chore(deps): Update dependency lodash to v4.17.23 [SECURITY]

fix(player): resolve tvOS freeze on player exit by reordering mpv options
2026-01-27 13:38:28 +00:00 · 2026-01-22 09:31:16 +00:00 · 2026-01-19 08:41:52 +01:00
3 changed files with 8 additions and 7 deletions
--- a/bun.lock
+++ b/bun.lock
@@ -52,7 +52,7 @@
        "expo-web-browser": "~15.0.10",
        "i18next": "^25.0.0",
        "jotai": "2.16.2",
-        "lodash": "4.17.21",
+        "lodash": "4.17.23",
        "nativewind": "^2.0.11",
        "patch-package": "^8.0.0",
        "react": "19.1.0",
@@ -1376,7 +1376,7 @@

    "locate-path": ["locate-path@6.0.0", "", { "dependencies": { "p-locate": "^5.0.0" } }, "sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw=="],

-    "lodash": ["lodash@4.17.21", "", {}, "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="],
+    "lodash": ["lodash@4.17.23", "", {}, "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w=="],

    "lodash.debounce": ["lodash.debounce@4.0.8", "", {}, "sha512-FT1yDzDYEoYWhnSGnpE/4Kj1fLZkDFyqRb7fNt6FdYOSxlUWAtp42Eh6Wb0rGIv/m9Bgo7x4GhQbm5Ys4SG5ow=="],

--- a/modules/mpv-player/ios/MPVLayerRenderer.swift
+++ b/modules/mpv-player/ios/MPVLayerRenderer.swift
@@ -167,16 +167,17 @@ final class MPVLayerRenderer {
        // Use AVFoundation video output - required for PiP support
        checkError(mpv_set_option_string(handle, "vo", "avfoundation"))

+        // Enable composite OSD mode - renders subtitles directly onto video frames using GPU
+        // This is better for PiP as subtitles are baked into the video
+        // NOTE: Must be set BEFORE the #if targetEnvironment check or tvOS will freeze on player exit
+        checkError(mpv_set_option_string(handle, "avfoundation-composite-osd", "yes"))
+
        // Hardware decoding with VideoToolbox
        // On simulator, use software decoding since VideoToolbox is not available
        // On device, use VideoToolbox with software fallback enabled
        #if targetEnvironment(simulator)
        checkError(mpv_set_option_string(handle, "hwdec", "no"))
        #else
-        // Only enable composite OSD mode on real device (OSD is not supported in simulator).
-        // This renders subtitles directly onto video frames using the GPU, which is better for PiP since subtitles are baked into the video.
-        checkError(mpv_set_option_string(handle, "avfoundation-composite-osd", "yes"))
-
        checkError(mpv_set_option_string(handle, "hwdec", "videotoolbox"))
        #endif
        checkError(mpv_set_option_string(handle, "hwdec-codecs", "all"))
--- a/package.json
+++ b/package.json
@@ -72,7 +72,7 @@
    "expo-web-browser": "~15.0.10",
    "i18next": "^25.0.0",
    "jotai": "2.16.2",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
    "nativewind": "^2.0.11",
    "patch-package": "^8.0.0",
    "react": "19.1.0",
Author	SHA1	Message	Date
renovate[bot]	3d6b68af7b	chore(deps): Update dependency lodash to v4.17.23 [SECURITY]	2026-01-22 09:31:16 +00:00
Fredrik Burmester	358e00d8b7	fix(player): resolve tvOS freeze on player exit by reordering mpv options Some checks failed 🏗️ Build Apps / 🤖 Build Android APK (Phone) (push) Has been cancelled Details 🏗️ Build Apps / 🤖 Build Android APK (TV) (push) Has been cancelled Details 🏗️ Build Apps / 🍎 Build iOS IPA (Phone) (push) Has been cancelled Details 🏗️ Build Apps / 🍎 Build iOS IPA (Phone - Unsigned) (push) Has been cancelled Details 🔒 Lockfile Consistency Check / 🔍 Check bun.lock and package.json consistency (push) Has been cancelled Details 🛡️ CodeQL Analysis / 🔎 Analyze with CodeQL (actions) (push) Has been cancelled Details 🛡️ CodeQL Analysis / 🔎 Analyze with CodeQL (javascript-typescript) (push) Has been cancelled Details 🏷️🔀Merge Conflict Labeler / 🏷️ Labeling Merge Conflicts (push) Has been cancelled Details 🚦 Security & Quality Gate / 📝 Validate PR Title (push) Has been cancelled Details 🚦 Security & Quality Gate / 🔍 Vulnerable Dependencies (push) Has been cancelled Details 🚦 Security & Quality Gate / 🚑 Expo Doctor Check (push) Has been cancelled Details 🚦 Security & Quality Gate / 🔍 Lint & Test (check) (push) Has been cancelled Details 🚦 Security & Quality Gate / 🔍 Lint & Test (format) (push) Has been cancelled Details 🚦 Security & Quality Gate / 🔍 Lint & Test (lint) (push) Has been cancelled Details 🚦 Security & Quality Gate / 🔍 Lint & Test (typecheck) (push) Has been cancelled Details 🌐 Translation Sync / sync-translations (push) Has been cancelled Details	2026-01-19 08:41:52 +01:00