Repository navigation
Conversation
Bundles green Dependabot bumps for staging: setup-go v7, logrus 1.9.4, grpc 1.82.1, modernc.org/sqlite 1.54.0, grpcio 1.82.1, yt-dlp 2026.7.4. Skips protobuf 5→7 (#598) pending codegen regeneration.
Adds structured FFmpeg download progress for live/VOD, tick Active Downloads summaries, and configurable log destinations (file/stdout/both) with file-primary defaults. Fixes #577.
Bundles green Dependabot bumps for staging, including the protobuf 7 upgrade with regenerated stubs (#614).
Bundle CI-green patch/minor bumps from Dependabot into staging: Python curl-cffi, grpcio, protobuf, and yt-dlp; Go grpc, logrus, and modernc.org/sqlite; GitHub Actions codeql-action and login-action. Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Bumps [curl-cffi](https://github.com/lexiforest/curl_cffi) from 0.16.2 to 0.16.3. - [Release notes](https://github.com/lexiforest/curl_cffi/releases) - [Changelog](https://github.com/lexiforest/curl_cffi/blob/main/docs/changelog.rst) - [Commits](lexiforest/curl_cffi@v0.16.2...v0.16.3) --- updated-dependencies: - dependency-name: curl-cffi dependency-version: 0.16.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [grpcio](https://github.com/grpc/grpc) from 1.83.1 to 1.84.0. - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](grpc/grpc@v1.83.1...v1.84.0) --- updated-dependencies: - dependency-name: grpcio dependency-version: 1.84.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.57.0 to 1.59.0. - [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.57.0...v1.59.0) --- updated-dependencies: - dependency-name: modernc.org/sqlite dependency-version: 1.59.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [streamlink](https://github.com/streamlink/streamlink) from 8.5.0 to 8.6.1. - [Release notes](https://github.com/streamlink/streamlink/releases) - [Changelog](https://github.com/streamlink/streamlink/blob/master/CHANGELOG.md) - [Commits](streamlink/streamlink@8.5.0...8.6.1) --- updated-dependencies: - dependency-name: streamlink dependency-version: 8.6.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 7.36.1 to 7.36.2. - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) --- updated-dependencies: - dependency-name: protobuf dependency-version: 7.36.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.2 to 1.84.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.2...v1.84.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.84.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.9 to 4.38.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.37.9...v4.38.1) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…staging/github/codeql-action-4.38.1 chore 🤖(deps): bump github/codeql-action from 4.37.9 to 4.38.1
…ing/google.golang.org/grpc-1.84.0 chore 🤖(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0
…ing/modernc.org/sqlite-1.59.0 chore 🤖(deps): bump modernc.org/sqlite from 1.57.0 to 1.59.0
…obuf-7.36.2 chore 🤖(deps): bump protobuf from 7.36.1 to 7.36.2
…-cffi-0.16.3 chore 🤖(deps): bump curl-cffi from 0.16.2 to 0.16.3
…io-1.84.0 chore 🤖(deps): bump grpcio from 1.83.1 to 1.84.0
…amlink-8.6.1 chore 🤖(deps): bump streamlink from 8.5.0 to 8.6.1
Bumps [streamlink](https://github.com/streamlink/streamlink) from 8.6.1 to 8.6.2. - [Release notes](https://github.com/streamlink/streamlink/releases) - [Changelog](https://github.com/streamlink/streamlink/blob/master/CHANGELOG.md) - [Commits](streamlink/streamlink@8.6.1...8.6.2) --- updated-dependencies: - dependency-name: streamlink dependency-version: 8.6.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.38.1 to 4.38.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.38.1...v4.38.3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…amlink-8.6.2 chore 🤖(deps): bump streamlink from 8.6.1 to 8.6.2
…staging/github/codeql-action-4.38.3 chore 🤖(deps): bump github/codeql-action from 4.38.1 to 4.38.3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.38.3 to 4.39.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.38.3...v4.39.0) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
yt-dlp wraps streamlink's _PERCENT_RE override and forwards attributes via __getattribute__, bypassing streamlink's __getattr__ passthrough. urllib3 2.8 calls _PERCENT_RE.sub, so Twitch GQL requests failed with "'Urllib3UtilUrlPercentReOverride' object has no attribute 'sub'". Point yt-dlp's wrapper directly at the original regex.
streamlink <=8.6.0 installs the override class rather than an instance, so read _re_percent_encoding from yt-dlp's wrapped value directly instead of from its type.
fix: unwrap yt-dlp/streamlink urllib3 _PERCENT_RE override clash
…staging/github/codeql-action-4.39.0 chore 🤖(deps): bump github/codeql-action from 4.38.3 to 4.39.0
…-e1cd docs: opt-in Intel /dev/dri passthrough for Quick Sync hosts
- certifi 2024.8.30 -> 2026.10.23 (GHSA-6q48-6c7w-9gw2, critical) - urllib3 2.7.0 -> 2.8.0 (GHSA-vxq7-64xx-v4gw, GHSA-gh4c-6fx4-qh6g) - black <25.0 pin lifted to >=26.3.1 (GHSA-3936-cmfr-pm3m), dev only - yt-dlp 2026.8.19 -> 2026.10.21 so the frozen image doesn't regress - Dependabot: include transitive uv deps so fixes like certifi/urllib3 get version-update PRs against staging - Dockerfile.server: copy uv.lock and `uv sync --frozen --no-dev` so the image uses locked versions instead of re-resolving, and drops dev tools
fix(deps): patch open security alerts on staging
|
Warning Review limit reachedYou've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Next included review available in 19 minutes. View limit details
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Promotes staging to master (31 commits, fast-forward with no conflicts).
Highlights
GetStreamfailing with'Urllib3UtilUrlPercentReOverride' object has no attribute 'sub'. This was a clash between yt-dlp's and streamlink's urllib3 patches under urllib3 2.8 (fix: unwrap yt-dlp/streamlink urllib3 _PERCENT_RE override clash #666).uv.lock(uv sync --frozen --no-dev) and no longer ships dev tooling (fix(deps): patch open security alerts on staging #667)./dev/dripassthrough for Quick Sync hosts (docs: opt-in Intel /dev/dri passthrough for Quick Sync hosts #613). Fixes feat(qsv): document and expose Intel /dev/dri device passthrough #610.Once merged, Dependabot should auto-close the security-update PRs against master (#665, #661, #657, #646, #618, #616).
🤖 Generated with Claude Code