feat(dispatcharr): update image docker.io/dispatcharr/dispatcharr 0.18.1 → 0.19.0 (#44756)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/dispatcharr/dispatcharr](https://redirect.github.com/Dispatcharr/Dispatcharr)
| minor | `425be85` → `8b53fbe` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>Dispatcharr/Dispatcharr
(docker.io/dispatcharr/dispatcharr)</summary>

###
[`v0.19.0`](https://redirect.github.com/Dispatcharr/Dispatcharr/blob/HEAD/CHANGELOG.md#0190---2026-02-10)

[Compare
Source](https://redirect.github.com/Dispatcharr/Dispatcharr/compare/v0.18.1...v0.19.0)

##### Added

- Add system notifications and update checks
  -Real-time notifications for system events and alerts
  -Per-user notification management and dismissal
-Update check on startup and every 24 hours to notify users of available
versions
  -Notification center UI component
  -Automatic cleanup of expired notifications
- Network Access "Reset to Defaults" button: Added a "Reset to Defaults"
button to the Network Access settings form, matching the functionality
in Proxy Settings. Users can now quickly restore recommended network
access settings with one click.
- Streams table column visibility toggle: Added column menu to Streams
table header allowing users to show/hide optional columns (TVG-ID,
Stats) based on preference, with optional columns hidden by default for
cleaner default view.
- Streams table TVG-ID column with search filter and sort: Added TVG-ID
column to streams table with search filtering and sort capability for
better stream organization. (Closes
[#&#8203;866](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/866))
- Thanks [@&#8203;CodeBormen](https://redirect.github.com/CodeBormen)
- Frontend now automatically refreshes streams and channels after a
stream rehash completes, ensuring the UI is always up-to-date following
backend merge operations.
- Frontend Unit Tests: Added comprehensive unit tests for React hooks
and Zustand stores, including:
- `useLocalStorage` hook tests with localStorage mocking and error
handling
  - `useSmartLogos` hook tests for logo loading and management
  - `useTablePreferences` hook tests for table settings persistence
  - `useAuthStore` tests for authentication flow and token management
  - `useChannelsStore` tests for channel data management
  - `useUserAgentsStore` tests for user agent CRUD operations
  - `useUsersStore` tests for user management functionality
  - `useVODLogosStore` tests for VOD logo operations
  - `useVideoStore` tests for video player state management
  - `useWarningsStore` tests for warning suppression functionality
- Code refactoring for improved readability and maintainability - Thanks
[@&#8203;nick4810](https://redirect.github.com/nick4810)
- EPG auto-matching: Added advanced options to strip prefixes, suffixes,
and custom text from channel names to assist matching; default matching
behavior and settings remain unchanged (Closes
[#&#8203;771](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/771))
- Thanks [@&#8203;CodeBormen](https://redirect.github.com/CodeBormen)
- Redis authentication support for modular deployments: Added support
for authentication when connecting to external Redis instances using
either password-only authentication (Redis <6) or username + password
authentication (Redis 6+ ACL). REDIS\_PASSWORD and REDIS\_USER
environment variables with URL encoding for special characters. (Closes
[#&#8203;937](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/937))
- Thanks [@&#8203;CodeBormen](https://redirect.github.com/CodeBormen)
- Plugin logos: if a plugin ZIP includes `logo.png`, it is surfaced in
the Plugins UI and shown next to the plugin name.
- Plugin manifests (`plugin.json`) for safe metadata discovery, plus
legacy warnings and folder-name fallbacks when a manifest is missing.
- Plugin stop hooks: Dispatcharr now calls a plugin's optional `stop()`
method (or `run("stop")` action) when disabling, deleting, or reloading
plugins to allow graceful shutdown.
- Plugin action buttons can define `button_label`, `button_variant`, and
`button_color` (e.g., Stop in red), falling back to “Run” for older
plugins.
- Plugin card metadata: plugins can specify `author` and `help_url` in
`plugin.json` to show author and docs link in the UI.
- Plugin cards can now be expanded/collapsed by clicking the header or
chevron to hide settings and actions.

