1.29.1 — Bounded file renditions

2026-09-18

Stops automatic full-length video transcodes and ensures external rendition tools cannot hold workers or survive them indefinitely.

Added

• FILEMAN_RENDER_TIMEOUT sets one wall-clock limit for video, audio, document, and metadata converter processes; the default is 1,500 seconds.

Changed

• Video uploads now create thumbnails and the 10-second preview automatically. Full MP4 and WebM transcodes remain available through an explicit rendition request.

Fixed

• Timed-out rendition processes now terminate their complete process tree, including when the job engine exits on POSIX systems.
• Converter failures now create a failed rendition with a bounded diagnostic and fail the job instead of reporting clean completion.
• Failed renditions no longer expose download or share links.

Upgrade notes

• Run migrations to add the rendition failure diagnostic field.