v1.9.12
Zielon/INSTAv1.9.12Nov 16, 2025by AlexxIT
AI Summary
This release focuses on security updates, HomeKit server improvements, and various source fixes including ONVIF and Tapo camera support.
Key Highlights
- Extensive security updates including local_auth and allow_paths config
- Added support for maxwidth/maxheight settings in HomeKit server
- Added API endpoint to return supported schemas
- Fixed HomeKit proxy for hass source and accessories
New Features
- Added insecure sources logic and URI checks
- Improved HomeKit secure connection buffers
- Fixed ONVIF client for Tapo cameras
- Fixed tapo source for some camera models
Full Release Notes
## Security update - Add security notes to readme (cb22ae78) - Add config local_auth for api module (44d59b16) - Add config for the list of modules to init (15ec995e) - Add config allow_paths for api module (231cab36) - Add config allow_paths for exec module (640db302) - Add config allow_paths for echo module (2836fdae) - Add insecure sources logic (2133f532) - Add check for insecure uri from onvif source (e2c7d067) - Add errors output to streams API (ac80f147) - Add trace log for ignored api paths (2ce38b44) ## HomeKit server update - Add support maxwidth/maxheight settings for homekit source (d053d88c) - Add support custom params for hass source (964bb225) - Add support uint64 to tlv8 (96919bf9) - Code refactoring for HomeKit server (158f9d3a) - Improve homekit secure conn buffers (ff18283d) - Improve homekit tlv8 parsing (994e0dc5) - Rename HomeKit structures according to specs (e4359ac2) - Fix HomeKit proxy EVENTs #684 #1923 (81cfcf87) - Fix HomeKit proxy for hass source #1353 (5cc32197) - Fix API /api/homekit/accessories (bc1a4ac8) ## WebUI update - Update WebUI design (1fe60267) ## Other - Add api endpoint to return supported schemas #1939 by @edenhaus (c98b0a83) - Code refactoring for tapo source (7254bd4f) - Restore simple onvif client logic (cc97bc33) - Fix onvif client for some cameras (6db4dda5) - Fix tapo source for some cameras #1918 (9f407a75) - Fix wrong log message for streams module (c10a06d1)