ROMarrNG v0.14.10

[0.14.10] - 2026-10-13

User-facing changes

Security

• Validation: ROMarrNG's packaged acquisition proof now rejects TLS 1.0 and 1.1 on its local HTTPS fixture, requiring TLS 1.2 or newer. This improves security validation without changing the application's runtime network behavior.
  Container image: ghcr.io/snapetech/romarrng:0.14.10
• Browser edition: ghcr.io/snapetech/romarrng:0.14.10-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.10.

ROMarrNG v0.14.9

[0.14.9] - 2026-10-13

User-facing changes

Added

• Seerrng: Files delivered to SeerrNG now say whether they matched your loaded DATs, so SeerrNG can show a verified badge on ROM requests. The SeerrNG handshake reports this as assetDatVerification.
  Container image: ghcr.io/snapetech/romarrng:0.14.9
• Browser edition: ghcr.io/snapetech/romarrng:0.14.9-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.9.

ROMarrNG v0.14.8

[0.14.8] - 2026-10-13

User-facing changes

Added

• Settings: Settings > General lets each browser choose regional date, time, and number formatting, defaulting to browser settings. Counts, ratings, sizes, dates, and timestamps use that region; date-only values keep their day and anniversaries stay yearless. The choice stays in that browser. Regional formatting does not change the selected interface language or ROM translation filters.
• Interface Language: ROMarr lets each browser choose from eleven interface languages, with English fallback. Navigation, page titles, Library filters, request workflows, and Interactive Search use translated labels, actions, and grab statuses. Arabic interface support remains deferred until right-to-left layout and core workflows are reviewed; Arabic is available as a regional-format preference.

Changed

• Localization: The regional-format control now explains browser-default formatting in the selected interface language. When browser storage is unavailable, the selected format continues to apply for the current tab.

Security

• Credentials: Validation snapshots exclude dotted and extensionless credentials, private/API keys, access/refresh-token and client-secret material, suffixed dotenv credentials, and non-source files under credential folders. Source modules and safe templates such as tokens.env.example remain available to tests.
• Validation: ROMarrNG validation now uses GitHub-hosted runners for every event. Public workflow jobs no longer execute on a persistent local machine.
  Container image: ghcr.io/snapetech/romarrng:0.14.8
• Browser edition: ghcr.io/snapetech/romarrng:0.14.8-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.8.

ROMarrNG v0.14.7

[0.14.7] - 2026-10-12

User-facing changes

Added

• Acquisition: Collections adds strict regions, selected translation languages, and Switch TitleDB sets. Hub sources can search and stage downloads for normal import. Dashboard scripts work again, renamed downloads retain request identity, and Discord sends its required client identifier.
  • Action required: Add a ROM Hub download client to enable plugin acquisition.

Changed

• Integrations: The new upstream comparison distinguishes ROMarr's shared request API from ROMarrNG's SeerrNG contract, standalone additions, and replacement conditions.
• Documentation: The upstream backlog guide now links each audited issue and pull request to the implementation, its tests, and the remaining checks that need a reporter's environment.

Fixed

• Integration: DAT-backed SeerrNG requests now match common region aliases, retries keep their active status, and Hub fetch failures close the request. Switch catalog loading works without DATs, translation rules also apply when 1G1R is off, and Hub platform data improves release scoring. Platform-specific Hub searches skip results without a verified platform.
• Integration: SeerrNG DAT browsing and requests now honor saved region and translation policies. Requests sharing a download each receive completion status and deliverable assets. Both image editions test sandboxed Hub acquisition and SeerrNG delivery before publication.

