3.132.3 (2026-09-15)
Bug Fixes
- admin: limit events, archives and event records to what each role may act on (#1483) (#1484) (83e256c)
- backend: enforce single-use and cap limits under concurrent requests (#1486) (#1487) (3383392)
- backup: pin every restore download from S3 to the validated endpoint address (#1477) (#1479) (abd8994)
- backup: test the database backup directory a real backup writes to (#1504) (#1505) (cc3f146)
- backup: verify restore dumps, bound imports and keep secrets apart (#1491) (#1492) (ca5ed4b)
- backup: write the database dump where the backend can reach it (#1502) (#1503) (b55da1c)
- contracts: accept PDF files in the signed-contract uploads (#1471) (#1472) (67234c8)
- contracts: keep signing tokens out of admin views and make signature writes atomic (#1469) (#1470) (585e9b3)
- contracts: make saving a contract draft work and fail safely (#1460) (#1461) (9099685)
- crm: stop quote saves, hour entries and payments stalling on SQLite (#1462) (#1463) (f9c061b)
- crm: verify the customer before a contract or quote link shows or acts on their data (#1465) (#1466) (3eeb28f)
- email: keep mail passwords and account links out of reach of other servers and readers (#1485) (#1488) (d40d73c)
- frontend: keep custom head HTML out of the admin UI, drop dead feedback limits (#1489) (#1490) (f677b78)
- gallery: end gallery sessions when their password, portal session or admin idle time ends (#1497) (#1498) (39e415a)
- gallery: enforce category downloads, hidden-photo feedback and photo caps for guests (#1495) (#1496) (5c3d28b)
- gallery: store in-app browser user agents longer than 255 characters (#1507) (#1508) (b3f518c)
- gallery: tell an admin preview blocked on a password change what to do (#1454) (#1456) (c956968)
- images: resolve the protected-image client address through trust proxy (#1467) (#1468) (e38f005)
- permissions: keep SSO role mappings, backup destinations and restores within the actor's own power (#1493) (#1494) (e374f2a)
- uploads: accept iPhone DNGs in both byte orders and under any reported type (#1458) (#1459) (440ed34)
- uploads: serve and accept only image files from the public logo trees (#1478) (#1480) (3cc5a1c)