0xsysr3ll
3152f727ef
feat(notifications): webhook custom headers ( #2230 )
...
Signed-off-by: 0xsysr3ll <0xsysr3ll@pm.me >
2026-03-05 15:23:47 +05:00
fallenbagel
1dc51542aa
fix(setup): fix Plex login not proceeding after authentication ( #2596 )
2026-03-04 03:22:01 +05:00
fallenbagel
9ec3d585d1
fix(email): correctly classify final MIME header in PGP email encryption ( #2618 )
2026-03-04 03:17:56 +05:00
fallenbagel
a16d0464a6
fix(issues): update issue timestamp when adding comments ( #2616 )
2026-03-02 12:35:18 +01:00
fallenbagel
835e9176c0
fix(email): preserve newlines in PGP key textarea fields ( #2617 )
2026-03-02 16:33:11 +05:00
Lachlan Wisdom
3557745b62
feat(jellyfin): allow Jellyfin Guids with dashes for import-from-jellyfin endpoint ( #2340 )
2026-03-02 16:22:33 +05:00
0xsysr3ll
fece7537e4
fix(settings): remove beta info banner ( #2615 )
2026-03-02 11:30:09 +01:00
0xsysr3ll
c23117eb6b
feat(requests): mark requests as failed when Radarr/Sonarr unreachable ( #2171 )
...
Signed-off-by: 0xsysr3ll <0xsysr3ll@pm.me >
2026-03-02 04:41:27 +05:00
fallenbagel
61e0377361
feat(notifications): add priority setting for ntfy agent ( #2306 )
2026-03-02 04:37:57 +05:00
0xsysr3ll
001f6b1a34
fix(media): exclude null mediaAddedAt entries ( #2607 )
2026-03-01 22:51:51 +05:00
Ludovic Ortega
f74306ed06
chore(helm): upgrade seerr to 3.1.0 ( #2597 )
...
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr >
2026-02-28 10:12:28 +05:00
fallenbagel
5c34c91257
feat(sonarr): add monitorNewItems option to sonarr settings & modal ( #2071 )
2026-02-28 02:08:44 +05:00
ventiph
a2d1e1b06f
refactor(notifications): move event from author to title field in Discord Embed ( #2119 )
2026-02-28 01:48:11 +05:00
Rin
e086081b19
fix(proxy): add path validation guardrail to imageproxy ( #2531 )
2026-02-28 00:14:05 +05:00
fallenbagel
720a75b58d
docs(blog): release notes for seerr v3.1.0 addressing critical security vulnerabilities [skip ci] ( #2594 )
2026-02-27 19:56:52 +01:00
seerr-weblate-bot
4bd7c1955e
chore(i18n): update translations from Weblate ( #2419 )
...
Co-authored-by: Weblate <noreply@weblate.org >
Co-authored-by: Auggie <773150+augustuen@users.noreply.github.com >
Co-authored-by: Bas <910100490+weblate@proton.me >
Co-authored-by: Dani Hengeveld <dani10hengeveld@gmail.com >
Co-authored-by: Eneko <eneko.perez@gmail.com >
Co-authored-by: Ingo-vS <ivs01@vomsondern.net >
Co-authored-by: Jamal R. <jamal2362@googlemail.com >
Co-authored-by: Jan-T. Brinkmann <jtbrinkmann@proton.me >
Co-authored-by: JanDziaslo <u22_bartosznikitiuk@zsp1.siedlce.pl >
Co-authored-by: Kyalarys <charli.pn@proton.me >
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr >
Co-authored-by: MAxime Renault <mrenault95@gmail.com >
Co-authored-by: Marcos <silvamarcos1919@outlook.com >
Co-authored-by: Miguel Pacheco <runway-venus-kung@duck.com >
Co-authored-by: Mihai Goia <synedu123@gmail.com >
Co-authored-by: Nils Karlsson Pyssling <nisse@users.noreply.translate.seerr.dev >
Co-authored-by: SulliL <susu.leduc@gmail.com >
Co-authored-by: Thadah D. Denyse <thadahdenyse@protonmail.com >
Co-authored-by: Tung Huynh <tung75605@gmail.com >
Co-authored-by: Ulrik J <ulrik.johansen@me.com >
Co-authored-by: dtalens <databio@gmail.com >
Co-authored-by: iridium <cobus014@icloud.com >
Co-authored-by: lauantaimakkara <a.lj.unma.va.l@googlemail.com >
Co-authored-by: tkymmm <lempicka@sluice.xyz >
Co-authored-by: ugyes <ferenc.bodi@live.com >
Co-authored-by: w-club <w@w-w.club >
2026-02-27 18:53:28 +00:00
fallenbagel
687f18b6b8
ci(create-tag): correct quote style in commit message for tag preparation ( #2593 )
2026-02-28 02:00:37 +08:00
Gauthier
946bdecec5
Merge commit from fork
...
This PR fixes a security issue where authenticated users could access and modify data belonging to
other users. The isOwnProfileOrAdmin() middleware was missing from several push subscription API
routes. As a result, any authenticated user on the instance could manipulate the userId parameter in
the URL to view or delete the push subscriptions of other users.
2026-02-28 00:58:50 +08:00
fallenbagel
4f089b29d0
Merge commit from fork
...
