diff --git a/src/content/docs/docs/getting-started/releases.md b/src/content/docs/docs/getting-started/releases.md index ff0cce55..18cfc594 100644 --- a/src/content/docs/docs/getting-started/releases.md +++ b/src/content/docs/docs/getting-started/releases.md @@ -11,6 +11,41 @@ sidebar: ## Version 7 + +### v7.10.0 + +#### Global password, WebP, Video loop and security fixes + +What? A new release already? How comes? Well... @WojciechCiemski has been busy poking small holes in our code, and we gotta patch them up. + +However, this does not mean that the release is only about fixes; we also have some exciting new features to share. For starters, we added +the possibility to set a global password on your full Lychee instance. Done with having the same password for each albums, one password to rule them all. +Of course, if you have an account, you can always login directly and bypass the screen. + +We also have our first contribution from @NikitaTH. They added the possibility to configure the amount of compression on the size variants and also the support +for WebP format. This is disabled by default to keep the existing behavior. Just know that it is now an option. + +We got a small request to add support for the video loop attribute, which has now been implemented. Furthermore, due to the discoveries for @WojciechCiemski, +we have decided to separate the EDIT rights from the MOVE rights. A smart user with EDIT rights in an album without the full size access could move the photos +to an album they owned and thus gained access to the original. Fun trick right? So to fix this, we added the CAN_MOVE rights which is now required to move/merge albums (and photos). We also tighten the requirement on the destinations albums. This makes the permissions a bit stricter so that users cannot bypass restrictions as easily. + +* `new` #4799 : Global password gallery setting by @ildyria. +* `new` #4790 : Configurable size variant format (WebP) and lossless quality by @NikitaTH. +* `new` #4787 : Add CAN_MOVE rights by @ildyria. +* `new` #4807 : Add support for video loop attribute by @ildyria. +* `fix` #4789 : Strip completely at the php level to avoid xss by @ildyria. +* `fix` #4791 : block all IPv6-transition spellings that embed an internal IPv4 by @anzal1. +* `fix` #4798 : Fixes advisories crash when on internal network without internet access by @ildyria. +* `fix` #4804 : Avoid XSS in GPX tracks by @ildyria. +* `fix` #4806 : Fix dock being visible when user has not edit rights by @ildyria. +* `fix` #4805 : Avoid uploading a picture of another user and getting extra perks by @ildyria. +* `fix` #4808 : Fix video player? by @ildyria. + +#### New Contributors +* @anzal1 made their first contribution in https://github.com/LycheeOrg/Lychee/pull/4791 +* @NikitaTH made their first contribution in https://github.com/LycheeOrg/Lychee/pull/4790 + + ### v7.9.0 Released on September 25th, 2026 diff --git a/src/data/releases.ts b/src/data/releases.ts index cd5f6e83..0f501b69 100644 --- a/src/data/releases.ts +++ b/src/data/releases.ts @@ -8,6 +8,7 @@ export interface Release { // Release data extracted from releases.md export const releases: Release[] = [ + { version: 'v7.10.0', date: 'Sep 29, 2026', title: 'Global password, WebP, Video loop and security fixes', type: 'feature', highlights: ['Global password gallery setting', 'Configurable size variant format (WebP) and lossless quality', 'Various security and bug fixes'] }, { version: 'v7.9.0', date: 'Sep 25, 2026', title: 'Features and fixes', type: 'feature', highlights: ['Added support for S3 object prefixes', 'Kanidm OAuth Provider', 'Setting to show highest-quality image in full-screen viewer'] }, { version: 'v7.8.5', date: 'Sep 18, 2026', title: 'Fixes', type: 'bugfix', highlights: ['Fixes translations not applied'] }, { version: 'v7.8.4', date: 'Sep 17, 2026', title: 'Fixes', type: 'bugfix', highlights: ['Cover for locked albums', 'improved embeddings'] }, diff --git a/src/pages/support.astro b/src/pages/support.astro index bb3c36bd..24602dc5 100644 --- a/src/pages/support.astro +++ b/src/pages/support.astro @@ -424,6 +424,13 @@ const metadata = { alt: 'adrbogacz', }, }, + { + title: 'anzal1 (Anzal Husain Abidi)', + image: { + src:'https://avatars.githubusercontent.com/u/77688078?v=4', + alt: 'anzal1' + } + } ]} />