jellyfin/tests/Jellyfin.Server.Implementations.Tests/Users, branch master

Merge remote-tracking branch 'upstream/master' into security-path-traversal-fixes

2026-07-21T05:14:47Z

# Conflicts: # Jellyfin.Api/Controllers/HlsSegmentController.cs # Jellyfin.Api/Controllers/PluginsController.cs

Harden remaining path-construction sinks against traversal

2026-07-17T15:08:59Z

Fix profile image being impossible to clear when its in-memory key is temporary

2026-07-09T11:39:09Z

ClearProfileImageAsync removed the ProfileImage instance attached to the passed-in User, but that instance can carry a stale, never-persisted (temporary) key because UpdateUserAsync creates the persisted image on a separately loaded entity and never copies the generated key back. Removing that detached entity on a fresh DbContext made EF Core throw InvalidOperationException ('ImageInfo.Id has a temporary value'), leaving the profile image impossible to delete or replace. Load the tracked, persisted user and remove its actual ProfileImage, matching the removal pattern already used in UpdateUserAsync. Adds regression tests covering the temporary-key case and the no-image no-op (the first fails before this change and passes after). Fixes #13137 Co-Authored-By: Claude Fable 5

Fix xUnit1051 in UserManagerLockHelperTests

2026-06-07T20:04:00Z

Backport pull request #16944 from jellyfin/release-10.11.z

2026-06-07T18:29:36Z

Add lockhelper for UserManager Original-merge: 39958ad9e51f83f520803aa9bc5e70e58f3a0836 Merged-by: Bond-009 Backported-by: Bond_009

Backport: Fix/user manager collation (#16919)

2026-05-26T18:59:20Z

Backport: Fix/user manager collation

Update test cases.

2025-02-14T17:49:25Z

Added + in username regex validator, Test + in username, issue #10414 (#12819)

2024-11-03T14:43:27Z

Remove BOM from UTF-8 files

2024-08-30T13:29:48Z

I think some people need to change their IDE configuration ;)

Restructure tests

2021-02-17T10:51:15Z