Repository navigation

Next Version - #471

Open

SciLor wants to merge 149 commits into

masterfrom

develop

Open

Next Version#471
SciLor wants to merge 149 commits into
masterfrom
develop

Commits on Jun 21, 2026
- ci: re-enable AddressSanitizer on aarch64 via native arm64 runners
  aflores-qb
  committed
  b218195
Commits on Jul 31, 2026
- feat: track listened status for library files
  pladux
  committed
  791893a
Commits on Aug 25, 2026
- Merge pull request #461 from aflores-qb/fix/311-enable-asan-aarch64-native-runner
  SciLor
  authored
  3d4dfaa
Commits on Sep 13, 2026
- Add optional web UI login with cookie sessions and rate limiting.
  Christian Ditscher
  committed
  5d8c839
Commits on Sep 14, 2026
- fix: improve git pull command in commit step to avoid submodule issues
  SciLor
  committed
  2bff557
- Update frontend (make web)
  SciLor
  committed
  b541699
Commits on Sep 18, 2026
- fix(http_server): keep serving stream files past the first EOF
  alexander-wenzel-dev
  committed
  e05598e
- perf(stream): skip encoding for range requests that force a box restart
  alexander-wenzel-dev
  committed
  69e843d
Commits on Sep 27, 2026
- fix: export selected TAF tracks as Ogg or Zip
  Christian Ditscher
  committed
  8069897
Commits on Sep 28, 2026
- fix: address web login review feedback
  
  Christian Ditscher
  and
  claude
  committed
  450b53c
- fix: install zip in runtime images for multi-track TAF export
  
  Christian Ditscher
  and
  claude
  committed
  813e802
- fix: replace mkdtemp with portable temp dir helper for TAF track export
  
  Christian Ditscher
  and
  claude
  committed
  f46bc8f
Commits on Sep 29, 2026
- docs: describe web radio streaming and its tuning settings
  
  alexander-wenzel-dev
  authored and
  SciLor
  committed
  8d81e10
- Merge pull request #478 from alexander-wenzel-dev/fix/stream-sticky-eof
  SciLor
  authored
  ff1b20f
- Merge pull request #479 from alexander-wenzel-dev/perf/stream-skip-encoder-on-restart
  SciLor
  authored
  398a404
Commits on Sep 30, 2026
Commits on Oct 1, 2026
- Merge pull request #477 from emka/fix/auth-pool-reuse-bypass
  SciLor
  authored
  bdd5812
- Update frontend (make web)
  SciLor
  committed
  9d35539
- fix(server): stop logging web UI bearer tokens as parse failures
  
  Christian Ditscher
  and
  claude
  committed
  a13dba7
- fix: allow base URL redirect to web UI when web login is enabled
  
  Christian Ditscher
  and
  claude
  committed
  e3e2716
Commits on Oct 2, 2026
- Merge pull request #486 from ditschi/fix/485-bearer-auth-warn
  SciLor
  authored
  a6b8d97
- Merge pull request #487 from ditschi/fix/web-auth-root-redirect
  SciLor
  authored
  78de422
- Update frontend (make web)
  SciLor
  committed
  3e66ae7
- Update frontend (make web)
  SciLor
  committed
  a992b56
- feat: remove legacy admin GUI
  
  ian0318git
  and
  claude
  committed
  af5c114
- Add handleCorsOptions function for CORS support
  henryk86
  authored
  ebe1125
- Refactor handleCorsOptions call for clarity
  henryk86
  authored
  776bafe
- Refactor HTTP response handling in server.c
  henryk86
  authored
  645c335
- Update server.c
  henryk86
  authored
  382c2f6
Commits on Oct 3, 2026
- Merge remote-tracking branch 'upstream/develop' into feature/taf-track-download
  Christian Ditscher
  committed
  8579c93
- refactor: reuse existing helpers for TAF track export
  