##### Changed

- XtreamCodes Authentication Optimization: Reduced API calls during XC
refresh by 50% by eliminating redundant authentication step. This should
help reduce rate-limiting errors.
- App initialization efficiency: Refactored app initialization to
prevent redundant execution across multiple worker processes. Created
`dispatcharr.app_initialization` utility module with
`should_skip_initialization()` function that prevents custom
initialization tasks (backup scheduler sync, developer notifications
sync) from running during management commands, in worker processes, or
in development servers. This significantly reduces startup overhead in
multi-worker deployments (e.g., uWSGI with 10 workers now syncs the
scheduler once instead of 10 times). Applied to both `CoreConfig` and
`BackupsConfig` apps.
- M3U/EPG Network Access Defaults: Updated default network access
settings for M3U and EPG endpoints to only allow local/private networks
by default (127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16,
::1/128, fc00::/7, fe80::/10). This improves security by preventing
public internet access to these endpoints unless explicitly configured.
Other endpoints (Streams, XC API, UI) remain open by default.
- Modular deployments: Bumped modular Postgres image to 17 and added
compatibility checks (PostgreSQL version and UTF-8 database encoding)
when using external databases to prevent migration/encoding issues.
- Stream Identity Stability: Added `stream_id` (provider stream
identifier) and `stream_chno` (provider channel number) fields to Stream
model. For XC accounts, the stream hash now uses the stable `stream_id`
instead of the URL when hashing, ensuring XC streams maintain their
identity and channel associations even when account credentials or
server URLs change. Supports both XC `num` and M3U
`tvg-chno`/`channel-number` attributes.
- Swagger/OpenAPI Migration: Migrated from `drf-yasg` (OpenAPI 2.0) to
`drf-spectacular` (OpenAPI 3.0) for API documentation. This provides:
- Native Bearer token authentication support in Swagger UI - users can
now enter just the JWT token and the "Bearer " prefix is automatically
added
  - Modern OpenAPI 3.0 specification compliance
  - Better auto-generation of request/response schemas
  - Improved documentation accuracy with serializer introspection
- Switched to uv for package management: Migrated from pip to uv
(Astral's fast Python package installer) for improved dependency
resolution speed and reliability. This includes updates to Docker build
processes, installation scripts (debian\_install.sh), and project
configuration (pyproject.toml) to leverage uv's features like virtual
environment management and lockfile generation. - Thanks
[@&#8203;tobimichael96](https://redirect.github.com/tobimichael96) for
getting it started!
- Copy to Clipboard: Refactored `copyToClipboard` utility function to
include notification handling internally, eliminating duplicate
notification code across the frontend. The function now accepts optional
parameters for customizing success/failure messages while providing
consistent behavior across all copy operations.

