Tasterr v2.0.0

What's changed

• Plex-backed sessions now learn from bounded canonical watch history without persisting raw Plex history, progress, account/server identifiers, URLs, or resource tokens.
• Caller-scoped Continue Watching adds playback progress and resume context. Concurrent bounded server discovery allows healthy later-priority Plex connections to succeed without weakening TLS, machine-identity, redirect, or credential controls.
• Home adds Picks You Wouldn't Usually Watch and a hideable, initially collapsed Something for Everyone Tonight household blend. The personalized, service, decade, and randomized movie/TV genre rails use the reviewed v2 ordering.
• Owner, managed, and shared Plex accounts remain isolated. Items without canonical TMDB GUIDs fail closed instead of using title/year guesses.
• Migration 0006 adds Plex history synchronization timestamps and the canonical watched_plex signal index.

Upgrade

1. Record the currently running immutable image digest.
2. Take and validate a sensitive backup of /data/tasterr.db.
3. Set TASTERR_IMAGE=ghcr.io/zacharyarthur/tasterr:2.0.0.
4. Run docker compose pull and docker compose up -d --no-build.
5. Verify health, login, Home, detail, and one non-destructive request-state read.

Startup applies migration 0006 automatically.

Do not start a v1.1 image on a v2 database. To return to v1.1, keep the v2 image selected, stop the writer, run the documented Alembic downgrade to 0005, and only then select the previous immutable v1.1 digest. Restoring the matching validated pre-upgrade backup is also supported.

For a fully immutable deployment, pin:

ghcr.io/zacharyarthur/tasterr@sha256:1e9b6a461003f5a34c8ad5dbe77e0d5505a283747bd777d3a2da948cede36d89

Verified artifact

• Platforms: linux/amd64, linux/arm64
• Stable digest: sha256:1e9b6a461003f5a34c8ad5dbe77e0d5505a283747bd777d3a2da948cede36d89
• 2.0.0, 2.0, 2, and latest resolve to the stable digest.
• Candidate sha-e75ee250454c1f0ce7fe693ce0637b11f68045c9 remains unchanged at sha256:a3a2b0ea81922b81c58a4950d643f961df75a2c10241d222514e33cddc16d99b.
• GitHub artifact attestations verified for candidate and stable images.
• Public package visibility, credential-free pulls, and disposable fresh Compose installations passed.
• Tagged-image verification passed health, hardened headers, SPA serving, non-root runtime, license inclusion, and named-volume persistence.
• The release gate passed with 634 backend and 106 frontend tests, generated API type freshness, strict typing and linting, production build, Chromium E2E, and native container smoke.
• Dependency audits reported no known backend or frontend vulnerabilities.
• The complete Seerr 3.3.0 baseline passed ten live cases on 2026-07-13. The complete five-test owner/managed/shared Plex suite passed on 2026-08-27 against PMS 1.43.3.10896-cb3ebc72d.
• A release rerun could not complete the retained owner history phase because the stored access may have become stale. The release owner completed a fresh integrated manual test and explicitly accepted the dated automated baselines. This is an exception, not a claim that the fresh automated rerun passed.

Known limitations

• Plex items without canonical TMDB GUIDs are omitted; legacy-agent libraries may need an agent upgrade and metadata refresh.
• Plex library access remains managed in Plex rather than through a separate Tasterr allow/deny control.
• Continue Watching resolves at most twenty catalog items per request to keep work bounded.
• Tasterr remains a single-process household service; multiple workers are unsupported.

Full changelog: v1.1.0...v2.0.0