Was ist neu?
Aktuelle Beta- und Stable-Releases, automatisch aus den GitHub-Releases generiert.
Stand: 15. Sept. 2026Alle Release-Notes auf GitHub ↗
Aktuelles Stable-Release
v3.132.2
14. Sept. 2026- gallery: honour must_change_password on the admin preview (#1439) (#1441) (7b6614b)
Aktuelle Beta (main)
v3.132.3-beta.0
14. Sept. 2026- gallery: honour must_change_password on the admin preview (#1439) (d64728e)
Alle Releases
v3.132.3-beta.0
Beta14. Sept. 2026- gallery: honour must_change_password on the admin preview (#1439) (d64728e)
v3.132.2
Stable14. Sept. 2026- gallery: honour must_change_password on the admin preview (#1439) (#1441) (7b6614b)
v3.132.2-beta.0
Beta14. Sept. 2026- api: stop the roles fallback selecting the column that triggered it (#1436) (e861306)
- auth: keep must_change_password in the roles-join fallback (#1434) (ced21fb)
v3.132.1
Stable14. Sept. 2026- Upgrading from 3.46.x is one-way and regenerates every gallery preview, so read the notes below before you update
- People in this gallery: face recognition on your own hardware, via an optional sidecar, off by default
- PicTransfer: cross-event file transfers with token-protected download links
- Admin SSO through OIDC, with role mapping and logout to your identity provider
- Editable roles and granular permissions, with the dangerous settings split out
- Gallery folders that contain their photos instead of filtering them
v3.132.1-beta.0
Beta14. Sept. 2026- archives: stop restore from dropping videos and rewriting the row (#1425) (d37c0c8)
v3.132.0-beta.0
Beta13. Sept. 2026- upload single files above the batch cap through the chunked API
- admin: upload single files above the batch cap through the chunked API (#1431) (c448572)
v3.131.8-beta.0
Beta12. Sept. 2026- frontend: allow blob: in the CSP media-src directive (#1427) (7d7ed04)
- gallery: keep the video controls reachable while paused, and go fullscreen on iOS (#1426) (03bc520)
v3.131.7-beta.0
Beta11. Sept. 2026- admin: keep header-style tiles from overflowing their cards (#1422) (7cd7654)
v3.131.6-beta.0
Beta11. Sept. 2026- gallery: cap how many cached zips rebuild at once in the background (#1418) (98d2560)
v3.131.5-beta.0
Beta11. Sept. 2026- gallery: stop the pre-zip build leaking storage reads (#1402) (f094cc0)
v3.131.4-beta.0
Beta11. Sept. 2026- backend: bump sharp, nodemailer, multer, js-yaml, joi for security fixes (#1374) (f6b81fa)
- backend: contain and sanitize the SQLite restore source path (#1384) (316bcbd)
- backend: enforce event ownership on short URL deletion (#1379) (e290207)
- backend: reject a replayed TOTP code within its validity window (#1389) (cdde937)
- backend: require actor to hold every permission of a role they grant (#1378) (59ea83c)
- backend: shorten payment-check token TTL and notify admin on use (#1385) (e324791)
v3.46.13
Stable11. Sept. 2026- admin: keep header-style tiles from overflowing their cards (stable) (#1423) (82b412f)
- backend: bump sharp, nodemailer, multer, js-yaml, joi for security fixes (stable) (#1375) (024ffed)
- backend: check the revocation store on gallery access (stable) (#1388) (b869de3)
- backend: contain and sanitize the SQLite restore source path (#1393) (b663f2a)
- backend: enforce event ownership on short URL deletion (#1394) (1abd42e)
- backend: reject a replayed TOTP code within its validity window (stable) (#1398) (33d6904)
v3.131.3-beta.0
Beta10. Sept. 2026- video: try metadata extraction and thumbnail generation independently (#1371) (a2bf1f6)
v3.46.12
Stable10. Sept. 2026- backup: honor the configured database-backup destination path (#1367) (3420745)
- video: try metadata extraction and thumbnail generation independently (#1372) (1316ed0)
v3.131.2-beta.0
Beta09. Sept. 2026- backup: honor the configured database-backup destination path (#1366) (15cd5ed)
v3.131.1-beta.0
Beta08. Sept. 2026- usage: explain and de-emphasize the pending-packet button lock (#1363) (9f4b9ba)
v3.131.0-beta.0
Beta08. Sept. 2026- add anonymous usage-reporting opt-in to the first-run wizard
- add product usage consent to the first-run wizard
- prompt existing admins once for usage reporting after an update
- setup: add anonymous usage-reporting opt-in to the first-run wizard (8d0c329)
- setup: add product usage consent to the first-run wizard (539f5db)
- usage: prompt existing admins once for usage reporting after an update (59ef2ee)
v3.130.2-beta.0
Beta08. Sept. 2026- enforce gallery access and consolidate gallery workflows (#1357) (f0e6d2d)
v3.130.1-beta.0
Beta08. Sept. 2026- images: probe and clean up preview tiers under the extension the encoder actually wrote (#1355) (acb25a9)
- images: single-flight lazy rendition generation and keep the old rendition during replacement (#1350) (c97341e)
- define security support across stable and main (#1351) (0e459b3)
- refresh repository support and community links (#1349) (f83cbe9)
v3.46.11
Stable08. Sept. 2026- align stable security and backport policy (#1352) (143c403)
v3.130.0-beta.0
Beta07. Sept. 2026- watch reference folders and import new files automatically
- external-media: watch reference folders and import new files automatically (#1345) (8cc7d7d)
- events: drop non-canonical keys from the event update before any check runs (#1346) (810801a)
v3.129.0-beta.0
Beta07. Sept. 2026- keep the editor toolbar in reach on long pages
- opt-in recoverable gallery passwords
- cms: keep the editor toolbar in reach on long pages (#1335) (d6a0c4a)
- security: opt-in recoverable gallery passwords (#1341) (fb9da72)
v3.128.0-beta.0
Beta07. Sept. 2026- expose the API rate limiter in the Security tab
- distinguish real edits and template delivery with v5 consent
- settings: expose the API rate limiter in the Security tab (#1338) (8017370)
- usage: distinguish real edits and template delivery with v5 consent (#1339) (5c1e38d)
- email: scrub gallery passwords from the sent-mail archive (#1340) (69754f8)
v3.127.2-beta.0
Beta07. Sept. 2026- security: correct the rate limiter defaults and how they are set (#1336) (9bbdca9)
v3.127.1-beta.0
Beta07. Sept. 2026- usage: stop WebKit collapsing the consent dialog to its header and footer (79eb6d7)
- usage: stop WebKit collapsing the consent dialog to its header and footer (9d18868)