Changes worth knowing about.

July 19, 2026

• Added secure administrator previews for password-protected images without weakening the public password gate.
• Added live pending-count badges for reports and contact messages in the moderation dashboard.
• Published focused guides for free, temporary, anonymous, and API-based image hosting.
• Published a browser-only EXIF metadata checker and remover.
• Published runnable REST API and MCP examples in a separate public GitHub repository.
• Expanded first-party image privacy and developer guides with original editorial imagery.
• Improved legacy URL retirement and sitemap coverage for durable public content.

July 18, 2026

• Completed production security remediation across sessions, CSRF protection, storage, secrets, and administrative actions.
• Verified browser actions, REST API behavior, MCP tools, migrations, backups, and monitoring in production-mode tests.
• Moved direct image delivery behind imageupload.io while preserving access controls and hotlink behavior.
• Added substantive About, privacy, documentation, and search metadata improvements.

How releases are verified

Releases are built into an immutable Docker image, exercised on an isolated staging service, backed up, and then promoted to production. Health, readiness, logs, and monitoring targets are checked after promotion.