v6.1.0

Features

• feat(docs): add Swagger UI in running app and MkDocs - Enable Swagger in all environments (Host + WebUI) - Add Bearer token support in Swagger UI for /api/* endpoints - Document /swagger in docs/webui/api.md - Add mkdocs-swagger-ui-tag, docs/webui/swagger.md, docs/assets/openapi.json - Add ExportOpenApiSpecTests to regenerate spec when TORRENTARR_EXPORT_OPENAPI=1 - Document spec regeneration in release-process and contributing - ensure-global-json: use latestMinor so 10.0.200 SDK is accepted by pre-commit - Also includes: WebUI auth helpers, login/set-password rate limiters, and related tests/docs. (8c9a261)

Bug Fixes

• Fix main branch nightly docker and hook order (1f8494f)
• fix: add System.Collections.Concurrent for ConcurrentDictionary in rate limiters (dcee0d2)
• fix: add OpenIdConnect package to WebUI project for PR build (683b791)

Documentation

• docs: add WebUI auth docs and fix MkDocs git-revision plugin warnings (b32116b)

Maintenance

• fix(webui): modals close only on Close/Done/Cancel/Confirm (qBitrr #332) (950190c)
• fix(tests): RadarrView timeout + security pass on auth paths (657df2c)
• test: use AllowAutoRedirect=false for logout test to assert on 302 (eec2154)
• ci: add .NET and Node setup to pre-commit workflow for local hooks (88efe9a)
• fix(tests): use API token for Swagger spec test so it passes when auth enabled (3df9a0c)
• ci: harden build workflow and add pre-commit compile checks (d825b10)
• pre-commit fixes (46fffe7)
• Align config version fallbacks with expected schema (b6e55d8)
• Gate PR Docker publish on build job (30179e0)
• Auth by default for new installs with welcome setup screen (ac2366b)
• Require build job before nightly Docker publish (7415324)
• Consolidate CI: single build workflow, remove pull_requests and nightly (851297e)
• Make csproj selection deterministic in ensure-global-json (73ec79a)
• fix(security): override immutable to 5.1.5 (CVE-2026-29063, GHSA-wf6x-7x77-mvgw) (a785265)
• fix(deps): align Microsoft.Extensions and EF Core to 10.0.3 for Dependabot merge (f0a8e1e)
• Update config, services, WebUI and ConfigView (dc3e1ae)
• chore(deps): bump @mantine/hooks from 8.3.15 to 8.3.16 in /webui (#38) (e65f5ff)
• chore(deps-dev): bump eslint from 10.0.1 to 10.0.3 in /webui (#31) (644db82)
• chore(deps-dev): bump typescript-eslint from 8.56.0 to 8.56.1 in /webui (#37) (486c793)
• chore(deps-dev): bump @types/node from 25.3.0 to 25.3.5 in /webui (#36) (0d544cb)
• chore(deps): bump @mantine/core from 8.3.15 to 8.3.16 in /webui (#34) (934391e)
• fix(config): fix DurationInput empty-string clamping bug (74f0a06)
• Bump Microsoft.EntityFrameworkCore.InMemory from 9.0.0 to 10.0.3 (b98250e)
• Bump Microsoft.EntityFrameworkCore.Design from 9.0.0 to 10.0.3 (f50535d)
• Bump Microsoft.EntityFrameworkCore from 9.0.0 to 10.0.3 (aa94c95)
• Bump Microsoft.AspNetCore.SpaServices.Extensions from 9.0.0 to 10.0.3 (ffec7c6)
• Bump Microsoft.AspNetCore.Mvc.NewtonsoftJson from 9.0.0 to 10.0.3 (59877b4)
• chore(deps): bump docker/setup-buildx-action from 3 to 4 (ca1f970)
• chore(deps): bump docker/login-action from 3 to 4 (bd07038)
• chore(deps): bump docker/metadata-action from 5 to 6 (297f406)
• chore(deps-dev): bump autoprefixer from 10.4.24 to 10.4.27 in /webui (#29) (922ba82)
• chore(deps): bump actions/setup-dotnet from 5.1.0 to 5.2.0 (8f602b7)
• chore(deps): bump docker/build-push-action from 6 to 7 (adaa153)
• fix(config): fix config view data flow and add missing fields (ca9b4da)
• chore: update .gitignore and CLAUDE.md (60d1041)
• Docs and Processes UI: formatting and content updates, process state and tests (9e52a03)
• Update Patreon funding name to 'Feramance' (c97d400)
• fix(auth): TokenOnly mode must set AuthDisabled=false not true (a8d409f)
• security(auth): harden login, set-password, and config endpoints (db9814a)
• feat(auth): comprehensive auth test coverage + improved auth settings modal (fafb065)
• Cursor review: OIDC challenge check Authority/ClientId; AuthGate fetch and store token when auth disabled (7e628f2)
• Cursor review: login constant-time bcrypt to prevent username enum; WebUI OIDC registration and challenge endpoint (9eebf46)
• Cursor review: set-password revert config on save failure; AuthGate store token on initial getToken success (96902dc)
• fix(webui): add Name claim to Bearer identity for consistency with Host (4f440bd)
• Cursor bot: constant-time token compare via SHA-256, restrict OIDC public path to challenge (3646f22)

v6.0.0

Features

• [major] First initial release of Torrentarr (cad60cd)
• Add Docker Hub pulls badge to README and docs (df9ac31)
• Add pre-commit auto-fix workflow; update dockerhub-description, docs workflow, environment docs (fe96ea3)
• feat: complete qBitrr parity — all gaps implemented, tests, and docs updated (f54c7cb)

