No description
Find a file
dependabot[bot] 23186da45d
build(deps): bump aws/aws-sdk-php from 3.288.1 to 3.368.0 in /examples/aws-php (#6112)
Bumps [aws/aws-sdk-php](https://github.com/aws/aws-sdk-php) from 3.288.1
to 3.368.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-php/releases">aws/aws-sdk-php's
releases</a>.</em></p>
<blockquote>
<h2>Version 3.368.0</h2>
<ul>
<li><code>Aws\S3</code> - A new <code>S3EncryptionClient</code>
implementation and a new <code>KmsMaterialProvider</code>
implementation. <code>S3EncryptionClientV3</code> now supports writing
and reading objects with Key Commitment.
<code>KmsMaterialProviderV3</code> now supports verifying supplied
encryption context on <code>decryptCek</code> calls.</li>
<li><code>Aws\TimestreamInfluxDB</code> - This release adds support for
rebooting InfluxDB DbInstances and DbClusters</li>
<li><code>Aws\IoT</code> - Add support for dynamic payloads in IoT
Device Management Commands</li>
</ul>
<h2>Version 3.367.3</h2>
<ul>
<li><code>Aws\MediaTailor</code> - Added support for Ad Decision Server
Configuration enabling HTTP POST requests with custom bodies, headers,
GZIP compression, and dynamic variables. No changes required for
existing GET request configurations.</li>
<li><code>Aws\Connect</code> - Amazon Connect now supports outbound
WhatsApp contacts via the Send message block or StartOutboundChatContact
API. Send proactive messages for surveys, reminders, and updates. Offer
customers the option to switch to WhatsApp while in queue, eliminating
hold time.</li>
<li><code>Aws\BedrockAgentCoreControl</code> - This release updates
broken links for AgentCore Policy APIs in the AWS CLI and SDK
resources.</li>
<li><code>Aws\Glacier</code> - Documentation updates for Amazon
Glacier's maintenance mode</li>
<li><code>Aws\Route53Resolver</code> - Adds support for enabling
detailed metrics on Route 53 Resolver endpoints using
RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the
CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing
enhanced visibility into Resolver endpoint and target name server
performance.</li>
<li><code>Aws\CloudWatchLogs</code> - This release allows you to import
your historical CloudTrail Lake data into CloudWatch with a few steps,
enabling you to easily consolidate operational, security, and compliance
data in one place.</li>
<li><code>Aws\EC2</code> - EC2 Capacity Manager now supports
SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics
for both vCPU and instance units.</li>
<li><code>Aws\S3</code> - This release adds support for the new optional
field 'LifecycleExpirationDate' in S3 Inventory configurations.</li>
<li><code>Aws\Health</code> - Updating Health API endpoint generation
for dualstack only regions</li>
<li><code>Aws\EntityResolution</code> - Support Customer Profiles
Integration for AWS Entity Resolution</li>
<li><code>Aws\ServiceQuotas</code> - Add support for SQ Dashboard
Api</li>
</ul>
<h2>Version 3.367.2</h2>
<ul>
<li><code>Aws\WorkSpacesWeb</code> - Adds support for portal branding
customization, enabling administrators to personalize end-user portals
with custom assets.</li>
<li><code>Aws\Connect</code> - Amazon Connect now offers automated
post-chat surveys triggered when customers end conversations. This
captures timely feedback while experience is fresh, using either a
no-code form builder or Amazon Lex-powered interactive surveys.</li>
<li><code>Aws\BCMRecommendedActions</code> - Added new freetier action
types to RecommendedAction.type.</li>
<li><code>Aws\DataSync</code> - Adds Enhanced mode support for NFS and
SMB locations. SMB credentials are now managed via Secrets Manager, and
may be encrypted with service or customer managed keys. Increases
