chore(deps): update copyparty/ac docker tag to v1.20.1

[sogladev]

This PR contains the following updates:

Package	Update	Change
copyparty/ac	minor	1.19.22 → 1.20.1

---

Release Notes

9001/copyparty (copyparty/ac)

v1.20.1: sftp fixes

Compare Source

• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)

recent important news

• v1.19.8 (2025-09-07) fixed CVE-2025-58753 (a missing permission-check inside single-file shares)
• v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled

🧪 new features

• #​1174 add Japanese translation (thx @​tkymmm!) b918b59
• #​1164 rightclick-menu now works in the gridview too (thx @​Foox-dev!) feabbf3
• #​1176 IP to bind can be specified per protocol 87a5c22

🩹 bugfixes

• various SFTP fixes (i blame the single tschunk on day 3):
  • #​1170 be more lenient regarding stat permissions 9030828
  • #​1170 deletes could return EPERM when ENOENT was more appropriate 8c9e101
  • #​1170 files would be created with an extremely restrictive chmod 2f4a30b
    • certified octal moment
  • write-only folders could return ENOENT 6c41bac
• #​1177 disk-usage quotas became incompatible with shares in v1.20.0 038af50
• appending to existing files with ?apnd was possible in volumes with non-reflink dedup, where it could propagate to deduped copies of the file 738a419
  • (was only possible for users with write+delete perms, so at least it couldn't be used for nefarious purposes)
• rightclick-menu: "copy link" would strip filekeys 3a16d34

🔧 other changes

• copyparty.exe: updated pillow to 12.1.0 a9ae6d5

🌠 fun facts

• tschunk is the sound a hacker makes as they faceplant onto the table after having one too many
  • also see the funfacts in the previous release for more CCC hijinks :p

---

💾 what to download?

download link	is it good?	description
copyparty-sfx.py	✅ the best 👍	runs anywhere! only needs python
copyparty-en.py	✅ also good	same but english-only, no i18n
a docker image	it's ok	good if you prefer docker 🐋
copyparty.exe	⚠️ acceptable	for win8 or later; built-in thumbnailer
u2c.exe	⚠️ acceptable	CLI uploader as a win7+ exe (video)
copyparty.pyz	⚠️ acceptable	similar to the regular sfx, mostly worse
copyparty-en.pyz	⚠️ acceptable	english-only, no smb-server
copyparty32.exe	⛔️ dangerous	for win7 -- never expose to the internet!
cpp-winpe64.exe	⛔️ dangerous	runs on 64bit WinPE, otherwise useless
bootable usb	┐(ﾟ∀ﾟ)┌	a surprisingly useful joke (x86_64)

• except for u2c.exe, all of the options above are mostly equivalent
• the zip and tar.gz files below are just source code
• python packages are available at PyPI

v1.20.0: sftp is fine too

Compare Source

• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)

recent important news

• v1.19.8 (2025-09-07) fixed CVE-2025-58753 (a missing permission-check inside single-file shares)
• v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled

🧪 new features

• sftp server 4714c2f ec7ea30
  • included in docker-images im, iv, ac, dj
  • not using docker? install the optional dependency paramiko
• #​1135 right-click menu (thx @​stackxp and @​Scotsguy!) 82c4960 05a4472
• PUT can now append to existing files 63d8e5a
  • new option apnd-who to configure who is allowed to do that
• #​1128 added option to skip uploading a file if the filename is already taken on the server (thx @​Scotsguy!) fa32e15
• #​1127 descript.ion now also works for folders 2c26aec
• in file listings, up_by and up_ip (uploader info) can now be displayed for non-admin users by adding them to the mte option 7bfd370
• #​1120 display the disk-space quota instead of the underlying HDD size (thx @​rabid-dev!) 511dc01 e0845b2
• option to skip dotfiles/dotfolders when using download-as-zip 7d7a151
• #​1124 button to skip files with a filename collision when copying/moving files 85639ad
• #​1151 u2c (commandline uploader): option to use basic-auth instead of the PW header (thx @​Le0Developer!) 120fdfb
• the name of the pw url-param and http-header can be changed f81d80b
  • mainly to force basic-auth, but perhaps also for other purposes
  • changing these will break support for many clients, so you probably want to keep the default

🩹 bugfixes

• image-viewer:
  • images now scale properly when rotated while the zoom feature is enabled c0e167f
  • the current image rotation will now be applied to the next image as well 485c60c c82a3cb
• groups announced by an IdP will now also apply for native (copyparty-config) users f08cb25
• windows: download-as-zip would flatten everything to a single folder 2d1d295
• #​1157 dirkeys did not work in grid-view d1ddcb1
• #​1123 the ui-notree option to simplify the UI would simplify a bit too much 4c73704
• don't add the trailing slash to a volume in the controlpanel when the volume is a file 80a3749
  • the link couldn't be clicked on Windows CE 4.20 using Internet Explorer 4.01

🔧 other changes

• #​1158 updated german translation (thx @​Scotsguy!) 3bf80c8
• the dotfiles button now also toggles showing unlisted files e55e5a4
• /?h&ls (the api to list volumes) now includes the user's permissions for each volume 1f6e811
• #​1142 new option dav-port to open a dedicated port for webdav clients 4642d32
  • workaround for certain clients which pretend to be webbrowsers
• #​1147 workaround for a buggy browser-extension 8551472
• detect (and panic) when a webbrowser has failed to load one of the javascript files af3f777
  • replaces the confusing errormessage resulting from half of the code missing

🌠 fun facts

• it turns out that copyparty runs just fine on SGI IRIX! 39c3ccc
  • there's a photo of the server and a screenshot as proof 😁
  • the feature comparison has been updated accordingly
• this release was mostly coded at 39c3 (see photo above) and the release was made at revspace

---

⚠️ not the latest version!

v1.19.23: bad apple x2

Compare Source

• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)

recent important news

• v1.19.8 (2025-09-07) fixed CVE-2025-58753 (a missing permission-check inside single-file shares)
• v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled

🧪 new features

• #​1080 new translation: Vietnamese (thx @​thatfrozenfrog and @​khoidauminh!) b60eb3f d4a9787
• #​1110 add option xf-proto-fb to support reverseproxies which do not provide an x-forwarded-proto header 9c64788
  • and improve the rproxy config guidance message in the serverlog c8f3b4e
  • and show a warning in the controlpanel if misconfiguration is detected c8f3b4e
• #​1109 add option --ipar, reverseproxy-aware alternative to --ipa 3368421
  • its purpose is rejecting connections from unexpected/unwanted IPs/subnets
• option idp-chsub can be used to replace spaces in IdP usernames/groupnames 5e1d9a5
• #​1029 indicate password max-length in ui 8d46cf1
  • thx to @​grantbacon for the initial take!

🩹 bugfixes

• #​1111 apple gave us coal for xmas this year 0b6d2d2
  • workaround for a new bug in safari (iOS and Macos) where it would randomly show a login-popup
• #​1113 the @acct group was unavailable in groupless IdP setups b6c2ec1

🌠 fun facts

• speaking of current events, @​stackxp made copyparty bad-apple-certified a little while back 😁
  • the plugin is available here

---

⚠️ not the latest version!

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.