Commit Graph

2972 Commits

Author SHA1 Message Date
renovate[bot]
904bc83fe6 chore(deps): update dependency @svgr/webpack to v8 (#2021)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 15:05:19 +01:00
renovate[bot]
1d47c49337 chore(deps): update dependency @types/email-templates to v10 (#2349)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 14:01:13 +00:00
Michael Thomas
8563362588 test: support server-side unit testing (#2485) 2026-03-12 18:39:41 +05:00
0xsysr3ll
40edaea43f feat(i18n): add Vietnamese language support (#2670) 2026-03-12 15:59:56 +05:00
Weblate
b1adc79c75 chore(i18n): update translations from Weblate
Co-authored-by: Gallyam <gallyamb@gmail.com>
Co-authored-by: Jamal R. <jamal2362@googlemail.com>
Co-authored-by: Josiel Jordão <josiel-junior2@hotmail.com>
Co-authored-by: Marek <mara.pavelka@gmail.com>
Co-authored-by: Nehogy Irj <nehogyirj@gmail.com>
Co-authored-by: Nils Karlsson Pyssling <nisse@users.noreply.translate.seerr.dev>
Co-authored-by: Pysta <stefanjanckulik@gmail.com>
Co-authored-by: Roberto Saleri <roberto.saleri@gmail.com>
Co-authored-by: Sebastian Langer <sl@scn.cx>
Co-authored-by: SulliL <susu.leduc@gmail.com>
Co-authored-by: Thadah D. Denyse <thadahdenyse@protonmail.com>
Co-authored-by: Ulrik J <ulrikj@users.noreply.translate.seerr.dev>
Co-authored-by: Vincenzo Gianfelice <gianfelicevincenzo.dev@gmail.com>
Co-authored-by: Weblate <noreply@weblate.org>
Co-authored-by: chenhui_li <lichenhui1997@gmail.com>
Co-authored-by: fallenbagel <98979876+fallenbagel@users.noreply.github.com>
Co-authored-by: markspoiss007-web <markspoiss007@gmail.com>
Co-authored-by: tkymmm <lempicka@sluice.xyz>
Co-authored-by: ugyes <ferenc.bodi@live.com>
2026-03-12 15:58:13 +05:00
renovate[bot]
f047cab803 ci(actions): update github actions (#2672)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 00:43:38 +01:00
Gauthier
d5c5f1ff79 refactor: rename Error components to ErrorPage (#2668) 2026-03-10 21:40:05 +01:00
renovate[bot]
6aa4745285 build(docker): update node.js to 7aa86fa (#2355)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-10 21:35:16 +01:00
Ludovic Ortega
4d2b658221 ci: ignore helm scope in git-cliff (#2638)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-03-10 19:12:15 +01:00
0xsysr3ll
fbfcb43d2f fix(region-selector): prevent empty region reporting during sync (#2636) 2026-03-10 13:07:45 +01:00
Jerra94
ff4ab21a9e feat(webhook): add jellyfinMediaId and jellyfinUserId to webhook notification (#1959) 2026-03-06 12:04:13 +01:00
0xsysr3ll
15489486cb fix(plex): set 4K Plex URLs whenever ratingKey4k is set (#2635) 2026-03-05 22:51:42 +01:00
0xsysr3ll
94ccd47e76 fix: anchor streaming service filter check icon to each provider card (#2634) 2026-03-05 22:48:41 +01:00
renovate[bot]
e25c1a52ec ci(actions): update github actions (#2632)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 10:41:01 +00:00
bogo22
4ce0db1959 feat(trending): add filter options (#2137)
Signed-off-by: Florian Hoech <code@florians-web.de>
2026-03-05 15:24:55 +05:00
0xsysr3ll
3152f727ef feat(notifications): webhook custom headers (#2230)
Signed-off-by: 0xsysr3ll <0xsysr3ll@pm.me>
2026-03-05 15:23:47 +05:00
fallenbagel
1dc51542aa fix(setup): fix Plex login not proceeding after authentication (#2596) 2026-03-04 03:22:01 +05:00
fallenbagel
9ec3d585d1 fix(email): correctly classify final MIME header in PGP email encryption (#2618) 2026-03-04 03:17:56 +05:00
fallenbagel
a16d0464a6 fix(issues): update issue timestamp when adding comments (#2616) 2026-03-02 12:35:18 +01:00