Security

• Plugins: ROM Hub plugins now have bounded temporary storage and cannot change file permissions, spawn child processes, or use io_uring to bypass socket restrictions. The trusted SDK runner loads before plugin paths become importable. Plugin file access stays within installed code, approved assets, and required runtime files, reducing the impact of a misbehaving source.
• Validation: Local test runs now require a trusted Linux sandbox that hides operator files, ambient secrets, service sockets, and network access from candidate test code. Dependency roots that resolve outside the candidate tree are rejected before they can be mounted into the sandbox.
  • Action required: run local tests through trusted launcher
• Validation: Validation task and runtime-probe processes now use restricted environment variables and private temporary settings, reducing exposure of unrelated credentials and configuration during validation.
• Validation: Dependency installation is limited to hosted CI and receives only explicitly approved proxy, private-index, and custom CA settings; local offline tests use a preconfigured Python environment. Hosted checkouts no longer persist their token into .git/config, and Linux task children cannot read the validation runner's environment through procfs.
  Container image: ghcr.io/snapetech/romarrng:0.14.7
• Browser edition: ghcr.io/snapetech/romarrng:0.14.7-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.7.

ROMarrNG v0.14.6

[0.14.6] - 2026-10-12

User-facing changes

Removed

• Packaging: This repository no longer contains YunoHost packaging or updates the YunoHost app repository. Existing YunoHost installations will no longer receive package updates through ROMarrNG.
  Container image: ghcr.io/snapetech/romarrng:0.14.6
• Browser edition: ghcr.io/snapetech/romarrng:0.14.6-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.6.

ROMarrNG v0.14.5

[0.14.5] - 2026-10-12

User-facing changes

Fixed

• Imports: Completed downloads now match their queue entries by client job ID or torrent hash before title, so renamed jobs are still imported and older saved queue rows remain compatible.
• Library: ROMarr refreshes password-grant RomM tokens before expiry and safely retries RomM 5.3.1's expired-token error, keeping library reads available without treating a real server outage as an authentication failure.
  Container image: ghcr.io/snapetech/romarrng:0.14.5
• Browser edition: ghcr.io/snapetech/romarrng:0.14.5-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.5.

ROMarrNG v0.14.4

[0.14.4] - 2026-10-12

User-facing changes

Changed

• Images: Published container images now use the updated SBOM toolchain for their SPDX inventories, keeping component records current for downstream review.
  Container image: ghcr.io/snapetech/romarrng:0.14.4
• Browser edition: ghcr.io/snapetech/romarrng:0.14.4-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.4.

ROMarrNG v0.14.3

[0.14.3] - 2026-10-12

User-facing changes

Added

• Library: Request status now reports whether a finished file has been placed in a RomM library folder, so SeerrNG can show an In RomM Library badge once the file is in place.

Changed

• Distribution: Manually dispatched ROMarrNG browser image builds now receive commit-specific tags on non-default branches, so candidate browser images can be tested without changing the default browser tag.
• Documentation: ROMarrNG’s install and SeerrNG guides now explain the current DAT catalog, sandbox requirements, TLS options, YunoHost package, and image tags.
• Ci Validation: Adds source-bound pytest receipts and verifies the current test result before building a ROMarrNG container image.
  Container image: ghcr.io/snapetech/romarrng:0.14.3
• Browser edition: ghcr.io/snapetech/romarrng:0.14.3-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.3.

ROMarrNG v0.14.2

[0.14.2] - 2026-10-07

User-facing changes

Fixed

• Release Pipeline: Encrypted backups now build across ROMarrNG's published container architectures, keeping the supported ARMv7 image available alongside AMD64 and ARM64.

Security

• Backup: ROMarr can now export and restore credential-inclusive backups as passphrase-encrypted AES-GCM envelopes, keeping API keys and download-client passwords unreadable in the saved file.
  Container image: ghcr.io/snapetech/romarrng:0.14.2
• Browser edition: ghcr.io/snapetech/romarrng:0.14.2-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.2.

ROMarrNG v0.14.1

[0.14.1] - 2026-10-06

User-facing changes

Changed

• Release Pipeline: Both published container variants now generate their SBOMs with the updated, SHA-pinned Anchore action, keeping software inventory generation current across the release workflow.
  Container image: ghcr.io/snapetech/romarrng:0.14.1
• Browser edition: ghcr.io/snapetech/romarrng:0.14.1-browser (AMD64/ARM64; Playwright client only)
• GitHub Container Registry

Pull with: docker pull ghcr.io/snapetech/romarrng:0.14.1.