grimmory-tools/grimmory v3.3.2

Release v3.3.2

on GitHub

3.3.2 (2026-08-19)

This patch release of Grimmory contains many bug fixes - including one security related bug fix.

The security fix (#2357) improves our mitigations against SSRF attacks via more complete filters on outbound requests - reported by @tonghuaroot.

Changelog

Full Changelog: v3.3.1...v3.3.2

Bug Fixes

• api: add refresh token nbf to prevent immediate usage (#2245) (c7d147c)
• api: apply timeout to all restclient instances (#2321) (ef041dd)
• api: book files cannot be left in a detached state (#2389) (eb5d390)
• api: emit correct Content-Type for covers (#2285) (dfa81e3)
• api: prevent NPE with default value in MetadataUpdateWrapper (#2337) (41fa0c1)
• api: stricter SSRF protections (#2357) (31b574d)
• api: use ApiException instead of EntityNotFoundExcepion (#2302) (e88de1a)
• api: use Set for BookEntity.bookFiles to mitigate duplicates (#2297) (f85ae0d)
• api: wrap recalc match score in transaction to allow lazy load (#2332) (dbd9106)
• archive: ignore directories when streaming entries from zip (#2327) (b24e104)
• audible: emit external Audible URL with region domain (#2329) (8fa769b)
• audible: use expected URL patterns for product links (#2390) (ddb9d3c)
• books: prevent duplicate book file entries (#2289) (c3b4593)
• hardcover: use injected restclient with expected timeouts (#2320) (9d15192)
• ui: refresh duplicate merger after deleting books (#2284) (97226de)
• ui: use signals to make ISBN import reactive (#2324) (42378ec)

Refactors

• amazon: use predefined domains (#2367) (2a8d8ea)
• ui: app-menu positioning and styling refinements (#2308) (f617650)
• ui: create metadata search provider anchor in template (#2317) (536f6af)

Chores

• epub: avoid EpubContainer in EpubMetadataExtractor (#2128) (f9d39d2)
• epub: avoid EpubContainer in EpubMetadataWriter (#2162) (4f249a6)
• epub: drop unused EpubMetadataExtractor methods (#2312) (df1e1aa)
• epub: move cover detector back into Grimmory (#2108) (c6cbff1)
• epub: use expected imports for epubreader (#2287) (660e95c)
• koreader: move CFI operations back into grimmory (#2107) (124d463)

Dependencies

• bump the frontend group with 17 updates (#2360) (e20c5a3)
• bump the gradle-dependencies group in /backend with 3 updates (#2359) (4a9516d)
• bump the release-tooling group with 2 updates (#2358) (9e6b133)
• drop unused epub4j native (#2303) (589cebe)

Contributors

We'd like to thank the contributors for this release for taking the time to make Grimmory better.

Including but not limited to: @alexhb1 @imnotjames @king-407 @leandroltz0