Skip to content

v11.18.0

Choose a tag to compare

View all tags
@WhispersOfJ WhispersOfJ released this 25 Aug 17:55
v11.18.0
e08b4b6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

11.18.0 (2026-08-25)

Features

  • add /api/v2/cleanuparr/{instances,strikes} (7886b3f)
  • add /api/v2/host/{reboot,pacman-sync,pacman-upgrade} (0d9d725)
  • add /api/v2/prowlarr/indexers (Task 3) (5e1ddfc)
  • add /api/v2/radarr/exclude (Task 4) (1346ecf)
  • add /api/v2/ratings/* (imdb, mdblist rating lookups) (ee9a3cd)
  • add /api/v2/seerr/requests (b9be395)
  • add /api/v2/sonarr/monitor-episodes-fix (9020911)
  • add /healthz endpoint, close out Phase 1 with full test suite green (3d1a0f1)
  • add auth_app login/logout views backed by core.models.User sessions (fe51698)
  • add bootstrap management command for admin user and service api key (7a9207d)
  • add catalog app (list/status/install/remove for Docker-SDK software catalog) (dbad096)
  • add Django template + htmx browser UI, closing out Phase 3 (dc8d549)
  • add DRF envelope base, session-only permission, and ported client modules (50b53e8)
  • add DRF session-or-api-key authentication and permission class (0d280cc)
  • add letterboxd app (7 endpoints, scraping + ORM + cross-arr) (d4b53af)
  • add mdblist app (import-list, track/untrack, sync-tick for MDBList) (eff2936)
  • add nzbdav app (queue, history, dedup-config-check, stats, delete-failures) (9c5bb32)
  • add plex app (13 endpoints, complex diagnostics) (d888505)
  • add posters app (10 endpoints, background threads + SSE) (c9e16d6)
  • add queue app (cross-app download-queue aggregation) (2ab1fee)
  • add toast feedback to all quick action buttons on htmx completion (02d40c5)
  • add watchstate app (status, import, history proxy for WatchState) (292e9bd)
  • complete control panel redesign — design system, component library, all pages rebuilt (e368adc)
  • Complete UI redesign with modern dark theme and command palette (1e3e45c)
  • confirmation modal, connection monitoring, inline editing, parallel overview (4c2cd1c)
  • generate initial Django migration for core models (d7f1fb1)
  • port argon2 password and sha256 api-key hashing to core.security (68b25fc)
  • port host and arr apps, closing out Phase 2 (51 endpoints) (9a19606)
  • port same-origin verification middleware (e94c6a5)
  • port SQLAlchemy models to Django ORM in core app (b9a2941)
  • rebuild Poster Sync page with masonry gallery and sync controls (32edcbf)
  • scaffold Django project skeleton for control-panel migration (296c6ba)
  • wire SSE streaming for log viewer — live logs instead of 3s polling (2935156)

Bug Fixes

  • adapt NzbDAV config metrics to current API (dfcbede)
  • add HTTP_HOST/REMOTE_ADDR to host_actions 403 tests (8124bbc)
  • add rate limiting to all destructive host-level endpoints (67cb2f3)
  • adversarial review — XSS in toasts, SSE resource leak, reconnect race (61be38c)
  • align Speedtest Tracker catalog port (953af74)
  • bump Django to 5.2.17 for Python 3.14 compatibility (40f5f6d)
  • bump pytest for CVE-2025-71176, add rate-limit test, document secure cookie env var (687b77b)
  • cleanuparr missing-db raises 502 ServiceError, matching router.py (206b3b7)
  • control panel can reach Plex via host.docker.internal (60adf62)
  • correct MDBList response shape and IMDb N/A handling in ratings app (31db35a)
  • Django control panel Dockerfile, healthcheck, and static file serving (0186e9d)
  • document Metacache compose variables (a668252)
  • exercise real auth layer in watchstate import unauthenticated test (4cc90d4)
  • harden exporter metrics and live log handling (ba98cff)
  • harden Phase 1 findings from final review — secret key, session fixation, DRF defaults, gitignore (76960b1)
  • harden security — rate limiting, cookie config, ALLOWED_HOSTS, Docker import fallback, privilege docs (fcdd57c)
  • persist control-panel SQLite DB in mounted /data volume (acced04)
  • replace slack-github-action with plain curl in Trivy scan workflow (8340898)
  • restore server-side error logging in ServiceError/envelope handler (b7f2485)
  • Task 4 findings - idempotent exclusion + test fidelity (d559024)
  • UI redesign bug fixes and security improvements (0ec2800)
  • VerifySameOriginMiddleware host check + pytest.ini testpaths (9195d73)
  • wire sparkline data binding so ApexCharts shows live CPU/RAM/queue history (1af83b1)
  • wrap Plex httpx errors in posters list_libraries/gallery (ba503b6)
Assets 2
Loading