chore(deps): update dependency jellyfin.controller to v10.8.13

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Jellyfin.Controller	10.8.0 -> 10.8.13

---

Release Notes

jellyfin/jellyfin (Jellyfin.Controller)

v10.8.13: 10.8.13

Jellyfin 10.8.13

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

• NOTICE: The customizable FFmpeg binary path in the WebUI/API has been REMOVED for security reasons. Please see the corresponding blog post here for further details.

This bugfix release contains two GHSA security fixes; the details of these vulnerabilities will be released publicly on December 5th 2023. Please ensure you update your systems as soon as possible. Credit to @​Kwstubbs (of GitHub Security Labs), @​FredericLinn, and @​mawalu for finding these.

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [3]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

• #​10625 [@​ilovepilav] Fix: Plugin Installed Alerts missing from Admin Dashboard #​10620
• GHSA-rr9h-w522-cvmr [@​joshuaboniface] Remove the functionality of /System/MediaEncoder/Path
• GHSA-866x-wj5j-2vf4 [@​crobibero] Validate codec and container

jellyfin-web [3]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

• jellyfin/jellyfin-web#5019 [@​joshuaboniface] Set FFmpeg path disabled
• jellyfin/jellyfin-web#4993 [@​rafma0] Remove FLAC Audio in Video Support for Tizen (Backport #​4938)
• jellyfin/jellyfin-web#4992 [@​rafma0] Fix jittering in emby-checkbox (Backport #​4929)

v10.8.12: 10.8.12

Jellyfin 10.8.12

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [5]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

• #​10528 [@​nyanmisaka] Fix mismatched intel VAAPI UMD/KMD - Backport #​10451
• ~~#​10514 [@​Bond-009] Update SkiaSharp (v2.88.6) and BlurHashSharp (v1.3.1)~~ Reverted due to SEGV on access
• #​10487 [@​thornbill] Fix scaleFactor limit - Backport #​9738
• #​10454 [@​Shadowghost] Add MALLOC_TRIM_THRESHOLD_ to default ENV
• #​10406 [@​thornbill] Fix playlist listings

jellyfin-web [6]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

• jellyfin/jellyfin-web#4912 [@​dmitrylyzo] Fix imports
• jellyfin/jellyfin-web#4893 [@​thornbill] Change Subtitle Sync slider to go from -300 to 300 - Backport jellyfin/jellyfin-web#4754
• jellyfin/jellyfin-web#4892 [@​thornbill] Fix language/subtitle switcher when using gamepad - Backport jellyfin/jellyfin-web#4860
• jellyfin/jellyfin-web#4837 [@​dmitrylyzo] Fix playing empty item set
• jellyfin/jellyfin-web#4813 [@​dmitrylyzo] Handle pressing Enter to finish keyboard dragging of slider (Backport jellyfin/jellyfin-web#4805)
• jellyfin/jellyfin-web#4797 [@​Mauroq] Remove H264 10bit support on Samsung TV (Tizen)

v10.8.11: 10.8.11

Jellyfin 10.8.11

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [6]

Note: Dependabot automatic PRs are excluded from this list.

• #​9952 [@​Bond-009] Backport fix for #​9503
• #​9928 [@​nyanmisaka] Disable global_header on AMD VA-API encoder
• #​9916 [@​Bond-009] Don't ignore parentId for playlists (backport #​9909)
• #​9723 [@​dmitrylyzo] Fix multiple codec checking in CodecProfiles conditions
• #​10265 [@​Shadowghost] Backport #​10173
• #​10151 [@​nyanmisaka] Fix performance loss of QSV HDR tone-mapping on Windows

jellyfin-web [14]

Note: Dependabot automatic PRs are excluded from this list.

