chore: bump version to 1.2.3 - Hardening playback

cc

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "qbz-nix",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "qbz-nix",
-      "version": "1.2.2",
+      "version": "1.2.3",
       "license": "MIT",
       "dependencies": {
         "@icons-pack/svelte-simple-icons": "^7.2.0",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "qbz-nix",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Native high-fidelity client for Qobuz™ subscribers on Linux with Hi-Fi audio support (uses the Qobuz API; not certified by Qobuz)",
   "type": "module",
   "scripts": {

packaging/flatpak/com.blitzfc.qbz.metainfo.xml

@@ -53,6 +53,22 @@
     </screenshot>
   </screenshots>
   <releases>
+    <release version="1.2.3" date="2026-04-06">
+      <description>
+        <p>Qobuz has been migrating their audio delivery infrastructure to encrypted segmented streaming. This was silently breaking playback for certain tracks. This release implements the new streaming pipeline end-to-end, making QBZ compatible with Qobuz's current and future audio delivery.</p>
+        <ul>
+          <li>New CMAF streaming pipeline: encrypted segments fetched from Akamai CDN, decrypted on the fly, playback starts in under 1 second</li>
+          <li>Smart quality negotiation: requests the track's actual quality instead of always maximum, eliminating unnecessary API fallback cascades</li>
+          <li>ALSA progressive backoff on device busy: faster track skipping without "device busy" errors</li>
+          <li>Offline playback controls now work without internet connection (#173)</li>
+          <li>OAuth tokens stored in system keyring (GNOME Keyring, KDE Wallet) when available (#215)</li>
+          <li>Ghost track skip prevention: stale auto-advance commands discarded after context switch</li>
+          <li>Logout now stops active playback</li>
+          <li>Vite 8.0.5 security update (3 dev server vulnerabilities)</li>
+          <li>60+ components translated across all 5 locales</li>
+        </ul>
+      </description>
+    </release>
     <release version="1.2.2" date="2026-04-04">
       <description>
         <p>About a month and a half ago, Qobuz began making changes to their authentication system. This was the reason we introduced OAuth login early on — and fortunately, doing so ahead of time meant no one was truly locked out of the app. This release simply removes direct credential login, making OAuth the sole authentication method. There is also some bugfixing for issues reported on GitHub.</p>

snapcraft.yaml

@@ -3,7 +3,7 @@
 
 name: qbz-player
 title: "QBZ — Native Qobuz Client for Linux"
-version: '1.2.2'
+version: '1.2.3'
 summary: Native Qobuz player for Linux with bit-perfect audio and DAC control
 description: |
   QBZ is a native Linux desktop client for Qobuz™, designed for high-fidelity playback.

src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "QBZ",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "identifier": "com.blitzfc.qbz",
   "build": {
     "beforeDevCommand": "npm run dev",

src/lib/components/AboutModal.svelte

@@ -99,7 +99,7 @@
             <span class="label">{$t('about.buildInfo.version')}</span>
             <span class="value">{appVersion}</span>
             <span class="label">{$t('about.buildInfo.codename')}</span>
-            <span class="value codename">Bye bye plain auth</span>
+            <span class="value codename">Hardening playback</span>
             <span class="label">{$t('about.buildInfo.license')}</span>
             <span class="value">MIT</span>
             <span class="label">{$t('about.buildInfo.license')}</span>