build(deps): Bump the media-server group across 1 directory with 3 updates

[dependabot]

Bumps the media-server group with 3 updates in the /stacks/media-server directory: linuxserver/prowlarr, linuxserver/sonarr and linuxserver/bazarr.

Updates linuxserver/prowlarr from 2.4.0 to 2.4.0

Commits

• See full diff in compare view

Updates linuxserver/sonarr from 4.0.19 to 4.0.19

Commits

• See full diff in compare view

Updates linuxserver/bazarr from 1.5.6 to 1.6.0

Release notes

Sourced from linuxserver/bazarr's releases.

development-v1.6.0-ls799

CI Report:

https://ci-tests.linuxserver.io/linuxserver/bazarr/development-v1.6.0-ls799/index.html

LinuxServer Changes:

No changes

Remote Changes:

From newest to oldest:

• Refactored postprocessing function to handle subprocess invocation differently on Windows and Unix, ensuring path safety and avoiding OS command injection. Added comprehensive unit tests for both platforms to ensure behavior correctness. #3413 5dd736c
• Fixed UNC path handling in pp_replace by replacing re.sub string substitutions with lambda functions to prevent escape sequence misinterpretation. #3413 4217a9b
• Refactored SubDL provider by simplifying retry logic and improving error handling for rate limits and 404 responses. 047b915
• Removed RateLimiting mixin from TimeoutSession in subliminal_patch HTTP module since it was interfering with providers' custom rate-limiting implementations. 7343b1d
• Improved audio languages detection when the returned value is a string instead of a language object e677246
• Fixed RegieLive.ro subtitle downloads, and added better error handling 3b8094f
• Removed Podnapisi provider and all associated files, settings, and dependencies across Bazarr since it is no longer online. 7d43815
• Refactored LegendasNet provider to centralize API response handling using checked method; improved error handling, added retry logic for invalid access tokens, and streamlined HTTP status code validation. #3263 9959c99
• Enhanced error handling in Gestdown provider by adding specific handling for JSONDecodeError and KeyError in API responses. #3365 7c52af1
• Fixed embedded Chinese subtitle language detection 04bd7b6
• Refactored SubDL provider to introduce centralized API response handling via checked method; improved exception handling, added GMT midnight limit reset logic, and adjusted retry mechanisms. #3398 14250a3
• Added Bayflix and Vladoon Bulgarian subtitles providers f5c9ecb
• Added the ability to configure base config file path from an environment variable 3c3d410
• Improved subf2m privider to fall back to IMDB id search when localized movie title finds nothing 17778f7
• Updated cookie field descriptions for AvistaZ and CinemaZ providers settings to clarify required input format. #2797 d41d563
• Added progress tracking to subtitle sync job and integrated ffsubsync's progress handler for real-time updates to the job queue. aaceda5
• Updated multiple vendored modules 7ed6608
• Added SSL verification disabling functionality for all providers to circumvent strict SSL policy enforced by some operating systems. #3365 927e423
• Fixed job manager timestamp to let the browser deal with time zone 23f6f7f
• Fixed automatic syncing settings definition at runtime 816ad64
• Refactored subtitle post-processing to use shlex.split for safer subprocess invocation (fixing CWE-78) and replaced _escape with _double_quotes for cleaner variable substitution logic. 37d584a
• Enhanced error handling in Titlovi provider by raising specific exceptions for 403 Forbidden responses during login, search, and download operations. #3271 8e52bad
• Improved supersubtitles by implementing case-insensitive episode search 8fe58df
• Added pytz library version 2026.2 and rolled-back flask-restx dependency to specify version 1.3.0. #3381 20b3de3
• Added image-based Anti-Captcha pitcher classes and refactored captcha-solving logic in Zimuku provider. #3372 2a9c7b6
• Fixed whisperai provider audio stream matching by index to avoid s16le multi-stream failure 3af7f3b
• Improved Sonarr and Radarr sync performance dramatically eaf06c4
• Added filters and sorting to subtitle tools modal 15db1e9
• Improved year matching logic in OpenSubtitles provider by including IMDb match check. 47547e9
• Added cleanup of Authorization header on authentication failure in legendasnet provider. #3263 c49ac99
• Decoupled database version and migration retrieval by storing them in environment variables, simplifying API system status generation and preventing connection exhaustion with Postgresql. #3361 0a9c03f
• Refactored HI tag handling logic to properly update hearing_impaired and language.hi attributes when remove_HI mod is applied. 5300d7c
• Updated CONTRIBUTING.MD - Added Working with AI section and updated version numbers a3d15b3
• Filtered out subtitles with unsupported languages in Titlovi provider 5035561
• Improved subdl provider to use new unpack API argument and fixed anime season matching 589fbce
• Updated TVSubtitles provider search endpoint and query parameters. #3341 2e227ac
• Implemented global rate limiter for providers c39e292
• Encapsulated subtitle migration queries in nested transactions to ensure partial failure handling without affecting the entire migration. #3344 70a1f4a

... (truncated)

Commits

• 929eb53 Bot Updating Package Versions
• f839b24 Bot Updating Package Versions
• f40a024 Bot Updating Package Versions
• 8ede729 Bot Updating Package Versions
• a88ed05 Bot Updating Package Versions
• a7a7114 Bot Updating Package Versions
• fc10440 Bot Updating Templated Files
• 843097f Bot Updating Package Versions
• bb605b7 Bot Updating Package Versions
• 8596ed0 Bot Updating Package Versions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.