LycheeOrg/Lychee v7.10.0 on GitHub

What's Changed

Strip completely at the php level to avoid xss by @ildyria in #4789
Add CAN_MOVE rights by @ildyria in #4787
fix(security): block all IPv6-transition spellings that embed an internal IPv4 by @anzal1 in #4791
Configurable size variant format (WebP) and lossless quality by @NikitaTH in #4790
Translations update from LycheeOrg - Weblate by @ildyria in #4793
Refactor agentic to reduce the number of merge conflicts by @ildyria in #4796
Fixes advisories crash when on internal network without internet access by @ildyria in #4798
Global password gallery setting by @ildyria in #4799
Avoid XSS in GPX tracks by @ildyria in #4804
Fix dock being visible when user has not edit rights by @ildyria in #4806
Avoid uploading a picture of another user and getting extra perks by @ildyria in #4805
Add support for video loop attribute by @ildyria in #4807
Fix video player? by @ildyria in #4808
Version 7.10.0 by @ildyria in #4800

chore(deps): bump node from dbaa92e to 0b36e8c by @dependabot[bot] in #4810
chore(deps): bump composer from a5f59b9 to 9715c7f by @dependabot[bot] in #4812
chore(deps): bump dunglas/frankenphp from f92d81e to 81231b5 by @dependabot[bot] in #4813
chore(deps): bump debian from d7e1218 to a99cfc5 by @dependabot[bot] in #4811
chore(deps): bump the actions-deps group with 4 updates by @dependabot[bot] in #4817
chore(deps): bump the production-dependencies group with 6 updates by @dependabot[bot] in #4815
chore(deps-dev): bump the development-dependencies group with 6 updates by @dependabot[bot] in #4816

Full Changelog: v7.9.0...v7.10.0