paul/picpeak
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
812 Commits 86 Branches 516 Tags
d0d283a13e77e32bdc16b873897b0acb4ac3ea78
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Paul Nothaft d0d283a13e Merge pull request #391 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m30s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m39s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details 
chore(beta): release 3.38.0-beta.0
 2026-05-04 21:01:06 +02:00
Paul Nothaft 647aea21ae Merge pull request #389 from the-luap/feat/events-bulk-delete 
feat(events): bulk delete with password confirmation (#384)
 2026-05-04 21:00:06 +02:00
Paul Nothaft 7491eb21c4 Merge pull request #388 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m28s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 7m35s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details 
chore(beta): release 3.37.0-beta.0
 2026-05-04 20:59:53 +02:00
Paul Nothaft d561db802b Merge pull request #387 from the-luap/feat/events-photos-column 
feat(events): add Photos column to admin events list (#384)
 2026-05-04 20:51:44 +02:00
Paul Nothaft 0adec25fe7 Merge pull request #382 from Luca-Timo/refactor/external-media-types 
refactor(events): type external-media list response, drop any casts
 2026-05-04 14:46:35 +02:00
Paul Nothaft 4d99eb672d Merge pull request #383 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m15s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m31s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details 
chore(beta): release 3.36.0-beta.0
 2026-05-04 13:44:35 +02:00
Paul Nothaft 3fe8e61bd1 Merge pull request #379 from Luca-Timo/feat/admin-email-picker 
feat(events): prefill admin email + admin picker on event creation
 2026-05-04 13:32:53 +02:00
Paul Nothaft 06f2b75ec3 Merge pull request #381 from the-luap/chore/external-folder-picker-types 
chore(events): type FolderTreeNode entries with ExternalEntry
 2026-05-04 13:31:11 +02:00
Paul Nothaft bfd7169fc4 Merge pull request #380 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 5m41s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m35s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details 
chore(beta): release 3.35.0-beta.0
 2026-05-04 12:21:35 +02:00
Paul Nothaft cdd40acb45 Merge pull request #378 from Luca-Timo/beta 
feat(events): tree view for external media folder picker
 2026-05-04 12:20:54 +02:00
Paul Nothaft 048870804f Merge pull request #377 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 5m54s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m42s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details 
chore(beta): release 3.34.2-beta.0
 2026-05-04 09:15:29 +02:00
Paul Nothaft 3ab8a64a24 Merge pull request #376 from the-luap/fix/ffmpeg-on-alpine 
fix(docker): install system ffmpeg on Alpine, drop broken bundled binary
 2026-05-04 09:14:16 +02:00
Paul Nothaft 8f2639bdca Merge pull request #375 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m20s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m47s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details 
chore(beta): release 3.34.1-beta.0
 2026-05-04 00:19:37 +02:00
Paul Nothaft 08d046276b Merge pull request #374 from the-luap/fix/cms-external-url-i18n-and-api-shape 
fix(cms): nl/pt/ru i18n + gate external_url in public response
 2026-05-04 00:17:40 +02:00
Paul Nothaft ccd3fd9349 Merge pull request #373 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m20s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m26s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details 
chore(beta): release 3.34.0-beta.0
 2026-05-04 00:11:41 +02:00
Paul Nothaft b2c8161a43 Merge pull request #372 from Luca-Timo/beta 
feat(cms): add external URL toggle for imprint and privacy pages
 2026-05-04 00:10:44 +02:00
Paul Nothaft aade003564 Merge pull request #371 from the-luap/i18n/password-reset-modal 
i18n(events): translate PasswordResetModal across 5 locales
 2026-05-03 23:29:09 +02:00
Paul Nothaft c0ca5ed687 Merge pull request #370 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m10s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m26s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details 
chore(beta): release 3.33.2-beta.0
 2026-05-03 22:49:02 +02:00
Paul Nothaft 0d1f82d31a Merge pull request #369 from the-luap/fix/admin-set-password-and-full-url-emails 
fix(events): admin-set password on reset, full-URL gallery_link in all emails
 2026-05-03 22:48:17 +02:00
Paul Nothaft d4d8833d82 Merge pull request #368 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m43s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 6m49s
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details 
chore(beta): release 3.33.1-beta.0
 2026-05-03 22:12:19 +02:00
