v1.7.0

• feat: advanced search > add actor filter (TMDB with_people)
• feat: probe DISPLAY instead of trusting it, auto-provision Xvfb
• fix: keep the existing episode when a merge or upgrade move fails
• fix: never send 18+ download titles or errors to telemetry
• fix: share captcha clearance between threads
• fix: release the captcha profile lock on every solve error
• fix: enforce the real captcha timeout
• fix: allow live upgrades and reinstalls of hoster modules
• fix: remove a module's catalogue on live uninstall
• fix: send series title, season and imdb id to the opensubtitles search
• fix: refresh the s.to browse rows hourly
• fix: stop voe retries after a cancelled captcha
• fix: derive the s.to series url from the season url correctly
• fix: expire cached megaplay and echovideo stream urls
• fix: stream veev downloads of unknown size to disk
• fix: probe hoster redirects through the configured dns and mirrors
• fix: keep the dns fallback session on the shared cookie jar
• fix: mute only the probing thread during the hoster stub probe
• fix: raise an error when vidoza has no source
• fix: close superseded failover responses
• fix: show the media library calendar overlay
• fix: file user cancels of encodings as cancelled
• fix: keep the queue worker from claiming jobs while paused
• fix: report a failed tmdb keyword download as failed
• fix: run one library watcher scan per location at a time
• fix: apply the chosen sort to video library search results
• fix: hide the page loader after chevron and modifier clicks and back navigation
• fix: offer every enabled hoster in settings and auto-sync and keep stored hosters
• fix: load devinfos.js once on the devinfos page
• fix: link configure paths to the downloads tab for admins only
• fix: translate remaining template strings
• fix: restore database snapshots through the sqlite backup api
• fix: skip the legacy wal file when the database is not imported
• fix: let the audio-track cache prune progress past existing files
• fix: keep the finished copy when a library move cannot remove the source
• fix: skip setting writes, audits and module restarts for unchanged values
• fix: match tmdb keyword search on names only
• fix: align queue bulk retry, cancel and reorder with the single actions
• fix: read ffmpeg errors without blocking the stream status
• fix: keep the megakino url migration from locking the database
• fix: add client settings endpoint for non-admin accounts
• fix: add the missing auto-sync group rename endpoint
• fix: keep transient tmdb errors out of the calendar cache
• fix: rescan books and comics after sidecar and comic changes
• fix: stop rescan loop for offline locations with outdated book or comic data
• fix: bundle translations and anime4k shaders in the pyinstaller build
• fix: migrate the legacy database wal file
• fix: read env file and vapid keys from the config directory
• fix: write image proxy cache files atomically
• fix: stop conversion threads from replacing sys.stdout
• fix: let the worker watchdog restart only its own workers
• fix: enforce the cineinfo query timeout
• fix: show each seerr search result's own poster
• fix: stop orphaned captcha timers
• fix: drop late reader answers for books that are no longer open
• fix: open the clicked book when a shelf filter is active
• fix: restore the chosen language in the download modal
• fix: keep history filters applied when changed during a fetch
• fix: allow restoring unencrypted backups without password
• fix: revalidate comic pages instead of caching them as immutable
• fix: translate remaining frontend strings
• fix: fetch provider data only for episodes missing on disk in auto-sync
• fix: re-read due auto-sync jobs before running them and run the most overdue first
• fix: refresh the auto-sync page on its own and show running, queued and due states
• fix: keep auto-sync dry runs free of database writes, notifications and telemetry
• fix: read the ALTCHA state from the DOM so the captcha form gets submitted
• fix: submit the captcha form via its own button with a requestSubmit fallback
• fix: initialise final_url in the CLI captcha solver
• fix: use removeprefix instead of lstrip for www in provider domain checks
• fix: match captcha checkbox keywords as whole words
• fix: keep environment/third-party errors out of crash reports; use s.to mirror in browser
• fix: disable HTTP/3 for requests to stop TMDB lookup failures
• fix: cache Seerr lookups, keep data on transient failures
• fix: remove search dropdown; fix tmdb batch timeout, media memo, poster precache
