Keep 2.23.3

Update the container’s Python and zlib packages with vendor security fixes.

Keep 2.23.2

• Ensure the container uses the patched zlib library for normal Python operations.
• Update the container’s Werkzeug dependency to 3.1.9.
• Update the container base and replace OpenSSL and Expat with fixed releases.
• Allow clean image scans to pass when expired security exceptions are unused; continue blocking findings that need an expired exception.

Keep 2.23.1

• Clarify that Leaving updates follow Maintainerr's configured rule schedule.
• Remove installation-specific maintenance tools and contributor branch restrictions from the public repository.

Keep 2.23.0

• Count down the next run time on Jobs in real time.
• Add pull to refresh on mobile pages.

Keep 2.22.1

Updates the JavaScript test tools to Node.js 24 LTS and fixes errors in the development, installation, API, backup, and recovery documentation. Installer links, the default Compose image, and icon cache references now use 2.22.1.

The documentation now explains when native image checks run, which job frequencies can be changed, and how to verify backups on Linux and macOS. It also corrects the registry recovery command.

Includes amd64 and arm64 images, corresponding source archives, and validation reports. Update both Keep services together using your installation's normal update procedure. The release tag and downloadable assets are locked after publication.

Keep 2.22.0

Keep 2.22.0 adds owner controls for scheduled jobs and makes email recipients easier to identify.

• Run jobs immediately and edit supported account, reminder, Seerr history, and connection-check frequencies.
• See each job's schedule, next run, queued/running state, and recent result together. The background worker status bar has been removed.
• Retain manual requests and saved frequencies across restarts, recover from temporary database write failures, and announce completed or failed attempts to screen readers.
• Show matching user names beside email recipients and search full names, display names, Plex usernames, and email addresses.

The release provides amd64 and arm64 container images, with downloadable corresponding sources and original validation evidence. Upgrade both Keep services together using the installation's normal update procedure.

Keep 2.21.6

Keep now has a gold media-case logo throughout the app, setup and admin pages, empty states, browser/mobile icons, and emails. Larger page logos and matching repository banners make the brand easier to see. Email headers follow light and dark mode and include the logo within the message.

• The Plex sign-in button now has a clean, flat edge with visible keyboard focus.
• Disabling the last enabled email recipient shows validation within Email admin, keeping the affected row open.
• Missing pages use a themed recovery screen with links back to Keep and the FAQ. API error responses remain compatible.

Both amd64 and arm64 images passed native application, security, installation, recovery, and source-material checks. This release publishes the original validated images and includes their matching sources, notices, checksums, and verification evidence.

See the installation guide for a new installation and the upgrade guide for an existing one.

Keep 2.21.5

Title details open immediately using the card's artwork and title, then load fresh metadata and optional watch history and Leaving estimates progressively.

• Hide empty collections and their jump links across Leaving, Kept, My Keeps, and Manage Library; show a helpful page empty state when nothing remains.
• Sort Leaving and Kept titles alphabetically to match Manage Library.
• Keep the selected All Keeps/My Keeps control yellow in light and dark mode.
• Match series delete buttons to the other delete buttons.
• Add the sign-in screenshot to the repository gallery.

Both native architectures passed application, security, installation, recovery, and matching-source validation. The retained image and source assets are published from the validated main commit.

Keep 2.21.4

Keep 2.21.4 fixes security findings and makes release validation faster.

• Email validation uses a bounded linear check while preserving the existing address policy. Mobile activity filters use a fixed local path with encoded filter values. Recovery trial credentials are clearly identified as synthetic API tokens; account passwords continue to use Argon2.
• The installer, launchers, Compose image, and installation guides consistently use 2.21.4. Fast regression checks now catch release-version mismatches before native image validation.
• Required main commits build and fully validate amd64 and arm64 images once. Approved publication reuses those exact images, matching sources, and original evidence, and rejects missing, expired, altered, or wrong-commit validation records.
• Allowlisted documentation changes can skip native image validation after the current version is published. Independent source downloads run concurrently with all checksum, signature, and source-coverage checks preserved. Superseded validation drafts are removed while protecting current and active work.

Both native images passed the application, security, installation, recovery, and corresponding-source checks in main validation run 37174545292. Windows PowerShell and filesystem checks also passed. GitHub CodeQL reports no open alerts. Full Windows Docker Desktop and physical-device fresh-install acceptance remain separate manual checks.

Use brspoon/keep:2.21.4 to pin this release or brspoon/keep:stable to follow the current stable release. The image supports Linux amd64 and arm64. Back up configuration and data before upgrading both Keep services together.

Matching source archives, license notices, checksums, and the original native verification evidence are attached below. See the installation guide, changelog, and Docker Hub repository.

Keep 2.21.3

Keep 2.21.3 improves first-time installation and setup.

• Setup completion stays disabled until the required Plex, Maintainerr, collection, and enabled email settings are saved. A checklist explains what is missing, and live connections are verified before setup finishes.
• Connections adds Return to Setup while initial setup is unfinished. Setup uses System or your saved appearance preference, with consistent hover and keyboard focus styling.
• Missing prerequisites show platform-specific installation commands or official setup links. The installer prints guidance without installing tools or changing Docker permissions automatically.
• The README adds the Keep logo and official prerequisite links; installation instructions explain the setup code and guided browser steps.
• SMTP authentication failures are handled cleanly when a username is configured without a saved password; unauthenticated relays remain supported.

The image supports Linux amd64 and arm64. Both native images passed application, security, installation, recovery, and source-material checks; Windows PowerShell and filesystem checks also passed. Full Windows Docker Desktop and physical-device fresh-install acceptance are separate manual checks.

Use brspoon/keep:2.21.3 to pin this release or brspoon/keep:stable to follow the current stable release. Back up configuration and data before upgrading both Keep services together. Matching source archives, notices, checksums, and original native verification evidence are attached to this release.