This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
ReleasePort's take
Light signalv2.1.3 fixes manage_media_requests returning 404 errors by correcting the API path from /requests to /request. Docker base image updated to node:26-alpine.
Why it matters: Upgrade immediately to v2.1.3 if using manage_media_requests to resolve 404 errors. Validate the node:26-alpine update in dev before deploying to production.
Summary
AI summaryUpdates 2.1.3] - 2026-05-20, deps, and deps-dev across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
New contributor @akhsiM made first contribution fixing Seer/Overseer API path. New contributor @akhsiM made first contribution fixing Seer/Overseer API path. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Bumped @commitlint/cli to 21.0.1, @commitlint/config-conventional to 21.0.1, @types/node to 25.9.0, axios to 1.16.1, typescript to 6.0.3, @modelcontextprotocol/sdk to 1.29.0. Bumped @commitlint/cli to 21.0.1, @commitlint/config-conventional to 21.0.1, @types/node to 25.9.0, axios to 1.16.1, typescript to 6.0.3, @modelcontextprotocol/sdk to 1.29.0. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Fixed manage_media_requests returning 404 errors due to incorrect API path /requests (plural) instead of /request (singular). Fixed manage_media_requests returning 404 errors due to incorrect API path /requests (plural) instead of /request (singular). Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Docker base image updated from node:25-alpine to node:26-alpine. Docker base image updated from node:25-alpine to node:26-alpine. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Other | Medium |
Bumped aquasecurity/trivy-action to 0.36.0; CI now sees Trivy scan results. Bumped aquasecurity/trivy-action to 0.36.0; CI now sees Trivy scan results. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Other | Medium |
Added opencode.json to .gitignore. Added opencode.json to .gitignore. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
Full changelog
[2.1.3] - 2026-05-20
Fixed
- Request API path: Fixed
manage_media_requestsreturning 404 errors — the list/summary endpoints were using/requests(plural) instead of the correct/request(singular) API path
Changed
- Dependencies: Bumped
@commitlint/clito 21.0.1,@commitlint/config-conventionalto 21.0.1,@types/nodeto 25.9.0,axiosto 1.16.1,typescriptto 6.0.3,@modelcontextprotocol/sdkto 1.29.0 - Docker: Bumped base image from
node:25-alpinetonode:26-alpine - CI: Bumped
aquasecurity/trivy-actionto 0.36.0; allowed CI to see Trivy scan results - Gitignore: Added
opencode.jsonto.gitignore
What's Changed
- chore(deps): update gitignore by @jhomen368 in https://github.com/jhomen368/overseerr-mcp/pull/78
- npm(deps): bump axios from 1.14.0 to 1.15.0 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/79
- npm(deps-dev): bump @types/node from 25.5.2 to 25.6.0 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/80
- npm(deps): bump @modelcontextprotocol/sdk from 1.27.1 to 1.29.0 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/81
- npm(deps): bump follow-redirects from 1.15.11 to 1.16.0 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/83
- ci: bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/86
- npm(deps-dev): bump typescript from 5.9.3 to 6.0.3 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/84
- npm(deps): bump axios from 1.15.0 to 1.16.0 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/91
- npm(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/92
- Fix Seer/Overseer API path by @akhsiM in https://github.com/jhomen368/overseerr-mcp/pull/102
- docker: bump node from 25-alpine to 26-alpine by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/93
- npm(deps): bump fast-uri from 3.1.0 to 3.1.2 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/97
- npm(deps): bump axios from 1.16.0 to 1.16.1 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/98
- npm(deps-dev): bump @types/node from 25.6.0 to 25.9.0 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/99
- npm(deps-dev): bump @commitlint/config-conventional from 20.5.0 to 21.0.1 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/100
- npm(deps-dev): bump @commitlint/cli from 20.5.0 to 21.0.1 by @dependabot[bot] in https://github.com/jhomen368/overseerr-mcp/pull/101
- Release v2.1.3 by @jhomen368 in https://github.com/jhomen368/overseerr-mcp/pull/103
New Contributors
- @akhsiM made their first contribution in https://github.com/jhomen368/overseerr-mcp/pull/102
Full Changelog: https://github.com/jhomen368/overseerr-mcp/compare/v2.1.2...v2.1.3
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About jhomen368/overseerr-mcp
Integrate AI assistants with Overseerr and the Seerr (the unified successor) for automated media discovery, requests, and management in Plex, Jellyfin, and Emby ecosystems.
Related context
Beta — feedback welcome: [email protected]