Paul Nothaft
ee7de6f6a1
Merge pull request #399 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m6s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m40s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.40.1-beta.0
2026-05-05 00:22:28 +02:00
Paul Nothaft
c8e09c2a2a
Merge pull request #398 from the-luap/fix/auth-session-timeout-symmetry
...
fix(auth): /auth/session must enforce session timeout symmetrically (#350 recurrence)
2026-05-05 00:19:31 +02:00
Paul Nothaft
045620e999
Merge pull request #396 from the-luap/fix/fonts-test-mock
...
test(fonts): fix mock bypass and case-insensitive FS skip (#390 follow-up)
2026-05-04 23:30:44 +02:00
Paul Nothaft
dedb05ae28
Merge pull request #395 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m19s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m40s
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
chore(beta): release 3.40.0-beta.0
2026-05-04 23:30:35 +02:00
Paul Nothaft
d04bf28808
Merge pull request #390 from Luca-Timo/feat/self-hosted-fonts
...
feat(branding): self-hosted webfonts with filesystem scanner
2026-05-04 23:23:04 +02:00
Paul Nothaft
e382aed4d1
Merge pull request #394 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 5m56s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m34s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.39.1-beta.0
2026-05-04 22:18:29 +02:00
Paul Nothaft
c60ab74ae2
Merge pull request #393 from the-luap/docs/contributors
...
docs(readme): add Contributors section with @Luca-Timo and @Rekoo-PS
2026-05-04 21:37:37 +02:00
Paul Nothaft
99392c5888
Merge pull request #392 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m9s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m40s
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
chore(beta): release 3.39.0-beta.0
2026-05-04 21:28:06 +02:00
Paul Nothaft
1f1a856083
Merge pull request #385 from Luca-Timo/beta
...
feat(gallery): decouple header style from layout, add banner option
2026-05-04 21:16:13 +02:00
Paul Nothaft
d0d283a13e
Merge pull request #391 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m30s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m39s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.38.0-beta.0
2026-05-04 21:01:06 +02:00
Paul Nothaft
647aea21ae
Merge pull request #389 from the-luap/feat/events-bulk-delete
...
feat(events): bulk delete with password confirmation (#384 )
2026-05-04 21:00:06 +02:00
Paul Nothaft
7491eb21c4
Merge pull request #388 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m28s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 7m35s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.37.0-beta.0
2026-05-04 20:59:53 +02:00
Paul Nothaft
d561db802b
Merge pull request #387 from the-luap/feat/events-photos-column
...
feat(events): add Photos column to admin events list (#384 )
2026-05-04 20:51:44 +02:00
Paul Nothaft
0adec25fe7
Merge pull request #382 from Luca-Timo/refactor/external-media-types
...
refactor(events): type external-media list response, drop any casts
2026-05-04 14:46:35 +02:00
Paul Nothaft
4d99eb672d
Merge pull request #383 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m15s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m31s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.36.0-beta.0
2026-05-04 13:44:35 +02:00
Paul Nothaft
3fe8e61bd1
Merge pull request #379 from Luca-Timo/feat/admin-email-picker
...
feat(events): prefill admin email + admin picker on event creation
2026-05-04 13:32:53 +02:00
Paul Nothaft
06f2b75ec3
Merge pull request #381 from the-luap/chore/external-folder-picker-types
...
chore(events): type FolderTreeNode entries with ExternalEntry
2026-05-04 13:31:11 +02:00
Paul Nothaft
bfd7169fc4
Merge pull request #380 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 5m41s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m35s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.35.0-beta.0
2026-05-04 12:21:35 +02:00
Paul Nothaft
cdd40acb45
Merge pull request #378 from Luca-Timo/beta
...
feat(events): tree view for external media folder picker
2026-05-04 12:20:54 +02:00
Paul Nothaft
048870804f
Merge pull request #377 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 5m54s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m42s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.34.2-beta.0
2026-05-04 09:15:29 +02:00
Paul Nothaft
3ab8a64a24
Merge pull request #376 from the-luap/fix/ffmpeg-on-alpine
...
fix(docker): install system ffmpeg on Alpine, drop broken bundled binary
2026-05-04 09:14:16 +02:00
Paul Nothaft
8f2639bdca
Merge pull request #375 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m20s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m47s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.34.1-beta.0
2026-05-04 00:19:37 +02:00
Paul Nothaft
08d046276b
Merge pull request #374 from the-luap/fix/cms-external-url-i18n-and-api-shape
...
