Commit Graph

2907 Commits

Author SHA1 Message Date
0xsysr3ll
3152f727ef feat(notifications): webhook custom headers (#2230)
Signed-off-by: 0xsysr3ll <0xsysr3ll@pm.me>
2026-03-05 15:23:47 +05:00
fallenbagel
1dc51542aa fix(setup): fix Plex login not proceeding after authentication (#2596) 2026-03-04 03:22:01 +05:00
fallenbagel
9ec3d585d1 fix(email): correctly classify final MIME header in PGP email encryption (#2618) 2026-03-04 03:17:56 +05:00
fallenbagel
a16d0464a6 fix(issues): update issue timestamp when adding comments (#2616) 2026-03-02 12:35:18 +01:00
fallenbagel
835e9176c0 fix(email): preserve newlines in PGP key textarea fields (#2617) 2026-03-02 16:33:11 +05:00
Lachlan Wisdom
3557745b62 feat(jellyfin): allow Jellyfin Guids with dashes for import-from-jellyfin endpoint (#2340) 2026-03-02 16:22:33 +05:00
0xsysr3ll
fece7537e4 fix(settings): remove beta info banner (#2615) 2026-03-02 11:30:09 +01:00
0xsysr3ll
c23117eb6b feat(requests): mark requests as failed when Radarr/Sonarr unreachable (#2171)
Signed-off-by: 0xsysr3ll <0xsysr3ll@pm.me>
2026-03-02 04:41:27 +05:00
fallenbagel
61e0377361 feat(notifications): add priority setting for ntfy agent (#2306) 2026-03-02 04:37:57 +05:00
0xsysr3ll
001f6b1a34 fix(media): exclude null mediaAddedAt entries (#2607) 2026-03-01 22:51:51 +05:00
Ludovic Ortega
f74306ed06 chore(helm): upgrade seerr to 3.1.0 (#2597)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-28 10:12:28 +05:00
fallenbagel
5c34c91257 feat(sonarr): add monitorNewItems option to sonarr settings & modal (#2071) 2026-02-28 02:08:44 +05:00
ventiph
a2d1e1b06f refactor(notifications): move event from author to title field in Discord Embed (#2119) 2026-02-28 01:48:11 +05:00
Rin
e086081b19 fix(proxy): add path validation guardrail to imageproxy (#2531) 2026-02-28 00:14:05 +05:00
fallenbagel
720a75b58d docs(blog): release notes for seerr v3.1.0 addressing critical security vulnerabilities [skip ci] (#2594) 2026-02-27 19:56:52 +01:00
seerr-weblate-bot
4bd7c1955e chore(i18n): update translations from Weblate (#2419)
Co-authored-by: Weblate <noreply@weblate.org>
Co-authored-by: Auggie <773150+augustuen@users.noreply.github.com>
Co-authored-by: Bas <910100490+weblate@proton.me>
Co-authored-by: Dani Hengeveld <dani10hengeveld@gmail.com>
Co-authored-by: Eneko <eneko.perez@gmail.com>
Co-authored-by: Ingo-vS <ivs01@vomsondern.net>
Co-authored-by: Jamal R. <jamal2362@googlemail.com>
Co-authored-by: Jan-T. Brinkmann <jtbrinkmann@proton.me>
Co-authored-by: JanDziaslo <u22_bartosznikitiuk@zsp1.siedlce.pl>
Co-authored-by: Kyalarys <charli.pn@proton.me>
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr>
Co-authored-by: MAxime Renault <mrenault95@gmail.com>
Co-authored-by: Marcos <silvamarcos1919@outlook.com>
Co-authored-by: Miguel Pacheco <runway-venus-kung@duck.com>
Co-authored-by: Mihai Goia <synedu123@gmail.com>
Co-authored-by: Nils Karlsson Pyssling <nisse@users.noreply.translate.seerr.dev>
Co-authored-by: SulliL <susu.leduc@gmail.com>
Co-authored-by: Thadah D. Denyse <thadahdenyse@protonmail.com>
Co-authored-by: Tung Huynh <tung75605@gmail.com>
Co-authored-by: Ulrik J <ulrik.johansen@me.com>
Co-authored-by: dtalens <databio@gmail.com>
Co-authored-by: iridium <cobus014@icloud.com>
Co-authored-by: lauantaimakkara <a.lj.unma.va.l@googlemail.com>
Co-authored-by: tkymmm <lempicka@sluice.xyz>
Co-authored-by: ugyes <ferenc.bodi@live.com>
Co-authored-by: w-club <w@w-w.club>
2026-02-27 18:53:28 +00:00
fallenbagel
687f18b6b8 ci(create-tag): correct quote style in commit message for tag preparation (#2593) 2026-02-28 02:00:37 +08:00
Gauthier
946bdecec5 Merge commit from fork
This PR fixes a security issue where authenticated users could access and modify data belonging to
other users. The isOwnProfileOrAdmin() middleware was missing from several push subscription API
routes. As a result, any authenticated user on the instance could manipulate the userId parameter in
the URL to view or delete the push subscriptions of other users.
