feat(maintainerr): update image docker.io/maintainerr/maintainerr 3.8.0 → 3.9.0 (#47707)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/maintainerr/maintainerr](https://redirect.github.com/Maintainerr/Maintainerr)
| minor | `014fcae` → `c9c666d` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>Maintainerr/Maintainerr
(docker.io/maintainerr/maintainerr)</summary>

###
[`v3.9.0`](https://redirect.github.com/Maintainerr/Maintainerr/releases/tag/v3.9.0)

[Compare
Source](https://redirect.github.com/Maintainerr/Maintainerr/compare/v3.8.0...v3.9.0)

#### Highlights

- Fix: Block path traversal in log file download endpoint to prevent
unauthorized file access.
- Feat: Add custom collection poster support, including upload, fetch,
and clear endpoints, with integration for Plex and Jellyfin.
- Fix: Unstick rules-collections lock to resolve "Collection handling is
already running" errors and improve rule execution reliability.

#### Features

- Cache Jellyfin collections and their children to reduce redundant
queries during rule execution
([#&#8203;2800](https://redirect.github.com/Maintainerr/Maintainerr/issues/2800)).
- Add ntfy.sh as a supported notification service
([#&#8203;2769](https://redirect.github.com/Maintainerr/Maintainerr/issues/2769)).
- Replace Fider cc:user comment prefix with Discord notifications.

#### Fixes

- Block path traversal in log file download endpoint.
- Unstick rules-collections lock and clarify `sw_watchers` labels across
media servers
([#&#8203;2801](https://redirect.github.com/Maintainerr/Maintainerr/issues/2801)).
- Fix overlay SSE EPIPE handling to prevent server crashes during
transient failures
([#&#8203;2781](https://redirect.github.com/Maintainerr/Maintainerr/issues/2781)).
- Fix UI TypeScript configuration and resolve hidden type errors
([#&#8203;2776](https://redirect.github.com/Maintainerr/Maintainerr/issues/2776)).
- Fix overlays preset editing, cron discoverability, and tab gating
([#&#8203;2775](https://redirect.github.com/Maintainerr/Maintainerr/issues/2775)).
- Bound Plex request timeout and propagate watch-history errors
([#&#8203;2773](https://redirect.github.com/Maintainerr/Maintainerr/issues/2773)).
- Dedupe sibling-rule media events within a batch to reduce redundant
notifications.
- Stop cross-rule contamination for same-titled automatic collections
([#&#8203;2766](https://redirect.github.com/Maintainerr/Maintainerr/issues/2766)).
- Fix Fider stale-sweep to create the 'stale' tag on first run.

#### Performance

- Harden rule-executor job management and SSE listener handling to
prevent lock leaks
([#&#8203;2801](https://redirect.github.com/Maintainerr/Maintainerr/issues/2801)).

#### Internal

- Add automated Fider triage, invitation, re-evaluation, and stale
workflows.
- Tighten Fider triage script and improve handling of pre-existing
matches.
- Add "Behavioral fixes worth reviewing" section to docs-drift CI.
- Restore version header and add "New Contributors" section to release
notes.

#### Dependencies

- Updated 10 dependencies, including typescript-eslint, react-hook-form,
and nodemailer.

#### New Contributors

- [@&#8203;GitGitro](https://redirect.github.com/GitGitro) made their
first contribution in
[#&#8203;2769](https://redirect.github.com/Maintainerr/Maintainerr/issues/2769)
- [@&#8203;SmolSoftBoi](https://redirect.github.com/SmolSoftBoi) made
their first contribution in
[#&#8203;2781](https://redirect.github.com/Maintainerr/Maintainerr/issues/2781)
- [@&#8203;natekspencer](https://redirect.github.com/natekspencer) made
their first contribution in
[#&#8203;2800](https://redirect.github.com/Maintainerr/Maintainerr/issues/2800)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9tYWludGFpbmVyciIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->

charts/stable/maintainerr/Chart.yaml

@@ -9,7 +9,7 @@ annotations:
   trueforge.org/min_helm_version: "3.14"
   trueforge.org/train: stable
 apiVersion: v2
-appVersion: 3.8.0
+appVersion: 3.9.0
 dependencies:
   - name: common
     version: 29.1.6
@@ -36,5 +36,5 @@ sources:
   - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/maintainerr
   - https://hub.docker.com/r/maintainerr/maintainerr
 type: application
-version: 7.6.0
+version: 7.7.0
 

charts/stable/maintainerr/values.yaml

@@ -2,7 +2,7 @@
 image:
   repository: docker.io/maintainerr/maintainerr
   pullPolicy: IfNotPresent
-  tag: 3.8.0@sha256:014fcae5d4cfae96bfb239ebe9368751549e9516947435f4e07520add92cf19e
+  tag: 3.9.0@sha256:c9c666dd366794f9adc6fa2bb928b9ba0f45edab3bd2fd837997a31b6472b650
 
 securityContext:
   container: