Immutable
release. Only release title and notes can be modified.
What's Changed
馃彆 Features
- Strip completely at the php level to avoid xss by @ildyria in #4789
- Add CAN_MOVE rights by @ildyria in #4787
- fix(security): block all IPv6-transition spellings that embed an internal IPv4 by @anzal1 in #4791
- Configurable size variant format (WebP) and lossless quality by @NikitaTH in #4790
- Translations update from LycheeOrg - Weblate by @ildyria in #4793
- Refactor agentic to reduce the number of merge conflicts by @ildyria in #4796
- Fixes advisories crash when on internal network without internet access by @ildyria in #4798
- Global password gallery setting by @ildyria in #4799
- Avoid XSS in GPX tracks by @ildyria in #4804
- Fix dock being visible when user has not edit rights by @ildyria in #4806
- Avoid uploading a picture of another user and getting extra perks by @ildyria in #4805
- Add support for video loop attribute by @ildyria in #4807
- Fix video player? by @ildyria in #4808
- Version 7.10.0 by @ildyria in #4800
馃憭 Dependencies
- chore(deps): bump node from
dbaa92eto0b36e8cby @dependabot[bot] in #4810 - chore(deps): bump composer from
a5f59b9to9715c7fby @dependabot[bot] in #4812 - chore(deps): bump dunglas/frankenphp from
f92d81eto81231b5by @dependabot[bot] in #4813 - chore(deps): bump debian from
d7e1218toa99cfc5by @dependabot[bot] in #4811 - chore(deps): bump the actions-deps group with 4 updates by @dependabot[bot] in #4817
- chore(deps): bump the production-dependencies group with 6 updates by @dependabot[bot] in #4815
- chore(deps-dev): bump the development-dependencies group with 6 updates by @dependabot[bot] in #4816
New Contributors
Full Changelog: v7.9.0...v7.10.0
Contributors
ildyria, NikitaTH, and 2 other contributors