ainur/metube
1
0
Fork 0
mirror of https://github.com/alexta69/metube.git synced 2026-07-23 13:22:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • e061a8a5ba feat: ALLOW_PRIVATE_ADDRESSES to opt out of the SSRF checks (closes #1036) master 2026.07.21 Alex Shnitman 2026-07-21 07:44:38 +03:00
  • 13cb65d931 docs: document the SSRF guard's connect-time coverage limitations Alex Shnitman 2026-07-21 07:41:01 +03:00
  • 1b02a99510 fix: re-validate outbound connections at fetch time against internal hosts Alex Shnitman 2026-07-21 06:55:29 +03:00
  • ebcfe577bc fix: fail closed when an SSRF-guarded host cannot be resolved Alex Shnitman 2026-07-20 23:45:08 +03:00
  • 3bd2c3e366 fix: enforce download-dir containment at the resolved-path chokepoint Alex Shnitman 2026-07-20 23:44:43 +03:00
  • 1c7261ab59 build(deps): bump actions/setup-node in the github-actions group dependabot/github_actions/github-actions-eefdb6dedd dependabot[bot] 2026-07-19 16:12:37 +00:00
  • 707f700609 ci: update releases in place instead of delete-and-recreate Alex Shnitman 2026-07-18 16:44:52 +03:00
  • c519f45908 chore: rework issue and discussion templates around scope policy Alex Shnitman 2026-07-18 13:50:34 +03:00
  • a23d1689e3 docs: add SECURITY.md (private vulnerability reporting) 2026.07.18 Alex Shnitman 2026-07-18 09:24:04 +03:00
  • 4b05022b91 feat: graceful cancel — SIGINT with SIGKILL escalation so partial files are finalized (closes #438) Alex Shnitman 2026-07-18 09:23:48 +03:00
  • 0dc9b0b3d6 ci: enforce the 25k Docker Hub limit on README.md Alex Shnitman 2026-07-17 15:39:31 +03:00
  • 96f5ffe34a docs: restructure README around the wiki as companion documentation Alex Shnitman 2026-07-17 15:39:20 +03:00
  • 1eafecd1cc docs: add test gotchas, option checklist, and security invariants to AGENTS.md Alex Shnitman 2026-07-17 15:14:33 +03:00
  • 8fe81dea18 docs: encode project scope boundary in AGENTS.md Alex Shnitman 2026-07-17 15:08:33 +03:00
  • f054d84108 Merge pull request #1029 from tjelite1986/readme-library-pairing Alex 2026-07-17 15:00:51 +03:00
  • fa02717e12 docs: document pairing MeTube with a music tagger tjelite1986 2026-07-16 22:38:52 +02:00
  • 9ca78be199 Merge PR #1025: fill missing album-artist metadata for audio downloads 2026.07.16 Alex Shnitman 2026-07-16 23:03:17 +03:00
  • 8071611a84 upgrade dependencies Alex Shnitman 2026-07-16 23:01:23 +03:00
  • 220f991fae fix: prefer topic channel for album artist Your GitHub Name 2026-07-16 12:34:03 -07:00
  • 6d0528783c fix: block SSRF via user-submitted URLs Alex Shnitman 2026-07-16 21:31:51 +03:00
  • c104e30451 feat: add AlbumArtistPostProcessor to fill missing album-artist metadata Your GitHub Name 2026-07-15 15:40:36 -07:00
  • fdfbfed5e2 fix: prevent playlist/channel title path traversal (closes GHSA-vh67-38x4-w8pc) 2026.07.13 Alex Shnitman 2026-07-13 23:07:39 +03:00
  • 3ea4732c5d fix: harden download lifecycle, subscriptions, and UI robustness 2026.07.12 Alex Shnitman 2026-07-12 08:08:14 +03:00
  • e2c777842e fix: honor OUTPUT_TEMPLATE for channel downloads (closes #1024) 2026.07.10 Alex Shnitman 2026-07-10 09:49:59 +03:00
  • c34a18de7a upgrade dependencies Alex Shnitman 2026-07-10 09:48:48 +03:00
  • d6bcf182c5 Merge pull request #1023 from lanthaler/no-entries-archive 2026.07.09 Alex 2026-07-09 08:17:00 +03:00
  • ad90609c9b Don't mark a subscription as broken just because all entries are filtered out as they have already been downloaded Markus Lanthaler 2026-07-08 22:54:33 +00:00
  • 5315630ab0 Merge pull request #1021 from mvanhorn/fix/960-atomic-store-nfs-eperm 2026.07.05 Alex 2026-07-05 21:26:49 +03:00
  • 54463baf0e fix: fsync parent dir after direct-write fallback for durability parity Matt Van Horn 2026-07-05 04:11:12 -07:00
  • b00d4785ee fix: serialize state before truncating in the direct-write fallback Matt Van Horn 2026-07-05 04:04:54 -07:00
  • 96e88a3555 fix: force 0600 on fallback state rewrites, not just creation Matt Van Horn 2026-07-05 04:00:59 -07:00
  • 49a46a7d1c fix: create fallback state file with owner-only 0600 permissions Matt Van Horn 2026-07-05 03:57:19 -07:00
  • 961b54aa83 fix: make fsync best-effort so only mkstemp/replace failures fall back Matt Van Horn 2026-07-05 03:53:22 -07:00
  • e0549d6c24 fix: surface real storage errors from direct-write fsync fallback Matt Van Horn 2026-07-05 03:49:15 -07:00
  • f315b75bb2 fix: limit atomic-write fallback to atomic-unsupported errnos Matt Van Horn 2026-07-05 03:44:57 -07:00
  • c2c129db61 fix: fall back to direct write when atomic state save hits EPERM on NFS Matt Van Horn 2026-07-05 03:42:07 -07:00
  • 363f159a0a Merge pull request #1020 from alexta69/copilot/fix-dockerhub-build-push Alex 2026-07-05 07:51:08 +03:00
  • 38c0ca22f4 Pin pnpm version in packageManager field to fix Docker build copilot-swe-agent[bot] 2026-07-05 04:21:32 +00:00
  • 24ae8f0742 Initial plan copilot-swe-agent[bot] 2026-07-05 04:18:28 +00:00
  • 0a946cc352 upgrade yt-dlp from 2026.6.9 to 2026.7.4 AutoUpdater 2026-07-05 00:28:09 +00:00
  • 51fd203b71 upgrade to Angular 22 2026.06.28 Alex Shnitman 2026-06-28 21:12:20 +03:00
  • d136344c26 upgrade dependencies Alex Shnitman 2026-06-28 21:08:08 +03:00
  • 33f1412fac Bump actions/checkout from 6 to 7 in the github-actions group dependabot[bot] 2026-06-21 16:12:26 +00:00
  • ce897ee009 fix open download of cookie files 2026.06.20 Alex Shnitman 2026-06-20 09:52:21 +03:00
  • dd1b4c2436 upgrade dependencies Alex Shnitman 2026-06-20 09:52:14 +03:00
  • 8752b500d6 Merge pull request #1004 from akeeton/docker-audio-download-dir 2026.06.18 Alex 2026-06-18 06:45:50 +03:00
  • 04b9366764 Incorporate PR feedback Andrew Keeton 2026-06-17 17:17:44 -04:00
  • b73e95f405 upgrade dependencies 2026.06.16 Alex Shnitman 2026-06-16 21:57:07 +03:00
  • 64d0d62878 fix empty PUBLIC_HOST_AUDIO_URL handling (closes #1010) Alex Shnitman 2026-06-16 21:47:07 +03:00
  • 37f7af0555 fix batch download (closes #1008) Alex Shnitman 2026-06-16 21:37:05 +03:00
  • 5aa7d033e2 review fixes Alex Shnitman 2026-06-16 21:35:07 +03:00
  • 5429200fba support live streams (closes #302, closes #752, closes #978) 2026.06.13 Alex Shnitman 2026-06-13 17:39:14 +03:00
  • 72d60ea55a upgrade dependencies Alex Shnitman 2026-06-12 12:45:38 +03:00
  • a9b2e07a59 nightly release README update Alex Shnitman 2026-06-12 10:16:19 +03:00
  • d157444877 Create AUDIO_DOWNLOAD_DIR in Docker image Andrew Keeton 2026-06-11 17:21:56 -04:00
  • e30a24ff70 upgrade yt-dlp from 2026.3.17 to 2026.6.9 2026.06.10 AutoUpdater 2026-06-10 00:36:22 +00:00
  • ee20512410 add option for following nightly yt-dlp releases (closes #999) 2026.06.06 Alex Shnitman 2026-06-06 09:42:26 +03:00
  • 897d52cd0d styling improvements 2026.05.30 Alex Shnitman 2026-05-30 15:35:52 +03:00
  • baa72c0e94 fix pnpm upgrade to the correct package age limit 2026.05.29 Alex Shnitman 2026-05-29 14:36:05 +03:00
  • 66d8fa570b Merge branch 'pr-977' Alex Shnitman 2026-05-29 14:14:05 +03:00
  • cf2d2dd465 review fixes Alex Shnitman 2026-05-29 14:13:47 +03:00
  • 0b5617e96c Merge branch 'pr-990' (iOS Web Share for completed downloads) Alex Shnitman 2026-05-29 13:25:22 +03:00
  • 56c0ad3b5f fix catch Alex Shnitman 2026-05-29 13:23:25 +03:00
  • 4478d1394e upgrade dependencies Alex Shnitman 2026-05-29 13:20:04 +03:00
  • ad92607a21 fix(ui): drop redundant tooltip on share button Helmut 2026-05-29 05:24:49 +02:00
  • 6ff364aacf feat(ui): warn before share + surface failures for large files Helmut 2026-05-29 04:56:52 +02:00
  • 39a8948976 feat(ui): add iOS Web Share button next to download link Helmut 2026-05-28 07:00:40 +02:00
  • f0348581c2 remove circle and make labels with help text have an underline Sean McCollum 2026-05-25 00:13:12 -07:00
  • e2773db65a make ui more mobile mobile-friendly Sean McCollum 2026-05-04 10:42:17 -07:00
  • 5d96a581b9 allow filtering out members-only videos in subscriptions (closes #971) 2026.04.28 Alex Shnitman 2026-04-28 22:02:05 +03:00
  • 4f83174d05 implement time-clipped downloads (closes #969, replaces #907) 2026.04.26 Alex Shnitman 2026-04-26 23:07:50 +03:00
  • 91ee8312bf title filter for subscriptions (closes #968) Alex Shnitman 2026-04-26 22:51:48 +03:00
  • d89a5ddbe5 Bump aquasecurity/trivy-action in the github-actions group dependabot[bot] 2026-04-26 16:12:39 +00:00
  • abb9492d21 upgrade dependencies 2026.04.21 Alex Shnitman 2026-04-21 16:20:39 +03:00
  • 23de9824f0 cr fixes Alex Shnitman 2026-04-21 16:13:58 +03:00
  • 0ea934c08f Updated import and fixed race condition rdiaz738 2026-04-20 17:24:16 -07:00
  • e9f979b349 fix yt-dlp options overrides (closes #958) 2026.04.18 Alex Shnitman 2026-04-18 08:46:29 +03:00
  • ab42325db5 upgrade dependencies 2026.04.16 Alex Shnitman 2026-04-16 22:30:42 +03:00
  • 1a32eba474 fix PUBLIC_HOST_URL without a trailing slash (closes #959) Alex Shnitman 2026-04-16 22:06:34 +03:00
  • 29ccc42409 don't run workflow on README changes Alex Shnitman 2026-04-13 20:49:10 +03:00
  • f2d71cbe2e add more CORS details Alex Shnitman 2026-04-13 20:45:20 +03:00
  • 03f71fd257 fix asterisk CORS_ALLOWED_ORIGINS, mentioned in #955 2026.04.13 Alex Shnitman 2026-04-13 19:02:27 +03:00
  • 210c607c53 fix pnpm build 2026.04.12 Alex Shnitman 2026-04-12 22:58:27 +03:00
  • 381896901a Bump softprops/action-gh-release from 2 to 3 in the github-actions group dependabot[bot] 2026-04-12 16:12:38 +00:00
  • 4330d3b6c6 fix yt-dlp options examples Alex Shnitman 2026-04-10 14:06:08 +03:00
  • 06c4a2c4a8 update documentation Alex Shnitman 2026-04-10 08:38:32 +03:00
  • 388aeb180d Merge branch 'bgervan/master' 2026.04.10 Alex Shnitman 2026-04-10 08:10:00 +03:00
  • aa60420ead document CORS_ALLOWED_ORIGINS variable Alex Shnitman 2026-04-10 08:09:20 +03:00
  • a6e8617ad8 Don't mark live streams as seen Benjamin Gervan 2026-04-10 06:41:45 +02:00
  • 0072d3488a Fix permissive CORS policy that allows cross-origin attacks az10b 2026-04-09 19:45:51 -05:00
  • 0b3645aea1 upgrade dependencies 2026.04.09 Alex Shnitman 2026-04-09 21:00:26 +03:00
  • 2c838e3d3d Merge branch 'dependabot/github_actions/github-actions-7530ffc9b9' of https://github.com/alexta69/metube into McSwindler/master Alex Shnitman 2026-04-09 20:59:13 +03:00
  • d38d7bd1b1 fix: handle playlists that don't supply video ids McSwindler 2026-04-09 10:15:11 -05:00
  • b7709d3536 Bump astral-sh/setup-uv from 6 to 7 in the github-actions group dependabot[bot] 2026-04-05 16:12:43 +00:00
  • 1f79883b75 Merge pull request #944 from jacinli/codex/fix-subscription-enabled-parsing 2026.04.05 Alex 2026-04-05 10:25:46 +03:00
  • 373692ac65 fix: parse string boolean values when updating subscriptions jacinli 2026-04-05 14:05:59 +08:00
  • 54680c405c explain yt-dlp configuration in detail Alex Shnitman 2026-04-04 12:54:59 +03:00
  • dd0f98d12f change option presets to be multi-select 2026.04.04 Alex Shnitman 2026-04-04 10:25:46 +03:00
  • d41bdf61e2 finalize custom options (closes #563, #482, #261, #681) 2026.04.03 Alex Shnitman 2026-04-03 13:17:55 +03:00
  • a02abf5853 Keep override controls on dedicated row copilot-swe-agent[bot] 2026-04-03 09:21:44 +00:00