Joren/qbz
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,113 Commits 1 Branch 0 Tags
15577998562353b19dd60093661b395875846a8e
Commit Graph
48 Commits
Author SHA1 Message Date
dependabot[bot] 1557799856 chore(deps): bump lucide-svelte from 0.562.0 to 1.0.1 
Bumps [lucide-svelte](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-svelte) from 0.562.0 to 1.0.1.
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.0.1/packages/lucide-svelte)

---
updated-dependencies:
- dependency-name: lucide-svelte
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 05:35:54 +00:00
victorrhgap 7c96720dca chore: bump version to 1.2.1 
Update all version endpoints, regenerate lockfiles,
add metainfo release entry and release docs.

cc
 2026-03-25 19:47:08 -06:00
vicrodh 0287a1feb8 fix: revert vite-plugin-svelte 7.0.0 -> 5.1.1 (requires vite 8) 
Dependabot PR #189 bumped to 7.0.0 which requires vite ^8.0.0 but
we're on vite 6.4.1. Revert to 5.1.1 which is compatible.

cc
 2026-03-19 18:17:01 -06:00
dependabot[bot] 85d9f62934 chore(deps-dev): bump svelte-check from 4.3.5 to 4.4.5 
Bumps [svelte-check](https://github.com/sveltejs/language-tools) from 4.3.5 to 4.4.5.
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.3.5...svelte-check@4.4.5)

---
updated-dependencies:
- dependency-name: svelte-check
  dependency-version: 4.4.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:21:55 +00:00
Victor RH 2c06d1163b Merge pull request #189 from vicrodh/dependabot/npm_and_yarn/pre-release/sveltejs/vite-plugin-svelte-7.0.0 
chore(deps-dev): bump @sveltejs/vite-plugin-svelte from 5.1.1 to 7.0.0
 2026-03-19 17:21:08 -06:00
Victor RH 5ec74a5beb Merge pull request #184 from vicrodh/dependabot/npm_and_yarn/pre-release/typescript-5.9.3 
chore(deps-dev): bump typescript from 5.6.3 to 5.9.3
 2026-03-19 17:20:56 -06:00
Victor RH 38fab9f7c9 Merge pull request #187 from vicrodh/dependabot/npm_and_yarn/pre-release/vitest-4.1.0 
chore(deps-dev): bump vitest from 4.0.17 to 4.1.0
 2026-03-19 17:20:54 -06:00
dependabot[bot] e6c5096fa2 chore(deps-dev): bump @sveltejs/vite-plugin-svelte from 5.1.1 to 7.0.0 
Bumps [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) from 5.1.1 to 7.0.0.
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.0.0/packages/vite-plugin-svelte)

---
updated-dependencies:
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:15:35 +00:00
dependabot[bot] 23279f2fe6 chore(deps-dev): bump vitest from 4.0.17 to 4.1.0 
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.0.17 to 4.1.0.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:15:27 +00:00
dependabot[bot] 4a19b05a19 chore(deps-dev): bump svelte from 5.53.6 to 5.54.0 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.53.6 to 5.54.0.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.54.0/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.54.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:15:10 +00:00
dependabot[bot] 3f6c590a04 chore(deps-dev): bump typescript from 5.6.3 to 5.9.3 
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.6.3 to 5.9.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.6.3...v5.9.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:15:01 +00:00
vicrodh af23efb3c1 chore: bump version to 1.2.0 
Updated:
- src-tauri/Cargo.toml
- src-tauri/tauri.conf.json
- package.json + package-lock.json
- snapcraft.yaml (root + packaging/)
- flake.nix
- Cargo.lock
- metainfo.xml (new release entry)
- README: Snap MPRIS limitation note with forum link

cc
 2026-03-19 17:12:31 -06:00
vicrodh 388fc45116 chore: fix dependabot alerts — update devalue 5.6.4, sveltekit 2.53.3 
- devalue 5.6.3 -> 5.6.4: fixes prototype pollution in parse/unflatten
  (GHSA #23, #24)
- @sveltejs/kit -> 2.53.3: fixes deserialization DoS in form actions

cc
 2026-03-19 14:05:35 -06:00
dependabot[bot] d62f19351c chore(deps): bump devalue from 5.6.3 to 5.6.4 
Bumps [devalue](https://github.com/sveltejs/devalue) from 5.6.3 to 5.6.4.
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/devalue/compare/v5.6.3...v5.6.4)

---
updated-dependencies:
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-12 15:31:10 +00:00
vicrodh a4a6722110 chore: bump version to 1.1.20 2026-03-11 12:53:13 -06:00
vicrodh 05f1a5ec13 chore: bump version to 1.1.19 
- Cargo.toml, tauri.conf.json, package.json, snapcraft.yaml
- Regenerate Cargo.lock and package-lock.json
- Add metainfo release entry for 1.1.19
 2026-03-09 00:35:42 -06:00
vicrodh 26f20ceb3f fix: resolve tauri version mismatch and track Cargo.lock 
- Update @tauri-apps/api from 2.9.1 to 2.10.1 (matches Rust crate 2.10.x)
- Update @tauri-apps/cli from 2.9.6 to 2.10.1
- Remove Cargo.lock from .gitignore (binary projects should track it)
- Fixes build errors for distro packagers (NixOS, etc.)

