This release adds 5 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryBroad release touches @jon4hz, 🐛 Bug fixes, 🔧 Other work, and 🚀 New Features.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds PostgreSQL backend support. Adds PostgreSQL backend support. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Low |
Adds config option for trusted proxies. Adds config option for trusted proxies. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Low |
Adds healthcheck endpoint. Adds healthcheck endpoint. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Low |
Adds log level configuration option. Adds log level configuration option. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Low |
Adds original requested‑by information to admin panel. Adds original requested‑by information to admin panel. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Adds timeout to all HTTP clients. Adds timeout to all HTTP clients. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Ensures graceful HTTP server shutdown. Ensures graceful HTTP server shutdown. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Improves configuration validation logic. Improves configuration validation logic. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Validates that requestedBy field is a proper email address. Validates that requestedBy field is a proper email address. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Secures cookie settings against common vulnerabilities. Secures cookie settings against common vulnerabilities. Source: llm_adapter@2026-06-13 Confidence: low |
— |
| Bugfix | Medium |
Deduplicates authentication logic to reduce code duplication. Deduplicates authentication logic to reduce code duplication. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
| Bugfix | Low |
Adds JSON API helper utility. Adds JSON API helper utility. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
| Bugfix | Low |
Closes all HTTP request/response bodies explicitly. Closes all HTTP request/response bodies explicitly. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
| Bugfix | Low |
Deduplicates tag checking logic. Deduplicates tag checking logic. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
| Bugfix | Low |
Avoids using MustGet for safer error handling. Avoids using MustGet for safer error handling. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
| Bugfix | Low |
Resets user notifications before cleanup runs. Resets user notifications before cleanup runs. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
| Bugfix | Low |
Performs additional input validation checks. Performs additional input validation checks. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
Full changelog
Changelog
🚀 New Features
- 68764fb2796b5c35b381253bb3341024aecf2b3e: feat(database): add postgres backend (#335) (@Primexz)
- 7ba94f1f8aadedda41fd49c81fbd65029480ea5d: feat: add config option for trusted proxies (#291) (@jon4hz)
- 8c777e0369c5ebd5fa149a3ab3c51c9b81f6ec85: feat: add healthcheck endpoint (#290) (@jon4hz)
- 03ea58ab15e09e99852266453026114e3bd6d292: feat: add log level configuration (#306) (@Bakeneko)
- d8a11fba0ad4b1215abb316aea1c58b90645c783: feat: add original requested by information from seerr to admin panel (#284) (@arnolicious)
🐛 Bug fixes
- b78fb66909d06abe0815366ad78806214b45d6c6: fix: add json api helper (@jon4hz)
- b22cabb6e71bac47a2ce5bb1993023a8c5120983: fix: add timeout to all http clients (@jon4hz)
- cf8ffd8684d94d4ba23d5d0ace459d13c8778a21: fix: clean stale disk deletion policies (@jon4hz)
- 95b0e0ce54153df71afe306791a93334937e5c55: fix: close all http bodies explicitly (@jon4hz)
- b18bd36cded65c1c6d307bf5dd9ae625e295ffb9: fix: deduplicate auth logic (@jon4hz)
- d426ed79226088bef10260d605554e8a89d537aa: fix: deduplicate tag check (@jon4hz)
- dfab39193eb2202d17c53787b9b28b615538a1d8: fix: dont use MustGet (@jon4hz)
- a1c920f2e517bc075b46ce818220b20b905e0ce3: fix: graceful http server shutdown (@jon4hz)
- 65c32703e86dfaafad4bb57ba8f3e9c93f038546: fix: improve config validation (@jon4hz)
- 4735a7352cd4e967cf4030d252754f368a95397e: fix: make sure requestedBy is a valid email (@jon4hz)
- 0b1cf468e91a340288976cff6b23c4933adecfe8: fix: reset user notifications before cleanup run (@jon4hz)
- 00592d8c22597738f28601f60d944e0bec888a4e: fix: secure cookie settings (@jon4hz)
- c6c12eef59c53aece8548985e51163b770751865: fix: some input validation (@jon4hz)
📚 Documentation updates
- 2239b2836837ca20815f3b42fd3af92de8c4c23c: docs: Clarify Library name-matching in
config.yml(@sgtM-devs) - f919d01e3a78cf55b55bf0cc21959b1209b41cf4: docs: add mkdocs (#288) (@jon4hz)
- e1d14cafb8bbd5381e805b693807e819af9f5078: docs: document new timeout options (@jon4hz)
- 687c5952c96d2752addf69dc743784a7c2a9e3e4: docs: document new timeout options (@jon4hz)
- 344793336cbd9eaf5c3f838e0589ca7cf7ec6943: docs: switch to zensical (#295) (@jon4hz)
🔧 Other work
- d0f33ee732fa923fedf6401953616afa5d9815ca: ci(pre-commit): fix hook for mkdocs markdown (@jon4hz)
- 3cdc1762d5f414b3ceb1a47c7d9a6ca290ed11c2: ci: run docs workflow only if docs change (@jon4hz)
- 8eb6de5ff323e356b43f9ea469a6adb38aba4e24: ci: set permissions (#292) (@jon4hz)
- 3ac8ca2a906a14b0c43dcfb87fcdae9db71ae2b8: ci: set permissions (#293) (@jon4hz)
- f071d87e4b8c3dcfa30bb414ead1524d44da124e: ci: set permissions (#294) (@jon4hz)
- ef269273e32d850c80321fb66128f3053830a366: refactor: consistent log formatting (@jon4hz)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]