This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summarySidebar with configurable metadata and EXIF fields added to the lightbox.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds configurable sidebar with metadata and EXIF data to lightbox. Adds configurable sidebar with metadata and EXIF data to lightbox. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Low |
Replaces PhotoSwipe close (X) button with a back-arrow for consistency with Immich. Replaces PhotoSwipe close (X) button with a back-arrow for consistency with Immich. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Low |
Publishes GitHub artifact attestations for Docker images to enable provenance verification. Publishes GitHub artifact attestations for Docker images to enable provenance verification. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Refactor | Low |
Migrates client code from JavaScript (web.js) to TypeScript, compiled with tsc. Migrates client code from JavaScript (web.js) to TypeScript, compiled with tsc. Source: llm_adapter@2026-06-03 Confidence: high |
— |
Full changelog
New: Sidebar with metadata + EXIF (all fields configurable)
Added a slide-in info panel in the lightbox, modeled on Immich's sidebar. Toggle with the info button in the top toolbar, or with the i key. #27 #120 #93
Configure the sidebar under the ipp.showMetadata block in config.json.
Each group has a master enabled switch plus per-field overrides. The sidebar only renders fields which the upstream Immich share exposes, so if the share has metadata disabled in Immich, IPP won't (and can't) override that.
{
"ipp": {
"showMetadata": {
"description": {
"caption": false,
"sidebar": false
},
"exif": {
"enabled": false,
"dateTimeOriginal": true,
"fileName": true,
"dimensions": true,
"fileSize": true,
"make": true,
"model": true,
"lensModel": true,
"exposureTime": true,
"iso": true,
"fNumber": true,
"focalLength": true
},
"location": {
"enabled": false,
"city": true,
"state": true,
"country": true,
"gps": true
}
}
}
}
Other updates
- A back-arrow now replaces PhotoSwipe's default close (X) in the top-left of the lightbox to match Immich's behaviour.
- Docker images now publish GitHub artifact attestations so the GHCR image can be verified back to the workflow that built it.
- Client code is now TypeScript (replacing the old
web.js), compiled by tsc in the build step (no bundler). No user-visible behavior change from the refactor itself.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About immich-public-proxy
Share your Immich photos and albums in a safe way without exposing your Immich instance to the public.
Related context
Related tools
Beta — feedback welcome: [email protected]