🚨 PLEASE READ 🚨

This release contains a few important security fixes reported privately to me (thank you). Please update as soon as possible if you have a Stump server instance with managed accounts. If you do not have managed accounts, you are largely not affected by these issues.

The fixed issues are:

1. An authenticated user could previously grant themselves arbitrary permissions, remove their age restriction, and change their maxSessionsAllowed by manually crafting an appropriate API call
2. The libraryMissingEntities query exposed minimal information (filesystem paths of missing books and series) without filtering out libraries that the user does not have access to
3. The previousBookClubDiscussions query could be used to list discussions of a private book club by a non-member. This one is incredibly low risk, as the book club feature is not even officially released nor has any official client support. It was reported and corrected, nonetheless, so is outlined here.
4. The mediaMetadataOverview query computed genre, writer, publisher, and other metadata aggregates across all books in the database, ignoring library exclusions and age restrictions. This could be used to infer the existence of books that a user does not have access to. It did not expose the actual books themselves.

What's Changed

• support A/D turn page by @qinghon in #1425
• 🐛 (expo,android) Use sheet store and fix preferences lifecycle in native module by @aaronleopold in #1426
• 🐛 Fix ReadMore description flicker/re-render on expand by @balazs-szucs in #1419
• 🔖 Release v0.1.9 by @aaronleopold in #1428

Full Changelog: v0.1.8...v0.1.9