Version v1.69.3

build: update github.com/ebitengine/purego to work around bug in go1.24.3
Before this we get this error on darwin/amd64 link: duplicated definition of symbol dlopen, from github.com/ebitengine/purego and github.com/ebitengine/purego See: https://github.com/golang/go/issues/73617
2026-01-06 10:33:34 +00:00 · 2025-05-21 21:08:44 +01:00 · 2025-05-21 16:02:19 +01:00 · 2025-05-13 11:53:42 +01:00 · 2025-05-01 16:41:55 +01:00
12 changed files with 68 additions and 20 deletions
--- a/MANUAL.html
+++ b/MANUAL.html
@@ -5,7 +5,7 @@
  <meta name="generator" content="pandoc" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
  <meta name="author" content="Nick Craig-Wood" />
-  <meta name="dcterms.date" content="2025-05-01" />
+  <meta name="dcterms.date" content="2025-05-21" />
  <title>rclone(1) User Manual</title>
  <style>
    code{white-space: pre-wrap;}
@@ -82,7 +82,7 @@
 <header id="title-block-header">
 <h1 class="title">rclone(1) User Manual</h1>
 <p class="author">Nick Craig-Wood</p>
-<p class="date">May 01, 2025</p>
+<p class="date">May 21, 2025</p>
 </header>
 <h1 id="name">NAME</h1>
 <p>rclone - manage files on cloud storage</p>
@@ -12292,7 +12292,7 @@ Showing nodes accounting for 1537.03kB, 100% of 1537.03kB total
      --tpslimit float                     Limit HTTP transactions per second to this
      --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
      --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default &quot;rclone/v1.69.2&quot;)</code></pre>
+      --user-agent string                  Set the user-agent to a specified string (default &quot;rclone/v1.69.3&quot;)</code></pre>
 <h2 id="performance">Performance</h2>
 <p>Flags helpful for increasing performance.</p>
 <pre><code>      --buffer-size SizeSuffix   In memory buffer size when reading files for each --transfer (default 16Mi)
@@ -38314,6 +38314,15 @@ $ tree /tmp/c
 <li>"error": return an error based on option value</li>
 </ul>
 <h1 id="changelog-1">Changelog</h1>
+<h2 id="v1.69.3---2025-05-21">v1.69.3 - 2025-05-21</h2>
+<p><a href="https://github.com/rclone/rclone/compare/v1.69.2...v1.69.3">See commits</a></p>
+<ul>
+<li>Bug Fixes
+<ul>
+<li>build: Reapply update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to fix CVE-2025-30204 (dependabot[bot])</li>
+<li>build: Update github.com/ebitengine/purego to work around bug in go1.24.3 (Nick Craig-Wood)</li>
+</ul></li>
+</ul>
 <h2 id="v1.69.2---2025-05-01">v1.69.2 - 2025-05-01</h2>
 <p><a href="https://github.com/rclone/rclone/compare/v1.69.1...v1.69.2">See commits</a></p>
 <ul>
--- a/MANUAL.md
+++ b/MANUAL.md
@@ -1,6 +1,6 @@
 % rclone(1) User Manual
 % Nick Craig-Wood
-% May 01, 2025
+% May 21, 2025

