## [16.4.2]

- New: "Remove selected from set" on the Volumes and Related views. Ticked books are dropped out of the set and go back to being ungrouped; the books themselves stay in the gallery and can be grouped again later. Unlike "Triage selected", they are not sent back to the review queue — they are simply separated.
- Change: each set's buttons are laid out in two fixed rows, so the same action sits in the same place on every set. Previously a long base title pushed the buttons onto a second line for some sets and not others. The actions are now grouped by what they act on: the whole set first, then the ones that act only on the ticked books.

## [16.4.0]

- New: remotely-hosted books (the `s3_media` plugin) are now scanned. The probe reads only the head and tail of each PDF over HTTP range requests — about half a megabyte per book regardless of its real size — so remote files get fingerprints, covers and OCR like local ones. Previously every remote book was invisible to the scan.
- New: "Consolidate metadata into the kept copy" on the Decided view (on by default). Before duplicates are deleted, their tags, albums and empty-field values are merged into the copy you keep, so deleting a duplicate no longer loses metadata that only that copy carried. Existing values on the keeper are never overwritten.
- Fix: on Alpine/musl hosts, every value extracted from a PDF was silently discarded — `iconv()` there returns false for all input with the `//IGNORE` suffix, which nulled the document id, title, author and producer and took the doc-id blocking key out of service. Now uses mbstring where available.
- Fix: a 4-byte (astral-plane) character in PDF metadata aborted the whole probe batch with "Incorrect string value", because Piwigo opens the connection as utf8mb3. Such characters are binary noise in this context and are now stripped.
- Fix: an over-long document id aborted the batch when it reached the blocking-key column; it is now truncated once at extraction.
- Fix: far fewer phantom ISBNs. A bare 10-digit run is the exact shape of a PDF cross-reference offset, and one in eleven passes the ISBN-10 checksum by chance — 150 books produced 848 spurious ISBNs. ISBN-10 is now only read next to an explicit ISBN marker; the same sample then yielded 2, both real.
- Fix: the "Related works" public setting could not be switched off.
- New: `tools/verify-install.sh` — checks a deployed copy is complete and self-consistent, catching half-applied upgrades that `php -l` cannot see.

## [16.3.2]

- Fix: `tools/verify-release.sh` rejected this repo's `## [x.y.z] - date` changelog headings (it was ported from a plugin using bare `## x.y.z`), failing a correct release.

## [16.3.0] - 2026-07-28

Audit against the Piwigo plugin conventions, and the fixes it turned up.

- New: French (`fr_FR`) translation — all 134 strings. Both locales are now kept in sync.
- New: `pwg.pdfdup.setConfig` web-service method (admin_only + post_only + pwg_token). The settings page saves through it over AJAX and is now render-only, per the Piwigo admin-UI convention; validation moved to a shared `pdfdup_conf_clamp()` so the page and the API cannot drift.
- Change: the settings page uses the native admin-theme idioms — `#configContent`, fieldset legend icons, `.font-checkbox` switches, and a fixed `.savebar-footer` save bar with an inline success badge.
- Fix: photo names, Dublin Core authors and album names were written into the review page unescaped. Every dynamic value in the templates is now escaped (Smarty auto-escaping is off in Piwigo).
- Fix: `htmlspecialchars()` in the public volume strip now passes `ENT_QUOTES` and the gallery charset, so single quotes are escaped on PHP 7.x too.
- Fix: Ghostscript page counting ran with `-dNOSAFER`, disabling its sandbox while parsing untrusted PDFs. Now runs `-dSAFER` with read access granted to just the file being probed.
- Fix: admin colours are theme-agnostic — neutral borders and surfaces inherit from the theme, and the accent chip, "titles differ" and "renamed" text were re-picked to meet WCAG AA contrast on both light and dark admin themes.
- Fix: the verdict value and the volumes/related view's verdict filter are now escaped at the point they are interpolated into SQL, rather than relying on a whitelist further upstream.
- Change: `check_status(ACCESS_ADMINISTRATOR)` on the plugin's admin entry point (defence in depth — core already gates the back office).
- Change: the config defaults live in one place (`include/default_conf.inc.php`), shared by `main.inc.php` and `maintain.class.php` instead of being duplicated between them.

## [16.2.5]
- Fix: `Author URI` pointed at the old GitLab project path (`pdf_dups`); updated to the renamed project (`pdf_duplicates`).

## [16.2.4]

- Fix: `Plugin URI` had an empty `eid=` (piwigo.org extension id), so core never matched this plugin against the PEM server and it never appeared in Piwigo's "Check for Updates". Set to the plugin's actual PEM id (1100).

## [16.2.3]
- Change: the OCR cover phase now skips PDFs that already have a Piwigo description (hand-written, imported, or from a prior OCR run) instead of re-running tesseract on them — faster reruns on galleries with existing descriptions.

## 16.2.2
- Files: CHANGELOG.md, main.inc.php, admin/template/scan.tpl, css/pdf_duplicates.css, include/functions.inc.php, include/ws_functions.inc.php, js/review.js, js/scan.js, language/en_UK/plugin.lang.php, plus LICENSE.md added and CLAUDE.md removed from tracking (kept on disk, untracked)
- Changelog:
- Add: album scope picker on the Scan tab (searchable multi-select replacing the unreliable core modal)
- Fix: meta-index batch loop could spin indefinitely; progress messages now plain-language
- Add: Review queue "anchor" — left-hand image stays fixed across consecutive pairs touching it
- Add: LICENSE.md (GPLv2)

## [16.2.1]

- Fix: the dismissed→verdict migration in `maintain.class.php` omitted the
`reviewed` column value; now explicitly inserts `0`.
- Add: **Related** review sub-view — same clustering, batch rename, merge,
triage-selected and Reviewed filing as Volumes, over `verdict='related'`
rows instead of `'volumes'`.
- Fix: `pwg.pdfdup.recordRemoved` rejected the pipe-joined multi-id form
(`"80|81|82"`) that Piwigo core's own delete calls use; the param is now
untyped with `ACCEPT_ARRAY` and split in the handler, matching
`pwg.images.delete`.

## 0.2.x (post-import)

- Remove the Groups review sub-view (connected components of pending pairs)
— not useful next to the triage queue and Volumes tools.
- Fix: `setVerdict`/`markReviewed` now `stripslashes()` JSON pair params
(Piwigo's `addslashes()` on all request values was corrupting string-id
pairs sent from HTML attributes).
- Drop the confirmation prompt on group-dismiss actions (superseded by the
Groups view removal).
- Learned scoring: naive-Bayes reweighting of match signals once enough
confirmed/rejected verdicts exist.
- OCR cover phase (Tesseract title-page text signature).
- Public volume-set display: grid badges and cover-strip on picture pages.
- Review UI polish.

## 0.2.0 — initial import