2.6.3-dev.19 (nightly)

Source: Vateron-Media/XC_VM@f671e87

Nightly build from main. Untested — for test servers only.

Changes since 007982aca93c

• Prepare release 2.6.3 (5c0a7f9e)
• test(gateway): give the live vectors test a STREAMS_PATH that exists (7b9198c1)
• fix(gateway): hand a fence MAIN commanded to PHP for its drain (ae452d5d)
• docs(gateway): ADR 0005, the LB plan and the operator notes (2487874d)
• fix(stream): check a catch-up segment's address before the viewer is heard (052737ad)
• feat(gateway): the segment gateway's policy, nginx wiring and shadow comparison (526fcc6e)
• fix(cluster): install an API-mode load balancer without MAIN's database (4d2ecdfd)
• style(admin): space out the Info tab sections (df5d9931)
• test(audit): create watch_refresh for the series delete test (44c33bd5)
• fix(logging): name the refusal counter by SHA-256, not md5 (e2b53d50)
• feat(admin): list the module store without a key, a page at a time (741f8c3a)
• feat(modules): install free store modules without an API key (18b9305f)
• feat(logging): log invalid stream ids and invalid credentials as client refusals (94c62648)
• chore(tools): name console.php by its full path after a restore (29c876db)
• feat(core): own the TMDb refresh queue and stop writing watch_folders (b9f65559)
• fix(migration): keep core tables of migrations out of the module files (efe36762)
• feat(dashboard): copy the HWID on the way to getting a verification key (e5b1acb4)
• feat(admin): drop the modules page's Uninstall action (cd1a9342)
• fix(install): fill the access code's alias and rate-limit zone (69707b9e)
• feat(migration): hand backup tables the core does not own to their modules (b0be9f5b)
• feat(modules): install no module by itself (8d011825)
• Prepare release 2.6.2 (8fb2ef47)
• feat(install): new panels start on the cluster API (04ed6100)
• docs(release): the compatibility code goes after 2.6.2, the next release (468b73d3)
• feat(cluster): count legacy /api calls, and let proxies close it (e7a4c8c6)
• feat(cluster): lay out Cluster Nodes like Manage Servers (b0a6486f)
• fix(update): start the ipset install as an argument list, not a shell command (c99c6e6b)
• feat(update): install ipset with the update, for the blocklist sets (28c7cf2c)
• fix(firewall): no weak hash and no command built from data in the ipset change (4bce9ea5)
• docs(cluster): record the blocks in ipset sets (be74398c)
• fix(diagnose): find MAIN's address in a node's ipset set, and say how to unblock it either way (071901fd)
• feat(install): install ipset on new servers (d298826e)
• feat(firewall): keep the panel's blocks in two ipset sets (7ede2fab)
• docs(cluster): record the load balancer alert and metrics, and the canary's fanout check (7f563e0d)
• ci: run XC_VM_Fanout's agent tests against this panel (4585c82e)
• chore(i18n): translate the cluster alert's title and the keys main added in English only (27ee65a4)
• feat(cluster): the release canary also needs its fanout daemon running (956a9811)
• feat(cluster): alert on load balancers that need attention, and export them in /metrics (1b2405ff)
• test(support): let several processes share one TestDb schema (4e192047)
• fix(cluster): queue nothing granting for a quarantined node (5a23c8ab)
• docs(cluster): record the large blocklist, the flushed one, quarantined commands and actions not sent (316e354f)
• feat(servers): say which servers an action did not reach (b89078f9)
• fix(cluster): reach a quarantined node with its kills, and leave nothing a node in mode 2 cannot read (85ea3d64)
• fix(cluster): sync a large blocklist in parts, and keep none past a flush (fe99b21f)
• chore: group .gitignore and ignore locally installed modules (02f64fdc)
• docs(cluster): record the closed MAIN-LB gaps and refresh the plan's markers (ef14d946)
• fix(install): create the stats and log indexes with the schema (73f1ca58)
• feat(cluster): show the release pin on the Cluster settings tab (57498f4c)
• fix(cluster): never queue a root action a node in mode 2 cannot take (3684e02e)
• feat(admin): rewrite the modules page around module status and the store (7e304f4c)
• feat(modules): list the official store's modules (edc3bfd6)
• feat(modules): run module actions as background jobs (aafaa849)
• refactor(modules): one update check for the cron and the modules page (a8fe5450)
• fix(modules): read config/modules.php fresh on every PHP-FPM master (ece6135d)
• feat(cluster): an RTMP viewer on a load balancer while MAIN cannot be reached (45841c95)
• test: name the covered class in full in every @Covers (73875dd1)
• chore(cluster): add the canary's lines apart from the other open pull requests' (acd5dcb6)
• docs(adr): this entry beside the others' insertion points (ae8156f3)
• docs(cluster): a load test on the test pair (4a7e67f9)
• fix(cluster): the watchdog keeps running on a node with TELEMETRY (2de06fda)
• test(settings): 24 cluster settings with Viewer Record Proof merged (3d9d5072)
• ci: write coverage in the one suite run instead of a second run (39b56074)
• fix(users): show last login and registration dates in the panel timezone (37f3a580)
• feat(cluster): set viewer record proof from the panel, and see when enforce is safe (7f2a27a8)
• docs(cluster): measure the command latency, and leave the SSE downlink (db9e13e5)
• fix(stream): place a load balancer's RTMP viewer with the Redis handler on (fcc7aa7d)
• feat(cluster): a fleet canary for the binaries every server takes from GitHub (c313133d)
• feat(cluster): MAIN moves a node that lost its own streams back to mode 1 (560378f0)
• feat(cluster): mode 2 with the Redis connection handler (366734dc)
• fix(cluster): an RTMP viewer that leaves a load balancer ends its record (5a13c551)
• test(cluster): run an RTMP viewer's mint from MAIN's answer to its record (1d2eba59)
• docs(adr): RTMP and Ministra tokens are read on MAIN alone (88e7de5c)
• docs(cluster): bring the MAIN-LB plan's build status up to date (fcf56bee)
• feat(cluster): close the data plane from the Cluster Nodes page (c9796dfc)
• fix(cluster): an RTMP viewer on a load balancer carries MAIN's mint proof (3384ef0d)
• test(settings): read API mode back with the cluster API on (cda346e4)
• test(cluster): prove a strip's late ack queues the credentials back (157f2796)
• fix(settings): refuse API mode for new nodes while the cluster API is off (f2710b54)
• fix(cluster): keep every connection MAIN closed under a uuid (9b0a8999)
• feat(cluster): let a load balancer serve RTMP viewers, their line checked by MAIN (dccf4468)
• docs(cluster): say how an LB's relayed streams move over to the data plane (1a349ee0)
• fix(cluster): send a node no stream password from the admin player (3a53f5aa)
• fix(cluster): close the two known gaps in MAIN's connection store (56aa22e0)
• fix(cluster): never lose a credential strip's outcome, nor strip below mode 2 (2572f41c)
• docs(cluster): bring the developer guide's limits up to date (3131b279)
• feat(cluster): let new load balancers join in mode 2 (728f1027)