🎉 Release v1.2.7
Fixes:
-
✅ Plex profile sign-in hardened
- #373
- signing in with a Plex Home profile now takes that profile's identity from Plex, and signing in never changes an existing user's role. Recommended update.
-
✅ OIDC sign-in only signs into OIDC accounts
-
✅ Apprise Basic-auth credentials kept out of the server URL
- #372
- Apprise servers behind HTTP Basic auth now use separate Basic Auth Username and Password fields; the password is encrypted and masked. Existing server URLs with
user:pass@are converted automatically at startup. - if you roll back to an earlier version, re-enter the Apprise credentials in the server URL. If you keep database backups or logs from before this update, change the Apprise Basic-auth password.
-
✅ credential recovery hides typed passwords and can reset the Plex-mode admin
- #375
- a reset signs that user out everywhere. The script now needs a terminal: run it with
docker exec -it.
-
✅ imports cleaned up only after the library copy is verified
- #377
- a download is removed file by file, only once the library holds the same audio. Library files are never overwritten, and an interrupted copy never leaves a truncated file behind.
-
✅ deleting a request only removes library files that provably belong to it
- #381
- otherwise the files, the Audiobookshelf/Plex item and the book's status are kept, and the admin is told why. Shared ebook folders are never swept, and a media volume that isn't mounted keeps everything. Recommended update.
-
✅ re-requesting a failed request keeps its blocklist
-
✅ imports keep going when file permissions can't be set (mergerfs, NFS, FUSE)
-
✅ indexer ratio limits kept when saving settings
-
✅ deleting a request follows the seeding rules (time and ratio)
- #379
- a torrent another active request still uses is kept.
-
✅ lodash and minimatch updated
Upgrade:
docker pull ghcr.io/kikootwo/readmeabook:latest docker compose down docker compose up -d
What's Changed
- chore(deps): update lodash and minimatch within their existing ranges by @kikootwo in #370
- ci: pin actions to commit SHAs and publish images only from version tags by @kikootwo in #371
- fix: keep Apprise Basic-auth credentials out of the server URL by @kikootwo in #372
- fix: take the Plex profile identity from Plex during sign-in by @kikootwo in #373
- chore(e2e): log in through the Admin Login toggle in the Plex-mode upgrade run by @kikootwo in #374
- fix: clean up imports only after the library copy is verified by @kikootwo in #377
- fix: keep OIDC sign-in to OIDC accounts by @kikootwo in #376
- fix: hide typed passwords and recover Plex-mode admins in credential recovery by @kikootwo in #375
- fix: keep indexer ratio limits when saving settings by @kikootwo in #378
- fix: use the seeding cleanup rule when deleting a request by @kikootwo in #379
- fix: keep imports going when file permissions can't be set by @kikootwo in #380
- fix: only delete library files a request provably owns by @kikootwo in #381
- fix: keep the blocklist when a failed request is re-requested by @kikootwo in #382
- chore: release v1.2.7 by @kikootwo in #385
Full Changelog: v1.2.6...v1.2.7