IssueRaiser

Raise real-world problems, find people facing the same issue, and discuss solutions.2,000 issues0 comments

Healthcare

[Bug]: Downloads fail with "Got more than 8190 bytes when reading" due to GitHub's new 9KB+ CSP header on release redirects

THE-KINGDOMOct 23, 2026, 9:31 PM

### System Health details ### System Information | Key | Value | | --- | --- | | Home Assistant Core | 2026.10.2 | | Home Assistant Supervisor | 2026.10.3 | | Home Assistant OS | 18.3 | | HACS | 2.0.5 | | Frontend | 20261001.0 | ### Checklist - [x] I'm running the newest version of HACS <https://github.com/hacs/integration/releases/latest> - [x] I have enabled debug logging for my installation. - [x] I have filled out the issue template to the best of my ability. - [x] I have read <https://hacs.xyz/docs/help/issues/> - [x] This issue is related to the backend (integration part) of HACS. - [x] This issue only contains 1 issue (if you have multiple issues, open one issue for each issue). - [x] This is a bug and not a feature request. - [x] This issue is not a duplicate issue of currently [open](https://github.com/hacs/integration/issues) or issues [pending release](https://github.com/hacs/integration/issues?q=is%3Aissue+is%3Aclosed+sort%3Aupdated-desc+milestone%3Anext). ### Describe the issue ### Summary ### Root Cause Analysis (RCA) **Primary Cause:** Upstream change by GitHub on their edge proxies / release endpoints. **Mechanism:** GitHub recently updated their global edge headers, inflating the `Content-Security-Policy` (CSP) header on release download redirects (`https://github.com/<owner>/<repo>/releases/download/...`) to **9,217 bytes**. **The Failure:** 1. HACS requests a release asset from GitHub via Python's `aiohttp` client. 2. GitHub responds with an HTTP

Comments (0)

No comments yet. Start the discussion.

Comment on this issue