v1.13.0

📦 Release Notes

🚀 New Features

• Customization: Set the site name, description, and logo from the new customization section in admin settings, applied across the sidebar, navbar, browser tab, meta tags, and login pages. Defaults can be preset via CUSTOMIZATION_SITE_NAME, CUSTOMIZATION_SITE_DESCRIPTION, and CUSTOMIZATION_LOGO_URL. (#217)
• Quick Share Button: Copy a share link for your own images directly from the explore feed, collections, and the post viewer. (#219)
• User Content Removal: Admins can permanently purge a user account together with all of its content. Deleting a user now anonymizes their comments, revokes active sessions, and frees the identity for reuse. (#221)

🛠️ Improvements & Fixes

• Share Migration: Fixed a startup failure when migrating legacy shares on instances upgraded from older versions. (#220)
• Link Previews: Short links now embed the correct preview image when shared on social platforms. (#222)
• Title Flicker: The browser tab title no longer flickers during navigation.
• Settings Forms: Fixed an issue where settings forms could submit before the page was ready.
• Maintenance: Bumped PHP to 8.5.9 and Node to 24.18.1, slimmed down the FrankenPHP image, and refreshed project dependencies.

🙌 New Contributors

• @ItsOlegDm made their first contribution in #217

Full Changelog: v1.12.3...v1.13.0

v1.12.3

📦 Patch Notes

🛠️ Improvements & Fixes

• Comment Pagination: Long comment threads now load in pages with an inline load-more divider.
• Allowed Upload Formats: Admins can restrict which image formats users are permitted to upload. (#215)
• Copy Link Formats: The image action bar can copy a share link as a direct URL, Markdown, BBCode, or HTML. (#199)
• Reorderable OAuth Providers: Drag and drop to set the order of sign-in providers.
• Comment Access Control: Comment viewing and creation are now enforced by proper authorization checks, including on the live comment stream.
• Share Attributes: Redesigned share attributes for finer control over how images are shared. (#216)
• TGA Uploads: TGA files reported under alternate MIME types are now accepted and converted to a supported format.
• UI/UX: Refreshed empty states, the sidebar storage usage card, the uploader, and the history view, with fixes for action bar overflow, table-view layout, and selection.
• Maintenance: Migrated base images to hardened non-dev Alpine, bumped Node to 24.18.0 and PHP to 8.5.8, upgraded i18n tooling, and refreshed project dependencies.

Full Changelog: v1.12.2...v1.12.3

v1.12.2

📦 Patch Notes

🛠️ Improvements & Fixes

• SMB Storage: Fixed validation of SMB share settings when saving. (#213)
• Login Sessions: Login sessions now persist across browser restarts. (#214)
• Uploads: Uploading more images now retains the active collection and tags. (#212)
• History: Reassigned images now update in place without resetting your pagination position. (#212)
• Stability: Resolved a cold-start race in the Redis connection during sign-in and adjusted service startup ordering for more reliable boots.
• Maintenance: Replaced the JWT framework with the maintained jwt-library and jwt-bundle, and updated project dependencies.

Full Changelog: v1.12.1...v1.12.2

v1.12.1

📦 Patch Notes

🛠️ Improvements & Fixes

• Upload Page: General UI/UX improvements and fixes across the upload page.
• Volume Permissions: Fixed a permissions issue affecting mounted volumes on some NAS systems.
• Maintenance: Patched dependencies for security advisories across the API (jwt-framework, Guzzle, PSR-7, JMESPath) and client (Babel), and refreshed project dependencies.

Full Changelog: v1.12.0...v1.12.1

v1.12.0

📦 Release Notes

🚀 New Features

• Chunked Uploads: Large images are now uploaded in small chunks, keeping requests lightweight and making large uploads reliable behind proxies with request size limits. Chunk size is configurable via IMAGE_CHUNK_SIZE (default 2M). (#203)
• Multi-Upload Collections: Multiple uploads are no longer grouped into a collection automatically. After upload, you can choose to create a collection from them with a single button press. (#204)
• Per-Provider SSO Policies: Set registration and approval policies individually for each SSO provider, with the option to inherit the global defaults. (#208)
• Per-User EXIF Control: Users can override the global EXIF metadata stripping setting for their own uploads. (#207)

