v2.12.1
Security patch for 2.12.0. Nothing else changes. The work on develop stays there for 2.13.0.
Docker tags
| Tag | What it tracks |
|---|---|
bitr8/agregarr:latest
| Stable releases. This is what you want. |
bitr8/agregarr:2.12.1
| Pinned to this exact release. |
bitr8/agregarr:develop
| Bleeding edge. Builds on every push, breaks sometimes. |
Upgrading from 2.12.0 is a pull. Config volumes are compatible.
Fixed
- Compromised eMudhra certificates should no longer be trusted. The image now uses Node 22.23.4 instead of the end-of-life Node 20. It blocks the eight compromised eMudhra intermediates and includes Node's 21 October security release. Trailer downloads through yt-dlp should refuse them too, using the newer Alpine CA bundle. (fork #154)
- New Plex Version health check. It turns red on Plex Media Server builds before 1.43.3.10861, which have vulnerabilities on CISA's Known Exploited list (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656). It only warns. See Plex's security notice.
Heads up
- If your Plex is older than 1.43.3.10861, the Health panel will go red after upgrading. Update Plex to clear it.
- One
DEP0060deprecation warning (util._extend) may appear in the container log at startup. It's harmless.
Thanks
Cheers to backstab5983 for reporting the certificate issue and the end-of-life Node runtime.