6459 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Josh Hawkins	daed9ebeb3	redact go2rtc rtsp, api and webrtc credentials in /config ... /config cleaned only go2rtc.streams, so go2rtc.rtsp and go2rtc.api usernames and passwords and the WebRTC ICE server credentials went back verbatim to any authenticated user. They now use the redaction sentinel like the MQTT and ONVIF passwords. Config save already dropped a field equal to the sentinel, but lists are leaf values after flattening, so an ice_servers list echoed back from /config would have written the sentinel to disk. Save now drops any value that contains it.	2026-10-18 14:41:28 -05:00
Josh Hawkins	3356ed4eb5	mask every credential form in camera and go2rtc urls ... The credential mask only matched a userinfo with a [A-Za-z0-9_-] username or the exact user=..&password=.. query order, so dotted or email usernames, password-only userinfo (tapo://pw@host), empty usernames, reversed or renamed query credentials, and token query strings (ring refresh_token, nest client_secret, homekit client_private) reached every authenticated user through /config, /go2rtc/streams, /stats and /metrics. clean_camera_user_pass now masks any userinfo and any credential-named query parameter, and the config save restore and the settings UI detect masked paths with the same patterns so a save never writes the mask back over the real credential.	2026-10-18 14:41:27 -05:00
4 people	ee2ae1a957	Bump the radix group in /web with 22 updates (#24702) ... * Bump the radix group in /web with 22 updates Bumps the radix group in /web with 22 updates: | Package | From | To | | --- | --- | --- | | [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.24` | `1.2.1` | | [@radix-ui/react-aspect-ratio](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/aspect-ratio) | `1.1.16` | `1.2.0` | | [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox) | `1.3.12` | `1.4.1` | | [@radix-ui/react-collapsible](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/collapsible) | `1.1.21` | `1.2.1` | | [@radix-ui/react-context-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/context-menu) | `2.3.8` | `2.4.1` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.2.0` | `1.3.1` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.25` | `2.2.1` | | [@radix-ui/react-hover-card](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/hover-card) | `1.1.24` | `1.2.1` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.16` | `2.1.17` | | [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.2.0` | `1.3.1` | | [@radix-ui/react-progress](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/progress) | `1.1.17` | `1.2.1` | | [@radix-ui/react-radio-group](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radio-group) | `1.4.8` | `1.5.1` | | [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.3.0` | `1.4.0` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.8` | `2.4.1` | | [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.16` | `1.2.0` | | [@radix-ui/react-slider](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slider) | `1.5.0` | `1.6.1` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.4.0` | `1.5.0` | | [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.8` | `1.4.1` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.22` | `1.2.1` | | [@radix-ui/react-toggle](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toggle) | `1.1.19` | `1.2.1` | | [@radix-ui/react-toggle-group](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toggle-group) | `1.1.20` | `1.2.1` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.3.0` | `1.4.1` | Updates `@radix-ui/react-alert-dialog` from 1.1.24 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog) Updates `@radix-ui/react-aspect-ratio` from 1.1.16 to 1.2.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/aspect-ratio/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/aspect-ratio) Updates `@radix-ui/react-checkbox` from 1.3.12 to 1.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox) Updates `@radix-ui/react-collapsible` from 1.1.21 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/collapsible/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/collapsible) Updates `@radix-ui/react-context-menu` from 2.3.8 to 2.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/context-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/context-menu) Updates `@radix-ui/react-dialog` from 1.2.0 to 1.3.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.25 to 2.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-hover-card` from 1.1.24 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/hover-card/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/hover-card) Updates `@radix-ui/react-label` from 2.1.16 to 2.1.17 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-popover` from 1.2.0 to 1.3.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover) Updates `@radix-ui/react-progress` from 1.1.17 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/progress/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/progress) Updates `@radix-ui/react-radio-group` from 1.4.8 to 1.5.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radio-group/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radio-group) Updates `@radix-ui/react-scroll-area` from 1.3.0 to 1.4.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area) Updates `@radix-ui/react-select` from 2.3.8 to 2.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-separator` from 1.1.16 to 1.2.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator) Updates `@radix-ui/react-slider` from 1.5.0 to 1.6.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slider/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slider) Updates `@radix-ui/react-slot` from 1.4.0 to 1.5.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `@radix-ui/react-switch` from 1.3.8 to 1.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch) Updates `@radix-ui/react-tabs` from 1.1.22 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-toggle` from 1.1.19 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/toggle/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toggle) Updates `@radix-ui/react-toggle-group` from 1.1.20 to 1.2.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/toggle-group/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toggle-group) Updates `@radix-ui/react-tooltip` from 1.3.0 to 1.4.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) --- updated-dependencies: - dependency-name: "@radix-ui/react-alert-dialog" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-aspect-ratio" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-checkbox" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-collapsible" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-context-menu" dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-hover-card" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: radix - dependency-name: "@radix-ui/react-popover" dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-progress" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-radio-group" dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-scroll-area" dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-select" dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-separator" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-slider" dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-slot" dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-switch" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-toggle" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-toggle-group" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: radix ... Signed-off-by: dependabot[bot] <support@github.com> * fix radix bump type error and drop popper override Slider 1.6 types its root as a span, so the progress hover handlers now take HTMLElement. The react-popper 1.2.8 override pinned an older popper that nested its own copies of primitive, context and the use-* hooks; without it every radix package resolves to a single copy, and compose-refs stays on the patched 1.1.2 through its own override. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com>	2026-10-18 12:50:05 -05:00
3 people	ac77d06d83	Bump the pydantic-genai group across 1 directory with 2 updates (#24700) ... Updates the requirements on [pydantic](https://github.com/pydantic/pydantic) and [google-genai](https://github.com/googleapis/python-genai) to permit the latest version. Updates `pydantic` to 2.14.1 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/compare/v2.13.0b1...v2.14.1) Updates `google-genai` to 2.31.0 - [Release notes](https://github.com/googleapis/python-genai/releases) - [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md) - [Commits](https://github.com/googleapis/python-genai/compare/v2.29.0...v2.31.0) --- updated-dependencies: - dependency-name: google-genai dependency-version: 2.31.0 dependency-type: direct:production dependency-group: pydantic-genai - dependency-name: pydantic dependency-version: 2.14.1 dependency-type: direct:production dependency-group: pydantic-genai ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-18 12:19:14 -05:00