 # NAME

@@ -21104,7 +21104,7 @@ Flags for general networking and HTTP stuff.
      --tpslimit float                     Limit HTTP transactions per second to this
      --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
      --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.2")
+      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.3")
 ```


@@ -56658,6 +56658,14 @@ Options:

 # Changelog

+## v1.69.3 - 2025-05-21
+
+[See commits](https://github.com/rclone/rclone/compare/v1.69.2...v1.69.3)
+
+* Bug Fixes
+    * build: Reapply update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to fix CVE-2025-30204 (dependabot[bot])
+    * build: Update github.com/ebitengine/purego to work around bug in go1.24.3 (Nick Craig-Wood)
+
 ## v1.69.2 - 2025-05-01

 [See commits](https://github.com/rclone/rclone/compare/v1.69.1...v1.69.2)
--- a/MANUAL.txt
+++ b/MANUAL.txt
@@ -1,6 +1,6 @@
 rclone(1) User Manual
 Nick Craig-Wood
-May 01, 2025
+May 21, 2025

 NAME

@@ -20654,7 +20654,7 @@ Flags for general networking and HTTP stuff.
          --tpslimit float                     Limit HTTP transactions per second to this
          --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
          --use-cookies                        Enable session cookiejar
-          --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.2")
+          --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.3")

 Performance

@@ -56324,6 +56324,16 @@ Options:

 Changelog

+v1.69.3 - 2025-05-21
+
+See commits
+
+-   Bug Fixes
+    -   build: Reapply update github.com/golang-jwt/jwt/v5 from 5.2.1 to
+        5.2.2 to fix CVE-2025-30204 (dependabot[bot])
+    -   build: Update github.com/ebitengine/purego to work around bug in
+        go1.24.3 (Nick Craig-Wood)
+
 v1.69.2 - 2025-05-01

 See commits
--- a/2
+++ b/2
@@ -1 +1 @@
-v1.69.2
+v1.69.3
--- a/docs/content/changelog.md
+++ b/docs/content/changelog.md
@@ -5,6 +5,14 @@ description: "Rclone Changelog"

 # Changelog

+## v1.69.3 - 2025-05-21
+
+[See commits](https://github.com/rclone/rclone/compare/v1.69.2...v1.69.3)
+
+* Bug Fixes
+    * build: Reapply update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to fix CVE-2025-30204 (dependabot[bot])
+    * build: Update github.com/ebitengine/purego to work around bug in go1.24.3 (Nick Craig-Wood)
+
 ## v1.69.2 - 2025-05-01

 [See commits](https://github.com/rclone/rclone/compare/v1.69.1...v1.69.2)
--- a/docs/content/commands/rclone.md
+++ b/docs/content/commands/rclone.md
@@ -965,7 +965,7 @@ rclone [flags]
      --use-json-log                                        Use json log format
      --use-mmap                                            Use mmap allocator (see docs)
      --use-server-modtime                                  Use server modified time instead of object metadata
-      --user-agent string                                   Set the user-agent to a specified string (default "rclone/v1.69.2")
+      --user-agent string                                   Set the user-agent to a specified string (default "rclone/v1.69.3")
  -v, --verbose count                                       Print lots more stuff (repeat for more)
  -V, --version                                             Print the version number
      --webdav-auth-redirect                                Preserve authentication on redirect
--- a/docs/content/flags.md
+++ b/docs/content/flags.md
@@ -116,7 +116,7 @@ Flags for general networking and HTTP stuff.
      --tpslimit float                     Limit HTTP transactions per second to this
      --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
      --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.2")
+      --user-agent string                  Set the user-agent to a specified string (default "rclone/v1.69.3")
 ```


--- a/docs/layouts/partials/version.html
+++ b/docs/layouts/partials/version.html
@@ -1 +1 @@
-v1.69.2
+v1.69.3
--- a/fs/versiontag.go
+++ b/fs/versiontag.go
@@ -1,4 +1,4 @@
 package fs