2026-02-28 00:58:50 +08:00
fallenbagel
4f089b29d0 Merge commit from fork
Add ownership check to GET /api/v1/user/:id so the full user object(including eager-loaded settings
with notification credentials) is onlyreturned to the user themselves or MANAGE_USERS admins. All
otherauthenticated users receive a stripped response (which is the intended behaviour as
https://github.com/sct/overseerr/pull/3695#issuecomment-1817827774). Also expands
User.filteredFields to strip sensitive fileds to prevent leaking credentials
2026-02-28 00:58:28 +08:00
fallenbagel
4ae2068409 Merge commit from fork
Fix a logic flaw in the jellyfin auth guard that allowed unauthenticated users to register accounts
on Plex-configured instances by authenticating against an attacker-controlled Jellyfin server.
2026-02-28 00:36:17 +08:00
Ludovic Ortega
0d40a42de7 chore: updated the Contributing and Security guides to reflect our current practices (#2579) 2026-02-27 15:23:42 +01:00
Pierre Spring
10ea21b20f feat: self-host font for better privacy (#2540) 2026-02-27 10:48:48 +01:00
Kenshin9977
55776ea24f fix(radarr): trigger search for existing monitored movies without files (#2391) 2026-02-25 15:58:05 +01:00
Pierre Spring
f42a4ecf82 refactor(tailwind): replace deprecated tailwind utilities (#2542) 2026-02-25 13:28:00 +01:00
Jort
a00c9e5e7c chore(husky): fixed husky commit message from bash/zsh syntax to sh syntax (#2572) 2026-02-25 13:27:07 +01:00
Pierre Spring
cd8b386bf8 chore(eslint): add react/self-closing-comp (#2563) 2026-02-23 22:58:46 +01:00
0xsysr3ll
947f70c3d7 fix(watch-data): use sentinel values to avoid invalid SQL syntax (#2552) 2026-02-23 21:24:48 +01:00
William Howell
3a42f593d5 chore(helm): Add GatewayAPI route support to helm chart (#2544)
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr>
2026-02-23 13:01:36 +01:00
fallenbagel
3bcb4da1e5 feat(servarr-api): make Servarr API request timeout configurable (#2556) 2026-02-23 00:32:31 +01:00
fallenbagel
5013d1d54d fix(sonarr): use configured metadata provider for season filtering (#2516) 2026-02-22 18:13:39 +01:00
Pierre Spring
b843be0cad fix(link-account): fix error-message override (#2547) 2026-02-22 12:41:37 +01:00
fallenbagel
68f56d2035 fix(jellyfin-scanner): include unmatched seasons in processable seasons (#2538) 2026-02-21 06:51:02 +05:00
fallenbagel
7c60a5c3c5 fix(plex-scanner): add TVDb to TMDB fallback in plex scanner (#2537) 2026-02-20 22:48:52 +01:00
mjonkus
a0d0eb1858 docs: update Unraid install and migration guides with dual permission methods (#2532)
Co-authored-by: Mindaugas Jonkus <mjonkusgmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr>
2026-02-20 19:12:27 +00:00
Ludovic Ortega
7e9dff3a1b docs: add a warning in migration-guide for third party installation (#2527)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-20 11:44:47 +01:00
Ludovic Ortega
cecdd63108 chore: disable nextjs telemetry (#2517)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-20 11:27:50 +01:00
Ludovic Ortega
880fbc902d chore: update contributing guide regarding Automated AI Agent (#2518)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-20 04:43:00 +05:00
Ludovic Ortega
fba20c1b39 ci: remove discord notification from release (#2501)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-19 22:47:26 +01:00
nova-api
fa905be002 docs: remove double quotes (") from DB_HOST environment variable (#2514) 2026-02-19 08:56:25 +00:00
fallenbagel
9da8bb6dea fix: preserve blocklist on media deletion & optimise watchlist-sync (#2478) 2026-02-18 21:23:50 +01:00
Michael Reid
0e636a3f99 docs(synology): add installation guide via SynoCommunity (#2503)
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr>
2026-02-18 16:49:51 +01:00
fallenbagel
e0e4b6f512 fix(watchlist-sync): correct permission typo for TV auto requests (#2488) 2026-02-18 15:23:20 +01:00
Ludovic Ortega
dc1734d41f docs(truenas): update install/migration guide (#2491)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-18 17:30:25 +05:00
Ludovic Ortega
06e5eb0704 ci: add create-tag workflow to streamline release process (#2493)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-18 12:22:16 +00:00
DataBitz
88afcc113d docs: media server support clarification [skip ci] (#2498) 2026-02-18 14:08:48 +05:00
Joe Harrison
4939f13dbe ci: update concurrency logic (#2481) 2026-02-17 14:47:16 +01:00
Dallas Gordon
5e57fdcf66 ci: add semantic-pr workflow to enforce conventional commits (#2472) 2026-02-17 13:33:41 +00:00
fallenbagel
cf4883a55e chore(github): add docs and maintenance issue templates (#2467) 2026-02-17 11:47:58 +01:00
blassley
5e64d49c32 docs(unraid): improve unraid migration guide (#2470) 2026-02-17 05:12:47 +05:00
fallenbagel
c6bcfe0ae4 perf: add missing indexes on all foreign key columns (#2461) 2026-02-17 00:36:55 +08:00