Commit Graph

1998 Commits (065e13c3f91e2b671e1144f6e989f53dcc9d0e58)
 

Author SHA1 Message Date
voc0der 065e13c3f9
Merge pull request #109 from voc0der/dependabot/github_actions/dot-github/workflows/docker/setup-buildx-action-4
Bump docker/setup-buildx-action from 3 to 4 in /.github/workflows
2 months ago
voc0der 0f853819ed
Merge pull request #110 from voc0der/dependabot/npm_and_yarn/angular-toolchain-8142e20a17
Bump the angular-toolchain group with 13 updates
2 months ago
dependabot[bot] 0c7808eda9
Bump the angular-toolchain group with 13 updates
Bumps the angular-toolchain group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `21.2.0` | `21.2.1` |
| [@angular/cdk](https://github.com/angular/components) | `21.2.0` | `21.2.1` |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.0` | `21.2.1` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.0` | `21.2.1` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.0` | `21.2.1` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.0` | `21.2.1` |
| [@angular/localize](https://github.com/angular/angular) | `21.2.0` | `21.2.1` |
| [@angular/material](https://github.com/angular/components) | `21.2.0` | `21.2.1` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.0` | `21.2.1` |
| [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `21.2.0` | `21.2.1` |
| [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `21.2.0` | `21.2.1` |
| [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.0` | `21.2.1` |
| [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service) | `21.2.0` | `21.2.1` |


Updates `@angular/animations` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/animations)

Updates `@angular/cdk` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/components/releases)
- [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/components/compare/v21.2.0...v21.2.1)

Updates `@angular/common` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/common)

Updates `@angular/compiler` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/compiler)

Updates `@angular/core` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/core)

Updates `@angular/forms` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/forms)

Updates `@angular/localize` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/compare/v21.2.0...v21.2.1)

Updates `@angular/material` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/components/releases)
- [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/components/compare/v21.2.0...v21.2.1)

Updates `@angular/platform-browser` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/platform-browser)

Updates `@angular/platform-browser-dynamic` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/platform-browser-dynamic)

Updates `@angular/router` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/router)

Updates `@angular/compiler-cli` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/compiler-cli)

Updates `@angular/language-service` from 21.2.0 to 21.2.1
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.1/packages/language-service)

---
updated-dependencies:
- dependency-name: "@angular/animations"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/cdk"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/common"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/core"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/forms"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/localize"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/material"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/platform-browser"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/router"
  dependency-version: 21.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/compiler-cli"
  dependency-version: 21.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
- dependency-name: "@angular/language-service"
  dependency-version: 21.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-toolchain
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot] d209bc062e
Bump docker/setup-buildx-action from 3 to 4 in /.github/workflows
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
voc0der 0cbada0fa1
Merge pull request #106 from voc0der/fix/dependabot-hono-security-20260304
fix: patch vulnerable hono transitive dependencies
2 months ago
voc0der 0c56a055c2 fix: patch vulnerable hono transitive dependencies 2 months ago
voc0der b8cdf95bf2
Merge pull request #105 from voc0der/chore/dependabot-batch-2026-03-04
Batch dependabot updates (#101-#104) + fix flaky docker build
2 months ago
voc0der 78a56ac13e Retry TwitchDownloader latest release lookup 2 months ago
dependabot[bot] 2bffa2d7ff Bump fs-extra from 11.3.3 to 11.3.4
Bumps [fs-extra](https://github.com/jprichardson/node-fs-extra) from 11.3.3 to 11.3.4.
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.3.3...11.3.4)

---
updated-dependencies:
- dependency-name: fs-extra
  dependency-version: 11.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot] 8c6ffbd278 Bump fs-extra from 11.3.3 to 11.3.4 in /backend
Bumps [fs-extra](https://github.com/jprichardson/node-fs-extra) from 11.3.3 to 11.3.4.
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.3.3...11.3.4)

---
updated-dependencies:
- dependency-name: fs-extra
  dependency-version: 11.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot] e3938c7432 Bump docker/setup-qemu-action from 3 to 4 in /.github/workflows
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot] 47782a9ecc Bump docker/login-action from 3 to 4 in /.github/workflows
Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
voc0der ea09a8a9c9 Fix OIDC handling for hash-based share links 2 months ago
voc0der be179d8376
Merge pull request #100 from voc0der/fix/lowdb-v7-compat
chore: consolidate backend dependency bumps and lowdb v7 compatibility
2 months ago
voc0der 9b2278b9b3 chore: include md5 and axios bumps in consolidated update 2 months ago
dependabot[bot] b9d2ff2c01 Bump body-parser from 1.20.4 to 2.2.2 in /backend
Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.4 to 2.2.2.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/body-parser/compare/1.20.4...v2.2.2)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
voc0der d867bf6fed fix: add lowdb v7 compatibility layer for legacy API 2 months ago
dependabot[bot] 9c34ef0b65 Bump lowdb from 1.0.0 to 7.0.1 in /backend
Bumps [lowdb](https://github.com/typicode/lowdb) from 1.0.0 to 7.0.1.
- [Release notes](https://github.com/typicode/lowdb/releases)
- [Commits](https://github.com/typicode/lowdb/compare/v1.0.0...v7.0.1)