Nicolas MowenandGitHub	d7bb780ff8	Upgrade to ROCm 10.1 (#24708) ... * Update to ROCm 10.1 * Update docs for new setup	2026-10-18 12:13:32 -05:00
3 people	893542f4ca	Update openvino requirement in /docker/main (#24628) ... Updates the requirements on [openvino](https://github.com/openvinotoolkit/openvino) to permit the latest version. - [Release notes](https://github.com/openvinotoolkit/openvino/releases) - [Changelog](https://github.com/openvinotoolkit/openvino/blob/master/docs/RELEASE.MD) - [Commits](https://github.com/openvinotoolkit/openvino/commits/2026.4.1) --- updated-dependencies: - dependency-name: openvino dependency-version: 2026.4.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-18 12:12:38 -05:00
3 people	ecffe9ce25	Update scikit-build requirement in /docker/main (#24627) ... Updates the requirements on [scikit-build](https://github.com/scikit-build/scikit-build) to permit the latest version. - [Release notes](https://github.com/scikit-build/scikit-build/releases) - [Changelog](https://github.com/scikit-build/scikit-build/blob/main/CHANGES.md) - [Commits](https://github.com/scikit-build/scikit-build/compare/0.18.0...0.19.1) --- updated-dependencies: - dependency-name: scikit-build dependency-version: 0.19.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-18 12:11:27 -05:00
3 people	303c6663c5	Bump py-vapid from 1.9.4 to 1.9.6 in /docker/main in the crypto group (#24699) ... Bumps the crypto group in /docker/main with 1 update: [py-vapid](https://github.com/mozilla-services/vapid). Updates `py-vapid` from 1.9.4 to 1.9.6 - [Release notes](https://github.com/mozilla-services/vapid/releases) - [Commits](https://github.com/mozilla-services/vapid/commits) --- updated-dependencies: - dependency-name: py-vapid dependency-version: 1.9.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: crypto ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-18 12:07:03 -05:00
Josh HawkinsandGitHub	275e18403e	Miscellaneous fixes (#24704) ... * remove unreachable FileNotFoundError catches around frame_manager.get * clear the end time cache entry when a segment is moved The successful move returned before the end_time_cache pop at the bottom of move_segment, so every kept segment left its entry, keyframes list included, in the cache for the life of the process. Removing the cache file through drop_segment clears the entry with it. * drop the cache file when the recording destination already exists When the destination mp4 already existed, move_segment returned without removing the cache file, so the next pass probed and resolved the same segment again, forever. The leftover file is now dropped along with its end time cache entry, the same as the exception path. * pace restarts of exited record and audio ffmpeg processes The watchdog loop runs every second, and an exited record or audio ffmpeg was restarted on every pass with no backoff. A camera that refuses connections, such as one rebooting or rejecting credentials, got a reconnect attempt and a dump of ffmpeg's logs every second until it came back. The restart is now gated on can_restart like the stale segment and detect paths. * don't send a stray newline in the certsync tls probe The probe piped echo into openssl s_client, which sent the newline to nginx as a request after the handshake, so nginx logged an empty "" 400 line every 60 seconds on any install with TLS enabled. Reading stdin from /dev/null closes the connection right after the handshake. The fingerprint and the failure logging are unchanged. * require a record expire_interval of at least 1 An expire_interval of 0 or less made the cleanup loop iterate over an empty range, so the cleanup thread exited on startup and expired recordings, temp clips and previews were never removed. * remove the transcription temp wav when whisper raises The temp wav was only removed after a successful transcribe call, so every failed transcription left a file in the cache directory. * don't kill the ipc responder when a described event is gone handle_update_event_description used Event.get, so a GenAI description that finished after its event was deleted raised DoesNotExist on the inter-process REP thread. That thread died with a reply still owed, and every process waiting on the requestor hung until restart. A missing event is now skipped. * size the birdseye frame from the snapped canvas shape The birdseye writer sizes its shared memory with get_canvas_shape, which snaps an unsupported aspect ratio such as 1920x1200 to a supported one, but the tracked object processor read it with the raw config width and height. The sizes never matched, so get returned None on every call and /api/birdseye/latest.jpg returned a 500, which broke the Home Assistant birdseye entity's still image. The reader now uses the same canvas shape, and a missing frame during startup returns an error response instead of raising in cvtColor. * remove dead disconnect timer from the mse player The effect that scheduled a delayed disconnect when playback was disabled never ran its body. The connect effect's cleanup already calls onDisconnect, which clears wsRef before the later effect checks it. * remove partial output when a recording move fails A remux that failed partway, such as on a full disk, left a partial mp4 at the destination. The next pass saw the destination already existed and dropped the cache file instead of retrying, so the segment was never saved. The failed output is now removed so the next pass retries the move. Tests cover the success, existing destination and failed move paths of move_segment.	2026-10-18 04:50:25 -10:00
3 people	1a8644fed5	Bump ruff in /docker/main in the pip-main-minor-patch group (#24701) ... Bumps the pip-main-minor-patch group in /docker/main with 1 update: [ruff](https://github.com/astral-sh/ruff). Updates `ruff` from 0.16.10 to 0.17.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.10...0.17.0) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.17.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-main-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-18 08:36:51 -05:00
[NUT]andGitHub	add310d63d	HAProxy and OPNSense HAProxy add-on added to the proxy guides. (#24671) ... * Include HAProxy example in reverse proxy guide Added HAProxy configuration example for reverse proxy setup. * Revise HAProxy config and add OPNSense guide Updated HAProxy configuration details and added a guide for OPNSense HAProxy add-on setup. * Revise HAProxy configuration steps in guide Updated the step-by-step guide for configuring HAProxy on OPNSense, ensuring clarity and consistency in instructions. * Update note on port 443 request forwarding Clarified note about forwarding requests on port 443 and provided guidance on creating rules and conditions for multiple websites. * Fix proxy mode description and bind command typo Corrected the proxy mode description from Layer 7 to Layer 4 and fixed a typo in the bind command. * Clarify Layer 4 proxy configuration details Added note about changing hdr(host) to req.ssl_sni for TCP traffic.	2026-10-16 16:31:31 -06:00
Josh HawkinsandGitHub	c177849f57	Tweaks (#24684) ... * bound recording snapshot lookups by segment length Ordering the recording snapshot and Frigate+ lookups by stream_type ahead of start_time broke index order, so SQLite fetched and sorted every older recording for the camera on each request (about 100 ms on a 30 day camera, run on the event loop). A start_time lower bound of the frame time minus MAX_SEGMENT_DURATION keeps the lookup to a few rows. * bound recording overlap queries by segment length Clip, export, review and recording deletion, debug replay, motion search, and audio transcription found overlapping recordings with an OR clause that gave SQLite no start_time range, so every call read the camera's whole recording history (30 to 300 ms on a 30 day database). The classification and review description point lookups did the same whenever the timestamp had no recording. A shared recording_overlap helper now adds a start_time lower bound of MAX_SEGMENT_DURATION before the range, which drops no rows because segments are always shorter than that. * probe webrtc before reporting it as not configured The WebRTC gate read only the Frigate config, so an install with no go2rtc candidates showed WebRTC as not configured, even though go2rtc fills in default candidates at startup (including the internal