From 6880bd8da38c19aa3f3388b46b91a76ee4877cfd Mon Sep 17 00:00:00 2001 From: ildyria Date: Mon, 22 Jun 2026 19:46:03 +0200 Subject: [PATCH 1/2] Version 7.6.1 --- docs/releases.md | 23 +++++++++ src/components/widgets/Announcement.astro | 4 +- src/components/widgets/FeaturesList.astro | 6 +-- src/pages/get-supporter-edition.astro | 57 +++++++++++++++++++++-- src/pages/index.astro | 8 ++-- src/pages/roadmap.astro | 19 ++++---- src/pages/support.astro | 45 +----------------- src/types.d.ts | 1 + 8 files changed, 99 insertions(+), 64 deletions(-) diff --git a/docs/releases.md b/docs/releases.md index 2b6ea832..f4c4c0fc 100644 --- a/docs/releases.md +++ b/docs/releases.md @@ -30,6 +30,29 @@ ## Version 7 +### v7.6.1 + +Released on June 22nd, 2026 + +#### Auto rotation of the license key and hot-fixes + +This is a hotfix, but it brings a new feature. You can know create a auth token in keygen.lycheeorg.dev and use it in your .env file to automatically rotate your license key. +This is especially useful for our SE and Pro users who want to automate the license key rotation. No longer need to manually update that key when it expires, Lychee will do it for you. + +* `new` #4442 : Add auto rotation of the license key provided KEYGEN_API_KEY by @ildyria. +* `fix` #4450 : Add fallback if crypto.randomUUID() is not available by @ildyria. + > In rare cases where users were using Lychee on an ip without https, the upload would not work. + > This is now fixed. +* `fix` #4446 : Fix shared hosting tmp folder issue by @ildyria. + > In some shared hosting environments, the system tmp folder is not writable by the user. + > We provide an alternative temp directory in the storage folder which is writable by the user. +* `fix` #4448 : 10 unlock request per minute by @ildyria. + > A missing rate limit on unlock album was allowing to brute force the unlock code. We now limit the number of requests to 10 per minute. +* `fix` #4449 : Ensure that the user is able to see the photo they are setting as highlighted by @ildyria. + > Provided the attacker knew a photo id, and that the admin had set the configuration to allow highlighting photos without authentication, the attacker could set a photo as highlighted without being able to see it. This is now fixed. + +Thanks to @de3erve-hunter for reporting the brute-force and the highlight vulnerability. + ### v7.6.0 Released on June 17th, 2026 diff --git a/src/components/widgets/Announcement.astro b/src/components/widgets/Announcement.astro index 6fe4710c..ddfe1d45 100644 --- a/src/components/widgets/Announcement.astro +++ b/src/components/widgets/Announcement.astro @@ -10,8 +10,8 @@ >NEW Lychee 7.6.0 is now available! ยปLychee 7.6.1 is now available! ยป -
+

@@ -172,11 +173,11 @@ const getReleaseTypeBadge = (type: string) => {
-
7.6.0
+
7.6.1
Latest Version
-
123
+
124
Total Releases
@@ -192,7 +193,7 @@ const getReleaseTypeBadge = (type: string) => {

-
+
@@ -310,7 +311,7 @@ const getReleaseTypeBadge = (type: string) => {
-
+
@@ -325,21 +326,21 @@ const getReleaseTypeBadge = (type: string) => {
- +
{releases.map((release) => (
-
+
-
+
@@ -363,7 +364,7 @@ const getReleaseTypeBadge = (type: string) => {
    {release.highlights.map((highlight) => (
  • - + {highlight} diff --git a/src/pages/support.astro b/src/pages/support.astro index a4dffca8..8c9a1012 100644 --- a/src/pages/support.astro +++ b/src/pages/support.astro @@ -1,12 +1,6 @@ --- -// import Features2 from '~/components/widgets/Features2.astro'; -// import Features3 from '~/components/widgets/Features3.astro'; -// import Features from '~/components/widgets/Features.astro'; -import Headline from '~/components/blog/Headline.astro'; import Button from '~/components/ui/Button.astro'; -import WidgetWrapper from '~/components/ui/WidgetWrapper.astro'; import CallToAction2 from '~/components/widgets/CallToAction.astro'; -import Features from '~/components/widgets/Features.astro'; import Features2 from '~/components/widgets/Features2.astro'; import Features3 from '~/components/widgets/Features3.astro'; import Features5 from '~/components/widgets/Features5.astro'; @@ -43,38 +37,11 @@ const metadata = { title="Statistics." stats={[ { title: 'Started', amount: '2018' }, - { title: 'Devs', amount: '4' }, - { title: 'Lines of Code', amount: '84K' }, + { title: 'Devs', amount: '5' }, + { title: 'Lines of Code', amount: '300K' }, ]} /> - - - - diff --git a/src/types.d.ts b/src/types.d.ts index 56796cd2..636c93e3 100644 --- a/src/types.d.ts +++ b/src/types.d.ts @@ -236,6 +236,7 @@ export interface Features extends Omit, Widget { export interface Spec { feature: string; isHeader?: boolean; + isV8?: boolean; isV7?: boolean; isSoon?: boolean; isPro?: boolean; From f75a645ca1ca67be80535ee2fbee2c887fa45bc0 Mon Sep 17 00:00:00 2001 From: ildyria Date: Mon, 22 Jun 2026 20:07:13 +0200 Subject: [PATCH 2/2] parametrize --- src/components/widgets/Announcement.astro | 7 +++++-- src/pages/get-supporter-edition.astro | 2 +- src/pages/index.astro | 8 ++++---- src/pages/roadmap.astro | 7 ++++--- 4 files changed, 14 insertions(+), 10 deletions(-) diff --git a/src/components/widgets/Announcement.astro b/src/components/widgets/Announcement.astro index ddfe1d45..64c15919 100644 --- a/src/components/widgets/Announcement.astro +++ b/src/components/widgets/Announcement.astro @@ -1,4 +1,7 @@ --- +import { releases } from '../../pages/roadmap.astro'; + +const version = releases[0].version.substring(1); --- @@ -10,8 +13,8 @@ >NEW Lychee 7.6.1 is now available! ยปLychee {version} is now available! ยป
    Total Releases