bvandeusen/minstrel
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 52 Wiki Activity
Files
edd9a3a6dbd202c3b8cbc428dd96a5fda494db64
minstrel/internal/db/migrations
T
History
bvandeusenandClaude Opus 5.5 edd9a3a6db
release / govulncheck (push) Successful in 39s
Details
release / web (push) Successful in 1m8s
Details
release / go (push) Successful in 1m30s
Details
release / integration (push) Successful in 4m37s
Details
release / android (push) Successful in 5m56s
Details
release / Build signed APK (releases and dev) (push) Successful in 5m55s
Details
release / Attach APK to the Release (tag releases only) (push) Skipped
Details
release / Build + push container image (push) Successful in 1m23s
Details
release / Verify release artifacts (tag releases only) (push) Skipped
Details
fix(auth): the Subsonic password is generated, never the login password (M462 #5026) 
`minstrel admin reset-password` copied the new login password into
subsonic_password, which is stored in plain text because Subsonic t/s
sign-in needs it. Every account recovered through the CLI had its login
password readable in the database, and changing the password later left
the copy behind.

- reset-password now changes only password_hash.
- Migration 0064 clears every subsonic_password, removing the copies.
- Settings gets a Subsonic password card: the server generates a random
  password, shows it once, and it can be regenerated or turned off
  (GET/POST/DELETE /api/me/subsonic-password, audited). Generated rather
  than user-chosen so it can never be a reused password.
- docs/security.md describes the separate password instead of the known
  issue.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-06 10:54:30 -04:00
..
0001_init.down.sql
M1/#291: placeholder down migration
2026-04-19 01:12:39 +00:00
0001_init.up.sql
M1/#291: placeholder up migration to establish runner
2026-04-19 01:12:37 +00:00
0002_core_library.down.sql
M1/#292: down migration for core library
2026-04-19 02:31:23 +00:00
0002_core_library.up.sql
M1/#292: core library migration (artists/albums/tracks/users)
2026-04-19 02:31:21 +00:00
0003_subsonic_password.down.sql
feat(db): migration 0003 down — drop users.subsonic_password
2026-04-19 17:37:12 +00:00
0003_subsonic_password.up.sql
feat(db): migration 0003 - users.subsonic_password opt-in column
2026-04-19 17:37:11 +00:00
0004_sessions.down.sql
feat(db): add sessions table for /api/* auth
2026-04-20 19:37:26 -04:00
0004_sessions.up.sql
feat(db): add sessions table for /api/* auth
2026-04-20 19:37:26 -04:00
0005_events.down.sql
feat(db): add M2 schema — play_sessions, play_events, skip_events
2026-04-25 20:45:44 -04:00
0005_events.up.sql
feat(db): add M2 schema — play_sessions, play_events, skip_events
2026-04-25 20:45:44 -04:00
0006_likes.down.sql
feat(db): add M2 likes schema (general_likes, _albums, _artists)
2026-04-26 16:20:08 -04:00
0006_likes.up.sql
feat(db): add M2 likes schema (general_likes, _albums, _artists)
2026-04-26 16:20:08 -04:00
0007_contextual_likes.down.sql
feat(db): add contextual_likes table (M3 session-context capture)
2026-04-27 11:13:31 -04:00
0007_contextual_likes.up.sql
feat(db): add contextual_likes table (M3 session-context capture)
2026-04-27 11:13:31 -04:00
0008_scrobble.down.sql
feat(db): add migration 0008 for scrobble (users LB columns + scrobble_queue table)
2026-04-28 08:40:39 -04:00
0008_scrobble.up.sql
feat(db): add migration 0008 for scrobble (users LB columns + scrobble_queue table)
2026-04-28 08:40:39 -04:00
0009_similarity.down.sql
feat(db): add migration 0009 for similarity (track_similarity + artist_similarity)
