2026-10-27 - 2026-11-03
Overview
3 Pull requests merged by 1 user
Merged
#933 fix(931): a missing semgrep fails the security-scan release gate
Merged
#938 fix(935): script-tests jq tripwire accepts {1.6, 1.7} until server-management#1080
Merged
#930 docs(release): record the v26.16.0 release notes
2 Pull requests proposed by 1 user
Proposed
#934 fix(929): pin Pkcs 9.0.21; hold ImageSharp 3.1.12 with TIFF decoding disabled
Proposed
#939 fix(913): scripted playout callbacks authenticate with a build-scoped token
2 Issues closed from 1 user
Closed
#931 security-scan.sh: a missing semgrep must FAIL the release gate, not WARN + exit 0 (and correct the ci-cd.md cause line)
Closed
#935 script-tests jq tripwire: runner fleet now ships jq 1.7; re-pin --expect and update the jq contract
5 Issues created by 1 user
Opened
#931 security-scan.sh: a missing semgrep must FAIL the release gate, not WARN + exit 0 (and correct the ci-cd.md cause line)
Opened
#932 Jellyfin episodes still present in Jellyfin are flagged FileNotFound and never restored (7675 items, 1557 upcoming playout items on 28 channels)
Opened
#935 script-tests jq tripwire: runner fleet now ships jq 1.7; re-pin --expect and update the jq contract
Opened
#936 ImageSharp 4.x: decide on a Six Labors license key, then upgrade off the 3.1.12 hold
Opened
#937 Scripted playout: entrypoint.py exits 0 after an API error, so a failed build reports success
8 Unresolved Conversations
Open
#22
Dependency Dashboard
Open
#761
chore(deps): update dependency meziantou.analyzer to 3.0.317
Open
#923
chore(deps): update dependency sixlabors.imagesharp to 3.2.0 [security]
Open
#929
Vulnerable packages at v26.16.0: System.Security.Cryptography.Pkcs 9.0.4 (High, transitive) and ImageSharp 3.1.12 (Moderate)
Open
#913
Scripted playout build almost certainly 401s: ScriptedScheduleController is under the global API auth filter and the script is handed no credential
Open
#927
Media-server scanners record the etag even when the statistics read fails, leaving the item stream-less until a deep scan
Open
#926
Normalize UTF-8 BOMs out of all .cs files in one commit + guard against reintroduction
Open
#925
Detect unplayable media (no video stream) at scan/playout-build time, not at tune-in