fallenbagel
835e9176c0 fix(email): preserve newlines in PGP key textarea fields (#2617) 2026-03-02 16:33:11 +05:00
Lachlan Wisdom
3557745b62 feat(jellyfin): allow Jellyfin Guids with dashes for import-from-jellyfin endpoint (#2340) 2026-03-02 16:22:33 +05:00
0xsysr3ll
fece7537e4 fix(settings): remove beta info banner (#2615) 2026-03-02 11:30:09 +01:00
0xsysr3ll
c23117eb6b feat(requests): mark requests as failed when Radarr/Sonarr unreachable (#2171)
Signed-off-by: 0xsysr3ll <0xsysr3ll@pm.me>
2026-03-02 04:41:27 +05:00
fallenbagel
61e0377361 feat(notifications): add priority setting for ntfy agent (#2306) 2026-03-02 04:37:57 +05:00
0xsysr3ll
001f6b1a34 fix(media): exclude null mediaAddedAt entries (#2607) 2026-03-01 22:51:51 +05:00
Ludovic Ortega
f74306ed06 chore(helm): upgrade seerr to 3.1.0 (#2597)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-28 10:12:28 +05:00
fallenbagel
5c34c91257 feat(sonarr): add monitorNewItems option to sonarr settings & modal (#2071) 2026-02-28 02:08:44 +05:00
ventiph
a2d1e1b06f refactor(notifications): move event from author to title field in Discord Embed (#2119) 2026-02-28 01:48:11 +05:00
Rin
e086081b19 fix(proxy): add path validation guardrail to imageproxy (#2531) 2026-02-28 00:14:05 +05:00
fallenbagel
720a75b58d docs(blog): release notes for seerr v3.1.0 addressing critical security vulnerabilities [skip ci] (#2594) 2026-02-27 19:56:52 +01:00
seerr-weblate-bot
4bd7c1955e chore(i18n): update translations from Weblate (#2419)
Co-authored-by: Weblate <noreply@weblate.org>
Co-authored-by: Auggie <773150+augustuen@users.noreply.github.com>
Co-authored-by: Bas <910100490+weblate@proton.me>
Co-authored-by: Dani Hengeveld <dani10hengeveld@gmail.com>
Co-authored-by: Eneko <eneko.perez@gmail.com>
Co-authored-by: Ingo-vS <ivs01@vomsondern.net>
Co-authored-by: Jamal R. <jamal2362@googlemail.com>
Co-authored-by: Jan-T. Brinkmann <jtbrinkmann@proton.me>
Co-authored-by: JanDziaslo <u22_bartosznikitiuk@zsp1.siedlce.pl>
Co-authored-by: Kyalarys <charli.pn@proton.me>
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr>
Co-authored-by: MAxime Renault <mrenault95@gmail.com>
Co-authored-by: Marcos <silvamarcos1919@outlook.com>
Co-authored-by: Miguel Pacheco <runway-venus-kung@duck.com>
Co-authored-by: Mihai Goia <synedu123@gmail.com>
Co-authored-by: Nils Karlsson Pyssling <nisse@users.noreply.translate.seerr.dev>
Co-authored-by: SulliL <susu.leduc@gmail.com>
Co-authored-by: Thadah D. Denyse <thadahdenyse@protonmail.com>
Co-authored-by: Tung Huynh <tung75605@gmail.com>
Co-authored-by: Ulrik J <ulrik.johansen@me.com>
Co-authored-by: dtalens <databio@gmail.com>
Co-authored-by: iridium <cobus014@icloud.com>
Co-authored-by: lauantaimakkara <a.lj.unma.va.l@googlemail.com>
Co-authored-by: tkymmm <lempicka@sluice.xyz>
Co-authored-by: ugyes <ferenc.bodi@live.com>
Co-authored-by: w-club <w@w-w.club>
2026-02-27 18:53:28 +00:00
fallenbagel
687f18b6b8 ci(create-tag): correct quote style in commit message for tag preparation (#2593) 2026-02-28 02:00:37 +08:00
Gauthier
946bdecec5 Merge commit from fork
This PR fixes a security issue where authenticated users could access and modify data belonging to
other users. The isOwnProfileOrAdmin() middleware was missing from several push subscription API
routes. As a result, any authenticated user on the instance could manipulate the userId parameter in
the URL to view or delete the push subscriptions of other users.
