This release contains several bug fixes and maintenance updates, along with two authorization security fixes.
Thanks to @skeletonsec for responsibly reporting the authorization vulnerabilities fixed in this release.
What's Changed
- Fix: Guard against empty movie ID arrays when fetching watch dates by @leepeuker in #759
- Fix: Guard against empty movie ID arrays when fetching last IMDb updates by @leepeuker in #760
- Fix: Support searching for movies by TMDB URL by @alifeee in #764
- Fix: Handle user selection on URLs without a trailing slash by @leepeuker in #778
- Fix: Preserve query parameters when switching users by @leepeuker in #780
- Fix: Show the selected user's movies on person pages by @leepeuker in #782
- Security: Restrict server general settings to administrators by @leepeuker in #784
- Security: Restrict global job queue purge actions to administrators by @leepeuker in #785
- Maintenance: Add contributor guidance for AI coding agents by @leepeuker in #781
- Maintenance: Add sahinakkaya to the contributors list by @sahinakkaya in #774
- Maintenance: Update guzzlehttp/psr7 from 2.10.1 to 2.11.0 by @dependabot[bot] in #762
- Maintenance: Update spomky-labs/otphp from 11.4.2 to 11.4.3 by @dependabot[bot] in #765
Full Changelog: 0.72.0...0.72.1