Jellyfin 12.0 (.NET 10) beta 5.0.0-JF12-beta (plugin version 5.0.0.51).
Install via the beta repository URL (a Jellyfin 12.0 server picks this build automatically by targetAbi):
https://raw.githubusercontent.com/Flowfin/jellyfin-plugin-sso/manifest-beta/manifest.json
Scope note (#743): the JF12/5.0 line is not validated against a live Jellyfin 12.0 server yet - no 12.0 GA server exists to run the E2E checklist against. It is CI-built and unit/conformance-tested only, and it is NOT part of the 4.x (Jellyfin 10.11) release-candidate gate; the 5.0 line clears its own live-validation gate when a Jellyfin 12.0 RC/GA build is available. Use these betas for testing, not production.
What's Changed
- Split the conformance rules into one file per policed surface by @iderex in #1347
- Read both discovery flags through a lookup that cannot throw by @iderex in #1348
- Recognise the managed login-button region by its stable token by @iderex in #1350
- Prove the id_token never becomes the caller's credential by @iderex in #1352
- Ask the login path what refuses an algorithm substitution by @iderex in #1353
- Enforce the account-expiry deadline at login by @iderex in #1355
- Answer the logout events check instead of throwing out of it by @iderex in #1360
- Give the OIDC round-trip scaffolding one home by @iderex in #1361
- The alert says what failed, once, and closes itself when it stops by @iderex in #1358
- Bump the codeql-action group with 3 updates by @dependabot[bot] in #1345
- Bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @dependabot[bot] in #1346
- Enforce the account-expiry deadline between logins with a sweep by @iderex in #1363
- Apply a per-provider policy template once at first provisioning by @iderex in #1364
Full Changelog: 4.3.0-beta.34...5.0.0-JF12-beta.51