This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryUpdates 🎬 What's new, 🛠 Reliability & fixes, and https://github.com/ikatson/rqbit across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds native support for Real-Debrid, AllDebrid, Premiumize, and TorBox as debrid download clients. Adds native support for Real-Debrid, AllDebrid, Premiumize, and TorBox as debrid download clients. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Adds native adapter for rqbit, a lightweight Rust BitTorrent client. Adds native adapter for rqbit, a lightweight Rust BitTorrent client. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Adds in-app feedback form routing through metadata relay's feedback inbox. Adds in-app feedback form routing through metadata relay's feedback inbox. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Feature | Medium |
Writes Jellyfin NFO files during library scan, not just on metadata refresh. Writes Jellyfin NFO files during library scan, not just on metadata refresh. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Disables pushed authorization requests (PAR) and OIDC request parameter, fixing JAR rejection against Authelia. Disables pushed authorization requests (PAR) and OIDC request parameter, fixing JAR rejection against Authelia. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Runs ReleaseValidator when a release is grabbed, rejecting bad releases earlier. Runs ReleaseValidator when a release is grabbed, rejecting bad releases earlier. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Stops infinite retry loop for unimportable malware downloads. Stops infinite retry loop for unimportable malware downloads. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Consolidates download adapter resolution onto the Registry, degrading unresolved adapters to errors instead of crashes. Consolidates download adapter resolution onto the Registry, degrading unresolved adapters to errors instead of crashes. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Falls back to database episode counts when metadata reports zero, fixing season-pack threshold logic. Falls back to database episode counts when metadata reports zero, fixing season-pack threshold logic. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Correctly links SystemConfiguration in the iOS build, ensuring consistent FadeForwards page transitions. Correctly links SystemConfiguration in the iOS build, ensuring consistent FadeForwards page transitions. Source: llm_adapter@2026-06-03 Confidence: high |
— |
Full changelog
Mydia v0.11.1
A patch release on top of v0.11.0. It brings the iOS player to TestFlight and carries over everything from v0.11.0 below.
📱 What's new in v0.11.1
- The Mydia iOS player is now in open beta on TestFlight. Join with the link in the README or the Remote Access docs.
- Release builds now distribute to the public TestFlight Beta group automatically.
Full Changelog: https://github.com/getmydia/mydia/compare/v0.11.0...v0.11.1
Mydia v0.11.0
v0.11.0 lands two new ways to download, a rebuilt media-analysis pipeline, an in-app feedback channel, and a pile of reliability fixes across downloads and auth. If you've been on :master, most of this has already been running in your install.
🎬 What's new
Debrid download clients
Mydia now speaks debrid. Real-Debrid, AllDebrid, Premiumize, and TorBox are first-class download clients, with a dedicated admin UI, connection testing, and a per-download fetcher that pulls completed files into your library staging directory.
- New
:debridclient type with its own provider behaviour, rate limiter, and per-download fetcher GenServer. - Real-Debrid runs natively; AllDebrid, Premiumize, and TorBox run through Bypass.
- Downloads surface a proper
:queuedlifecycle on the Downloads page instead of looking stuck. - Hardened against real-world edge cases: RFC1918 ranges no longer block Real-Debrid CDN traffic, error codes map to sensible states, and
test_connectionworks on both fresh and saved forms.
rqbit torrent client
A native adapter for rqbit, the lightweight Rust BitTorrent client. It plugs into the same adapter registry as qBittorrent and Transmission, including untracked-torrent matching.
Rebuilt media analysis
ffprobe no longer runs inline on the import hot path. Analysis now goes through a dedicated pipeline:
- Port-based ffprobe with a hard timeout and SIGKILL, so a wedged probe can't stall imports.
- A recurring
FileAnalysisworker that backfills and refreshes analysis state out of band. - New analysis-state columns on
media_filesand a sharedapply_analysis/2write helper. - Self-healing for cropped 1080p media and stuck partial-state analyses, with cross-database queries that work on both SQLite and Postgres.
In-app feedback
There's now a feedback form built into the app, so you can send a report without leaving Mydia. It routes through the metadata relay's feedback inbox for triage.
Jellyfin NFO on library scan
NFO files now get written when items are imported through a library scan, not just on metadata refresh, so Jellyfin-side metadata stays in sync however media enters your library.
🛠 Reliability & fixes
- OIDC / Authelia: disabled pushed authorization requests (PAR) and the OIDC request parameter natively, fixing JAR rejection against Authelia and similar providers.
- Release validation at grab time: the
ReleaseValidatornow runs when a release is grabbed, not just at search, so bad releases are rejected earlier. - Malware retry loop: unimportable malware downloads stop retrying forever instead of hammering the import path.
- Download adapter resolution is consolidated onto the Registry; an unresolved adapter degrades to an error instead of crashing the queue.
- Search: episode counts fall back to the database when metadata reports zero, fixing season-pack threshold logic.
- Player: consistent FadeForwards page transition across platforms, and the iOS build links
SystemConfigurationcorrectly. - CI/build: p2p NIF crates are vendored via
importCargoLockto dodge crates.io 403s during Nix builds.
Upgrading
Pull the v0.11.0 image (or :latest). No manual migration steps. Existing download clients and libraries are unaffected; debrid and rqbit are opt-in from the download-client admin.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]