Paul Nothaft 07672038d4 Merge pull request #367 from the-luap/fix/email-template-rendering-and-caller-data 
fix(email): render conditionals, localise password placeholders, fix caller/template variable drift
 2026-05-03 22:09:58 +02:00
Paul Nothaft 297960698a Merge pull request #365 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (linux/amd64, ubuntu-latest) (push) Failing after 6m59s
Details
Build and Push Docker Images / build-frontend (linux/amd64, ubuntu-latest) (push) Failing after 7m16s
Details
Build and Push Docker Images / build-backend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details
Build and Push Docker Images / merge-frontend (push) Has been cancelled
Details
Build and Push Docker Images / summary (push) Has been cancelled
Details
Build and Push Docker Images / merge-backend (push) Has been cancelled
Details
Build and Push Docker Images / build-frontend (linux/arm64, ubuntu-24.04-arm) (push) Has been cancelled
Details 
chore(beta): release 3.33.0-beta.0
 2026-05-02 23:04:13 +02:00
Paul Nothaft df3061893d Merge pull request #349 from Luca-Timo/feat/apple-silicon-support 
feat: native multi-arch Docker images (Apple Silicon, ARM64 Linux)
 2026-05-02 23:01:54 +02:00
Paul Nothaft 4765804645 Merge pull request #364 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m57s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m57s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.32.5-beta.0
 2026-05-02 22:59:17 +02:00
Paul Nothaft 907bcf1eb2 Merge pull request #363 from the-luap/feat/upload-redesign-and-auth-loop-fix 
feat(upload): async photo processing + fix(auth): /auth/session symmetry (loop fix)
 2026-05-02 22:59:03 +02:00
Paul Nothaft f529c9e3d7 Merge pull request #362 from the-luap/fix/issue-358-theme-aware-skeleton 
fix(theme): kill initial white frame + theme-aware skeleton tiles (#358 follow-up)
 2026-05-02 22:58:43 +02:00
Paul Nothaft ac040fbef8 Merge pull request #361 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m34s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m35s
Details
Build and Push Docker Images / summary (push) Successful in 4s
Details 
chore(beta): release 3.32.4-beta.0
 2026-05-02 00:11:05 +02:00
Paul Nothaft af2b0628cb Merge pull request #360 from the-luap/fix/issue-hero-logo-position 
fix(events): stop mapping branding_logo_position onto hero_logo_position
 2026-05-02 00:07:24 +02:00
Paul Nothaft 07b41e691d Merge pull request #359 from the-luap/fix/issue-358-theme-flash 
fix(theme): pre-React bootstrap to kill white-flash on dark galleries (#358)
 2026-05-02 00:07:04 +02:00
Paul Nothaft 9597333ddc Merge pull request #357 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m30s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m30s
Details
Build and Push Docker Images / summary (push) Successful in 4s
Details 
chore(beta): release 3.32.3-beta.0
 2026-05-01 23:44:57 +02:00
Paul Nothaft e5712d8ffe Merge pull request #356 from the-luap/fix/issue-create-event-expiry-date-coercion 
fix(events): coerce expires_in_days to Number before addDays
 2026-05-01 23:28:40 +02:00
Paul Nothaft 83dedbcd45 Merge pull request #355 from the-luap/fix/issue-350-jwt-verify-symmetry 
fix(auth): /auth/session must verify issuer claim like adminAuth (#350)
 2026-05-01 23:28:26 +02:00
Paul Nothaft 8f7258bfc8 Merge pull request #353 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m34s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m34s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.32.2-beta.0
 2026-05-01 22:48:31 +02:00
Paul Nothaft 6229b38bac Merge pull request #352 from the-luap/fix/issue-321-346-348-and-discussions 
fix: events search/counters (#346), lazy gallery skeleton (#321), smooth lightbox swipe (#348)
 2026-05-01 22:37:16 +02:00
Paul Nothaft 92847bc06b Merge pull request #345 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m23s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m23s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.32.1-beta.0
 2026-04-30 09:09:37 +02:00
Paul Nothaft 02ed5d4007 Merge pull request #344 from the-luap/chore/move-docs-to-picpeak-app 
docs: move documentation to docs.picpeak.app, drop in-repo copies
 2026-04-30 09:08:16 +02:00
Paul Nothaft 39af382eb2 Merge pull request #343 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m36s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m36s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.32.0-beta.0
 2026-04-29 20:43:46 +02:00
Paul Nothaft 7ea4801544 Merge pull request #342 from the-luap/feat/webhook-payload-enrichment 
feat(webhooks): enrich event.* payloads with customer contact + share_token (#341)
 2026-04-29 20:34:46 +02:00
Paul Nothaft 1b1d816009 Merge pull request #340 from the-luap/refactor/settings-nav-grouped 
refactor(settings): grouped left-rail nav replaces overflowing tab bar
