All pull requests

Pull requests

• 🛡️ Sentinel: [HIGH] Fix memory exhaustion (DoS) via unbounded Buffer.from

  #779·ralksta opened Sep 29, 2026Owner·

  ·
  1

• test: keep the unit suite out of the checkout's content/

  #778·ralksta opened Sep 28, 2026Owner·

  ·

• fix(i18n): French singular for 0, no plural noun at 1 in the selection subject

  #777·ralksta opened Sep 28, 2026Owner·

  ·

• fix(journal): timezone-independent dates, one format on index and entry, stable order

  #776·ralksta opened Sep 28, 2026Owner·

  ·

• perf: read the journal and the site nav once per request

  #775·ralksta opened Sep 28, 2026Owner·

  ·

• security: cap concurrent ZIP downloads per client and close stalled ones

  #774·ralksta opened Sep 28, 2026Owner·

  ·

• fix(proofing): keep the viewer open when its photo leaves the filtered list

  #773·ralksta opened Sep 28, 2026Owner·

  ·

• fix(routing): answer paths deeper than two segments with a 404

  #772·ralksta opened Sep 28, 2026Owner·

  ·

• fix(contact): stamp the form's start with the server's clock

  #771·ralksta opened Sep 28, 2026Owner·

  ·

• perf: load the proofing UI only on pages where proofing is on

  #770·ralksta opened Sep 28, 2026Owner·

  ·

• security: answer password attempts for unprotected keys like wrong ones

  #769·ralksta opened Sep 28, 2026Owner·

  ·

• fix(admin): keep edits made while a save is in flight

  #768·ralksta opened Sep 28, 2026Owner·

  ·

• security: render only site-signed text on the share card

  #767·ralksta opened Sep 28, 2026Owner·

  ·

• perf: load the essay map block's Leaflet wrapper and stylesheet on demand

  #766·ralksta opened Sep 28, 2026Owner·

  ·

• security: keep locked journal entry titles off the password gate

  #765·ralksta opened Sep 28, 2026Owner·

  ·

• fix(admin): a page rename or delete that fails to update the menu still succeeds

  #764·ralksta opened Sep 28, 2026Owner·

  ·

• fix(proofing): count only this album's photos in the selection

  #763·ralksta opened Sep 28, 2026Owner·

  ·

• perf: one image URL per asset and Immich tier

  #762·ralksta opened Sep 28, 2026Owner·

  ·

• perf: keep parsed journal and page listings while the files are unchanged

  #761·ralksta opened Sep 28, 2026Owner·

  ·

• fix(admin): keep a failed Publish as an unsaved change in the page editor

  #760·ralksta opened Sep 28, 2026Owner·

  ·

• security: keep locked journal entries out of the sitemap

  #759·ralksta opened Sep 28, 2026Owner·

  ·

• fix(proofing): hold the selection ZIP until pending hearts are saved

  #758·ralksta opened Sep 28, 2026Owner·

  ·

• fix(admin): version content files by their bytes on read as well as on save

  #757·ralksta opened Sep 28, 2026Owner·

  ·

• perf: read the config once per Immich client operation

  #756·ralksta opened Sep 28, 2026Owner·

  ·

• security: leave offline subpages out of the map, media and download checks

  #755·ralksta opened Sep 28, 2026Owner·

  ·