Version 5.1.2 - Fixes CSP for redirection

What's Changed

• Bump dependencies with Vite 5 & prevent some more type errors by @QuentiumYT in #2238
• make JS invariant by @ildyria in #2241

New Contributors

• @QuentiumYT made their first contribution in #2238

Full Changelog: v5.1.1...v5.1.2

Version 5.1.1 - Dropbox, Download buttons & Improved privacy

This minor version adds the ability to redirect when using old links such as https://lychee.test/#albumID/photoID.
To enable this add LEGACY_V4_REDIRECT=true in your .env.

What's Changed

• Bump vite from 4.5.1 to 4.5.2 by @dependabot in #2216
• Fix Diagnostics not visible when migrations are pending by @ildyria in #2210
• Fix import from Dropbox from Livewire side by @ildyria in #2217
• Fix upload on smart albums by @ildyria in #2218
• Fix search broken when hitting albums by @ildyria in #2219
• Add back Download and full size in photo view. by @ildyria in #2220
• Anonymize the paths in the diagnostics by @ildyria in #2226
• Fix title not being updated by @ildyria in #2225
• Add redirection for legacy links by @ildyria in #2227
• Add missing secure header for redirection by @ildyria in #2232
• Version 5.1.1 by @ildyria in #2231

Full Changelog: v5.1.0...v5.1.1

Version 5.1.0 - Oauth supported for major providers.

What's Changed

• Also load Thumb/Thumb2x as fail-over when Small does not exist by @ildyria in #2197
• display owner names instead of Shared Albumns by @ildyria in #2201
• add fallback on small2x for header if medium does not exists by @ildyria in #2199
• Improve token guard to not crash when provided with Basic Auth by @ildyria in #2193
• Improve diagnostics with count of thumbs that can be regenerated by @ildyria in #2200
• Fixes star/unstar on right click by @ildyria in #2204
• Oauth is now available by @ildyria in #2190
• version 5.1.0 by @ildyria in #2205

Full Changelog: v5.0.3...v5.1.0

Version 5.0.3 - Fixes, sorting per sub album and more

What's Changed

• fix #2126 by @ildyria in #2127
• Avoid more issues because people can't read release notes... by @ildyria in #2124
• Description should be desc for overlay by @ildyria in #2135
• Provide the ability to change the sorting of sub album per album (Livewire only). by @ildyria in #2128
• better diagnostics by @ildyria in #2142
• fix Russian about. by @ildyria in #2143
• Fix Russian again by @ildyria in #2157
• Fix symbolic urls by @ildyria in #2159
• Update Readme, add theme repository, optimize ImageMagick by @tinohager in #2161
• Fix custom.js not being loaded by @ildyria in #2170
• Fix uploading large number of images fails with 429 by @ildyria in #2169
• Remove text-neutral for easier configuration of themes by @ildyria in #2171
• Add compact view for albums by @ildyria in #2153
• Fix WebAuthn not working by @ildyria in #2155
• fix QR code by @ildyria in #2177
• Fix livewire not working on directory folders by @ildyria in #2150
• Allow different aspect ratios for album thumbs (+ per album setting) by @ildyria in #2138
• Improve diagnostics by @ildyria in #2181
• Fix double f in sidebar by @ildyria in #2187
• Add notify toast when updating user by @ildyria in #2179
• Fix errors on access rights by @ildyria in #2180
• Fix back button on unlock page. by @ildyria in #2178
• Add left-right for login button + add custom go Home button by @ildyria in #2185
• make APP_URL optional again by @ildyria in #2182
• version 5.0.3 by @ildyria in #2183

New Contributors

• @tinohager made their first contribution in #2161

Full Changelog: v5.0.2...v5.0.3

Version 5.0.2 - Fix SQL injection

IF YOU ARE UPGRADING FROM VERSION 4, DO MAKE SURE YOU READ THE RELEASE NOTES OF V5.0.0.

