Commit Graph

816 Commits

Author SHA1 Message Date
fallenbagel
64569638a6 fix(availabilitysync): improve season existence check and handle episode validation 2026-04-09 20:30:18 +08:00
fallenbagel
35c0296578 refactor(availability): add debug logging for Jellyfin season checks and final seasons 2026-04-09 20:00:16 +08:00
Ludovic Ortega
2432e8dd7b feat(webhook): add imdbid to webhook notification (#2658)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-04-08 22:41:42 +02:00
fallenbagel
fe2c0416ef fix(emby): use static version in auth header for emby only (#2821) 2026-04-07 23:12:54 +02:00
Doug Rathbone
6aeab38ad6 fix(request): correct delete permission check and await movie save (#2742) 2026-04-07 07:48:24 +00:00
fallenbagel
0b8f872828 fix(entities): replace MySQL-only onUpdate with @UpdateDateColumn (#2823) 2026-04-05 21:53:30 +08:00
v3DJG6GL
77f2c13cfb feat(notifications): add ntfy markdown formatting (#2602) 2026-04-04 17:51:41 +08:00
Robbin "Roboroads" Schepers
6d8b2b7393 feat(quota): added support for unlimited quota days (#2797) 2026-04-04 10:42:46 +08:00
0xsysr3ll
1bb638e175 fix: await missing repository saves (#2760) 2026-04-01 15:16:30 +02:00
fallenbagel
685cb449b1 refactor(watchlistsync): log media request creation after success instead of before (#2790) 2026-04-01 15:07:34 +02:00
fallenbagel
036d000f26 refactor(imageproxy): reduce noisy image cache logging (#2789) 2026-04-01 14:40:14 +02:00
0xsysr3ll
993ae4c58e feat(blocklist): add support for collections (#1841) 2026-03-30 06:19:45 +08:00
Shyam
56b79ff38c feat(i18n): add Estonian language support (#2611) 2026-03-29 02:54:52 +08:00
Angelo Olivera
865396fd28 fix(watchlist-sync): handle empty watchlists on PostgreSQL (#2718) 2026-03-23 18:55:40 +05:00
0xsysr3ll
eaf397a021 feat(userlist): add sortable columns to User List (#1615) 2026-03-21 04:45:00 +05:00
YakGravity
10f23f009d fix(jellyfin-scanner): add TheMovieDb provider fallback for Jellyfin scanner (#2605) 2026-03-17 16:18:43 +01:00
0xsysr3ll
90d407d410 fix(movie,tv): respect display language for trailers (#2674) 2026-03-16 18:29:40 +01:00
Michael Thomas
36243a0deb chore: upgrade to eslint v9 (#2574) 2026-03-16 21:12:30 +05:00
fallenbagel
6c52a2f3ad fix(settings): serialize settings writes and prevent partial overwrites (#2696) 2026-03-16 11:29:41 +01:00
fallenbagel
0be18968b4 fix: disambiguate tmdb ids by media type across lookups (#2577) 2026-03-14 23:47:21 +05:00
Gauthier
d25d0ca570 fix(requests): mark requests as completed when media is already available (#2462)
Co-authored-by: fallenbagel <98979876+Fallenbagel@users.noreply.github.com>
2026-03-14 17:45:41 +05:00
0xsysr3ll
f40323c7c5 fix(migration): repair postgres blocklist id sequence (#2686) 2026-03-12 21:58:11 +05:00
0xsysr3ll
dccdc95927 feat(i18n): add Luxembourgish language support (#2671) 2026-03-12 19:07:58 +05:00
Michael Thomas
8563362588 test: support server-side unit testing (#2485) 2026-03-12 18:39:41 +05:00
0xsysr3ll
40edaea43f feat(i18n): add Vietnamese language support (#2670) 2026-03-12 15:59:56 +05:00
Jerra94
ff4ab21a9e feat(webhook): add jellyfinMediaId and jellyfinUserId to webhook notification (#1959) 2026-03-06 12:04:13 +01:00
0xsysr3ll
15489486cb fix(plex): set 4K Plex URLs whenever ratingKey4k is set (#2635) 2026-03-05 22:51:42 +01:00
bogo22
4ce0db1959 feat(trending): add filter options (#2137)
Signed-off-by: Florian Hoech <code@florians-web.de>
2026-03-05 15:24:55 +05:00
0xsysr3ll
3152f727ef feat(notifications): webhook custom headers (#2230)
Signed-off-by: 0xsysr3ll <0xsysr3ll@pm.me>
2026-03-05 15:23:47 +05:00
fallenbagel
9ec3d585d1 fix(email): correctly classify final MIME header in PGP email encryption (#2618) 2026-03-04 03:17:56 +05:00
fallenbagel
a16d0464a6 fix(issues): update issue timestamp when adding comments (#2616) 2026-03-02 12:35:18 +01:00
Lachlan Wisdom
3557745b62 feat(jellyfin): allow Jellyfin Guids with dashes for import-from-jellyfin endpoint (#2340) 2026-03-02 16:22:33 +05:00
0xsysr3ll
c23117eb6b feat(requests): mark requests as failed when Radarr/Sonarr unreachable (#2171)
Signed-off-by: 0xsysr3ll <0xsysr3ll@pm.me>
2026-03-02 04:41:27 +05:00
fallenbagel
61e0377361 feat(notifications): add priority setting for ntfy agent (#2306) 2026-03-02 04:37:57 +05:00
0xsysr3ll
001f6b1a34 fix(media): exclude null mediaAddedAt entries (#2607) 2026-03-01 22:51:51 +05:00
fallenbagel
5c34c91257 feat(sonarr): add monitorNewItems option to sonarr settings & modal (#2071) 2026-02-28 02:08:44 +05:00
ventiph
a2d1e1b06f refactor(notifications): move event from author to title field in Discord Embed (#2119) 2026-02-28 01:48:11 +05:00
Rin
e086081b19 fix(proxy): add path validation guardrail to imageproxy (#2531) 2026-02-28 00:14:05 +05:00
Gauthier
946bdecec5 Merge commit from fork
This PR fixes a security issue where authenticated users could access and modify data belonging to
other users. The isOwnProfileOrAdmin() middleware was missing from several push subscription API
routes. As a result, any authenticated user on the instance could manipulate the userId parameter in
the URL to view or delete the push subscriptions of other users.
2026-02-28 00:58:50 +08:00
fallenbagel
4f089b29d0 Merge commit from fork
Add ownership check to GET /api/v1/user/:id so the full user object(including eager-loaded settings
with notification credentials) is onlyreturned to the user themselves or MANAGE_USERS admins. All
otherauthenticated users receive a stripped response (which is the intended behaviour as
https://github.com/sct/overseerr/pull/3695#issuecomment-1817827774). Also expands
User.filteredFields to strip sensitive fileds to prevent leaking credentials
2026-02-28 00:58:28 +08:00
fallenbagel
4ae2068409 Merge commit from fork
Fix a logic flaw in the jellyfin auth guard that allowed unauthenticated users to register accounts
on Plex-configured instances by authenticating against an attacker-controlled Jellyfin server.
2026-02-28 00:36:17 +08:00
Pierre Spring
10ea21b20f feat: self-host font for better privacy (#2540) 2026-02-27 10:48:48 +01:00
Kenshin9977
55776ea24f fix(radarr): trigger search for existing monitored movies without files (#2391) 2026-02-25 15:58:05 +01:00
0xsysr3ll
947f70c3d7 fix(watch-data): use sentinel values to avoid invalid SQL syntax (#2552) 2026-02-23 21:24:48 +01:00
fallenbagel
3bcb4da1e5 feat(servarr-api): make Servarr API request timeout configurable (#2556) 2026-02-23 00:32:31 +01:00
fallenbagel
5013d1d54d fix(sonarr): use configured metadata provider for season filtering (#2516) 2026-02-22 18:13:39 +01:00
fallenbagel
68f56d2035 fix(jellyfin-scanner): include unmatched seasons in processable seasons (#2538) 2026-02-21 06:51:02 +05:00
fallenbagel
7c60a5c3c5 fix(plex-scanner): add TVDb to TMDB fallback in plex scanner (#2537) 2026-02-20 22:48:52 +01:00
fallenbagel
9da8bb6dea fix: preserve blocklist on media deletion & optimise watchlist-sync (#2478) 2026-02-18 21:23:50 +01:00
fallenbagel
e0e4b6f512 fix(watchlist-sync): correct permission typo for TV auto requests (#2488) 2026-02-18 15:23:20 +01:00