SuggestArr Files

This release adds per-user suggestion ownership, quality-profile selection during approval, localized titles and overviews, and trusted-header authentication for reverse-proxy SSO.

---

👤 Personal Suggestions

• Suggestions generated from a linked media-server account now belong to that SuggestArr user
• Users only see and manage suggestions made for them, while admins retain the appropriate visibility
• Ownership is assigned only through verified media-account links, preventing accidental account associations
• Existing request visibility rules continue to apply to requests and suggestions

Implemented in [#471] by @achimcc.

---

🎬 Choose a Quality Profile Before Approval

• Added a profile-selection dialog when approving movies or TV shows
• Choose the target Radarr or Sonarr server, quality profile, and root folder before sending a request
• Automatically preselects a single available server and root folder where possible
• Selected request settings are saved atomically with the approval, so queued requests always use the intended profile
• Improved Jellyseerr profile and root-folder loading for API-key-only setups

Implemented in [#470] by @achimcc.

---

🌐 Personalized Title Language

• Added a per-user title-language preference in the profile page
• Suggestions and requests can now display localized TMDb titles and overviews
• Added a configurable server-wide default language through TMDB_LANGUAGE
• Translations are cached locally and gracefully fall back to the original metadata if TMDb is unavailable
• Localized display text does not change stored metadata, search behavior, sorting, or submitted Seer requests

Implemented in [#472] by @achimcc.

---

🔐 Trusted Header Authentication

• Added AUTH_MODE=trusted_header for reverse proxies and SSO providers such as Authelia, Authentik, oauth2-proxy, and Traefik forward-auth
• Supports configurable identity headers through AUTH_TRUSTED_HEADER
• Can automatically create local user accounts for authenticated proxy users
• Trusted headers are accepted only from configured AUTH_TRUSTED_CIDRS
• Expanded installation documentation with security guidance and a reverse-proxy example

Implemented in [#468] by @achimcc. Addresses [#467].

When using trusted-header authentication, configure AUTH_TRUSTED_CIDRS as narrowly as possible—ideally only the proxy address.

---

🐛 Jellyfin & Seer Improvements

• Fixed Jellyfin recommendation seeds being ranked by release date instead of the user’s watch date
• Fixed Jellyfin user-data requests by enabling UserData correctly
• Normalized Jellyfin content-limit configuration values to prevent type-related failures
• Improved handling when a configured Seer user lacks request permissions: SuggestArr now retries through the configured API key where available

The Jellyfin recommendation fixes were implemented in [#483] by @999Fritsch. Addresses [#482].

The content-limit fix addresses [#469].

The Seer permission fallback addresses [#473].

---

🧰 Maintenance & Testing

• Updated frontend, Python, linting, Playwright, and GitHub Actions dependencies
• Updated PyJWT, OpenAI, Prometheus client, PostgreSQL driver, Vue, Axios, ESLint, and related packages
• Upgraded GitHub Actions artifact uploads to v7 in [#475]
• Updated Python dependencies in [#476]
• Updated Dependabot to target the nightly branch
• Added coverage for approval profiles, suggestion ownership, title localization, trusted-header authentication, and critical frontend flows

---

🙏 Thanks

A special thanks to the community contributors who made this release possible:

• @achimcc for trusted-header authentication, per-user suggestion ownership, approval quality profiles, and title localization (#468, [#470], [#471], [#472])
• @999Fritsch for the Jellyfin watch-date recommendation fix (#483)