From dbc8b7489356e7d0e3da311f2dfa33e3f623bb6f Mon Sep 17 00:00:00 2001
From: IRHM <irhm@sbond.co>
Date: Sun, 26 Jul 2026 02:47:48 +0100
Subject: [PATCH] v4.1.1

---
 CHANGELOG.md      | 2 ++
 package-lock.json | 4 ++--
 package.json      | 2 +-
 server/VERSION    | 2 +-
 4 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c78decd7..87568bfe 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,7 @@ These changes are awaiting release:
 ## Fixed
 
 - Plex Login: Request JSON from plex api so that it doesn't return XML.
+- GHSA-6x53-2w54-v5rj (thanks to [@tonghuaroot] for reporting and patching!)
 
 # [4.1.0] - 2026-07-19T14:18:00Z
 
@@ -1807,3 +1808,4 @@ Welcome to Watcharr :popcorn:, hope it is enjoyed and improves anyone's experien
 [@GreatGatsby102]: https://github.com/GreatGatsby102
 [@4qu4r1um]: https://github.com/4qu4r1um
 [@goestav]: https://github.com/goestav
+[@tonghuaroot]: https://github.com/tonghuaroot
diff --git a/package-lock.json b/package-lock.json
index f006948b..fa59b7ed 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "watcharr",
-	"version": "4.1.1-dev1",
+	"version": "4.1.1",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "watcharr",
-			"version": "4.1.1-dev1",
+			"version": "4.1.1",
 			"license": "GPL-3.0-only",
 			"dependencies": {
 				"axios": "^1.9.0",
diff --git a/package.json b/package.json
index e363ef87..f0d25c61 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
 	"name": "watcharr",
 	"license": "GPL-3.0-only",
-	"version": "4.1.1-dev1",
+	"version": "4.1.1",
 	"private": true,
 	"scripts": {
 		"dev": "vite dev",
diff --git a/server/VERSION b/server/VERSION
index fd1cc9a8..2582dddf 100644
--- a/server/VERSION
+++ b/server/VERSION
@@ -1 +1 @@
-4.1.1-dev1
\ No newline at end of file
+4.1.1
\ No newline at end of file