Repository navigation
A security and reliability update. Everyone on 1.0.2 or earlier should install it.
Security
- The PHP runtime inside the app is now 8.4.27. Earlier versions bundled 8.4.21, which is affected by two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619. To get the fixed PHP, Sudo Play moved to the current NativePHP desktop release, which also brings a newer Electron
Fixed
- If the app's internal web server stops in the background, Sudo Play now starts it again within a few seconds. Before, every click failed until you quit and reopened the app
- If it cannot recover, the menu bar window and Settings now say so: "Sudo Play stopped in the background. Press ⌘Q and open it again." Before, they showed a generic error
Changed
- The app keeps a second log file, for the part that runs the window, in
~/Library/Application Support/sudo-play/storage/logs/. It stays on your Mac and is kept to about 2 MB. PRIVACY.md lists it
Install
- Download
Sudo-Play-1.0.3-arm64.dmgbelow - Open it and drag Sudo Play to Applications. If you have an earlier version, choose Replace. Your settings stay
- Open Sudo Play. macOS asks once whether to open an app downloaded from the internet. Click Open
The first time you press Play, macOS asks whether Sudo Play may control Spotify. Click Allow, so it can start the playlist in the Spotify app.
Sudo Play does not update itself, because the daily catalog download is its only network call. To hear about new releases, choose Watch, then Custom, then Releases on this repository.
Requirements
- A Mac with Apple silicon (M1 or later). There is no Intel build yet
- The Spotify app, or a browser for the web player
Checksum
SHA-256 43ad8b4b56c47856fa266b807e114efcbbbca26955e964608a1e78ddee46d479 Sudo-Play-1.0.3-arm64.dmg
Documentation: sudoplay.dev