Chevereto 4.5.9 (2026-11-02)
- Added update-check command
- Fixed bug with album privacy filtering for liked images
- Fixed bug with cron job locks not being released on errors
- Fixed bug with database update failing on older installations
- Fixed bug with failed S3 deletes retrying forever
- Fixed bug with FTP storage not creating date folders
- Fixed bug with installed version detection
- Fixed bug with local storage delete queue stopping on errors
- Fixed bug with OSS storage delete queue handling
- Fixed bug with single failed deletes stopping the storage delete queue
- Fixed bug with storage delete queue stopping when a storage is unreachable
- Fixed bug with update check and news check
- Fixed bug with variable handling null cipher values
- Improved FTP storage error handling
- Improved storage delete queue error logging
Chevereto 4.5.5 (2026-07-10)
- Added CHEVERETO_TENANTS_DB_ISOLATION_MODE
- Added configurable system notices display
- Added links to user manual and admin manual on dashboard
- Added warning to account resend activation when email delivery isn't configured
- Added warning to password forgot when email delivery isn't configured
- Added warning to signup when email delivery isn't configured
- Disabled email-dependent settings when no email provider is configured
- Disabled guest uploads by default
- Disabled user self-signup by default
- Fixed bug with wrong user URL when website mode personal is enabled
- Fixed bug with missing album options when editing upload item
- Fixed bug with theme overrides not working for overrides/views/dashboard/*
- Fixed bug with theme overrides not working for overrides/views/settings/*
- Improved email settings validation and error handling
Chevereto 4.5.3 (2026-05-14)
- Added CHEVERETO_ENVIRONMENT default value
- Added CSRF protection to POST /account/* endpoints
- Added CSRF protection to POST /album endpoint (password protected albums)
- Added Variables support to the encrypt-secrets and decrypt-secrets commands
- Fixed bug affecting PHP page creation/editing
- Fixed bug breaking TenantsConfig
- Fixed bug causing missing support for theme library overrides
- Fixed bug with FTP storage API not creating date folder structure
- Fixed bug with missing login-providers.php file in Lite edition
- Fixed missing success message after creating a new user from dashboard
- Removed support for FTP/SFTP storage APIs in SaaS context
Chevereto 4.5.2 (2026-04-21)
- Added CHEVERETO_INTERNAL_HOSTNAME environment variable
- Added CHEVERETO_PROXY_ENTRYPOINT environment variable
- Added CHEVERETO_PROXY_IP_ALLOW_LIST environment variable
- Added CHEVERETO_ROUTER_SECRET, CHEVERETO_HEADER_FORWARDED_HOST, and CHEVERETO_HEADER_ROUTER_SECRET environment variables
- Added CHEVERETO_SERVICE_NAME environment variable
- Added CHEVERETO_SERVICE_PORT environment variable
- Added missing root namespace configuration in Traefik configuration
- Added support for Traefik Cloudflare middleware
- Added support for X-Forwarded-Host and X-Router-Secret headers
- Fixed JSON YAML syntax error in Traefik configuration
- Improved system notices
- Renamed CHEVERETO_TENANTS_API_ALLOW_LIST to CHEVERETO_TENANTS_API_IP_ALLOW_LIST
- Setting email_mode is now optional
Chevereto 4.4.0 (2025-12-09)
- Added support for multitenancy
- Added Tenants API
- Added Tenants CLI
- Added multi-user support as a core (now free) feature
- Added AWS S3 and S3-Compatible Storage APIs as a core (now free) feature
- Added last seen tracking for login cookies
- Added HMAC signature to tokens, uploads and API keys
- Added cipher support for system variables (encryption)
- Added disabled web installation for service context
- Added "stats-rebuild" CLI command
- Added /powered-by route
- Added base64 encoded token URLs
- Fixed bug with albums created by guests
- Fixed invalid file checksum upload bug
- Fixed missing email-change warning message
- Merged images_hash table into images table
- Renamed "metrics" CLI command to "stats"
- Renamed "update" CLI command to "database-migrate"
- Removed ACL option for AWS S3
- Updated license terms with more grants, fewer restrictions
- Updated password hashing to use Argon2id algorithm
Links
Chevereto 4.3.7 (2025-10-20)
- Added metrics command to CLI
- Fixed id encode bug
- Fixed "Confirmation required at %s" bug
- Fixed "email-changed" view bug
- Fixed uploader duplicate file handling
- Fixed Google Cloud storage bug
- Fixed Site storage form bug
- Fixed page editing bug with broken HTML
- Fixed album parent editing bug
- Fixed advanced search tab navigation bug
- Fixed YouTube profile links bug
- Fixed album cover image removal bug
- Fixed album cover image move bug
- Fixed advanced search "exact query phrase" bug
Links