fix(cms): nl/pt/ru i18n + gate external_url in public response
2026-05-04 00:17:40 +02:00
Paul Nothaft
ccd3fd9349
Merge pull request #373 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m20s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m26s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.34.0-beta.0
2026-05-04 00:11:41 +02:00
Paul Nothaft
b2c8161a43
Merge pull request #372 from Luca-Timo/beta
...
feat(cms): add external URL toggle for imprint and privacy pages
2026-05-04 00:10:44 +02:00
Paul Nothaft
aade003564
Merge pull request #371 from the-luap/i18n/password-reset-modal
...
i18n(events): translate PasswordResetModal across 5 locales
2026-05-03 23:29:09 +02:00
Paul Nothaft
c0ca5ed687
Merge pull request #370 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m10s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m26s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
chore(beta): release 3.33.2-beta.0
2026-05-03 22:49:02 +02:00
Paul Nothaft
0d1f82d31a
Merge pull request #369 from the-luap/fix/admin-set-password-and-full-url-emails
...
fix(events): admin-set password on reset, full-URL gallery_link in all emails
2026-05-03 22:48:17 +02:00
Paul Nothaft
d4d8833d82
Merge pull request #368 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m43s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m49s
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
chore(beta): release 3.33.1-beta.0
2026-05-03 22:12:19 +02:00
Paul Nothaft
07672038d4
Merge pull request #367 from the-luap/fix/email-template-rendering-and-caller-data
...
fix(email): render conditionals, localise password placeholders, fix caller/template variable drift
2026-05-03 22:09:58 +02:00
Paul Nothaft
297960698a
Merge pull request #365 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m59s
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 7m16s
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
Build and Push Docker Images / merge-backend (push) Has been cancelled
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
chore(beta): release 3.33.0-beta.0
2026-05-02 23:04:13 +02:00
Paul Nothaft
df3061893d
Merge pull request #349 from Luca-Timo/feat/apple-silicon-support
...
feat: native multi-arch Docker images (Apple Silicon, ARM64 Linux)
2026-05-02 23:01:54 +02:00
Paul Nothaft
4765804645
Merge pull request #364 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m57s
Build and Push Docker Images / build-frontend (push) Failing after 3m57s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.32.5-beta.0
2026-05-02 22:59:17 +02:00
Paul Nothaft
907bcf1eb2
Merge pull request #363 from the-luap/feat/upload-redesign-and-auth-loop-fix
...
feat(upload): async photo processing + fix(auth): /auth/session symmetry (loop fix)
2026-05-02 22:59:03 +02:00
Paul Nothaft
f529c9e3d7
Merge pull request #362 from the-luap/fix/issue-358-theme-aware-skeleton
...
fix(theme): kill initial white frame + theme-aware skeleton tiles (#358 follow-up)
2026-05-02 22:58:43 +02:00
Paul Nothaft
ac040fbef8
Merge pull request #361 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m34s
Build and Push Docker Images / build-frontend (push) Failing after 3m35s
Build and Push Docker Images / summary (push) Successful in 4s
chore(beta): release 3.32.4-beta.0
2026-05-02 00:11:05 +02:00
Paul Nothaft
af2b0628cb
Merge pull request #360 from the-luap/fix/issue-hero-logo-position
...
fix(events): stop mapping branding_logo_position onto hero_logo_position
2026-05-02 00:07:24 +02:00
Paul Nothaft
07b41e691d
Merge pull request #359 from the-luap/fix/issue-358-theme-flash
...
fix(theme): pre-React bootstrap to kill white-flash on dark galleries (#358 )
2026-05-02 00:07:04 +02:00
Paul Nothaft
9597333ddc
Merge pull request #357 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m30s
Build and Push Docker Images / build-backend (push) Failing after 3m30s
Build and Push Docker Images / summary (push) Successful in 4s
chore(beta): release 3.32.3-beta.0
2026-05-01 23:44:57 +02:00
Paul Nothaft
e5712d8ffe
Merge pull request #356 from the-luap/fix/issue-create-event-expiry-date-coercion
...
fix(events): coerce expires_in_days to Number before addDays
2026-05-01 23:28:40 +02:00
Paul Nothaft
83dedbcd45
Merge pull request #355 from the-luap/fix/issue-350-jwt-verify-symmetry
...
