v7.6.0

What's Changed

🏕 Features

• Async reverse-geocoding, configurable rate limit, remove Wikimedia map provider by @ildyria in #4275
• Fixes the wrong name of aspect_ratio 16by9 to 1byx9 in all translations. by @mhepp63 in #4279
• Avoid spamming the server for auditories when we don't have the rights by @ildyria in #4283
• Add admin check for uploads by @ildyria in #4282
• Remove user constraint on decoding Limiter by @ildyria in #4292
• feat(036): fix direct photo links in large paginated albums via ?page=N by @ildyria in #4294
• fix: show Back Home button on tablets and phones by @ildyria in #4295
• ldap is no longer required by @ildyria in #4297
• Fixes the Czech translation, part II by @mhepp63 in #4303
• feat(35) Chunked Archive Download by @ildyria in #4300
• feat(34): add bulk album edit by @ildyria in #4296
• feat: search other pages when photo not found in suggested page by @ildyria in #4311
• feat: Add setting to disable embed endpoints and UI. by @ildyria in #4316
• fix: Improved support for group authorization for Album delete & edit by @ildyria in #4317
• feat(37): improved admin panel by @ildyria in #4312
• fix: deduplicate photos in tag album listings by @ildyria in #4328
• fix: optimistic UI update for album pin/unpin by @ildyria in #4329
• feat(white-label): hide Lychee SE / version branding on login form and all public surfaces by @ildyria in #4335
• fix: use file path instead of stream for PDF thumbnail generation by @mitpjones in #4334
• Fix SSRF on TOCTOU by @ildyria in #4344
• Bump frankenphp + fix flacky test by @ildyria in #4354
• Fixes the Czech translation, part III by @mhepp63 in #4353
• Disable response caching functionality by @ildyria in #4362
• Fix not loading settings first page anymore by @ildyria in #4365
• Update Markdown configuration to a more secure practice by @ildyria in #4377
• Remove vulnerabilities by dropping some dependencies. by @ildyria in #4378
• Add option to have timeline only at root level by @ildyria in #4383
• Only call advisory after being logged in by @ildyria in #4384
• Fix hidden albums leaking via "present in albums" list by @ildyria in #4387
• Display Camera Make in PhotoDetails Exif Data by @rschumm in #4389
• Feature 041: supply title/description at upload time; return expected_id in response by @ildyria in #4385
• feat(webshop): add print & pixel size support (feature 043) by @ildyria in #4388
• Add option to disable the switch photo effect by @ildyria in #4406
• Add Feature 042 webshop order item display by @ildyria in #4411
• Add option to disable the switch photo effect by @ildyria in #4410
• Add better feedback on upload failures by @ildyria in #4412
• Fix mb strings for our chinese users by @ildyria in #4415
• Pin -rc releases by @ildyria in #4413
• Add support for toggle select on mobile view by @ildyria in #4416
• Add support for uploading folders by drag&drop by @ildyria in #4417
• Avoid further complaint on api/v2/diagnostics endpoint by @ildyria in #4419
• Do not re-run full CI if not necessary on PR by @ildyria in #4426
• Add middleware to check if feature is enabled by @ildyria in #4428
• Version 7.6.0 by @ildyria in #4429

