v1.2.5

🎉 Release v1.2.5

Fixes:

• ✅ BookDate connection test requires an admin after setup

  • #361
  • the setup wizard can still test the built-in providers; custom provider addresses are admin-only. Recommended update.

• ✅ download links and Prowlarr credentials handled more strictly

  • #355
  • #300
  • Thanks https://github.com/johannbre !
  • redirects are followed hop by hop for every torrent client, the Prowlarr key and any URL credentials are only used when fetching from Prowlarr and are never stored or logged, and a stalled download source is retried. If your Prowlarr publishes download links on a different host name than the one set in RMAB, set RMAB's Prowlarr URL to that host.

• ✅ startup and saved credentials hardened

  • #358
  • the app starts its background services by itself after boot; when you change a server address in settings, RMAB asks you to re-enter that server's password, API key or token

• ✅ Next.js 16.4.2 and dependency updates

  • #362
  • security and maintenance updates. If you set HTTP_PROXY, HTTPS_PROXY or NO_PROXY, make sure NO_PROXY covers your local services (Prowlarr, download clients, Plex, Audiobookshelf). Release titles from Prowlarr RSS and Goodreads shelves now show apostrophes and accents correctly.

  Upgrade:

  docker pull ghcr.io/kikootwo/readmeabook:latest
  docker compose down
  docker compose up -d

What's Changed

• fix: tighten how download links and Prowlarr credentials are handled by @kikootwo in #355
• test: pin EPUB fixer, RSS entity decoding and relative-time wording by @kikootwo in #356
• chore: group Prisma updates and skip Prisma and jsdom majors in Dependabot by @kikootwo in #357
• fix: harden startup initialisation and saved-credential handling by @kikootwo in #358
• fix: require admin for the BookDate connection test after setup by @kikootwo in #361
• chore(deps): update Next.js to 16.4.2 and the npm minor/patch group by @kikootwo in #362
• chore: release v1.2.5 by @kikootwo in #363

Full Changelog: v1.2.4...v1.2.5