fix(auth): /auth/session must verify issuer claim like adminAuth (#350 )
2026-05-01 23:28:26 +02:00
Paul Nothaft
8f7258bfc8
Merge pull request #353 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m34s
Build and Push Docker Images / build-frontend (push) Failing after 3m34s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.32.2-beta.0
2026-05-01 22:48:31 +02:00
Paul Nothaft
6229b38bac
Merge pull request #352 from the-luap/fix/issue-321-346-348-and-discussions
...
fix: events search/counters (#346 ), lazy gallery skeleton (#321 ), smooth lightbox swipe (#348 )
2026-05-01 22:37:16 +02:00
Paul Nothaft
92847bc06b
Merge pull request #345 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m23s
Build and Push Docker Images / build-backend (push) Failing after 3m23s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.32.1-beta.0
2026-04-30 09:09:37 +02:00
Paul Nothaft
02ed5d4007
Merge pull request #344 from the-luap/chore/move-docs-to-picpeak-app
...
docs: move documentation to docs.picpeak.app, drop in-repo copies
2026-04-30 09:08:16 +02:00
Paul Nothaft
39af382eb2
Merge pull request #343 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m36s
Build and Push Docker Images / build-frontend (push) Failing after 3m36s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.32.0-beta.0
2026-04-29 20:43:46 +02:00
Paul Nothaft
7ea4801544
Merge pull request #342 from the-luap/feat/webhook-payload-enrichment
...
feat(webhooks): enrich event.* payloads with customer contact + share_token (#341 )
2026-04-29 20:34:46 +02:00
Paul Nothaft
1b1d816009
Merge pull request #340 from the-luap/refactor/settings-nav-grouped
...
refactor(settings): grouped left-rail nav replaces overflowing tab bar
2026-04-29 00:03:04 +02:00
Paul Nothaft
625711af96
Merge pull request #339 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m52s
Build and Push Docker Images / build-frontend (push) Failing after 3m51s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.31.1-beta.0
2026-04-28 22:15:23 +02:00
Paul Nothaft
1e4067713c
Merge pull request #338 from the-luap/fix/post-329-bug-triage
...
fix: mobile lightbox + share previews + customer phone bug triage
2026-04-28 18:06:15 +02:00
Paul Nothaft
ca8acacd43
Merge pull request #335 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m23s
Build and Push Docker Images / build-backend (push) Failing after 3m25s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.31.0-beta.0
2026-04-28 14:53:06 +02:00
Paul Nothaft
06d54bec4d
Merge pull request #334 from the-luap/feat/post-319-fixes-and-features
...
feat: S3 storage + webhooks + settings dedupe + backup fixes
2026-04-28 14:50:35 +02:00
Paul Nothaft
2794ed6722
Merge pull request #330 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m36s
Build and Push Docker Images / build-frontend (push) Failing after 3m35s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.30.0-beta.0
2026-04-27 23:53:57 +02:00
Paul Nothaft
11de7b65c9
Merge pull request #329 from the-luap/feat/post-319-fixes-and-features
...
Bugfixes, public API, CMS error pages, BMC sponsor link
2026-04-27 22:41:02 +02:00
Paul Nothaft
63a6bfebce
Merge pull request #320 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m41s
Build and Push Docker Images / build-frontend (push) Failing after 3m40s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.29.1-beta.0
2026-04-26 22:52:44 +02:00
Paul Nothaft
2f2f405d9b
Merge pull request #319 from the-luap/feat/prezip-and-photo-replace
...
fix: discussion #317 issues and #318 archive crash
2026-04-26 22:51:46 +02:00
Paul Nothaft
c0989796e4
Merge pull request #315 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 4m3s
Build and Push Docker Images / build-frontend (push) Failing after 4m3s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.29.0-beta.0
2026-04-23 16:59:00 +02:00
Paul Nothaft
d3f1206816
Merge pull request #314 from the-luap/feat/prezip-and-photo-replace
...
feat: pre-zip download all and photo replacement by name (#312 , #313 )
2026-04-23 16:49:59 +02:00
Paul Nothaft
4353acebf9
Merge pull request #311 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m41s
Build and Push Docker Images / build-backend (push) Failing after 3m42s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.28.3-beta.0
2026-04-13 13:01:08 +02:00
Paul Nothaft
ceb2a09f48
Merge pull request #310 from the-luap/fix/welcome-message-and-guest-thumbnails
...
fix: revert /api prefix in adminPhotos.js to avoid double-prefix (#307 )
2026-04-13 07:30:28 +02:00
Paul Nothaft
59b56ed3d7
Merge pull request #309 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m33s
Build and Push Docker Images / build-frontend (push) Failing after 3m33s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.28.2-beta.0
2026-04-12 21:01:11 +02:00
Paul Nothaft
b05c36ac81
Merge pull request #308 from the-luap/fix/welcome-message-and-guest-thumbnails
...
fix: display welcome message in gallery and fix guest thumbnail URLs (#306 , #307 )
2026-04-12 20:58:24 +02:00
Paul Nothaft
61142c0d0e
Merge pull request #305 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m40s
Build and Push Docker Images / build-backend (push) Failing after 3m41s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.28.1-beta.0
2026-04-12 10:06:43 +02:00
Paul Nothaft
3716ff5085
Merge pull request #304 from the-luap/fix/gallery-sort-direction-and-feedback-visibility
...
fix: apply sort direction in gallery and respect show_feedback_to_guests (#302 , #303 )
2026-04-12 10:05:52 +02:00
Paul Nothaft
3319a304ce
Merge pull request #301 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m48s
Build and Push Docker Images / build-backend (push) Failing after 3m49s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.28.0-beta.0
2026-04-11 23:24:59 +02:00
Paul Nothaft
b1dfbe4c2f
Merge pull request #300 from the-luap/feat/cookie-secure-auto
...
feat: add COOKIE_SECURE=auto for mixed HTTPS/HTTP deployments (#298 )
2026-04-11 23:24:24 +02:00
Paul Nothaft
54badefc51
Merge pull request #299 from the-luap/fix/guest-masonry-lightbox
...
fix: guest feedback flow bugs in Masonry grid and PhotoLightbox (#292 )
2026-04-11 23:24:02 +02:00
Paul Nothaft
72c0c2d18e
Merge pull request #297 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m42s
Build and Push Docker Images / build-backend (push) Failing after 3m42s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.27.0-beta.0
2026-04-11 09:27:58 +02:00
Paul Nothaft
3856ba25bb
Merge pull request #295 from the-luap/feat/guest-selections
...
feat: guest selections with per-person identity (#292 )
2026-04-11 08:27:31 +02:00
Paul Nothaft
9e1ba4f851
Merge pull request #296 from the-luap/release-please--branches--beta
...
chore(beta): release 3.26.2-beta.0
2026-04-11 08:27:08 +02:00
Paul Nothaft
9ed8a2b199
Merge pull request #294 from the-luap/fix/admin-photo-feedback-filters
...
fix: admin photo feedback filters have no effect (#293 )
2026-04-11 08:26:19 +02:00
Paul Nothaft
fe46e4268d
Merge pull request #288 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m59s
Build and Push Docker Images / build-backend (push) Failing after 4m0s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.26.1-beta.0
2026-04-09 16:40:53 +02:00
Paul Nothaft
5295516b67
Merge pull request #290 from the-luap/docs/fix-filesystem-gallery-docs
...
docs: clarify file system photo import requires existing event (#269 )
2026-04-09 16:26:51 +02:00
Paul Nothaft
c63bc47089
Merge pull request #289 from the-luap/fix/password-change-regular-modal
...
fix: apply password change fix to regular modal + longer toast delay (#263 )
2026-04-09 16:06:13 +02:00
Paul Nothaft
c031b1e863
Merge pull request #287 from the-luap/fix/password-change-iat-timing
...
fix: resolve JWT iat timing issue in password change (#263 )
2026-04-09 16:00:25 +02:00
Paul Nothaft
ba1f010166
Merge pull request #285 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m39s
Build and Push Docker Images / build-backend (push) Failing after 3m41s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.26.0-beta.0
2026-04-09 15:40:18 +02:00
Paul Nothaft
8805fa53e6
Merge pull request #286 from the-luap/feat/photo-sort-by-capture-date
...
feat: sort photos by capture date with configurable default sort (#283 )
2026-04-09 15:11:19 +02:00
Paul Nothaft
b23c51b386
Merge pull request #284 from the-luap/fix/password-change-loop-and-filewatcher
...
fix: resolve password change redirect loop (#263 ) and file watcher crash (#269 )
2026-04-09 13:54:54 +02:00
Paul Nothaft
a1b63de251
Merge pull request #279 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m46s
Build and Push Docker Images / build-backend (push) Failing after 3m47s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.25.0-beta.0
2026-04-08 12:03:29 +02:00
Paul Nothaft
dc98206737
Merge pull request #278 from the-luap/feat/draft-mode-branding-improvements
...
feat: draft mode, admin branding, and workflow improvements
2026-04-08 11:51:07 +02:00
Paul Nothaft
125cd0d003
Merge pull request #274 from the-luap/security/fix-dep-vulnerabilities
...
security: fix 20 dependency vulnerabilities
2026-04-08 09:04:19 +02:00
Paul Nothaft
9ddd50f7e4
Merge pull request #266 from the-luap/security/pin-axios-version
...
security: pin axios to 1.14.0 — supply chain attack prevention
2026-04-05 18:40:47 +02:00
Paul Nothaft
ea50488e99
Merge pull request #265 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m57s
Build and Push Docker Images / build-backend (push) Failing after 3m59s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.24.1-beta.0
2026-04-05 18:36:13 +02:00
Paul Nothaft
07fc5e6519
Merge pull request #264 from the-luap/fix/password-change-redirect-loop
...
fix: resolve redirect loop after mandatory password change (#263 )
2026-04-05 18:34:07 +02:00
Paul Nothaft
edf8bd54af
Merge pull request #262 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 4m1s
Build and Push Docker Images / build-frontend (push) Failing after 3m59s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.24.0-beta.0
2026-04-05 18:24:36 +02:00
Paul Nothaft
aef9b4ed7f
Merge pull request #261 from the-luap/feat/beta-theme-thumbnail-warning
...
feat: warn about low thumbnail resolution with beta themes
2026-04-04 23:33:12 +02:00
Paul Nothaft
5025a42bf7
Merge pull request #259 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 4m3s
Build and Push Docker Images / build-frontend (push) Failing after 4m2s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.23.0-beta.0
2026-04-04 22:28:44 +02:00
Paul Nothaft
ddefd3a95e
Merge pull request #260 from the-luap/fix/backend-dockerfile-npm-version
...
fix: pin npm to v10 in backend Dockerfile
2026-04-04 22:13:32 +02:00
Paul Nothaft
8c5996e4ec
Merge pull request #258 from the-luap/feat/email-template-translations
...
feat: multilingual email templates with translations table
2026-04-04 17:43:29 +02:00
Paul Nothaft
4ce8dd297a
Merge pull request #257 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 4m19s
Build and Push Docker Images / build-backend (push) Failing after 4m22s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.22.0-beta.0
2026-03-26 08:04:59 +01:00
Paul Nothaft
e32da68cbd
Merge pull request #256 from the-luap/feat/add-dutch-locale
...
feat: add Dutch locale and fix missing translation keys
2026-03-25 22:36:15 +01:00
Paul Nothaft and Paul Nothaft
23cd9cb680
fix: address Shannon security assessment findings (37 vulnerabilities) ( #254 )
...
Remediate 4 Critical, 18 High, 10 Medium, and 5 Low vulnerabilities
identified in the Shannon security assessment (2026-03-20).
Critical fixes:
- Command injection via rsync SSH key path (INJ-VULN-01)
- Self-escalation to super_admin role (AUTHZ-VULN-11)
- Invite super_admin backdoor (AUTHZ-VULN-12)
- Handlebars SSTI in email templates (INJ-VULN-05)
Authentication hardening:
- Rate limit on share-link login (AUTH-VULN-01)
- X-Forwarded-For spoofing bypass (AUTH-VULN-02)
- reCAPTCHA fails closed when misconfigured (AUTH-VULN-03)
- Token revocation on admin/gallery logout (AUTH-VULN-04/05)
- Cookie Secure flag defaults true in production (AUTH-VULN-06)
- Remove JWT from admin login response body (AUTH-VULN-07)
- Timing-safe gallery slug validation (AUTH-VULN-09)
- Account lockout fails closed on DB error (AUTH-VULN-12)
- Session endpoint checks token revocation
Path traversal & file access:
- checksums endpoint path containment (INJ-VULN-03)
- manifest validate path containment (INJ-VULN-04)
XSS prevention:
- Block SVG data URIs in CSS sanitizer (XSS-VULN-01)
- Email preview iframe sandbox (XSS-VULN-02)
- SSR branding HTML escaping (XSS-VULN-03)
- User-Agent sanitization in feedback (XSS-VULN-04)
Authorization (IDOR):
- Event ownership middleware for all admin routes
- Cross-admin user profile read restriction (AUTHZ-VULN-10)
SSRF & infrastructure:
- Private IP validation for SMTP, S3, rsync hosts
- Replace inline JWT with standard adminAuth middleware
- CSRF Content-Type enforcement on mutating API endpoints
- CSP headers in nginx location blocks
Token revocation fix:
- Remove overly broad orWhere clause that invalidated all future tokens
- Allow empty-body POST requests (logout) in CSRF middleware
Co-authored-by: Paul Nothaft <[email protected]
2026-03-22 12:40:01 +01:00
Paul Nothaft and Paul Nothaft
954a0118ba
fix: wrap test email with standard email template ( #252 )
...
Use wrapEmailHtml() for the test email so it matches the look of all
other emails sent by the platform (logo, footer, etc.).
Co-authored-by: Paul Nothaft <[email protected]
2026-03-18 10:49:45 +01:00
Paul Nothaft and Paul Nothaft
ee46088985
feat: add per-gallery thumbnail scale setting ( #172 ) ( #251 )
...
Add a thumbnailScale field (xs/sm/md/lg/xl) to gallery layout settings
that adjusts column counts for Grid, Masonry (columns mode), and Mosaic
layouts. Each scale maps to a column offset applied on top of the
layout's base columns, letting photographers control photo density.
- Add thumbnailScale to GalleryLayoutSettings type
- Apply scale offset in Grid, Masonry, and Mosaic layout components
- Add thumbnail scale dropdown to admin theme customizer
- Conditionally show dropdown only for applicable layouts
- Safelist dynamic grid-cols classes in Tailwind config
- Add i18n keys for EN, DE, PT, RU locales
Co-authored-by: Paul Nothaft <[email protected]
2026-03-18 10:44:07 +01:00
Paul Nothaft and Paul Nothaft
486239aeb9
fix: address beta feedback - gallery layout fixes, Russian locale, email logo ( #249 )
...
- Add Russian (Русский) to admin settings language dropdown
- Fix Premium layout hero using thumbnail instead of hero_url
- Hide "Uncategorized" section header in Story layout for uncategorized photos
- Add PhotoLightbox to Story layout so photo clicks open full-screen view
- Use full-res images in StoryPhotoCard instead of thumbnails
- Defer public gallery auto-login text until settings/locale are loaded
- Add validation and debug logging for email logo URL construction
Co-authored-by: Paul Nothaft <[email protected]
2026-03-17 17:16:50 +01:00
Paul Nothaft
2c5ae6fbb9
Merge pull request #248 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m22s
Build and Push Docker Images / build-frontend (push) Failing after 3m22s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.20.0-beta.0
2026-03-17 13:14:43 +01:00
Paul Nothaft
4a93e4e8cb
Merge pull request #247 from the-luap/feat/photo-visibility-client-access
...
feat: photo visibility control with client access (#172 )
2026-03-17 13:05:12 +01:00
Paul Nothaft
999c66dbbf
Merge pull request #244 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-backend (push) Failing after 3m24s
Build and Push Docker Images / build-frontend (push) Failing after 3m24s
Build and Push Docker Images / summary (push) Successful in 2s
chore(beta): release 3.19.2-beta.0
2026-03-16 22:37:45 +01:00
Paul Nothaft
7ca96315e2
Merge pull request #243 from the-luap/fix/security-session-invalidation
...
fix(security): token invalidation on password change, session timeout enforcement
2026-03-16 22:34:53 +01:00
Paul Nothaft
56cf60c570
Merge pull request #242 from the-luap/release-please--branches--beta
...
Build and Push Docker Images / build-frontend (push) Failing after 3m26s
Build and Push Docker Images / build-backend (push) Failing after 3m26s
Build and Push Docker Images / summary (push) Successful in 3s
chore(beta): release 3.19.1-beta.0
2026-03-16 22:32:17 +01:00
Paul Nothaft