Closes #151
 2026-03-09 00:23:49 -06:00
vicrodh b49d0b3e3b chore(release): bump version to 1.1.19-rc-1 
cx
 2026-03-01 18:59:24 -06:00
vicrodh 6c8354f825 feat: add booklet download button, remove pdfjs-dist dependency 
- Add save/download button to booklet toolbar with native file dialog
- Add v2_booklet_save command to copy PDF to user-chosen location
- Remove pdfjs-dist npm package (replaced by MuPDF backend)
- Delete static/pdfjs/ files (~1.9MB: worker, WASM decoders, fallbacks)
- Add bookletDownload i18n keys to all 4 locales
 2026-02-28 07:48:03 -06:00
vicrodh 025aba7c1a feat: add BookletViewer component with pdfjs-dist 
Modal PDF viewer for album booklets with page navigation,
zoom controls, and keyboard shortcuts. Uses pdfjs-dist to
render PDF pages from URL in canvas.
 2026-02-28 07:48:03 -06:00
dependabot[bot] f63d8d7a0a chore(deps-dev): bump svelte from 5.53.0 to 5.53.6 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.53.0 to 5.53.6.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.6/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.53.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-28 04:35:44 +00:00
dependabot[bot] ab2a70bccf chore(deps-dev): bump rollup from 4.55.2 to 4.59.0 
Bumps [rollup](https://github.com/rollup/rollup) from 4.55.2 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.55.2...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-26 09:43:18 +00:00
vicrodh 321a165285 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/sveltejs/kit-2.52.2' into pre-release 
# Conflicts:
#	package-lock.json
 2026-02-20 14:34:45 -06:00
dependabot[bot] fd883f58c3 chore(deps-dev): bump @sveltejs/kit from 2.50.0 to 2.52.2 
Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) from 2.50.0 to 2.52.2.
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.52.2/packages/kit)

---
updated-dependencies:
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.52.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-20 16:43:19 +00:00
vicrodh 908716a230 merge: dependabot svelte 5.53.0 update 
Resolve package-lock.json conflict by regenerating lockfile.
 2026-02-20 10:33:21 -06:00
dependabot[bot] aeda5e0838 chore(deps-dev): bump svelte from 5.47.1 to 5.53.0 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.47.1 to 5.53.0.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.0/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.53.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-20 10:44:59 +00:00
vicrodh 98ffd3dff2 chore: bump version to 1.1.15-rc-2 2026-02-19 16:57:19 -06:00
vicrodh ba09345aa3 chore(release): prepare 1.1.15-rc-1 and beta checklist 
cx
 2026-02-17 20:13:30 -06:00
vicrodh 333e6f224a feat(ui): show default device name under System Default option 
Adds a help text showing which device is the current system default.
This helps users understand what "System Default" will actually use.

Backend:
- New command `get_default_device_name` that uses pactl for PipeWire/Pulse
  and CPAL for ALSA to get the current default device

Frontend:
- Shows "(System Default is: <device name>)" under the output device setting
- Styled as secondary description text (italic, muted)

Translations added for en, es, de, fr.
 2026-02-13 12:35:56 -06:00
vicrodh 008dfbcbb0 Bump version to 1.1.13 for Flathub submission 2026-02-12 15:12:07 -06:00
vicrodh f70000bbcc Bump version to 1.1.12 2026-02-12 14:32:52 -06:00
vicrodh d6e9375333 chore: bump version to 1.1.11 2026-02-10 08:00:42 -06:00
vicrodh a7409bfdd4 chore: bump version to 1.1.10 2026-02-10 02:17:48 -06:00
vicrodh 228563454b feat(plex): checkpoint plex lan integration and quality sync 
cx
 2026-02-09 01:28:11 -06:00
vicrodh ed1bd31554 fix(suggestions): improve pool management and artist identity validation 
- Increase pool sizes (INITIAL_POOL 18->30, EXPANDED_POOL 60->100, MAX_POOL 120->200)
- Add auto-refresh when available tracks fall below threshold (MIN_AVAILABLE_THRESHOLD=12)
- Add artist identity validation to filter incompatible genres (prevents merengue in metal playlists)
- Log when artists are skipped due to incompatible disambiguation
- Increase backend defaults (max_artists 20->30, tracks_per_artist 5->6, max_pool_size 100->150)
 2026-02-04 19:34:52 -06:00
vicrodh 38b92bb8d8 chore: update package-lock.json after reinstall 2026-01-31 17:17:23 -06:00
vicrodh 6260b2f66c chore: Bump version to 1.1.6 for release 2026-01-20 22:00:40 -06:00
vicrodh 4748cef7df chore: Bump version to 1.1.6-rc and add ARM64 workflow 
- Update version to 1.1.6-rc for release candidate testing
- Add Linux ARM64/aarch64 build workflow
- Uses ubuntu-24.04-arm GitHub runner (free for public repos)
- Builds .deb, .rpm, .AppImage, and AUR tarball for ARM64
- Workflow isolated with continue-on-error to not block x86_64 builds
 2026-01-20 16:04:35 -06:00
vicrodh 59cf94e7ca Support adding tracks to pending playlists in offline mode 
Backend:
- Add add_tracks_to_pending_playlist method to OfflineStore
- Reads current track lists, appends new tracks, updates DB
- Add corresponding Tauri command and register in lib.rs

Frontend:
- Detect pending playlists by negative ID in handleAddToPlaylist
- Call add_tracks_to_pending_playlist for pending playlists
- Properly separate Qobuz and local tracks before adding
- Fixes error trying to call playlist_add_local_track with negative ID
 2026-01-20 10:11:07 -06:00
vicrodh 8565696d41 security: override cookie to 0.7.x 
Fixes CVE for out of bounds characters (LOW)
All 7 dependabot alerts now resolved
 2026-01-16 13:43:09 -06:00
vicrodh 3025c918f1 security: override esbuild to 0.25.x 
Fixes CVE for dev server request vulnerability (MEDIUM)
svelte-i18n requires ^0.19.2, override forces ^0.25.0
 2026-01-16 13:09:20 -06:00
vicrodh deeb26dc3f security: update svelte to 5.46.4 
Fixes CVE for Cross-site Scripting vulnerability (MEDIUM)
 2026-01-16 12:37:33 -06:00
vicrodh c81d03b5b0 security: update @sveltejs/kit to 2.49.5 
Fixes:
- CVE for DoS/SSRF in prerendering (HIGH)
- CVE for memory amplification DoS (HIGH)
- Also updates devalue to 5.6.2 (2 HIGH CVEs)
 2026-01-16 10:27:01 -06:00
vicrodh 71156e9d0a feat: replace polling with Tauri events and add unit tests 
- Backend now emits playback:state events every 250ms when state changes
- PlayerStore uses listen() instead of setInterval for real-time updates
- Added Vitest testing framework with mocked Tauri APIs
- Added 53 unit tests for playerStore and queueStore
 2026-01-10 06:14:59 -06:00
vicrodh 145186a06a feat: add casting module scaffolding (disabled) 
Import Chromecast, AirPlay, and DLNA casting scaffolding from separate
branches. The module is currently disabled due to:

- Thread safety issues: rust_cast uses Rc internally (not Send)
- API compatibility: rupnp methods have changed

The scaffolding includes:
- Chromecast: mDNS discovery, device connection, media server
- AirPlay: Discovery scaffolding (RAOP playback pending)
- DLNA/UPnP: SSDP discovery scaffolding (playback pending)

To enable casting in the future:
1. Fix rust_cast thread safety (or use spawn_blocking)
2. Update rupnp API calls for current version
3. Add Deserialize derive to metadata types
4. Uncomment cast module in lib.rs
5. Wire up commands in invoke_handler
 2026-01-09 17:40:26 -06:00
vicrodh b0a64b9caa feat: add tauri-plugin-dialog for file picker 2026-01-09 13:56:10 -06:00
vicrodh cdfd3263de feat: Convert Figma React UI to Svelte 5 
- Add lucide-svelte for icons
- Create app.css with theme CSS variables (Dark, Light, OLED, Warm)
- Convert all React components to Svelte 5 using runes ($state, $derived, $effect, $props)
- Implement core components: Sidebar, NowPlayingBar, NavigationItem, UserCard,
  AlbumCard, HorizontalScrollRow, HeroSection, TrackRow, Toggle, Dropdown,
  Tooltip, VolumeSlider
- Implement view components: HomeView, SettingsView, AlbumDetailView
- Implement overlay components: QueuePanel, FullScreenNowPlaying, FocusMode, Toast
- Create main +page.svelte with routing, state management and keyboard shortcuts
- All components use Svelte 5 snippets for component children patterns
 2026-01-09 07:16:46 -06:00
vicrodh ef92897d43 Add i18n support with English and Spanish locales 
- Add svelte-i18n dependency
- Create i18n configuration with locale persistence
- Add complete translation files for EN and ES
- Create root layout with theme CSS variables
- Support 4 themes: dark (default), light, oled, warm
- Add global styles and spacing system
 2026-01-08 23:39:30 -06:00