Add ownership check to GET /api/v1/user/:id so the full user object(including eager-loaded settings
with notification credentials) is onlyreturned to the user themselves or MANAGE_USERS admins. All
otherauthenticated users receive a stripped response (which is the intended behaviour as
https://github.com/sct/overseerr/pull/3695#issuecomment-1817827774 ). Also expands
User.filteredFields to strip sensitive fileds to prevent leaking credentials
2026-02-28 00:58:28 +08:00
fallenbagel
4ae2068409
Merge commit from fork
...
Fix a logic flaw in the jellyfin auth guard that allowed unauthenticated users to register accounts
on Plex-configured instances by authenticating against an attacker-controlled Jellyfin server.
2026-02-28 00:36:17 +08:00
Ludovic Ortega
0d40a42de7
chore: updated the Contributing and Security guides to reflect our current practices ( #2579 )
2026-02-27 15:23:42 +01:00
Pierre Spring
10ea21b20f
feat: self-host font for better privacy ( #2540 )
2026-02-27 10:48:48 +01:00
Kenshin9977
55776ea24f
fix(radarr): trigger search for existing monitored movies without files ( #2391 )
2026-02-25 15:58:05 +01:00
Pierre Spring
f42a4ecf82
refactor(tailwind): replace deprecated tailwind utilities ( #2542 )
2026-02-25 13:28:00 +01:00
Jort
a00c9e5e7c
chore(husky): fixed husky commit message from bash/zsh syntax to sh syntax ( #2572 )
2026-02-25 13:27:07 +01:00
Pierre Spring
cd8b386bf8
chore(eslint): add react/self-closing-comp ( #2563 )
2026-02-23 22:58:46 +01:00
0xsysr3ll
947f70c3d7
fix(watch-data): use sentinel values to avoid invalid SQL syntax ( #2552 )
2026-02-23 21:24:48 +01:00
William Howell
3a42f593d5
chore(helm): Add GatewayAPI route support to helm chart ( #2544 )
...
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr >
2026-02-23 13:01:36 +01:00
fallenbagel
3bcb4da1e5
feat(servarr-api): make Servarr API request timeout configurable ( #2556 )
2026-02-23 00:32:31 +01:00
fallenbagel
5013d1d54d
fix(sonarr): use configured metadata provider for season filtering ( #2516 )
2026-02-22 18:13:39 +01:00
Pierre Spring
b843be0cad
fix(link-account): fix error-message override ( #2547 )
2026-02-22 12:41:37 +01:00
fallenbagel
68f56d2035
fix(jellyfin-scanner): include unmatched seasons in processable seasons ( #2538 )
2026-02-21 06:51:02 +05:00
fallenbagel
7c60a5c3c5
fix(plex-scanner): add TVDb to TMDB fallback in plex scanner ( #2537 )
2026-02-20 22:48:52 +01:00
mjonkus
a0d0eb1858
docs: update Unraid install and migration guides with dual permission methods ( #2532 )
...
Co-authored-by: Mindaugas Jonkus <mjonkusgmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr >
2026-02-20 19:12:27 +00:00
Ludovic Ortega
7e9dff3a1b
docs: add a warning in migration-guide for third party installation ( #2527 )
...
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr >
2026-02-20 11:44:47 +01:00
Ludovic Ortega
cecdd63108
chore: disable nextjs telemetry ( #2517 )
...
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr >
2026-02-20 11:27:50 +01:00
Ludovic Ortega
880fbc902d
chore: update contributing guide regarding Automated AI Agent ( #2518 )
...
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr >
2026-02-20 04:43:00 +05:00
Ludovic Ortega
fba20c1b39
ci: remove discord notification from release ( #2501 )
...
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr >
2026-02-19 22:47:26 +01:00
nova-api
fa905be002
docs: remove double quotes (") from DB_HOST environment variable ( #2514 )
2026-02-19 08:56:25 +00:00
fallenbagel
9da8bb6dea
fix: preserve blocklist on media deletion & optimise watchlist-sync ( #2478 )
2026-02-18 21:23:50 +01:00
Michael Reid
0e636a3f99
docs(synology): add installation guide via SynoCommunity ( #2503 )
...
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr >
2026-02-18 16:49:51 +01:00
fallenbagel
e0e4b6f512
fix(watchlist-sync): correct permission typo for TV auto requests ( #2488 )
2026-02-18 15:23:20 +01:00
Ludovic Ortega
dc1734d41f
docs(truenas): update install/migration guide ( #2491 )
...
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr >
2026-02-18 17:30:25 +05:00
Ludovic Ortega
06e5eb0704
ci: add create-tag workflow to streamline release process ( #2493 )
...
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr >
2026-02-18 12:22:16 +00:00
DataBitz
88afcc113d
docs: media server support clarification [skip ci] ( #2498 )
2026-02-18 14:08:48 +05:00
Joe Harrison
4939f13dbe
ci: update concurrency logic ( #2481 )
2026-02-17 14:47:16 +01:00
Dallas Gordon
5e57fdcf66
ci: add semantic-pr workflow to enforce conventional commits ( #2472 )
2026-02-17 13:33:41 +00:00
fallenbagel
cf4883a55e
chore(github): add docs and maintenance issue templates ( #2467 )
2026-02-17 11:47:58 +01:00
blassley
5e64d49c32
docs(unraid): improve unraid migration guide ( #2470 )
2026-02-17 05:12:47 +05:00
fallenbagel
c6bcfe0ae4
perf: add missing indexes on all foreign key columns ( #2461 )
2026-02-17 00:36:55 +08:00