Fixes

• Fixed self-hosted startup failures caused by an incompatible PHP base image by pinning it to a stable version (#12141).

Full Changelog: v4.4.5...v4.4.6

Fixes

• Removed the 5 GB free disk space requirement that blocked manual and automatic updates.

Full Changelog: v4.4.4...v4.4.5

Features

• Added optional Cloudflare proxy mode for new DNS records.
• Added support for public IPv4 and IPv6 addresses in Git repository URLs.

Fixes

• Fixed IPv6 server addresses across connections, URLs, routing, and Hetzner provisioning.
• Fixed IPv6 connections to public database TCP proxies on IPv6-enabled networks (#12133).
• Fixed database proxy connections after database IP addresses changed.
• Prevented duplicate database environment variables and preserved source values when cloning applications. Removed existing duplicate Redis username and Nixpacks Node version entries.
• Fixed database startup so configuration files were written before containers started.
• Preserved application, database, service, and proxy containers during Docker cleanup.
• Fixed detection of legacy Compose containers for custom start commands and status updates.
• Restored valid Compose network names with required and alternative variable expressions (#12126).
• Fixed Infisical secret references that reached containers without expansion (#12128).
• Fixed S3 database and volume backup uploads on hosts with split DNS (#12129).
• Fixed custom DNS queries by retrying truncated UDP responses over TCP (#12076).
• Fixed GitHub App installation after switching teams and showed clear verification errors (#12122).
• Prevented duplicate upgrades and fixed stalled upgrade progress.
• Prevented configuration and route cache corruption during startup (#12120).
• Matched the Railpack build frontend version to the helper's installed CLI.
• Removed forced HTTP/1.1 for Git repository imports (PR #12080, #11579).
• Fixed resource name alignment when descriptions were empty (#12127).

Improvements

• Added a 5 GB free-space check before upgrades, with cleanup controls and a manual override. Automatic upgrades were skipped with a notification when space was low.
• Updated the sidebar user menu and toggle icon.

What's Changed

• revert(git): stop forcing HTTP/1.1 for repository imports by @peaklabs-dev in #12080

Full Changelog: v4.4.3...v4.4.4

What's Changed

• fix(linux): add a Spanish comment to the desktop entry by @eibidia in #1468
• fix(agent): let a thumb-wheel swipe fire Volume Up/Down more than once by @4ni1ak in #1455
• feat(hid): recognise Powerplay receiver 046d:c53a by @FelipeIzui in #1267
• feat(hid): add G733 battery and power-state support by @d-tatianin in #1601
• fix(i18n): improve Turkish catalog wording by @volkanncicek in #1415
• docs(core): clarify persisted device identifier scope by @yuzi-co in #670
• fix(macos): respect the selected Apple developer directory by @4ni1ak in #1457
• fix(gui): restore the config-error folder action by @4ni1ak in #1458
• fix(core): resolve connection transport from live routes by @4ni1ak in #1367
• feat(gui): add custom actions to the mouse picker by @4ni1ak in #1452
• fix(gui): show friendly names for Windows app profiles by @4ni1ak in #1463
• feat(hidpp): implement pointer motion scaling by @Chernicharo in #1347
• fix(inject): restore macos 27 space swipes by @4ni1ak in #1703
• fix(hook): identify unbundled macos applications by @4ni1ak in #1469
• chore: release v0.8.13 by @AprilNEA[bot] in #1716

New Contributors

• @FelipeIzui made their first contribution in #1267
• @d-tatianin made their first contribution in #1601
• @volkanncicek made their first contribution in #1415

Full Changelog: v0.8.12...v0.8.13

The Improved Material System continues to make its way across our truck line-up! With the upcoming 1.62 update for Euro Truck Simulator 2 & American Truck Simulator, two more trucks will benefit from this upgrade, bringing further visual refinements to their interiors.

What's Changed

• test(agent): cover a BLE mouse that wakes as a new node by @kohjunhao in #1649
• fix(gui): seed the DPI editor from config while the live read is pending by @4ni1ak in #1628
• fix(hid): recognize Lightspeed receiver 046d:c541 by @hamfield-eu in #1679
• fix(gui): truncate the function-row key callout's name instead of overflowing by @4ni1ak in #1691
• fix(gui): wrap the device-enabled caption so the switch stays in the card by @Imbecile6197 in #1670
• feat(fixture): add an MX Ergo Unifying fixture by @Chernicharo in #1374
• fix(gui): set text color on mouse pairing passkey click icons by @ZOZiBoi in #1640
• fix(hidpp): tell another protocol's reports apart from malformed HID++ by @Chernicharo in #1373
• fix(macos): log the candidate displays when Space state has no match by @4ni1ak in #1694
• fix(agent): phase horizontal thumb-wheel scroll when smoothing is off by @nredd in #1689
• feat(i18n): add Czech locale by @Imbecile6197 in #1669
• fix(core): write config through symlinks instead of replacing them by @FunJim in #1642
• fix(hook): keep the short budget for tap teardown after a probe break by @TheMedpreneur in #1600
• fix(i18n): name the real update-check host in the consent dialog by @4ni1ak in #1629
• fix(agent): restore ring toggle and publish expired sessions by @isleofgreg in #1665
• fix(gui): scale configuration labels with interface text by @4ni1ak in #1627
• fix(agent): fall back to focus when the pointer target is unidentified by @kohjunhao in #1648
• fix(gui): anchor scrollbar overlays in action ring editor and app picker by @lynicis in #1360
• fix(i18n): track the locale catalogs as build inputs by @zmingxie in #1327
• fix(gui): wrap the About page's link row instead of clipping it by @crnst8 in #885
• fix(cli): replace the stale receiver note with a Linux udev hint by @Chernicharo in #1348
• fix(gui): show wheel controls without adjustable dpi by @minatoaquaMK2 in #1369
• fix(gui): recognize MX Ergo's DPI slot name for the mouse diagram by @armandodollia in #1391
• fix(macos): write the scroll point delta last so pixel precision survives by @isleofgreg in #1156
• chore: release v0.8.12 by @AprilNEA[bot] in #1646

New Contributors

• @hamfield-eu made their first contribution in #1679
• @Imbecile6197 made their first contribution in #1670
• @Chernicharo made their first contribution in #1374
• @ZOZiBoi made their first contribution in #1640
• @nredd made their first contribution in #1689
• @FunJim made their first contribution in #1642
• @TheMedpreneur made their first contribution in #1600
• @lynicis made their first contribution in #1360
• @zmingxie made their first contribution in #1327
• @crnst8 made their first contribution in #885
• @minatoaquaMK2 made their first contribution in #1369
• @armandodollia made their first contribution in #1391

Full Changelog: v0.8.11...v0.8.12

Below are development builds with the latest fixes and improvements. Please test them thoroughly and report problems immediately, so that any regressions can be fixed in time for next stable release.

Latest development build: 2.8.3.25 (October 15th 2026)

Latest stable release build: 2.8.3
https://github.com/clsid2/mpc-hc/releases/tag/2.8.3

Docker Images

Docker images have been built and pushed:

Docker Hub:

• alexta69/metube:latest
• alexta69/metube:2026.10.09

GitHub Container Registry:

• ghcr.io/alexta69/metube:latest
• ghcr.io/alexta69/metube:2026.10.09

Changes

• feat: ask before Clear failed removes the failed rows (closes #1094) (2f9c10f)
• fix: say why MeTube's own UI is refused behind a Host-rewriting proxy (46a9572)
• feat: define the download options once, in a catalog the UI and API share (closes #1093) (69a5ef0)
• fix: ship ffmpeg 8.1 so clip downloads keep their video (closes #1092) (ed6af48)
• feat: browse a playlist and pick entries before queuing (closes #1030) (4723d14)

Changelog

1. Experimental support for SteamOS recovery images. (#3712 #2875 #1815)
2. Improve the Linux remount feature to make the ISO partition mountable out of the box on mainstream desktop distros. (Notes)
3. Suppress the duplicate disk icons in the sidebar on some Linux desktop distros.
4. Change the ISO partition dm name to stable /dev/mapper/VentoyPart, please refer Notes
5. Make the ISO partition mountable for CloneZilla. (#3274)
6. Fix Fedora 45 beta boot issue.
7. Fix the Windows/WinPE secure boot version check failed issue.
8. Fix Persistence intermittently fails on Ubuntu desktop. (#3718)
9. Fix the boot issue for Grml 2026.09. (#3751)
10. Add support for custom Syslinux-based ISO. (#3760)
11. Improvement for latest LinuxConsole release. (#3745)
12. Add check for Boot Conf Replace entries in VentoyPlugson. (#3727 #3593)

SHA256

d86ff9de63d94c8b8f1f6b14d23c55af4b88e8207bf2893890892a6a97b1ad54  ventoy-1.1.18-linux.tar.gz
ee3917bd5a9973c0b2f8f3ef85048bf68ae089ec88f5561ad78b6ad308b51ab5  ventoy-1.1.18-livecd.iso
082c478e8c432e1ac653899fcf50e3a4077a2851bc6112b5ddd30545962164a9  ventoy-1.1.18-windows.zip

Wana boot and install OS through network (PXE/HTTPBoot)? Welcome to my new project iVentoy.

