homebridge-xbox-tv 4.1.21 → 4.1.23

package/CHANGELOG.md

@@ -18,6 +18,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - For plugin < v4.1.0 use Homebridge UI <= v5.5.0
 - For plugin >= v4.1.0 use Homebridge UI >= v5.13.0
 
+## [4.1.22] - (18.07.2026)
+
+## Changes
+
+- fix: Local API — UDP socket leak causing socket count to grow continuously while the Xbox is in standby; each 6 s reconnect heartbeat that found the console ping-reachable but not yet handshaked opened a brand-new socket on a fresh ephemeral port without closing the previous, still-open one; `connect()` now closes any stale socket before binding a new one, and the `acknowledge` inactivity watchdog now closes its socket instead of only clearing the in-memory reference
+- chore: bump `@homebridge/plugin-ui-utils` to ^2.2.5, `mqtt` to ^5.15.2, `uuid` to ^14.0.1, `axios` to ^1.18.1
+
 ## [4.1.21] - (04.06.2026)
 
 ## Changes

package/package.json

@@ -1,7 +1,7 @@
 {
   "displayName": "Xbox TV",
   "name": "homebridge-xbox-tv",
-  "version": "4.1.21",
+  "version": "4.1.23",
   "description": "Homebridge plugin to control Xbox game consoles.",
   "license": "MIT",
   "author": "grzegorz914",
@@ -35,12 +35,12 @@
     "node": "^20 || ^22 || ^24 || ^25 || ^26"
   },
   "dependencies": {
-    "@homebridge/plugin-ui-utils": "^2.2.4",
-    "mqtt": "^5.15.1",
+    "@homebridge/plugin-ui-utils": "^2.2.6",
+    "mqtt": "^5.15.2",
     "hex-to-binary": "^1.0.1",
-    "uuid": "^14.0.0",
+    "uuid": "^14.0.2",
     "express": "^5.2.1",
-    "axios": "^1.17.0"
+    "axios": "^1.20.0"
   },
   "keywords": [
     "homebridge",

package/src/localApi/xboxlocalapi.js

@@ -123,6 +123,19 @@ class XboxLocalApi extends EventEmitter {
     async connect() {
         return new Promise((resolve, reject) => {
             try {
+                // A previous attempt may have bound a socket that never completed
+                // the handshake (eg. console in standby, no discoveryResponse).
+                // Close it before binding a new one, otherwise every retry leaks
+                // a UDP socket on a fresh ephemeral port. Listeners are stripped
+                // first so the stale socket's 'close' handler can't fire
+                // updateState() against the session we're about to create.
+                if (this.socket) {
+                    const staleSocket = this.socket;
+                    this.socket = null;
+                    staleSocket.removeAllListeners();
+                    staleSocket.close();
+                }
+
                 this.socket = dgram.createSocket('udp4')
                     .on('error', (error) => {
                         if (this.logError) this.emit('error', `Socket error: ${error}`);
@@ -431,14 +444,26 @@ class XboxLocalApi extends EventEmitter {
 
                                             if (elapsed >= 14) {
                                                 clearInterval(this.acknowledgeInterval);
+                                                this.acknowledgeInterval = null;
+
+                                                try {
+                                                    const sequenceNumber = await this.getSequenceNumber();
+                                                    const disconnect = new MessagePacket('disconnect');
+                                                    disconnect.set('reason', 2);
+                                                    disconnect.set('errorCode', 0);
+                                                    const message = disconnect.pack(this.crypto, sequenceNumber, this.targetParticipantId, this.sourceParticipantId);
+                                                    await this.sendSocketMessage(message, 'disconnect');
+                                                } catch (error) {
+                                                    if (this.logError) this.emit('error', `Send disconnect error: ${error}`);
+                                                }
 
-                                                const sequenceNumber = await this.getSequenceNumber();
-                                                const disconnect = new MessagePacket('disconnect');
-                                                disconnect.set('reason', 2);
-                                                disconnect.set('errorCode', 0);
-                                                const message = disconnect.pack(this.crypto, sequenceNumber, this.targetParticipantId, this.sourceParticipantId);
-                                                await this.sendSocketMessage(message, 'disconnect');
-                                                await this.updateState();
+                                                // Close socket first so on('close') triggers updateState().
+                                                // Calling updateState() directly would null this.socket before
+                                                // close(), causing the old socket to leak in the OS.
+                                                const socketToClose = this.socket;
+                                                this.socket = null;
+                                                this.connected = false;
+                                                if (socketToClose) socketToClose.close();
                                             }
                                         }, 1000);
                                     }