Skip to content

v2.4.0 - Development#80

Merged
jordanlambrecht merged 66 commits into
mainfrom
development
Mar 23, 2026
Merged

v2.4.0 - Development#80
jordanlambrecht merged 66 commits into
mainfrom
development

Conversation

@jordanlambrecht
Copy link
Copy Markdown
Owner

@jordanlambrecht jordanlambrecht commented Mar 21, 2026

Closes #82
closes #28

dependabot Bot and others added 6 commits March 20, 2026 14:27
Bumps [next](https://github.com/vercel/next.js) from 16.1.7 to 16.2.0.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v16.1.7...v16.2.0)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings March 21, 2026 17:53
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 21, 2026

⚠️ Tracker registry warnings

Aither (`aither`) — Warnings (2)
Field Status
Missing notableMembers ⚠️ Warning
Missing stats ⚠️ Warning
AlphaRatio (`alpharatio`) — Warnings (7)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
AnimeBytes (`animebytes`) — Warnings (7)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
Anthelion (`anthelion`) — Warnings (6)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
BroadcasTheNet (`broadcasthenet`) — Warnings (7)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
Concertos (`concertos`) — Warnings (8)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning
Empornium (`empornium`) — Warnings (7)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
FearNoPeer (`fearnopeer`) — Warnings (1)
Field Status
Missing notableMembers ⚠️ Warning
GazelleGames (`gazellegames`) — Warnings (5)
Field Status
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing logo ⚠️ Warning
Great Poster Wall (`greatposterwall`) — Warnings (7)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
LST (`lst`) — Warnings (2)
Field Status
Missing logo ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning
MoreThanTV (`morethantv`) — Warnings (7)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
Nebulance (`nebulance`) — Warnings (6)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
OldToons (`oldtoons`) — Warnings (8)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning
Orpheus (`orpheus`) — Warnings (6)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
PassThePopcorn (`passthepopcorn`) — Warnings (7)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
Phoenix Project (`phoenixproject`) — Warnings (4)
Field Status
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning
Racing4Everyone (`racing4everyone`) — Warnings (8)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning
REDacted (`redacted`) — Warnings (5)
Field Status
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing logo ⚠️ Warning
Reelflix (`reelflix`) — Warnings (7)
Field Status
Missing userClasses ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning
Seed Pool (`seedpool`) — Warnings (8)
Field Status
Missing specialty ⚠️ Warning
Missing releaseGroups ⚠️ Warning
Missing notableMembers ⚠️ Warning
Missing bannedGroups ⚠️ Warning
Missing stats ⚠️ Warning
Missing rules.fullRulesMarkdown ⚠️ Warning
Missing logo ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning
SkipTheCommercials (`skipthecommercials`) — Warnings (2)
Field Status
Missing bannedGroups ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning
Upload.cx (`uploadcx`) — Warnings (2)
Field Status
Missing stats ⚠️ Warning
Missing trackerHubSlug ⚠️ Warning

Allowed content categories: Movies, TV, Music, Games, Apps, Sports, Books, Audiobooks, Comics, Manga, Anime, XXX, Documentaries, Education, Tutorials, Fanres

See src/data/__tests__/tracker-registry.test.ts for all validation rules.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 21, 2026

Knip Code Analysis

Found 10 total issues

Category Count
Unused Dependencies 1
Unused Dev Dependencies 2
Unused Exports 6
Unused Types 1
View details

Run pnpm knip locally to see the full report.

Use pnpm knip:filter pattern to filter results by file path.


Use /** @public */ JSDoc tags to mark intentionally exported symbols.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 21, 2026

✅ Security audit passed

Passed (28/28)

  • ✅ Auth enforcement on protected routes
  • ✅ No dangerous functions (eval, innerHTML, etc.)
  • ✅ No hardcoded secrets in source
  • ✅ Security headers in next.config.ts
  • ✅ Cookie security (httpOnly, sameSite, secure)
  • ✅ No sensitive fields in API responses
  • ✅ No .env files committed to repo
  • ✅ No raw SQL in API routes
  • ✅ No fetch/redirect with unvalidated URLs in routes
  • ✅ Timing-safe comparison for secret values
  • ✅ No raw SQL migration files (schema-first only)
  • ✅ External fetch calls have timeouts
  • ✅ Docker container runs as non-root user
  • ✅ Public routes match proxy allowlist
  • ✅ File delete operations have path traversal defense
  • ✅ Password hashing uses Argon2 (not SHA-256/bcrypt)
  • ✅ Encrypted columns written via encrypt()
  • ✅ TOTP 2FA flow integrity
  • ✅ Emergency lockdown flow integrity
  • ✅ Scrub & delete (nuke) flow integrity
  • ✅ Backup restore flow integrity
  • ✅ Login flow integrity
  • ✅ No console.log in API routes
  • ✅ No TODO/FIXME in security-critical files
  • ✅ JSON.parse wrapped in try-catch
  • ✅ No swallowed errors in catch blocks
  • ✅ Request body size validation on upload routes
  • ✅ BigInt fields use string serialization

Summary: 28/28 checks passed

See scripts/security-audit.ts for check definitions and SECURITY.md for the full security architecture.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates tracker metadata and installation/deployment documentation/config as part of the v2.4.0 development cycle.

Changes:

  • Updates the Orpheus tracker registry entry (description + Gazelle enrich flag + new transit-paper-related fields).
  • Adjusts MkDocs installation guide formatting and a Docker image table alignment.
  • Changes the PostgreSQL volume mount path in docker-compose.yml.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 5 comments.

File Description
src/data/trackers/orpheus.ts Updates Orpheus tracker metadata and adds new tracker capability fields.
docs/kb/docs/getting-started/installation.md Modifies installation doc admonition blocks and table formatting.
docker-compose.yml Updates the Postgres volume mount location.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread docs/kb/docs/getting-started/installation.md
Comment thread docs/kb/docs/getting-started/installation.md
Comment thread docker-compose.yml
Comment thread src/data/trackers/orpheus.ts Outdated
Comment thread docs/kb/docs/getting-started/installation.md
jordanlambrecht and others added 18 commits March 21, 2026 12:59
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Added groups, categories and rules, updated description and fixed platform.
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 5.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@v4...v5)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) from 4 to 5.
- [Release notes](https://github.com/peter-evans/dockerhub-description/releases)
- [Commits](peter-evans/dockerhub-description@v4...v5)

---
updated-dependencies:
- dependency-name: peter-evans/dockerhub-description
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@jordanlambrecht jordanlambrecht requested a review from Copilot March 23, 2026 06:51
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 23, 2026

🚨 Security audit file modification detected

The following security-critical files were changed in this PR:

  • scripts/security-audit.ts

These files guard the security posture of the project. Please review these changes carefully to ensure no checks were weakened or removed.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 256 out of 305 changed files in this pull request and generated 2 comments.

Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread src/components/ui/CollapsibleCard.tsx
Comment thread docs/kb/docs/features/image-hosting.md Outdated
jordanlambrecht and others added 20 commits March 23, 2026 01:54
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…/peter-evans/dockerhub-description-5

chore(deps): bump peter-evans/dockerhub-description from 4 to 5
…/github/codeql-action-4

chore(deps): bump github/codeql-action from 3 to 4
…/actions/setup-python-6

chore(deps): bump actions/setup-python from 5 to 6
…/actions/checkout-6

chore(deps): bump actions/checkout from 4 to 6
…/pnpm/action-setup-5

chore(deps): bump pnpm/action-setup from 4 to 5
…ext-16.2.0

chore(deps): bump next from 16.1.7 to 16.2.0
@jordanlambrecht jordanlambrecht merged commit a9a1c2a into main Mar 23, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Can't add/connect Blutopia Bug: download client health history chart not populating

3 participants