v0.1.3 — smaller app updates

Buzz v0.1.3 separates the app from its large cu126 dependency image, using the same reviewed source commit as v0.1.3-rc.1.

• Smaller later updates: app releases reuse an approved dependency image by immutable digest. The first update to this layout downloads the new dependency layers in full; later app-only updates reuse them. Reviewed app-only test builds added under 1 MB of uncompressed content. Dependency changes still require their changed layers.
• OS package refresh: the dependency scan reports 642 MEDIUM findings, down from 645, with 32 LOW and no HIGH or CRITICAL findings. The final app image is scanned again before publication.
• Faster Python startup: dependency bytecode is precompiled (27,147 files in the reviewed build).
• Matching sources: each app release includes notices, inventory, scan records and checksums, plus a link to its exact dependency sources.

Ports, storage mappings and the Pascal-compatible CUDA 12.6/PyTorch 2.8.0 stack are unchanged. Both ghcr.io/stormavenger/buzz-unraid:latest and :0.1.3 now resolve to the same published image. The versioned image is ghcr.io/stormavenger/buzz-unraid:0.1.3.

Source revision: 8357d45a529504f67c0cfe245292b768b6427837.

Dependency image: ghcr.io/stormavenger/buzz-unraid-deps@sha256:9fc545496fb34e40b0d80c80407f7235a42f95fb56faed5b16fb3de99bfa0b26.

Dependency key: 78a8a859aaf296555271ff33bf3a0d0866cf56f3afc95515c0c585df99e14bf2.

Matching dependency sources and notices.

Published and verified: the stable workflow passed all build, browser/storage, privacy, scan and source gates, then updated :latest.

Immutable image: ghcr.io/stormavenger/buzz-unraid@sha256:0bf83fce5b8f9a88ec394354613865a95d062cfebc1d4c770f508de5d498bf71.

• Anonymous Docker pull passed.
• Versioned and :latest digests match; version, revision and dependency-key labels match the release records.
• All nine release assets match their SHA-256 records. SOURCE-README.txt links to the exact dependency source release, and app/dependency package inventories agree.
• Final scan: 0 HIGH/CRITICAL, 642 MEDIUM and 32 LOW findings.

Hardware validation limit: dedicated GPU transcription checks have not yet been run for this release. The RC passed anonymous Docker pull, label, checksum and source-link verification. Publishing this release does not change a running container.

v0.1.3-rc.1 — dependency image split

This release candidate separates Buzz's app files from its large cu126 dependency image.

• Dependency/app split: app releases inherit an approved dependency image by immutable digest and link its matching sources instead of uploading them again.
• OS package refresh: the dependency publication scan reports 642 MEDIUM findings, down from 645, with 32 LOW and no HIGH or CRITICAL findings. The RC app image is scanned again during publication.
• Bytecode precompilation: Python bytecode is compiled in the dependency image for startup performance (27,147 files in the reviewed build).
• Download size: the first update to this layout downloads the new dependency layers in full. Later app-only updates reuse those layers and are small; the reviewed test builds added under 1 MB of uncompressed app content. Dependency updates still require their changed layers.

This is a prerelease for separate-container testing. Use ghcr.io/stormavenger/buzz-unraid:0.1.3-rc.1; the stable :latest channel remains on v0.1.2. Ports, storage mappings and the Pascal-compatible CUDA 12.6/PyTorch 2.8.0 stack are unchanged.

Published image: ghcr.io/stormavenger/buzz-unraid@sha256:10cb937b3486721247ac3325c0598be72ebabe230fe2c731963f82776c042f8a.

Source revision: 8357d45a529504f67c0cfe245292b768b6427837.

Publication verification:

• The publish workflow passed; the stable-tag update step was skipped.
• Anonymous Docker pull passed. Registry and release labels match the version, source revision and dependency key.
• All nine release assets match their SHA-256 records. SOURCE-README.txt links to the matching dependency source release; app and dependency package inventories agree.
• The final app scan reports 0 HIGH/CRITICAL, 642 MEDIUM and 32 LOW findings.
• :latest remains v0.1.2 at sha256:7d6145072827bb5fe3293d7e7d46d2faceedc4c9d3a7b68433eaa40a8cec3ec5.
• GPU hardware transcription testing remains to be performed in a separate disposable container. No production container was changed.

Dependency image: ghcr.io/stormavenger/buzz-unraid-deps@sha256:9fc545496fb34e40b0d80c80407f7235a42f95fb56faed5b16fb3de99bfa0b26.

Dependency key: 78a8a859aaf296555271ff33bf3a0d0866cf56f3afc95515c0c585df99e14bf2.

Matching dependency sources and notices. App-specific records and checksums are attached to this RC release.

v0.1.2 — Startup status and diagnostics

Buzz now shows useful startup feedback instead of an unexplained black desktop, with GPU availability and a private diagnostic download in the top bar.

• Startup and reconnection guidance waits for the real Buzz window and desktop connection, with a Retry connection button when delayed.
• GPU status runs a small CUDA computation and Faster Whisper compatibility check once per start. It also reflects Buzz’s Force CPU setting; it does not track individual jobs’ GPU use.
• Diagnostics downloads an allowlisted JSON report locally. It excludes raw logs, recordings, transcripts, credentials, environment dumps, private paths, hostnames, IP addresses, and GPU identifiers. Nothing is uploaded automatically.
• Frequent status updates use shared memory. Status polls do not create access-log writes. Existing storage mappings and GPU dependencies are unchanged.

The tested source is commit 77aa07c. All 20 Python tests, both JavaScript tests, and the Linux build and container checks passed, including actual shared-memory placement and the live status endpoint. Browser checks covered startup/recovery, GTX 1080 GPU availability, and the downloaded diagnostic schema.

Published image: ghcr.io/stormavenger/buzz-unraid:0.1.2 and stable :latest. Both tags are publicly available without a registry login.

Digest: sha256:7d6145072827bb5fe3293d7e7d46d2faceedc4c9d3a7b68433eaa40a8cec3ec5.

The publication workflow passed every gate. The scan reports zero HIGH or CRITICAL findings; 645 MEDIUM and 32 LOW findings remain visible in the attached report. Matching-source collection completed with 1,064 archives and zero failures. All 14 uploaded release assets are present, and their reported digests match SHA256SUMS. See SOURCE-README.txt for source archive instructions.

Browser microphone forwarding remains unconfigured. Automatic import after upload and expanded job-status controls are saved for a later release.

Archived validation details

Moved from docs/VALIDATION.md on October 28, 2026. These are historical results for this release.

Runtime commit 55657a92003ffc0f096f72cdb7446a0886cabea9 passed the Linux build and container checks: source/privacy checks, 20 Python tests, two JavaScript diagnostic-schema tests, Compose validation, build-context exclusion, actual Qt readiness, and HTTP/storage/restart smoke checks. The publication results for the matching release are recorded below.

A disposable Unraid container built over v0.1.1 with the new status code and original pinned GUI assets showed the startup screen and then the live Buzz desktop. The GTX 1080 passed the new small CUDA computation and Faster Whisper capability probe, and the toolbar displayed GPU available. A browser diagnostic download contained only the declared version/status/event schema. A simulated paused application event loop triggered delayed-start guidance and the retry button; retry reconnected the browser, and the screen recovered automatically after the application resumed. No personal recordings, production appdata, or production container were used for these tests.

The follow-up runtime commit 77aa07c1304ff551973d6f8b7b702a9c4f359c55 passed the Linux build and container checks. It moves both status files to /dev/shm/buzz-status and suppresses access-log entries for status polls. The smoke test confirms both files reside on the shared-memory tmpfs and the status endpoint still works. The manual publication default is now 0.1.2.

The v0.1.2 publication workflow passed all build, runtime, privacy, inventory, scan, source-collection, asset-upload, and image-publication gates at release commit 77aa07c1304ff551973d6f8b7b702a9c4f359c55. The scan reports zero HIGH or CRITICAL findings, with 645 MEDIUM and 32 LOW findings retained. Matching-source collection completed with 1,064 archives and no failures. All 14 uploaded assets are present, and GitHub's reported asset digests match the release checksums. The scan, source-manifest, and image-label files were also downloaded anonymously and checked against SHA256SUMS.

Both public image tags :0.1.2 and :latest resolve anonymously to sha256:7d6145072827bb5fe3293d7e7d46d2faceedc4c9d3a7b68433eaa40a8cec3ec5.

An anonymous pull with an empty Docker credential configuration succeeded on Unraid and matched that digest. The exact published image passed CUDA computation and offline Faster Whisper Small inference of the public speech sample on the GTX 1080. A fresh disposable desktop became healthy, reported version 0.1.2 and the release revision, and showed GPU available in Chrome. Its live status endpoint and both shared-memory files passed placement/readiness checks. A diagnostic report downloaded from that released interface contained only the intended version/status/event schema. The disposable containers and anonymous data volumes were removed after verification; the user's installed application was not updated or recreated.

v0.1.1 — Return to the main page

Fixes getting stuck in Buzz’s live-transcription window when no microphone is configured.

• Adds Back to main page beside Upload files and Download transcripts in the browser’s top bar.
• Closes the live-recording window through Buzz’s normal cleanup and brings the existing file list forward.
• Keeps the application, saved history, and file-transcription jobs in the same running session.
• Keeps the toolbar usable on narrow screens.

Install or update

Versioned image: ghcr.io/stormavenger/buzz-unraid:0.1.1
Stable update channel: ghcr.io/stormavenger/buzz-unraid:latest

Use the current Buzz-Transcription Unraid template. New installs use /mnt/user/appdata/buzz-transcription; existing installations should retain their saved folder mappings. Back up appdata before upgrading.

The publication workflow passed. Both tags identify sha256:4b5920b92d4b1b1ba770f5916a5a96ef2716864d6d9857fa4aa454e0a5b5b0af. Matching sources, notices, inventory, scan reports, and checksums are attached below.

Validation

The Linux amd64 build and browser/startup/persistent-storage checks passed. The real Qt test opens the live window without a microphone, returns through the same shortcut sent by the toolbar, repeats the operation, and verifies the existing main window and database are retained. Chrome testing also returned from the live view using the new top-bar button.

The release scan found zero HIGH or CRITICAL findings; 645 MEDIUM and 32 LOW findings remain visible in image-scan.json. Matching-source collection completed with 1,064 archives and no failures.

Scope

Browser microphone forwarding is not configured by this release. This remains a single-user desktop for a trusted LAN or VPN. GPU requirements and the Pascal-compatible CUDA 12.6/PyTorch 2.8 stack are unchanged.

Container-specific code and original assets use MIT. Bundled software retains its own licenses; see the notices and corresponding-source records attached to this release. Model weights are downloaded separately.

Archived validation details

Moved from docs/VALIDATION.md on October 28, 2026. These are historical results; stable-tag statements describe the time of the original checks.

Release commit 3dd353e8b0afe180e0daab72e8daca8cc7d6089f passed the Linux build and browser/persistence check. The build exercises the real live-recording window with no microphone, uses the application shortcut from text-field focus, repeats the return, and verifies the same main-window and database objects remain open. The 16 host tests and JavaScript syntax check also passed.

Chrome testing opened Live Recording and returned to the main file list using Back to main page in the top bar, including repeated use. Testing used a disposable desktop with fresh application data. No personal recordings were used, and this release does not add browser microphone forwarding.

The v0.1.1 publication workflow repeats the image build, runtime checks, clean-image inventory, scan gate, and matching-source collection before publication. The CUDA/PyTorch dependency versions are unchanged.

The v0.1.1 release scan reports zero HIGH or CRITICAL findings, with 645 MEDIUM and 32 LOW findings retained in the report. Matching-source collection completed with 1,064 archives and no failures. The image labels identify version 0.1.1 and the tested commit above. Reports and sources are attached to the matching release.

Published v0.1.1 and stable :latest image digest: sha256:4b5920b92d4b1b1ba770f5916a5a96ef2716864d6d9857fa4aa454e0a5b5b0af.

An anonymous pull with an empty Docker credential configuration succeeded on Unraid and matched that digest. The exact published image passed CUDA computation and offline Faster Whisper Small transcription of a public speech sample on the GTX 1080. A separate disposable container became healthy, reported version 0.1.1 and the release commit, and passed the Chrome live-recording-to-main-page button check with fresh application data. Both test containers were removed after verification. The production application was not reinstalled; installation is left to the user.

cu126 dependency sources 78a8a859aaf296555271ff33bf3a0d0866cf56f3afc95515c0c585df99e14bf2

Immutable dependency image sources and notices. App releases link here; this is not an app update. Publication is complete only when dependency-image.json and SHA256SUMS are present.

v0.1.0 — Buzz for Unraid

First public release of the unofficial Buzz desktop container for Unraid.

• Buzz 1.4.5 opens in your browser through Unraid’s WebUI action.
• A permanent top bar provides file uploads with progress and transcript downloads.
• Choose only Input folder and Output folder during installation; appdata, uploads, the web port, and GPU settings are prefilled.
• NVIDIA transcription with a CUDA 12.6 stack chosen for GTX 1080 compatibility.
• Persistent settings, history, and models; read-only original recordings; automatic TXT, SRT, and VTT exports.

Install

Use the current Unraid template: its app name is Buzz-Transcription and new installs use /mnt/user/appdata/buzz-transcription, avoiding the unrelated Buzz collaboration app. This template update does not change the image. Existing installations retain their saved mappings; see the README before installing both apps on one server.

Requires an amd64 Unraid server, a compatible NVIDIA GPU, and the NVIDIA Driver plugin. Follow the README for installation and folder permissions.

Versioned image: ghcr.io/stormavenger/buzz-unraid:0.1.0
Stable update channel: ghcr.io/stormavenger/buzz-unraid:latest

Both tags identify sha256:60479faefdfd217d387446d69fbbab997fbf3fda8110626835dd1c2acab3da55.

The publication workflow passed. Inventory, notices, matching sources, checksums, and the image scan are attached below. Download SOURCE-README.txt for source archive instructions.

Validation

Linux amd64 build, real audio decoding/resampling, application startup, and storage persistence checks passed. The release candidate transcribed the public test recording offline with Faster Whisper Small on a GTX 1080 using int8_float32. The release scan found zero HIGH or CRITICAL findings; 645 MEDIUM and 32 LOW findings remain in image-scan.json. Matching-source collection completed with 1,064 archives and no failures.

Scope

This is a shared, single-user browser desktop for a trusted LAN or VPN. After uploading a recording, import it with Buzz’s + button from /uploads. Microphone forwarding is not configured. Faster Whisper is the validated default; NeMo, larger models, speaker identification, speech separation, and other GPU families need separate testing.

Container-specific code and original assets use MIT. Bundled components retain their own licenses; see THIRD_PARTY_NOTICES.md, docs/REDISTRIBUTION.md, and the release records. Model weights are downloaded separately and retain their own terms.

Archived validation details

Moved from docs/VALIDATION.md on October 28, 2026. These are historical results; stable-tag and catalog statements describe the time of the original checks.

Tested configuration

• Unraid 7.3.4 (initial development tests used 7.3.3); Ryzen 7 1800X.
• NVIDIA GTX 1080, 8192 MiB, with the Unraid NVIDIA Driver plugin.
• Buzz 1.4.5; Python 3.12; PyTorch 2.8.0+cu126; Faster Whisper 1.2.1; CTranslate2 4.6.2.

Completed

• Host tests cover precision selection, export routing, upstream patch drift, browser/application health, process exit races, Unraid mappings, direct-wheel hash structure, and blocked runtime package installation.
• All six guarded compatibility changes apply to the pinned Buzz/Faster Whisper packages, and modified Python files parse. Mono and stereo WAV decoding/resampling is exercised during the image build.
• Python/shell syntax and XML/YAML parsing pass. The runtime and build dependency locks include artifact hashes.
• The Linux image built on the Unraid server. The application check runs in the final runtime stage, including its shared Python library, without build-only libraries available.
• The disposable CPU smoke test passed: browser readiness, Buzz window creation, writable folders as UID 99/GID 100, and files surviving a restart.
• The Unraid template created a healthy buzz container; its WebUI action opened the browser desktop.
• Real CUDA matrix computation passed on the GTX 1080. CTranslate2 reports float32, int8, and int8_float32 GPU compute types.
• A public Whisper test recording was uploaded using the browser file manager, imported in Buzz, and transcribed with Faster Whisper Small in approximately 10 seconds. Container logs reported CUDA 12.6. TXT/SRT/VTT files were created in the mapped output folder as nobody:users.
• Remote Resizing made the desktop fit the browser window.
• On Unraid 7.3.4, the browser toolbar opened the uploads folder and transcript folder directly. Chrome downloaded a completed TXT transcript successfully. Both a 32 KB WAV and an 8 MiB WAV uploaded through the top-bar picker with matching SHA-256 hashes on the server; progress was visible for the larger upload.
• Recreating the container with the toolbar image and existing folder mappings preserved the saved transcription history and output files. The replacement container became healthy.

The GitHub Linux check passed for release commit c3cb6ebd072395c236ccf48b3d3e0ff3e2761d48. All 16 host tests, Docker build-context privacy checks, Compose validation, the Linux amd64 image build, and the disposable CPU/browser/persistent-storage smoke test passed on the hosted Ubuntu runner. GPU inference was verified separately on the Unraid server, using a cached Small model and the public JFK sample with networking disabled.

The publication workflow completed the clean-image inventory and matching-source collection: 285 Python packages, 330 Ubuntu packages, and 1,064 source archives with no collection failures. Its Trivy report contained no HIGH or CRITICAL findings; 645 MEDIUM and 32 LOW findings remain visible in the report. This is a point-in-time scan, not a guarantee that the image has no vulnerabilities. The matching release assets are public.

The official Community Applications scan passed: one valid Docker app, no hard errors or template warnings, and a publicly pullable image. The submission was sent and auto-approved on October 27, 2026. Catalog visibility awaits the next Community Applications build.

v0.1.0 image digest (the initial stable release): sha256:60479faefdfd217d387446d69fbbab997fbf3fda8110626835dd1c2acab3da55.

An anonymous pull using an empty Docker credential configuration succeeded on the Unraid server and matched that digest. The exact published image passed CUDA computation and offline Faster Whisper Small inference on the GTX 1080. The existing installation was switched to the public stable tag with its original storage mappings; it became healthy and the browser desktop retained its saved history. Unraid's Auto Update Applications plugin recognizes the public image and retains the selected-container update schedule.