AgentArns maximum count to 8 (max 4 per TaskMode). Adds folder counters
to DescribeTaskExecution for Enhanced mode tasks.</li>
</ul>
<h2>Version 3.367.1</h2>
<ul>
<li><code>Aws\SESv2</code> - Update GetEmailIdentity and
CreateEmailIdentity response to include SigningHostedZone in
DkimAttributes. Updated PutEmailIdentityDkimSigningAttributes Response
to include SigningHostedZone.</li>
<li><code>Aws\Lambda</code> - Add Dotnet 10 (dotnet10) support to AWS
Lambda.</li>
<li><code>Aws\QuickSight</code> - This release adds new
GetIdentityContext API, Dashboard customization options for tables and
pivot tables, Visual styling options- borders and decals, map
GeocodingPreferences, KeyPairCredentials for DataSourceCredentials.
Snapshot APIs now support registered users. Parameters limit increased
to 400</li>
<li><code>Aws\Organizations</code> - Add support for policy operations
on the NETWORK SECURITY DIRECTOR POLICY policy type.</li>
<li><code>Aws\SecretsManager</code> - Add SortBy parameter to
ListSecrets</li>
</ul>
<h2>Version 3.367.0</h2>
<ul>
<li><code>Aws\S3</code> - A new S3 Transfer Manager implementation with
multipart download capabilities. It allows better ways to configure each
operation. Includes Progress Tracking, Transfer Event Listeners, and
Automatic Multipart Uploads/Downloads.</li>
<li><code>Aws\signer</code> - Adds support for Signer
GetRevocationStatus with updated endpoints</li>
<li><code>Aws\Odb</code> - The following APIs now return
CloudExadataInfrastructureArn and OdbNetworkArn fields for improved
resource identification and AWS service integration - GetCloudVmCluster,
ListCloudVmClusters, GetCloudAutonomousVmCluster, and
ListCloudAutonomousVmClusters.</li>
<li><code>Aws\BillingConductor</code> - Launch itemized custom line item
and service line item filter</li>
<li><code>Aws\CloudWatch</code> - This release introduces two additional
protocols AWS JSON 1.1 and Smithy RPC v2 CBOR, replacing the currently
utilized one, AWSQuery. AWS SDKs will prioritize the protocol that is
the most performant for each language.</li>
<li><code>Aws\PartnerCentralSelling</code> - Adds support for the new
Project.AwsPartition field on Opportunity and AWS Opportunity Summary.
Use this field to specify the AWS partition where the opportunity will
be deployed.</li>
<li><code>Aws\OpenSearchService</code> - The CreateApplication API now
supports an optional kms key arn parameter to allow customers to specify
a CMK for application encryption.</li>
<li><code>Aws\Bedrock</code> - Automated Reasoning checks in Amazon
Bedrock Guardrails is capable of generating policy scenarios to validate
policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API
now adds POLICY SCENARIO asset type, allowing customers to retrieve
scenarios generated by the build workflow.</li>
</ul>
<h2>Version 3.366.4</h2>
<ul>
<li><code>Aws\IVSRealTime</code> - Token Exchange introduces seamless
token exchange capabilities for IVS RTX, enabling customers to upgrade
or downgrade token capabilities and update token attributes within the
IVS client SDK without forcing clients to disconnect and reconnect.</li>
<li><code>Aws\Account</code> - This release adds a new API
(GetGovCloudAccountInformation) used to retrieve information about a
linked GovCloud account from the standard AWS partition.</li>
<li><code>Aws\Route53</code> - Amazon Route 53 now supports the EU
(Germany) Region (eusc-de-east-1) for latency records, geoproximity
records, and private DNS for Amazon VPCs in that region</li>
<li><code>Aws\AppSync</code> - Update Event API to require EventConfig
parameter in creation and update requests.</li>
<li><code>Aws\GuardDuty</code> - Adding support for Ec2LaunchTemplate
Version field</li>
<li><code>Aws\mgn</code> - Added parameters encryption, IPv4/IPv6
protocol configuration, and enhanced tagging support for replication
operations.</li>
</ul>
<h2>Version 3.366.3</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c1189f8e4b"><code>c1189f8</code></a>
3.368.0 release</li>
<li><a
href="3ab046237f"><code>3ab0462</code></a>
Update models for release</li>
<li><a
href="134cae8597"><code>134cae8</code></a>
chore: revert behat tag (<a
href="https://redirect.github.com/aws/aws-sdk-php/issues/3230">#3230</a>)</li>
<li><a
href="6827cac703"><code>6827cac</code></a>
feat: Add S3EncryptionClientV3 (<a
href="https://redirect.github.com/aws/aws-sdk-php/issues/3229">#3229</a>)</li>
<li><a
href="d8e6e0691a"><code>d8e6e06</code></a>
3.367.3 release</li>
<li><a
href="aa9302db1a"><code>aa9302d</code></a>
Update models for release</li>
<li><a
href="3dc26d6f26"><code>3dc26d6</code></a>
3.367.2 release</li>
<li><a
href="e073f79b89"><code>e073f79</code></a>
Update models for release</li>
<li><a
href="4155279437"><code>4155279</code></a>
3.367.1 release</li>
<li><a
href="73beef8d87"><code>73beef8</code></a>
Update models for release</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-php/compare/3.288.1...3.368.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aws/aws-sdk-php&package-manager=composer&previous-version=3.288.1&new-version=3.368.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/transloadit/uppy/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-22 09:24:41 +01:00
.changeset [ci] release (#6096) 2025-12-09 10:01:30 +01:00
.cursor/rules Headless components (#5727) 2025-05-22 09:59:43 +02:00
.github build(deps): bump actions/cache from 4 to 5 (#6108) 2025-12-15 10:24:10 +01:00
.vscode Migrate from Eslint/Prettier/Stylelint to Biome (#5794) 2025-07-01 14:55:41 +02:00
.yarn/patches Improve yarn changesets patch 2025-07-31 16:56:58 +02:00
assets Delete old, unused files (#5788) 2025-06-23 21:10:29 +02:00
examples build(deps): bump aws/aws-sdk-php from 3.288.1 to 3.368.0 in /examples/aws-php (#6112) 2025-12-22 09:24:41 +01:00
output refactor: make companion output file point to root directory 2018-07-22 18:53:57 +01:00
packages [ci] release (#6096) 2025-12-09 10:01:30 +01:00
private Introduce @uppy/image-generator (#6056) 2025-12-03 11:59:52 +01:00
scripts Update versions in readme's after release (#5883) 2025-08-07 09:31:15 +02:00
.browserslistrc Remove IE polyfills and special casing (#2947) 2021-06-28 11:34:51 +02:00
.dockerignore run type checks also for companion and add files to docker (#4688) 2023-09-23 12:56:32 +08:00
.editorconfig Add tests and eslint 2015-11-17 12:26:49 -05:00
.env.example Google Picker (#5443) 2024-12-02 18:34:50 +08:00
.gitignore Migrate from Cypress to Vitest Browser Mode (#5828) 2025-07-28 11:27:37 +02:00
.yarnrc.yml update yarnrc 2025-08-21 14:39:08 +05:30
biome.json Run biome check on main (#5896) 2025-08-11 10:06:21 +02:00
BUNDLE-README.md [ci] release (#6096) 2025-12-09 10:01:30 +01:00
CHANGELOG.md Release: uppy@4.18.0 (#5796) 2025-06-30 13:50:55 +00:00
CLAUDE.md Add CLAUDE.md 2025-07-29 10:39:54 +02:00
Dockerfile Fix Companion build output and Dockerfile (#5917) 2025-08-21 18:25:10 +02:00
LICENSE Update LICENSE 2019-04-23 22:21:00 +02:00
package.json improve test scripts (#6016) 2025-10-17 22:07:01 +08:00
README.md [ci] release (#6096) 2025-12-09 10:01:30 +01:00
SECURITY.md meta: enable prettier for markdown (#5133) 2024-05-02 11:35:55 +02:00
tsconfig.shared.json From Babel to TS (#5792) 2025-06-30 16:12:26 +02:00
turbo.json Introduce @uppy/image-generator (#6056) 2025-12-03 11:59:52 +01:00
yarn.lock build(deps): bump next from 15.5.7 to 15.5.9 (#6104) 2025-12-12 09:38:32 +01:00

Uppy uppy on npm

Uppy logo: a smiling puppy above a pink upwards arrow

Uppy is a sleek, modular JavaScript file uploader that integrates seamlessly with any application. Its fast, has a comprehensible API and lets you worry about more important problems than building a file uploader.

  • Fetch files from local disk, remote URLs, Google Drive, Dropbox, Box, Instagram or snap and record selfies with a camera
  • Preview and edit metadata with a nice interface
  • Upload to the final destination, optionally process/encode

Read the docs | Try Uppy

Developed by Transloadit

Uppy is being developed by the folks at Transloadit, a versatile API to handle any file in your app.

TestsCI status for Uppy testsCI status for Companion tests
DeploysCI status for CDN deploymentCI status for Companion deploymentCI status for website deployment

Example

Code used in the above example:

import Uppy from '@uppy/core'
import Dashboard from '@uppy/dashboard'
import RemoteSources from '@uppy/remote-sources'
import ImageEditor from '@uppy/image-editor'
import Webcam from '@uppy/webcam'
import Tus from '@uppy/tus'

const uppy = new Uppy()
  .use(Dashboard, { trigger: '#select-files' })
  .use(RemoteSources, { companionUrl: 'https://companion.uppy.io' })
  .use(Webcam)
  .use(ImageEditor)
  .use(Tus, { endpoint: 'https://tusd.tusdemo.net/files/' })
  .on('complete', (result) => {
    console.log('Upload result:', result)
  })

Try it online or read the docs for more details on how to use Uppy and its plugins.

Integrations

Uppy has first-class support for plain JS/HTML, React, Svelte, Vue, and Angular.

For the supported frameworks (except Angular) Uppy offers three ways to build user interfaces:

  1. Pre-composed, plug-and-play components. Mainly <Dashboard />. The downside is that you cant customize the UI.
  2. Headless components. Smaller components, easier to override the styles or compose them together with your own components.
  3. Hooks. Attach our logic to your own components, no restrictions, create a tailor-made UI.

Features

  • Lightweight, modular plugin-based architecture, light on dependencies
  • Resumable file uploads via the open tus standard, so large uploads survive network hiccups
  • Supports picking files from: Webcam, Dropbox, Box, Google Drive, Instagram, bypassing the users device where possible, syncing between servers directly via @uppy/companion
  • Works great with file encoding and processing backends, such as Transloadit, works great without (all you need is to roll your own Apache/Nginx/Node/FFmpeg/etc backend)
  • Sleek user interface
  • Optional file recovery (after a browser crash) with Golden Retriever
  • Speaks several languages (i18n) 🌍
  • Built with accessibility in mind
  • Free for the world, forever (as in beer 🍺, pizza 🍕, and liberty 🗽)
  • Cute as a puppy, also accepts cat pictures 🐶

Installation

npm install @uppy/core @uppy/dashboard @uppy/tus

Add CSS uppy.min.css, either to your HTML pages <head> or include in JS, if your bundler of choice supports it.

Alternatively, you can also use a pre-built bundle from Transloadits CDN: Smart CDN. In that case Uppy will attach itself to the global window.Uppy object.

⚠️ The bundle consists of most Uppy plugins, so this method is not recommended for production, as your users will have to download all plugins when you are likely using only a few.

<!-- 1. Add CSS to `<head>` -->
<link
  href="https://releases.transloadit.com/uppy/v5.2.1/uppy.min.css"
  rel="stylesheet"
/>

<!-- 2. Initialize -->
<div id="files-drag-drop"></div>
<script type="module">
  import {
    Uppy,
    Dashboard,
    Tus,
  } from 'https://releases.transloadit.com/uppy/v5.2.1/uppy.min.mjs'

  const uppy = new Uppy()
  uppy.use(Dashboard, { target: '#files-drag-drop' })
  uppy.use(Tus, { endpoint: 'https://tusd.tusdemo.net/files/' })
</script>

Documentation

  • Uppy — full list of options, methods and events
  • Companion — setting up and running a Companion instance, which adds support for Instagram, Dropbox, Box, Google Drive and remote URLs
  • React — components to integrate Uppy UI plugins with React apps
  • Architecture & Writing a Plugin — how to write a plugin for Uppy

