version 6.6.2~6.6.3 (#204)

* version 6.6.2

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* well... 6.6.3

* Update docs/releases.md

Co-authored-by: Martin Stone <1611702+d7415@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Martin Stone <1611702+d7415@users.noreply.github.com>

Author: 3 people

docs/releases.md

@@ -30,6 +30,41 @@
 
 ## Version 6
 
+### v6.6.3
+
+Released on May 17, 2025
+
+#### Fix broken hotlinking prevention
+
+This version fixes the hotlinking prevention that was broken since version 6.6.0.
+We also added a few tests to make sure that this bug does not happen again.
+
+* `fix` #3348 : Fix secure link missing route by @ildyria.
+
+
+### v6.6.2
+
+Released on May 15, 2025
+
+#### iFrame integration support and auto open upload popup
+
+One of our users noticed that version 6 was not working within iFrames. This is because we have secure headers
+to avoid clickjacking. We added one `.env` variable `SECURITY_HEADER_CSP_FRAME_ANCESTORS` (empty by default)
+which allows to add the domains that are allowed to load Lychee in an iFrame. Note that this kind of integration
+of Lychee is not recommended as the cookies will also be set with the policy `SameSite=None`.
+If you wish to use iFrames, to make sure that the configuration remains secure,
+you will also have to set the `SESSION_SECURE_COOKIE` to `true` in your `.env` file.
+
+The second change is a small one, but it is a nice addition: by adding `#upload` to a Lychee album url,
+the upload popup will be automatically opened. This is aimed as users who wish to give an upload link to their friends.
+Note that this will require you to have guest upload enabled in the album settings.
+
+* `new` #3343 : Add insecure options (with secure defaults) to use Lychee in iFrames by @ildyria.
+  > This setting needs to be enabled via `.env` configuration and is disabled by default.
+* `new` #3340 : Add `#upload` to trigger upload modal from url in an album by @ildyria.
+  > For this to work, guest upload must be enabled in the album settings.
+
+
 ### v6.6.1
 
 Released on May 12, 2025

src/components/widgets/Announcement.astro

@@ -10,8 +10,8 @@
     >NEW</span
   >
   <a
-    href="https://github.com/LycheeOrg/Lychee/releases/tag/v6.6.1"
-    class="text-slate-200 hover:underline dark:text-slate-200 font-medium">Lychee 6.6.1 is now available! »</a
+    href="https://github.com/LycheeOrg/Lychee/releases/tag/v6.6.3"
+    class="text-slate-200 hover:underline dark:text-slate-200 font-medium">Lychee 6.6.3 is now available! »</a
   >
   <a
     target="_blank"