chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.35.1

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/advplyr/audiobookshelf	minor	2.33.1 → 2.35.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

advplyr/audiobookshelf (ghcr.io/advplyr/audiobookshelf)

v2.35.1

Compare Source

Important: New authentication system was added in v2.26.0. See https://redirect.github.com/advplyr/audiobookshelf/discussions/4460 for details.

Fixed

• Duplicate refresh tokens across sessions can cause unexpected logout #​5253 by @​nichwall in #​5255
• Server crash when renaming an author to another author when they are both on the same book #​5247 by @​nichwall in #​5256
• Server crash when invalid metadata.json is scanned in #​5268
• Sequelize user queries to use direct case-insensitive username/email matching

Full Changelog: advplyr/audiobookshelf@v2.35.0...v2.35.1

v2.35.0

Compare Source

Important: New authentication system was added in v2.26.0. See https://redirect.github.com/advplyr/audiobookshelf/discussions/4460 for details.

Added

• Access token refresh grace period (fixes frequently needing to re-login) #​4630 by @​nichwall in #​5004

Fixed

• Listening sessions from Android app showing device name as Abs iOS
• RSS feeds serving m4b files with incorrect Content-Type #​5041 by @​brandonfhall in #​5221

Changed

• Book & podcast descriptions from audio files are sanitized
• cancel_scan and set_log_listener socket events validate account type and log level
• More strings translated
  • Belarusian by @​pavel-miniutka
  • Polish by @​TheMatrixan

New Contributors

• @​brandonfhall made their first contribution in #​5221

Full Changelog: advplyr/audiobookshelf@v2.34.0...v2.35.0

v2.34.0

Compare Source

Important: New authentication system was added in v2.26.0. See https://redirect.github.com/advplyr/audiobookshelf/discussions/4460 for details.

Added

• Japanese language and Japan as podcast search region by @​na3shkw in #​5211
• Autocomplete attributes on login and setup fields for password manager support by @​meek2100 in #​5089

Fixed

• Recent episodes not updating from cache when media progress changes in #​5159
• Error logging when a podcast's auto-download schedule has an invalid cron expression

Changed

• Public media item shares: use start time passed in query parameter for existing sessions by @​pjkottke in #​5163
• Podcast episode downloads use SSRF filtering on the HTTP request (matches other external requests)
• Podcast create and update validate the auto-download schedule cron expression and sanitizes the HTML description
• Playlists, collections, and library item batch API routes enforce library and per-item access
• More strings translated
  • Belarusian by @​pavel-miniutka
  • Hungarian by @​ugyes
  • Japanese by @​na3shkw

Internal

• ApiCacheManager test coverage for recent-episodes cache invalidation

New Contributors

• @​pjkottke made their first contribution in #​5163
• @​meek2100 made their first contribution in #​5089
• @​na3shkw made their first contribution in #​5211

Full Changelog: advplyr/audiobookshelf@v2.33.2...v2.34.0

v2.33.2

Compare Source

Important: New authentication system was added in v2.26.0. See https://redirect.github.com/advplyr/audiobookshelf/discussions/4460 for details.

Fixed

• Matroska audiobooks (.mka) with the Opus codec failing to play in web client by @​rktjmp in #​5115
• UI/UX: Share player not using libraries cover aspect ratio setting
• Backup uploads leaving temporary files behind when the uploaded file failed validation
• Path traversal check on the filesystem path-exists endpoint not handling all edge cases

Changed

• Bulk download endpoint now ensures all requested items belong to the library being requested
• Backup load and upload now validate the backup details entry exists and is within a reasonable size limit
• Podcast create endpoint validates that the podcast path is inside the selected library folder
• Author and library item cover image endpoints now clamp width/height query params to a maximum of 4096
• Podcast episode subtitles parsed from RSS feeds are now sanitized for HTML
• author_updated/author_added socket events emitted when updating authors in the book details edit modal by @​mikiher in #​5158
• item_removed socket event payload now includes libraryId so clients can ignore events for other libraries by @​mikiher in #​5160
• More strings translated
  • Belarusian by @​pavel-miniutka
  • Bulgarian by @​lembata
  • German by @​JBlond @​LaurinSorgend
  • Italian by @​tizio04
  • Russian by @​Hopelite @​vmakeev
  • Spanish by @​cyphra

New Contributors

• @​rktjmp made their first contribution in #​5115

Full Changelog: advplyr/audiobookshelf@v2.33.1...v2.33.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud