21801e8ba1
Harden remaining path-construction sinks against traversal
2026-07-17 17:08:59 +02:00
1a45fc82b5
Sanitize media attachment and lyric paths against traversal
2026-07-17 17:07:27 +02:00
4fb779920a
Sanitize ClientLog upload filename to prevent path traversal
2026-07-17 17:02:02 +02:00
d7727224c2
Skip corrupt KeyframeData rows during full system backup
...
A single row with malformed KeyframeTicks JSON (e.g. a truncated array
from an interrupted write) currently aborts the entire backup, because
the try/catch in BackupService.CreateBackupAsync only wraps
serialization of an already-materialized entity, not the enumeration
itself. EF Core throws JsonReaderException from MoveNextAsync() while
materializing the corrupt row, which propagates past that catch block.
Switch to manual enumerator iteration so MoveNextAsync() failures can
be caught per-row, logged as a warning identifying the affected table,
and skipped, allowing the remaining rows and the rest of the backup to
complete.
Fixes #17216
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-07-17 16:44:25 +02:00
a96dc8bd9b
Merge pull request #17354 from jellyfin/renovate/actions-setup-dotnet-6.x
2026-07-17 13:56:55 +02:00
d146c347b4
Merge pull request #17359 from jellyfin/renovate/ci-deps
2026-07-17 13:54:14 +02:00
f2dea2a3fd
Merge pull request #17348 from theguymadmax/revert-includeItemTypes-in-collectionType
2026-07-17 13:53:58 +02:00
4d1dd42420
Merge pull request #17343 from mbastian77/docs/channels-xml-docs
2026-07-17 13:53:27 +02:00
8eb0ba60c1
Merge pull request #17344 from mbastian77/docs/session-model-xml-docs
2026-07-17 13:52:59 +02:00
2bf15d95df
Merge pull request #17340 from mbastian77/docs/dlna-model-xml-docs
2026-07-17 13:52:31 +02:00
be2db99586
Merge pull request #17339 from mbastian77/docs/providers-lookup-info-xml-docs
2026-07-17 13:51:59 +02:00
37fe9df27c
Merge pull request #17338 from mbastian77/docs/deviceid-xml-docs
2026-07-17 13:51:29 +02:00
8759ad4d49
Translated using Weblate (Spanish (Latin America))
...
Translation: Jellyfin/Jellyfin
Translate-URL: https://translate.jellyfin.org/projects/jellyfin/jellyfin-core/es_419/
2026-07-17 11:49:50 +00:00
051ff4cf6d
Merge pull request #17337 from Shadowghost/limit-similar-items
2026-07-17 13:49:46 +02:00
fa4626c080
Revert setting default BaseItemKind for CollectionType
2026-07-16 18:15:54 -04:00
d36c8ebce8
Reduce cognitive complexity of RemoveFromPlaylist
2026-07-16 21:03:29 +02:00
4cc577a72d
Update github/codeql-action action to v4.37.1
2026-07-16 18:47:00 +00:00
cdf7ce0fc4
Fix user data batch query perf
2026-07-16 14:21:03 +02:00
d894a98b79
Fix tie-breaker performance
2026-07-16 14:20:42 +02:00
2b57a5725c
Update actions/setup-dotnet action to v6
2026-07-16 07:02:47 +00:00
3f96790904
Move GetUserDataBatch to use ResolveUserDataRow when item.UserData isn't preloaded
2026-07-15 16:21:42 -05:00
2bac9a8f0c
Fix SchedulesDirect image limit recognition
2026-07-15 17:43:27 +02:00
997093ae3a
Add XML docs to small entity interfaces and remove CS1591 suppressions
2026-07-15 16:07:56 +02:00
5cbafa566d
Add XML docs to small session model types and remove CS1591 suppressions
2026-07-15 16:03:56 +02:00
0d3cf0169e
Add XML docs to small channel types and remove CS1591 suppressions
2026-07-15 16:02:12 +02:00
6e3c187493
Fix race condition in concurrent subtitle conversion
...