one under the HA app) and WebRTC often worked. Unset candidates now run the connectivity probe first, and only a failed probe reports not configured. The not-configured reason shows as a neutral note that names the setting and says WebRTC is optional, rather than as a red error. * validate trusted_proxies at config load Malformed trusted_proxies entries were only parsed per request in get_remote_addr, so a typo logged a warning on every proxied request and the entry was skipped, collapsing all clients behind that proxy into one rate-limit bucket. The config now rejects unparseable entries at startup and get_remote_addr no longer needs the fallback. Host bits are accepted (192.168.1.1/24 reads as 192.168.1.0/24) so a common typo doesn't take down safe mode, which copies the auth section verbatim. * remove path data from thumbnail payloads The thumbnail data carried a full copy of the object's path, which went out as snapshot.path_data in every events message alongside the top level path_data. Nothing reads the snapshot copy, and the path has no length limit, so it only made events payloads larger. * hide incompatible frigate+ models behind a toggle * keep the probe failure detail in the not-configured console message * use a unique id for each show incompatible models toggle * pad the bottom of the desktop timeline so zoom buttons don't cover segments * create the admin row when auth is disabled so notification registrations persist Installs that never enabled auth had no admin row, so registering for notifications returned 200 but saved nothing. Frigate now creates an admin row with an empty password hash when auth is disabled, and treats that empty hash as first-time setup when auth is enabled later so a password is still generated and printed. Registration returns 404 when no user row was updated, and the success toast only shows after the request succeeds. The Users settings page hides Add User and Reset Password when auth is disabled and notes that accounts only apply once built-in auth is enabled.	2026-10-16 13:49:16 -06:00
El Mehdi TAFIKandGitHub	c9f7cc8165	Compare mask coordinates numerically (#24666) ... * Compare mask coordinates numerically * Fix zone coordinate comparisons and normalize mask examples * Fix validation errors for malformed zone coordinates	2026-10-16 07:53:31 -05:00
Alexander GroßandGitHub	c42fb58391	Add OCI source label to container images (#24674)	2026-10-16 06:46:47 -06:00
Blake Blackshear	62ca5b25ea	Merge remote-tracking branch 'origin/master' into dev	2026-10-15 17:54:06 -05:00
Josh HawkinsandGitHub	698b1ce628	bump version in docs (#24673)	2026-10-15 18:52:01 -04:00
3 people	16a377233e	Translated using Weblate (Slovak) ... Currently translated at 86.4% (102 of 118 strings) Translated using Weblate (Slovak) Currently translated at 98.8% (262 of 265 strings) Translated using Weblate (Slovak) Currently translated at 8.6% (4 of 46 strings) Translated using Weblate (Slovak) Currently translated at 8.0% (5 of 62 strings) Translated using Weblate (Slovak) Currently translated at 9.0% (6 of 66 strings) Translated using Weblate (Slovak) Currently translated at 30.7% (8 of 26 strings) Translated using Weblate (Slovak) Currently translated at 32.0% (8 of 25 strings) Translated using Weblate (Slovak) Currently translated at 1.6% (13 of 771 strings) Translated using Weblate (Slovak) Currently translated at 3.6% (19 of 520 strings) Translated using Weblate (Slovak) Currently translated at 85.1% (120 of 141 strings) Translated using Weblate (Slovak) Currently translated at 17.2% (15 of 87 strings) Translated using Weblate (Slovak) Currently translated at 71.0% (91 of 128 strings) Translated using Weblate (Slovak) Currently translated at 91.6% (55 of 60 strings) Translated using Weblate (Slovak) Currently translated at 78.8% (93 of 118 strings) Translated using Weblate (Slovak) Currently translated at 98.4% (261 of 265 strings) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Viliam Frtala <viliam.frtala@gmail.com> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-dialog/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-groups/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-validation/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-chat/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-classificationmodel/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-exports/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-facelibrary/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-live/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-motionsearch/sk/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-replay/sk/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/Config - Groups Translation: Frigate NVR/Config - Validation Translation: Frigate NVR/common Translation: Frigate NVR/components-dialog Translation: Frigate NVR/views-chat Translation: Frigate NVR/views-classificationmodel Translation: Frigate NVR/views-exports Translation: Frigate NVR/views-facelibrary Translation: Frigate NVR/views-live Translation: Frigate NVR/views-motionSearch Translation: Frigate NVR/views-replay	2026-10-15 08:45:48 -05:00
3 people	6ff8bbd014	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Korean) Currently translated at 100.0% (66 of 66 strings) Translated using Weblate (Korean) Currently translated at 100.0% (281 of 281 strings) Translated using Weblate (Korean) Currently translated at 100.0% (1394 of 1394 strings) Translated using Weblate (Korean) Currently translated at 100.0% (26 of 26 strings) Translated using Weblate (Korean) Currently translated at 100.0% (771 of 771 strings) Translated using Weblate (Korean) Currently translated at 100.0% (520 of 520 strings) Translated using Weblate (Korean) Currently translated at 100.0% (280 of 280 strings) Translated using Weblate (Korean) Currently translated at 100.0% (1393 of 1393 strings) Translated using Weblate (Korean) Currently translated at 100.0% (68 of 68 strings) Translated using Weblate (Korean) Currently translated at 100.0% (128 of 128 strings) Translated using Weblate (Korean) Currently translated at 100.0% (37 of 37 strings) Translated using Weblate (Korean) Currently translated at 100.0% (265 of 265 strings) Update translation files Updated by "Cleanup translation files" add-on in Weblate. Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: sinfancy <yujsjs@gmail.com> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-validation/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-chat/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-events/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-live/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ko/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ko/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/Config - Validation Translation: Frigate NVR/common Translation: Frigate NVR/components-player Translation: Frigate NVR/views-chat Translation: Frigate NVR/views-events Translation: Frigate NVR/views-live Translation: Frigate NVR/views-settings Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
3 people	b22ef39aad	Added translation using Weblate (Georgian) ... Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Added translation using Weblate (Georgian) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Mirian Koridze <mirian@koridze.com>	2026-10-15 08:45:48 -05:00
4 people	7620ea61a8	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Finnish) Currently translated at 100.0% (46 of 46 strings) Translated using Weblate (Finnish) Currently translated at 3.3% (26 of 771 strings) Translated using Weblate (Finnish) Currently translated at 1.9% (10 of 520 strings) Translated using Weblate (Finnish) Currently translated at 71.6% (53 of 74 strings) Translated using Weblate (Finnish) Currently translated at 100.0% (50 of 50 strings) Translated using Weblate (Finnish) Currently translated at 100.0% (129 of 129 strings) Translated using Weblate (Finnish) Currently translated at 100.0% (500 of 500 strings) Translated using Weblate (Finnish) Currently translated at 17.0% (24 of 141 strings) Translated using Weblate (Finnish) Currently translated at 33.9% (95 of 280 strings) Translated using Weblate (Finnish) Currently translated at 16.4% (229 of 1393 strings) Translated using Weblate (Finnish) Currently translated at 100.0% (49 of 49 strings) Translated using Weblate (Finnish) Currently translated at 100.0% (87 of 87 strings) Translated using Weblate (Finnish) Currently translated at 38.6% (56 of 145 strings) Translated using Weblate (Finnish) Currently translated at 89.7% (61 of 68 strings) Translated using Weblate (Finnish) Currently translated at 54.7% (145 of 265 strings) Translated using Weblate (Finnish) Currently translated at 90.6% (453 of 500 strings) Translated using Weblate (Finnish) Currently translated at 90.6% (453 of 500 strings) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Tobbana <tobbana@gmail.com> Co-authored-by: Vesa Takomo <vesatakomo@gmail.com> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/audio/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-camera/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-filter/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/objects/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-classificationmodel/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-events/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-explore/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-exports/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-replay/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-search/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/fi/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/fi/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/audio Translation: Frigate NVR/common Translation: Frigate NVR/components-camera Translation: Frigate NVR/components-filter Translation: Frigate NVR/objects Translation: Frigate NVR/views-classificationmodel Translation: Frigate NVR/views-events Translation: Frigate NVR/views-explore Translation: Frigate NVR/views-exports Translation: Frigate NVR/views-replay Translation: Frigate NVR/views-search Translation: Frigate NVR/views-settings Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
3 people	754a4a9888	Translated using Weblate (French) ... Currently translated at 100.0% (37 of 37 strings) Translated using Weblate (French) Currently translated at 100.0% (118 of 118 strings) Translated using Weblate (French) Currently translated at 99.2% (263 of 265 strings) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: leo <boutin.leo2001@gmail.com> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/fr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-dialog/fr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/fr/ Translation: Frigate NVR/common Translation: Frigate NVR/components-dialog Translation: Frigate NVR/components-player	2026-10-15 08:45:48 -05:00
5 people	58d6454537	Translated using Weblate (Spanish) ... Currently translated at 96.3% (743 of 771 strings) Translated using Weblate (Spanish) Currently translated at 100.0% (520 of 520 strings) Translated using Weblate (Spanish) Currently translated at 100.0% (141 of 141 strings) Translated using Weblate (Spanish) Currently translated at 98.8% (86 of 87 strings) Translated using Weblate (Spanish) Currently translated at 100.0% (145 of 145 strings) Translated using Weblate (Spanish) Currently translated at 100.0% (145 of 145 strings) Translated using Weblate (Spanish) Currently translated at 98.3% (116 of 118 strings) Translated using Weblate (Spanish) Currently translated at 100.0% (500 of 500 strings) Translated using Weblate (Spanish) Currently translated at 98.3% (116 of 118 strings) Translated using Weblate (Spanish) Currently translated at 100.0% (265 of 265 strings) Co-authored-by: David Cambra <cambrafontan.david@gmail.com> Co-authored-by: Drones Aerial <drones.bsas@gmail.com> Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: glafe <tazefr@gmail.com> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/audio/es/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/es/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-dialog/es/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/es/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/es/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-classificationmodel/es/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-explore/es/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-exports/es/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/audio Translation: Frigate NVR/common Translation: Frigate NVR/components-dialog Translation: Frigate NVR/views-classificationmodel Translation: Frigate NVR/views-explore Translation: Frigate NVR/views-exports	2026-10-15 08:45:48 -05:00
3 people	9c399fc519	Translated using Weblate (Indonesian) ... Currently translated at 18.9% (146 of 771 strings) Translated using Weblate (Indonesian) Currently translated at 31.9% (166 of 520 strings) Translated using Weblate (Indonesian) Currently translated at 100.0% (265 of 265 strings) Update translation files Updated by "Cleanup translation files" add-on in Weblate. Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: My-Name-Is-Mac <adhari.mahendra@gmail.com> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/id/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/id/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/id/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/common Translation: Frigate NVR/views-settings	2026-10-15 08:45:48 -05:00
3 people	48470c4537	Translated using Weblate (Italian) ... Currently translated at 100.0% (118 of 118 strings) Translated using Weblate (Italian) Currently translated at 100.0% (265 of 265 strings) Co-authored-by: Angelo Rossi <angelo.rossi@smeup.com> Co-authored-by: Hosted Weblate <hosted@weblate.org> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/it/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-dialog/it/ Translation: Frigate NVR/common Translation: Frigate NVR/components-dialog	2026-10-15 08:45:48 -05:00
3 people	8fd57d81fc	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Polish) Currently translated at 74.0% (208 of 281 strings) Co-authored-by: Artur <wy66m6xm@anonaddy.me> Co-authored-by: Hosted Weblate <hosted@weblate.org> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/pl/ Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
4 people	99134ed4cd	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Czech) Currently translated at 100.0% (46 of 46 strings) Translated using Weblate (Czech) Currently translated at 100.0% (62 of 62 strings) Translated using Weblate (Czech) Currently translated at 100.0% (66 of 66 strings) Translated using Weblate (Czech) Currently translated at 100.0% (26 of 26 strings) Translated using Weblate (Czech) Currently translated at 100.0% (25 of 25 strings) Translated using Weblate (Czech) Currently translated at 100.0% (771 of 771 strings) Translated using Weblate (Czech) Currently translated at 100.0% (520 of 520 strings) Translated using Weblate (Czech) Currently translated at 100.0% (141 of 141 strings) Translated using Weblate (Czech) Currently translated at 100.0% (281 of 281 strings) Translated using Weblate (Czech) Currently translated at 100.0% (1395 of 1395 strings) Translated using Weblate (Czech) Currently translated at 100.0% (49 of 49 strings) Translated using Weblate (Czech) Currently translated at 100.0% (6 of 6 strings) Translated using Weblate (Czech) Currently translated at 100.0% (128 of 128 strings) Translated using Weblate (Czech) Currently translated at 100.0% (60 of 60 strings) Translated using Weblate (Czech) Currently translated at 100.0% (87 of 87 strings) Translated using Weblate (Czech) Currently translated at 100.0% (145 of 145 strings) Translated using Weblate (Czech) Currently translated at 100.0% (68 of 68 strings) Translated using Weblate (Czech) Currently translated at 100.0% (37 of 37 strings) Translated using Weblate (Czech) Currently translated at 100.0% (74 of 74 strings) Translated using Weblate (Czech) Currently translated at 100.0% (118 of 118 strings) Translated using Weblate (Czech) Currently translated at 100.0% (50 of 50 strings) Translated using Weblate (Czech) Currently translated at 100.0% (129 of 129 strings) Translated using Weblate (Czech) Currently translated at 100.0% (265 of 265 strings) Translated using Weblate (Czech) Currently translated at 100.0% (500 of 500 strings) Translated using Weblate (Czech) Currently translated at 100.0% (74 of 74 strings) Translated using Weblate (Czech) Currently translated at 99.1% (117 of 118 strings) Translated using Weblate (Czech) Currently translated at 100.0% (50 of 50 strings) Translated using Weblate (Czech) Currently translated at 100.0% (10 of 10 strings) Translated using Weblate (Czech) Currently translated at 91.4% (118 of 129 strings) Translated using Weblate (Czech) Currently translated at 100.0% (265 of 265 strings) Translated using Weblate (Czech) Currently translated at 100.0% (500 of 500 strings) Translated using Weblate (Czech) Currently translated at 92.3% (109 of 118 strings) Translated using Weblate (Czech) Currently translated at 98.8% (262 of 265 strings) Co-authored-by: Ashus <ashus@users.noreply.hosted.weblate.org> Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Petr Doležal <pietr_czech@users.noreply.hosted.weblate.org> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/audio/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-auth/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-camera/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-dialog/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-filter/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-groups/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-validation/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/objects/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-chat/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-classificationmodel/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-events/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-explore/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-exports/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-facelibrary/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-live/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-motionsearch/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-recording/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-replay/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-search/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/cs/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/cs/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/Config - Groups Translation: Frigate NVR/Config - Validation Translation: Frigate NVR/audio Translation: Frigate NVR/common Translation: Frigate NVR/components-auth Translation: Frigate NVR/components-camera Translation: Frigate NVR/components-dialog Translation: Frigate NVR/components-filter Translation: Frigate NVR/components-player Translation: Frigate NVR/objects Translation: Frigate NVR/views-chat Translation: Frigate NVR/views-classificationmodel Translation: Frigate NVR/views-events Translation: Frigate NVR/views-explore Translation: Frigate NVR/views-exports Translation: Frigate NVR/views-facelibrary Translation: Frigate NVR/views-live Translation: Frigate NVR/views-motionSearch Translation: Frigate NVR/views-recording Translation: Frigate NVR/views-replay Translation: Frigate NVR/views-search Translation: Frigate NVR/views-settings Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
3 people	822c8e2bda	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Catalan) Currently translated at 100.0% (281 of 281 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (1394 of 1394 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (280 of 280 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (278 of 278 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (1393 of 1393 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (771 of 771 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (520 of 520 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (1391 of 1391 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (128 of 128 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (37 of 37 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (759 of 759 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (26 of 26 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (508 of 508 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (1371 of 1371 strings) Translated using Weblate (Catalan) Currently translated at 100.0% (265 of 265 strings) Update translation files Updated by "Cleanup translation files" add-on in Weblate. Co-authored-by: Eduardo Pastor Fernández <123eduardoneko123@gmail.com> Co-authored-by: Hosted Weblate <hosted@weblate.org> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/ca/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/ca/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/ca/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/ca/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-validation/ca/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-live/ca/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ca/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ca/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/Config - Validation Translation: Frigate NVR/common Translation: Frigate NVR/components-player Translation: Frigate NVR/views-live Translation: Frigate NVR/views-settings Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
3 people	df92f07a79	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Belarusian) Currently translated at 100.0% (281 of 281 strings) Translated using Weblate (Belarusian) Currently translated at 100.0% (1394 of 1394 strings) Translated using Weblate (Belarusian) Currently translated at 100.0% (128 of 128 strings) Translated using Weblate (Belarusian) Currently translated at 100.0% (26 of 26 strings) Translated using Weblate (Belarusian) Currently translated at 100.0% (771 of 771 strings) Translated using Weblate (Belarusian) Currently translated at 100.0% (520 of 520 strings) Translated using Weblate (Belarusian) Currently translated at 100.0% (37 of 37 strings) Translated using Weblate (Belarusian) Currently translated at 100.0% (265 of 265 strings) Update translation files Updated by "Cleanup translation files" add-on in Weblate. Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Uladz Maltsau <wldyslw@users.noreply.hosted.weblate.org> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/be/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/be/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/be/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/be/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-validation/be/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-live/be/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/be/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/be/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/Config - Validation Translation: Frigate NVR/common Translation: Frigate NVR/components-player Translation: Frigate NVR/views-live Translation: Frigate NVR/views-settings Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
4 people	7227929a9d	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Romanian) Currently translated at 100.0% (1395 of 1395 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (1394 of 1394 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (281 of 281 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (280 of 280 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (26 of 26 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (771 of 771 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (520 of 520 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (278 of 278 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (1393 of 1393 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (128 of 128 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (37 of 37 strings) Update translation files Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Romanian) Currently translated at 100.0% (1374 of 1374 strings) Translated using Weblate (Romanian) Currently translated at 100.0% (265 of 265 strings) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: lukasig <lukasig@hotmail.com> Co-authored-by: lukasig <lukasig@users.noreply.hosted.weblate.org> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/ro/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/ro/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/ro/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/ro/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-validation/ro/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-live/ro/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ro/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ro/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/Config - Validation Translation: Frigate NVR/common Translation: Frigate NVR/components-player Translation: Frigate NVR/views-live Translation: Frigate NVR/views-settings Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
3 people	03ff04311b	Translated using Weblate (Estonian) ... Currently translated at 100.0% (46 of 46 strings) Translated using Weblate (Estonian) Currently translated at 28.7% (400 of 1393 strings) Translated using Weblate (Estonian) Currently translated at 100.0% (145 of 145 strings) Translated using Weblate (Estonian) Currently translated at 46.0% (65 of 141 strings) Translated using Weblate (Estonian) Currently translated at 100.0% (118 of 118 strings) Translated using Weblate (Estonian) Currently translated at 82.8% (414 of 500 strings) Translated using Weblate (Estonian) Currently translated at 95.1% (138 of 145 strings) Translated using Weblate (Estonian) Currently translated at 28.7% (400 of 1393 strings) Translated using Weblate (Estonian) Currently translated at 94.4% (137 of 145 strings) Translated using Weblate (Estonian) Currently translated at 100.0% (26 of 26 strings) Translated using Weblate (Estonian) Currently translated at 100.0% (128 of 128 strings) Translated using Weblate (Estonian) Currently translated at 93.7% (136 of 145 strings) Translated using Weblate (Estonian) Currently translated at 22.6% (32 of 141 strings) Translated using Weblate (Estonian) Currently translated at 100.0% (37 of 37 strings) Translated using Weblate (Estonian) Currently translated at 100.0% (265 of 265 strings) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Priit Jõerüüt <jrthwlate@users.noreply.hosted.weblate.org> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/audio/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-dialog/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-validation/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-classificationmodel/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-explore/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-live/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-replay/et/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/et/ Translation: Frigate NVR/Config - Validation Translation: Frigate NVR/audio Translation: Frigate NVR/common Translation: Frigate NVR/components-dialog Translation: Frigate NVR/components-player Translation: Frigate NVR/views-classificationmodel Translation: Frigate NVR/views-explore Translation: Frigate NVR/views-live Translation: Frigate NVR/views-replay Translation: Frigate NVR/views-settings	2026-10-15 08:45:48 -05:00
3 people	5eb2b6f04d	Translated using Weblate (Danish) ... Currently translated at 90.0% (450 of 500 strings) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Jan Eenholt <jan@eenholt.dk> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/audio/da/ Translation: Frigate NVR/audio	2026-10-15 08:45:48 -05:00
4 people	ba5330f8cf	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Portuguese (Brazil)) Currently translated at 98.7% (761 of 771 strings) Translated using Weblate (Portuguese (Brazil)) Currently translated at 98.4% (512 of 520 strings) Translated using Weblate (Portuguese (Brazil)) Currently translated at 98.4% (759 of 771 strings) Translated using Weblate (Portuguese (Brazil)) Currently translated at 98.0% (510 of 520 strings) Translated using Weblate (Portuguese (Brazil)) Currently translated at 100.0% (37 of 37 strings) Translated using Weblate (Portuguese (Brazil)) Currently translated at 100.0% (265 of 265 strings) Update translation files Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Portuguese (Brazil)) Currently translated at 100.0% (759 of 759 strings) Translated using Weblate (Portuguese (Brazil)) Currently translated at 100.0% (508 of 508 strings) Translated using Weblate (Portuguese (Brazil)) Currently translated at 99.3% (1365 of 1374 strings) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Paulo Fernando <paulofme01@gmail.com> Co-authored-by: Ricardo RFPP <ricardo.inteli@gmail.com> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/pt_BR/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/pt_BR/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/pt_BR/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/pt_BR/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/pt_BR/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/common Translation: Frigate NVR/components-player Translation: Frigate NVR/views-settings Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
5 people	7c6c529314	Update translation files ... Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Turkish) Currently translated at 100.0% (1395 of 1395 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (1394 of 1394 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (281 of 281 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (280 of 280 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (1393 of 1393 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (26 of 26 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (771 of 771 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (520 of 520 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (141 of 141 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (1391 of 1391 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (1391 of 1391 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (128 of 128 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (37 of 37 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (265 of 265 strings) Update translation files Updated by "Cleanup translation files" add-on in Weblate. Translated using Weblate (Turkish) Currently translated at 100.0% (1374 of 1374 strings) Translated using Weblate (Turkish) Currently translated at 100.0% (1374 of 1374 strings) Co-authored-by: Hosted Weblate <hosted@weblate.org> Co-authored-by: Murat Odabasi <modabas@users.noreply.hosted.weblate.org> Co-authored-by: Murat Odabasi <murat12@gmail.com> Co-authored-by: pcislocked <git@pcislocked.net> Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/common/tr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/components-player/tr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-cameras/tr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-global/tr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/config-validation/tr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-classificationmodel/tr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-live/tr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-settings/tr/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/ Translate-URL: https://hosted.weblate.org/projects/frigate-nvr/views-system/tr/ Translation: Frigate NVR/Config - Cameras Translation: Frigate NVR/Config - Global Translation: Frigate NVR/Config - Validation Translation: Frigate NVR/common Translation: Frigate NVR/components-player Translation: Frigate NVR/views-classificationmodel Translation: Frigate NVR/views-live Translation: Frigate NVR/views-settings Translation: Frigate NVR/views-system	2026-10-15 08:45:48 -05:00
3 people	15da89e56c	Avoid buffering raw frames during watchdog resets (#24663) ... * Don't buffer detect ffmpeg stdout when resetting the capture thread reset_capture_thread waited for the terminated detect process with communicate() on the no-frames and stale sub stream paths. communicate() reads the process's raw frames into memory until it exits, and a stalled detect process can write hundreds of duplicate frames per second before it does. Use wait() on every path, as the fps-exceeded path has since #19110; the timeout and kill still bound the wait. * Update frigate/video/ffmpeg.py accurately explain why wait() is safe Co-authored-by: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com> * test(watchdog): remove non-regression child process test The Python child exits on SIGTERM, so this test also passes with the original communicate() reset. Keep the two mock tests that distinguish the fix and remove the unused imports. --------- Co-authored-by: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com>	2026-10-15 07:19:13 -06:00
Josh HawkinsandGitHub	64b07889af	Tweaks and fixes (#24659) ... * add last time to active notices * Stop retrying the review lookup in the explore detail menu when it 404s * don't let a slow websocket client block publishers A websocket client that stopped reading its socket (for example a suspended workstation with a Frigate tab open) blocked ws4py's sendall on whatever thread was publishing, including the single inter-process responder thread, so the recording maintainer and stats hung until nginx dropped the client after 5 minutes. Each client now gets its own bounded send queue and writer thread, and a client that overflows the queue is shut down. ws4py writes close and pong frames directly on its shared manager thread, bypassing the queue, so a 10s socket send timeout keeps a stalled client from pinning that thread. The jsmpeg and birdseye outputs share the class, so their unreachable send error handling is removed. * don't let a lost object enter a zone When the detector lost an object, the tracker kept it at its last box and every held frame still counted toward the zone's inertia. A car detected in a zone once or twice as it drove out of view could reach an inertia of 8 and be marked as entering, which sent it to GenAI and any other required zones check even though Review never showed the zone. Inertia and loitering still count on frames without a detection, but an object can only newly enter a zone on a frame where it was actually detected. * add test * limit retry stop to 404 only * add docstrings	2026-10-15 06:54:59 -06:00
