RetroSaveManager v0.1.12

Highlights

Hardened AUTH_MODE=enabled so non-public routes require authentication.
Added opt-in TRUST_REMOTE_USER_HEADER=true support for deployments behind a trusted reverse proxy.
Fixed helper auth rebinding for devices whose app-password binding points at stale device IDs.
Fixed GBA/RetroDECK libretro saves that omit standalone mGBA signature footers.
Fixed Game Boy .rtc sidecar validation for libretro real-time-clock saves.
Fixed N64 Controller Pak uploads with blank note slots.
Fixed false-positive rejection of real numbered game titles such as 007 - ....
Deduplicated quarantine records by payload SHA-256 to stop repeated rejected uploads growing without bound.
Corrected Defenders of Oasis from Genesis/Mega Drive to Game Gear.
Updated frontend lockfile dependencies so npm audit --audit-level=moderate is green.

After upgrading from a release before v0.1.12, run a one-time save rescan if you have existing saves:

docker compose run --rm retrosavemanager rescan-saves

This reapplies current system detection and corrects existing Defenders of Oasis metadata to Game Gear.

ghcr.io/joeblack2k/retrosavemanager:v0.1.12
ghcr.io/joeblack2k/retrosavemanager:sha-22793a18a1d825ab331db7dc9817ce81bc67b11e