 2026-04-29 00:03:04 +02:00
Paul Nothaft 625711af96 Merge pull request #339 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m52s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m51s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.31.1-beta.0
 2026-04-28 22:15:23 +02:00
Paul Nothaft 1e4067713c Merge pull request #338 from the-luap/fix/post-329-bug-triage 
fix: mobile lightbox + share previews + customer phone bug triage
 2026-04-28 18:06:15 +02:00
Paul Nothaft ca8acacd43 Merge pull request #335 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m23s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m25s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.31.0-beta.0
 2026-04-28 14:53:06 +02:00
Paul Nothaft 06d54bec4d Merge pull request #334 from the-luap/feat/post-319-fixes-and-features 
feat: S3 storage + webhooks + settings dedupe + backup fixes
 2026-04-28 14:50:35 +02:00
Paul Nothaft 2794ed6722 Merge pull request #330 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m36s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m35s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.30.0-beta.0
 2026-04-27 23:53:57 +02:00
Paul Nothaft 11de7b65c9 Merge pull request #329 from the-luap/feat/post-319-fixes-and-features 
Bugfixes, public API, CMS error pages, BMC sponsor link
 2026-04-27 22:41:02 +02:00
Paul Nothaft 63a6bfebce Merge pull request #320 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m41s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m40s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.29.1-beta.0
 2026-04-26 22:52:44 +02:00
Paul Nothaft 2f2f405d9b Merge pull request #319 from the-luap/feat/prezip-and-photo-replace 
fix: discussion #317 issues and #318 archive crash
 2026-04-26 22:51:46 +02:00
Paul Nothaft c0989796e4 Merge pull request #315 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 4m3s
Details
Build and Push Docker Images / build-frontend (push) Failing after 4m3s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.29.0-beta.0
 2026-04-23 16:59:00 +02:00
Paul Nothaft d3f1206816 Merge pull request #314 from the-luap/feat/prezip-and-photo-replace 
feat: pre-zip download all and photo replacement by name (#312, #313)
 2026-04-23 16:49:59 +02:00
Paul Nothaft 4353acebf9 Merge pull request #311 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m41s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m42s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.28.3-beta.0
 2026-04-13 13:01:08 +02:00
Paul Nothaft ceb2a09f48 Merge pull request #310 from the-luap/fix/welcome-message-and-guest-thumbnails 
fix: revert /api prefix in adminPhotos.js to avoid double-prefix (#307)
 2026-04-13 07:30:28 +02:00
Paul Nothaft 59b56ed3d7 Merge pull request #309 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m33s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m33s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.28.2-beta.0
 2026-04-12 21:01:11 +02:00
Paul Nothaft b05c36ac81 Merge pull request #308 from the-luap/fix/welcome-message-and-guest-thumbnails 
fix: display welcome message in gallery and fix guest thumbnail URLs (#306, #307)
 2026-04-12 20:58:24 +02:00
Paul Nothaft 61142c0d0e Merge pull request #305 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m40s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m41s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.28.1-beta.0
 2026-04-12 10:06:43 +02:00
Paul Nothaft 3716ff5085 Merge pull request #304 from the-luap/fix/gallery-sort-direction-and-feedback-visibility 
fix: apply sort direction in gallery and respect show_feedback_to_guests (#302, #303)
 2026-04-12 10:05:52 +02:00
Paul Nothaft 3319a304ce Merge pull request #301 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m48s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m49s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.28.0-beta.0
 2026-04-11 23:24:59 +02:00
Paul Nothaft b1dfbe4c2f Merge pull request #300 from the-luap/feat/cookie-secure-auto 
feat: add COOKIE_SECURE=auto for mixed HTTPS/HTTP deployments (#298)
 2026-04-11 23:24:24 +02:00
Paul Nothaft 54badefc51 Merge pull request #299 from the-luap/fix/guest-masonry-lightbox 
fix: guest feedback flow bugs in Masonry grid and PhotoLightbox (#292)
 2026-04-11 23:24:02 +02:00
Paul Nothaft 72c0c2d18e Merge pull request #297 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m42s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m42s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.27.0-beta.0
 2026-04-11 09:27:58 +02:00
Paul Nothaft 3856ba25bb Merge pull request #295 from the-luap/feat/guest-selections 
feat: guest selections with per-person identity (#292)
 2026-04-11 08:27:31 +02:00
Paul Nothaft 9e1ba4f851 Merge pull request #296 from the-luap/release-please--branches--beta 
chore(beta): release 3.26.2-beta.0
 2026-04-11 08:27:08 +02:00
Paul Nothaft 9ed8a2b199 Merge pull request #294 from the-luap/fix/admin-photo-feedback-filters 
fix: admin photo feedback filters have no effect (#293)
 2026-04-11 08:26:19 +02:00
Paul Nothaft fe46e4268d Merge pull request #288 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m59s
Details
Build and Push Docker Images / build-backend (push) Failing after 4m0s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.26.1-beta.0
 2026-04-09 16:40:53 +02:00
Paul Nothaft 5295516b67 Merge pull request #290 from the-luap/docs/fix-filesystem-gallery-docs 
docs: clarify file system photo import requires existing event (#269)
 2026-04-09 16:26:51 +02:00
Paul Nothaft c63bc47089 Merge pull request #289 from the-luap/fix/password-change-regular-modal 
fix: apply password change fix to regular modal + longer toast delay (#263)
 2026-04-09 16:06:13 +02:00
Paul Nothaft c031b1e863 Merge pull request #287 from the-luap/fix/password-change-iat-timing 
fix: resolve JWT iat timing issue in password change (#263)
 2026-04-09 16:00:25 +02:00
Paul Nothaft ba1f010166 Merge pull request #285 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m39s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m41s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.26.0-beta.0
 2026-04-09 15:40:18 +02:00
Paul Nothaft 8805fa53e6 Merge pull request #286 from the-luap/feat/photo-sort-by-capture-date 
feat: sort photos by capture date with configurable default sort (#283)
 2026-04-09 15:11:19 +02:00
Paul Nothaft b23c51b386 Merge pull request #284 from the-luap/fix/password-change-loop-and-filewatcher 
fix: resolve password change redirect loop (#263) and file watcher crash (#269)
 2026-04-09 13:54:54 +02:00
Paul Nothaft a1b63de251 Merge pull request #279 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m46s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m47s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.25.0-beta.0
 2026-04-08 12:03:29 +02:00
Paul Nothaft dc98206737 Merge pull request #278 from the-luap/feat/draft-mode-branding-improvements 
feat: draft mode, admin branding, and workflow improvements
 2026-04-08 11:51:07 +02:00
Paul Nothaft 125cd0d003 Merge pull request #274 from the-luap/security/fix-dep-vulnerabilities 
security: fix 20 dependency vulnerabilities
 2026-04-08 09:04:19 +02:00
Paul Nothaft 9ddd50f7e4 Merge pull request #266 from the-luap/security/pin-axios-version 
security: pin axios to 1.14.0 — supply chain attack prevention
 2026-04-05 18:40:47 +02:00
Paul Nothaft ea50488e99 Merge pull request #265 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m57s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m59s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.24.1-beta.0
 2026-04-05 18:36:13 +02:00
Paul Nothaft 07fc5e6519 Merge pull request #264 from the-luap/fix/password-change-redirect-loop 
fix: resolve redirect loop after mandatory password change (#263)
 2026-04-05 18:34:07 +02:00
Paul Nothaft edf8bd54af Merge pull request #262 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 4m1s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m59s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.24.0-beta.0
 2026-04-05 18:24:36 +02:00
Paul Nothaft aef9b4ed7f Merge pull request #261 from the-luap/feat/beta-theme-thumbnail-warning 
feat: warn about low thumbnail resolution with beta themes
 2026-04-04 23:33:12 +02:00
Paul Nothaft 5025a42bf7 Merge pull request #259 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 4m3s
Details
Build and Push Docker Images / build-frontend (push) Failing after 4m2s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.23.0-beta.0
 2026-04-04 22:28:44 +02:00
Paul Nothaft ddefd3a95e Merge pull request #260 from the-luap/fix/backend-dockerfile-npm-version 
fix: pin npm to v10 in backend Dockerfile
 2026-04-04 22:13:32 +02:00
Paul Nothaft 8c5996e4ec Merge pull request #258 from the-luap/feat/email-template-translations 
feat: multilingual email templates with translations table
 2026-04-04 17:43:29 +02:00
Paul Nothaft 4ce8dd297a Merge pull request #257 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 4m19s
Details
Build and Push Docker Images / build-backend (push) Failing after 4m22s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.22.0-beta.0
 2026-03-26 08:04:59 +01:00
Paul Nothaft e32da68cbd Merge pull request #256 from the-luap/feat/add-dutch-locale 
feat: add Dutch locale and fix missing translation keys
 2026-03-25 22:36:15 +01:00
Paul NothaftandPaul Nothaft 23cd9cb680 fix: address Shannon security assessment findings (37 vulnerabilities) (#254) 
Remediate 4 Critical, 18 High, 10 Medium, and 5 Low vulnerabilities
identified in the Shannon security assessment (2026-03-20).

Critical fixes:
- Command injection via rsync SSH key path (INJ-VULN-01)
- Self-escalation to super_admin role (AUTHZ-VULN-11)
- Invite super_admin backdoor (AUTHZ-VULN-12)
- Handlebars SSTI in email templates (INJ-VULN-05)

Authentication hardening:
- Rate limit on share-link login (AUTH-VULN-01)
- X-Forwarded-For spoofing bypass (AUTH-VULN-02)
- reCAPTCHA fails closed when misconfigured (AUTH-VULN-03)
- Token revocation on admin/gallery logout (AUTH-VULN-04/05)
- Cookie Secure flag defaults true in production (AUTH-VULN-06)
- Remove JWT from admin login response body (AUTH-VULN-07)
- Timing-safe gallery slug validation (AUTH-VULN-09)
- Account lockout fails closed on DB error (AUTH-VULN-12)
- Session endpoint checks token revocation

Path traversal & file access:
- checksums endpoint path containment (INJ-VULN-03)
- manifest validate path containment (INJ-VULN-04)

XSS prevention:
- Block SVG data URIs in CSS sanitizer (XSS-VULN-01)
- Email preview iframe sandbox (XSS-VULN-02)
- SSR branding HTML escaping (XSS-VULN-03)
- User-Agent sanitization in feedback (XSS-VULN-04)

Authorization (IDOR):
- Event ownership middleware for all admin routes
- Cross-admin user profile read restriction (AUTHZ-VULN-10)

SSRF & infrastructure:
- Private IP validation for SMTP, S3, rsync hosts
- Replace inline JWT with standard adminAuth middleware
- CSRF Content-Type enforcement on mutating API endpoints
- CSP headers in nginx location blocks

Token revocation fix:
- Remove overly broad orWhere clause that invalidated all future tokens
- Allow empty-body POST requests (logout) in CSRF middleware

Co-authored-by: Paul Nothaft <[email protected]>
 2026-03-22 12:40:01 +01:00
Paul NothaftandPaul Nothaft 954a0118ba fix: wrap test email with standard email template (#252) 
Use wrapEmailHtml() for the test email so it matches the look of all
other emails sent by the platform (logo, footer, etc.).

Co-authored-by: Paul Nothaft <[email protected]>
 2026-03-18 10:49:45 +01:00
Paul NothaftandPaul Nothaft ee46088985 feat: add per-gallery thumbnail scale setting (#172) (#251) 
Add a thumbnailScale field (xs/sm/md/lg/xl) to gallery layout settings
that adjusts column counts for Grid, Masonry (columns mode), and Mosaic
layouts. Each scale maps to a column offset applied on top of the
layout's base columns, letting photographers control photo density.