About iVentoy https://www.iventoy.com/
iVentoy is an enhanced version of the PXE/HTTPBoot server with .
Extremely easy to use, Many advanced features.
x86 Legacy BIOS, IA32 UEFI, x86_64 UEFI (Secure Boot), ARM64 UEFI and LoongArch64 UEFI mode supported
110+ common types of OS supported (Windows/WinPE/Linux/Unix/VMware)
Turn any PC, laptop, server, NAS, or Raspberry Pi into a PXE/HTTPBoot server instantly!
......

• [p]Added a ping icon for dropped defuse kits[/p][/*]
• [p]Reduced the time for AUG reload by half second[/p][/*]
• [p]Fixed the sound event during silent reload for Desert Eagle[/p][/*]
• [p]Fixed a case of buzzing soundscape sounds during demo playback[/p][/*]
• [p]Clipping fixes for Rush maps[/p][/*]
• [p]Localization updates[/p][/*]
• [p]Stability updates[/p][/*]

Fixes and improvements

General

• fix dropping UDP packets during connection close (#6278) UDP packets were dropped in case of errors regardless of their size. Now they are dropped only if they are empty and there's an error.
• docs: fix youtube rtmps URL (#6286) The rtmps URL for Youtube was wrong. The fingerprint is not required anymore.
• prevent free access to playback server in case of legacy credentials (#6311) When legacy credentials are in use (readUser, readPass, publishUser, publishPass), access to the playback server is granted to anyone. Prevent this by granting access only to users using readUser, readPass.
• auth: skip JWKS fetch when no JWT is provided (#6274) authenticateJWT fetched the JWKS before checking whether the request carried a token at all. Every anonymous request, such as the first unauthenticatedRTSP DESCRIBE or HLS request that precedes a 401, caused an outbound request to the JWKS server while holding the manager's write lock. An unauthenticated client could therefore make the server contact the identity provider at will and, while that endpoint was slow or unreachable, stall JWT authentication for everybody. Return "JWT not provided" before touching the JWKS. Also check the JWKS response status code. A non-2xx reply was fed straight to the JSON decoder, so an error page surfaced as a confusing parse error,and an error reply that happened to hold valid JSON was cached as the key set for an hour. Reject it with the status code, as authenticateHTTP already does. Behavior for requests that carry a token against a healthy JWKS server is unchanged.
• rewindablereader: fix possible OOM (bluenviron/mediacommon#383) empty datagram packets might cause the allocation of unnecessary entries. Fix that.
• h264: revert bluenviron/mediacommon#142 (bluenviron/mediacommon#384) supporting standalone SEI units should not be necessary anymore since these are filtered out at the root (bluenviron/gortsplib#1184). In case of any issue that should arise after this change, open a bug report and we'll adjust things accordingly.
• h264: support SEI recovery point in DTS extractor (bluenviron/mediacommon#341) Treat a SEI recovery point message (payload type 6) as a random access point, similarly to a CRA in H265, so the DTS extractor can (re)initialize its state from the first coded frame that follows the recovery point.

API

• fix race condition when kicking RTSP sessions (#6260) (#6275)
• do not change passwords when their value is "" (#6141) (https://github.com/bluenviron/mediamtx/issues/6287) (#6292) some users call /config/global/get and passits content to /config/global/patch. Since the former now redacts passwords and replaces their value with "", this string is used as an effective password, breaking authentication. Now password values equal to "" are ignored by /config/global/patch, and the original password value is kept unchanged.
• fix deadlock when reloading the API (#6280) (#6279) (#6310) When the API is closing, a /config endpoint might be waiting on the server to reply, but the server is busy waiting on all API endpoints to return, causing a deadlock. Fix this by canceling requests from API endpoints to the server when the API is closing.

Media-Over-QUIC

• use "catalog" as catalog track name (#6268) Previously, the catalog track name was ".catalog" which is non-standard.

RTSP

• stop forwarding in case of read errors (#6266)
• apply path-level rtspUDPReadBufferSize to the first connection (#6291) The RTSP static source built its client before reading the path-level rtspUDPReadBufferSize, so the value only reached the client after a reconnection. Compute it before creating the client, as the MPEG-TS and RTP sources do and as this source did before #5488.
• server: change error return code of some methods (bluenviron/gortsplib#1091) (bluenviron/gortsplib#1174)
• drop standalone H264/H265 trailing SEIs (bluenviron/gortsplib#1184) #3614 bluenviron/mediacommon#142 #6257 bluenviron/mediacommon#382 H264/H265 access units containing a single SEI only, trailing other units, generated by someTP-Link/Tapo cameras, are non-standard and cause several issues in downstream components, including the DTS extractor and the recorder. Previously, the H265 DTS extractor was adjusted to support such units (bluenviron/gortsplib#142) but the problem represented itself with H265. Filter these units out at the root.
• make all decoders return at least 1 byte (bluenviron/gortsplib#1185)
• complete RTP/JPEG implementation (bluenviron/gortsplib#1187) add support for restart headers, limit support to JPEG types 0 and 1.

RTMP

• detect read errors even when the server is writing (#6267) Until now we relied exclusively on write errors to detect broken RTMP connections. Now read errors are checked too.
• make rawmessage.Write thread-safe (bluenviron/gortmplib#136)
• writer: drain inbound messages (#5776) (bluenviron/gortmplib#132) Some servers periodically send messages even when we're publishing. If they are not read, they fill an internal connectionbuffer and cause periodic disconnections. Now the Writer also drains inbound messages.
• reader: support FLV video command frames and skip empty audio messages (bluenviron/gortmplib#128) Someservers (e.g. Wowza Streaming Engine) send a video info/command frame before the first frame: a 2-byte message with frame type 5 and a single command byte (start of seek / end of seek). Video.unmarshal rejected it on length, aborting the whole connection. Add Video.FrameType (key frame, inter frame, command) and Video.Command, deprecate Video.IsKeyFrame in favour of FrameType, and skip command frames in Reader since they carry no data. Some servers (e.g. Wowza Streaming Engine) send an audio message with an empty bodybefore the first frame. allocateMessage rejected it with "not enough bytes", aborting the whole connection. Parse an empty body into an Audio with Codec = 0 and no other field, marshal it back to an empty body, and skip such messages in Reader since they carry no data, like FFmpeg does.
• rename message.Video.Type into message.Video.PacketType (bluenviron/gortmplib#138) This is to avoid confusion with the new message.Video.FrameType field.

HLS

• muxer: keep EXT-X-MAP in delta updates (bluenviron/gohlslib#397) Delta updates were generated without EXT-X-MAP, although all tags that are not skipped must remain in them. Apple clients stop playback (MoofManifold -16046) at the first delta update that skips a segment after delta updates without skipped segments.

WebRTC

• fix panic with specially-crafted WHEP requests (#6301) (#6309) this happened in case of WHEP requests with no media descriptions in the SDP.

Dependencies

• Go updated from 1.26 to 1.27
• code.cloudfoundry.org/bytefmt updated from v0.90.0 to v0.92.0
• github.com/bluenviron/gohlslib/v2 updated from v2.4.5 to v2.4.6
• github.com/bluenviron/gortmplib updated from v1.0.3 to v1.0.4
• github.com/bluenviron/gortsplib/v5 updated from v5.6.6 to v5.6.7
• github.com/bluenviron/mediacommon/v2 updated from v2.9.5 to v2.9.6
• github.com/datarhei/gosrt updated from v0.11.1-0.20260812091715-a77b40bb4b76 to v0.12.0
• github.com/gin-contrib/pprof updated from v1.5.5 to v1.5.6
• github.com/go-git/go-billy/v5 updated from v5.9.1 to v5.9.2
• github.com/go-git/go-git/v5 updated from v5.19.2 to v5.19.3
• github.com/pion/ice/v4 updated from v4.4.2 to v4.4.5
• github.com/pion/interceptor updated from v0.1.48 to v0.1.49
• github.com/pion/rtcp updated from v1.2.17 to v1.2.19
• github.com/pion/transport/v4 removed
• github.com/pion/webrtc/v4 updated from v4.2.20 to v4.2.22
• github.com/quic-go/quic-go updated from v0.62.0 to v0.63.0
• github.com/pion/datachannel updated from v1.6.2 to v1.6.3
• github.com/pion/dtls/v3 updated from v3.1.8 to v3.1.9
• github.com/pion/mdns/v2 updated from v2.2.0 to v2.2.2
• github.com/pion/sctp updated from v1.11.1 to v1.11.3
• github.com/pion/srtp/v3 updated from v3.0.15 to v3.1.3
• github.com/pion/stun/v4 updated from v4.0.0 to v4.0.1
• github.com/pion/turn/v5 updated from v5.1.0 to v5.1.2
• github.com/pjbgf/sha1cd updated from v0.6.0 to v0.7.0
• github.com/pion/transport/v5 v5.1.1 added

Security

Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.

Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:

ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx

You can verify checksums of binaries by downloading checksums.sha256 and running:

cat checksums.sha256 | grep "$(ls mediamtx_*)" | sha256sum --check