🎉 Release v1.2.10

If you use an external Redis: REDIS_URL must be a valid URL, such as redis://:password@redis:6379/0. The updated Redis client (ioredis 5.11) rejects malformed URLs and out-of-range ports. The built-in Redis is unaffected.

Features

• ✅ imported audiobooks carry the Audible description and genres as tags
• #208
• #419
• #397
• Thanks https://github.com/N0cky !
• with metadata tagging on, M4B files are also marked as an audiobook with gapless playback. Audiobookshelf shows the description and lists each genre separately.

Fixes

• ✅ torrents added to qBittorrent 5.2 or later are no longer reported as failed grabs
• #317
• #420
• #295
• Thanks https://github.com/ColeTown !
• hybrid (v1+v2) torrents and base32 magnets still are; that's tracked in #422
• ✅ SABnzbd downloads no longer fail with "Download path not available" when they reach 100% before post-processing has finished
• #421
• #306
• Thanks https://github.com/connor2k !

Upgrade

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

• chore(deps-dev): update dev tooling within current majors to clear 18 Dependabot alerts by @kikootwo in #418
• feat: write description, genre, media type and gapless tags (#208) by @kikootwo in #419
• chore(deps): stop Dependabot proposing vitest majors by @kikootwo in #417
• chore(deps-dev): bump jsdom from 27.4.0 to 29.1.1 by @dependabot[bot] in #414
• chore(deps-dev): bump @testing-library/jest-dom from 6.9.1 to 7.0.1 by @dependabot[bot] in #415
• chore(deps): bump ioredis from 5.8.2 to 5.11.1 in the npm-minor-patch group by @dependabot[bot] in #413
• fix: accept qBittorrent 5.2 torrent-add responses by @kikootwo in #420
• fix: wait for SABnzbd post-processing before completing a download by @kikootwo in #421
• chore: release v1.2.10 by @kikootwo in #425

Full Changelog: v1.2.9...v1.2.10

🎉 Release v1.2.9

⚠️ Before you upgrade: this release moves the image to Node.js 24. If a download client, indexer, Plex/Audiobookshelf, notification target or OIDC provider stopped connecting over HTTPS after this upgrade (Issuer.discover() failed., "SSL/TLS certificate error", dh key too small, EE certificate key too weak), that server uses a key under 2048 bits, which Node.js 24 refuses (weak DH parameters even with "Disable SSL verification" on). Upgrade the server's certificate or DH parameters, or set NODE_OPTIONS=--tls-cipher-list=DEFAULT@SECLEVEL=1 on the container as a stopgap: https://github.com/kikootwo/ReadMeABook/blob/main/documentation/deployment/unified.md#tls-errors-after-upgrading-to-node-24

Features

• ✅ the image now runs Node.js 24 (was 20)
• #398
• see the TLS note above. Same volumes, ports, users and settings.

Fixes

• ✅ BookDate recommendations work with current Claude models
• #263
• #395
• newer Claude models send their thinking before the answer, and BookDate failed with Cannot read properties of undefined (reading 'replace'). OpenAI and OpenAI-compatible providers now also handle empty and cut-off replies.
• ✅ imported M4B files carry their Audible ASIN as a tag
• #404
• ffmpeg silently dropped it; it's now written after ffmpeg and checked before the file is replaced. Audiobookshelf reads it when it scans.
• ✅ long book summaries scroll inside the details card instead of stretching it
• #410
• ✅ a Kindle-fixed EPUB is imported only after it reads back as written
• #402
• if the check fails, the original EPUB is imported and the request says so.

