azure and Office 365 operated by Vnet Group in China",

From 83e04ead37a31bc86a02c23caac5aa8034391e5e Mon Sep 17 00:00:00 2001
From: jkpe <16779171+jkpe@users.noreply.github.com>
Date: Thu, 23 Jan 2025 12:33:14 +0000
Subject: [PATCH 15/73] s3: add DigitalOcean regions SFO2, LON1, TOR1, BLR1

---
 backend/s3/s3.go | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/backend/s3/s3.go b/backend/s3/s3.go
index c26d63a3cb703..af149a306b993 100644
--- a/backend/s3/s3.go
+++ b/backend/s3/s3.go
@@ -1356,6 +1356,10 @@ func init() {
 				Value:    "sfo3.digitaloceanspaces.com",
 				Help:     "DigitalOcean Spaces San Francisco 3",
 				Provider: "DigitalOcean",
+			}, {
+				Value:    "sfo2.digitaloceanspaces.com",
+				Help:     "DigitalOcean Spaces San Francisco 2",
+				Provider: "DigitalOcean",
 			}, {
 				Value:    "fra1.digitaloceanspaces.com",
 				Help:     "DigitalOcean Spaces Frankfurt 1",
@@ -1372,6 +1376,18 @@ func init() {
 				Value:    "sgp1.digitaloceanspaces.com",
 				Help:     "DigitalOcean Spaces Singapore 1",
 				Provider: "DigitalOcean",
+			}, {
+				Value:    "lon1.digitaloceanspaces.com",
+				Help:     "DigitalOcean Spaces London 1",
+				Provider: "DigitalOcean",
+			}, {
+				Value:    "tor1.digitaloceanspaces.com",
+				Help:     "DigitalOcean Spaces Toronto 1",
+				Provider: "DigitalOcean",
+			}, {
+				Value:    "blr1.digitaloceanspaces.com",
+				Help:     "DigitalOcean Spaces Bangalore 1",
+				Provider: "DigitalOcean",
 			}, {
 				Value:    "localhost:8333",
 				Help:     "SeaweedFS S3 localhost",

From f79f929e57da2d339f4c7c2f8cea2ddab21e3908 Mon Sep 17 00:00:00 2001
From: Zachary Vorhies <zachvorhies@protonmail.com>
Date: Sat, 1 Feb 2025 05:20:09 -0700
Subject: [PATCH 16/73] serve nfs: update docs to note Windows is not supported
 - fixes #8352

---
 docs/content/commands/rclone_serve_nfs.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/content/commands/rclone_serve_nfs.md b/docs/content/commands/rclone_serve_nfs.md
index 72081cf56df34..ed8358ec24472 100644
--- a/docs/content/commands/rclone_serve_nfs.md
+++ b/docs/content/commands/rclone_serve_nfs.md
@@ -7,6 +7,8 @@ versionIntroduced: v1.65
 ---
 # rclone serve nfs
 
+*Not available in Windows.*
+
 Serve the remote as an NFS mount
 
 ## Synopsis

From 504f2fb571a0d9289d01c74616ee5373020d0b99 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Sun, 2 Feb 2025 11:14:38 +0000
Subject: [PATCH 17/73] b2: fix "fatal error: concurrent map writes" - fixes
 #8355

This was caused by the embryonic metadata support. Since this isn't
actually visible externally, this patch removes it for the time being.
---
 backend/b2/b2.go               | 25 +++++++------------------
 backend/b2/b2_internal_test.go |  6 ------
 2 files changed, 7 insertions(+), 24 deletions(-)

diff --git a/backend/b2/b2.go b/backend/b2/b2.go
index 4d4e754242566..0d1a4864c4ad9 100644
--- a/backend/b2/b2.go
+++ b/backend/b2/b2.go
@@ -299,14 +299,13 @@ type Fs struct {
 
 // Object describes a b2 object
 type Object struct {
-	fs       *Fs               // what this object is part of
-	remote   string            // The remote path
-	id       string            // b2 id of the file
-	modTime  time.Time         // The modified time of the object if known
-	sha1     string            // SHA-1 hash if known
-	size     int64             // Size of the object
-	mimeType string            // Content-Type of the object
-	meta     map[string]string // The object metadata if known - may be nil - with lower case keys
+	fs       *Fs       // what this object is part of
+	remote   string    // The remote path
+	id       string    // b2 id of the file
+	modTime  time.Time // The modified time of the object if known
+	sha1     string    // SHA-1 hash if known
+	size     int64     // Size of the object
+	mimeType string    // Content-Type of the object
 }
 
 // ------------------------------------------------------------
@@ -1598,9 +1597,6 @@ func (o *Object) decodeMetaDataRaw(ID, SHA1 string, Size int64, UploadTimestamp
 	if err != nil {
 		return err
 	}
-	// For now, just set "mtime" in metadata
-	o.meta = make(map[string]string, 1)
-	o.meta["mtime"] = o.modTime.Format(time.RFC3339Nano)
 	return nil
 }
 
@@ -1880,13 +1876,6 @@ func (o *Object) getOrHead(ctx context.Context, method string, options []fs.Open
 		Info:            Info,
 	}
 
-	// Embryonic metadata support - just mtime
-	o.meta = make(map[string]string, 1)
-	modTime, err := parseTimeStringHelper(info.Info[timeKey])
-	if err == nil {
-		o.meta["mtime"] = modTime.Format(time.RFC3339Nano)
-	}
-
 	// When reading files from B2 via cloudflare using
 	// --b2-download-url cloudflare strips the Content-Length
 	// headers (presumably so it can inject stuff) so use the old
diff --git a/backend/b2/b2_internal_test.go b/backend/b2/b2_internal_test.go
index e6bd8b404db1d..a6dccf5b53369 100644
--- a/backend/b2/b2_internal_test.go
+++ b/backend/b2/b2_internal_test.go
@@ -256,12 +256,6 @@ func (f *Fs) internalTestMetadata(t *testing.T, size string, uploadCutoff string
 			assert.Equal(t, v, got, k)
 		}
 
-		// mtime
-		for k, v := range metadata {
-			got := o.meta[k]
-			assert.Equal(t, v, got, k)
-		}
-
 		assert.Equal(t, mimeType, gotMetadata.ContentType, "Content-Type")
 
 		// Modification time from the x-bz-info-src_last_modified_millis header

From 9dfce11c9babe56ac60f8361a26a44ccc7f8a18c Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Sat, 1 Feb 2025 12:07:25 +0000
Subject: [PATCH 18/73] lib/oauthutil: fix redirect URL mismatch errors - fixes
 #8351

In this commit we introduced support for client credentials flow:

65012beea4b93b7f lib/oauthutil: add support for OAuth client credential flow

This involved re-organising the oauth credentials.

Unfortunately a small error was made which used a fixed redirect URL
rather than the one configured for the backend.

This caused the box backend oauth flow not to work properly with
redirect_uri_mismatch errors.

These backends were using the wrong redirect URL and will likely be
affected, though it is possible the backends have workarounds.

- box
- drive
- googlecloudstorage
- googlephotos
- hidrive
- pikpak
- premiumizeme
- sharefile
- yandex
---
 lib/oauthutil/oauthutil.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/oauthutil/oauthutil.go b/lib/oauthutil/oauthutil.go
index a03fd592d794c..e2cbc8837f511 100644
--- a/lib/oauthutil/oauthutil.go
+++ b/lib/oauthutil/oauthutil.go
@@ -108,7 +108,7 @@ func (conf *Config) MakeOauth2Config() *oauth2.Config {
 	return &oauth2.Config{
 		ClientID:     conf.ClientID,
 		ClientSecret: conf.ClientSecret,
-		RedirectURL:  RedirectLocalhostURL,
+		RedirectURL:  conf.RedirectURL,
 		Scopes:       conf.Scopes,
 		Endpoint: oauth2.Endpoint{
 			AuthURL:   conf.AuthURL,

From d953c0c51b668598bcc5731102b1ed469eb6ab3f Mon Sep 17 00:00:00 2001
From: nielash <nielronash@gmail.com>
Date: Sun, 9 Feb 2025 21:13:55 -0500
Subject: [PATCH 19/73] bisync: fix listings missing concurrent modifications -
 fixes #8359

Before this change, there was a bug affecting listing files when:

- a given bisync run had changes in the 2to1 direction
AND
- the run had NO changes in the 1to2 direction
AND
- at least one of the changed files changed AGAIN during the run
(specifically, after the initial march and before the transfers.)

In this situation, the listings on one side would still retain the prior version
of the changed file, potentially causing conflicts or errors.

This change fixes the issue by making sure that if we're updating the listings
on one side, we must also update the other. (We previously tried to skip it for
efficiency, but this failed to account for the possibility that a changed file
could change again during the run.)
---
 cmd/bisync/bisync_test.go                     | 10 +++
 cmd/bisync/deltas.go                          | 16 ++--
 cmd/bisync/operations.go                      | 18 +----
 ...testdir_path1.._testdir_path2.copy2to1.que |  1 +
 .../_testdir_path1.._testdir_path2.path1.lst  | 10 +++
 ...estdir_path1.._testdir_path2.path1.lst-new | 10 +++
 ...estdir_path1.._testdir_path2.path1.lst-old | 10 +++
 .../_testdir_path1.._testdir_path2.path2.lst  | 10 +++
 ...estdir_path1.._testdir_path2.path2.lst-new | 10 +++
 ...estdir_path1.._testdir_path2.path2.lst-old | 10 +++
 .../testdata/test_concurrent/golden/test.log  | 73 +++++++++++++++++++
 .../test_concurrent/initial/RCLONE_TEST       |  1 +
 .../test_concurrent/initial/file1.txt         |  0
 .../test_concurrent/initial/file2.txt         |  0
 .../test_concurrent/initial/file3.txt         |  0
 .../test_concurrent/initial/file4.txt         |  0
 .../test_concurrent/initial/file5.txt         |  0
 .../test_concurrent/initial/file6.txt         |  0
 .../test_concurrent/initial/file7.txt         |  0
 .../test_concurrent/initial/file8.txt         |  0
 .../test_concurrent/modfiles/dummy.txt        |  0
 .../test_concurrent/modfiles/file1.txt        |  1 +
 .../test_concurrent/modfiles/file10.txt       |  1 +
 .../test_concurrent/modfiles/file11.txt       |  1 +
 .../test_concurrent/modfiles/file2.txt        |  1 +
 .../test_concurrent/modfiles/file5L.txt       |  1 +
 .../test_concurrent/modfiles/file5R.txt       |  1 +
 .../test_concurrent/modfiles/file6.txt        |  1 +
 .../test_concurrent/modfiles/file7.txt        |  1 +
 .../testdata/test_concurrent/scenario.txt     | 15 ++++
 docs/content/bisync.md                        |  3 +
 31 files changed, 181 insertions(+), 24 deletions(-)
 create mode 100644 cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.copy2to1.que
 create mode 100644 cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst
 create mode 100644 cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst-new
 create mode 100644 cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst-old
 create mode 100644 cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst
 create mode 100644 cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst-new
 create mode 100644 cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst-old
 create mode 100644 cmd/bisync/testdata/test_concurrent/golden/test.log
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/RCLONE_TEST
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/file1.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/file2.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/file3.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/file4.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/file5.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/file6.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/file7.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/initial/file8.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/dummy.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/file1.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/file10.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/file11.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/file2.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/file5L.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/file5R.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/file6.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/modfiles/file7.txt
 create mode 100644 cmd/bisync/testdata/test_concurrent/scenario.txt

diff --git a/cmd/bisync/bisync_test.go b/cmd/bisync/bisync_test.go
index da89c3e20e10c..f154d4d2871a2 100644
--- a/cmd/bisync/bisync_test.go
+++ b/cmd/bisync/bisync_test.go
@@ -746,6 +746,16 @@ func (b *bisyncTest) runTestStep(ctx context.Context, line string) (err error) {
 	case "test-func":
 		b.TestFn = testFunc
 		return
+	case "concurrent-func":
+		b.TestFn = func() {
+			src := filepath.Join(b.dataDir, "file7.txt")
+			dst := "file1.txt"
+			err := b.copyFile(ctx, src, b.replaceHex(b.path2), dst)
+			if err != nil {
+				fs.Errorf(src, "error copying file: %v", err)
+			}
+		}
+		return
 	case "fix-names":
 		// in case the local os converted any filenames
 		ci.NoUnicodeNormalization = true
diff --git a/cmd/bisync/deltas.go b/cmd/bisync/deltas.go
index 1cb783d56ce3a..dde42e41413c3 100644
--- a/cmd/bisync/deltas.go
+++ b/cmd/bisync/deltas.go
@@ -286,7 +286,7 @@ func (b *bisyncRun) findDeltas(fctx context.Context, f fs.Fs, oldListing string,
 }
 
 // applyDeltas
-func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (changes1, changes2 bool, results2to1, results1to2 []Results, queues queues, err error) {
+func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (results2to1, results1to2 []Results, queues queues, err error) {
 	path1 := bilib.FsPath(b.fs1)
 	path2 := bilib.FsPath(b.fs2)
 
@@ -367,7 +367,7 @@ func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (change
 		}
 	}
 
-	//if there are potential conflicts to check, check them all here (outside the loop) in one fell swoop
+	// if there are potential conflicts to check, check them all here (outside the loop) in one fell swoop
 	matches, err := b.checkconflicts(ctxCheck, filterCheck, b.fs1, b.fs2)
 
 	for _, file := range ds1.sort() {
@@ -392,7 +392,7 @@ func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (change
 			} else if d2.is(deltaOther) {
 				b.indent("!WARNING", file, "New or changed in both paths")
 
-				//if files are identical, leave them alone instead of renaming
+				// if files are identical, leave them alone instead of renaming
 				if (dirs1.has(file) || dirs1.has(alias)) && (dirs2.has(file) || dirs2.has(alias)) {
 					fs.Infof(nil, "This is a directory, not a file. Skipping equality check and will not rename: %s", file)
 					ls1.getPut(file, skippedDirs1)
@@ -486,7 +486,6 @@ func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (change
 
 	// Do the batch operation
 	if copy2to1.NotEmpty() && !b.InGracefulShutdown {
-		changes1 = true
 		b.indent("Path2", "Path1", "Do queued copies to")
 		ctx = b.setBackupDir(ctx, 1)
 		results2to1, err = b.fastCopy(ctx, b.fs2, b.fs1, copy2to1, "copy2to1")
@@ -498,12 +497,11 @@ func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (change
 			return
 		}
 
-		//copy empty dirs from path2 to path1 (if --create-empty-src-dirs)
+		// copy empty dirs from path2 to path1 (if --create-empty-src-dirs)
 		b.syncEmptyDirs(ctx, b.fs1, copy2to1, dirs2, &results2to1, "make")
 	}
 
 	if copy1to2.NotEmpty() && !b.InGracefulShutdown {
-		changes2 = true
 		b.indent("Path1", "Path2", "Do queued copies to")
 		ctx = b.setBackupDir(ctx, 2)
 		results1to2, err = b.fastCopy(ctx, b.fs1, b.fs2, copy1to2, "copy1to2")
@@ -515,7 +513,7 @@ func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (change
 			return
 		}
 
-		//copy empty dirs from path1 to path2 (if --create-empty-src-dirs)
+		// copy empty dirs from path1 to path2 (if --create-empty-src-dirs)
 		b.syncEmptyDirs(ctx, b.fs2, copy1to2, dirs1, &results1to2, "make")
 	}
 
@@ -523,7 +521,7 @@ func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (change
 		if err = b.saveQueue(delete1, "delete1"); err != nil {
 			return
 		}
-		//propagate deletions of empty dirs from path2 to path1 (if --create-empty-src-dirs)
+		// propagate deletions of empty dirs from path2 to path1 (if --create-empty-src-dirs)
 		b.syncEmptyDirs(ctx, b.fs1, delete1, dirs1, &results2to1, "remove")
 	}
 
@@ -531,7 +529,7 @@ func (b *bisyncRun) applyDeltas(ctx context.Context, ds1, ds2 *deltaSet) (change
 		if err = b.saveQueue(delete2, "delete2"); err != nil {
 			return
 		}
-		//propagate deletions of empty dirs from path1 to path2 (if --create-empty-src-dirs)
+		// propagate deletions of empty dirs from path1 to path2 (if --create-empty-src-dirs)
 		b.syncEmptyDirs(ctx, b.fs2, delete2, dirs2, &results1to2, "remove")
 	}
 
diff --git a/cmd/bisync/operations.go b/cmd/bisync/operations.go
index 987a94e66f433..305680d745afb 100644
--- a/cmd/bisync/operations.go
+++ b/cmd/bisync/operations.go
@@ -359,8 +359,6 @@ func (b *bisyncRun) runLocked(octx context.Context) (err error) {
 
 	// Determine and apply changes to Path1 and Path2
 	noChanges := ds1.empty() && ds2.empty()
-	changes1 := false // 2to1
-	changes2 := false // 1to2
 	results2to1 := []Results{}
 	results1to2 := []Results{}
 
@@ -370,7 +368,7 @@ func (b *bisyncRun) runLocked(octx context.Context) (err error) {
 		fs.Infof(nil, "No changes found")
 	} else {
 		fs.Infof(nil, "Applying changes")
-		changes1, changes2, results2to1, results1to2, queues, err = b.applyDeltas(octx, ds1, ds2)
+		results2to1, results1to2, queues, err = b.applyDeltas(octx, ds1, ds2)
 		if err != nil {
 			if b.InGracefulShutdown && (err == context.Canceled || err == accounting.ErrorMaxTransferLimitReachedGraceful || strings.Contains(err.Error(), "context canceled")) {
 				fs.Infof(nil, "Ignoring sync error due to Graceful Shutdown: %v", err)
@@ -395,21 +393,11 @@ func (b *bisyncRun) runLocked(octx context.Context) (err error) {
 	}
 	b.saveOldListings()
 	// save new listings
-	// NOTE: "changes" in this case does not mean this run vs. last run, it means start of this run vs. end of this run.
-	// i.e. whether we can use the March lst-new as this side's lst without modifying it.
 	if noChanges {
 		b.replaceCurrentListings()
 	} else {
-		if changes1 || b.InGracefulShutdown { // 2to1
-			err1 = b.modifyListing(fctx, b.fs2, b.fs1, results2to1, queues, false)
-		} else {
-			err1 = bilib.CopyFileIfExists(b.newListing1, b.listing1)
-		}
-		if changes2 || b.InGracefulShutdown { // 1to2
-			err2 = b.modifyListing(fctx, b.fs1, b.fs2, results1to2, queues, true)
-		} else {
-			err2 = bilib.CopyFileIfExists(b.newListing2, b.listing2)
-		}
+		err1 = b.modifyListing(fctx, b.fs2, b.fs1, results2to1, queues, false) // 2to1
+		err2 = b.modifyListing(fctx, b.fs1, b.fs2, results1to2, queues, true)  // 1to2
 	}
 	if b.DebugName != "" {
 		l1, _ := b.loadListing(b.listing1)
diff --git a/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.copy2to1.que b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.copy2to1.que
new file mode 100644
index 0000000000000..029f3e190ed2c
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.copy2to1.que
@@ -0,0 +1 @@
+"file1.txt"
diff --git a/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst
new file mode 100644
index 0000000000000..021dde2dc7589
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst
@@ -0,0 +1,10 @@
+# bisync listing v1 from test
+-      109 - - 2000-01-01T00:00:00.000000000+0000 "RCLONE_TEST"
+-       19 - - 2023-08-26T00:00:00.000000000+0000 "file1.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file2.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file3.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file4.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file5.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file6.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file7.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file8.txt"
diff --git a/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst-new b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst-new
new file mode 100644
index 0000000000000..021dde2dc7589
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst-new
@@ -0,0 +1,10 @@
+# bisync listing v1 from test
+-      109 - - 2000-01-01T00:00:00.000000000+0000 "RCLONE_TEST"
+-       19 - - 2023-08-26T00:00:00.000000000+0000 "file1.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file2.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file3.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file4.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file5.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file6.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file7.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file8.txt"
diff --git a/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst-old b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst-old
new file mode 100644
index 0000000000000..021dde2dc7589
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path1.lst-old
@@ -0,0 +1,10 @@
+# bisync listing v1 from test
+-      109 - - 2000-01-01T00:00:00.000000000+0000 "RCLONE_TEST"
+-       19 - - 2023-08-26T00:00:00.000000000+0000 "file1.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file2.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file3.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file4.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file5.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file6.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file7.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file8.txt"
diff --git a/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst
new file mode 100644
index 0000000000000..021dde2dc7589
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst
@@ -0,0 +1,10 @@
+# bisync listing v1 from test
+-      109 - - 2000-01-01T00:00:00.000000000+0000 "RCLONE_TEST"
+-       19 - - 2023-08-26T00:00:00.000000000+0000 "file1.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file2.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file3.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file4.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file5.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file6.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file7.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file8.txt"
diff --git a/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst-new b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst-new
new file mode 100644
index 0000000000000..021dde2dc7589
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst-new
@@ -0,0 +1,10 @@
+# bisync listing v1 from test
+-      109 - - 2000-01-01T00:00:00.000000000+0000 "RCLONE_TEST"
+-       19 - - 2023-08-26T00:00:00.000000000+0000 "file1.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file2.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file3.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file4.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file5.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file6.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file7.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file8.txt"
diff --git a/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst-old b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst-old
new file mode 100644
index 0000000000000..021dde2dc7589
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/golden/_testdir_path1.._testdir_path2.path2.lst-old
@@ -0,0 +1,10 @@
+# bisync listing v1 from test
+-      109 - - 2000-01-01T00:00:00.000000000+0000 "RCLONE_TEST"
+-       19 - - 2023-08-26T00:00:00.000000000+0000 "file1.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file2.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file3.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file4.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file5.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file6.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file7.txt"
+-        0 - - 2000-01-01T00:00:00.000000000+0000 "file8.txt"
diff --git a/cmd/bisync/testdata/test_concurrent/golden/test.log b/cmd/bisync/testdata/test_concurrent/golden/test.log
new file mode 100644
index 0000000000000..35f894aeda860
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/golden/test.log
@@ -0,0 +1,73 @@
+(01)  : test concurrent
+
+(02)  : test initial bisync
+(03)  : bisync resync
+INFO  : Setting --ignore-listing-checksum as neither --checksum nor --compare checksum are set.
+INFO  : Bisyncing with Comparison Settings:
+{
+"Modtime": true,
+"Size": true,
+"Checksum": false,
+"NoSlowHash": false,
+"SlowHashSyncOnly": false,
+"DownloadHash": false
+}
+INFO  : Synching Path1 "{path1/}" with Path2 "{path2/}"
+INFO  : Copying Path2 files to Path1
+INFO  : - Path2    Resync is copying files to         - Path1
+INFO  : - Path1    Resync is copying files to         - Path2
+INFO  : Resync updating listings
+INFO  : Validating listings for Path1 "{path1/}" vs Path2 "{path2/}"
+INFO  : Bisync successful
+
+(04)  : test changed on one path - file1
+(05)  : touch-glob 2001-01-02 {datadir/} file5R.txt
+(06)  : touch-glob 2023-08-26 {datadir/} file7.txt
+(07)  : copy-as {datadir/}file5R.txt {path2/} file1.txt
+
+(08)  : test bisync with file changed during
+(09)  : concurrent-func
+(10)  : bisync
+INFO  : Setting --ignore-listing-checksum as neither --checksum nor --compare checksum are set.
+INFO  : Bisyncing with Comparison Settings:
+{
+"Modtime": true,
+"Size": true,
+"Checksum": false,
+"NoSlowHash": false,
+"SlowHashSyncOnly": false,
+"DownloadHash": false
+}
+INFO  : Synching Path1 "{path1/}" with Path2 "{path2/}"
+INFO  : Building Path1 and Path2 listings
+INFO  : Path1 checking for diffs
+INFO  : Path2 checking for diffs
+INFO  : - Path2    File changed: size (larger), time (newer) - file1.txt
+INFO  : Path2:    1 changes:    0 new,    1 modified,    0 deleted
+INFO  : (Modified:    1 newer,    0 older,    1 larger,    0 smaller)
+INFO  : Applying changes
+INFO  : - Path2    Queue copy to Path1       - {path1/}file1.txt
+INFO  : - Path2    Do queued copies to                - Path1
+INFO  : Updating listings
+INFO  : Validating listings for Path1 "{path1/}" vs Path2 "{path2/}"
+INFO  : Bisync successful
+
+(11)  : bisync
+INFO  : Setting --ignore-listing-checksum as neither --checksum nor --compare checksum are set.
+INFO  : Bisyncing with Comparison Settings:
+{
+"Modtime": true,
+"Size": true,
+"Checksum": false,
+"NoSlowHash": false,
+"SlowHashSyncOnly": false,
+"DownloadHash": false
+}
+INFO  : Synching Path1 "{path1/}" with Path2 "{path2/}"
+INFO  : Building Path1 and Path2 listings
+INFO  : Path1 checking for diffs
+INFO  : Path2 checking for diffs
+INFO  : No changes found
+INFO  : Updating listings
+INFO  : Validating listings for Path1 "{path1/}" vs Path2 "{path2/}"
+INFO  : Bisync successful
diff --git a/cmd/bisync/testdata/test_concurrent/initial/RCLONE_TEST b/cmd/bisync/testdata/test_concurrent/initial/RCLONE_TEST
new file mode 100644
index 0000000000000..d8ca97c2a4dbe
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/initial/RCLONE_TEST
@@ -0,0 +1 @@
+This file is used for testing the health of rclone accesses to the local/remote file system.  Do not delete.
diff --git a/cmd/bisync/testdata/test_concurrent/initial/file1.txt b/cmd/bisync/testdata/test_concurrent/initial/file1.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/initial/file2.txt b/cmd/bisync/testdata/test_concurrent/initial/file2.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/initial/file3.txt b/cmd/bisync/testdata/test_concurrent/initial/file3.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/initial/file4.txt b/cmd/bisync/testdata/test_concurrent/initial/file4.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/initial/file5.txt b/cmd/bisync/testdata/test_concurrent/initial/file5.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/initial/file6.txt b/cmd/bisync/testdata/test_concurrent/initial/file6.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/initial/file7.txt b/cmd/bisync/testdata/test_concurrent/initial/file7.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/initial/file8.txt b/cmd/bisync/testdata/test_concurrent/initial/file8.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/dummy.txt b/cmd/bisync/testdata/test_concurrent/modfiles/dummy.txt
new file mode 100644
index 0000000000000..e69de29bb2d1d
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/file1.txt b/cmd/bisync/testdata/test_concurrent/modfiles/file1.txt
new file mode 100644
index 0000000000000..464147f09c0c8
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/modfiles/file1.txt
@@ -0,0 +1 @@
+This file is newer
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/file10.txt b/cmd/bisync/testdata/test_concurrent/modfiles/file10.txt
new file mode 100644
index 0000000000000..464147f09c0c8
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/modfiles/file10.txt
@@ -0,0 +1 @@
+This file is newer
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/file11.txt b/cmd/bisync/testdata/test_concurrent/modfiles/file11.txt
new file mode 100644
index 0000000000000..464147f09c0c8
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/modfiles/file11.txt
@@ -0,0 +1 @@
+This file is newer
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/file2.txt b/cmd/bisync/testdata/test_concurrent/modfiles/file2.txt
new file mode 100644
index 0000000000000..0fd70321acd6b
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/modfiles/file2.txt
@@ -0,0 +1 @@
+Newer version
\ No newline at end of file
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/file5L.txt b/cmd/bisync/testdata/test_concurrent/modfiles/file5L.txt
new file mode 100644
index 0000000000000..43ceff1dbe273
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/modfiles/file5L.txt
@@ -0,0 +1 @@
+This file is newer and not equal to 5R
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/file5R.txt b/cmd/bisync/testdata/test_concurrent/modfiles/file5R.txt
new file mode 100644
index 0000000000000..a928fcf1382e0
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/modfiles/file5R.txt
@@ -0,0 +1 @@
+This file is newer and not equal to 5L
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/file6.txt b/cmd/bisync/testdata/test_concurrent/modfiles/file6.txt
new file mode 100644
index 0000000000000..464147f09c0c8
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/modfiles/file6.txt
@@ -0,0 +1 @@
+This file is newer
diff --git a/cmd/bisync/testdata/test_concurrent/modfiles/file7.txt b/cmd/bisync/testdata/test_concurrent/modfiles/file7.txt
new file mode 100644
index 0000000000000..464147f09c0c8
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/modfiles/file7.txt
@@ -0,0 +1 @@
+This file is newer
diff --git a/cmd/bisync/testdata/test_concurrent/scenario.txt b/cmd/bisync/testdata/test_concurrent/scenario.txt
new file mode 100644
index 0000000000000..19ca9fcc2608f
--- /dev/null
+++ b/cmd/bisync/testdata/test_concurrent/scenario.txt
@@ -0,0 +1,15 @@
+test concurrent
+
+test initial bisync
+bisync resync
+
+test changed on one path - file1
+touch-glob 2001-01-02 {datadir/} file5R.txt
+touch-glob 2023-08-26 {datadir/} file7.txt
+copy-as {datadir/}file5R.txt {path2/} file1.txt
+
+test bisync with file changed during
+concurrent-func
+bisync
+
+bisync
\ No newline at end of file
diff --git a/docs/content/bisync.md b/docs/content/bisync.md
index 458f92eab7246..3aa0bae540efb 100644
--- a/docs/content/bisync.md
+++ b/docs/content/bisync.md
@@ -1815,6 +1815,9 @@ about _Unison_ and synchronization in general.
 
 ## Changelog
 
+### `v1.69.1`
+* Fixed an issue causing listings to not capture concurrent modifications under certain conditions
+
 ### `v1.68`
 * Fixed an issue affecting backends that round modtimes to a lower precision.
 

From 9978750a8c00a905867231da2b3137102e81dbe3 Mon Sep 17 00:00:00 2001
From: nielash <nielronash@gmail.com>
Date: Wed, 12 Feb 2025 00:57:52 -0500
Subject: [PATCH 20/73] fix golangci-lint errors

---
 backend/chunker/chunker.go     |  2 +-
 backend/drive/drive.go         | 35 ++++++++++++++++++++++------------
 backend/sugarsync/sugarsync.go |  8 ++++----
 cmd/bisync/bisync_test.go      |  5 ++---
 cmd/bisync/deltas.go           |  4 +---
 5 files changed, 31 insertions(+), 23 deletions(-)

diff --git a/backend/chunker/chunker.go b/backend/chunker/chunker.go
index 7b1df95c1de26..3cc4b1c898716 100644
--- a/backend/chunker/chunker.go
+++ b/backend/chunker/chunker.go
@@ -2480,7 +2480,7 @@ func unmarshalSimpleJSON(ctx context.Context, metaObject fs.Object, data []byte)
 	if len(data) > maxMetadataSizeWritten {
 		return nil, false, ErrMetaTooBig
 	}
-	if data == nil || len(data) < 2 || data[0] != '{' || data[len(data)-1] != '}' {
+	if len(data) < 2 || data[0] != '{' || data[len(data)-1] != '}' {
 		return nil, false, errors.New("invalid json")
 	}
 	var metadata metaSimpleJSON
diff --git a/backend/drive/drive.go b/backend/drive/drive.go
index 8e878751aa4b9..4ef3b9befd90a 100644
--- a/backend/drive/drive.go
+++ b/backend/drive/drive.go
@@ -203,7 +203,6 @@ func driveScopesContainsAppFolder(scopes []string) bool {
 		if scope == scopePrefix+"drive.appfolder" {
 			return true
 		}
-
 	}
 	return false
 }
@@ -1212,6 +1211,7 @@ func fixMimeType(mimeTypeIn string) string {
 	}
 	return mimeTypeOut
 }
+
 func fixMimeTypeMap(in map[string][]string) (out map[string][]string) {
 	out = make(map[string][]string, len(in))
 	for k, v := range in {
@@ -1222,9 +1222,11 @@ func fixMimeTypeMap(in map[string][]string) (out map[string][]string) {
 	}
 	return out
 }
+
 func isInternalMimeType(mimeType string) bool {
 	return strings.HasPrefix(mimeType, "application/vnd.google-apps.")
 }
+
 func isLinkMimeType(mimeType string) bool {
 	return strings.HasPrefix(mimeType, "application/x-link-")
 }
@@ -1657,7 +1659,8 @@ func (f *Fs) newObjectWithInfo(ctx context.Context, remote string, info *drive.F
 // When the drive.File cannot be represented as an fs.Object it will return (nil, nil).
 func (f *Fs) newObjectWithExportInfo(
 	ctx context.Context, remote string, info *drive.File,
-	extension, exportName, exportMimeType string, isDocument bool) (o fs.Object, err error) {
+	extension, exportName, exportMimeType string, isDocument bool,
+) (o fs.Object, err error) {
 	// Note that resolveShortcut will have been called already if
 	// we are being called from a listing. However the drive.Item
 	// will have been resolved so this will do nothing.
@@ -1848,6 +1851,7 @@ func linkTemplate(mt string) *template.Template {
 	})
 	return _linkTemplates[mt]
 }
+
 func (f *Fs) fetchFormats(ctx context.Context) {
 	fetchFormatsOnce.Do(func() {
 		var about *drive.About
@@ -1893,7 +1897,8 @@ func (f *Fs) importFormats(ctx context.Context) map[string][]string {
 // Look through the exportExtensions and find the first format that can be
 // converted.  If none found then return ("", "", false)
 func (f *Fs) findExportFormatByMimeType(ctx context.Context, itemMimeType string) (
-	extension, mimeType string, isDocument bool) {
+	extension, mimeType string, isDocument bool,
+) {
 	exportMimeTypes, isDocument := f.exportFormats(ctx)[itemMimeType]
 	if isDocument {
 		for _, _extension := range f.exportExtensions {
@@ -2689,7 +2694,7 @@ func (f *Fs) purgeCheck(ctx context.Context, dir string, check bool) error {
 	if shortcutID != "" {
 		return f.delete(ctx, shortcutID, f.opt.UseTrash)
 	}
-	var trashedFiles = false
+	trashedFiles := false
 	if check {
 		found, err := f.list(ctx, []string{directoryID}, "", false, false, f.opt.TrashedOnly, true, func(item *drive.File) bool {
 			if !item.Trashed {
@@ -2926,7 +2931,6 @@ func (f *Fs) CleanUp(ctx context.Context) error {
 		err := f.svc.Files.EmptyTrash().Context(ctx).Do()
 		return f.shouldRetry(ctx, err)
 	})
-
 	if err != nil {
 		return err
 	}
@@ -3187,6 +3191,7 @@ func (f *Fs) ChangeNotify(ctx context.Context, notifyFunc func(string, fs.EntryT
 		}
 	}()
 }
+
 func (f *Fs) changeNotifyStartPageToken(ctx context.Context) (pageToken string, err error) {
 	var startPageToken *drive.StartPageToken
 	err = f.pacer.Call(func() (bool, error) {
@@ -3990,14 +3995,13 @@ func (f *Fs) Command(ctx context.Context, name string, arg []string, opt map[str
 	case "query":
 		if len(arg) == 1 {
 			query := arg[0]
-			var results, err = f.query(ctx, query)
+			results, err := f.query(ctx, query)
 			if err != nil {
 				return nil, fmt.Errorf("failed to execute query: %q, error: %w", query, err)
 			}
 			return results, nil
-		} else {
-			return nil, errors.New("need a query argument")
 		}
+		return nil, errors.New("need a query argument")
 	case "rescue":
 		dirID := ""
 		_, delete := opt["delete"]
@@ -4057,6 +4061,7 @@ func (o *Object) Hash(ctx context.Context, t hash.Type) (string, error) {
 	}
 	return "", hash.ErrUnsupported
 }
+
 func (o *baseObject) Hash(ctx context.Context, t hash.Type) (string, error) {
 	if t != hash.MD5 && t != hash.SHA1 && t != hash.SHA256 {
 		return "", hash.ErrUnsupported
@@ -4071,7 +4076,8 @@ func (o *baseObject) Size() int64 {
 
 // getRemoteInfoWithExport returns a drive.File and the export settings for the remote
 func (f *Fs) getRemoteInfoWithExport(ctx context.Context, remote string) (
-	info *drive.File, extension, exportName, exportMimeType string, isDocument bool, err error) {
+	info *drive.File, extension, exportName, exportMimeType string, isDocument bool, err error,
+) {
 	leaf, directoryID, err := f.dirCache.FindPath(ctx, remote, false)
 	if err != nil {
 		if err == fs.ErrorDirNotFound {
@@ -4284,12 +4290,13 @@ func (o *Object) Open(ctx context.Context, options ...fs.OpenOption) (in io.Read
 	}
 	return o.baseObject.open(ctx, o.url, options...)
 }
+
 func (o *documentObject) Open(ctx context.Context, options ...fs.OpenOption) (in io.ReadCloser, err error) {
 	// Update the size with what we are reading as it can change from
 	// the HEAD in the listing to this GET. This stops rclone marking
 	// the transfer as corrupted.
 	var offset, end int64 = 0, -1
-	var newOptions = options[:0]
+	newOptions := options[:0]
 	for _, o := range options {
 		// Note that Range requests don't work on Google docs:
 		// https://developers.google.com/drive/v3/web/manage-downloads#partial_download
@@ -4316,9 +4323,10 @@ func (o *documentObject) Open(ctx context.Context, options ...fs.OpenOption) (in
 	}
 	return
 }
+
 func (o *linkObject) Open(ctx context.Context, options ...fs.OpenOption) (in io.ReadCloser, err error) {
 	var offset, limit int64 = 0, -1
-	var data = o.content
+	data := o.content
 	for _, option := range options {
 		switch x := option.(type) {
 		case *fs.SeekOption:
@@ -4343,7 +4351,8 @@ func (o *linkObject) Open(ctx context.Context, options ...fs.OpenOption) (in io.
 }
 
 func (o *baseObject) update(ctx context.Context, updateInfo *drive.File, uploadMimeType string, in io.Reader,
-	src fs.ObjectInfo) (info *drive.File, err error) {
+	src fs.ObjectInfo,
+) (info *drive.File, err error) {
 	// Make the API request to upload metadata and file data.
 	size := src.Size()
 	if size >= 0 && size < int64(o.fs.opt.UploadCutoff) {
@@ -4421,6 +4430,7 @@ func (o *Object) Update(ctx context.Context, in io.Reader, src fs.ObjectInfo, op
 
 	return nil
 }
+
 func (o *documentObject) Update(ctx context.Context, in io.Reader, src fs.ObjectInfo, options ...fs.OpenOption) error {
 	srcMimeType := fs.MimeType(ctx, src)
 	importMimeType := ""
@@ -4516,6 +4526,7 @@ func (o *baseObject) Metadata(ctx context.Context) (metadata fs.Metadata, err er
 func (o *documentObject) ext() string {
 	return o.baseObject.remote[len(o.baseObject.remote)-o.extLen:]
 }
+
 func (o *linkObject) ext() string {
 	return o.baseObject.remote[len(o.baseObject.remote)-o.extLen:]
 }
diff --git a/backend/sugarsync/sugarsync.go b/backend/sugarsync/sugarsync.go
index 880776698bdf0..04dc31fd8c5e0 100644
--- a/backend/sugarsync/sugarsync.go
+++ b/backend/sugarsync/sugarsync.go
@@ -120,7 +120,7 @@ func init() {
 				srv := rest.NewClient(fshttp.NewClient(ctx)).SetRoot(rootURL) //  FIXME
 
 				// FIXME
-				//err = f.pacer.Call(func() (bool, error) {
+				// err = f.pacer.Call(func() (bool, error) {
 				resp, err = srv.CallXML(context.Background(), &opts, &authRequest, nil)
 				//	return shouldRetry(ctx, resp, err)
 				//})
@@ -327,7 +327,7 @@ func (f *Fs) readMetaDataForID(ctx context.Context, ID string) (info *api.File,
 func (f *Fs) getAuthToken(ctx context.Context) error {
 	fs.Debugf(f, "Renewing token")
 
-	var authRequest = api.TokenAuthRequest{
+	authRequest := api.TokenAuthRequest{
 		AccessKeyID:      withDefault(f.opt.AccessKeyID, accessKeyID),
 		PrivateAccessKey: withDefault(f.opt.PrivateAccessKey, obscure.MustReveal(encryptedPrivateAccessKey)),
 		RefreshToken:     f.opt.RefreshToken,
@@ -509,7 +509,7 @@ func errorHandler(resp *http.Response) (err error) {
 		return fmt.Errorf("error reading error out of body: %w", err)
 	}
 	match := findError.FindSubmatch(body)
-	if match == nil || len(match) < 2 || len(match[1]) == 0 {
+	if len(match) < 2 || len(match[1]) == 0 {
 		return fmt.Errorf("HTTP error %v (%v) returned body: %q", resp.StatusCode, resp.Status, body)
 	}
 	return fmt.Errorf("HTTP error %v (%v): %s", resp.StatusCode, resp.Status, match[1])
@@ -552,7 +552,7 @@ func (f *Fs) NewObject(ctx context.Context, remote string) (fs.Object, error) {
 
 // FindLeaf finds a directory of name leaf in the folder with ID pathID
 func (f *Fs) FindLeaf(ctx context.Context, pathID, leaf string) (pathIDOut string, found bool, err error) {
-	//fs.Debugf(f, "FindLeaf(%q, %q)", pathID, leaf)
+	// fs.Debugf(f, "FindLeaf(%q, %q)", pathID, leaf)
 	// Find the leaf in pathID
 	found, err = f.listAll(ctx, pathID, nil, func(item *api.Collection) bool {
 		if strings.EqualFold(item.Name, leaf) {
diff --git a/cmd/bisync/bisync_test.go b/cmd/bisync/bisync_test.go
index f154d4d2871a2..c97af894dd882 100644
--- a/cmd/bisync/bisync_test.go
+++ b/cmd/bisync/bisync_test.go
@@ -881,10 +881,9 @@ func (b *bisyncTest) runTestStep(ctx context.Context, line string) (err error) {
 		if !ok || err != nil {
 			fs.Logf(remotePath, "Can't find expected file %s (was it renamed by the os?) %v", args[1], err)
 			return
-		} else {
-			// include hash of filename to make unicode form differences easier to see in logs
-			fs.Debugf(remotePath, "verified file exists at correct path. filename hash: %s", stringToHash(leaf))
 		}
+		// include hash of filename to make unicode form differences easier to see in logs
+		fs.Debugf(remotePath, "verified file exists at correct path. filename hash: %s", stringToHash(leaf))
 		return
 	default:
 		return fmt.Errorf("unknown command: %q", args[0])
diff --git a/cmd/bisync/deltas.go b/cmd/bisync/deltas.go
index dde42e41413c3..2fba379c68bf6 100644
--- a/cmd/bisync/deltas.go
+++ b/cmd/bisync/deltas.go
@@ -161,9 +161,7 @@ func (b *bisyncRun) findDeltas(fctx context.Context, f fs.Fs, oldListing string,
 		return
 	}
 
-	if err == nil {
-		err = b.checkListing(now, newListing, "current "+msg)
-	}
+	err = b.checkListing(now, newListing, "current "+msg)
 	if err != nil {
 		return
 	}

From fb648e4774cc9291e7f873137867a425ceaaea60 Mon Sep 17 00:00:00 2001
From: jbagwell-akamai <113531113+jbagwell-akamai@users.noreply.github.com>
Date: Thu, 13 Feb 2025 03:36:22 -0600
Subject: [PATCH 21/73] s3: add latest Linode Object Storage endpoints

Added missing Linode Object Storage endpoints AMS, MAA, CGK, LON, LAX, MAD, MEL, MIA, OSA, GRU, SIN
---
 backend/s3/s3.go   | 37 +++++++++++++++++++++++++++++++++++--
 docs/content/s3.md | 44 +++++++++++++++++++++++++++++++++-----------
 2 files changed, 68 insertions(+), 13 deletions(-)

diff --git a/backend/s3/s3.go b/backend/s3/s3.go
index af149a306b993..716b35ffdd225 100644
--- a/backend/s3/s3.go
+++ b/backend/s3/s3.go
@@ -934,34 +934,67 @@ func init() {
 				Help:  "The default endpoint\nIran",
 			}},
 		}, {
-			// Linode endpoints: https://www.linode.com/docs/products/storage/object-storage/guides/urls/#cluster-url-s3-endpoint
+			// Linode endpoints: https://techdocs.akamai.com/cloud-computing/docs/object-storage-product-limits#supported-endpoint-types-by-region
 			Name:     "endpoint",
 			Help:     "Endpoint for Linode Object Storage API.",
 			Provider: "Linode",
 			Examples: []fs.OptionExample{{
+				Value: "nl-ams-1.linodeobjects.com",
+				Help:  "Amsterdam (Netherlands), nl-ams-1",
+			}, {
 				Value: "us-southeast-1.linodeobjects.com",
 				Help:  "Atlanta, GA (USA), us-southeast-1",
+			}, {
+				Value: "in-maa-1.linodeobjects.com",
+				Help:  "Chennai (India), in-maa-1",
 			}, {
 				Value: "us-ord-1.linodeobjects.com",
 				Help:  "Chicago, IL (USA), us-ord-1",
 			}, {
 				Value: "eu-central-1.linodeobjects.com",
 				Help:  "Frankfurt (Germany), eu-central-1",
+			}, {
+				Value: "id-cgk-1.linodeobjects.com",
+				Help:  "Jakarta (Indonesia), id-cgk-1",
+			}, {
+				Value: "gb-lon-1.linodeobjects.com",
+				Help:  "London 2 (Great Britain), gb-lon-1",
+			}, {
+				Value: "us-lax-1.linodeobjects.com",
+				Help:  "Los Angeles, CA (USA), us-lax-1",
+			}, {
+				Value: "es-mad-1.linodeobjects.com",
+				Help:  "Madrid (Spain), es-mad-1",
+			}, {
+				Value: "au-mel-1.linodeobjects.com",
+				Help:  "Melbourne (Australia), au-mel-1",
+			}, {
+				Value: "us-mia-1.linodeobjects.com",
+				Help:  "Miami, FL (USA), us-mia-1",
 			}, {
 				Value: "it-mil-1.linodeobjects.com",
 				Help:  "Milan (Italy), it-mil-1",
 			}, {
 				Value: "us-east-1.linodeobjects.com",
 				Help:  "Newark, NJ (USA), us-east-1",
+			}, {
+				Value: "jp-osa-1.linodeobjects.com",
+				Help:  "Osaka (Japan), jp-osa-1",
 			}, {
 				Value: "fr-par-1.linodeobjects.com",
 				Help:  "Paris (France), fr-par-1",
+			}, {
+				Value: "br-gru-1.linodeobjects.com",
+				Help:  "São Paulo (Brazil), br-gru-1",
 			}, {
 				Value: "us-sea-1.linodeobjects.com",
 				Help:  "Seattle, WA (USA), us-sea-1",
 			}, {
 				Value: "ap-south-1.linodeobjects.com",
-				Help:  "Singapore ap-south-1",
+				Help:  "Singapore, ap-south-1",
+			}, {
+				Value: "sg-sin-1.linodeobjects.com",
+				Help:  "Singapore 2, sg-sin-1",
 			}, {
 				Value: "se-sto-1.linodeobjects.com",
 				Help:  "Stockholm (Sweden), se-sto-1",
diff --git a/docs/content/s3.md b/docs/content/s3.md
index a71549e94be0b..4d96cde940698 100644
--- a/docs/content/s3.md
+++ b/docs/content/s3.md
@@ -4845,27 +4845,49 @@ Option endpoint.
 Endpoint for Linode Object Storage API.
 Choose a number from below, or type in your own value.
 Press Enter to leave empty.
- 1 / Atlanta, GA (USA), us-southeast-1
+ 1 / Amsterdam (Netherlands), nl-ams-1
+   \ (nl-ams-1.linodeobjects.com)
+ 2 / Atlanta, GA (USA), us-southeast-1
    \ (us-southeast-1.linodeobjects.com)
- 2 / Chicago, IL (USA), us-ord-1
+ 3 / Chennai (India), in-maa-1
+   \ (in-maa-1.linodeobjects.com)
+ 4 / Chicago, IL (USA), us-ord-1
    \ (us-ord-1.linodeobjects.com)
- 3 / Frankfurt (Germany), eu-central-1
+ 5 / Frankfurt (Germany), eu-central-1
    \ (eu-central-1.linodeobjects.com)
- 4 / Milan (Italy), it-mil-1
+ 6 / Jakarta (Indonesia), id-cgk-1
+   \ (id-cgk-1.linodeobjects.com)
+ 7 / London 2 (Great Britain), gb-lon-1
+   \ (gb-lon-1.linodeobjects.com)
+ 8 / Los Angeles, CA (USA), us-lax-1
+   \ (us-lax-1.linodeobjects.com)
+ 9 / Madrid (Spain), es-mad-1
+   \ (es-mad-1.linodeobjects.com)
+10 / Melbourne (Australia), au-mel-1
+   \ (au-mel-1.linodeobjects.com)
+11 / Miami, FL (USA), us-mia-1
+   \ (us-mia-1.linodeobjects.com)
+12 / Milan (Italy), it-mil-1
    \ (it-mil-1.linodeobjects.com)
- 5 / Newark, NJ (USA), us-east-1
+13 / Newark, NJ (USA), us-east-1
    \ (us-east-1.linodeobjects.com)
- 6 / Paris (France), fr-par-1
+14 / Osaka (Japan), jp-osa-1
+   \ (jp-osa-1.linodeobjects.com)
+15 / Paris (France), fr-par-1
    \ (fr-par-1.linodeobjects.com)
- 7 / Seattle, WA (USA), us-sea-1
+16 / São Paulo (Brazil), br-gru-1
+   \ (br-gru-1.linodeobjects.com)
+17 / Seattle, WA (USA), us-sea-1
    \ (us-sea-1.linodeobjects.com)
- 8 / Singapore ap-south-1
+18 / Singapore, ap-south-1
    \ (ap-south-1.linodeobjects.com)
- 9 / Stockholm (Sweden), se-sto-1
+19 / Singapore 2, sg-sin-1
+   \ (sg-sin-1.linodeobjects.com)
+20 / Stockholm (Sweden), se-sto-1
    \ (se-sto-1.linodeobjects.com)
-10 / Washington, DC, (USA), us-iad-1
+21 / Washington, DC, (USA), us-iad-1
    \ (us-iad-1.linodeobjects.com)
-endpoint> 3
+endpoint> 5
 
 Option acl.
 Canned ACL used when creating buckets and storing or copying objects.

From 5fa85f66feb893aab8c4d5c07c9587c703de2bf3 Mon Sep 17 00:00:00 2001
From: Zachary Vorhies <zachvorhies@protonmail.com>
Date: Thu, 13 Feb 2025 04:41:37 -0700
Subject: [PATCH 22/73] doc: add note on concurrency of rclone purge

---
 cmd/purge/purge.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cmd/purge/purge.go b/cmd/purge/purge.go
index d8cb9095a1819..a86570eacd1e8 100644
--- a/cmd/purge/purge.go
+++ b/cmd/purge/purge.go
@@ -22,6 +22,9 @@ include/exclude filters - everything will be removed.  Use the
 delete files. To delete empty directories only, use command
 [rmdir](/commands/rclone_rmdir/) or [rmdirs](/commands/rclone_rmdirs/).
 
+The concurrency of this operation is controlled by the ` + "`--checkers`" + ` global flag. However, some backends will
+implement this command directly, in which case ` + "`--checkers`" + ` will be ignored.
+
 **Important**: Since this can cause data loss, test first with the
 ` + "`--dry-run` or the `--interactive`/`-i`" + ` flag.
 `,

From 259dbbab55101b60ac0ac65c2cd2c29a0cc410f2 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Mon, 10 Feb 2025 17:13:59 +0000
Subject: [PATCH 23/73] vfs: fix the cache failing to upload symlinks when
 --links was specified

Before this change, if --vfs-cache-mode writes or above was set and
--links was in use, when a symlink was saved then the VFS failed to
upload it. This meant when the VFS was restarted the link wasn't there
any more.

This was caused by the local backend, which we use to manage the VFS
cache, picking up the global --links flag.

This patch makes sure that the internal instantations of the local
backend in the VFS cache don't ever use the --links flag or the
--local-links flag even if specified on the command line.

Fixes #8367
---
 vfs/vfscache/cache.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/vfs/vfscache/cache.go b/vfs/vfscache/cache.go
index 9e228aacf9a5e..0ffa30c76ecb4 100644
--- a/vfs/vfscache/cache.go
+++ b/vfs/vfscache/cache.go
@@ -227,7 +227,10 @@ func (c *Cache) createItemDir(name string) (string, error) {
 
 // getBackend gets a backend for a cache root dir
 func getBackend(ctx context.Context, parentPath string, name string, relativeDirPath string) (fs.Fs, error) {
-	path := fmt.Sprintf(":local,encoding='%v':%s/%s/%s", encoder.OS, parentPath, name, relativeDirPath)
+	// Make sure we turn off the global links flag as it overrides the backend specific one
+	ctx, ci := fs.AddConfig(ctx)
+	ci.Links = false
+	path := fmt.Sprintf(":local,encoding='%v',links=false:%s/%s/%s", encoder.OS, parentPath, name, relativeDirPath)
 	return fscache.Get(ctx, path)
 }
 

From 68bbd8017d3f07f5eb729ecf98ed78b3e43e8c77 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Fri, 14 Feb 2025 12:29:32 +0000
Subject: [PATCH 24/73] docs: add FileLu as sponsors and tidy sponsor logos

---
 docs/content/sponsor.md              | 3 ++-
 docs/layouts/shortcodes/sponsor.html | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/docs/content/sponsor.md b/docs/content/sponsor.md
index e2e049a71c912..f45e624d6426b 100644
--- a/docs/content/sponsor.md
+++ b/docs/content/sponsor.md
@@ -57,7 +57,8 @@ off donation.
 Thank you very much to our sponsors:
 
 {{< sponsor src="/img/logos/idrive_e2.svg" width="300" height="200" title="Visit our sponsor IDrive e2" link="https://www.idrive.com/e2/?refer=rclone">}}
-{{< sponsor src="/img/logos/warp.svg" width="300" height="200" title="Visit our sponsor warp.dev" link="https://www.warp.dev/?utm_source=rclone&utm_medium=referral&utm_campaign=rclone_20231103">}}
+{{< sponsor src="/img/logos/warp.svg" width="285" height="200" title="Visit our sponsor warp.dev" link="https://www.warp.dev/?utm_source=rclone&utm_medium=referral&utm_campaign=rclone_20231103">}}
 {{< sponsor src="/img/logos/sia.svg" width="200" height="200" title="Visit our sponsor sia" link="https://sia.tech">}}
 {{< sponsor src="/img/logos/route4me.svg" width="400" height="200" title="Visit our sponsor Route4Me" link="https://route4me.com/">}}
 {{< sponsor src="/img/logos/rcloneview.svg" width="300" height="200" title="Visit our sponsor RcloneView" link="https://rcloneview.com/">}}
+{{< sponsor src="/img/logos/filelu-rclone.svg" width="330" height="200" title="Visit our sponsor FileLu" link="https://filelu.com/">}}
diff --git a/docs/layouts/shortcodes/sponsor.html b/docs/layouts/shortcodes/sponsor.html
index 43e76d2373c7d..bde5f8cb200cd 100644
--- a/docs/layouts/shortcodes/sponsor.html
+++ b/docs/layouts/shortcodes/sponsor.html
@@ -1,3 +1,3 @@
 <a href="{{ .Get "link" }}" target="_blank" >
-<img width="{{ .Get "width" }}" src="{{ .Get "src" }}" title="{{ .Get "title" }}" style="{{ .Get "style" | safeCSS }}">
+<img width="{{ .Get "width" }}" src="{{ .Get "src" }}" title="{{ .Get "title" }}" styleX="{{ .Get "style" | safeCSS }}" style="margin: 2px; padding: 1px; border: 1px solid #ddd; border-radius: 4px;">
 </a>

From 30c9bab35dadee9d9924f41ba31598baa3f26f5e Mon Sep 17 00:00:00 2001
From: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
Date: Wed, 6 Nov 2024 15:43:18 +0530
Subject: [PATCH 25/73] Added parallel docker builds and caching for go build
 in the container

Signed-off-by: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
---
 .../build_publish_beta_docker_image.yml       |  77 -----
 .../workflows/build_publish_docker_image.yml  | 294 ++++++++++++++++++
 .../workflows/build_publish_docker_plugin.yml |  45 +++
 .../build_publish_release_docker_image.yml    |  89 ------
 4 files changed, 339 insertions(+), 166 deletions(-)
 delete mode 100644 .github/workflows/build_publish_beta_docker_image.yml
 create mode 100644 .github/workflows/build_publish_docker_image.yml
 create mode 100644 .github/workflows/build_publish_docker_plugin.yml
 delete mode 100644 .github/workflows/build_publish_release_docker_image.yml

diff --git a/.github/workflows/build_publish_beta_docker_image.yml b/.github/workflows/build_publish_beta_docker_image.yml
deleted file mode 100644
index fa838c6ff0e4e..0000000000000
--- a/.github/workflows/build_publish_beta_docker_image.yml
+++ /dev/null
@@ -1,77 +0,0 @@
-name: Docker beta build
-
-on:
-    push:
-      branches:
-        - master
-jobs:
-    build:
-        if: github.repository == 'rclone/rclone'
-        runs-on: ubuntu-latest
-        name: Build image job
-        steps:
-            - name: Free some space
-              shell: bash
-              run: |
-                df -h .
-                # Remove android SDK
-                sudo rm -rf /usr/local/lib/android || true
-                # Remove .net runtime
-                sudo rm -rf /usr/share/dotnet || true
-                df -h .
-            - name: Checkout master
-              uses: actions/checkout@v4
-              with:
-                fetch-depth: 0
-            - name: Login to Docker Hub
-              uses: docker/login-action@v3
-              with:
-                username: ${{ secrets.DOCKERHUB_USERNAME }}
-                password: ${{ secrets.DOCKERHUB_TOKEN }}
-            - name: Extract metadata (tags, labels) for Docker
-              id: meta
-              uses: docker/metadata-action@v5
-              with:
-                images: ghcr.io/${{ github.repository }}
-            - name: Set up QEMU
-              uses: docker/setup-qemu-action@v3
-            - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
-            - name: Login to GitHub Container Registry
-              uses: docker/login-action@v3
-              with:
-                registry: ghcr.io
-                # This is the user that triggered the Workflow. In this case, it will
-                # either be the user whom created the Release or manually triggered
-                # the workflow_dispatch.
-                username: ${{ github.actor }}
-                # `secrets.GITHUB_TOKEN` is a secret that's automatically generated by
-                # GitHub Actions at the start of a workflow run to identify the job.
-                # This is used to authenticate against GitHub Container Registry.
-                # See https://docs.github.com/en/actions/security-guides/automatic-token-authentication#about-the-github_token-secret
-                # for more detailed information.
-                password: ${{ secrets.GITHUB_TOKEN }}
-            - name: Show disk usage
-              shell: bash
-              run: |
-                df -h .
-            - name: Build and publish image
-              uses: docker/build-push-action@v6
-              with:
-                file: Dockerfile
-                context: .
-                push: true # push the image to ghcr
-                tags: |
-                  ghcr.io/rclone/rclone:beta
-                  rclone/rclone:beta
-                labels: ${{ steps.meta.outputs.labels }}
-                platforms: linux/amd64,linux/386,linux/arm64,linux/arm/v7,linux/arm/v6
-                cache-from: type=gha, scope=${{ github.workflow }}
-                cache-to: type=gha, mode=max, scope=${{ github.workflow }}
-                provenance: false
-              # Eventually cache will need to be cleared if builds more frequent than once a week
-              # https://github.com/docker/build-push-action/issues/252
-            - name: Show disk usage
-              shell: bash
-              run: |
-                df -h .
diff --git a/.github/workflows/build_publish_docker_image.yml b/.github/workflows/build_publish_docker_image.yml
new file mode 100644
index 0000000000000..d8e5f05579fa7
--- /dev/null
+++ b/.github/workflows/build_publish_docker_image.yml
@@ -0,0 +1,294 @@
+---
+# Github Actions release for rclone
+# -*- compile-command: "yamllint -f build_publish_docker_image.yml" -*-
+
+name: Build & Push Docker Images
+
+# Trigger the workflow on push or pull request
+on:
+  push:
+    branches:
+      - '**'
+    tags:
+      - '**'
+  pull_request:
+  workflow_dispatch:
+    inputs:
+      manual:
+        description: Manual run (bypass default conditions)
+        type: boolean
+        default: true
+
+jobs:
+  build-image:
+    if: inputs.manual || (github.repository == 'rclone/rclone' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name))
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: linux/amd64
+            runs-on: ubuntu-24.04
+          - platform: linux/386
+            runs-on: ubuntu-24.04
+          - platform: linux/arm64
+            runs-on: ubuntu-24.04-arm
+          - platform: linux/arm/v7
+            runs-on: ubuntu-24.04-arm
+          - platform: linux/arm/v6
+            runs-on: ubuntu-24.04-arm
+
+    name: Build Docker Image for ${{ matrix.platform }}
+    runs-on: ${{ matrix.runs-on }}
+
+    steps:
+      - name: Free Space
+        shell: bash
+        run: |
+          df -h .
+          # Remove android SDK
+          sudo rm -rf /usr/local/lib/android || true
+          # Remove .net runtime
+          sudo rm -rf /usr/share/dotnet || true
+          df -h .
+
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set REPO_NAME Variable
+        run: |
+          echo "REPO_NAME=`echo ${{github.repository}} | tr '[:upper:]' '[:lower:]'`" >> ${GITHUB_ENV}
+
+      - name: Set PLATFORM Variable
+        run: |
+          platform=${{ matrix.platform }}
+          echo "PLATFORM=${platform//\//-}" >> $GITHUB_ENV
+
+      - name: Set CACHE_NAME Variable
+        shell: python
+        run: |
+          import os, re
+
+          def slugify(input_string, max_length=63):
+            slug = input_string.lower()
+            slug = re.sub(r'[^a-z0-9 -]', ' ', slug)
+            slug = slug.strip()
+            slug = re.sub(r'\s+', '-', slug)
+            slug = re.sub(r'-+', '-', slug)
+            slug = slug[:max_length]
+            slug = re.sub(r'[-]+$', '', slug)
+            return slug
+
+          ref_name_slug = "cache"
+
+          if os.environ.get("GITHUB_REF_NAME") and os.environ['GITHUB_EVENT_NAME'] == "pull_request":
+            ref_name_slug += "-pr-" + slugify(os.environ['GITHUB_REF_NAME'])
+
+          with open(os.environ['GITHUB_ENV'], 'a') as env:
+              env.write(f"CACHE_NAME={ref_name_slug}\n")
+
+      - name: Get ImageOS
+        # There's no way around this, because "ImageOS" is only available to
+        # processes, but the setup-go action uses it in its key.
+        id: imageos
+        uses: actions/github-script@v7
+        with:
+          result-encoding: string
+          script: |
+            return process.env.ImageOS
+
+      - name: Extract Metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        env:
+          DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,manifest-descriptor # Important for digest annotation (used by Github packages)
+        with:
+          images: |
+            ghcr.io/${{ env.REPO_NAME }}
+          labels: |
+            org.opencontainers.image.url=https://github.com/rclone/rclone/pkgs/container/rclone
+            org.opencontainers.image.vendor=${{ github.repository_owner }}
+            org.opencontainers.image.authors=rclone <https://github.com/rclone>
+            org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.revision=${{ github.sha }}
+          tags: |
+            type=sha
+            type=ref,event=pr
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=raw,value=beta,enable={{is_default_branch}}
+
+      - name: Setup QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Load Go Build Cache for Docker
+        id: go-cache
+        uses: actions/cache@v4
+        with:
+          key: ${{ runner.os }}-${{ steps.imageos.outputs.result }}-go-${{ env.CACHE_NAME }}-${{ env.PLATFORM }}-${{ hashFiles('**/go.mod') }}-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-${{ steps.imageos.outputs.result }}-go-${{ env.CACHE_NAME }}-${{ env.PLATFORM }}
+          # Cache only the go builds, the module download is cached via the docker layer caching
+          path: |
+            go-build-cache
+
+      - name: Inject Go Build Cache into Docker
+        uses: reproducible-containers/buildkit-cache-dance@v3
+        with:
+          cache-map: |
+            {
+              "go-build-cache": "/root/.cache/go-build"
+            }
+          skip-extraction: ${{ steps.go-cache.outputs.cache-hit }}
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          # This is the user that triggered the Workflow. In this case, it will
+          # either be the user whom created the Release or manually triggered
+          # the workflow_dispatch.
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and Publish Image Digest
+        id: build
+        uses: docker/build-push-action@v6
+        with:
+          file: Dockerfile
+          context: .
+          provenance: false
+          # don't specify 'tags' here (error "get can't push tagged ref by digest")
+          # tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          annotations: ${{ steps.meta.outputs.annotations }}
+          platforms: ${{ matrix.platform }}
+          outputs: |
+            type=image,name=ghcr.io/${{ env.REPO_NAME }},push-by-digest=true,name-canonical=true,push=true
+          cache-from: |
+            type=registry,ref=ghcr.io/${{ env.REPO_NAME }}:build-${{ env.CACHE_NAME }}-${{ env.PLATFORM }}
+          cache-to: |
+            type=registry,ref=ghcr.io/${{ env.REPO_NAME }}:build-${{ env.CACHE_NAME }}-${{ env.PLATFORM }},image-manifest=true,mode=max,compression=zstd
+
+      - name: Export Image Digest
+        run: |
+          mkdir -p /tmp/digests
+          digest="${{ steps.build.outputs.digest }}"
+          touch "/tmp/digests/${digest#sha256:}"
+
+      - name: Upload Image Digest
+        uses: actions/upload-artifact@v4
+        with:
+          name: digests-${{ env.PLATFORM }}
+          path: /tmp/digests/*
+          retention-days: 1
+          if-no-files-found: error
+
+  merge-image:
+    runs-on: ubuntu-24.04
+    needs:
+      - build-image
+
+    steps:
+      - name: Download Image Digests
+        uses: actions/download-artifact@v4
+        with:
+          path: /tmp/digests
+          pattern: digests-*
+          merge-multiple: true
+
+      - name: Set REPO_NAME Variable
+        run: |
+          echo "REPO_NAME=`echo ${{github.repository}} | tr '[:upper:]' '[:lower:]'`" >> ${GITHUB_ENV}
+
+      - name: Extract Metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        env:
+          DOCKER_METADATA_ANNOTATIONS_LEVELS: index
+        with:
+          images: |
+            ${{ env.REPO_NAME }}
+            ghcr.io/${{ env.REPO_NAME }}
+          labels: |
+            org.opencontainers.image.url=https://github.com/rclone/rclone/pkgs/container/rclone
+            org.opencontainers.image.vendor=${{ github.repository_owner }}
+            org.opencontainers.image.authors=rclone <https://github.com/rclone>
+            org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.revision=${{ github.sha }}
+          tags: |
+            type=sha
+            type=ref,event=pr
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=raw,value=beta,enable={{is_default_branch}}
+
+      - name: Extract Tags
+        shell: python
+        run: |
+          import json, os
+
+          metadata_json = os.environ['DOCKER_METADATA_OUTPUT_JSON']
+          metadata = json.loads(metadata_json)
+
+          tags = [f"--tag '{tag}'" for tag in metadata["tags"]]
+          tags_string = " ".join(tags)
+
+          with open(os.environ['GITHUB_ENV'], 'a') as env:
+              env.write(f"TAGS={tags_string}\n")
+
+      - name: Extract Annotations
+        shell: python
+        run: |
+          import json, os
+
+          metadata_json = os.environ['DOCKER_METADATA_OUTPUT_JSON']
+          metadata = json.loads(metadata_json)
+
+          annotations = [f"--annotation '{annotation}'" for annotation in metadata["annotations"]]
+          annotations_string = " ".join(annotations)
+
+          with open(os.environ['GITHUB_ENV'], 'a') as env:
+              env.write(f"ANNOTATIONS={annotations_string}\n")
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          # This is the user that triggered the Workflow. In this case, it will
+          # either be the user whom created the Release or manually triggered
+          # the workflow_dispatch.
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create & Push Manifest List
+        working-directory: /tmp/digests
+        run: |
+          docker buildx imagetools create \
+          ${{ env.TAGS }} \
+          ${{ env.ANNOTATIONS }} \
+          $(printf 'ghcr.io/${{ env.REPO_NAME }}@sha256:%s ' *)
+
+      - name: Inspect and Run Multi-Platform Image
+        run: |
+          docker buildx imagetools inspect --raw ${{ env.REPO_NAME }}:${{ steps.meta.outputs.version }}
+          docker buildx imagetools inspect --raw ghcr.io/${{ env.REPO_NAME }}:${{ steps.meta.outputs.version }}
+          docker run --rm ghcr.io/${{ env.REPO_NAME }}:${{ steps.meta.outputs.version }} version
diff --git a/.github/workflows/build_publish_docker_plugin.yml b/.github/workflows/build_publish_docker_plugin.yml
new file mode 100644
index 0000000000000..4056cb04be316
--- /dev/null
+++ b/.github/workflows/build_publish_docker_plugin.yml
@@ -0,0 +1,45 @@
+---
+# Github Actions release for rclone
+# -*- compile-command: "yamllint -f parsable build_publish_docker_plugin.yml" -*-
+
+name: Release Build for Docker Plugin
+
+on:
+  release:
+    types: [published]
+
+jobs:
+
+    build_docker_volume_plugin:
+        if: github.repository == 'rclone/rclone'
+        needs: build
+        runs-on: ubuntu-latest
+        name: Build docker plugin job
+        steps:
+            - name: Free some space
+              shell: bash
+              run: |
+                df -h .
+                # Remove android SDK
+                sudo rm -rf /usr/local/lib/android || true
+                # Remove .net runtime
+                sudo rm -rf /usr/share/dotnet || true
+                df -h .
+            - name: Checkout master
+              uses: actions/checkout@v4
+              with:
+                fetch-depth: 0
+            - name: Build and publish docker plugin
+              shell: bash
+              run: |
+                VER=${GITHUB_REF#refs/tags/}
+                PLUGIN_USER=rclone
+                docker login --username ${{ secrets.DOCKER_HUB_USER }} \
+                             --password-stdin <<< "${{ secrets.DOCKER_HUB_PASSWORD }}"
+                for PLUGIN_ARCH in amd64 arm64 arm/v7 arm/v6 ;do
+                    export PLUGIN_USER PLUGIN_ARCH
+                    make docker-plugin PLUGIN_TAG=${PLUGIN_ARCH/\//-}
+                    make docker-plugin PLUGIN_TAG=${PLUGIN_ARCH/\//-}-${VER#v}
+                done
+                make docker-plugin PLUGIN_ARCH=amd64 PLUGIN_TAG=latest
+                make docker-plugin PLUGIN_ARCH=amd64 PLUGIN_TAG=${VER#v}
diff --git a/.github/workflows/build_publish_release_docker_image.yml b/.github/workflows/build_publish_release_docker_image.yml
deleted file mode 100644
index b69285a7e5bb8..0000000000000
--- a/.github/workflows/build_publish_release_docker_image.yml
+++ /dev/null
@@ -1,89 +0,0 @@
-name: Docker release build
-
-on:
-  release:
-    types: [published]
-
-jobs:
-    build:
-        if: github.repository == 'rclone/rclone'
-        runs-on: ubuntu-latest
-        name: Build image job
-        steps:
-            - name: Free some space
-              shell: bash
-              run: |
-                df -h .
-                # Remove android SDK
-                sudo rm -rf /usr/local/lib/android || true
-                # Remove .net runtime
-                sudo rm -rf /usr/share/dotnet || true
-                df -h .
-            - name: Checkout master
-              uses: actions/checkout@v4
-              with:
-                fetch-depth: 0
-            - name: Get actual patch version
-              id: actual_patch_version
-              run: echo ::set-output name=ACTUAL_PATCH_VERSION::$(echo $GITHUB_REF | cut -d / -f 3 | sed 's/v//g')
-            - name: Get actual minor version
-              id: actual_minor_version
-              run: echo ::set-output name=ACTUAL_MINOR_VERSION::$(echo $GITHUB_REF | cut -d / -f 3 | sed 's/v//g' | cut -d "." -f 1,2)
-            - name: Get actual major version
-              id: actual_major_version
-              run: echo ::set-output name=ACTUAL_MAJOR_VERSION::$(echo $GITHUB_REF | cut -d / -f 3 | sed 's/v//g' | cut -d "." -f 1)
-            - name: Set up QEMU
-              uses: docker/setup-qemu-action@v3
-            - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
-            - name: Login to Docker Hub
-              uses: docker/login-action@v3
-              with:
-                username: ${{ secrets.DOCKER_HUB_USER }}
-                password: ${{ secrets.DOCKER_HUB_PASSWORD }}
-            - name: Build and publish image
-              uses: docker/build-push-action@v6
-              with:
-                file: Dockerfile
-                context: .
-                platforms: linux/amd64,linux/386,linux/arm64,linux/arm/v7,linux/arm/v6
-                push: true
-                tags: |
-                  rclone/rclone:latest
-                  rclone/rclone:${{ steps.actual_patch_version.outputs.ACTUAL_PATCH_VERSION }}
-                  rclone/rclone:${{ steps.actual_minor_version.outputs.ACTUAL_MINOR_VERSION }}
-                  rclone/rclone:${{ steps.actual_major_version.outputs.ACTUAL_MAJOR_VERSION }}
-
-    build_docker_volume_plugin:
-        if: github.repository == 'rclone/rclone'
-        needs: build
-        runs-on: ubuntu-latest
-        name: Build docker plugin job
-        steps:
-            - name: Free some space
-              shell: bash
-              run: |
-                df -h .
-                # Remove android SDK
-                sudo rm -rf /usr/local/lib/android || true
-                # Remove .net runtime
-                sudo rm -rf /usr/share/dotnet || true
-                df -h .
-            - name: Checkout master
-              uses: actions/checkout@v4
-              with:
-                fetch-depth: 0
-            - name: Build and publish docker plugin
-              shell: bash
-              run: |
-                VER=${GITHUB_REF#refs/tags/}
-                PLUGIN_USER=rclone
-                docker login --username ${{ secrets.DOCKER_HUB_USER }} \
-                             --password-stdin <<< "${{ secrets.DOCKER_HUB_PASSWORD }}"
-                for PLUGIN_ARCH in amd64 arm64 arm/v7 arm/v6 ;do
-                    export PLUGIN_USER PLUGIN_ARCH
-                    make docker-plugin PLUGIN_TAG=${PLUGIN_ARCH/\//-}
-                    make docker-plugin PLUGIN_TAG=${PLUGIN_ARCH/\//-}-${VER#v}
-                done
-                make docker-plugin PLUGIN_ARCH=amd64 PLUGIN_TAG=latest
-                make docker-plugin PLUGIN_ARCH=amd64 PLUGIN_TAG=${VER#v}

From b63c42f39bd5ab9fe9385ad2274efc34b0b272ee Mon Sep 17 00:00:00 2001
From: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
Date: Tue, 11 Feb 2025 19:08:46 +0530
Subject: [PATCH 26/73] build: disable docker builds on PRs & add missing
 dockerfile changes

Signed-off-by: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
---
 .../workflows/build_publish_docker_image.yml  |  6 +--
 Dockerfile                                    | 44 +++++++++++++++----
 2 files changed, 39 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/build_publish_docker_image.yml b/.github/workflows/build_publish_docker_image.yml
index d8e5f05579fa7..abc017bc347ac 100644
--- a/.github/workflows/build_publish_docker_image.yml
+++ b/.github/workflows/build_publish_docker_image.yml
@@ -1,6 +1,6 @@
 ---
 # Github Actions release for rclone
-# -*- compile-command: "yamllint -f build_publish_docker_image.yml" -*-
+# -*- compile-command: "yamllint -f parsable build_publish_docker_image.yml" -*-
 
 name: Build & Push Docker Images
 
@@ -11,7 +11,6 @@ on:
       - '**'
     tags:
       - '**'
-  pull_request:
   workflow_dispatch:
     inputs:
       manual:
@@ -21,7 +20,7 @@ on:
 
 jobs:
   build-image:
-    if: inputs.manual || (github.repository == 'rclone/rclone' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name))
+    if: inputs.manual || (github.repository == 'rclone/rclone' && github.event_name != 'pull_request')
     timeout-minutes: 60
     strategy:
       fail-fast: false
@@ -192,6 +191,7 @@ jobs:
           if-no-files-found: error
 
   merge-image:
+    name: Merge & Push Final Docker Image
     runs-on: ubuntu-24.04
     needs:
       - build-image
diff --git a/Dockerfile b/Dockerfile
index 82f16aad784a1..bb086159492c3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,19 +1,47 @@
 FROM golang:alpine AS builder
 
-COPY . /go/src/github.com/rclone/rclone/
+ARG CGO_ENABLED=0
+
 WORKDIR /go/src/github.com/rclone/rclone/
 
-RUN apk add --no-cache make bash gawk git
-RUN \
-  CGO_ENABLED=0 \
-  make
-RUN ./rclone version
+RUN echo "**** Set Go Environment Variables ****" && \
+    go env -w GOCACHE=/root/.cache/go-build
+
+RUN echo "**** Install Dependencies ****" && \
+    apk add --no-cache \
+        make \
+        bash \
+        gawk \
+        git
+
+COPY go.mod .
+COPY go.sum .
+
+RUN echo "**** Download Go Dependencies ****" && \
+    go mod download -x
+
+RUN echo "**** Verify Go Dependencies ****" && \
+    go mod verify
+
+COPY . .
+
+RUN --mount=type=cache,target=/root/.cache/go-build,sharing=locked \
+    echo "**** Build Binary ****" && \
+    make
+
+RUN echo "**** Print Version Binary ****" && \
+    ./rclone version
 
 # Begin final image
 FROM alpine:latest
 
-RUN apk --no-cache add ca-certificates fuse3 tzdata && \
-  echo "user_allow_other" >> /etc/fuse.conf
+RUN echo "**** Install Dependencies ****" && \
+    apk add --no-cache \
+        ca-certificates \
+        fuse3 \
+        tzdata && \
+    echo "Enable user_allow_other in fuse" && \
+    echo "user_allow_other" >> /etc/fuse.conf
 
 COPY --from=builder /go/src/github.com/rclone/rclone/rclone /usr/local/bin/
 

From 4e77a4ff73645f45873188de2683067d6756038e Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Fri, 14 Feb 2025 15:17:21 +0000
Subject: [PATCH 27/73] Version v1.69.1

---
 MANUAL.html                                   | 644 +++++++++++-------
 MANUAL.md                                     | 230 ++++++-
 MANUAL.txt                                    | 253 ++++++-
 docs/content/changelog.md                     |  26 +
 docs/content/commands/rclone.md               |   2 +-
 .../commands/rclone_config_encryption_set.md  |   4 +-
 docs/content/commands/rclone_copyurl.md       |   2 +-
 docs/content/commands/rclone_purge.md         |   3 +
 docs/content/commands/rclone_serve_nfs.md     |   4 +-
 docs/content/commands/rclone_serve_s3.md      |   2 +-
 docs/content/flags.md                         |   4 +-
 docs/content/googlephotos.md                  |   2 +-
 docs/content/onedrive.md                      |   2 +-
 rclone.1                                      | 294 +++++++-
 14 files changed, 1119 insertions(+), 353 deletions(-)

diff --git a/MANUAL.html b/MANUAL.html
index 29c5bfac1b4d4..0cbfcecd64d32 100644
--- a/MANUAL.html
+++ b/MANUAL.html
@@ -81,8 +81,74 @@
 <header id="title-block-header">
 <h1 class="title">rclone(1) User Manual</h1>
 <p class="author">Nick Craig-Wood</p>
-<p class="date">Jan 12, 2025</p>
+<p class="date">Feb 14, 2025</p>
 </header>
+<h1 id="name">NAME</h1>
+<p>rclone - manage files on cloud storage</p>
+<h1 id="synopsis">SYNOPSIS</h1>
+<pre><code>Usage:
+  rclone [flags]
+  rclone [command]
+
+Available commands:
+  about       Get quota information from the remote.
+  authorize   Remote authorization.
+  backend     Run a backend-specific command.
+  bisync      Perform bidirectional synchronization between two paths.
+  cat         Concatenates any files and sends them to stdout.
+  check       Checks the files in the source and destination match.
+  checksum    Checks the files in the destination against a SUM file.
+  cleanup     Clean up the remote if possible.
+  completion  Output completion script for a given shell.
+  config      Enter an interactive configuration session.
+  copy        Copy files from source to dest, skipping identical files.
+  copyto      Copy files from source to dest, skipping identical files.
+  copyurl     Copy the contents of the URL supplied content to dest:path.
+  cryptcheck  Cryptcheck checks the integrity of an encrypted remote.
+  cryptdecode Cryptdecode returns unencrypted file names.
+  dedupe      Interactively find duplicate filenames and delete/rename them.
+  delete      Remove the files in path.
+  deletefile  Remove a single file from remote.
+  gendocs     Output markdown docs for rclone to the directory supplied.
+  gitannex    Speaks with git-annex over stdin/stdout.
+  hashsum     Produces a hashsum file for all the objects in the path.
+  help        Show help for rclone commands, flags and backends.
+  link        Generate public link to file/folder.
+  listremotes List all the remotes in the config file and defined in environment variables.
+  ls          List the objects in the path with size and path.
+  lsd         List all directories/containers/buckets in the path.
+  lsf         List directories and objects in remote:path formatted for parsing.
+  lsjson      List directories and objects in the path in JSON format.
+  lsl         List the objects in path with modification time, size and path.
+  md5sum      Produces an md5sum file for all the objects in the path.
+  mkdir       Make the path if it doesn&#39;t already exist.
+  mount       Mount the remote as file system on a mountpoint.
+  move        Move files from source to dest.
+  moveto      Move file or directory from source to dest.
+  ncdu        Explore a remote with a text based user interface.
+  nfsmount    Mount the remote as file system on a mountpoint.
+  obscure     Obscure password for use in the rclone config file.
+  purge       Remove the path and all of its contents.
+  rc          Run a command against a running rclone.
+  rcat        Copies standard input to file on remote.
+  rcd         Run rclone listening to remote control commands only.
+  rmdir       Remove the empty directory at path.
+  rmdirs      Remove empty directories under the path.
+  selfupdate  Update the rclone binary.
+  serve       Serve a remote over a protocol.
+  settier     Changes storage class/tier of objects in remote.
+  sha1sum     Produces an sha1sum file for all the objects in the path.
+  size        Prints the total size and number of objects in remote:path.
+  sync        Make source and dest identical, modifying destination only.
+  test        Run a test command
+  touch       Create new file or change file modification time.
+  tree        List the contents of the remote in a tree like fashion.
+  version     Show the version number.
+
+Use &quot;rclone [command] --help&quot; for more information about a command.
+Use &quot;rclone help flags&quot; for to see the global flags.
+Use &quot;rclone help backends&quot; for a list of supported services.
+</code></pre>
 <h1 id="rclone-syncs-your-files-to-cloud-storage">Rclone syncs your files to cloud storage</h1>
 <p><img width="50%" src="https://rclone.org/img/logo_on_light__horizontal_color.svg" alt="rclone logo" style="float:right; padding: 5px;" ></p>
 <ul>
@@ -411,7 +477,7 @@ <h2 id="docker">Docker installation</h2>
 <h2 id="snap">Snap installation</h2>
 <p><a href="https://snapcraft.io/rclone"><img src="https://snapcraft.io/static/images/badges/en/snap-store-black.svg" alt="Get it from the Snap Store" /></a></p>
 <p>Make sure you have <a href="https://snapcraft.io/docs/installing-snapd">Snapd installed</a></p>
-<div class="sourceCode" id="cb23"><pre class="sourceCode bash"><code class="sourceCode bash"><span id="cb23-1"><a href="#cb23-1" aria-hidden="true"></a>$ <span class="fu">sudo</span> snap install rclone</span></code></pre></div>
+<div class="sourceCode" id="cb24"><pre class="sourceCode bash"><code class="sourceCode bash"><span id="cb24-1"><a href="#cb24-1" aria-hidden="true"></a>$ <span class="fu">sudo</span> snap install rclone</span></code></pre></div>
 <p>Due to the strict confinement of Snap, rclone snap cannot access real /home/$USER/.config/rclone directory, default config path is as below.</p>
 <ul>
 <li>Default config directory:
@@ -585,7 +651,7 @@ <h2 id="subcommands">Subcommands</h2>
 rclone sync --interactive /local/path remote:path # syncs /local/path to the remote</code></pre>
 <h1 id="rclone-config">rclone config</h1>
 <p>Enter an interactive configuration session.</p>
-<h2 id="synopsis">Synopsis</h2>
+<h2 id="synopsis-1">Synopsis</h2>
 <p>Enter an interactive configuration session where you can setup new remotes and manage existing ones. You may also set or remove a password to protect your configuration.</p>
 <pre><code>rclone config [flags]</code></pre>
 <h2 id="options">Options</h2>
@@ -613,7 +679,7 @@ <h2 id="see-also">See Also</h2>
 </ul>
 <h1 id="rclone-copy">rclone copy</h1>
 <p>Copy files from source to dest, skipping identical files.</p>
-<h2 id="synopsis-1">Synopsis</h2>
+<h2 id="synopsis-2">Synopsis</h2>
 <p>Copy the source to the destination. Does not transfer files that are identical on source and destination, testing by size and modification time or MD5SUM. Doesn't delete files from the destination. If you want to also delete files from destination, to make it match source, use the <a href="https://rclone.org/commands/rclone_sync/">sync</a> command instead.</p>
 <p>Note that it is always the contents of the directory that is synced, not the directory itself. So when source:path is a directory, it's the contents of source:path that are copied, not the directory name and contents.</p>
 <p>To copy single files, use the <a href="https://rclone.org/commands/rclone_copyto/">copyto</a> command instead.</p>
@@ -716,7 +782,7 @@ <h2 id="see-also-1">See Also</h2>
 </ul>
 <h1 id="rclone-sync">rclone sync</h1>
 <p>Make source and dest identical, modifying destination only.</p>
-<h2 id="synopsis-2">Synopsis</h2>
+<h2 id="synopsis-3">Synopsis</h2>
 <p>Sync the source to the destination, changing the destination only. Doesn't transfer files that are identical on source and destination, testing by size and modification time or MD5SUM. Destination is updated to match source, including deleting files if necessary (except duplicate objects, see below). If you don't want to delete files from destination, use the <a href="https://rclone.org/commands/rclone_copy/">copy</a> command instead.</p>
 <p><strong>Important</strong>: Since this can cause data loss, test first with the <code>--dry-run</code> or the <code>--interactive</code>/<code>-i</code> flag.</p>
 <pre><code>rclone sync --interactive SOURCE remote:DESTINATION</code></pre>
@@ -857,7 +923,7 @@ <h2 id="see-also-2">See Also</h2>
 </ul>
 <h1 id="rclone-move">rclone move</h1>
 <p>Move files from source to dest.</p>
-<h2 id="synopsis-3">Synopsis</h2>
+<h2 id="synopsis-4">Synopsis</h2>
 <p>Moves the contents of the source directory to the destination directory. Rclone will error if the source and destination overlap and the remote does not support a server-side directory move operation.</p>
 <p>To move single files, use the <a href="https://rclone.org/commands/rclone_moveto/">moveto</a> command instead.</p>
 <p>If no filters are in use and if possible this will server-side move <code>source:path</code> into <code>dest:path</code>. After this <code>source:path</code> will no longer exist.</p>
@@ -948,7 +1014,7 @@ <h2 id="see-also-3">See Also</h2>
 </ul>
 <h1 id="rclone-delete">rclone delete</h1>
 <p>Remove the files in path.</p>
-<h2 id="synopsis-4">Synopsis</h2>
+<h2 id="synopsis-5">Synopsis</h2>
 <p>Remove the files in path. Unlike <a href="https://rclone.org/commands/rclone_purge/">purge</a> it obeys include/exclude filters so can be used to selectively delete files.</p>
 <p><code>rclone delete</code> only deletes files but leaves the directory structure alone. If you want to delete a directory and all of its contents use the <a href="https://rclone.org/commands/rclone_purge/">purge</a> command.</p>
 <p>If you supply the <code>--rmdirs</code> flag, it will remove all empty directories along with it. You can also use the separate command <a href="https://rclone.org/commands/rclone_rmdir/">rmdir</a> or <a href="https://rclone.org/commands/rclone_rmdirs/">rmdirs</a> to delete empty directories only.</p>
@@ -1003,8 +1069,9 @@ <h2 id="see-also-4">See Also</h2>
 </ul>
 <h1 id="rclone-purge">rclone purge</h1>
 <p>Remove the path and all of its contents.</p>
-<h2 id="synopsis-5">Synopsis</h2>
+<h2 id="synopsis-6">Synopsis</h2>
 <p>Remove the path and all of its contents. Note that this does not obey include/exclude filters - everything will be removed. Use the <a href="https://rclone.org/commands/rclone_delete/">delete</a> command if you want to selectively delete files. To delete empty directories only, use command <a href="https://rclone.org/commands/rclone_rmdir/">rmdir</a> or <a href="https://rclone.org/commands/rclone_rmdirs/">rmdirs</a>.</p>
+<p>The concurrency of this operation is controlled by the <code>--checkers</code> global flag. However, some backends will implement this command directly, in which case <code>--checkers</code> will be ignored.</p>
 <p><strong>Important</strong>: Since this can cause data loss, test first with the <code>--dry-run</code> or the <code>--interactive</code>/<code>-i</code> flag.</p>
 <pre><code>rclone purge remote:path [flags]</code></pre>
 <h2 id="options-5">Options</h2>
@@ -1036,7 +1103,7 @@ <h2 id="see-also-6">See Also</h2>
 </ul>
 <h1 id="rclone-rmdir">rclone rmdir</h1>
 <p>Remove the empty directory at path.</p>
-<h2 id="synopsis-6">Synopsis</h2>
+<h2 id="synopsis-7">Synopsis</h2>
 <p>This removes empty directory given by path. Will not remove the path if it has any objects in it, not even empty subdirectories. Use command <a href="https://rclone.org/commands/rclone_rmdirs/">rmdirs</a> (or <a href="https://rclone.org/commands/rclone_delete/">delete</a> with option <code>--rmdirs</code>) to do that.</p>
 <p>To delete a path and any objects in it, use <a href="https://rclone.org/commands/rclone_purge/">purge</a> command.</p>
 <pre><code>rclone rmdir remote:path [flags]</code></pre>
@@ -1054,7 +1121,7 @@ <h2 id="see-also-7">See Also</h2>
 </ul>
 <h1 id="rclone-check">rclone check</h1>
 <p>Checks the files in the source and destination match.</p>
-<h2 id="synopsis-7">Synopsis</h2>
+<h2 id="synopsis-8">Synopsis</h2>
 <p>Checks the files in the source and destination match. It compares sizes and hashes (MD5 or SHA1) and logs a report of files that don't match. It doesn't alter the source or destination.</p>
 <p>For the <a href="https://rclone.org/crypt/">crypt</a> remote there is a dedicated command, <a href="https://rclone.org/commands/rclone_cryptcheck/">cryptcheck</a>, that are able to check the checksums of the encrypted files.</p>
 <p>If you supply the <code>--size-only</code> flag, it will only compare the sizes not the hashes as well. Use this for a quick check.</p>
@@ -1121,7 +1188,7 @@ <h2 id="see-also-8">See Also</h2>
 </ul>
 <h1 id="rclone-ls">rclone ls</h1>
 <p>List the objects in the path with size and path.</p>
-<h2 id="synopsis-8">Synopsis</h2>
+<h2 id="synopsis-9">Synopsis</h2>
 <p>Lists the objects in the source path to standard output in a human readable format with size and path. Recurses by default.</p>
 <p>Eg</p>
 <pre><code>$ rclone ls swift:bucket
@@ -1180,7 +1247,7 @@ <h2 id="see-also-9">See Also</h2>
 </ul>
 <h1 id="rclone-lsd">rclone lsd</h1>
 <p>List all directories/containers/buckets in the path.</p>
-<h2 id="synopsis-9">Synopsis</h2>
+<h2 id="synopsis-10">Synopsis</h2>
 <p>Lists the directories in the source path to standard output. Does not recurse by default. Use the <code>-R</code> flag to recurse.</p>
 <p>This command lists the total size of the directory (if known, -1 if not), the modification time (if known, the current time if not), the number of objects in the directory (if known, -1 if not) and the name of the directory, Eg</p>
 <pre><code>$ rclone lsd swift:
@@ -1244,7 +1311,7 @@ <h2 id="see-also-10">See Also</h2>
 </ul>
 <h1 id="rclone-lsl">rclone lsl</h1>
 <p>List the objects in path with modification time, size and path.</p>
-<h2 id="synopsis-10">Synopsis</h2>
+<h2 id="synopsis-11">Synopsis</h2>
 <p>Lists the objects in the source path to standard output in a human readable format with modification time, size and path. Recurses by default.</p>
 <p>Eg</p>
 <pre><code>$ rclone lsl swift:bucket
@@ -1303,7 +1370,7 @@ <h2 id="see-also-11">See Also</h2>
 </ul>
 <h1 id="rclone-md5sum">rclone md5sum</h1>
 <p>Produces an md5sum file for all the objects in the path.</p>
-<h2 id="synopsis-11">Synopsis</h2>
+<h2 id="synopsis-12">Synopsis</h2>
 <p>Produces an md5sum file for all the objects in the path. This is in the same format as the standard md5sum tool produces.</p>
 <p>By default, the hash is requested from the remote. If MD5 is not supported by the remote, no hash will be returned. With the download flag, the file will be downloaded from the remote and hashed locally enabling MD5 for any remote.</p>
 <p>For other algorithms, see the <a href="https://rclone.org/commands/rclone_hashsum/">hashsum</a> command. Running <code>rclone md5sum remote:path</code> is equivalent to running <code>rclone hashsum MD5 remote:path</code>.</p>
@@ -1350,7 +1417,7 @@ <h2 id="see-also-12">See Also</h2>
 </ul>
 <h1 id="rclone-sha1sum">rclone sha1sum</h1>
 <p>Produces an sha1sum file for all the objects in the path.</p>
-<h2 id="synopsis-12">Synopsis</h2>
+<h2 id="synopsis-13">Synopsis</h2>
 <p>Produces an sha1sum file for all the objects in the path. This is in the same format as the standard sha1sum tool produces.</p>
 <p>By default, the hash is requested from the remote. If SHA-1 is not supported by the remote, no hash will be returned. With the download flag, the file will be downloaded from the remote and hashed locally enabling SHA-1 for any remote.</p>
 <p>For other algorithms, see the <a href="https://rclone.org/commands/rclone_hashsum/">hashsum</a> command. Running <code>rclone sha1sum remote:path</code> is equivalent to running <code>rclone hashsum SHA1 remote:path</code>.</p>
@@ -1398,7 +1465,7 @@ <h2 id="see-also-13">See Also</h2>
 </ul>
 <h1 id="rclone-size">rclone size</h1>
 <p>Prints the total size and number of objects in remote:path.</p>
-<h2 id="synopsis-13">Synopsis</h2>
+<h2 id="synopsis-14">Synopsis</h2>
 <p>Counts objects in the path and calculates the total size. Prints the result to standard output.</p>
 <p>By default the output is in human-readable format, but shows values in both human-readable format as well as the raw numbers (global option <code>--human-readable</code> is not considered). Use option <code>--json</code> to format output as JSON instead.</p>
 <p>Recurses by default, use <code>--max-depth 1</code> to stop the recursion.</p>
@@ -1442,7 +1509,7 @@ <h2 id="see-also-14">See Also</h2>
 </ul>
 <h1 id="rclone-version">rclone version</h1>
 <p>Show the version number.</p>
-<h2 id="synopsis-14">Synopsis</h2>
+<h2 id="synopsis-15">Synopsis</h2>
 <p>Show the rclone version number, the go version, the build target OS and architecture, the runtime OS and kernel version and bitness, build tags and the type of executable (static or dynamic).</p>
 <p>For example:</p>
 <pre><code>$ rclone version
@@ -1478,7 +1545,7 @@ <h2 id="see-also-15">See Also</h2>
 </ul>
 <h1 id="rclone-cleanup">rclone cleanup</h1>
 <p>Clean up the remote if possible.</p>
-<h2 id="synopsis-15">Synopsis</h2>
+<h2 id="synopsis-16">Synopsis</h2>
 <p>Clean up the remote if possible. Empty the trash or delete old file versions. Not supported by all remotes.</p>
 <pre><code>rclone cleanup remote:path [flags]</code></pre>
 <h2 id="options-16">Options</h2>
@@ -1495,7 +1562,7 @@ <h2 id="see-also-16">See Also</h2>
 </ul>
 <h1 id="rclone-dedupe">rclone dedupe</h1>
 <p>Interactively find duplicate filenames and delete/rename them.</p>
-<h2 id="synopsis-16">Synopsis</h2>
+<h2 id="synopsis-17">Synopsis</h2>
 <p>By default <code>dedupe</code> interactively finds files with duplicate names and offers to delete all but one or rename them to be different. This is known as deduping by name.</p>
 <p>Deduping by name is only useful with a small group of backends (e.g. Google Drive, Opendrive) that can have duplicate file names. It can be run on wrapping backends (e.g. crypt) if they wrap a backend which supports duplicate file names.</p>
 <p>However if <code>--by-hash</code> is passed in then dedupe will find files with duplicate hashes instead which will work on any backend which supports at least one hash. This can be used to find files with duplicate content. This is known as deduping by hash.</p>
@@ -1579,7 +1646,7 @@ <h2 id="see-also-17">See Also</h2>
 </ul>
 <h1 id="rclone-about">rclone about</h1>
 <p>Get quota information from the remote.</p>
-<h2 id="synopsis-17">Synopsis</h2>
+<h2 id="synopsis-18">Synopsis</h2>
 <p>Prints quota information about a remote to standard output. The output is typically used, free, quota and trash contents.</p>
 <p>E.g. Typical output from <code>rclone about remote:</code> is:</p>
 <pre><code>Total:   17 GiB
@@ -1625,7 +1692,7 @@ <h2 id="see-also-18">See Also</h2>
 </ul>
 <h1 id="rclone-authorize">rclone authorize</h1>
 <p>Remote authorization.</p>
-<h2 id="synopsis-18">Synopsis</h2>
+<h2 id="synopsis-19">Synopsis</h2>
 <p>Remote authorization. Used to authorize a remote or headless rclone from a machine with a browser - use as instructed by rclone config.</p>
 <p>Use --auth-no-open-browser to prevent rclone to open auth link in default browser automatically.</p>
 <p>Use --template to generate HTML output via a custom Go template. If a blank string is provided as an argument to this flag, the default template is used.</p>
@@ -1641,7 +1708,7 @@ <h2 id="see-also-19">See Also</h2>
 </ul>
 <h1 id="rclone-backend">rclone backend</h1>
 <p>Run a backend-specific command.</p>
-<h2 id="synopsis-19">Synopsis</h2>
+<h2 id="synopsis-20">Synopsis</h2>
 <p>This runs a backend-specific command. The commands themselves (except for "help" and "features") are defined by the backends and you should see the backend docs for definitions.</p>
 <p>You can discover what commands a backend implements by using</p>
 <pre><code>rclone backend help remote:
@@ -1670,7 +1737,7 @@ <h2 id="see-also-20">See Also</h2>
 </ul>
 <h1 id="rclone-bisync">rclone bisync</h1>
 <p>Perform bidirectional synchronization between two paths.</p>
-<h2 id="synopsis-20">Synopsis</h2>
+<h2 id="synopsis-21">Synopsis</h2>
 <p>Perform bidirectional synchronization between two paths.</p>
 <p><a href="https://rclone.org/bisync/">Bisync</a> provides a bidirectional cloud sync solution in rclone. It retains the Path1 and Path2 filesystem listings from the prior run. On each successive run it will: - list files on Path1 and Path2, and check for changes on each side. Changes include <code>New</code>, <code>Newer</code>, <code>Older</code>, and <code>Deleted</code> files. - Propagate changes on Path1 to Path2, and vice-versa.</p>
 <p>Bisync is <strong>in beta</strong> and is considered an <strong>advanced command</strong>, so use with care. Make sure you have read and understood the entire <a href="https://rclone.org/bisync">manual</a> (especially the <a href="https://rclone.org/bisync/#limitations">Limitations</a> section) before using, or data loss can result. Questions can be asked in the <a href="https://forum.rclone.org/">Rclone Forum</a>.</p>
@@ -1773,7 +1840,7 @@ <h2 id="see-also-21">See Also</h2>
 </ul>
 <h1 id="rclone-cat">rclone cat</h1>
 <p>Concatenates any files and sends them to stdout.</p>
-<h2 id="synopsis-21">Synopsis</h2>
+<h2 id="synopsis-22">Synopsis</h2>
 <p>Sends any files to standard output.</p>
 <p>You can use it like this to output a single file</p>
 <pre><code>rclone cat remote:path/to/file</code></pre>
@@ -1833,7 +1900,7 @@ <h2 id="see-also-22">See Also</h2>
 </ul>
 <h1 id="rclone-checksum">rclone checksum</h1>
 <p>Checks the files in the destination against a SUM file.</p>
-<h2 id="synopsis-22">Synopsis</h2>
+<h2 id="synopsis-23">Synopsis</h2>
 <p>Checks that hashsums of destination files match the SUM file. It compares hashes (MD5, SHA1, etc) and logs a report of files which don't match. It doesn't alter the file system.</p>
 <p>The sumfile is treated as the source and the dst:path is treated as the destination for the purposes of the output.</p>
 <p>If you supply the <code>--download</code> flag, it will download the data from the remote and calculate the content hash on the fly. This can be useful for remotes that don't support hashes or if you really want to check all the data.</p>
@@ -1895,7 +1962,7 @@ <h2 id="see-also-23">See Also</h2>
 </ul>
 <h1 id="rclone-completion">rclone completion</h1>
 <p>Output completion script for a given shell.</p>
-<h2 id="synopsis-23">Synopsis</h2>
+<h2 id="synopsis-24">Synopsis</h2>
 <p>Generates a shell completion script for rclone. Run with <code>--help</code> to list the supported shells.</p>
 <h2 id="options-24">Options</h2>
 <pre><code>  -h, --help   help for completion</code></pre>
@@ -1910,7 +1977,7 @@ <h2 id="see-also-24">See Also</h2>
 </ul>
 <h1 id="rclone-completion-bash">rclone completion bash</h1>
 <p>Output bash completion script for rclone.</p>
-<h2 id="synopsis-24">Synopsis</h2>
+<h2 id="synopsis-25">Synopsis</h2>
 <p>Generates a bash shell autocompletion script for rclone.</p>
 <p>By default, when run without any arguments,</p>
 <pre><code>rclone completion bash</code></pre>
@@ -1933,7 +2000,7 @@ <h2 id="see-also-25">See Also</h2>
 </ul>
 <h1 id="rclone-completion-fish">rclone completion fish</h1>
 <p>Output fish completion script for rclone.</p>
-<h2 id="synopsis-25">Synopsis</h2>
+<h2 id="synopsis-26">Synopsis</h2>
 <p>Generates a fish autocompletion script for rclone.</p>
 <p>This writes to /etc/fish/completions/rclone.fish by default so will probably need to be run with sudo or as root, e.g.</p>
 <pre><code>sudo rclone completion fish</code></pre>
@@ -1951,7 +2018,7 @@ <h2 id="see-also-26">See Also</h2>
 </ul>
 <h1 id="rclone-completion-powershell">rclone completion powershell</h1>
 <p>Output powershell completion script for rclone.</p>
-<h2 id="synopsis-26">Synopsis</h2>
+<h2 id="synopsis-27">Synopsis</h2>
 <p>Generate the autocompletion script for powershell.</p>
 <p>To load completions in your current shell session:</p>
 <pre><code>rclone completion powershell | Out-String | Invoke-Expression</code></pre>
@@ -1967,7 +2034,7 @@ <h2 id="see-also-27">See Also</h2>
 </ul>
 <h1 id="rclone-completion-zsh">rclone completion zsh</h1>
 <p>Output zsh completion script for rclone.</p>
-<h2 id="synopsis-27">Synopsis</h2>
+<h2 id="synopsis-28">Synopsis</h2>
 <p>Generates a zsh autocompletion script for rclone.</p>
 <p>This writes to /usr/share/zsh/vendor-completions/_rclone by default so will probably need to be run with sudo or as root, e.g.</p>
 <pre><code>sudo rclone completion zsh</code></pre>
@@ -1985,7 +2052,7 @@ <h2 id="see-also-28">See Also</h2>
 </ul>
 <h1 id="rclone-config-create">rclone config create</h1>
 <p>Create a new remote with name, type and options.</p>
-<h2 id="synopsis-28">Synopsis</h2>
+<h2 id="synopsis-29">Synopsis</h2>
 <p>Create a new remote of <code>name</code> with <code>type</code> and options. The options should be passed in pairs of <code>key</code> <code>value</code> or as <code>key=value</code>.</p>
 <p>For example, to make a swift remote of name myremote using auto config you would do:</p>
 <pre><code>rclone config create myremote swift env_auth true
@@ -2066,7 +2133,7 @@ <h2 id="see-also-30">See Also</h2>
 </ul>
 <h1 id="rclone-config-disconnect">rclone config disconnect</h1>
 <p>Disconnects user from remote</p>
-<h2 id="synopsis-29">Synopsis</h2>
+<h2 id="synopsis-30">Synopsis</h2>
 <p>This disconnects the remote: passed in to the cloud storage system.</p>
 <p>This normally means revoking the oauth token.</p>
 <p>To reconnect use "rclone config reconnect".</p>
@@ -2090,7 +2157,7 @@ <h2 id="see-also-32">See Also</h2>
 </ul>
 <h1 id="rclone-config-edit">rclone config edit</h1>
 <p>Enter an interactive configuration session.</p>
-<h2 id="synopsis-30">Synopsis</h2>
+<h2 id="synopsis-31">Synopsis</h2>
 <p>Enter an interactive configuration session where you can setup new remotes and manage existing ones. You may also set or remove a password to protect your configuration.</p>
 <pre><code>rclone config edit [flags]</code></pre>
 <h2 id="options-33">Options</h2>
@@ -2102,7 +2169,7 @@ <h2 id="see-also-33">See Also</h2>
 </ul>
 <h1 id="rclone-config-encryption">rclone config encryption</h1>
 <p>set, remove and check the encryption for the config file</p>
-<h2 id="synopsis-31">Synopsis</h2>
+<h2 id="synopsis-32">Synopsis</h2>
 <p>This command sets, clears and checks the encryption for the config file using the subcommands below.</p>
 <h2 id="options-34">Options</h2>
 <pre><code>  -h, --help   help for encryption</code></pre>
@@ -2116,7 +2183,7 @@ <h2 id="see-also-34">See Also</h2>
 </ul>
 <h1 id="rclone-config-encryption-check">rclone config encryption check</h1>
 <p>Check that the config file is encrypted</p>
-<h2 id="synopsis-32">Synopsis</h2>
+<h2 id="synopsis-33">Synopsis</h2>
 <p>This checks the config file is encrypted and that you can decrypt it.</p>
 <p>It will attempt to decrypt the config using the password you supply.</p>
 <p>If decryption fails it will return a non-zero exit code if using <code>--password-command</code>, otherwise it will prompt again for the password.</p>
@@ -2131,7 +2198,7 @@ <h2 id="see-also-35">See Also</h2>
 </ul>
 <h1 id="rclone-config-encryption-remove">rclone config encryption remove</h1>
 <p>Remove the config file encryption password</p>
-<h2 id="synopsis-33">Synopsis</h2>
+<h2 id="synopsis-34">Synopsis</h2>
 <p>Remove the config file encryption password</p>
 <p>This removes the config file encryption, returning it to un-encrypted.</p>
 <p>If <code>--password-command</code> is in use, this will be called to supply the old config password.</p>
@@ -2146,12 +2213,12 @@ <h2 id="see-also-36">See Also</h2>
 </ul>
 <h1 id="rclone-config-encryption-set">rclone config encryption set</h1>
 <p>Set or change the config file encryption password</p>
-<h2 id="synopsis-34">Synopsis</h2>
+<h2 id="synopsis-35">Synopsis</h2>
 <p>This command sets or changes the config file encryption password.</p>
 <p>If there was no config password set then it sets a new one, otherwise it changes the existing config password.</p>
 <p>Note that if you are changing an encryption password using <code>--password-command</code> then this will be called once to decrypt the config using the old password and then again to read the new password to re-encrypt the config.</p>
-<p>When <code>--password-command</code> is called to change the password then the environment variable <code>RCLONE_PASSWORD_CHANGE=1</code> will be set. So if changing passwords programatically you can use the environment variable to distinguish which password you must supply.</p>
-<p>Alternatively you can remove the password first (with <code>rclone config encryption remove</code>), then set it again with this command which may be easier if you don't mind the unecrypted config file being on the disk briefly.</p>
+<p>When <code>--password-command</code> is called to change the password then the environment variable <code>RCLONE_PASSWORD_CHANGE=1</code> will be set. So if changing passwords programmatically you can use the environment variable to distinguish which password you must supply.</p>
+<p>Alternatively you can remove the password first (with <code>rclone config encryption remove</code>), then set it again with this command which may be easier if you don't mind the unencrypted config file being on the disk briefly.</p>
 <pre><code>rclone config encryption set [flags]</code></pre>
 <h2 id="options-37">Options</h2>
 <pre><code>  -h, --help   help for set</code></pre>
@@ -2172,7 +2239,7 @@ <h2 id="see-also-38">See Also</h2>
 </ul>
 <h1 id="rclone-config-password">rclone config password</h1>
 <p>Update password in an existing remote.</p>
-<h2 id="synopsis-35">Synopsis</h2>
+<h2 id="synopsis-36">Synopsis</h2>
 <p>Update an existing remote's password. The password should be passed in pairs of <code>key</code> <code>password</code> or as <code>key=password</code>. The <code>password</code> should be passed in in clear (unobscured).</p>
 <p>For example, to set password of a remote of name myremote you would do:</p>
 <pre><code>rclone config password myremote fieldname mypassword
@@ -2208,7 +2275,7 @@ <h2 id="see-also-41">See Also</h2>
 </ul>
 <h1 id="rclone-config-reconnect">rclone config reconnect</h1>
 <p>Re-authenticates user with remote.</p>
-<h2 id="synopsis-36">Synopsis</h2>
+<h2 id="synopsis-37">Synopsis</h2>
 <p>This reconnects remote: passed in to the cloud storage system.</p>
 <p>To disconnect the remote use "rclone config disconnect".</p>
 <p>This normally means going through the interactive oauth flow again.</p>
@@ -2222,7 +2289,7 @@ <h2 id="see-also-42">See Also</h2>
 </ul>
 <h1 id="rclone-config-redacted">rclone config redacted</h1>
 <p>Print redacted (decrypted) config file, or the redacted config for a single remote.</p>
-<h2 id="synopsis-37">Synopsis</h2>
+<h2 id="synopsis-38">Synopsis</h2>
 <p>This prints a redacted copy of the config file, either the whole config file or for a given remote.</p>
 <p>The config file will be redacted by replacing all passwords and other sensitive info with XXX.</p>
 <p>This makes the config file suitable for posting online for support.</p>
@@ -2257,7 +2324,7 @@ <h2 id="see-also-45">See Also</h2>
 </ul>
 <h1 id="rclone-config-update">rclone config update</h1>
 <p>Update options in an existing remote.</p>
-<h2 id="synopsis-38">Synopsis</h2>
+<h2 id="synopsis-39">Synopsis</h2>
 <p>Update an existing remote's options. The options should be passed in pairs of <code>key</code> <code>value</code> or as <code>key=value</code>.</p>
 <p>For example, to update the env_auth field of a remote of name myremote you would do:</p>
 <pre><code>rclone config update myremote env_auth true
@@ -2328,7 +2395,7 @@ <h2 id="see-also-46">See Also</h2>
 </ul>
 <h1 id="rclone-config-userinfo">rclone config userinfo</h1>
 <p>Prints info about logged in user of remote.</p>
-<h2 id="synopsis-39">Synopsis</h2>
+<h2 id="synopsis-40">Synopsis</h2>
 <p>This prints the details of the person logged in to the cloud storage system.</p>
 <pre><code>rclone config userinfo remote: [flags]</code></pre>
 <h2 id="options-47">Options</h2>
@@ -2341,7 +2408,7 @@ <h2 id="see-also-47">See Also</h2>
 </ul>
 <h1 id="rclone-copyto">rclone copyto</h1>
 <p>Copy files from source to dest, skipping identical files.</p>
-<h2 id="synopsis-40">Synopsis</h2>
+<h2 id="synopsis-41">Synopsis</h2>
 <p>If source:path is a file or directory then it copies it to a file or directory named dest:path.</p>
 <p>This can be used to upload single files to other than their current name. If the source is a directory then it acts exactly like the <a href="https://rclone.org/commands/rclone_copy/">copy</a> command.</p>
 <p>So</p>
@@ -2433,13 +2500,13 @@ <h2 id="see-also-48">See Also</h2>
 </ul>
 <h1 id="rclone-copyurl">rclone copyurl</h1>
 <p>Copy the contents of the URL supplied content to dest:path.</p>
-<h2 id="synopsis-41">Synopsis</h2>
+<h2 id="synopsis-42">Synopsis</h2>
 <p>Download a URL's content and copy it to the destination without saving it in temporary storage.</p>
 <p>Setting <code>--auto-filename</code> will attempt to automatically determine the filename from the URL (after any redirections) and used in the destination path.</p>
 <p>With <code>--auto-filename-header</code> in addition, if a specific filename is set in HTTP headers, it will be used instead of the name from the URL. With <code>--print-filename</code> in addition, the resulting file name will be printed.</p>
 <p>Setting <code>--no-clobber</code> will prevent overwriting file on the destination if there is one with the same name.</p>
 <p>Setting <code>--stdout</code> or making the output file name <code>-</code> will cause the output to be written to standard output.</p>
-<h2 id="troublshooting">Troublshooting</h2>
+<h2 id="troubleshooting">Troubleshooting</h2>
 <p>If you can't get <code>rclone copyurl</code> to work then here are some things you can try:</p>
 <ul>
 <li><code>--disable-http2</code> rclone will use HTTP2 if available - try disabling it</li>
@@ -2468,7 +2535,7 @@ <h2 id="see-also-49">See Also</h2>
 </ul>
 <h1 id="rclone-cryptcheck">rclone cryptcheck</h1>
 <p>Cryptcheck checks the integrity of an encrypted remote.</p>
-<h2 id="synopsis-42">Synopsis</h2>
+<h2 id="synopsis-43">Synopsis</h2>
 <p>Checks a remote against a <a href="https://rclone.org/crypt/">crypted</a> remote. This is the equivalent of running rclone <a href="https://rclone.org/commands/rclone_check/">check</a>, but able to check the checksums of the encrypted remote.</p>
 <p>For it to work the underlying remote of the cryptedremote must support some kind of checksum.</p>
 <p>It works by reading the nonce from each file on the cryptedremote: and using that to encrypt each file on the remote:. It then checks the checksum of the underlying file on the cryptedremote: against the checksum of the file it has just encrypted.</p>
@@ -2536,7 +2603,7 @@ <h2 id="see-also-50">See Also</h2>
 </ul>
 <h1 id="rclone-cryptdecode">rclone cryptdecode</h1>
 <p>Cryptdecode returns unencrypted file names.</p>
-<h2 id="synopsis-43">Synopsis</h2>
+<h2 id="synopsis-44">Synopsis</h2>
 <p>Returns unencrypted file names when provided with a list of encrypted file names. List limit is 10 items.</p>
 <p>If you supply the <code>--reverse</code> flag, it will return encrypted file names.</p>
 <p>use it like this</p>
@@ -2555,7 +2622,7 @@ <h2 id="see-also-51">See Also</h2>
 </ul>
 <h1 id="rclone-deletefile">rclone deletefile</h1>
 <p>Remove a single file from remote.</p>
-<h2 id="synopsis-44">Synopsis</h2>
+<h2 id="synopsis-45">Synopsis</h2>
 <p>Remove a single file from remote. Unlike <code>delete</code> it cannot be used to remove a directory and it doesn't obey include/exclude filters - if the specified file exists, it will always be removed.</p>
 <pre><code>rclone deletefile remote:path [flags]</code></pre>
 <h2 id="options-52">Options</h2>
@@ -2572,7 +2639,7 @@ <h2 id="see-also-52">See Also</h2>
 </ul>
 <h1 id="rclone-gendocs">rclone gendocs</h1>
 <p>Output markdown docs for rclone to the directory supplied.</p>
-<h2 id="synopsis-45">Synopsis</h2>
+<h2 id="synopsis-46">Synopsis</h2>
 <p>This produces markdown docs for the rclone commands to the directory supplied. These are in a format suitable for hugo to render into the rclone.org website.</p>
 <pre><code>rclone gendocs output_directory [flags]</code></pre>
 <h2 id="options-53">Options</h2>
@@ -2584,36 +2651,36 @@ <h2 id="see-also-53">See Also</h2>
 </ul>
 <h1 id="rclone-gitannex">rclone gitannex</h1>
 <p>Speaks with git-annex over stdin/stdout.</p>
-<h2 id="synopsis-46">Synopsis</h2>
+<h2 id="synopsis-47">Synopsis</h2>
 <p>Rclone's <code>gitannex</code> subcommand enables <a href="https://git-annex.branchable.com/">git-annex</a> to store and retrieve content from an rclone remote. It is meant to be run by git-annex, not directly by users.</p>
 <h2 id="installation-on-linux">Installation on Linux</h2>
 <ol type="1">
 <li><p>Skip this step if your version of git-annex is <a href="https://git-annex.branchable.com/news/version_10.20240430/">10.20240430</a> or newer. Otherwise, you must create a symlink somewhere on your PATH with a particular name. This symlink helps git-annex tell rclone it wants to run the "gitannex" subcommand.</p>
-<div class="sourceCode" id="cb253"><pre class="sourceCode sh"><code class="sourceCode bash"><span id="cb253-1"><a href="#cb253-1" aria-hidden="true"></a><span class="co"># Create the helper symlink in &quot;$HOME/bin&quot;.</span></span>
-<span id="cb253-2"><a href="#cb253-2" aria-hidden="true"></a><span class="fu">ln</span> -s <span class="st">&quot;</span><span class="va">$(</span><span class="ex">realpath</span> rclone<span class="va">)</span><span class="st">&quot;</span> <span class="st">&quot;</span><span class="va">$HOME</span><span class="st">/bin/git-annex-remote-rclone-builtin&quot;</span></span>
-<span id="cb253-3"><a href="#cb253-3" aria-hidden="true"></a></span>
-<span id="cb253-4"><a href="#cb253-4" aria-hidden="true"></a><span class="co"># Verify the new symlink is on your PATH.</span></span>
-<span id="cb253-5"><a href="#cb253-5" aria-hidden="true"></a><span class="fu">which</span> git-annex-remote-rclone-builtin</span></code></pre></div></li>
+<div class="sourceCode" id="cb254"><pre class="sourceCode sh"><code class="sourceCode bash"><span id="cb254-1"><a href="#cb254-1" aria-hidden="true"></a><span class="co"># Create the helper symlink in &quot;$HOME/bin&quot;.</span></span>
+<span id="cb254-2"><a href="#cb254-2" aria-hidden="true"></a><span class="fu">ln</span> -s <span class="st">&quot;</span><span class="va">$(</span><span class="ex">realpath</span> rclone<span class="va">)</span><span class="st">&quot;</span> <span class="st">&quot;</span><span class="va">$HOME</span><span class="st">/bin/git-annex-remote-rclone-builtin&quot;</span></span>
+<span id="cb254-3"><a href="#cb254-3" aria-hidden="true"></a></span>
+<span id="cb254-4"><a href="#cb254-4" aria-hidden="true"></a><span class="co"># Verify the new symlink is on your PATH.</span></span>
+<span id="cb254-5"><a href="#cb254-5" aria-hidden="true"></a><span class="fu">which</span> git-annex-remote-rclone-builtin</span></code></pre></div></li>
 <li><p>Add a new remote to your git-annex repo. This new remote will connect git-annex with the <code>rclone gitannex</code> subcommand.</p>
 <p>Start by asking git-annex to describe the remote's available configuration parameters.</p>
-<div class="sourceCode" id="cb254"><pre class="sourceCode sh"><code class="sourceCode bash"><span id="cb254-1"><a href="#cb254-1" aria-hidden="true"></a><span class="co"># If you skipped step 1:</span></span>
-<span id="cb254-2"><a href="#cb254-2" aria-hidden="true"></a><span class="fu">git</span> annex initremote MyRemote type=rclone --whatelse</span>
-<span id="cb254-3"><a href="#cb254-3" aria-hidden="true"></a></span>
-<span id="cb254-4"><a href="#cb254-4" aria-hidden="true"></a><span class="co"># If you created a symlink in step 1:</span></span>
-<span id="cb254-5"><a href="#cb254-5" aria-hidden="true"></a><span class="fu">git</span> annex initremote MyRemote type=external externaltype=rclone-builtin --whatelse</span></code></pre></div>
+<div class="sourceCode" id="cb255"><pre class="sourceCode sh"><code class="sourceCode bash"><span id="cb255-1"><a href="#cb255-1" aria-hidden="true"></a><span class="co"># If you skipped step 1:</span></span>
+<span id="cb255-2"><a href="#cb255-2" aria-hidden="true"></a><span class="fu">git</span> annex initremote MyRemote type=rclone --whatelse</span>
+<span id="cb255-3"><a href="#cb255-3" aria-hidden="true"></a></span>
+<span id="cb255-4"><a href="#cb255-4" aria-hidden="true"></a><span class="co"># If you created a symlink in step 1:</span></span>
+<span id="cb255-5"><a href="#cb255-5" aria-hidden="true"></a><span class="fu">git</span> annex initremote MyRemote type=external externaltype=rclone-builtin --whatelse</span></code></pre></div>
 <blockquote>
 <p><strong>NOTE</strong>: If you're porting an existing <a href="https://github.com/git-annex-remote-rclone/git-annex-remote-rclone">git-annex-remote-rclone</a> remote to use <code>rclone gitannex</code>, you can probably reuse the configuration parameters verbatim without renaming them. Check parameter synonyms with <code>--whatelse</code> as shown above.</p>
 </blockquote>
 <p>The following example creates a new git-annex remote named "MyRemote" that will use the rclone remote named "SomeRcloneRemote". That rclone remote must be one configured in your rclone.conf file, which can be located with <code>rclone config file</code>.</p>
-<div class="sourceCode" id="cb255"><pre class="sourceCode sh"><code class="sourceCode bash"><span id="cb255-1"><a href="#cb255-1" aria-hidden="true"></a><span class="fu">git</span> annex initremote MyRemote         <span class="kw">\</span></span>
-<span id="cb255-2"><a href="#cb255-2" aria-hidden="true"></a>    <span class="va">type=</span>external                     <span class="kw">\</span></span>
-<span id="cb255-3"><a href="#cb255-3" aria-hidden="true"></a>    <span class="va">externaltype=</span>rclone-builtin       <span class="kw">\</span></span>
-<span id="cb255-4"><a href="#cb255-4" aria-hidden="true"></a>    <span class="va">encryption=</span>none                   <span class="kw">\</span></span>
-<span id="cb255-5"><a href="#cb255-5" aria-hidden="true"></a>    <span class="va">rcloneremotename=</span>SomeRcloneRemote <span class="kw">\</span></span>
-<span id="cb255-6"><a href="#cb255-6" aria-hidden="true"></a>    <span class="va">rcloneprefix=</span>git-annex-content    <span class="kw">\</span></span>
-<span id="cb255-7"><a href="#cb255-7" aria-hidden="true"></a>    <span class="va">rclonelayout=</span>nodir</span></code></pre></div></li>
+<div class="sourceCode" id="cb256"><pre class="sourceCode sh"><code class="sourceCode bash"><span id="cb256-1"><a href="#cb256-1" aria-hidden="true"></a><span class="fu">git</span> annex initremote MyRemote         <span class="kw">\</span></span>
+<span id="cb256-2"><a href="#cb256-2" aria-hidden="true"></a>    <span class="va">type=</span>external                     <span class="kw">\</span></span>
+<span id="cb256-3"><a href="#cb256-3" aria-hidden="true"></a>    <span class="va">externaltype=</span>rclone-builtin       <span class="kw">\</span></span>
+<span id="cb256-4"><a href="#cb256-4" aria-hidden="true"></a>    <span class="va">encryption=</span>none                   <span class="kw">\</span></span>
+<span id="cb256-5"><a href="#cb256-5" aria-hidden="true"></a>    <span class="va">rcloneremotename=</span>SomeRcloneRemote <span class="kw">\</span></span>
+<span id="cb256-6"><a href="#cb256-6" aria-hidden="true"></a>    <span class="va">rcloneprefix=</span>git-annex-content    <span class="kw">\</span></span>
+<span id="cb256-7"><a href="#cb256-7" aria-hidden="true"></a>    <span class="va">rclonelayout=</span>nodir</span></code></pre></div></li>
 <li><p>Before you trust this command with your precious data, be sure to <strong>test the remote</strong>. This command is very new and has not been tested on many rclone backends. Caveat emptor!</p>
-<div class="sourceCode" id="cb256"><pre class="sourceCode sh"><code class="sourceCode bash"><span id="cb256-1"><a href="#cb256-1" aria-hidden="true"></a><span class="fu">git</span> annex testremote MyRemote</span></code></pre></div></li>
+<div class="sourceCode" id="cb257"><pre class="sourceCode sh"><code class="sourceCode bash"><span id="cb257-1"><a href="#cb257-1" aria-hidden="true"></a><span class="fu">git</span> annex testremote MyRemote</span></code></pre></div></li>
 </ol>
 <p>Happy annexing!</p>
 <pre><code>rclone gitannex [flags]</code></pre>
@@ -2626,7 +2693,7 @@ <h2 id="see-also-54">See Also</h2>
 </ul>
 <h1 id="rclone-hashsum">rclone hashsum</h1>
 <p>Produces a hashsum file for all the objects in the path.</p>
-<h2 id="synopsis-47">Synopsis</h2>
+<h2 id="synopsis-48">Synopsis</h2>
 <p>Produces a hash file for all the objects in the path using the hash named. The output is in the same format as the standard md5sum/sha1sum tool.</p>
 <p>By default, the hash is requested from the remote. If the hash is not supported by the remote, no hash will be returned. With the download flag, the file will be downloaded from the remote and hashed locally enabling any hash for any remote.</p>
 <p>For the MD5 and SHA1 algorithms there are also dedicated commands, <a href="https://rclone.org/commands/rclone_md5sum/">md5sum</a> and <a href="https://rclone.org/commands/rclone_sha1sum/">sha1sum</a>.</p>
@@ -2684,7 +2751,7 @@ <h2 id="see-also-55">See Also</h2>
 </ul>
 <h1 id="rclone-link">rclone link</h1>
 <p>Generate public link to file/folder.</p>
-<h2 id="synopsis-48">Synopsis</h2>
+<h2 id="synopsis-49">Synopsis</h2>
 <p>Create, retrieve or remove a public link to the given file or folder.</p>
 <pre><code>rclone link remote:path/to/file
 rclone link remote:path/to/folder/
@@ -2705,7 +2772,7 @@ <h2 id="see-also-56">See Also</h2>
 </ul>
 <h1 id="rclone-listremotes">rclone listremotes</h1>
 <p>List all the remotes in the config file and defined in environment variables.</p>
-<h2 id="synopsis-49">Synopsis</h2>
+<h2 id="synopsis-50">Synopsis</h2>
 <p>Lists all the available remotes from the config file, or the remotes matching an optional filter.</p>
 <p>Prints the result in human-readable format by default, and as a simple list of remote names, or if used with flag <code>--long</code> a tabular format including the remote names, types and descriptions. Using flag <code>--json</code> produces machine-readable output instead, which always includes all attributes - including the source (file or environment).</p>
 <p>Result can be filtered by a filter argument which applies to all attributes, and/or filter flags specific for each attribute. The values must be specified according to regular rclone filtering pattern syntax.</p>
@@ -2726,7 +2793,7 @@ <h2 id="see-also-57">See Also</h2>
 </ul>
 <h1 id="rclone-lsf">rclone lsf</h1>
 <p>List directories and objects in remote:path formatted for parsing.</p>
-<h2 id="synopsis-50">Synopsis</h2>
+<h2 id="synopsis-51">Synopsis</h2>
 <p>List the contents of the source path (directories and objects) to standard output in a form which is easy to parse by scripts. By default this will just be the names of the objects and directories, one per line. The directories will have a / suffix.</p>
 <p>Eg</p>
 <pre><code>$ rclone lsf swift:bucket
@@ -2852,7 +2919,7 @@ <h2 id="see-also-58">See Also</h2>
 </ul>
 <h1 id="rclone-lsjson">rclone lsjson</h1>
 <p>List directories and objects in the path in JSON format.</p>
-<h2 id="synopsis-51">Synopsis</h2>
+<h2 id="synopsis-52">Synopsis</h2>
 <p>List directories and objects in the path in JSON format.</p>
 <p>The output is an array of Items, where each Item looks like this:</p>
 <pre><code>{
@@ -2958,7 +3025,7 @@ <h2 id="see-also-59">See Also</h2>
 </ul>
 <h1 id="rclone-mount">rclone mount</h1>
 <p>Mount the remote as file system on a mountpoint.</p>
-<h2 id="synopsis-52">Synopsis</h2>
+<h2 id="synopsis-53">Synopsis</h2>
 <p>Rclone mount allows Linux, FreeBSD, macOS and Windows to mount any of Rclone's cloud storage systems as a file system with FUSE.</p>
 <p>First set up your remote using <code>rclone config</code>. Check it works with <code>rclone ls</code> etc.</p>
 <p>On Linux and macOS, you can run mount in either foreground or background (aka daemon) mode. Mount runs in foreground mode by default. Use the <code>--daemon</code> flag to force background mode. On Windows you can run mount in foreground only, the flag is ignored.</p>
@@ -3328,7 +3395,7 @@ <h2 id="see-also-60">See Also</h2>
 </ul>
 <h1 id="rclone-moveto">rclone moveto</h1>
 <p>Move file or directory from source to dest.</p>
-<h2 id="synopsis-53">Synopsis</h2>
+<h2 id="synopsis-54">Synopsis</h2>
 <p>If source:path is a file or directory then it moves it to a file or directory named dest:path.</p>
 <p>This can be used to rename files or upload single files to other than their existing name. If the source is a directory then it acts exactly like the <a href="https://rclone.org/commands/rclone_move/">move</a> command.</p>
 <p>So</p>
@@ -3421,7 +3488,7 @@ <h2 id="see-also-61">See Also</h2>
 </ul>
 <h1 id="rclone-ncdu">rclone ncdu</h1>
 <p>Explore a remote with a text based user interface.</p>
-<h2 id="synopsis-54">Synopsis</h2>
+<h2 id="synopsis-55">Synopsis</h2>
 <p>This displays a text based user interface allowing the navigation of a remote. It is most useful for answering the question - "What is using all my disk space?".</p>
 <p>To make the user interface it first scans the entire remote given and builds an in memory representation. rclone ncdu can be used during this scanning phase and you will see it building up the directory structure as it goes along.</p>
 <p>You can interact with the user interface using key presses, press '?' to toggle the help on and off. The supported keys are:</p>
@@ -3497,7 +3564,7 @@ <h2 id="see-also-62">See Also</h2>
 </ul>
 <h1 id="rclone-nfsmount">rclone nfsmount</h1>
 <p>Mount the remote as file system on a mountpoint.</p>
-<h2 id="synopsis-55">Synopsis</h2>
+<h2 id="synopsis-56">Synopsis</h2>
 <p>Rclone nfsmount allows Linux, FreeBSD, macOS and Windows to mount any of Rclone's cloud storage systems as a file system with FUSE.</p>
 <p>First set up your remote using <code>rclone config</code>. Check it works with <code>rclone ls</code> etc.</p>
 <p>On Linux and macOS, you can run mount in either foreground or background (aka daemon) mode. Mount runs in foreground mode by default. Use the <code>--daemon</code> flag to force background mode. On Windows you can run mount in foreground only, the flag is ignored.</p>
@@ -3872,7 +3939,7 @@ <h2 id="see-also-63">See Also</h2>
 </ul>
 <h1 id="rclone-obscure">rclone obscure</h1>
 <p>Obscure password for use in the rclone config file.</p>
-<h2 id="synopsis-56">Synopsis</h2>
+<h2 id="synopsis-57">Synopsis</h2>
 <p>In the rclone config file, human-readable passwords are obscured. Obscuring them is done by encrypting them and writing them out in base64. This is <strong>not</strong> a secure way of encrypting these passwords as rclone can decrypt them - it is to prevent "eyedropping" - namely someone seeing a password in the rclone config file by accident.</p>
 <p>Many equally important things (like access tokens) are not obscured in the config file. However it is very hard to shoulder surf a 64 character hex token.</p>
 <p>This command can also accept a password through STDIN instead of an argument by passing a hyphen as an argument. This will use the first line of STDIN as the password not including the trailing newline.</p>
@@ -3889,7 +3956,7 @@ <h2 id="see-also-64">See Also</h2>
 </ul>
 <h1 id="rclone-rc">rclone rc</h1>
 <p>Run a command against a running rclone.</p>
-<h2 id="synopsis-57">Synopsis</h2>
+<h2 id="synopsis-58">Synopsis</h2>
 <p>This runs a command against a running rclone. Use the <code>--url</code> flag to specify an non default URL to connect on. This can be either a ":port" which is taken to mean "http://localhost:port" or a "host:port" which is taken to mean "http://host:port"</p>
 <p>A username and password can be passed in with <code>--user</code> and <code>--pass</code>.</p>
 <p>Note that <code>--rc-addr</code>, <code>--rc-user</code>, <code>--rc-pass</code> will be read also for <code>--url</code>, <code>--user</code>, <code>--pass</code>.</p>
@@ -3931,7 +3998,7 @@ <h2 id="see-also-65">See Also</h2>
 </ul>
 <h1 id="rclone-rcat">rclone rcat</h1>
 <p>Copies standard input to file on remote.</p>
-<h2 id="synopsis-58">Synopsis</h2>
+<h2 id="synopsis-59">Synopsis</h2>
 <p>Reads from standard input (stdin) and copies it to a single remote file.</p>
 <pre><code>echo &quot;hello world&quot; | rclone rcat remote:path/to/file
 ffmpeg - | rclone rcat remote:path/to/file</code></pre>
@@ -3956,7 +4023,7 @@ <h2 id="see-also-66">See Also</h2>
 </ul>
 <h1 id="rclone-rcd">rclone rcd</h1>
 <p>Run rclone listening to remote control commands only.</p>
-<h2 id="synopsis-59">Synopsis</h2>
+<h2 id="synopsis-60">Synopsis</h2>
 <p>This runs rclone so that it only listens to remote control commands.</p>
 <p>This is useful if you are controlling rclone via the rc API.</p>
 <p>If you pass in a path to a directory, rclone will serve that directory for GET requests on the URL passed in. It will also open the URL in the browser when rclone is run.</p>
@@ -4142,7 +4209,7 @@ <h2 id="see-also-67">See Also</h2>
 </ul>
 <h1 id="rclone-rmdirs">rclone rmdirs</h1>
 <p>Remove empty directories under the path.</p>
-<h2 id="synopsis-60">Synopsis</h2>
+<h2 id="synopsis-61">Synopsis</h2>
 <p>This recursively removes any empty directories (including directories that only contain empty directories), that it finds under the path. The root path itself will also be removed if it is empty, unless you supply the <code>--leave-root</code> flag.</p>
 <p>Use command <a href="https://rclone.org/commands/rclone_rmdir/">rmdir</a> to delete just the empty directory given by path, not recurse.</p>
 <p>This is useful for tidying up remotes that rclone has left a lot of empty directories in. For example the <a href="https://rclone.org/commands/rclone_delete/">delete</a> command will delete files but leave the directory structure (unless used with option <code>--rmdirs</code>).</p>
@@ -4164,7 +4231,7 @@ <h2 id="see-also-68">See Also</h2>
 </ul>
 <h1 id="rclone-selfupdate">rclone selfupdate</h1>
 <p>Update the rclone binary.</p>
-<h2 id="synopsis-61">Synopsis</h2>
+<h2 id="synopsis-62">Synopsis</h2>
 <p>This command downloads the latest release of rclone and replaces the currently running binary. The download is verified with a hashsum and cryptographically signed signature; see <a href="https://rclone.org/release_signing/">the release signing docs</a> for details.</p>
 <p>If used without flags (or with implied <code>--stable</code> flag), this command will install the latest stable release. However, some issues may be fixed (or features added) only in the latest beta release. In such cases you should run the command with the <code>--beta</code> flag, i.e. <code>rclone selfupdate --beta</code>. You can check in advance what version would be installed by adding the <code>--check</code> flag, then repeat the command without it when you are satisfied.</p>
 <p>Sometimes the rclone team may recommend you a concrete beta or stable rclone release to troubleshoot your issue or add a bleeding edge feature. The <code>--version VER</code> flag, if given, will update to the concrete version instead of the latest one. If you omit micro version from <code>VER</code> (for example <code>1.53</code>), the latest matching micro version will be used.</p>
@@ -4189,7 +4256,7 @@ <h2 id="see-also-69">See Also</h2>
 </ul>
 <h1 id="rclone-serve">rclone serve</h1>
 <p>Serve a remote over a protocol.</p>
-<h2 id="synopsis-62">Synopsis</h2>
+<h2 id="synopsis-63">Synopsis</h2>
 <p>Serve a remote over a given protocol. Requires the use of a subcommand to specify the protocol, e.g.</p>
 <pre><code>rclone serve http remote:</code></pre>
 <p>Each subcommand has its own options which you can see in their help.</p>
@@ -4212,7 +4279,7 @@ <h2 id="see-also-70">See Also</h2>
 </ul>
 <h1 id="rclone-serve-dlna">rclone serve dlna</h1>
 <p>Serve remote:path over DLNA</p>
-<h2 id="synopsis-63">Synopsis</h2>
+<h2 id="synopsis-64">Synopsis</h2>
 <p>Run a DLNA media server for media stored in an rclone remote. Many devices, such as the Xbox and PlayStation, can automatically discover this server in the LAN and play audio/video from it. VLC is also supported. Service discovery uses UDP multicast packets (SSDP) and will thus only work on LANs.</p>
 <p>Rclone will list all files present in the remote, without filtering based on media formats or file extensions. Additionally, there is no media transcoding support. This means that some players might show files that they are not able to play back correctly.</p>
 <p>Rclone will add external subtitle files (.srt) to videos if they have the same filename as the video file itself (except the extension), either in the same directory as the video, or in a "Subs" subdirectory.</p>
@@ -4435,7 +4502,7 @@ <h2 id="see-also-71">See Also</h2>
 </ul>
 <h1 id="rclone-serve-docker">rclone serve docker</h1>
 <p>Serve any remote on docker's volume plugin API.</p>
-<h2 id="synopsis-64">Synopsis</h2>
+<h2 id="synopsis-65">Synopsis</h2>
 <p>This command implements the Docker volume plugin API allowing docker to use rclone as a data storage mechanism for various cloud providers. rclone provides <a href="/docker">docker volume plugin</a> based on it.</p>
 <p>To create a docker plugin, one must create a Unix or TCP socket that Docker will look for when you use the plugin and then it listens for commands from docker daemon and runs the corresponding code when necessary. Docker plugins can run as a managed plugin under control of the docker daemon or as an independent native service. For testing, you can just run it directly from the command line, for example:</p>
 <pre><code>sudo rclone serve docker --base-dir /tmp/rclone-volumes --socket-addr localhost:8787 -vv</code></pre>
@@ -4679,7 +4746,7 @@ <h2 id="see-also-72">See Also</h2>
 </ul>
 <h1 id="rclone-serve-ftp">rclone serve ftp</h1>
 <p>Serve remote:path over FTP.</p>
-<h2 id="synopsis-65">Synopsis</h2>
+<h2 id="synopsis-66">Synopsis</h2>
 <p>Run a basic FTP server to serve a remote over FTP protocol. This can be viewed with a FTP client or you can make a remote of type FTP to read and write it.</p>
 <h2 id="server-options-2">Server options</h2>
 <p>Use --addr to specify which IP address and port the server should listen on, e.g. --addr 1.2.3.4:8000 or --addr :8080 to listen to all IPs. By default it only listens on localhost. You can use port :0 to let the OS choose an available port.</p>
@@ -4935,7 +5002,7 @@ <h2 id="see-also-73">See Also</h2>
 </ul>
 <h1 id="rclone-serve-http">rclone serve http</h1>
 <p>Serve the remote over HTTP.</p>
-<h2 id="synopsis-66">Synopsis</h2>
+<h2 id="synopsis-67">Synopsis</h2>
 <p>Run a basic web server to serve a remote over HTTP. This can be viewed in a web browser or you can make a remote of type http read from it.</p>
 <p>You can use the filter flags (e.g. <code>--include</code>, <code>--exclude</code>) to control what is served.</p>
 <p>The server will log errors. Use <code>-v</code> to see access logs.</p>
@@ -5337,7 +5404,7 @@ <h2 id="see-also-74">See Also</h2>
 </ul>
 <h1 id="rclone-serve-nfs">rclone serve nfs</h1>
 <p>Serve the remote as an NFS mount</p>
-<h2 id="synopsis-67">Synopsis</h2>
+<h2 id="synopsis-68">Synopsis</h2>
 <p>Create an NFS server that serves the given remote over the network.</p>
 <p>This implements an NFSv3 server to serve any rclone remote via NFS.</p>
 <p>The primary purpose for this command is to enable the <a href="https://rclone.org/commands/rclone_mount/">mount command</a> on recent macOS versions where installing FUSE is very cumbersome.</p>
@@ -5346,7 +5413,7 @@ <h2 id="synopsis-67">Synopsis</h2>
 <p>Modifying files through the NFS protocol requires VFS caching. Usually you will need to specify <code>--vfs-cache-mode</code> in order to be able to write to the mountpoint (<code>full</code> is recommended). If you don't specify VFS cache mode, the mount will be read-only.</p>
 <p><code>--nfs-cache-type</code> controls the type of the NFS handle cache. By default this is <code>memory</code> where new handles will be randomly allocated when needed. These are stored in memory. If the server is restarted the handle cache will be lost and connected NFS clients will get stale handle errors.</p>
 <p><code>--nfs-cache-type disk</code> uses an on disk NFS handle cache. Rclone hashes the path of the object and stores it in a file named after the hash. These hashes are stored on disk the directory controlled by <code>--cache-dir</code> or the exact directory may be specified with <code>--nfs-cache-dir</code>. Using this means that the NFS server can be restarted at will without affecting the connected clients.</p>
-<p><code>--nfs-cache-type symlink</code> is similar to <code>--nfs-cache-type disk</code> in that it uses an on disk cache, but the cache entries are held as symlinks. Rclone will use the handle of the underlying file as the NFS handle which improves performance. This sort of cache can't be backed up and restored as the underlying handles will change. This is Linux only. It requres running rclone as root or with <code>CAP_DAC_READ_SEARCH</code>. You can run rclone with this extra permission by doing this to the rclone binary <code>sudo setcap cap_dac_read_search+ep /path/to/rclone</code>.</p>
+<p><code>--nfs-cache-type symlink</code> is similar to <code>--nfs-cache-type disk</code> in that it uses an on disk cache, but the cache entries are held as symlinks. Rclone will use the handle of the underlying file as the NFS handle which improves performance. This sort of cache can't be backed up and restored as the underlying handles will change. This is Linux only. It requires running rclone as root or with <code>CAP_DAC_READ_SEARCH</code>. You can run rclone with this extra permission by doing this to the rclone binary <code>sudo setcap cap_dac_read_search+ep /path/to/rclone</code>.</p>
 <p><code>--nfs-cache-handle-limit</code> controls the maximum number of cached NFS handles stored by the caching handler. This should not be set too low or you may experience errors when trying to access files. The default is <code>1000000</code>, but consider lowering this limit if the server's system resource usage causes problems. This is only used by the <code>memory</code> type cache.</p>
 <p>To serve NFS over the network use following command:</p>
 <pre><code>rclone serve nfs remote: --addr 0.0.0.0:$PORT --vfs-cache-mode=full</code></pre>
@@ -5568,7 +5635,7 @@ <h2 id="see-also-75">See Also</h2>
 </ul>
 <h1 id="rclone-serve-restic">rclone serve restic</h1>
 <p>Serve the remote for restic's REST API.</p>
-<h2 id="synopsis-68">Synopsis</h2>
+<h2 id="synopsis-69">Synopsis</h2>
 <p>Run a basic web server to serve a remote over restic's REST backend API over HTTP. This allows restic to use rclone as a data storage mechanism for cloud providers that restic does not support directly.</p>
 <p><a href="https://restic.net/">Restic</a> is a command-line program for doing backups.</p>
 <p>The server will log errors. Use -v to see access logs.</p>
@@ -5667,7 +5734,7 @@ <h2 id="see-also-76">See Also</h2>
 </ul>
 <h1 id="rclone-serve-s3">rclone serve s3</h1>
 <p>Serve remote:path over s3.</p>
-<h2 id="synopsis-69">Synopsis</h2>
+<h2 id="synopsis-70">Synopsis</h2>
 <p><code>serve s3</code> implements a basic s3 server that serves a remote via s3. This can be viewed with an s3 client, or you can make an <a href="https://rclone.org/s3/">s3 type remote</a> to read and write to it with rclone.</p>
 <p><code>serve s3</code> is considered <strong>Experimental</strong> so use with care.</p>
 <p>S3 server supports Signature Version 4 authentication. Just use <code>--auth-key accessKey,secretKey</code> and set the <code>Authorization</code> header correctly in the request. (See the <a href="https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html">AWS docs</a>).</p>
@@ -5693,7 +5760,7 @@ <h2 id="quickstart-1">Quickstart</h2>
 access_key_id = ACCESS_KEY_ID
 secret_access_key = SECRET_ACCESS_KEY
 use_multipart_uploads = false</code></pre>
-<p>Note that setting <code>disable_multipart_uploads = true</code> is to work around <a href="#bugs">a bug</a> which will be fixed in due course.</p>
+<p>Note that setting <code>use_multipart_uploads = false</code> is to work around <a href="#bugs">a bug</a> which will be fixed in due course.</p>
 <h2 id="bugs">Bugs</h2>
 <p>When uploading multipart files <code>serve s3</code> holds all the parts in memory (see <a href="https://github.com/rclone/rclone/issues/7453">#7453</a>). This is a limitaton of the library rclone uses for serving S3 and will hopefully be fixed at some point.</p>
 <p>Multipart server side copies do not work (see <a href="https://github.com/rclone/rclone/issues/7454">#7454</a>). These take a very long time and eventually fail. The default threshold for multipart server side copies is 5G which is the maximum it can be, so files above this side will fail to be server side copied.</p>
@@ -5988,7 +6055,7 @@ <h2 id="see-also-77">See Also</h2>
 </ul>
 <h1 id="rclone-serve-sftp">rclone serve sftp</h1>
 <p>Serve the remote over SFTP.</p>
-<h2 id="synopsis-70">Synopsis</h2>
+<h2 id="synopsis-71">Synopsis</h2>
 <p>Run an SFTP server to serve a remote over SFTP. This can be used with an SFTP client or you can make a remote of type <a href="/sftp">sftp</a> to use with it.</p>
 <p>You can use the <a href="/filtering">filter</a> flags (e.g. <code>--include</code>, <code>--exclude</code>) to control what is served.</p>
 <p>The server will respond to a small number of shell commands, mainly md5sum, sha1sum and df, which enable it to provide support for checksums and the about feature when accessed from an sftp remote.</p>
@@ -6255,7 +6322,7 @@ <h2 id="see-also-78">See Also</h2>
 </ul>
 <h1 id="rclone-serve-webdav">rclone serve webdav</h1>
 <p>Serve remote:path over WebDAV.</p>
-<h2 id="synopsis-71">Synopsis</h2>
+<h2 id="synopsis-72">Synopsis</h2>
 <p>Run a basic WebDAV server to serve a remote over HTTP via the WebDAV protocol. This can be viewed with a WebDAV client, through a web browser, or you can make a remote of type WebDAV to read and write it.</p>
 <h2 id="webdav-options">WebDAV options</h2>
 <h3 id="etag-hash">--etag-hash</h3>
@@ -6671,7 +6738,7 @@ <h2 id="see-also-79">See Also</h2>
 </ul>
 <h1 id="rclone-settier">rclone settier</h1>
 <p>Changes storage class/tier of objects in remote.</p>
-<h2 id="synopsis-72">Synopsis</h2>
+<h2 id="synopsis-73">Synopsis</h2>
 <p>Changes storage tier or class at remote if supported. Few cloud storage services provides different storage classes on objects, for example AWS S3 and Glacier, Azure Blob storage - Hot, Cool and Archive, Google Cloud Storage, Regional Storage, Nearline, Coldline etc.</p>
 <p>Note that, certain tier changes make objects not available to access immediately. For example tiering to archive in azure blob storage makes objects in frozen state, user can restore by setting tier to Hot/Cool, similarly S3 to Glacier makes object inaccessible.true</p>
 <p>You can use it to tier single object</p>
@@ -6690,7 +6757,7 @@ <h2 id="see-also-80">See Also</h2>
 </ul>
 <h1 id="rclone-test">rclone test</h1>
 <p>Run a test command</p>
-<h2 id="synopsis-73">Synopsis</h2>
+<h2 id="synopsis-74">Synopsis</h2>
 <p>Rclone test is used to run test commands.</p>
 <p>Select which test command you want with the subcommand, eg</p>
 <pre><code>rclone test memory remote:</code></pre>
@@ -6722,7 +6789,7 @@ <h2 id="see-also-82">See Also</h2>
 </ul>
 <h1 id="rclone-test-histogram">rclone test histogram</h1>
 <p>Makes a histogram of file name characters.</p>
-<h2 id="synopsis-74">Synopsis</h2>
+<h2 id="synopsis-75">Synopsis</h2>
 <p>This command outputs JSON which shows the histogram of characters used in filenames in the remote:path specified.</p>
 <p>The data doesn't contain any identifying information but is useful for the rclone developers when developing filename compression.</p>
 <pre><code>rclone test histogram [remote:path] [flags]</code></pre>
@@ -6735,7 +6802,7 @@ <h2 id="see-also-83">See Also</h2>
 </ul>
 <h1 id="rclone-test-info">rclone test info</h1>
 <p>Discovers file name or other limitations for paths.</p>
-<h2 id="synopsis-75">Synopsis</h2>
+<h2 id="synopsis-76">Synopsis</h2>
 <p>Discovers what filenames and upload methods are possible to write to the paths passed in and how long they can be. It can take some time. It will write test files into the remote:path passed in. It outputs a bit of go code for each one.</p>
 <p><strong>NB</strong> this can create undeletable files and other hazards - use with care</p>
 <pre><code>rclone test info [remote:path]+ [flags]</code></pre>
@@ -6807,7 +6874,7 @@ <h2 id="see-also-87">See Also</h2>
 </ul>
 <h1 id="rclone-touch">rclone touch</h1>
 <p>Create new file or change file modification time.</p>
-<h2 id="synopsis-76">Synopsis</h2>
+<h2 id="synopsis-77">Synopsis</h2>
 <p>Set the modification time on file(s) as specified by remote:path to have the current time.</p>
 <p>If remote:path does not exist then a zero sized file will be created, unless <code>--no-create</code> or <code>--recursive</code> is provided.</p>
 <p>If <code>--recursive</code> is used then recursively sets the modification time on all existing files that is found under the path. Filters are supported, and you can test with the <code>--dry-run</code> or the <code>--interactive</code>/<code>-i</code> flag.</p>
@@ -6865,7 +6932,7 @@ <h2 id="see-also-88">See Also</h2>
 </ul>
 <h1 id="rclone-tree">rclone tree</h1>
 <p>List the contents of the remote in a tree like fashion.</p>
-<h2 id="synopsis-77">Synopsis</h2>
+<h2 id="synopsis-78">Synopsis</h2>
 <p>Lists the contents of a remote in a similar way to the unix tree command.</p>
 <p>For example</p>
 <pre><code>$ rclone tree remote:path
@@ -7168,6 +7235,7 @@ <h3 id="standard-system-metadata">Standard system metadata</h3>
 <h2 id="options-90">Options</h2>
 <p>Rclone has a number of options to control its behaviour.</p>
 <p>Options that take parameters can have the values passed in two ways, <code>--option=value</code> or <code>--option value</code>. However boolean (true/false) options behave slightly differently to the other options in that <code>--boolean</code> sets the option to <code>true</code> and the absence of the flag sets it to <code>false</code>. It is also possible to specify <code>--boolean=false</code> or <code>--boolean=true</code>. Note that <code>--boolean false</code> is not valid - this is parsed as <code>--boolean</code> and the <code>false</code> is parsed as an extra command line argument for rclone.</p>
+<p>Options documented to take a <code>stringArray</code> parameter accept multiple values. To pass more than one value, repeat the option; for example: <code>--include value1 --include value2</code>.</p>
 <h3 id="time-option">Time or duration options</h3>
 <p>TIME or DURATION options can be specified as a duration string or a time string.</p>
 <p>A duration string is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as "300ms", "-1.5h" or "2h45m". Default units are seconds or the following abbreviations are valid:</p>
@@ -7530,55 +7598,55 @@ <h3 id="metadata-mapper">--metadata-mapper SpaceSepList</h3>
 <li><code>ID</code> is the source <code>ID</code> of the object if known.</li>
 <li><code>Metadata</code> is the backend specific metadata as described in the backend docs.</li>
 </ul>
-<div class="sourceCode" id="cb618"><pre class="sourceCode json"><code class="sourceCode json"><span id="cb618-1"><a href="#cb618-1" aria-hidden="true"></a><span class="fu">{</span></span>
-<span id="cb618-2"><a href="#cb618-2" aria-hidden="true"></a>    <span class="dt">&quot;SrcFs&quot;</span><span class="fu">:</span> <span class="st">&quot;gdrive:&quot;</span><span class="fu">,</span></span>
-<span id="cb618-3"><a href="#cb618-3" aria-hidden="true"></a>    <span class="dt">&quot;SrcFsType&quot;</span><span class="fu">:</span> <span class="st">&quot;drive&quot;</span><span class="fu">,</span></span>
-<span id="cb618-4"><a href="#cb618-4" aria-hidden="true"></a>    <span class="dt">&quot;DstFs&quot;</span><span class="fu">:</span> <span class="st">&quot;newdrive:user&quot;</span><span class="fu">,</span></span>
-<span id="cb618-5"><a href="#cb618-5" aria-hidden="true"></a>    <span class="dt">&quot;DstFsType&quot;</span><span class="fu">:</span> <span class="st">&quot;onedrive&quot;</span><span class="fu">,</span></span>
-<span id="cb618-6"><a href="#cb618-6" aria-hidden="true"></a>    <span class="dt">&quot;Remote&quot;</span><span class="fu">:</span> <span class="st">&quot;test.txt&quot;</span><span class="fu">,</span></span>
-<span id="cb618-7"><a href="#cb618-7" aria-hidden="true"></a>    <span class="dt">&quot;Size&quot;</span><span class="fu">:</span> <span class="dv">6</span><span class="fu">,</span></span>
-<span id="cb618-8"><a href="#cb618-8" aria-hidden="true"></a>    <span class="dt">&quot;MimeType&quot;</span><span class="fu">:</span> <span class="st">&quot;text/plain; charset=utf-8&quot;</span><span class="fu">,</span></span>
-<span id="cb618-9"><a href="#cb618-9" aria-hidden="true"></a>    <span class="dt">&quot;ModTime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T17:53:10.286745272+01:00&quot;</span><span class="fu">,</span></span>
-<span id="cb618-10"><a href="#cb618-10" aria-hidden="true"></a>    <span class="dt">&quot;IsDir&quot;</span><span class="fu">:</span> <span class="kw">false</span><span class="fu">,</span></span>
-<span id="cb618-11"><a href="#cb618-11" aria-hidden="true"></a>    <span class="dt">&quot;ID&quot;</span><span class="fu">:</span> <span class="st">&quot;xyz&quot;</span><span class="fu">,</span></span>
-<span id="cb618-12"><a href="#cb618-12" aria-hidden="true"></a>    <span class="dt">&quot;Metadata&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb618-13"><a href="#cb618-13" aria-hidden="true"></a>        <span class="dt">&quot;btime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T16:53:11Z&quot;</span><span class="fu">,</span></span>
-<span id="cb618-14"><a href="#cb618-14" aria-hidden="true"></a>        <span class="dt">&quot;content-type&quot;</span><span class="fu">:</span> <span class="st">&quot;text/plain; charset=utf-8&quot;</span><span class="fu">,</span></span>
-<span id="cb618-15"><a href="#cb618-15" aria-hidden="true"></a>        <span class="dt">&quot;mtime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T17:53:10.286745272+01:00&quot;</span><span class="fu">,</span></span>
-<span id="cb618-16"><a href="#cb618-16" aria-hidden="true"></a>        <span class="dt">&quot;owner&quot;</span><span class="fu">:</span> <span class="st">&quot;user1@domain1.com&quot;</span><span class="fu">,</span></span>
-<span id="cb618-17"><a href="#cb618-17" aria-hidden="true"></a>        <span class="dt">&quot;permissions&quot;</span><span class="fu">:</span> <span class="st">&quot;...&quot;</span><span class="fu">,</span></span>
-<span id="cb618-18"><a href="#cb618-18" aria-hidden="true"></a>        <span class="dt">&quot;description&quot;</span><span class="fu">:</span> <span class="st">&quot;my nice file&quot;</span><span class="fu">,</span></span>
-<span id="cb618-19"><a href="#cb618-19" aria-hidden="true"></a>        <span class="dt">&quot;starred&quot;</span><span class="fu">:</span> <span class="st">&quot;false&quot;</span></span>
-<span id="cb618-20"><a href="#cb618-20" aria-hidden="true"></a>    <span class="fu">}</span></span>
-<span id="cb618-21"><a href="#cb618-21" aria-hidden="true"></a><span class="fu">}</span></span></code></pre></div>
-<p>The program should then modify the input as desired and send it to STDOUT. The returned <code>Metadata</code> field will be used in its entirety for the destination object. Any other fields will be ignored. Note in this example we translate user names and permissions and add something to the description:</p>
 <div class="sourceCode" id="cb619"><pre class="sourceCode json"><code class="sourceCode json"><span id="cb619-1"><a href="#cb619-1" aria-hidden="true"></a><span class="fu">{</span></span>
-<span id="cb619-2"><a href="#cb619-2" aria-hidden="true"></a>    <span class="dt">&quot;Metadata&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb619-3"><a href="#cb619-3" aria-hidden="true"></a>        <span class="dt">&quot;btime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T16:53:11Z&quot;</span><span class="fu">,</span></span>
-<span id="cb619-4"><a href="#cb619-4" aria-hidden="true"></a>        <span class="dt">&quot;content-type&quot;</span><span class="fu">:</span> <span class="st">&quot;text/plain; charset=utf-8&quot;</span><span class="fu">,</span></span>
-<span id="cb619-5"><a href="#cb619-5" aria-hidden="true"></a>        <span class="dt">&quot;mtime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T17:53:10.286745272+01:00&quot;</span><span class="fu">,</span></span>
-<span id="cb619-6"><a href="#cb619-6" aria-hidden="true"></a>        <span class="dt">&quot;owner&quot;</span><span class="fu">:</span> <span class="st">&quot;user1@domain2.com&quot;</span><span class="fu">,</span></span>
-<span id="cb619-7"><a href="#cb619-7" aria-hidden="true"></a>        <span class="dt">&quot;permissions&quot;</span><span class="fu">:</span> <span class="st">&quot;...&quot;</span><span class="fu">,</span></span>
-<span id="cb619-8"><a href="#cb619-8" aria-hidden="true"></a>        <span class="dt">&quot;description&quot;</span><span class="fu">:</span> <span class="st">&quot;my nice file [migrated from domain1]&quot;</span><span class="fu">,</span></span>
-<span id="cb619-9"><a href="#cb619-9" aria-hidden="true"></a>        <span class="dt">&quot;starred&quot;</span><span class="fu">:</span> <span class="st">&quot;false&quot;</span></span>
-<span id="cb619-10"><a href="#cb619-10" aria-hidden="true"></a>    <span class="fu">}</span></span>
-<span id="cb619-11"><a href="#cb619-11" aria-hidden="true"></a><span class="fu">}</span></span></code></pre></div>
+<span id="cb619-2"><a href="#cb619-2" aria-hidden="true"></a>    <span class="dt">&quot;SrcFs&quot;</span><span class="fu">:</span> <span class="st">&quot;gdrive:&quot;</span><span class="fu">,</span></span>
+<span id="cb619-3"><a href="#cb619-3" aria-hidden="true"></a>    <span class="dt">&quot;SrcFsType&quot;</span><span class="fu">:</span> <span class="st">&quot;drive&quot;</span><span class="fu">,</span></span>
+<span id="cb619-4"><a href="#cb619-4" aria-hidden="true"></a>    <span class="dt">&quot;DstFs&quot;</span><span class="fu">:</span> <span class="st">&quot;newdrive:user&quot;</span><span class="fu">,</span></span>
+<span id="cb619-5"><a href="#cb619-5" aria-hidden="true"></a>    <span class="dt">&quot;DstFsType&quot;</span><span class="fu">:</span> <span class="st">&quot;onedrive&quot;</span><span class="fu">,</span></span>
+<span id="cb619-6"><a href="#cb619-6" aria-hidden="true"></a>    <span class="dt">&quot;Remote&quot;</span><span class="fu">:</span> <span class="st">&quot;test.txt&quot;</span><span class="fu">,</span></span>
+<span id="cb619-7"><a href="#cb619-7" aria-hidden="true"></a>    <span class="dt">&quot;Size&quot;</span><span class="fu">:</span> <span class="dv">6</span><span class="fu">,</span></span>
+<span id="cb619-8"><a href="#cb619-8" aria-hidden="true"></a>    <span class="dt">&quot;MimeType&quot;</span><span class="fu">:</span> <span class="st">&quot;text/plain; charset=utf-8&quot;</span><span class="fu">,</span></span>
+<span id="cb619-9"><a href="#cb619-9" aria-hidden="true"></a>    <span class="dt">&quot;ModTime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T17:53:10.286745272+01:00&quot;</span><span class="fu">,</span></span>
+<span id="cb619-10"><a href="#cb619-10" aria-hidden="true"></a>    <span class="dt">&quot;IsDir&quot;</span><span class="fu">:</span> <span class="kw">false</span><span class="fu">,</span></span>
+<span id="cb619-11"><a href="#cb619-11" aria-hidden="true"></a>    <span class="dt">&quot;ID&quot;</span><span class="fu">:</span> <span class="st">&quot;xyz&quot;</span><span class="fu">,</span></span>
+<span id="cb619-12"><a href="#cb619-12" aria-hidden="true"></a>    <span class="dt">&quot;Metadata&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb619-13"><a href="#cb619-13" aria-hidden="true"></a>        <span class="dt">&quot;btime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T16:53:11Z&quot;</span><span class="fu">,</span></span>
+<span id="cb619-14"><a href="#cb619-14" aria-hidden="true"></a>        <span class="dt">&quot;content-type&quot;</span><span class="fu">:</span> <span class="st">&quot;text/plain; charset=utf-8&quot;</span><span class="fu">,</span></span>
+<span id="cb619-15"><a href="#cb619-15" aria-hidden="true"></a>        <span class="dt">&quot;mtime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T17:53:10.286745272+01:00&quot;</span><span class="fu">,</span></span>
+<span id="cb619-16"><a href="#cb619-16" aria-hidden="true"></a>        <span class="dt">&quot;owner&quot;</span><span class="fu">:</span> <span class="st">&quot;user1@domain1.com&quot;</span><span class="fu">,</span></span>
+<span id="cb619-17"><a href="#cb619-17" aria-hidden="true"></a>        <span class="dt">&quot;permissions&quot;</span><span class="fu">:</span> <span class="st">&quot;...&quot;</span><span class="fu">,</span></span>
+<span id="cb619-18"><a href="#cb619-18" aria-hidden="true"></a>        <span class="dt">&quot;description&quot;</span><span class="fu">:</span> <span class="st">&quot;my nice file&quot;</span><span class="fu">,</span></span>
+<span id="cb619-19"><a href="#cb619-19" aria-hidden="true"></a>        <span class="dt">&quot;starred&quot;</span><span class="fu">:</span> <span class="st">&quot;false&quot;</span></span>
+<span id="cb619-20"><a href="#cb619-20" aria-hidden="true"></a>    <span class="fu">}</span></span>
+<span id="cb619-21"><a href="#cb619-21" aria-hidden="true"></a><span class="fu">}</span></span></code></pre></div>
+<p>The program should then modify the input as desired and send it to STDOUT. The returned <code>Metadata</code> field will be used in its entirety for the destination object. Any other fields will be ignored. Note in this example we translate user names and permissions and add something to the description:</p>
+<div class="sourceCode" id="cb620"><pre class="sourceCode json"><code class="sourceCode json"><span id="cb620-1"><a href="#cb620-1" aria-hidden="true"></a><span class="fu">{</span></span>
+<span id="cb620-2"><a href="#cb620-2" aria-hidden="true"></a>    <span class="dt">&quot;Metadata&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb620-3"><a href="#cb620-3" aria-hidden="true"></a>        <span class="dt">&quot;btime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T16:53:11Z&quot;</span><span class="fu">,</span></span>
+<span id="cb620-4"><a href="#cb620-4" aria-hidden="true"></a>        <span class="dt">&quot;content-type&quot;</span><span class="fu">:</span> <span class="st">&quot;text/plain; charset=utf-8&quot;</span><span class="fu">,</span></span>
+<span id="cb620-5"><a href="#cb620-5" aria-hidden="true"></a>        <span class="dt">&quot;mtime&quot;</span><span class="fu">:</span> <span class="st">&quot;2022-10-11T17:53:10.286745272+01:00&quot;</span><span class="fu">,</span></span>
+<span id="cb620-6"><a href="#cb620-6" aria-hidden="true"></a>        <span class="dt">&quot;owner&quot;</span><span class="fu">:</span> <span class="st">&quot;user1@domain2.com&quot;</span><span class="fu">,</span></span>
+<span id="cb620-7"><a href="#cb620-7" aria-hidden="true"></a>        <span class="dt">&quot;permissions&quot;</span><span class="fu">:</span> <span class="st">&quot;...&quot;</span><span class="fu">,</span></span>
+<span id="cb620-8"><a href="#cb620-8" aria-hidden="true"></a>        <span class="dt">&quot;description&quot;</span><span class="fu">:</span> <span class="st">&quot;my nice file [migrated from domain1]&quot;</span><span class="fu">,</span></span>
+<span id="cb620-9"><a href="#cb620-9" aria-hidden="true"></a>        <span class="dt">&quot;starred&quot;</span><span class="fu">:</span> <span class="st">&quot;false&quot;</span></span>
+<span id="cb620-10"><a href="#cb620-10" aria-hidden="true"></a>    <span class="fu">}</span></span>
+<span id="cb620-11"><a href="#cb620-11" aria-hidden="true"></a><span class="fu">}</span></span></code></pre></div>
 <p>Metadata can be removed here too.</p>
 <p>An example python program might look something like this to implement the above transformations.</p>
-<div class="sourceCode" id="cb620"><pre class="sourceCode python"><code class="sourceCode python"><span id="cb620-1"><a href="#cb620-1" aria-hidden="true"></a><span class="im">import</span> sys, json</span>
-<span id="cb620-2"><a href="#cb620-2" aria-hidden="true"></a></span>
-<span id="cb620-3"><a href="#cb620-3" aria-hidden="true"></a>i <span class="op">=</span> json.load(sys.stdin)</span>
-<span id="cb620-4"><a href="#cb620-4" aria-hidden="true"></a>metadata <span class="op">=</span> i[<span class="st">&quot;Metadata&quot;</span>]</span>
-<span id="cb620-5"><a href="#cb620-5" aria-hidden="true"></a><span class="co"># Add tag to description</span></span>
-<span id="cb620-6"><a href="#cb620-6" aria-hidden="true"></a><span class="cf">if</span> <span class="st">&quot;description&quot;</span> <span class="kw">in</span> metadata:</span>
-<span id="cb620-7"><a href="#cb620-7" aria-hidden="true"></a>    metadata[<span class="st">&quot;description&quot;</span>] <span class="op">+=</span> <span class="st">&quot; [migrated from domain1]&quot;</span></span>
-<span id="cb620-8"><a href="#cb620-8" aria-hidden="true"></a><span class="cf">else</span>:</span>
-<span id="cb620-9"><a href="#cb620-9" aria-hidden="true"></a>    metadata[<span class="st">&quot;description&quot;</span>] <span class="op">=</span> <span class="st">&quot;[migrated from domain1]&quot;</span></span>
-<span id="cb620-10"><a href="#cb620-10" aria-hidden="true"></a><span class="co"># Modify owner</span></span>
-<span id="cb620-11"><a href="#cb620-11" aria-hidden="true"></a><span class="cf">if</span> <span class="st">&quot;owner&quot;</span> <span class="kw">in</span> metadata:</span>
-<span id="cb620-12"><a href="#cb620-12" aria-hidden="true"></a>    metadata[<span class="st">&quot;owner&quot;</span>] <span class="op">=</span> metadata[<span class="st">&quot;owner&quot;</span>].replace(<span class="st">&quot;domain1.com&quot;</span>, <span class="st">&quot;domain2.com&quot;</span>)</span>
-<span id="cb620-13"><a href="#cb620-13" aria-hidden="true"></a>o <span class="op">=</span> { <span class="st">&quot;Metadata&quot;</span>: metadata }</span>
-<span id="cb620-14"><a href="#cb620-14" aria-hidden="true"></a>json.dump(o, sys.stdout, indent<span class="op">=</span><span class="st">&quot;</span><span class="ch">\t</span><span class="st">&quot;</span>)</span></code></pre></div>
+<div class="sourceCode" id="cb621"><pre class="sourceCode python"><code class="sourceCode python"><span id="cb621-1"><a href="#cb621-1" aria-hidden="true"></a><span class="im">import</span> sys, json</span>
+<span id="cb621-2"><a href="#cb621-2" aria-hidden="true"></a></span>
+<span id="cb621-3"><a href="#cb621-3" aria-hidden="true"></a>i <span class="op">=</span> json.load(sys.stdin)</span>
+<span id="cb621-4"><a href="#cb621-4" aria-hidden="true"></a>metadata <span class="op">=</span> i[<span class="st">&quot;Metadata&quot;</span>]</span>
+<span id="cb621-5"><a href="#cb621-5" aria-hidden="true"></a><span class="co"># Add tag to description</span></span>
+<span id="cb621-6"><a href="#cb621-6" aria-hidden="true"></a><span class="cf">if</span> <span class="st">&quot;description&quot;</span> <span class="kw">in</span> metadata:</span>
+<span id="cb621-7"><a href="#cb621-7" aria-hidden="true"></a>    metadata[<span class="st">&quot;description&quot;</span>] <span class="op">+=</span> <span class="st">&quot; [migrated from domain1]&quot;</span></span>
+<span id="cb621-8"><a href="#cb621-8" aria-hidden="true"></a><span class="cf">else</span>:</span>
+<span id="cb621-9"><a href="#cb621-9" aria-hidden="true"></a>    metadata[<span class="st">&quot;description&quot;</span>] <span class="op">=</span> <span class="st">&quot;[migrated from domain1]&quot;</span></span>
+<span id="cb621-10"><a href="#cb621-10" aria-hidden="true"></a><span class="co"># Modify owner</span></span>
+<span id="cb621-11"><a href="#cb621-11" aria-hidden="true"></a><span class="cf">if</span> <span class="st">&quot;owner&quot;</span> <span class="kw">in</span> metadata:</span>
+<span id="cb621-12"><a href="#cb621-12" aria-hidden="true"></a>    metadata[<span class="st">&quot;owner&quot;</span>] <span class="op">=</span> metadata[<span class="st">&quot;owner&quot;</span>].replace(<span class="st">&quot;domain1.com&quot;</span>, <span class="st">&quot;domain2.com&quot;</span>)</span>
+<span id="cb621-13"><a href="#cb621-13" aria-hidden="true"></a>o <span class="op">=</span> { <span class="st">&quot;Metadata&quot;</span>: metadata }</span>
+<span id="cb621-14"><a href="#cb621-14" aria-hidden="true"></a>json.dump(o, sys.stdout, indent<span class="op">=</span><span class="st">&quot;</span><span class="ch">\t</span><span class="st">&quot;</span>)</span></code></pre></div>
 <p>You can find this example (slightly expanded) in the rclone source code at <a href="https://github.com/rclone/rclone/blob/master/bin/test_metadata_mapper.py">bin/test_metadata_mapper.py</a>.</p>
 <p>If you want to see the input to the metadata mapper and the output returned from it in the log you can use <code>-vv --dump mapper</code>.</p>
 <p>See the <a href="#metadata">metadata section</a> for more info.</p>
@@ -8051,7 +8119,7 @@ <h3 id="options-91">Options</h3>
 <p>Verbosity is slightly different, the environment variable equivalent of <code>--verbose</code> or <code>-v</code> is <code>RCLONE_VERBOSE=1</code>, or for <code>-vv</code>, <code>RCLONE_VERBOSE=2</code>.</p>
 <p>The same parser is used for the options and the environment variables so they take exactly the same form.</p>
 <p>The options set by environment variables can be seen with the <code>-vv</code> flag, e.g. <code>rclone version -vv</code>.</p>
-<p>Options that can appear multiple times (type <code>stringArray</code>) are treated slighly differently as environment variables can only be defined once. In order to allow a simple mechanism for adding one or many items, the input is treated as a <a href="https://godoc.org/encoding/csv">CSV encoded</a> string. For example</p>
+<p>Options that can appear multiple times (type <code>stringArray</code>) are treated slightly differently as environment variables can only be defined once. In order to allow a simple mechanism for adding one or many items, the input is treated as a <a href="https://godoc.org/encoding/csv">CSV encoded</a> string. For example</p>
 <table>
 <colgroup>
 <col style="width: 52%" />
@@ -10160,7 +10228,7 @@ <h3 id="vfs-queue">vfs/queue: Queue info for a VFS.</h3>
         },
    ],
 }</code></pre>
-<p>The <code>expiry</code> time is the time until the file is elegible for being uploaded in floating point seconds. This may go negative. As rclone only transfers <code>--transfers</code> files at once, only the lowest <code>--transfers</code> expiry times will have <code>uploading</code> as <code>true</code>. So there may be files with negative expiry times for which <code>uploading</code> is <code>false</code>.</p>
+<p>The <code>expiry</code> time is the time until the file is eligible for being uploaded in floating point seconds. This may go negative. As rclone only transfers <code>--transfers</code> files at once, only the lowest <code>--transfers</code> expiry times will have <code>uploading</code> as <code>true</code>. So there may be files with negative expiry times for which <code>uploading</code> is <code>false</code>.</p>
 <p>This command takes an "fs" parameter. If this parameter is not supplied and if there is only one VFS in use then that VFS will be used. If there is more than one VFS in use then the "fs" parameter must be supplied.</p>
 <h3 id="vfs-queue-set-expiry">vfs/queue-set-expiry: Set the expiry time for an item queued for upload.</h3>
 <p>Use this to adjust the <code>expiry</code> time for an item in the upload queue. You will need to read the <code>id</code> of the item using <code>vfs/queue</code> before using this call.</p>
@@ -12221,7 +12289,7 @@ <h2 id="networking">Networking</h2>
       --tpslimit float                     Limit HTTP transactions per second to this
       --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
       --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default &quot;rclone/v1.69.0&quot;)</code></pre>
+      --user-agent string                  Set the user-agent to a specified string (default &quot;rclone/v1.69.1&quot;)</code></pre>
 <h2 id="performance">Performance</h2>
 <p>Flags helpful for increasing performance.</p>
 <pre><code>      --buffer-size SizeSuffix   In memory buffer size when reading files for each --transfer (default 16Mi)
@@ -13319,7 +13387,7 @@ <h2 id="running-plugin-under-systemd">Running Plugin under Systemd</h2>
 systemctl restart docker</code></pre>
 <p>Or run the service directly: - run <code>systemctl daemon-reload</code> to let systemd pick up new config - run <code>systemctl enable docker-volume-rclone.service</code> to make the new service start automatically when you power on your machine. - run <code>systemctl start docker-volume-rclone.service</code> to start the service now. - run <code>systemctl restart docker</code> to restart docker daemon and let it detect the new plugin socket. Note that this step is not needed in managed mode where docker knows about plugin state changes.</p>
 <p>The two methods are equivalent from the user perspective, but I personally prefer socket activation.</p>
-<h2 id="troubleshooting">Troubleshooting</h2>
+<h2 id="troubleshooting-1">Troubleshooting</h2>
 <p>You can <a href="https://docs.docker.com/engine/extend/#debugging-plugins">see managed plugin settings</a> with</p>
 <pre><code>docker plugin list
 docker plugin inspect rclone</code></pre>
@@ -13516,7 +13584,7 @@ <h3 id="max-delete">--max-delete</h3>
 <p>As a safety check, if greater than the <code>--max-delete</code> percent of files were deleted on either the Path1 or Path2 filesystem, then bisync will abort with a warning message, without making any changes. The default <code>--max-delete</code> is <code>50%</code>. One way to trigger this limit is to rename a directory that contains more than half of your files. This will appear to bisync as a bunch of deleted files and a bunch of new files. This safety check is intended to block bisync from deleting all of the files on both filesystems due to a temporary network access issue, or if the user had inadvertently deleted the files on one side or the other. To force the sync, either set a different delete percentage limit, e.g. <code>--max-delete 75</code> (allows up to 75% deletion), or use <code>--force</code> to bypass the check.</p>
 <p>Also see the <a href="#all-files-changed">all files changed</a> check.</p>
 <h3 id="filters-file">--filters-file</h3>
-<p>By using rclone filter features you can exclude file types or directory sub-trees from the sync. See the <a href="#filtering">bisync filters</a> section and generic <a href="https://rclone.org/filtering/#filter-from-read-filtering-patterns-from-a-file">--filter-from</a> documentation. An <a href="#example-filters-file">example filters file</a> contains filters for non-allowed files for synching with Dropbox.</p>
+<p>By using rclone filter features you can exclude file types or directory sub-trees from the sync. See the <a href="#filtering">bisync filters</a> section and generic <a href="https://rclone.org/filtering/#filter-from-read-filtering-patterns-from-a-file">--filter-from</a> documentation. An <a href="#example-filters-file">example filters file</a> contains filters for non-allowed files for syncing with Dropbox.</p>
 <p>If you make changes to your filters file then bisync requires a run with <code>--resync</code>. This is a safety feature, which prevents existing files on the Path1 and/or Path2 side from seeming to disappear from view (since they are excluded in the new listings), which would fool bisync into seeing them as deleted (as compared to the prior run listings), and then bisync would proceed to delete them for real.</p>
 <p>To block this from happening, bisync calculates an MD5 hash of the filters file and stores the hash in a <code>.md5</code> file in the same place as your filters file. On the next run with <code>--filters-file</code> set, bisync re-calculates the MD5 hash of the current filters file and compares it to the hash stored in the <code>.md5</code> file. If they don't match, the run aborts with a critical error and thus forces you to do a <code>--resync</code>, likely avoiding a disaster.</p>
 <h3 id="conflict-resolve">--conflict-resolve CHOICE</h3>
@@ -13556,7 +13624,7 @@ <h3 id="conflict-suffix">--conflict-suffix STRING[,STRING]</h3>
 <h3 id="check-sync">--check-sync</h3>
 <p>Enabled by default, the check-sync function checks that all of the same files exist in both the Path1 and Path2 history listings. This <em>check-sync</em> integrity check is performed at the end of the sync run by default. Any untrapped failing copy/deletes between the two paths might result in differences between the two listings and in the untracked file content differences between the two paths. A resync run would correct the error.</p>
 <p>Note that the default-enabled integrity check locally executes a load of both the final Path1 and Path2 listings, and thus adds to the run time of a sync. Using <code>--check-sync=false</code> will disable it and may significantly reduce the sync run times for very large numbers of files.</p>
-<p>The check may be run manually with <code>--check-sync=only</code>. It runs only the integrity check and terminates without actually synching.</p>
+<p>The check may be run manually with <code>--check-sync=only</code>. It runs only the integrity check and terminates without actually syncing.</p>
 <p>Note that currently, <code>--check-sync</code> <strong>only checks listing snapshots and NOT the actual files on the remotes.</strong> Note also that the listing snapshots will not know about any changes that happened during or after the latest bisync run, as those will be discovered on the next run. Therefore, while listings should always match <em>each other</em> at the end of a bisync run, it is <em>expected</em> that they will not match the underlying remotes, nor will the remotes match each other, if there were changes during or after the run. This is normal, and any differences will be detected and synced on the next run.</p>
 <p>For a robust integrity check of the current state of the remotes (as opposed to just their listing snapshots), consider using <a href="commands/rclone_check/"><code>check</code></a> (or <a href="https://rclone.org/commands/rclone_cryptcheck/"><code>cryptcheck</code></a>, if at least one path is a <code>crypt</code> remote) instead of <code>--check-sync</code>, keeping in mind that differences are expected if files changed during or after your last bisync run.</p>
 <p>For example, a possible sequence could look like this:</p>
@@ -13786,7 +13854,7 @@ <h2 id="filtering">Filtering</h2>
 <p>See <a href="https://rclone.org/filtering/">filtering documentation</a> for how filter rules are written and interpreted.</p>
 <p>Bisync's <a href="#filters-file"><code>--filters-file</code></a> flag slightly extends the rclone's <a href="https://rclone.org/filtering/#filter-from-read-filtering-patterns-from-a-file">--filter-from</a> filtering mechanism. For a given bisync run you may provide <em>only one</em> <code>--filters-file</code>. The <code>--include*</code>, <code>--exclude*</code>, and <code>--filter</code> flags are also supported.</p>
 <h3 id="how-to-filter-directories">How to filter directories</h3>
-<p>Filtering portions of the directory tree is a critical feature for synching.</p>
+<p>Filtering portions of the directory tree is a critical feature for syncing.</p>
 <p>Examples of directory trees (always beneath the Path1/Path2 root level) you may want to exclude from your sync: - Directory trees containing only software build intermediate files. - Directory trees containing application temporary files and data such as the Windows <code>C:\Users\MyLogin\AppData\</code> tree. - Directory trees containing files that are large, less important, or are getting thrashed continuously by ongoing processes.</p>
 <p>On the other hand, there may be only select directories that you actually want to sync, and exclude all others. See the <a href="#include-filters">Example include-style filters for Windows user directories</a> below.</p>
 <h3 id="filters-file-writing-guidelines">Filters file writing guidelines</h3>
@@ -13853,7 +13921,7 @@ <h3 id="include-filters">Example include-style filters for Windows user director
 <p>Note also that Windows implements several "library" links such as <code>C:\Users\MyLogin\My Documents\My Music</code> pointing to <code>C:\Users\MyLogin\Music</code>. rclone sees these as links, so you must add <code>--links</code> to the bisync command line if you which to follow these links. I find that I get permission errors in trying to follow the links, so I don't include the rclone <code>--links</code> flag, but then you get lots of <code>Can't follow symlink…</code> noise from rclone about not following the links. This noise can be quashed by adding <code>--quiet</code> to the bisync command line.</p>
 <h2 id="exclude-filters">Example exclude-style filters files for use with Dropbox</h2>
 <ul>
-<li>Dropbox disallows synching the listed temporary and configuration/data files. The `- <filename>` filters exclude these files where ever they may occur in the sync tree. Consider adding similar exclusions for file types you don't need to sync, such as core dump and software build files.</li>
+<li>Dropbox disallows syncing the listed temporary and configuration/data files. The `- <filename>` filters exclude these files where ever they may occur in the sync tree. Consider adding similar exclusions for file types you don't need to sync, such as core dump and software build files.</li>
 <li>bisync testing creates <code>/testdir/</code> at the top level of the sync tree, and usually deletes the tree after the test. If a normal sync should run while the <code>/testdir/</code> tree exists the <code>--check-access</code> phase may fail due to unbalanced RCLONE_TEST files. The `- /testdir/` filter blocks this tree from being synched. You don't need this exclusion if you are not doing bisync development testing.</li>
 <li>Everything else beneath the Path1/Path2 root will be synched.</li>
 <li>RCLONE_TEST files may be placed anywhere within the tree, including the root.</li>
@@ -14013,7 +14081,7 @@ <h3 id="test-command-syntax">Test command syntax</h3>
 <p>Note: unlike rclone flags which must be prefixed by double dash (<code>--</code>), the test command flags can be equally prefixed by a single <code>-</code> or double dash.</p>
 <h3 id="running-tests">Running tests</h3>
 <ul>
-<li><code>go test . -case basic -remote local -remote2 local</code> runs the <code>test_basic</code> test case using only the local filesystem, synching one local directory with another local directory. Test script output is to the console, while commands within scenario.txt have their output sent to the <code>.../workdir/test.log</code> file, which is finally compared to the golden copy.</li>
+<li><code>go test . -case basic -remote local -remote2 local</code> runs the <code>test_basic</code> test case using only the local filesystem, syncing one local directory with another local directory. Test script output is to the console, while commands within scenario.txt have their output sent to the <code>.../workdir/test.log</code> file, which is finally compared to the golden copy.</li>
 <li>The first argument after <code>go test</code> should be a relative name of the directory containing bisync source code. If you run tests right from there, the argument will be <code>.</code> (current directory) as in most examples below. If you run bisync tests from the rclone source directory, the command should be <code>go test ./cmd/bisync ...</code>.</li>
 <li>The test engine will mangle rclone output to ensure comparability with golden listings and logs.</li>
 <li>Test scenarios are located in <code>./cmd/bisync/testdata</code>. The test <code>-case</code> argument should match the full name of a subdirectory under that directory. Every test subdirectory name on disk must start with <code>test_</code>, this prefix can be omitted on command line for brevity. Also, underscores in the name can be replaced by dashes for convenience.</li>
@@ -14150,6 +14218,10 @@ <h2 id="references">References</h2>
 <p>Bisync adopts the differential synchronization technique, which is based on keeping history of changes performed by both synchronizing sides. See the <em>Dual Shadow Method</em> section in <a href="https://neil.fraser.name/writing/sync/">Neil Fraser's article</a>.</p>
 <p>Also note a number of academic publications by <a href="http://www.cis.upenn.edu/%7Ebcpierce/papers/index.shtml#File%20Synchronization">Benjamin Pierce</a> about <em>Unison</em> and synchronization in general.</p>
 <h2 id="changelog">Changelog</h2>
+<h3 id="v1.69.1"><code>v1.69.1</code></h3>
+<ul>
+<li>Fixed an issue causing listings to not capture concurrent modifications under certain conditions</li>
+</ul>
 <h3 id="v1.68"><code>v1.68</code></h3>
 <ul>
 <li>Fixed an issue affecting backends that round modtimes to a lower precision.</li>
@@ -15072,7 +15144,7 @@ <h3 id="s3-permissions">S3 Permissions</h3>
 <ol type="1">
 <li>This is a policy that can be used when creating bucket. It assumes that <code>USER_NAME</code> has been created.</li>
 <li>The Resource entry must include both resource ARNs, as one implies the bucket and the other implies the bucket's objects.</li>
-<li>When using <a href="#s3-no-check-bucket">s3-no-check-bucket</a> and the bucket already exsits, the <code>"arn:aws:s3:::BUCKET_NAME"</code> doesn't have to be included.</li>
+<li>When using <a href="#s3-no-check-bucket">s3-no-check-bucket</a> and the bucket already exists, the <code>"arn:aws:s3:::BUCKET_NAME"</code> doesn't have to be included.</li>
 </ol>
 <p>For reference, <a href="https://gist.github.com/ebridges/ebfc9042dd7c756cd101cfa807b7ae2b">here's an Ansible script</a> that will generate one or more buckets that will work with <code>rclone sync</code>.</p>
 <h3 id="key-management-system-kms">Key Management System (KMS)</h3>
@@ -17632,7 +17704,7 @@ <h3 id="RackCorp">RackCorp</h3>
 endpoint = s3.rackcorp.com
 location_constraint = au-nsw</code></pre>
 <h3 id="rclone">Rclone Serve S3</h3>
-<p>Rclone can serve any remote over the S3 protocol. For details see the <a href="https://rclone.org/commands/rclone_serve_http/">rclone serve s3</a> documentation.</p>
+<p>Rclone can serve any remote over the S3 protocol. For details see the <a href="https://rclone.org/commands/rclone_serve_s3/">rclone serve s3</a> documentation.</p>
 <p>For example, to serve <code>remote:path</code> over s3, run the server like this:</p>
 <pre><code>rclone serve s3 --auth-key ACCESS_KEY_ID,SECRET_ACCESS_KEY remote:path</code></pre>
 <p>This will be compatible with an rclone remote which is defined like this:</p>
@@ -17643,7 +17715,7 @@ <h3 id="rclone">Rclone Serve S3</h3>
 access_key_id = ACCESS_KEY_ID
 secret_access_key = SECRET_ACCESS_KEY
 use_multipart_uploads = false</code></pre>
-<p>Note that setting <code>disable_multipart_uploads = true</code> is to work around <a href="https://rclone.org/commands/rclone_serve_http/#bugs">a bug</a> which will be fixed in due course.</p>
+<p>Note that setting <code>use_multipart_uploads = false</code> is to work around <a href="https://rclone.org/commands/rclone_serve_s3/#bugs">a bug</a> which will be fixed in due course.</p>
 <h3 id="scaleway">Scaleway</h3>
 <p><a href="https://www.scaleway.com/object-storage/">Scaleway</a> The Object Storage platform allows you to store anything from backups, logs and web assets to documents and photos. Files can be dropped from the Scaleway console or transferred through our API and CLI or using any S3-compatible tool.</p>
 <p>Scaleway provides an S3 interface which can be configured for use with rclone like this:</p>
@@ -18581,27 +18653,49 @@ <h3 id="linode">Linode</h3>
 Endpoint for Linode Object Storage API.
 Choose a number from below, or type in your own value.
 Press Enter to leave empty.
- 1 / Atlanta, GA (USA), us-southeast-1
+ 1 / Amsterdam (Netherlands), nl-ams-1
+   \ (nl-ams-1.linodeobjects.com)
+ 2 / Atlanta, GA (USA), us-southeast-1
    \ (us-southeast-1.linodeobjects.com)
- 2 / Chicago, IL (USA), us-ord-1
+ 3 / Chennai (India), in-maa-1
+   \ (in-maa-1.linodeobjects.com)
+ 4 / Chicago, IL (USA), us-ord-1
    \ (us-ord-1.linodeobjects.com)
- 3 / Frankfurt (Germany), eu-central-1
+ 5 / Frankfurt (Germany), eu-central-1
    \ (eu-central-1.linodeobjects.com)
- 4 / Milan (Italy), it-mil-1
+ 6 / Jakarta (Indonesia), id-cgk-1
+   \ (id-cgk-1.linodeobjects.com)
+ 7 / London 2 (Great Britain), gb-lon-1
+   \ (gb-lon-1.linodeobjects.com)
+ 8 / Los Angeles, CA (USA), us-lax-1
+   \ (us-lax-1.linodeobjects.com)
+ 9 / Madrid (Spain), es-mad-1
+   \ (es-mad-1.linodeobjects.com)
+10 / Melbourne (Australia), au-mel-1
+   \ (au-mel-1.linodeobjects.com)
+11 / Miami, FL (USA), us-mia-1
+   \ (us-mia-1.linodeobjects.com)
+12 / Milan (Italy), it-mil-1
    \ (it-mil-1.linodeobjects.com)
- 5 / Newark, NJ (USA), us-east-1
+13 / Newark, NJ (USA), us-east-1
    \ (us-east-1.linodeobjects.com)
- 6 / Paris (France), fr-par-1
+14 / Osaka (Japan), jp-osa-1
+   \ (jp-osa-1.linodeobjects.com)
+15 / Paris (France), fr-par-1
    \ (fr-par-1.linodeobjects.com)
- 7 / Seattle, WA (USA), us-sea-1
+16 / São Paulo (Brazil), br-gru-1
+   \ (br-gru-1.linodeobjects.com)
+17 / Seattle, WA (USA), us-sea-1
    \ (us-sea-1.linodeobjects.com)
- 8 / Singapore ap-south-1
+18 / Singapore, ap-south-1
    \ (ap-south-1.linodeobjects.com)
- 9 / Stockholm (Sweden), se-sto-1
+19 / Singapore 2, sg-sin-1
+   \ (sg-sin-1.linodeobjects.com)
+20 / Stockholm (Sweden), se-sto-1
    \ (se-sto-1.linodeobjects.com)
-10 / Washington, DC, (USA), us-iad-1
+21 / Washington, DC, (USA), us-iad-1
    \ (us-iad-1.linodeobjects.com)
-endpoint&gt; 3
+endpoint&gt; 5
 
 Option acl.
 Canned ACL used when creating buckets and storing or copying objects.
@@ -18958,7 +19052,7 @@ <h3 id="netease-nos">Netease NOS</h3>
 <p>For Netease NOS configure as per the configurator <code>rclone config</code> setting the provider <code>Netease</code>. This will automatically set <code>force_path_style = false</code> which is necessary for it to run properly.</p>
 <h3 id="petabox">Petabox</h3>
 <p>Here is an example of making a <a href="https://petabox.io/">Petabox</a> configuration. First run:</p>
-<div class="sourceCode" id="cb1007"><pre class="sourceCode bash"><code class="sourceCode bash"><span id="cb1007-1"><a href="#cb1007-1" aria-hidden="true"></a><span class="ex">rclone</span> config</span></code></pre></div>
+<div class="sourceCode" id="cb1008"><pre class="sourceCode bash"><code class="sourceCode bash"><span id="cb1008-1"><a href="#cb1008-1" aria-hidden="true"></a><span class="ex">rclone</span> config</span></code></pre></div>
 <p>This will guide you through an interactive setup process.</p>
 <pre><code>No remotes found, make a new one?
 n) New remote
@@ -21755,7 +21849,7 @@ <h4 id="header-1">Header</h4>
 <li>8 bytes magic string <code>RCLONE\x00\x00</code></li>
 <li>24 bytes Nonce (IV)</li>
 </ul>
-<p>The initial nonce is generated from the operating systems crypto strong random number generator. The nonce is incremented for each chunk read making sure each nonce is unique for each block written. The chance of a nonce being reused is minuscule. If you wrote an exabyte of data (10¹⁸ bytes) you would have a probability of approximately 2×10⁻³² of re-using a nonce.</p>
+<p>The initial nonce is generated from the operating systems crypto strong random number generator. The nonce is incremented for each chunk read making sure each nonce is unique for each block written. The chance of a nonce being reused is minuscule. If you wrote an exabyte of data (10¹⁸ bytes) you would have a probability of approximately 2×10⁻³² of reusing a nonce.</p>
 <h4 id="chunk">Chunk</h4>
 <p>Each chunk will contain 64 KiB of data, except for the last one which may have less data. The data chunk is in standard NaCl SecretBox format. SecretBox uses XSalsa20 and Poly1305 to encrypt and authenticate messages.</p>
 <p>Each chunk contains:</p>
@@ -27047,7 +27141,7 @@ <h2 id="configuration-24">Configuration</h2>
 config_2fa&gt; 2FACODE
 Remote config
 --------------------
-[koofr]
+[iclouddrive]
 - type: iclouddrive
 - apple_id: APPLEID
 - password: *** ENCRYPTED ***
@@ -27060,6 +27154,13 @@ <h2 id="configuration-24">Configuration</h2>
 y/e/d&gt; y</code></pre>
 <h2 id="advanced-data-protection">Advanced Data Protection</h2>
 <p>ADP is currently unsupported and need to be disabled</p>
+<p>On iPhone, Settings <code>&gt;</code> Apple Account <code>&gt;</code> iCloud <code>&gt;</code> 'Access iCloud Data on the Web' must be ON, and 'Advanced Data Protection' OFF.</p>
+<h2 id="troubleshooting-2">Troubleshooting</h2>
+<h3 id="missing-pcs-cookies-from-the-request">Missing PCS cookies from the request</h3>
+<p>This means you have Advanced Data Protection (ADP) turned on. This is not supported at the moment. If you want to use rclone you will have to turn it off. See above for how to turn it off.</p>
+<p>You will need to clear the <code>cookies</code> and the <code>trust_token</code> fields in the config. Or you can delete the remote config and start again.</p>
+<p>You should then run <code>rclone reconnect remote:</code>.</p>
+<p>Note that changing the ADP setting may not take effect immediately - you may need to wait a few hours or a day before you can get rclone to work - keep clearing the config entry and running <code>rclone reconnect remote:</code> until rclone functions properly.</p>
 <h3 id="standard-options-25">Standard options</h3>
 <p>Here are the Standard options specific to iclouddrive (iCloud Drive).</p>
 <h4 id="iclouddrive-apple-id">--iclouddrive-apple-id</h4>
@@ -27801,7 +27902,7 @@ <h2 id="limitations-19">Limitations</h2>
 <p>Note that Jottacloud is case insensitive so you can't have a file called "Hello.doc" and one called "hello.doc".</p>
 <p>There are quite a few characters that can't be in Jottacloud file names. Rclone will map these names to and from an identical looking unicode equivalent. For example if a file has a ? in it will be mapped to ？ instead.</p>
 <p>Jottacloud only supports filenames up to 255 characters in length.</p>
-<h2 id="troubleshooting-1">Troubleshooting</h2>
+<h2 id="troubleshooting-3">Troubleshooting</h2>
 <p>Jottacloud exhibits some inconsistent behaviours regarding deleted files and folders which may cause Copy, Move and DirMove operations to previously deleted paths to fail. Emptying the trash should help in such cases.</p>
 <h1 id="koofr">Koofr</h1>
 <p>Paths are specified as <code>remote:path</code></p>
@@ -30461,7 +30562,7 @@ <h4 id="onedrive-region">--onedrive-region</h4>
 </ul></li>
 <li>"de"
 <ul>
-<li>Microsoft Cloud Germany</li>
+<li>Microsoft Cloud Germany (deprecated - try global region first).</li>
 </ul></li>
 <li>"cn"
 <ul>
@@ -30834,75 +30935,75 @@ <h3 id="metadata-13">Metadata</h3>
 <p>Permissions are also supported, if <code>--onedrive-metadata-permissions</code> is set. The accepted values for <code>--onedrive-metadata-permissions</code> are "<code>read</code>", "<code>write</code>", "<code>read,write</code>", and "<code>off</code>" (the default). "<code>write</code>" supports adding new permissions, updating the "role" of existing permissions, and removing permissions. Updating and removing require the Permission ID to be known, so it is recommended to use "<code>read,write</code>" instead of "<code>write</code>" if you wish to update/remove permissions.</p>
 <p>Permissions are read/written in JSON format using the same schema as the <a href="https://learn.microsoft.com/en-us/onedrive/developer/rest-api/resources/permission?view=odsp-graph-online">OneDrive API</a>, which differs slightly between OneDrive Personal and Business.</p>
 <p>Example for OneDrive Personal:</p>
-<div class="sourceCode" id="cb1313"><pre class="sourceCode json"><code class="sourceCode json"><span id="cb1313-1"><a href="#cb1313-1" aria-hidden="true"></a><span class="ot">[</span></span>
-<span id="cb1313-2"><a href="#cb1313-2" aria-hidden="true"></a>    <span class="fu">{</span></span>
-<span id="cb1313-3"><a href="#cb1313-3" aria-hidden="true"></a>        <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;1234567890ABC!123&quot;</span><span class="fu">,</span></span>
-<span id="cb1313-4"><a href="#cb1313-4" aria-hidden="true"></a>        <span class="dt">&quot;grantedTo&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1313-5"><a href="#cb1313-5" aria-hidden="true"></a>            <span class="dt">&quot;user&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1313-6"><a href="#cb1313-6" aria-hidden="true"></a>                <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;ryan@contoso.com&quot;</span></span>
-<span id="cb1313-7"><a href="#cb1313-7" aria-hidden="true"></a>            <span class="fu">},</span></span>
-<span id="cb1313-8"><a href="#cb1313-8" aria-hidden="true"></a>            <span class="dt">&quot;application&quot;</span><span class="fu">:</span> <span class="fu">{},</span></span>
-<span id="cb1313-9"><a href="#cb1313-9" aria-hidden="true"></a>            <span class="dt">&quot;device&quot;</span><span class="fu">:</span> <span class="fu">{}</span></span>
-<span id="cb1313-10"><a href="#cb1313-10" aria-hidden="true"></a>        <span class="fu">},</span></span>
-<span id="cb1313-11"><a href="#cb1313-11" aria-hidden="true"></a>        <span class="dt">&quot;invitation&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1313-12"><a href="#cb1313-12" aria-hidden="true"></a>            <span class="dt">&quot;email&quot;</span><span class="fu">:</span> <span class="st">&quot;ryan@contoso.com&quot;</span></span>
-<span id="cb1313-13"><a href="#cb1313-13" aria-hidden="true"></a>        <span class="fu">},</span></span>
-<span id="cb1313-14"><a href="#cb1313-14" aria-hidden="true"></a>        <span class="dt">&quot;link&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1313-15"><a href="#cb1313-15" aria-hidden="true"></a>            <span class="dt">&quot;webUrl&quot;</span><span class="fu">:</span> <span class="st">&quot;https://1drv.ms/t/s!1234567890ABC&quot;</span></span>
-<span id="cb1313-16"><a href="#cb1313-16" aria-hidden="true"></a>        <span class="fu">},</span></span>
-<span id="cb1313-17"><a href="#cb1313-17" aria-hidden="true"></a>        <span class="dt">&quot;roles&quot;</span><span class="fu">:</span> <span class="ot">[</span></span>
-<span id="cb1313-18"><a href="#cb1313-18" aria-hidden="true"></a>            <span class="st">&quot;read&quot;</span></span>
-<span id="cb1313-19"><a href="#cb1313-19" aria-hidden="true"></a>        <span class="ot">]</span><span class="fu">,</span></span>
-<span id="cb1313-20"><a href="#cb1313-20" aria-hidden="true"></a>        <span class="dt">&quot;shareId&quot;</span><span class="fu">:</span> <span class="st">&quot;s!1234567890ABC&quot;</span></span>
-<span id="cb1313-21"><a href="#cb1313-21" aria-hidden="true"></a>    <span class="fu">}</span></span>
-<span id="cb1313-22"><a href="#cb1313-22" aria-hidden="true"></a><span class="ot">]</span></span></code></pre></div>
-<p>Example for OneDrive Business:</p>
 <div class="sourceCode" id="cb1314"><pre class="sourceCode json"><code class="sourceCode json"><span id="cb1314-1"><a href="#cb1314-1" aria-hidden="true"></a><span class="ot">[</span></span>
 <span id="cb1314-2"><a href="#cb1314-2" aria-hidden="true"></a>    <span class="fu">{</span></span>
-<span id="cb1314-3"><a href="#cb1314-3" aria-hidden="true"></a>        <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;48d31887-5fad-4d73-a9f5-3c356e68a038&quot;</span><span class="fu">,</span></span>
-<span id="cb1314-4"><a href="#cb1314-4" aria-hidden="true"></a>        <span class="dt">&quot;grantedToIdentities&quot;</span><span class="fu">:</span> <span class="ot">[</span></span>
-<span id="cb1314-5"><a href="#cb1314-5" aria-hidden="true"></a>            <span class="fu">{</span></span>
-<span id="cb1314-6"><a href="#cb1314-6" aria-hidden="true"></a>                <span class="dt">&quot;user&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1314-7"><a href="#cb1314-7" aria-hidden="true"></a>                    <span class="dt">&quot;displayName&quot;</span><span class="fu">:</span> <span class="st">&quot;ryan@contoso.com&quot;</span></span>
-<span id="cb1314-8"><a href="#cb1314-8" aria-hidden="true"></a>                <span class="fu">},</span></span>
-<span id="cb1314-9"><a href="#cb1314-9" aria-hidden="true"></a>                <span class="dt">&quot;application&quot;</span><span class="fu">:</span> <span class="fu">{},</span></span>
-<span id="cb1314-10"><a href="#cb1314-10" aria-hidden="true"></a>                <span class="dt">&quot;device&quot;</span><span class="fu">:</span> <span class="fu">{}</span></span>
-<span id="cb1314-11"><a href="#cb1314-11" aria-hidden="true"></a>            <span class="fu">}</span></span>
-<span id="cb1314-12"><a href="#cb1314-12" aria-hidden="true"></a>        <span class="ot">]</span><span class="fu">,</span></span>
-<span id="cb1314-13"><a href="#cb1314-13" aria-hidden="true"></a>        <span class="dt">&quot;link&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1314-14"><a href="#cb1314-14" aria-hidden="true"></a>            <span class="dt">&quot;type&quot;</span><span class="fu">:</span> <span class="st">&quot;view&quot;</span><span class="fu">,</span></span>
-<span id="cb1314-15"><a href="#cb1314-15" aria-hidden="true"></a>            <span class="dt">&quot;scope&quot;</span><span class="fu">:</span> <span class="st">&quot;users&quot;</span><span class="fu">,</span></span>
-<span id="cb1314-16"><a href="#cb1314-16" aria-hidden="true"></a>            <span class="dt">&quot;webUrl&quot;</span><span class="fu">:</span> <span class="st">&quot;https://contoso.sharepoint.com/:w:/t/design/a577ghg9hgh737613bmbjf839026561fmzhsr85ng9f3hjck2t5s&quot;</span></span>
-<span id="cb1314-17"><a href="#cb1314-17" aria-hidden="true"></a>        <span class="fu">},</span></span>
-<span id="cb1314-18"><a href="#cb1314-18" aria-hidden="true"></a>        <span class="dt">&quot;roles&quot;</span><span class="fu">:</span> <span class="ot">[</span></span>
-<span id="cb1314-19"><a href="#cb1314-19" aria-hidden="true"></a>            <span class="st">&quot;read&quot;</span></span>
-<span id="cb1314-20"><a href="#cb1314-20" aria-hidden="true"></a>        <span class="ot">]</span><span class="fu">,</span></span>
-<span id="cb1314-21"><a href="#cb1314-21" aria-hidden="true"></a>        <span class="dt">&quot;shareId&quot;</span><span class="fu">:</span> <span class="st">&quot;u!LKj1lkdlals90j1nlkascl&quot;</span></span>
-<span id="cb1314-22"><a href="#cb1314-22" aria-hidden="true"></a>    <span class="fu">}</span><span class="ot">,</span></span>
-<span id="cb1314-23"><a href="#cb1314-23" aria-hidden="true"></a>    <span class="fu">{</span></span>
-<span id="cb1314-24"><a href="#cb1314-24" aria-hidden="true"></a>        <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;5D33DD65C6932946&quot;</span><span class="fu">,</span></span>
-<span id="cb1314-25"><a href="#cb1314-25" aria-hidden="true"></a>        <span class="dt">&quot;grantedTo&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1314-26"><a href="#cb1314-26" aria-hidden="true"></a>            <span class="dt">&quot;user&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1314-27"><a href="#cb1314-27" aria-hidden="true"></a>                <span class="dt">&quot;displayName&quot;</span><span class="fu">:</span> <span class="st">&quot;John Doe&quot;</span><span class="fu">,</span></span>
-<span id="cb1314-28"><a href="#cb1314-28" aria-hidden="true"></a>                <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;efee1b77-fb3b-4f65-99d6-274c11914d12&quot;</span></span>
-<span id="cb1314-29"><a href="#cb1314-29" aria-hidden="true"></a>            <span class="fu">},</span></span>
-<span id="cb1314-30"><a href="#cb1314-30" aria-hidden="true"></a>            <span class="dt">&quot;application&quot;</span><span class="fu">:</span> <span class="fu">{},</span></span>
-<span id="cb1314-31"><a href="#cb1314-31" aria-hidden="true"></a>            <span class="dt">&quot;device&quot;</span><span class="fu">:</span> <span class="fu">{}</span></span>
-<span id="cb1314-32"><a href="#cb1314-32" aria-hidden="true"></a>        <span class="fu">},</span></span>
-<span id="cb1314-33"><a href="#cb1314-33" aria-hidden="true"></a>        <span class="dt">&quot;roles&quot;</span><span class="fu">:</span> <span class="ot">[</span></span>
-<span id="cb1314-34"><a href="#cb1314-34" aria-hidden="true"></a>            <span class="st">&quot;owner&quot;</span></span>
-<span id="cb1314-35"><a href="#cb1314-35" aria-hidden="true"></a>        <span class="ot">]</span><span class="fu">,</span></span>
-<span id="cb1314-36"><a href="#cb1314-36" aria-hidden="true"></a>        <span class="dt">&quot;shareId&quot;</span><span class="fu">:</span> <span class="st">&quot;FWxc1lasfdbEAGM5fI7B67aB5ZMPDMmQ11U&quot;</span></span>
-<span id="cb1314-37"><a href="#cb1314-37" aria-hidden="true"></a>    <span class="fu">}</span></span>
-<span id="cb1314-38"><a href="#cb1314-38" aria-hidden="true"></a><span class="ot">]</span></span></code></pre></div>
+<span id="cb1314-3"><a href="#cb1314-3" aria-hidden="true"></a>        <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;1234567890ABC!123&quot;</span><span class="fu">,</span></span>
+<span id="cb1314-4"><a href="#cb1314-4" aria-hidden="true"></a>        <span class="dt">&quot;grantedTo&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1314-5"><a href="#cb1314-5" aria-hidden="true"></a>            <span class="dt">&quot;user&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1314-6"><a href="#cb1314-6" aria-hidden="true"></a>                <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;ryan@contoso.com&quot;</span></span>
+<span id="cb1314-7"><a href="#cb1314-7" aria-hidden="true"></a>            <span class="fu">},</span></span>
+<span id="cb1314-8"><a href="#cb1314-8" aria-hidden="true"></a>            <span class="dt">&quot;application&quot;</span><span class="fu">:</span> <span class="fu">{},</span></span>
+<span id="cb1314-9"><a href="#cb1314-9" aria-hidden="true"></a>            <span class="dt">&quot;device&quot;</span><span class="fu">:</span> <span class="fu">{}</span></span>
+<span id="cb1314-10"><a href="#cb1314-10" aria-hidden="true"></a>        <span class="fu">},</span></span>
+<span id="cb1314-11"><a href="#cb1314-11" aria-hidden="true"></a>        <span class="dt">&quot;invitation&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1314-12"><a href="#cb1314-12" aria-hidden="true"></a>            <span class="dt">&quot;email&quot;</span><span class="fu">:</span> <span class="st">&quot;ryan@contoso.com&quot;</span></span>
+<span id="cb1314-13"><a href="#cb1314-13" aria-hidden="true"></a>        <span class="fu">},</span></span>
+<span id="cb1314-14"><a href="#cb1314-14" aria-hidden="true"></a>        <span class="dt">&quot;link&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1314-15"><a href="#cb1314-15" aria-hidden="true"></a>            <span class="dt">&quot;webUrl&quot;</span><span class="fu">:</span> <span class="st">&quot;https://1drv.ms/t/s!1234567890ABC&quot;</span></span>
+<span id="cb1314-16"><a href="#cb1314-16" aria-hidden="true"></a>        <span class="fu">},</span></span>
+<span id="cb1314-17"><a href="#cb1314-17" aria-hidden="true"></a>        <span class="dt">&quot;roles&quot;</span><span class="fu">:</span> <span class="ot">[</span></span>
+<span id="cb1314-18"><a href="#cb1314-18" aria-hidden="true"></a>            <span class="st">&quot;read&quot;</span></span>
+<span id="cb1314-19"><a href="#cb1314-19" aria-hidden="true"></a>        <span class="ot">]</span><span class="fu">,</span></span>
+<span id="cb1314-20"><a href="#cb1314-20" aria-hidden="true"></a>        <span class="dt">&quot;shareId&quot;</span><span class="fu">:</span> <span class="st">&quot;s!1234567890ABC&quot;</span></span>
+<span id="cb1314-21"><a href="#cb1314-21" aria-hidden="true"></a>    <span class="fu">}</span></span>
+<span id="cb1314-22"><a href="#cb1314-22" aria-hidden="true"></a><span class="ot">]</span></span></code></pre></div>
+<p>Example for OneDrive Business:</p>
+<div class="sourceCode" id="cb1315"><pre class="sourceCode json"><code class="sourceCode json"><span id="cb1315-1"><a href="#cb1315-1" aria-hidden="true"></a><span class="ot">[</span></span>
+<span id="cb1315-2"><a href="#cb1315-2" aria-hidden="true"></a>    <span class="fu">{</span></span>
+<span id="cb1315-3"><a href="#cb1315-3" aria-hidden="true"></a>        <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;48d31887-5fad-4d73-a9f5-3c356e68a038&quot;</span><span class="fu">,</span></span>
+<span id="cb1315-4"><a href="#cb1315-4" aria-hidden="true"></a>        <span class="dt">&quot;grantedToIdentities&quot;</span><span class="fu">:</span> <span class="ot">[</span></span>
+<span id="cb1315-5"><a href="#cb1315-5" aria-hidden="true"></a>            <span class="fu">{</span></span>
+<span id="cb1315-6"><a href="#cb1315-6" aria-hidden="true"></a>                <span class="dt">&quot;user&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1315-7"><a href="#cb1315-7" aria-hidden="true"></a>                    <span class="dt">&quot;displayName&quot;</span><span class="fu">:</span> <span class="st">&quot;ryan@contoso.com&quot;</span></span>
+<span id="cb1315-8"><a href="#cb1315-8" aria-hidden="true"></a>                <span class="fu">},</span></span>
+<span id="cb1315-9"><a href="#cb1315-9" aria-hidden="true"></a>                <span class="dt">&quot;application&quot;</span><span class="fu">:</span> <span class="fu">{},</span></span>
+<span id="cb1315-10"><a href="#cb1315-10" aria-hidden="true"></a>                <span class="dt">&quot;device&quot;</span><span class="fu">:</span> <span class="fu">{}</span></span>
+<span id="cb1315-11"><a href="#cb1315-11" aria-hidden="true"></a>            <span class="fu">}</span></span>
+<span id="cb1315-12"><a href="#cb1315-12" aria-hidden="true"></a>        <span class="ot">]</span><span class="fu">,</span></span>
+<span id="cb1315-13"><a href="#cb1315-13" aria-hidden="true"></a>        <span class="dt">&quot;link&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1315-14"><a href="#cb1315-14" aria-hidden="true"></a>            <span class="dt">&quot;type&quot;</span><span class="fu">:</span> <span class="st">&quot;view&quot;</span><span class="fu">,</span></span>
+<span id="cb1315-15"><a href="#cb1315-15" aria-hidden="true"></a>            <span class="dt">&quot;scope&quot;</span><span class="fu">:</span> <span class="st">&quot;users&quot;</span><span class="fu">,</span></span>
+<span id="cb1315-16"><a href="#cb1315-16" aria-hidden="true"></a>            <span class="dt">&quot;webUrl&quot;</span><span class="fu">:</span> <span class="st">&quot;https://contoso.sharepoint.com/:w:/t/design/a577ghg9hgh737613bmbjf839026561fmzhsr85ng9f3hjck2t5s&quot;</span></span>
+<span id="cb1315-17"><a href="#cb1315-17" aria-hidden="true"></a>        <span class="fu">},</span></span>
+<span id="cb1315-18"><a href="#cb1315-18" aria-hidden="true"></a>        <span class="dt">&quot;roles&quot;</span><span class="fu">:</span> <span class="ot">[</span></span>
+<span id="cb1315-19"><a href="#cb1315-19" aria-hidden="true"></a>            <span class="st">&quot;read&quot;</span></span>
+<span id="cb1315-20"><a href="#cb1315-20" aria-hidden="true"></a>        <span class="ot">]</span><span class="fu">,</span></span>
+<span id="cb1315-21"><a href="#cb1315-21" aria-hidden="true"></a>        <span class="dt">&quot;shareId&quot;</span><span class="fu">:</span> <span class="st">&quot;u!LKj1lkdlals90j1nlkascl&quot;</span></span>
+<span id="cb1315-22"><a href="#cb1315-22" aria-hidden="true"></a>    <span class="fu">}</span><span class="ot">,</span></span>
+<span id="cb1315-23"><a href="#cb1315-23" aria-hidden="true"></a>    <span class="fu">{</span></span>
+<span id="cb1315-24"><a href="#cb1315-24" aria-hidden="true"></a>        <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;5D33DD65C6932946&quot;</span><span class="fu">,</span></span>
+<span id="cb1315-25"><a href="#cb1315-25" aria-hidden="true"></a>        <span class="dt">&quot;grantedTo&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1315-26"><a href="#cb1315-26" aria-hidden="true"></a>            <span class="dt">&quot;user&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1315-27"><a href="#cb1315-27" aria-hidden="true"></a>                <span class="dt">&quot;displayName&quot;</span><span class="fu">:</span> <span class="st">&quot;John Doe&quot;</span><span class="fu">,</span></span>
+<span id="cb1315-28"><a href="#cb1315-28" aria-hidden="true"></a>                <span class="dt">&quot;id&quot;</span><span class="fu">:</span> <span class="st">&quot;efee1b77-fb3b-4f65-99d6-274c11914d12&quot;</span></span>
+<span id="cb1315-29"><a href="#cb1315-29" aria-hidden="true"></a>            <span class="fu">},</span></span>
+<span id="cb1315-30"><a href="#cb1315-30" aria-hidden="true"></a>            <span class="dt">&quot;application&quot;</span><span class="fu">:</span> <span class="fu">{},</span></span>
+<span id="cb1315-31"><a href="#cb1315-31" aria-hidden="true"></a>            <span class="dt">&quot;device&quot;</span><span class="fu">:</span> <span class="fu">{}</span></span>
+<span id="cb1315-32"><a href="#cb1315-32" aria-hidden="true"></a>        <span class="fu">},</span></span>
+<span id="cb1315-33"><a href="#cb1315-33" aria-hidden="true"></a>        <span class="dt">&quot;roles&quot;</span><span class="fu">:</span> <span class="ot">[</span></span>
+<span id="cb1315-34"><a href="#cb1315-34" aria-hidden="true"></a>            <span class="st">&quot;owner&quot;</span></span>
+<span id="cb1315-35"><a href="#cb1315-35" aria-hidden="true"></a>        <span class="ot">]</span><span class="fu">,</span></span>
+<span id="cb1315-36"><a href="#cb1315-36" aria-hidden="true"></a>        <span class="dt">&quot;shareId&quot;</span><span class="fu">:</span> <span class="st">&quot;FWxc1lasfdbEAGM5fI7B67aB5ZMPDMmQ11U&quot;</span></span>
+<span id="cb1315-37"><a href="#cb1315-37" aria-hidden="true"></a>    <span class="fu">}</span></span>
+<span id="cb1315-38"><a href="#cb1315-38" aria-hidden="true"></a><span class="ot">]</span></span></code></pre></div>
 <p>To write permissions, pass in a "permissions" metadata key using this same format. The <a href="https://rclone.org/docs/#metadata-mapper"><code>--metadata-mapper</code></a> tool can be very helpful for this.</p>
 <p>When adding permissions, an email address can be provided in the <code>User.ID</code> or <code>DisplayName</code> properties of <code>grantedTo</code> or <code>grantedToIdentities</code>. Alternatively, an ObjectID can be provided in <code>User.ID</code>. At least one valid recipient must be provided in order to add a permission for a user. Creating a Public Link is also supported, if <code>Link.Scope</code> is set to <code>"anonymous"</code>.</p>
 <p>Example request to add a "read" permission with <code>--metadata-mapper</code>:</p>
-<div class="sourceCode" id="cb1315"><pre class="sourceCode json"><code class="sourceCode json"><span id="cb1315-1"><a href="#cb1315-1" aria-hidden="true"></a><span class="fu">{</span></span>
-<span id="cb1315-2"><a href="#cb1315-2" aria-hidden="true"></a>    <span class="dt">&quot;Metadata&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
-<span id="cb1315-3"><a href="#cb1315-3" aria-hidden="true"></a>        <span class="dt">&quot;permissions&quot;</span><span class="fu">:</span> <span class="st">&quot;[{</span><span class="ch">\&quot;</span><span class="st">grantedToIdentities</span><span class="ch">\&quot;</span><span class="st">:[{</span><span class="ch">\&quot;</span><span class="st">user</span><span class="ch">\&quot;</span><span class="st">:{</span><span class="ch">\&quot;</span><span class="st">id</span><span class="ch">\&quot;</span><span class="st">:</span><span class="ch">\&quot;</span><span class="st">ryan@contoso.com</span><span class="ch">\&quot;</span><span class="st">}}],</span><span class="ch">\&quot;</span><span class="st">roles</span><span class="ch">\&quot;</span><span class="st">:[</span><span class="ch">\&quot;</span><span class="st">read</span><span class="ch">\&quot;</span><span class="st">]}]&quot;</span></span>
-<span id="cb1315-4"><a href="#cb1315-4" aria-hidden="true"></a>    <span class="fu">}</span></span>
-<span id="cb1315-5"><a href="#cb1315-5" aria-hidden="true"></a><span class="fu">}</span></span></code></pre></div>
+<div class="sourceCode" id="cb1316"><pre class="sourceCode json"><code class="sourceCode json"><span id="cb1316-1"><a href="#cb1316-1" aria-hidden="true"></a><span class="fu">{</span></span>
+<span id="cb1316-2"><a href="#cb1316-2" aria-hidden="true"></a>    <span class="dt">&quot;Metadata&quot;</span><span class="fu">:</span> <span class="fu">{</span></span>
+<span id="cb1316-3"><a href="#cb1316-3" aria-hidden="true"></a>        <span class="dt">&quot;permissions&quot;</span><span class="fu">:</span> <span class="st">&quot;[{</span><span class="ch">\&quot;</span><span class="st">grantedToIdentities</span><span class="ch">\&quot;</span><span class="st">:[{</span><span class="ch">\&quot;</span><span class="st">user</span><span class="ch">\&quot;</span><span class="st">:{</span><span class="ch">\&quot;</span><span class="st">id</span><span class="ch">\&quot;</span><span class="st">:</span><span class="ch">\&quot;</span><span class="st">ryan@contoso.com</span><span class="ch">\&quot;</span><span class="st">}}],</span><span class="ch">\&quot;</span><span class="st">roles</span><span class="ch">\&quot;</span><span class="st">:[</span><span class="ch">\&quot;</span><span class="st">read</span><span class="ch">\&quot;</span><span class="st">]}]&quot;</span></span>
+<span id="cb1316-4"><a href="#cb1316-4" aria-hidden="true"></a>    <span class="fu">}</span></span>
+<span id="cb1316-5"><a href="#cb1316-5" aria-hidden="true"></a><span class="fu">}</span></span></code></pre></div>
 <p>Note that adding a permission can fail if a conflicting permission already exists for the file/folder.</p>
 <p>To update an existing permission, include both the Permission ID and the new <code>roles</code> to be assigned. <code>roles</code> is the only property that can be changed.</p>
 <p>To remove permissions, pass in a blob containing only the permissions you wish to keep (which can be empty, to remove all.) Note that the <code>owner</code> role will be ignored, as it cannot be removed.</p>
@@ -31052,6 +31153,26 @@ <h3 id="metadata-13">Metadata</h3>
 </tbody>
 </table>
 <p>See the <a href="https://rclone.org/docs/#metadata">metadata</a> docs for more info.</p>
+<h3 id="impersonate-other-users-as-admin">Impersonate other users as Admin</h3>
+<p>Unlike Google Drive and impersonating any domain user via service accounts, OneDrive requires you to authenticate as an admin account, and manually setup a remote per user you wish to impersonate.</p>
+<ol type="1">
+<li>In <a href="https://admin.microsoft.com">Microsoft 365 Admin Center</a>, open each user you need to "impersonate" and go to the OneDrive section. There is a heading called "Get access to files", you need to click to create the link, this creates the link of the format <code>https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/</code> but also changes the permissions so you your admin user has access.</li>
+<li>Then in powershell run the following commands:</li>
+</ol>
+<pre class="console"><code>Install-Module Microsoft.Graph -Scope CurrentUser -Repository PSGallery -Force
+Import-Module Microsoft.Graph.Files
+Connect-MgGraph -Scopes &quot;Files.ReadWrite.All&quot;
+# Follow the steps to allow access to your admin user
+# Then run this for each user you want to impersonate to get the Drive ID
+Get-MgUserDefaultDrive -UserId &#39;{emailaddress}&#39;
+# This will give you output of the format:
+# Name     Id                                                                 DriveType CreatedDateTime
+# ----     --                                                                 --------- ---------------
+# OneDrive b!XYZ123                                                           business  14/10/2023 1:00:58 pm
+</code></pre>
+<ol start="3" type="1">
+<li>Then in rclone add a onedrive remote type, and use the <code>Type in driveID</code> with the DriveID you got in the previous step. One remote per user. It will then confirm the drive ID, and hopefully give you a message of <code>Found drive "root" of type "business"</code> and then include the URL of the format <code>https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/Documents</code></li>
+</ol>
 <h2 id="limitations-26">Limitations</h2>
 <p>If you don't use rclone for 90 days the refresh token will expire. This will result in authorization problems. This is easy to fix by running the <code>rclone config reconnect remote:</code> command to get a new token and refresh token.</p>
 <h3 id="naming">Naming</h3>
@@ -31097,7 +31218,7 @@ <h2 id="cleanup-4">Cleanup</h2>
 <pre><code>rclone cleanup --interactive remote:path/subdir # interactively remove all old version for path/subdir
 rclone cleanup remote:path/subdir               # unconditionally remove all old version for path/subdir</code></pre>
 <p><strong>NB</strong> Onedrive personal can't currently delete versions</p>
-<h2 id="troubleshooting-2">Troubleshooting</h2>
+<h2 id="troubleshooting-4">Troubleshooting</h2>
 <h3 id="excessive-throttling-or-blocked-on-sharepoint">Excessive throttling or blocked on SharePoint</h3>
 <p>If you experience excessive throttling or is being blocked on SharePoint then it may help to set the user agent explicitly with a flag like this: <code>--user-agent "ISV|rclone.org|rclone/v1.55.1"</code></p>
 <p>The specific details can be found in the Microsoft document: <a href="https://docs.microsoft.com/en-us/sharepoint/dev/general-development/how-to-avoid-getting-throttled-or-blocked-in-sharepoint-online#how-to-decorate-your-http-traffic-to-avoid-throttling">Avoid getting throttled or blocked in SharePoint Online</a></p>
@@ -33067,7 +33188,7 @@ <h4 id="swift-description">--swift-description</h4>
 </ul>
 <h2 id="limitations-30">Limitations</h2>
 <p>The Swift API doesn't return a correct MD5SUM for segmented files (Dynamic or Static Large Objects) so rclone won't check or use the MD5SUM for these.</p>
-<h2 id="troubleshooting-3">Troubleshooting</h2>
+<h2 id="troubleshooting-5">Troubleshooting</h2>
 <h3 id="rclone-gives-failed-to-create-file-system-for-remote-bad-request">Rclone gives Failed to create file system for "remote:": Bad Request</h3>
 <p>Due to an oddity of the underlying swift library, it gives a "Bad Request" error rather than a more sensible error when the authentication fails for Swift.</p>
 <p>So this most likely means your username / password is wrong. You can investigate further with the <code>--dump-bodies</code> flag.</p>
@@ -38190,6 +38311,43 @@ <h3 id="noop">noop</h3>
 <li>"error": return an error based on option value</li>
 </ul>
 <h1 id="changelog-1">Changelog</h1>
+<h2 id="v1.69.1---2025-02-14">v1.69.1 - 2025-02-14</h2>
+<p><a href="https://github.com/rclone/rclone/compare/v1.69.0...v1.69.1">See commits</a></p>
+<ul>
+<li>Bug Fixes
+<ul>
+<li>lib/oauthutil: Fix redirect URL mismatch errors (Nick Craig-Wood)</li>
+<li>bisync: Fix listings missing concurrent modifications (nielash)</li>
+<li>serve s3: Fix list objects encoding-type (Nick Craig-Wood)</li>
+<li>fs: Fix confusing "didn't find section in config file" error (Nick Craig-Wood)</li>
+<li>doc fixes (Christoph Berger, Dimitri Papadopoulos, Matt Ickstadt, Nick Craig-Wood, Tim White, Zachary Vorhies)</li>
+<li>build: Added parallel docker builds and caching for go build in the container (Anagh Kumar Baranwal)</li>
+</ul></li>
+<li>VFS
+<ul>
+<li>Fix the cache failing to upload symlinks when <code>--links</code> was specified (Nick Craig-Wood)</li>
+<li>Fix race detected by race detector (Nick Craig-Wood)</li>
+<li>Close the change notify channel on Shutdown (izouxv)</li>
+</ul></li>
+<li>B2
+<ul>
+<li>Fix "fatal error: concurrent map writes" (Nick Craig-Wood)</li>
+</ul></li>
+<li>Iclouddrive
+<ul>
+<li>Add notes on ADP and Missing PCS cookies (Nick Craig-Wood)</li>
+</ul></li>
+<li>Onedrive
+<ul>
+<li>Mark German (de) region as deprecated (Nick Craig-Wood)</li>
+</ul></li>
+<li>S3
+<ul>
+<li>Added new storage class to magalu provider (Bruno Fernandes)</li>
+<li>Add DigitalOcean regions SFO2, LON1, TOR1, BLR1 (jkpe)</li>
+<li>Add latest Linode Object Storage endpoints (jbagwell-akamai)</li>
+</ul></li>
+</ul>
 <h2 id="v1.69.0---2025-01-12">v1.69.0 - 2025-01-12</h2>
 <p><a href="https://github.com/rclone/rclone/compare/v1.68.0...v1.69.0">See commits</a></p>
 <ul>
diff --git a/MANUAL.md b/MANUAL.md
index 8d2f405fef9f6..889d4fec9ddcf 100644
--- a/MANUAL.md
+++ b/MANUAL.md
@@ -1,7 +1,78 @@
 % rclone(1) User Manual
 % Nick Craig-Wood
-% Jan 12, 2025
+% Feb 14, 2025
 
+# NAME
+
+rclone - manage files on cloud storage
+
+# SYNOPSIS
+
+```
+Usage:
+  rclone [flags]
+  rclone [command]
+
+Available commands:
+  about       Get quota information from the remote.
+  authorize   Remote authorization.
+  backend     Run a backend-specific command.
+  bisync      Perform bidirectional synchronization between two paths.
+  cat         Concatenates any files and sends them to stdout.
+  check       Checks the files in the source and destination match.
+  checksum    Checks the files in the destination against a SUM file.
+  cleanup     Clean up the remote if possible.
+  completion  Output completion script for a given shell.
+  config      Enter an interactive configuration session.
+  copy        Copy files from source to dest, skipping identical files.
+  copyto      Copy files from source to dest, skipping identical files.
+  copyurl     Copy the contents of the URL supplied content to dest:path.
+  cryptcheck  Cryptcheck checks the integrity of an encrypted remote.
+  cryptdecode Cryptdecode returns unencrypted file names.
+  dedupe      Interactively find duplicate filenames and delete/rename them.
+  delete      Remove the files in path.
+  deletefile  Remove a single file from remote.
+  gendocs     Output markdown docs for rclone to the directory supplied.
+  gitannex    Speaks with git-annex over stdin/stdout.
+  hashsum     Produces a hashsum file for all the objects in the path.
+  help        Show help for rclone commands, flags and backends.
+  link        Generate public link to file/folder.
+  listremotes List all the remotes in the config file and defined in environment variables.
+  ls          List the objects in the path with size and path.
+  lsd         List all directories/containers/buckets in the path.
+  lsf         List directories and objects in remote:path formatted for parsing.
+  lsjson      List directories and objects in the path in JSON format.
+  lsl         List the objects in path with modification time, size and path.
+  md5sum      Produces an md5sum file for all the objects in the path.
+  mkdir       Make the path if it doesn't already exist.
+  mount       Mount the remote as file system on a mountpoint.
+  move        Move files from source to dest.
+  moveto      Move file or directory from source to dest.
+  ncdu        Explore a remote with a text based user interface.
+  nfsmount    Mount the remote as file system on a mountpoint.
+  obscure     Obscure password for use in the rclone config file.
+  purge       Remove the path and all of its contents.
+  rc          Run a command against a running rclone.
+  rcat        Copies standard input to file on remote.
+  rcd         Run rclone listening to remote control commands only.
+  rmdir       Remove the empty directory at path.
+  rmdirs      Remove empty directories under the path.
+  selfupdate  Update the rclone binary.
+  serve       Serve a remote over a protocol.
+  settier     Changes storage class/tier of objects in remote.
+  sha1sum     Produces an sha1sum file for all the objects in the path.
+  size        Prints the total size and number of objects in remote:path.
+  sync        Make source and dest identical, modifying destination only.
+  test        Run a test command
+  touch       Create new file or change file modification time.
+  tree        List the contents of the remote in a tree like fashion.
+  version     Show the version number.
+
+Use "rclone [command] --help" for more information about a command.
+Use "rclone help flags" for to see the global flags.
+Use "rclone help backends" for a list of supported services.
+
+```
 # Rclone syncs your files to cloud storage
 
 <img width="50%" src="https://rclone.org/img/logo_on_light__horizontal_color.svg" alt="rclone logo" style="float:right; padding: 5px;" >
@@ -1690,6 +1761,9 @@ include/exclude filters - everything will be removed.  Use the
 delete files. To delete empty directories only, use command
 [rmdir](https://rclone.org/commands/rclone_rmdir/) or [rmdirs](https://rclone.org/commands/rclone_rmdirs/).
 
+The concurrency of this operation is controlled by the `--checkers` global flag. However, some backends will
+implement this command directly, in which case `--checkers` will be ignored.
+
 **Important**: Since this can cause data loss, test first with the
 `--dry-run` or the `--interactive`/`-i` flag.
 
@@ -3745,12 +3819,12 @@ password to re-encrypt the config.
 
 When `--password-command` is called to change the password then the
 environment variable `RCLONE_PASSWORD_CHANGE=1` will be set. So if
-changing passwords programatically you can use the environment
+changing passwords programmatically you can use the environment
 variable to distinguish which password you must supply.
 
 Alternatively you can remove the password first (with `rclone config
 encryption remove`), then set it again with this command which may be
-easier if you don't mind the unecrypted config file being on the disk
+easier if you don't mind the unencrypted config file being on the disk
 briefly.
 
 
@@ -4290,7 +4364,7 @@ destination if there is one with the same name.
 Setting `--stdout` or making the output file name `-`
 will cause the output to be written to standard output.
 
-## Troublshooting
+## Troubleshooting
 
 If you can't get `rclone copyurl` to work then here are some things you can try:
 
@@ -10581,7 +10655,7 @@ that it uses an on disk cache, but the cache entries are held as
 symlinks. Rclone will use the handle of the underlying file as the NFS
 handle which improves performance. This sort of cache can't be backed
 up and restored as the underlying handles will change. This is Linux
-only. It requres running rclone as root or with `CAP_DAC_READ_SEARCH`.
+only. It requires running rclone as root or with `CAP_DAC_READ_SEARCH`.
 You can run rclone with this extra permission by doing this to the
 rclone binary `sudo setcap cap_dac_read_search+ep /path/to/rclone`.
 
@@ -11408,7 +11482,7 @@ secret_access_key = SECRET_ACCESS_KEY
 use_multipart_uploads = false
 ```
 
-Note that setting `disable_multipart_uploads = true` is to work around
+Note that setting `use_multipart_uploads = false` is to work around
 [a bug](#bugs) which will be fixed in due course.
 
 ## Bugs
@@ -14444,6 +14518,11 @@ it to `false`.  It is also possible to specify `--boolean=false` or
 parsed as `--boolean` and the `false` is parsed as an extra command
 line argument for rclone.
 
+Options documented to take a `stringArray` parameter accept multiple 
+values. To pass more than one value, repeat the option; for example: 
+`--include value1 --include value2`.
+
+
 ### Time or duration options {#time-option}
 
 TIME or DURATION options can be specified as a duration string or a
@@ -16755,7 +16834,7 @@ so they take exactly the same form.
 The options set by environment variables can be seen with the `-vv` flag, e.g. `rclone version -vv`.
 
 Options that can appear multiple times (type `stringArray`) are
-treated slighly differently as environment variables can only be
+treated slightly differently as environment variables can only be
 defined once. In order to allow a simple mechanism for adding one or
 many items, the input is treated as a [CSV encoded](https://godoc.org/encoding/csv)
 string. For example
@@ -19937,7 +20016,7 @@ the `--vfs-cache-mode` is off, it will return an empty result.
        ],
     }
 
-The `expiry` time is the time until the file is elegible for being
+The `expiry` time is the time until the file is eligible for being
 uploaded in floating point seconds. This may go negative. As rclone
 only transfers `--transfers` files at once, only the lowest
 `--transfers` expiry times will have `uploading` as `true`. So there
@@ -21018,7 +21097,7 @@ Flags for general networking and HTTP stuff.
       --tpslimit float                     Limit HTTP transactions per second to this
       --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
       --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.0")
+      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.1")
 ```
 
 
@@ -23066,7 +23145,7 @@ See the [bisync filters](#filtering) section and generic
 [--filter-from](https://rclone.org/filtering/#filter-from-read-filtering-patterns-from-a-file)
 documentation.
 An [example filters file](#example-filters-file) contains filters for
-non-allowed files for synching with Dropbox.
+non-allowed files for syncing with Dropbox.
 
 If you make changes to your filters file then bisync requires a run
 with `--resync`. This is a safety feature, which prevents existing files
@@ -23243,7 +23322,7 @@ Using `--check-sync=false` will disable it and may significantly reduce the
 sync run times for very large numbers of files.
 
 The check may be run manually with `--check-sync=only`. It runs only the
-integrity check and terminates without actually synching.
+integrity check and terminates without actually syncing.
 
 Note that currently, `--check-sync` **only checks listing snapshots and NOT the
 actual files on the remotes.** Note also that the listing snapshots will not
@@ -23720,7 +23799,7 @@ The `--include*`, `--exclude*`, and `--filter` flags are also supported.
 
 ### How to filter directories
 
-Filtering portions of the directory tree is a critical feature for synching.
+Filtering portions of the directory tree is a critical feature for syncing.
 
 Examples of directory trees (always beneath the Path1/Path2 root level)
 you may want to exclude from your sync:
@@ -23829,7 +23908,7 @@ quashed by adding `--quiet` to the bisync command line.
 
 ## Example exclude-style filters files for use with Dropbox {#exclude-filters}
 
-- Dropbox disallows synching the listed temporary and configuration/data files.
+- Dropbox disallows syncing the listed temporary and configuration/data files.
   The `- <filename>` filters exclude these files where ever they may occur
   in the sync tree. Consider adding similar exclusions for file types
   you don't need to sync, such as core dump and software build files.
@@ -24163,7 +24242,7 @@ test command flags can be equally prefixed by a single `-` or double dash.
 
 - `go test . -case basic -remote local -remote2 local`
   runs the `test_basic` test case using only the local filesystem,
-  synching one local directory with another local directory.
+  syncing one local directory with another local directory.
   Test script output is to the console, while commands within scenario.txt
   have their output sent to the `.../workdir/test.log` file,
   which is finally compared to the golden copy.
@@ -24394,6 +24473,9 @@ about _Unison_ and synchronization in general.
 
 ## Changelog
 
+### `v1.69.1`
+* Fixed an issue causing listings to not capture concurrent modifications under certain conditions
+
 ### `v1.68`
 * Fixed an issue affecting backends that round modtimes to a lower precision.
 
@@ -25680,7 +25762,7 @@ Notes on above:
    that `USER_NAME` has been created.
 2. The Resource entry must include both resource ARNs, as one implies
    the bucket and the other implies the bucket's objects.
-3. When using [s3-no-check-bucket](#s3-no-check-bucket) and the bucket already exsits, the `"arn:aws:s3:::BUCKET_NAME"` doesn't have to be included.
+3. When using [s3-no-check-bucket](#s3-no-check-bucket) and the bucket already exists, the `"arn:aws:s3:::BUCKET_NAME"` doesn't have to be included.
 
 For reference, [here's an Ansible script](https://gist.github.com/ebridges/ebfc9042dd7c756cd101cfa807b7ae2b)
 that will generate one or more buckets that will work with `rclone sync`.
@@ -28658,7 +28740,7 @@ location_constraint = au-nsw
 ### Rclone Serve S3 {#rclone}
 
 Rclone can serve any remote over the S3 protocol. For details see the
-[rclone serve s3](https://rclone.org/commands/rclone_serve_http/) documentation.
+[rclone serve s3](https://rclone.org/commands/rclone_serve_s3/) documentation.
 
 For example, to serve `remote:path` over s3, run the server like this:
 
@@ -28678,8 +28760,8 @@ secret_access_key = SECRET_ACCESS_KEY
 use_multipart_uploads = false
 ```
 
-Note that setting `disable_multipart_uploads = true` is to work around
-[a bug](https://rclone.org/commands/rclone_serve_http/#bugs) which will be fixed in due course.
+Note that setting `use_multipart_uploads = false` is to work around
+[a bug](https://rclone.org/commands/rclone_serve_s3/#bugs) which will be fixed in due course.
 
 ### Scaleway
 
@@ -29775,27 +29857,49 @@ Option endpoint.
 Endpoint for Linode Object Storage API.
 Choose a number from below, or type in your own value.
 Press Enter to leave empty.
- 1 / Atlanta, GA (USA), us-southeast-1
+ 1 / Amsterdam (Netherlands), nl-ams-1
+   \ (nl-ams-1.linodeobjects.com)
+ 2 / Atlanta, GA (USA), us-southeast-1
    \ (us-southeast-1.linodeobjects.com)
- 2 / Chicago, IL (USA), us-ord-1
+ 3 / Chennai (India), in-maa-1
+   \ (in-maa-1.linodeobjects.com)
+ 4 / Chicago, IL (USA), us-ord-1
    \ (us-ord-1.linodeobjects.com)
- 3 / Frankfurt (Germany), eu-central-1
+ 5 / Frankfurt (Germany), eu-central-1
    \ (eu-central-1.linodeobjects.com)
- 4 / Milan (Italy), it-mil-1
+ 6 / Jakarta (Indonesia), id-cgk-1
+   \ (id-cgk-1.linodeobjects.com)
+ 7 / London 2 (Great Britain), gb-lon-1
+   \ (gb-lon-1.linodeobjects.com)
+ 8 / Los Angeles, CA (USA), us-lax-1
+   \ (us-lax-1.linodeobjects.com)
+ 9 / Madrid (Spain), es-mad-1
+   \ (es-mad-1.linodeobjects.com)
+10 / Melbourne (Australia), au-mel-1
+   \ (au-mel-1.linodeobjects.com)
+11 / Miami, FL (USA), us-mia-1
+   \ (us-mia-1.linodeobjects.com)
+12 / Milan (Italy), it-mil-1
    \ (it-mil-1.linodeobjects.com)
- 5 / Newark, NJ (USA), us-east-1
+13 / Newark, NJ (USA), us-east-1
    \ (us-east-1.linodeobjects.com)
- 6 / Paris (France), fr-par-1
+14 / Osaka (Japan), jp-osa-1
+   \ (jp-osa-1.linodeobjects.com)
+15 / Paris (France), fr-par-1
    \ (fr-par-1.linodeobjects.com)
- 7 / Seattle, WA (USA), us-sea-1
+16 / São Paulo (Brazil), br-gru-1
+   \ (br-gru-1.linodeobjects.com)
+17 / Seattle, WA (USA), us-sea-1
    \ (us-sea-1.linodeobjects.com)
- 8 / Singapore ap-south-1
+18 / Singapore, ap-south-1
    \ (ap-south-1.linodeobjects.com)
- 9 / Stockholm (Sweden), se-sto-1
+19 / Singapore 2, sg-sin-1
+   \ (sg-sin-1.linodeobjects.com)
+20 / Stockholm (Sweden), se-sto-1
    \ (se-sto-1.linodeobjects.com)
-10 / Washington, DC, (USA), us-iad-1
+21 / Washington, DC, (USA), us-iad-1
    \ (us-iad-1.linodeobjects.com)
-endpoint> 3
+endpoint> 5
 
 Option acl.
 Canned ACL used when creating buckets and storing or copying objects.
@@ -34415,7 +34519,7 @@ strong random number generator.  The nonce is incremented for each
 chunk read making sure each nonce is unique for each block written.
 The chance of a nonce being reused is minuscule.  If you wrote an
 exabyte of data (10¹⁸ bytes) you would have a probability of
-approximately 2×10⁻³² of re-using a nonce.
+approximately 2×10⁻³² of reusing a nonce.
 
 #### Chunk
 
@@ -41561,7 +41665,7 @@ Enter a value.
 config_2fa> 2FACODE
 Remote config
 --------------------
-[koofr]
+[iclouddrive]
 - type: iclouddrive
 - apple_id: APPLEID
 - password: *** ENCRYPTED ***
@@ -41578,6 +41682,20 @@ y/e/d> y
 
 ADP is currently unsupported and need to be disabled
 
+On iPhone, Settings `>` Apple Account `>` iCloud `>` 'Access iCloud Data on the Web' must be ON, and 'Advanced Data Protection' OFF.
+
+## Troubleshooting
+
+### Missing PCS cookies from the request
+
+This means you have Advanced Data Protection (ADP) turned on. This is not supported at the moment. If you want to use rclone you will have to turn it off. See above for how to turn it off.
+
+You will need to clear the `cookies` and the `trust_token` fields in the config. Or you can delete the remote config and start again.
+
+You should then run `rclone reconnect remote:`.
+
+Note that changing the ADP setting may not take effect immediately - you may need to wait a few hours or a day before you can get rclone to work - keep clearing the config entry and running `rclone reconnect remote:` until rclone functions properly.
+
 
 ### Standard options
 
@@ -46035,7 +46153,7 @@ Properties:
     - "us"
         - Microsoft Cloud for US Government
     - "de"
-        - Microsoft Cloud Germany
+        - Microsoft Cloud Germany (deprecated - try global region first).
     - "cn"
         - Azure and Office 365 operated by Vnet Group in China
 
@@ -46652,6 +46770,28 @@ See the [metadata](https://rclone.org/docs/#metadata) docs for more info.
 
 
 
+### Impersonate other users as Admin
+
+Unlike Google Drive and impersonating any domain user via service accounts, OneDrive requires you to authenticate as an admin account, and manually setup a remote per user you wish to impersonate.
+
+1. In [Microsoft 365 Admin Center](https://admin.microsoft.com), open each user you need to "impersonate" and go to the OneDrive section. There is a heading called "Get access to files", you need to click to create the link, this creates the link of the format `https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/` but also changes the permissions so you your admin user has access.
+2. Then in powershell run the following commands:
+```console
+Install-Module Microsoft.Graph -Scope CurrentUser -Repository PSGallery -Force
+Import-Module Microsoft.Graph.Files
+Connect-MgGraph -Scopes "Files.ReadWrite.All"
+# Follow the steps to allow access to your admin user
+# Then run this for each user you want to impersonate to get the Drive ID
+Get-MgUserDefaultDrive -UserId '{emailaddress}'
+# This will give you output of the format:
+# Name     Id                                                                 DriveType CreatedDateTime
+# ----     --                                                                 --------- ---------------
+# OneDrive b!XYZ123                                                           business  14/10/2023 1:00:58 pm
+
+```
+3. Then in rclone add a onedrive remote type, and use the `Type in driveID` with the DriveID you got in the previous step. One remote per user. It will then confirm the drive ID, and hopefully give you a message of `Found drive "root" of type "business"` and then include the URL of the format `https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/Documents`
+
+
 ## Limitations
 
 If you don't use rclone for 90 days the refresh token will
@@ -56509,6 +56649,32 @@ Options:
 
 # Changelog
 
+## v1.69.1 - 2025-02-14
+
+[See commits](https://github.com/rclone/rclone/compare/v1.69.0...v1.69.1)
+
+* Bug Fixes
+    * lib/oauthutil: Fix redirect URL mismatch errors (Nick Craig-Wood)
+    * bisync: Fix listings missing concurrent modifications (nielash)
+    * serve s3: Fix list objects encoding-type (Nick Craig-Wood)
+    * fs: Fix confusing "didn't find section in config file" error (Nick Craig-Wood)
+    * doc fixes (Christoph Berger, Dimitri Papadopoulos, Matt Ickstadt, Nick Craig-Wood, Tim White, Zachary Vorhies)
+    * build: Added parallel docker builds and caching for go build in the container (Anagh Kumar Baranwal)
+* VFS
+    * Fix the cache failing to upload symlinks when `--links` was specified (Nick Craig-Wood)
+    * Fix race detected by race detector (Nick Craig-Wood)
+    * Close the change notify channel on Shutdown (izouxv)
+* B2
+    * Fix "fatal error: concurrent map writes" (Nick Craig-Wood)
+* Iclouddrive
+    * Add notes on ADP and Missing PCS cookies (Nick Craig-Wood)
+* Onedrive
+    * Mark German (de) region as deprecated (Nick Craig-Wood)
+* S3
+    * Added new storage class to magalu provider (Bruno Fernandes)
+    * Add DigitalOcean regions SFO2, LON1, TOR1, BLR1 (jkpe)
+    * Add latest Linode Object Storage endpoints (jbagwell-akamai)
+
 ## v1.69.0 - 2025-01-12
 
 [See commits](https://github.com/rclone/rclone/compare/v1.68.0...v1.69.0)
diff --git a/MANUAL.txt b/MANUAL.txt
index 9247df8dce283..ea2b464f91c23 100644
--- a/MANUAL.txt
+++ b/MANUAL.txt
@@ -1,6 +1,75 @@
 rclone(1) User Manual
 Nick Craig-Wood
-Jan 12, 2025
+Feb 14, 2025
+
+NAME
+
+rclone - manage files on cloud storage
+
+SYNOPSIS
+
+    Usage:
+      rclone [flags]
+      rclone [command]
+
+    Available commands:
+      about       Get quota information from the remote.
+      authorize   Remote authorization.
+      backend     Run a backend-specific command.
+      bisync      Perform bidirectional synchronization between two paths.
+      cat         Concatenates any files and sends them to stdout.
+      check       Checks the files in the source and destination match.
+      checksum    Checks the files in the destination against a SUM file.
+      cleanup     Clean up the remote if possible.
+      completion  Output completion script for a given shell.
+      config      Enter an interactive configuration session.
+      copy        Copy files from source to dest, skipping identical files.
+      copyto      Copy files from source to dest, skipping identical files.
+      copyurl     Copy the contents of the URL supplied content to dest:path.
+      cryptcheck  Cryptcheck checks the integrity of an encrypted remote.
+      cryptdecode Cryptdecode returns unencrypted file names.
+      dedupe      Interactively find duplicate filenames and delete/rename them.
+      delete      Remove the files in path.
+      deletefile  Remove a single file from remote.
+      gendocs     Output markdown docs for rclone to the directory supplied.
+      gitannex    Speaks with git-annex over stdin/stdout.
+      hashsum     Produces a hashsum file for all the objects in the path.
+      help        Show help for rclone commands, flags and backends.
+      link        Generate public link to file/folder.
+      listremotes List all the remotes in the config file and defined in environment variables.
+      ls          List the objects in the path with size and path.
+      lsd         List all directories/containers/buckets in the path.
+      lsf         List directories and objects in remote:path formatted for parsing.
+      lsjson      List directories and objects in the path in JSON format.
+      lsl         List the objects in path with modification time, size and path.
+      md5sum      Produces an md5sum file for all the objects in the path.
+      mkdir       Make the path if it doesn't already exist.
+      mount       Mount the remote as file system on a mountpoint.
+      move        Move files from source to dest.
+      moveto      Move file or directory from source to dest.
+      ncdu        Explore a remote with a text based user interface.
+      nfsmount    Mount the remote as file system on a mountpoint.
+      obscure     Obscure password for use in the rclone config file.
+      purge       Remove the path and all of its contents.
+      rc          Run a command against a running rclone.
+      rcat        Copies standard input to file on remote.
+      rcd         Run rclone listening to remote control commands only.
+      rmdir       Remove the empty directory at path.
+      rmdirs      Remove empty directories under the path.
+      selfupdate  Update the rclone binary.
+      serve       Serve a remote over a protocol.
+      settier     Changes storage class/tier of objects in remote.
+      sha1sum     Produces an sha1sum file for all the objects in the path.
+      size        Prints the total size and number of objects in remote:path.
+      sync        Make source and dest identical, modifying destination only.
+      test        Run a test command
+      touch       Create new file or change file modification time.
+      tree        List the contents of the remote in a tree like fashion.
+      version     Show the version number.
+
+    Use "rclone [command] --help" for more information about a command.
+    Use "rclone help flags" for to see the global flags.
+    Use "rclone help backends" for a list of supported services.
 
 Rclone syncs your files to cloud storage
 
@@ -1600,6 +1669,10 @@ include/exclude filters - everything will be removed. Use the delete
 command if you want to selectively delete files. To delete empty
 directories only, use command rmdir or rmdirs.
 
+The concurrency of this operation is controlled by the --checkers global
+flag. However, some backends will implement this command directly, in
+which case --checkers will be ignored.
+
 Important: Since this can cause data loss, test first with the --dry-run
 or the --interactive/-i flag.
 
@@ -3467,12 +3540,12 @@ re-encrypt the config.
 
 When --password-command is called to change the password then the
 environment variable RCLONE_PASSWORD_CHANGE=1 will be set. So if
-changing passwords programatically you can use the environment variable
+changing passwords programmatically you can use the environment variable
 to distinguish which password you must supply.
 
 Alternatively you can remove the password first (with
 rclone config encryption remove), then set it again with this command
-which may be easier if you don't mind the unecrypted config file being
+which may be easier if you don't mind the unencrypted config file being
 on the disk briefly.
 
     rclone config encryption set [flags]
@@ -3949,7 +4022,7 @@ there is one with the same name.
 Setting --stdout or making the output file name - will cause the output
 to be written to standard output.
 
-Troublshooting
+Troubleshooting
 
 If you can't get rclone copyurl to work then here are some things you
 can try:
@@ -10102,7 +10175,7 @@ uses an on disk cache, but the cache entries are held as symlinks.
 Rclone will use the handle of the underlying file as the NFS handle
 which improves performance. This sort of cache can't be backed up and
 restored as the underlying handles will change. This is Linux only. It
-requres running rclone as root or with CAP_DAC_READ_SEARCH. You can run
+requires running rclone as root or with CAP_DAC_READ_SEARCH. You can run
 rclone with this extra permission by doing this to the rclone binary
 sudo setcap cap_dac_read_search+ep /path/to/rclone.
 
@@ -10903,8 +10976,8 @@ which is defined like this:
     secret_access_key = SECRET_ACCESS_KEY
     use_multipart_uploads = false
 
-Note that setting disable_multipart_uploads = true is to work around a
-bug which will be fixed in due course.
+Note that setting use_multipart_uploads = false is to work around a bug
+which will be fixed in due course.
 
 Bugs
 
@@ -13895,6 +13968,10 @@ also possible to specify --boolean=false or --boolean=true. Note that
 --boolean false is not valid - this is parsed as --boolean and the false
 is parsed as an extra command line argument for rclone.
 
+Options documented to take a stringArray parameter accept multiple
+values. To pass more than one value, repeat the option; for example:
+--include value1 --include value2.
+
 Time or duration options
 
 TIME or DURATION options can be specified as a duration string or a time
@@ -16177,7 +16254,7 @@ The options set by environment variables can be seen with the -vv flag,
 e.g. rclone version -vv.
 
 Options that can appear multiple times (type stringArray) are treated
-slighly differently as environment variables can only be defined once.
+slightly differently as environment variables can only be defined once.
 In order to allow a simple mechanism for adding one or many items, the
 input is treated as a CSV encoded string. For example
 
@@ -19420,7 +19497,7 @@ This is only useful if --vfs-cache-mode > off. If you call it when the
        ],
     }
 
-The expiry time is the time until the file is elegible for being
+The expiry time is the time until the file is eligible for being
 uploaded in floating point seconds. This may go negative. As rclone only
 transfers --transfers files at once, only the lowest --transfers expiry
 times will have uploading as true. So there may be files with negative
@@ -20569,7 +20646,7 @@ Flags for general networking and HTTP stuff.
           --tpslimit float                     Limit HTTP transactions per second to this
           --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
           --use-cookies                        Enable session cookiejar
-          --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.0")
+          --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.1")
 
 Performance
 
@@ -22531,7 +22608,7 @@ Also see the all files changed check.
 By using rclone filter features you can exclude file types or directory
 sub-trees from the sync. See the bisync filters section and generic
 --filter-from documentation. An example filters file contains filters
-for non-allowed files for synching with Dropbox.
+for non-allowed files for syncing with Dropbox.
 
 If you make changes to your filters file then bisync requires a run with
 --resync. This is a safety feature, which prevents existing files on the
@@ -22704,7 +22781,7 @@ of a sync. Using --check-sync=false will disable it and may
 significantly reduce the sync run times for very large numbers of files.
 
 The check may be run manually with --check-sync=only. It runs only the
-integrity check and terminates without actually synching.
+integrity check and terminates without actually syncing.
 
 Note that currently, --check-sync only checks listing snapshots and NOT
 the actual files on the remotes. Note also that the listing snapshots
@@ -23237,7 +23314,7 @@ supported.
 How to filter directories
 
 Filtering portions of the directory tree is a critical feature for
-synching.
+syncing.
 
 Examples of directory trees (always beneath the Path1/Path2 root level)
 you may want to exclude from your sync: - Directory trees containing
@@ -23348,7 +23425,7 @@ This noise can be quashed by adding --quiet to the bisync command line.
 
 Example exclude-style filters files for use with Dropbox
 
--   Dropbox disallows synching the listed temporary and
+-   Dropbox disallows syncing the listed temporary and
     configuration/data files. The `- ` filters exclude these files where
     ever they may occur in the sync tree. Consider adding similar
     exclusions for file types you don't need to sync, such as core dump
@@ -23668,7 +23745,7 @@ dash.
 Running tests
 
 -   go test . -case basic -remote local -remote2 local runs the
-    test_basic test case using only the local filesystem, synching one
+    test_basic test case using only the local filesystem, syncing one
     local directory with another local directory. Test script output is
     to the console, while commands within scenario.txt have their output
     sent to the .../workdir/test.log file, which is finally compared to
@@ -23901,6 +23978,11 @@ Unison and synchronization in general.
 
 Changelog
 
+v1.69.1
+
+-   Fixed an issue causing listings to not capture concurrent
+    modifications under certain conditions
+
 v1.68
 
 -   Fixed an issue affecting backends that round modtimes to a lower
@@ -25192,7 +25274,7 @@ Notes on above:
     that USER_NAME has been created.
 2.  The Resource entry must include both resource ARNs, as one implies
     the bucket and the other implies the bucket's objects.
-3.  When using s3-no-check-bucket and the bucket already exsits, the
+3.  When using s3-no-check-bucket and the bucket already exists, the
     "arn:aws:s3:::BUCKET_NAME" doesn't have to be included.
 
 For reference, here's an Ansible script that will generate one or more
@@ -28155,8 +28237,8 @@ this:
     secret_access_key = SECRET_ACCESS_KEY
     use_multipart_uploads = false
 
-Note that setting disable_multipart_uploads = true is to work around a
-bug which will be fixed in due course.
+Note that setting use_multipart_uploads = false is to work around a bug
+which will be fixed in due course.
 
 Scaleway
 
@@ -29203,27 +29285,49 @@ This will guide you through an interactive setup process.
     Endpoint for Linode Object Storage API.
     Choose a number from below, or type in your own value.
     Press Enter to leave empty.
-     1 / Atlanta, GA (USA), us-southeast-1
+     1 / Amsterdam (Netherlands), nl-ams-1
+       \ (nl-ams-1.linodeobjects.com)
+     2 / Atlanta, GA (USA), us-southeast-1
        \ (us-southeast-1.linodeobjects.com)
-     2 / Chicago, IL (USA), us-ord-1
+     3 / Chennai (India), in-maa-1
+       \ (in-maa-1.linodeobjects.com)
+     4 / Chicago, IL (USA), us-ord-1
        \ (us-ord-1.linodeobjects.com)
-     3 / Frankfurt (Germany), eu-central-1
+     5 / Frankfurt (Germany), eu-central-1
        \ (eu-central-1.linodeobjects.com)
-     4 / Milan (Italy), it-mil-1
+     6 / Jakarta (Indonesia), id-cgk-1
+       \ (id-cgk-1.linodeobjects.com)
+     7 / London 2 (Great Britain), gb-lon-1
+       \ (gb-lon-1.linodeobjects.com)
+     8 / Los Angeles, CA (USA), us-lax-1
+       \ (us-lax-1.linodeobjects.com)
+     9 / Madrid (Spain), es-mad-1
+       \ (es-mad-1.linodeobjects.com)
+    10 / Melbourne (Australia), au-mel-1
+       \ (au-mel-1.linodeobjects.com)
+    11 / Miami, FL (USA), us-mia-1
+       \ (us-mia-1.linodeobjects.com)
+    12 / Milan (Italy), it-mil-1
        \ (it-mil-1.linodeobjects.com)
-     5 / Newark, NJ (USA), us-east-1
+    13 / Newark, NJ (USA), us-east-1
        \ (us-east-1.linodeobjects.com)
-     6 / Paris (France), fr-par-1
+    14 / Osaka (Japan), jp-osa-1
+       \ (jp-osa-1.linodeobjects.com)
+    15 / Paris (France), fr-par-1
        \ (fr-par-1.linodeobjects.com)
-     7 / Seattle, WA (USA), us-sea-1
+    16 / São Paulo (Brazil), br-gru-1
+       \ (br-gru-1.linodeobjects.com)
+    17 / Seattle, WA (USA), us-sea-1
        \ (us-sea-1.linodeobjects.com)
-     8 / Singapore ap-south-1
+    18 / Singapore, ap-south-1
        \ (ap-south-1.linodeobjects.com)
-     9 / Stockholm (Sweden), se-sto-1
+    19 / Singapore 2, sg-sin-1
+       \ (sg-sin-1.linodeobjects.com)
+    20 / Stockholm (Sweden), se-sto-1
        \ (se-sto-1.linodeobjects.com)
-    10 / Washington, DC, (USA), us-iad-1
+    21 / Washington, DC, (USA), us-iad-1
        \ (us-iad-1.linodeobjects.com)
-    endpoint> 3
+    endpoint> 5
 
     Option acl.
     Canned ACL used when creating buckets and storing or copying objects.
@@ -33757,7 +33861,7 @@ The initial nonce is generated from the operating systems crypto strong
 random number generator. The nonce is incremented for each chunk read
 making sure each nonce is unique for each block written. The chance of a
 nonce being reused is minuscule. If you wrote an exabyte of data (10¹⁸
-bytes) you would have a probability of approximately 2×10⁻³² of re-using
+bytes) you would have a probability of approximately 2×10⁻³² of reusing
 a nonce.
 
 Chunk
@@ -40978,7 +41082,7 @@ This will guide you through an interactive setup process:
     config_2fa> 2FACODE
     Remote config
     --------------------
-    [koofr]
+    [iclouddrive]
     - type: iclouddrive
     - apple_id: APPLEID
     - password: *** ENCRYPTED ***
@@ -40994,6 +41098,27 @@ Advanced Data Protection
 
 ADP is currently unsupported and need to be disabled
 
+On iPhone, Settings > Apple Account > iCloud > 'Access iCloud Data on
+the Web' must be ON, and 'Advanced Data Protection' OFF.
+
+Troubleshooting
+
+Missing PCS cookies from the request
+
+This means you have Advanced Data Protection (ADP) turned on. This is
+not supported at the moment. If you want to use rclone you will have to
+turn it off. See above for how to turn it off.
+
+You will need to clear the cookies and the trust_token fields in the
+config. Or you can delete the remote config and start again.
+
+You should then run rclone reconnect remote:.
+
+Note that changing the ADP setting may not take effect immediately - you
+may need to wait a few hours or a day before you can get rclone to work
+- keep clearing the config entry and running rclone reconnect remote:
+until rclone functions properly.
+
 Standard options
 
 Here are the Standard options specific to iclouddrive (iCloud Drive).
@@ -45589,7 +45714,8 @@ Properties:
     -   "us"
         -   Microsoft Cloud for US Government
     -   "de"
-        -   Microsoft Cloud Germany
+        -   Microsoft Cloud Germany (deprecated - try global region
+            first).
     -   "cn"
         -   Azure and Office 365 operated by Vnet Group in China
 
@@ -46248,6 +46374,38 @@ Here are the possible system metadata items for the onedrive backend.
 
 See the metadata docs for more info.
 
+Impersonate other users as Admin
+
+Unlike Google Drive and impersonating any domain user via service
+accounts, OneDrive requires you to authenticate as an admin account, and
+manually setup a remote per user you wish to impersonate.
+
+1.  In Microsoft 365 Admin Center, open each user you need to
+    "impersonate" and go to the OneDrive section. There is a heading
+    called "Get access to files", you need to click to create the link,
+    this creates the link of the format
+    https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/
+    but also changes the permissions so you your admin user has access.
+2.  Then in powershell run the following commands:
+
+    Install-Module Microsoft.Graph -Scope CurrentUser -Repository PSGallery -Force
+    Import-Module Microsoft.Graph.Files
+    Connect-MgGraph -Scopes "Files.ReadWrite.All"
+    # Follow the steps to allow access to your admin user
+    # Then run this for each user you want to impersonate to get the Drive ID
+    Get-MgUserDefaultDrive -UserId '{emailaddress}'
+    # This will give you output of the format:
+    # Name     Id                                                                 DriveType CreatedDateTime
+    # ----     --                                                                 --------- ---------------
+    # OneDrive b!XYZ123                                                           business  14/10/2023 1:00:58 pm
+
+3.  Then in rclone add a onedrive remote type, and use the
+    Type in driveID with the DriveID you got in the previous step. One
+    remote per user. It will then confirm the drive ID, and hopefully
+    give you a message of Found drive "root" of type "business" and then
+    include the URL of the format
+    https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/Documents
+
 Limitations
 
 If you don't use rclone for 90 days the refresh token will expire. This
@@ -56157,6 +56315,37 @@ Options:
 
 Changelog
 
+v1.69.1 - 2025-02-14
+
+See commits
+
+-   Bug Fixes
+    -   lib/oauthutil: Fix redirect URL mismatch errors (Nick
+        Craig-Wood)
+    -   bisync: Fix listings missing concurrent modifications (nielash)
+    -   serve s3: Fix list objects encoding-type (Nick Craig-Wood)
+    -   fs: Fix confusing "didn't find section in config file" error
+        (Nick Craig-Wood)
+    -   doc fixes (Christoph Berger, Dimitri Papadopoulos, Matt
+        Ickstadt, Nick Craig-Wood, Tim White, Zachary Vorhies)
+    -   build: Added parallel docker builds and caching for go build in
+        the container (Anagh Kumar Baranwal)
+-   VFS
+    -   Fix the cache failing to upload symlinks when --links was
+        specified (Nick Craig-Wood)
+    -   Fix race detected by race detector (Nick Craig-Wood)
+    -   Close the change notify channel on Shutdown (izouxv)
+-   B2
+    -   Fix "fatal error: concurrent map writes" (Nick Craig-Wood)
+-   Iclouddrive
+    -   Add notes on ADP and Missing PCS cookies (Nick Craig-Wood)
+-   Onedrive
+    -   Mark German (de) region as deprecated (Nick Craig-Wood)
+-   S3
+    -   Added new storage class to magalu provider (Bruno Fernandes)
+    -   Add DigitalOcean regions SFO2, LON1, TOR1, BLR1 (jkpe)
+    -   Add latest Linode Object Storage endpoints (jbagwell-akamai)
+
 v1.69.0 - 2025-01-12
 
 See commits
diff --git a/docs/content/changelog.md b/docs/content/changelog.md
index e3170bbf7dbfc..0bdf7c317c0fc 100644
--- a/docs/content/changelog.md
+++ b/docs/content/changelog.md
@@ -5,6 +5,32 @@ description: "Rclone Changelog"
 
 # Changelog
 
+## v1.69.1 - 2025-02-14
+
+[See commits](https://github.com/rclone/rclone/compare/v1.69.0...v1.69.1)
+
+* Bug Fixes
+    * lib/oauthutil: Fix redirect URL mismatch errors (Nick Craig-Wood)
+    * bisync: Fix listings missing concurrent modifications (nielash)
+    * serve s3: Fix list objects encoding-type (Nick Craig-Wood)
+    * fs: Fix confusing "didn't find section in config file" error (Nick Craig-Wood)
+    * doc fixes (Christoph Berger, Dimitri Papadopoulos, Matt Ickstadt, Nick Craig-Wood, Tim White, Zachary Vorhies)
+    * build: Added parallel docker builds and caching for go build in the container (Anagh Kumar Baranwal)
+* VFS
+    * Fix the cache failing to upload symlinks when `--links` was specified (Nick Craig-Wood)
+    * Fix race detected by race detector (Nick Craig-Wood)
+    * Close the change notify channel on Shutdown (izouxv)
+* B2
+    * Fix "fatal error: concurrent map writes" (Nick Craig-Wood)
+* Iclouddrive
+    * Add notes on ADP and Missing PCS cookies (Nick Craig-Wood)
+* Onedrive
+    * Mark German (de) region as deprecated (Nick Craig-Wood)
+* S3
+    * Added new storage class to magalu provider (Bruno Fernandes)
+    * Add DigitalOcean regions SFO2, LON1, TOR1, BLR1 (jkpe)
+    * Add latest Linode Object Storage endpoints (jbagwell-akamai)
+
 ## v1.69.0 - 2025-01-12
 
 [See commits](https://github.com/rclone/rclone/compare/v1.68.0...v1.69.0)
diff --git a/docs/content/commands/rclone.md b/docs/content/commands/rclone.md
index 0921995de23a7..3890f0b9164ef 100644
--- a/docs/content/commands/rclone.md
+++ b/docs/content/commands/rclone.md
@@ -965,7 +965,7 @@ rclone [flags]
       --use-json-log                                        Use json log format
       --use-mmap                                            Use mmap allocator (see docs)
       --use-server-modtime                                  Use server modified time instead of object metadata
-      --user-agent string                                   Set the user-agent to a specified string (default "rclone/v1.69.0")
+      --user-agent string                                   Set the user-agent to a specified string (default "rclone/v1.69.1")
   -v, --verbose count                                       Print lots more stuff (repeat for more)
   -V, --version                                             Print the version number
       --webdav-auth-redirect                                Preserve authentication on redirect
diff --git a/docs/content/commands/rclone_config_encryption_set.md b/docs/content/commands/rclone_config_encryption_set.md
index b02dff900bd3d..780c086dc0b0b 100644
--- a/docs/content/commands/rclone_config_encryption_set.md
+++ b/docs/content/commands/rclone_config_encryption_set.md
@@ -21,12 +21,12 @@ password to re-encrypt the config.
 
 When `--password-command` is called to change the password then the
 environment variable `RCLONE_PASSWORD_CHANGE=1` will be set. So if
-changing passwords programatically you can use the environment
+changing passwords programmatically you can use the environment
 variable to distinguish which password you must supply.
 
 Alternatively you can remove the password first (with `rclone config
 encryption remove`), then set it again with this command which may be
-easier if you don't mind the unecrypted config file being on the disk
+easier if you don't mind the unencrypted config file being on the disk
 briefly.
 
 
diff --git a/docs/content/commands/rclone_copyurl.md b/docs/content/commands/rclone_copyurl.md
index 061644fa39368..2bdccf5fd5d64 100644
--- a/docs/content/commands/rclone_copyurl.md
+++ b/docs/content/commands/rclone_copyurl.md
@@ -28,7 +28,7 @@ destination if there is one with the same name.
 Setting `--stdout` or making the output file name `-`
 will cause the output to be written to standard output.
 
-## Troublshooting
+## Troubleshooting
 
 If you can't get `rclone copyurl` to work then here are some things you can try:
 
diff --git a/docs/content/commands/rclone_purge.md b/docs/content/commands/rclone_purge.md
index ab191f57e94a4..c1fded41c4eec 100644
--- a/docs/content/commands/rclone_purge.md
+++ b/docs/content/commands/rclone_purge.md
@@ -15,6 +15,9 @@ include/exclude filters - everything will be removed.  Use the
 delete files. To delete empty directories only, use command
 [rmdir](/commands/rclone_rmdir/) or [rmdirs](/commands/rclone_rmdirs/).
 
+The concurrency of this operation is controlled by the `--checkers` global flag. However, some backends will
+implement this command directly, in which case `--checkers` will be ignored.
+
 **Important**: Since this can cause data loss, test first with the
 `--dry-run` or the `--interactive`/`-i` flag.
 
diff --git a/docs/content/commands/rclone_serve_nfs.md b/docs/content/commands/rclone_serve_nfs.md
index ed8358ec24472..39deb36a933b7 100644
--- a/docs/content/commands/rclone_serve_nfs.md
+++ b/docs/content/commands/rclone_serve_nfs.md
@@ -7,8 +7,6 @@ versionIntroduced: v1.65
 ---
 # rclone serve nfs
 
-*Not available in Windows.*
-
 Serve the remote as an NFS mount
 
 ## Synopsis
@@ -55,7 +53,7 @@ that it uses an on disk cache, but the cache entries are held as
 symlinks. Rclone will use the handle of the underlying file as the NFS
 handle which improves performance. This sort of cache can't be backed
 up and restored as the underlying handles will change. This is Linux
-only. It requres running rclone as root or with `CAP_DAC_READ_SEARCH`.
+only. It requires running rclone as root or with `CAP_DAC_READ_SEARCH`.
 You can run rclone with this extra permission by doing this to the
 rclone binary `sudo setcap cap_dac_read_search+ep /path/to/rclone`.
 
diff --git a/docs/content/commands/rclone_serve_s3.md b/docs/content/commands/rclone_serve_s3.md
index 40813321b36de..8785d20659908 100644
--- a/docs/content/commands/rclone_serve_s3.md
+++ b/docs/content/commands/rclone_serve_s3.md
@@ -82,7 +82,7 @@ secret_access_key = SECRET_ACCESS_KEY
 use_multipart_uploads = false
 ```
 
-Note that setting `disable_multipart_uploads = true` is to work around
+Note that setting `use_multipart_uploads = false` is to work around
 [a bug](#bugs) which will be fixed in due course.
 
 ## Bugs
diff --git a/docs/content/flags.md b/docs/content/flags.md
index f9d32c490d527..e022ed0ec43e0 100644
--- a/docs/content/flags.md
+++ b/docs/content/flags.md
@@ -9,8 +9,6 @@ description: "Rclone Global Flags"
 This describes the global flags available to every rclone command
 split into groups.
 
-See the [Options section](/docs/#options) for syntax and usage advice.
-
 
 ## Copy
 
@@ -118,7 +116,7 @@ Flags for general networking and HTTP stuff.
       --tpslimit float                     Limit HTTP transactions per second to this
       --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
       --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.0")
+      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.1")
 ```
 
 
diff --git a/docs/content/googlephotos.md b/docs/content/googlephotos.md
index c3549d1589053..26faedcc6b7f1 100644
--- a/docs/content/googlephotos.md
+++ b/docs/content/googlephotos.md
@@ -384,7 +384,7 @@ Use the gphotosdl proxy for downloading the full resolution images
 The Google API will deliver images and video which aren't full
 resolution, and/or have EXIF data missing.
 
-However if you use the gphotosdl proxy then you can download original,
+However if you ue the gphotosdl proxy tnen you can download original,
 unchanged images.
 
 This runs a headless browser in the background.
diff --git a/docs/content/onedrive.md b/docs/content/onedrive.md
index 91c8520831d1a..1927123baff05 100644
--- a/docs/content/onedrive.md
+++ b/docs/content/onedrive.md
@@ -319,7 +319,7 @@ Properties:
     - "us"
         - Microsoft Cloud for US Government
     - "de"
-        - Microsoft Cloud Germany
+        - Microsoft Cloud Germany (deprecated - try global region first).
     - "cn"
         - Azure and Office 365 operated by Vnet Group in China
 
diff --git a/rclone.1 b/rclone.1
index 28e0c3304b860..57bda9b82f957 100644
--- a/rclone.1
+++ b/rclone.1
@@ -1,8 +1,79 @@
 .\"t
 .\" Automatically generated by Pandoc 2.9.2.1
 .\"
-.TH "rclone" "1" "Jan 12, 2025" "User Manual" ""
+.TH "rclone" "1" "Feb 14, 2025" "User Manual" ""
 .hy
+.SH NAME
+.PP
+rclone - manage files on cloud storage
+.SH SYNOPSIS
+.IP
+.nf
+\f[C]
+Usage:
+  rclone [flags]
+  rclone [command]
+
+Available commands:
+  about       Get quota information from the remote.
+  authorize   Remote authorization.
+  backend     Run a backend-specific command.
+  bisync      Perform bidirectional synchronization between two paths.
+  cat         Concatenates any files and sends them to stdout.
+  check       Checks the files in the source and destination match.
+  checksum    Checks the files in the destination against a SUM file.
+  cleanup     Clean up the remote if possible.
+  completion  Output completion script for a given shell.
+  config      Enter an interactive configuration session.
+  copy        Copy files from source to dest, skipping identical files.
+  copyto      Copy files from source to dest, skipping identical files.
+  copyurl     Copy the contents of the URL supplied content to dest:path.
+  cryptcheck  Cryptcheck checks the integrity of an encrypted remote.
+  cryptdecode Cryptdecode returns unencrypted file names.
+  dedupe      Interactively find duplicate filenames and delete/rename them.
+  delete      Remove the files in path.
+  deletefile  Remove a single file from remote.
+  gendocs     Output markdown docs for rclone to the directory supplied.
+  gitannex    Speaks with git-annex over stdin/stdout.
+  hashsum     Produces a hashsum file for all the objects in the path.
+  help        Show help for rclone commands, flags and backends.
+  link        Generate public link to file/folder.
+  listremotes List all the remotes in the config file and defined in environment variables.
+  ls          List the objects in the path with size and path.
+  lsd         List all directories/containers/buckets in the path.
+  lsf         List directories and objects in remote:path formatted for parsing.
+  lsjson      List directories and objects in the path in JSON format.
+  lsl         List the objects in path with modification time, size and path.
+  md5sum      Produces an md5sum file for all the objects in the path.
+  mkdir       Make the path if it doesn\[aq]t already exist.
+  mount       Mount the remote as file system on a mountpoint.
+  move        Move files from source to dest.
+  moveto      Move file or directory from source to dest.
+  ncdu        Explore a remote with a text based user interface.
+  nfsmount    Mount the remote as file system on a mountpoint.
+  obscure     Obscure password for use in the rclone config file.
+  purge       Remove the path and all of its contents.
+  rc          Run a command against a running rclone.
+  rcat        Copies standard input to file on remote.
+  rcd         Run rclone listening to remote control commands only.
+  rmdir       Remove the empty directory at path.
+  rmdirs      Remove empty directories under the path.
+  selfupdate  Update the rclone binary.
+  serve       Serve a remote over a protocol.
+  settier     Changes storage class/tier of objects in remote.
+  sha1sum     Produces an sha1sum file for all the objects in the path.
+  size        Prints the total size and number of objects in remote:path.
+  sync        Make source and dest identical, modifying destination only.
+  test        Run a test command
+  touch       Create new file or change file modification time.
+  tree        List the contents of the remote in a tree like fashion.
+  version     Show the version number.
+
+Use \[dq]rclone [command] --help\[dq] for more information about a command.
+Use \[dq]rclone help flags\[dq] for to see the global flags.
+Use \[dq]rclone help backends\[dq] for a list of supported services.
+\f[R]
+.fi
 .SH Rclone syncs your files to cloud storage
 .PP
 .IP \[bu] 2
@@ -2238,6 +2309,11 @@ To delete empty directories only, use command
 rmdir (https://rclone.org/commands/rclone_rmdir/) or
 rmdirs (https://rclone.org/commands/rclone_rmdirs/).
 .PP
+The concurrency of this operation is controlled by the
+\f[C]--checkers\f[R] global flag.
+However, some backends will implement this command directly, in which
+case \f[C]--checkers\f[R] will be ignored.
+.PP
 \f[B]Important\f[R]: Since this can cause data loss, test first with the
 \f[C]--dry-run\f[R] or the \f[C]--interactive\f[R]/\f[C]-i\f[R] flag.
 .IP
@@ -4652,12 +4728,12 @@ password to re-encrypt the config.
 .PP
 When \f[C]--password-command\f[R] is called to change the password then
 the environment variable \f[C]RCLONE_PASSWORD_CHANGE=1\f[R] will be set.
-So if changing passwords programatically you can use the environment
+So if changing passwords programmatically you can use the environment
 variable to distinguish which password you must supply.
 .PP
 Alternatively you can remove the password first (with
 \f[C]rclone config encryption remove\f[R]), then set it again with this
-command which may be easier if you don\[aq]t mind the unecrypted config
+command which may be easier if you don\[aq]t mind the unencrypted config
 file being on the disk briefly.
 .IP
 .nf
@@ -5273,7 +5349,7 @@ destination if there is one with the same name.
 .PP
 Setting \f[C]--stdout\f[R] or making the output file name \f[C]-\f[R]
 will cause the output to be written to standard output.
-.SS Troublshooting
+.SS Troubleshooting
 .PP
 If you can\[aq]t get \f[C]rclone copyurl\f[R] to work then here are some
 things you can try:
@@ -12993,7 +13069,8 @@ which improves performance.
 This sort of cache can\[aq]t be backed up and restored as the underlying
 handles will change.
 This is Linux only.
-It requres running rclone as root or with \f[C]CAP_DAC_READ_SEARCH\f[R].
+It requires running rclone as root or with
+\f[C]CAP_DAC_READ_SEARCH\f[R].
 You can run rclone with this extra permission by doing this to the
 rclone binary
 \f[C]sudo setcap cap_dac_read_search+ep /path/to/rclone\f[R].
@@ -13973,7 +14050,7 @@ use_multipart_uploads = false
 \f[R]
 .fi
 .PP
-Note that setting \f[C]disable_multipart_uploads = true\f[R] is to work
+Note that setting \f[C]use_multipart_uploads = false\f[R] is to work
 around a bug which will be fixed in due course.
 .SS Bugs
 .PP
@@ -17806,6 +17883,11 @@ It is also possible to specify \f[C]--boolean=false\f[R] or
 Note that \f[C]--boolean false\f[R] is not valid - this is parsed as
 \f[C]--boolean\f[R] and the \f[C]false\f[R] is parsed as an extra
 command line argument for rclone.
+.PP
+Options documented to take a \f[C]stringArray\f[R] parameter accept
+multiple values.
+To pass more than one value, repeat the option; for example:
+\f[C]--include value1 --include value2\f[R].
 .SS Time or duration options
 .PP
 TIME or DURATION options can be specified as a duration string or a time
@@ -20455,8 +20537,8 @@ The options set by environment variables can be seen with the
 \f[C]rclone version -vv\f[R].
 .PP
 Options that can appear multiple times (type \f[C]stringArray\f[R]) are
-treated slighly differently as environment variables can only be defined
-once.
+treated slightly differently as environment variables can only be
+defined once.
 In order to allow a simple mechanism for adding one or many items, the
 input is treated as a CSV encoded (https://godoc.org/encoding/csv)
 string.
@@ -24731,7 +24813,7 @@ return an empty result.
 \f[R]
 .fi
 .PP
-The \f[C]expiry\f[R] time is the time until the file is elegible for
+The \f[C]expiry\f[R] time is the time until the file is eligible for
 being uploaded in floating point seconds.
 This may go negative.
 As rclone only transfers \f[C]--transfers\f[R] files at once, only the
@@ -28442,7 +28524,7 @@ Flags for general networking and HTTP stuff.
       --tpslimit float                     Limit HTTP transactions per second to this
       --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
       --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default \[dq]rclone/v1.69.0\[dq])
+      --user-agent string                  Set the user-agent to a specified string (default \[dq]rclone/v1.69.1\[dq])
 \f[R]
 .fi
 .SS Performance
@@ -30761,7 +30843,7 @@ See the bisync filters section and generic
 --filter-from (https://rclone.org/filtering/#filter-from-read-filtering-patterns-from-a-file)
 documentation.
 An example filters file contains filters for non-allowed files for
-synching with Dropbox.
+syncing with Dropbox.
 .PP
 If you make changes to your filters file then bisync requires a run with
 \f[C]--resync\f[R].
@@ -30987,7 +31069,7 @@ reduce the sync run times for very large numbers of files.
 .PP
 The check may be run manually with \f[C]--check-sync=only\f[R].
 It runs only the integrity check and terminates without actually
-synching.
+syncing.
 .PP
 Note that currently, \f[C]--check-sync\f[R] \f[B]only checks listing
 snapshots and NOT the actual files on the remotes.\f[R] Note also that
@@ -31701,7 +31783,7 @@ flags are also supported.
 .SS How to filter directories
 .PP
 Filtering portions of the directory tree is a critical feature for
-synching.
+syncing.
 .PP
 Examples of directory trees (always beneath the Path1/Path2 root level)
 you may want to exclude from your sync: - Directory trees containing
@@ -31859,7 +31941,7 @@ This noise can be quashed by adding \f[C]--quiet\f[R] to the bisync
 command line.
 .SS Example exclude-style filters files for use with Dropbox
 .IP \[bu] 2
-Dropbox disallows synching the listed temporary and configuration/data
+Dropbox disallows syncing the listed temporary and configuration/data
 files.
 The \[ga]- \[ga] filters exclude these files where ever they may occur
 in the sync tree.
@@ -32246,7 +32328,7 @@ single \f[C]-\f[R] or double dash.
 .SS Running tests
 .IP \[bu] 2
 \f[C]go test . -case basic -remote local -remote2 local\f[R] runs the
-\f[C]test_basic\f[R] test case using only the local filesystem, synching
+\f[C]test_basic\f[R] test case using only the local filesystem, syncing
 one local directory with another local directory.
 Test script output is to the console, while commands within scenario.txt
 have their output sent to the \f[C].../workdir/test.log\f[R] file, which
@@ -32579,6 +32661,10 @@ Also note a number of academic publications by Benjamin
 Pierce (http://www.cis.upenn.edu/%7Ebcpierce/papers/index.shtml#File%20Synchronization)
 about \f[I]Unison\f[R] and synchronization in general.
 .SS Changelog
+.SS \f[C]v1.69.1\f[R]
+.IP \[bu] 2
+Fixed an issue causing listings to not capture concurrent modifications
+under certain conditions
 .SS \f[C]v1.68\f[R]
 .IP \[bu] 2
 Fixed an issue affecting backends that round modtimes to a lower
@@ -34293,7 +34379,7 @@ It assumes that \f[C]USER_NAME\f[R] has been created.
 The Resource entry must include both resource ARNs, as one implies the
 bucket and the other implies the bucket\[aq]s objects.
 .IP "3." 3
-When using s3-no-check-bucket and the bucket already exsits, the
+When using s3-no-check-bucket and the bucket already exists, the
 \f[C]\[dq]arn:aws:s3:::BUCKET_NAME\[dq]\f[R] doesn\[aq]t have to be
 included.
 .PP
@@ -38469,7 +38555,7 @@ location_constraint = au-nsw
 .PP
 Rclone can serve any remote over the S3 protocol.
 For details see the rclone serve
-s3 (https://rclone.org/commands/rclone_serve_http/) documentation.
+s3 (https://rclone.org/commands/rclone_serve_s3/) documentation.
 .PP
 For example, to serve \f[C]remote:path\f[R] over s3, run the server like
 this:
@@ -38495,8 +38581,8 @@ use_multipart_uploads = false
 \f[R]
 .fi
 .PP
-Note that setting \f[C]disable_multipart_uploads = true\f[R] is to work
-around a bug (https://rclone.org/commands/rclone_serve_http/#bugs) which
+Note that setting \f[C]use_multipart_uploads = false\f[R] is to work
+around a bug (https://rclone.org/commands/rclone_serve_s3/#bugs) which
 will be fixed in due course.
 .SS Scaleway
 .PP
@@ -39689,27 +39775,49 @@ Option endpoint.
 Endpoint for Linode Object Storage API.
 Choose a number from below, or type in your own value.
 Press Enter to leave empty.
- 1 / Atlanta, GA (USA), us-southeast-1
+ 1 / Amsterdam (Netherlands), nl-ams-1
+   \[rs] (nl-ams-1.linodeobjects.com)
+ 2 / Atlanta, GA (USA), us-southeast-1
    \[rs] (us-southeast-1.linodeobjects.com)
- 2 / Chicago, IL (USA), us-ord-1
+ 3 / Chennai (India), in-maa-1
+   \[rs] (in-maa-1.linodeobjects.com)
+ 4 / Chicago, IL (USA), us-ord-1
    \[rs] (us-ord-1.linodeobjects.com)
- 3 / Frankfurt (Germany), eu-central-1
+ 5 / Frankfurt (Germany), eu-central-1
    \[rs] (eu-central-1.linodeobjects.com)
- 4 / Milan (Italy), it-mil-1
+ 6 / Jakarta (Indonesia), id-cgk-1
+   \[rs] (id-cgk-1.linodeobjects.com)
+ 7 / London 2 (Great Britain), gb-lon-1
+   \[rs] (gb-lon-1.linodeobjects.com)
+ 8 / Los Angeles, CA (USA), us-lax-1
+   \[rs] (us-lax-1.linodeobjects.com)
+ 9 / Madrid (Spain), es-mad-1
+   \[rs] (es-mad-1.linodeobjects.com)
+10 / Melbourne (Australia), au-mel-1
+   \[rs] (au-mel-1.linodeobjects.com)
+11 / Miami, FL (USA), us-mia-1
+   \[rs] (us-mia-1.linodeobjects.com)
+12 / Milan (Italy), it-mil-1
    \[rs] (it-mil-1.linodeobjects.com)
- 5 / Newark, NJ (USA), us-east-1
+13 / Newark, NJ (USA), us-east-1
    \[rs] (us-east-1.linodeobjects.com)
- 6 / Paris (France), fr-par-1
+14 / Osaka (Japan), jp-osa-1
+   \[rs] (jp-osa-1.linodeobjects.com)
+15 / Paris (France), fr-par-1
    \[rs] (fr-par-1.linodeobjects.com)
- 7 / Seattle, WA (USA), us-sea-1
+16 / S\[~a]o Paulo (Brazil), br-gru-1
+   \[rs] (br-gru-1.linodeobjects.com)
+17 / Seattle, WA (USA), us-sea-1
    \[rs] (us-sea-1.linodeobjects.com)
- 8 / Singapore ap-south-1
+18 / Singapore, ap-south-1
    \[rs] (ap-south-1.linodeobjects.com)
- 9 / Stockholm (Sweden), se-sto-1
+19 / Singapore 2, sg-sin-1
+   \[rs] (sg-sin-1.linodeobjects.com)
+20 / Stockholm (Sweden), se-sto-1
    \[rs] (se-sto-1.linodeobjects.com)
-10 / Washington, DC, (USA), us-iad-1
+21 / Washington, DC, (USA), us-iad-1
    \[rs] (us-iad-1.linodeobjects.com)
-endpoint> 3
+endpoint> 5
 
 Option acl.
 Canned ACL used when creating buckets and storing or copying objects.
@@ -45295,7 +45403,7 @@ The nonce is incremented for each chunk read making sure each nonce is
 unique for each block written.
 The chance of a nonce being reused is minuscule.
 If you wrote an exabyte of data (10\[S1]\[u2078] bytes) you would have a
-probability of approximately 2\[tmu]10\[u207B]\[S3]\[S2] of re-using a
+probability of approximately 2\[tmu]10\[u207B]\[S3]\[S2] of reusing a
 nonce.
 .SS Chunk
 .PP
@@ -54838,7 +54946,7 @@ Enter a value.
 config_2fa> 2FACODE
 Remote config
 --------------------
-[koofr]
+[iclouddrive]
 - type: iclouddrive
 - apple_id: APPLEID
 - password: *** ENCRYPTED ***
@@ -54854,6 +54962,28 @@ y/e/d> y
 .SS Advanced Data Protection
 .PP
 ADP is currently unsupported and need to be disabled
+.PP
+On iPhone, Settings \f[C]>\f[R] Apple Account \f[C]>\f[R] iCloud
+\f[C]>\f[R] \[aq]Access iCloud Data on the Web\[aq] must be ON, and
+\[aq]Advanced Data Protection\[aq] OFF.
+.SS Troubleshooting
+.SS Missing PCS cookies from the request
+.PP
+This means you have Advanced Data Protection (ADP) turned on.
+This is not supported at the moment.
+If you want to use rclone you will have to turn it off.
+See above for how to turn it off.
+.PP
+You will need to clear the \f[C]cookies\f[R] and the
+\f[C]trust_token\f[R] fields in the config.
+Or you can delete the remote config and start again.
+.PP
+You should then run \f[C]rclone reconnect remote:\f[R].
+.PP
+Note that changing the ADP setting may not take effect immediately - you
+may need to wait a few hours or a day before you can get rclone to work
+- keep clearing the config entry and running
+\f[C]rclone reconnect remote:\f[R] until rclone functions properly.
 .SS Standard options
 .PP
 Here are the Standard options specific to iclouddrive (iCloud Drive).
@@ -60946,7 +61076,7 @@ Microsoft Cloud for US Government
 \[dq]de\[dq]
 .RS 2
 .IP \[bu] 2
-Microsoft Cloud Germany
+Microsoft Cloud Germany (deprecated - try global region first).
 .RE
 .IP \[bu] 2
 \[dq]cn\[dq]
@@ -61951,6 +62081,43 @@ T}
 .TE
 .PP
 See the metadata (https://rclone.org/docs/#metadata) docs for more info.
+.SS Impersonate other users as Admin
+.PP
+Unlike Google Drive and impersonating any domain user via service
+accounts, OneDrive requires you to authenticate as an admin account, and
+manually setup a remote per user you wish to impersonate.
+.IP "1." 3
+In Microsoft 365 Admin Center (https://admin.microsoft.com), open each
+user you need to \[dq]impersonate\[dq] and go to the OneDrive section.
+There is a heading called \[dq]Get access to files\[dq], you need to
+click to create the link, this creates the link of the format
+\f[C]https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/\f[R]
+but also changes the permissions so you your admin user has access.
+.IP "2." 3
+Then in powershell run the following commands:
+.IP
+.nf
+\f[C]
+Install-Module Microsoft.Graph -Scope CurrentUser -Repository PSGallery -Force
+Import-Module Microsoft.Graph.Files
+Connect-MgGraph -Scopes \[dq]Files.ReadWrite.All\[dq]
+# Follow the steps to allow access to your admin user
+# Then run this for each user you want to impersonate to get the Drive ID
+Get-MgUserDefaultDrive -UserId \[aq]{emailaddress}\[aq]
+# This will give you output of the format:
+# Name     Id                                                                 DriveType CreatedDateTime
+# ----     --                                                                 --------- ---------------
+# OneDrive b!XYZ123                                                           business  14/10/2023 1:00:58\[u202F]pm
+\f[R]
+.fi
+.IP "3." 3
+Then in rclone add a onedrive remote type, and use the
+\f[C]Type in driveID\f[R] with the DriveID you got in the previous step.
+One remote per user.
+It will then confirm the drive ID, and hopefully give you a message of
+\f[C]Found drive \[dq]root\[dq] of type \[dq]business\[dq]\f[R] and then
+include the URL of the format
+\f[C]https://{tenant}-my.sharepoint.com/personal/{user_name_domain_tld}/Documents\f[R]
 .SS Limitations
 .PP
 If you don\[aq]t use rclone for 90 days the refresh token will expire.
@@ -74872,6 +75039,67 @@ Options:
 .IP \[bu] 2
 \[dq]error\[dq]: return an error based on option value
 .SH Changelog
+.SS v1.69.1 - 2025-02-14
+.PP
+See commits (https://github.com/rclone/rclone/compare/v1.69.0...v1.69.1)
+.IP \[bu] 2
+Bug Fixes
+.RS 2
+.IP \[bu] 2
+lib/oauthutil: Fix redirect URL mismatch errors (Nick Craig-Wood)
+.IP \[bu] 2
+bisync: Fix listings missing concurrent modifications (nielash)
+.IP \[bu] 2
+serve s3: Fix list objects encoding-type (Nick Craig-Wood)
+.IP \[bu] 2
+fs: Fix confusing \[dq]didn\[aq]t find section in config file\[dq] error
+(Nick Craig-Wood)
+.IP \[bu] 2
+doc fixes (Christoph Berger, Dimitri Papadopoulos, Matt Ickstadt, Nick
+Craig-Wood, Tim White, Zachary Vorhies)
+.IP \[bu] 2
+build: Added parallel docker builds and caching for go build in the
+container (Anagh Kumar Baranwal)
+.RE
+.IP \[bu] 2
+VFS
+.RS 2
+.IP \[bu] 2
+Fix the cache failing to upload symlinks when \f[C]--links\f[R] was
+specified (Nick Craig-Wood)
+.IP \[bu] 2
+Fix race detected by race detector (Nick Craig-Wood)
+.IP \[bu] 2
+Close the change notify channel on Shutdown (izouxv)
+.RE
+.IP \[bu] 2
+B2
+.RS 2
+.IP \[bu] 2
+Fix \[dq]fatal error: concurrent map writes\[dq] (Nick Craig-Wood)
+.RE
+.IP \[bu] 2
+Iclouddrive
+.RS 2
+.IP \[bu] 2
+Add notes on ADP and Missing PCS cookies (Nick Craig-Wood)
+.RE
+.IP \[bu] 2
+Onedrive
+.RS 2
+.IP \[bu] 2
+Mark German (de) region as deprecated (Nick Craig-Wood)
+.RE
+.IP \[bu] 2
+S3
+.RS 2
+.IP \[bu] 2
+Added new storage class to magalu provider (Bruno Fernandes)
+.IP \[bu] 2
+Add DigitalOcean regions SFO2, LON1, TOR1, BLR1 (jkpe)
+.IP \[bu] 2
+Add latest Linode Object Storage endpoints (jbagwell-akamai)
+.RE
 .SS v1.69.0 - 2025-01-12
 .PP
 See commits (https://github.com/rclone/rclone/compare/v1.68.0...v1.69.0)

From 4f8dfd14fc9ad058d8aa9d43de9c2d6c43cd5592 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Fri, 14 Feb 2025 17:14:31 +0000
Subject: [PATCH 28/73] Start v1.69.2-DEV development

---
 VERSION                            | 2 +-
 docs/layouts/partials/version.html | 2 +-
 fs/versiontag.go                   | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/VERSION b/VERSION
index 5f8853011028d..48909b06dae93 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-v1.69.1
+v1.69.2
diff --git a/docs/layouts/partials/version.html b/docs/layouts/partials/version.html
index 003a53d3b0e53..7a35accbb921d 100644
--- a/docs/layouts/partials/version.html
+++ b/docs/layouts/partials/version.html
@@ -1 +1 @@
-v1.69.1
\ No newline at end of file
+v1.69.2
\ No newline at end of file
diff --git a/fs/versiontag.go b/fs/versiontag.go
index 715d12ab0a0bd..be33950ca8cab 100644
--- a/fs/versiontag.go
+++ b/fs/versiontag.go
@@ -1,4 +1,4 @@
 package fs
 
 // VersionTag of rclone
-var VersionTag = "v1.69.1"
+var VersionTag = "v1.69.2"

From ff4d7c8dd04fef460c0b474bb0fad8c18565d62e Mon Sep 17 00:00:00 2001
From: hiddenmarten <hiddenmarten@gmail.com>
Date: Mon, 23 Dec 2024 16:41:24 +0100
Subject: [PATCH 29/73] rc: disable the metrics server when running `rclone rc`

Fixes #8248
---
 cmd/cmd.go | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/cmd/cmd.go b/cmd/cmd.go
index 8f5f5f093e7c2..7e569c80be02f 100644
--- a/cmd/cmd.go
+++ b/cmd/cmd.go
@@ -429,11 +429,12 @@ func initConfig() {
 		fs.Fatalf(nil, "Failed to start remote control: %v", err)
 	}
 
-	// Start the metrics server if configured
-	_, err = rcserver.MetricsStart(ctx, &rc.Opt)
-	if err != nil {
-		fs.Fatalf(nil, "Failed to start metrics server: %v", err)
-
+	// Start the metrics server if configured and not running the "rc" command
+	if os.Args[1] != "rc" {
+		_, err = rcserver.MetricsStart(ctx, &rc.Opt)
+		if err != nil {
+			fs.Fatalf(nil, "Failed to start metrics server: %v", err)
+		}
 	}
 
 	// Setup CPU profiling if desired

From 6eb8919719ef52c548bb2ac1c4f467b288e972bc Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Sat, 11 Jan 2025 12:49:40 +0000
Subject: [PATCH 30/73] sync: fix cpu spinning when empty directory finding
 with leading slashes

Before this change the logic which makes sure we create all
directories could get confused with directories which started with
slashes and get into an infinite loop consuming 100% of the CPU.
---
 fs/sync/sync.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fs/sync/sync.go b/fs/sync/sync.go
index e0a3e23ac41bb..7feedfcd770e9 100644
--- a/fs/sync/sync.go
+++ b/fs/sync/sync.go
@@ -726,7 +726,7 @@ func (s *syncCopyMove) markParentNotEmpty(entry fs.DirEntry) {
 				parentDir = ""
 			}
 			delete(s.srcEmptyDirs, parentDir)
-			if parentDir == "" {
+			if parentDir == "" || parentDir == "/" {
 				break
 			}
 			parentDir = path.Dir(parentDir)

From c62fbc5269788db5cf91f523557dfa63eb630de3 Mon Sep 17 00:00:00 2001
From: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
Date: Tue, 17 Sep 2024 18:09:54 +0530
Subject: [PATCH 31/73] stats: fix the speed not getting updated after a pause
 in the processing

This shifts the behavior of the average loop to be a persistent loop
that gets resumed/paused when transfers & checks are started/completed.

Previously, the averageLoop was stopped on completion of
transfers & checks but failed to start again due to the protection of
the sync.Once

Signed-off-by: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
---
 fs/accounting/stats.go | 113 +++++++++++++++++++++++++++--------------
 1 file changed, 75 insertions(+), 38 deletions(-)

diff --git a/fs/accounting/stats.go b/fs/accounting/stats.go
index 221ab30012150..8a4526fab179e 100644
--- a/fs/accounting/stats.go
+++ b/fs/accounting/stats.go
@@ -65,28 +65,29 @@ type StatsInfo struct {
 }
 
 type averageValues struct {
-	mu        sync.Mutex
-	lpBytes   int64
-	lpTime    time.Time
-	speed     float64
-	stop      chan bool
-	stopped   sync.WaitGroup
-	startOnce sync.Once
-	stopOnce  sync.Once
+	mu      sync.Mutex
+	lpBytes int64
+	lpTime  time.Time
+	speed   float64
+	stop    chan bool
+	stopped sync.WaitGroup
+	started bool
 }
 
 // NewStats creates an initialised StatsInfo
 func NewStats(ctx context.Context) *StatsInfo {
 	ci := fs.GetConfig(ctx)
-	return &StatsInfo{
+	s := &StatsInfo{
 		ctx:          ctx,
 		ci:           ci,
 		checking:     newTransferMap(ci.Checkers, "checking"),
 		transferring: newTransferMap(ci.Transfers, "transferring"),
 		inProgress:   newInProgress(ctx),
 		startTime:    time.Now(),
-		average:      averageValues{stop: make(chan bool)},
+		average:      averageValues{},
 	}
+	s.startAverageLoop()
+	return s
 }
 
 // RemoteStats returns stats for rc
@@ -328,61 +329,96 @@ func (s *StatsInfo) averageLoop() {
 	ticker := time.NewTicker(averagePeriodLength)
 	defer ticker.Stop()
 
-	startTime := time.Now()
 	a := &s.average
 	defer a.stopped.Done()
+
+	shouldRun := false
+
 	for {
 		select {
 		case now := <-ticker.C:
 			a.mu.Lock()
-			var elapsed float64
-			if a.lpTime.IsZero() {
-				elapsed = now.Sub(startTime).Seconds()
-			} else {
-				elapsed = now.Sub(a.lpTime).Seconds()
+
+			if !shouldRun {
+				a.mu.Unlock()
+				continue
 			}
+
 			avg := 0.0
+			elapsed := now.Sub(a.lpTime).Seconds()
 			if elapsed > 0 {
 				avg = float64(a.lpBytes) / elapsed
 			}
+
 			if period < averagePeriod {
 				period++
 			}
+
 			a.speed = (avg + a.speed*(period-1)) / period
 			a.lpBytes = 0
 			a.lpTime = now
+
+			a.mu.Unlock()
+
+		case stop, ok := <-a.stop:
+			if !ok {
+				return // Channel closed, exit the loop
+			}
+
+			a.mu.Lock()
+
+			// If we are resuming, store the current time
+			if !shouldRun && !stop {
+				a.lpTime = time.Now()
+			}
+			shouldRun = !stop
+
 			a.mu.Unlock()
-		case <-a.stop:
-			return
 		}
 	}
 }
 
-// Start the average loop
-func (s *StatsInfo) startAverageLoop() {
+// Resume the average loop
+func (s *StatsInfo) resumeAverageLoop() {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	s.average.stop <- false
+}
+
+// Pause the average loop
+func (s *StatsInfo) pauseAverageLoop() {
 	s.mu.Lock()
 	defer s.mu.Unlock()
-	s.average.startOnce.Do(func() {
+	s.average.stop <- true
+}
+
+// Start the average loop
+//
+// Call with the mutex held
+func (s *StatsInfo) _startAverageLoop() {
+	if !s.average.started {
+		s.average.stop = make(chan bool)
+		s.average.started = true
 		s.average.stopped.Add(1)
 		go s.averageLoop()
-	})
+	}
+}
+
+// Start the average loop
+func (s *StatsInfo) startAverageLoop() {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	s._startAverageLoop()
 }
 
 // Stop the average loop
 //
 // Call with the mutex held
 func (s *StatsInfo) _stopAverageLoop() {
-	s.average.stopOnce.Do(func() {
+	if s.average.started {
 		close(s.average.stop)
 		s.average.stopped.Wait()
-	})
-}
-
-// Stop the average loop
-func (s *StatsInfo) stopAverageLoop() {
-	s.mu.Lock()
-	defer s.mu.Unlock()
-	s._stopAverageLoop()
+	}
 }
 
 // String convert the StatsInfo to a string for printing
@@ -564,9 +600,9 @@ func (s *StatsInfo) GetBytesWithPending() int64 {
 	pending := int64(0)
 	for _, tr := range s.startedTransfers {
 		if tr.acc != nil {
-			bytes, size := tr.acc.progress()
-			if bytes < size {
-				pending += size - bytes
+			bytesRead, size := tr.acc.progress()
+			if bytesRead < size {
+				pending += size - bytesRead
 			}
 		}
 	}
@@ -699,7 +735,8 @@ func (s *StatsInfo) ResetCounters() {
 	s.oldDuration = 0
 
 	s._stopAverageLoop()
-	s.average = averageValues{stop: make(chan bool)}
+	s.average = averageValues{}
+	s._startAverageLoop()
 }
 
 // ResetErrors sets the errors count to 0 and resets lastError, fatalError and retryError
@@ -788,7 +825,7 @@ func (s *StatsInfo) NewTransfer(obj fs.DirEntry, dstFs fs.Fs) *Transfer {
 	}
 	tr := newTransfer(s, obj, srcFs, dstFs)
 	s.transferring.add(tr)
-	s.startAverageLoop()
+	s.resumeAverageLoop()
 	return tr
 }
 
@@ -796,7 +833,7 @@ func (s *StatsInfo) NewTransfer(obj fs.DirEntry, dstFs fs.Fs) *Transfer {
 func (s *StatsInfo) NewTransferRemoteSize(remote string, size int64, srcFs, dstFs fs.Fs) *Transfer {
 	tr := newTransferRemoteSize(s, remote, size, false, "", srcFs, dstFs)
 	s.transferring.add(tr)
-	s.startAverageLoop()
+	s.resumeAverageLoop()
 	return tr
 }
 
@@ -811,7 +848,7 @@ func (s *StatsInfo) DoneTransferring(remote string, ok bool) {
 		s.mu.Unlock()
 	}
 	if s.transferring.empty() && s.checking.empty() {
-		time.AfterFunc(averageStopAfter, s.stopAverageLoop)
+		s.pauseAverageLoop()
 	}
 }
 

From 57bbb4be9f6c2eb8753b5b274e82f7f6e10a9875 Mon Sep 17 00:00:00 2001
From: ll3006 <doublel3006@gmail.com>
Date: Fri, 7 Feb 2025 14:23:28 +0100
Subject: [PATCH 32/73] sync: copy dir modtimes even when copyEmptySrcDirs is
 false - fixes #8317

Before, after a sync, only file modtimes were updated when not using
--copy-empty-src-dirs. This ensures modtimes are updated to match the source
folder, regardless of copyEmptySrcDir. The flag --no-update-dir-modtime
(which previously did nothing) will disable this.
---
 fs/sync/sync.go | 22 ++++++++--------------
 1 file changed, 8 insertions(+), 14 deletions(-)

diff --git a/fs/sync/sync.go b/fs/sync/sync.go
index 7feedfcd770e9..e30c86ed2ff00 100644
--- a/fs/sync/sync.go
+++ b/fs/sync/sync.go
@@ -1109,23 +1109,17 @@ func (s *syncCopyMove) copyDirMetadata(ctx context.Context, f fs.Fs, dst fs.Dire
 	if !s.setDirModTimeAfter && equal {
 		return nil
 	}
-	if s.setDirModTimeAfter && equal {
-		newDst = dst
-	} else if s.copyEmptySrcDirs {
-		if s.setDirMetadata {
+	newDst = dst
+	if !equal {
+		if s.setDirMetadata && s.copyEmptySrcDirs {
 			newDst, err = operations.CopyDirMetadata(ctx, f, dst, dir, src)
-		} else if s.setDirModTime {
-			if dst == nil {
-				newDst, err = operations.MkdirModTime(ctx, f, dir, src.ModTime(ctx))
-			} else {
-				newDst, err = operations.SetDirModTime(ctx, f, dst, dir, src.ModTime(ctx))
-			}
-		} else if dst == nil {
-			// Create the directory if it doesn't exist
+		} else if dst == nil && s.setDirModTime && s.copyEmptySrcDirs {
+			newDst, err = operations.MkdirModTime(ctx, f, dir, src.ModTime(ctx))
+		} else if dst == nil && s.copyEmptySrcDirs {
 			err = operations.Mkdir(ctx, f, dir)
+		} else if dst != nil && s.setDirModTime {
+			newDst, err = operations.SetDirModTime(ctx, f, dst, dir, src.ModTime(ctx))
 		}
-	} else {
-		newDst = dst
 	}
 	// If we need to set modtime after and we created a dir, then save it for later
 	if s.setDirModTime && s.setDirModTimeAfter && err == nil {

From 92efc5ff43900fc8505027d8de3974da8ac1cdb1 Mon Sep 17 00:00:00 2001
From: Janne Hellsten <jjhellst@gmail.com>
Date: Wed, 12 Feb 2025 23:31:05 +0200
Subject: [PATCH 33/73] cmd: fix crash if rclone is invoked without any
 arguments - Fixes #8378

---
 cmd/cmd.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cmd/cmd.go b/cmd/cmd.go
index 7e569c80be02f..545da371d5ec3 100644
--- a/cmd/cmd.go
+++ b/cmd/cmd.go
@@ -430,7 +430,7 @@ func initConfig() {
 	}
 
 	// Start the metrics server if configured and not running the "rc" command
-	if os.Args[1] != "rc" {
+	if len(os.Args) >= 2 && os.Args[1] != "rc" {
 		_, err = rcserver.MetricsStart(ctx, &rc.Opt)
 		if err != nil {
 			fs.Fatalf(nil, "Failed to start metrics server: %v", err)

From b00dcc37bd477fa1f6927792ed378c56f514f3ab Mon Sep 17 00:00:00 2001
From: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
Date: Thu, 13 Feb 2025 17:09:24 +0530
Subject: [PATCH 34/73] accounting: fix percentDiff calculation -- fixes #8345

Signed-off-by: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
---
 fs/accounting/stats_groups_test.go | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/fs/accounting/stats_groups_test.go b/fs/accounting/stats_groups_test.go
index 8c02229e736f7..b7a817824f4a2 100644
--- a/fs/accounting/stats_groups_test.go
+++ b/fs/accounting/stats_groups_test.go
@@ -237,5 +237,14 @@ func TestCountError(t *testing.T) {
 }
 
 func percentDiff(start, end uint64) uint64 {
-	return (start - end) * 100 / start
+	if start == 0 {
+		return 0 // Handle zero start value to avoid division by zero
+	}
+	var diff uint64
+	if end > start {
+		diff = end - start // Handle case where end is larger than start
+	} else {
+		diff = start - end
+	}
+	return (diff * 100) / start
 }

From 5fa9c0209eaa7c6308938d78530862620e6042da Mon Sep 17 00:00:00 2001
From: Michael Kebe <michael.kebe@gmail.com>
Date: Sat, 15 Feb 2025 11:11:26 +0100
Subject: [PATCH 35/73] docs: improved sftp limitations

Added a link to `--sftp-path-override` for a better solution with working hash calculation.
---
 docs/content/sftp.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/content/sftp.md b/docs/content/sftp.md
index 56f4d98dc6a14..5da567247da4d 100644
--- a/docs/content/sftp.md
+++ b/docs/content/sftp.md
@@ -1108,7 +1108,8 @@ Properties:
 
 On some SFTP servers (e.g. Synology) the paths are different
 for SSH and SFTP so the hashes can't be calculated properly.
-For them using `disable_hashcheck` is a good idea.
+You can either use [`--sftp-path-override`](#--sftp-path-override)
+or [`disable_hashcheck`](#--sftp-disable-hashcheck).
 
 The only ssh agent supported under Windows is Putty's pageant.
 

From 861456d9703a41cc7f95f63abe8725cff585c588 Mon Sep 17 00:00:00 2001
From: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
Date: Sat, 15 Feb 2025 19:53:43 +0530
Subject: [PATCH 36/73] build: fix docker plugin build - fixes #8394

Signed-off-by: Anagh Kumar Baranwal <6824881+darthShadow@users.noreply.github.com>
---
 .../workflows/build_publish_docker_plugin.yml | 72 ++++++++++---------
 1 file changed, 38 insertions(+), 34 deletions(-)

diff --git a/.github/workflows/build_publish_docker_plugin.yml b/.github/workflows/build_publish_docker_plugin.yml
index 4056cb04be316..42af5265c7d14 100644
--- a/.github/workflows/build_publish_docker_plugin.yml
+++ b/.github/workflows/build_publish_docker_plugin.yml
@@ -7,39 +7,43 @@ name: Release Build for Docker Plugin
 on:
   release:
     types: [published]
+  workflow_dispatch:
+    inputs:
+      manual:
+        description: Manual run (bypass default conditions)
+        type: boolean
+        default: true
 
 jobs:
-
-    build_docker_volume_plugin:
-        if: github.repository == 'rclone/rclone'
-        needs: build
-        runs-on: ubuntu-latest
-        name: Build docker plugin job
-        steps:
-            - name: Free some space
-              shell: bash
-              run: |
-                df -h .
-                # Remove android SDK
-                sudo rm -rf /usr/local/lib/android || true
-                # Remove .net runtime
-                sudo rm -rf /usr/share/dotnet || true
-                df -h .
-            - name: Checkout master
-              uses: actions/checkout@v4
-              with:
-                fetch-depth: 0
-            - name: Build and publish docker plugin
-              shell: bash
-              run: |
-                VER=${GITHUB_REF#refs/tags/}
-                PLUGIN_USER=rclone
-                docker login --username ${{ secrets.DOCKER_HUB_USER }} \
-                             --password-stdin <<< "${{ secrets.DOCKER_HUB_PASSWORD }}"
-                for PLUGIN_ARCH in amd64 arm64 arm/v7 arm/v6 ;do
-                    export PLUGIN_USER PLUGIN_ARCH
-                    make docker-plugin PLUGIN_TAG=${PLUGIN_ARCH/\//-}
-                    make docker-plugin PLUGIN_TAG=${PLUGIN_ARCH/\//-}-${VER#v}
-                done
-                make docker-plugin PLUGIN_ARCH=amd64 PLUGIN_TAG=latest
-                make docker-plugin PLUGIN_ARCH=amd64 PLUGIN_TAG=${VER#v}
+  build_docker_volume_plugin:
+    if: inputs.manual || github.repository == 'rclone/rclone'
+    name: Build docker plugin job
+    runs-on: ubuntu-latest
+    steps:
+      - name: Free some space
+        shell: bash
+        run: |
+          df -h .
+          # Remove android SDK
+          sudo rm -rf /usr/local/lib/android || true
+          # Remove .net runtime
+          sudo rm -rf /usr/share/dotnet || true
+          df -h .
+      - name: Checkout master
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Build and publish docker plugin
+        shell: bash
+        run: |
+          VER=${GITHUB_REF#refs/tags/}
+          PLUGIN_USER=rclone
+          docker login --username ${{ secrets.DOCKER_HUB_USER }} \
+                       --password-stdin <<< "${{ secrets.DOCKER_HUB_PASSWORD }}"
+          for PLUGIN_ARCH in amd64 arm64 arm/v7 arm/v6 ;do
+              export PLUGIN_USER PLUGIN_ARCH
+              make docker-plugin PLUGIN_TAG=${PLUGIN_ARCH/\//-}
+              make docker-plugin PLUGIN_TAG=${PLUGIN_ARCH/\//-}-${VER#v}
+          done
+          make docker-plugin PLUGIN_ARCH=amd64 PLUGIN_TAG=latest
+          make docker-plugin PLUGIN_ARCH=amd64 PLUGIN_TAG=${VER#v}

From 286ae6a1b4deeea8677614e15c37dde4e1796ff8 Mon Sep 17 00:00:00 2001
From: Lorenz Brun <lorenz@brun.one>
Date: Tue, 20 Sep 2022 00:31:56 +0200
Subject: [PATCH 37/73] vfs: fix directory cache serving stale data

The VFS directory cache layer didn't update directory entry properties
if they are reused after cache invalidation.

Update them unconditionally as newDir sets them to the same value and
setting a pointer is cheaper in both LoC as well as CPU cycles than a
branch.

Also add a test exercising this behavior.

Fixes #6335
---
 vfs/dir.go      |  1 +
 vfs/dir_test.go | 32 ++++++++++++++++++++++++++++++++
 2 files changed, 33 insertions(+)

diff --git a/vfs/dir.go b/vfs/dir.go
index c72494eee80b3..a4a31c4b6891c 100644
--- a/vfs/dir.go
+++ b/vfs/dir.go
@@ -760,6 +760,7 @@ func (d *Dir) _readDirFromEntries(entries fs.DirEntries, dirTree dirtree.DirTree
 			dir := node.(*Dir)
 			dir.mu.Lock()
 			dir.modTime = item.ModTime(context.TODO())
+			dir.entry = item
 			if dirTree != nil {
 				err = dir._readDirFromDirTree(dirTree, when)
 				if err != nil {
diff --git a/vfs/dir_test.go b/vfs/dir_test.go
index 555cacf1ffc49..69e45c269cedf 100644
--- a/vfs/dir_test.go
+++ b/vfs/dir_test.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"fmt"
 	"os"
+	"runtime"
 	"sort"
 	"testing"
 	"time"
@@ -655,3 +656,34 @@ func TestDirFileOpen(t *testing.T) {
 	require.NoError(t, err)
 	assert.Equal(t, int64(12), fi.Size())
 }
+
+func TestDirEntryModTimeInvalidation(t *testing.T) {
+	if runtime.GOOS == "windows" {
+		t.Skip("dirent modtime is unreliable on Windows filesystems")
+	}
+	r, vfs := newTestVFS(t)
+
+	// Needs to be less than 2x the wait time below, othewrwise the entry
+	// gets cleared out before it had a chance to be updated.
+	vfs.Opt.DirCacheTime = fs.Duration(50 * time.Millisecond)
+
+	r.WriteObject(context.Background(), "dir/file1", "file1 contents", t1)
+
+	node, err := vfs.Stat("dir")
+	require.NoError(t, err)
+	modTime1 := node.(*Dir).DirEntry().ModTime(context.Background())
+
+	// Wait some time, then write another file which must update ModTime of
+	// the directory.
+	time.Sleep(75 * time.Millisecond)
+	r.WriteObject(context.Background(), "dir/file2", "file2 contents", t2)
+
+	node2, err := vfs.Stat("dir")
+	require.NoError(t, err)
+	modTime2 := node2.(*Dir).DirEntry().ModTime(context.Background())
+
+	// ModTime of directory must be different after second file was written.
+	if modTime1.Equal(modTime2) {
+		t.Error("ModTime not invalidated")
+	}
+}

From 1ac7e323029c9822bfe4e9ad0635d9baabd454f6 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Sat, 15 Feb 2025 20:08:33 +0000
Subject: [PATCH 38/73] docs: correct stable release workflow

---
 RELEASE.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/RELEASE.md b/RELEASE.md
index c4c7d239e8b86..e455eb23e9924 100644
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -124,8 +124,8 @@ Now
 
   * git co ${BASE_TAG}-stable
   * git cherry-pick any fixes
-  * Do the steps as above
   * make startstable
+  * Do the steps as above
   * git co master
   * `#` cherry pick the changes to the changelog - check the diff to make sure it is correct
   * git checkout ${BASE_TAG}-stable docs/content/changelog.md

From 659aca871141e4ea7c93547346ed450c589fb630 Mon Sep 17 00:00:00 2001
From: emyarod <emyarod@users.noreply.github.com>
Date: Sat, 15 Feb 2025 18:07:20 -0600
Subject: [PATCH 39/73] chore: update contributor email

---
 bin/.ignore-emails      | 3 ++-
 docs/content/authors.md | 1 -
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/.ignore-emails b/bin/.ignore-emails
index 9b364fae1acb8..fb53d92f5a742 100644
--- a/bin/.ignore-emails
+++ b/bin/.ignore-emails
@@ -11,4 +11,5 @@
 <services+github@simjo.st>
 <seb•ɑƬ•chezwam•ɖɵʈ•org>
 <allllaboutyou@gmail.com>
-<psycho@feltzv.fr>
\ No newline at end of file
+<psycho@feltzv.fr>
+<afw5059@gmail.com>
\ No newline at end of file
diff --git a/docs/content/authors.md b/docs/content/authors.md
index ed83b05cd4634..3eab5328ee7bf 100644
--- a/docs/content/authors.md
+++ b/docs/content/authors.md
@@ -809,7 +809,6 @@ put them back in again.` >}}
   * ben-ba <benjamin.brauner@gmx.de>
   * Eli Orzitzer <e_orz@yahoo.com>
   * Anthony Metzidis <anthony.metzidis@gmail.com>
-  * emyarod <afw5059@gmail.com>
   * keongalvin <keongalvin@gmail.com>
   * rarspace01 <rarspace01@users.noreply.github.com>
   * Paul Stern <paulstern45@gmail.com>

From 6a9c2350de301efa8ef70bfbfc53bdbe7b7b51a5 Mon Sep 17 00:00:00 2001
From: Dave Vasilevsky <dave@vasilevsky.ca>
Date: Sat, 15 Feb 2025 19:26:09 -0500
Subject: [PATCH 40/73] dropbox: Retry link without expiry

Dropbox only allows public links with expiry for certain account types.
Rather than erroring for other accounts, retry without expiry.
---
 backend/dropbox/dropbox.go  | 10 ++++++++++
 fstest/test_all/config.yaml |  4 ----
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/backend/dropbox/dropbox.go b/backend/dropbox/dropbox.go
index 82eee8e692713..fb978ec0cb7bd 100644
--- a/backend/dropbox/dropbox.go
+++ b/backend/dropbox/dropbox.go
@@ -1174,6 +1174,16 @@ func (f *Fs) PublicLink(ctx context.Context, remote string, expire fs.Duration,
 		return shouldRetry(ctx, err)
 	})
 
+	if err != nil && createArg.Settings.Expires != nil && strings.Contains(err.Error(), sharing.SharedLinkSettingsErrorNotAuthorized) {
+		// Some plans can't create links with expiry
+		fs.Debugf(absPath, "can't create link with expiry, trying without")
+		createArg.Settings.Expires = nil
+		err = f.pacer.Call(func() (bool, error) {
+			linkRes, err = f.sharing.CreateSharedLinkWithSettings(&createArg)
+			return shouldRetry(ctx, err)
+		})
+	}
+
 	if err != nil && strings.Contains(err.Error(),
 		sharing.CreateSharedLinkWithSettingsErrorSharedLinkAlreadyExists) {
 		fs.Debugf(absPath, "has a public link already, attempting to retrieve it")
diff --git a/fstest/test_all/config.yaml b/fstest/test_all/config.yaml
index 624d875d5c5ce..c097ca6a65824 100644
--- a/fstest/test_all/config.yaml
+++ b/fstest/test_all/config.yaml
@@ -144,10 +144,6 @@ backends:
  - backend:  "dropbox"
    remote:   "TestDropbox:"
    fastlist: false
-   ignore:
-     # This test doesn't work on a standard dropbox account because it
-     # tries to set the expiry of the link
-     - TestIntegration/FsMkdir/FsPutFiles/PublicLink
  # - backend:  "filefabric"
  #   remote:   "TestFileFabric:"
  #   fastlist: false

From d725f4f4def1b329f4071d2b873ca200f8a6c5bd Mon Sep 17 00:00:00 2001
From: Zachary Vorhies <zachvorhies@protonmail.com>
Date: Tue, 4 Mar 2025 09:31:56 -0700
Subject: [PATCH 41/73] docs: add note for using rclone cat for slicing out a
 byte range from a file

---
 cmd/copyto/copyto.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/cmd/copyto/copyto.go b/cmd/copyto/copyto.go
index 90e8584816847..edc793071e4f5 100644
--- a/cmd/copyto/copyto.go
+++ b/cmd/copyto/copyto.go
@@ -43,6 +43,8 @@ This doesn't transfer files that are identical on src and dst, testing
 by size and modification time or MD5SUM.  It doesn't delete files from
 the destination.
 
+*If you are looking to copy just a byte range of a file, please see 'rclone cat --offset X --count Y'*
+
 **Note**: Use the ` + "`-P`" + `/` + "`--progress`" + ` flag to view real-time transfer statistics
 `,
 	Annotations: map[string]string{

From 2e853b6e75c8c799340358bcf558778d442ee6cd Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 5 Mar 2025 11:08:26 +0000
Subject: [PATCH 42/73] serve nfs: fix unlikely crash

---
 cmd/serve/nfs/filesystem.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cmd/serve/nfs/filesystem.go b/cmd/serve/nfs/filesystem.go
index fe30326cb3846..a87563171b929 100644
--- a/cmd/serve/nfs/filesystem.go
+++ b/cmd/serve/nfs/filesystem.go
@@ -29,6 +29,7 @@ func setSys(fi os.FileInfo) {
 	node, ok := fi.(vfs.Node)
 	if !ok {
 		fs.Errorf(fi, "internal error: %T is not a vfs.Node", fi)
+		return
 	}
 	vfs := node.VFS()
 	// Set the UID and GID for the node passed in from the VFS defaults.

From ef99b9ad18a7ac6c9775df4d0d4cf6ca67a7a17b Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Fri, 28 Feb 2025 17:01:00 +0000
Subject: [PATCH 43/73] fs/object: fix memory object out of bounds Seek

---
 fs/object/object.go      | 13 ++++++++++---
 fs/object/object_test.go | 20 +++++++++++++++++++-
 2 files changed, 29 insertions(+), 4 deletions(-)

diff --git a/fs/object/object.go b/fs/object/object.go
index 40aee8dec279b..9b4e25afe5018 100644
--- a/fs/object/object.go
+++ b/fs/object/object.go
@@ -279,19 +279,26 @@ func (o *MemoryObject) SetModTime(ctx context.Context, modTime time.Time) error
 
 // Open opens the file for read.  Call Close() on the returned io.ReadCloser
 func (o *MemoryObject) Open(ctx context.Context, options ...fs.OpenOption) (io.ReadCloser, error) {
-	content := o.content
+	var offset, limit int64 = 0, -1
 	for _, option := range options {
 		switch x := option.(type) {
 		case *fs.RangeOption:
-			content = o.content[x.Start:x.End]
+			offset, limit = x.Decode(o.Size())
 		case *fs.SeekOption:
-			content = o.content[x.Offset:]
+			offset = x.Offset
 		default:
 			if option.Mandatory() {
 				fs.Logf(o, "Unsupported mandatory option: %v", option)
 			}
 		}
 	}
+	content := o.content
+	offset = max(offset, 0)
+	if limit < 0 {
+		content = content[offset:]
+	} else {
+		content = content[offset:min(offset+limit, int64(len(content)))]
+	}
 	return io.NopCloser(bytes.NewBuffer(content)), nil
 }
 
diff --git a/fs/object/object_test.go b/fs/object/object_test.go
index 2a423627281b6..be90c771e4c56 100644
--- a/fs/object/object_test.go
+++ b/fs/object/object_test.go
@@ -110,6 +110,7 @@ func TestMemoryObject(t *testing.T) {
 	assert.Equal(t, newNow, o.ModTime(context.Background()))
 
 	checkOpen := func(rc io.ReadCloser, expected string) {
+		t.Helper()
 		actual, err := io.ReadAll(rc)
 		assert.NoError(t, err)
 		err = rc.Close()
@@ -118,6 +119,7 @@ func TestMemoryObject(t *testing.T) {
 	}
 
 	checkContent := func(o fs.Object, expected string) {
+		t.Helper()
 		rc, err := o.Open(context.Background())
 		assert.NoError(t, err)
 		checkOpen(rc, expected)
@@ -127,12 +129,28 @@ func TestMemoryObject(t *testing.T) {
 
 	rc, err := o.Open(context.Background(), &fs.RangeOption{Start: 1, End: 3})
 	assert.NoError(t, err)
-	checkOpen(rc, "ot")
+	checkOpen(rc, "ota")
+
+	rc, err = o.Open(context.Background(), &fs.RangeOption{Start: 1, End: -1})
+	assert.NoError(t, err)
+	checkOpen(rc, "otato")
+
+	rc, err = o.Open(context.Background(), &fs.RangeOption{Start: 1, End: 4096})
+	assert.NoError(t, err)
+	checkOpen(rc, "otato")
+
+	rc, err = o.Open(context.Background(), &fs.RangeOption{Start: -1, End: 4})
+	assert.NoError(t, err)
+	checkOpen(rc, "tato")
 
 	rc, err = o.Open(context.Background(), &fs.SeekOption{Offset: 3})
 	assert.NoError(t, err)
 	checkOpen(rc, "ato")
 
+	rc, err = o.Open(context.Background(), &fs.SeekOption{Offset: -100})
+	assert.NoError(t, err)
+	checkOpen(rc, "potato")
+
 	// check it fits within the buffer
 	newNow = now.Add(2 * time.Minute)
 	newContent := bytes.NewBufferString("Rutabaga")

From 296c26b671e7b3d2c3433e82a1af4eb085664aad Mon Sep 17 00:00:00 2001
From: jack <9480542+jackusm@users.noreply.github.com>
Date: Sat, 8 Mar 2025 22:40:46 +0000
Subject: [PATCH 44/73] docs: fix incorrect mentions of vfs-cache-min-free-size

---
 vfs/vfs.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/vfs/vfs.md b/vfs/vfs.md
index 3d0d5622cd877..dde8f9f30ee8a 100644
--- a/vfs/vfs.md
+++ b/vfs/vfs.md
@@ -95,11 +95,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant

From e7c46912a3176e0350f3fbf17c0d91a8ea2681e9 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 12 Mar 2025 17:29:53 +0000
Subject: [PATCH 45/73] fs: fix corruption of SizeSuffix with "B" suffix in
 config (eg --min-size)

Before this change, the config system round tripped fs.SizeSuffix
values through strings like this, corrupting them in the process.

    "2B" -> 2 -> "2" -> 2048

This caused `--min-size 2B` to be interpreted as `--min-size 2k`.

This fix makes sure SizeSuffix values have a "B" suffix when turned
into a string where necessary, so it becomes

    "2B" -> 2 -> "2B" -> 2

In rclone v2 we should probably declare unsuffixed SizeSuffix values
are in bytes not kBytes (done for rsync compatibility) but this would
be a backwards incompatible change which we don't want for v1.

Fixes #8437
Fixes #8212
Fixes #5169
---
 fs/fs_test.go  | 28 ++++++++++++++++++++++++++++
 fs/registry.go | 18 +++++++++++++++---
 2 files changed, 43 insertions(+), 3 deletions(-)

diff --git a/fs/fs_test.go b/fs/fs_test.go
index e0099e96a98cf..45b16229c907e 100644
--- a/fs/fs_test.go
+++ b/fs/fs_test.go
@@ -261,6 +261,34 @@ func TestOptionString(t *testing.T) {
 	assert.Equal(t, "true", caseInsensitiveOption.String())
 }
 
+func TestOptionStringStringArray(t *testing.T) {
+	opt := Option{
+		Name:    "string_array",
+		Default: []string(nil),
+	}
+	assert.Equal(t, "", opt.String())
+	opt.Default = []string{}
+	assert.Equal(t, "", opt.String())
+	opt.Default = []string{"a", "b"}
+	assert.Equal(t, "a,b", opt.String())
+	opt.Default = []string{"hello, world!", "goodbye, world!"}
+	assert.Equal(t, `"hello, world!","goodbye, world!"`, opt.String())
+}
+
+func TestOptionStringSizeSuffix(t *testing.T) {
+	opt := Option{
+		Name:    "size_suffix",
+		Default: SizeSuffix(0),
+	}
+	assert.Equal(t, "0", opt.String())
+	opt.Default = SizeSuffix(-1)
+	assert.Equal(t, "off", opt.String())
+	opt.Default = SizeSuffix(100)
+	assert.Equal(t, "100B", opt.String())
+	opt.Default = SizeSuffix(1024)
+	assert.Equal(t, "1Ki", opt.String())
+}
+
 func TestOptionSet(t *testing.T) {
 	o := caseInsensitiveOption
 	assert.Equal(t, true, o.Value)
diff --git a/fs/registry.go b/fs/registry.go
index e341bd2d57dc8..618112db3959d 100644
--- a/fs/registry.go
+++ b/fs/registry.go
@@ -258,15 +258,27 @@ func (o *Option) IsDefault() bool {
 // String turns Option into a string
 func (o *Option) String() string {
 	v := o.GetValue()
-	if stringArray, isStringArray := v.([]string); isStringArray {
+	switch x := v.(type) {
+	case []string:
 		// Treat empty string array as empty string
 		// This is to make the default value of the option help nice
-		if len(stringArray) == 0 {
+		if len(x) == 0 {
 			return ""
 		}
 		// Encode string arrays as CSV
 		// The default Go encoding can't be decoded uniquely
-		return CommaSepList(stringArray).String()
+		return CommaSepList(x).String()
+	case SizeSuffix:
+		str := x.String()
+		// Suffix bare numbers with "B" unless they are 0
+		//
+		// This makes sure that fs.SizeSuffix roundtrips through string
+		if len(str) > 0 && str != "0" {
+			if lastDigit := str[len(str)-1]; lastDigit >= '0' && lastDigit <= '9' {
+				str += "B"
+			}
+		}
+		return str
 	}
 	return fmt.Sprint(v)
 }

From f46787dcc353d37b1a4187531066a330e0adbbab Mon Sep 17 00:00:00 2001
From: nielash <nielronash@gmail.com>
Date: Thu, 6 Mar 2025 08:15:51 -0500
Subject: [PATCH 46/73] http: correct root if definitely pointing to a file -
 fixes #8428

This was formalized in
https://github.com/rclone/rclone/commit/c69eb84573c85206ab028eda2987180e049ef2e4
But it appears that we forgot to update `http`, and the `FsRoot` test didn't
catch it because we don't currently have an http integration test.
---
 backend/http/http.go | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/backend/http/http.go b/backend/http/http.go
index 60c6cb99c082e..9f1aa6994778e 100644
--- a/backend/http/http.go
+++ b/backend/http/http.go
@@ -180,7 +180,6 @@ func getFsEndpoint(ctx context.Context, client *http.Client, url string, opt *Op
 	}
 	addHeaders(req, opt)
 	res, err := noRedir.Do(req)
-
 	if err != nil {
 		fs.Debugf(nil, "Assuming path is a file as HEAD request could not be sent: %v", err)
 		return createFileResult()
@@ -249,6 +248,14 @@ func (f *Fs) httpConnection(ctx context.Context, opt *Options) (isFile bool, err
 	f.httpClient = client
 	f.endpoint = u
 	f.endpointURL = u.String()
+
+	if isFile {
+		// Correct root if definitely pointing to a file
+		f.root = path.Dir(f.root)
+		if f.root == "." || f.root == "/" {
+			f.root = ""
+		}
+	}
 	return isFile, nil
 }
 

From 46dcc0eaf6a9d92e80b18b4da36fda8caddc2f99 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Tue, 25 Mar 2025 15:30:49 +0000
Subject: [PATCH 47/73] rc: fix debug/* commands not being available over unix
 sockets

This was caused by an incorrect handler URL which was passing the
debug/* commands to the debug/pprof handler by accident. This only
happened when using unix sockets.
---
 fs/rc/rcserver/rcserver.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fs/rc/rcserver/rcserver.go b/fs/rc/rcserver/rcserver.go
index 8cc666f3c2142..b38d5ec9efcc3 100644
--- a/fs/rc/rcserver/rcserver.go
+++ b/fs/rc/rcserver/rcserver.go
@@ -123,7 +123,7 @@ func newServer(ctx context.Context, opt *rc.Options, mux *http.ServeMux) (*Serve
 	)
 
 	// Add the debug handler which is installed in the default mux
-	router.Handle("/debug/*", mux)
+	router.Handle("/debug/pprof/*", mux)
 
 	// FIXME split these up into individual functions
 	router.Get("/*", s.handler)

From f76c72b5cc5085d5ed403a7521e3990090419c73 Mon Sep 17 00:00:00 2001
From: alingse <alingse@foxmail.com>
Date: Fri, 4 Apr 2025 22:21:45 +0800
Subject: [PATCH 48/73] operations: fix call fmt.Errorf with wrong err

---
 fs/operations/multithread.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/fs/operations/multithread.go b/fs/operations/multithread.go
index 582df84459ca6..c11e50d17c4bc 100644
--- a/fs/operations/multithread.go
+++ b/fs/operations/multithread.go
@@ -315,8 +315,8 @@ func (w *writerAtChunkWriter) WriteChunk(ctx context.Context, chunkNumber int, r
 	// if we were buffering, flush to disk
 	switch w := writer.(type) {
 	case *bufio.Writer:
-		er2 := w.Flush()
-		if er2 != nil {
+		err = w.Flush()
+		if err != nil {
 			return -1, fmt.Errorf("multi-thread copy: flush failed: %w", err)
 		}
 	}

From f52d7533634f686c00edb9703cacd9fdbabb954e Mon Sep 17 00:00:00 2001
From: eccoisle <167755281+eccoisle@users.noreply.github.com>
Date: Sun, 6 Apr 2025 22:28:34 +1000
Subject: [PATCH 49/73] docs: replace option --auto-filename-header with
 --header-filename

---
 cmd/copyurl/copyurl.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cmd/copyurl/copyurl.go b/cmd/copyurl/copyurl.go
index c5f46cbc70078..6c5ec34c1bb1e 100644
--- a/cmd/copyurl/copyurl.go
+++ b/cmd/copyurl/copyurl.go
@@ -43,7 +43,7 @@ Setting |--auto-filename| will attempt to automatically determine the
 filename from the URL (after any redirections) and used in the
 destination path.
 
-With |--auto-filename-header| in addition, if a specific filename is
+With |--header-filename| in addition, if a specific filename is
 set in HTTP headers, it will be used instead of the name from the URL.
 With |--print-filename| in addition, the resulting file name will be
 printed.

From 85c156370152e40d3a3acd9fc0ea28adae9bdfee Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Sat, 5 Apr 2025 13:04:13 +0100
Subject: [PATCH 50/73] docs: Add rcloneui.com as Silver Sponsor

---
 docs/layouts/chrome/menu.html | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docs/layouts/chrome/menu.html b/docs/layouts/chrome/menu.html
index 624ce12d9187c..3baafa102ff73 100644
--- a/docs/layouts/chrome/menu.html
+++ b/docs/layouts/chrome/menu.html
@@ -28,6 +28,14 @@
     <a href="https://rcloneview.com/?utm_source=rclone" target="_blank" rel="noopener" title="Visit rclone's sponsor RcloneView"><img src="/img/logos/rcloneview-banner.svg"></a><br />
   </div>
 </div>
+<div class="card">
+  <div class="card-header" style="padding: 5px 15px;">
+    Silver Sponsor
+  </div>
+  <div class="card-body">
+    <a href="https://rcloneui.com" target="_blank" rel="noopener" title="Visit rclone's sponsor rclone UI"><img src="/img/logos/rcloneui.svg"></a><br />
+  </div>
+</div>
 {{end}}
 
 <div class="card">

From b12d2f32db27f877bbdce417126f6d47b4ec4a98 Mon Sep 17 00:00:00 2001
From: Danny Garside <dannygarside@outlook.com>
Date: Tue, 8 Apr 2025 20:51:22 +0100
Subject: [PATCH 51/73] docs: fix minor typo in box docs

---
 docs/content/box.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/content/box.md b/docs/content/box.md
index ff197024eca75..651f407111b83 100644
--- a/docs/content/box.md
+++ b/docs/content/box.md
@@ -87,7 +87,7 @@ machine with no Internet browser available.
 Note that rclone runs a webserver on your local machine to collect the
 token as returned from Box. This only runs from the moment it opens
 your browser to the moment you get back the verification code.  This
-is on `http://127.0.0.1:53682/` and this it may require you to unblock
+is on `http://127.0.0.1:53682/` and this may require you to unblock
 it temporarily if you are running a host firewall.
 
 Once configured you can then use `rclone` like this,

From a3c4e2fd206972ad42c2b5a84474a31f22f78f2b Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Sat, 5 Apr 2025 13:35:04 +0100
Subject: [PATCH 52/73] lib/http: fix race between Serve() and Shutdown()

This was discovered by the race detector.
---
 lib/http/server.go | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/lib/http/server.go b/lib/http/server.go
index ce13b82b66557..0993759ee6331 100644
--- a/lib/http/server.go
+++ b/lib/http/server.go
@@ -229,7 +229,8 @@ type Server struct {
 	cfg          Config
 	template     *TemplateConfig
 	htmlTemplate *template.Template
-	usingAuth    bool // set if we are using auth middleware
+	usingAuth    bool       // set if we are using auth middleware
+	mu           sync.Mutex // mutex protects RW variables below
 	atexitHandle atexit.FnHandle
 }
 
@@ -517,7 +518,9 @@ func (s *Server) Serve() {
 		go ii.serve(&s.wg)
 	}
 	// Install an atexit handler to shutdown gracefully
+	s.mu.Lock()
 	s.atexitHandle = atexit.Register(func() { _ = s.Shutdown() })
+	s.mu.Unlock()
 }
 
 // Wait blocks while the server is serving requests
@@ -536,10 +539,12 @@ const gracefulShutdownTime = 10 * time.Second
 // Shutdown gracefully shuts down the server
 func (s *Server) Shutdown() error {
 	// Stop the atexit handler
+	s.mu.Lock()
 	if s.atexitHandle != nil {
 		atexit.Unregister(s.atexitHandle)
 		s.atexitHandle = nil
 	}
+	s.mu.Unlock()
 	for _, ii := range s.instances {
 		expiry := time.Now().Add(gracefulShutdownTime)
 		ctx, cancel := context.WithDeadline(context.Background(), expiry)

From ab5844df77cfde80012dddacff1de54a60c4fe97 Mon Sep 17 00:00:00 2001
From: Samantha Bowen <sam@bbowen.net>
Date: Sat, 29 Mar 2025 14:30:17 -0700
Subject: [PATCH 53/73] fs/config: Read configuration passwords from stdin even
 when terminated with EOF - fixes #8480

---
 fs/config/ui.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/fs/config/ui.go b/fs/config/ui.go
index fcee469b13ff8..8edf5350b7657 100644
--- a/fs/config/ui.go
+++ b/fs/config/ui.go
@@ -7,6 +7,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"io"
 	"os"
 	"sort"
 	"strconv"
@@ -27,7 +28,7 @@ import (
 var ReadLine = func() string {
 	buf := bufio.NewReader(os.Stdin)
 	line, err := buf.ReadString('\n')
-	if err != nil {
+	if err != nil && (line == "" || err != io.EOF) {
 		fs.Fatalf(nil, "Failed to read line: %v", err)
 	}
 	return strings.TrimSpace(line)

From d8c7031dc36bd5857364c3c98ce9dc3c413d8b90 Mon Sep 17 00:00:00 2001
From: simonmcnair <101189766+simonmcnair@users.noreply.github.com>
Date: Wed, 9 Apr 2025 11:54:06 +0100
Subject: [PATCH 54/73] docs: update fuse version in docker docs

---
 docs/content/docker.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/content/docker.md b/docs/content/docker.md
index 319d245732abd..f985874d7845b 100644
--- a/docs/content/docker.md
+++ b/docs/content/docker.md
@@ -45,7 +45,7 @@ on the host.
 The _FUSE_ driver is a prerequisite for rclone mounting and should be
 installed on host:
 ```
-sudo apt-get -y install fuse
+sudo apt-get -y install fuse3
 ```
 
 Create two directories required by rclone docker plugin:

From 77c1031dcda9b79845653ed5adc680b150f1d950 Mon Sep 17 00:00:00 2001
From: huanghaojun <jasen.huang@ugreen.com>
Date: Wed, 9 Apr 2025 18:58:09 +0800
Subject: [PATCH 55/73] vfs: fix inefficient directory caching when directory
 reads are slow

Before this change, when querying directories with large datasets, if
the query duration exceeded the directory cache expiration time, the
cache became invalid by the time results were retrieved. This means
every execution of `_readDir` triggers `_readDirFromEntries`,
resulting in prolonged processing times.

After this change we update the directory time with the time at the
end of the query.
---
 vfs/dir.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vfs/dir.go b/vfs/dir.go
index a4a31c4b6891c..a7f5b73bf51f5 100644
--- a/vfs/dir.go
+++ b/vfs/dir.go
@@ -579,7 +579,7 @@ func (d *Dir) _readDir() error {
 		return err
 	}
 
-	d.read = when
+	d.read = time.Now()
 	d.cleanupTimer.Reset(time.Duration(d.vfs.Opt.DirCacheTime * 2))
 
 	return nil

From 7fd3d0d1ab209733d49dc40f3a9df81de2347bf5 Mon Sep 17 00:00:00 2001
From: Markus Gerstel <markus.gerstel@osirium.com>
Date: Sun, 9 Mar 2025 10:22:01 +0000
Subject: [PATCH 56/73] s3: documentation regression - fixes #8438

We lost a previous documentation fix (#7077) detailing how to restore
single objects from AWS S3 Glacier.

Also make clearer that rclone provides restore functionality natively.

Co-authored-by: danielkrajnik <dan94kra@gmail.com>
---
 backend/s3/s3.go   | 2 +-
 docs/content/s3.md | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/backend/s3/s3.go b/backend/s3/s3.go
index 716b35ffdd225..1124ae6b4363e 100644
--- a/backend/s3/s3.go
+++ b/backend/s3/s3.go
@@ -4976,7 +4976,7 @@ or from INTELLIGENT-TIERING Archive Access / Deep Archive Access tier to the Fre
 
 Usage Examples:
 
-    rclone backend restore s3:bucket/path/to/object -o priority=PRIORITY -o lifetime=DAYS
+    rclone backend restore s3:bucket/path/to/ --include /object -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY
diff --git a/docs/content/s3.md b/docs/content/s3.md
index 4d96cde940698..d225312c79bbf 100644
--- a/docs/content/s3.md
+++ b/docs/content/s3.md
@@ -771,7 +771,8 @@ tries to access data from the glacier storage class you will see an error like b
     2017/09/11 19:07:43 Failed to sync: failed to open source object: Object in GLACIER, restore first: path/to/file
 
 In this case you need to [restore](http://docs.aws.amazon.com/AmazonS3/latest/user-guide/restore-archived-objects.html)
-the object(s) in question before using rclone.
+the object(s) in question before accessing object contents.
+The [restore](#restore) section below shows how to do this with rclone.
 
 Note that rclone only speaks the S3 API it does not speak the Glacier
 Vault API, so rclone cannot directly access Glacier Vaults.

From a49ccddb81d1745df1710f3ef19251e2f01279df Mon Sep 17 00:00:00 2001
From: simwai <16225108+simwai@users.noreply.github.com>
Date: Sat, 29 Mar 2025 21:31:32 +0100
Subject: [PATCH 57/73] cmd/authorize: show required arguments in help text

---
 cmd/authorize/authorize.go      |  8 ++++++--
 cmd/authorize/authorize_test.go | 32 ++++++++++++++++++++++++++++++++
 2 files changed, 38 insertions(+), 2 deletions(-)
 create mode 100644 cmd/authorize/authorize_test.go

diff --git a/cmd/authorize/authorize.go b/cmd/authorize/authorize.go
index ded80186aa603..c4137a4ccb30e 100644
--- a/cmd/authorize/authorize.go
+++ b/cmd/authorize/authorize.go
@@ -23,19 +23,23 @@ func init() {
 }
 
 var commandDefinition = &cobra.Command{
-	Use:   "authorize",
+	Use:   "authorize <fs name> [base64_json_blob | client_id client_secret]",
 	Short: `Remote authorization.`,
 	Long: `Remote authorization. Used to authorize a remote or headless
 rclone from a machine with a browser - use as instructed by
 rclone config.
 
+The command requires 1-3 arguments:
+  - fs name (e.g., "drive", "s3", etc.)
+  - Either a base64 encoded JSON blob obtained from a previous rclone config session
+  - Or a client_id and client_secret pair obtained from the remote service
+
 Use --auth-no-open-browser to prevent rclone to open auth
 link in default browser automatically.
 
 Use --template to generate HTML output via a custom Go template. If a blank string is provided as an argument to this flag, the default template is used.`,
 	Annotations: map[string]string{
 		"versionIntroduced": "v1.27",
-		// "groups":            "",
 	},
 	RunE: func(command *cobra.Command, args []string) error {
 		cmd.CheckArgs(1, 3, command, args)
diff --git a/cmd/authorize/authorize_test.go b/cmd/authorize/authorize_test.go
new file mode 100644
index 0000000000000..364da5ed11e4b
--- /dev/null
+++ b/cmd/authorize/authorize_test.go
@@ -0,0 +1,32 @@
+package authorize
+
+import (
+	"bytes"
+	"strings"
+	"testing"
+
+	"github.com/spf13/cobra"
+)
+
+func TestAuthorizeCommand(t *testing.T) {
+	// Test that the Use string is correctly formatted
+	if commandDefinition.Use != "authorize <fs name> [base64_json_blob | client_id client_secret]" {
+		t.Errorf("Command Use string doesn't match expected format: %s", commandDefinition.Use)
+	}
+
+	// Test that help output contains the argument information
+	buf := &bytes.Buffer{}
+	cmd := &cobra.Command{}
+	cmd.AddCommand(commandDefinition)
+	cmd.SetOut(buf)
+	cmd.SetArgs([]string{"authorize", "--help"})
+	err := cmd.Execute()
+	if err != nil {
+		t.Fatalf("Failed to execute help command: %v", err)
+	}
+
+	helpOutput := buf.String()
+	if !strings.Contains(helpOutput, "authorize <fs name>") {
+		t.Errorf("Help output doesn't contain correct usage information")
+	}
+}

From 4c3737014a2310952fbf2f8f2f8e79cbcd7c7a10 Mon Sep 17 00:00:00 2001
From: Ben Alex <ben.alex@acegi.com.au>
Date: Wed, 9 Apr 2025 11:58:37 +1000
Subject: [PATCH 58/73] iclouddrive: fix so created files are writable

At present any created file (eg through the touch command, copy, mount
etc) is read-only in iCloud.

This has been reported by users at
https://forum.rclone.org/t/icloud-and-file-editing-permissions/50659.
---
 backend/iclouddrive/api/drive.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/iclouddrive/api/drive.go b/backend/iclouddrive/api/drive.go
index 5d735ebbdeb21..0df9e2ae4335c 100644
--- a/backend/iclouddrive/api/drive.go
+++ b/backend/iclouddrive/api/drive.go
@@ -631,7 +631,7 @@ func NewUpdateFileInfo() UpdateFileInfo {
 		FileFlags: FileFlags{
 			IsExecutable: true,
 			IsHidden:     false,
-			IsWritable:   false,
+			IsWritable:   true,
 		},
 	}
 }

From bbceb84cad0b8d484e46ccac7a49fd92c05898cc Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 26 Mar 2025 11:55:17 +0000
Subject: [PATCH 59/73] onedrive: fix metadata ordering in permissions

Before this change, due to a quirk in Graph, User permissions could be
lost when applying permissions.

Fixes #8465
---
 backend/onedrive/metadata.go      |  50 ++++++++++++
 backend/onedrive/metadata_test.go | 125 ++++++++++++++++++++++++++++++
 2 files changed, 175 insertions(+)
 create mode 100644 backend/onedrive/metadata_test.go

diff --git a/backend/onedrive/metadata.go b/backend/onedrive/metadata.go
index 12ba522f67565..f62c0702820aa 100644
--- a/backend/onedrive/metadata.go
+++ b/backend/onedrive/metadata.go
@@ -396,10 +396,57 @@ func (m *Metadata) WritePermissions(ctx context.Context) (err error) {
 	return nil
 }
 
+// Order the permissions so that any with users come first.
+//
+// This is to work around a quirk with Graph:
+//
+// 1. You are adding permissions for both a group and a user.
+// 2. The user is a member of the group.
+// 3. The permissions for the group and user are the same.
+// 4. You are adding the group permission before the user permission.
+//
+// When all of the above are true, Graph indicates it has added the
+// user permission, but it immediately drops it
+//
+// See: https://github.com/rclone/rclone/issues/8465
+func (m *Metadata) orderPermissions(xs []*api.PermissionsType) {
+	// Return true if identity has any user permissions
+	hasUserIdentity := func(identity *api.IdentitySet) bool {
+		if identity == nil {
+			return false
+		}
+		return identity.User.ID != "" || identity.User.DisplayName != "" || identity.User.Email != "" || identity.User.LoginName != ""
+	}
+	// Return true if p has any user permissions
+	hasUser := func(p *api.PermissionsType) bool {
+		if hasUserIdentity(p.GetGrantedTo(m.fs.driveType)) {
+			return true
+		}
+		for _, identity := range p.GetGrantedToIdentities(m.fs.driveType) {
+			if hasUserIdentity(identity) {
+				return true
+			}
+		}
+		return false
+	}
+	// Put Permissions with a user first, leaving unsorted otherwise
+	slices.SortStableFunc(xs, func(a, b *api.PermissionsType) int {
+		aHasUser := hasUser(a)
+		bHasUser := hasUser(b)
+		if aHasUser && !bHasUser {
+			return -1
+		} else if !aHasUser && bHasUser {
+			return 1
+		}
+		return 0
+	})
+}
+
 // sortPermissions sorts the permissions (to be written) into add, update, and remove queues
 func (m *Metadata) sortPermissions() (add, update, remove []*api.PermissionsType) {
 	new, old := m.queuedPermissions, m.permissions
 	if len(old) == 0 || m.permsAddOnly {
+		m.orderPermissions(new)
 		return new, nil, nil // they must all be "add"
 	}
 
@@ -447,6 +494,9 @@ func (m *Metadata) sortPermissions() (add, update, remove []*api.PermissionsType
 			remove = append(remove, o)
 		}
 	}
+	m.orderPermissions(add)
+	m.orderPermissions(update)
+	m.orderPermissions(remove)
 	return add, update, remove
 }
 
diff --git a/backend/onedrive/metadata_test.go b/backend/onedrive/metadata_test.go
new file mode 100644
index 0000000000000..bc74152338730
--- /dev/null
+++ b/backend/onedrive/metadata_test.go
@@ -0,0 +1,125 @@
+package onedrive
+
+import (
+	"encoding/json"
+	"testing"
+
+	"github.com/rclone/rclone/backend/onedrive/api"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestOrderPermissions(t *testing.T) {
+	tests := []struct {
+		name     string
+		input    []*api.PermissionsType
+		expected []string
+	}{
+		{
+			name:     "empty",
+			input:    []*api.PermissionsType{},
+			expected: []string(nil),
+		},
+		{
+			name: "users first, then group, then none",
+			input: []*api.PermissionsType{
+				{ID: "1", GrantedTo: &api.IdentitySet{Group: api.Identity{DisplayName: "Group1"}}},
+				{ID: "2", GrantedToIdentities: []*api.IdentitySet{{User: api.Identity{DisplayName: "Alice"}}}},
+				{ID: "3", GrantedTo: &api.IdentitySet{User: api.Identity{DisplayName: "Alice"}}},
+				{ID: "4"},
+			},
+			expected: []string{"2", "3", "1", "4"},
+		},
+		{
+			name: "same type unsorted",
+			input: []*api.PermissionsType{
+				{ID: "b", GrantedTo: &api.IdentitySet{Group: api.Identity{DisplayName: "Group B"}}},
+				{ID: "a", GrantedTo: &api.IdentitySet{Group: api.Identity{DisplayName: "Group A"}}},
+				{ID: "c", GrantedToIdentities: []*api.IdentitySet{{Group: api.Identity{DisplayName: "Group A"}}, {User: api.Identity{DisplayName: "Alice"}}}},
+			},
+			expected: []string{"c", "b", "a"},
+		},
+		{
+			name: "all user identities",
+			input: []*api.PermissionsType{
+				{ID: "c", GrantedTo: &api.IdentitySet{User: api.Identity{DisplayName: "Bob"}}},
+				{ID: "a", GrantedTo: &api.IdentitySet{User: api.Identity{Email: "alice@example.com"}}},
+				{ID: "b", GrantedToIdentities: []*api.IdentitySet{{User: api.Identity{LoginName: "user3"}}}},
+			},
+			expected: []string{"c", "a", "b"},
+		},
+		{
+			name: "no user or group info",
+			input: []*api.PermissionsType{
+				{ID: "z"},
+				{ID: "x"},
+				{ID: "y"},
+			},
+			expected: []string{"z", "x", "y"},
+		},
+	}
+
+	for _, driveType := range []string{driveTypePersonal, driveTypeBusiness} {
+		t.Run(driveType, func(t *testing.T) {
+			for _, tt := range tests {
+				m := &Metadata{fs: &Fs{driveType: driveType}}
+				t.Run(tt.name, func(t *testing.T) {
+					if driveType == driveTypeBusiness {
+						for i := range tt.input {
+							tt.input[i].GrantedToV2 = tt.input[i].GrantedTo
+							tt.input[i].GrantedTo = nil
+							tt.input[i].GrantedToIdentitiesV2 = tt.input[i].GrantedToIdentities
+							tt.input[i].GrantedToIdentities = nil
+						}
+					}
+					m.orderPermissions(tt.input)
+					var gotIDs []string
+					for _, p := range tt.input {
+						gotIDs = append(gotIDs, p.ID)
+					}
+					assert.Equal(t, tt.expected, gotIDs)
+				})
+			}
+		})
+	}
+}
+
+func TestOrderPermissionsJSON(t *testing.T) {
+	testJSON := `[
+  {
+    "id": "1",
+    "grantedToV2": {
+      "group": {
+        "id": "group@example.com"
+      }
+    },
+    "roles": [
+      "write"
+    ]
+  },
+  {
+    "id": "2",
+    "grantedToV2": {
+      "user": {
+        "id": "user@example.com"
+      }
+    },
+    "roles": [
+      "write"
+    ]
+  }
+]`
+
+	var testPerms []*api.PermissionsType
+	err := json.Unmarshal([]byte(testJSON), &testPerms)
+	require.NoError(t, err)
+
+	m := &Metadata{fs: &Fs{driveType: driveTypeBusiness}}
+	m.orderPermissions(testPerms)
+	var gotIDs []string
+	for _, p := range testPerms {
+		gotIDs = append(gotIDs, p.ID)
+	}
+	assert.Equal(t, []string{"2", "1"}, gotIDs)
+
+}

From 4a10491c2a9c859f89836e7bce901742bdcbcab8 Mon Sep 17 00:00:00 2001
From: Andrew Kreimer <algonell@gmail.com>
Date: Tue, 15 Apr 2025 16:42:40 +0300
Subject: [PATCH 60/73] docs: fix typos via codespell

There are some types in the changelog.

Fix them via codespell.
---
 docs/content/changelog.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/content/changelog.md b/docs/content/changelog.md
index 0bdf7c317c0fc..38b2f9333b494 100644
--- a/docs/content/changelog.md
+++ b/docs/content/changelog.md
@@ -60,7 +60,7 @@ description: "Rclone Changelog"
     * fs: Make `--links` flag global and add new `--local-links` and `--vfs-links` flags (Nick Craig-Wood)
     * http servers: Disable automatic authentication skipping for unix sockets in http servers (Moises Lima)
         * This was making it impossible to use unix sockets with an proxy
-        * This might now cause rclone to need authenticaton where it didn't before
+        * This might now cause rclone to need authentication where it didn't before
     * oauthutil: add support for OAuth client credential flow (Martin Hassack, Nick Craig-Wood)
     * operations: make log messages consistent for mkdir/rmdir at INFO level (Nick Craig-Wood)
     * rc: Add `relative` to [vfs/queue-set-expiry](/rc/#vfs-queue-set-expiry) (Nick Craig-Wood)
@@ -738,7 +738,7 @@ instead of of `--size-only`, when `check` is not available.
         * Update all dependencies (Nick Craig-Wood)
         * Refactor version info and icon resource handling on windows (albertony)
     * doc updates (albertony, alfish2000, asdffdsazqqq, Dimitri Papadopoulos, Herby Gillot, Joda Stößer, Manoj Ghosh, Nick Craig-Wood)
-    * Implement `--metadata-mapper` to transform metatadata with a user supplied program (Nick Craig-Wood)
+    * Implement `--metadata-mapper` to transform metadata with a user supplied program (Nick Craig-Wood)
     * Add `ChunkWriterDoesntSeek` feature flag and set it for b2 (Nick Craig-Wood)
     * lib/http: Export basic go string functions for use in `--template` (Gabriel Espinoza)
     * makefile: Use POSIX compatible install arguments (Mina Galić)
@@ -853,7 +853,7 @@ instead of of `--size-only`, when `check` is not available.
     * Fix "fatal error: concurrent map writes" (Nick Craig-Wood)
 * B2
     * Fix multipart upload: corrupted on transfer: sizes differ XXX vs 0 (Nick Craig-Wood)
-    * Fix locking window when getting mutipart upload URL (Nick Craig-Wood)
+    * Fix locking window when getting multipart upload URL (Nick Craig-Wood)
     * Fix server side copies greater than 4GB (Nick Craig-Wood)
     * Fix chunked streaming uploads (Nick Craig-Wood)
     * Reduce default `--b2-upload-concurrency` to 4 to reduce memory usage (Nick Craig-Wood)

From aedcd565312e5762922de8b9dd3b82f2f1176c05 Mon Sep 17 00:00:00 2001
From: Ed Craig-Wood <138211970+edc-w@users.noreply.github.com>
Date: Wed, 16 Apr 2025 10:42:00 +0100
Subject: [PATCH 61/73] Update README.md

removed warp as project sponsor
---
 README.md | 18 +-----------------
 1 file changed, 1 insertion(+), 17 deletions(-)

diff --git a/README.md b/README.md
index 1f47ee9149741..f39d7c5a90fa5 100644
--- a/README.md
+++ b/README.md
@@ -1,20 +1,4 @@
-<div align="center">
-<sup>Special thanks to our sponsor:</sup>
-<br>
-<br>
-<a href="https://www.warp.dev/?utm_source=github&utm_medium=referral&utm_campaign=rclone_20231103">
-  <div>
-    <img src="https://rclone.org/img/logos/warp-github.svg" width="300" alt="Warp">
-  </div>
-  <b>Warp is a modern, Rust-based terminal with AI built in so you and your team can build great software, faster.</b>
-  <div>
-    <sup>Visit warp.dev to learn more.</sup>
-  </div>
-</a>
-<br>
-<hr>
-</div>
-<br>
+
 
 [<img src="https://rclone.org/img/logo_on_light__horizontal_color.svg" width="50%" alt="rclone logo">](https://rclone.org/#gh-light-mode-only)
 [<img src="https://rclone.org/img/logo_on_dark__horizontal_color.svg" width="50%" alt="rclone logo">](https://rclone.org/#gh-dark-mode-only)

From 07bb122d474b8df3ec684378e48e09816a38ff1b Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Thu, 24 Apr 2025 13:45:04 +0100
Subject: [PATCH 62/73] drive: metadata: fix error when setting
 copy-requires-writer-permission on a folder

This appears not to be allowed, so this fixes the problem by ignoring
that metadata for a folder.

Fixes #8517
---
 backend/drive/drive.go    | 4 ++--
 backend/drive/metadata.go | 8 +++++---
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/backend/drive/drive.go b/backend/drive/drive.go
index 4ef3b9befd90a..12be6cef956c6 100644
--- a/backend/drive/drive.go
+++ b/backend/drive/drive.go
@@ -1763,7 +1763,7 @@ func (f *Fs) createDir(ctx context.Context, pathID, leaf string, metadata fs.Met
 	}
 	var updateMetadata updateMetadataFn
 	if len(metadata) > 0 {
-		updateMetadata, err = f.updateMetadata(ctx, createInfo, metadata, true)
+		updateMetadata, err = f.updateMetadata(ctx, createInfo, metadata, true, true)
 		if err != nil {
 			return nil, fmt.Errorf("create dir: failed to update metadata: %w", err)
 		}
@@ -1794,7 +1794,7 @@ func (f *Fs) updateDir(ctx context.Context, dirID string, metadata fs.Metadata)
 	}
 	dirID = actualID(dirID)
 	updateInfo := &drive.File{}
-	updateMetadata, err := f.updateMetadata(ctx, updateInfo, metadata, true)
+	updateMetadata, err := f.updateMetadata(ctx, updateInfo, metadata, true, true)
 	if err != nil {
 		return nil, fmt.Errorf("update dir: failed to update metadata from source object: %w", err)
 	}
diff --git a/backend/drive/metadata.go b/backend/drive/metadata.go
index c8afa7f8dd954..fea18f65a5f3d 100644
--- a/backend/drive/metadata.go
+++ b/backend/drive/metadata.go
@@ -508,7 +508,7 @@ type updateMetadataFn func(context.Context, *drive.File) error
 //
 // It returns a callback which should be called to finish the updates
 // after the data is uploaded.
-func (f *Fs) updateMetadata(ctx context.Context, updateInfo *drive.File, meta fs.Metadata, update bool) (callback updateMetadataFn, err error) {
+func (f *Fs) updateMetadata(ctx context.Context, updateInfo *drive.File, meta fs.Metadata, update, isFolder bool) (callback updateMetadataFn, err error) {
 	callbackFns := []updateMetadataFn{}
 	callback = func(ctx context.Context, info *drive.File) error {
 		for _, fn := range callbackFns {
@@ -533,7 +533,9 @@ func (f *Fs) updateMetadata(ctx context.Context, updateInfo *drive.File, meta fs
 		}
 		switch k {
 		case "copy-requires-writer-permission":
-			if err := parseBool(&updateInfo.CopyRequiresWriterPermission); err != nil {
+			if isFolder {
+				fs.Debugf(f, "Ignoring %s=%s as can't set on folders", k, v)
+			} else if err := parseBool(&updateInfo.CopyRequiresWriterPermission); err != nil {
 				return nil, err
 			}
 		case "writers-can-share":
@@ -630,7 +632,7 @@ func (f *Fs) fetchAndUpdateMetadata(ctx context.Context, src fs.ObjectInfo, opti
 	if err != nil {
 		return nil, fmt.Errorf("failed to read metadata from source object: %w", err)
 	}
-	callback, err = f.updateMetadata(ctx, updateInfo, meta, update)
+	callback, err = f.updateMetadata(ctx, updateInfo, meta, update, false)
 	if err != nil {
 		return nil, fmt.Errorf("failed to update metadata from source object: %w", err)
 	}

From b0310c72731c3d7eea88d7c756daac5466c750c2 Mon Sep 17 00:00:00 2001
From: Jugal Kishore <me@devjugal.com>
Date: Sun, 27 Apr 2025 22:46:43 +0530
Subject: [PATCH 63/73] docs: correct SSL docs anchor link from #ssl-tls to
 #tls-ssl

Fixed the anchor link in the documentation that points to the SSL/TLS section.
This change ensures the link directs correctly to the intended section (#tls-ssl) instead of the incorrect #ssl-tls.

No functional code changes, documentation only.
---
 cmd/serve/s3/serve_s3.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cmd/serve/s3/serve_s3.md b/cmd/serve/s3/serve_s3.md
index 1c805ab4809c9..03fb1eb9e09ef 100644
--- a/cmd/serve/s3/serve_s3.md
+++ b/cmd/serve/s3/serve_s3.md
@@ -14,7 +14,7 @@ docs](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html)).
 access.
 
 Please note that some clients may require HTTPS endpoints. See [the
-SSL docs](#ssl-tls) for more information.
+SSL docs](#tls-ssl) for more information.
 
 This command uses the [VFS directory cache](#vfs-virtual-file-system).
 All the functionality will work with `--vfs-cache-mode off`. Using

From 775f3e49f0b03f7931a2115fab86706134811b72 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 26 Feb 2025 11:13:48 +0000
Subject: [PATCH 64/73] build: update golang.org/x/crypto to v0.35.0 to fix
 CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to
a denial of service attack from clients which complete the key
exchange slowly, or not at all, causing pending content to be read
into memory, but never transmitted.

This affects users of `rclone serve sftp`.

See: https://pkg.go.dev/vuln/GO-2025-3487
---
 go.mod | 12 ++++++------
 go.sum |  6 ++++++
 2 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/go.mod b/go.mod
index f4d830b8925ec..a07b2b9690fcd 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/rclone/rclone
 
-go 1.21
+go 1.23.0
 
 require (
 	bazil.org/fuse v0.0.0-20230120002735-62a210ff1fd5
@@ -80,12 +80,12 @@ require (
 	github.com/zeebo/blake3 v0.2.3
 	go.etcd.io/bbolt v1.3.10
 	goftp.io/server/v2 v2.0.1
-	golang.org/x/crypto v0.31.0
+	golang.org/x/crypto v0.35.0
 	golang.org/x/net v0.33.0
 	golang.org/x/oauth2 v0.24.0
-	golang.org/x/sync v0.10.0
-	golang.org/x/sys v0.28.0
-	golang.org/x/text v0.21.0
+	golang.org/x/sync v0.11.0
+	golang.org/x/sys v0.30.0
+	golang.org/x/text v0.22.0
 	golang.org/x/time v0.8.0
 	google.golang.org/api v0.211.0
 	gopkg.in/validator.v2 v2.0.1
@@ -228,5 +228,5 @@ require (
 	github.com/golang-jwt/jwt/v4 v4.5.1
 	github.com/pkg/xattr v0.4.10
 	golang.org/x/mobile v0.0.0-20240716161057-1ad2df20a8b6
-	golang.org/x/term v0.27.0
+	golang.org/x/term v0.29.0
 )
diff --git a/go.sum b/go.sum
index 06a76c5ef9a23..86d1d565f2857 100644
--- a/go.sum
+++ b/go.sum
@@ -684,6 +684,8 @@ golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf
 golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
 golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
+golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
+golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -788,6 +790,7 @@ golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
 golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.11.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -846,6 +849,7 @@ golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
 golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
@@ -858,6 +862,7 @@ golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0=
 golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
 golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q=
 golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
+golang.org/x/term v0.29.0/go.mod h1:6bl4lRlvVuDgSf3179VpIxBF0o10JUpXWOnI7nErv7s=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -873,6 +878,7 @@ golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
 golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
+golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=

From 32ea8f6dc823312704118069b5ee7c1afa0dbb65 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 17 Mar 2025 17:25:12 +0000
Subject: [PATCH 65/73] build: update golang.org/x/net to 0.36.0. to fix
 CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to
a denial of service attack from clients which complete the key
exchange slowly, or not at all, causing pending content to be read
into memory, but never transmitted.

This updates golang.org/x/net to fix the problem.

See: https://pkg.go.dev/vuln/GO-2025-3487
See: https://www.cve.org/CVERecord?id=CVE-2025-22869
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/go.mod b/go.mod
index a07b2b9690fcd..a1c804e3dedbd 100644
--- a/go.mod
+++ b/go.mod
@@ -81,7 +81,7 @@ require (
 	go.etcd.io/bbolt v1.3.10
 	goftp.io/server/v2 v2.0.1
 	golang.org/x/crypto v0.35.0
-	golang.org/x/net v0.33.0
+	golang.org/x/net v0.36.0
 	golang.org/x/oauth2 v0.24.0
 	golang.org/x/sync v0.11.0
 	golang.org/x/sys v0.30.0
diff --git a/go.sum b/go.sum
index 86d1d565f2857..fe83ae7154e6c 100644
--- a/go.sum
+++ b/go.sum
@@ -684,7 +684,6 @@ golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf
 golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
 golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
-golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
 golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -768,6 +767,8 @@ golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
 golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
 golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
+golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
+golang.org/x/net v0.36.0/go.mod h1:bFmbeoIPfrw4sMHNhb4J9f6+tPziuGjq7Jk/38fxi1I=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=

From 0121dc11d32a71d6ba0b203b2c9c28ce4538f527 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 21 Mar 2025 22:31:22 +0000
Subject: [PATCH 66/73] build: bump github.com/golang-jwt/jwt/v4 from 4.5.1 to
 4.5.2

Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.1 to 4.5.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 4 ++--
 go.sum | 5 +++--
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/go.mod b/go.mod
index a1c804e3dedbd..b20e6235982e7 100644
--- a/go.mod
+++ b/go.mod
@@ -81,7 +81,7 @@ require (
 	go.etcd.io/bbolt v1.3.10
 	goftp.io/server/v2 v2.0.1
 	golang.org/x/crypto v0.35.0
-	golang.org/x/net v0.36.0
+	golang.org/x/net v0.33.0
 	golang.org/x/oauth2 v0.24.0
 	golang.org/x/sync v0.11.0
 	golang.org/x/sys v0.30.0
@@ -225,7 +225,7 @@ require (
 require (
 	github.com/Microsoft/go-winio v0.6.1 // indirect
 	github.com/ProtonMail/go-crypto v1.1.3
-	github.com/golang-jwt/jwt/v4 v4.5.1
+	github.com/golang-jwt/jwt/v4 v4.5.2
 	github.com/pkg/xattr v0.4.10
 	golang.org/x/mobile v0.0.0-20240716161057-1ad2df20a8b6
 	golang.org/x/term v0.29.0
diff --git a/go.sum b/go.sum
index fe83ae7154e6c..4c5f00d5fc4ee 100644
--- a/go.sum
+++ b/go.sum
@@ -289,6 +289,8 @@ github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang-jwt/jwt/v4 v4.5.1 h1:JdqV9zKUdtaa9gdPlywC3aeoEsR681PlKC+4F5gQgeo=
 github.com/golang-jwt/jwt/v4 v4.5.1/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
+github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
+github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
 github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
@@ -684,6 +686,7 @@ golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf
 golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
 golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
+golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
 golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -767,8 +770,6 @@ golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
 golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
 golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
-golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
-golang.org/x/net v0.36.0/go.mod h1:bFmbeoIPfrw4sMHNhb4J9f6+tPziuGjq7Jk/38fxi1I=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=

From c9f3456341f6bf22dc0711cf06b39c6979730164 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 6 Apr 2025 11:46:13 +0100
Subject: [PATCH 67/73] build: update github.com/golang-jwt/jwt/v5 from 5.2.1
 to 5.2.2 to fix CVE-2025-30204

Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2)

See: https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp
See: https://www.cve.org/CVERecord?id=CVE-2025-30204

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 6 +++---
 go.sum | 7 ++++---
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/go.mod b/go.mod
index b20e6235982e7..e9ce350dece28 100644
--- a/go.mod
+++ b/go.mod
@@ -81,7 +81,7 @@ require (
 	go.etcd.io/bbolt v1.3.10
 	goftp.io/server/v2 v2.0.1
 	golang.org/x/crypto v0.35.0
-	golang.org/x/net v0.33.0
+	golang.org/x/net v0.36.0
 	golang.org/x/oauth2 v0.24.0
 	golang.org/x/sync v0.11.0
 	golang.org/x/sys v0.30.0
@@ -150,7 +150,7 @@ require (
 	github.com/goccy/go-json v0.10.3 // indirect
 	github.com/gofrs/flock v0.8.1 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
+	github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
 	github.com/google/s2a-go v0.1.8 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
 	github.com/googleapis/gax-go/v2 v2.14.0 // indirect
@@ -225,7 +225,7 @@ require (
 require (
 	github.com/Microsoft/go-winio v0.6.1 // indirect
 	github.com/ProtonMail/go-crypto v1.1.3
-	github.com/golang-jwt/jwt/v4 v4.5.2
+	github.com/golang-jwt/jwt/v4 v4.5.1
 	github.com/pkg/xattr v0.4.10
 	golang.org/x/mobile v0.0.0-20240716161057-1ad2df20a8b6
 	golang.org/x/term v0.29.0
diff --git a/go.sum b/go.sum
index 4c5f00d5fc4ee..9b5618edac671 100644
--- a/go.sum
+++ b/go.sum
@@ -289,10 +289,10 @@ github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang-jwt/jwt/v4 v4.5.1 h1:JdqV9zKUdtaa9gdPlywC3aeoEsR681PlKC+4F5gQgeo=
 github.com/golang-jwt/jwt/v4 v4.5.1/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
-github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
-github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
 github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
@@ -686,7 +686,6 @@ golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf
 golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
 golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
 golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
-golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
 golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -770,6 +769,8 @@ golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
 golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
 golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
+golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
+golang.org/x/net v0.36.0/go.mod h1:bFmbeoIPfrw4sMHNhb4J9f6+tPziuGjq7Jk/38fxi1I=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=

From ef975129a8b7e508a5b942b329e07e429a4d5546 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 16 Apr 2025 23:26:06 +0000
Subject: [PATCH 68/73] build: bump golang.org/x/net from 0.36.0 to 0.38.0

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.36.0 to 0.38.0.
- [Commits](https://github.com/golang/net/compare/v0.36.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 16 ++++++++--------
 go.sum | 37 ++++++++++++++-----------------------
 2 files changed, 22 insertions(+), 31 deletions(-)

diff --git a/go.mod b/go.mod
index e9ce350dece28..4291434bfcd2d 100644
--- a/go.mod
+++ b/go.mod
@@ -80,12 +80,12 @@ require (
 	github.com/zeebo/blake3 v0.2.3
 	go.etcd.io/bbolt v1.3.10
 	goftp.io/server/v2 v2.0.1
-	golang.org/x/crypto v0.35.0
-	golang.org/x/net v0.36.0
+	golang.org/x/crypto v0.36.0
+	golang.org/x/net v0.38.0
 	golang.org/x/oauth2 v0.24.0
-	golang.org/x/sync v0.11.0
-	golang.org/x/sys v0.30.0
-	golang.org/x/text v0.22.0
+	golang.org/x/sync v0.12.0
+	golang.org/x/sys v0.31.0
+	golang.org/x/text v0.23.0
 	golang.org/x/time v0.8.0
 	google.golang.org/api v0.211.0
 	gopkg.in/validator.v2 v2.0.1
@@ -150,7 +150,7 @@ require (
 	github.com/goccy/go-json v0.10.3 // indirect
 	github.com/gofrs/flock v0.8.1 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
+	github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
 	github.com/google/s2a-go v0.1.8 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
 	github.com/googleapis/gax-go/v2 v2.14.0 // indirect
@@ -225,8 +225,8 @@ require (
 require (
 	github.com/Microsoft/go-winio v0.6.1 // indirect
 	github.com/ProtonMail/go-crypto v1.1.3
-	github.com/golang-jwt/jwt/v4 v4.5.1
+	github.com/golang-jwt/jwt/v4 v4.5.2
 	github.com/pkg/xattr v0.4.10
 	golang.org/x/mobile v0.0.0-20240716161057-1ad2df20a8b6
-	golang.org/x/term v0.29.0
+	golang.org/x/term v0.30.0
 )
diff --git a/go.sum b/go.sum
index 9b5618edac671..923a2d10adfed 100644
--- a/go.sum
+++ b/go.sum
@@ -287,12 +287,10 @@ github.com/gofrs/flock v0.8.1 h1:+gYjHKf32LDeiEEFhQaotPbLuUXjY5ZqxKgXy7n59aw=
 github.com/gofrs/flock v0.8.1/go.mod h1:F1TvTiK9OcQqauNUHlbJvyl9Qa1QvF/gOUDKA14jxHU=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
-github.com/golang-jwt/jwt/v4 v4.5.1 h1:JdqV9zKUdtaa9gdPlywC3aeoEsR681PlKC+4F5gQgeo=
-github.com/golang-jwt/jwt/v4 v4.5.1/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
+github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
+github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
 github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
-github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
-github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
@@ -684,9 +682,8 @@ golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
 golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
 golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
-golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
-golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
-golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
+golang.org/x/crypto v0.36.0 h1:AnAEvhDddvBdpY+uR+MyHmuZzzNqXSe/GvuDeob5L34=
+golang.org/x/crypto v0.36.0/go.mod h1:Y4J0ReaxCR1IMaabaSMugxJES1EpwhBHhv2bDHklZvc=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -767,10 +764,8 @@ golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
 golang.org/x/net v0.9.0/go.mod h1:d48xBJpPfHeWQsugry2m+kC02ZBRGRgulfHnEXEuWns=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
-golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
-golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
-golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
-golang.org/x/net v0.36.0/go.mod h1:bFmbeoIPfrw4sMHNhb4J9f6+tPziuGjq7Jk/38fxi1I=
+golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8=
+golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -791,9 +786,8 @@ golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
-golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
-golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.11.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.12.0 h1:MHc5BpPuC30uJk597Ri8TV3CNZcTLu6B6z4lJy+g6Jw=
+golang.org/x/sync v0.12.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -850,9 +844,8 @@ golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
-golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik=
+golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
@@ -863,9 +856,8 @@ golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
 golang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=
 golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0=
 golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
-golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q=
-golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
-golang.org/x/term v0.29.0/go.mod h1:6bl4lRlvVuDgSf3179VpIxBF0o10JUpXWOnI7nErv7s=
+golang.org/x/term v0.30.0 h1:PQ39fJZ+mfadBm0y5WlL4vlM7Sx1Hgf13sMIY2+QS9Y=
+golang.org/x/term v0.30.0/go.mod h1:NYYFdzHoI5wRh/h5tDMdMqCqPJZEuNqVR5xJLd/n67g=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -879,9 +871,8 @@ golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
-golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
-golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY=
+golang.org/x/text v0.23.0 h1:D71I7dUrlY+VX0gQShAThNGHFxZ13dGLBHQLVl1mJlY=
+golang.org/x/text v0.23.0/go.mod h1:/BLNzu4aZCJ1+kcD0DNRotWKage4q2rGVAg4o22unh4=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=

From 84f11ae4480986d0cc775bed55219cdeb0844fe7 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 30 Apr 2025 16:13:34 +0100
Subject: [PATCH 69/73] build: stop building with go < go1.23 as security
 updates forbade it

---
 .github/workflows/build.yml | 14 +-------------
 1 file changed, 1 insertion(+), 13 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b251e7ec38cd4..b1a81d1d2a9c5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,7 +26,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        job_name: ['linux', 'linux_386', 'mac_amd64', 'mac_arm64', 'windows', 'other_os', 'go1.21', 'go1.22']
+        job_name: ['linux', 'linux_386', 'mac_amd64', 'mac_arm64', 'windows', 'other_os']
 
         include:
           - job_name: linux
@@ -80,18 +80,6 @@ jobs:
             compile_all: true
             deploy: true
 
-          - job_name: go1.21
-            os: ubuntu-latest
-            go: '1.21'
-            quicktest: true
-            racequicktest: true
-
-          - job_name: go1.22
-            os: ubuntu-latest
-            go: '1.22'
-            quicktest: true
-            racequicktest: true
-
     name: ${{ matrix.job_name }}
 
     runs-on: ${{ matrix.os }}

From 3d3ea9ee30ef56d1a80b13cc4244a2a9a218c55d Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Wed, 26 Feb 2025 12:21:35 +0000
Subject: [PATCH 70/73] vfs: fix integration test failures

In this commit

ceef78ce4493f8d0 vfs: fix directory cache serving stale data

We added a new test which caused lots of integration test failures.

This fixes the problem by disabling the test unless the feature flag
DirModTimeUpdatesOnWrite is present on the remote.
---
 vfs/dir_test.go | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/vfs/dir_test.go b/vfs/dir_test.go
index 69e45c269cedf..5a4b63e04a8b6 100644
--- a/vfs/dir_test.go
+++ b/vfs/dir_test.go
@@ -658,10 +658,14 @@ func TestDirFileOpen(t *testing.T) {
 }
 
 func TestDirEntryModTimeInvalidation(t *testing.T) {
-	if runtime.GOOS == "windows" {
+	r, vfs := newTestVFS(t)
+	features := r.Fremote.Features()
+	if !features.DirModTimeUpdatesOnWrite {
+		t.Skip("Need DirModTimeUpdatesOnWrite")
+	}
+	if features.IsLocal && runtime.GOOS == "windows" {
 		t.Skip("dirent modtime is unreliable on Windows filesystems")
 	}
-	r, vfs := newTestVFS(t)
 
 	// Needs to be less than 2x the wait time below, othewrwise the entry
 	// gets cleared out before it had a chance to be updated.

From 13875b4500fc77a073fae58a1b771530706b7392 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Thu, 1 May 2025 15:33:17 +0100
Subject: [PATCH 71/73] Version v1.69.2

---
 MANUAL.html                                  | 113 ++++++++--
 MANUAL.md                                    | 120 +++++++---
 MANUAL.txt                                   | 165 ++++++++++----
 docs/content/changelog.md                    |  44 ++++
 docs/content/commands/rclone.md              |   2 +-
 docs/content/commands/rclone_authorize.md    |   7 +-
 docs/content/commands/rclone_copyto.md       |   2 +
 docs/content/commands/rclone_copyurl.md      |   2 +-
 docs/content/commands/rclone_mount.md        |   4 +-
 docs/content/commands/rclone_nfsmount.md     |   4 +-
 docs/content/commands/rclone_serve_dlna.md   |   4 +-
 docs/content/commands/rclone_serve_docker.md |   4 +-
 docs/content/commands/rclone_serve_ftp.md    |   4 +-
 docs/content/commands/rclone_serve_http.md   |   4 +-
 docs/content/commands/rclone_serve_nfs.md    |   4 +-
 docs/content/commands/rclone_serve_s3.md     |   6 +-
 docs/content/commands/rclone_serve_sftp.md   |   4 +-
 docs/content/commands/rclone_serve_webdav.md |   4 +-
 docs/content/flags.md                        |   2 +-
 docs/content/s3.md                           |   2 +-
 rclone.1                                     | 221 +++++++++++++++----
 21 files changed, 544 insertions(+), 178 deletions(-)

diff --git a/MANUAL.html b/MANUAL.html
index 0cbfcecd64d32..471b22e475fbc 100644
--- a/MANUAL.html
+++ b/MANUAL.html
@@ -5,6 +5,7 @@
   <meta name="generator" content="pandoc" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
   <meta name="author" content="Nick Craig-Wood" />
+  <meta name="dcterms.date" content="2025-05-01" />
   <title>rclone(1) User Manual</title>
   <style>
     code{white-space: pre-wrap;}
@@ -81,7 +82,7 @@
 <header id="title-block-header">
 <h1 class="title">rclone(1) User Manual</h1>
 <p class="author">Nick Craig-Wood</p>
-<p class="date">Feb 14, 2025</p>
+<p class="date">May 01, 2025</p>
 </header>
 <h1 id="name">NAME</h1>
 <p>rclone - manage files on cloud storage</p>
@@ -1694,9 +1695,10 @@ <h1 id="rclone-authorize">rclone authorize</h1>
 <p>Remote authorization.</p>
 <h2 id="synopsis-19">Synopsis</h2>
 <p>Remote authorization. Used to authorize a remote or headless rclone from a machine with a browser - use as instructed by rclone config.</p>
+<p>The command requires 1-3 arguments: - fs name (e.g., "drive", "s3", etc.) - Either a base64 encoded JSON blob obtained from a previous rclone config session - Or a client_id and client_secret pair obtained from the remote service</p>
 <p>Use --auth-no-open-browser to prevent rclone to open auth link in default browser automatically.</p>
 <p>Use --template to generate HTML output via a custom Go template. If a blank string is provided as an argument to this flag, the default template is used.</p>
-<pre><code>rclone authorize [flags]</code></pre>
+<pre><code>rclone authorize &lt;fs name&gt; [base64_json_blob | client_id client_secret] [flags]</code></pre>
 <h2 id="options-19">Options</h2>
 <pre><code>      --auth-no-open-browser   Do not automatically open auth link in default browser
   -h, --help                   help for authorize
@@ -2421,6 +2423,7 @@ <h2 id="synopsis-41">Synopsis</h2>
     copy it to dst, overwriting existing files if they exist
     see copy command for full details</code></pre>
 <p>This doesn't transfer files that are identical on src and dst, testing by size and modification time or MD5SUM. It doesn't delete files from the destination.</p>
+<p><em>If you are looking to copy just a byte range of a file, please see 'rclone cat --offset X --count Y'</em></p>
 <p><strong>Note</strong>: Use the <code>-P</code>/<code>--progress</code> flag to view real-time transfer statistics</p>
 <pre><code>rclone copyto source:path dest:path [flags]</code></pre>
 <h2 id="options-48">Options</h2>
@@ -2503,7 +2506,7 @@ <h1 id="rclone-copyurl">rclone copyurl</h1>
 <h2 id="synopsis-42">Synopsis</h2>
 <p>Download a URL's content and copy it to the destination without saving it in temporary storage.</p>
 <p>Setting <code>--auto-filename</code> will attempt to automatically determine the filename from the URL (after any redirections) and used in the destination path.</p>
-<p>With <code>--auto-filename-header</code> in addition, if a specific filename is set in HTTP headers, it will be used instead of the name from the URL. With <code>--print-filename</code> in addition, the resulting file name will be printed.</p>
+<p>With <code>--header-filename</code> in addition, if a specific filename is set in HTTP headers, it will be used instead of the name from the URL. With <code>--print-filename</code> in addition, the resulting file name will be printed.</p>
 <p>Setting <code>--no-clobber</code> will prevent overwriting file on the destination if there is one with the same name.</p>
 <p>Setting <code>--stdout</code> or making the output file name <code>-</code> will cause the output to be written to standard output.</p>
 <h2 id="troubleshooting">Troubleshooting</h2>
@@ -3198,7 +3201,7 @@ <h2 id="vfs-file-caching">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off">--vfs-cache-mode off</h3>
@@ -3737,7 +3740,7 @@ <h2 id="vfs-file-caching-1">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-1">--vfs-cache-mode off</h3>
@@ -4321,7 +4324,7 @@ <h2 id="vfs-file-caching-2">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-2">--vfs-cache-mode off</h3>
@@ -4544,7 +4547,7 @@ <h2 id="vfs-file-caching-3">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-3">--vfs-cache-mode off</h3>
@@ -4788,7 +4791,7 @@ <h2 id="vfs-file-caching-4">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-4">--vfs-cache-mode off</h3>
@@ -5181,7 +5184,7 @@ <h2 id="vfs-file-caching-5">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-5">--vfs-cache-mode off</h3>
@@ -5455,7 +5458,7 @@ <h2 id="vfs-file-caching-6">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-6">--vfs-cache-mode off</h3>
@@ -5739,7 +5742,7 @@ <h2 id="synopsis-70">Synopsis</h2>
 <p><code>serve s3</code> is considered <strong>Experimental</strong> so use with care.</p>
 <p>S3 server supports Signature Version 4 authentication. Just use <code>--auth-key accessKey,secretKey</code> and set the <code>Authorization</code> header correctly in the request. (See the <a href="https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html">AWS docs</a>).</p>
 <p><code>--auth-key</code> can be repeated for multiple auth pairs. If <code>--auth-key</code> is not provided then <code>serve s3</code> will allow anonymous access.</p>
-<p>Please note that some clients may require HTTPS endpoints. See <a href="#ssl-tls">the SSL docs</a> for more information.</p>
+<p>Please note that some clients may require HTTPS endpoints. See <a href="#tls-ssl">the SSL docs</a> for more information.</p>
 <p>This command uses the <a href="#vfs-virtual-file-system">VFS directory cache</a>. All the functionality will work with <code>--vfs-cache-mode off</code>. Using <code>--vfs-cache-mode full</code> (or <code>writes</code>) can be used to cache objects locally to improve performance.</p>
 <p>Use <code>--force-path-style=false</code> if you want to use the bucket name as a part of the hostname (such as mybucket.local)</p>
 <p>Use <code>--etag-hash</code> if you want to change the hash uses for the <code>ETag</code>. Note that using anything other than <code>MD5</code> (the default) is likely to cause problems for S3 clients which rely on the Etag being the MD5.</p>
@@ -5859,7 +5862,7 @@ <h2 id="vfs-file-caching-7">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-7">--vfs-cache-mode off</h3>
@@ -6108,7 +6111,7 @@ <h2 id="vfs-file-caching-8">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-8">--vfs-cache-mode off</h3>
@@ -6513,7 +6516,7 @@ <h2 id="vfs-file-caching-9">VFS File Caching</h2>
 <p>If run with <code>-vv</code> rclone will print the location of the file cache. The files are stored in the user cache file area which is OS dependent but can be controlled with <code>--cache-dir</code> or setting the appropriate environment variable.</p>
 <p>The cache has 4 different modes selected by <code>--vfs-cache-mode</code>. The higher the cache mode the more compatible rclone becomes at the cost of using disk space.</p>
 <p>Note that files are written back to the remote only when they are closed and if they haven't been accessed for <code>--vfs-write-back</code> seconds. If rclone is quit or dies with files that haven't been uploaded, these will be uploaded next time rclone is run with the same flags.</p>
-<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-size</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
+<p>If using <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> note that the cache may exceed these quotas for two reasons. Firstly because it is only checked every <code>--vfs-cache-poll-interval</code>. Secondly because open files cannot be evicted from the cache. When <code>--vfs-cache-max-size</code> or <code>--vfs-cache-min-free-space</code> is exceeded, rclone will attempt to evict the least accessed files from the cache first. rclone will start with files that haven't been accessed for the longest. This cache flushing strategy is efficient and more relevant files are likely to remain cached.</p>
 <p>The <code>--vfs-cache-max-age</code> will evict files from the cache after the set time since last access has passed. The default value of 1 hour will start evicting files from cache that haven't been accessed for 1 hour. When a cached file is accessed the 1 hour timer is reset to 0 and will wait for 1 more hour before evicting. Specify the time with standard notation, s, m, h, d, w .</p>
 <p>You <strong>should not</strong> run two copies of rclone using the same VFS cache with the same or overlapping remotes if using <code>--vfs-cache-mode &gt; off</code>. This can potentially cause data corruption if you do. You can work around this by giving each rclone its own cache hierarchy with <code>--cache-dir</code>. You don't need to worry about this if the remotes in use don't overlap.</p>
 <h3 id="vfs-cache-mode-off-9">--vfs-cache-mode off</h3>
@@ -12289,7 +12292,7 @@ <h2 id="networking">Networking</h2>
       --tpslimit float                     Limit HTTP transactions per second to this
       --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
       --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default &quot;rclone/v1.69.1&quot;)</code></pre>
+      --user-agent string                  Set the user-agent to a specified string (default &quot;rclone/v1.69.2&quot;)</code></pre>
 <h2 id="performance">Performance</h2>
 <p>Flags helpful for increasing performance.</p>
 <pre><code>      --buffer-size SizeSuffix   In memory buffer size when reading files for each --transfer (default 16Mi)
@@ -13238,7 +13241,7 @@ <h2 id="getting-started">Getting started</h2>
 <p>In the first example we will use the <a href="https://rclone.org/sftp/">SFTP</a> rclone volume with Docker engine on a standalone Ubuntu machine.</p>
 <p>Start from <a href="https://docs.docker.com/engine/install/">installing Docker</a> on the host.</p>
 <p>The <em>FUSE</em> driver is a prerequisite for rclone mounting and should be installed on host:</p>
-<pre><code>sudo apt-get -y install fuse</code></pre>
+<pre><code>sudo apt-get -y install fuse3</code></pre>
 <p>Create two directories required by rclone docker plugin:</p>
 <pre><code>sudo mkdir -p /var/lib/docker-plugins/rclone/config
 sudo mkdir -p /var/lib/docker-plugins/rclone/cache</code></pre>
@@ -15152,7 +15155,7 @@ <h3 id="key-management-system-kms">Key Management System (KMS)</h3>
 <h3 id="glacier-and-glacier-deep-archive">Glacier and Glacier Deep Archive</h3>
 <p>You can upload objects using the glacier storage class or transition them to glacier using a <a href="http://docs.aws.amazon.com/AmazonS3/latest/user-guide/create-lifecycle.html">lifecycle policy</a>. The bucket can still be synced or copied into normally, but if rclone tries to access data from the glacier storage class you will see an error like below.</p>
 <pre><code>2017/09/11 19:07:43 Failed to sync: failed to open source object: Object in GLACIER, restore first: path/to/file</code></pre>
-<p>In this case you need to <a href="http://docs.aws.amazon.com/AmazonS3/latest/user-guide/restore-archived-objects.html">restore</a> the object(s) in question before using rclone.</p>
+<p>In this case you need to <a href="http://docs.aws.amazon.com/AmazonS3/latest/user-guide/restore-archived-objects.html">restore</a> the object(s) in question before accessing object contents. The <a href="#restore">restore</a> section below shows how to do this with rclone.</p>
 <p>Note that rclone only speaks the S3 API it does not speak the Glacier Vault API, so rclone cannot directly access Glacier Vaults.</p>
 <h3 id="object-lock-enabled-s3-bucket">Object-lock enabled S3 bucket</h3>
 <p>According to AWS's <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-permission">documentation on S3 Object Lock</a>:</p>
@@ -16512,7 +16515,7 @@ <h3 id="restore">restore</h3>
 <pre><code>rclone backend restore remote: [options] [&lt;arguments&gt;+]</code></pre>
 <p>This command can be used to restore one or more objects from GLACIER to normal storage or from INTELLIGENT-TIERING Archive Access / Deep Archive Access tier to the Frequent Access tier.</p>
 <p>Usage Examples:</p>
-<pre><code>rclone backend restore s3:bucket/path/to/object -o priority=PRIORITY -o lifetime=DAYS
+<pre><code>rclone backend restore s3:bucket/path/to/ --include /object -o priority=PRIORITY -o lifetime=DAYS
 rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY -o lifetime=DAYS
 rclone backend restore s3:bucket -o priority=PRIORITY -o lifetime=DAYS
 rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY</code></pre>
@@ -19889,7 +19892,7 @@ <h2 id="configuration-4">Configuration</h2>
 d) Delete this remote
 y/e/d&gt; y</code></pre>
 <p>See the <a href="https://rclone.org/remote_setup/">remote setup docs</a> for how to set it up on a machine with no Internet browser available.</p>
-<p>Note that rclone runs a webserver on your local machine to collect the token as returned from Box. This only runs from the moment it opens your browser to the moment you get back the verification code. This is on <code>http://127.0.0.1:53682/</code> and this it may require you to unblock it temporarily if you are running a host firewall.</p>
+<p>Note that rclone runs a webserver on your local machine to collect the token as returned from Box. This only runs from the moment it opens your browser to the moment you get back the verification code. This is on <code>http://127.0.0.1:53682/</code> and this may require you to unblock it temporarily if you are running a host firewall.</p>
 <p>Once configured you can then use <code>rclone</code> like this,</p>
 <p>List directories in top level of your Box</p>
 <pre><code>rclone lsd remote:</code></pre>
@@ -35553,7 +35556,7 @@ <h4 id="sftp-description">--sftp-description</h4>
 <li>Required: false</li>
 </ul>
 <h2 id="limitations-36">Limitations</h2>
-<p>On some SFTP servers (e.g. Synology) the paths are different for SSH and SFTP so the hashes can't be calculated properly. For them using <code>disable_hashcheck</code> is a good idea.</p>
+<p>On some SFTP servers (e.g. Synology) the paths are different for SSH and SFTP so the hashes can't be calculated properly. You can either use <a href="#--sftp-path-override"><code>--sftp-path-override</code></a> or <a href="#--sftp-disable-hashcheck"><code>disable_hashcheck</code></a>.</p>
 <p>The only ssh agent supported under Windows is Putty's pageant.</p>
 <p>The Go SSH library disables the use of the aes128-cbc cipher by default, due to security concerns. This can be re-enabled on a per-connection basis by setting the <code>use_insecure_cipher</code> setting in the configuration file to <code>true</code>. Further details on the insecurity of this cipher can be found <a href="http://www.isg.rhul.ac.uk/~kp/SandPfinal.pdf">in this paper</a>.</p>
 <p>SFTP isn't supported under plan9 until <a href="https://github.com/pkg/sftp/issues/156">this issue</a> is fixed.</p>
@@ -38311,6 +38314,69 @@ <h3 id="noop">noop</h3>
 <li>"error": return an error based on option value</li>
 </ul>
 <h1 id="changelog-1">Changelog</h1>
+<h2 id="v1.69.2---2025-05-01">v1.69.2 - 2025-05-01</h2>
+<p><a href="https://github.com/rclone/rclone/compare/v1.69.1...v1.69.2">See commits</a></p>
+<ul>
+<li>Bug fixes
+<ul>
+<li>accounting: Fix percentDiff calculation -- (Anagh Kumar Baranwal)</li>
+<li>build
+<ul>
+<li>Update github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 to fix CVE-2025-30204 (dependabot[bot])</li>
+<li>Update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to fix CVE-2025-30204 (dependabot[bot])</li>
+<li>Update golang.org/x/crypto to v0.35.0 to fix CVE-2025-22869 (Nick Craig-Wood)</li>
+<li>Update golang.org/x/net from 0.36.0 to 0.38.0 to fix CVE-2025-22870 (dependabot[bot])</li>
+<li>Update golang.org/x/net to 0.36.0. to fix CVE-2025-22869 (dependabot[bot])</li>
+<li>Stop building with go &lt; go1.23 as security updates forbade it (Nick Craig-Wood)</li>
+<li>Fix docker plugin build (Anagh Kumar Baranwal)</li>
+</ul></li>
+<li>cmd: Fix crash if rclone is invoked without any arguments (Janne Hellsten)</li>
+<li>config: Read configuration passwords from stdin even when terminated with EOF (Samantha Bowen)</li>
+<li>doc fixes (Andrew Kreimer, Danny Garside, eccoisle, Ed Craig-Wood, emyarod, jack, Jugal Kishore, Markus Gerstel, Michael Kebe, Nick Craig-Wood, simonmcnair, simwai, Zachary Vorhies)</li>
+<li>fs: Fix corruption of SizeSuffix with "B" suffix in config (eg --min-size) (Nick Craig-Wood)</li>
+<li>lib/http: Fix race between Serve() and Shutdown() (Nick Craig-Wood)</li>
+<li>object: Fix memory object out of bounds Seek (Nick Craig-Wood)</li>
+<li>operations: Fix call fmt.Errorf with wrong err (alingse)</li>
+<li>rc
+<ul>
+<li>Disable the metrics server when running <code>rclone rc</code> (hiddenmarten)</li>
+<li>Fix debug/* commands not being available over unix sockets (Nick Craig-Wood)</li>
+</ul></li>
+<li>serve nfs: Fix unlikely crash (Nick Craig-Wood)</li>
+<li>stats: Fix the speed not getting updated after a pause in the processing (Anagh Kumar Baranwal)</li>
+<li>sync
+<ul>
+<li>Fix cpu spinning when empty directory finding with leading slashes (Nick Craig-Wood)</li>
+<li>Copy dir modtimes even when copyEmptySrcDirs is false (ll3006)</li>
+</ul></li>
+</ul></li>
+<li>VFS
+<ul>
+<li>Fix directory cache serving stale data (Lorenz Brun)</li>
+<li>Fix inefficient directory caching when directory reads are slow (huanghaojun)</li>
+<li>Fix integration test failures (Nick Craig-Wood)</li>
+</ul></li>
+<li>Drive
+<ul>
+<li>Metadata: fix error when setting copy-requires-writer-permission on a folder (Nick Craig-Wood)</li>
+</ul></li>
+<li>Dropbox
+<ul>
+<li>Retry link without expiry (Dave Vasilevsky)</li>
+</ul></li>
+<li>HTTP
+<ul>
+<li>Correct root if definitely pointing to a file (nielash)</li>
+</ul></li>
+<li>Iclouddrive
+<ul>
+<li>Fix so created files are writable (Ben Alex)</li>
+</ul></li>
+<li>Onedrive
+<ul>
+<li>Fix metadata ordering in permissions (Nick Craig-Wood)</li>
+</ul></li>
+</ul>
 <h2 id="v1.69.1---2025-02-14">v1.69.1 - 2025-02-14</h2>
 <p><a href="https://github.com/rclone/rclone/compare/v1.69.0...v1.69.1">See commits</a></p>
 <ul>
@@ -38390,7 +38456,7 @@ <h2 id="v1.69.0---2025-01-12">v1.69.0 - 2025-01-12</h2>
 <li>http servers: Disable automatic authentication skipping for unix sockets in http servers (Moises Lima)
 <ul>
 <li>This was making it impossible to use unix sockets with an proxy</li>
-<li>This might now cause rclone to need authenticaton where it didn't before</li>
+<li>This might now cause rclone to need authentication where it didn't before</li>
 </ul></li>
 <li>oauthutil: add support for OAuth client credential flow (Martin Hassack, Nick Craig-Wood)</li>
 <li>operations: make log messages consistent for mkdir/rmdir at INFO level (Nick Craig-Wood)</li>
@@ -39430,7 +39496,7 @@ <h2 id="v1.65.0---2023-11-26">v1.65.0 - 2023-11-26</h2>
 <li>Refactor version info and icon resource handling on windows (albertony)</li>
 </ul></li>
 <li>doc updates (albertony, alfish2000, asdffdsazqqq, Dimitri Papadopoulos, Herby Gillot, Joda Stößer, Manoj Ghosh, Nick Craig-Wood)</li>
-<li>Implement <code>--metadata-mapper</code> to transform metatadata with a user supplied program (Nick Craig-Wood)</li>
+<li>Implement <code>--metadata-mapper</code> to transform metadata with a user supplied program (Nick Craig-Wood)</li>
 <li>Add <code>ChunkWriterDoesntSeek</code> feature flag and set it for b2 (Nick Craig-Wood)</li>
 <li>lib/http: Export basic go string functions for use in <code>--template</code> (Gabriel Espinoza)</li>
 <li>makefile: Use POSIX compatible install arguments (Mina Galić)</li>
@@ -39605,7 +39671,7 @@ <h2 id="v1.64.1---2023-10-17">v1.64.1 - 2023-10-17</h2>
 <li>B2
 <ul>
 <li>Fix multipart upload: corrupted on transfer: sizes differ XXX vs 0 (Nick Craig-Wood)</li>
-<li>Fix locking window when getting mutipart upload URL (Nick Craig-Wood)</li>
+<li>Fix locking window when getting multipart upload URL (Nick Craig-Wood)</li>
 <li>Fix server side copies greater than 4GB (Nick Craig-Wood)</li>
 <li>Fix chunked streaming uploads (Nick Craig-Wood)</li>
 <li>Reduce default <code>--b2-upload-concurrency</code> to 4 to reduce memory usage (Nick Craig-Wood)</li>
@@ -47606,7 +47672,6 @@ <h2 id="contributors">Contributors</h2>
 <li>ben-ba <a href="mailto:benjamin.brauner@gmx.de" class="email">benjamin.brauner@gmx.de</a></li>
 <li>Eli Orzitzer <a href="mailto:e_orz@yahoo.com" class="email">e_orz@yahoo.com</a></li>
 <li>Anthony Metzidis <a href="mailto:anthony.metzidis@gmail.com" class="email">anthony.metzidis@gmail.com</a></li>
-<li>emyarod <a href="mailto:afw5059@gmail.com" class="email">afw5059@gmail.com</a></li>
 <li>keongalvin <a href="mailto:keongalvin@gmail.com" class="email">keongalvin@gmail.com</a></li>
 <li>rarspace01 <a href="mailto:rarspace01@users.noreply.github.com" class="email">rarspace01@users.noreply.github.com</a></li>
 <li>Paul Stern <a href="mailto:paulstern45@gmail.com" class="email">paulstern45@gmail.com</a></li>
diff --git a/MANUAL.md b/MANUAL.md
index 889d4fec9ddcf..2b2f6315ca0ef 100644
--- a/MANUAL.md
+++ b/MANUAL.md
@@ -1,6 +1,6 @@
 % rclone(1) User Manual
 % Nick Craig-Wood
-% Feb 14, 2025
+% May 01, 2025
 
 # NAME
 
@@ -2858,13 +2858,18 @@ Remote authorization. Used to authorize a remote or headless
 rclone from a machine with a browser - use as instructed by
 rclone config.
 
+The command requires 1-3 arguments:
+  - fs name (e.g., "drive", "s3", etc.)
+  - Either a base64 encoded JSON blob obtained from a previous rclone config session
+  - Or a client_id and client_secret pair obtained from the remote service
+
 Use --auth-no-open-browser to prevent rclone to open auth
 link in default browser automatically.
 
 Use --template to generate HTML output via a custom Go template. If a blank string is provided as an argument to this flag, the default template is used.
 
 ```
-rclone authorize [flags]
+rclone authorize <fs name> [base64_json_blob | client_id client_secret] [flags]
 ```
 
 ## Options
@@ -4232,6 +4237,8 @@ This doesn't transfer files that are identical on src and dst, testing
 by size and modification time or MD5SUM.  It doesn't delete files from
 the destination.
 
+*If you are looking to copy just a byte range of a file, please see 'rclone cat --offset X --count Y'*
+
 **Note**: Use the `-P`/`--progress` flag to view real-time transfer statistics
 
 
@@ -4353,7 +4360,7 @@ Setting `--auto-filename` will attempt to automatically determine the
 filename from the URL (after any redirections) and used in the
 destination path.
 
-With `--auto-filename-header` in addition, if a specific filename is
+With `--header-filename` in addition, if a specific filename is
 set in HTTP headers, it will be used instead of the name from the URL.
 With `--print-filename` in addition, the resulting file name will be
 printed.
@@ -5861,11 +5868,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -7123,11 +7130,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -8251,11 +8258,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -8806,11 +8813,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -9363,11 +9370,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -10101,11 +10108,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -10778,11 +10785,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -11427,7 +11434,7 @@ docs](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html)).
 access.
 
 Please note that some clients may require HTTPS endpoints. See [the
-SSL docs](#ssl-tls) for more information.
+SSL docs](#tls-ssl) for more information.
 
 This command uses the [VFS directory cache](#vfs-virtual-file-system).
 All the functionality will work with `--vfs-cache-mode off`. Using
@@ -11734,11 +11741,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -12328,11 +12335,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -13109,11 +13116,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
@@ -21097,7 +21104,7 @@ Flags for general networking and HTTP stuff.
       --tpslimit float                     Limit HTTP transactions per second to this
       --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
       --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.1")
+      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.2")
 ```
 
 
@@ -22141,7 +22148,7 @@ on the host.
 The _FUSE_ driver is a prerequisite for rclone mounting and should be
 installed on host:
 ```
-sudo apt-get -y install fuse
+sudo apt-get -y install fuse3
 ```
 
 Create two directories required by rclone docker plugin:
@@ -25783,7 +25790,8 @@ tries to access data from the glacier storage class you will see an error like b
     2017/09/11 19:07:43 Failed to sync: failed to open source object: Object in GLACIER, restore first: path/to/file
 
 In this case you need to [restore](http://docs.aws.amazon.com/AmazonS3/latest/user-guide/restore-archived-objects.html)
-the object(s) in question before using rclone.
+the object(s) in question before accessing object contents.
+The [restore](#restore) section below shows how to do this with rclone.
 
 Note that rclone only speaks the S3 API it does not speak the Glacier
 Vault API, so rclone cannot directly access Glacier Vaults.
@@ -27186,7 +27194,7 @@ or from INTELLIGENT-TIERING Archive Access / Deep Archive Access tier to the Fre
 
 Usage Examples:
 
-    rclone backend restore s3:bucket/path/to/object -o priority=PRIORITY -o lifetime=DAYS
+    rclone backend restore s3:bucket/path/to/ --include /object -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY
@@ -31592,7 +31600,7 @@ machine with no Internet browser available.
 Note that rclone runs a webserver on your local machine to collect the
 token as returned from Box. This only runs from the moment it opens
 your browser to the moment you get back the verification code.  This
-is on `http://127.0.0.1:53682/` and this it may require you to unblock
+is on `http://127.0.0.1:53682/` and this may require you to unblock
 it temporarily if you are running a host firewall.
 
 Once configured you can then use `rclone` like this,
@@ -53113,7 +53121,8 @@ Properties:
 
 On some SFTP servers (e.g. Synology) the paths are different
 for SSH and SFTP so the hashes can't be calculated properly.
-For them using `disable_hashcheck` is a good idea.
+You can either use [`--sftp-path-override`](#--sftp-path-override)
+or [`disable_hashcheck`](#--sftp-disable-hashcheck).
 
 The only ssh agent supported under Windows is Putty's pageant.
 
@@ -56649,6 +56658,50 @@ Options:
 
 # Changelog
 
+## v1.69.2 - 2025-05-01
+
+[See commits](https://github.com/rclone/rclone/compare/v1.69.1...v1.69.2)
+
+* Bug fixes
+    * accounting: Fix percentDiff calculation -- (Anagh Kumar Baranwal)
+    * build
+        * Update github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 to fix CVE-2025-30204 (dependabot[bot])
+        * Update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to fix CVE-2025-30204 (dependabot[bot])
+        * Update golang.org/x/crypto to v0.35.0 to fix CVE-2025-22869 (Nick Craig-Wood)
+        * Update golang.org/x/net from 0.36.0 to 0.38.0 to fix CVE-2025-22870 (dependabot[bot])
+        * Update golang.org/x/net to 0.36.0. to fix CVE-2025-22869 (dependabot[bot])
+        * Stop building with go < go1.23 as security updates forbade it (Nick Craig-Wood)
+        * Fix docker plugin build (Anagh Kumar Baranwal)
+    * cmd: Fix crash if rclone is invoked without any arguments (Janne Hellsten)
+    * config: Read configuration passwords from stdin even when terminated with EOF (Samantha Bowen)
+    * doc fixes (Andrew Kreimer, Danny Garside, eccoisle, Ed Craig-Wood, emyarod, jack, Jugal Kishore, Markus Gerstel, Michael Kebe, Nick Craig-Wood, simonmcnair, simwai, Zachary Vorhies)
+    * fs: Fix corruption of SizeSuffix with "B" suffix in config (eg --min-size) (Nick Craig-Wood)
+    * lib/http: Fix race between Serve() and Shutdown() (Nick Craig-Wood)
+    * object: Fix memory object out of bounds Seek (Nick Craig-Wood)
+    * operations: Fix call fmt.Errorf with wrong err (alingse)
+    * rc
+        * Disable the metrics server when running `rclone rc` (hiddenmarten)
+        * Fix debug/* commands not being available over unix sockets (Nick Craig-Wood)
+    * serve nfs: Fix unlikely crash (Nick Craig-Wood)
+    * stats: Fix the speed not getting updated after a pause in the processing (Anagh Kumar Baranwal)
+    * sync
+        * Fix cpu spinning when empty directory finding with leading slashes (Nick Craig-Wood)
+        * Copy dir modtimes even when copyEmptySrcDirs is false (ll3006)
+* VFS
+    * Fix directory cache serving stale data (Lorenz Brun)
+    * Fix inefficient directory caching when directory reads are slow (huanghaojun)
+    * Fix integration test failures (Nick Craig-Wood)
+* Drive
+    * Metadata: fix error when setting copy-requires-writer-permission on a folder (Nick Craig-Wood)
+* Dropbox
+    * Retry link without expiry (Dave Vasilevsky)
+* HTTP
+    * Correct root if definitely pointing to a file (nielash)
+* Iclouddrive
+    * Fix so created files are writable (Ben Alex)
+* Onedrive
+    * Fix metadata ordering in permissions (Nick Craig-Wood)
+
 ## v1.69.1 - 2025-02-14
 
 [See commits](https://github.com/rclone/rclone/compare/v1.69.0...v1.69.1)
@@ -56704,7 +56757,7 @@ Options:
     * fs: Make `--links` flag global and add new `--local-links` and `--vfs-links` flags (Nick Craig-Wood)
     * http servers: Disable automatic authentication skipping for unix sockets in http servers (Moises Lima)
         * This was making it impossible to use unix sockets with an proxy
-        * This might now cause rclone to need authenticaton where it didn't before
+        * This might now cause rclone to need authentication where it didn't before
     * oauthutil: add support for OAuth client credential flow (Martin Hassack, Nick Craig-Wood)
     * operations: make log messages consistent for mkdir/rmdir at INFO level (Nick Craig-Wood)
     * rc: Add `relative` to [vfs/queue-set-expiry](https://rclone.org/rc/#vfs-queue-set-expiry) (Nick Craig-Wood)
@@ -57382,7 +57435,7 @@ instead of of `--size-only`, when `check` is not available.
         * Update all dependencies (Nick Craig-Wood)
         * Refactor version info and icon resource handling on windows (albertony)
     * doc updates (albertony, alfish2000, asdffdsazqqq, Dimitri Papadopoulos, Herby Gillot, Joda Stößer, Manoj Ghosh, Nick Craig-Wood)
-    * Implement `--metadata-mapper` to transform metatadata with a user supplied program (Nick Craig-Wood)
+    * Implement `--metadata-mapper` to transform metadata with a user supplied program (Nick Craig-Wood)
     * Add `ChunkWriterDoesntSeek` feature flag and set it for b2 (Nick Craig-Wood)
     * lib/http: Export basic go string functions for use in `--template` (Gabriel Espinoza)
     * makefile: Use POSIX compatible install arguments (Mina Galić)
@@ -57497,7 +57550,7 @@ instead of of `--size-only`, when `check` is not available.
     * Fix "fatal error: concurrent map writes" (Nick Craig-Wood)
 * B2
     * Fix multipart upload: corrupted on transfer: sizes differ XXX vs 0 (Nick Craig-Wood)
-    * Fix locking window when getting mutipart upload URL (Nick Craig-Wood)
+    * Fix locking window when getting multipart upload URL (Nick Craig-Wood)
     * Fix server side copies greater than 4GB (Nick Craig-Wood)
     * Fix chunked streaming uploads (Nick Craig-Wood)
     * Reduce default `--b2-upload-concurrency` to 4 to reduce memory usage (Nick Craig-Wood)
@@ -63404,7 +63457,6 @@ put them back in again.` >}}
   * ben-ba <benjamin.brauner@gmx.de>
   * Eli Orzitzer <e_orz@yahoo.com>
   * Anthony Metzidis <anthony.metzidis@gmail.com>
-  * emyarod <afw5059@gmail.com>
   * keongalvin <keongalvin@gmail.com>
   * rarspace01 <rarspace01@users.noreply.github.com>
   * Paul Stern <paulstern45@gmail.com>
diff --git a/MANUAL.txt b/MANUAL.txt
index ea2b464f91c23..477dcc4b8d9df 100644
--- a/MANUAL.txt
+++ b/MANUAL.txt
@@ -1,6 +1,6 @@
 rclone(1) User Manual
 Nick Craig-Wood
-Feb 14, 2025
+May 01, 2025
 
 NAME
 
@@ -2668,6 +2668,11 @@ Synopsis
 Remote authorization. Used to authorize a remote or headless rclone from
 a machine with a browser - use as instructed by rclone config.
 
+The command requires 1-3 arguments: - fs name (e.g., "drive", "s3",
+etc.) - Either a base64 encoded JSON blob obtained from a previous
+rclone config session - Or a client_id and client_secret pair obtained
+from the remote service
+
 Use --auth-no-open-browser to prevent rclone to open auth link in
 default browser automatically.
 
@@ -2675,7 +2680,7 @@ Use --template to generate HTML output via a custom Go template. If a
 blank string is provided as an argument to this flag, the default
 template is used.
 
-    rclone authorize [flags]
+    rclone authorize <fs name> [base64_json_blob | client_id client_secret] [flags]
 
 Options
 
@@ -3904,6 +3909,9 @@ This doesn't transfer files that are identical on src and dst, testing
 by size and modification time or MD5SUM. It doesn't delete files from
 the destination.
 
+If you are looking to copy just a byte range of a file, please see
+'rclone cat --offset X --count Y'
+
 Note: Use the -P/--progress flag to view real-time transfer statistics
 
     rclone copyto source:path dest:path [flags]
@@ -4012,8 +4020,8 @@ Setting --auto-filename will attempt to automatically determine the
 filename from the URL (after any redirections) and used in the
 destination path.
 
-With --auto-filename-header in addition, if a specific filename is set
-in HTTP headers, it will be used instead of the name from the URL. With
+With --header-filename in addition, if a specific filename is set in
+HTTP headers, it will be used instead of the name from the URL. With
 --print-filename in addition, the resulting file name will be printed.
 
 Setting --no-clobber will prevent overwriting file on the destination if
@@ -5441,11 +5449,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -6673,11 +6681,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -7789,11 +7797,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -8334,11 +8342,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -8883,11 +8891,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -9640,11 +9648,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -10296,11 +10304,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -11224,11 +11232,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -11811,11 +11819,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -12611,11 +12619,11 @@ and if they haven't been accessed for --vfs-write-back seconds. If
 rclone is quit or dies with files that haven't been uploaded, these will
 be uploaded next time rclone is run with the same flags.
 
-If using --vfs-cache-max-size or --vfs-cache-min-free-size note that the
-cache may exceed these quotas for two reasons. Firstly because it is
+If using --vfs-cache-max-size or --vfs-cache-min-free-space note that
+the cache may exceed these quotas for two reasons. Firstly because it is
 only checked every --vfs-cache-poll-interval. Secondly because open
 files cannot be evicted from the cache. When --vfs-cache-max-size or
---vfs-cache-min-free-size is exceeded, rclone will attempt to evict the
+--vfs-cache-min-free-space is exceeded, rclone will attempt to evict the
 least accessed files from the cache first. rclone will start with files
 that haven't been accessed for the longest. This cache flushing strategy
 is efficient and more relevant files are likely to remain cached.
@@ -20646,7 +20654,7 @@ Flags for general networking and HTTP stuff.
           --tpslimit float                     Limit HTTP transactions per second to this
           --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
           --use-cookies                        Enable session cookiejar
-          --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.1")
+          --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.2")
 
 Performance
 
@@ -21651,7 +21659,7 @@ Start from installing Docker on the host.
 The FUSE driver is a prerequisite for rclone mounting and should be
 installed on host:
 
-    sudo apt-get -y install fuse
+    sudo apt-get -y install fuse3
 
 Create two directories required by rclone docker plugin:
 
@@ -25296,8 +25304,9 @@ glacier storage class you will see an error like below.
 
     2017/09/11 19:07:43 Failed to sync: failed to open source object: Object in GLACIER, restore first: path/to/file
 
-In this case you need to restore the object(s) in question before using
-rclone.
+In this case you need to restore the object(s) in question before
+accessing object contents. The restore section below shows how to do
+this with rclone.
 
 Note that rclone only speaks the S3 API it does not speak the Glacier
 Vault API, so rclone cannot directly access Glacier Vaults.
@@ -26728,7 +26737,7 @@ Access tier to the Frequent Access tier.
 
 Usage Examples:
 
-    rclone backend restore s3:bucket/path/to/object -o priority=PRIORITY -o lifetime=DAYS
+    rclone backend restore s3:bucket/path/to/ --include /object -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY
@@ -30952,7 +30961,7 @@ Internet browser available.
 Note that rclone runs a webserver on your local machine to collect the
 token as returned from Box. This only runs from the moment it opens your
 browser to the moment you get back the verification code. This is on
-http://127.0.0.1:53682/ and this it may require you to unblock it
+http://127.0.0.1:53682/ and this may require you to unblock it
 temporarily if you are running a host firewall.
 
 Once configured you can then use rclone like this,
@@ -52734,8 +52743,8 @@ Properties:
 Limitations
 
 On some SFTP servers (e.g. Synology) the paths are different for SSH and
-SFTP so the hashes can't be calculated properly. For them using
-disable_hashcheck is a good idea.
+SFTP so the hashes can't be calculated properly. You can either use
+--sftp-path-override or disable_hashcheck.
 
 The only ssh agent supported under Windows is Putty's pageant.
 
@@ -56315,6 +56324,71 @@ Options:
 
 Changelog
 
+v1.69.2 - 2025-05-01
+
+See commits
+
+-   Bug fixes
+    -   accounting: Fix percentDiff calculation -- (Anagh Kumar
+        Baranwal)
+    -   build
+        -   Update github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 to
+            fix CVE-2025-30204 (dependabot[bot])
+        -   Update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to
+            fix CVE-2025-30204 (dependabot[bot])
+        -   Update golang.org/x/crypto to v0.35.0 to fix CVE-2025-22869
+            (Nick Craig-Wood)
+        -   Update golang.org/x/net from 0.36.0 to 0.38.0 to fix
+            CVE-2025-22870 (dependabot[bot])
+        -   Update golang.org/x/net to 0.36.0. to fix CVE-2025-22869
+            (dependabot[bot])
+        -   Stop building with go < go1.23 as security updates forbade
+            it (Nick Craig-Wood)
+        -   Fix docker plugin build (Anagh Kumar Baranwal)
+    -   cmd: Fix crash if rclone is invoked without any arguments (Janne
+        Hellsten)
+    -   config: Read configuration passwords from stdin even when
+        terminated with EOF (Samantha Bowen)
+    -   doc fixes (Andrew Kreimer, Danny Garside, eccoisle, Ed
+        Craig-Wood, emyarod, jack, Jugal Kishore, Markus Gerstel,
+        Michael Kebe, Nick Craig-Wood, simonmcnair, simwai, Zachary
+        Vorhies)
+    -   fs: Fix corruption of SizeSuffix with "B" suffix in config (eg
+        --min-size) (Nick Craig-Wood)
+    -   lib/http: Fix race between Serve() and Shutdown() (Nick
+        Craig-Wood)
+    -   object: Fix memory object out of bounds Seek (Nick Craig-Wood)
+    -   operations: Fix call fmt.Errorf with wrong err (alingse)
+    -   rc
+        -   Disable the metrics server when running rclone rc
+            (hiddenmarten)
+        -   Fix debug/* commands not being available over unix sockets
+            (Nick Craig-Wood)
+    -   serve nfs: Fix unlikely crash (Nick Craig-Wood)
+    -   stats: Fix the speed not getting updated after a pause in the
+        processing (Anagh Kumar Baranwal)
+    -   sync
+        -   Fix cpu spinning when empty directory finding with leading
+            slashes (Nick Craig-Wood)
+        -   Copy dir modtimes even when copyEmptySrcDirs is false
+            (ll3006)
+-   VFS
+    -   Fix directory cache serving stale data (Lorenz Brun)
+    -   Fix inefficient directory caching when directory reads are slow
+        (huanghaojun)
+    -   Fix integration test failures (Nick Craig-Wood)
+-   Drive
+    -   Metadata: fix error when setting copy-requires-writer-permission
+        on a folder (Nick Craig-Wood)
+-   Dropbox
+    -   Retry link without expiry (Dave Vasilevsky)
+-   HTTP
+    -   Correct root if definitely pointing to a file (nielash)
+-   Iclouddrive
+    -   Fix so created files are writable (Ben Alex)
+-   Onedrive
+    -   Fix metadata ordering in permissions (Nick Craig-Wood)
+
 v1.69.1 - 2025-02-14
 
 See commits
@@ -56391,7 +56465,7 @@ See commits
         sockets in http servers (Moises Lima)
         -   This was making it impossible to use unix sockets with an
             proxy
-        -   This might now cause rclone to need authenticaton where it
+        -   This might now cause rclone to need authentication where it
             didn't before
     -   oauthutil: add support for OAuth client credential flow (Martin
         Hassack, Nick Craig-Wood)
@@ -57336,7 +57410,7 @@ See commits
     -   doc updates (albertony, alfish2000, asdffdsazqqq, Dimitri
         Papadopoulos, Herby Gillot, Joda Stößer, Manoj Ghosh, Nick
         Craig-Wood)
-    -   Implement --metadata-mapper to transform metatadata with a user
+    -   Implement --metadata-mapper to transform metadata with a user
         supplied program (Nick Craig-Wood)
     -   Add ChunkWriterDoesntSeek feature flag and set it for b2 (Nick
         Craig-Wood)
@@ -57498,7 +57572,7 @@ See commits
 -   B2
     -   Fix multipart upload: corrupted on transfer: sizes differ XXX vs
         0 (Nick Craig-Wood)
-    -   Fix locking window when getting mutipart upload URL (Nick
+    -   Fix locking window when getting multipart upload URL (Nick
         Craig-Wood)
     -   Fix server side copies greater than 4GB (Nick Craig-Wood)
     -   Fix chunked streaming uploads (Nick Craig-Wood)
@@ -64888,7 +64962,6 @@ email addresses removed from here need to be added to bin/.ignore-emails to make
 -   ben-ba benjamin.brauner@gmx.de
 -   Eli Orzitzer e_orz@yahoo.com
 -   Anthony Metzidis anthony.metzidis@gmail.com
--   emyarod afw5059@gmail.com
 -   keongalvin keongalvin@gmail.com
 -   rarspace01 rarspace01@users.noreply.github.com
 -   Paul Stern paulstern45@gmail.com
diff --git a/docs/content/changelog.md b/docs/content/changelog.md
index 38b2f9333b494..95398954b03c7 100644
--- a/docs/content/changelog.md
+++ b/docs/content/changelog.md
@@ -5,6 +5,50 @@ description: "Rclone Changelog"
 
 # Changelog
 
+## v1.69.2 - 2025-05-01
+
+[See commits](https://github.com/rclone/rclone/compare/v1.69.1...v1.69.2)
+
+* Bug fixes
+    * accounting: Fix percentDiff calculation -- (Anagh Kumar Baranwal)
+    * build
+        * Update github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 to fix CVE-2025-30204 (dependabot[bot])
+        * Update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to fix CVE-2025-30204 (dependabot[bot])
+        * Update golang.org/x/crypto to v0.35.0 to fix CVE-2025-22869 (Nick Craig-Wood)
+        * Update golang.org/x/net from 0.36.0 to 0.38.0 to fix CVE-2025-22870 (dependabot[bot])
+        * Update golang.org/x/net to 0.36.0. to fix CVE-2025-22869 (dependabot[bot])
+        * Stop building with go < go1.23 as security updates forbade it (Nick Craig-Wood)
+        * Fix docker plugin build (Anagh Kumar Baranwal)
+    * cmd: Fix crash if rclone is invoked without any arguments (Janne Hellsten)
+    * config: Read configuration passwords from stdin even when terminated with EOF (Samantha Bowen)
+    * doc fixes (Andrew Kreimer, Danny Garside, eccoisle, Ed Craig-Wood, emyarod, jack, Jugal Kishore, Markus Gerstel, Michael Kebe, Nick Craig-Wood, simonmcnair, simwai, Zachary Vorhies)
+    * fs: Fix corruption of SizeSuffix with "B" suffix in config (eg --min-size) (Nick Craig-Wood)
+    * lib/http: Fix race between Serve() and Shutdown() (Nick Craig-Wood)
+    * object: Fix memory object out of bounds Seek (Nick Craig-Wood)
+    * operations: Fix call fmt.Errorf with wrong err (alingse)
+    * rc
+        * Disable the metrics server when running `rclone rc` (hiddenmarten)
+        * Fix debug/* commands not being available over unix sockets (Nick Craig-Wood)
+    * serve nfs: Fix unlikely crash (Nick Craig-Wood)
+    * stats: Fix the speed not getting updated after a pause in the processing (Anagh Kumar Baranwal)
+    * sync
+        * Fix cpu spinning when empty directory finding with leading slashes (Nick Craig-Wood)
+        * Copy dir modtimes even when copyEmptySrcDirs is false (ll3006)
+* VFS
+    * Fix directory cache serving stale data (Lorenz Brun)
+    * Fix inefficient directory caching when directory reads are slow (huanghaojun)
+    * Fix integration test failures (Nick Craig-Wood)
+* Drive
+    * Metadata: fix error when setting copy-requires-writer-permission on a folder (Nick Craig-Wood)
+* Dropbox
+    * Retry link without expiry (Dave Vasilevsky)
+* HTTP
+    * Correct root if definitely pointing to a file (nielash)
+* Iclouddrive
+    * Fix so created files are writable (Ben Alex)
+* Onedrive
+    * Fix metadata ordering in permissions (Nick Craig-Wood)
+
 ## v1.69.1 - 2025-02-14
 
 [See commits](https://github.com/rclone/rclone/compare/v1.69.0...v1.69.1)
diff --git a/docs/content/commands/rclone.md b/docs/content/commands/rclone.md
index 3890f0b9164ef..ff40373879cc8 100644
--- a/docs/content/commands/rclone.md
+++ b/docs/content/commands/rclone.md
@@ -965,7 +965,7 @@ rclone [flags]
       --use-json-log                                        Use json log format
       --use-mmap                                            Use mmap allocator (see docs)
       --use-server-modtime                                  Use server modified time instead of object metadata
-      --user-agent string                                   Set the user-agent to a specified string (default "rclone/v1.69.1")
+      --user-agent string                                   Set the user-agent to a specified string (default "rclone/v1.69.2")
   -v, --verbose count                                       Print lots more stuff (repeat for more)
   -V, --version                                             Print the version number
       --webdav-auth-redirect                                Preserve authentication on redirect
diff --git a/docs/content/commands/rclone_authorize.md b/docs/content/commands/rclone_authorize.md
index abdaff9d26ab6..9e9fbcfa16e08 100644
--- a/docs/content/commands/rclone_authorize.md
+++ b/docs/content/commands/rclone_authorize.md
@@ -14,13 +14,18 @@ Remote authorization. Used to authorize a remote or headless
 rclone from a machine with a browser - use as instructed by
 rclone config.
 
+The command requires 1-3 arguments:
+  - fs name (e.g., "drive", "s3", etc.)
+  - Either a base64 encoded JSON blob obtained from a previous rclone config session
+  - Or a client_id and client_secret pair obtained from the remote service
+
 Use --auth-no-open-browser to prevent rclone to open auth
 link in default browser automatically.
 
 Use --template to generate HTML output via a custom Go template. If a blank string is provided as an argument to this flag, the default template is used.
 
 ```
-rclone authorize [flags]
+rclone authorize <fs name> [base64_json_blob | client_id client_secret] [flags]
 ```
 
 ## Options
diff --git a/docs/content/commands/rclone_copyto.md b/docs/content/commands/rclone_copyto.md
index 4a2152c868804..88d62536966f6 100644
--- a/docs/content/commands/rclone_copyto.md
+++ b/docs/content/commands/rclone_copyto.md
@@ -36,6 +36,8 @@ This doesn't transfer files that are identical on src and dst, testing
 by size and modification time or MD5SUM.  It doesn't delete files from
 the destination.
 
+*If you are looking to copy just a byte range of a file, please see 'rclone cat --offset X --count Y'*
+
 **Note**: Use the `-P`/`--progress` flag to view real-time transfer statistics
 
 
diff --git a/docs/content/commands/rclone_copyurl.md b/docs/content/commands/rclone_copyurl.md
index 2bdccf5fd5d64..779b6b5e1bd05 100644
--- a/docs/content/commands/rclone_copyurl.md
+++ b/docs/content/commands/rclone_copyurl.md
@@ -17,7 +17,7 @@ Setting `--auto-filename` will attempt to automatically determine the
 filename from the URL (after any redirections) and used in the
 destination path.
 
-With `--auto-filename-header` in addition, if a specific filename is
+With `--header-filename` in addition, if a specific filename is
 set in HTTP headers, it will be used instead of the name from the URL.
 With `--print-filename` in addition, the resulting file name will be
 printed.
diff --git a/docs/content/commands/rclone_mount.md b/docs/content/commands/rclone_mount.md
index 7ce79eb5c9ad8..1ad82d847322e 100644
--- a/docs/content/commands/rclone_mount.md
+++ b/docs/content/commands/rclone_mount.md
@@ -571,11 +571,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_nfsmount.md b/docs/content/commands/rclone_nfsmount.md
index 079eabbefaca4..c9401099fced5 100644
--- a/docs/content/commands/rclone_nfsmount.md
+++ b/docs/content/commands/rclone_nfsmount.md
@@ -572,11 +572,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_serve_dlna.md b/docs/content/commands/rclone_serve_dlna.md
index 9ac076f2d39f7..bf07149c22c9c 100644
--- a/docs/content/commands/rclone_serve_dlna.md
+++ b/docs/content/commands/rclone_serve_dlna.md
@@ -134,11 +134,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_serve_docker.md b/docs/content/commands/rclone_serve_docker.md
index 6c2f84f297d38..f912edf8cc057 100644
--- a/docs/content/commands/rclone_serve_docker.md
+++ b/docs/content/commands/rclone_serve_docker.md
@@ -146,11 +146,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_serve_ftp.md b/docs/content/commands/rclone_serve_ftp.md
index e96f681168662..84dbc59403f27 100644
--- a/docs/content/commands/rclone_serve_ftp.md
+++ b/docs/content/commands/rclone_serve_ftp.md
@@ -127,11 +127,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_serve_http.md b/docs/content/commands/rclone_serve_http.md
index f87db87301ffa..c5d2d7547b892 100644
--- a/docs/content/commands/rclone_serve_http.md
+++ b/docs/content/commands/rclone_serve_http.md
@@ -245,11 +245,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_serve_nfs.md b/docs/content/commands/rclone_serve_nfs.md
index 39deb36a933b7..86989dcdd5022 100644
--- a/docs/content/commands/rclone_serve_nfs.md
+++ b/docs/content/commands/rclone_serve_nfs.md
@@ -176,11 +176,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_serve_s3.md b/docs/content/commands/rclone_serve_s3.md
index 8785d20659908..11619745a7f89 100644
--- a/docs/content/commands/rclone_serve_s3.md
+++ b/docs/content/commands/rclone_serve_s3.md
@@ -27,7 +27,7 @@ docs](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html)).
 access.
 
 Please note that some clients may require HTTPS endpoints. See [the
-SSL docs](#ssl-tls) for more information.
+SSL docs](#tls-ssl) for more information.
 
 This command uses the [VFS directory cache](#vfs-virtual-file-system).
 All the functionality will work with `--vfs-cache-mode off`. Using
@@ -334,11 +334,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_serve_sftp.md b/docs/content/commands/rclone_serve_sftp.md
index 477e35dfe67ff..7ce6663adf832 100644
--- a/docs/content/commands/rclone_serve_sftp.md
+++ b/docs/content/commands/rclone_serve_sftp.md
@@ -170,11 +170,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/commands/rclone_serve_webdav.md b/docs/content/commands/rclone_serve_webdav.md
index 397b9a5f385cb..64792496d10ee 100644
--- a/docs/content/commands/rclone_serve_webdav.md
+++ b/docs/content/commands/rclone_serve_webdav.md
@@ -288,11 +288,11 @@ seconds. If rclone is quit or dies with files that haven't been
 uploaded, these will be uploaded next time rclone is run with the same
 flags.
 
-If using `--vfs-cache-max-size` or `--vfs-cache-min-free-size` note
+If using `--vfs-cache-max-size` or `--vfs-cache-min-free-space` note
 that the cache may exceed these quotas for two reasons. Firstly
 because it is only checked every `--vfs-cache-poll-interval`. Secondly
 because open files cannot be evicted from the cache. When
-`--vfs-cache-max-size` or `--vfs-cache-min-free-size` is exceeded,
+`--vfs-cache-max-size` or `--vfs-cache-min-free-space` is exceeded,
 rclone will attempt to evict the least accessed files from the cache
 first. rclone will start with files that haven't been accessed for the
 longest. This cache flushing strategy is efficient and more relevant
diff --git a/docs/content/flags.md b/docs/content/flags.md
index e022ed0ec43e0..3c3b936b4455b 100644
--- a/docs/content/flags.md
+++ b/docs/content/flags.md
@@ -116,7 +116,7 @@ Flags for general networking and HTTP stuff.
       --tpslimit float                     Limit HTTP transactions per second to this
       --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
       --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.1")
+      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.2")
 ```
 
 
diff --git a/docs/content/s3.md b/docs/content/s3.md
index d225312c79bbf..06e3e92086109 100644
--- a/docs/content/s3.md
+++ b/docs/content/s3.md
@@ -2175,7 +2175,7 @@ or from INTELLIGENT-TIERING Archive Access / Deep Archive Access tier to the Fre
 
 Usage Examples:
 
-    rclone backend restore s3:bucket/path/to/object -o priority=PRIORITY -o lifetime=DAYS
+    rclone backend restore s3:bucket/path/to/ --include /object -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket -o priority=PRIORITY -o lifetime=DAYS
     rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY
diff --git a/rclone.1 b/rclone.1
index 57bda9b82f957..99fa7f40a0472 100644
--- a/rclone.1
+++ b/rclone.1
@@ -1,7 +1,7 @@
 .\"t
 .\" Automatically generated by Pandoc 2.9.2.1
 .\"
-.TH "rclone" "1" "Feb 14, 2025" "User Manual" ""
+.TH "rclone" "1" "May 01, 2025" "User Manual" ""
 .hy
 .SH NAME
 .PP
@@ -3583,6 +3583,11 @@ Remote authorization.
 Used to authorize a remote or headless rclone from a machine with a
 browser - use as instructed by rclone config.
 .PP
+The command requires 1-3 arguments: - fs name (e.g., \[dq]drive\[dq],
+\[dq]s3\[dq], etc.) - Either a base64 encoded JSON blob obtained from a
+previous rclone config session - Or a client_id and client_secret pair
+obtained from the remote service
+.PP
 Use --auth-no-open-browser to prevent rclone to open auth link in
 default browser automatically.
 .PP
@@ -3592,7 +3597,7 @@ template is used.
 .IP
 .nf
 \f[C]
-rclone authorize [flags]
+rclone authorize <fs name> [base64_json_blob | client_id client_secret] [flags]
 \f[R]
 .fi
 .SS Options
@@ -5211,6 +5216,9 @@ This doesn\[aq]t transfer files that are identical on src and dst,
 testing by size and modification time or MD5SUM.
 It doesn\[aq]t delete files from the destination.
 .PP
+\f[I]If you are looking to copy just a byte range of a file, please see
+\[aq]rclone cat --offset X --count Y\[aq]\f[R]
+.PP
 \f[B]Note\f[R]: Use the \f[C]-P\f[R]/\f[C]--progress\f[R] flag to view
 real-time transfer statistics
 .IP
@@ -5338,9 +5346,8 @@ Setting \f[C]--auto-filename\f[R] will attempt to automatically
 determine the filename from the URL (after any redirections) and used in
 the destination path.
 .PP
-With \f[C]--auto-filename-header\f[R] in addition, if a specific
-filename is set in HTTP headers, it will be used instead of the name
-from the URL.
+With \f[C]--header-filename\f[R] in addition, if a specific filename is
+set in HTTP headers, it will be used instead of the name from the URL.
 With \f[C]--print-filename\f[R] in addition, the resulting file name
 will be printed.
 .PP
@@ -7178,13 +7185,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -8698,13 +8705,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -10147,13 +10154,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -10808,13 +10815,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -11460,13 +11467,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -12425,13 +12432,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -13227,13 +13234,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -14366,13 +14373,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -15072,13 +15079,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -16090,13 +16097,13 @@ If rclone is quit or dies with files that haven\[aq]t been uploaded,
 these will be uploaded next time rclone is run with the same flags.
 .PP
 If using \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] note that the cache may exceed these
-quotas for two reasons.
+\f[C]--vfs-cache-min-free-space\f[R] note that the cache may exceed
+these quotas for two reasons.
 Firstly because it is only checked every
 \f[C]--vfs-cache-poll-interval\f[R].
 Secondly because open files cannot be evicted from the cache.
 When \f[C]--vfs-cache-max-size\f[R] or
-\f[C]--vfs-cache-min-free-size\f[R] is exceeded, rclone will attempt to
+\f[C]--vfs-cache-min-free-space\f[R] is exceeded, rclone will attempt to
 evict the least accessed files from the cache first.
 rclone will start with files that haven\[aq]t been accessed for the
 longest.
@@ -28524,7 +28531,7 @@ Flags for general networking and HTTP stuff.
       --tpslimit float                     Limit HTTP transactions per second to this
       --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
       --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default \[dq]rclone/v1.69.1\[dq])
+      --user-agent string                  Set the user-agent to a specified string (default \[dq]rclone/v1.69.2\[dq])
 \f[R]
 .fi
 .SS Performance
@@ -29571,7 +29578,7 @@ should be installed on host:
 .IP
 .nf
 \f[C]
-sudo apt-get -y install fuse
+sudo apt-get -y install fuse3
 \f[R]
 .fi
 .PP
@@ -34410,7 +34417,8 @@ error like below.
 .PP
 In this case you need to
 restore (http://docs.aws.amazon.com/AmazonS3/latest/user-guide/restore-archived-objects.html)
-the object(s) in question before using rclone.
+the object(s) in question before accessing object contents.
+The restore section below shows how to do this with rclone.
 .PP
 Note that rclone only speaks the S3 API it does not speak the Glacier
 Vault API, so rclone cannot directly access Glacier Vaults.
@@ -36691,7 +36699,7 @@ Usage Examples:
 .IP
 .nf
 \f[C]
-rclone backend restore s3:bucket/path/to/object -o priority=PRIORITY -o lifetime=DAYS
+rclone backend restore s3:bucket/path/to/ --include /object -o priority=PRIORITY -o lifetime=DAYS
 rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY -o lifetime=DAYS
 rclone backend restore s3:bucket -o priority=PRIORITY -o lifetime=DAYS
 rclone backend restore s3:bucket/path/to/directory -o priority=PRIORITY
@@ -41752,8 +41760,8 @@ Note that rclone runs a webserver on your local machine to collect the
 token as returned from Box.
 This only runs from the moment it opens your browser to the moment you
 get back the verification code.
-This is on \f[C]http://127.0.0.1:53682/\f[R] and this it may require you
-to unblock it temporarily if you are running a host firewall.
+This is on \f[C]http://127.0.0.1:53682/\f[R] and this may require you to
+unblock it temporarily if you are running a host firewall.
 .PP
 Once configured you can then use \f[C]rclone\f[R] like this,
 .PP
@@ -70151,7 +70159,8 @@ Required: false
 On some SFTP servers (e.g.
 Synology) the paths are different for SSH and SFTP so the hashes
 can\[aq]t be calculated properly.
-For them using \f[C]disable_hashcheck\f[R] is a good idea.
+You can either use \f[C]--sftp-path-override\f[R] or
+\f[C]disable_hashcheck\f[R].
 .PP
 The only ssh agent supported under Windows is Putty\[aq]s pageant.
 .PP
@@ -75039,6 +75048,124 @@ Options:
 .IP \[bu] 2
 \[dq]error\[dq]: return an error based on option value
 .SH Changelog
+.SS v1.69.2 - 2025-05-01
+.PP
+See commits (https://github.com/rclone/rclone/compare/v1.69.1...v1.69.2)
+.IP \[bu] 2
+Bug fixes
+.RS 2
+.IP \[bu] 2
+accounting: Fix percentDiff calculation -- (Anagh Kumar Baranwal)
+.IP \[bu] 2
+build
+.RS 2
+.IP \[bu] 2
+Update github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 to fix
+CVE-2025-30204 (dependabot[bot])
+.IP \[bu] 2
+Update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to fix
+CVE-2025-30204 (dependabot[bot])
+.IP \[bu] 2
+Update golang.org/x/crypto to v0.35.0 to fix CVE-2025-22869 (Nick
+Craig-Wood)
+.IP \[bu] 2
+Update golang.org/x/net from 0.36.0 to 0.38.0 to fix CVE-2025-22870
+(dependabot[bot])
+.IP \[bu] 2
+Update golang.org/x/net to 0.36.0.
+to fix CVE-2025-22869 (dependabot[bot])
+.IP \[bu] 2
+Stop building with go < go1.23 as security updates forbade it (Nick
+Craig-Wood)
+.IP \[bu] 2
+Fix docker plugin build (Anagh Kumar Baranwal)
+.RE
+.IP \[bu] 2
+cmd: Fix crash if rclone is invoked without any arguments (Janne
+Hellsten)
+.IP \[bu] 2
+config: Read configuration passwords from stdin even when terminated
+with EOF (Samantha Bowen)
+.IP \[bu] 2
+doc fixes (Andrew Kreimer, Danny Garside, eccoisle, Ed Craig-Wood,
+emyarod, jack, Jugal Kishore, Markus Gerstel, Michael Kebe, Nick
+Craig-Wood, simonmcnair, simwai, Zachary Vorhies)
+.IP \[bu] 2
+fs: Fix corruption of SizeSuffix with \[dq]B\[dq] suffix in config (eg
+--min-size) (Nick Craig-Wood)
+.IP \[bu] 2
+lib/http: Fix race between Serve() and Shutdown() (Nick Craig-Wood)
+.IP \[bu] 2
+object: Fix memory object out of bounds Seek (Nick Craig-Wood)
+.IP \[bu] 2
+operations: Fix call fmt.Errorf with wrong err (alingse)
+.IP \[bu] 2
+rc
+.RS 2
+.IP \[bu] 2
+Disable the metrics server when running \f[C]rclone rc\f[R]
+(hiddenmarten)
+.IP \[bu] 2
+Fix debug/* commands not being available over unix sockets (Nick
+Craig-Wood)
+.RE
+.IP \[bu] 2
+serve nfs: Fix unlikely crash (Nick Craig-Wood)
+.IP \[bu] 2
+stats: Fix the speed not getting updated after a pause in the processing
+(Anagh Kumar Baranwal)
+.IP \[bu] 2
+sync
+.RS 2
+.IP \[bu] 2
+Fix cpu spinning when empty directory finding with leading slashes (Nick
+Craig-Wood)
+.IP \[bu] 2
+Copy dir modtimes even when copyEmptySrcDirs is false (ll3006)
+.RE
+.RE
+.IP \[bu] 2
+VFS
+.RS 2
+.IP \[bu] 2
+Fix directory cache serving stale data (Lorenz Brun)
+.IP \[bu] 2
+Fix inefficient directory caching when directory reads are slow
+(huanghaojun)
+.IP \[bu] 2
+Fix integration test failures (Nick Craig-Wood)
+.RE
+.IP \[bu] 2
+Drive
+.RS 2
+.IP \[bu] 2
+Metadata: fix error when setting copy-requires-writer-permission on a
+folder (Nick Craig-Wood)
+.RE
+.IP \[bu] 2
+Dropbox
+.RS 2
+.IP \[bu] 2
+Retry link without expiry (Dave Vasilevsky)
+.RE
+.IP \[bu] 2
+HTTP
+.RS 2
+.IP \[bu] 2
+Correct root if definitely pointing to a file (nielash)
+.RE
+.IP \[bu] 2
+Iclouddrive
+.RS 2
+.IP \[bu] 2
+Fix so created files are writable (Ben Alex)
+.RE
+.IP \[bu] 2
+Onedrive
+.RS 2
+.IP \[bu] 2
+Fix metadata ordering in permissions (Nick Craig-Wood)
+.RE
 .SS v1.69.1 - 2025-02-14
 .PP
 See commits (https://github.com/rclone/rclone/compare/v1.69.0...v1.69.1)
@@ -75183,7 +75310,7 @@ in http servers (Moises Lima)
 .IP \[bu] 2
 This was making it impossible to use unix sockets with an proxy
 .IP \[bu] 2
-This might now cause rclone to need authenticaton where it didn\[aq]t
+This might now cause rclone to need authentication where it didn\[aq]t
 before
 .RE
 .IP \[bu] 2
@@ -77109,8 +77236,8 @@ Refactor version info and icon resource handling on windows (albertony)
 doc updates (albertony, alfish2000, asdffdsazqqq, Dimitri Papadopoulos,
 Herby Gillot, Joda St\[:o]\[ss]er, Manoj Ghosh, Nick Craig-Wood)
 .IP \[bu] 2
-Implement \f[C]--metadata-mapper\f[R] to transform metatadata with a
-user supplied program (Nick Craig-Wood)
+Implement \f[C]--metadata-mapper\f[R] to transform metadata with a user
+supplied program (Nick Craig-Wood)
 .IP \[bu] 2
 Add \f[C]ChunkWriterDoesntSeek\f[R] feature flag and set it for b2 (Nick
 Craig-Wood)
@@ -77430,7 +77557,7 @@ B2
 Fix multipart upload: corrupted on transfer: sizes differ XXX vs 0 (Nick
 Craig-Wood)
 .IP \[bu] 2
-Fix locking window when getting mutipart upload URL (Nick Craig-Wood)
+Fix locking window when getting multipart upload URL (Nick Craig-Wood)
 .IP \[bu] 2
 Fix server side copies greater than 4GB (Nick Craig-Wood)
 .IP \[bu] 2
@@ -91986,8 +92113,6 @@ Eli Orzitzer <e_orz@yahoo.com>
 .IP \[bu] 2
 Anthony Metzidis <anthony.metzidis@gmail.com>
 .IP \[bu] 2
-emyarod <afw5059@gmail.com>
-.IP \[bu] 2
 keongalvin <keongalvin@gmail.com>
 .IP \[bu] 2
 rarspace01 <rarspace01@users.noreply.github.com>

From 81ff40c3584382cb221b73fc9e079611debc845e Mon Sep 17 00:00:00 2001
From: Flora Thiebaut <flora.thiebaut@sdsc.ethz.ch>
Date: Tue, 20 May 2025 17:34:11 +0200
Subject: [PATCH 72/73] feat: add new backend to support DOIs - rclone 1.69.2
 (#9)

Add support for DOIs on top of rclone [v1.69.2](https://github.com/rclone/rclone/releases/tag/v1.69.2).
---
 .github/workflows/build-renku.yml        | 237 +++++++++
 .github/workflows/build.yml              |  76 +--
 .renku/Dockerfile                        |   3 +
 Makefile                                 |   3 +
 backend/all/all.go                       |   1 +
 backend/doi/api/dataversetypes.go        |  38 ++
 backend/doi/api/inveniotypes.go          |  34 ++
 backend/doi/api/types.go                 |  26 +
 backend/doi/dataverse.go                 | 139 ++++++
 backend/doi/doi.go                       | 599 +++++++++++++++++++++++
 backend/doi/doi_internal_test.go         |  34 ++
 backend/doi/doi_test.go                  |  16 +
 backend/doi/invenio.go                   | 169 +++++++
 backend/doi/link_header.go               |  75 +++
 backend/doi/link_header_internal_test.go |  44 ++
 backend/doi/zenodo.go                    |  47 ++
 docs/content/doi.md                      | 161 ++++++
 vfs/vfs.go                               |  14 +-
 vfs/vfscache/cache.go                    |  39 +-
 vfs/vfscache/cache_test.go               |   2 +-
 20 files changed, 1714 insertions(+), 43 deletions(-)
 create mode 100644 .github/workflows/build-renku.yml
 create mode 100644 .renku/Dockerfile
 create mode 100644 backend/doi/api/dataversetypes.go
 create mode 100644 backend/doi/api/inveniotypes.go
 create mode 100644 backend/doi/api/types.go
 create mode 100644 backend/doi/dataverse.go
 create mode 100644 backend/doi/doi.go
 create mode 100644 backend/doi/doi_internal_test.go
 create mode 100644 backend/doi/doi_test.go
 create mode 100644 backend/doi/invenio.go
 create mode 100644 backend/doi/link_header.go
 create mode 100644 backend/doi/link_header_internal_test.go
 create mode 100644 backend/doi/zenodo.go
 create mode 100644 docs/content/doi.md

diff --git a/.github/workflows/build-renku.yml b/.github/workflows/build-renku.yml
new file mode 100644
index 0000000000000..66719c58661a0
--- /dev/null
+++ b/.github/workflows/build-renku.yml
@@ -0,0 +1,237 @@
+name: Build rclone for Renku
+
+# Trigger the workflow on push or pull request
+on:
+  push:
+    branches:
+      - "**"
+    tags:
+      - "**"
+  pull_request:
+  workflow_dispatch:
+    inputs:
+      manual:
+        description: Manual run (bypass default conditions)
+        type: boolean
+        default: true
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build:
+    if: inputs.manual || (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name)
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        job_name: ["linux"]
+
+        include:
+          - job_name: linux
+            os: ubuntu-latest
+            go: ">=1.23.0-rc.1"
+            gotags: cmount
+            build_flags: '-include "linux/amd64|linux/arm64"'
+            deploy: true
+
+    name: ${{ matrix.job_name }}
+
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go }}
+          check-latest: true
+
+      - name: Set environment variables
+        shell: bash
+        run: |
+          echo 'GOTAGS=${{ matrix.gotags }}' >> $GITHUB_ENV
+          echo 'BUILD_FLAGS=${{ matrix.build_flags }}' >> $GITHUB_ENV
+          echo 'BUILD_ARGS=${{ matrix.build_args }}' >> $GITHUB_ENV
+          if [[ "${{ matrix.goarch }}" != "" ]]; then echo 'GOARCH=${{ matrix.goarch }}' >> $GITHUB_ENV ; fi
+          if [[ "${{ matrix.cgo }}" != "" ]]; then echo 'CGO_ENABLED=${{ matrix.cgo }}' >> $GITHUB_ENV ; fi
+
+      - name: Install Libraries on Linux
+        shell: bash
+        run: |
+          sudo modprobe fuse
+          sudo chmod 666 /dev/fuse
+          sudo chown root:$USER /etc/fuse.conf
+          sudo apt-get update
+          sudo apt-get install -y fuse3 libfuse-dev rpm pkg-config git-annex git-annex-remote-rclone nfs-common
+        if: matrix.os == 'ubuntu-latest'
+
+      - name: Install Libraries on macOS
+        shell: bash
+        run: |
+          # https://github.com/Homebrew/brew/issues/15621#issuecomment-1619266788
+          # https://github.com/orgs/Homebrew/discussions/4612#discussioncomment-6319008
+          unset HOMEBREW_NO_INSTALL_FROM_API
+          brew untap --force homebrew/core
+          brew untap --force homebrew/cask
+          brew update
+          brew install --cask macfuse
+          brew install git-annex git-annex-remote-rclone
+        if: matrix.os == 'macos-latest'
+
+      - name: Install Libraries on Windows
+        shell: powershell
+        run: |
+          $ProgressPreference = 'SilentlyContinue'
+          choco install -y winfsp zip
+          echo "CPATH=C:\Program Files\WinFsp\inc\fuse;C:\Program Files (x86)\WinFsp\inc\fuse" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
+          if ($env:GOARCH -eq "386") {
+            choco install -y mingw --forcex86 --force
+            echo "C:\\ProgramData\\chocolatey\\lib\\mingw\\tools\\install\\mingw32\\bin" | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
+          }
+          # Copy mingw32-make.exe to make.exe so the same command line
+          # can be used on Windows as on macOS and Linux
+          $path = (get-command mingw32-make.exe).Path
+          Copy-Item -Path $path -Destination (Join-Path (Split-Path -Path $path) 'make.exe')
+        if: matrix.os == 'windows-latest'
+
+      - name: Print Go version and environment
+        shell: bash
+        run: |
+          printf "Using go at: $(which go)\n"
+          printf "Go version: $(go version)\n"
+          printf "\n\nGo environment:\n\n"
+          go env
+          printf "\n\nRclone environment:\n\n"
+          make vars
+          printf "\n\nSystem environment:\n\n"
+          env
+
+      - name: Build rclone
+        shell: bash
+        run: |
+          make
+
+      - name: Rclone version
+        shell: bash
+        run: |
+          rclone version
+
+      - name: Run tests
+        shell: bash
+        run: |
+          make quicktest
+        if: matrix.quicktest
+
+      - name: Race test
+        shell: bash
+        run: |
+          make racequicktest
+        if: matrix.racequicktest
+
+      - name: Run librclone tests
+        shell: bash
+        run: |
+          make -C librclone/ctest test
+          make -C librclone/ctest clean
+          librclone/python/test_rclone.py
+        if: matrix.librclonetest
+
+      - name: Compile all architectures test
+        shell: bash
+        run: |
+          make
+          make compile_all
+        if: matrix.compile_all
+
+      - name: Build binaries for release
+        shell: bash
+        run: |
+          if [[ "${{ matrix.os }}" == "ubuntu-latest" ]]; then make release_dep_linux ; fi
+          make ci_gha
+          ls -al build/
+        if: matrix.deploy
+
+      - name: Upload artifacts to GitHub
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-${{ matrix.job_name }}
+          path: build
+          retention-days: 1
+        if: matrix.deploy
+
+  image:
+    if: inputs.manual || (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name)
+    timeout-minutes: 60
+    runs-on: ubuntu-latest
+    needs: [build]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: build-linux
+          path: rclone
+
+      - name: List downloaded files
+        run: ls -R rclone
+
+      - name: Extract rclone binary - amd64
+        run: |
+          unzip "rclone/*-amd64.zip" -d rclone-unzip
+          ls -R rclone-unzip
+          mkdir -p linux/amd64
+          mv rclone-unzip/*/rclone linux/amd64/rclone
+      - name: Extract rclone binary - arm64
+        run: |
+          unzip "rclone/*-arm64.zip" -d rclone-unzip
+          ls -R rclone-unzip
+          mkdir -p linux/arm64
+          mv rclone-unzip/*/rclone linux/arm64/rclone
+      - name: Docker image metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: type=sha
+
+      - name: Extract Docker image name
+        id: docker_image
+        env:
+          IMAGE_TAGS: ${{ steps.meta.outputs.tags }}
+        run: |
+          IMAGE=$(echo "$IMAGE_TAGS" | cut -d" " -f1)
+          IMAGE_REPOSITORY=$(echo "$IMAGE" | cut -d":" -f1)
+          IMAGE_TAG=$(echo "$IMAGE" | cut -d":" -f2)
+          echo "image=$IMAGE" >> "$GITHUB_OUTPUT"
+          echo "image_repository=$IMAGE_REPOSITORY" >> "$GITHUB_OUTPUT"
+          echo "image_tag=$IMAGE_TAG" >> "$GITHUB_OUTPUT"
+      - name: Set up Docker buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Set up Docker
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: .renku/Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b1a81d1d2a9c5..8b876e1a2603a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -21,12 +21,12 @@ on:
 
 jobs:
   build:
-    if: inputs.manual || (github.repository == 'rclone/rclone' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name))
+    if: inputs.manual || (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name)
     timeout-minutes: 60
     strategy:
       fail-fast: false
       matrix:
-        job_name: ['linux', 'linux_386', 'mac_amd64', 'mac_arm64', 'windows', 'other_os']
+        job_name: ['linux', 'linux_386']
 
         include:
           - job_name: linux
@@ -47,31 +47,31 @@ jobs:
             gotags: cmount
             quicktest: true
 
-          - job_name: mac_amd64
-            os: macos-latest
-            go: '>=1.23.0-rc.1'
-            gotags: 'cmount'
-            build_flags: '-include "^darwin/amd64" -cgo'
-            quicktest: true
-            racequicktest: true
-            deploy: true
-
-          - job_name: mac_arm64
-            os: macos-latest
-            go: '>=1.23.0-rc.1'
-            gotags: 'cmount'
-            build_flags: '-include "^darwin/arm64" -cgo -macos-arch arm64 -cgo-cflags=-I/usr/local/include -cgo-ldflags=-L/usr/local/lib'
-            deploy: true
-
-          - job_name: windows
-            os: windows-latest
-            go: '>=1.23.0-rc.1'
-            gotags: cmount
-            cgo: '0'
-            build_flags: '-include "^windows/"'
-            build_args: '-buildmode exe'
-            quicktest: true
-            deploy: true
+          # - job_name: mac_amd64
+          #   os: macos-latest
+          #   go: '>=1.23.0-rc.1'
+          #   gotags: 'cmount'
+          #   build_flags: '-include "^darwin/amd64" -cgo'
+          #   quicktest: true
+          #   racequicktest: true
+          #   deploy: true
+
+          # - job_name: mac_arm64
+          #   os: macos-latest
+          #   go: '>=1.23.0-rc.1'
+          #   gotags: 'cmount'
+          #   build_flags: '-include "^darwin/arm64" -cgo -macos-arch arm64 -cgo-cflags=-I/usr/local/include -cgo-ldflags=-L/usr/local/lib'
+          #   deploy: true
+
+          # - job_name: windows
+          #   os: windows-latest
+          #   go: '>=1.23.0-rc.1'
+          #   gotags: cmount
+          #   cgo: '0'
+          #   build_flags: '-include "^windows/"'
+          #   build_args: '-buildmode exe'
+          #   quicktest: true
+          #   deploy: true
 
           - job_name: other_os
             os: ubuntu-latest
@@ -193,19 +193,19 @@ jobs:
           make compile_all
         if: matrix.compile_all
 
-      - name: Deploy built binaries
-        shell: bash
-        run: |
-          if [[ "${{ matrix.os }}" == "ubuntu-latest" ]]; then make release_dep_linux ; fi
-          make ci_beta
-        env:
-          RCLONE_CONFIG_PASS: ${{ secrets.RCLONE_CONFIG_PASS }}
-        # working-directory: '$(modulePath)'
-        # Deploy binaries if enabled in config && not a PR && not a fork
-        if: env.RCLONE_CONFIG_PASS != '' && matrix.deploy && github.head_ref == '' && github.repository == 'rclone/rclone'
+      # - name: Deploy built binaries
+      #   shell: bash
+      #   run: |
+      #     if [[ "${{ matrix.os }}" == "ubuntu-latest" ]]; then make release_dep_linux ; fi
+      #     make ci_beta
+      #   env:
+      #     RCLONE_CONFIG_PASS: ${{ secrets.RCLONE_CONFIG_PASS }}
+      #   # working-directory: '$(modulePath)'
+      #   # Deploy binaries if enabled in config && not a PR && not a fork
+      #   if: env.RCLONE_CONFIG_PASS != '' && matrix.deploy && github.head_ref == '' && github.repository == 'rclone/rclone'
 
   lint:
-    if: inputs.manual || (github.repository == 'rclone/rclone' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name))
+    if: inputs.manual || (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name)
     timeout-minutes: 30
     name: "lint"
     runs-on: ubuntu-latest
diff --git a/.renku/Dockerfile b/.renku/Dockerfile
new file mode 100644
index 0000000000000..a3e34b8007186
--- /dev/null
+++ b/.renku/Dockerfile
@@ -0,0 +1,3 @@
+FROM scratch
+ARG TARGETPLATFORM
+COPY ${TARGETPLATFORM}/rclone rclone
diff --git a/Makefile b/Makefile
index 2e55c5a0cedb7..b51acc414de6c 100644
--- a/Makefile
+++ b/Makefile
@@ -238,6 +238,9 @@ ifeq ($(or $(BRANCH_PATH),$(RELEASE_TAG)),)
 endif
 	@echo Beta release ready at $(BETA_URL)
 
+ci_gha:
+	go run bin/cross-compile.go $(BUILD_FLAGS) $(BUILDTAGS) $(BUILD_ARGS) $(TAG)
+
 # Fetch the binary builds from GitHub actions
 fetch_binaries:
 	rclone -P sync --exclude "/testbuilds/**" --delete-excluded $(BETA_UPLOAD) build/
diff --git a/backend/all/all.go b/backend/all/all.go
index df6a6e45b2ffe..36d95ce676a00 100644
--- a/backend/all/all.go
+++ b/backend/all/all.go
@@ -14,6 +14,7 @@ import (
 	_ "github.com/rclone/rclone/backend/combine"
 	_ "github.com/rclone/rclone/backend/compress"
 	_ "github.com/rclone/rclone/backend/crypt"
+	_ "github.com/rclone/rclone/backend/doi"
 	_ "github.com/rclone/rclone/backend/drive"
 	_ "github.com/rclone/rclone/backend/dropbox"
 	_ "github.com/rclone/rclone/backend/fichier"
diff --git a/backend/doi/api/dataversetypes.go b/backend/doi/api/dataversetypes.go
new file mode 100644
index 0000000000000..1df00858c77f5
--- /dev/null
+++ b/backend/doi/api/dataversetypes.go
@@ -0,0 +1,38 @@
+// Type definitions specific to Dataverse
+
+package api
+
+// DataverseDatasetResponse is returned by the Dataverse dataset API
+type DataverseDatasetResponse struct {
+	Status string           `json:"status"`
+	Data   DataverseDataset `json:"data"`
+}
+
+// DataverseDataset is the representation of a dataset
+type DataverseDataset struct {
+	LatestVersion DataverseDatasetVersion `json:"latestVersion"`
+}
+
+// DataverseDatasetVersion is the representation of a dataset version
+type DataverseDatasetVersion struct {
+	LastUpdateTime string          `json:"lastUpdateTime"`
+	Files          []DataverseFile `json:"files"`
+}
+
+// DataverseFile is the representation of a file found in a dataset
+type DataverseFile struct {
+	DirectoryLabel string            `json:"directoryLabel"`
+	DataFile       DataverseDataFile `json:"dataFile"`
+}
+
+// DataverseDataFile represents file metadata details
+type DataverseDataFile struct {
+	ID                 int64  `json:"id"`
+	Filename           string `json:"filename"`
+	ContentType        string `json:"contentType"`
+	FileSize           int64  `json:"filesize"`
+	OriginalFileFormat string `json:"originalFileFormat"`
+	OriginalFileSize   int64  `json:"originalFileSize"`
+	OriginalFileName   string `json:"originalFileName"`
+	MD5                string `json:"md5"`
+}
diff --git a/backend/doi/api/inveniotypes.go b/backend/doi/api/inveniotypes.go
new file mode 100644
index 0000000000000..75d5ad2407d9f
--- /dev/null
+++ b/backend/doi/api/inveniotypes.go
@@ -0,0 +1,34 @@
+// Type definitions specific to InvenioRDM
+
+package api
+
+// InvenioRecordResponse is the representation of a record stored in InvenioRDM
+type InvenioRecordResponse struct {
+	Links InvenioRecordResponseLinks `json:"links"`
+	// Metadata InvenioRecordMetadata      `json:"metadata"`
+}
+
+// InvenioRecordResponseLinks represents a record's links
+type InvenioRecordResponseLinks struct {
+	Self string `json:"self"`
+}
+
+// InvenioFilesResponse is the representation of a record's files
+type InvenioFilesResponse struct {
+	Entries []InvenioFilesResponseEntry `json:"entries"`
+}
+
+// InvenioFilesResponseEntry is the representation of a file entry
+type InvenioFilesResponseEntry struct {
+	Key      string                         `json:"key"`
+	Checksum string                         `json:"checksum"`
+	Size     int64                          `json:"size"`
+	Updated  string                         `json:"updated"`
+	MimeType string                         `json:"mimetype"`
+	Links    InvenioFilesResponseEntryLinks `json:"links"`
+}
+
+// InvenioFilesResponseEntryLinks represents file links details
+type InvenioFilesResponseEntryLinks struct {
+	Content string `json:"content"`
+}
diff --git a/backend/doi/api/types.go b/backend/doi/api/types.go
new file mode 100644
index 0000000000000..202cbf6ecbbd9
--- /dev/null
+++ b/backend/doi/api/types.go
@@ -0,0 +1,26 @@
+// Package api has general type definitions for doi
+package api
+
+// DoiResolverResponse is returned by the DOI resolver API
+//
+// Reference: https://www.doi.org/the-identifier/resources/factsheets/doi-resolution-documentation
+type DoiResolverResponse struct {
+	ResponseCode int                        `json:"responseCode"`
+	Handle       string                     `json:"handle"`
+	Values       []DoiResolverResponseValue `json:"values"`
+}
+
+// DoiResolverResponseValue is a single handle record value
+type DoiResolverResponseValue struct {
+	Index     int                          `json:"index"`
+	Type      string                       `json:"type"`
+	Data      DoiResolverResponseValueData `json:"data"`
+	TTL       int                          `json:"ttl"`
+	Timestamp string                       `json:"timestamp"`
+}
+
+// DoiResolverResponseValueData is the data held in a handle value
+type DoiResolverResponseValueData struct {
+	Format string `json:"format"`
+	Value  any    `json:"value"`
+}
diff --git a/backend/doi/dataverse.go b/backend/doi/dataverse.go
new file mode 100644
index 0000000000000..20e5afbc70e88
--- /dev/null
+++ b/backend/doi/dataverse.go
@@ -0,0 +1,139 @@
+// Implementation for Dataverse
+
+package doi
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"net/url"
+	"path"
+	"strings"
+	"time"
+
+	"github.com/rclone/rclone/backend/doi/api"
+	"github.com/rclone/rclone/fs"
+	"github.com/rclone/rclone/lib/rest"
+)
+
+// Returns true if resolvedURL is likely a DOI hosted on a Dataverse intallation
+func activateDataverse(resolvedURL *url.URL) (isActive bool) {
+	queryValues := resolvedURL.Query()
+	persistentID := queryValues.Get("persistentId")
+	return persistentID != ""
+}
+
+// Resolve the main API endpoint for a DOI hosted on a Dataverse installation
+func resolveDataverseEndpoint(resolvedURL *url.URL) (provider Provider, endpoint *url.URL, err error) {
+	queryValues := resolvedURL.Query()
+	persistentID := queryValues.Get("persistentId")
+
+	query := url.Values{}
+	query.Add("persistentId", persistentID)
+	endpointURL := resolvedURL.ResolveReference(&url.URL{Path: "/api/datasets/:persistentId/", RawQuery: query.Encode()})
+
+	return Dataverse, endpointURL, nil
+}
+
+// Implements Fs.List() for Dataverse installations
+func (f *Fs) listDataverse(ctx context.Context, dir string) (entries fs.DirEntries, err error) {
+	fileEntries, err := f.listDataverseDoiFiles(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("error listing %q: %w", dir, err)
+	}
+
+	fullDir := path.Join(f.root, dir)
+	if fullDir != "" {
+		fullDir += "/"
+	}
+	dirPaths := map[string]bool{}
+	for _, entry := range fileEntries {
+		// First, filter out files not in `fullDir`
+		if !strings.HasPrefix(entry.remote, fullDir) {
+			continue
+		}
+		// Then, find entries in subfolers
+		remotePath := entry.remote
+		if fullDir != "" {
+			remotePath = strings.TrimLeft(strings.TrimPrefix(remotePath, fullDir), "/")
+		}
+		parts := strings.SplitN(remotePath, "/", 2)
+		if len(parts) == 1 {
+			newEntry := *entry
+			newEntry.remote = path.Join(dir, remotePath)
+			entries = append(entries, &newEntry)
+		} else {
+			dirPaths[path.Join(dir, parts[0])] = true
+		}
+	}
+	for dirPath := range dirPaths {
+		entry := fs.NewDir(dirPath, time.Time{})
+		entries = append(entries, entry)
+	}
+	return entries, nil
+}
+
+// List the files contained in the DOI
+func (f *Fs) listDataverseDoiFiles(ctx context.Context) (entries []*Object, err error) {
+	// Use the cache if populated
+	cachedEntries, found := f.cache.GetMaybe("files")
+	if found {
+		parsedEntries, ok := cachedEntries.([]Object)
+		if ok {
+			for _, entry := range parsedEntries {
+				newEntry := entry
+				entries = append(entries, &newEntry)
+			}
+			return entries, nil
+		}
+	}
+
+	filesURL := f.endpoint
+	var res *http.Response
+	var result api.DataverseDatasetResponse
+	opts := rest.Opts{
+		Method:     "GET",
+		Path:       strings.TrimLeft(filesURL.EscapedPath(), "/"),
+		Parameters: filesURL.Query(),
+	}
+	err = f.pacer.Call(func() (bool, error) {
+		res, err = f.srv.CallJSON(ctx, &opts, nil, &result)
+		return shouldRetry(ctx, res, err)
+	})
+	if err != nil {
+		return nil, fmt.Errorf("readDir failed: %w", err)
+	}
+	modTime, modTimeErr := time.Parse(time.RFC3339, result.Data.LatestVersion.LastUpdateTime)
+	if modTimeErr != nil {
+		fs.Logf(f, "error: could not parse last update time %v", modTimeErr)
+		modTime = timeUnset
+	}
+	for _, file := range result.Data.LatestVersion.Files {
+		contentURLPath := fmt.Sprintf("/api/access/datafile/%d", file.DataFile.ID)
+		query := url.Values{}
+		query.Add("format", "original")
+		contentURL := f.endpoint.ResolveReference(&url.URL{Path: contentURLPath, RawQuery: query.Encode()})
+		entry := &Object{
+			fs:          f,
+			remote:      path.Join(file.DirectoryLabel, file.DataFile.Filename),
+			contentURL:  contentURL.String(),
+			size:        file.DataFile.FileSize,
+			modTime:     modTime,
+			md5:         file.DataFile.MD5,
+			contentType: file.DataFile.ContentType,
+		}
+		if file.DataFile.OriginalFileName != "" {
+			entry.remote = path.Join(file.DirectoryLabel, file.DataFile.OriginalFileName)
+			entry.size = file.DataFile.OriginalFileSize
+			entry.contentType = file.DataFile.OriginalFileFormat
+		}
+		entries = append(entries, entry)
+	}
+	// Populate the cache
+	cacheEntries := []Object{}
+	for _, entry := range entries {
+		cacheEntries = append(cacheEntries, *entry)
+	}
+	f.cache.Put("files", cacheEntries)
+	return entries, nil
+}
diff --git a/backend/doi/doi.go b/backend/doi/doi.go
new file mode 100644
index 0000000000000..af734737f47c2
--- /dev/null
+++ b/backend/doi/doi.go
@@ -0,0 +1,599 @@
+// Package doi provides a filesystem interface for digital objects identified by DOIs.
+//
+// See: https://www.doi.org/the-identifier/what-is-a-doi/
+package doi
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+	"net/url"
+	"path"
+	"strings"
+	"time"
+
+	"github.com/rclone/rclone/backend/doi/api"
+	"github.com/rclone/rclone/fs"
+	"github.com/rclone/rclone/fs/config/configmap"
+	"github.com/rclone/rclone/fs/config/configstruct"
+	"github.com/rclone/rclone/fs/fserrors"
+	"github.com/rclone/rclone/fs/fshttp"
+	"github.com/rclone/rclone/fs/hash"
+	"github.com/rclone/rclone/lib/cache"
+	"github.com/rclone/rclone/lib/pacer"
+	"github.com/rclone/rclone/lib/rest"
+)
+
+const (
+	// the URL of the DOI resolver
+	//
+	// Reference: https://www.doi.org/the-identifier/resources/factsheets/doi-resolution-documentation
+	doiResolverAPIURL = "https://doi.org/api"
+	minSleep          = 10 * time.Millisecond
+	maxSleep          = 2 * time.Second
+	decayConstant     = 2 // bigger for slower decay, exponential
+)
+
+var (
+	errorReadOnly = errors.New("doi remotes are read only")
+	timeUnset     = time.Unix(0, 0)
+)
+
+func init() {
+	fsi := &fs.RegInfo{
+		Name:        "doi",
+		Description: "DOI datasets",
+		NewFs:       NewFs,
+		CommandHelp: commandHelp,
+		Options: []fs.Option{{
+			Name:     "doi",
+			Help:     "The DOI or the doi.org URL.",
+			Required: true,
+		}, {
+			Name: fs.ConfigProvider,
+			Help: `DOI provider.
+
+The DOI provider can be set when rclone does not automatically recognize a supported DOI provider.`,
+			Examples: []fs.OptionExample{
+				{
+					Value: "auto",
+					Help:  "Auto-detect provider",
+				},
+				{
+					Value: string(Zenodo),
+					Help:  "Zenodo",
+				}, {
+					Value: string(Dataverse),
+					Help:  "Dataverse",
+				}, {
+					Value: string(Invenio),
+					Help:  "Invenio",
+				}},
+			Required: false,
+			Advanced: true,
+		}},
+	}
+	fs.Register(fsi)
+}
+
+// Provider defines the type of provider hosting the DOI
+type Provider string
+
+const (
+	// Zenodo provider, see https://zenodo.org
+	Zenodo Provider = "zenodo"
+	// Dataverse provider, see https://dataverse.harvard.edu
+	Dataverse Provider = "dataverse"
+	// Invenio provider, see https://inveniordm.docs.cern.ch
+	Invenio Provider = "invenio"
+)
+
+// Options defines the configuration for this backend
+type Options struct {
+	Doi      string `config:"doi"`      // The DOI, a digital identifier of an object, usually a dataset
+	Provider string `config:"provider"` // The DOI provider
+}
+
+// Fs stores the interface to the remote HTTP files
+type Fs struct {
+	name        string         // name of this remote
+	root        string         // the path we are working on
+	provider    Provider       // the DOI provider
+	features    *fs.Features   // optional features
+	opt         Options        // options for this backend
+	ci          *fs.ConfigInfo // global config
+	endpoint    *url.URL       // the main API endpoint for this remote
+	endpointURL string         // endpoint as a string
+	srv         *rest.Client   // the connection to the server
+	pacer       *fs.Pacer      // pacer for API calls
+	cache       *cache.Cache   // a cache for the remote metadata
+}
+
+// Object is a remote object that has been stat'd (so it exists, but is not necessarily open for reading)
+type Object struct {
+	fs          *Fs       // what this object is part of
+	remote      string    // the remote path
+	contentURL  string    // the URL where the contents of the file can be downloaded
+	size        int64     // size of the object
+	modTime     time.Time // modification time of the object
+	contentType string    // content type of the object
+	md5         string    // MD5 hash of the object content
+}
+
+// Parse the input string as a DOI
+// Examples:
+// 10.1000/182 -> 10.1000/182
+// https://doi.org/10.1000/182 -> 10.1000/182
+// doi:10.1000/182 -> 10.1000/182
+func parseDoi(doi string) string {
+	doiURL, err := url.Parse(doi)
+	if err != nil {
+		return doi
+	}
+	if doiURL.Scheme == "doi" {
+		return strings.TrimLeft(strings.TrimPrefix(doi, "doi:"), "/")
+	}
+	if strings.HasSuffix(doiURL.Hostname(), "doi.org") {
+		return strings.TrimLeft(doiURL.Path, "/")
+	}
+	return doi
+}
+
+// Resolve a DOI to a URL
+// Reference: https://www.doi.org/the-identifier/resources/factsheets/doi-resolution-documentation
+func resolveDoiURL(ctx context.Context, srv *rest.Client, pacer *fs.Pacer, opt *Options) (doiURL *url.URL, err error) {
+	var result api.DoiResolverResponse
+	params := url.Values{}
+	params.Add("index", "1")
+	opts := rest.Opts{
+		Method:     "GET",
+		RootURL:    doiResolverAPIURL,
+		Path:       "/handles/" + opt.Doi,
+		Parameters: params,
+	}
+	err = pacer.Call(func() (bool, error) {
+		res, err := srv.CallJSON(ctx, &opts, nil, &result)
+		return shouldRetry(ctx, res, err)
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	if result.ResponseCode != 1 {
+		return nil, fmt.Errorf("could not resolve DOI (error code %d)", result.ResponseCode)
+	}
+	resolvedURLStr := ""
+	for _, value := range result.Values {
+		if value.Type == "URL" && value.Data.Format == "string" {
+			valueStr, ok := value.Data.Value.(string)
+			if !ok {
+				return nil, fmt.Errorf("could not resolve DOI (incorrect response format)")
+			}
+			resolvedURLStr = valueStr
+		}
+	}
+	resolvedURL, err := url.Parse(resolvedURLStr)
+	if err != nil {
+		return nil, err
+	}
+	return resolvedURL, nil
+}
+
+// Resolve the passed configuration into a provider and enpoint
+func resolveEndpoint(ctx context.Context, srv *rest.Client, pacer *fs.Pacer, opt *Options) (provider Provider, endpoint *url.URL, err error) {
+	resolvedURL, err := resolveDoiURL(ctx, srv, pacer, opt)
+	if err != nil {
+		return "", nil, err
+	}
+
+	switch opt.Provider {
+	case string(Dataverse):
+		return resolveDataverseEndpoint(resolvedURL)
+	case string(Invenio):
+		return resolveInvenioEndpoint(ctx, srv, pacer, resolvedURL)
+	case string(Zenodo):
+		return resolveZenodoEndpoint(ctx, srv, pacer, resolvedURL, opt.Doi)
+	}
+
+	hostname := strings.ToLower(resolvedURL.Hostname())
+	if hostname == "dataverse.harvard.edu" || activateDataverse(resolvedURL) {
+		return resolveDataverseEndpoint(resolvedURL)
+	}
+	if hostname == "zenodo.org" || strings.HasSuffix(hostname, ".zenodo.org") {
+		return resolveZenodoEndpoint(ctx, srv, pacer, resolvedURL, opt.Doi)
+	}
+	if activateInvenio(ctx, srv, pacer, resolvedURL) {
+		return resolveInvenioEndpoint(ctx, srv, pacer, resolvedURL)
+	}
+
+	return "", nil, fmt.Errorf("provider '%s' is not supported", resolvedURL.Hostname())
+}
+
+// Make the http connection from the passed options
+func (f *Fs) httpConnection(ctx context.Context, opt *Options) (isFile bool, err error) {
+	provider, endpoint, err := resolveEndpoint(ctx, f.srv, f.pacer, opt)
+	if err != nil {
+		return false, err
+	}
+
+	// Update f with the new parameters
+	f.srv.SetRoot(endpoint.ResolveReference(&url.URL{Path: "/"}).String())
+	f.endpoint = endpoint
+	f.endpointURL = endpoint.String()
+	f.provider = provider
+	f.opt.Provider = string(provider)
+
+	// Determine if the root is a file
+	switch f.provider {
+	case Dataverse:
+		entries, err := f.listDataverseDoiFiles(ctx)
+		if err != nil {
+			return false, err
+		}
+		for _, entry := range entries {
+			if entry.remote == f.root {
+				isFile = true
+				break
+			}
+		}
+	case Invenio, Zenodo:
+		isFile = f.root != ""
+	}
+
+	return isFile, nil
+}
+
+// retryErrorCodes is a slice of error codes that we will retry
+var retryErrorCodes = []int{
+	429, // Too Many Requests.
+	500, // Internal Server Error
+	502, // Bad Gateway
+	503, // Service Unavailable
+	504, // Gateway Timeout
+	509, // Bandwidth Limit Exceeded
+}
+
+// shouldRetry returns a boolean as to whether this resp and err
+// deserve to be retried.  It returns the err as a convenience
+func shouldRetry(ctx context.Context, res *http.Response, err error) (bool, error) {
+	if fserrors.ContextError(ctx, &err) {
+		return false, err
+	}
+	return fserrors.ShouldRetry(err) || fserrors.ShouldRetryHTTP(res, retryErrorCodes), err
+}
+
+// NewFs creates a new Fs object from the name and root. It connects to
+// the host specified in the config file.
+func NewFs(ctx context.Context, name, root string, m configmap.Mapper) (fs.Fs, error) {
+	root = strings.Trim(root, "/")
+
+	// Parse config into Options struct
+	opt := new(Options)
+	err := configstruct.Set(m, opt)
+	if err != nil {
+		return nil, err
+	}
+	opt.Doi = parseDoi(opt.Doi)
+
+	client := fshttp.NewClient(ctx)
+	ci := fs.GetConfig(ctx)
+	f := &Fs{
+		name:  name,
+		root:  root,
+		opt:   *opt,
+		ci:    ci,
+		srv:   rest.NewClient(client),
+		pacer: fs.NewPacer(ctx, pacer.NewDefault(pacer.MinSleep(minSleep), pacer.MaxSleep(maxSleep), pacer.DecayConstant(decayConstant))),
+		cache: cache.New(),
+	}
+	f.features = (&fs.Features{
+		CanHaveEmptyDirectories: true,
+	}).Fill(ctx, f)
+
+	isFile, err := f.httpConnection(ctx, opt)
+	if err != nil {
+		return nil, err
+	}
+
+	if isFile {
+		// return an error with an fs which points to the parent
+		newRoot := path.Dir(f.root)
+		if newRoot == "." {
+			newRoot = ""
+		}
+		f.root = newRoot
+		return f, fs.ErrorIsFile
+	}
+
+	return f, nil
+}
+
+// Name returns the configured name of the file system
+func (f *Fs) Name() string {
+	return f.name
+}
+
+// Root returns the root for the filesystem
+func (f *Fs) Root() string {
+	return f.root
+}
+
+// String returns the URL for the filesystem
+func (f *Fs) String() string {
+	return fmt.Sprintf("DOI %s", f.opt.Doi)
+}
+
+// Features returns the optional features of this Fs
+func (f *Fs) Features() *fs.Features {
+	return f.features
+}
+
+// Precision is the remote http file system's modtime precision, which we have no way of knowing. We estimate at 1s
+func (f *Fs) Precision() time.Duration {
+	return time.Second
+}
+
+// Hashes returns hash.HashNone to indicate remote hashing is unavailable
+func (f *Fs) Hashes() hash.Set {
+	return hash.Set(hash.MD5)
+	// return hash.Set(hash.None)
+}
+
+// Mkdir makes the root directory of the Fs object
+func (f *Fs) Mkdir(ctx context.Context, dir string) error {
+	return errorReadOnly
+}
+
+// Remove a remote http file object
+func (o *Object) Remove(ctx context.Context) error {
+	return errorReadOnly
+}
+
+// Rmdir removes the root directory of the Fs object
+func (f *Fs) Rmdir(ctx context.Context, dir string) error {
+	return errorReadOnly
+}
+
+// NewObject creates a new remote http file object
+func (f *Fs) NewObject(ctx context.Context, remote string) (fs.Object, error) {
+	var entries []*Object
+	var err error
+	switch f.provider {
+	case Dataverse:
+		entries, err = f.listDataverseDoiFiles(ctx)
+	case Invenio, Zenodo:
+		entries, err = f.listInvevioDoiFiles(ctx)
+	default:
+		err = fmt.Errorf("provider type '%s' not supported", f.provider)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	for _, entry := range entries {
+		if entry.Remote() == remote {
+			return entry, nil
+		}
+	}
+
+	return nil, fs.ErrorObjectNotFound
+}
+
+// List the objects and directories in dir into entries.  The
+// entries can be returned in any order but should be for a
+// complete directory.
+//
+// dir should be "" to list the root, and should not have
+// trailing slashes.
+//
+// This should return ErrDirNotFound if the directory isn't
+// found.
+func (f *Fs) List(ctx context.Context, dir string) (entries fs.DirEntries, err error) {
+	switch f.provider {
+	case Dataverse:
+		return f.listDataverse(ctx, dir)
+	case Invenio, Zenodo:
+		return f.listInvenio(ctx, dir)
+	default:
+		return nil, fmt.Errorf("provider type '%s' not supported", f.provider)
+	}
+}
+
+// Put in to the remote path with the modTime given of the given size
+//
+// May create the object even if it returns an error - if so
+// will return the object and the error, otherwise will return
+// nil and the error
+func (f *Fs) Put(ctx context.Context, in io.Reader, src fs.ObjectInfo, options ...fs.OpenOption) (fs.Object, error) {
+	return nil, errorReadOnly
+}
+
+// PutStream uploads to the remote path with the modTime given of indeterminate size
+func (f *Fs) PutStream(ctx context.Context, in io.Reader, src fs.ObjectInfo, options ...fs.OpenOption) (fs.Object, error) {
+	return nil, errorReadOnly
+}
+
+// Fs is the filesystem this remote http file object is located within
+func (o *Object) Fs() fs.Info {
+	return o.fs
+}
+
+// String returns the URL to the remote HTTP file
+func (o *Object) String() string {
+	if o == nil {
+		return "<nil>"
+	}
+	return o.remote
+}
+
+// Remote the name of the remote HTTP file, relative to the fs root
+func (o *Object) Remote() string {
+	return o.remote
+}
+
+// Hash returns "" since HTTP (in Go or OpenSSH) doesn't support remote calculation of hashes
+func (o *Object) Hash(ctx context.Context, t hash.Type) (string, error) {
+	if t != hash.MD5 {
+		return "", hash.ErrUnsupported
+	}
+	return o.md5, nil
+}
+
+// Size returns the size in bytes of the remote http file
+func (o *Object) Size() int64 {
+	return o.size
+}
+
+// ModTime returns the modification time of the remote http file
+func (o *Object) ModTime(ctx context.Context) time.Time {
+	return o.modTime
+}
+
+// SetModTime sets the modification and access time to the specified time
+//
+// it also updates the info field
+func (o *Object) SetModTime(ctx context.Context, modTime time.Time) error {
+	return errorReadOnly
+}
+
+// Storable returns whether the remote http file is a regular file (not a directory, symbolic link, block device, character device, named pipe, etc.)
+func (o *Object) Storable() bool {
+	return true
+}
+
+// Open a remote http file object for reading. Seek is supported
+func (o *Object) Open(ctx context.Context, options ...fs.OpenOption) (in io.ReadCloser, err error) {
+	fs.FixRangeOption(options, o.size)
+	opts := rest.Opts{
+		Method:  "GET",
+		RootURL: o.contentURL,
+		Options: options,
+	}
+	var res *http.Response
+	err = o.fs.pacer.Call(func() (bool, error) {
+		res, err = o.fs.srv.Call(ctx, &opts)
+		return shouldRetry(ctx, res, err)
+	})
+	if err != nil {
+		return nil, fmt.Errorf("Open failed: %w", err)
+	}
+
+	// Handle non-compliant redirects
+	if res.Header.Get("Location") != "" {
+		newURL, err := res.Location()
+		if err == nil {
+			opts.RootURL = newURL.String()
+			err = o.fs.pacer.Call(func() (bool, error) {
+				res, err = o.fs.srv.Call(ctx, &opts)
+				return shouldRetry(ctx, res, err)
+			})
+			if err != nil {
+				return nil, fmt.Errorf("Open failed: %w", err)
+			}
+		}
+	}
+
+	return res.Body, nil
+}
+
+// Update in to the object with the modTime given of the given size
+func (o *Object) Update(ctx context.Context, in io.Reader, src fs.ObjectInfo, options ...fs.OpenOption) error {
+	return errorReadOnly
+}
+
+// MimeType of an Object if known, "" otherwise
+func (o *Object) MimeType(ctx context.Context) string {
+	return o.contentType
+}
+
+var commandHelp = []fs.CommandHelp{{
+	Name:  "metadata",
+	Short: "Show metadata about the DOI.",
+	Long: `This command returns a JSON object with some information about the DOI.
+
+    rclone backend medatadata doi: 
+
+It returns a JSON object representing metadata about the DOI.
+`,
+}, {
+	Name:  "set",
+	Short: "Set command for updating the config parameters.",
+	Long: `This set command can be used to update the config parameters
+for a running doi backend.
+
+Usage Examples:
+
+    rclone backend set doi: [-o opt_name=opt_value] [-o opt_name2=opt_value2]
+    rclone rc backend/command command=set fs=doi: [-o opt_name=opt_value] [-o opt_name2=opt_value2]
+    rclone rc backend/command command=set fs=doi: -o doi=NEW_DOI
+
+The option keys are named as they are in the config file.
+
+This rebuilds the connection to the doi backend when it is called with
+the new parameters. Only new parameters need be passed as the values
+will default to those currently in use.
+
+It doesn't return anything.
+`,
+}}
+
+// Command the backend to run a named command
+//
+// The command run is name
+// args may be used to read arguments from
+// opts may be used to read optional arguments from
+//
+// The result should be capable of being JSON encoded
+// If it is a string or a []string it will be shown to the user
+// otherwise it will be JSON encoded and shown to the user like that
+func (f *Fs) Command(ctx context.Context, name string, arg []string, opt map[string]string) (out interface{}, err error) {
+	switch name {
+	case "metadata":
+		return f.ShowMetadata(ctx)
+	case "set":
+		newOpt := f.opt
+		err := configstruct.Set(configmap.Simple(opt), &newOpt)
+		if err != nil {
+			return nil, fmt.Errorf("reading config: %w", err)
+		}
+		_, err = f.httpConnection(ctx, &newOpt)
+		if err != nil {
+			return nil, fmt.Errorf("updating session: %w", err)
+		}
+		f.opt = newOpt
+		keys := []string{}
+		for k := range opt {
+			keys = append(keys, k)
+		}
+		fs.Logf(f, "Updated config values: %s", strings.Join(keys, ", "))
+		return nil, nil
+	default:
+		return nil, fs.ErrorCommandNotFound
+	}
+}
+
+// ShowMetadata returns some metadata about the corresponding DOI
+func (f *Fs) ShowMetadata(ctx context.Context) (metadata interface{}, err error) {
+	doiURL, err := url.Parse("https://doi.org/" + f.opt.Doi)
+	if err != nil {
+		return nil, err
+	}
+
+	info := map[string]any{}
+	info["DOI"] = f.opt.Doi
+	info["URL"] = doiURL.String()
+	info["metadataURL"] = f.endpointURL
+	info["provider"] = f.provider
+	return info, nil
+}
+
+// Check the interfaces are satisfied
+var (
+	_ fs.Fs          = (*Fs)(nil)
+	_ fs.PutStreamer = (*Fs)(nil)
+	_ fs.Commander   = (*Fs)(nil)
+	_ fs.Object      = (*Object)(nil)
+	_ fs.MimeTyper   = (*Object)(nil)
+)
diff --git a/backend/doi/doi_internal_test.go b/backend/doi/doi_internal_test.go
new file mode 100644
index 0000000000000..2a5004eb37780
--- /dev/null
+++ b/backend/doi/doi_internal_test.go
@@ -0,0 +1,34 @@
+package doi
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestParseDoi(t *testing.T) {
+	// 10.1000/182 -> 10.1000/182
+	doi := "10.1000/182"
+	parsed := parseDoi(doi)
+	assert.Equal(t, "10.1000/182", parsed)
+
+	// https://doi.org/10.1000/182 -> 10.1000/182
+	doi = "https://doi.org/10.1000/182"
+	parsed = parseDoi(doi)
+	assert.Equal(t, "10.1000/182", parsed)
+
+	// https://dx.doi.org/10.1000/182 -> 10.1000/182
+	doi = "https://dxdoi.org/10.1000/182"
+	parsed = parseDoi(doi)
+	assert.Equal(t, "10.1000/182", parsed)
+
+	// doi:10.1000/182 -> 10.1000/182
+	doi = "doi:10.1000/182"
+	parsed = parseDoi(doi)
+	assert.Equal(t, "10.1000/182", parsed)
+
+	// doi://10.1000/182 -> 10.1000/182
+	doi = "doi://10.1000/182"
+	parsed = parseDoi(doi)
+	assert.Equal(t, "10.1000/182", parsed)
+}
diff --git a/backend/doi/doi_test.go b/backend/doi/doi_test.go
new file mode 100644
index 0000000000000..1d9dfc09430b3
--- /dev/null
+++ b/backend/doi/doi_test.go
@@ -0,0 +1,16 @@
+// Test DOI filesystem interface
+package doi
+
+import (
+	"testing"
+
+	"github.com/rclone/rclone/fstest/fstests"
+)
+
+// TestIntegration runs integration tests against the remote
+func TestIntegration(t *testing.T) {
+	fstests.Run(t, &fstests.Opt{
+		RemoteName: "TestDoi:",
+		NilObject:  (*Object)(nil),
+	})
+}
diff --git a/backend/doi/invenio.go b/backend/doi/invenio.go
new file mode 100644
index 0000000000000..e6d1c8f073de4
--- /dev/null
+++ b/backend/doi/invenio.go
@@ -0,0 +1,169 @@
+// Implementation for InvenioRDM
+
+package doi
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"net/url"
+	"regexp"
+	"strings"
+	"time"
+
+	"github.com/rclone/rclone/backend/doi/api"
+	"github.com/rclone/rclone/fs"
+	"github.com/rclone/rclone/lib/rest"
+)
+
+var invenioRecordRegex = regexp.MustCompile(`\/records?\/(.+)`)
+
+// Returns true if resolvedURL is likely a DOI hosted on an InvenioRDM intallation
+func activateInvenio(ctx context.Context, srv *rest.Client, pacer *fs.Pacer, resolvedURL *url.URL) (isActive bool) {
+	_, _, err := resolveInvenioEndpoint(ctx, srv, pacer, resolvedURL)
+	return err == nil
+}
+
+// Resolve the main API endpoint for a DOI hosted on an InvenioRDM installation
+func resolveInvenioEndpoint(ctx context.Context, srv *rest.Client, pacer *fs.Pacer, resolvedURL *url.URL) (provider Provider, endpoint *url.URL, err error) {
+	var res *http.Response
+	opts := rest.Opts{
+		Method:  "GET",
+		RootURL: resolvedURL.String(),
+	}
+	err = pacer.Call(func() (bool, error) {
+		res, err = srv.Call(ctx, &opts)
+		return shouldRetry(ctx, res, err)
+	})
+	if err != nil {
+		return "", nil, err
+	}
+
+	// First, attempt to grab the API URL from the headers
+	var linksetURL *url.URL
+	links := parseLinkHeader(res.Header.Get("Link"))
+	for _, link := range links {
+		if link.Rel == "linkset" && link.Type == "application/linkset+json" {
+			parsed, err := url.Parse(link.Href)
+			if err == nil {
+				linksetURL = parsed
+				break
+			}
+		}
+	}
+
+	if linksetURL != nil {
+		endpoint, err = checkInvenioAPIURL(ctx, srv, pacer, linksetURL)
+		if err == nil {
+			return Invenio, endpoint, nil
+		}
+		fs.Logf(nil, "using linkset URL failed: %s", err.Error())
+	}
+
+	// If there is no linkset header, try to grab the record ID from the URL
+	recordID := ""
+	resURL := res.Request.URL
+	match := invenioRecordRegex.FindStringSubmatch(resURL.EscapedPath())
+	if match != nil {
+		recordID = match[1]
+		guessedURL := res.Request.URL.ResolveReference(&url.URL{
+			Path: "/api/records/" + recordID,
+		})
+		endpoint, err = checkInvenioAPIURL(ctx, srv, pacer, guessedURL)
+		if err == nil {
+			return Invenio, endpoint, nil
+		}
+		fs.Logf(nil, "guessing the URL failed: %s", err.Error())
+	}
+
+	return "", nil, fmt.Errorf("could not resolve the Invenio API endpoint for '%s'", resolvedURL.String())
+}
+
+func checkInvenioAPIURL(ctx context.Context, srv *rest.Client, pacer *fs.Pacer, resolvedURL *url.URL) (endpoint *url.URL, err error) {
+	var result api.InvenioRecordResponse
+	opts := rest.Opts{
+		Method:  "GET",
+		RootURL: resolvedURL.String(),
+	}
+	err = pacer.Call(func() (bool, error) {
+		res, err := srv.CallJSON(ctx, &opts, nil, &result)
+		return shouldRetry(ctx, res, err)
+	})
+	if err != nil {
+		return nil, err
+	}
+	if result.Links.Self == "" {
+		return nil, fmt.Errorf("could not parse API response from '%s'", resolvedURL.String())
+	}
+	return url.Parse(result.Links.Self)
+}
+
+// Implements Fs.List() for Invenio
+func (f *Fs) listInvenio(ctx context.Context, dir string) (entries fs.DirEntries, err error) {
+	if dir != "" {
+		return nil, fs.ErrorDirNotFound
+	}
+
+	fileEntries, err := f.listInvevioDoiFiles(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("error listing %q: %w", dir, err)
+	}
+	for _, entry := range fileEntries {
+		entries = append(entries, entry)
+	}
+	return entries, nil
+}
+
+// List the files contained in the DOI
+func (f *Fs) listInvevioDoiFiles(ctx context.Context) (entries []*Object, err error) {
+	// Use the cache if populated
+	cachedEntries, found := f.cache.GetMaybe("files")
+	if found {
+		parsedEntries, ok := cachedEntries.([]Object)
+		if ok {
+			for _, entry := range parsedEntries {
+				newEntry := entry
+				entries = append(entries, &newEntry)
+			}
+			return entries, nil
+		}
+	}
+
+	filesURL := f.endpoint.JoinPath("files")
+	var result api.InvenioFilesResponse
+	opts := rest.Opts{
+		Method: "GET",
+		Path:   strings.TrimLeft(filesURL.EscapedPath(), "/"),
+	}
+	err = f.pacer.Call(func() (bool, error) {
+		res, err := f.srv.CallJSON(ctx, &opts, nil, &result)
+		return shouldRetry(ctx, res, err)
+	})
+	if err != nil {
+		return nil, fmt.Errorf("readDir failed: %w", err)
+	}
+	for _, file := range result.Entries {
+		modTime, modTimeErr := time.Parse(time.RFC3339, file.Updated)
+		if modTimeErr != nil {
+			fs.Logf(f, "error: could not parse last update time %v", modTimeErr)
+			modTime = timeUnset
+		}
+		entry := &Object{
+			fs:          f,
+			remote:      file.Key,
+			contentURL:  file.Links.Content,
+			size:        file.Size,
+			modTime:     modTime,
+			contentType: file.MimeType,
+			md5:         strings.TrimPrefix(file.Checksum, "md5:"),
+		}
+		entries = append(entries, entry)
+	}
+	// Populate the cache
+	cacheEntries := []Object{}
+	for _, entry := range entries {
+		cacheEntries = append(cacheEntries, *entry)
+	}
+	f.cache.Put("files", cacheEntries)
+	return entries, nil
+}
diff --git a/backend/doi/link_header.go b/backend/doi/link_header.go
new file mode 100644
index 0000000000000..423ea8d89a76e
--- /dev/null
+++ b/backend/doi/link_header.go
@@ -0,0 +1,75 @@
+package doi
+
+import (
+	"regexp"
+	"strings"
+)
+
+var linkRegex = regexp.MustCompile(`^<(.+)>$`)
+var valueRegex = regexp.MustCompile(`^"(.+)"$`)
+
+// headerLink represents a link as presented in HTTP headers
+// MDN Reference: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Link
+type headerLink struct {
+	Href   string
+	Rel    string
+	Type   string
+	Extras map[string]string
+}
+
+func parseLinkHeader(header string) (links []headerLink) {
+	for _, link := range strings.Split(header, ",") {
+		link = strings.TrimSpace(link)
+		parsed := parseLink(link)
+		if parsed != nil {
+			links = append(links, *parsed)
+		}
+	}
+	return links
+}
+
+func parseLink(link string) (parsedLink *headerLink) {
+	var parts []string
+	for _, part := range strings.Split(link, ";") {
+		parts = append(parts, strings.TrimSpace(part))
+	}
+
+	match := linkRegex.FindStringSubmatch(parts[0])
+	if match == nil {
+		return nil
+	}
+
+	result := &headerLink{
+		Href:   match[1],
+		Extras: map[string]string{},
+	}
+
+	for _, keyValue := range parts[1:] {
+		parsed := parseKeyValue(keyValue)
+		if parsed != nil {
+			key, value := parsed[0], parsed[1]
+			switch strings.ToLower(key) {
+			case "rel":
+				result.Rel = value
+			case "type":
+				result.Type = value
+			default:
+				result.Extras[key] = value
+			}
+		}
+	}
+	return result
+}
+
+func parseKeyValue(keyValue string) []string {
+	parts := strings.SplitN(keyValue, "=", 2)
+	if parts[0] == "" || len(parts) < 2 {
+		return nil
+	}
+	match := valueRegex.FindStringSubmatch(parts[1])
+	if match != nil {
+		parts[1] = match[1]
+		return parts
+	}
+	return parts
+}
diff --git a/backend/doi/link_header_internal_test.go b/backend/doi/link_header_internal_test.go
new file mode 100644
index 0000000000000..857256b0e3dc5
--- /dev/null
+++ b/backend/doi/link_header_internal_test.go
@@ -0,0 +1,44 @@
+package doi
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestParseLinkHeader(t *testing.T) {
+	header := "<https://zenodo.org/api/records/15063252> ; rel=\"linkset\" ; type=\"application/linkset+json\""
+	links := parseLinkHeader(header)
+	expected := headerLink{
+		Href:   "https://zenodo.org/api/records/15063252",
+		Rel:    "linkset",
+		Type:   "application/linkset+json",
+		Extras: map[string]string{},
+	}
+	assert.Contains(t, links, expected)
+
+	header = "<https://api.example.com/issues?page=2>; rel=\"prev\", <https://api.example.com/issues?page=4>; rel=\"next\", <https://api.example.com/issues?page=10>; rel=\"last\", <https://api.example.com/issues?page=1>; rel=\"first\""
+	links = parseLinkHeader(header)
+	expectedList := []headerLink{{
+		Href:   "https://api.example.com/issues?page=2",
+		Rel:    "prev",
+		Type:   "",
+		Extras: map[string]string{},
+	}, {
+		Href:   "https://api.example.com/issues?page=4",
+		Rel:    "next",
+		Type:   "",
+		Extras: map[string]string{},
+	}, {
+		Href:   "https://api.example.com/issues?page=10",
+		Rel:    "last",
+		Type:   "",
+		Extras: map[string]string{},
+	}, {
+		Href:   "https://api.example.com/issues?page=1",
+		Rel:    "first",
+		Type:   "",
+		Extras: map[string]string{},
+	}}
+	assert.Equal(t, links, expectedList)
+}
diff --git a/backend/doi/zenodo.go b/backend/doi/zenodo.go
new file mode 100644
index 0000000000000..21f5c22e65a36
--- /dev/null
+++ b/backend/doi/zenodo.go
@@ -0,0 +1,47 @@
+// Implementation for Zenodo
+
+package doi
+
+import (
+	"context"
+	"fmt"
+	"net/url"
+	"regexp"
+
+	"github.com/rclone/rclone/backend/doi/api"
+	"github.com/rclone/rclone/fs"
+	"github.com/rclone/rclone/lib/rest"
+)
+
+var zenodoRecordRegex = regexp.MustCompile(`zenodo[.](.+)`)
+
+// Resolve the main API endpoint for a DOI hosted on Zenodo
+func resolveZenodoEndpoint(ctx context.Context, srv *rest.Client, pacer *fs.Pacer, resolvedURL *url.URL, doi string) (provider Provider, endpoint *url.URL, err error) {
+	match := zenodoRecordRegex.FindStringSubmatch(doi)
+	if match == nil {
+		return "", nil, fmt.Errorf("could not derive API endpoint URL from '%s'", resolvedURL.String())
+	}
+
+	recordID := match[1]
+	endpointURL := resolvedURL.ResolveReference(&url.URL{Path: "/api/records/" + recordID})
+
+	var result api.InvenioRecordResponse
+	opts := rest.Opts{
+		Method:  "GET",
+		RootURL: endpointURL.String(),
+	}
+	err = pacer.Call(func() (bool, error) {
+		res, err := srv.CallJSON(ctx, &opts, nil, &result)
+		return shouldRetry(ctx, res, err)
+	})
+	if err != nil {
+		return "", nil, err
+	}
+
+	endpointURL, err = url.Parse(result.Links.Self)
+	if err != nil {
+		return "", nil, err
+	}
+
+	return Zenodo, endpointURL, nil
+}
diff --git a/docs/content/doi.md b/docs/content/doi.md
new file mode 100644
index 0000000000000..f608f727a7a81
--- /dev/null
+++ b/docs/content/doi.md
@@ -0,0 +1,161 @@
+---
+title: "DOI"
+description: "Rclone docs for DOI"
+versionIntroduced: "?"
+---
+
+# {{< icon "fa fa-building-columns" >}} DOI
+
+The DOI remote is a read only remote for reading files from digital object identifiers (DOI).
+
+Currently, the DOI backend supports supports DOIs hosted with:
+- [InvenioRDM](https://inveniosoftware.org/products/rdm/)
+  - [Zenodo](https://zenodo.org)
+  - [CaltechDATA](https://data.caltech.edu)
+  - [Other InvenioRDM repositories](https://inveniosoftware.org/showcase/)
+- [Dataverse](https://dataverse.org)
+  - [Harvard Dataverse](https://dataverse.harvard.edu)
+  - [Other Dataverse repositories](https://dataverse.org/installations)
+
+Paths are specified as `remote:path`
+
+Paths may be as deep as required, e.g. `remote:directory/subdirectory`.
+
+## Configuration
+
+Here is an example of how to make a remote called `remote`.  First run:
+
+     rclone config
+
+This will guide you through an interactive setup process:
+
+```
+No remotes found, make a new one?
+n) New remote
+s) Set configuration password
+q) Quit config
+n/s/q> n
+Enter name for new remote.
+name> remote
+Type of storage to configure.
+Choose a number from below, or type in your own value
+[snip]
+XX / DOI datasets
+   \ (doi)
+[snip]
+Storage> doi
+Option doi.
+The DOI or the doi.org URL.
+Enter a value.
+doi> 10.5281/zenodo.5876941
+Edit advanced config?
+y) Yes
+n) No (default)
+y/n> n
+Configuration complete.
+Options:
+- type: doi
+- doi: 10.5281/zenodo.5876941
+Keep this "remote" remote?
+y) Yes this is OK (default)
+e) Edit this remote
+d) Delete this remote
+y/e/d> y
+```
+
+{{< rem autogenerated options start" - DO NOT EDIT - instead edit fs.RegInfo in backend/doi/doi.go then run make backenddocs" >}}
+### Standard options
+
+Here are the Standard options specific to doi (DOI datasets).
+
+#### --doi-doi
+
+The DOI or the doi.org URL.
+
+Properties:
+
+- Config:      doi
+- Env Var:     RCLONE_DOI_DOI
+- Type:        string
+- Required:    true
+
+### Advanced options
+
+Here are the Advanced options specific to doi (DOI datasets).
+
+#### --doi-provider
+
+DOI provider.
+
+The DOI provider can be set when rclone does not automatically recognize a supported DOI provider.
+
+Properties:
+
+- Config:      provider
+- Env Var:     RCLONE_DOI_PROVIDER
+- Type:        string
+- Required:    false
+- Examples:
+    - "auto"
+        - Auto-detect provider
+    - "zenodo"
+        - Zenodo
+    - "dataverse"
+        - Dataverse
+    - "invenio"
+        - Invenio
+
+## Backend commands
+
+Here are the commands specific to the doi backend.
+
+Run them with
+
+    rclone backend COMMAND remote:
+
+The help below will explain what arguments each command takes.
+
+See the [backend](/commands/rclone_backend/) command for more
+info on how to pass options and arguments.
+
+These can be run on a running backend using the rc command
+[backend/command](/rc/#backend-command).
+
+### metadata
+
+Show metadata about the DOI.
+
+    rclone backend metadata remote: [options] [<arguments>+]
+
+This command returns a JSON object with some information about the DOI.
+
+    rclone backend medatadata doi: 
+
+It returns a JSON object representing metadata about the DOI.
+
+
+### set
+
+Set command for updating the config parameters.
+
+    rclone backend set remote: [options] [<arguments>+]
+
+This set command can be used to update the config parameters
+for a running doi backend.
+
+Usage Examples:
+
+    rclone backend set doi: [-o opt_name=opt_value] [-o opt_name2=opt_value2]
+    rclone rc backend/command command=set fs=doi: [-o opt_name=opt_value] [-o opt_name2=opt_value2]
+    rclone rc backend/command command=set fs=doi: -o doi=NEW_DOI
+
+The option keys are named as they are in the config file.
+
+This rebuilds the connection to the doi backend when it is called with
+the new parameters. Only new parameters need be passed as the values
+will default to those currently in use.
+
+It doesn't return anything.
+
+
+{{< rem autogenerated options stop >}}
diff --git a/vfs/vfs.go b/vfs/vfs.go
index 8907a6e507828..07a86eae1b9c4 100644
--- a/vfs/vfs.go
+++ b/vfs/vfs.go
@@ -323,7 +323,7 @@ func (vfs *VFS) SetCacheMode(cacheMode vfscommon.CacheMode) {
 	vfs.cache = nil
 	if cacheMode > vfscommon.CacheModeOff {
 		ctx, cancel := context.WithCancel(context.Background())
-		cache, err := vfscache.New(ctx, vfs.f, &vfs.Opt, vfs.AddVirtual) // FIXME pass on context or get from Opt?
+		cache, err := vfscache.New(ctx, vfs.f, &vfs.Opt, vfs.AddVirtual, totalCacheUsed) // FIXME pass on context or get from Opt?
 		if err != nil {
 			fs.Errorf(nil, "Failed to create vfs cache - disabling: %v", err)
 			vfs.Opt.CacheMode = vfscommon.CacheModeOff
@@ -817,6 +817,18 @@ func (vfs *VFS) AddVirtual(remote string, size int64, isDir bool) (err error) {
 	return nil
 }
 
+// totalCacheUsed returns the total size used by VFS caches
+func totalCacheUsed() (size int64) {
+	activeMu.Lock()
+	for _, vfses := range active {
+		for _, vfs := range vfses {
+			size += vfs.cache.Used()
+		}
+	}
+	activeMu.Unlock()
+	return size
+}
+
 // Readlink returns the destination of the named symbolic link.
 // If there is an error, it will be of type *PathError.
 func (vfs *VFS) Readlink(name string) (s string, err error) {
diff --git a/vfs/vfscache/cache.go b/vfs/vfscache/cache.go
index 0ffa30c76ecb4..562cc03225712 100644
--- a/vfs/vfscache/cache.go
+++ b/vfs/vfscache/cache.go
@@ -51,6 +51,7 @@ type Cache struct {
 	hashOption *fs.HashesOption     // corresponding OpenOption
 	writeback  *writeback.WriteBack // holds Items for writeback
 	avFn       AddVirtualFn         // if set, can be called to add dir entries
+	tuFn       TotalUsedFn          // if set, can be called to check quotas
 
 	mu            sync.Mutex       // protects the following variables
 	cond          sync.Cond        // cond lock for synchronous cache cleaning
@@ -72,11 +73,14 @@ type Cache struct {
 // go into the directory tree.
 type AddVirtualFn func(remote string, size int64, isDir bool) error
 
+// TotalUsedFn can be used to check if the total size of caches exceeds the allowed quota.
+type TotalUsedFn func() (size int64)
+
 // New creates a new cache hierarchy for fremote
 //
 // This starts background goroutines which can be cancelled with the
 // context passed in.
-func New(ctx context.Context, fremote fs.Fs, opt *vfscommon.Options, avFn AddVirtualFn) (*Cache, error) {
+func New(ctx context.Context, fremote fs.Fs, opt *vfscommon.Options, avFn AddVirtualFn, tuFn TotalUsedFn) (*Cache, error) {
 	// Get cache root path.
 	// We need it in two variants: OS path as an absolute path with UNC prefix,
 	// OS-specific path separators, and encoded with OS-specific encoder. Standard path
@@ -127,6 +131,7 @@ func New(ctx context.Context, fremote fs.Fs, opt *vfscommon.Options, avFn AddVir
 		hashOption: hashOption,
 		writeback:  writeback.New(ctx, opt),
 		avFn:       avFn,
+		tuFn:       tuFn,
 	}
 
 	// load in the cache and metadata off disk
@@ -739,16 +744,39 @@ func (c *Cache) maxSizeQuotaOK() bool {
 	return c.used <= int64(c.opt.CacheMaxSize)
 }
 
+// Check the available quota for a disk is in limits wrt. DiskSpaceTotalSize.
+//
+// must be called with mu held.
+func (c *Cache) totalSizeQuotaOK() bool {
+	if c.opt.DiskSpaceTotalSize <= 0 {
+		return true
+	}
+	var margin int64
+	if c.opt.CacheMinFreeSpace > 0 {
+		margin = int64(c.opt.CacheMinFreeSpace)
+	}
+	if (c.used + margin) > int64(c.opt.DiskSpaceTotalSize) {
+		return false
+	}
+	if c.tuFn != nil {
+		totalUsed := c.tuFn()
+		if (totalUsed + margin) > int64(c.opt.DiskSpaceTotalSize) {
+			return false
+		}
+	}
+	return true
+}
+
 // Check the available quotas for a disk is in limits.
 //
 // must be called with mu held.
 func (c *Cache) quotasOK() bool {
-	return c.maxSizeQuotaOK() && c.minFreeSpaceQuotaOK()
+	return c.maxSizeQuotaOK() && c.minFreeSpaceQuotaOK() && c.totalSizeQuotaOK()
 }
 
 // Return true if any quotas set
 func (c *Cache) haveQuotas() bool {
-	return c.opt.CacheMaxSize > 0 || c.opt.CacheMinFreeSpace > 0
+	return c.opt.CacheMaxSize > 0 || c.opt.CacheMinFreeSpace > 0 || c.opt.DiskSpaceTotalSize > 0
 }
 
 // Remove clean cache files that are not open until the total space
@@ -899,3 +927,8 @@ func (c *Cache) AddVirtual(remote string, size int64, isDir bool) error {
 	}
 	return c.avFn(remote, size, isDir)
 }
+
+// Used returns the current bytes used by this cache
+func (c *Cache) Used() (size int64) {
+	return c.used
+}
diff --git a/vfs/vfscache/cache_test.go b/vfs/vfscache/cache_test.go
index 327962cf2ca4d..45e7a1ae1148a 100644
--- a/vfs/vfscache/cache_test.go
+++ b/vfs/vfscache/cache_test.go
@@ -91,7 +91,7 @@ func newTestCacheOpt(t *testing.T, opt vfscommon.Options) (r *fstest.Run, c *Cac
 	ctx, cancel := context.WithCancel(context.Background())
 
 	avInfos = nil
-	c, err := New(ctx, r.Fremote, &opt, addVirtual)
+	c, err := New(ctx, r.Fremote, &opt, addVirtual, nil)
 	require.NoError(t, err)
 
 	t.Cleanup(func() {

From 1f5fcf262a5080927d0c6a907dc5bd4e29d5f3b5 Mon Sep 17 00:00:00 2001
From: Flora Thiebaut <flora.thiebaut@sdsc.ethz.ch>
Date: Tue, 20 May 2025 17:34:30 +0200
Subject: [PATCH 73/73] build: add action to build releases for Renku (#10)

Add a GH action to build packages when we tag a custom release.
---
 .github/workflows/build-renku-release.yml | 197 ++++++++++++++++++++++
 go.mod                                    |   2 +-
 go.sum                                    |   4 +-
 3 files changed, 200 insertions(+), 3 deletions(-)
 create mode 100644 .github/workflows/build-renku-release.yml

diff --git a/.github/workflows/build-renku-release.yml b/.github/workflows/build-renku-release.yml
new file mode 100644
index 0000000000000..5a3b8833f097a
--- /dev/null
+++ b/.github/workflows/build-renku-release.yml
@@ -0,0 +1,197 @@
+name: Build rclone release for Renku
+
+# Trigger the workflow on tag pushes or manually
+on:
+  push:
+    tags:
+      - '**'
+  workflow_dispatch:
+
+jobs:
+  build:
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        job_name: ['linux', 'linux_386', 'mac_amd64', 'mac_arm64', 'windows', 'other_os']
+
+        include:
+          - job_name: linux
+            os: ubuntu-latest
+            go: '>=1.23.0-rc.1'
+            gotags: cmount
+            build_flags: '-include "^linux/"'
+            check: true
+            quicktest: true
+            racequicktest: true
+            librclonetest: true
+            deploy: true
+
+          - job_name: linux_386
+            os: ubuntu-latest
+            go: '>=1.23.0-rc.1'
+            goarch: 386
+            gotags: cmount
+            quicktest: true
+
+          - job_name: mac_amd64
+            os: macos-latest
+            go: '>=1.23.0-rc.1'
+            gotags: 'cmount'
+            build_flags: '-include "^darwin/amd64" -cgo'
+            quicktest: true
+            racequicktest: true
+            deploy: true
+
+          - job_name: mac_arm64
+            os: macos-latest
+            go: '>=1.23.0-rc.1'
+            gotags: 'cmount'
+            build_flags: '-include "^darwin/arm64" -cgo -macos-arch arm64 -cgo-cflags=-I/usr/local/include -cgo-ldflags=-L/usr/local/lib'
+            deploy: true
+
+          - job_name: windows
+            os: windows-latest
+            go: '>=1.23.0-rc.1'
+            gotags: cmount
+            cgo: '0'
+            build_flags: '-include "^windows/"'
+            build_args: '-buildmode exe'
+            quicktest: true
+            deploy: true
+
+          - job_name: other_os
+            os: ubuntu-latest
+            go: '>=1.23.0-rc.1'
+            build_flags: '-exclude "^(windows/|darwin/|linux/)"'
+            compile_all: true
+            deploy: true
+
+    name: ${{ matrix.job_name }}
+
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go }}
+          check-latest: true
+
+      - name: Set environment variables
+        shell: bash
+        run: |
+          echo 'GOTAGS=${{ matrix.gotags }}' >> $GITHUB_ENV
+          echo 'BUILD_FLAGS=${{ matrix.build_flags }}' >> $GITHUB_ENV
+          echo 'BUILD_ARGS=${{ matrix.build_args }}' >> $GITHUB_ENV
+          if [[ "${{ matrix.goarch }}" != "" ]]; then echo 'GOARCH=${{ matrix.goarch }}' >> $GITHUB_ENV ; fi
+          if [[ "${{ matrix.cgo }}" != "" ]]; then echo 'CGO_ENABLED=${{ matrix.cgo }}' >> $GITHUB_ENV ; fi
+
+      - name: Install Libraries on Linux
+        shell: bash
+        run: |
+          sudo modprobe fuse
+          sudo chmod 666 /dev/fuse
+          sudo chown root:$USER /etc/fuse.conf
+          sudo apt-get update
+          sudo apt-get install -y fuse3 libfuse-dev rpm pkg-config git-annex git-annex-remote-rclone nfs-common
+        if: matrix.os == 'ubuntu-latest'
+
+      - name: Install Libraries on macOS
+        shell: bash
+        run: |
+          # https://github.com/Homebrew/brew/issues/15621#issuecomment-1619266788
+          # https://github.com/orgs/Homebrew/discussions/4612#discussioncomment-6319008
+          unset HOMEBREW_NO_INSTALL_FROM_API
+          brew untap --force homebrew/core
+          brew untap --force homebrew/cask
+          brew update
+          brew install --cask macfuse
+          brew install git-annex git-annex-remote-rclone
+        if: matrix.os == 'macos-latest'
+
+      - name: Install Libraries on Windows
+        shell: powershell
+        run: |
+          $ProgressPreference = 'SilentlyContinue'
+          choco install -y winfsp zip
+          echo "CPATH=C:\Program Files\WinFsp\inc\fuse;C:\Program Files (x86)\WinFsp\inc\fuse" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
+          if ($env:GOARCH -eq "386") {
+            choco install -y mingw --forcex86 --force
+            echo "C:\\ProgramData\\chocolatey\\lib\\mingw\\tools\\install\\mingw32\\bin" | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
+          }
+          # Copy mingw32-make.exe to make.exe so the same command line
+          # can be used on Windows as on macOS and Linux
+          $path = (get-command mingw32-make.exe).Path
+          Copy-Item -Path $path -Destination (Join-Path (Split-Path -Path $path) 'make.exe')
+        if: matrix.os == 'windows-latest'
+
+      - name: Print Go version and environment
+        shell: bash
+        run: |
+          printf "Using go at: $(which go)\n"
+          printf "Go version: $(go version)\n"
+          printf "\n\nGo environment:\n\n"
+          go env
+          printf "\n\nRclone environment:\n\n"
+          make vars
+          printf "\n\nSystem environment:\n\n"
+          env
+
+      - name: Build rclone
+        shell: bash
+        run: |
+          make
+
+      - name: Rclone version
+        shell: bash
+        run: |
+          rclone version
+
+      - name: Run tests
+        shell: bash
+        run: |
+          make quicktest
+        if: matrix.quicktest
+
+      - name: Race test
+        shell: bash
+        run: |
+          make racequicktest
+        if: matrix.racequicktest
+
+      - name: Run librclone tests
+        shell: bash
+        run: |
+          make -C librclone/ctest test
+          make -C librclone/ctest clean
+          librclone/python/test_rclone.py
+        if: matrix.librclonetest
+
+      - name: Compile all architectures test
+        shell: bash
+        run: |
+          make
+          make compile_all
+        if: matrix.compile_all
+
+      - name: Build binaries for release
+        shell: bash
+        run: |
+          if [[ "${{ matrix.os }}" == "ubuntu-latest" ]]; then make release_dep_linux ; fi
+          make ci_gha
+          ls -al build/
+        if: matrix.deploy
+
+      - name: Upload artifacts to GitHub
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-${{ matrix.job_name }}
+          path: build
+          retention-days: 7
+        if: matrix.deploy
diff --git a/go.mod b/go.mod
index 4291434bfcd2d..fd1a776ed30c1 100644
--- a/go.mod
+++ b/go.mod
@@ -134,7 +134,7 @@ require (
 	github.com/cronokirby/saferith v0.33.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
-	github.com/ebitengine/purego v0.8.1 // indirect
+	github.com/ebitengine/purego v0.8.3 // indirect
 	github.com/emersion/go-message v0.18.0 // indirect
 	github.com/emersion/go-textwrapper v0.0.0-20200911093747-65d896831594 // indirect
 	github.com/emersion/go-vcard v0.0.0-20230815062825-8fda7d206ec9 // indirect
diff --git a/go.sum b/go.sum
index 923a2d10adfed..459ba71ca2cfa 100644
--- a/go.sum
+++ b/go.sum
@@ -213,8 +213,8 @@ github.com/dsnet/try v0.0.3/go.mod h1:WBM8tRpUmnXXhY1U6/S8dt6UWdHTQ7y8A5YSkRCkq4
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
 github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
-github.com/ebitengine/purego v0.8.1 h1:sdRKd6plj7KYW33EH5As6YKfe8m9zbN9JMrOjNVF/BE=
-github.com/ebitengine/purego v0.8.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ=
+github.com/ebitengine/purego v0.8.3 h1:K+0AjQp63JEZTEMZiwsI9g0+hAMNohwUOtY0RPGexmc=
+github.com/ebitengine/purego v0.8.3/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ=
 github.com/emersion/go-message v0.18.0 h1:7LxAXHRpSeoO/Wom3ZApVZYG7c3d17yCScYce8WiXA8=
 github.com/emersion/go-message v0.18.0/go.mod h1:Zi69ACvzaoV/MBnrxfVBPV3xWEuCmC2nEN39oJF4B8A=
 github.com/emersion/go-textwrapper v0.0.0-20200911093747-65d896831594 h1:IbFBtwoTQyw0fIM5xv1HF+Y+3ZijDR839WMulgxCcUY=