🛠️ Improvements & Fixes

• Upload Progress: Upload progress now reflects the actual transfer state, thanks to chunked uploads.
• EXIF Stripping: Fixed metadata stripping to preserve image orientation and ICC color profiles, so HDR images now display correctly. Only private data is removed.
• History Table: Fixed the table view overflowing on narrow screens.
• Image Preview: Image visual effects no longer bleed into the action button row.
• UI/UX: General interface and usability improvements across the app.
• Stability & Performance: General stability and performance improvements, including safer concurrent collection updates.
• Maintenance: Upgraded PHP to 8.5.7, Symfony to 8.1, and Alpine to 3.24; dependencies updated to their latest versions.

Full Changelog: v1.11.6...v1.12.0

v1.11.6

📦 Patch Notes

🛠️ Improvements & Fixes

• Animated Image Previews: Animated images now play correctly on the explore and collection pages instead of freezing on the first frame.
• Maintenance: Updated project dependencies.

Full Changelog: v1.11.5...v1.11.6

v1.11.5

📦 Patch Notes

🛠️ Improvements & Fixes

• Tag Tree View: Added a tree-like view mode for tags.
• Action Trigger UI: Improved action trigger UI consistency.
• SMB Stability: Fixed libsmbclient thread-safety crashes under FrankenPHP. (#196)
• Maintenance: Upgraded the Node.js runtime to 24.16.0 and SvelteKit to 2.61.1.

Full Changelog: v1.11.4...v1.11.5

v1.11.4

📦 Patch Notes

🚀 New Features

• Reset Password CLI Command: Reset a user's password directly from the command line, useful for recovering access without UI sign-in. (#194)
• Cross-Origin Image Embedding: Images can now be embedded across origins, so they render correctly when hot-linked from external sites and apps. (#86)

🛠️ Improvements & Fixes

• Maintenance: Upgraded Svelte to 5.55.9 and refreshed project dependencies.

Full Changelog: v1.11.3...v1.11.4

v1.11.3

📦 Patch Notes

🚀 New Features

• Granular Guest Access Control: Share access controls now distinguish between explore mode, collection shares, and direct image links. (#193)
• Collection View Preferences: Per-collection controls for page size and load strategy, persisted across visits. (#174)

🛠️ Improvements & Fixes

• Collection UI/UX: Switched the collection view to a masonry layout for a denser, more balanced presentation, and polished the collection share button.
• Richer Share Listing: The share listing page now surfaces more attributes at a glance.
• Tags Table Sorting: Tags table now supports sorting by name. (#139)
• Unauthorized Redirects: Simplified the unauthorized handler and corrected redirect logic after auth failures.
• Maintenance: Upgraded Svelte to 5.55.7 and refreshed project dependencies.

Full Changelog: v1.11.2...v1.11.3

v1.11.2

📦 Patch Notes

🚀 New Features

• Configurable Short URL Length: Choose the length of short URLs used for sharing from the settings page. (#190)

🛠️ Improvements & Fixes

• Collection Image Link Revocation: Signed image URLs from inside a shared collection now honor the parent share's password and expiration state. A URL saved while the share was accessible no longer serves the image after the owner password-protects or expires the share, ensuring revocation also covers internal direct image links from the collection that someone may have saved.
• Revocable Browser Cache: Share-gated image responses force browser revalidation so revocation lands immediately instead of being shadowed by long-lived cache.
• Stale Share Button UI: Unpublishing a collection share correctly reverts the UI to "Share" instead of continuing to show "Manage".
• Fresh Collection State on Navigation: Revisiting a collection page refetches share state, reflecting changes made elsewhere without needing a hard page reload.
• Open in New Tab: Opening a collection-scoped image in a new tab now preserves the full signed URL instead of stripping the access signature.
• Docker JWT Keys: Fixed JWT key access on bind-mounted volumes in certain setups (e.g. running on a NAS) where host filesystem permissions previously blocked the container from reading the mounted keys.
• Maintenance: Upgraded PHP runtime to 8.5.6 and refreshed project dependencies.

Full Changelog: v1.11.1...v1.11.2