Skip to content

Needle 1.10.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Oct 16:41
Immutable release. Only release title and notes can be modified.
v1.10.0
d672d0f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Add a Turkish interface that can be selected manually in Settings and stays selected on that device.

Changed

  • Protect existing Needle data with versioned SQLite migrations, schema checks and a one-time pre-migration backup.

Fixed

  • Restore browser zoom, keyboard radio navigation and predictable focus for lyrics and mobile action sheets.

Security

  • Bind Spotify sign-ins to their browser and protect Navidrome API, media, proxy and remote-device verification with shared brute-force and concurrency limits.
  • Keep credentials, downloads, queues, provider state, pending playback, cover caches and recent searches isolated between signed-in users, including late requests and Spotify devices.
  • Restrict Needle database and backup files to the server account and refuse symlinked credential storage paths.
  • Soulseek downloads use stable directory handles, safely finish identical retries, stay inside the configured download and singles folders, and never overwrite a different file during directory swaps.
  • Update the YouTube Music bridge HTTP stack to close known resource-exhaustion and proxy-isolation vulnerabilities.
Assets 5
Loading