release: v0.19.0

Release v0.19.0. See the `## [0.19.0] — 2026-09-29` section of
[CHANGELOG.md](https://github.com/ralksta/immich-folio/blob/dev/CHANGELOG.md)
for the full list.

Highlights: client proofing links (#683), custom content pages (#738),
asset picker search (#740), concurrent-edit detection (#742), env-locked
settings (#739), an accessibility baseline (#741), three security fixes
with advisories (#737, #755, #759), and a pre-release quality pass
(#780–#797).

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: ralksta <ralksta@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Ralf <rohlenbo79@gmail.com>
Co-authored-by: Paul Thies <110185070+ImScheinox@users.noreply.github.com>
Co-authored-by: lancetm714 <108419425+lancetm714@users.noreply.github.com>
Co-authored-by: Lance Martin <lancetaylor95@gmail.com>

app/api/admin/__tests__/settings-write.test.ts

@@ -95,3 +95,41 @@ describe('PUT /api/admin/settings — site password', () => {
     expect(written.sitePassword).toBe('');
   });
 });
+
+/**
+ * Values the site would ignore used to be written with a success message: the
+ * accent fell back to the preset, the columns were clamped, the sitemap went
+ * out without an address (QA A-14).
+ */
+describe('PUT /api/admin/settings — values the site would ignore', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('refuses them, names each field, and writes nothing', async () => {
+    const res = await put({
+      url: 'folio.example',
+      theme: { preset: 'minimal', accent: 'rot' },
+      grid: { columns: 9, gap: 12 },
+    });
+    const body = await res.json();
+
+    expect(res.status).toBe(400);
+    expect(writeSettingsYaml).not.toHaveBeenCalled();
+    expect(body.fields.map((f: { field: string }) => f.field).sort()).toEqual([
+      'grid.columns',
+      'theme.accent',
+      'url',
+    ]);
+    expect(body.fields.every((f: { message: string }) => f.message.length > 0)).toBe(true);
+  });
+
+  it('writes the same fields once they hold values the site uses', async () => {
+    const res = await put({
+      url: 'https://folio.example',
+      theme: { preset: 'minimal', accent: '#e60012' },
+      grid: { columns: 6, gap: 0 },
+    });
+
+    expect(res.status).toBe(200);
+    expect(writeSettingsYaml).toHaveBeenCalledOnce();
+  });
+});