2026-04-28 19:57:02 -04:00
0009_similarity.up.sql
feat(db): add migration 0009 for similarity (track_similarity + artist_similarity)
2026-04-28 19:57:02 -04:00
0010_lidarr.down.sql
feat(db): add lidarr_config + lidarr_requests schema (migration 0010)
2026-04-29 15:10:01 -04:00
0010_lidarr.up.sql
feat(db): add lidarr_config + lidarr_requests schema (migration 0010)
2026-04-29 15:10:01 -04:00
0011_lidarr_quarantine.down.sql
fix(db): drop redundant quarantine user index + tighten ListQuarantineForUser
2026-04-30 16:54:03 -04:00
0011_lidarr_quarantine.up.sql
fix(db): drop redundant quarantine user index + tighten ListQuarantineForUser
2026-04-30 16:54:03 -04:00
0012_artist_similarity_unmatched.down.sql
feat(db): add artist_similarity_unmatched schema (migration 0012)
2026-05-01 05:50:22 -04:00
0012_artist_similarity_unmatched.up.sql
feat(db): add artist_similarity_unmatched schema (migration 0012)
2026-05-01 05:50:22 -04:00
0013_lidarr_metadata_profile.down.sql
feat(admin): metadata-profile picker on integrations page
2026-05-02 00:09:13 -04:00
0013_lidarr_metadata_profile.up.sql
feat(admin): metadata-profile picker on integrations page
2026-05-02 00:09:13 -04:00
0014_playlists.down.sql
feat(db): playlists schema for M7 #352 slice 1
2026-05-03 10:03:36 -04:00
0014_playlists.up.sql
feat(db): playlists schema for M7 #352 slice 1
2026-05-03 10:03:36 -04:00
0015_system_playlists.down.sql
feat(db/m7-352): system playlists schema (kind, variant, seed_artist_id, runs table)
2026-05-04 08:03:06 -04:00
0015_system_playlists.up.sql
feat(db/m7-352): system playlists schema (kind, variant, seed_artist_id, runs table)
2026-05-04 08:03:06 -04:00
0016_album_cover_source.down.sql
feat(db/m7-353): add albums.cover_art_source enum column
2026-05-04 14:29:13 -04:00
0016_album_cover_source.up.sql
feat(db/m7-353): add albums.cover_art_source enum column
2026-05-04 14:29:13 -04:00
0017_scan_runs.down.sql
feat(db/m7-381): scan_runs table for admin scan-status view
2026-05-04 20:04:04 -04:00
0017_scan_runs.up.sql
feat(db/m7-381): scan_runs table for admin scan-status view
2026-05-04 20:04:04 -04:00
0018_artist_art_and_provider_settings.down.sql
feat(db/m7-cover-sources): migration 0018 — artist art + provider settings
2026-05-06 12:24:36 -04:00
0018_artist_art_and_provider_settings.up.sql
feat(db/m7-cover-sources): migration 0018 — artist art + provider settings
2026-05-06 12:24:36 -04:00
0019_scan_schedule.down.sql
feat(db/m7-recurring-scans): migration 0019 + sqlc queries
2026-05-06 22:12:27 -04:00
0019_scan_schedule.up.sql
feat(db/m7-recurring-scans): migration 0019 + sqlc queries
2026-05-06 22:12:27 -04:00
0020_relax_art_source_checks.down.sql
feat(db/m7-art-providers): migration 0020 + provider-hash queries
2026-05-07 07:39:02 -04:00
0020_relax_art_source_checks.up.sql
feat(db/m7-art-providers): migration 0020 + provider-hash queries
2026-05-07 07:39:02 -04:00
0021_discover_variant.down.sql
feat(db/m7-discover): migration 0021 + bucket queries
2026-05-07 08:31:17 -04:00
0021_discover_variant.up.sql
feat(db/m7-discover): migration 0021 + bucket queries
2026-05-07 08:31:17 -04:00
0022_user_management.down.sql
feat(db/m7-user-mgmt): migration 0022 + audit helper
2026-05-07 11:51:00 -04:00
0022_user_management.up.sql
feat(db/m7-user-mgmt): migration 0022 + audit helper
2026-05-07 11:51:00 -04:00
0023_user_auto_approve.down.sql
feat(db/m7-user-mgmt): migration 0023 + admin-user CRUD queries
2026-05-07 12:12:18 -04:00
0023_user_auto_approve.up.sql
feat(db/m7-user-mgmt): migration 0023 + admin-user CRUD queries
