Skip to content

Maintainerr

v3.12.0 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 13d Media Servers
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

docker jellyfin maintainerr maintenance movies plex
+6 more
plex-media-server radarr seerr sonarr tv-series tv-shows

Affected surfaces

deps

ReleasePort's take

Light signal
editorial:auto 13d

Version v3.12.0 adds Emby as a third supported media server and introduces Jellyfin‑only Streamystats integration with new database columns, while fixing several UI bugs and updating dependencies.

Why it matters: Plan migration for Emby support; test Streamystats settings tab in dev before upgrade; patch dependency updates immediately to resolve security advisories.

Summary

AI summary

Updates Breaking Changes, Internal, and Highlights across a mixed release.

Changes in this release

Security Medium

Prevents Jellyfin API key from being sent during Streamystats tests

Prevents Jellyfin API key from being sent during Streamystats tests

Source: llm_adapter@2026-05-21

Confidence: high

 —
Security Medium

Resolves transitive security advisories by forcing patched dependencies

Resolves transitive security advisories by forcing patched dependencies

Source: llm_adapter@2026-05-21

Confidence: low

 —
Feature Medium

Adds Emby as third supported media server alongside Plex and Jellyfin

Adds Emby as third supported media server alongside Plex and Jellyfin

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Adds Jellyfin-only Streamystats integration with settings tab and stats

Adds Jellyfin-only Streamystats integration with settings tab and stats

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Adds Emby database columns: emby_url, emby_api_key, emby_user_id, server_name

Adds Emby database columns: emby_url, emby_api_key, emby_user_id, server_name

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Adds streamystats_url database column to settings table

Adds streamystats_url database column to settings table

Source: llm_adapter@2026-05-21

Confidence: high

 —
Dependency Medium

Updates 29 dependencies including @tanstack/react-query, vitest, react-router-dom

Updates 29 dependencies including @tanstack/react-query, vitest, react-router-dom

Source: llm_adapter@2026-05-21

Confidence: low

 —
Bugfix Medium

Fixes Emby library size computation and metadata to align with API

Fixes Emby library size computation and metadata to align with API

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Fixes settings forms render loops by syncing react-hook-form values

Fixes settings forms render loops by syncing react-hook-form values

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Fixes Emby login error styling

Fixes Emby login error styling

Source: llm_adapter@2026-05-21

Confidence: low

 —
Bugfix Medium

Fixes overlay ellipse anchoring during drag and resize

Fixes overlay ellipse anchoring during drag and resize

Source: llm_adapter@2026-05-21

Confidence: low

 —
Full changelog

Highlights

  • Added Emby as a third supported media server alongside Plex and Jellyfin (#2911).
  • Introduced Jellyfin-only Streamystats integration, including a new settings tab and per-user stats panel (#2923).
  • Fixed Emby library size computation and metadata updates to align with documented API behavior (#2924).

Breaking Changes

  • None.

Features

  • Added Emby as a third supported media server (#2911).
  • Introduced Jellyfin-only Streamystats integration, including a new settings tab and per-user stats panel (#2923).

Fixes

  • Fixed Emby library size computation and metadata updates to align with documented API behavior (#2924).
  • Resolved transitive security advisories by forcing patched versions of dependencies.
  • Fixed issue with Emby login error styling.
  • Prevented Jellyfin API key from being sent during Streamystats connection tests (#2925).
  • Fixed overlay ellipse anchoring during drag and resize (#2938).
  • Synced settings forms via react-hook-form values to stop render loops.

Performance

  • None.

Database migrations

  • Added support for Emby by introducing new columns: emby_url, emby_api_key, emby_user_id, and emby_server_name to the settings table.
  • Added support for Streamystats by introducing a new column: streamystats_url to the settings table.

Internal

  • Updated test for overlay "Run Now" button to wait for enabled state before clicking.
  • Replaced partial query mocks in CollectionDetailPage spec with typed helpers (#2914).
  • Documented GitHub CI workflow commands (#2912).
  • Improved CI docs drift scanner to surface documentation-labeled items.

Dependencies

  • Updated 29 dependencies, including @tanstack/react-query, @vitejs/plugin-react, vitest, react-router-dom, and tar.

Security Fixes

  • Resolved transitive security advisories by forcing patched versions of dependencies
  • Prevented Jellyfin API key from being sent during Streamystats connection tests (#2925)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Maintainerr

Get notified when new releases ship.

Sign up free

About Maintainerr

Looks and smells like Seerr, does the opposite. A library maintenance tool for Plex and Jellyfin.

All releases →

Related context

Earlier breaking changes

  • v3.13.0 Section without an operator is now treated as OR instead of AND; migration not reversible.
  • v3.13.0 Per-group exclusions now apply only to their own group, not globally.
  • v3.13.0 Exclusions are now either global or per-group; removing a global exclusion requires re-adding per-group ones.
  • v3.12.1 Renames `WATCH_HISTORY_CONCURRENCY` to `RULE_EVALUATION_CONCURRENCY` for clarity.
  • v3.11.0 Overlay reset operations are now gated against concurrent processing runs.

Beta — feedback welcome: [email protected]