I understand from the official announcement that manual upgrading isn't the preferred solution, but is there a release with only the modified files for those of us with modded galleries "despite the recommendation to the contrary"? If not, is there any chance of such a release (with the disclaimer that this is not the recommended method)?
It would be useful to some of us.
Jake
No, there's no such package, and there will be no such package. Create one for yourself if you need it, using a diff viewer like Winmerge (http://winmerge.sourceforge.net/). Chances are high that you'll be missing stuff though. Do as I suggested in the announcement thread: create a diff between your modded version and a vanilla copy of your version (cpg1.4.8). This way, you'll get a list of all your custom mods. Then upgrade to cpg1.4.9 and re-apply the mod from the list you created in the previous step. This way you can make sure that you get all changes.
I did a full overwrite (and ran the update.php script, etc.), except I did not overwrite my theme, config.php (of course), and displayimage.php. Strictly from a security point of view, is this sufficient?
Jake
Assuming you mean config.inc.php that should be fine, displayimage.php has not been changed.