2026-02-28 00:58:50 +08:00
fallenbagel
4f089b29d0 Merge commit from fork
Add ownership check to GET /api/v1/user/:id so the full user object(including eager-loaded settings
with notification credentials) is onlyreturned to the user themselves or MANAGE_USERS admins. All
otherauthenticated users receive a stripped response (which is the intended behaviour as
https://github.com/sct/overseerr/pull/3695#issuecomment-1817827774). Also expands
User.filteredFields to strip sensitive fileds to prevent leaking credentials
2026-02-28 00:58:28 +08:00
fallenbagel
4ae2068409 Merge commit from fork
Fix a logic flaw in the jellyfin auth guard that allowed unauthenticated users to register accounts
on Plex-configured instances by authenticating against an attacker-controlled Jellyfin server.
2026-02-28 00:36:17 +08:00
Ludovic Ortega
0d40a42de7 chore: updated the Contributing and Security guides to reflect our current practices (#2579) 2026-02-27 15:23:42 +01:00
Pierre Spring
10ea21b20f feat: self-host font for better privacy (#2540) 2026-02-27 10:48:48 +01:00
Kenshin9977
55776ea24f fix(radarr): trigger search for existing monitored movies without files (#2391) 2026-02-25 15:58:05 +01:00
Pierre Spring
f42a4ecf82 refactor(tailwind): replace deprecated tailwind utilities (#2542) 2026-02-25 13:28:00 +01:00
Jort
a00c9e5e7c chore(husky): fixed husky commit message from bash/zsh syntax to sh syntax (#2572) 2026-02-25 13:27:07 +01:00
Pierre Spring
cd8b386bf8 chore(eslint): add react/self-closing-comp (#2563) 2026-02-23 22:58:46 +01:00
0xsysr3ll
947f70c3d7 fix(watch-data): use sentinel values to avoid invalid SQL syntax (#2552) 2026-02-23 21:24:48 +01:00
William Howell
3a42f593d5 chore(helm): Add GatewayAPI route support to helm chart (#2544)
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr>
2026-02-23 13:01:36 +01:00
fallenbagel
3bcb4da1e5 feat(servarr-api): make Servarr API request timeout configurable (#2556) 2026-02-23 00:32:31 +01:00
fallenbagel
5013d1d54d fix(sonarr): use configured metadata provider for season filtering (#2516) 2026-02-22 18:13:39 +01:00
Pierre Spring
b843be0cad fix(link-account): fix error-message override (#2547) 2026-02-22 12:41:37 +01:00
fallenbagel
68f56d2035 fix(jellyfin-scanner): include unmatched seasons in processable seasons (#2538) 2026-02-21 06:51:02 +05:00
fallenbagel
7c60a5c3c5 fix(plex-scanner): add TVDb to TMDB fallback in plex scanner (#2537) 2026-02-20 22:48:52 +01:00
mjonkus
a0d0eb1858 docs: update Unraid install and migration guides with dual permission methods (#2532)
Co-authored-by: Mindaugas Jonkus <mjonkusgmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Ludovic Ortega <github@mail.adminafk.fr>
2026-02-20 19:12:27 +00:00
Ludovic Ortega
7e9dff3a1b docs: add a warning in migration-guide for third party installation (#2527)
Signed-off-by: Ludovic Ortega <ludovic.ortega@adminafk.fr>
2026-02-20 11:44:47 +01:00