[github-actions]

🤖 I have created a release beep boop

romm-api: 1.4.0

1.4.0 (2026-09-28)

Features

• api,cli: add config D registry, saves and collections commands (d51af73)
• api: add config key registry with dotted-path set (097d999)
• api: add source-aware config load and env field coverage (8529063)

Bug Fixes

• api,cli: atomic save downloads, overwrite guard, and platform env mapping (b955207)
• api: block authenticated cross-origin redirects (2384e99)
• api: clean up download conflict markers and restore filename logging (6591375)
• api: disable unvalidated download resume (0fa1551)
• api: discard stale partial download targets (#74) (e83f3c2)
• api: enforce HTTPS in client constructor (b1d3971)
• api: fetch ROM detail before falling back to ZIP download endpoint (868603e)
• api: guard OpenAPI auth fallback origin (#71) (cce55f6)
• api: parse API_USE_HTTPS boolean values (#98) (d3fe6d5)
• api: preserve downloads on failed streams (#100) (f56bbdd)
• api: prevent OpenAPI HTTPS auth downgrade (#64) (5bd4edf)
• api: prevent sanitized path traversal (8ace0a1)
• api: prevent zip extraction overwrites (077e646)
• api: redact OpenAPI fallback errors (#70) (2393761)
• api: reject short ROM file downloads (#99) (a4b7067)
• api: require exact self-update archive (#72) (da4dca5)
• api: strip auth from download redirects (7a6fae3)
• auth: prevent keyring secrets from surviving logout (8950934)
• cli: preserve sync upload filenames (#81) (9447d9e)
• download: avoid duplicate extras target paths (#83) (b471c44)
• metadata: reject providerless search matches (#84) (b3f0402)
• tui: avoid caching truncated ROM lists (#67) (17b1f7c)
• tui: invalidate ROM lists after metadata apply (#66) (6485600)

romm-cli: 1.3.0

1.3.0 (2026-09-28)

Features

• api,cli: add config D registry, saves and collections commands (d51af73)

Bug Fixes

• api,cli: atomic save downloads, overwrite guard, and platform env mapping (b955207)
• api: parse API_USE_HTTPS boolean values (#98) (d3fe6d5)
• auth: prevent keyring secrets from surviving logout (8950934)
• cli: avoid save sync download clobbers (#75) (1176e03)
• cli: paginate batch downloads (30e55d7)
• cli: preserve sync upload filenames (#81) (9447d9e)
• cli: reserve batch download paths (#76) (d95717f)
• cli: write sync save downloads atomically (#97) (749f812)
• metadata: reject providerless search matches (#84) (b3f0402)

romm-tui: 1.4.1

1.4.1 (2026-09-28)

Bug Fixes

• cli: avoid save sync download clobbers (#75) (1176e03)
• cli: reserve batch download paths (#76) (d95717f)
• download: avoid duplicate extras target paths (#83) (b471c44)
• tui: avoid caching truncated ROM lists (#67) (17b1f7c)
• tui: cap global search pagination (aea2d2c)
• tui: guard metadata background races (#62) (651f7f5)
• tui: handle unicode search cursor edits (#69) (f9b118b)
• tui: handle unicode text cursors (#92) (7b86354)
• tui: ignore stale search results (12f19b2)
• tui: invalidate ROM lists after metadata apply (#66) (6485600)
• tui: keep detail updates during metadata match (#88) (ada20ff)
• tui: preserve auth during layout saves (#87) (989afaf)
• tui: preserve ROM selection during pagination (#68) (a293e17)
• tui: prevent config reset from being undone (#91) (ef8be33)
• tui: refresh achievements after metadata apply (#63) (7619e65)
• tui: reload library after offscreen scans (#78) (dfceb86)
• tui: reserve save download paths atomically (#80) (5ac12e3)
• tui: run metadata-apply cache invalidation test on tokio (#101) (8c7eff8)
• tui: safely open cover URLs (#90) (a3bc286)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• romm-api-v1.4.0
• romm-cli-v1.3.0
• romm-tui-v1.4.1

🌻