Skip to content

Gharmonize v1.4.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Oct 12:05
· 63 commits to main since this release
v1.4.1
f25c887

Gharmonize v1.4.1

Gharmonize v1.4.1 focuses on desktop stability, media-processing reliability, disc ripping, AppImage distribution, security hardening, and release infrastructure improvements.

✨ Highlights

  • Improved Electron desktop stability, especially when Gharmonize is minimized, restored from the system tray, or left running in the background.
  • Improved Blu-ray disc scanning and ripping with safer handling of malformed or unusual playlists.
  • Reduced unnecessary Classic UI work and improved background job rendering efficiency.
  • Added bounded music metadata, cover-art, and lyrics requests so unavailable providers cannot indefinitely delay conversion.
  • Improved Apple Music, Deezer, and Spotify matching for accented titles and common video-title labels.
  • Added a more complete AppImage update infrastructure with embedded update information and .zsync metadata.
  • Added SignPath code-signing preparation, policy documentation, and CI testing infrastructure.
  • Updated and cleaned dependency chains to resolve audit findings and reduce vulnerable development dependencies.

⚠️ Windows code signing status — please read

The Windows files in Gharmonize v1.4.1 do not carry a trusted Authenticode signature.

The SignPath Foundation production code-signing certificate is still pending. Self-signed test certificates are not used for this public release.

This applies to:

  • Windows Setup installer
  • Standalone Portable EXE
  • Application executable inside the Portable Folder ZIP

Windows may therefore display an Unknown Publisher or Microsoft SmartScreen warning, and managed Windows security policies may block execution.

Download Gharmonize only from this repository's official Releases page and verify the published checksums and GitHub artifact attestations.

The GPG-signed checksum manifest verifies release integrity, but it is not a Windows Authenticode signature.

Do not disable Windows security protections or install a test certificate to run this release.

🚀 Performance & Processing Improvements

Several internal processing paths have been optimized to reduce unnecessary work and improve reliability.

  • Reduced unnecessary Classic UI work by batching layout updates.
  • Duplicate job snapshots are now ignored where possible.
  • Hidden job-panel rendering is deferred until needed.
  • Optional music metadata, cover-art, and lyrics requests now use bounded waits so unavailable providers cannot indefinitely delay conversion.
  • Added per-track download and metadata timings to help identify slow processing stages.
  • Fixed successful embed-only lyrics being incorrectly reported as missing.
  • Corrected duplicate lyrics statistics.
  • Improved Apple Music, Deezer, and Spotify matching for accented titles.
  • Improved matching of video labels such as (Clip Officiel) without stripping meaningful musical versions such as Live and Remix.
  • Corrected fallback track numbering when only part of an Automix playlist is selected.

💿 Disc Ripper

Disc handling has received several reliability improvements.

  • Improved Blu-ray playlist detection and validation.
  • Added safer handling for malformed or incomplete Blu-ray playlist data.
  • Improved disc scanning behavior and error handling.
  • Improved ripping flow for problematic discs.
  • Added additional automated tests for disc scanning and ripping.

These changes make the disc ripper more tolerant of unusual Blu-ray structures instead of failing the complete scan because of an individual invalid playlist.

🖥️ Desktop / Electron

Several issues affecting long-running desktop sessions have been addressed.

  • Fixed cases where the Electron renderer could become unresponsive while running in the background.
  • Fixed blank-window behavior after restoring Gharmonize.
  • Improved window restoration when using the system tray.
  • The main Electron window is now preserved more reliably across tray hide/show operations.
  • Removed temporary desktop health diagnostics used during troubleshooting.
  • Protected runtime binary readiness checks are now started after access has been granted.
  • Improved artifact download handling in the Electron application.

🐧 AppImage

The Linux AppImage release process has been significantly improved.

  • Added embedded AppImage update information.
  • Added .zsync metadata generation for supported AppImage update tools.
  • .zsync metadata is now distributed alongside the corresponding AppImage artifact.
  • Added a dedicated AppImage release packaging script.
  • Improved runtime portability through the required static runtime components.

This prepares Gharmonize AppImage builds for a cleaner incremental-update workflow.

🔐 Security & Code Signing

Release and security infrastructure has also been expanded.

  • Added CODE_SIGNING_POLICY.md.
  • Added SignPath signing workflow preparation.
  • Added a SignPath CI test workflow.
  • Added release-signing documentation and policy information.
  • Added PRIVACY.md.
  • Extended security-related automated tests.
  • Removed vulnerable development dependency chains.
  • Resolved additional dependency audit findings.

Free code signing infrastructure is provided by [SignPath.io](https://signpath.io/), with the production certificate intended to be provided by the [SignPath Foundation](https://signpath.org/).

See:

🔑 Access Interface

The Gharmonize access screen has received additional cleanup and polish.

  • Refreshed authorization/access gate presentation.
  • Improved access-state handling.
  • Updated related interface text.
  • Improved related translations and UI behavior.

📦 Dependency Updates

Core and development dependencies have been refreshed, including:

  • Electron 44.5.0
  • music-metadata 11.16.1
  • dotenv 18.0.4
  • multer 2.4.0
  • wait-on 9.5.1
  • fast-uri 3.1.8

The dependency tree was also cleaned to remove unnecessary vulnerable development chains and resolve audit findings.

🧪 Testing

Additional automated coverage has been added for:

  • Disc ripping
  • Disc scanning
  • Electron artifact downloading
  • Access-control behavior
  • Security-sensitive functionality

📚 Documentation

  • Added code-signing policy documentation.
  • Added privacy documentation.
  • Updated installation documentation.
  • Updated security documentation.
  • Improved README presentation and image quality.

📥 Downloads

Windows packages are available as:

  • Setup installer
  • Portable EXE
  • Portable Folder ZIP

Linux packages include:

  • AppImage
  • .zsync update metadata

Container images are published separately by the Docker workflow:

  • ghcr.io/g-grbz/gharmonize:1.4.1
  • ghcr.io/g-grbz/gharmonize:latest

🔄 What's Changed

  • chore(deps): bump multer from 2.3.0 to 2.4.0 by @dependabot[bot] in #13
  • chore(deps-dev): bump electron from 44.3.0 to 44.4.1 by @dependabot[bot] in #12
  • chore(deps): bump dotenv from 17.4.2 to 18.0.3 by @dependabot[bot] in #15
  • chore(deps): bump music-metadata from 11.15.0 to 11.16.0 by @dependabot[bot] in #16
  • chore(deps-dev): bump electron from 44.4.1 to 44.4.4 by @dependabot[bot] in #17
  • chore(deps-dev): bump fast-uri from 3.1.6 to 3.1.8 by @dependabot[bot] in #18
  • chore(deps-dev): bump electron from 44.4.4 to 44.5.0 by @dependabot[bot] in #19
  • chore(deps): bump dotenv from 18.0.3 to 18.0.4 by @dependabot[bot] in #20
  • chore(deps-dev): bump wait-on from 9.1.0 to 9.5.1 by @dependabot[bot] in #21
  • chore(deps): bump music-metadata from 11.16.0 to 11.16.1 by @dependabot[bot] in #22

📋 Full Changelog

Full Changelog:
v1.4.0...v1.4.1

Contributors

dependabot
Assets 12
Loading