v1.30.6

🚀 Release v1.30.6

📝 Summary

This release resolves a critical Information Disclosure (IDOR) vulnerability within the stats subsystem by enforcing strict Role-Based Access Control (RBAC). It also introduces improved testing coverage for stream deletion edge cases and dependency updates to maintain system integrity.

🛠️ Key Improvements

• 🛡️ Security: Resolved IDOR in stats routing. Viewers with restrict_camera_access are now properly scoped and cannot leak global system metrics.
• 🚀 Testing: Improved the CI pipeline with environment production dependencies, edge case testing for go2rtc, and CRUD event coverage.
• 🎨 Maintenance: Updated dependencies including a bump to undici to patch upstream vulnerabilities and refactored internal functions for maintainability.

🙌 Contributors

• @spupuz: Refactoring of stats, notification services, and additional test coverage edge cases.
• @dependabot: Upstream dependency updates.