v1.4.6 - Paperback and KOReader read Omnibus, an OPDS overhaul, a well-behaved Metron client, and an October security round
🚀 Highlights
- Paperback reads Omnibus: Paperback for iPhone and iPad connects through its built-in source - Omnibus answers it with a Komga-compatible endpoint at /komga, so you get series, covers, page streaming (CBZ and CBR), search, Continue Reading, On Deck and read-progress sync with nothing extra to install, including Paperback's newer 0.9 source. (#206, tested on a real iPhone by a Paperback user from the Discord)
- KOReader sync, end to end: KOReader progress sync logs in for the first time (KOReader sends an MD5 of the key, which Omnibus never accepted), a synced page lands where you stopped instead of one page late in the web reader, and books downloaded from Omnibus find their issue by KOReader's own checksum - no "Send document metadata" or "Use server filenames" needed. (#211, #217, PR #213 by realAbitbol)
- An OPDS overhaul: search the catalog from your reading app; a home screen with Continue Reading, Recently Added, On Deck and Libraries; streamed issues resume on the page you last read; every cover loads, local and custom covers included, with real thumbnails and no server folder paths in the feed; entries carry real authors, publisher and dates, and the feeds publish the address you actually reached, behind a proxy or not. Downloads - OPDS and the web download button - keep the file's real type and name, answer Range requests so an interrupted download can resume, and stream without reading the whole file into memory. (#210, #218-#221; PRs #212, #234, #235, #236 by realAbitbol)
- Metron, a good neighbor: every Metron request now follows Metron's published best practices - one client paced by Metron's own rate-limit headers, and a 429 pauses everything instead of being retried. Each install runs its scheduled jobs at its own time of day instead of every install hitting Metron at the same moment, the Series Monitor asks only for what changed (the upcoming releases in full once a week, two small requests on the nights between, nothing when nothing is monitored), and search covers and per-issue credits are fetched only where someone will see them. Sign in with a Metron API token, kept encrypted and out of every log, and System Health shows Metron's real limits - supporter tier, daily and per-minute windows - with live countdowns. (#216, reported by bpepple from Metron's side)
- {Imprint} naming token: file series under their publisher imprint - {Publisher}/{Imprint}/{Series} ({Year}) puts The Sandman under DC Comics/Vertigo/ - the same way in every import, watched-folder import, Smart Matcher match and Standardize. A series with no imprint simply skips that folder level. (#207, PR #214 by CaptainEpix)
- Read your trades and compendiums in the browser: collected editions you own get a Read/Resume button and their reading progress, and the web reader - crop mode included - opens very large archives, files over 2 GB too, without loading them into memory. (#215, reported by anacronismo)
- Annuals, polished: attached annuals and collected editions get their credits and synopsis from their own volume (the identity check compared them with the parent series' volume and refused every fetch), an attach rewrites the claimed files' ComicInfo.xml right away, and a series never wears its annual's cover in the library again. (#237, #238, reported by anacronismo)
- October security round: axios, undici and nodemailer (now 10.x) move past three high-severity advisories - the production audit is back to zero, inside the image too. The engine's dependencies stay clean.
🛠️ More fixes and improvements
- The Series Monitor stops filing another volume's upcoming issues under a same-name series - X-Men (2024) #34-40 no longer show up as missing from X-Men (2013) - and a one-time audit removes strays an older build left behind (#208, reported by anacronismo)
- A PixelDrain button behind GetComics' own redirect counts as PixelDrain again ("Preferred hoster 'pixeldrain' not available" while the page listed it) (#209, reported by anacronismo)
- A download that fills a wanted issue is new in your library: Recently Added, the Updates feed, the bell, the weekly digest and Paperback's "Recently updated series" go by when the file arrived
- Converting a CBR never overwrites a CBZ you already have and never writes the new CBZ in place - if the name is taken the original is kept and the log says why (#222, found while investigating jdcrensh's hardlink request; the README no longer claims hardlink imports)
- A watched-folder import can no longer file a comic outside the library - a ComicInfo Publisher or Series of ".." becomes "_"
- Library covers that change in place (a provider sync rewriting cover.jpg) show up on the next load instead of after a week in the browser's cache
- The unmatched-series sweep never takes an annual's ComicInfo as a folder's identity, so a folder can't be matched to its annual volume
📦 Upgrading
Standard three-service compose: docker compose pull && docker compose down && docker compose up -d. Schema changes are additive (when each file arrived, KOReader's document ids, a KOReader sync key on API keys) and apply automatically on boot; SQLite and PostgreSQL both covered. No new environment variables.
- KOReader: create a new API key for KOReader - keys made before this release can't sign KOReader in (the key lists mark them Legacy) - then follow the README's KOReader steps.
- Metron: you can now sign in with an API token instead of a username and password (Settings → Metadata → Metron.Cloud Integration).
- Paperback: in the Paperback source's Server Settings, the Server URL is your Omnibus address with /komga on the end, Email is your Omnibus username and Password is an Omnibus API key - the README has the steps.
- Scheduled jobs now run at a time of day particular to your install, so they move from where they used to fire.
- If library covers look stale after upgrading, refresh the library page once - browsers kept covers for up to a week before this release.
Thanks to realAbitbol for five pull requests and the precise reports behind them - OPDS, downloads and KOReader sync, tested on a real Kobo; to CaptainEpix for the {Imprint} token; to bpepple for flagging the Metron burst; to anacronismo for #208, #209, #215, #237 and #238 and same-day field testing; to jdcrensh for #222; and to the Paperback user from the Discord who tested on an iPhone.