Features

• Added an instance setting to control forced HTTPS redirects for the dashboard.

Fixes

• Prevented DNS validation from hanging on unresponsive resolvers by adding five-second query timeouts (#11378, closes #11351).
• Preserved active deployments when shared SSH multiplexing connections were refreshed or cleaned up (#11377, closes #11372).
• Restored GitLab push and merge-request deployments that could fail with an HTTP 500 response (#11284, closes #11262).
• Allowed long-running volume backups to run for up to ten hours while preserving custom timeouts on existing schedules (#11358, closes #11273).
• Prevented SSL-enabled database containers from being left stopped during certificate ownership repair and container replacement (#11315, #11352, closes #11312).
• Prevented OAuth provider settings from being erased when OAuth settings were re-seeded (#8210).
• Enforced team-scoped authorization for scheduled tasks, preventing cross-team access and execution (#11239, closes #11238).
• Prevented large bind-mounted files and oversized remote output from exhausting memory while services, tasks, logs, volumes, and configuration were read (#10960).
• Made upgrades recover correctly when status data was temporarily unavailable after restart (#11350, closes #11347).
• Prevented stuck container removal from blocking deployments; cleanup was deferred and retried instead.
• Enabled compression for the dashboard over HTTPS (#10828, closes #10802).
• Corrected S3 error email links so they pointed to the configured instance instead of localhost (#8633).
• Fixed highlighted-button, spinner, and keyboard-shortcut contrast across custom themes (#11279).
• Fixed account menus remaining open after clicking outside an expanded Appearance panel (#11374, closes #11373).
• Centered icon tooltips over their triggers (#11382).

Improvements

• Surfaced pending proxy configuration and outdated Traefik states with actionable warning indicators.
• Made server warnings clearer, improved deployment-log scrolling, and corrected spacing in database backup settings.
• Clarified proxy-label generation choices (#11362).
• Clarified that saving Sentinel settings restarted Sentinel.
• Made database and OAuth seed operations transactional to preserve existing data when seeding failed (#11360).

What's Changed

• feat: add configurable Horizon dashboard access by @SelimSalihovic in #9354
• fix(upgrade): handle missing status after restart by @andrasbacsai in #11350
• fix(databases): redirect stdin for the SSL cert chown by @MarkosTech in #11315
• fix: compress dashboard over HTTPS by @Prains in #10828
• fix(notification): update storage email link in S3 error by @NrwPlay in #8633
• fix(databases): chown SSL certs before container replacement by @andrasbacsai in #11352
• fix(ui): improve highlighted button and spinner contrast by @fsioni in #11279
• fix(webhook): restore GitLab source deployments by @drewmt in #11284
• fix(services): avoid loading bind-mount file contents by @andrasbacsai in #10960
• fix(backups): support long-running volume backups by @andrasbacsai in #11358
• fix(security): enforce team-scoped authorization for scheduled tasks by @HelgeSverre in #11239
• fix(oauth): prevent data loss during OAuth settings re-seed by @ryzenixx in #8210
• fix: wrap seeders in db transactions by @peaklabs-dev in #11360
• chore(ui): improve clarity of generate proxy label options by @peaklabs-dev in #11362
• fix(ui): close account menu on outside click when appearance is expanded by @rohittiwari-dev in #11374
• fix(ui): center icon tooltips over their trigger by @peaklabs-dev in #11382
• fix(ssh): preserve sessions when recycling mux connections by @andrasbacsai in #11377
• fix(dns): time out validation queries after five seconds by @andrasbacsai in #11378

New Contributors

• @SelimSalihovic made their first contribution in #9354
• @MarkosTech made their first contribution in #11315
• @Prains made their first contribution in #10828
• @NrwPlay made their first contribution in #8633
• @fsioni made their first contribution in #11279
• @HelgeSverre made their first contribution in #11239
• @ryzenixx made their first contribution in #8210

Full Changelog: v4.3.8...v4.3.9

Fixes and improvements

General

• prevent spamming of 'stream is closed' error during shutdown (#6062)
• impose a minimum value to clock rate of always-available tracks (#6086) Clock rates below 10 caused the emission of empty samples. Fix the issue by imposing a minimum value of 8khz, that rises to 22khz in case of AAC.
• fix race condition during sub-stream creation (#6075) (#6095) When a stream with always-available turned on switches from offline to online, or from a publisher to another, the reader mutex was not acquired during writing of codec parameters. This is now fixed.
• restore ability to run the server in a read-only file system (#6098) This was temporarily lost after the introduction of the native MoQ QUIC listener.
• fix deadlock when changing configuration through file and API (#6077) (#6101) When changing configuration in parallel by editing the configuration file and calling the API, the server could get into a deadlock that prevented any further action. This is fixed.
• change default value of authHTTPExclude (#6103) by default, do not exclude any action from HTTP authentication. Old value triggered several security warnings.
• add destFingerprint parameter (#6106) this allows to validate self-signed certificates of forward destinations.
• pmp4: fix panic in case of bad input (bluenviron/mediacommon#354) the stsc box was not checked properly. This is now fixed.
• pmp4: fix panic in case of bad input (bluenviron/mediacommon#355) The parser was not checking that the MP4 was properly sending addresses of samples, resulting in samples with invalid addresses. This is now fixed.
• pmp4, fmp4: do not emit empty payloads (bluenviron/mediacommon#353)

API

• redact password in responses (#6110) passwords are not exposed anymore through the API. They can only be set, not read.

Media-Over-QUIC

• support pulling streams from other servers (#6111)
• do not accept empty payloads (#6085)
• limit maximum amount of published tracks (#6087) this prevents clients from consuming an excessive amount of memory.
• make /moq URL suffix optional (#6107) In order to establish a MoQ session with WebTransport, a /moq suffix was required until now. This is now optional in order to allow connecting to the server with the standard MoQ URL format.
• impose maximum size on pending reordered bytes (#6112) Decrease the maximum memory that clients can take by imposing a maximum size of 100MB on the pending reordered bytes.

RTSP

• accept relative digest URI (bluenviron/gortsplib#1118) RFC 2617 section 3.2.2 allows the digest URI to be either an absolute URI or a relative path. Some clients use the latter, which was rejected with "wrong URL" since urlMatches only accepted an exact match against the absolute request URL.
• send initial RTCP sender report without waiting for a period (bluenviron/gortsplib#1052) (bluenviron/gortsplib#1111) (bluenviron/gortsplib#1120) Reports were emitted only on the ticker, so the first one arrived Period after Initialize (10s by default) and later still when no RTP packet had been sent by that first tick, since report() returns nil until then and the next opportunity is another Period away.
• ensure that decoders can produce only output that does not crash encoders (bluenviron/gortsplib#1123)
• discard empty Opus and G722 RTP packets (bluenviron/gortsplib#1131)
• improve error message when setting read buffer fails (bluenviron/gortsplib#1133)
• server: fix race condition when recording (bluenviron/gortsplib#1134) state was not protected.

RTMP

• inform about authentication failures (#5657) (#6072) Reply with NetStream.Play.Failed or NetStream.Publish.Unauthorized when a client is not authorized to play or publish. This makes clients like OBS to stop recreating the connection in case of authentication failures.

• reader: do not emit empty frames (bluenviron/gortmplib#106)

• parse video PTS delta as signed (bluenviron/gortmplib#88)
  HLS

• prefer hls.js on iOS too (#6090) In the embedded HLS reader, use hls.js on iOS, that was previously disabled due to compatibility issues that should have been solved.

• unlock the session-in-query+iOS combination (#6088) this was previously blocked because the session in query was meant to be dynamic, therefore incompatible with static playlists required by iOS. It is not anymore, so we can support that.

• stop using cookies with plain HTTP (#6089) in case of plain HTTP, fall back to query parameters, which are safer than HTTP cookies because they are not shared between different pages/domains, although they are visible in the URL.

WebRTC

• support forwarding streams (#6099)
• fix warning when IPv6 is disabled (#5733) (#6048)
• improve performance by ignoring mDNS candidates (#4963) (#6064) mDNS candidates sometimes require a large CPU portion, they are not involved in any connectivity method mentioned in the documentation, they work in local networks only.

SRT

• apply UDP read buffer size from configuration (#6069) Use upstream datarhei/gosrt's ListenerControl config field (datarhei/gosrt#144) to set SO_RCVBUF on the SRT listener's UDP socket.

RPI Camera

• fix crash when secondary stream is enabled (#6060) (#6061)
• prevent invalid MJPEG sizes (#6080) width and height of MJPEG frames must be multiple of 8 and less than 2048, otherwise they cannot be routed with RTP/RTSP.

Dependencies

• code.cloudfoundry.org/bytefmt updated from v0.83.0 to v0.85.0
• github.com/alecthomas/kong updated from v1.16.0 to v1.16.1
• github.com/asticode/go-astits updated from v1.15.0 to v1.16.0
• github.com/bluenviron/gohlslib/v2 updated from v2.4.2 to v2.4.3
• github.com/bluenviron/gortmplib updated from v1.0.0 to v1.0.1
• github.com/bluenviron/gortsplib/v5 updated from v5.6.3 to v5.6.4
• github.com/bluenviron/mediacommon/v2 updated from v2.9.2 to v2.9.3
• github.com/datarhei/gosrt updated from v0.11.0 to v0.11.1-0.20260812091715-a77b40bb4b76
• github.com/pion/ice/v4 updated from v4.4.0 to v4.4.1
• github.com/pion/transport/v4 updated from v4.0.2 to v4.1.0
• github.com/stretchr/testify updated from v1.11.1 to v1.12.0
• golang.org/x/crypto updated from v0.54.0 to v0.55.0
• golang.org/x/net updated from v0.57.0 to v0.58.0
• github.com/davecgh/go-spew removed
• github.com/pion/srtp/v3 updated from v3.0.12 to v3.0.13
• github.com/pmezard/go-difflib removed
• golang.org/x/text updated from v0.40.0 to v0.41.0
• hls.js updated from v1.6.16 to v1.7.0

Security

Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.

Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:

ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx

You can verify checksums of binaries by downloading checksums.sha256 and running:

cat checksums.sha256 | grep "$(ls mediamtx_*)" | sha256sum --check

Features

• Added configurable HTTPS redirects for service applications across the dashboard, API, and MCP.

Fixes

• Prevented members from accessing deployment, database, service, and other mutable controls, and clarified disabled control styling.
• Fixed confirmation modal checkboxes that generated malformed Livewire bindings (#11335).
• Kept table page-size dropdowns visible and usable near the bottom of the viewport (#11349, fixes #11336).
• Persisted PostgreSQL public-access changes so they no longer reverted after refreshes or proxy restarts (#11348, fixes #11345).
• Corrected Traefik redirect capture groups and selected the proper Docker network for routed Compose applications and services.
• Reconciled proxy networks from running containers, improving routing when cached resource status was stale.

Improvements

• Made GitHub repository and branch selectors searchable and preselected each repository’s default branch.
• Improved active-deployment indicator contrast with solid surfaces in every state.

What's Changed

• fix(modal): use checkbox ids for Livewire bindings by @andrasbacsai in #11335
• fix(postgresql): persist selected public access state by @andrasbacsai in #11348
• fix(table): keep page-size dropdown within viewport by @andrasbacsai in #11349

Full Changelog: v4.3.7...v4.3.8