release: v0.19.0

Release v0.19.0. See the `## [0.19.0] — 2026-09-29` section of
[CHANGELOG.md](https://github.com/ralksta/immich-folio/blob/dev/CHANGELOG.md)
for the full list.

Highlights: client proofing links (#683), custom content pages (#738),
asset picker search (#740), concurrent-edit detection (#742), env-locked
settings (#739), an accessibility baseline (#741), three security fixes
with advisories (#737, #755, #759), and a pre-release quality pass
(#780–#797).

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: ralksta <ralksta@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Ralf <rohlenbo79@gmail.com>
Co-authored-by: Paul Thies <110185070+ImScheinox@users.noreply.github.com>
Co-authored-by: lancetm714 <108419425+lancetm714@users.noreply.github.com>
Co-authored-by: Lance Martin <lancetaylor95@gmail.com>

app/proof/[token]/page.tsx

@@ -0,0 +1,121 @@
+/**
+ * A client proofing link: /proof/<token>.
+ *
+ * Renders the session's album with the proofing controls in session mode —
+ * hearts save to the server, and the client submits the selection when done.
+ * The album does not have to be published; see immich.getProofingAlbum().
+ *
+ * Kept out of search engines and the sitemap: the URL is the credential.
+ */
+
+import type { Metadata } from 'next';
+import { notFound } from 'next/navigation';
+import { immich } from '@/lib/immich';
+import { getConfig, hasExifPanelContent } from '@/lib/config';
+import { encodeAssetId } from '@/lib/tokens';
+import { getServerDictionary } from '@/lib/i18n/server';
+import { downloadsRemaining, findSessionByToken, isExpired } from '@/lib/proofSessions';
+import { AlbumDetailView } from '../../[...path]/AlbumDetailView';
+import { toPhotoItems } from '../../[...path]/photoItems';
+
+export const dynamic = 'force-dynamic';
+
+interface ProofPageProps {
+  params: Promise<{ token: string }>;
+}
+
+export async function generateMetadata({ params }: ProofPageProps): Promise<Metadata> {
+  const { token } = await params;
+  const session = await findSessionByToken(token);
+  const t = getServerDictionary();
+  return {
+    // An expired link names nobody, not even in the tab title — but the tab
+    // says the same as the page, rather than "not found" over "expired".
+    title: !session
+      ? t.error.notFoundTitle
+      : isExpired(session)
+        ? t.proofSession.expiredTitle
+        : t.proofSession.greeting(session.clientName),
+    robots: { index: false, follow: false },
+    // Never let the link travel as a Referer, not even to our own font host.
+    referrer: 'no-referrer',
+  };
+}
+
+export default async function ProofPage({ params }: ProofPageProps) {
+  const { token } = await params;
+  const session = await findSessionByToken(token);
+  if (!session) notFound();
+
+  const t = getServerDictionary();
+
+  if (isExpired(session)) {
+    return (
+      <div className="empty-state">
+        <h1 className="empty-state__title">{t.proofSession.expiredTitle}</h1>
+        <p className="empty-state__text">{t.proofSession.expiredText}</p>
+      </div>
+    );
+  }
+
+  const album = await immich.getProofingAlbum(session.albumId);
+  if (!album) notFound();
+
+  const config = getConfig();
+  const images = toPhotoItems(
+    album.assets,
+    config.exif.onHover && config.exif.camera,
+    config.exif.caption,
+  );
+
+  // Only what is still in the album: a photo removed in Immich after it was
+  // picked drops out of the selection instead of haunting the counter.
+  const inAlbum = new Set(album.assets.map((a) => a.id));
+  const selected = session.selection.filter((id) => inAlbum.has(id)).map(encodeAssetId);
+
+  const validUntil = session.expiresOn
+    ? new Date(`${session.expiresOn}T12:00:00`).toLocaleDateString(t.dateLocale, {
+        year: 'numeric',
+        month: 'long',
+        day: 'numeric',
+      })
+    : null;
+
+  const gridStyle = {
+    '--grid-columns': config.grid.columns,
+    ...(config.gridGapExplicit ? { '--grid-gap': `${config.grid.gap}px` } : {}),
+    '--grid-aspect-ratio': config.grid.aspectRatio,
+  } as React.CSSProperties;
+
+  return (
+    <AlbumDetailView
+      album={album}
+      images={images}
+      layout={config.grid.layout}
+      gridStyle={gridStyle}
+      watermark={config.watermark}
+      showExifPanel={hasExifPanelContent(config.exif)}
+      showGear={config.exif.camera}
+      proofSession={{
+        token: session.token,
+        selected,
+        submitted: Boolean(session.submittedAt),
+        download: session.download,
+        downloadsRemaining: downloadsRemaining(session),
+      }}
+      intro={
+        <div className="proof-session-intro">
+          <p className="proof-session-intro__greeting">
+            {t.proofSession.greeting(session.clientName)}
+          </p>
+          <p className="proof-session-intro__text">
+            {session.submittedAt ? t.proofSession.locked : t.proofSession.intro}
+          </p>
+          {validUntil && (
+            <p className="proof-session-intro__meta">{t.proofSession.validUntil(validUntil)}</p>
+          )}
+        </div>
+      }
+    />
+  );
+}

app/proof/__tests__/metadata.test.ts

@@ -0,0 +1,44 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+
+/**
+ * An expired proofing link rendered "This link has expired" under a tab that
+ * said "Not found". The tab still names nobody, but now agrees with the page.
+ */
+
+vi.mock('@/lib/proofSessions', async (importOriginal) => ({
+  ...(await importOriginal<typeof import('@/lib/proofSessions')>()),
+  findSessionByToken: vi.fn(),
+}));
+vi.mock('@/lib/immich', () => ({ immich: {} }));
+vi.mock('@/lib/config', () => ({
+  getConfig: vi.fn(),
+  getConfigOrNull: vi.fn(() => null),
+  hasExifPanelContent: vi.fn(),
+}));
+
+import { generateMetadata } from '../[token]/page';
+import { findSessionByToken } from '@/lib/proofSessions';
+
+const mockFind = findSessionByToken as unknown as ReturnType<typeof vi.fn>;
+const params = Promise.resolve({ token: 'tok' });
+
+beforeEach(() => mockFind.mockReset());
+
+describe('proofing link tab title', () => {
+  it('says an expired link has expired, and names nobody', async () => {
+    mockFind.mockResolvedValue({ clientName: 'Anna', expiresOn: '2000-01-01', selection: [] });
+    const meta = await generateMetadata({ params });
+    expect(meta.title).toBe('This link has expired');
+    expect(String(meta.title)).not.toContain('Anna');
+  });
+
+  it('greets the client on a live link', async () => {
+    mockFind.mockResolvedValue({ clientName: 'Anna', expiresOn: null, selection: [] });
+    expect((await generateMetadata({ params })).title).toBe('Selection for Anna');
+  });
+
+  it('says not found for a link that never existed', async () => {
+    mockFind.mockResolvedValue(null);
+    expect((await generateMetadata({ params })).title).toBe('Not found');
+  });
+});