Skip to content

chore(deps): update ghcr.io/seerr-team/seerr docker tag to v3.4.0 - #45

Open
github-actions[bot] wants to merge 1 commit into
masterfrom
renovate/ghcr.io-seerr-team-seerr-3.x
Open

chore(deps): update ghcr.io/seerr-team/seerr docker tag to v3.4.0#45
github-actions[bot] wants to merge 1 commit into
masterfrom
renovate/ghcr.io-seerr-team-seerr-3.x

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
ghcr.io/seerr-team/seerr minor v3.3.0v3.4.0

Release Notes

seerr-team/seerr (ghcr.io/seerr-team/seerr)

v3.4.0

Compare Source

This release patches a path traversal vulnerability in the avatar image proxy.

Exploitation vectors:

  • A malicious or compromised Jellyfin/Emby media server returning a crafted HTTP response.
  • A man-in-the-middle attacker intercepting the connection to the media server, if it is configured over HTTP instead of HTTPS (the default setting).
🛡️ Security
🚀 Features
🐛 Bug Fixes
  • (availability-sync) Prevent false removals for merged-version Plex items (#​3224) - (46d8033)
  • (discover) Use added sort in recent requests slider (#​3202) - (8ccd0f6)
  • (email) Respect hosts file for SMTP connections (#​3082) - (b660201)
  • (i18n) Fallback to server locale for "Default" user lang in notifs (#​3190) - (ef9edc8)
  • (next) Add next-env.d.ts to .gitignore (#​3282) - (3279393)
  • (notifications) Make the Discord IDs available even when the notification is disabled on Seerr (#​3139) - (a8f1780)
  • (proxy) Proxy clients built before proxy init (#​3196) - (8ad191f)
  • (scanners) Decline orphaned requests when media is removed from servarr (#​3191) - (2e0e4ce)
  • (subscriber) Await request status updates (#​3223) - (f481b56)
  • (ui) Revalidate request list after approving or declining a request (#​3283) - (e810b98)
  • (webpush) Guard subscriptions request until user loads (#​3113) - (6829850)
  • Support for IPv6 address literals in HOST env var (#​2614) - (0adbf50)
  • Prevent cross-instance external ID collisions (#​3203) - (8e02d92)
  • Close manage movie sidebar without back reopening (#​2590) - (0a1f703)
  • Availability sync demotion and orphan season rollup edge cases (#​3148) - (784faa9)
📖 Documentation
⚙️ Miscellaneous Tasks
  • (actions) Update github actions (#​3041) - (0438710)
  • (dev) Add devenv setup (#​3138) - (d2ffe4f)
  • (i18n) Update translations from Weblate - (4b65ab5)
  • (i18n) Update translations from Weblate - (1926095)
  • (i18n) Update translations from Weblate - (d051deb)
  • (i18n) Update translations from Weblate - (8d351bc)
  • (i18n) Update translations from Weblate - (3f33842)
  • (i18n) Update translations from Weblate - (6c8527f)
  • (i18n) Update translations from Weblate - (ab26f06)
  • (i18n) Update translations from Weblate - (0a305f6)
  • (i18n) Update translations from Weblate - (32249f2)
  • (i18n) Update translations from Weblate - (2a249a8)
  • (release) Prepare v3.4.0 - (2dbe886)
  • (release) Prepare 3.4.0 release - (b21049a)

New Contributors ❤️

@github-actions

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants