Skip to content

feat(container): update image ghcr.io/autobrr/qui (v1.23.0 ➔ v1.24.0) - #4261

Merged
Tanguille merged 1 commit into
mainfrom
renovate/ghcr.io-autobrr-qui-1.x
Jul 30, 2026
Merged

feat(container): update image ghcr.io/autobrr/qui (v1.23.0 ➔ v1.24.0)#4261
Tanguille merged 1 commit into
mainfrom
renovate/ghcr.io-autobrr-qui-1.x

Conversation

@renovate

@renovate renovate Bot commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
ghcr.io/autobrr/qui minor v1.23.0v1.24.0

Release Notes

autobrr/qui (ghcr.io/autobrr/qui)

v1.24.0

Compare Source

Changelog
New Features
Bug Fixes
Other Changes

Full Changelog: autobrr/qui@v1.23.0...v1.24.0

Docker images
  • docker pull ghcr.io/autobrr/qui:v1.24.0
  • docker pull ghcr.io/autobrr/qui:latest
What to do next?

Thank you for using qui!


Configuration

📅 Schedule: (in timezone Europe/Brussels)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@tanguille-cluster

Copy link
Copy Markdown
@@ spec.template.spec.containers.app.image @@
# apps/v1/Deployment/media/qui
! ± value change
- ghcr.io/autobrr/qui:v1.23.0@sha256:b1abd18f1d544cd5c63a3b8d9c8a91d097143e04df416567a8cb52040f380ca8
+ ghcr.io/autobrr/qui:v1.24.0@sha256:c1531b69a116b2572f69c76e6e02990b20ca04ef6550c883009df9ebcade1aba

@tanguille-cluster

Copy link
Copy Markdown
@@ spec.values.controllers.qui.containers.app.image.tag @@
# helm.toolkit.fluxcd.io/v2/HelmRelease/media/qui
! ± value change
- v1.23.0@sha256:b1abd18f1d544cd5c63a3b8d9c8a91d097143e04df416567a8cb52040f380ca8
+ v1.24.0@sha256:c1531b69a116b2572f69c76e6e02990b20ca04ef6550c883009df9ebcade1aba

@coderabbitai

coderabbitai Bot commented Jul 30, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

The Qui HelmRelease updates the controller container image from v1.23.0 to v1.24.0 and replaces its pinned digest. All other configuration remains unchanged.

Changes

Qui image update

Layer / File(s) Summary
Update Qui image reference
kubernetes/apps/media/qui/app/helmrelease.yaml
The controller image tag changes to v1.24.0 with its corresponding new digest.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

Suggested labels: type/digest

Suggested reviewers: tanguille

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: updating the qui container image from v1.23.0 to v1.24.0.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/ghcr.io-autobrr-qui-1.x

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

AI Automated Review

Analysis engine: qwen-3.6-fast@http://litellm.ai.svc.cluster.local/v1 (openai)

Recommendation

Approve. This is a straightforward minor version bump of the qui container image from v1.23.0 to v1.24.0. The change is isolated to a single HelmRelease manifest, uses a verified image digest, and introduces no breaking changes or configuration modifications.

Change-by-Change Findings

kubernetes/apps/media/qui/app/helmrelease.yaml

  • Image Update: Updated ghcr.io/autobrr/qui from v1.23.0@sha256:b1abd... to v1.24.0@sha256:c1531.... The new digest is present in the diff and corresponds to the official v1.24.0 release published on GitHub.
  • Configuration: No changes to environment variables, resource limits, security context, or persistence. The existing security posture (non-root user, read-only root filesystem, dropped capabilities) remains intact.

Release Notes

The v1.24.0 release of autobrr/qui includes:

New Features:

  • Backup system improvements: reclaim orphaned torrent cache blobs at startup.
  • Cross-seeding enhancements: detect ReFS block-cloned delete matches, hardlinked cross-seeds in the delete dialog, and match season packs across alternate titles and anime absolute numbering.
  • qBittorrent integration: detect "torrent has been rejected" as unregistered.
  • Localization: added Brazilian Portuguese (pt-BR) support.
  • UI: added supporter subscription entry point.

Bug Fixes:

  • Backup export stalls fixed with capped adaptive delay; cache blobs now written atomically.
  • Cross-seed search reliability improved: RSS-deduplicated searches complete properly, partial results retained when a tracker fails, and candidates retained using exact size evidence.
  • Hardlink handling updated for 128-bit Windows file IDs.
  • Reannounce automation updated with corrected torrent age calculation.
  • Web UI: radix-ui packages bumped to fix dialog dismissal regression.
  • General: preserved empty torrent path components; sanitized non-UTF-8 bytes from torrent-derived strings; rejected qBittorrent never-completed sentinels in completion detection.

Dependency Updates:

  • Several upstream Go and web dependencies were bumped (fast-uri, postcss, go-qbittorrent, etc.). These are internal to the application and do not affect Kubernetes deployment compatibility.

No breaking changes are documented in this release.

Standards Compliance

  • Conventional Commit: Title follows feat(container): update image ... convention.
  • Security Context: Pod runs as non-root (runAsUser: 568), with readOnlyRootFilesystem: true, allowPrivilegeEscalation: false, and all capabilities dropped. Seccomp profile set to RuntimeDefault.
  • Resource Limits: CPU/memory requests and limits remain unchanged (10m–2 CPU, 128Mi–2Gi memory).
  • Image Pinning: Image tag includes SHA256 digest, ensuring reproducible deployments.
  • GitOps Workflow: Change is made through the repository manifest, consistent with the required workflow.

Must-Check Items

Check Status Notes
Validate manifest against target cluster version ✅ Verified Uses helm.toolkit.fluxcd.io/v2 API, compatible with current Flux CD versions. No schema violations detected.
Check for resource quota / limit changes ✅ Verified Resource requests and limits are unchanged from the previous version.
Verify file path sanitization ✅ N/A This PR only updates an image tag; no file-serving logic or path-handling code is modified in the repository. The upstream release notes mention sanitization of non-UTF-8 bytes in torrent-derived strings, which is handled internally by the application.
Check for directory traversal vulnerabilities ✅ N/A No file-serving or path-construction changes in this PR. The file_serving_changes risk flag was triggered by the classifier due to the app's nature (media server), but this specific diff contains no relevant code changes.

Unknowns or Needs Verification

None. The image digest is verifiable against the GitHub release, and the manifest structure is consistent with repository conventions.

@Tanguille
Tanguille merged commit cbed5d3 into main Jul 30, 2026
14 checks passed
@Tanguille
Tanguille deleted the renovate/ghcr.io-autobrr-qui-1.x branch July 30, 2026 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant