Joren/qbz
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,509 Commits 1 Branch 0 Tags
2802527912487dd362a384a67a8b778c8e10d314
Commit Graph
58 Commits
Author SHA1 Message Date
vicrodh 2802527912 chore(deps): update jsdom 29.0.2, notify-rust 4.14.0 
Also closed PR #298 (md-5 0.11) — breaking API change across 9
call sites for zero functionality gain.

cc
 2026-04-09 08:38:19 -06:00
Victor RH b196a299dc Merge pull request #300 from vicrodh/dependabot/cargo/src-tauri/pre-release/tauri-plugin-dialog-2.7.0 2026-04-09 08:20:17 -06:00
Victor RH 1bc3eaf759 Merge pull request #299 from vicrodh/dependabot/cargo/src-tauri/pre-release/rodio-0.22.2 2026-04-09 08:20:13 -06:00
dependabot[bot] e6bacb7507 chore(deps): bump tauri-plugin-dialog from 2.6.0 to 2.7.0 in /src-tauri 
Bumps [tauri-plugin-dialog](https://github.com/tauri-apps/plugins-workspace) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](https://github.com/tauri-apps/plugins-workspace/compare/log-v2.6.0...log-v2.7.0)

---
updated-dependencies:
- dependency-name: tauri-plugin-dialog
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-09 05:37:52 +00:00
dependabot[bot] 608f9508ef chore(deps): bump rodio from 0.22.1 to 0.22.2 in /src-tauri 
Bumps [rodio](https://github.com/RustAudio/rodio) from 0.22.1 to 0.22.2.
- [Changelog](https://github.com/RustAudio/rodio/blob/master/CHANGELOG.md)
- [Commits](https://github.com/RustAudio/rodio/compare/v0.22.1...v0.22.2)

---
updated-dependencies:
- dependency-name: rodio
  dependency-version: 0.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-09 05:37:36 +00:00
dependabot[bot] b2527d829b chore(deps): bump tauri-plugin-deep-link in /src-tauri 
Bumps [tauri-plugin-deep-link](https://github.com/tauri-apps/plugins-workspace) from 2.4.7 to 2.4.8.
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](https://github.com/tauri-apps/plugins-workspace/compare/deep-link-v2.4.7...deep-link-v2.4.8)

---
updated-dependencies:
- dependency-name: tauri-plugin-deep-link
  dependency-version: 2.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-09 05:36:58 +00:00
vicrodh d1278e12ad chore: bump version to 1.2.4 - Hardening playback 
cc
 2026-04-07 09:48:04 -06:00
vicrodh c37f3d7595 feat(security): enable system keyring for credential storage 
Enable async-secret-service + crypto-rust features on the keyring
crate, activating GNOME Keyring and KDE Wallet support. The keyring
integration code was already written but the crate was compiled
without any platform backend, so it silently failed every time.

OAuth tokens will now be stored in the system keyring when available,
with encrypted file as automatic fallback.

Added org.freedesktop.secrets to Flatpak finish-args for sandbox
keyring access.

Fixes #215

cc
 2026-04-06 16:20:26 -06:00
vicrodh 2c0f42b885 chore(deps): bump dirs 5 -> 6 across all crates 
Zero API changes, only bumps internal deps (windows-sys, redox_users).
Eliminates duplicate dirs versions in Cargo.lock.

Closes #257

cc
 2026-04-06 15:16:34 -06:00
vicrodh bf555ab143 feat(streaming): CMAF segmented download pipeline 
Download tracks via Qobuz Akamai CDN with encrypted CMAF segments.
Derives session key (HKDF), unwraps content key (AES-CBC), decrypts
frames (AES-CTR), reassembles into standard FLAC. Falls back to legacy
track/getFileUrl if CMAF fails.

- Add qbz-cmaf dependency to src-tauri
- Make ensure_cmaf_session public on QobuzClient
- Add ensure_cmaf_session and get_file_url passthroughs to CoreBridge
- Add download_audio_cmaf and try_cmaf_download helpers
- Wire CMAF as primary download path in v2_play_track with legacy fallback

cc
 2026-04-06 13:31:41 -06:00
vicrodh 09fcb5eb7b chore(deps): upgrade alsa crate 0.9 -> 0.10 
Remove dead alsa dependency from src-tauri/Cargo.toml (code lives in
qbz-audio since V2 migration) and bump qbz-audio to alsa 0.10.
Eliminates duplicate alsa versions in Cargo.lock.

