Implement reportAccountAction, fix bug in auth flow between sonos and… - #1
Open
chxx wants to merge 78 commits into
Open
Implement reportAccountAction, fix bug in auth flow between sonos and…#1chxx wants to merge 78 commits into
chxx wants to merge 78 commits into
Conversation
…e data for some reason, adding endpoints stops 404 however
Cannot upgrade to node 24 without looking armv7 support
… redundant key value from various sonos interaction calls, rename bnbt header to authorization
* Refactor/cleanup library/service versus subsonic Move subsonic music service/library into own file * Remove bearer token and unused variations of subsonic service type
…to (#238) support auth headers in http request smapi option
Bumps [jws](https://github.com/brianloveswords/node-jws) to 3.2.3 and updates ancestor dependency . These dependencies need to be updated together. Updates `jws` from 3.2.2 to 3.2.3 - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) Updates `jws` from 4.0.0 to 4.0.1 - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) --- updated-dependencies: - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect - dependency-name: jws dependency-version: 4.0.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [qs](https://github.com/ljharb/qs) from 6.14.0 to 6.14.1. - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.0...v6.14.1) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Correct documentation around the use of cloudflared
When S1 is disabled (the default), skip reading all other SONOS_* env vars and return hardcoded safe defaults (discovery disabled, sid -1). Only when BNB_SONOS_ENABLE_S1=true are the env vars consulted.
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6. - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.5...v4.0.6) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Clarified that Sonos only supports HTTPS on port 443, and using another port will fail silently.
* Bump axios to 1.18.1 axios 1.18.1's response header types are now a broader union (AxiosHeaderValue | undefined via bracket access) rather than plain string, surfacing a few spots that assumed headers were always present: - TrackStream.headers widened to allow undefined per field - matches what server.ts's respondWith already did at runtime (filtering out undefined entries before calling res.setHeader), it just wasn't reflected in the type before. - sonosisfyContentType now only runs when content-type is actually present, since it unconditionally splits the string. - CoverArt.contentType (a non-optional string) coerces a missing header to an empty string rather than propagating undefined, since that type never allowed for absence. All 1651 tests pass, build is clean. * Bump @babel/core to 7.29.7 Transitive dev-dependency via jest, pinned through overrides since it's not a direct dependency. Was resolving to 7.28.5, flagged by npm audit for an arbitrary file read via sourceMappingURL comment (GHSA-4x5r-pxfx-6jf8, fixed in 7.29.6). Pinned to the latest 7.x release rather than the new 8.x major, since jest 30.3.0's babel toolchain (babel-jest, babel-preset-jest, etc.) is built against babel 7. All 1651 tests pass, build is clean. * Fix remaining npm audit findings: brace-expansion and js-yaml Both transitive dev-dependencies, pinned through overrides: - brace-expansion 5.0.5 (via nodemon -> minimatch@10) hit a DoS in its numeric-range expansion (GHSA-jxxr-4gwj-5jf2, fixed in 5.0.6). Scoped the override to nodemon's dependency chain specifically rather than overriding brace-expansion globally - jest pulls in separate 1.x/2.x instances via its own minimatch versions that aren't vulnerable (only the 5.x line has this bug) and would have broken under a 5.x override. - js-yaml 3.14.2 (via jest's babel-plugin-istanbul) had a quadratic-complexity DoS in merge key handling (GHSA-h67p-54hq-rp68, fixed in 3.15.0). Only one instance in the tree, so a plain override was sufficient. npm audit now reports 0 vulnerabilities. All 1651 tests pass, build clean.
Bumps [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) from 1.15.24 to 1.15.43. - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md) - [Commits](https://github.com/swc-project/swc/commits/v1.15.43/packages/core) --- updated-dependencies: - dependency-name: "@swc/core" dependency-version: 1.15.43 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [dayjs](https://github.com/iamkun/dayjs) from 1.11.20 to 1.11.21. - [Release notes](https://github.com/iamkun/dayjs/releases) - [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md) - [Commits](iamkun/dayjs@v1.11.20...v1.11.21) --- updated-dependencies: - dependency-name: dayjs dependency-version: 1.11.21 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@types/supertest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/supertest) from 6.0.3 to 7.2.0. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/supertest) --- updated-dependencies: - dependency-name: "@types/supertest" dependency-version: 7.2.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…d env var cleanup (#287)
…icons to appear (#314)
* Tweak icons for loved/stared * Update labels for S1 love/unlove & stars
… resource ids coming navidrome (#318)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
… bonob