feat(container): update image docker.io/seerr/seerr ( v3.4.1 ➔ v3.5.0 ) by mortyops[bot] · Pull Request #1907 · Aviator-Coding/home-ops

mortyops · 2026-10-01T04:02:37Z

This PR contains the following updates:

Package	Update	Change
docker.io/seerr/seerr	minor	`v3.4.1` → `v3.5.0`

Release Notes

seerr-team/seerr (docker.io/seerr/seerr)

`v3.5.0`

Compare Source

[!WARNING]
Breaking change: Plex and Jellyfin library API endpoints (#3321)

GET /settings/plex/library and GET /settings/jellyfin/library no longer accept the sync or enable query parameters, and reading libraries no longer changes their enabled state. If you have scripts, integrations, or third-party clients that use these to sync or toggle libraries, switch to:

Sync libraries: POST /settings/plex/library/sync and POST /settings/jellyfin/library/sync

Enable or disable a library: PUT /settings/plex/library/{libraryId} and PUT /settings/jellyfin/library/{libraryId}

The web UI already uses the new endpoints, so only direct API consumers are affected. Because of that limited scope, this ships in a minor release rather than a major one.

🚀 Features

(api) Send a Seerr user agent on outbound requests (#3395) - (a123d20)
(notifications) Add support for ntfy.sh tags (#3350) - (92bad10)
(notifications) Add embed poster option for Gotify (#3332) - (afb17aa)
(overriderules) Apply override rules to advanced requests (#2164) - (794743a)
(settings) Hide already requested media (#1855) - (6f5a177)
(users) Add search box for user lookup by username or email (#2482) - (aae8816)
Add a demo feature (#3017) - (38581ca)
Add support for custom plex metadata provider guid scheme in scanner (#3316) - (7baed83)

🐛 Bug Fixes

(api) Stop library reads from resetting enabled flags (#3321) - (985ddef)
(auth) Refresh avatar on Quick Connect login (#3504) - (d4eeea8)
(datasource) Break import cycle mistyping postgres timestamps (#3449) - (d7b08bd)
(datasource) Register entities and subscribers explicitly (#3375) - (0f79ee6)
(db) Remap leftover Overseerr DELETED status after migration (#3510) - (2bebae8)
(db) Drop stale auth unique on sqlite push subscriptions (#3391) - (5f4cb1e)
(discover) Fix tv title sorting and validate sortBy per media type (#3305) - (2759058)
(jellyfin-api) Update Authorization headers for Jellyfin (#3502) - (de57e7a)
(login) Hide quick connect button for emby servers (#3369) - (d103787)
(override-rules) Keep values set by advanced requesters (#3539) - (b919443)
(override-rules) Match default *arr server by id (#3428) - (7fae95b)
(plex) Limit concurrent watchlist metadata requests (#3251) - (103976d)
(request) Render anime notice alert in a div instead of a p (#3331) - (1fd35f9)
(requests) Serialize requests for the same title (#3380) - (cc6f5c7)
(requests) Stop editing a request from re-requesting covered seasons (#3379) - (10483e2)
(requests) Enforce the quota when editing a request (#3378) - (8f0a977)
(requests) Skip seasons with no episodes when requesting all seasons (#2698) - (1dbf19b)
(requests) Scope download status to requested seasons on request cards (#3412) - (c604bcc)
(requests) Serialize request creation per user (#3377) - (d7dc7bd)
(requests) Stop editing a request from stealing another's season (#3376) - (17fc4cc)
(requests) Reset orphaned season statuses when a request is deleted (#3279) - (970bb54)
(requests) Enforce pending and failed states on request routes (#3385) - (9f6403e)
(scanner) Confirm orphan candidates against the servers before declining (#3399) - (34b28d0)
(server) Respond instead of hanging on proxy route errors (#3501) - (a53f49b)
(settings) Mutate the query-string status key for modal immediately (#3432) - (5af32cb)
(sonarr) Apply configured series type to non-anime requests (#3329) - (42bee2a)
(sonarr) Decouple anime root folder routing from seriesType (#3328) - (93c0b6a)
(subscriber) Keep issue comment lookups on the owning save's connection (#3536) - (68e01b9)
(subscriber) Keep request status updates on the owning save's connection (#3366) - (059008c)
(tv) Prevent phantom specials from blocking season request (#3351) - (7997f75)
(ui) Stop the slideover backdrop flashing back on close (#3451) - (df743f4)
(ui) Stop appear leaking onto the DOM in Modal and SlideOver (#3446) - (da4b555)
(ui) Don't mark empty collections as available (#3431) - (92f8404)
(webpush) Resolve push subscription bugs for multi-device and shared browsers (#3142) - (59d5947)
Fix empty discordId in comment webhooks (#3467) - (e73825b)
Prevent hideAvailable/hideBlocklisted from filtering person results (#3434) - (0be53e6)
Stop masking connection failures across media server sync and login (#3324) - (4d17e08)
Keep library settings when renamed on media server (#3323) - (c9f2ac5)
Changes the suggested url from plex's "hosted" app (#3250) - (d3c070e)

📖 Documentation

(discord) Document the Thread ID notification setting. (#3481) - (7afbb29)
(docker) Add cap-drop and security-opt to docker command (#3472) - (a4f5eaa)
Clarify ai disclosure policy further (#3358) - (dea5960)

⚡ Performance

Bound tmdb cache & split scan lookups into their own tier (#3367) - (59ad5f1)

🚜 Refactor

(avatarproxy) Remove unused auth header from avatarproxy (#3503) - (b211652)
(ui) Use the Radio component instead of RadioGroup.Option (#3454) - (46d5915)
(ui) Use headlessui flat named exports (#3453) - (aa8e0de)

🧪 Testing

(cypress) Stop dirty restartRequired flag cascading across specs (#3368) - (39ff48c)
Block outbound HTTP in unit tests (#3511) - (abe2f3b)
Add scanner update rate override for testing (#3241) - (7a76142)

⚙️ Miscellaneous Tasks

(actions) Update github actions (#3478) - (a3dbbd9)
(actions) Update github actions (major) (#3471) - (6bf3d04)
(actions) Update github actions (#3306) - (5a5f059)
(duplicate-detector) Switch embeddings to bge-small-en-v1.5 (#3541) - (4fd0da0)
(i18n) Update translations from Weblate - (68c5bc8)
(i18n) Update translations from Weblate - (5f97227)
(i18n) Update translations from Weblate - (5c04640)
(i18n) Update translations from Weblate - (cc592e8)
(release) Prepare v3.5.0 - (e2f24cb)
(release) Prepare 3.5.0 release - (cd0fb22)
Remove third party action dawidd6/action-download-artifact (#3480) - (6fa7473)
Fix release workflow verify attestation (#3337) - (090c659)
Exclude .pnpm-store from Docker build context (#3313) - (bd491c7)

New Contributors ❤️

@atilaszsz made their first contribution
@aussierk made their first contribution
@Xyerophyte made their first contribution
@Knat-Dev made their first contribution
@britsync07-prog made their first contribution
@MannXo made their first contribution
@bartdelange made their first contribution
@Arul1998 made their first contribution
@tuvokian made their first contribution
@peruzzof made their first contribution
@lichie567 made their first contribution
@samtheruby made their first contribution

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

mortyops · 2026-10-01T04:03:11Z

--- Deployment media/seerr
+++ Deployment media/seerr
@@ -41,7 +41,7 @@
         envFrom:
         - secretRef:
             name: seerr-secret
-        image: docker.io/seerr/seerr:v3.4.1
+        image: docker.io/seerr/seerr:v3.5.0
         livenessProbe:
           failureThreshold: 5
           httpGet:

mortyops · 2026-10-01T04:03:11Z

--- HelmRelease media/seerr
+++ HelmRelease media/seerr
@@ -47,7 +47,7 @@
                 name: seerr-secret
             image:
               repository: docker.io/seerr/seerr
-              tag: v3.4.1
+              tag: v3.5.0
             probes:
               liveness:
                 custom: true

github-actions · 2026-10-01T04:07:38Z

✅ Automated recommendation: APPROVE

Analysis engine: pr-review-local@http://litellm.ai.svc.cluster.local:4000/v1 (openai)

Recommendation

Approve. This is a standard Renovate-driven minor version bump (v3.4.1 → v3.5.0) for the Seerr container image. The diff is a single-line tag update with no structural changes to the HelmRelease, resources, or networking configuration.

