Merge branch 'autobrr:main' into feat/oidc-authentication

Author: dangerouslaser

.github/workflows/vuln.yml

@@ -13,8 +13,8 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GOVULNCHECK_VERSION: v1.3.0
-  OSV_SCANNER_VERSION: v2.3.8
+  GOVULNCHECK_VERSION: v1.6.0
+  OSV_SCANNER_VERSION: v2.4.0
 
 jobs:
   vuln:
@@ -36,4 +36,5 @@ jobs:
         run: go run golang.org/x/vuln/cmd/govulncheck@${GOVULNCHECK_VERSION} ./...
 
       - name: Run OSV dependency scan
+        if: ${{ !cancelled() }}
         run: go run github.com/google/osv-scanner/v2/cmd/osv-scanner@${OSV_SCANNER_VERSION} scan source --lockfile go.mod --lockfile gui/frontend/pnpm-lock.yaml

Dockerfile

@@ -4,7 +4,7 @@
 # below. The predefined platform args (BUILDPLATFORM, TARGET*) are auto-available
 # to FROM, and VERSION/BUILD_ID are declared inside the build stage where they are
 # consumed (see below), so they do not need global declarations.
-ARG GO_VERSION=1.26.4
+ARG GO_VERSION=1.26.5
 
 FROM --platform=$BUILDPLATFORM node:20-alpine AS frontend
 

go.mod

@@ -1,11 +1,11 @@
 module github.com/autobrr/upbrr
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/anacrolix/torrent v1.61.0
 	github.com/autobrr/go-bdinfo v0.3.2-0.20260630110520-88d4a8ab6880
-	github.com/autobrr/go-mediainfo v0.4.1-0.20260713062236-a80a455cd7e0
+	github.com/autobrr/go-mediainfo v0.4.1-0.20260719223324-57c6f92129f4
 	github.com/autobrr/go-qbittorrent v1.16.0
 	github.com/autobrr/mkbrr v1.23.0
 	github.com/coreos/go-oidc/v3 v3.19.0

go.sum

@@ -46,8 +46,8 @@ github.com/anacrolix/torrent v1.61.0/go.mod h1:yKUKuZSSDdyOsCbuH+rDOpswl/g546gIC
 github.com/apache/thrift v0.12.0/go.mod h1:cp2SuWMxlEZw2r+iP2GNCdIi4C1qmUzdZFSVb+bacwQ=
 github.com/autobrr/go-bdinfo v0.3.2-0.20260630110520-88d4a8ab6880 h1:p55pQampC+aNv9krb63Yw4WnhOf2KTIFt2SgbR2QDpk=
 github.com/autobrr/go-bdinfo v0.3.2-0.20260630110520-88d4a8ab6880/go.mod h1:LvWQ9miDSoeSvJ2vyttB1pYicDl5+eTZ5snvqH7OmZA=
-github.com/autobrr/go-mediainfo v0.4.1-0.20260713062236-a80a455cd7e0 h1:ddJeUxX8QHw1+g7x4yCzNCohF/R4mrZerun0uN83Cyw=
-github.com/autobrr/go-mediainfo v0.4.1-0.20260713062236-a80a455cd7e0/go.mod h1:xVXgHDAYYpIeGQCQCdTBpoiY/O3tojJfflK+rrbzclQ=
+github.com/autobrr/go-mediainfo v0.4.1-0.20260719223324-57c6f92129f4 h1:YqbaLPpLCxZgt442jWS6Z0q4OLelAuQ3yNL+8cPw2m4=
+github.com/autobrr/go-mediainfo v0.4.1-0.20260719223324-57c6f92129f4/go.mod h1:xVXgHDAYYpIeGQCQCdTBpoiY/O3tojJfflK+rrbzclQ=
 github.com/autobrr/go-qbittorrent v1.16.0 h1:H0zwzLOaCxvJTxJ3xe4+hV3rFSuxucsgKQxsGHydXCU=
 github.com/autobrr/go-qbittorrent v1.16.0/go.mod h1:s36a75VlatWPpHI+pNg4Ta6eB3fRxQvTZPfgMtOsQfY=
 github.com/autobrr/mkbrr v1.23.0 h1:g9RhZqT78u9726ifDt+KP8VhPNNm1pxmL8Y4L9wa2yk=