github Flowfin/jellyfin-plugin-sso 5.0.0-JF12-beta.39
5.0.0-JF12-beta

pre-releaseone month ago

Jellyfin 12.0 (.NET 10) beta 5.0.0-JF12-beta (plugin version 5.0.0.39).
Install via the beta repository URL (a Jellyfin 12.0 server picks this build automatically by targetAbi):
https://raw.githubusercontent.com/iderex/jellyfin-plugin-sso/manifest-beta/manifest.json

Scope note (#743): the JF12/5.0 line is not validated against a live Jellyfin 12.0 server yet - no 12.0 GA server exists to run the E2E checklist against. It is CI-built and unit/conformance-tested only, and it is NOT part of the 4.x (Jellyfin 10.11) release-candidate gate; the 5.0 line clears its own live-validation gate when a Jellyfin 12.0 RC/GA build is available. Use these betas for testing, not production.

What's Changed

  • The em dash leaves the source and the infrastructure, and one marker literal stays [#1202] by @iderex in #1203
  • Refuse a provider response that names a JSON member twice, before the library resolves it by @iderex in #1065
  • Run the wiki lint on every push to main [#1151] by @iderex in #1206
  • Allow an OIDC provider on a private network, per provider and opt-in [#1058] by @teekennedy in #1205
  • Derive the failure alert's watched set instead of listing it by @iderex in #1208
  • Bound the post-logout return URL at a path segment boundary by @iderex in #1209
  • Prove the SAML Recipient and Destination binding refuses near misses [#1182] by @iderex in #1211
  • Stop two workflow headers asserting a required-check set they get wrong by @iderex in #1213
  • Declare the solution file's line endings in .gitattributes [#1080] by @iderex in #1212
  • Express the comment-exclusion rule once in the conformance tests [#1124] by @iderex in #1215
  • Localize the three unsubstituted template placeholders in the config page by @iderex in #1216
  • Seed the discovery and idtoken fuzz corpora with repeated property names by @iderex in #1217
  • Read the call-site presence scan off code lines, not raw file text [#1122] by @iderex in #1219
  • Freeze the OpenID signature-algorithm allowlist [#1190] by @iderex in #1220
  • Refuse a token-header kid outside the unreserved set before key lookup by @iderex in #1221
  • Make the documented Prettier command honest on a Windows checkout [#1066] by @iderex in #1222
  • Classify why the role-claim walk produced no roles by @iderex in #1223
  • Record that the OIDC redirect_uri builder only emits, never compares [#1180] by @iderex in #1224
  • Resolve wiki source links against the git index, not the filesystem [#1152] by @iderex in #1225

New Contributors

Full Changelog: 4.3.0-beta.24...5.0.0-JF12-beta.39

Don't miss a new jellyfin-plugin-sso release

NewReleases is sending notifications on new releases.