chore(deps): bump Jellyfin.Controller from 10.8.12 to 10.8.13

[dependabot[bot]]

Bumps Jellyfin.Controller from 10.8.12 to 10.8.13.

Release notes

Sourced from Jellyfin.Controller's releases.

10.8.13

Jellyfin 10.8.13

Stable hotfix release for 10.8.z release branch.

New Features and Major Improvements

N/A

Release Notes

• NOTICE: The customizable FFmpeg binary path in the WebUI/API has been REMOVED for security reasons. Please see the corresponding blog post here for further details.

This bugfix release contains two GHSA security fixes; the details of these vulnerabilities will be released publicly on December 5th 2023. Please ensure you update your systems as soon as possible. Credit to @​Kwstubbs (of GitHub Security Labs), @​FredericLinn, and @​mawalu for finding these.

Changelog

GitHub Project: https://github.com/orgs/jellyfin/projects/29

jellyfin [3]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

• #10625 [@​ilovepilav] Fix: Plugin Installed Alerts missing from Admin Dashboard #10620
• GHSA-rr9h-w522-cvmr [@​joshuaboniface] Remove the functionality of /System/MediaEncoder/Path
• GHSA-866x-wj5j-2vf4 [@​crobibero] Validate codec and container

jellyfin-web [3]

Note: Dependabot & Renovate automatic PRs are excluded from this list.

• jellyfin/jellyfin-web#5019 [@​joshuaboniface] Set FFmpeg path disabled
• jellyfin/jellyfin-web#4993 [@​rafma0] Remove FLAC Audio in Video Support for Tizen (Backport #4938)
• jellyfin/jellyfin-web#4992 [@​rafma0] Fix jittering in emby-checkbox (Backport #4929)

Commits

• e93d03d Bump version to 10.8.13
• a656799 Merge pull request from GHSA-866x-wj5j-2vf4
• 83d2c69 Merge pull request from GHSA-rr9h-w522-cvmr
• 204fdeb Validate codec and container
• c4cdcb7 Merge pull request #10625 from ilovepilav/fix-alerts-missing-from-admin-dashb...
• 1e0bd32 Set Path endpoint obsolete
• bf5f00a Restore original flag behaviour
• 0430ffe Restore ordering
• 85cfd08 Remove the functionality of /System/MediaEncoder/Path
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)