v0.25.0

0.25.0 (2026-10-28)

Features

• api: playlists and synced play queue endpoints (1021e28)
• api: webhook secrets shown once, masked headers, validation, delivery log (c8da51a)
• core: encrypted webhook headers and secrets, delivery log table (15dbd5c)
• core: playlists and play queue models, services and merge re-point (37d2374)
• core: sign, log and retry webhook deliveries (9b95339)
• fire set.updated, set.deleted, set.restored and set.purged webhooks (e75995a)
• P4a webhook hardening (signing, encrypted headers, retries, delivery log, more events) (8276f17)
• P4b playlists and a cross-device play queue (9ba17ba)
• player: cross-set play queue with auto-advance (d7ad7f0)
• player: sync the play queue across devices (907ed5f)
• web: playlists pages and add-to-playlist menu (47f6b48)
• web: webhooks page with secrets, masked headers and delivery log (65a4c88)

Bug Fixes

• core: empty reorder, naive queue base time, ordering ties and test gaps (f15cde8)
• core: real RQ retry test, permanent bad-URL failures, safer delete re-check (a78cdea)
• player: clear lock-screen metadata on logout, correct reset comment (24ed9dd)
• player: final P4b review fixes (e7d8f5b)
• player: queue sync races, auth scoping and resume semantics (08e99fe)
• player: scope the stored queue to its user and stop advances on logout (240df04)
• player: set-page controls respect the current set; queue race and index fixes (3b45630)
• real titles in recycle events, cover upgrade swap and draft sites (8052ebf)
• webhooks: drop stored framing headers, allow removing reserved names, accept tabs (e4b57bd)
• webhooks: harden headers, undecryptable data and job edge cases (4c1b841)