Slimarr 2.2.5.0

Released 2026-11-04.

This release adds in-app update checks and one-click Windows updates, and fixes
the installer packaging path so Reference Collections are populated on first
install.

In-app update checks

Slimarr now checks the latest GitHub Release after sign-in. When a newer version
exists, a dismissible banner shows the current and available version with links
to the release notes.

System → Overview also has a manual Check for updates action. Results are
cached for six hours so repeated page loads do not hit the GitHub API; a manual
check forces a refresh.

One-click Windows updates

The packaged Windows build can update itself from the banner:

1. Downloads the matching SlimarrSetup-<version>.exe from the GitHub release.
2. Verifies the SHA-256 digest supplied by GitHub, or a .sha256 sidecar asset.
3. Runs the installer silently with the app closed.
4. Restarts Slimarr through a detached PowerShell helper.
5. Reloads the UI when the new version responds.

Automatic installation is deliberately limited to the packaged Windows build.
Source installs, Docker and Linux stay manual and link to the release page.
Releases without a trusted digest are also manual-only. The updater rejects
non-GitHub HTTPS URLs, non-installer filenames, and downloads over the size cap,
and re-verifies the installer immediately before launching it.

Fixed: packaged collection seeds

The Windows installer used the unanchored Inno Setup exclusion data\*, which
also matched nested directories such as _internal\backend\data\collections.
Fresh installs therefore had no all_time.yaml or home_theatre.yaml even
though PyInstaller had bundled them, and All-Time started empty.

The exclusion is now anchored to the install root as \data\*. The rebuilt
installer contains the 50-title All-Time seed, and the startup warning no longer
appears for a normal install.

All-Time on first run

All-Time Top Rated is enabled by default with a 50-title pinned-ID seed. It
loads without a TMDB key or a manual refresh, and ownership/protection matching
continues to use Plex GUIDs. Home Theatre and custom collections remain opt-in.

Upgrade notes

• Existing configuration, database, activity history and library files are
  preserved by the installer.
• 2.2.0.0 installations can use the in-app updater once 2.2.5.0 is published and
  the release includes a verified installer digest.
• Source installs, Docker and Linux update through their normal manual path.
• No database schema migration is required.
• Release assets include the installer and its .sha256 sidecar.

Verification

• Full backend test suite passes, including updater version comparison, asset
  selection, digest parsing and installer verification tests.
• Frontend production build passes.
• Updater tests cover GitHub asset selection, sidecar parsing, SHA-256
  verification, installer filename validation and the download size limit.
• The rebuilt package contains backend/data/collections/all_time.yaml with 50
  unique TMDB entries, plus the new frontend bundle and updater module.