Skip to content

OpenStreamGrid v0.5.0

Choose a tag to compare

View all tags
@mytrashcan mytrashcan released this 22 Jul 01:43
· 101 commits to main since this release
v0.5.0
379b75b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OpenStreamGrid 0.5.0 hardens the peer-assisted MPEG-TS HLS middleware for controlled production evaluation. Peer identity now uses signed, short-lived sessions, peer uploads are authenticated, and untrusted network inputs have explicit quotas and size limits. Origin fallback remains available throughout playback.

Highlights

  • Replaced browser-visible administrator credentials with signed, identity-scoped peer sessions that expire automatically.
  • Authenticated HTTP and WebRTC peer transfers and bounded REST, WebSocket, signaling, segment, and failure-report inputs.
  • Added upload concurrency and bandwidth enforcement, request coalescing, deadline-aware fallback, and bounded transport buffers.
  • Added origin restart backoff, immutable segment names, streaming SHA-256 sidecars, broadcast leases, and graceful registration cleanup.
  • Added transactional SQLite schema migrations, stronger constraints, incremental segment updates, and retained statistics rollups.
  • Corrected browser integrity accounting and urgent-segment routing while preserving WebRTC and HTTP Node-peer interoperability.
  • Aligned all packages and the Helm chart at 0.5.0 and wired deployment credentials through Kubernetes Secrets.

Upgrade notes

  • Configure a stable, random PEER_SESSION_SECRET of at least 32 bytes. Do not reuse TRACKER_API_KEY.
  • Peer REST calls now use Authorization: Bearer <token>; WebSocket upgrades use ?sessionToken=<token>.
  • Create the Kubernetes Secret referenced by tracker.auth.existingSecret before installing the Helm chart.
  • Keep the SQLite tracker at one replica unless a shared external store is introduced.
  • This release supports MPEG-TS HLS. LL-HLS and CMAF/fMP4 remain roadmap items.
  • Use HTTPS, WSS, and authenticated TURN for internet-facing deployments.

Distribution

  • Container images: ghcr.io/mytrashcan/openstreamgrid-{tracker,origin,peer}:v0.5.0
  • The browser SDK is build- and package-verified but is not yet published to npm.

Validation

  • Build, strict TypeScript checks, ESLint, and all 108 automated tests passed on Node.js 22.
  • Production and SDK dependency audits reported zero vulnerabilities.
  • Tracker, Origin, and Peer container publication completed successfully.

See the full release notes and changelog.

Assets 2
Loading