jellyfin/Jellyfin.Server.Implementations/Users, branch master

Backport pull request #18266 from jellyfin/release-12.z

2026-10-05T23:19:00Z

Replace custom item display preferences in one transaction Original-merge: f26319968affab72f6161cdabd0c6bf06cd7e862 Merged-by: crobibero Backported-by: Cody Robibero

Backport pull request #18259 from jellyfin/release-12.z

2026-10-05T23:18:56Z

Fix item display preferences item Original-merge: e431aadd92eb7fff330e71989b61d95124732a60 Merged-by: crobibero Backported-by: Cody Robibero

Backport pull request #18026 from jellyfin/release-12.z

2026-09-15T15:17:05Z

Fix device access revocation not logging out existing sessions Original-merge: 950c45cf2032a9a8b3bc3abe92adc32f8b5a8ab2 Merged-by: crobibero Backported-by: Cody Robibero

Stop user updates from orphaning permission and preference rows (#17645)

2026-08-20T16:35:26Z

* Stop user updates from orphaning permission and preference rows * Make UserId non-nullable * Remove unnecessary ToList * Update Jellyfin.Server.Implementations/Users/UserManager.cs Co-authored-by: Claus Vium --------- Co-authored-by: Claus Vium

Prevent orphaned user permissions and preferences (#17643)

2026-08-18T16:16:48Z

Prevent orphaned user permissions and preferences

Apply review suggestions

2026-07-21T12:30:55Z

Merge remote-tracking branch 'upstream/master' into security-path-traversal-fixes

2026-07-21T05:14:47Z

# Conflicts: # Jellyfin.Api/Controllers/HlsSegmentController.cs # Jellyfin.Api/Controllers/PluginsController.cs

Merge pull request #17282 from TowyTowy/fix/13137-clear-profile-image

2026-07-20T23:58:43Z

Fix profile image being impossible to clear when its in-memory key is temporary

Merge pull request #17302 from ElianCodes/fix/lastlogindate-stale-entity

2026-07-20T06:36:53Z

Keep authenticated user entity in sync with persisted login timestamps

Harden remaining path-construction sinks against traversal

2026-07-17T15:08:59Z