Josh HawkinsandGitHub	cfa08c56b2	Normalize request paths in media auth (#24662) ... * merge repeated slashes in the media auth path check X-Original-URL carries only the raw request path since #24602, and extract_path parsed it with urlparse, which reads a path starting with // as a host. A restricted role could request another camera's clips or recordings with a leading // and the media check saw a non-media path and allowed it, while nginx merged the slashes and served the file. extract_path now splits the raw URI the same way the go2rtc stream check does and merges repeated slashes as nginx does before matching locations. The split helper moves from auth.py into media_auth.py so both checks share it. * check the nginx-normalized path in the media auth dot-segment fallback The dot-segment fallback only checked the raw first segment, so a role restricted to one camera could request `/x/../clips/back_door-1.jpg` and nginx served back_door's clip. The fallback now resolves the path the way nginx does before checking for a media root, and the URI split ends at a literal `#` since nginx ignores everything after it. v0.18.2	2026-10-15 07:02:08 -05:00
Blake BlackshearandClaude Opus 5.5	2b0a69c028	Merge remote-tracking branch 'origin/master' into dev ... Brings the go2rtc security fixes from #24658 to dev. Dev-specific changes in the merge: - frigate/config/env.py stays deleted; the environment_vars protection for GO2RTC_ALLOW_ARBITRARY_EXEC moves to apply_config_env_vars in frigate/util/env.py, so the value never reaches os.environ - services.py imports substitute_frigate_vars from frigate.util.env and maps UnknownVariableError to the unknown variable message - go2rtc stream tests patch dev's import-time exec override snapshot and its FRIGATE_* variable sources - test_http_media.py keeps dev's _insert_recording helper; the one added on master replaced it and broke the dev tests Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 14:30:11 -05:00
3 people	a3ca8742b0	Security patches (#24658) ... * update version * Restrict ffmpeg: go2rtc sources added through the API go2rtc expands ffmpeg: sources into an exec: command line built from the source's #key=value parameters, so the echo/expr/exec prefix check on PUT /go2rtc/streams could be bypassed to run arbitrary ffmpeg arguments. Sources submitted through the API now only accept the ffmpeg: parameters the UI and docs use (video, audio, hardware with preset names, plus numeric width/height/rotate/bitrate/timeout and async). Quotes, whitespace, #raw, #input, #drawtext and unknown parameters are rejected unless GO2RTC_ALLOW_ARBITRARY_EXEC is set. Sources defined in the config file are unchanged. Fixes GHSA-qjjw-3v66-279f Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Only allow existing streams on proxied go2rtc live paths nginx proxies /live/mse/api/ws, /live/webrtc/api/ws and /api/go2rtc/webrtc straight to go2rtc, which creates a new ad hoc stream from any src that is not an existing stream name and starts the producer it describes. Any authenticated user, including the built-in viewer role, could use this to launch arbitrary go2rtc sources without going through the restricted-source checks on PUT /go2rtc/streams. The /auth subrequest now denies these paths unless every src names an existing stream: a camera or its live stream, a go2rtc stream from the config, or a stream go2rtc reports at runtime. This applies to every role, and the runtime lookup fails closed when go2rtc cannot be reached. Fixes GHSA-93xj-hg88-ffg7 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Ignore GO2RTC_ALLOW_ARBITRARY_EXEC in environment_vars environment_vars installs every key into the Frigate process environment at startup, so an admin could enable GO2RTC_ALLOW_ARBITRARY_EXEC from the config and turn off the restricted go2rtc source checks on the API. The override is meant to be set by the operator in the container environment (or the Home Assistant add-on options), so it is now skipped with a warning when it appears in environment_vars. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Apply go2rtc source restrictions to config/save and config/set go2rtc.streams written through config/save or config/set were only filtered at startup, which blocks echo/expr/exec and the map form but not the ffmpeg: parameters that PUT /go2rtc/streams now rejects. Saving a stream this way and restarting bypassed the API restriction. Both endpoints now reject a change that adds a go2rtc stream source that fails is_restricted_go2rtc_api_source, or a map-form source, unless GO2RTC_ALLOW_ARBITRARY_EXEC is set. Sources already in the saved config for the same stream are left alone, so streams configured on disk keep working and resubmitting the whole file from the config editor succeeds. config/set restores the previous file when it rejects a change. Follow-up to GHSA-qjjw-3v66-279f Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Match go2rtc stream-proxy paths the way nginx does /auth compared the raw $request_uri path against the three go2rtc stream-proxy paths exactly, while nginx matches its prefix locations against the normalized URI. Encoded characters, repeated slashes, dot segments or a suffix on the path skipped the stream check even though nginx still proxied the request to go2rtc. The go2rtc stream locations now set a variable that the auth subrequest forwards as X-Go2rtc-Stream-Proxy (client headers are not forwarded, so it cannot be spoofed). As a fallback, /auth also normalizes the path like nginx (percent-decoding, merging slashes, resolving dot segments) and prefix matches it, and splits the raw URI by hand since urlparse reads a leading // as a host. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Parse config stream changes with Frigate's YAML loader The go2rtc stream check on config/save and config/set parsed the config with the safe loader and treated a parse error as an empty config, while Frigate and the go2rtc startup script use the round-trip loader. Input that only the round-trip loader accepts, such as a tagged root map, hid new stream sources from the check. The check now uses the same round-trip loader and rejects the request when the new config cannot be parsed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Resolve go2rtc stream placeholders the same way everywhere The go2rtc startup script expanded stream sources with str.format(), which also supports attribute and index access, while the config API check used substitute_frigate_vars and fell back to the raw string when a placeholder could not be resolved. A placeholder the API check could not resolve could therefore expand into a restricted source at startup. The startup script now uses substitute_frigate_vars, like the rest of the config, and the API check rejects a stream source whose placeholders cannot be resolved. The startup script's own copy of the FRIGATE_* env var map is removed; the shared one also honors CREDENTIALS_DIRECTORY. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Accept codec sample rates in ffmpeg: go2rtc sources The ffmpeg: parameter allowlist only accepted plain names for video, audio and hardware, so the documented HomeKit source with #audio=opus/16000 was rejected by PUT /go2rtc/streams, config/save and config/set. Names may now carry a numeric /rate suffix. A rate without a name is still rejected. All ffmpeg: sources in the docs pass the check. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Restore the environment after go2rtc exec override tests Tests that removed or set GO2RTC_ALLOW_ARBITRARY_EXEC did not restore a value that was already present, so later tests could run with a changed security setting. They now use patch.dict on os.environ. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Revert the go2rtc startup script to str.format substitution Restores create_config.py to its state on master. The config API check rejects any stream source whose {FRIGATE_*} placeholders it cannot resolve with substitute_frigate_vars, and for every source it accepts, str.format() at startup either produces the same string or fails and stops go2rtc startup. Changing the startup script is therefore not needed for the fix, and leaving it alone avoids a conflict with dev, which already moved this script to the new env helpers. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Explain why a go2rtc stream change was rejected A stream source with an undefined or malformed {FRIGATE_*} placeholder was reported as a restricted source, which reads like a security block when the user made a typo. The config API now reports unknown variables and invalid placeholders separately from restricted sources. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 15:10:05 -04:00
Josh HawkinsandGitHub	d3b2af932c	bump version in docs (#24654)	2026-10-13 17:07:09 -06:00