2026-05-07 12:12:18 -04:00
0024_user_management_u3.down.sql
feat(db/m7-user-mgmt): migration 0024 + self-service + SMTP queries (U3)
2026-05-07 12:34:44 -04:00
0024_user_management_u3.up.sql
feat(db/m7-user-mgmt): migration 0024 + self-service + SMTP queries (U3)
2026-05-07 12:34:44 -04:00
0025_library_changes.down.sql
feat(server): library_changes log table + sqlc queries
2026-05-09 22:28:26 -04:00
0025_library_changes.up.sql
feat(server): library_changes log table + sqlc queries
2026-05-09 22:28:26 -04:00
0026_users_timezone.down.sql
feat(users): timezone column + PUT /api/me/timezone
2026-05-13 11:54:45 -04:00
0026_users_timezone.up.sql
feat(users): timezone column + PUT /api/me/timezone
2026-05-13 11:54:45 -04:00
0027_system_playlist_rotation.down.sql
feat(playlists): #415 stage 1 — rotation-state schema + play ingest
2026-05-15 07:40:17 -04:00
0027_system_playlist_rotation.up.sql
feat(playlists): #415 stage 1 — rotation-state schema + play ingest
2026-05-15 07:40:17 -04:00
0028_discovery_mix_variants.down.sql
fix(playlists): allow the 5 discovery-mix variants in DB constraints
2026-05-15 23:39:21 -04:00
0028_discovery_mix_variants.up.sql
fix(playlists): allow the 5 discovery-mix variants in DB constraints
2026-05-15 23:39:21 -04:00
0029_tracks_mbid_nonunique.down.sql
fix(library): extract recording MBID → tracks.mbid; unblock LB similarity
2026-05-16 13:49:38 -04:00
0029_tracks_mbid_nonunique.up.sql
fix(library): extract recording MBID → tracks.mbid; unblock LB similarity
2026-05-16 13:49:38 -04:00
0030_relax_art_source_check_to_nonempty.down.sql
fix: A2 (relax art-source CHECK) + D + E integration residual
2026-05-17 20:22:30 -04:00
0030_relax_art_source_check_to_nonempty.up.sql
fix: A2 (relax art-source CHECK) + D + E integration residual
2026-05-17 20:22:30 -04:00
0031_lidarr_add_confirmed_at.down.sql
fix(player+lidarr): mini-player sync race; durable approve + dedup
2026-05-18 12:24:20 -04:00
0031_lidarr_add_confirmed_at.up.sql
fix(player+lidarr): mini-player sync race; durable approve + dedup
2026-05-18 12:24:20 -04:00
0032_playback_errors.down.sql
feat(server): playback_errors table + admin inbox endpoints
2026-06-02 11:25:50 -04:00
0032_playback_errors.up.sql
feat(server): playback_errors table + admin inbox endpoints
2026-06-02 11:25:50 -04:00
0033_drop_scan_schedule.down.sql
feat(server): retire scan scheduler for watcher + safety-net walk
2026-06-06 21:50:08 -04:00
0033_drop_scan_schedule.up.sql
feat(server): retire scan scheduler for watcher + safety-net walk
2026-06-06 21:50:08 -04:00
0034_you_might_like.down.sql
feat(server): "You might like" album/artist Home rows (#790)
2026-06-11 19:33:46 -04:00
0034_you_might_like.up.sql
feat(server): "You might like" album/artist Home rows (#790)
2026-06-11 19:33:46 -04:00
0035_taste_profile.down.sql
feat(taste): phase 1 — persistent per-user taste profile from graded engagement (#796)
2026-06-11 20:55:14 -04:00
0035_taste_profile.up.sql
feat(taste): phase 1 — persistent per-user taste profile from graded engagement (#796)
2026-06-11 20:55:14 -04:00
0036_diagnostics.down.sql
feat(server/diagnostics): device debug-reporting ingest + admin timeline + retention (M9)
2026-06-29 18:38:56 -04:00
0036_diagnostics.up.sql
feat(server/diagnostics): device debug-reporting ingest + admin timeline + retention (M9)
2026-06-29 18:38:56 -04:00
0037_diagnostics_playback_kind.down.sql
feat(diagnostics): 'playback' kind, newest-first sort, fix active-route subtitle
2026-06-30 16:33:01 -04:00
0037_diagnostics_playback_kind.up.sql