Upgrade

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

• chore: replace the literal NUL byte in the tagger's sanitize regex by @kikootwo in #394
• fix: read BookDate answers from Claude's text blocks, not the first block by @kikootwo in #395
• docs: refresh the README and its screenshots by @kikootwo in #396
• chore: move the image, CI and the e2e harness from Node 20 to Node 24 by @kikootwo in #398
• chore(deps): bump date-fns from 3.6.0 to 4.4.0 by @dependabot[bot] in #347
• chore(deps): stop Dependabot proposing openid-client and TypeScript majors; group vitest by @kikootwo in #403
• fix: import a Kindle-fixed EPUB only after it reads back as written by @kikootwo in #402
• fix: write the ASIN into M4B files as a freeform tag by @kikootwo in #404
• fix: scroll long book summaries inside the details card by @kikootwo in #410
• chore(deps): stop Dependabot proposing zod, ioredis and eslint majors by @kikootwo in #411
• chore: release v1.2.9 by @kikootwo in #416

New Contributors

• @dependabot[bot] made their first contribution in #347

Full Changelog: v1.2.8...v1.2.9

🎉 Release v1.2.8

Features:

• ✅ Audible Italy (audible.it) as a region
• #387
• #392

Includes an Italian language setup, so author pages and search keep Italian books. Changing region on an existing library can re-request books you already have (#256), and home-page category sections need to be picked again.

• ✅ smaller Docker image
• #279
• #384

Thanks https://github.com/ChaoticSciuridae !

About 44% smaller to download (amd64: 1328 → 740 MB compressed). Same volumes, ports, users and settings; tested on fresh installs and on upgrades from 1.2.3 and 1.2.6.

Fixes:

• ✅ chapter merges are verified by their audio before the chapter files are cleaned up
• #391

A merged book that lost audio (e.g. a chapter read short) keeps its source files; a merge with a broken timeline falls back to organizing the files individually. .aac and VBR MP3 books without a Xing header now merge with correct chapter markers. Recommended update.

• ✅ format conversion and cover art never replace a library file
• #388

The .m4b rename and cover writes no longer overwrite an existing file; an existing cover.jpg is kept. Requests now say when files were imported without metadata tags, and why a multi-format ebook download was kept.

• ✅ indexer settings no longer wiped when the indexer list fails to load
• #390

If Prowlarr is unreachable or moved, saving settings keeps your saved indexers and flag rules. A changed Prowlarr address offers "Keep saved indexers".

• ✅ indexer seeding settings found by Prowlarr id
• #386

Renaming an indexer in Prowlarr no longer turns its torrents into "seed forever".

• ✅ setup pages stop polling when you leave them
• #389
• ✅ settings messages: save confirmations clear themselves, connection-test results stay on screen
• #383

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

• fix: stop timers and polling after a component unmounts by @kikootwo in #383
• feat: smaller Docker image with a multi-stage build (re-land of #279) by @kikootwo in #384
• fix: find indexer seeding settings by Prowlarr id, not only by name by @kikootwo in #386
• fix: never replace library files when converting formats or writing covers by @kikootwo in #388
• fix: stop setup job polling when the page is left by @kikootwo in #389
• fix: never wipe saved indexers when the list fails to load by @kikootwo in #390
• fix: verify chapter merges by their audio before sources are cleaned up by @kikootwo in #391
• feat: add Audible Italy (audible.it) as a region by @kikootwo in #392
• chore: release v1.2.8 by @kikootwo in #393

Full Changelog: v1.2.7...v1.2.8

🎉 Release v1.2.7

Fixes:

