749 Commits (d36eafe68cdcf6f4222272ca8873f4a175934be7)

Author	SHA1	Message	Date
dependabot[bot]	2fe590f948	Bump express-rate-limit from 8.2.1 to 8.3.0 in /backend ... Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 8.2.1 to 8.3.0. - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](https://github.com/express-rate-limit/express-rate-limit/compare/v8.2.1...v8.3.0) --- updated-dependencies: - dependency-name: express-rate-limit dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
voc0der	36e6fe0512	chore(security): pin patched immutable and multer versions	2 months ago
dependabot[bot]	a2bfa10028	Bump multer from 2.1.0 to 2.1.1 in /backend ... Bumps [multer](https://github.com/expressjs/multer) from 2.1.0 to 2.1.1. - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](https://github.com/expressjs/multer/compare/v2.1.0...v2.1.1) --- updated-dependencies: - dependency-name: multer dependency-version: 2.1.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	8c6ffbd278	Bump fs-extra from 11.3.3 to 11.3.4 in /backend ... Bumps [fs-extra](https://github.com/jprichardson/node-fs-extra) from 11.3.3 to 11.3.4. - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.3.3...11.3.4) --- updated-dependencies: - dependency-name: fs-extra dependency-version: 11.3.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
voc0der	ea09a8a9c9	Fix OIDC handling for hash-based share links	2 months ago
voc0der	9b2278b9b3	chore: include md5 and axios bumps in consolidated update	2 months ago
dependabot[bot]	b9d2ff2c01	Bump body-parser from 1.20.4 to 2.2.2 in /backend ... Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.4 to 2.2.2. - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/body-parser/compare/1.20.4...v2.2.2) --- updated-dependencies: - dependency-name: body-parser dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
voc0der	d867bf6fed	fix: add lowdb v7 compatibility layer for legacy API	2 months ago
dependabot[bot]	9c34ef0b65	Bump lowdb from 1.0.0 to 7.0.1 in /backend ... Bumps [lowdb](https://github.com/typicode/lowdb) from 1.0.0 to 7.0.1. - [Release notes](https://github.com/typicode/lowdb/releases) - [Commits](https://github.com/typicode/lowdb/compare/v1.0.0...v7.0.1) --- updated-dependencies: - dependency-name: lowdb dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
voc0der	6b943749a3	chore: consolidate dependency bumps and OIDC/multiuser docs	2 months ago
voc0der	d5581e1012	chore: patch multer and transitive security advisories	2 months ago
voc0der	798b7d083c	fix: migrate unassigned playlists with OIDC ownership mapping	2 months ago
voc0der	f6afb52808	fix: harden shared access checks for playlists and files	2 months ago
voc0der	a84d08e64f	feat: add OIDC auth flow with multi-user enforcement	2 months ago
dependabot[bot]	6f7787a670	Bump minimatch in /backend ... Bumps and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together. Updates `minimatch` from 9.0.6 to 9.0.9 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](https://github.com/isaacs/minimatch/compare/v9.0.6...v9.0.9) Updates `minimatch` from 5.1.7 to 5.1.9 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](https://github.com/isaacs/minimatch/compare/v9.0.6...v9.0.9) --- updated-dependencies: - dependency-name: minimatch dependency-version: 9.0.9 dependency-type: indirect - dependency-name: minimatch dependency-version: 5.1.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
voc0der	b90b34ada1	chore: consolidate dependabot upgrades and fix docker build	2 months ago
voc0der	aba5346523	Consolidate dependabot dependency updates	2 months ago
voc0der	48706bd075	Refresh docs and Docker Compose defaults	2 months ago
voc0der	0f79ff5e76	Fix stale playlist download progress updates	2 months ago
voc0der	82f1f930c9	Remove global yt-dlp subprocess timeout	2 months ago
