v2.3.1

Fixed

• Local email/password sign-in now correctly recognizes Seerr admins and uses their full profile display name. Fixes #44 in #45.
• Failed or incomplete profile reads reject sign-in without updating local identity or creating a session, and emit a generic warning.

Upgrade

Use ghcr.io/zacharyarthur/tasterr:2.3.1 and recreate the container.
Sign out and back in with local credentials to refresh an incorrect admin flag or display name.
No configuration change or database migration is required; Plex sign-in is unchanged.

Verification

• Required PR checks and merged-main just release-check passed: 909 backend tests, 181 frontend tests, five browser journeys, and native container smoke.
• Backend and frontend locked dependency audits found no known vulnerabilities.
• The release owner confirmed successful manual candidate testing of local-admin sign-in and explicitly waived the complete automated live Seerr rerun for this patch. No fresh complete live-suite pass is claimed.
• Candidate and stable images passed anonymous pulls and fresh disposable installations: exact release revision/version, health, private logs, headers, SPA, non-root uid, volume persistence, and cleanup.
• Both AMD64 and ARM64 manifests and GitHub artifact attestations were verified.
• 2.3.1, 2.3, 2, and latest resolve to the same release manifest. The commit-SHA candidate retains its pre-tag digest.

Released artifacts

• Release commit: bde1f59cab8d513724f9b9161a3ed11fafbdd4e5
• Stable multi-platform manifest: sha256:de37229e53424f15078d3fbee86f3e34b3db8040b1b9da400e3bda4416981fae
• Immutable image reference: ghcr.io/zacharyarthur/tasterr@sha256:de37229e53424f15078d3fbee86f3e34b3db8040b1b9da400e3bda4416981fae
• Candidate tag: sha-bde1f59cab8d513724f9b9161a3ed11fafbdd4e5
• Unchanged candidate manifest: sha256:faa233165a7d29de002b6b3a97a090e16e75748e5596d3bce37179d0fcf50090

Pre-tag evidence: docs/releases/v2.3.1.md.

Full changelog: v2.3.0...v2.3.1