Squeeze

Anonymous downloads that pass raw asset IDs (files[]) will stop working until you mint a signed token in Twig. Update frontend templates before upgrading — see Upgrading to signed downloads.

Added

• Added access control for downloads: anonymous requests require a signed token; raw asset IDs are only allowed for logged-in users who can view each asset.
• Added allowedVolumes and defaultTokenDuration settings (CP and config/squeeze.php).
• Added signed download tokens via craft.squeeze.createToken() and craft.squeeze.getDownloadUrl() (accept asset IDs or Asset elements).

Changed

• Archive filenames are now sanitized before use.
• Security: the legacy anonymous files[]=<id> download URL no longer authorizes downloads on its own.

Changed

• Now requires Craft 5.0+.

The plugin’s package name has changed to verbb/squeeze. Squeeze will need be updated to 2.0 from a terminal, by running composer require verbb/squeeze && composer remove olivierbon/craft-squeeze.

Changed

• Migration to verbb/squeeze.
• Now requires Craft 4.0+.

• Fixed an issue where the temporary zip wasn't being deleted

• Added ability to trigger download via URL

• Initial release