• fix: treat every s.to mirror as home in the Playwright modal solver (there was another issue next to the PR with the same issue)
• fix: solve the s.to captcha modal when a mirror answers the redirect
• fix: stop re-downloading an episode when a local post-download step fails
• fix: explain a killed self-update instead of losing the evidence
• fix: distinct placeholder for the exclude-provider field
• refactor: remove the unreachable parallel audio and video download branch
• perf: ship the inter font instead of loading google fonts
• perf: show page content when parsed and stop the hidden loader animation
• perf: drop invisible backdrop filters
• perf: load monitoring panels on first open
• perf: render the telemetry consent flag server-side
• perf: animate skeletons and progress stripes with transforms
• perf: look up template translations once per request
• perf: reuse date formatters
• perf: cache scraper pages for two minutes
• perf: cache custom dns lookups and bypass an unresponsive dns server
• perf: resolve filmo and aniwaves hoster urls once per attempt
• perf: resolve captcha dns pins in parallel with a deadline
• perf: reuse hoster configs for subtitle lookups
• perf: limit search time across mirrors
• perf: reuse connections for veev chunk downloads
• perf: memoise the library alias index and title keys
• perf: stream proxied segments in chunks
• perf: write upscale progress only on change
• perf: share autosync root listings between jobs
• perf: detect anime4k engines once per process
• perf: revalidate downloaded folders and calendar with etags
• perf: invalidate only the affected library locations
• perf: carry encoding and upscale counts on the queue badge
• perf: keep one idle anchor connection per process to stop wal churn
• perf: skip the write lock on idle queue claims
• perf: add upscale_queue status index
• perf: make stats and history queries sargable
• perf: run sqlite optimize hourly
• perf: read uptime_enabled before building the uptime config
• perf: send telemetry system info off the request thread
• perf: gzip responses and cache versioned static files for a year
• perf: load hls, pdf and epub libraries on demand
• perf: share the library listing and slim tmdb data between requests
• perf: fetch tmdb details with one request per lookup
• perf: cache series models, episode scans and hoster probes
• perf: slim and revalidate the queue list
• perf: scan each library folder once with one stat per video file
• perf: reuse unchanged comic rows and cache comic page lists
• perf: memoise library bases and cut cover cache lookups
• perf: render queue hub and home feed only on changes
• perf: lazy load posters and limit parallel series lookups
• perf: poll status endpoints instead of full listings
• perf: slow down idle polls
• perf: skip unchanged position saves and heartbeats
• perf: queue sync-all and manual syncs with at most two running at a time
• perf: throttle on-hold re-checks, cache unreachable custom paths and scan folders with scandir
• docs: document new endpoints, limits and module setting events
• test: cover round two fixes
• test: cover request limits, setting events, queue bulk and tmdb lookups
• test: cover auto-sync prefetch, due-job refresh, manual sync queue and captcha helpers
• test: drop the test for the removed home suggest endpoint
• build: raise security floors for aiohttp, brotli, certifi, pillow and urllib3
• security: refuse private addresses for every direct link connection
• security: verify tls certificates for downloads, subtitles and probes
• security: check the stream proxy target at connect time
• security: hand scoped accounts only the aliases of their own folders
• security: embed trailers through youtube-nocookie
• security: limit request body size
• security: bound and cache veev availability checks
• security: allow forced update checks for admins only, at most once a minute
• security: check ownership on push unsubscribe
• security: log only setting keys when settings are saved
• security: validate tmdb detail ids
• security: accept only video files in stream endpoints
• security: keep reading positions and bookmarks per account
• security: apply the age gate to the language separated library listing
• security: block kids accounts from direct links and site search
• security: restrict the media server image proxy to artwork paths
• security: throttle wrong kids mode pins
• security: cap syncplay streams and make closing rooms admin only
• security: redact notification urls and push only to own devices
• security: escape stats ignore controls and dns test status
• security: scheme check telemetry export links