docs: add May 20 changelog entry for VidApi provider

core/versions.mdx

@@ -7,16 +7,22 @@
 
 You can always review the [latest release here](https://github.com/cinepro-org/core/releases/latest) and run it locally with `docker run -p 3000:3000 --name cinepro-core -e TMDB_API_KEY=your-tmdb-key ghcr.io/cinepro-org/core:latest` to see the newest features in action. For a detailed breakdown of recent changes, keep reading!
 
+<Update label="May 20, 2026" tags={["Feature"]}>
+  ## New features
+
+  - **VidApi provider** — A new `vidapi` provider has been added to the [provider lineup](/core/configuration/providers) and is enabled by default. It contributes additional movie and TV sources via the VaPlayer API, with no configuration changes required.
+</Update>
+
 <Update label="May 19, 2026" tags={["Update", "Fix"]}>
   ## Updates
 
   - **StreamMafia back online** — The `streammafia` provider now uses the new `player.nhdapi.com` upstream after another endpoint migration, restoring sources for movies and TV. See the [provider list](/core/configuration/providers).
   - **Peachify gains more MovieBox backends** — Peachify now fans out to two additional MovieBox endpoints (`net` and `bmb`), expanding the pool of playable sources per lookup. No configuration changes required.
   - **More reliable Popr playback** — The `popr` provider now validates each candidate stream with clearer per-server diagnostics (HTTP errors, empty HLS playlists, and HTML error pages are detected and skipped), so failing servers no longer leak through as broken streams.
 
   ## Bug fixes
 
   - **Broader stream pattern matching** — Added `trendimovies.com/tgstream/stream` to the recognized streaming-pattern list, so Peachify links served from that CDN are properly proxied during playback.
   - **More resilient release pipeline** — Cleaned up the automated GitHub release workflow so pushes to `main` produce tagged releases and multi-architecture Docker images more reliably for your [Docker deployment](/quickstart#docker-compose).
 </Update>
 
@@ -34,18 +40,18 @@
   ## New features
 
   - **AnyEmbed provider (preview)** — A new `anyembed` provider has been added to the [provider lineup](/core/configuration/providers). It ships **disabled by default** while the upstream API stabilizes, as their session and stream endpoints still intermittently return 403/500 responses. The implementation is fully in place and can be enabled manually by setting `readonly enabled = true` in the provider source once the service becomes reliable enough for production use.
   - **VidNest gains `delta` and `moviebox` backends** — The `vidnest` provider now aggregates the additional `delta` and `moviebox` upstream servers alongside the existing backends. These contribute more playable streams and per-language audio variants for movie and TV lookups with no configuration changes required.
 
   ## Updates
 
   - **Cleaner Stremio addon defaults** — The previously bundled WebStreamerMBG and Streamify community addons have been removed from the default `stremioAddons` configuration. The default array is now empty, allowing you to curate your own [Stremio addon sources](/core/configuration/environment#param-stremio-addon) without first removing bundled entries. Setting `STREMIO_ADDON=true` still enables CinePro's native addon manifest at `/stremio/manifest.json`.
   - **Peachify hardening** — Peachify now rotates a randomized desktop user agent on every request, uses the new `uwu.eat-peach.sbs` MovieBox endpoint, and includes a more robust AES-GCM decryption pipeline for encrypted payloads. The deprecated and unreliable `ice` upstream server has been removed from rotation.
   - **StreamMafia endpoint update** — The `streammafia` provider now uses the new `sf.streammafia.to` host following an upstream domain migration. Existing setups continue working without configuration changes.
   - **02MovieDownloader restored** — The `02moviedownloader` provider now transparently supports the upstream's new encrypted response format (AES-256-CBC with a per-token-derived key), restoring download source resolution for previously failing titles.
 
   ## Bug fixes
 
   - **Broader proxy URL recognition** — Proxy detection now correctly recognizes both `m3u8-proxy?url=` and `mp4-proxy?url=` patterns, including URLs served from `*.workers.dev` hosts. This restores playback for direct MP4 and proxied streams that were previously skipped.
   - **Release workflow stability** — The automated release pipeline no longer breaks on commit messages containing special characters, ensuring every push to `main` reliably produces a tagged GitHub release and Docker image.
 </Update>
 
@@ -53,26 +59,26 @@
   ## New features
 
   - **VidNest provider** — A new `vidnest` provider has been added to the [provider lineup](/core/configuration/providers) and is enabled by default. It fans out across multiple VidNest backends (`klikxxi`, `allmovies`, `onehd`, `hollymoviehd`, `vidlink`, and more) in parallel, decrypts each response, and aggregates every playable stream and subtitle track into a single result. Servers that VidNest exposes but CinePro doesn't yet handle surface as `PARTIAL_SCRAPE` warnings so you can tell when new backends appear upstream.
   - **CineSu provider** — A new `CineSu` provider has been added and is enabled by default, contributing additional movie and TV sources via the `cine.su` manifest API. The provider performs a lightweight reachability check before returning streams so unplayable titles short-circuit cleanly.
 </Update>
 
