Dictionarry-Hub/profilarr v2.3.0

on GitHub

v2.3.0

Profilarr v2.3.0 adds experimental Sonarr v5 support, scoped API keys, password and SSO login together, and Basic Auth for Arr instances behind a reverse proxy. It also substantially reduces memory use and image size.

Upgrade notes

• The local authentication bypass is gone.
• Any existing API keys become full access "default" keys.
• AUTH=oidc is deprecated. Use AUTH=on with all three OIDC_* settings.

Security

This release fixes three security issues. Read each advisory for details and any steps to take.

• GHSA-w2w8-9gr2-cg28: sanitized backup downloads.
• GHSA-6wpc-hrgx-553v: markdown from linked databases.
• GHSA-xhjf-xjhw-69mh: SQL in linked databases.

✨ Features

• Add named API keys with per-area permissions (#942)
• Log outbound proxy settings at startup (#945)
• Allow password and SSO login together (#947)
• Show delay profile delays in minutes, hours or days (#960)
• Choose a landing page (#966)
• Require API key or token to change an instance or service URL (#975)
• Confirm identity before creating an API key (#976)
• Experimental Sonarr v5 support with per-profile quality sizes (#978)
• Add optional Basic Auth support to Sonarr and Radarr (#638)
• Separate rename runs from the rename schedule (#996)
• Show and link a condition's regex (#999)

🐛 Fixes

• Persist library sort and download status filter (#919)
• Rename issue template folder so GitHub detects it (#938)
• Compact sanitized backup downloads (#943)
• Compare timestamps with millisecond precision (#968)
• Render descriptions as markdown only (#973)
• Keep notification service secrets off the browser (#974)
• Stop quality profile sync showing unsaved changes after a sync (#981)
• Highlight the Quality Profiles nav header and trim new page padding (#986)
• Prevent arr settings refresh crash (#673)
• Explain when a reverse proxy login blocks the connection test (#994)
• Block ATTACH on PCD connections (#1000)

⚡ Performance

• Upgrade Deno to 2.9 and slim compiled binary (#940)

📚 Documentation

• Enhance README badges (#915)
• Add needs info closing policy (#917)
• Explain how to trust private certificates (#997)

♻️ Refactors

• Remove local bypass (#912)

🔧 Maintenance

• Align typescript with deno (#933)
• Redo issue templates (#937)
• Tidy issue contact links (#939)
• Restyle toggles and action button tooltips (#941)
• Support release notes intro in release tags (#964)
• Speed up dev server startup (#979)
• Split major dependency updates out of the Dependabot group (#989)

⚙️ CI

• Add PR template, description check and Claude reviews (#958)
• Handle hotfix backports manually and fix hotfix release notes (#959)

🌱 New Contributors

• @zze0s made their first contribution in #638

Full Changelog: v2.2.0...v2.3.0