Security
- Fixed two unauthenticated holes: a path traversal that could download any file the app can read (including its database), and a Plex image-proxy flaw that could send the Plex token to another host. If your instance was reachable from outside your network, rotate your API key/password and Plex token.
Fixed
- Remote workers' audio cleanup kept the tracks marked for removal and dropped the rest.
- Setting or detecting a track's language no longer marks the native-language tracks for removal.
- Renaming never overwrites an existing file or folder, and the post-conversion audio-tag rename no longer alters titles ("Octopussy" → "OctEAC3sy").
- A job that can't find its own output no longer adopts another job's in-progress file.
Docker images
Pinned to this release:
docker pull ghcr.io/i-ial9000/shrinkerr:v0.9.155 # portable (amd64 + arm64, CPU)
docker pull ghcr.io/i-ial9000/shrinkerr:v0.9.155-nvenc # x86_64 + NVIDIA GPU (NVENC)
docker pull ghcr.io/i-ial9000/shrinkerr:v0.9.155-edge # as above but ffmpeg master
docker pull ghcr.io/i-ial9000/shrinkerr:v0.9.155-edge-nvencFloating tags (:latest, :edge, :nvenc, :edge-nvenc) track the most recent release of each lineage.