See here.

Security advisories

See here for more details: GHSA-rjwv-5j3m-p5x4

What's Changed

• Fixes hover (left-right) preventing clicks on volume etc buttons + fix frame button by @ildyria in #2116
• Fix #2118 - Fix drag upload bug by @maoxian-1 in #2119
• Fix SQL Injection + v5.0.2 by @ildyria in #2123

New Contributors

• @maoxian-1 made their first contribution in #2119

Full Changelog: v5.0.1...v5.0.2

Version 5.0.1 - Fixing reverse proxy upload and other stuff

IF YOU ARE UPGRADING FROM VERSION 4, DO MAKE SURE YOU READ THE RELEASE NOTES OF V5.0.0.

See here.

What's Changed

• Add back blurred property by @ildyria in #2090
• Forgotten attribute of the canEdit function by @ildyria in #2091
• Fix 2095 : redirection not functioning on album creation. by @ildyria in #2101
• Better diagnostics for APP_URL and LYCHEE_UPLOAD_URL by @ildyria in #2105
• Fix unlock album component wrongly selected. by @ildyria in #2108
• Fix #2096 - Remove U2F from left menu when user is not allowed to modify their account. by @ildyria in #2107
• force https at the boot level instead of in the route files by @ildyria in #2110
• Remove path from query string via middleware by @mashb1t in #2112
• More checks for potential upload bugs by @ildyria in #2111
• Modify post-merge script to reflect 5.0.0 build changes by @TwizzyDizzy in #2109

New Contributors

• @mashb1t made their first contribution in #2112
• @TwizzyDizzy made their first contribution in #2109

Full Changelog: v5.0.0...v5.0.1

Version 5.0.0 - New front-end

BREAKING CHANGE IN BUILD STEPS

If you are using git clone, you will need to use npm to build the front-end:

1. composer install --no-dev
2. php artisan migrate
3. npm install
4. npm run build

Those files are however provided in the release zip file.

Furthermore, proper definition of APP_URL is now required.

Changes from v4.13.0

• new #2031 : improved honeypot logic & add more honey by @ildyria.
• new #2033 : map providers are now specified in an Enum by @ildyria.
• fixes #2041 : Delete existing user permissions associated by @ildyria.
• new #2066 : Add optimize database call by @ildyria.
• fixes #2069 : Adds missing space separator in Ghostbuster command advice by @HorlogeSkynet.
• new #2071 : Drops support for singular public photos in search. by @ildyria.
• new #2060 : Bye bye PHP 8.1, long live PHP 8.2 by @ildyria.
• new #2072 : Add configuration check between int and positive (>0) by @ildyria.

Changes included in the new Front-end

• fixes ♯199 : Depreciated dependencies cries for a new frontend. #199

  Complete rewrite of the front-end using latest technologies. Moving to a TALL stack: Tailwind, Alpinejs, Livewire, Laravel.

• new #12 : Shared albums: policy

  Complete new implementation of sharing and access rights.

• new #383 : Allow other users to upload to shared albums

  See #12

• new #725 : Login on direct album url if not logged in and album needs it

  Proper implementation with the new frontend

• new #748 : UI/UX: give more information about the capabilities given to new users in the users page
• fixes #828 : Album name not correct displayed in confirmation popup when moving a newly created album
• new #857 : Support for very large uploads by chunking
• fixes #1053 : Public album is not and can not be configured to be public #1053

  BREAKING CHANGE: The public smart album has been removed. Pictures are no longer made public singular.

• new #1211 : Date/Time display options

  Date/Time format are now configurable in the settings per location (sidebar, panel etc.)

• new #1249 : header text for the gallery

  Description of each album is directly readable at the top and support markdown.

• new #1189 : Multiline descriptions with markdown support for images and albums

  Similar functionalities have been added for pictures too.

