m3ue/m3u-editor v0.10.35

on GitHub

What's Changed

New Features

• Channel Scrubber: Introduced a new "Scrubber" task to scan channels for dead links and automatically disable them, including a dedicated model for managing disabled channels. (9def51b, 4ea5cd4)
• Native OIDC Authentication: Added OpenID Connect (OIDC) support, including a new is_admin column to decouple admin status from email addresses and an option to hide the local login form. (8aee793, 6e8a62f)
• Plex DVR & Server Management: Added Plex server management to media server integrations and transitioned DVR syncing to a more efficient event-driven architecture. (a695e45, 1b7220c, 86c230e)
• Xtream Fallback URLs: Added support for defining multiple DNS and fallback URLs for Xtream playlists to improve connection reliability. (3b395b2)
• Two-Row Tab System: Implemented a new tabbed navigation system for Channels, VOD, and Series list pages for better organization. (f42774c)
• Enhanced M3U Output: Added TMDB IDs to M3U output for both channels and episodes to improve metadata matching in external players. (0264a71)
• Expanded Permissions: Added release logs and the channel scrubber to the user permission set. (d635549)

Fixes

• Security & Hardening:
  • Patched an XSS vulnerability by escaping raw HTML in release log markdown. (a11b25d)
  • Added rate limiting to unauthenticated sync endpoints and enforced user ownership in channel ID validation. (9bd8990, 9b6429f)
  • Updated libraries to resolve CVE-2026-33347. (cdeb728)
• Sync & Reliability:
  • Added a cooldown period for failed playlist/EPG retries to prevent CPU runaway. (71af4a5)
  • Fixed issues where TMDB metadata would spuriously create groups or categories. (952a000)
  • Resolved "An invalid form control is not focusable" errors in certain browsers on the settings page. (2ca8997)
• Player & UI:
  • Fixed in-app player transcode profile logic and resolved CORS errors by utilizing relative URLs. (ad1274b, 0755464)
  • Resolved layout-breaking issues with network integration links and top navigation on the backups page. (bcc5e9a, eb89bc6)
  • Fixed floating player extension handling for VOD content. (9ee6273)

Technical Improvements

• Major Framework Upgrades: Upgraded the core to Laravel 13, Filament v5, and Livewire v4. (3e70684, 48b5f08)
• Database Optimization: Added performance indexes for Postgres and utilized eager loading to eliminate N+1 query issues in the episodes and stats tables. (ff0f54f, 021fd0a, f1ffba3)
• Payload Reduction: Reduced Livewire table payload sizes via gzip compression and renderless updates. (5a97f79)
• Timezone Consistency: Synced PostgreSQL session timezones with the application timezone for accurate scheduling. (c607a31)
• SSRF Protection: Added an SSRF bypass option specifically for local installations. (b025ed9)

Cleanup & Refactoring

• UI/UX Polishing:
  • Updated modal action groups and moved long bulk actions into a more manageable flyout menu. (944e88c)
  • Added "opens in new tab" indicators to relevant links and cleaned up tools navigation. (7936095, c946530)
• Code Maintenance:
  • Aligned supervisor timeouts with queue worker settings for better job stability. (6f60640)
  • Standardized log lists to prioritize Laravel logs and removed deprecated model properties. (78abcf7, d44f1d8)
  • Refined alpha-sorting to be case-insensitive for consistent output. (2d6d2c3)

Full Changelog: 0.10.23...v0.10.35