<?xml version="1.0" encoding="utf-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>ScreenlyOS 26.5.1 | Screenly</title><description>What has shipped across Screenly, newest first.</description><link>https://www.screenly.io/releases/screenlyos/26.5.1/</link><language>en</language><atom:link href="https://www.screenly.io/releases/screenlyos/26.5.1/rss.xml" rel="self" type="application/rss+xml"/><lastBuildDate>Fri, 29 May 2026 00:00:00 +0000</lastBuildDate><item><title>ScreenlyOS 26.5.1: Edge Apps can read their encrypted settings from injected JavaScript</title><link>https://www.screenly.io/releases/screenlyos/26.5.1/edge-app-secrets-in-injected-javascript/</link><guid isPermaLink="true">https://www.screenly.io/releases/screenlyos/26.5.1/edge-app-secrets-in-injected-javascript/</guid><pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate><category>release</category><category>apps</category><category>developers</category><description>&lt;p&gt;An Edge App that points at a remote page and injects JavaScript into it can now read its own
encrypted settings from that script, as &lt;code&gt;screenly_settings.&amp;lt;key&amp;gt;&lt;/code&gt;. The player decrypts the values
when the page loads and passes them to your script.&lt;/p&gt;
&lt;p&gt;Use it wherever a script on a remote page needs a secret to do its job: an internal dashboard that
needs an API key, an order screen calling a kitchen system, or a logistics board pulling from an
API that authenticates every request. Store the key as an encrypted setting of the Edge App and
read it from &lt;code&gt;screenly_settings&lt;/code&gt; instead of writing it into the script.&lt;/p&gt;</description></item><item><title>ScreenlyOS 26.5.1: Players can show web pages that require a client certificate</title><link>https://www.screenly.io/releases/screenlyos/26.5.1/web-asset-client-certificates/</link><guid isPermaLink="true">https://www.screenly.io/releases/screenlyos/26.5.1/web-asset-client-certificates/</guid><pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate><category>release</category><category>content-management</category><category>security</category><description>&lt;p&gt;Some internal systems never go near the open web: a plant&amp;rsquo;s process dashboard, an internal
operations board, anything an organization has put behind mutual TLS. Until now, a player couldn&amp;rsquo;t
load those pages.&lt;/p&gt;
&lt;p&gt;Now you can show them directly. Turn on &amp;ldquo;Allow sending client certificate&amp;rdquo; in a web page&amp;rsquo;s settings,
and the player presents its own device certificate when it loads the page. The server can then
decide whether to talk to that player, the same way it decides for any other client it trusts.&lt;/p&gt;
&lt;p&gt;On Screenly Player Max and other x86 players, the certificate is held in the device&amp;rsquo;s secure
hardware.&lt;/p&gt;</description></item><item><title>ScreenlyOS 26.5.1: Players report which hardware they run on</title><link>https://www.screenly.io/releases/screenlyos/26.5.1/fixes-and-improvements/</link><guid isPermaLink="true">https://www.screenly.io/releases/screenlyos/26.5.1/fixes-and-improvements/</guid><pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate><category>roundup</category><description>&lt;ul&gt;
&lt;li&gt;Players report the model and revision of the hardware they run on, so the dashboard can show
which player a screen is.&lt;/li&gt;
&lt;li&gt;Dependencies and system libraries updated.&lt;/li&gt;
&lt;/ul&gt;</description></item></channel></rss>