This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Moderate signalAudiobookshelf v2.35.0 introduces an access token refresh grace period to reduce frequent re-logins.
Why it matters: Implement the new grace period to improve user experience by minimizing forced re-authentication events.
Summary
AI summaryAdded an access token refresh grace period to reduce frequent re-logins.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Access token refresh grace period added to reduce frequent re-login. Access token refresh grace period added to reduce frequent re-login. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
More strings translated: Belarusian by @pavel-miniutka, Polish by @TheMatrixan. More strings translated: Belarusian by @pavel-miniutka, Polish by @TheMatrixan. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
New contributor @brandonfhall made first contribution in pull request #5221. New contributor @brandonfhall made first contribution in pull request #5221. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Listening sessions from Android app now display correct device name. Listening sessions from Android app now display correct device name. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
RSS feeds correctly serve m4b files with appropriate Content-Type. RSS feeds correctly serve m4b files with appropriate Content-Type. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Book and podcast descriptions sanitized from audio files. Book and podcast descriptions sanitized from audio files. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
`cancel_scan` and `set_log_listener` socket events now validate account type and log level. `cancel_scan` and `set_log_listener` socket events now validate account type and log level. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Additional strings translated for localization improvements. Additional strings translated for localization improvements. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
Full changelog
Important: New authentication system was added in v2.26.0. See https://github.com/advplyr/audiobookshelf/discussions/4460 for details.
Added
- Access token refresh grace period (fixes frequently needing to re-login) #4630 by @nichwall in #5004
Fixed
- Listening sessions from Android app showing device name as
Abs iOS - RSS feeds serving m4b files with incorrect Content-Type #5041 by @brandonfhall in #5221
Changed
- Book & podcast descriptions from audio files are sanitized
cancel_scanandset_log_listenersocket events validate account type and log level- More strings translated
- Belarusian by @pavel-miniutka
- Polish by @TheMatrixan
New Contributors
- @brandonfhall made their first contribution in https://github.com/advplyr/audiobookshelf/pull/5221
Full Changelog: https://github.com/advplyr/audiobookshelf/compare/v2.34.0...v2.35.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]