From b4728b81dc97a71ff54bf594e685953e1b39d642 Mon Sep 17 00:00:00 2001 From: Fijxu Date: Tue, 12 May 2026 15:28:41 -0400 Subject: [PATCH 1/6] chore: update openssl to 3.6.2 in OCI (#5701) --- docker/Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docker/Dockerfile b/docker/Dockerfile index 820005ba..cd526ea6 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -1,6 +1,6 @@ -# https://github.com/openssl/openssl/releases/tag/openssl-3.5.2 -ARG OPENSSL_VERSION='3.5.2' -ARG OPENSSL_SHA256='c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec' +# https://github.com/openssl/openssl/releases/tag/openssl-3.6.2 +ARG OPENSSL_VERSION='3.6.2' +ARG OPENSSL_SHA256='aaf51a1fe064384f811daeaeb4ec4dce7340ec8bd893027eee676af31e83a04f' FROM crystallang/crystal:1.20.1-alpine AS dependabot-crystal From 529fc8a8a37744111f0c229cf89fa410a65115fe Mon Sep 17 00:00:00 2001 From: Fijxu Date: Tue, 12 May 2026 23:12:37 -0400 Subject: [PATCH 2/6] fix: restore referrerpolicy for embed youtube link that got removed in commit bc64cd9 --- src/invidious/views/watch.ecr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/invidious/views/watch.ecr b/src/invidious/views/watch.ecr index a6a461ae..796c0c91 100644 --- a/src/invidious/views/watch.ecr +++ b/src/invidious/views/watch.ecr @@ -125,7 +125,7 @@ we're going to need to do it here in order to allow for translations. end -%> <%= I18n.translate(locale, "videoinfo_watch_on_youTube") %> - (<%= I18n.translate(locale, "videoinfo_youTube_embed_link") %>) + (<%= I18n.translate(locale, "videoinfo_youTube_embed_link") %>)

From 9ee39bc437aa179c1d35904f24115633e7481318 Mon Sep 17 00:00:00 2001 From: Fijxu Date: Sun, 17 May 2026 16:58:36 -0400 Subject: [PATCH 3/6] chore: update Crystal to 1.20.2 in OCI --- docker/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/Dockerfile b/docker/Dockerfile index cd526ea6..0822aafe 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -2,7 +2,7 @@ ARG OPENSSL_VERSION='3.6.2' ARG OPENSSL_SHA256='aaf51a1fe064384f811daeaeb4ec4dce7340ec8bd893027eee676af31e83a04f' -FROM crystallang/crystal:1.20.1-alpine AS dependabot-crystal +FROM crystallang/crystal:1.20.2-alpine AS dependabot-crystal # We compile openssl ourselves due to a memory leak in how crystal interacts # with openssl From 103f80e617ed26e7be42c890bb6e837cbebbf7e6 Mon Sep 17 00:00:00 2001 From: Fijxu Date: Sun, 17 May 2026 16:59:49 -0400 Subject: [PATCH 4/6] CI: update Crystal 1.20.1 to 1.20.2 in ci.yml matrix --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ee5b457c..e3ea7335 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -44,7 +44,7 @@ jobs: - 1.17.1 - 1.18.2 - 1.19.2 - - 1.20.1 + - 1.20.2 include: - crystal: nightly stable: false From e82ac674aebc6e4b4ddb133d6572a44aa22845e7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 19 May 2026 14:08:06 -0400 Subject: [PATCH 5/6] chore(deps): bump int128/docker-manifest-create-action (#5721) Bumps [int128/docker-manifest-create-action](https://github.com/int128/docker-manifest-create-action) from 2.20.0 to 2.21.0. - [Release notes](https://github.com/int128/docker-manifest-create-action/releases) - [Commits](https://github.com/int128/docker-manifest-create-action/compare/v2.20.0...v2.21.0) --- updated-dependencies: - dependency-name: int128/docker-manifest-create-action dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/build-nightly-container.yml | 2 +- .github/workflows/build-stable-container.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build-nightly-container.yml b/.github/workflows/build-nightly-container.yml index 00094e5b..e37b9c96 100644 --- a/.github/workflows/build-nightly-container.yml +++ b/.github/workflows/build-nightly-container.yml @@ -86,7 +86,7 @@ jobs: # https://github.com/marketplace/actions/docker-manifest-create-action - name: Create and push manifest - uses: int128/docker-manifest-create-action@v2.20.0 + uses: int128/docker-manifest-create-action@v2.21.0 with: push: true tags: quay.io/invidious/invidious:master diff --git a/.github/workflows/build-stable-container.yml b/.github/workflows/build-stable-container.yml index 4297c196..9058d914 100644 --- a/.github/workflows/build-stable-container.yml +++ b/.github/workflows/build-stable-container.yml @@ -78,7 +78,7 @@ jobs: # https://github.com/marketplace/actions/docker-manifest-create-action - name: Create and push manifest - uses: int128/docker-manifest-create-action@v2.20.0 + uses: int128/docker-manifest-create-action@v2.21.0 with: push: true tags: quay.io/invidious/invidious:latest From 99390d065d69bb451dea8aedf9a1bbaa52cddf2a Mon Sep 17 00:00:00 2001 From: Fijxu Date: Wed, 20 May 2026 21:36:50 -0400 Subject: [PATCH 6/6] fix: fix `Missing hash key: "collectionThumbnailViewModel"` for channel video thumbnails (#5725) Now the Innertube structure doesn't include `collectionThumbnailViewModel` and `primaryThumbnail` keys. Now the structure looks like this: ``` "horizontalListRenderer": { "items": [ { "lockupViewModel": { "contentImage": { "thumbnailViewModel": { "image": { "sources": [] ... ``` Fixes: https://github.com/iv-org/invidious/issues/5516 --- src/invidious/yt_backend/extractors.cr | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/invidious/yt_backend/extractors.cr b/src/invidious/yt_backend/extractors.cr index 04e00f20..38c869e4 100644 --- a/src/invidious/yt_backend/extractors.cr +++ b/src/invidious/yt_backend/extractors.cr @@ -651,8 +651,7 @@ private module Parsers playlist_id = item_contents["contentId"].as_s thumbnail_view_model = item_contents.dig( - "contentImage", "collectionThumbnailViewModel", - "primaryThumbnail", "thumbnailViewModel" + "contentImage", "thumbnailViewModel" ) thumbnail = thumbnail_view_model.dig("image", "sources", 0, "url").as_s