Required Checks

validate manifest against target cluster version: Verified. The manifest uses standard helm.toolkit.fluxcd.io/v2 and app-template chart patterns consistent with the rest of the repo. No API version changes or deprecated fields were introduced in the diff.
check for resource quota / limit changes: Verified. The resources block (requests/limits) remains identical to the previous version. No new resource constraints are introduced.
verify file path sanitization: Verified. The diff does not modify any application logic, file upload handlers, or path configurations. The persistence section remains unchanged, mounting config and tmp via standard PVC/emptyDir mechanisms.
check for directory traversal vulnerabilities: Verified. This is a container image version bump. The diff contains no code changes or configuration updates that would introduce or mitigate directory traversal vulnerabilities. The application's internal security posture is determined by the upstream seerr/seerr release, which is not part of this repo's diff.

Change-by-Change Findings

kubernetes/apps/base/media/seerr/app/helmrelease.yaml: Updated tag from v3.4.1 to v3.5.0. This is a minor version bump. The release notes indicate a breaking change to Plex/Jellyfin library API endpoints (GET → POST/PUT), but this only affects direct API consumers/integrations. The web UI and standard Flux-managed deployments are unaffected. No changes to the HelmRelease values were required to accommodate this.

Standards Compliance

Renovate Scope: The bump is within the 3.x range defined in the branch name (renovate/docker.io-seerr-seerr-3.x).
Manifest Structure: The file retains the required # yaml-language-server schema comment and follows the kebab-case naming convention.
Security Context: The pod security context (runAsNonRoot, readOnlyRootFilesystem, drop: ALL) remains intact and compliant with repo standards.
Secrets: No plaintext secrets are present in the diff. envFrom correctly references an ExternalSecret.

Tool Harness Findings

Tool harness was disabled for this review.

Unknowns or Needs Verification

API Integration Impact: If this cluster has external scripts or clients that directly call GET /settings/plex/library or GET /settings/jellyfin/library, they will break. However, this is an application-level concern, not a Kubernetes manifest issue. The reviewer has verified the manifest itself is safe to merge.

| datasource | package | from | to | | ---------- | --------------------- | ------ | ------ | | docker | docker.io/seerr/seerr | v3.4.1 | v3.5.0 |

mortyops Bot added renovate/container type/minor area/kubernetes labels Oct 1, 2026

feat(container): update image docker.io/seerr/seerr ( v3.4.1 ➔ v3.5.0 )

c4e83bb

| datasource | package | from | to | | ---------- | --------------------- | ------ | ------ | | docker | docker.io/seerr/seerr | v3.4.1 | v3.5.0 |

mortyops Bot force-pushed the renovate/docker.io-seerr-seerr-3.x branch from 8347ec9 to c4e83bb Compare October 1, 2026 08:03

mortyops Bot merged commit bc96fef into main Oct 1, 2026
21 checks passed

mortyops Bot deleted the renovate/docker.io-seerr-seerr-3.x branch October 1, 2026 12:02

Navigation Menu

feat(container): update image docker.io/seerr/seerr ( v3.4.1 ➔ v3.5.0 ) - #1907

feat(container): update image docker.io/seerr/seerr ( v3.4.1 ➔ v3.5.0 )#1907
mortyops[bot] merged 1 commit into
mainfrom
renovate/docker.io-seerr-seerr-3.x

mortyops Bot commented Oct 1, 2026

Uh oh!

mortyops Bot commented Oct 1, 2026

Uh oh!

mortyops Bot commented Oct 1, 2026

Uh oh!

github-actions Bot commented Oct 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

mortyops Bot commented Oct 1, 2026

Release Notes

v3.5.0

🚀 Features

🐛 Bug Fixes

📖 Documentation

⚡ Performance

🚜 Refactor

🧪 Testing

⚙️ Miscellaneous Tasks

New Contributors ❤️

Configuration

Uh oh!

mortyops Bot commented Oct 1, 2026

Uh oh!

mortyops Bot commented Oct 1, 2026

Uh oh!

github-actions Bot commented Oct 1, 2026

Recommendation

Required Checks

Change-by-Change Findings

Standards Compliance

Tool Harness Findings

Unknowns or Needs Verification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v3.5.0`