Movary

This release contains several bug fixes and maintenance updates, along with two authorization security fixes.

Thanks to @skeletonsec for responsibly reporting the authorization vulnerabilities fixed in this release.

What’s Changed

• Fix: Guard against empty movie ID arrays when fetching watch dates by @leepeuker in https://github.com/leepeuker/movary/pull/759
• Fix: Guard against empty movie ID arrays when fetching last IMDb updates by @leepeuker in https://github.com/leepeuker/movary/pull/760
• Fix: Support searching for movies by TMDB URL by @alifeee in https://github.com/leepeuker/movary/pull/764
• Fix: Handle user selection on URLs without a trailing slash by @leepeuker in https://github.com/leepeuker/movary/pull/778
• Fix: Preserve query parameters when switching users by @leepeuker in https://github.com/leepeuker/movary/pull/780
• Fix: Show the selected user’s movies on person pages by @leepeuker in https://github.com/leepeuker/movary/pull/782
• Security: Restrict server general settings to administrators by @leepeuker in https://github.com/leepeuker/movary/pull/784
• Security: Restrict global job queue purge actions to administrators by @leepeuker in https://github.com/leepeuker/movary/pull/785
• Maintenance: Add contributor guidance for AI coding agents by @leepeuker in https://github.com/leepeuker/movary/pull/781
• Maintenance: Add sahinakkaya to the contributors list by @sahinakkaya in https://github.com/leepeuker/movary/pull/774
• Maintenance: Update guzzlehttp/psr7 from 2.10.1 to 2.11.0 by @dependabot[bot] in https://github.com/leepeuker/movary/pull/762
• Maintenance: Update spomky-labs/otphp from 11.4.2 to 11.4.3 by @dependabot[bot] in https://github.com/leepeuker/movary/pull/765

Full Changelog: https://github.com/leepeuker/movary/compare/0.72.0…0.72.1