9cbbe74051
chore(main): release 2.6.3
2026-04-07 18:40:34 +00:00
681b440381
security: pin axios to 1.14.0 to prevent supply chain attack
...
Axios versions 1.14.1 and 0.30.4 were compromised on March 31, 2026
with a RAT dropper attributed to North Korean threat actor. Pin to
exact 1.14.0 (latest safe release) to prevent resolution to compromised
versions. See https://github.com/axios/axios/issues/10604
2026-04-05 18:41:45 +02:00
7febba2d9c
chore(main): release 2.6.2
2026-03-16 21:37:35 +00:00
b52cf1f741
chore(main): release 2.6.1
2026-03-11 19:48:05 +00:00
0c98c6b453
chore(beta): release 3.17.1-beta.0
2026-03-08 14:42:28 +00:00
7d967a47ae
chore(beta): release 3.17.0-beta.0
2026-03-05 21:21:48 +00:00
98fd6dd8e1
chore(beta): release 3.16.0-beta.0
2026-03-05 20:38:56 +00:00
a1d941f049
chore(beta): release 3.15.3-beta.0
2026-03-02 22:18:06 +00:00
3e0c4fd73e
chore(beta): release 3.15.2-beta.0
2026-02-22 21:37:26 +00:00
9045402c9a
chore(beta): release 3.15.1-beta.0
2026-02-21 19:31:37 +00:00
fe9486e5fa
chore(beta): release 3.15.0-beta.0
2026-02-17 19:47:41 +00:00
6613f1b088
chore(beta): release 3.14.0-beta.0
2026-02-17 14:38:14 +00:00
d239857d9a
chore(beta): release 3.13.1-beta.0
2026-02-15 21:49:34 +00:00
edf3a43950
chore(beta): release 3.13.0-beta.0
2026-02-06 23:35:55 +00:00
2c35543e73
chore(beta): release 3.12.0-beta.0
2026-02-06 22:29:57 +00:00
e05fd64760
chore(beta): release 3.11.0-beta.0
2026-02-06 20:46:15 +00:00
4280444d70
Merge pull request #173 from the-luap/feat/new-features
...
feat: gallery layouts, hero customization, event types, and UX improvements (#146 , #155-163, #170 , #171 )
2026-02-06 21:45:59 +01:00
6491184402
chore: add dependencies for Gallery Premium/Story layouts
...
Add missing npm packages required for new gallery layouts:
- yet-another-react-lightbox: lightbox component
- framer-motion: animations
- photoswipe: photo gallery
- swiper: carousel/slider
2026-02-06 21:43:09 +01:00
10ff6b118c
chore(beta): release 3.10.1-beta.0
2026-02-03 16:25:51 +00:00
8ddec6ed8b
chore(beta): release 3.10.0-beta.0
2026-02-03 14:56:50 +00:00
7bf1e5c0f9
chore(beta): release 3.9.0-beta.0
2026-02-01 21:58:22 +00:00
9ec0e2e7c0
chore(beta): release 3.8.0-beta.0
2026-01-30 07:34:38 +00:00
c40f34d3de
chore(beta): release 3.7.0-beta.0
2026-01-28 21:54:14 +00:00
ef2ae00ff2
Merge pull request #150 from the-luap/feat/new-features
...
feat: Add justified layout modes and aspect-ratio-aware mosaic (#146 )
2026-01-28 22:53:58 +01:00
608bbd50e7
feat: add justified layout modes and aspect-ratio-aware mosaic ( #146 )
...
- Add Flickr justified-layout and react-photo-album as masonry mode options
- Implement aspect-ratio-aware mosaic layout that dynamically selects
patterns based on photo orientations to minimize cropping
- Add 9 mosaic pattern types optimized for different orientation combinations
- Add theme customizer options for masonry mode selection (columns/rows/flickr/justified)
- Add i18n translations for new layout options
2026-01-28 22:31:34 +01:00
b4978c0869
chore(beta): release 3.6.0-beta.0
2026-01-27 10:45:56 +00:00
32fc939c7a
chore(beta): release 3.5.0-beta.0
2026-01-25 14:24:28 +00:00
9c8b5e9fd6
chore(beta): release 3.4.0-beta.0
2026-01-22 13:00:33 +00:00
f4da354ae7
chore(beta): release 3.3.0-beta.0
2026-01-21 16:06:24 +00:00
237eeea5a6
chore(beta): release 3.2.5-beta.0
2026-01-18 14:35:30 +00:00
cf38305f28
chore(beta): release 3.2.4-beta.0
2026-01-17 14:08:09 +00:00
b613f8fbc7
chore(beta): release 3.2.3-beta.0
2026-01-16 14:19:26 +00:00
e808e529cd
chore(beta): release 3.2.2-beta.0
2026-01-16 13:53:31 +00:00
b5f06af126
chore(beta): release 3.2.1-beta.0
2026-01-16 13:35:53 +00:00
7805e89bfe
chore(beta): release 3.2.0-beta.0
2026-01-16 08:43:36 +00:00
d603567e21
chore(beta): release 3.1.0-beta.0
2026-01-15 20:03:57 +00:00
a0f38053d3
chore(beta): release 3.0.1-beta.0
2026-01-15 11:35:58 +00:00
2add85eccf
chore: sync package.json versions to 2.3.0
2026-01-15 11:19:05 +00:00
a2ff9eae3f
chore: sync package.json versions to 2.2.4
2026-01-08 22:24:23 +00:00
049837f9d6
fix(nginx): add Docker DNS resolver for Swarm/dynamic service discovery
...
- Add resolver 127.0.0.11 directive for Docker's internal DNS
- Use variable-based proxy_pass to force per-request DNS resolution
- Fix 502 Bad Gateway error on root path in Docker Swarm deployments
The issue was that nginx caches DNS lookups at startup, but in Docker
Swarm where service IPs can change dynamically, this caused stale DNS
entries leading to 502 errors for proxied requests.
Bumps version to 2.2.3
2026-01-08 16:25:05 +01:00
0ab8cbde7f
chore: bump version to 2.2.2
...
Includes fix for nginx backend port alignment (3001 → 3000) that caused
502 errors on root path in production Docker deployments.
2026-01-08 15:46:41 +01:00
1931d73b60
fix: resolve branding display issues and invitation parsing errors
...
Fixes #84 - Logo and favicon not displaying on branding page and galleries
Fixes #85 - Invitations showing undefined expiresAt causing parseISO errors
Changes:
- Fix nginx.conf: Add ^~ modifier to /uploads location to prioritize proxy over static file matching
- Fix vite.config.ts: Add /uploads proxy for development environment
- Fix BrandingPage.tsx: Include logo_url from branding settings instead of expecting it from theme
- Fix adminUsers.js: Add transformInvitation() to convert snake_case DB fields to camelCase API response
- Fix publicSettings.js: Add branding_hide_powered_by to public settings API response
- Update README.md: Mark Multiple Administrators feature as implemented
- Bump version to 2.2.1
2026-01-08 13:56:02 +01:00
paul
bce5f749b1
Merge remote-tracking branch 'upstream/main'
Build and Push Docker Images / build-backend (push) Failing after 13m5s
Build and Push Docker Images / build-frontend (push) Failing after 2m55s
Build and Push Docker Images / summary (push) Successful in 3s
2025-11-25 22:43:48 +02:00
14c4bc17f3
Fix security vulnerabilities detected by Trivy
...
- CVE-2025-64756: glob CLI command injection - added override to use glob ^11.1.0
- CVE-2025-13466: body-parser DoS - added override to use body-parser ^2.2.1
- CVE-2025-64718: js-yaml prototype pollution - updated to js-yaml ^4.1.1
- BusyBox vulnerabilities (netstat, tar) - added apk upgrade to all Dockerfiles
Changes:
- backend/package.json: Updated js-yaml, added overrides for glob, body-parser
- frontend/package.json: Added overrides for glob, js-yaml
- All Dockerfiles: Added 'apk upgrade --no-cache' to get latest security patches
- backend/Dockerfile.dev: Updated from node:18-alpine to node:20-alpine
2025-11-25 20:35:59 +00:00
paul
a971eee7b9
Merge remote-tracking branch 'origin/main'
Build and Push Docker Images / build-frontend (push) Has been cancelled
Build and Push Docker Images / summary (push) Has been cancelled
Build and Push Docker Images / build-backend (push) Has started running
2025-11-25 22:03:02 +02:00
paul
8e8dd358bf
Merge remote-tracking branch 'upstream/main'
2025-11-25 22:02:23 +02:00
f29e9db99d
chore: bump version to 1.1.15 (backend + frontend)
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
2025-10-29 11:30:46 +00:00
paul
69538b86ea
Fix mobile overlay and deps per #43
Test and Lint / backend-test (pull_request) Successful in 1m24s
Test and Lint / frontend-test (pull_request) Successful in 1m59s
continuous-integration/drone/pr Build is passing
2025-10-29 12:19:43 +01:00
paul
f6f1c31369
Fix mobile overlay and deps per #43
continuous-integration/drone/pr Build is failing
Test and Lint / backend-test (pull_request) Successful in 2m10s
Test and Lint / frontend-test (pull_request) Successful in 2m0s
2025-10-29 11:11:53 +01:00
b76e45cb54
chore: bump version to 1.1.14 (backend + frontend)
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
2025-10-20 12:41:34 +00:00
github-actions[bot]
paul