Deluan 67f6d8aee8 fix(artwork): cap resolved image reads ...

A user-editable ExternalImageURL can point at an arbitrarily large endpoint;
a fast server could make the worker buffer hundreds of MB inside the 5s HTTP
timeout. Bound the read to a fixed 20MB cap (no config knob) via io.LimitReader
and fail the item if it is exceeded.

2026-07-22 15:53:32 -04:00

..

agents

feat(listenbrainz): match collaboration top-songs via all credited artist MBIDs (#5670)

2026-06-26 17:06:14 -04:00

artwork

fix(artwork): cap resolved image reads

2026-07-22 15:53:32 -04:00

auth

refactor: more warnings clean up

2026-05-20 17:43:12 -03:00

external

fix(artwork): propagate transient artist image errors to the worker

2026-07-22 15:53:32 -04:00

ffmpeg

fix(streaming): surface why a transcode decision failed (#5820)

2026-07-19 18:51:32 -04:00

lyrics

fix(scanner): stop logging expected lyrics sniff misses as warnings (#5702)

2026-07-02 09:46:57 -04:00

matcher

feat(listenbrainz): match collaboration top-songs via all credited artist MBIDs (#5670)

2026-06-26 17:06:14 -04:00

metrics

perf(db): keep query planner statistics trustworthy with full ANALYZE (#5740)

2026-07-13 12:04:29 -04:00

playback

refactor: more warnings clean up

2026-05-20 17:43:12 -03:00

playlists

feat(smartplaylist): per-playlist refreshDelay for stable daily/weekly playlists (#5790)

2026-07-16 22:20:35 -04:00

publicurl

fix(shares): honor path component of ShareURL config

2026-04-05 12:12:15 -04:00

scrobbler

feat(scrobbler): exponential backoff for scrobble retries during outages (#5818)

2026-07-19 13:36:05 -04:00

sonic

feat(jellyfin): AudioMuse-AI compatible sonic endpoints (#5782)

2026-07-15 20:44:56 -04:00

storage

fix(scanner): resolve file symlinks with the production local storage FS (#5755)

2026-07-10 10:52:05 -04:00

stream

fix(subsonic): omit bit depth for lossy targets in transcode decision (#5768)

2026-07-12 13:27:01 -04:00

archiver_test.go

fix(transcoding): cap concurrent transcodes to prevent ffmpeg DoS (#5522)

2026-05-24 00:24:30 -03:00

archiver.go

fix(transcoding): cap concurrent transcodes to prevent ffmpeg DoS (#5522)

2026-05-24 00:24:30 -03:00

common_test.go

ci: run Go tests on Windows (#5380)

2026-04-19 13:16:47 -04:00

common.go

…

core_suite_test.go

…

image_upload_test.go

feat(jellyfin): experimental Jellyfin Music API support (#5730)

2026-07-14 11:46:37 -04:00

image_upload.go

feat(jellyfin): experimental Jellyfin Music API support (#5730)

2026-07-14 11:46:37 -04:00

inspect.go

refactor: multiple syntax updates for Go 1.26

2026-05-19 18:02:36 -03:00

library_test.go

feat: add go-taglib pure Go metadata extractor (#4902)

2026-01-18 14:42:53 -05:00

library.go

perf(subsonic): speed up artist search3 deep-offset pagination (#5620)

2026-06-16 21:47:15 -04:00

maintenance_test.go

…

maintenance.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

players_test.go

…

players.go

…

share_test.go

…

share.go

chore: go fix

2026-05-28 22:13:05 -03:00

user_test.go

…

user.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

wire_providers.go

refactor: extract song-to-library matcher to core/matcher package (#5348)

2026-04-12 16:47:22 -04:00