feat(diagnostics): 'playback' kind, newest-first sort, fix active-route subtitle
2026-06-30 16:33:01 -04:00
0038_for_you_pick_kind.down.sql
feat(recommendation): For You exploration attribution — taste vs fresh picks
2026-07-02 20:39:41 -04:00
0038_for_you_pick_kind.up.sql
feat(recommendation): For You exploration attribution — taste vs fresh picks
2026-07-02 20:39:41 -04:00
0039_pick_kind_vocabulary.down.sql
feat(metrics): provenance as standard — pick_kind for all system mixes
2026-07-02 23:26:52 -04:00
0039_pick_kind_vocabulary.up.sql
feat(metrics): provenance as standard — pick_kind for all system mixes
2026-07-02 23:26:52 -04:00
0040_recommendation_tuning.down.sql
feat(tuning): scoring weights → DB-backed admin tuning lab
2026-07-03 09:22:03 -04:00
0040_recommendation_tuning.up.sql
feat(tuning): scoring weights → DB-backed admin tuning lab
2026-07-03 09:22:03 -04:00
0041_discover_taste_unheard.down.sql
feat(discover): taste-targeted novelty bucket + rebalance toward discovery
2026-07-13 18:16:04 -04:00
0041_discover_taste_unheard.up.sql
feat(discover): taste-targeted novelty bucket + rebalance toward discovery
2026-07-13 18:16:04 -04:00
0042_track_tags.down.sql
feat(taste): track_tags schema + enrichment queries (Opt 1 foundation)
2026-07-13 18:46:49 -04:00
0042_track_tags.up.sql
feat(taste): track_tags schema + enrichment queries (Opt 1 foundation)
2026-07-13 18:46:49 -04:00
0043_tag_provider_settings.down.sql
feat(tags): folksonomy tag enricher — pluggable provider chain (#1490 Step 2)
2026-07-13 21:43:58 -04:00
0043_tag_provider_settings.up.sql
feat(tags): folksonomy tag enricher — pluggable provider chain (#1490 Step 2)
2026-07-13 21:43:58 -04:00
0044_taste_tuning_enriched_tag_scale.down.sql
feat(tuning): expose EnrichedTagScale in the tuning lab (#1520)
2026-07-14 07:51:36 -04:00
0044_taste_tuning_enriched_tag_scale.up.sql
feat(tuning): expose EnrichedTagScale in the tuning lab (#1520)
2026-07-14 07:51:36 -04:00
0045_taste_profile_eras.down.sql
feat(taste): era/decade taste facet — #1530
2026-07-14 09:01:00 -04:00
0045_taste_profile_eras.up.sql
feat(taste): era/decade taste facet — #1530
2026-07-14 09:01:00 -04:00
0046_context_time_weight.down.sql
feat(taste): time-of-day / weekday context conditioning — #1531
2026-07-14 09:31:43 -04:00
0046_context_time_weight.up.sql
feat(taste): time-of-day / weekday context conditioning — #1531
2026-07-14 09:31:43 -04:00
0047_taste_profile_moods.down.sql
feat(taste): mood taste facet — #1534
2026-07-14 10:32:41 -04:00
0047_taste_profile_moods.up.sql
feat(taste): mood taste facet — #1534
2026-07-14 10:32:41 -04:00
0048_play_events_device_class.down.sql
feat(taste): device-class context conditioning — #1551
2026-07-14 12:47:59 -04:00
0048_play_events_device_class.up.sql
feat(taste): device-class context conditioning — #1551
2026-07-14 12:47:59 -04:00
0049_suggestion_snoozes.down.sql
feat(discover): time-boxed suggestion snooze, server side — #2374
2026-08-01 22:51:51 -04:00
0049_suggestion_snoozes.up.sql
feat(discover): time-boxed suggestion snooze, server side — #2374
2026-08-01 22:51:51 -04:00
0050_candidate_artist_tags.down.sql
feat(discover): artist-tag cache for out-of-library candidates — #2376
2026-08-02 20:04:15 -04:00
0050_candidate_artist_tags.up.sql
feat(discover): artist-tag cache for out-of-library candidates — #2376
2026-08-02 20:04:15 -04:00
0051_discover_tuning.down.sql
feat(discover): rank suggestions by taste-tag overlap — #2377 (server)
2026-08-02 20:31:12 -04:00
0051_discover_tuning.up.sql
feat(discover): rank suggestions by taste-tag overlap — #2377 (server)
