Skip to content

v0.1.86

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Sep 21:14
· 42 commits to main since this release
v0.1.86
c9feeb4

IPTV Tunerr v0.1.86

Released: 2026-09-30

Compare: v0.1.85...v0.1.86

What Changed

Security / Dependencies

  • Guide diagnostics no longer accept caller-supplied alias file paths: /guide/health.json, /guide/doctor.json, and /guide/aliases.json now use the configured alias source, closing the CodeQL path-injection flow from query parameters to local file reads.
  • Web dependencies include security fixes: React Router is updated to 7.18.4 and the lockfile resolves nanoid to 3.3.19; npm audit reports zero vulnerabilities.

WebUI

  • TV Guide and channel auto-match read the tuner's actual XMLTV endpoint: both now request /guide.xml, which is the path served by the tuner.
  • Runtime channels are visible in the WebUI: a read-only Live lineup tab shows the lineup currently served to Jellyfin, while empty states explain that the M3U, EPG, and channel editors use separate WebUI database records and do not import .env runtime providers.

CI / Packaging

  • Chocolatey publishing uses actions/setup-dotnet@v6: the package workflow tracks the current .NET setup action release.
  • GitHub Actions use actions/setup-go@v7: Go workflows now use the current setup action release.
  • GitHub Actions use actions/checkout@v7: workflow checkouts are updated across the active CI and release workflows.
  • Chocolatey metadata now covers moderation feedback: the Chocolatey package template and publish workflow now set package owner, icon, package source, project source, docs, bug tracker, and release notes metadata, the install script points the explicit shim at the nested Windows executable path used by release ZIPs, and publishing now packs/pushes with .NET installed under runner temp on the existing Linux runner pool instead of waiting for an unavailable Windows runner. The workflow replaces the packed root nuspec with the exact Chocolatey nuspec so packageSourceUrl, projectSourceUrl, docsUrl, and bugTrackerUrl survive packaging. The Windows ZIP download uses a runner-temp asset directory plus timeout-bounded curl retries, and split Bash prepare/push steps use a unique runner-temp directory plus GitHub step timeouts so reused self-hosted workspaces cannot stall the publish. The tag guard is inline so older moderation tags can be republished even when their checked-out helper scripts predate ancestor-mode checks.
  • COPR publishing now attempts configured fallback auth after token expiry: the COPR workflow prepares Fedora GSSAPI fallback credentials even when token credentials are present, then retries COPR CLI calls with that fallback when COPR rejects the token as invalid or expired. The v0.1.85 COPR channel was restored by rotating the API token; the fallback remains available for future token-expiry recovery.
  • COPR SRPM publishing now uses the requested release version: the COPR workflow builds SRPMs in an isolated temporary RPM topdir, copies the expected iptvtunerr-${version}-1.src.rpm into a relative dist/ path, and uploads that explicit file instead of reusing persistent ~/rpmbuild state on the self-hosted runner.

Source: docs/CHANGELOG.md section for v0.1.86.

Included Commits

  • f5c79db Harden COPR release auth fallback (commit)
  • a2069ef Record v0.1.85 release closeout (commit)
  • 892e825 Fix COPR SRPM publishing (commit)
  • 4f6798e Record COPR release recovery (commit)
  • f09c6d5 Fix Chocolatey moderation metadata (commit)
  • f04abba Run Chocolatey publishing on Linux runners (commit)
  • 0e75c1f Install Chocolatey publish dotnet under runner temp (commit)
  • b5afab7 Make Chocolatey asset download noninteractive (commit)
  • 5c7aa4e Use curl for Chocolatey asset download (commit)
  • c6ebca5 Inline Chocolatey release tag guard (commit)
  • d71046f Preserve Chocolatey nuspec metadata (commit)
  • 35c2a89 Bound Chocolatey pack and push steps (commit)
  • 7563c02 Split Chocolatey pack and push workflow (commit)
  • a7b8c30 Record Chocolatey moderation update (commit)
  • ae54d00 Bump golang.org/x/crypto from 0.53.0 to 0.54.0 (commit)
  • e743c2e Bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 (#31) (commit)
  • cb539c2 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#32) (commit)
  • fbb47f3 Bump postcss from 8.5.15 to 8.5.25 in /web (#38) (commit)
  • 119e819 Bump react-router-dom from 6.30.4 to 6.30.6 in /web (#39) (commit)
  • 81b0c34 Bump github.com/hanwen/go-fuse/v2 from 2.10.1 to 2.11.0 (#36) (commit)
  • 9a0a223 Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 (#37) (commit)
  • 15345e5 Bump actions/checkout from 6 to 7 (#30) (commit)
  • bba32e3 Bump actions/setup-go from 6 to 7 (#34) (commit)
  • 1866c78 Bump actions/setup-dotnet from 5 to 6 (#35) (commit)
  • 43d295d fix(security): close guide path injection and update web deps (commit)
  • 1357599 fix(webui): expose runtime lineup and restore guide data (commit)
  • 2f41cec docs(release): prepare v0.1.86 (commit)
  • c9feeb4 docs(memory): preserve release history constraint (commit)

