Skip to content

v7.0.0 — Seekarr

Choose a tag to compare

View all tags
@jeblankenship jeblankenship released this 18 May 17:48
v7.0.0
88b6202
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Docker

docker pull ghcr.io/diybits/seekarr:7.0.0

What is Seekarr?

Seekarr is a fork of Huntarr v6.6.3 by the PlexGuide team. It continuously searches your *Arr applications (Sonarr, Radarr, Lidarr, Readarr, Whisparr, Eros) for missing media and quality upgrades, with a web UI on port 9705.

⚠ Breaking Changes (upgrading from Huntarr)

  • Session cookie renamed (huntarr_session → seekarr_session) — all users must log in again after upgrading.
  • Docker volume renamed (huntarr-config → seekarr-config) — migrate your data before upgrading: 
    docker volume create seekarr-config                                                                                                                        
docker run --rm -v huntarr-config:/from -v seekarr-config:/to alpine sh -c "cp -av /from/. /to/"                                                           
docker volume rm huntarr-config
  • /api/stats/reset_public removed — use the authenticated /api/stats/reset endpoint instead.
  • Environment variable renamed (HUNTARR_RUN_MIGRATION → SEEKARR_RUN_MIGRATION).

Security Fixes

  • [HIGH] Removed hardcoded fallback Flask secret key ('dev_key_for_sessions'). A cryptographically random 64-character key is now auto-generated on first start and stored at /config/secret_key.
  • [HIGH] Local Bypass Mode authentication now uses only the OS-level TCP peer address (request.remote_addr). Previously, any client could send X-Forwarded-For: 127.0.0.1 to bypass auth.
  • [MEDIUM] Removed unauthenticated /api/stats/reset_public endpoint.
  • [MEDIUM] Passwords now hashed with bcrypt instead of SHA-256. Existing accounts are migrated automatically on next login — no action required.

What Changed

  • Full rebrand from Huntarr → Seekarr across all source files, templates, assets, and documentation.
  • 76 broken in-app help icon links replaced with real GitHub Pages docs URLs.
  • Reverse proxy support (TRUST_PROXY=1), session persistence across restarts, and secure cookie flag.
  • Python updated to 3.11; 6 dependency CVEs resolved.
  • GitHub Actions overhauled: new CI pipeline (lint + test), security scanning (pip-audit + Trivy), and this release workflow.
  • Full GitHub Pages documentation site with per-app integration guides and a How It Works page.
Assets 2
Loading