- Add thumbnailScale to GalleryLayoutSettings type
- Apply scale offset in Grid, Masonry, and Mosaic layout components
- Add thumbnail scale dropdown to admin theme customizer
- Conditionally show dropdown only for applicable layouts
- Safelist dynamic grid-cols classes in Tailwind config
- Add i18n keys for EN, DE, PT, RU locales

Co-authored-by: Paul Nothaft <[email protected]>
 2026-03-18 10:44:07 +01:00
Paul NothaftandPaul Nothaft 486239aeb9 fix: address beta feedback - gallery layout fixes, Russian locale, email logo (#249) 
- Add Russian (Русский) to admin settings language dropdown
- Fix Premium layout hero using thumbnail instead of hero_url
- Hide "Uncategorized" section header in Story layout for uncategorized photos
- Add PhotoLightbox to Story layout so photo clicks open full-screen view
- Use full-res images in StoryPhotoCard instead of thumbnails
- Defer public gallery auto-login text until settings/locale are loaded
- Add validation and debug logging for email logo URL construction

Co-authored-by: Paul Nothaft <[email protected]>
 2026-03-17 17:16:50 +01:00
Paul Nothaft 2c5ae6fbb9 Merge pull request #248 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m22s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m22s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.20.0-beta.0
 2026-03-17 13:14:43 +01:00
Paul Nothaft 4a93e4e8cb Merge pull request #247 from the-luap/feat/photo-visibility-client-access 
feat: photo visibility control with client access (#172)
 2026-03-17 13:05:12 +01:00
Paul Nothaft 999c66dbbf Merge pull request #244 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m24s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m24s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.19.2-beta.0
 2026-03-16 22:37:45 +01:00
Paul Nothaft 7ca96315e2 Merge pull request #243 from the-luap/fix/security-session-invalidation 
fix(security): token invalidation on password change, session timeout enforcement
 2026-03-16 22:34:53 +01:00
Paul Nothaft 56cf60c570 Merge pull request #242 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m26s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m26s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.19.1-beta.0
 2026-03-16 22:32:17 +01:00
Paul Nothaft dfae2c2bc6 Merge pull request #241 from the-luap/fix/external-media-dimensions-and-email-colors 
fix: external media dimensions, theme race condition, email color customization
 2026-03-16 22:22:58 +01:00
Paul Nothaft 201965b4b1 Merge pull request #240 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m29s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m29s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.19.0-beta.0
 2026-03-16 20:25:20 +01:00
Paul Nothaft 088de43f09 Merge pull request #239 from the-luap/feat/photo-cap-and-portuguese-locale 
feat: add photo cap per event and Portuguese locale
 2026-03-16 17:23:37 +01:00
Paul Nothaft 6aceb40595 Merge pull request #238 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m20s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m23s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.18.2-beta.0
 2026-03-16 16:26:55 +01:00
Paul Nothaft 85a07fcca7 Merge pull request #237 from the-luap/fix/security-dep-updates 
fix: resolve code scanning security alerts (multer, tar, Node 22)
 2026-03-16 16:25:52 +01:00
Paul Nothaft 48a025b915 Merge pull request #236 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-frontend (push) Failing after 3m20s
Details
Build and Push Docker Images / build-backend (push) Failing after 3m25s
Details
Build and Push Docker Images / summary (push) Successful in 3s
Details 
chore(beta): release 3.18.1-beta.0
 2026-03-16 15:02:04 +01:00
Paul Nothaft 9a6d2e8e3a Merge pull request #235 from the-luap/fix/email-preview-wrapper 
fix: wrap email preview with full styled header/footer template
 2026-03-16 15:00:56 +01:00
Paul Nothaft f77802325a Merge pull request #234 from the-luap/release-please--branches--beta
Build and Push Docker Images / build-backend (push) Failing after 3m37s
Details
Build and Push Docker Images / build-frontend (push) Failing after 3m37s
Details
Build and Push Docker Images / summary (push) Successful in 2s
Details 
chore(beta): release 3.18.0-beta.0
 2026-03-16 10:22:14 +01:00
Paul Nothaft 703c03fbee Merge pull request #233 from the-luap/feat/visual-email-editor 
feat: visual WYSIWYG email template editor
 2026-03-16 09:37:57 +01:00