This release adds 1 notable feature for engineering teams evaluating rollout.
Published 18d
Media Servers
✓ No known CVEs patched
✓ No known CVEs patched in this version
Affected surfaces
deps
breaking_upgrade
Summary
AI summaryUpdates fix, bypass, and USING_WIREGUARD across a mixed release.
Full changelog
What's Changed
- Bump seleniumbase from 4.49.10 to 4.49.12 in the python-deps group by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1070
- Bump the python-deps group with 3 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1073
- use a stable hash for the Booklore options cache key by @HrachShah in https://github.com/calibrain/shelfmark/pull/1079
- Bump python from 3.14.5-slim to 3.14.6-slim by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1076
- Bump node from
fb71d01to156b55fin the docker-base-image-digests group by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1075 - Bump the python-deps group with 3 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1074
- Fix internal bypasser using system DNS in subprocess, breaking downloads behind ISP DNS blocks (#1028) by @calibrain in https://github.com/calibrain/shelfmark/pull/1080
- Bump the npm-deps group in /src/frontend with 6 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1077
- Bump the python-deps group with 3 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1081
- e2e testing by @calibrain in https://github.com/calibrain/shelfmark/pull/1082
- e2e testing 2 by @calibrain in https://github.com/calibrain/shelfmark/pull/1083
- fix astral-sh-setup-uv by @calibrain in https://github.com/calibrain/shelfmark/pull/1084
- the e2e platform test profiles live in an env/ dir and must be tracked by @calibrain in https://github.com/calibrain/shelfmark/pull/1085
- Fix e2e scipts by @calibrain in https://github.com/calibrain/shelfmark/pull/1086
- Annotate both the per-platform manifests and the multi-arch image index by @calibrain in https://github.com/calibrain/shelfmark/pull/1088
- Bump python from
44dd044to63a4c7fby @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1090 - Bump node from
156b55ftoa0b9bf0in the docker-base-image-digests group by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1089 - Bump the gh-actions group with 2 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1093
- Bump @types/node from 25.9.3 to 26.0.0 in /src/frontend by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1092
- Bump the python-deps group with 3 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1094
- Bump the npm-deps group in /src/frontend with 4 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1091
- Bump python from
63a4c7ftob877e50by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1100 - Bump the npm-deps group in /src/frontend with 9 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1101
- Bump the gh-actions group with 2 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1102
- Bump the python-deps group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1098
- fix(bypass): resolve Xlib namespace collision breaking CDP browser startup by @alex4108 in https://github.com/calibrain/shelfmark/pull/1099
- Bump the python-deps group with 2 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1104
- fix: pin chromium to 149.0.7827.196 — Debian's 150 breaks the CDP bypasser by @calibrain in https://github.com/calibrain/shelfmark/pull/1105
- feat: native WireGuard VPN egress mode (USING_WIREGUARD) by @alex4108 in https://github.com/calibrain/shelfmark/pull/1097
- path timeouts by @calibrain in https://github.com/calibrain/shelfmark/pull/1103
- Bump seleniumbase from 4.50.4 to 4.50.5 in the python-deps group by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1106
- Bump the python-deps group with 2 updates by @dependabot[bot] in https://github.com/calibrain/shelfmark/pull/1107
- fix: resolve remaining "Could not determine torrent hash from URL" failures (#1012) by @calibrain in https://github.com/calibrain/shelfmark/pull/1108
New Contributors
- @HrachShah made their first contribution in https://github.com/calibrain/shelfmark/pull/1079
- @alex4108 made their first contribution in https://github.com/calibrain/shelfmark/pull/1099
Full Changelog: https://github.com/calibrain/shelfmark/compare/v1.3.2...v1.3.3
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About shelfmark
Self-hosted web interface for searching and downloading books and audiobooks from multiple sources
Related context
Related tools
Earlier breaking changes
- v1.3.0 Required verified OIDC email claims before linking external identities to existing accounts
Beta — feedback welcome: [email protected]