Plugins

UI Elements

  • Dashboard — universal UI with previews, progress bars, metadata editor and all the cool stuff. Required for most UI plugins like Webcam and Instagram
  • Headless components (react, svelte, vue)

Sources

  • Drag & Drop — plain drag and drop area
  • File Input — even plainer “select files” button
  • Webcam — snap and record those selfies 📷
  • Google Drive — import files from Google Drive
  • Dropbox — import files from Dropbox
  • Box — import files from Box
  • Instagram — import images and videos from Instagram
  • Facebook — import images and videos from Facebook
  • OneDrive — import files from Microsoft OneDrive
  • Import From URL — import direct URLs from anywhere on the web

The ⓒ mark means that @uppy/companion, a server-side component, is needed for a plugin to work.

Destinations

  • Tus — resumable uploads via the open tus standard
  • XHR Upload — regular uploads for any backend out there (like Apache, Nginx)
  • AWS S3 — plain upload to AWS S3 or compatible services

File Processing

Miscellaneous

  • Golden Retriever — restores files after a browser crash, like its nothing
  • Thumbnail Generator — generates image previews (included by default with Dashboard)
  • Form — collects metadata from <form> right before an Uppy upload, then optionally appends results back to the form

Browser Support

We aim to support recent versions of Chrome, Firefox, and Safari.

FAQ

Why not use <input type="file">?

Having no JavaScript beats having a lot of it, so thats a fair question! Running an uploading & encoding business for ten years though we found that in cases, the file input leaves some to be desired:

  • We received complaints about broken uploads and found that resumable uploads are important, especially for big files and to be inclusive towards people on poorer connections (we also launched tus.io to attack that problem). Uppy uploads can survive network outages and browser crashes or accidental navigate-aways.
  • Uppy supports editing meta information before uploading.
  • Uppy allows cropping images before uploading.
  • Theres the situation where people are using their mobile devices and want to upload on the go, but they have their picture on Instagram, files in Dropbox or a plain file URL from anywhere on the open web. Uppy allows to pick files from those and push it to the destination without downloading it to your mobile device first.
  • Accurate upload progress reporting is an issue on many platforms.
  • Some file validation — size, type, number of files — can be done on the client with Uppy.
  • Uppy integrates webcam support, in case your users want to upload a picture/video/audio that does not exist yet :)
  • A larger drag and drop surface can be pleasant to work with. Some people also like that you can control the styling, language, etc.
  • Uppy is aware of encoding backends. Often after an upload, the server needs to rotate, detect faces, optimize for iPad, or what have you. Uppy can track progress of this and report back to the user in different ways.
  • Sometimes you might want your uploads to happen while you continue to interact on the same single page.

Not all apps need all these features. An <input type="file"> is fine in many situations. But these were a few things that our customers hit / asked about enough to spark us to develop Uppy.

Why is all this goodness free?

Transloadits team is small and we have a shared ambition to make a living from open source. By giving away projects like tus.io and Uppy, were hoping to advance the state of the art, make life a tiny little bit better for everyone and in doing so have rewarding jobs and get some eyes on our commercial service: a content ingestion & processing platform.

Our thinking is that if only a fraction of our open source userbase can see the appeal of hosted versions straight from the source, that could already be enough to sustain our work. So far this is working out! Were able to dedicate 80% of our time to open source and havent gone bankrupt yet. :D

Does Uppy support S3 uploads?

Yes, please check out the docs for more information.

Can I use Uppy with Rails/Node.js/Go/PHP?

Yes, whatever you want on the backend will work with @uppy/xhr-upload plugin, since it only does a POST or PUT request. Heres a PHP backend example.

If you want resumability with the Tus plugin, use one of the tus server implementations 👌🏼

And youll need @uppy/companion if youd like your users to be able to pick files from Instagram, Google Drive, Dropbox or via direct URLs (with more services coming).

Contributions are welcome

Used by

Uppy is used by: Photobox, Issuu, Law Insider, Cool Tabs, Soundoff, Scrumi, Crive and others.

Use Uppy in your project? Let us know!

Contributors

contributors table

License

The MIT License.