  Christian Ditscher
  and
  claude
  committed
  e0f9315
Commits on Oct 4, 2026
- Merge pull request #484 from ditschi/feature/taf-track-download
  SciLor
  authored
  2f17147
- Merge pull request #490 from henryk86/develop
  SciLor
  authored
  fb92b72
- Merge pull request #491 from ian0318git/feature/489-sunset-legacy-admin-gui
  SciLor
  authored
  71a1991
- test: restore config.ini and web_users.json after with_server runs
  SciLor
  committed
  e393e81
- fix(cors): parse full HTTP method and harden preflight handler
  SciLor
  committed
  bc81149
- Update frontend (make web)
  SciLor
  committed
  c031a0e
Commits on Oct 5, 2026
- fix(cache): avoid NULL deref on /cache/ lookup of the list head
  
  authored and
  SciLor
  committed
  0d95429
- fix(multipart): reject empty boundary and clamp data-end length
  
  authored and
  SciLor
  committed
  0f6685f
- fix(esp32 upload): fix use-after-free and NULL deref in firmware upload
  
  authored and
  SciLor
  committed
  1180f36
- fix(toniefile): avoid double pclose of the ffmpeg pipe
  
  authored and
  SciLor
  committed
  07e4686
- fix(api): bound source list and path length in /api/fileEncode
  
  authored and
  SciLor
  committed
  8b95222
- test: add hardening regression tests for PR #499/#501/#502/#503
  SciLor
  committed
  7d9fb40
- fix(toniefile): prevent shell command injection via ffmpeg source
  
  authored and
  SciLor
  committed
  d1d23f5
- test: drop Encode494, it cannot tell the #494 bug from the fix
  SciLor
  committed
  4158c48
- fix(api): never expose secret settings through getIndex
  
  authored and
  SciLor
  committed
  4c1ad0c
- refactor(os_ext): move shell quoting to osShellQuote, fix Windows, add tests
  SciLor
  committed
  96fabb9
- test: catch private keys leaking through settings getIndex (#505)
  SciLor
  committed
  ea872e5
- fix(web,tonies): close download file once in body callbacks
  
  authored and
  SciLor
  committed
  25aff55
- fix(handler): stream passthrough headers instead of fixed stack buffers
  
  authored and
  SciLor
  committed
  f5d65ca
- fix(cloud): bound URL parsing in split_url against redirect Location
  
  authored and
  SciLor
  committed
  5d89c9e
- fix(esp32): prevent stack overflow parsing crafted NVS partitions
  
  authored and
  SciLor
  committed
  4365c91
- fix(rtnl): bound hex/escape output in RTNL log handlers
  
  authored and
  SciLor
  committed
  7c6801d
- fix(tap): bound file count and path copies in TAP playlists
  
  authored and
  SciLor
  committed
  67eb70a
- test: cover #493/#495/#497, move string helpers to str_ext.c
  SciLor
  committed
  76168b8
- fix(esp32): abort NVS parsing when an item span is zero
  
  authored and
  SciLor
  committed
  0d1b92e
- fix(cert): write private-key files with 0600 permissions
  
  authored and
  SciLor
  committed
  a51a7c3
- fix(net): bound the 16-bit word index when parsing "::" in IPv6
  
  authored and
  SciLor
  committed
  2c8f8ba
- fix(security): run blacklist and crawler mitigations independently
  
  authored and
  SciLor
  committed
  f9c3888
- fix(tap): free resolved file path in tap_free
  
  authored and
  SciLor
  committed
  8ba21f4
- test: cover #508 crawler detection and #512 key file permissions
  SciLor
  committed
  0e3d0aa
- fix: RTNL length parsing, status after redirects, owner-only box keys
  SciLor
  committed
  2f1b7bc
- fix(web): require HTTP 200 for a successful web_download
  
  authored and
  SciLor
  committed
  26a3613
- fix(cert): shared owner-only helper in cert.c, fix cert upload settings
  SciLor
  committed
  36b67f4
- test: guard the multipart helper against the 64 KB upload hang
  SciLor
  committed
  bd1dc42
Commits on Oct 6, 2026
- fix(api): strip leading ".." in sanitizePath to stop path traversal (#513)
  
  mrueg
  and
  claude
  authored
  2ae8b50
- fix(rtnl): validate field6 length before reading box-supplied data (#514)
  