Bug Fixes

• fix: Lidarr empty state and Host API test parallelization (dd67652)
• Fix ESLint: hook deps, Fast Refresh, TanStack Table incompatible-library (04b6d9a)
• fix: 10 bugs found in deep codebase review (04250aa)
• fix: address 10 bugs found in deep codebase review (ab4b510)
• fix: remove CS8620 warnings and add missing frontend API client functions (d619864)
• fix: implement tagless free space inline and remove dead IFreeSpaceService (4e2133c)
• fix: wire restart endpoints, meta force-refresh, and CA2017 log warnings (f0852b2)

Documentation

• docs: add Git commit rule to not use --no-verify in AGENTS.md and CLAUDE.md (a46fffd)
• docs: clarify DB is torrentarr.db not qbitrr.db (config/schema compatible) (bac3e0f)
• docs: fix broken config-editor link in configuration/webui.md (8176c0d)
• docs: replace remaining Torrentarr.db with qbitrr.db (0ec5d78)
• docs: complete Torrentarr vs qBitrr plan (remaining items) (77f6939)
• docs: align documentation with Torrentarr (C#) vs qBitrr (42b2566)
• docs: fix MkDocs build errors and warnings for GitHub Pages (0597580)

Maintenance

• fix(workflow): retry git push in pre-commit-autofix on transient failures (043780f)
• fix(workflow): fix YAML syntax in pre-commit-autofix commit message (0e5e915)
• ci: add Docker Hub push and README sync workflow (c63f58f)
• chore: use torrentarr.db as database filename everywhere (929be37)
• fix(webui): ConfigVersionWarning.currentVersion as string, installation_type union (c491017)
• ci: add MkDocs workflow for GitHub Pages (docs build and deploy) (2504054)
• chore: apply pre-commit (line endings, format, exclude mkdocs.yml and webui from check-yaml/pretty-json) (206a73a)
• chore: sync updates, ConfigView lint fix, pre-commit install, docker-compose (c39c839)
• chore: stop tracking wwwroot; build output only (f6cb7f3)
• Move torrent handling summary to top of Arr/qBit config modals (match qBitrr position) (38f3058)
• WebUI parity with qBitrr: API tokens, duration input, torrent summary, ErrorBoundary, AlreadyUpToDateModal, branding, a11y (318e7de)
• ci: add nightly and pre-commit workflows, extend CodeQL and Dependabot (54cbee3)
• Bump Microsoft.AspNetCore.Mvc.Testing from 9.0.0 to 10.0.3 (37a07b9)
• Bump coverlet.collector from 6.0.2 to 8.0.0 (2304c37)
• chore(deps-dev): bump @vitest/coverage-v8 from 3.2.4 to 4.0.18 in /webui (0157baa)
• Bump Microsoft.Extensions.Configuration and Microsoft.Extensions.Configuration.Binder (#16) (f8a0baf)
• chore(deps-dev): bump jsdom from 26.1.0 to 28.1.0 in /webui (#3) (c12656b)
• chore(deps): bump actions/upload-artifact from 4 to 7 (e556d9d)
• Remove unessary files (3e8fca7)
• fix(ci): use ConfigVersion 5.9.2 in Host test config so GET /web/config returns flat shape (c8ea19d)
• qBitrr parity: implement remaining 12 gaps (411823b)
• chore(deps-dev): bump globals from 17.3.0 to 17.4.0 in /webui (#21) (4eb57ea)
• chore(deps-dev): bump eslint-plugin-react-refresh in /webui (#20) (ec339bb)
• chore(deps): bump react-syntax-highlighter in /webui (#19) (6b52ba2)
• chore(deps-dev): bump tailwindcss from 4.2.0 to 4.2.1 in /webui (#18) (751b096)
• test: add 24 tests for ArrSyncService, TorrentProcessor, and ArrView (c8810e4)
• test: add 65 tests for Infrastructure services and frontend components (71d3c35)
• test: add remaining service and page view tests (0fd8b4f)
• test: add 57 infrastructure tests for service logic and private methods (ece418b)
• test: add 74 tests covering previously untested endpoints and helpers (e039ec9)
• Bump Microsoft.AspNetCore.Mvc.NewtonsoftJson from 9.0.0 to 10.0.3 (c042ea1)
• chore(deps): bump node from 22-alpine to 25-alpine (d2d4c19)