Skip to content

Release: promote staging to master - #668

Merged
biodrone merged 31 commits into
masterfrom
staging
Oct 25, 2026
Merged

biodrone merged 31 commits into
masterfrom
staging

Conversation

@biodrone

Copy link
Copy Markdown
Collaborator

Promotes staging to master (31 commits, fast-forward with no conflicts).

Highlights

Once merged, Dependabot should auto-close the security-update PRs against master (#665, #661, #657, #646, #618, #616).

🤖 Generated with Claude Code

biodrone and others added 30 commits July 18, 2026 07:10
Bundles green Dependabot bumps for staging:
setup-go v7, logrus 1.9.4, grpc 1.82.1, modernc.org/sqlite 1.54.0,
grpcio 1.82.1, yt-dlp 2026.7.4.

Skips protobuf 5→7 (#598) pending codegen regeneration.
Adds structured FFmpeg download progress for live/VOD, tick Active
Downloads summaries, and configurable log destinations (file/stdout/both)
with file-primary defaults.

Fixes #577.
Document commented devices/group_add on the client compose example and
README host setup. Clarify that static FFmpeg still cannot use QSV until
the optional image work in #611. Fixes #610.

Co-authored-by: Josh J <josh@joshjacobs.net>
Bundles green Dependabot bumps for staging, including the protobuf 7 upgrade with regenerated stubs (#614).
Bundle CI-green patch/minor bumps from Dependabot into staging:
Python curl-cffi, grpcio, protobuf, and yt-dlp; Go grpc, logrus,
and modernc.org/sqlite; GitHub Actions codeql-action and login-action.

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Bumps [curl-cffi](https://github.com/lexiforest/curl_cffi) from 0.16.2 to 0.16.3.
- [Release notes](https://github.com/lexiforest/curl_cffi/releases)
- [Changelog](https://github.com/lexiforest/curl_cffi/blob/main/docs/changelog.rst)
- [Commits](lexiforest/curl_cffi@v0.16.2...v0.16.3)

---
updated-dependencies:
- dependency-name: curl-cffi
  dependency-version: 0.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [grpcio](https://github.com/grpc/grpc) from 1.83.1 to 1.84.0.
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.83.1...v1.84.0)

---
updated-dependencies:
- dependency-name: grpcio
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.57.0 to 1.59.0.
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.57.0...v1.59.0)

---
updated-dependencies:
- dependency-name: modernc.org/sqlite
  dependency-version: 1.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [streamlink](https://github.com/streamlink/streamlink) from 8.5.0 to 8.6.1.
- [Release notes](https://github.com/streamlink/streamlink/releases)
- [Changelog](https://github.com/streamlink/streamlink/blob/master/CHANGELOG.md)
- [Commits](streamlink/streamlink@8.5.0...8.6.1)

---
updated-dependencies:
- dependency-name: streamlink
  dependency-version: 8.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 7.36.1 to 7.36.2.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-version: 7.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.2 to 1.84.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.9 to 4.38.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.9...v4.38.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…staging/github/codeql-action-4.38.1

chore 🤖(deps): bump github/codeql-action from 4.37.9 to 4.38.1
…ing/google.golang.org/grpc-1.84.0

chore 🤖(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0
…ing/modernc.org/sqlite-1.59.0

chore 🤖(deps): bump modernc.org/sqlite from 1.57.0 to 1.59.0
…obuf-7.36.2

chore 🤖(deps): bump protobuf from 7.36.1 to 7.36.2
…-cffi-0.16.3

chore 🤖(deps): bump curl-cffi from 0.16.2 to 0.16.3
…io-1.84.0

chore 🤖(deps): bump grpcio from 1.83.1 to 1.84.0
…amlink-8.6.1

chore 🤖(deps): bump streamlink from 8.5.0 to 8.6.1
Bumps [streamlink](https://github.com/streamlink/streamlink) from 8.6.1 to 8.6.2.
- [Release notes](https://github.com/streamlink/streamlink/releases)
- [Changelog](https://github.com/streamlink/streamlink/blob/master/CHANGELOG.md)
- [Commits](streamlink/streamlink@8.6.1...8.6.2)

---
updated-dependencies:
- dependency-name: streamlink
  dependency-version: 8.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.38.1 to 4.38.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.38.1...v4.38.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…amlink-8.6.2

chore 🤖(deps): bump streamlink from 8.6.1 to 8.6.2
…staging/github/codeql-action-4.38.3

chore 🤖(deps): bump github/codeql-action from 4.38.1 to 4.38.3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.38.3 to 4.39.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.38.3...v4.39.0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
yt-dlp wraps streamlink's _PERCENT_RE override and forwards attributes via
__getattribute__, bypassing streamlink's __getattr__ passthrough. urllib3 2.8
calls _PERCENT_RE.sub, so Twitch GQL requests failed with
"'Urllib3UtilUrlPercentReOverride' object has no attribute 'sub'".
Point yt-dlp's wrapper directly at the original regex.
streamlink <=8.6.0 installs the override class rather than an instance, so
read _re_percent_encoding from yt-dlp's wrapped value directly instead of
from its type.
fix: unwrap yt-dlp/streamlink urllib3 _PERCENT_RE override clash
…staging/github/codeql-action-4.39.0

chore 🤖(deps): bump github/codeql-action from 4.38.3 to 4.39.0
…-e1cd

docs: opt-in Intel /dev/dri passthrough for Quick Sync hosts
- certifi 2024.8.30 -> 2026.10.23 (GHSA-6q48-6c7w-9gw2, critical)
- urllib3 2.7.0 -> 2.8.0 (GHSA-vxq7-64xx-v4gw, GHSA-gh4c-6fx4-qh6g)
- black <25.0 pin lifted to >=26.3.1 (GHSA-3936-cmfr-pm3m), dev only
- yt-dlp 2026.8.19 -> 2026.10.21 so the frozen image doesn't regress
- Dependabot: include transitive uv deps so fixes like certifi/urllib3
  get version-update PRs against staging
- Dockerfile.server: copy uv.lock and `uv sync --frozen --no-dev` so the
  image uses locked versions instead of re-resolving, and drops dev tools
fix(deps): patch open security alerts on staging
@coderabbitai

coderabbitai Bot commented Oct 25, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 19 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration
Commits

Reviewing files that changed from the base of the PR and between ee2c71a and bd706b1.

Files ignored due to path filters: 4
  • go.sum is excluded by !**/*.sum
  • stream_pb2.py is excluded by !stream_pb2.py
  • stream_pb2_grpc.py is excluded by !stream_pb2_grpc.py
  • uv.lock is excluded by !**/*.lock
Files selected for processing: 20
  • .env.example
  • .github/dependabot.yml
  • .github/workflows/deploy_master.yml
  • .github/workflows/deploy_staging.yml
  • .github/workflows/test.yml
  • Dockerfile.server
  • README.md
  • docker-compose.yml.example
  • download_stream.go
  • go.mod
  • logging.go
  • logging_test.go
  • progress.go
  • progress_test.go
  • protos/stream_pb2.py
  • protos/stream_pb2_grpc.py
  • pyproject.toml
  • streamdl.go
  • streamdl_client_entrypoint.sh
  • streamdl_proto_srv.py
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@biodrone
biodrone merged commit 5482586 into master Oct 25, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat(qsv): document and expose Intel /dev/dri device passthrough

2 participants