Repository navigation
Release v3.71.3
Release v3.71.3.
Changelog
3.71.3 - 2026-10-20
User-facing changes
Changed
- Containers: After a stable SeerrNG release is published,
:stable,:latest,:main, and:masternow point to its verified multi-architecture image digest in GHCR and Docker Hub. The release gate checks those channel aliases and the release's moving version tags for digest drift. - Settings: Settings > Services now groups integrations by purpose, making request destinations, media libraries, reader tools, downloads, and system controls easier to scan. Compact add actions reduce empty space, and Reader Apps stay available whenever book services are enabled.
- Containers: Stable container channel tags such as
:latest,:main, and:masternow move only after the release is published and its version tags pass digest verification.
Fixed
- Display: Cross-media pages now render their intended heading sizes and colors in production builds.
Security
- Security: Local Semgrep and Trivy scans are available to maintainers, with hosted scans on main changes, pull requests, and weekly. pnpm package installs and normal Dependabot version updates now wait seven days after publication; Dependabot security updates remain immediate. The local development container now runs as the unprivileged
nodeuser.
🐛 Bug Fixes
- (release) Fail closed on stable alias lookup - (854b759)
- (release) Reconcile aliases after release workflows - (38ef9cd)
- (release) Disable implicit latest image tag - (8f5f24c)
- (release) Select latest stable tag portably - (836a19d)
- (release) Keep stable container aliases synchronized - (87c7888)
- (security) Resolve scanner gaps and findings - (b19fe78)
- (security) Run Trivy for full scans - (0104982)
- (security) Add scanning and harden tools - (9c8d501)
- (ui) Load cross-media styles after globals - (de6d537)
- (ui) Restore cross-media heading styles - (055e74d)
📖 Documentation
- (release) Clarify stable alias promotion - (86d2648)
🧪 Testing
- (settings) Update setup assistant copy assertion - (9223b39)
Container images are published by this release pipeline; binary assets and package channels follow after asset generation.