Release Assets

  • iptv-tunerr-v0.1.86-darwin-amd64 - 22.3 MiB, SHA256 9d1e02cbdc679ee9582127a9aea207c712c7254af82c038ccfa556b43b056ddf
  • iptv-tunerr-v0.1.86-darwin-amd64.tar.gz - 8.7 MiB, SHA256 bc32eb03c05f522d6c169c4da5a4880c7869d7d439f2ce406686b6bf0119b109
  • iptv-tunerr-v0.1.86-darwin-arm64 - 21.1 MiB, SHA256 5fb613fc613d7fe2141be15c7058c9ecc1f325393becb8a6fc9aca6191e25f40
  • iptv-tunerr-v0.1.86-darwin-arm64.tar.gz - 8.2 MiB, SHA256 9d958331791f901c3434b7c0dca4301f40536f8d7ac800bb8c6403eca2eedd80
  • iptv-tunerr-v0.1.86-linux-amd64 - 22.5 MiB, SHA256 f513c8461380443ec38d57e20901fc384d9a3e23243f5f917fe8d47c5f5377ea
  • iptv-tunerr-v0.1.86-linux-amd64.tar.gz - 8.8 MiB, SHA256 2f1e25214eb24b0e69fe3d7b39279daae7d7110586215a9b0267b12878b64e2f
  • iptv-tunerr-v0.1.86-linux-arm64 - 21.1 MiB, SHA256 a6e5b15f8d9858b3768d9cb9fd033e2205267bc4970e51d90a8d5b775e3e8d12
  • iptv-tunerr-v0.1.86-linux-arm64.tar.gz - 8.1 MiB, SHA256 a723b4b26bf9d5f9c0fba86ee9649450f4d2d625e28fda6b4d703556f39673cf
  • iptv-tunerr-v0.1.86-linux-armv7 - 21.6 MiB, SHA256 9bfda61e83c95db42651c3e883dd66e5729e97a7c950d48aa8583d15bd3f5cf2
  • iptv-tunerr-v0.1.86-linux-armv7.tar.gz - 8.3 MiB, SHA256 d47ddc6188ee0beb1c3bc9e95f04f329696cdc5cdee2e39f42c9e2a60b4b45f9
  • iptv-tunerr-v0.1.86-windows-amd64.exe - 22.4 MiB, SHA256 12322b4dfe9507abc6f5254ea25fe75c1801ee0e77d3db01dc641cd31aec97f2
  • iptv-tunerr-v0.1.86-windows-amd64.zip - 8.8 MiB, SHA256 311ba182d539f32fc7b8a0214d2a8255c64da9beb02aa5f52a970710df22859d
  • iptv-tunerr-v0.1.86-windows-arm64.exe - 20.7 MiB, SHA256 a38440faea40745778e5bd5d054589cf16d4b0efaa1227dc7838d224dbc0aa70
  • iptv-tunerr-v0.1.86-windows-arm64.zip - 7.9 MiB, SHA256 4739930d35ce4e8c7de52fbeab8f569e7dd99edc62e6f05158cc2084dfc2cec8
  • iptvtunerr-0.1.86-1.x86_64.rpm - 7.2 MiB, SHA256 e5bf0cb689b1c8e01dd4e634051517c64f9797db5908ea9164feafe615cdff55
  • iptvtunerr_0.1.86_amd64.deb - 6.7 MiB, SHA256 b1d2b451b39c55d055adfc7bde90faed625fdf1e59c6769d901c064cc5dbb55a

Install Notes

  • Linux and macOS include raw executable assets plus .tar.gz bundles.
  • Windows includes raw .exe assets plus .zip bundles for package managers.
  • Verify downloads with SHA256SUMS.txt before installing on shared hosts.
Assets 20
Loading