v0.9.0

What's Changed

• Add JSON API with per-user bearer tokens by @kylebavis in #59
• Drop BCrypt by @kylebavis in #60

Full Changelog: v0.8.7...v0.9.0

v0.8.7

What's Changed

• Bump gallery-dl from 1.32.12 to 1.32.13 by @dependabot[bot] in #58

Full Changelog: v0.8.6...v0.8.7

v0.8.6

What's Changed

• Trim over-engineering found by a whole-repo audit by @kylebavis in #56

Full Changelog: v0.8.5...v0.8.6

v0.8.5

What's Changed

• Trim per-request database work by @kylebavis in #55

Full Changelog: v0.8.4...v0.8.5

v0.8.4

What's Changed

• Keep perceptual hashes in memory between requests by @kylebavis in #52
• Suggest tags that contain the typed text by @kylebavis in #54
• Serve tag autocomplete from indexes by @kylebavis in #53

Full Changelog: v0.8.3...v0.8.4

v0.8.3

What's Changed

• Confirm destructive forms without inline handlers by @kylebavis in #50
• Shrink image deltas and serve precompressed static assets by @kylebavis in #51

Full Changelog: v0.8.2...v0.8.3

v0.8.2

What's Changed

• Fix passkey sign-in: stop cookie auth redirecting the JSON reply away by @kylebavis in #49

Full Changelog: v0.8.1...v0.8.2

v0.8.1

What's Changed

• Complete the credential JSON a password manager hands back by @kylebavis in #48

Full Changelog: v0.8.0...v0.8.1

v0.8.0

What's Changed

• Add passkey support, and link the duplicate-import message to the post by @kylebavis in #47

Full Changelog: v0.7.0...v0.8.0

v0.7.0

What's Changed

• update readme to trim some overly-flowery language by @kylebavis in #45
• Add security headers, login throttling and a CI vulnerability gate by @kylebavis in #46

Full Changelog: v0.6.2...v0.7.0