[1.8.5] / 2026-10-27
Security release
Fixes
- Escape labels in search autocomplete (benjaminjonard)
- Escape tag descriptions in highlightTags filter (benjaminjonard)
- Apply visibility filter to shared statistics queries (benjaminjonard)
- Store uploads with an allowlisted extension, fall back to .bin. (benjaminjonard)
- Add a sandbox CSP header on /uploads in Caddy configs (benjaminjonard)
Miscellaneous
- Upgrade PHP and JS dependencies, fix multiple CVEs (benjaminjonard)