2026-08-02 20:31:12 -04:00
0052_session_ips.down.sql
feat(auth): active sessions API with origin/current IP — #370
2026-08-05 09:17:40 -04:00
0052_session_ips.up.sql
feat(auth): active sessions API with origin/current IP — #370
2026-08-05 09:17:40 -04:00
0053_network_settings.down.sql
feat(net): trusted-proxy depth so real client IPs survive a proxy — #2453
2026-08-05 10:07:43 -04:00
0053_network_settings.up.sql
feat(net): trusted-proxy depth so real client IPs survive a proxy — #2453
2026-08-05 10:07:43 -04:00
0054_track_tag_read_version.down.sql
fix(scanner): read multi-value genre frames correctly — #2499
2026-08-05 21:17:59 -04:00
0054_track_tag_read_version.up.sql
fix(scanner): read multi-value genre frames correctly — #2499
2026-08-05 21:17:59 -04:00
0055_track_missing_since.down.sql
feat(library): detect missing files and stop offering them — #2523
2026-08-06 14:34:53 -04:00
0055_track_missing_since.up.sql
feat(library): detect missing files and stop offering them — #2523
2026-08-06 14:34:53 -04:00
0056_missing_reacquisition.down.sql
feat(library): a missing file asks Lidarr for itself, on a backoff — #2527
2026-08-16 23:53:21 -04:00
0056_missing_reacquisition.up.sql
feat(library): a missing file asks Lidarr for itself, on a backoff — #2527
2026-08-16 23:53:21 -04:00
0057_songs_like_tuning.down.sql
fix(recommendation): Songs-like gets its own profile so it stops wandering
2026-09-10 20:51:15 -04:00
0057_songs_like_tuning.up.sql
fix(recommendation): Songs-like gets its own profile so it stops wandering
2026-09-10 20:51:15 -04:00
0058_track_fingerprints.down.sql
feat(library): fingerprint every new or changed file — M400 #3905-#3907
2026-09-11 13:21:15 -04:00
0058_track_fingerprints.up.sql
feat(library): fingerprint every new or changed file — M400 #3905-#3907
2026-09-11 13:21:15 -04:00
0059_duplicate_groups.down.sql
feat(library): the duplicate sweep — propose duplicate groups from fingerprints (M400 #3910)
2026-09-11 17:00:07 -04:00
0059_duplicate_groups.up.sql
feat(library): the duplicate sweep — propose duplicate groups from fingerprints (M400 #3910)
2026-09-11 17:00:07 -04:00
0060_play_events_track_index.down.sql
feat(admin): the duplicates report — review proposed duplicate groups (M400 #3912)
2026-09-11 17:11:11 -04:00
0060_play_events_track_index.up.sql
feat(admin): the duplicates report — review proposed duplicate groups (M400 #3912)
2026-09-11 17:11:11 -04:00
0061_fingerprint_settings.down.sql
feat(admin): fingerprinting settings — on/off, length, match threshold, concurrency, sweep interval (M400 #3913)
2026-09-11 17:53:55 -04:00
0061_fingerprint_settings.up.sql
feat(admin): fingerprinting settings — on/off, length, match threshold, concurrency, sweep interval (M400 #3913)
2026-09-11 17:53:55 -04:00
0062_network_public_url.down.sql
fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981)
2026-10-06 09:32:10 -04:00
0062_network_public_url.up.sql
fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981)
2026-10-06 09:32:10 -04:00
0063_api_token_hash.down.sql
feat(auth): store Subsonic API keys hashed; a new key is shown once (M462 #4983)
2026-10-06 09:42:35 -04:00
0063_api_token_hash.up.sql
feat(auth): store Subsonic API keys hashed; a new key is shown once (M462 #4983)
2026-10-06 09:42:35 -04:00
0064_clear_subsonic_password.down.sql
fix(auth): the Subsonic password is generated, never the login password (M462 #5026)
2026-10-06 10:54:30 -04:00
0064_clear_subsonic_password.up.sql
fix(auth): the Subsonic password is generated, never the login password (M462 #5026)
2026-10-06 10:54:30 -04:00