docker pull ghcr.io/new-usemame/calibre-web-nextgen:v4.0.156
(or :latest)
Magic Shelves on Kobo — the real fix (#359)
If you ever ticked "Enable Kobo sync" on a Magic Shelf and nothing showed up on your device: a global setting (off by default) was silently swallowing it — no books, no collection, in any sync mode. Upgrading enables that setting automatically wherever a shelf was already marked, so books and the collection appear on your next sync with no action needed. The checkbox also now tells you when the global setting is off instead of doing nothing quietly.
The Kobo sync pagination fixes from v4.0.147–155 all still apply — they were real bugs, but they sat behind this dead switch. Reported and tested release-by-release by @recruiterguy, whose SQL-level diagnostics cornered it.
Security (#370)
POST /duplicates/invalidate-cache now requires authentication. Previously it accepted unauthenticated requests on internet-facing installs (impact limited to forcing duplicate-scan refreshes). Found and fixed by @8bitgentleman — first community security contribution to this fork, merged as submitted.
Quieter releases from here
New :dev docker channel: ghcr.io/new-usemame/calibre-web-nextgen:dev gets every merge as it lands — it's what we run at home. Versioned releases like this one now batch to at most one per day, so if you watch this repo, expect far fewer notifications. Full details per release live in CHANGELOG.md.