3.1.0 - 2026-02-27
🛡️ Security
- Patch CVE-2026-27707 - Unauthenticated account registration on Plex-configured Seerr instances via Jellyfin authentication endpoint - (4ae2068)
- Patch CVE-2026-27793 - Broken Object-Level Authorization in User Profile Endpoint Exposes Third-Party Notification Credentials - (4f089b2)
- Patch CVE-2026-27792 - Missing authentication on pushSubscription endpoints - (946bdecec)
🚀 Features
- (helm) Use an existing PVC as config volume (#2447) - (8f0c904)
- (servarr-api) Make Servarr API request timeout configurable (#2556) - (3bcb4da)
- Self-host font for better privacy (#2540) - (10ea21b)
🐛 Bug Fixes
- (helm) Add "v" as prefix for appVersion tag (#2445) - (04b9d87)
- (jellyfin-scanner) Include unmatched seasons in processable seasons (#2538) - (68f56d2)
- (link-account) Fix error-message override (#2547) - (b843be0)
- (plex-scanner) Add TVDb to TMDB fallback in plex scanner (#2537) - (7c60a5c)
- (radarr) Trigger search for existing monitored movies without files (#2391) - (55776ea)
- (servarr) Increase default API timeout from 5000ms to 10000ms (#2442) - (b499976)
- (sonarr) Use configured metadata provider for season filtering (#2516) - (5013d1d)
- (watch-data) Use sentinel values to avoid invalid SQL syntax (#2552) - (947f70c)
- (watchlist-sync) Correct permission typo for TV auto requests (#2488) - (e0e4b6f)
- Preserve blocklist on media deletion & optimise watchlist-sync (#2478) - (9da8bb6)
🚜 Refactor
📖 Documentation
- (synology) Add installation guide via SynoCommunity (#2503) - (0e636a3)
- (truenas) Update install/migration guide (#2491) - (dc1734d)
- (unraid) Improve unraid migration guide (#2470) - (5e64d49)
- Update Unraid install and migration guides with dual permission methods (#2532) - (a0d0eb1)
- Add a warning in migration-guide for third party installation (#2527) - (7e9dff3)
- Remove double quotes (") from DB_HOST environment variable (#2514) - (fa905be)
- Add Unraid installation and migration guide (#2440) - (b6a9132)
- Fix migration guide title (#2425) - (39ae32f)
⚡ Performance
⚙️ Miscellaneous Tasks
- (changelog) Fix changelog template (#2431) - (c2977f6)
- (eslint) Add react/self-closing-comp (#2563) - (cd8b386)
- (github) Add docs and maintenance issue templates (#2467) - (cf4883a)
- (helm) Add GatewayAPI route support to helm chart (#2544) - (3a42f59)
- (helm) Update ghcr.io/seerr-team/seerr ( 3.0.0 → 3.0.1 ) [skip-ci] (#2441) - (87fb0df)
- (husky) Fixed husky commit message from bash/zsh syntax to sh syntax (#2572) - (a00c9e5)
- (release) Prepare ${TAG_VERSION} - (94a70bb)
- Updated the Contributing and Security guides to reflect our current practices (#2579) - (0d40a42)
- Disable nextjs telemetry (#2517) - (cecdd63)
- Update contributing guide regarding Automated AI Agent (#2518) - (880fbc9)
- Remove discord notification from release (#2501) - (fba20c1)
- Add create-tag workflow to streamline release process (#2493) - (06e5eb0)
- Update concurrency logic (#2481) - (4939f13)
- Add semantic-pr workflow to enforce conventional commits (#2472) - (5e57fdc)
New Contributors ❤️
- @caillou made their first contribution
- @Kenshin9977 made their first contribution
- @MagicLegend made their first contribution
- @wiiaam made their first contribution
- @mjonkus made their first contribution
- @nova-api made their first contribution
- @mreid-tt made their first contribution
- @DataBitz made their first contribution
- @Hyperion2220 made their first contribution
- @blassley made their first contribution
- @JanKleine made their first contribution
- @koiralasandesh made their first contribution