AeroFTP 4.2.5
This documentation accompanies AeroFTP 4.2.5. The publication date is recorded on the GitHub release. The application changelog is the complete release record; GitHub Releases provides the packages.
Sync and Filename Safety
AeroSync preserves Plan settings and Update mode across template export and import. Templates do not save scanned folder inventories or resume an in-progress scan. Canonical Unicode names can correspond without losing their actual stored paths. Literal Unix backslashes remain part of a name, while ambiguous download names are rejected instead of overwriting another file.
Incomplete scans keep a partial result. AeroCloud does not infer that a remote file is absent just because a scan failed to see it. Compatible folder downloads begin transferring discovered files while the rest of the tree is still scanned.
Proton Drive and Provider Operations
Proton Drive native mode reduces redundant metadata requests and overlaps blocks, files and folder scans. Its official CLI compatibility mode uses suitable native bulk groups for more transfers, including AeroSync and AeroCloud. The native and CLI modes have different paths and transfer behavior; see the guide before changing a profile's mode.
Filen Desktop's S3 preset waits for a fresh upload to become visible before a move or rename. OneDrive resolves shortcuts and shared folders across operations. WebDAV keeps real children whose names resemble the parent, and MEGAcmd profiles can resolve the path their local gateway actually serves.
Crypt connections open directly at the configured Remote Path. A landing outside a separate Overlays Path stays in plaintext until the encrypted folder is entered; a new connection clears the previous session's frontend vault IDs before unlocking.
Windows Portable and Desktop Opening
Windows portable builds keep logs in their portable data folder and preserve a dismissed isolation banner across startup and reboot. Preferences are reconciled after the credential vault becomes ready, and saving portable settings does not change an installed copy's startup entry.
Portable updates select the GUI executable correctly and retain a usable application path during replacement. Desktop Open with opens the selected file in AeroFile, with the appropriate image or text preview; files opened while the app starts are retained.
CLI, MCP and AeroAgent
The CLI reference, batch guide, MCP catalog and AeroAgent guide describe their respective command grammars, inventories and approvals. These are separate surfaces, even where they share a backend.
Hashsum can perform one checked full-download fallback when a server ignores ranges. MCP upload batches retain no-clobber and delay settings, and diagnostic and agent error messages redact complete Authorization values and quoted or escaped secret fields.
Benchmark and Cleanup
The benchmark includes measured latency, signal bars and comparisons based on the protocols that actually supplied comparable samples. Ctrl+C and timeouts stop owned work, and the report distinguishes successful cleanup from cleanup the provider cannot perform.
On Nextcloud and ownCloud, benchmark and CLI speed-test cleanup can purge exactly the trash item created by the test. Koofr selective trash purge and Filen trash integration remain follow-ups. See the benchmark reports for methodology and dated measurements.
Settings and Dependency Security
Confirmed application-settings writes remove the old plaintext WebView copy. Migration fills only an empty settings vault, and an unavailable or unreadable vault cannot be treated as empty for a partial settings write.
AeroVault 0.6.8 retains the patched zstd dependency and preserves the existing container formats. Its legacy vault writes use exclusive random temporary files, and replacements preserve existing regular-file Unix permission bits while new vaults remain private. The application resolves zstd 0.14.3 and zstd-safe 8.2.0, removing the older vulnerable dependency path.
When several AeroFTP users share a device, credentials stay with the user who owns them. A locked user is refused before any shared, cached or plaintext fallback, OAuth sign-ins are saved for the user who started them, the legacy credential owner no longer changes when administrators are demoted or removed, and OAuth tokens and Jottacloud refresh chains of other users stay in their own partition, including imports and exports. Filen share-link creation is disabled until a per-share encryption scheme exists; existing links can still be revoked. S3 virtual-hosted buckets can no longer move a signed request off the configured endpoint, the plain-HTTP check follows the final request URL, and oversized multipart copy plans are refused before allocation. Internxt in-memory downloads stage decrypted data in a private temporary directory that is always removed.
Evidence and Limits
The update covers all 47 interface locales. Raw backend or provider error text may still be English. Security documentation describes the current storage and trust boundaries; historical test reports keep their tested versions and dates and are not presented as new 4.2.5 measurements.