1900 Commits (d82c41b44dad52811ca106c4e809a195ebb26bed)

 

All Branches   

Search

Author	SHA1	Message	Date
voc0der	d82c41b44d	Merge pull request #26 from voc0der/feature/toolchain-modernize-v1 ... Remove legacy Protractor e2e tooling	2 months ago
voc0der	d75e2676d4	Remove legacy Protractor e2e tooling	2 months ago
voc0der	63ba55e3f8	Merge pull request #24 from voc0der/feature/node24 ... Move CI and Docker baseline to Node 24	2 months ago
voc0der	f23a10a0ab	Split armv7 Docker builds into separate workflow	2 months ago
voc0der	5ef5509d24	Add temporary Node build deps for armv7 nvm install	2 months ago
voc0der	c3b5758fb9	Move CI and Docker baseline to Node 24	2 months ago
voc0der	06f74f426d	Use nightly image tag in docker-compose	2 months ago
voc0der	79bdcdd49b	Remove compose version and update docker image namespace	2 months ago
voc0der	c76af0c084	Merge pull request #21 from voc0der/feature/depdendabot-findings-v2 ... Dependabot remediation follow-up (v2)	2 months ago
voc0der	7b0924d90e	Further reduce backend Dependabot findings (v2)	2 months ago
voc0der	936f3c6881	Tighten backend dependency graph for Dependabot v2	2 months ago
voc0der	883e4c419e	Reduce remaining Dependabot findings (v2)	2 months ago
voc0der	107a0c2b65	Merge pull request #20 from voc0der/feature/respect-concurrent-download ... Fix -1 max concurrent downloads sentinel	2 months ago
voc0der	21d224fa0c	Fix -1 concurrent download limit handling	2 months ago
voc0der	43e17cbaf5	Merge pull request #19 from voc0der/feature/dependabot-findings ... Initial Dependabot remediation pass	2 months ago
voc0der	8f32539b63	Restore frontend build compatibility after dependency refresh	2 months ago
voc0der	fc76ab2470	Fix root npm peer conflicts in CI build	2 months ago
voc0der	a612be5b4e	Refresh backend lockfile transitive dependencies	2 months ago
voc0der	0607d783a6	Initial Dependabot remediation pass	2 months ago
voc0der	5a7ea555f1	Merge pull request #18 from voc0der/feature/harden-code-v2 ... Code hardening v2: close remaining CodeQL alerts	2 months ago
voc0der	c64962c7d5	Handle dynamic task job accessor compatibility	2 months ago
voc0der	894d490a1d	Restore task job compatibility for tests	2 months ago
voc0der	e3b20ea19a	Harden remaining CodeQL hotspots	2 months ago
voc0der	97a97bc717	Merge pull request #17 from voc0der/feature/code-hardening ... Code hardening: fix open CodeQL findings	2 months ago
voc0der	5019ce9c62	Fix proxy trust handling for rate limiting	2 months ago
voc0der	5ae5a5940a	Address additional CodeQL findings	2 months ago
voc0der	788fcdcef6	Harden path handling in backend	2 months ago
voc0der	84537e8e72	Add API rate limiting middleware	2 months ago
voc0der	9d4b83e9ad	Refine CodeQL hardening fixes	2 months ago
voc0der	21747fa929	Harden code-scanning findings	2 months ago
voc0der	ee19b9514f	Merge pull request #15 from voc0der/feature/ytdl-cookie-test ... Add interactive cookies test flow in settings	2 months ago
voc0der	7bb1201bc3	Add cookie test in Advanced settings	2 months ago
voc0der	c3d93a366f	Add rate limiting to cookie test endpoint	2 months ago
voc0der	d1a5e762ed	Add interactive cookie test dialog and API	2 months ago
voc0der	1be8e22772	Merge pull request #14 from voc0der/feature/ssl-backend-certs ... Add SSL/HTTPS support and reverse proxy IP whitelist	2 months ago
voc0der	229c7fcea6	Fix reverse proxy whitelist to check proxy IP, not client IP ... The whitelist should check the direct connecting IP (reverse proxy itself) rather than the end client IP from X-Forwarded-For headers. Changes: - Use req.connection.remoteAddress instead of X-Forwarded-For - Strip ::ffff: IPv6 prefix for IPv4-mapped addresses - Updated log message to clarify it's the proxy IP being checked - Updated docker-compose.yml comments to explain behavior This allows whitelisting the reverse proxy (e.g., 172.28.0.100) while still allowing any client IPs to reach the app through that proxy.	2 months ago
voc0der	d692187eed	Add SSL/HTTPS support and reverse proxy whitelist ... Features: - SSL/HTTPS: Configure ytdl_ssl_cert_path and ytdl_ssl_key_path to enable HTTPS - Server auto-detects SSL certificate files and starts in HTTPS mode if present - Falls back to HTTP if SSL files not found - Reverse Proxy Whitelist: Configure ytdl_reverse_proxy_whitelist with CIDR ranges - Supports single IPs (172.28.0.100/32) or subnets (172.28.0.0/24) - Supports comma-separated multiple ranges - No filtering if whitelist not configured - Checks X-Forwarded-For and X-Real-IP headers for proxied requests Config items added to backend/consts.js: - ytdl_ssl_cert_path - ytdl_ssl_key_path - ytdl_reverse_proxy_whitelist Environment variable casing: lowercase (matches existing pattern)	2 months ago
voc0der	8e1edb1ec5	Merge pull request #13 from voc0der/feature/flexible-uid-entrypoint ... Support both user: and environment UID/GID in Docker	2 months ago
voc0der	11c05cd32f	Pre-create PM2 and npm cache directories for non-root user support ... When using user: directive, the container runs as a non-root user that may not have write access to /app. Pre-create PM2 and npm cache directories with world-writable permissions to support any UID/GID. Fixes permission denied errors when PM2 tries to create its directory structure at runtime.	2 months ago
voc0der	4c8514433d	Use DOCKERHUB_USERNAME secret instead of hardcoded username	2 months ago
voc0der	24ca50cdf2	Add manual trigger to docker-pr workflow for test builds ... Adds workflow_dispatch trigger that allows: - Manual workflow runs from GitHub Actions UI - Optional push to registry (choice: true/false) - Custom image tag (e.g., test, pr-13) Normal PR behavior unchanged (push: false). When manually triggered, can push test images to both: - DockerHub: tzahi12345/youtubedl-material:<tag> - GHCR: ghcr.io/voc0der/youtubedl-material:<tag>	2 months ago
voc0der	5c7338f1ce	Support both user: and environment UID/GID in Docker ... Make entrypoint.sh flexible to support two deployment methods: - Start as root with UID/GID env vars (existing behavior) - Start as non-root with user: directive (new capability) Benefits: - Backward compatible with existing deployments - Enables more secure user: directive approach - Faster startup when using user: (no chown needed) - Auto-detects execution context and adapts	2 months ago
voc0der	b7846c0303	Switch star graph to star-history ... Replace starchart with star-history for better visualization 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	3 months ago
voc0der	e2c90ea633	Merge branch 'master' of https://github.com/voc0der/YoutubeDL-Material	3 months ago
voc0der	e6b9209a6e	Update README: Add star graph and rebrand to voc0der ... - Added GitHub star history graph - Replaced all Tzahi12345/tzahi12345 references with voc0der - Updated badges, links, and documentation to point to fork 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	3 months ago
voc0der	6ae2d8f644	Merge pull request #12 from voc0der/dependabot/github_actions/dot-github/workflows/actions/cache-5 ... Bump actions/cache from 4 to 5 in /.github/workflows	3 months ago
voc0der	ebe9f58544	Merge pull request #11 from voc0der/dependabot/github_actions/dot-github/workflows/jsdaniell/create-json-1.2.3 ... Bump jsdaniell/create-json from 1.2.2 to 1.2.3 in /.github/workflows	3 months ago
voc0der	fdc0786b78	Merge pull request #10 from voc0der/dependabot/github_actions/dot-github/workflows/FedericoCarboni/setup-ffmpeg-3 ... Bump FedericoCarboni/setup-ffmpeg from 2 to 3 in /.github/workflows	3 months ago
voc0der	fc490f42ae	Merge pull request #9 from voc0der/dependabot/github_actions/dot-github/workflows/actions/checkout-6 ... Bump actions/checkout from 4 to 6 in /.github/workflows	3 months ago
dependabot[bot]	305b55102b	Bump actions/cache from 4 to 5 in /.github/workflows ... Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago