2887 Commits

Author SHA1 Message Date
Manuel
e81048135b
fix:(middlewares.go) - Set Cookie SameSite mode to Strict - 1776 (#1777)
* None is deprecated and will fallback to Lax in the future.
* Using Strict is future proof and provides additional CSR protection

Signed-off-by: Manuel Kroeber <manuel.kroeber@gmail.com>

Signed-off-by: Manuel Kroeber <manuel.kroeber@gmail.com>
2026-01-02 20:15:29 +00:00
Kendall Garner
822c364645
Fix creating server (#1894) 2026-01-02 20:15:29 +00:00
Deluan
a1506402aa
Use armhf for ARM builds 2026-01-02 20:15:29 +00:00
Deluan
0ab1d0d3d0
Fix Linux 32 bits build 2026-01-02 20:15:29 +00:00
Deluan
8380f4a2cf
Fix invalid option in pipeline 2026-01-02 20:15:29 +00:00
Deluan
8dfbf37548
Upgrade to GoLang 1.19 and bump golangci-lint version 2026-01-02 20:15:27 +00:00
Deluan
f72d8d148b
Fix GO-S2114 security issue
See https://deepsource.io/directory/analyzers/go/issues/GO-S2114
2026-01-02 20:14:54 +00:00
Deluan
8c94a3eef5
Fix formatting 2026-01-02 20:14:54 +00:00
Deluan
e6ba5a2229
Only compute version once 2026-01-02 20:14:54 +00:00
Deluan
0870f600c2
Fix warning about mixing value and pointer receivers 2026-01-02 20:14:54 +00:00
Deluan
b980a77f5c
Add test for WithTx 2026-01-02 20:14:54 +00:00
Deluan
0fe86e7045
Upgrade to latest go-sqlite3 (it's v1.14, not v2!) 2026-01-02 20:14:54 +00:00
Deluan
54e05638d5
Upgrade to Beego 2's orm 2026-01-02 20:14:54 +00:00
Deluan
2ae0520108
Remove //+build tags, as the code does not compile on older versions of Go anymore 2026-01-02 20:14:54 +00:00
Deluan
4d6f803fe2
Fix tracks never "loved" to be selected in Smart Playlists. Refer to https://github.com/navidrome/navidrome/issues/1417#issuecomment-1163423575 2026-01-02 20:14:54 +00:00
dependabot[bot]
70d77616bc
Bump github.com/go-chi/httprate from 0.5.2 to 0.6.0 (#1828)
Bumps [github.com/go-chi/httprate](https://github.com/go-chi/httprate) from 0.5.2 to 0.6.0.
- [Release notes](https://github.com/go-chi/httprate/releases)
- [Commits](https://github.com/go-chi/httprate/compare/v0.5.2...v0.6.0)

---
updated-dependencies:
- dependency-name: github.com/go-chi/httprate
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:14:53 +00:00
Deluan
e0ac640d4e
Add more info in search log message 2026-01-02 20:14:22 +00:00
Deluan
dac39d1d4f
Add log warn when request is cancelled/interrupted 2026-01-02 20:14:22 +00:00
Deluan
f2b02d042b
Speed up /search subsonic endpoints by parallelizing the queries 2026-01-02 20:14:22 +00:00
Deluan
4bfceb3710
Simplify Singleton usage by leveraging Go 1.18's generics 2026-01-02 20:14:22 +00:00
Deluan
88bb3ba956
Fix Quality translation in Spanish 2026-01-02 20:14:22 +00:00
Deluan
ca2af93cc5
Update caniuse-lite 2026-01-02 20:14:22 +00:00
Deluan
516f924168
Remove interfacer linter, as it does not work with Go 1.18 and will not be updated (it is deprecated) 2026-01-02 20:14:21 +00:00
Deluan
90bc1981d8
Upgrade Ginkgo to V2 2026-01-02 20:14:21 +00:00
Deluan
6120ce4907
Remove experimental version of context package 2026-01-02 20:14:21 +00:00
Deluan
0245339376
Update @djherbis's packages 2026-01-02 20:14:17 +00:00
Deluan
9c19cc6026
Remove hardcoded github.com/dhowden/tag branch. Fix #1764 2026-01-02 20:13:58 +00:00
Deluan
6a3318ee78
Return 501 for "not implemented". Fixes #1785 2026-01-02 20:13:58 +00:00
Deluan
96b105e62b
Add IP to Subsonic API's invalid login log messages. Closes #1814 2026-01-02 20:13:57 +00:00
Deluan
c4eadb212c
Add missing test case for #1778 2026-01-02 20:13:57 +00:00
Deluan
397f2ba8f8
Fix fscache key mapping. Closes #1778 2026-01-02 20:13:57 +00:00
Deluan
f58f9a41be
Fix docker build in pipeline 2026-01-02 20:13:57 +00:00
dependabot[bot]
3ccbc830bf
Bump github.com/mileusna/useragent from 1.0.2 to 1.1.0 (#1819)
Bumps [github.com/mileusna/useragent](https://github.com/mileusna/useragent) from 1.0.2 to 1.1.0.
- [Release notes](https://github.com/mileusna/useragent/releases)
- [Commits](https://github.com/mileusna/useragent/compare/v1.0.2...v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/mileusna/useragent
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:13:57 +00:00
dependabot[bot]
37e09d8024
Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#1821)
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.8.1 to 1.9.0.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/compare/v1.8.1...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:13:57 +00:00
dependabot[bot]
d5868cc426
Bump github.com/go-chi/cors from 1.2.0 to 1.2.1 (#1822)
Bumps [github.com/go-chi/cors](https://github.com/go-chi/cors) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/go-chi/cors/releases)
- [Commits](https://github.com/go-chi/cors/compare/v1.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/go-chi/cors
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:13:57 +00:00
dependabot[bot]
2c57e8ccfa
Bump github.com/lestrrat-go/jwx from 1.2.17 to 1.2.25 (#1742)
Bumps [github.com/lestrrat-go/jwx](https://github.com/lestrrat-go/jwx) from 1.2.17 to 1.2.25.
- [Release notes](https://github.com/lestrrat-go/jwx/releases)
- [Changelog](https://github.com/lestrrat-go/jwx/blob/v1.2.25/Changes)
- [Commits](https://github.com/lestrrat-go/jwx/compare/v1.2.17...v1.2.25)

