0.1.19

What's Changed

• fix(ci): route manual-release through PR + auto-merge by @itsmiso-ai in #232
• ci(github-action): update action actions/checkout (de0fac2 → df4cb1c) by @its-miso[bot] in #233
• ci(github-action): update action actions/checkout (v6.0.2 → v6.0.3) by @its-miso[bot] in #234
• ci(github-action): update action misospace/pr-reviewer-action (v1.3.0 → v1.3.1) by @its-miso[bot] in #235
• ci(github-action)!: Update action actions/checkout (v6.0.3 → v7.0.0) by @its-miso[bot] in #236
• ci(github-action)!: Update action actions/checkout (v6 → v7) by @its-miso[bot] in #237
• ci(github-action)!: Update action misospace/pr-reviewer-action (v1.3.1 → v2.0.0) by @its-miso[bot] in #238
• fix(release): automate protected releases by @joryirving in #239
• fix(deps): update dependency redis (8.0.0 → 8.0.1) by @its-miso[bot] in #240
• feat(deps): update dependency pillow (12.2.0 → 12.3.0) by @its-miso[bot] in #246
• drop unnecessary workflow by @joryirving in #298
• Strengthen APP_VERSION extraction in release workflow by @joryirving in #296
• Consolidate gallery iterators by @joryirving in #297
• Fix file_sha256() handle release on exception by @joryirving in #295
• fix(trash): standardize dir_size to consistently skip symlinks by @joryirving in #300
• fix(api): log security events for bulk_delete path validation by @joryirving in #301
• Align dependency-audit Python version with CI Python version by @itsmiso-ai in #302
• Align dependency-audit Python version with CI Python version by @itsmiso-ai in #303
• Strengthen APP_VERSION extraction in publish-release workflow by @itsmiso-ai in #305
• build(release): extract APP_VERSION via Python instead of grep by @joryirving in #299
• Add regression test for health_bp Blueprint removal (finding #11) by @itsmiso-ai in #304
• docs: replace npm version references with sed in runbook by @itsmiso-ai in #306
• test: add coverage for security._load_route_overrides() (#250) by @joryirving in #307
• Fix release workflow: use full SHA for pre-built image check by @itsmiso-ai in #308
• Consolidate gallery iterators (#247) by @itsmiso-ai in #309
• Extract thumbnail cache cleanup into a single batch function by @itsmiso-ai in #310
• Strengthen APP_VERSION extraction in release workflow by @itsmiso-ai in #311
• refactor: simplify trash.py datetime handling + dedupe app.py scan patterns by @joryirving in #312
• Update action actions/setup-python (a309ff8 → ece7cb0) by @its-miso[bot] in #313
• Update action misospace/pr-reviewer-action (v2.0.0 → v2.1.1) by @its-miso[bot] in #319
• Update action docker/setup-buildx-action (v4.1.0 → v4.2.0) by @its-miso[bot] in #318
• Update action docker/metadata-action (v6.0.0 → v6.2.0) by @its-miso[bot] in #317
• Update action docker/login-action (v4.2.0 → v4.4.0) by @its-miso[bot] in #316
• Update action actions/setup-python (v6.2.0 → v6.3.0) by @its-miso[bot] in #314
• Update action docker/build-push-action (v7.1.0 → v7.3.0) by @its-miso[bot] in #315
• Update action misospace/pr-reviewer-action (v2.1.1 → v2.1.2) by @its-miso[bot] in #320
• Update action misospace/pr-reviewer-action (v2.1.2 → v2.1.3) by @its-miso[bot] in #321
• Update action misospace/pr-reviewer-action (v2.1.3 → v2.1.4) by @its-miso[bot] in #322
• Persist gallery tags in SQLite by @itsmiso-ai in #323
• Make rate-limit configuration lazily loaded and re-readable at runtime by @itsmiso-ai in #333
• Cache TagStore as singleton in _tag_store() to avoid per-request connection churn by @itsmiso-ai in #332
• Deduplicate scan logic in recent_view() — replace with iter_gallery_items() by @itsmiso-ai in #334
• Allow /tag route to accept multiple tags in a single request by @itsmiso-ai in #335
• Refactor folder_cover_rel_path to use iter_gallery_items by @itsmiso-ai in #336
• Make gunicorn worker count configurable via WEB_CONCURRENCY env var by @itsmiso-ai in #337
• docs: recommend placing TAG_DATABASE outside DATA_FOLDER for NFS/snapshot backups by @itsmiso-ai in #338
• Update action misospace/pr-reviewer-action (v2.1.4 → v2.1.5) by @its-miso[bot] in #339
• ci(github-action)!: Update action actions/setup-python (v6.3.0 → v7.0.0) by @its-miso[bot] in #340
• Update action actions/checkout (9c091bb → 3d3c42e) by @its-miso[bot] in #341
• Update action actions/checkout (v7.0.0 → v7.0.1) by @its-miso[bot] in #342
• fix(pwa): don't mask failed media navigations by @itsmiso-ai in #343
• chore(release): bump version to 0.1.19 by @its-saffron[bot] in #344

