Skip to content

Tasterr v1.1.0

Choose a tag to compare

@ZacharyArthur ZacharyArthur released this 22 Aug 14:43
· 16 commits to main since this release
Immutable release. Only release title and notes can be modified.
8a00e7a

What's changed

  • Home discovery now uses accurate Recent Releases labels, covers the preceding 365 days for selected services, and keeps every remaining curated movie genre accessible through additional rail pages.
  • Available title details now offer validated, token-free Plex Web and Plex App handoffs with regular-to-4K fallback. Plex PIN authentication also cleans up its protected approval window after completion.
  • Signal-less users receive an optional, non-blocking, one-time taste picker after cold-start seeding. This release includes the additive 0005_taste_onboarding database migration.
  • Local login, Plex login, logout, and detected identity changes now form a secure TanStack Query session boundary. Cached or late-arriving data from one household user cannot render or repopulate state for the next user, while failed authentication transitions preserve the confirmed session.
  • Development tooling was updated to pip 26.2.1 and js-yaml 4.3.1, clearing both ecosystem vulnerability audits without adding a runtime dependency.

Upgrade

  1. Back up /data/tasterr.db using the documented configuration procedure.
  2. Set TASTERR_IMAGE=ghcr.io/zacharyarthur/tasterr:1.1.0.
  3. Run docker compose pull and docker compose up -d --no-build.

Startup applies the additive 0005_taste_onboarding migration. For rollback to v1.0.2, restore the matching pre-upgrade database backup if the older application cannot tolerate the migrated schema.

For a fully immutable deployment, pin:

ghcr.io/zacharyarthur/tasterr@sha256:b1897a4860e6afad981e5ba3ea959a1b45bc3091b524d330583623c94e0cb095

Verified artifact

  • Platforms: linux/amd64, linux/arm64
  • Stable digest: sha256:b1897a4860e6afad981e5ba3ea959a1b45bc3091b524d330583623c94e0cb095
  • 1.1.0, 1.1, 1, and latest resolve to the stable digest.
  • Candidate sha-8a00e7a0414fb69c4d4bb7bff9ad3a05e7089f58 remains at sha256:bf0558f76bec4ed75af838574ee7c91182e6d9ac8810856d1c55406146391a71.
  • GitHub artifact attestations verified for both candidate and stable images.
  • Credential-free pulls and fresh Compose installations passed health, SPA serving, non-root runtime, source/revision identity, and named-volume persistence checks.
  • The release gate passed with 490 backend and 98 frontend tests, strict typing and linting, the production build, Chromium E2E, and native container smoke.
  • At the release owner’s direction, the automated live Seerr contract suite was not rerun. The new Tasterr build was manually exercised before release.

Known limitations

  • Plex handoffs remain experimental because Plex clients may discard the requested title during sign-in or household-user selection.
  • A shared browser profile still has one cookie jar across tabs; concurrent tabs cannot carry independent household sessions.
  • Tasterr remains a single-process household service; multiple workers are unsupported.

Full changelog: v1.0.2...v1.1.0