release(xianscan): update arbenapura/xianscan-rust ( v0.5.0-beta.2 → v0.5.0-beta.3 )

[renovate]

This PR contains the following updates:

Package	Update	Change
ArbenApura/xianscan-rust	patch	0.5.0-beta.2 → 0.5.0-beta.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

ArbenApura/xianscan-rust (ArbenApura/xianscan-rust)

v0.5.0-beta.3

Compare Source

🚀 XianScan v0.5.0-beta.3

Self-hosted AI-powered manga, manhua, and comic localization engine with embedded OCR, neural text detection, LaMa inpainting, and typesetter.

📦 Multi-Platform Downloads

Platform	Architecture	File	Acceleration Engine
Windows	x86_64	xianscan-windows-x86_64.zip	⚡ DirectX 12 DirectML (AMD, Intel, NVIDIA)
Linux	x86_64	xianscan-linux-x86_64.tar.gz	⚡ NVIDIA CUDA + cuDNN
macOS	Apple Silicon (M1-M4)	xianscan-macos-arm64.tar.gz	⚡ Apple Silicon CoreML + Metal

🧩 Browser Importer Extensions

• Chrome / Edge / Brave / Opera: Download xianscan-importer-v1.2.0.zip and extract to load unpacked in chrome://extensions.
• Firefox: Download xianscan-importer-firefox-v1.2.0.xpi and install directly in about:addons.

📱 Mihon / Tachiyomi Android Extension

• 1-Click Extension Repository URL: https://raw.githubusercontent.com/ArbenApura/xianscan-rust/repo/index.min.json
• Direct APK: Download tachiyomi-all.xianscan-v1.6.2-release.apk below.

---

What's Changed

• feat(docker): official container image + GHCR publish in release workflow by @​lenaxia in #​2

Docker Container Support

• Added official container images published to GitHub Container Registry (ghcr.io/arbenapura/xianscan) on an Ubuntu 24.04 runtime (contributed by @​lenaxia in #​2).
• Includes non-root execution, persistent /config volume support, graceful SIGINT shutdown handling for safe SQLite WAL flushing, and pre-warmed fontconfig caches.

Reasoning Model Support and Token Escalation (Fixes #​1)

• Resolves issue #​1 where reasoning models caused silent translation failures, false "done" page statuses, and empty raw prompt records.
• Added dynamic token budget escalation for reasoning models (GLM-4.7, DeepSeek R1, OpenAI o1/o3) that spend completion tokens on internal thinking steps.
• Completion token limits automatically double across retries when hitting length cutoffs (up to 65,536 tokens).
• Full LLM prompt messages are preserved in SQLite telemetry even during request failures, preventing blank [] prompt records.
• Added explicit error classifications (TOKEN_BUDGET_EXHAUSTED, EMPTY_LLM_RESPONSE, UNPARSEABLE_LLM_OUTPUT) and reader error banners instead of marking failed pages as complete.

Book Translation Directives

• Added series-specific custom translation directives (custom_prompt schema and BookDirectivesModal) to enforce consistent tone, terminology, and naming rules across chapters.
• Factored directives into prompt caching fingerprints (SHA-256).

Shrinkwrap Cavity Cleaning for Speech Bubbles

• Added an outside-in cavity cleaning algorithm in the Rust cleaning pipeline that detects speech bubble contours and protects bubble borders while removing interior text.
• Added statistical luminance and saturation checks to safeguard translucent and artistic speech bubbles from flat fills.

Targeted Retranslation and Reader Controls

• Added dedicated single-page translation endpoint (POST /api/pages/[id]/translate) and retry action in the Inspector modal.
• Added Webtoon continuous reader overlay badges showing active processing steps and inline error retry banners on failed pages.
• Added multi-page checkbox selection in Grid view with floating action toolbar to retranslate selected or errored pages.
• Resolved pipeline state reconciliation issues so aborted or failed batch jobs no longer leave pages stuck in loading states.

Prompt Inspector Improvements

• Redesigned PageLlmPromptModal with dedicated tabs for structured conversation history, token usage telemetry, and raw formatted JSON payloads.

Browser Importer Extension (v1.2.0-beta.3)

• Added chapter route isolation across URL query parameters and hash changes to prevent stale chapter selections.
• Migrated to native Blob URLs and direct buffer decoding to avoid UI thread freezes during live imports.
• Encoded proxy image data as Base64 to prevent [object Object] image corruption when bypassing mixed-content restrictions on HTTPS manga sites.
• Updated popover tracker with lightweight server thumbnails and lazy image decoding.