Josh HawkinsandGitHub	b79e043976	Reduce idle CPU from thread pools (#24652) ... * reduce idle cpu from onnxruntime and opencv thread pools ONNX Runtime's intra-op threads kept spinning for about 1 s after every run, so a CPU enrichment called once a second or more kept most cores busy. On a 16 thread machine, arcface at one call per second used 9.4 s of CPU per call with ~360 ms latency. Enrichment sessions on the CPU execution provider now set `session.intra_op.allow_spinning` to 0, which drops that to 1.9 s with no latency change. Detector sessions and GPU providers are unchanged, since disabling spinning doubled yolov9-t latency on CPU (12 to 23 ms). The output and embeddings processes now run OpenCV single threaded, like the camera tracking process. A 4 camera birdseye redraw at 1080p drops from 13.7 to 4.0 ms of CPU, and the full frame conversion in the enrichment processors from 23 to 2.7 ms, each adding about 1 ms of wall time. * test that only cpu enrichment sessions disable ort spinning * patch out the neural engine in the spinning test	2026-10-13 07:46:55 -06:00
Josh HawkinsandGitHub	e61ad52b67	move env helpers out of the config package (#24648) ... go2rtc's create_config.py imported frigate.config.env, which ran the frigate.config package init and loaded every detector plugin. Since the onnxruntime 1.30 bump, importing onnxruntime takes about 5s on some hosts, so go2rtc started after Frigate's cameras and every ffmpeg process failed to connect to the restream until it came up. The env helpers now live in frigate.util.env, so go2rtc's config script no longer imports onnxruntime.	2026-10-12 14:54:50 -05:00
Josh HawkinsandGitHub	41d9577d72	Fix docs shm calculator (#24649) ... * match the docs shm calculator to the backend's minimum The calculator left out the room Frigate reserves for 2 cameras added at runtime, counted the per-frame overhead once per camera instead of per frame, and reserved 40mb instead of 50mb for logs and the nginx cache, so a setup sized with it got well under 20 frames and the "SHM size is too small" warning. It now computes the same minimum as calculate_shm_requirements() and also shows the size for the full 50 frame cache. * size the docs shm calculator for 25 frames Sizing to the backend's 20 frame minimum could land at 19 frames from float rounding and still show the warning.	2026-10-12 13:51:21 -06:00
Josh HawkinsandGitHub	cf67f08913	fix mse buffer trim spinning in a remove loop (#24643) ... Subtracting 15s from the buffered end left a floating point remainder, so when Firefox held exactly 15s of buffer the handler called remove() on a near-zero range that removed nothing, and each updateend called it again. The loop pegged a CPU core and kept running after the websocket closed. Trimming now requires more than 1s past the window. v0.18.1	2026-10-12 10:22:02 -06:00
Josh HawkinsandGitHub	ff9eb8f184	Keep frame shared memory mapped (#24644) ... * keep frame shm open and skip overwritten frames Every reader closed and reopened a frame's shared memory segment on each frame, so each process paid a page fault on every page of a fresh mapping (about 760 for a 1080p frame) per frame. Readers now keep segments mapped. Capture stamps each slot's frame time in a per-camera `{camera}_frame_times` segment, and `get()` returns None when the slot no longer holds the requested frame, reopening once by name so a mapping left over from a same-size camera recreate heals itself. Capture also reuses a slot when the frame queue is full, since no reader was told about it. * verify the frame for embeddings object updates Tracked object events only carried the object's own frame_time, which stays at its last detection when the object isn't detected in a frame, so embeddings couldn't check the slot it read and could crop face or plate data from a frame that had already been overwritten. Events now carry the time of the frame they name, and embeddings passes it to `get()`. * log when a frame slot was overwritten before it was read A lapped read and a missing segment ended up as the same debug line at every caller, so there was no way to tell a slow reader from a missing frame. * bring the FrameManager interface in line with its implementation The abstract get() still had a timeout_ms signature from an older implementation and frame_times() wasn't declared, though capture and detect are typed against the interface. get() also didn't say how long the array it returns stays valid. * drop a camera's cached frame mappings when it is removed or recreated A reader that kept its mappings open stayed on a removed camera's segments, which pinned their shared memory until restart, and after a same-size recreate the ledger reopen only refreshed the slot being read while the other cached slots still returned the old camera's pixels. Readers now drop every cached slot for a camera on its remove update, and get() does the same when a ledger mismatch turns out to be a replaced ledger rather than a lapped slot. * match a camera's frame names exactly in close_camera The prefix match on `{camera}_frame` also caught another camera whose name starts with it, so removing `cam` dropped the cached ring of a camera named `cam_frame`.	2026-10-12 10:21:08 -06:00
Josh HawkinsandGitHub	bc06b8c753	run opencv single threaded in camera tracking processes (#24640) ... OpenCV's default thread pool is sized to every core, and its idle threads spin while it works on the small motion frames and detection regions in each camera tracking process. On a 16 thread machine replaying 720p clips at 5 fps, tracking CPU dropped from 27-50 ms to 5-8 ms per frame with identical output and no change in wall time. Frames from ffmpeg are now also read directly into shared memory with readinto(), which skips one copy per frame.	2026-10-11 21:01:58 -06:00
3 people	e7164882f5	Return to the requested URL after logging in (#24637) ... When an unauthenticated user opens a deep link, carry the requested path through the login page in a redirect query param and return to it after a successful login instead of always going to the home page. Only same-origin targets are honored. Claude-Session: https://claude.ai/code/session_011CFGjgYURSRTpXBaxp1Dq7 Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-11 17:59:13 -06:00
Martin WeineltandGitHub	135a95d8f2	Fix various warnings and deprecations (#23641) ... * Migrate to fastapi lifespan for startup events The `on_event` style decorator is deprecated https://fastapi.tiangolo.com/advanced/events/ * Migrate to pydantic TypeAdapter https://pydantic.dev/docs/validation/2.12/get-started/migration/#introduction-of-typeadapter * Replace pytz with native tz-aware objects and zoneinfo library Supported from Python 3.9, see https://peps.python.org/pep-0615/. Also https://blog.ganssle.io/articles/2019/11/utcnow.html. Also provide tzdata as new dependency to supplement systems without local tzdata information. * Provide lookup for normalized timezone names This provides a helper to look up the correct timezone name independent of the casing of the given timezone name. * Test timezone naming normalization and error handling	2026-10-11 17:49:33 -05:00
Josh HawkinsandGitHub	7e402d70df	Fix environment_vars not reaching ffmpeg processes (#24635) ... * start the forkserver after the config applies environment_vars The forkserver started as a side effect of creating the multiprocessing Manager at the top of main(), before the config loaded, so every worker process and the ffmpeg it launched inherited the environment from before environment_vars were applied. Variables like LIBVA_DRIVER_NAME set in config.yml never reached ffmpeg. The Manager now uses the fork context, so the forkserver does not start until the first worker process. * fix test	2026-10-11 13:21:45 -06:00
Josh HawkinsandGitHub	186a730790	use CLIPImageProcessorPil to silence transformers torchvision warning (#24636)	2026-10-11 13:21:21 -06:00
Josh HawkinsandGitHub	5c32af3c7f	Autotracking improvements and fixes (#24633) ... * fix autotracking tracker selection and crop before histogram conversion - Rebuild the norfair trackers when an onvif save changes autotracking enabled_in_config or the PTZ-tracked labels. The trackers were only built at startup, so disabling autotracking or removing person from its track list in the UI made get_tracker pick a tracker that didn't exist, and the KeyError killed the camera process until restart. Saves that leave the selection alone, and runtime MQTT toggles, don't touch tracking. - get_tracker now returns the default tracker that match_and_update actually feeds. On autotracking cameras it returned the static default for labels without their own tracker, so register missed the norfair object and lost the pre-initialization score history, and deregister pruned the wrong tracker. - get_histogram crops the box out of each I420 plane before converting to BGR instead of converting the whole frame. It runs per detection per frame on autotracking cameras and now costs about 0.2 ms at any resolution, down from 1 ms at 1080p and 5 ms at 4K. * don't rebuild trackers for track list edits while autotracking is disabled	2026-10-11 07:02:42 -06:00