  mrueg
  and
  claude
  authored
  8c4acd0
- fix(http): validate Range and free Content-Range buffer (#515)
  
  mrueg
  and
  claude
  authored
  4d496e7
- fix(toniefile): guard TAF append against open failure and bad header (#516)
  
  mrueg
  and
  claude
  authored
  e225ebb
- fix(http): drop off-by-one in User-Agent copy (#517)
  
  mrueg
  and
  claude
  authored
  ba95a3a
- fix(tls): free cert buffers on name-constraint rejection (#518)
  
  mrueg
  and
  claude
  authored
  a69591a
- fix(tonies): bound tracks loop to the allocated count (#519)
  
  mrueg
  and
  claude
  authored
  2f96700
- fix(mqtt): bound topic/instance formatting with osSnprintf (#520)
  
  mrueg
  and
  claude
  authored
  24e5102
- fix(cloud): reject non-hex hash in V3 OTA requests (#521)
  
  mrueg
  and
  claude
  authored
  b2d1527
- fix(esp32): validate filename and MAC in extractCerts (#522)
  
  mrueg
  and
  claude
  authored
  d80f7d4
- fix(http): guard TAF-header skip against short files (#523)
  
  mrueg
  and
  claude
  authored
  a5c23bd
- fix: stop file read loops from spinning on short/failed reads (#524)
  
  mrueg
  and
  claude
  authored
  b41dc44
- fix(fs): guard fsRemoveFilename against an empty string (#525)
  
  mrueg
  and
  claude
  authored
  c1a826b
- fix(content): free parsed fields before reloading on version mismatch (#526)
  
  mrueg
  and
  claude
  authored
  201cb53
- fix(cache): don't leak a duplicate entry in cache_add (#527)
  
  mrueg
  and
  claude
  authored
  e57fa45
- perf(settings): look up options by name with a sorted index + bsearch (#528)
  
  mrueg
  and
  claude
  authored
  8e8744b
- perf(api): move 405 KB encode source array off the request stack (#529)
  
  mrueg
  and
  claude
  authored
  906c9b3
- test: cover the sanitizePath, Range and extractCerts fixes (#513, #515, #522)
  SciLor
  committed
  ccc70a6
- test: cover fsRemoveFilename on empty input and settings lookup by name (#525, #528)
  SciLor
  committed
  084a461
- ci: run all tests in parallel to the builds, cancel the run on failure
  SciLor
  committed
  7b2a7d6
- Validate filename and MAC in esp32 patchFirmware
  SciLor
  committed
  62ff355
- test: run integration tests in an isolated sandbox
  SciLor
  committed
  69babb8
- test: run the Python tests with pytest from the Makefile
  SciLor
  committed
  bcc31ea
- test: add a Toniebox simulator and box connection tests
  SciLor
  committed
  a5dc050
- test: add per-hardware box profiles with TLS parameters
  SciLor
  committed
  27751ff
- test: add a fake cloud and cloud proxy tests
  SciLor
  committed
  6dda0a8
- settings: park replaced settings memory instead of freeing it in place
  SciLor
  committed
  7078c15
- Refuse downloads from non-public addresses (SSRF)
  SciLor
  committed
  1847198
- ci: add concurrency settings to workflows for better job management
  SciLor
  committed
  b2ede3f
Commits on Oct 7, 2026
- Update frontend (make web)
  SciLor
  committed
  ede4009
Commits on Oct 8, 2026
- fix(tls): no session resumption where boxes authenticate by certificate
  
  Oaradla
  authored and
  SciLor
  committed
  cd9d212
- fix(certs): uploads for a new box go to its own directory
  
  Oaradla
  authored and
  SciLor
  committed
  bebda08
- feat(esp32): patch the port the box connects to
  