Breaking changes in 0.10 (Format/ChmapPosition reorder) do not affect
QBZ — we use catch-all matches and never rely on PartialOrd.

Closes #260

cc
 2026-04-06 09:18:27 -06:00
vicrodh 96967e8112 chore: regenerate lockfiles for tauri-plugin-os dependency 
PR #265 added @tauri-apps/plugin-os (npm) and tauri-plugin-os (cargo)
but did not commit the updated lockfiles.

cc
 2026-04-05 21:23:41 -06:00
vicrodh ee019851ef chore: bump version to 1.2.2 
cc
 2026-04-04 11:15:15 -06:00
Victor RH 4aed668bbb Merge pull request #255 from vicrodh/dependabot/cargo/src-tauri/pre-release/tempfile-3.27.0 
chore(deps): bump tempfile from 3.26.0 to 3.27.0 in /src-tauri
 2026-04-04 11:04:16 -06:00
Victor RH 9e2fa8943e Merge pull request #258 from vicrodh/dependabot/cargo/src-tauri/pre-release/env_logger-0.11.10 
chore(deps): bump env_logger from 0.11.9 to 0.11.10 in /src-tauri
 2026-04-04 11:04:12 -06:00
Victor RH b05d0773a9 Merge pull request #259 from vicrodh/dependabot/cargo/src-tauri/pre-release/uuid-1.23.0 
chore(deps): bump uuid from 1.22.0 to 1.23.0 in /src-tauri
 2026-04-04 11:04:10 -06:00
Afonso Jorge Ramos adfc390009 fix(notifications): use released notify-rust 4.13.0 instead of fork 2026-04-04 15:31:58 +02:00
Afonso Jorge Ramos 7a1890ad57 fix(audio): use released coreaudio-rs 0.14.1 instead of fork 2026-04-03 14:01:25 +02:00
dependabot[bot] 32923d3fc3 chore(deps): bump uuid from 1.22.0 to 1.23.0 in /src-tauri 
Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.22.0 to 1.23.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.22.0...v1.23.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-02 07:11:31 +00:00
dependabot[bot] 88b5df19a9 chore(deps): bump env_logger from 0.11.9 to 0.11.10 in /src-tauri 
Bumps [env_logger](https://github.com/rust-cli/env_logger) from 0.11.9 to 0.11.10.
- [Release notes](https://github.com/rust-cli/env_logger/releases)
- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rust-cli/env_logger/compare/v0.11.9...v0.11.10)

---
updated-dependencies:
- dependency-name: env_logger
  dependency-version: 0.11.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-02 07:11:13 +00:00
dependabot[bot] c346861db0 chore(deps): bump tempfile from 3.26.0 to 3.27.0 in /src-tauri 
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.26.0 to 3.27.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.26.0...v3.27.0)

---
updated-dependencies:
- dependency-name: tempfile
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-02 07:10:47 +00:00
Victor RH e56b0cbb6a Merge pull request #238 from afonsojramos/fix/macos-x86-build 
fix(macos): enable x86_64 cross-compilation
 2026-04-01 16:29:13 -06:00
Victor RH 1b10f6c132 Merge pull request #246 from afonsojramos/feat/macos-rich-notifications-pr 
feat(macos): add album artwork to notifications
 2026-03-31 20:27:23 -06:00
Victor RH b2f75cc85c Merge pull request #239 from afonsojramos/feat/macos-deep-link 
feat(macos): add deep link support for qobuzapp:// URLs
 2026-03-31 20:27:02 -06:00
Victor RH eed692a852 Merge pull request #236 from afonsojramos/feat/coreaudio-device-probing 
feat(macos): add CoreAudio device probing and sample rate switching
 2026-03-31 20:26:29 -06:00
Afonso Jorge Ramos a4a591e73c feat(macos): switch to notify-rust fork with image_path support 2026-04-01 03:35:27 +02:00
Afonso Jorge Ramos 9823dfb680 fix(macos): enable x86_64 cross-compilation 
- Upgrade rust_cast 0.18.1 → 0.21 (switches from openssl to rustls,
  removing the openssl-sys dependency that blocked x86_64 cross-compile)
- Split mupdf sys-lib features to Linux-only (on macOS there are no GTK
  symbol conflicts, and system libs don't support x86_64 cross-compile
  from Apple Silicon)
- Update release-macos workflow to build both aarch64 and x86_64 DMGs
  using a matrix strategy
 2026-04-01 02:40:55 +02:00
victorrhgap 080b916c64 feat: prevent system sleep during playback via XDG portal 
Add idle_inhibit module using ashpd's Inhibit portal to prevent
screen blanking and system suspend while audio is playing.

- Acquires Idle+Suspend inhibit when playback starts
- Releases when paused, stopped, or track cleared
- Works on GNOME, KDE, Sway, XFCE
- Works inside Flatpak/Snap (no extra permissions needed)
- Graceful fallback if portal unavailable

Addresses #229

cc
 2026-03-31 12:41:21 -06:00
Victor RH e229bbd7c3 Merge pull request #223 from vicrodh/dependabot/cargo/src-tauri/pre-release/lofty-0.23.3 
chore(deps): bump lofty from 0.18.2 to 0.23.3 in /src-tauri
 2026-03-31 09:11:39 -06:00
Afonso Jorge Ramos a2fb44511d feat(macos): add deep link support for qobuzapp:// URLs 
Add tauri-plugin-deep-link to handle qobuzapp:// URLs on macOS, where
the OS delivers URLs via Apple Events instead of CLI arguments.

- Register qobuzapp scheme in tauri.conf.json (injected into Info.plist)
- Add on_open_url handler for Apple Event URL delivery
- Extract is_qobuz_link() and handle_qobuz_link() helpers to deduplicate
  URL matching across single-instance, first-launch, and deep-link paths
- Tighten URL matching from contains() to starts_with() for security
- Log emit errors instead of silently discarding them
 2026-03-31 05:53:44 +02:00
Victor RH b9572b3c2e Merge pull request #218 from vicrodh/dependabot/cargo/src-tauri/pre-release/axum-0.8.8 
chore(deps): bump axum from 0.7.9 to 0.8.8 in /src-tauri
 2026-03-30 21:46:12 -06:00
Victor RH 1e4ce38258 Merge pull request #224 from vicrodh/dependabot/cargo/src-tauri/pre-release/souvlaki-0.8.3 
chore(deps): bump souvlaki from 0.7.3 to 0.8.3 in /src-tauri
 2026-03-30 21:39:20 -06:00
Victor RH f9c32a25a9 Merge pull request #225 from vicrodh/dependabot/cargo/src-tauri/pre-release/rand-0.10.0 
chore(deps): bump rand from 0.8.5 to 0.10.0 in /src-tauri
 2026-03-30 20:59:16 -06:00
Afonso Jorge Ramos c51f07fe65 feat(macos): add CoreAudio device probing and sample rate switching 
Add coreaudio_direct module using coreaudio-rs safe wrappers for:
- Device capability probing (supported sample rates, transport type)
- Automatic sample rate switching per-track
- Device lookup by name for CoreAudio↔CPAL bridging

Uses a fork branch of coreaudio-rs that adds get_available_sample_rates
and get_device_transport_type helpers (PR RustAudio/coreaudio-rs#149).
 2026-03-31 02:19:59 +02:00
dependabot[bot] e5556f7842 chore(deps): bump rand from 0.8.5 to 0.10.0 in /src-tauri 
Bumps [rand](https://github.com/rust-random/rand) from 0.8.5 to 0.10.0.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-random/rand/compare/0.8.5...0.10.0)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 05:36:29 +00:00
dependabot[bot] d0064d122a chore(deps): bump souvlaki from 0.7.3 to 0.8.3 in /src-tauri 
Bumps [souvlaki](https://github.com/Sinono3/souvlaki) from 0.7.3 to 0.8.3.
- [Release notes](https://github.com/Sinono3/souvlaki/releases)
- [Changelog](https://github.com/Sinono3/souvlaki/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Sinono3/souvlaki/compare/0.7.3...0.8.3)

---
updated-dependencies:
- dependency-name: souvlaki
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 05:36:08 +00:00
dependabot[bot] 63dd054815 chore(deps): bump lofty from 0.18.2 to 0.23.3 in /src-tauri 
Bumps [lofty](https://github.com/Serial-ATA/lofty-rs) from 0.18.2 to 0.23.3.
- [Release notes](https://github.com/Serial-ATA/lofty-rs/releases)
- [Changelog](https://github.com/Serial-ATA/lofty-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Serial-ATA/lofty-rs/compare/0.18.2...0.23.3)

