v1.3.0

Docker images

GitHub Registry
Docker Hub

Product Highlights

• Big feature release focused on game discovery and management quality of life.
• Added Steam wishlist sync, richer game details (IGDB, HowLongToBeat, PCGamingWiki, NexusMods), user ratings, and better download linking.
• New filters and controls across library, wishlist, calendar, and downloads.
• New stats page with Discord sharing support.
• Improved settings for preferred platform, preferred release groups, and auto-search behavior.

Security and Reliability

• Multiple SSRF fixes (including DNS rebinding hardening).
• Stronger login protection with brute-force rate limiting.
• Fixed credential exposure and information leakage risks.
• Addressed known vulnerabilities in dependencies (notably axios and node-forge).

Performance and UX Improvements

• Lazy loading for heavy dialogs and details screens.
• Better server-side filtering and memoization for faster browsing/search.
• Streamlined Steam behavior and improved IGDB data retrieval.
• Cleaner toolbar/search behavior and better notification relevance.

Bug Fixes

• Multiple downloader and indexer stability fixes (SABnzbd, Transmission, rTorrent, Torznab/Prowlarr).
• Fixed sorting, sticky headers, overflow/layout issues, and several UI state inconsistencies.
• Improved handling of API retry behavior and validation edge cases.

Dependency Updates

• Runtime dependencies updated for stability and security.
• Development dependencies refreshed as a batch.
• CI toolchain dependencies updated.
• Security-driven package upgrades included in multiple releases.

Full Changelog: https://github.com/Doezer/Questarr/blob/main/docs/CHANGELOG.md - Commits: v1.2.2...v1.3.0

v1.2.2 - Security update

Routine security check, no severe fix in this release.
Disclosure: AI was used to finalize these very simple fixes (Aikido security service & Claude Opus 4.6)

Docker images

• GitHub Registry
• Docker Hub

What's Changed

• [Aikido] AI Fix for 3rd party Github Actions should be pinned by @aikido-autofix[bot] in #419
• Dependencies updates (dependabot auto updates)
• [Aikido] Fix security issue in fast-xml-parser via minor version upgrade from 5.3.5 to 5.3.7 by @aikido-autofix[bot] in #416
• [Aikido] AI Fix for HTTP request might enable SSRF attack by @aikido-autofix[bot] in #418
• [Aikido] AI Fix for Docker container runs as default root user by @aikido-autofix[bot] in #417

Full Changelog: v1.2.1...v1.2.2

v1.2.1 - SSL Support

What's Changed

• Dependencies updates
• Add SSL support with fix ported from #382 by @Doezer in #395

Full Changelog: 1.2.0...v1.2.1

1.2.0 - xREL, RSS support

Added

• RSS Feed Support: Added a dedicated page for RSS feeds with capabilities to manage feeds and view items.
• xREL Integration: Implemented integration with xREL.to for game release notifications and metadata.
• Download Modal Redesign: Complete redesign of the download dialogs (simple and advanced) for improved usability.
• Compact View: Added a density setting to toggle between comfortable and compact list views in Dashboard, Library, and Wishlist.
• Enhanced Notifications: Added links to notifications, allowing direct navigation to relevant games or pages.
• Security hardening: Introduced protections for SSRF, missing security headers, and improved IPv6 validation.
• Logout: Added logout button.

Changed

• Privacy: Removed Google Fonts dependency for better privacy and offline support.
• Performance: Optimized metadata refresh with chunked fetching and improved Prowlarr indexer synchronization.
• Settings: Updated settings page with tabbed navigation for better organization.
• UX: Enhanced password visibility toggles and accessibility throughout the app.
• Logging: Improved log truncation for better performance and privacy.

Fixed

• Fixed Content Security Policy (CSP) preventing version checks.
• Resolved UI issue where the close button overlaid the cover image in GameCard.
• Fixed timestamp calculation issues affecting notification times.
• Reduced log verbosity for SSL verification errors.

Full Changelog: v1.1.0...1.2.0

v1.1.0 - Migration to SQLite

Added

• SQLite Support: Migrated database engine from PostgreSQL to SQLite for a simpler, "single-file" deployment.
• Migration Tooling: Added docker-compose.migrate.yml and pg-to-sqlite.ts to automatically convert data from old PostgreSQL installations.
• Improved Docker Experience: Default environment variables and automatic directory creation for a true "Pull & Run" experience.
• Migration UI Warning: Added a prominent banner on the Setup page to prevent users from accidentally skipping the migration process.

Changed

• Refactored storage.ts and schema.ts for SQLite compatibility.
• Simplified docker-compose.yml (removed PostgreSQL service).
• Updated README.md and added docs/MIGRATION.md with detailed upgrade instructions.

Fixed

• Improved reliability of database initialization on fresh installs.

Full Changelog: v1.0.5...v1.1.0