Home Assistant Daily: Credentials, Config Flows, and Test Reliability
A cluster of security-hardening PRs moved multiple integrations to Authorization headers instead of embedded credentials, while a parallel wave of test-flakiness fixes and a Z-Wave JS config flow refactor dominated today's merges.
Duration: PT2M53S
Episode overview
This episode is a short developer briefing from Home Assistant Daily.
It explains recent repository work in plain language.
- Show: Home Assistant Daily
- Published: 2026-08-23T06:00:54Z
- Audio duration: PT2M53S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good evening, it's August 23rd, 2026, and this is Home Assistant Daily.
Today's biggest signal is a coordinated security cleanup: multiple integrations moved away from embedded basic auth credentials toward proper Authorization headers. Paulus Schoutsen pushed this pattern across at least three integrations in quick succession — REST in PR 179856, BleBox in 179837, and MJPEG cameras in…
The second theme is the Z-Wave JS config flow rework. Balloobbot landed a behavior-preserving refactor in PR 179600 that split out security key handling, then followed with two more passes — 179815 fixing legacy key handling, and 179816 still open, hardening the add-on config against concurrent and abandoned flows.…
The third theme is test infrastructure hygiene. Balloob alone touched VoIP test speed — cutting real-time waits from nearly sixteen seconds to under seven in PR 179786 — plus fixes for flaky concord232 polling tests, a race in assist pipeline audio queue tests, and mocking the ESPHome websocket API test client. Add…
One more to flag: PR 179871 replaces the deprecated asyncio event loop policy with a factory function, ahead of Python 3.16 dropping that API entirely. No behavior change, but…
W…
Nearby episodes from Home Assistant Daily
- Consistent Bugfixes Across the LLM and Config Flow Layer
- Weekly Recap - Hardening the Foundations
- Locking Down the LLM Layer and the Z-Wave Add-on
- Locking Down the Device Registry
- Config Flows, Discovery, and Cleaning Up Legacy Setup
- Z-Wave Onboarding Overhaul and Device Registry Cleanup
- Long-Running Connections Get a Reliability Pass
- The Z-Wave JS Migration Cleanup