Next Version - #471

Open

SciLor wants to merge 64 commits into

Commits on Jun 21, 2026

ci: re-enable AddressSanitizer on aarch64 via native arm64 runners
aflores-qb
committed
b218195

Commits on Jul 31, 2026

feat: track listened status for library files
pladux
committed
791893a

Commits on Aug 25, 2026

Merge pull request #461 from aflores-qb/fix/311-enable-asan-aarch64-native-runner
SciLor
authored
3d4dfaa

Commits on Sep 13, 2026

Add optional web UI login with cookie sessions and rate limiting.
Christian Ditscher
committed
5d8c839

Commits on Sep 14, 2026

fix: improve git pull command in commit step to avoid submodule issues
SciLor
committed
2bff557
Update frontend (make web)
SciLor
committed
b541699

Commits on Sep 18, 2026

Commits on Sep 27, 2026

fix: export selected TAF tracks as Ogg or Zip
Christian Ditscher
committed
8069897

Commits on Sep 28, 2026

fix: address web login review feedback

Christian Ditscher
and
claude
committed
450b53c
fix: install zip in runtime images for multi-track TAF export

Christian Ditscher
and
claude
committed
813e802
fix: replace mkdtemp with portable temp dir helper for TAF track export

Christian Ditscher
and
claude
committed
f46bc8f

Commits on Sep 29, 2026

docs: describe web radio streaming and its tuning settings

alexander-wenzel-dev
authored and
SciLor
committed
8d81e10
Merge pull request #478 from alexander-wenzel-dev/fix/stream-sticky-eof
SciLor
authored
ff1b20f
Merge pull request #479 from alexander-wenzel-dev/perf/stream-skip-encoder-on-restart
SciLor
authored
398a404

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Merge pull request #477 from emka/fix/auth-pool-reuse-bypass
SciLor
authored
bdd5812
Update frontend (make web)
SciLor
committed
9d35539
fix(server): stop logging web UI bearer tokens as parse failures

Christian Ditscher
and
claude
committed
a13dba7
fix: allow base URL redirect to web UI when web login is enabled

Christian Ditscher
and
claude
committed
e3e2716

Commits on Oct 2, 2026

Merge pull request #486 from ditschi/fix/485-bearer-auth-warn
SciLor
authored
a6b8d97
Merge pull request #487 from ditschi/fix/web-auth-root-redirect
SciLor
authored
78de422
Update frontend (make web)
SciLor
committed
3e66ae7
Update frontend (make web)
SciLor
committed
a992b56
feat: remove legacy admin GUI

ian0318git
and
claude
committed
af5c114
Add handleCorsOptions function for CORS support
henryk86
authored
ebe1125
Refactor handleCorsOptions call for clarity
henryk86
authored
776bafe
Refactor HTTP response handling in server.c
henryk86
authored
645c335
Update server.c
henryk86
authored
382c2f6

Commits on Oct 3, 2026

Merge remote-tracking branch 'upstream/develop' into feature/taf-track-download
Christian Ditscher
committed
8579c93
refactor: reuse existing helpers for TAF track export

Christian Ditscher
and
claude
committed
e0f9315

Commits on Oct 4, 2026

Merge pull request #484 from ditschi/feature/taf-track-download
SciLor
authored
2f17147
Merge pull request #490 from henryk86/develop
SciLor
authored
fb92b72
Merge pull request #491 from ian0318git/feature/489-sunset-legacy-admin-gui
SciLor
authored
71a1991
test: restore config.ini and web_users.json after with_server runs
SciLor
committed
e393e81
fix(cors): parse full HTTP method and harden preflight handler
SciLor
committed
bc81149
Update frontend (make web)
SciLor
committed
c031a0e

Commits on Oct 5, 2026

fix(cache): avoid NULL deref on /cache/ lookup of the list head

authored and
SciLor
committed
0d95429
fix(multipart): reject empty boundary and clamp data-end length

authored and
SciLor
committed
0f6685f
fix(esp32 upload): fix use-after-free and NULL deref in firmware upload

authored and
SciLor
committed
1180f36
fix(toniefile): avoid double pclose of the ffmpeg pipe

authored and
SciLor
committed
07e4686
fix(api): bound source list and path length in /api/fileEncode

authored and
SciLor
committed
8b95222
test: add hardening regression tests for PR #499/#501/#502/#503
SciLor
committed
7d9fb40
fix(toniefile): prevent shell command injection via ffmpeg source

authored and
SciLor
committed
d1d23f5
test: drop Encode494, it cannot tell the #494 bug from the fix
SciLor
committed
4158c48
fix(api): never expose secret settings through getIndex

authored and
SciLor
committed
4c1ad0c
refactor(os_ext): move shell quoting to osShellQuote, fix Windows, add tests
SciLor
committed
96fabb9
test: catch private keys leaking through settings getIndex (#505)
SciLor
committed
ea872e5
fix(web,tonies): close download file once in body callbacks

authored and
SciLor
committed
25aff55
fix(handler): stream passthrough headers instead of fixed stack buffers

authored and
SciLor
committed
f5d65ca
fix(cloud): bound URL parsing in split_url against redirect Location

authored and
SciLor
committed
5d89c9e
fix(esp32): prevent stack overflow parsing crafted NVS partitions

authored and
SciLor
committed
4365c91