New Contributors

• @its-saffron[bot] made their first contribution in #344

Full Changelog: 0.1.18...0.1.19

0.1.18

What's Changed

• chore: bump pr-reviewer-action to v1.0.18, switch to native_review mode by @itsmiso-ai in #180
• feat(deps)!: Update dependency redis (7.4.0 → 8.0.0) by @its-miso[bot] in #179
• docs: fix APP_VERSION line number and version format in runbook by @itsmiso-ai in #187
• fix: anchor APP_VERSION grep in release workflow by @itsmiso-ai in #186
• fix: align llm_dedup response schema with llm_bulk_delete by @itsmiso-ai in #188
• Lower WEBHOOK_TASK_TIMEOUT max to 120s; warn on in-memory fallback by @itsmiso-ai in #190
• docs: add release runbook to AGENTS.md by @itsmiso-ai in #191
• fix(ci): stop blocking PRs with tool harness enforcement by @joryirving in #206
• docs: tune AI PR review guidance by @itsmiso-ai in #208
• fix: restrict /images and /view to media files only by @itsmiso-ai in #207
• ci: update pr-reviewer-action from v1.0.18 to v1.1.1 by @itsmiso-ai in #209
• security: add trusted-proxy handling for rate limiting by @itsmiso-ai in #210
• Require WEBHOOK_SECRET for webhook task execution by @itsmiso-ai in #211
• ci: upgrade pr-reviewer-action to v1.2.0 (routing + escalation) by @joryirving in #213
• ci: use BOT_CLIENT_ID secret for the app token by @joryirving in #214
• ci: upgrade pr-reviewer-action to v1.2.3 (tool loop, carry-forward verdicts) by @joryirving in #215
• feat(auth): add OIDC authorization controls and per-key audit logging by @itsmiso-ai in #212
• fix: bound expensive scans and make /health read-only (GH #197) by @itsmiso-ai in #216
• fix: align release workflow naming, action pins, and AGENTS.md by @itsmiso-ai in #217
• docs: update root /health endpoint docs to reflect read-only storage status (GH #198) by @itsmiso-ai in #219
• ci: bump tool_planning_max_tokens 300 → 1500 by @joryirving in #220
• feat(auth): log API key class in audit events (issue #201) by @itsmiso-ai in #221
• refactor: extract inline templates from app.py by @itsmiso-ai in #224
• fix(gallery): bound recursive scans, centralize iterator, fix dir trash by @itsmiso-ai in #222
• Add regression tests for security edges (issue #205) by @itsmiso-ai in #223
• ci(pr-review): enable ci_status_check to feed CI results into review by @joryirving in #225
• feat(pr-review): /ai-review comment command to force a re-review by @joryirving in #226
• ci: label-driven AI re-review (v1.2.9) by @joryirving in #227
• fix(ci): stop label events from cancelling net-new PR reviews by @joryirving in #228
• chore: manage Dispatch labels from labels.yaml by @joryirving in #229
• chore(ai-review): adopt pr-reviewer v1.3.0 native_loop + org-var tokens by @joryirving in #230
• chore: bump APP_VERSION from 0.1.17 to 0.1.18 by @itsmiso-ai in #231

Full Changelog: 0.1.17...0.1.18

0.1.17

What's Changed

• fix readme by @joryirving in #134
• fix(deps): update dependency authlib (1.7.0 → 1.7.1) by @miso-assistant[bot] in #135
• feat(deps)!: Update dependency gunicorn (25.3.0 → 26.0.0) by @miso-assistant[bot] in #136
• Modify AI review workflow settings by @joryirving in #137
• Update ai-pr-review.yaml by @joryirving in #138
• fix(deps): update dependency authlib (1.7.1 → 1.7.2) by @miso-assistant[bot] in #140
• chore: bump APP_VERSION from 0.1.14 to 0.1.16 by @itsmiso-ai in #148
• Add shared conftest.py for test SECRET_KEY bootstrap by @itsmiso-ai in #147
• feat(deps): update dependency requests (2.33.1 → 2.34.0) by @miso-assistant[bot] in #149
• [#141] Scope LLM API keys into read/write and lock browser sessions on /api/llm/* by @itsmiso-ai in #150
• ci(github-action)!: Update action actions/setup-python (v5.5.0 → v6.2.0) by @miso-assistant[bot] in #151
• ci: update AI reviewer action by @joryirving in #152
• Update AI reviewer action version to v1.0.14 by @joryirving in #153
• [#142] Add shared pytest fixture for SECRET_KEY and test bootstrap by @itsmiso-ai in #155
• fix AI PR Review by @joryirving in #156
• fix(deps): update dependency requests (2.34.0 → 2.34.1) by @miso-assistant[bot] in #154
• fix(deps): update dependency requests (2.34.1 → 2.34.2) by @miso-assistant[bot] in #157
• P1: Add shared pytest fixture for SECRET_KEY and test bootstrap by @itsmiso-ai in #159
• feat: add dry_run mode and request IDs to LLM API endpoints (Refs #141) by @itsmiso-ai in #158
• fix: bounded gallery indexing and pagination for LLM endpoints (#143) by @itsmiso-ai in #160
• fix(release): add APP_VERSION/release workflow invariant checks by @itsmiso-ai in #161
• docs: expand runbook with health checks, auth recovery, task threat model, and release rollback procedures by @itsmiso-ai in #162
• Require write scope for LLM task execution by @itsmiso-ai in #164
• fix: support directories in move_to_trash for bulk folder deletion (#168) by @itsmiso-ai in #170
• fix: bound recursive gallery scans before pagination by @itsmiso-ai in #171
• fix: split storage read and write health probes by @itsmiso-ai in #172
• fix: clarify LLM read/write key scope semantics (#166) by @itsmiso-ai in #173
• ci(github-action): update action docker/login-action (v4.1.0 → v4.2.0) by @miso-assistant[bot] in #175
• ci(github-action): update action docker/setup-buildx-action (v4.0.0 → v4.1.0) by @miso-assistant[bot] in #176
• chore(ci): broaden lint coverage with Ruff and harden dependency audit by @itsmiso-ai in #174
• chore: bump APP_VERSION from 0.1.16 to 0.1.17 by @itsmiso-ai in #177