---
updated-dependencies:
- dependency-name: github.com/lestrrat-go/jwx
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:13:57 +00:00
dependabot[bot]
c582d164ad
Bump github.com/onsi/gomega from 1.18.1 to 1.20.0 (#1817)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.18.1 to 1.20.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.18.1...v1.20.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:13:57 +00:00
Deluan
e1c6fcc750
Upgrade golangci-lint and fix new lint error 2026-01-02 20:13:54 +00:00
Deluan
4b60d2af8f
Build with GoLang 1.18.4 2026-01-02 20:12:40 +00:00
Deluan
5d114aa55b
Upgrade to GoLang 1.18 2026-01-02 20:12:38 +00:00
Ian Kerins
69699df961
Fix signaler not exiting on cancel (#1638)
* fix: make signaler exit on cancel

`break` is incorrect here, as it just breaks out of the select.
`return` to exit the function instead.

Fixes #1636.

Signed-off-by: Ian Kerins <ianskerins@gmail.com>

* fix: exit non-zero on fatal error

Signed-off-by: Ian Kerins <ianskerins@gmail.com>
2026-01-02 20:11:59 +00:00
Matt Doyle
19d7022a2a
Fixes a coloring glitch with the Monokai theme "unauthorized" popup (#1670)
* Fixes the coloring on the Monokai theme auth popup

* Indentation fix
2026-01-02 20:11:58 +00:00
Matt Doyle
32ece4faab
Adds a Monokai theme (#1669)
* Adds a new Monokai theme

* Deletes a commented-out line
2026-01-02 20:11:58 +00:00
Deluan
8bdc7690d7
Fix translatable label 2026-01-02 20:11:58 +00:00
Deluan
913d75b9f2
Fix loading overridden translations from ${DataFolder}/resources/i18n 2026-01-02 20:11:58 +00:00
Deluan
69d549d0d0
Add "random" sort option for Smart Playlists 2026-01-02 20:11:58 +00:00
Deluan
e58aaf3f5d
Force correct mime-type for JS and CSS files 2026-01-02 20:11:58 +00:00
dependabot[bot]
97369cba16
Bump github.com/ReneKroon/ttlcache/v2 from 2.9.0 to 2.11.0 (#1529)
Bumps [github.com/ReneKroon/ttlcache/v2](https://github.com/ReneKroon/ttlcache) from 2.9.0 to 2.11.0.
- [Release notes](https://github.com/ReneKroon/ttlcache/releases)
- [Changelog](https://github.com/ReneKroon/ttlcache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ReneKroon/ttlcache/compare/v2.9.0...v2.11.0)

---
updated-dependencies:
- dependency-name: github.com/ReneKroon/ttlcache/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:11:58 +00:00
dependabot[bot]
f60d871c0c
Bump github.com/lestrrat-go/jwx from 1.2.11 to 1.2.17 (#1574)
Bumps [github.com/lestrrat-go/jwx](https://github.com/lestrrat-go/jwx) from 1.2.11 to 1.2.17.
- [Release notes](https://github.com/lestrrat-go/jwx/releases)
- [Changelog](https://github.com/lestrrat-go/jwx/blob/main/Changes)
- [Commits](https://github.com/lestrrat-go/jwx/compare/v1.2.11...v1.2.17)

---
updated-dependencies:
- dependency-name: github.com/lestrrat-go/jwx
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:11:58 +00:00
dependabot[bot]
f83bde0694
Bump github.com/microcosm-cc/bluemonday from 1.0.16 to 1.0.17 (#1560)
Bumps [github.com/microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) from 1.0.16 to 1.0.17.
- [Release notes](https://github.com/microcosm-cc/bluemonday/releases)
- [Commits](https://github.com/microcosm-cc/bluemonday/compare/v1.0.16...v1.0.17)

---
updated-dependencies:
- dependency-name: github.com/microcosm-cc/bluemonday
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-02 20:11:58 +00:00