iv-org/invidious v2.20261022.0

Release v2.20261022.0

on GitHub

Wrap-up

This release focuses on cleaning up HTTP behaviour, updating the toolchain, and tightening project policies. Image responses no longer include a fake Content-Length header on error statuses, and requests to ytimg.com now send a proper User-Agent. Video IDs are also validated against a regular expression, so malformed IDs are rejected earlier.

For instance owners and developers, the project now builds with Crystal 1.22.0 and prints a clear message when an unsupported version is detected. OCI images have been updated to OpenSSL 3.6.5, and Nix packaging was refreshed with multiple nixpkgs bumps. The codebase was adapted to Ameba 1.7.0, and several CI dependencies were updated.

Finally, the project adopted and refined a policy banning the use of AI to write to or address another human.

New features & important changes

For Users

• Video IDs are now sanity-checked with a regex, rejecting malformed IDs earlier (#6037)
• Updated translations from Hosted Weblate (#5919)

For instance owners

• Building from source now requires Crystal 1.22.0; an explicit compile-time error is shown for unsupported versions (#6083, #5909)
• OCI images now use OpenSSL 3.6.5 (#6080)
• Nix packaging was updated to newer nixpkgs snapshots (#5907, #5939, #5968, #5997, #6006, #6028, #6064, #6078)

For developers

• Updated to Ameba 1.7.0 and adapted the codebase; spectator was also bumped (#6082, #6047)
• Lint/UselessAssign now covers /api routes (#5900)
• Removed an unused locale argument from #get_about_info (#5902)
• Updated headers sent to innertube in JSON requests (#6040)
• CI no longer builds OpenSSL tests and apps (#5897)
• Various CI dependency updates (#6077, #5996, #5938, #5937)
• Added a maintainer as assignee for Dependabot PRs (#5972)
• Use full URL for the mocks git submodule (#6066)
• Added and refined the policy banning AI use for writing or addressing another human (#5904, #5930)

Bugs fixed

For Users

• Removed fake Content-Length header for non-2xx image responses (#6062)
• Added a User-Agent header for ytimg.com requests (#6038)

For developers

• Fixed the stale bot incorrectly claiming it would close PRs in 30 days (#6044)