New Contributors

• @​lenaxia made their first contribution in #​2

Full Changelog: ArbenApura/xianscan-rust@v0.5.0-beta.2...v0.5.0-beta.3

🐳 Docker Image

docker pull ghcr.io/arbenapura/xianscan:0.5.0-beta.3

Run it: docker run -d -p 8124:8124 -v xianscan-config:/config ghcr.io/arbenapura/xianscan:0.5.0-beta.3

All published versions: https://github.com/ArbenApura/xianscan-rust/pkgs/container/xianscan

🛡️ VirusTotal Scan

Artifact	Report
release-assets/xianscan-windows-x86_64.zip	View report
release-assets/xianscan-linux-x86_64.tar.gz	View report
release-assets/xianscan-macos-arm64.tar.gz	View report
release-assets/xianscan-importer-v1.2.0.zip	View report
release-assets/xianscan-importer-firefox-v1.2.0.xpi	View report
release-assets/tachiyomi-all.xianscan-v1.6.2-release.apk	View report

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command 'helm-docs --chart-search-root=. --log-level=warn' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'helm-schema --chart-search-root . --skip-auto-generation required,additionalProperties --append-newline' has not been added to the allowed list in allowedCommands

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: ArbenApura/xianscan-rust (github-releases, feeds VERSION in apps/xianscan/docker-bake.hcl:5)
• Version: 0.5.0-beta.2 → 0.5.0-beta.3
• Type: patch (prerelease patch within the 0.5.0-beta series; Renovate label type/patch)

Release Changes

Source: upstream release notes for v0.5.0-beta.3 (single step from beta.2).

• Reasoning-model fixes (upstream ci(github-action): update action regclient/actions (4d6888f → 2a0bc4d) #1) — dynamic token budget escalation for reasoning models (GLM-4.7, DeepSeek R1, o1/o3) that previously caused silent translation failures and false "done" page states; completion limits double on retries up to 65,536 tokens; full prompts preserved in SQLite telemetry on failure; explicit error classifications (TOKEN_BUDGET_EXHAUSTED, EMPTY_LLM_RESPONSE, UNPARSEABLE_LLM_OUTPUT).
• Book translation directives — per-series custom_prompt schema, folded into prompt-cache fingerprints.
• Shrinkwrap cavity cleaning — Rust pipeline protects speech-bubble borders while cleaning interior text; luminance/saturation safeguards for translucent bubbles.
• Targeted retranslation — POST /api/pages/[id]/translate endpoint, retry actions, multi-page selection in Grid view, pipeline state reconciliation for aborted batch jobs.
• Prompt inspector redesign — tabs for conversation history, token telemetry, raw payloads.
• Container support upstream — official ghcr.io/arbenapura/xianscan image on Ubuntu 24.04, non-root, /config volume, graceful SIGINT shutdown for SQLite WAL flushing (upstream PR ci(github-action): update action actions/cache (v4.2.3 → v4.2.4) #2, contributed by @lenaxia).
• Browser importer v1.2.0 and Tachiyomi/Mihon extension updates (not part of the container image).

Breaking Changes

None affecting our usage. Verified against the actual artifacts and upstream's Dockerfile at the same tag:

• Release asset xianscan-linux-x86_64.tar.gz exists on tag v0.5.0-beta.3 (499,560,768 bytes) — the URL pattern in apps/xianscan/Dockerfile:31 remains valid.
• Tarball layout unchanged: upstream's own Dockerfile at v0.5.0-beta.3 uses the identical extraction (tar -xzf ... -C /app; chmod 0755 /app/xianscan), same entrypoint /app/xianscan, port 8124, loopback :8123, UID/GID 568, and the same runtime deps we install (ca-certificates, fontconfig, fonts-dejavu-core). No new runtime libraries required.
• tests.yaml expectations (binary at /app/xianscan root-owned 0755, port 8124 listening, HTTP 200 on 8124 and 8123/health) are unaffected — the CI build job, which runs the goss suite on PR builds, passed.

Code Changes Required

None required. Two optional, non-blocking follow-ups noted for a maintainer:

1. apps/xianscan/README.md:13 still shows ghcr.io/lenaxia/containers/xianscan:0.5.0-beta.2 — Renovate's post-upgrade task that normally updates this failed ("Post-upgrade task did not match any on allowedCommands list", Dependency Dashboard Renovate Dashboard 🤖 #30), which is also the cause of the red renovate/artifacts status on this PR. Published tags come from the workflow metadata, not the README, so this is documentation staleness only.
2. Upstream now sets STOPSIGNAL SIGINT for graceful SQLite WAL flush on shutdown; our Dockerfile relies on the default SIGTERM. Adding STOPSIGNAL SIGINT would match upstream's beta.3 shutdown behavior.

Security Impact

No security fixes announced in this release. Threat surface unchanged: the Dockerfile downloads the release tarball by tag URL over TLS without checksum pinning (pre-existing posture, not changed by this PR); upstream publishes VirusTotal reports for all release artifacts.

Recommendation

Safe to merge — single-line version bump of the packaged application (not a runtime base image, not an MCP server/LLM SDK); asset name, tarball layout, binary path, ports, runtime deps, and user model all verified unchanged; CI on this PR's head SHA (a2397c8) passed both the image build and the goss test suite (Build xianscan / Build (linux/amd64)). The failing renovate/artifacts status is a Renovate-side post-upgrade task restriction, unrelated to the diff. The repo's own Renovate policy automerges docker-bake.hcl app updates.