SergeantPanda c33d456743 Enable gevent in uWSGI workers; fix WS delivery and DB exhaustion ... - Enable gevent cooperative multitasking in all uWSGI worker configs (gevent-early-monkey-patch + import dispatcharr.gevent_patch) - Rewrite WebSocket group sends to bypass asyncio in gevent workers: _gevent_ws_send() replicates the channels_redis 4.x wire format directly via synchronous Redis so send_websocket_update() and _send_async() no longer fail silently after epoll is patched out - Fix PostgreSQL connection exhaustion: CONN_MAX_AGE=0 + explicit close_old_connections() in stream manager and cleanup watchdog loops - Fix stream proxy race: register client before the connect-wait loop so the cleanup watchdog never sees zero clients on a live channel - Channel list/logo/profile queryset optimisations: conditional DISTINCT, EXISTS semi-joins for filter-options, channel_count annotation to eliminate N+1 in LogoSerializer, prefetched memberships in ChannelProfileSerializer - JsonResponse for channel ID list and summary endpoints		2026-05-14 18:55:09 -05:00
..
accounts	Enhancement: Initial fmp4 support and major ts_proxy refactor	2026-05-08 17:46:47 -05:00
api	initial connect feature	2026-02-08 09:29:22 -05:00
backups	security: Fixed path traversal vulnerability in file uploads. The M3U account upload (apps/m3u/api_views.py), logo upload (apps/channels/api_views.py), and backup upload (apps/backups/api_views.py) all used the uploaded filename directly without sanitization. os.path.join() discards all preceding components when it encounters an absolute path segment, and pathlib's / operator behaves identically; a relative ../ sequence also escapes via OS path resolution at open() time. All three upload paths now strip directory components via Path(name).name and validate the resolved path remains within the intended upload directory. Exploiting any of these required admin credentials.	2026-04-09 21:32:36 -05:00
channels	Enable gevent in uWSGI workers; fix WS delivery and DB exhaustion	2026-05-14 18:55:09 -05:00
connect	fix: plugin event dispatch crashes on first disabled plugin (#1231)	2026-05-09 16:16:14 +01:00
dashboard	modified database fields for consistency, removed custom_url from streams (no longer needed)	2025-03-16 09:07:10 -04:00
epg	feat: Enhance series rule evaluation and management	2026-05-04 20:45:40 -05:00
hdhr	feat: Add HDHR output profile support and reorganize settings	2026-05-10 11:14:02 -05:00
m3u	fix: Preserve base path in URL normalization for XC server and transform credentials. (Fixes #1218)	2026-05-14 09:53:10 -05:00
output	perf: Refactor get_live_stream into a streaming endpoint as well as reduce number of passes needed. (Fixes #1220)	2026-05-14 13:14:38 -05:00
plugins	fix: Ensure plugin discovery runs in all non-Celery processes to apply monkey-patches in uWSGI workers	2026-05-13 17:30:09 -05:00
proxy	Enable gevent in uWSGI workers; fix WS delivery and DB exhaustion	2026-05-14 18:55:09 -05:00
vod	fix: clear previous failure entries after successful logo fetch in LogoViewSet and VODLogoViewSet	2026-04-14 13:34:17 -05:00