Full Changelog: 0.1.16...0.1.17

0.1.16

What's Changed

• feat: add LLM-accessible gallery API by @joryirving in #133

Full Changelog: 0.1.15...0.1.16

0.1.15

What's Changed

• ci(github-action): pin action joryirving/pr-reviewer-action to 3c04f7c by @smurf-bot[bot] in #116
• chore: migrate renovate config to misospace by @joryirving in #117
• miso-gallery #111: support GIF and video playback in thumbnails by @itsmiso-ai in #121
• rename claude to agents by @joryirving in #122
• Pin Python dependencies to specific versions by @itsmiso-ai in #124
• Add AGENTS.md for agent guidance by @itsmiso-ai in #123
• feat(deps): update python dependencies by @miso-assistant[bot] in #126
• feat(deps)!: Update Python dependencies (major) by @miso-assistant[bot] in #127
• fix: require auth for /thumb/ and /assets/ routes by @joryirving in #128
• fix: address remaining security findings from #125 by @joryirving in #129
• feat(ci): add pip-audit dependency scanning workflow by @joryirving in #130
• feat: require SECRET_KEY env var, remove file fallback by @joryirving in #131

New Contributors

• @joryirving made their first contribution in #117
• @miso-assistant[bot] made their first contribution in #126

Full Changelog: 0.1.14...0.1.15

0.1.14

What's Changed

• feat: add issue templates by @itsmiso-ai in #106
• feat: add GPL-3.0 license by @itsmiso-ai in #107
• ci(github-action)!: Update action actions/checkout (v4 → v6) by @smurf-bot[bot] in #110
• fix(readme): update docker badge to ghcr, add build badge by @itsmiso-ai in #108
• ci(github-action): pin action actions/create-github-app-token to f8d387b by @smurf-bot[bot] in #109
• ci(github-action)!: Update action actions/github-script (v8 → v9) by @smurf-bot[bot] in #112
• fix(gallery): skip inaccessible items during NFS /recent scan by @itsmiso-ai in #114
• miso-gallery #113: make recent_view resilient to filesystem permission errors by @itsmiso-ai in #115

Full Changelog: 0.1.13...0.1.14

0.1.13

What's Changed

• feat(health): add version to root health endpoint by @itsmiso-ai in #97
• perf(gallery): defer thumbnail decoding in gallery cards by @itsmiso-ai in #98
• feat(gallery): partial fix for #91 active filter state by @itsmiso-ai in #99
• feat(gallery): partial fix for #89 selection action bar by @itsmiso-ai in #101
• feat(gallery): partial fix for #90 inline metadata row by @itsmiso-ai in #100
• feat(gallery): partial fix for #91 tag assignment UI by @itsmiso-ai in #102
• perf(gallery): partial fix for #92 offscreen card rendering by @itsmiso-ai in #104
• feat(gallery): partial fix for #89 bulk delete feedback by @itsmiso-ai in #103

Full Changelog: 0.1.12...0.1.13

0.1.12

What's Changed

• fix: refresh stale folder cover previews by @itsmiso-ai in #94
• feat(release): add one-click manual release workflow by @itsmiso-ai in #95
• feat(release): use bot auth for one-click release by @itsmiso-ai in #96

Full Changelog: 0.1.11...0.1.12

0.1.11

What's Changed

• feat: add folder navigation button to recent tab by @itsmiso-ai in #88

Full Changelog: 0.1.10...0.1.11

0.1.10

What's Changed

• feat: add thumbnail-only preview button by @itsmiso-ai in #85
• docs(runbook): image backup and restore procedure by @itsmiso-ai in #86

Full Changelog: 0.1.9...0.1.10