• new #1253 : Change album's Top Right menu behavior when selecting some pictures

  Top right action menu behaviour has enhanced to increase visibility and intent in the album view.
  It now depends of the selected elements.

• new #1462 : Access Rights management: Users and Albums

  Major refactoring the access rights, user can now give read, upload, edit, delete access to others.

• fixes #1676 : Unable to open sidebar, can't navigate away from log/diagnostic/setting page
• new #1704 : Add real links to albums

  No longer use fragments, as a results links are properly clickable.

• fixes #1720 : Download button is visible and does not support download rights yet.
• fixes #1732 : Consistent URLs when Landing Page is disabled.

  url have been made consisten accross the board.

• fixes #1744 : UX broken on version 4.7.0 for Safari iPhone

  New front-end will need more testing.

• new #1825 : Change accent color

  With the use of tailwindcss this is now easier to produce.

• new #1891 : Login popup appears if no albums created
• fixes #1948 : Internal server error on photo upload (permissions?)

  No longer applicable due to new front-end

• fixes #1973 : The CSS tweaks to disable auto zoom in/out no longer work #1973

  No longer applicable due to new front-end

• new #1989 : Add search / filter for 'Move' destination album list
• new #2011 : Album Delete Confirmation

  deletion is now hidden in a danger zone.

• fixes #2050 : When trying to open a password protected shared album, no password prompt is shown
• fixes #2051 : Photo Download not work - UnauthorizedException
• fixes #2058 : Insufficient privilieges when opening the "Share album" dialog as a regular user
• fixes #2068 : Album allow public upload but disallow deletion

  Part of this is now available, user can give upload access to other users while preventing deletion.
  The public part is not taken in consideration as this is too much of a security risk.

• new ♯104 : Rework Sharing Dialog in Settings

  Sharing page only provide an overview, sharing is now done at the album level.

• new ♯166 : Add album description between the header and the pictures
• new ♯268 : Css is too complex to permit anyone to create new theme

  We now use tailwindcss, which makes it easier to create a unified theme.

• new ♯312 : Make login dialog more prominent, auto-show login dialog if necessary, hide empty smart folders for anonymous users
• fixes ♯343 : Use proper URL instead of # fragments.
• fixes ♯344 : a are now correct links/interactive
• fixes ♯373 : Left menu is now working correctly
• new #2078 : Diagnostics: Info are displayed in blue by @ildyria
• new #2079 : Add option for thumbs overlay: none|hidden|always by @ildyria

Full Changelog: v4.13.0...v5.0.0

Version 5.0.0 - New front-end

Changes from v4.13.0

• new #2031 : improved honeypot logic & add more honey by @ildyria.
• new #2033 : map providers are now specified in an Enum by @ildyria.
• fixes #2041 : Delete existing user permissions associated by @ildyria.
• new #2066 : Add optimize database call by @ildyria.
• fixes #2069 : Adds missing space separator in Ghostbuster command advice by @HorlogeSkynet.
• new #2071 : Drops support for singular public photos in search. by @ildyria.
• new #2060 : Bye bye PHP 8.1, long live PHP 8.2 by @ildyria.
• new #2072 : Add configuration check between int and positive (>0) by @ildyria.

Changes included in the new Front-end

• fixes ♯199 : Depreciated dependencies cries for a new frontend. #199

  Complete rewrite of the front-end using latest technologies. Moving to a TALL stack: Tailwind, Alpinejs, Livewire, Laravel.

• new #12 : Shared albums: policy

  Complete new implementation of sharing and access rights.

• new #383 : Allow other users to upload to shared albums

  See #12

• new #725 : Login on direct album url if not logged in and album needs it

  Proper implementation with the new frontend

• new #748 : UI/UX: give more information about the capabilities given to new users in the users page
• fixes #828 : Album name not correct displayed in confirmation popup when moving a newly created album
• new #857 : Support for very large uploads by chunking
• fixes #1053 : Public album is not and can not be configured to be public #1053

  BREAKING CHANGE: The public smart album has been removed. Pictures are no longer made public singular.

• new #1211 : Date/Time display options

  Date/Time format are now configurable in the settings per location (sidebar, panel etc.)

• new #1249 : header text for the gallery

  Description of each album is directly readable at the top and support markdown.

• new #1189 : Multiline descriptions with markdown support for images and albums

  Similar functionalities have been added for pictures too.

• new #1253 : Change album's Top Right menu behavior when selecting some pictures

  Top right action menu behaviour has enhanced to increase visibility and intent in the album view.
  It now depends of the selected elements.

• new #1462 : Access Rights management: Users and Albums

  Major refactoring the access rights, user can now give read, upload, edit, delete access to others.

• fixes #1676 : Unable to open sidebar, can't navigate away from log/diagnostic/setting page
• new #1704 : Add real links to albums

  No longer use fragments, as a results links are properly clickable.

• fixes #1720 : Download button is visible and does not support download rights yet.
• fixes #1732 : Consistent URLs when Landing Page is disabled.

  url have been made consisten accross the board.

• fixes #1744 : UX broken on version 4.7.0 for Safari iPhone

  New front-end will need more testing.

• new #1825 : Change accent color

  With the use of tailwindcss this is now easier to produce.

• new #1891 : Login popup appears if no albums created
• fixes #1948 : Internal server error on photo upload (permissions?)

  No longer applicable due to new front-end

• fixes #1973 : The CSS tweaks to disable auto zoom in/out no longer work #1973

  No longer applicable due to new front-end

• new #1989 : Add search / filter for 'Move' destination album list
• new #2011 : Album Delete Confirmation

  deletion is now hidden in a danger zone.

• fixes #2050 : When trying to open a password protected shared album, no password prompt is shown
• fixes #2051 : Photo Download not work - UnauthorizedException
• fixes #2058 : Insufficient privilieges when opening the "Share album" dialog as a regular user
• fixes #2068 : Album allow public upload but disallow deletion

  Part of this is now available, user can give upload access to other users while preventing deletion.
  The public part is not taken in consideration as this is too much of a security risk.

• new ♯104 : Rework Sharing Dialog in Settings

  Sharing page only provide an overview, sharing is now done at the album level.

• new ♯166 : Add album description between the header and the pictures
• new ♯268 : Css is too complex to permit anyone to create new theme

  We now use tailwindcss, which makes it easier to create a unified theme.

• new ♯312 : Make login dialog more prominent, auto-show login dialog if necessary, hide empty smart folders for anonymous users
• Fixes ♯343 : Use proper URL instead of # fragments.
• Fixes ♯344 : a are now correct links/interactive
• Fixes ♯373 : Left menu is now working correctly

Version 4.13.0 - Stability & dependency updates

What's Changed

• Unify photoId to photoID and albumId to albumID when found by @ildyria in #2017
• Unique constraint for config keys by @qwerty287 in #2018
• Update composer (include breaking) by @qwerty287 in #2019
• Cleaning unused files + sync front end by @ildyria in #2020
• Fix complaint due to type casting by @ildyria in #2024
• License as enum type by @ildyria in #2025
• Minor changes in prevision for Livewire. by @ildyria in #2026
• version 4.13.0 by @ildyria in #2027

Full Changelog: v4.12.0...v4.13.0

Version 4.12.0 - Fixes & minor API change

What's Changed

• Fix missing album decorations by @evoludolab in #2003
• fix max/min_taken_at by @evoludolab in #2005
• fix missing left-right button on smart albums by @ildyria in #2008
• Better diagnostics by @ildyria in #2010
• Better support for future policies. by @ildyria in #2012
• Replace layout and overlay to proper Enum types by @ildyria in #2015
• v4.12.0 by @ildyria in #2016

Full Changelog: v4.11.1...v4.12.0