Merge branch 'develop'

Author: tobihagemann

.github/workflows/build.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Verify lockfile has no non-registry sources
         run: scripts/check-lockfile.sh
       - name: Setup pnpm
-        uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Setup Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:

.github/workflows/deploy.yml

@@ -59,7 +59,7 @@ jobs:
       - name: Add robots.txt for staging
         run: 'echo -e "User-agent: *\nDisallow: /" > public/robots.txt'
       - name: Deploy to Staging Repository
-        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
+        uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
         with:
           personal_token: ${{ secrets.CRYPTOBOT_DEPLOY_STAGING_DOCS }}
           external_repository: cryptomator/docs-staging

.github/workflows/update-windows-info.yml

@@ -91,7 +91,7 @@ jobs:
           GH_TOKEN: ${{ secrets.CRYPTOBOT_PR_TOKEN }}
       - name: Slack Notification
         if: steps.commit-and-push.outputs.changed == 'true'
-        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
+        uses: rtCamp/action-slack-notify@33ca3be66c6f378fe1610fd1d5258632dbed5e58 # v2.4.0
         env:
           SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_CRYPTOMATOR_DESKTOP }}
           SLACK_USERNAME: 'Cryptobot'

docs/desktop/vault-management.mdx

@@ -61,4 +61,8 @@ The mount options depend on the selected [volume type](volume-type.mdx).
 
 <Image src="/img/desktop/vault-options-password.png" alt="Vault options regarding the password" width="512" height="448" />
 
+:::note
+If the `masterkey` file is not present in the vault directory, the functions in the `Password` tab are disabled. To use these functions again, place the `masterkey` file back into the vault directory or restore it using the vault recovery function.
+:::
+
 Take a look at the [Volume Type](volume-type.mdx) and [Password And Recovery Key](password-and-recovery-key.mdx) sections to understand how vault mounting and passwords work.

docs/desktop/volume-type.mdx

@@ -69,11 +69,18 @@ Vaults mounted to a drive letter are only accessible to the current user. If you
 **Requirements:** Windows
 
 WebDAV on Windows uses the [`net use`](https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/gg651155(v=ws.11)) command to mount/unmount the virtual drive.
-By default, unlocked vaults are mounted as a network drive and assigned a random drive letter.
-Using WebDAV on Windows has the following drawbacks:
+The unlocked vaults is displayed as a network drive and assigned to a random drive letter.
+
+:::info
+
+WebDAV on Windows uses the native Windows WebDAV-Client. We recommend using [WinFsp](#winfsp) due to its restrictions:
+
+* **Maximum file size of 4 GB:** Files bigger than 4GB cannot be copied into or out of the vault.
+* **Maximum path length of 260 characters:** Files with an absolute path longer than 260 characters cannot be accessed at all
+* **Wrong reported total and free space:** The total space and free space of the vault are always reported to be the same as the total space and free space of the C: drive, even if the vault is stored on a different drive
+
+:::
 
-* The size of transferred files is restricted to a maximum of 4 GB.
-* The total space and free space of the network drive are shown to be the same as the total space and free space of the C: drive, which is technically incorrect.
 
 ## macOS {/* #macos */}
 

docs/misc/glossary.mdx

@@ -0,0 +1,33 @@
+---
+id: glossary
+title: Glossary
+sidebar_position: 5
+---
+
+# Glossary
+
+## Terms {/* #terms */}
+
+### Account Key {/* #account-key */}
+
+A sequence of digits and characters that looks like this: `535cf7e3-f305-4d97-9309-dcce813183cf`. It is used to authorize new devices to access your Cryptomator Hub account. It can be looked up in the profile of existing devices. If you lose it, you can reset your account, however doing so will revoke access from all vaults.
+
+### Recovery Key {/* #recovery-key */}
+
+A human-readable representation of a vault's master key that is supposed to be printed out and archived for the case that you ever forget or lose access to your regular passphrase.
+
+## Localization of Terms {/* #localization-of-terms */}
+
+:::warning
+Some of the terms mentioned above are carefully chosen to be distinguishable from another. This is particularly important for key material, as we deal with many different kinds of keys. **Mixing these up can cause confusion or even bear the risk of information exposure.**
+:::
+
+Translating technical terms shall be considered with great care. Here are our official recommendations to translators:
+
+1. If using English terms in the realm of software is common practice in your native language, *do not translate* these terms.
+2. Otherwise, if you feel uncertain about a translation, then better put the English term in parenthesis (if there is enough room).
+3. Only if you are absolutely confident, that a translation precisely reflects the meaning as defined in this glossary, translate it.
+
+:::note
+We may add further terms in the future. If, for example, you deem it acceptable to translate *account* to something that has the same meaning as *user*, keep in mind that a translation of *account key* may eventually collide with *user key*.
+:::

package.json

@@ -17,27 +17,37 @@
     "typecheck": "tsc"
   },
   "dependencies": {
-    "@docusaurus/core": "^3.10.1",
-    "@docusaurus/faster": "^3.10.1",
-    "@docusaurus/plugin-client-redirects": "^3.10.1",
-    "@docusaurus/preset-classic": "^3.10.1",
-    "@easyops-cn/docusaurus-search-local": "^0.55.2",
+    "@docusaurus/core": "^3.10.2",
+    "@docusaurus/faster": "^3.10.2",
+    "@docusaurus/plugin-client-redirects": "^3.10.2",
+    "@docusaurus/preset-classic": "^3.10.2",
+    "@easyops-cn/docusaurus-search-local": "^0.55.3",
     "@mdx-js/react": "^3.1.1",
     "@signalwire/docusaurus-plugin-llms-txt": "^1.2.2",
     "clsx": "^2.1.1",
     "prism-react-renderer": "^2.4.1",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7"
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8"
   },
   "devDependencies": {
-    "@docusaurus/module-type-aliases": "^3.10.1",
-    "@docusaurus/tsconfig": "^3.10.1",
-    "@docusaurus/types": "^3.10.1",
-    "typescript": "~5.9.3"
+    "@docusaurus/module-type-aliases": "^3.10.2",
+    "@docusaurus/tsconfig": "^3.10.2",
+    "@docusaurus/types": "^3.10.2",
+    "typescript": "~6.0.3"
   },
-  "overrides": {
-    "copy-webpack-plugin": "14.0.0",
-    "css-minimizer-webpack-plugin": "8.0.0"
+  "pnpm": {
+    "overrides": {
+      "copy-webpack-plugin": "14.0.0",
+      "css-minimizer-webpack-plugin": "8.0.0",
+      "body-parser": "^1.20.6",
+      "brace-expansion": "^1.1.18",
+      "fast-uri": "^3.1.5",
+      "postcss": "^8.5.23",
+      "serialize-javascript": "^7.0.5",
+      "svgo": "^3.3.4",
+      "undici": "^7.29.0",
+      "uuid": "^11.1.1"
+    }
   },
   "browserslist": {
     "production": [