👒 Dependencies

• chore(deps): bump axios from 1.14.0 to 1.15.0 by @dependabot[bot] in #4277
• chore(deps): bump phpseclib/phpseclib from 3.0.50 to 3.0.51 by @dependabot[bot] in #4281
• chore(deps): bump the actions-deps group with 4 updates by @dependabot[bot] in #4291
• chore(deps): bump the production-dependencies group with 6 updates by @dependabot[bot] in #4287
• chore(deps): bump follow-redirects from 1.15.11 to 1.16.0 by @dependabot[bot] in #4293
• chore(deps-dev): bump the development-dependencies group with 6 updates by @dependabot[bot] in #4290
• chore(deps): bump the production-dependencies group with 3 updates by @dependabot[bot] in #4289
• chore(deps-dev): bump composer/composer from 2.9.5 to 2.9.7 by @dependabot[bot] in #4298
• chore(deps): bump the actions-deps group with 3 updates by @dependabot[bot] in #4310
• chore(deps): bump the production-dependencies group with 6 updates by @dependabot[bot] in #4306
• chore(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in #4309
• chore(deps): bump the production-dependencies group with 3 updates by @dependabot[bot] in #4308
• chore(deps): bump the production-dependencies group with 11 updates by @dependabot[bot] in #4322
• chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 in the actions-deps group by @dependabot[bot] in #4326
• chore(deps-dev): bump the development-dependencies group with 3 updates by @dependabot[bot] in #4325
• chore(deps): bump the production-dependencies group across 1 directory with 7 updates by @dependabot[bot] in #4327
• chore(deps-dev): bump the development-dependencies group across 1 directory with 11 updates by @dependabot[bot] in #4323
• chore(deps): bump the production-dependencies group with 3 updates by @dependabot[bot] in #4338
• chore(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in #4337
• chore(deps-dev): bump phpstan/phpstan from 2.1.51 to 2.1.54 in the development-dependencies group by @dependabot[bot] in #4339
• chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 in the actions-deps group by @dependabot[bot] in #4340
• chore(deps): bump axios from 1.15.2 to 1.16.0 in the production-dependencies group by @dependabot[bot] in #4336
• chore(deps): bump the actions-deps group with 2 updates by @dependabot[bot] in #4348
• chore(deps-dev): bump the development-dependencies group with 5 updates by @dependabot[bot] in #4347
• chore(deps): bump the production-dependencies group across 1 directory with 10 updates by @dependabot[bot] in #4352
• chore(deps): bump the production-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #4356
• chore(deps): bump the production-dependencies group with 4 updates by @dependabot[bot] in #4358
• chore(deps-dev): bump the development-dependencies group with 3 updates by @dependabot[bot] in #4360
• chore(deps): bump the actions-deps group with 3 updates by @dependabot[bot] in #4361
• chore(deps-dev): bump the development-dependencies group with 5 updates by @dependabot[bot] in #4359
• chore(deps-dev): bump composer/composer from 2.9.7 to 2.9.8 by @dependabot[bot] in #4363
• chore(deps): bump js-cookie from 3.0.5 to 3.0.7 by @dependabot[bot] in #4366
• chore(deps-dev): bump qs from 6.15.1 to 6.15.2 by @dependabot[bot] in #4367
• chore(deps): bump the actions-deps group with 5 updates by @dependabot[bot] in #4374
• chore(deps): bump vite from 8.0.13 to 8.0.14 in the production-dependencies group by @dependabot[bot] in https://github.com/L...

v7.5.4

What's Changed

🏕 Features

• Add disabling preloading check in FixTree console by @ildyria in #4226
• Fixing discussion #4230 SyntaxError: [sprintf] unexpected placeholder… by @TheBullRing in #4231
• Fix MySQL error 1390 (too many placeholders) in album/photo deletion path by @Copilot in #4225
• Enhance German translation by @hyazinthh in #4239
• Finalize German translation by @hyazinthh in #4241
• Fix vite 8 building a broken frontend by @ildyria in #4242
• Trivy ignore update by @ildyria in #4251
• Add turkish template by @ildyria in #4253
• Fix notifications by @hyazinthh in #4255
• Fix 'rename' string and make ellipses consistent for German by @hyazinthh in #4256
• Ignore CVE which does not apply to us by @ildyria in #4261
• Translations update from LycheeOrg - Weblate by @ildyria in #4257
• Fix sharing a bit too much info by @ildyria in #4264
• feat(032): Security Advisories Check – spec, plan, tasks, and config by @Copilot in #4263
• Version 7.5.4 by @ildyria in #4271

👒 Dependencies

• chore(deps): bump socialiteproviders/microsoft from 4.8.0 to 4.9.0 in the production-dependencies group by @dependabot[bot] in #4220
• chore(deps): bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions-deps group by @dependabot[bot] in #4222
• chore(deps): bump the production-dependencies group across 1 directory with 11 updates by @dependabot[bot] in #4221
• chore(deps-dev): bump phpstan/phpstan from 2.1.42 to 2.1.43 in the development-dependencies group by @dependabot[bot] in #4229
• chore(deps): bump laravel/socialite from 5.25.0 to 5.26.0 in the production-dependencies group by @dependabot[bot] in #4228
• chore(deps): bump picomatch by @dependabot[bot] in #4235
• chore(deps): bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in #4236
• chore(deps): bump the actions-deps group with 3 updates by @dependabot[bot] in #4250
• chore(deps): bump the production-dependencies group with 3 updates by @dependabot[bot] in #4248
• chore(deps-dev): bump the development-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #4252
• chore(deps): bump defu from 6.1.4 to 6.1.6 by @dependabot[bot] in #4258
• chore(deps): bump vite from 8.0.3 to 8.0.5 by @dependabot[bot] in #4265
• chore(deps): bump the production-dependencies group across 1 directory with 6 updates by @dependabot[bot] in #4266
• chore(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in #4269
• chore(deps): bump the actions-deps group with 2 updates by @dependabot[bot] in #4270
• chore(deps): bump the production-dependencies group with 3 updates by @dependabot[bot] in #4268

New Contributors

• @TheBullRing made their first contribution in #4231

Full Changelog: v7.5.3...v7.5.4

v7.5.3

What's Changed

🏕 Features

• Composer update by @ildyria in #4216
• Added and improved German translations by @hyazinthh in #4217
• Fix XSS in /feed by @ildyria in #4218

New Contributors

• @hyazinthh made their first contribution in #4217

Full Changelog: v7.5.2...v7.5.3

v7.5.2

What's Changed

🏕 Features

• docs: add spec, plan and tasks for feature 029 camera capture by @mitpjones in #4209
• feat: add Camera Capture feature (Feature 029) by @mitpjones in #4213
• Fix dns-resolving to localip by @ildyria in #4214

New Contributors

• @mitpjones made their first contribution in #4209

Full Changelog: v7.5.1...v7.5.2

v7.5.1

What's Changed

🏕 Features

• Make ldap optional by @ildyria in #4208
• Fix tag album ordering by @ildyria in #4207
• Fix ssrf lookback edge case by @ildyria in #4205

👒 Dependencies

• chore(deps): bump the actions-deps group with 4 updates by @dependabot[bot] in #4196
• chore(deps): bump dedoc/scramble from 0.13.14 to 0.13.15 in the production-dependencies group by @dependabot[bot] in #4194
• chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot[bot] in #4195
• chore(deps): bump league/commonmark from 2.8.1 to 2.8.2 by @dependabot[bot] in #4203
• chore(deps): bump phpseclib/phpseclib from 3.0.49 to 3.0.50 by @dependabot[bot] in #4201
• chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in #4206

Full Changelog: v7.5.0...v7.5.1

v7.5.0

What's Changed

🏕 Features

• Prevent copy in non secure context by @ildyria in #4180
• Refactor search by @ildyria in #4179
• Album filter by @ildyria in #4163
• Fix Masonry (and other layout not being respected) by @ildyria in #4184
• Fix missing migration is_starred -> is_highligted by @ildyria in #4188
• Unfortunately, we have to enable unsafe-inline if we are using Paypal by @ildyria in #4189
• Fix loading photos on paginated by @ildyria in #4190
• Version 7.5.0 by @ildyria in #4191

👒 Dependencies

• chore(deps-dev): bump undici from 7.22.0 to 7.24.1 by @dependabot[bot] in #4181

Full Changelog: v7.4.2...v7.5.0

v7.4.2

What's Changed

🏕 Features

• Fix Connect src csp by @ildyria in #4161
• Translations update from LycheeOrg - Weblate by @ildyria in #4164
• fix(csp): add 'self' to connect-src so API calls to own origin are allowed by @cdzombak in #4170
• Version 7.4.2 by @ildyria in #4171
• Bump frankenphp by @ildyria in #4172

👒 Dependencies

• chore(deps): bump the actions-deps group with 10 updates by @dependabot[bot] in #4168
• chore(deps): bump the production-dependencies group with 4 updates by @dependabot[bot] in #4165
• chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot[bot] in #4167
• chore(deps): bump the actions-deps group with 2 updates by @dependabot[bot] in #4175
• chore(deps): bump the production-dependencies group with 3 updates by @dependabot[bot] in #4174

Full Changelog: v7.4.1...v7.4.2

v7.4.1

What's Changed

🏕 Features

• Do not die when initializing the watermarker by @ildyria in #4138
• add error message for ldap requirement by @ildyria in #4139
• feat: lychee:sync accepts individual file paths alongside directories by @Copilot in #4143
• Add dynamic background modes with enum config by @ildyria in #4144
• Translations update from LycheeOrg - Weblate by @ildyria in #4145
• Translations update from LycheeOrg - Weblate by @ildyria in #4147
• Improve message notification by @ildyria in #4148
• Solution to #4146 : Adding the option to specify the Microsoft Tenant… by @agademer in #4151
• Fix #4117 - Fix going back to selected tag page. by @ildyria in #4155
• Add db migration existence check by @ildyria in #4156
• Fix security headers by @ildyria in #4158
• Fix(csp): remove unsafe-eval requirement for Vue3 production builds by @ildyria in #4159
• Version 7.4.1 by @ildyria in #4157

👒 Dependencies

• chore(deps): bump the actions-deps group with 5 updates by @dependabot[bot] in #4142
• chore(deps): bump the production-dependencies group with 2 updates by @dependabot[bot] in #4140
• chore(deps): bump immutable from 5.1.4 to 5.1.5 by @dependabot[bot] in #4149
• chore(deps): bump league/commonmark from 2.8.0 to 2.8.1 by @dependabot[bot] in #4154

New Contributors

• @agademer made their first contribution in #4151

Full Changelog: v7.4.0...v7.4.1

v7.4.0

What's Changed

🏕 Features

• Improve documentation by @ildyria in #4094
• Allow non-authenticated users to star photo (by admin option) by @tkulev in #4082
• Starred to highlight by @ildyria in #4106
• Fix documentation url by @ildyria in #4112
• Add photo list display by @ildyria in #4113
• Translations update from LycheeOrg - Weblate by @ildyria in #4115
• Add option to disable watermarking at upload time. by @ildyria in #4114
• Mass edit license by @ildyria in #4120
• Mass rename on album view by @ildyria in #4121
• Add link to owning albums. by @ildyria in #4122
• Remove endpoint to fetch all data in one go for an album by @ildyria in #4124
• Slugs as album ids by @ildyria in #4123
• Bump frankenphp & dependencies by @ildyria in #4128
• add inner transactions to avoid aborting (#4072) by @FredPraca in #4125
• Raw support by @ildyria in #4130
• Lychee v3 redirect by @tkulev in #4126
• Medium zip download by @ildyria in #4133
• Album header improvements by @tkulev in #4105
• feat: implement remember-me login (Feature 023) by @Copilot in #4134
• feat: Contact Form (Feature 022) — backend & frontend by @Copilot in #4132
• Version 7.4.0 by @ildyria in #4135

👒 Dependencies

• chore(deps): bump the actions-deps group with 2 updates by @dependabot[bot] in #4100
• chore(deps-dev): bump the development-dependencies group with 3 updates by @dependabot[bot] in #4099
• chore(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in #4097
• chore(deps): bump the production-dependencies group with 2 updates by @dependabot[bot] in #4098
• chore(deps): bump the actions-deps group with 2 updates by @dependabot[bot] in #4111
• chore(deps): bump the production-dependencies group with 4 updates by @dependabot[bot] in #4109
• chore(deps): bump the production-dependencies group with 7 updates by @dependabot[bot] in #4107
• chore(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in #4110

New Contributors

• @FredPraca made their first contribution in #4125
• @Copilot made their first contribution in #4134

Full Changelog: v7.3.3...v7.4.0

v7.3.3

What's Changed

🏕 Features

• Add 2 new smart albums: My rated pictures and My best rated pictures by @ildyria in #4041
• Add setting to also hide GPS data by @ildyria in #4046
• Fix settings not being set for default album protection policy by @ildyria in #4048
• Fix delete warning in tags albums by @ildyria in #4049
• Bump frankenphp by @ildyria in #4057
• Fix migration failing when rerun. by @ildyria in #4070
• Bump frankenphp by @ildyria in #4079
• Adding Bulgarian translations by @tkulev in #4080
• Copy built album-embed assets into Docker images by @cdzombak in #4084
• Allow filtering embedded albums/streams by author using data-author attribute by @cdzombak in #4083
• Move notes on embeds feature from .ai to docs/specs/4-architecture/feature by @cdzombak in #4085
• Bump frankenphp by @ildyria in #4086
• Fix docker compose in readme by @ildyria in #4091
• Fix zip first install by @ildyria in #4092
• Version 7.3.3 by @ildyria in #4093

👒 Dependencies

• chore(deps): bump docker/login-action from 3.6.0 to 3.7.0 in the actions-deps group by @dependabot[bot] in #4068
• chore(deps): bump the production-dependencies group with 6 updates by @dependabot[bot] in #4064
• chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot[bot] in #4065
• chore(deps): bump the production-dependencies group with 6 updates by @dependabot[bot] in #4066
• chore(deps): bump step-security/harden-runner from 2.14.1 to 2.14.2 in the actions-deps group by @dependabot[bot] in #4078
• chore(deps): bump the production-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #4081
• chore(deps-dev): bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #4087
• chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot[bot] in #4077
• chore(deps): bump the production-dependencies group across 1 directory with 4 updates by @dependabot[bot] in #4088
• chore(deps-dev): bump the development-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #4089

New Contributors

• @tkulev made their first contribution in #4080

Full Changelog: v7.3.2...v7.3.3