• ✅ Plex profile sign-in hardened
  • #373
  • signing in with a Plex Home profile now takes that profile's identity from Plex, and signing in never changes an existing user's role. Recommended update.
• ✅ OIDC sign-in only signs into OIDC accounts
  • #376
• ✅ Apprise Basic-auth credentials kept out of the server URL
  • #372
  • Apprise servers behind HTTP Basic auth now use separate Basic Auth Username and Password fields; the password is encrypted and masked. Existing server URLs with user:pass@ are converted automatically at startup.
  • if you roll back to an earlier version, re-enter the Apprise credentials in the server URL. If you keep database backups or logs from before this update, change the Apprise Basic-auth password.
• ✅ credential recovery hides typed passwords and can reset the Plex-mode admin
  • #375
  • a reset signs that user out everywhere. The script now needs a terminal: run it with docker exec -it.
• ✅ imports cleaned up only after the library copy is verified
  • #377
  • a download is removed file by file, only once the library holds the same audio. Library files are never overwritten, and an interrupted copy never leaves a truncated file behind.
• ✅ deleting a request only removes library files that provably belong to it
  • #381
  • otherwise the files, the Audiobookshelf/Plex item and the book's status are kept, and the admin is told why. Shared ebook folders are never swept, and a media volume that isn't mounted keeps everything. Recommended update.
• ✅ re-requesting a failed request keeps its blocklist
  • #312
  • #382
  • shelf sync no longer downloads the same dead release over and over.
• ✅ imports keep going when file permissions can't be set (mergerfs, NFS, FUSE)
  • #233
  • #380
• ✅ indexer ratio limits kept when saving settings
  • #319
  • #282
  • #378
  • if a ratio limit was already reset to 0 before you update, re-enter it once in Settings > Indexers.
• ✅ deleting a request follows the seeding rules (time and ratio)
  • #379
  • a torrent another active request still uses is kept.
• ✅ lodash and minimatch updated
  • #370

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

• chore(deps): update lodash and minimatch within their existing ranges by @kikootwo in #370
• ci: pin actions to commit SHAs and publish images only from version tags by @kikootwo in #371
• fix: keep Apprise Basic-auth credentials out of the server URL by @kikootwo in #372
• fix: take the Plex profile identity from Plex during sign-in by @kikootwo in #373
• chore(e2e): log in through the Admin Login toggle in the Plex-mode upgrade run by @kikootwo in #374
• fix: clean up imports only after the library copy is verified by @kikootwo in #377
• fix: keep OIDC sign-in to OIDC accounts by @kikootwo in #376
• fix: hide typed passwords and recover Plex-mode admins in credential recovery by @kikootwo in #375
• fix: keep indexer ratio limits when saving settings by @kikootwo in #378
• fix: use the seeding cleanup rule when deleting a request by @kikootwo in #379
• fix: keep imports going when file permissions can't be set by @kikootwo in #380
• fix: only delete library files a request provably owns by @kikootwo in #381
• fix: keep the blocklist when a failed request is re-requested by @kikootwo in #382
• chore: release v1.2.7 by @kikootwo in #385

Full Changelog: v1.2.6...v1.2.7

🎉 Release v1.2.6

Fixes:

• ✅ Details modal shows Audible's ~300-char blurb instead of the full summary

• #324

• #360

• Thanks https://github.com/sean0407 !

• book details now show the full Audnexus summary, keeping its paragraphs, line breaks and list bullets

• ✅ Goodreads shelf links checked more strictly

• #365

• shelf feeds are only fetched from goodreads.com over https. Older http:// and bare goodreads.com links are fixed up automatically, so existing shelves keep syncing. Recommended update.

• ✅ saved passwords stored encrypted and kept with their server

• #366

• download client passwords are always stored encrypted. When you change the OIDC issuer, an Apprise or ntfy server address, or the BookDate provider or custom URL, RMAB asks you to re-enter that secret. Recommended update.

• ✅ bcrypt 6

• #368

• bcrypt now ships its own prebuilt binaries, which drops an old install-time downloader and the outdated packages it brought in (including tar 6). Existing passwords keep working.

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

• chore(e2e): add an end-to-end test harness by @kikootwo in #364
• fix: only fetch Goodreads shelf feeds from Goodreads over https by @kikootwo in #365
• fix: store download client passwords encrypted and keep saved secrets with their server by @kikootwo in #366
• fix: show the full book summary from Audnexus, keeping its paragraphs by @kikootwo in #367
• chore(deps): update bcrypt to 6 by @kikootwo in #368
• chore: release v1.2.6 by @kikootwo in #369

Full Changelog: v1.2.5...v1.2.6

🎉 Release v1.2.5

Fixes:

• ✅ BookDate connection test requires an admin after setup
  #361

  The setup wizard can still test the built-in providers; custom provider addresses are admin-only. Recommended update.

• ✅ Download links and Prowlarr credentials handled more strictly
  #355
  #300

  Thanks https://github.com/johannbre !

  Redirects are followed hop by hop for every torrent client, the Prowlarr key and any URL credentials are only used when fetching from Prowlarr and are never stored or logged, and a stalled download source is retried. If your Prowlarr publishes download links on a different host name than the one set in RMAB, set RMAB's Prowlarr URL to that host.

• ✅ Startup and saved credentials hardened
  #358

  The app starts its background services by itself after boot; when you change a server address in settings, RMAB asks you to re-enter that server's password, API key or token.

• ✅ Next.js 16.4.2 and dependency updates
  #362

  Security and maintenance updates. If you set HTTP_PROXY, HTTPS_PROXY or NO_PROXY, make sure NO_PROXY covers your local services (Prowlarr, download clients, Plex, Audiobookshelf). Release titles from Prowlarr RSS and Goodreads shelves now show apostrophes and accents correctly.

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

• fix: tighten how download links and Prowlarr credentials are handled by @kikootwo in #355
• test: pin EPUB fixer, RSS entity decoding and relative-time wording by @kikootwo in #356
• chore: group Prisma updates and skip Prisma and jsdom majors in Dependabot by @kikootwo in #357
• fix: harden startup initialisation and saved-credential handling by @kikootwo in #358
• fix: require admin for the BookDate connection test after setup by @kikootwo in #361
• chore(deps): update Next.js to 16.4.2 and the npm minor/patch group by @kikootwo in #362
• chore: release v1.2.5 by @kikootwo in #363

Full Changelog: v1.2.4...v1.2.5

🎉 Release v1.2.4

Fixes:

• ✅ Imports from media library conflict with indexer settings for file removal after download
  #242
  #353
  cleanup after an import can no longer delete anything inside your library; it only cleans up downloads RMAB itself completed, and refuses when in doubt. Recommended update.
• ✅ ffmpeg and ffprobe fail on ARM-based systems
  #230
  #328
  ffmpeg now comes from a pinned multi-arch image, so tagging and chapter merging work on arm64 and image builds no longer depend on an outside download site
• ✅ run ffmpeg and ffprobe without a shell
  #351
  file and folder names now reach ffmpeg exactly as they are on disk; also fixes merged titles containing " getting a stray quote. Recommended update.

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

• docs: retire the no-commit rule in CLAUDE.md by @kikootwo in #327
• fix(docker): install ffmpeg from a pinned multi-arch image (#230) by @kikootwo in #328
• docs: add a security policy by @kikootwo in #333
• chore: add issue forms for bugs and feature requests by @kikootwo in #334
• docs: add a contributing guide by @kikootwo in #336
• chore: add a pull request template by @kikootwo in #335
• chore: add Dependabot for npm, GitHub Actions and Docker by @kikootwo in #337
• chore: keep local data folders out of the image build context by @kikootwo in #339
• ci: run the unit tests on pull requests by @kikootwo in #338
• fix: run ffmpeg and ffprobe without a shell by @kikootwo in #351
• fix: never let post-import cleanup delete library content by @kikootwo in #353
• chore: release v1.2.4 by @kikootwo in #354

Full Changelog: v1.2.3...v1.2.4

🎉 Release v1.2.3

Fixes:

• ✅ Hardcoded JWT fallback enables forged administrator tokens
• #297
• Installs running outside the official Docker image, including the Proxmox VE helper script, should update now (Proxmox: run update in the container). Users on those installs are signed out once.
• Docker installs were not affected.
• ✅ Search / Download stopping at 50
• #151
• Requests beyond the first 50 are now processed in rotating batches, and RSS matching covers every request awaiting search
• ✅ Search truncates to 100 results before dedup and ranking, silently dropping the best releases
• #262
• The full deduplicated result set is now ranked before the 100-result cap is applied
• ✅ Deleting a request removes a directory rebuilt from the current template, not the one it created
• #265
• Deletion now uses the path stored when the book was organized
• ✅ A rate-limited indexer grab marks the request permanently failed instead of trying the next release
• #267
• After a 429 or 5xx grab response, the next ranked release is tried automatically

Upgrade:

docker pull ghcr.io/kikootwo/readmeabo
docker compose down
docker compose up -d

What's Changed

• Fix search and download processing stopping at 50 by @kikootwo in #274
• Fix rate-limited grabs by trying the nwo inhttps://github.com//pull/275
• Fix request deletion to use stored media path by @kikootwo in
• https://github.com/kikootwo/ReadMeABook/
• Rank search results before applying result cap by @kikootwo in #277
• Fix/jwt secret derivation by @kikootwo in #301

Release v1.2.2

Features:

• ✅ Advance existing requests from Interactive Search
  Interactive Search now advances an existing request instead of creating a duplicate

Fixes:

• ✅ CamelCase author names fail automatic search matching
  #234
  #219
  Thanks https://github.com/rinseaid !

• ✅ Wait for Relocation gets stuck
  #209
  Path boundary checks are now separator-agnostic — handles Windows backslashes, trailing separators, and .. segments

• ✅ Fixed intermittent empty Audible series pages
  Handles both of Audible's series page layouts (modern and legacy)

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

fix: CamelCase author names fail automatic search matching by @rinseaid in #219

New Contributors

@rinseaid made their first contribution in #219

Full Changelog: v1.2.1...v1.2.2

Release v1.2.1

Features

• ✅ Convert Unsupported Media Types for Plex Import
  #166
• ✅ Feature Request: Dont search indexers for unrealeased books
  #187
• ✅ Truncating book names in interactive search doesn't show language
  #190
• ✅ allow API tokens to create book requests
  #169
• ✅ Add "search for missing eBooks" schedule
  #191
• ✅ Unified Navigation in Audiobook Details View
  #153
• ✅ Revamped System Logs
  Searchable, filterable, easily copy-able
• ✅ blocklist failed NZB releases to prevent duplicate re-downloads
  #195
  Will also blocklist failed downloads
  Blocklist viewable/manageable in the admin dashboard
• ✅ Ratio Limit in addition to seeding time per-indexer
  #42

Fixes

• ✅ Fixed confusing naming and missing descriptions in the scheduled jobs page
• ✅ Fixes a 403 Issue where NZBFinder rejected requests with "axios/x.y.z" user-agent string
  #206
  Thanks https://github.com/Bukowskaii !
• ✅ Paginator bug on large screens
  reworked paginator show states to be more stable
  #183
• ✅ Fix metadata hanging quote on edge cases

Upgrade

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

Fixes a 403 Issue where NZBFinder rejected requests with "axios/x.y.z" user-agent string by @Bukowskaii in #206

New Contributors

@Bukowskaii made their first contribution in #206

Full Changelog: v1.2.0...v1.2.1

Release v1.2.0

Features

• ✅ feat(audiobook): add language, format and publisher to details modal
• #152
• Thanks @Orvanix !
• ✅ feat: add book info modal to admin pending approval cards
• #158
• Thanks @xFlawless11x !
• ✅ feat: add On Grab notification event
• #162
• Thanks @xFlawless11x !
• ✅ Bulk import enhancement: group tagless files by folder and use folder name as search fallback
• #173
• Thanks https://github.com/MattiasC !
• ✅ Make qBit support fully auth-less when no credentials are provided
• #178
• Thanks @funkypenguin.co.nz for surfacing the issue!
• ✅ Add seriesPart metadata tag for Audiobookshelf series ordering
• #198
• Thanks https://github.com/TylerNorris214 !
• ✅ Add User-Agent header to Prowlarr RSS queries
• #201
• Thanks @xFlawless11x !
• ✅ feat: allow cancellation of pending-approval requests
• #202
• Thanks @xFlawless11x !
• ✅ Recovery Script

It's been a rare occurence for users to be unable to login and have to reset their instance. It's been proven that this happens when users are missing the volume mapping where the encryption secret is kept (./config:/app/config)
If it does happen to you Run this to get started with recovery:
docker exec -it <container> npm run rmab:recover

Fixes

• ✅ Homepage Fixes

Move audible data refresh back to scraping method (no good catalog api for it)
Excessive retries and backoffs to combat 503's, data refresh may take up to 15 mins per category enabled on your homepage (if you have lots of 503's)

• ✅ Fix some inconsistency with sibling ASIN grouping
• ✅ fix: use BigInt for PlexLibrary.duration to prevent INT4 overflow
• #194
• Thanks https://github.com/H0tChicken !
• ✅ Fix Plex Home profile selection login loop
• #197
• Thanks https://github.com/cbusillo !

Upgrade

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

GITHUB GENERATED NOTES

What's Changed

• feat(audiobook): add language, format and publisher to details modal by @Orvanix in #152
• feat: add book info modal to admin pending approval cards by @xFlawless11x in #158
• feat: add On Grab notification event by @xFlawless11x in #162
• Bulk import enhancement: group tagless files by folder and use folder name as search fallback by @MattiasC in #173
• fix: use BigInt for PlexLibrary.duration to prevent INT4 overflow by @H0tChicken in #194
• Fix Plex Home profile selection login loop by @cbusillo in #197
• Add seriesPart metadata tag for Audiobookshelf series ordering by @TylerNorris214 in #198
• Add User-Agent header to Prowlarr RSS queries by @xFlawless11x in #201
• feat: allow cancellation of pending-approval requests by @xFlawless11x in #202

New Contributors

• @xFlawless11x made their first contribution in #158
• @MattiasC made their first contribution in #173
• @H0tChicken made their first contribution in #194
• @cbusillo made their first contribution in #197
• @TylerNorris214 made their first contribution in #198

Full Changelog: v1.1.8...v1.2.0

Full Changelog: v1.1.7...v1.1.8

🎉 Release v1.1.8

Features:

• ✅ Path Helper

After answering my 500th 'how do I set up my paths' in discord, I've added a 'wizard' at /path-helper that will ask you a few questions and tell you exactly how to set up your paths for RMAB

Fixes:

• ✅ Audible 503's Fixed (Hopefully)

I was never able to reproduce these on my end, but moving RMAB to the catalog api should hopefully prevent them for everyone experiencing the problem. Please report on your success

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest
docker compose down
docker compose up -d

What's Changed

feat(auth): add admin-generated login tokens for authentication by @Orvanix in #146

New Contributors

@Orvanix made their first contribution in #146

Full Changelog: v1.1.5...v1.1.6

🎉 Release v1.1.6

Features:

• ✅ Bulk Import

• New Button on the Admin Dashboard

Should be self explanatory, shows you what it will import/match to before performing any actions. 1 audible search / book found so be patient :)

• ✅ Login via Token (Thanks @Orvanix!)

#146

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest

docker compose down

docker compose up -d

What's Changed

Add Shelf Syncing button by @brombomb in #136

Full Changelog: v1.1.4...v1.1.5

🎉 Release v1.1.5

Features:

• ✅ Ignore Book Toggle (Per User, in Audiobook Details Modal)
• The user who ignored the book will not create automatic requests for this book via watching/shelves
• #138
• ✅ UMASK Support + Custom Permissioning
• UMASK is a new compose Env Var, Folder+File Permissioning is in the paths settings
• https://discord.com/channels/1450562177277755464/1454544922966364303
• #76
• ✅ Sync Now functionality now available for goodreads/hardcover shelves (Thanks @brombomb!)
• #136
• ✅ Toggle Shelf Auto-Request
• Shelves toggled 'off' will still sync, but will not create any requests

Fixes:

• ✅ Library Scans now have no limit for the number of requests to match against
• https://discord.com/channels/1450562177277755464/1450565852653944872/1480141433150115933
• ✅ groups are only passed for OIDC when using group claims (google auth fix)
• #142
• ✅ NZB fetching through proxied auth should work now with api key passed in the source headers
• #124

Upgrade:

docker pull ghcr.io/kikootwo/readmeabook:latest

docker compose down

docker compose up -d