---
updated-dependencies:
- dependency-name: lowdb
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
voc0der 47d5124e5d
Merge pull request #94 from voc0der/chore/dependency-bumps-oidc-multiuser-docs
chore: consolidate package bumps with OIDC/multiuser docs
2 months ago
voc0der 6b943749a3 chore: consolidate dependency bumps and OIDC/multiuser docs 2 months ago
voc0der 621a02dde5 fix(docker): fail fast when ffprobe is missing in utils stage 2 months ago
voc0der d5581e1012 chore: patch multer and transitive security advisories 2 months ago
voc0der f99edc816e
Merge pull request #85 from voc0der/feature/oidc
feat: OIDC SSO with multi-user enforcement and ownership isolation
2 months ago
voc0der 798b7d083c fix: migrate unassigned playlists with OIDC ownership mapping 2 months ago
voc0der f6afb52808 fix: harden shared access checks for playlists and files 2 months ago
voc0der a84d08e64f feat: add OIDC auth flow with multi-user enforcement 2 months ago
voc0der 90dd796f18
Merge pull request #83 from voc0der/dependabot/npm_and_yarn/backend/multi-5d5195985e
Bump minimatch in /backend
2 months ago
dependabot[bot] 6f7787a670
Bump minimatch in /backend
Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.

Updates `minimatch` from 9.0.6 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.6...v9.0.9)

Updates `minimatch` from 5.1.7 to 5.1.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.6...v9.0.9)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 5.1.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
voc0der 491ddd3da8
Merge pull request #82 from voc0der/chore/depupgrade27
chore: consolidate open dependabot upgrades
2 months ago
voc0der c12572f5e1 fix: make twitchdownloader download resilient to transient 5xx 2 months ago
voc0der 8fef327c84 fix: tolerate non-zero exit in twitchdownloader smoke test 2 months ago
voc0der b90b34ada1 chore: consolidate dependabot upgrades and fix docker build 2 months ago
voc0der 3cd1b3f8f1
Merge pull request #70 from voc0der/fix/frontend-tests-zero-fail
Fix frontend Karma test discovery and shallow spec failures
2 months ago
voc0der 184dc2f4f7 Fix frontend test harness and flaky shallow specs 2 months ago
voc0der aba5346523 Consolidate dependabot dependency updates 2 months ago
voc0der 48706bd075 Refresh docs and Docker Compose defaults 2 months ago
voc0der e17456fdc1 Fix immediate notification card removal 2 months ago
voc0der 0f79ff5e76 Fix stale playlist download progress updates 2 months ago
voc0der 82f1f930c9 Remove global yt-dlp subprocess timeout 2 months ago
voc0der 5d36e39247
Merge pull request #58 from voc0der/chore/eslint10-flat-config
Migrate repo linting to ESLint 10 flat config
2 months ago
voc0der 9c664c4856 Resolve remaining lint errors after ESLint 10 migration 2 months ago
voc0der cd314193bc Migrate to ESLint 10 flat config 2 months ago
voc0der b98df93775
Persist recent videos page size in localStorage (#57)
* Persist recent videos page size in localStorage

* Avoid double-decoding thumbnail route path
2 months ago
voc0der 7fbeb2bac0 Add fork copyright notice 2 months ago
voc0der ccf562da1b
Migrate backend from node-fetch to native fetch (#56)
* Migrate backend from node-fetch to native fetch

* Fix feed v5 startup crash with lazy import

* Fix notification empty-state contrast in menu
2 months ago
voc0der 1bb647bc77 Fix feed v5 startup crash with lazy import 2 months ago
dependabot[bot] 67b8125f3e
Bump fluent-ffmpeg from 2.1.2 to 2.1.3 in /backend (#49)
Bumps [fluent-ffmpeg](https://github.com/fluent-ffmpeg/node-fluent-ffmpeg) from 2.1.2 to 2.1.3.
- [Commits](https://github.com/fluent-ffmpeg/node-fluent-ffmpeg/compare/v2.1.2...v2.1.3)

---
updated-dependencies:
- dependency-name: fluent-ffmpeg
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot] 3807e168bb
Bump karma-chrome-launcher from 3.1.1 to 3.2.0 (#55)
Bumps [karma-chrome-launcher](https://github.com/karma-runner/karma-chrome-launcher) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/karma-runner/karma-chrome-launcher/releases)
- [Changelog](https://github.com/karma-runner/karma-chrome-launcher/blob/master/CHANGELOG.md)
- [Commits](https://github.com/karma-runner/karma-chrome-launcher/compare/v3.1.1...v3.2.0)

---
updated-dependencies:
- dependency-name: karma-chrome-launcher
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot] 4026bbba72
Bump @fontsource/material-icons from 4.5.4 to 5.2.7 (#54)
Bumps [@fontsource/material-icons](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/material-icons) from 4.5.4 to 5.2.7.
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/material-icons)

---
updated-dependencies:
- dependency-name: "@fontsource/material-icons"
  dependency-version: 5.2.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot] 22a783b892
Bump filesize from 10.1.6 to 11.0.13 (#53)
Bumps [filesize](https://github.com/avoidwork/filesize.js) from 10.1.6 to 11.0.13.
- [Changelog](https://github.com/avoidwork/filesize.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/avoidwork/filesize.js/compare/10.1.6...11.0.13)

---
updated-dependencies:
- dependency-name: filesize
  dependency-version: 11.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago