Is it safe to update PhotoPrism?
Tracking photoprism/photoprism
Update with care.
No explicit breaking changes or required migration steps are called out, but the libheif upgrade (17 CVE fixes) and the VAAPI/FFmpeg 8 transcoding changes may affect video playback or transcoding behavior for users relying on hardware acceleration. The new free-disk-space threshold is opt-in but represents a behavioral change to indexing that admins should be aware of before updating.
What changed
Release 260601-a7d098548 is a service release focused on security hardening and reliability fixes. Notable additions include a configurable free disk space threshold that automatically pauses indexing, importing, and uploading to prevent storage volumes from filling up, and a new option to exclude specific formats from FFmpeg processing. Security improvements include reinforced user profile authorization checks, removal of a vulnerable Pebble binary (CVE-2026-39821), and an upgrade of libheif from v1.21.2 to v1.22.2 addressing 17 CVEs. Several bugs are also resolved, including fixes for hidden stack recovery, VAAPI transcoding compatibility with FFmpeg 8, folder album deletion loops, and PNG ICC profile handling.
Source
Every verdict on Bumplog traces back to a GitHub release. No invented details.