Tusk Logo

Tusk

Install & first launchExternal drives & SD cardsGoogle DriveS3-compatible storageCommon setupsDownloads & releases
← All releases

Reference

Tusk 0.2.0

Released May 23, 2026 · 224 MB

Download Tusk 0.2.0

Tusk v0.2.0 Release Notes

This release focuses on reliability, security, and stability. We've hardened the backup pipeline from end to end — tightening up file verification, improving how transfers handle edge cases, and closing a number of security issues found during a full audit. If you ran into unexpected behaviour in v0.1.x, there's a good chance it's been addressed here.

---

✨ Features

  • Manual recheck — you can now manually trigger a recheck of your files, with clearer status updates and notifications throughout the process

  • Failed verification UI — files that fail verification are now surfaced directly in the interface so you know exactly what needs attention

  • Smarter rename detection — when a folder is renamed, Tusk now confirms the contents match before treating it as the same folder; when multiple candidates share the same size and modification date, checksums are used to pick the right one

---

🔒 Security

  • Completed a full security audit with all high and medium priority findings resolved

  • Fixed a path traversal vulnerability — ../ sequences in file paths are now stripped and symlinks are resolved before any safety checks run

  • Added an allowlist so Tusk will only write to locations you've explicitly registered; any write attempt outside those roots is blocked

  • Fixed a Google Drive query injection issue

  • Replaced direct SQL string interpolation with safe parameterised queries throughout

  • File system operations now validate paths at every layer, including inside transfer worker processes

---

🐛 Fixes

  • Fixed a bug where a file would be marked unavailable before its deletion was actually confirmed

  • Fixed cloud provider verification failing incorrectly in certain conditions

  • Fixed an issue where files in a transferred_but_not_verified state after an interrupted ingestion were not being rechecked

  • Offloading now performs a full content comparison before overwriting a file, even when file sizes match

  • Fixed the "ignore inconsistencies" option behaving unexpectedly in edge cases

  • Fixed a duplicate file extension appearing in the verification service

  • Fixed JWT licence expiry check not evaluating correctly

  • Fixed search not returning expected results

  • Fixed encoding issues affecting certain file names

  • Fixed a memory pressure bug in transfers where a fast source writing to a slow destination could cause the app to use excessive memory; backpressure is now handled correctly for both local transfers and cloud uploads

  • Fixed stale job recovery to handle interrupted sessions more reliably

  • Various startup and build stability fixes

---

🛠 Improvements

  • Icons are now loaded from a CDN rather than bundled with the app, reducing the download size

  • Improved error reporting and added visible logging in production builds to make troubleshooting easier

  • Added database indexes to the files table for faster queries

  • Replaced the oversized app icon with a properly sized one

  • Database operations at startup are now handled more gracefully

  • Onboarding flow received several polish fixes