SubtitleEncoder.ConvertSubtitles parsed subtitles with libse's static
Subtitle.Parse, which iterates a statically cached list of shared
SubtitleFormat instances. Format parsers keep mutable per-parse state on
the instance, so concurrent subtitle requests corrupted each other's
output (cues mixed across streams and languages, truncated files) or
failed with NullReferenceException when format detection broke down and
Subtitle.Parse returned null.
Parse through the injected ISubtitleParser instead. SubtitleEditParser
instantiates a fresh format parser per call, so requests no longer share
state. Its Parse method now returns the libse Subtitle directly (the
SubtitleTrackInfo flattening was unused since the SubtitleEdit writer
rework) so the writers keep full fidelity such as ASS styling.
2026-07-15 14:55:55 +02:00
f8771b52ec
Merge pull request #17331 from jellyfin/renovate/dotnet-monorepo
2026-07-15 12:49:34 +02:00
e3d610c3c5
Merge pull request #17274 from theguymadmax/fix-max-login-attempts
2026-07-15 12:42:09 +02:00
486ffaa6dd
Merge pull request #17248 from theguymadmax/add-novel
2026-07-15 12:40:17 +02:00
d96d1f1119
Add XML docs to small DLNA model types and remove CS1591 suppressions
2026-07-15 12:11:11 +02:00
30f28456de
Add XML docs to lookup info types and remove CS1591 suppressions
2026-07-15 12:08:08 +02:00
f8aad322cc
Add XML docs to DeviceId and remove CS1591 suppression
2026-07-15 11:58:29 +02:00
c6545a8b68
Limit similar items to user accessible libraries
2026-07-15 11:47:59 +02:00
0fe9c1ce91
Merge pull request #17330 from jellyfin/renovate/microsoft
2026-07-15 11:42:52 +02:00
b6882c86dc
Merge pull request #17250 from TaterTechStudios/feature/books-series-name-metadata
2026-07-15 07:57:57 +02:00
4503ad295c
Fix format negotiation in hybrid SW decode and CUDA tonemap pipeline
...
The CUDA hwcontext in FFmpeg 8.1 has added support for 10bit
fully-planar formats, but few CUDA filters support them.
Signed-off-by: nyanmisaka <nst799610810@gmail.com >
2026-07-15 13:54:45 +08:00
1a9bd2417a
Update Microsoft
2026-07-14 20:11:54 +00:00
0d2f1b26b3
Update dependency dotnet-ef to v10.0.10
2026-07-14 20:11:43 +00:00
bc59e56ef5
Merge pull request #17266 from Shadowghost/fix-non-admin-additional-parts
2026-07-14 15:36:38 +02:00
b8bac71270
remove PlaybackPositionTicks from MediaSourceInfo
2026-07-14 10:05:32 +02:00
6238448716
Update season and episode SeriesName when renaming a series
2026-07-13 23:08:06 -04:00
56c970c2db
Make RequestHelpers.GetOrderBy generic and reuse it in ActivityLogController
2026-07-14 02:57:15 +02:00
fcce108948
Fix: Fetch the correct row matching the most up to date file
2026-07-13 15:40:40 -05:00
cfeaef6180
Merge pull request #17306 from theguymadmax/fix-strm-sub-protocol
2026-07-13 20:14:20 +02:00
ebab369eac
Merge pull request #17273 from theguymadmax/ratigs-numerical-score
2026-07-13 20:13:29 +02:00
2a44c35224
Apply review suggestions
2026-07-13 20:01:01 +02:00
0584a102ee
Translated using Weblate (Hebrew)
...
Translation: Jellyfin/Jellyfin
Translate-URL: https://translate.jellyfin.org/projects/jellyfin/jellyfin-core/he/
2026-07-13 11:26:23 +00:00
2aae53bc15
Apply review feedback
2026-07-12 11:54:56 -04:00
911044b415
Merge pull request #17287 from dkanada/audiobook-cover
2026-07-12 17:39:34 +02:00
b77def6883
Merge pull request #17268 from theguymadmax/fix-greece-ratings
2026-07-12 17:36:01 +02:00
Shadowghost