 <Update label="April 28, 2026" tags={["Update", "Fix"]}>
   ## Updates
 
   - **StreamMafia overhaul** — The `streammafia` provider has been rewritten to use the new `sf.streammafia.to` API, including session-cookie handshake, short-lived API token negotiation, and a randomized desktop user agent on every request. All alternate audio tracks (`switches`) are now resolved in parallel and merged into the result, so multi-language titles return every available dub instead of just the selected stream. Stream URLs are deduplicated before being returned.
   - **Uembed fully removed** — The previously-disabled `uembed` provider has been deleted from the codebase now that its upstream service is permanently offline. The [provider list](/core/configuration/providers) has been trimmed accordingly.
   - **Leaner runtime** — `axios` has been dropped as a dependency in favor of the built-in `fetch` API across all providers, reducing install size and cold-start time.
 
   ## Bug fixes
 
   - **More reliable stream pattern matching** — Added the `hlmv.tripplestream.online` host to the recognized streaming-pattern list so links from that CDN are properly proxied during playback.
 </Update>
 
 <Update label="April 27, 2026" tags={["Feature", "Update"]}>
   ## New features
 
   - **MCP support for AI agents** — CinePro Core can now expose a [Model Context Protocol](https://modelcontextprotocol.io) server, letting AI agents query stream sources directly. Opt in by setting `MCP_ENABLED=true` in your [environment](/core/configuration/environment).
   - **Popr provider** — A new `popr` provider has been added to the [provider lineup](/core/configuration/providers) and is enabled by default. It fans out across multiple Popr/Vidnest backends in parallel, deduplicates subtitles, and now contributes additional sources to every movie and TV lookup.
   - **Audio track metadata** — Sources now carry per-language audio track labels, making it easier for clients to surface the right dub or original-language stream.
 
   ## Updates
@@ -91,24 +97,24 @@
 
   ## Bug fixes
 
   - **VidRock streaming restored** — Fixed a regression where the `crypto` module failed to load in some runtimes, causing VidRock source resolution to throw at startup. VidRock lookups are working again out of the box.
 </Update>
 
 <Update label="April 24, 2026" tags={["Feature", "Update", "Fix"]}>
   ## New features
 
   - **Stremio addon support** — CinePro Core can now expose a native Stremio addon endpoint at `/stremio/manifest.json`, letting you plug CinePro directly into Stremio. Opt in by setting `STREMIO_ADDON=true` in your [environment](/core/configuration/environment). Two community addons (WebStreamerMBG and Streamify) are pre-wired out of the box.
   - **Automated Docker images** — Official container images are now built and published automatically to the GitHub Container Registry on every release, making [Docker deployments](/quickstart#docker-compose) simpler and more reliable.
 
   ## Updates
 
   - **Icefy provider is back** — Icefy has been rewritten to use its new public API and is enabled by default again, restoring another source for movie and TV lookups.
   - **Configurable CORS origin** — A new `CORS_ORIGIN` [environment variable](/core/configuration/environment) lets you restrict which origins can call the CinePro API, instead of always allowing all origins.
   - **OMSS framework v1.1.19** — The underlying `@omss/framework` has been updated, bringing further stability improvements to stream handling.
 
   ## Bug fixes
 
   - **Uembed sunset** — The Uembed provider has been disabled after its upstream service was shut down, preventing failed lookups and timeouts.
   - **Cleaner stream pattern matching** — Internal URL patterns used to recognize streaming hosts have been consolidated and properly escaped, reducing edge-case mismatches during playback.
 </Update>
 
@@ -119,7 +125,7 @@
 
   ## Updates
 
   - **Faster VidZee scraping** — The VidZee provider now decrypts all streaming sources in parallel across all servers, significantly reducing response times for movie and TV lookups.
   - **Improved VixSrc provider** — VixSrc now uses a dedicated API for source resolution instead of HTML scraping, making it more reliable and resilient to upstream changes.
   - **License change** — CinePro Core has moved from MIT to the [PolyForm Noncommercial License 1.0.0](/core/general-information/license). You can still use, fork, and modify CinePro freely for personal and non-commercial purposes.
   - **OMSS framework updates** — The underlying `@omss/framework` has been updated across several releases, bringing improved stream handling and proxy pattern support.
@@ -129,6 +135,6 @@
   - **VidRock streaming** — Fixed an issue where VidRock sources could return unplayable links due to incorrect header construction.
   - **02MovieDownloader** — Resolved a bug affecting download source resolution for certain titles.
   - **VidZee decryption** — Fixed edge cases in the VidZee decryption pipeline that could cause some sources to fail silently.
   - **Disabled inactive providers** — The 2Embed and Icefy providers have been removed after becoming unreachable due to Cloudflare restrictions. This prevents unnecessary timeouts during source lookups.
 </Update>