• jellyfin/jellyfin-web#4758 [@​dmitrylyzo] Fix slider step
• jellyfin/jellyfin-web#4757 [@​dmitrylyzo] Remove Dolby Vision support on Samsung TV (Tizen)
• jellyfin/jellyfin-web#4709 [@​thornbill] Fix scheduled task time limit key
• jellyfin/jellyfin-web#4688 [@​dmitrylyzo] Disable ALAC on MacOS in non-Safari browsers
• jellyfin/jellyfin-web#4685 [@​hurani] Backport pull request #​4171 to release 10.8.z
• jellyfin/jellyfin-web#4657 [@​thornbill] Fix xss in custom subtitles element
• jellyfin/jellyfin-web#4654 [@​joshuaboniface] Add confirmation for 3rd party repos
• jellyfin/jellyfin-web#4632 [@​dmitrylyzo] Improve keyboard control
• jellyfin/jellyfin-web#4628 [@​dmitrylyzo] Fix initial state of volume slider
• jellyfin/jellyfin-web#4627 [@​dmitrylyzo] Fix overlap of slider bubble
• jellyfin/jellyfin-web#4591 [@​thornbill] Fix QuickConnect code not displaying in Spanish
• jellyfin/jellyfin-web#4589 [@​thornbill] Fix xss in api key page
• jellyfin/jellyfin-web#4561 [@​dmitrylyzo] Fix bottom video controls don't auto-hide
• jellyfin/jellyfin-web#4553 [@​dmitrylyzo] Unhide PlayNextEpisodeAutomatically on TV

v10.8.4: 10.8.4

Jellyfin 10.8.4

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [6]

Note: Dependabot automatic PRs are excluded from this list.

• #​8257 [@​joshuaboniface] Use separate args for dotnet publish commands
• #​8234 [@​crobibero] update to dotnet 6.0.8
• #​8219 [@​nyanmisaka] Move Fedora service hardening options to override config
• #​8212 [@​SenorSmartyPants] Add resolution text for 384 sized video
• #​8209 [@​Shadowghost] Fix series query including missing episodes when it should not
• #​8182 [@​Shadowghost] Extract external subs from container before determining characterset

jellyfin-web [1]

Note: Dependabot automatic PRs are excluded from this list.

• jellyfin/jellyfin-web#3789 [@​thornbill] Fix XSS in card aria labels

v10.8.3: 10.8.3

Jellyfin 10.8.3

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

• This version is identical to 10.8.2 except that PR #​8087 has been reverted. This PR seemed to cause numerous issues when launching the homescreen or playing media as reported in #​8198. The change will land again (with fixes to avoid the regression) in 10.8.4.

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [1]

Note: Dependabot automatic PRs are excluded from this list.

• REVERT #​8087 [@​cvium] feat: make subtitleeditparser generic

jellyfin-web [0]

Note: Dependabot automatic PRs are excluded from this list.

v10.8.2: 10.8.2

Jellyfin 10.8.2

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [16]

Note: Dependabot automatic PRs are excluded from this list.

• #​8191 [@​cvium] fix: remove Virtual episodes when their physical counterpart exists
• #​8174 [@​nyanmisaka] Disable auto inserted SW scaler for HW decoders
• #​8167 [@​crobibero] Add back library scan from library manager
• #​8166 [@​joseph39] Bind @​userid only when it's in the statement
• #​8163 [@​daullmer] Don't refresh playlists on album refresh
• #​8152 [@​thornbill] Fix support for rtsp streams over tcp
• #​8127 [@​nyanmisaka] Workaround for linux 5.18+ i915 hang at cost of performance
• #​8115 [@​crobibero] Update to dotnet 6.0.7
• #​8104 [@​Shadowghost] Add resolution text output for more resolutions
• #​8092 [@​Andy2244] Change allow higher opus, vorbis transcode bitrates
• #​8087 [@​cvium] feat: make subtitleeditparser generic
• #​8078 [@​Andy2244] fix copy&paste error for requestedRangeTypes preventing stream copy
• #​8061 [@​nyanmisaka] Fix intel dx11-ocl interop taking too long to initialize on windows
• #​8038 [@​Shadowghost] Remove mount and unmount permissions for jellyfin group from sudoers
• #​8013 [@​daullmer] Fix password change during parental control schedule
• #​7732 [@​LewkyB] Fix to make web sockets close gracefully on server shutdown

jellyfin-web [7]

Note: Dependabot automatic PRs are excluded from this list.

• jellyfin/jellyfin-web#3781 [@​yahuli] Fix TypeError
• jellyfin/jellyfin-web#3778 [@​nielsvanvelzen] Add title and filename to download request in item details
• jellyfin/jellyfin-web#3775 [@​daullmer] Fix user specific remote access
• jellyfin/jellyfin-web#3760 [@​nielsvanvelzen] Fix saving log settings not working
• jellyfin/jellyfin-web#3751 [@​nielsvanvelzen] Fix splash screen checkbox always unchecked
• jellyfin/jellyfin-web#3730 [@​SenorSmartyPants] CardBuilder: Test episode number in addition to episode name
• jellyfin/jellyfin-web#3729 [@​SenorSmartyPants] Save series images under season, when browsing parent images for season

v10.8.1: 10.8.1

Jellyfin 10.8.1

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

N/A

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [29]

Note: Dependabot automatic PRs are excluded from this list.

• #​8001 [@​nyanmisaka] Fix yuvj420p pixel format hardware decoding
• #​7994 [@​nyanmisaka] Fix the broken transcoding throttler
• #​7988 [@​nyanmisaka] Catch external streams exceptions
• #​7985 [@​crobibero] Revert "refactor: use season number and episode number for NextUp ordering instead of SortName"
• #​7984 [@​crobibero] Upgrade to dotnet 6.0.6, update remaining dependencies
• #​7975 [@​nyanmisaka] Override the VAAPI driver env if i965 device is known
• #​7968 [@​nyanmisaka] Fix HWA decoders are not applied to BluRay folders
• #​7964 [@​nyanmisaka] Add DoVi side data parsing
• #​7961 [@​cvium] refactor: use season number and episode number for NextUp ordering instead of SortName
• #​7960 [@​Shadowghost] Fix subtitle encoder if subrip is requested
• #​7955 [@​nyanmisaka] Fix output extension if user has no transcoding permission
• #​7954 [@​cvium] fix: use proper bind address for DLNA location url (#​7953)
• #​7950 [@​nyanmisaka] Brighter VPP tone-mapping on Intel
• #​7947 [@​nyanmisaka] Add VideoRangeType to video conditions
• #​7946 [@​cvium] feat: partially handle SVG files and remove exceptions from blurhash and dimensions
• #​7941 [@​nyanmisaka] Fix the int overflow issue and the wrong map index of external audio
• #​7940 [@​Shadowghost] Fix recommendations
• #​7939 [@​1337joe] Track selector fix
• #​7934 [@​Bond-009] Enable XmlReaderSettings.Async, fixes #​7929
• #​7925 [@​nyanmisaka] Remove MPEG4 hwaccel from AMF
• #​7924 [@​nyanmisaka] Improve AMF tonemap speed when using sw decoding
• #​7913 [@​cvium] fix: read configuration during Invoke instead of during construction
• #​7911 [@​cvium] fix: only use keyframes when remuxing video
• #​7894 [@​crobibero] Switch to FirstOrDefault extension
• #​7892 [@​cvium] fix: tv shows do not support multi edition
• #​7887 [@​joshuaboniface] Move service hardening options to override config
• #​7885 [@​iwalton3] Prevent 400 error when using navigation buttons.
• #​7873 [@​cvium] fix: respect the image refresh options when parsing remote images from NFO
• #​7614 [@​mihawk90] Rework Fedora build

jellyfin-web [13]

Note: Dependabot automatic PRs are excluded from this list.

• jellyfin/jellyfin-web#3724 [@​samcon] Fix resume not working on LG WebOS
• jellyfin/jellyfin-web#3722 [@​nyanmisaka] Fix 6ch audio is disabled on AC3 supported browsers
• jellyfin/jellyfin-web#3721 [@​Shadowghost] Fix stream selection remembering
• jellyfin/jellyfin-web#3720 [@​Shadowghost] Fix device logos for various clients
• jellyfin/jellyfin-web#3719 [@​nyanmisaka] Expose DoVi metadata and VideoRangeType
• jellyfin/jellyfin-web#3717 [@​dmitrylyzo] Add maximum allowed video resolution selector
• jellyfin/jellyfin-web#3716 [@​Orhideous] Recognize MIME for transcoded audio in streams
• jellyfin/jellyfin-web#3714 [@​nyanmisaka] Expose VPP TM brightness/contrast gain options
• jellyfin/jellyfin-web#3713 [@​nyanmisaka] Add VideoRangeType condition for web client
• jellyfin/jellyfin-web#3704 [@​zhuangzhuang] Fix empty avatar when upload same profile image
• jellyfin/jellyfin-web#3701 [@​nyanmisaka] Remove MPEG4 hwaccel from AMF
• jellyfin/jellyfin-web#3694 [@​crobibero] Add the ability to enable/disable the splashscreen
• jellyfin/jellyfin-web#3571 [@​mihawk90] Cleanup and standardise Fedora build (web)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.