voc0der	b98df93775	Persist recent videos page size in localStorage (#57) ... * Persist recent videos page size in localStorage * Avoid double-decoding thumbnail route path	2 months ago
voc0der	ccf562da1b	Migrate backend from node-fetch to native fetch (#56) ... * Migrate backend from node-fetch to native fetch * Fix feed v5 startup crash with lazy import * Fix notification empty-state contrast in menu	2 months ago
voc0der	1bb647bc77	Fix feed v5 startup crash with lazy import	2 months ago
dependabot[bot]	67b8125f3e	Bump fluent-ffmpeg from 2.1.2 to 2.1.3 in /backend (#49) ... Bumps [fluent-ffmpeg](https://github.com/fluent-ffmpeg/node-fluent-ffmpeg) from 2.1.2 to 2.1.3. - [Commits](https://github.com/fluent-ffmpeg/node-fluent-ffmpeg/compare/v2.1.2...v2.1.3) --- updated-dependencies: - dependency-name: fluent-ffmpeg dependency-version: 2.1.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
dependabot[bot]	c519069a9f	Bump config from 3.3.1 to 4.4.0 in /backend (#48) ... Bumps [config](https://github.com/node-config/node-config) from 3.3.1 to 4.4.0. - [Release notes](https://github.com/node-config/node-config/releases) - [Changelog](https://github.com/node-config/node-config/blob/master/History.md) - [Commits](https://github.com/node-config/node-config/commits/v4.4.0) --- updated-dependencies: - dependency-name: config dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
dependabot[bot]	9c0f8ad965	Bump fs-extra from 9.0.0 to 11.3.3 in /backend (#47) ... Bumps [fs-extra](https://github.com/jprichardson/node-fs-extra) from 9.0.0 to 11.3.3. - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](https://github.com/jprichardson/node-fs-extra/compare/9.0.0...11.3.3) --- updated-dependencies: - dependency-name: fs-extra dependency-version: 11.3.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
dependabot[bot]	d8a4534100	Bump feed from 4.2.2 to 5.2.0 in /backend (#46) ... Bumps [feed](https://github.com/jpmonette/feed) from 4.2.2 to 5.2.0. - [Release notes](https://github.com/jpmonette/feed/releases) - [Commits](https://github.com/jpmonette/feed/compare/4.2.2...5.2.0) --- updated-dependencies: - dependency-name: feed dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 months ago
voc0der	e843078752	chore(backend): upgrade mongodb driver to v6	2 months ago
voc0der	93a8490911	Add log level controls and redact yt-dlp args	2 months ago
voc0der	13701e3ba0	Fix yt-dlp progress metadata arg filtering	2 months ago
voc0der	fe3f11bf7e	Batch dependency updates and fix backend security alerts	2 months ago
voc0der	f5d67ac059	Retire TSLint tooling and patch transitive deps	2 months ago
voc0der	c3b5758fb9	Move CI and Docker baseline to Node 24	2 months ago
voc0der	c76af0c084	Merge pull request #21 from voc0der/feature/depdendabot-findings-v2 ... Dependabot remediation follow-up (v2)	2 months ago
voc0der	7b0924d90e	Further reduce backend Dependabot findings (v2)	2 months ago
voc0der	936f3c6881	Tighten backend dependency graph for Dependabot v2	2 months ago
voc0der	883e4c419e	Reduce remaining Dependabot findings (v2)	2 months ago
voc0der	21d224fa0c	Fix -1 concurrent download limit handling	2 months ago
voc0der	a612be5b4e	Refresh backend lockfile transitive dependencies	2 months ago
voc0der	0607d783a6	Initial Dependabot remediation pass	2 months ago
voc0der	c64962c7d5	Handle dynamic task job accessor compatibility	2 months ago
voc0der	894d490a1d	Restore task job compatibility for tests	2 months ago
voc0der	e3b20ea19a	Harden remaining CodeQL hotspots	2 months ago
voc0der	5019ce9c62	Fix proxy trust handling for rate limiting	2 months ago
voc0der	5ae5a5940a	Address additional CodeQL findings	2 months ago
voc0der	788fcdcef6	Harden path handling in backend	2 months ago
voc0der	84537e8e72	Add API rate limiting middleware	2 months ago
voc0der	9d4b83e9ad	Refine CodeQL hardening fixes	2 months ago
voc0der	21747fa929	Harden code-scanning findings	2 months ago
voc0der	c3d93a366f	Add rate limiting to cookie test endpoint	2 months ago