Skip to content

immich-public-proxy

v2.3.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 7h Media Servers
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Summary

AI summary

Sidebar with configurable metadata and EXIF fields added to the lightbox.

Changes in this release

Feature Medium

Adds configurable sidebar with metadata and EXIF data to lightbox.

Adds configurable sidebar with metadata and EXIF data to lightbox.

Source: llm_adapter@2026-06-03

Confidence: high

Feature Low

Replaces PhotoSwipe close (X) button with a back-arrow for consistency with Immich.

Replaces PhotoSwipe close (X) button with a back-arrow for consistency with Immich.

Source: llm_adapter@2026-06-03

Confidence: high

Feature Low

Publishes GitHub artifact attestations for Docker images to enable provenance verification.

Publishes GitHub artifact attestations for Docker images to enable provenance verification.

Source: llm_adapter@2026-06-03

Confidence: high

Refactor Low

Migrates client code from JavaScript (web.js) to TypeScript, compiled with tsc.

Migrates client code from JavaScript (web.js) to TypeScript, compiled with tsc.

Source: llm_adapter@2026-06-03

Confidence: high

Full changelog

New: Sidebar with metadata + EXIF (all fields configurable)

Added a slide-in info panel in the lightbox, modeled on Immich's sidebar. Toggle with the info button in the top toolbar, or with the i key. #27 #120 #93

Configure the sidebar under the ipp.showMetadata block in config.json.

Each group has a master enabled switch plus per-field overrides. The sidebar only renders fields which the upstream Immich share exposes, so if the share has metadata disabled in Immich, IPP won't (and can't) override that.

{
  "ipp": {
    "showMetadata": {
      "description": {
        "caption": false,
        "sidebar": false
      },
      "exif": {
        "enabled": false,
        "dateTimeOriginal": true,
        "fileName": true,
        "dimensions": true,
        "fileSize": true,
        "make": true,
        "model": true,
        "lensModel": true,
        "exposureTime": true,
        "iso": true,
        "fNumber": true,
        "focalLength": true
      },
      "location": {
        "enabled": false,
        "city": true,
        "state": true,
        "country": true,
        "gps": true
      }
    }
  }
}

Other updates

  • A back-arrow now replaces PhotoSwipe's default close (X) in the top-left of the lightbox to match Immich's behaviour.
  • Docker images now publish GitHub artifact attestations so the GHCR image can be verified back to the workflow that built it.
  • Client code is now TypeScript (replacing the old web.js), compiled by tsc in the build step (no bundler). No user-visible behavior change from the refactor itself.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track immich-public-proxy

Get notified when new releases ship.

Sign up free

About immich-public-proxy

Share your Immich photos and albums in a safe way without exposing your Immich instance to the public.

All releases →

Related context

Earlier breaking changes

  • v2.2.0 Deprecates `?password=...` query-param for shared links; requires Immich v2.6.0 or later.
  • v2.1.0 Removes dynamic public URL setting via HTTP header in IPP config.
  • v2.0.0 Gallery title now shown by default; hide with showTitle=false in config.json

Beta — feedback welcome: [email protected]