Pullbox v1.0.5

What's Changed

Patch release focused on production reliability under sustained background work
and large-library metadata synchronization.

Fixed

• Hardened indexer, download-client, scheduled-search, metadata, and ComicInfo
  background workflows against remote failures, provider throttling, and SQLite
  lock contention.
• Preserved failed and rejected indexer outcomes so retry, intervention, and
  blocklist handling remain visible instead of silently losing results.
• Deferred ComicInfo enrichment safely when providers throttle requests, while
  allowing imports to complete and enrichment to resume later.
• Made series sorting deterministic across all pages and compatible with native
  PostgreSQL enum columns.
• Reconciled issue wanted/skipped states during bulk monitor changes across all
  selected results.
• Preserved the active page and selected series during metadata hydration, and
  stopped expanded search-history details from flashing during live polling.
• Prevented automatic health checks from probing disabled indexers.
• Corrected scheduled-task table styling and pointer feedback for enabled import
  rule saves.

Commit Details

🐛 Bug Fixes

• harden series sorting and search lock retries
• pause search history polling for open details
• preserve series selection during metadata sync
• keep series metadata refresh on active page
• make series sorting deterministic across pages
• reconcile issue states during bulk monitoring
• round scheduled task table header
• show pointer for enabled import rules save
• avoid automatic disabled indexer checks
• preserve failed indexer search outcomes
• defer ComicInfo enrichment after provider throttling
• prevent background metadata database contention
• harden download client health checks
• handle rejected torrent retries gracefully
• harden indexer checks for production load

🧰 Chores

• bump version to 1.0.5 for release
• sync develop after v1.0.4 release

🐳 Docker Images

docker pull ghcr.io/pullboxapp/pullbox:1.0.5
docker pull docker.io/pullbox/pullbox:1.0.5

Digest: sha256:e1b079926bcfde3c5af40672847d642df57e79329464a58813efcb1ebf82ba61

🔐 Image Verification

Release images are signed with keyless Sigstore/Cosign using GitHub Actions OIDC.
These commands verify the exact multi-architecture image digest published by this release.

cosign verify \
  --certificate-identity-regexp '^https://github.com/pullboxapp/pullbox/\.github/workflows/docker-release\.yml@refs/tags/v1.0.5$' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  ghcr.io/pullboxapp/pullbox@sha256:e1b079926bcfde3c5af40672847d642df57e79329464a58813efcb1ebf82ba61

cosign verify \
  --certificate-identity-regexp '^https://github.com/pullboxapp/pullbox/\.github/workflows/docker-release\.yml@refs/tags/v1.0.5$' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  docker.io/pullbox/pullbox@sha256:e1b079926bcfde3c5af40672847d642df57e79329464a58813efcb1ebf82ba61

Full Changelog: v1.0.4...v1.0.5