All pull requests

Pull requests

• fix(server): reject cross-origin requests that use the session cookie

  changelog:securitydocumentation🗄️server
  #33288·bo0tzz opened Nov 13, 2026Member·

  ·
  2

• test(web): run medium tests with helmet headers

  changelog:skip🗄️server
  #33285·bo0tzz opened Nov 13, 2026Member·4/4·

  ·
  1

• feat: credit additional users in release notes

  backport:release/v3.4changelog:skip
  #33283·bo0tzz opened Nov 13, 2026Member·

  ·

• fix: render storage template previews on the server

  changelog:bugfix🗄️server🖥️web
  #33282·bo0tzz opened Nov 13, 2026Member·

  ·
  1

  1

• fix(server): remove includeSubDomains from hsts

  changelog:bugfix
  #33279·bo0tzz opened Nov 13, 2026Member·

  ·

• chore(e2e): enable helmet

  changelog:skip
  #33277·bo0tzz opened Nov 13, 2026Member·3/4·

  ·

• fix(server): remove upgrade-insecure-requests from csp

  changelog:bugfixdocumentation
  #33276·bo0tzz opened Nov 13, 2026Member·2/4·

  ·
  3

• fix(web): hash external styles for csp

  backport:release/v3.4changelog:bugfix
  #33275·bo0tzz opened Nov 13, 2026Member·1/4·

  ·
  1

• fix(server): apply editor rotate/mirror edits to person thumbnails

  🗄️server
  #33270·Nardann opened Nov 13, 2026·7 of 10 tasks·

  ·
  1

• fix(server): drop range=pc on vaapi

  backport:release/v3.4changelog:bugfix🗄️server
  #33262·mertalev opened Nov 12, 2026Member·

  ·
  1

• fix!: strict birthdate validation

  changelog:breaking-change🗄️server🖥️web
  #33250·danieldietzler opened Nov 12, 2026Member·

  ·
  1

• fix(mobile): keep assets selected after upload

  changelog:bugfix📱mobile
  #33242·santoshakil opened Nov 12, 2026Member·

  ·
  1

  1

• fix: integrity report downloads

  backport:release/v3.4changelog:bugfix🖥️web
  #33239·danieldietzler opened Nov 12, 2026Member·

  ·
  1

• test(server): cover HEIF security-limit thumbnail regression

  🗄️server
  #33232·alextyhwang opened Nov 12, 2026·12 of 13 tasks·

  ·
  1

• feat: workflow tag filter children matching

  changelog:enhancement🗄️server🖥️web
  #33213·danieldietzler opened Nov 11, 2026Member·

  ·
  1

  1

• fix(web): remove accidental raw json tooltip on large file cards

  changelog:bugfix🖥️web
  #33190·abdul-karim-mia opened Nov 11, 2026Contributor·7 tasks done·

  ·
  1

  3

• chore(native): use mp4parse's master branch

  changelog:skip
  #33183·mertalev opened Nov 10, 2026Member·

  ·
  1

• fix(mobile): add background uploads to synced albums

  changelog:bugfix📱mobile
  #33162·santoshakil opened Nov 10, 2026Member·

  ·
  1

  9

• chore(npm): update dependency postgres (3.4.9 → 4.1.0)

  changelog:skipdependenciesrenovate
  #33153·renovate[bot] opened Nov 10, 2026Bot·1 task·

  ·

• chore: update flutter timezone dep

  changelog:skip📱mobile
  #33142·shenlong-tanwen opened Nov 9, 2026Member·

  ·
  1

• Update warning message in backup-and-restore.md

  documentation
  #33087·madisoncfallin opened Nov 8, 2026·9 tasks done·

  ·
  3

• fix (mobile): improve timeline scroll behaviour

  📱mobile
  #33059·goalie2002 opened Nov 7, 2026Contributor·8 of 12 tasks·

  ·
  1

  6

• fix(server): repair truncated motion video files on metadata refresh …

  🗄️server
  #33024·tech00exploere opened Nov 6, 2026Contributor·14 tasks done·

  ·
  1

  2

• fix(web): keep screen awake during video playback

  changelog:bugfix🖥️web
  #32988·alextran1502 opened Nov 5, 2026Member·

  ·
  1

• fix(mobile): avoid re-hashing the library on upgrade and catch later in-place rewrites

  📱mobile
  #32932·fabxyz opened Nov 3, 2026Contributor·8 of 11 tasks·

  ·
  1