##### Fixed

- XC EPG Logic: Fixed EPG filtering issues where short EPG requests had
no time-based filtering (returning expired programs) and regular EPG
requests used `start_time__gte` (missing the currently playing program).
Both now correctly use `end_time__gt` to show programs that haven't
ended yet, with short EPG additionally limiting results. (Fixes
[#&#8203;915](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/915))
- Automatic backups not enabled by default on new installations: Added
backups app to `INSTALLED_APPS` and implemented automatic scheduler
initialization in `BackupsConfig.ready()`. The backup scheduler now
properly syncs the periodic task on startup, ensuring automatic daily
backups are enabled and scheduled immediately on fresh database creation
without requiring manual user intervention.
- Fixed modular Docker Compose deployment and entrypoint/init scripts to
properly support `DISPATCHARR_ENV=modular`, use external
PostgreSQL/Redis services, and handle port, version, and encoding
validation (Closes
[#&#8203;324](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/324),
Fixes
[#&#8203;61](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/61),
[#&#8203;445](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/445),
[#&#8203;731](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/731))
- Thanks [@&#8203;CodeBormen](https://redirect.github.com/CodeBormen)
- Stream rehash/merge logic now guarantees unique stream\_hash and
always preserves the stream with the best channel ordering and
relationships. This prevents duplicate key errors and ensures the
correct stream is retained when merging. (Fixes
[#&#8203;892](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/892))
- Admin URL Conflict with XC Streams: Updated nginx configuration to
only redirect exact `/admin` and `/admin/` paths to login in production,
preventing interference with stream URLs that use "admin" as a username
(e.g., `/admin/password/stream_id` now properly routes to stream
handling instead of being redirected).
- EPG Channel ID XML Escaping: Fixed XML parsing errors in EPG output
when channel IDs contain special characters (&, <, >, ") by properly
escaping them in XML attributes. (Fixes
[#&#8203;765](https://redirect.github.com/Dispatcharr/Dispatcharr/issues/765))
- Thanks [@&#8203;CodeBormen](https://redirect.github.com/CodeBormen)
- Fixed NumPy baseline detection in Docker entrypoint. Now properly
detects when NumPy crashes on import due to CPU baseline incompatibility
and installs legacy NumPy version. Previously, if NumPy failed to
import, the script would skip legacy installation assuming it was
already compatible.
- Backup Scheduler Test: Fixed test to correctly validate that automatic
backups are enabled by default with a retention count of 3, matching the
actual scheduler defaults. - Thanks
[@&#8203;jcasimir](https://redirect.github.com/jcasimir)
- Hardened plugin loading to avoid executing plugin code unless the
plugin is enabled.
- Prevented plugin package names from shadowing standard library or
installed modules by namespacing plugin imports with safe aliases.
- Added safety limits to plugin ZIP imports (file count and size caps)
and sanitized plugin keys derived from uploads.
- Enforced strict boolean parsing for plugin enable/disable requests to
avoid accidental enables from truthy strings.
- Applied plugin field defaults server-side when running actions so
plugins receive expected settings even before a user saves.
- Plugin settings UI improvements: render `info`/`text` fields, support
`input_type: password`, show descriptions/placeholders, surface save
failures, and keep settings in sync after refresh.
- Disabled plugins now collapse settings/actions to match the closed
state before first enable.
- Plugin card header controls (delete/version/toggle) now stay
right-aligned even with long descriptions.
- Improved plugin logo resolution (case-insensitive paths + absolute
URLs), fixing dev UI logo loading without a Vite proxy.
- Plugin reload now hits the backend, clears module caches across
workers, and refreshes the UI so code changes apply without a full
backend restart.
- Plugin loader now supports `plugin.py` without `__init__.py`,
including folders with non-identifier names, by loading modules directly
from file paths.
- Plugin action handling stabilized: avoids registry race conditions and
only shows loading on the active action.
- Plugin enable/disable toggles now update immediately without requiring
a full page refresh.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40LjIiLCJ1cGRhdGVkSW5WZXIiOiI0My40LjIiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiYXBwL2Rpc3BhdGNoYXJyIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==-->

charts/stable/dispatcharr/Chart.yaml

@@ -14,7 +14,7 @@ annotations:
   trueforge.org/min_helm_version: "3.14"
   trueforge.org/train: stable
 apiVersion: v2
-appVersion: 0.18.1
+appVersion: 0.19.0
 dependencies:
   - name: common
     version: 28.29.49
@@ -42,5 +42,5 @@ sources:
   - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/dispatcharr
   - https://hub.docker.com/r/dispatcharr/dispatcharr
 type: application
-version: 1.1.2
+version: 1.2.0
 

charts/stable/dispatcharr/values.yaml

@@ -1,7 +1,7 @@
 image:
   pullPolicy: IfNotPresent
   repository: docker.io/dispatcharr/dispatcharr
-  tag: 0.18.1@sha256:425be855292df282db6f8daed0b3f0ac40a6dc451ddc66f7cbb299a4659e96da
+  tag: 0.19.0@sha256:8b53fbe12122e827034a6fb0a4ab9a9b8d31699587dca6d6d6394619d44dbb16
 securityContext:
   container:
     readOnlyRootFilesystem: false