  Oaradla
  authored and
  SciLor
  committed
  6452896
- feat: add total audio length to TAF info (#537)
  ditschi
  authored
  b2a6025
- test: run KeyPermissions512 from the sandbox, it needs the CA
  SciLor
  committed
  f09b4d4
- ci: install ffmpeg for the tests job
  SciLor
  committed
  427895e
- test: check lengthSeconds of an encoded TAF
  SciLor
  committed
  8b39ac9
Commits on Oct 15, 2026
- Bump actions/cache from 4 to 6
  
  dependabot[bot]
  authored and
  SciLor
  committed
  06e08be
- fix(http): end the request line at its CRLF when the first read fills the buffer (#543)
  
  zimmermq
  authored and
  SciLor
  committed
  3513abe
- fix(test): run the key-permission hardening test against the sandbox
  
  authored and
  SciLor
  committed
  8e3c22d
- docker: drop privileges by numeric uid:gid so PUID collisions do not break startup
  
  authored and
  SciLor
  committed
  670986c
- fix(sse): take the event lock before the context lock in the keep-alive (#544)
  
  zimmermq
  authored and
  SciLor
  committed
  18d6189
- test(sim): box profiles from captures of a CC3200 and an ESP32
  
  Oaradla
  authored and
  SciLor
  committed
  f1aa684
- cloud: answers the boxes accept: claim 204, /v1/log answered, cloud time checked
  
  Oaradla
  authored and
  SciLor
  committed
  1d5063a
- Update frontend (make web)
  SciLor
  committed
  944392f
- fix(sse): send the response header before a subscriber gets events (#545)
  
  zimmermq
  authored and
  SciLor
  committed
  ae15eb8
- Update frontend (make web)
  SciLor
  committed
  3209233
Commits on Oct 16, 2026
- feat(server): check box certificates
  
  Oaradla
  authored and
  SciLor
  committed
  942c6c1
- test: set core.boxCertAuth per box in the log-only test
  SciLor
  committed
  8291cda
- Makefile: auto-discover python tests
  SciLor
  committed
  676612a
- Update frontend (make web)
  SciLor
  committed
  e5fac5c
Commits on Oct 17, 2026
- Honor tracks= on /content/download for tag track export
  
  Christian Ditscher
  and
  claude
  committed
  d8a8965
Commits on Oct 18, 2026
- Return 400 for an invalid track selection
  
  Christian Ditscher
  and
  claude
  committed
  d853b7a
Commits on Oct 23, 2026
- Merge pull request #553 from ditschi/fix/track-export-content-download
  SciLor
  authored
  bfc2374
- Merge pull request #554 from ditschi/fix/track-export-invalid-track-400
  SciLor
  authored
  0e47512
- Write the track export zip in-process
  
  authored and
  SciLor
  committed
  00b6c06
- Test zip entry names with UTF-8 track titles
  
  authored and
  SciLor
  committed
  70d86d3
- Merge pull request #555 from ditschi/feature/in-process-track-zip
  SciLor
  authored
  f3d9fb6
- Update apt-get commands to include update step before installing dependencies
  SciLor
  committed
  9784f78
- Fix NULL localtime in zip writer, drop zip from Debian runtime image
  SciLor
  committed
  2ff53fc
- Update frontend (make web)
  SciLor
  committed
  6c8ae98
Commits on Oct 24, 2026
Commits on Oct 25, 2026
- Add reverse target for teddycloud release candidate
  henryk86
  authored
  0f97967
- Update teddycloud_release_candidate URL in reverse_targets
  henryk86
  authored
  88dc1ef
- Merge pull request #562 from henryk86/develop
  SciLor
  authored
  bab5d05
- Update frontend (make web)
  SciLor
  committed
  780a4ff
- Update frontend (make web)
  SciLor
  committed
  907acea

Commits

Commits on Jun 21, 2026

Commits on Jul 31, 2026

Commits on Aug 25, 2026

Commits on Sep 13, 2026

Commits on Sep 14, 2026

Commits on Sep 18, 2026

Commits on Sep 27, 2026

Commits on Sep 28, 2026

Commits on Sep 29, 2026

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 3, 2026

Commits on Oct 4, 2026

Commits on Oct 5, 2026

Commits on Oct 6, 2026

Commits on Oct 7, 2026

Commits on Oct 8, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026