 // VersionTag of rclone
-var VersionTag = "v1.69.2"
+var VersionTag = "v1.69.3"
--- a/go.mod
+++ b/go.mod
@@ -134,7 +134,7 @@ require (
 	github.com/cronokirby/saferith v0.33.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
-	github.com/ebitengine/purego v0.8.1 // indirect
+	github.com/ebitengine/purego v0.8.3 // indirect
 	github.com/emersion/go-message v0.18.0 // indirect
 	github.com/emersion/go-textwrapper v0.0.0-20200911093747-65d896831594 // indirect
 	github.com/emersion/go-vcard v0.0.0-20230815062825-8fda7d206ec9 // indirect
@@ -150,7 +150,7 @@ require (
 	github.com/goccy/go-json v0.10.3 // indirect
 	github.com/gofrs/flock v0.8.1 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
+	github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
 	github.com/google/s2a-go v0.1.8 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
 	github.com/googleapis/gax-go/v2 v2.14.0 // indirect
--- a/go.sum
+++ b/go.sum
@@ -213,8 +213,8 @@ github.com/dsnet/try v0.0.3/go.mod h1:WBM8tRpUmnXXhY1U6/S8dt6UWdHTQ7y8A5YSkRCkq4
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
 github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
-github.com/ebitengine/purego v0.8.1 h1:sdRKd6plj7KYW33EH5As6YKfe8m9zbN9JMrOjNVF/BE=
-github.com/ebitengine/purego v0.8.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ=
+github.com/ebitengine/purego v0.8.3 h1:K+0AjQp63JEZTEMZiwsI9g0+hAMNohwUOtY0RPGexmc=
+github.com/ebitengine/purego v0.8.3/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ=
 github.com/emersion/go-message v0.18.0 h1:7LxAXHRpSeoO/Wom3ZApVZYG7c3d17yCScYce8WiXA8=
 github.com/emersion/go-message v0.18.0/go.mod h1:Zi69ACvzaoV/MBnrxfVBPV3xWEuCmC2nEN39oJF4B8A=
 github.com/emersion/go-textwrapper v0.0.0-20200911093747-65d896831594 h1:IbFBtwoTQyw0fIM5xv1HF+Y+3ZijDR839WMulgxCcUY=
@@ -289,8 +289,8 @@ github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
 github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
-github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
-github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
--- a/rclone.1
+++ b/rclone.1
@@ -1,7 +1,7 @@
 .\"t
 .\" Automatically generated by Pandoc 2.9.2.1
 .\"
-.TH "rclone" "1" "May 01, 2025" "User Manual" ""
+.TH "rclone" "1" "May 21, 2025" "User Manual" ""
 .hy
 .SH NAME
 .PP
@@ -28531,7 +28531,7 @@ Flags for general networking and HTTP stuff.
      --tpslimit float                     Limit HTTP transactions per second to this
      --tpslimit-burst int                 Max burst of transactions for --tpslimit (default 1)
      --use-cookies                        Enable session cookiejar
-      --user-agent string                  Set the user-agent to a specified string (default \[dq]rclone/v1.69.2\[dq])
+      --user-agent string                  Set the user-agent to a specified string (default \[dq]rclone/v1.69.3\[dq])
 \f[R]
 .fi
 .SS Performance
@@ -75048,6 +75048,19 @@ Options:
 .IP \[bu] 2
 \[dq]error\[dq]: return an error based on option value
 .SH Changelog
+.SS v1.69.3 - 2025-05-21
+.PP
+See commits (https://github.com/rclone/rclone/compare/v1.69.2...v1.69.3)
+.IP \[bu] 2
+Bug Fixes
+.RS 2
+.IP \[bu] 2
+build: Reapply update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2
+to fix CVE-2025-30204 (dependabot[bot])
+.IP \[bu] 2
+build: Update github.com/ebitengine/purego to work around bug in
+go1.24.3 (Nick Craig-Wood)
+.RE
 .SS v1.69.2 - 2025-05-01
 .PP
 See commits (https://github.com/rclone/rclone/compare/v1.69.1...v1.69.2)
Author	SHA1	Message	Date
Nick Craig-Wood	80727496fc	Version v1.69.3	2025-05-21 21:08:44 +01:00
Nick Craig-Wood	a5bd052fb4	build: update github.com/ebitengine/purego to work around bug in go1.24.3 Before this we get this error on darwin/amd64 link: duplicated definition of symbol dlopen, from github.com/ebitengine/purego and github.com/ebitengine/purego See: https://github.com/golang/go/issues/73617	2025-05-21 16:02:19 +01:00
dependabot[bot]	538edfeee0	build: reapply update github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 to fix CVE-2025-30204 This commit got accidentally reverted in `ef975129a8` build: bump golang.org/x/net from 0.36.0 to 0.38.0 Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2. - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2) See: https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp See: https://www.cve.org/CVERecord?id=CVE-2025-30204 Signed-off-by: dependabot[bot] <support@github.com>	2025-05-13 11:53:42 +01:00
Nick Craig-Wood	20253fb4df	Start v1.69.3-DEV development	2025-05-01 16:41:55 +01:00