New features:

• Added Google Scholar to supported metadata provider
• New faster comic reader backend (only supports x86 server)
• Sync only selected shelfs to your Kobo reader
• Swap author and title easily while editing books
• Fullscreen mode for viewing covers
• Setup database is now a seperate page and is also in unconfigured mode only accessible after login
• Display book title in reader instead of simple "reader"
• Add tooltip for complete title on hover over cover and title
• Sort authors additionally to series and series_index
• Updated pdf viewer

Bug Fixes:

• Fix searching for custom columns created after calibre-web was started

• Extended search term with excluded series/shelfs are now working

• Fixes in the !Caliblur theme

• Fix for pdf buttons missing in safari browsers (iOS, iPadOS, macOS)

• Enhanced compatability with sqlalchemy 2.0

• Updated translations

• Books with uppercase extensions are now found after upload

• Deleting book with additional "/" in database path is now working

• Fix error "unclosed IO" on external binary version query

• Bugfix with encoding errors windows on external binary version query

• Fix encoding errors on windows while downloading logbooks

• Change user name is no longer allowed as non admin

• Entries of user table are now visible if database has no tags

• Deleting shelfs and so on failed before while deleting users

• Fix show edit user after exception

• Handle shelf request without title properly

• Import LDAP User with "." in the name is now possible

• All html special characters are nnow handled properly while editing fields in tables

• List/grid button action is now possbile while accessing Calibre-Web behind a reverse proxy

• With merge button disabled it's no longer possible to open merge dialog

• Quotes are now handled properly in UI-editable tables

• Better handling of defective utf-16 txt files while viewing them

• Security fix: Name of Shelves are only visible to users who can access the corresponding shelf

• Security fix: It's no longer possible to login with the old session cookie after logout

• Security fix: Shelves can only be deleted by the owner

• Security fix: JavaScript payload can no longer be injected in the description field

• Security fix: JavaScript payload can no longer be injected in a custom column of type "comment" field

• Security fix: JavaScript payload is no longer executed after converting a book to another format with a title containing javascript code

• Security fix: JavaScript payload is no longer executed after converting a book to another format with a username containing javascript code

• Security fix: JavaScript payload can no longer be injected in the description series, categories or publishers title

• Security fix: JavaScript payload can no longer be injected in the shelf title