Release v3.19.2

Release v3.19.2.

Changelog

3.19.2 - 2026-09-08

User-facing changes

Fixed

• Jellyfin: If Jellyfin setup saves the server but the browser cannot keep the new session, SeerrNG now refreshes setup state and guides you to sign in again instead of submitting the same server details twice.
• Authentication: The Plex login popup now closes automatically after Plex returns from a successful sign-in, while SeerrNG continues using its existing PIN polling and authentication checks.
• Release Pipeline: Container release verification now retries temporary registry inspection failures before rejecting an otherwise valid multi-architecture image.
• Release Pipeline: Main-branch releases now continue through image and artifact validation when the live deployment host is unavailable, while the live deployment is safely skipped until its storage is healthy.

Security

• Dependencies: SeerrNG now ships patched versions of its runtime, image-processing, email, upload, and documentation dependencies, including fixes for recently disclosed remote-code-execution, denial-of-service, and input-validation vulnerabilities.
• Documentation Build: The documentation build now uses a patched SWC HTML minifier that prevents embedded JSON from escaping into executable script markup during static-site generation.

🐛 Bug Fixes

• (auth) Close completed Plex login popups - (f2f1722)
• (build) Keep Plex popup tests out of Next pages - (618cec3)
• (ci) Keep releases independent of live deployment storage - (0184176)
• (release) Retry transient manifest verification failures - (4733037)
• (security) Refresh vulnerable runtime dependencies - (8676b3b)
• (security) Update docs SWC HTML minifier - (102f353)
• (setup) Recover after Jellyfin session loss - (6f3a723)

⚙️ Miscellaneous Tasks

• (release) Mark generated prep commits internal - (04c3104)

Container images are published by this release pipeline; binary assets and package channels have been published after asset generation.