---
updated-dependencies:
- dependency-name: lofty
  dependency-version: 0.23.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 05:35:57 +00:00
dependabot[bot] 7c0d67f157 chore(deps): bump image from 0.25.9 to 0.25.10 in /src-tauri 
Bumps [image](https://github.com/image-rs/image) from 0.25.9 to 0.25.10.
- [Changelog](https://github.com/image-rs/image/blob/v0.25.10/CHANGES.md)
- [Commits](https://github.com/image-rs/image/compare/v0.25.9...v0.25.10)

---
updated-dependencies:
- dependency-name: image
  dependency-version: 0.25.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 05:35:44 +00:00
dependabot[bot] ef1915f83d chore(deps): bump axum from 0.7.9 to 0.8.8 in /src-tauri 
Bumps [axum](https://github.com/tokio-rs/axum) from 0.7.9 to 0.8.8.
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/axum/compare/axum-v0.7.9...axum-v0.8.8)

---
updated-dependencies:
- dependency-name: axum
  dependency-version: 0.8.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 05:35:32 +00:00
victorrhgap 7c96720dca chore: bump version to 1.2.1 
Update all version endpoints, regenerate lockfiles,
add metainfo release entry and release docs.

cc
 2026-03-25 19:47:08 -06:00
victorrhgap 3dd09ea522 chore(deps): bump aws-lc-rs 1.16.1 -> 1.16.2, aws-lc-sys 0.38.0 -> 0.39.0 
Fixes dependabot alerts #25 and #26 (high severity):
- CRL Distribution Point Scope Check Logic Error
- X.509 Name Constraints Bypass via Wildcard/Unicode CN

cc
 2026-03-25 18:13:02 -06:00
Victor RH e6ea2b483c Merge pull request #198 from vicrodh/dependabot/cargo/src-tauri/rustls-webpki-0.103.10 2026-03-24 20:17:12 -06:00
dependabot[bot] 2c0c46d2bc chore(deps): bump rustls-webpki from 0.103.9 to 0.103.10 in /src-tauri 
Bumps [rustls-webpki](https://github.com/rustls/webpki) from 0.103.9 to 0.103.10.
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](https://github.com/rustls/webpki/compare/v/0.103.9...v/0.103.10)

---
updated-dependencies:
- dependency-name: rustls-webpki
  dependency-version: 0.103.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-21 09:41:52 +00:00
Afonso Jorge Ramos 3809a5cc67 feat(macos): add notify-rust dependency for desktop notifications 2026-03-20 00:45:15 +01:00
dependabot[bot] 3e6b51c7dd chore(deps): bump qrcode-generator from 4.1.9 to 5.0.0 in /src-tauri 
Bumps [qrcode-generator](https://github.com/magiclen/qrcode-generator) from 4.1.9 to 5.0.0.
- [Commits](https://github.com/magiclen/qrcode-generator/compare/v4.1.9...v5.0.0)

---
updated-dependencies:
- dependency-name: qrcode-generator
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:22:18 +00:00
Victor RH ef4ee640b1 Merge pull request #191 from vicrodh/dependabot/cargo/src-tauri/pre-release/rcgen-0.14.7 
chore(deps): bump rcgen from 0.12.1 to 0.14.7 in /src-tauri
 2026-03-19 17:21:05 -06:00
Victor RH 9cf7657be7 Merge pull request #193 from vicrodh/dependabot/cargo/src-tauri/pre-release/ashpd-0.13.8 
chore(deps): bump ashpd from 0.13.3 to 0.13.8 in /src-tauri
 2026-03-19 17:21:03 -06:00
Victor RH eb82bc8920 Merge pull request #190 from vicrodh/dependabot/cargo/src-tauri/pre-release/tauri-2.10.3 
chore(deps): bump tauri from 2.10.2 to 2.10.3 in /src-tauri
 2026-03-19 17:21:01 -06:00
dependabot[bot] d04781826c chore(deps): bump ashpd from 0.13.3 to 0.13.8 in /src-tauri 
Bumps [ashpd](https://github.com/bilelmoussaoui/ashpd) from 0.13.3 to 0.13.8.
- [Release notes](https://github.com/bilelmoussaoui/ashpd/releases)
- [Commits](https://github.com/bilelmoussaoui/ashpd/commits)

---
updated-dependencies:
- dependency-name: ashpd
  dependency-version: 0.13.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:16:32 +00:00
dependabot[bot] 9d29ed757c chore(deps): bump uuid from 1.21.0 to 1.22.0 in /src-tauri 
Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.21.0 to 1.22.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.21.0...v1.22.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:16:18 +00:00