minstrel

Merge pull request 'M462 security hardening and M464 loudness analysis (steps 1–3)' (#135 ) from dev into main

release #807:Commit 1e9aed214b pushed by bvandeusen

main

2026-10-06 14:42:13 -04:00

22m12s

feat(api): deliver loudness gains to every client (M464 #4997 )

release #806:Commit e3aa8629d3 pushed by bvandeusen

dev

2026-10-06 14:11:10 -04:00

17m0s

feat(library): album loudness from the tracks' summed block histograms (M464 #4996 )

release #805:Commit c2f81bf8df pushed by bvandeusen

dev

2026-10-06 13:35:45 -04:00

8m40s

test(api): pass the loudness settings to Mount in the library test router (M464 #4995 )

release #804:Commit aee4b50bd4 pushed by bvandeusen

dev

2026-10-06 13:20:36 -04:00

11m38s

feat(library): measure every track's loudness in the background (M464 #4995 )

release #803:Commit f3196b3443 pushed by bvandeusen

dev

2026-10-06 13:06:53 -04:00

5m48s

fix(auth): the Subsonic password is generated, never the login password (M462 #5026 )

release #802:Commit edd9a3a6db pushed by bvandeusen

dev

2026-10-06 11:02:41 -04:00

8m5s

feat(android): keep the session cookie in Keystore-encrypted storage (M462 #4985 )

release #801:Commit 6de8d4136d pushed by bvandeusen

dev

2026-10-06 10:35:31 -04:00

5m57s

ci(govulncheck): check out with plain git; the golang image has no node (M462 #4984 )

release #800:Commit 60c87da38e pushed by bvandeusen

dev

2026-10-06 10:08:58 -04:00

8m29s

ci: one workflow graph, so nothing publishes on red; add govulncheck and npm audit (M462 #4984 )

release #799:Commit b36125fa67 pushed by bvandeusen

dev

2026-10-06 09:59:27 -04:00

7m32s

feat(auth): store Subsonic API keys hashed; a new key is shown once (M462 #4983 )

test-web.yml #798:Commit 327d49428f pushed by bvandeusen

dev

2026-10-06 09:46:08 -04:00

2m4s

feat(auth): store Subsonic API keys hashed; a new key is shown once (M462 #4983 )

test-go.yml #797:Commit 327d49428f pushed by bvandeusen

dev

2026-10-06 09:49:31 -04:00

5m28s

feat(auth): store Subsonic API keys hashed; a new key is shown once (M462 #4983 )

release #796:Commit 327d49428f pushed by bvandeusen

dev

2026-10-06 09:51:05 -04:00

7m2s

feat(auth): first account on a new server needs the setup token from the server log (M462 #4982 )

test-web.yml #795:Commit 2f3fbccab6 pushed by bvandeusen

dev

2026-10-06 09:38:40 -04:00

1m14s

feat(auth): first account on a new server needs the setup token from the server log (M462 #4982 )

test-go.yml #794:Commit 2f3fbccab6 pushed by bvandeusen

dev

2026-10-06 09:41:17 -04:00

5m14s

feat(auth): first account on a new server needs the setup token from the server log (M462 #4982 )

release #793:Commit 2f3fbccab6 pushed by bvandeusen

dev

2026-10-06 09:43:37 -04:00

7m36s

fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981 )

test-web.yml #792:Commit 46194a609d pushed by bvandeusen

dev

2026-10-06 09:35:42 -04:00

1m37s

fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981 )

test-go.yml #791:Commit 46194a609d pushed by bvandeusen

dev

2026-10-06 09:35:58 -04:00

3m22s

fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981 )

release #790:Commit 46194a609d pushed by bvandeusen

dev

2026-10-06 09:36:03 -04:00

3m40s

feat(server): security headers and a hash-based CSP for the web app (M462 #4980 )

test-web.yml #789:Commit d411693bb2 pushed by bvandeusen

dev

2026-10-06 09:30:25 -04:00

55s

feat(server): security headers and a hash-based CSP for the web app (M462 #4980 )

test-go.yml #788:Commit d411693bb2 pushed by bvandeusen

dev

2026-10-06 09:32:19 -04:00

2m50s

feat(server): security headers and a hash-based CSP for the web app (M462 #4980 )

release #787:Commit d411693bb2 pushed by bvandeusen

dev

2026-10-06 09:32:19 -04:00

2m50s

feat(server): cap request bodies, bound body reads, private cache headers, JSON-only cookie writes (M462 #4979 )

test-web.yml #786:Commit 24b767c23b pushed by bvandeusen

dev

2026-10-06 08:39:29 -04:00

2m0s

feat(server): cap request bodies, bound body reads, private cache headers, JSON-only cookie writes (M462 #4979 )

test-go.yml #785:Commit 24b767c23b pushed by bvandeusen

dev

2026-10-06 08:42:11 -04:00

6m30s

feat(server): cap request bodies, bound body reads, private cache headers, JSON-only cookie writes (M462 #4979 )

release #784:Commit 24b767c23b pushed by bvandeusen

dev

2026-10-06 08:43:29 -04:00

8m10s

feat(server): cap request bodies, bound body reads, private cache headers, JSON-only cookie writes (M462 #4979 )

android.yml #783:Commit 24b767c23b pushed by bvandeusen

dev

2026-10-06 08:41:33 -04:00

6m27s

feat(auth): throttle login, register, password reset and Subsonic auth failures (M462 #4976 )

test-web.yml #782:Commit 3bfddd0862 pushed by bvandeusen

dev

2026-10-06 08:30:37 -04:00

1m34s

feat(auth): throttle login, register, password reset and Subsonic auth failures (M462 #4976 )

test-go.yml #781:Commit 3bfddd0862 pushed by bvandeusen

dev

2026-10-06 08:33:46 -04:00

5m13s

feat(auth): throttle login, register, password reset and Subsonic auth failures (M462 #4976 )

release #780:Commit 3bfddd0862 pushed by bvandeusen

dev

2026-10-06 08:34:36 -04:00

6m3s

feat(auth): throttle login, register, password reset and Subsonic auth failures (M462 #4976 )

android.yml #779:Commit 3bfddd0862 pushed by bvandeusen

dev

2026-10-06 08:34:14 -04:00

5m41s

Merge pull request 'M400: acoustic duplicate detection, history-preserving merge, and fingerprinting settings' (#134 ) from dev into main

test-web.yml #778:Commit 3638d1d822 pushed by bvandeusen

main

2026-09-11 21:02:36 -04:00

33s