v0.3.7 — flashy

Bug fixes

• Base changelog on published releases
• Stop logging the account's name and email

Dependencies

• Bump turso from 0.7.2 to 0.8.1
• Bump github/codeql-action/init from 4.38.1 to 4.38.2
• Bump github/codeql-action/analyze from 4.38.1 to 4.38.2
• Bump github/codeql-action/upload-sarif
• Bump cargo-bins/cargo-binstall from 1.23.0 to 1.24.0
• Update tidlers to 9d53253
• Bump actions/upload-artifact from 7.0.1 to 7.0.2
• Bump cargo-bins/cargo-binstall from 1.24.0 to 1.25.2
• Bump actions/download-artifact from 8.0.1 to 8.0.2
• Bump uuid from 1.26.1 to 1.27.0
• Bump libc from 0.2.189 to 0.2.190
• Bump tokio from 1.53.1 to 1.53.2
• Bump turso from 0.8.1 to 0.8.2
• Bump signal-hook from 0.4.4 to 0.4.5
• Bump rust-embed from 8.12.0 to 8.13.0
• Update rustls to 0.23.46
• Full cargo update
• Refresh the fuzz lockfile

Documentation

• Document Fedora COPR installation
• Add a security policy
• State the test policy for new functionality
• Answer the OpenSSF Best Practices passing criteria
• Add a project website published with GitHub Pages
• Settle the open Best Practices answers
• Link the latest release's packages directly

Features

• Browse search results by category

Maintenance

• Add bunker-backed Nostr mirror target
• Fetch all favourite tracks through tidlers
• Fetch favourite albums through tidlers
• Fetch lyrics through tidlers
• Fetch playlist items through tidlers
• Fetch followed artists through tidlers
• Fetch mixes through tidlers
• Build the fuzz target on current nightly
• Call the probe's state value a marker, not a nonce
• Download over local HTTPS, refuse plain HTTP everywhere

Full Changelog: v0.3.6...v0.3.7

v0.3.6 — https://www.youtube.com/shorts/PdgnNfTri90

Bug fixes

• Re-mint an expired stream instead of ending the track
• Distinguish unavailable assets from rejected streams
• Reset explore list state between pages
• Handle unavailable track radio without an error dump
• Trust the runner-owned RPM checkout

CI

• Publish tagged source RPMs to COPR
• Attach source RPMs to GitHub releases

Dependencies

• Bump rand from 0.10.2 to 0.10.3
• Bump gstreamer from 0.25.3 to 0.25.4
• Bump github/codeql-action/init from 4.38.0 to 4.38.1
• Bump gstreamer-video from 0.25.3 to 0.25.4
• Bump softprops/action-gh-release from 3.0.2 to 3.0.3
• Bump github/codeql-action/analyze from 4.38.0 to 4.38.1
• Bump github/codeql-action/upload-sarif
• Update tidlers to de168a2
• Refresh workspace dependencies

Maintenance

• Use tidlers for Explore pages

Packaging

• Add vendored source builds for COPR

Full Changelog: v0.3.4...v0.3.6

v0.3.4

Bug fixes

• Fetch artwork over HTTPS only in shipped builds
• Install cocogitto from its release, not the action
• Move the volume one step per wheel notch, not two
• Show the tiers TIDAL advertises, not the one it claims
• Restore the quality line on the album detail header
• Build the song.link address instead of asking for it
• Restore the step that creates the GitHub release

CI

• Generate release notes with git-cliff, enforce commits with cocogitto
• Cache the dependency build

Dependencies

• Bump Swatinem/rust-cache from 2.8.1 to 2.9.2
• Bump open from 5.4.2 to 5.4.3
• Refresh the lockfile
• Bump github/codeql-action/upload-sarif
• Bump github/codeql-action/analyze from 4.37.9 to 4.38.0
• Bump dirs from 6.0.0 to 7.0.0
• Bump cargo-bins/cargo-binstall from 1.22.0 to 1.23.0
• Bump github/codeql-action/init from 4.37.9 to 4.38.0
• Refresh the lockfile, and follow libcosmic's API
• Bump codecov/codecov-action from 7.0.0 to 7.1.1

Maintenance

• Use tidlers for lyrics, track metadata and subscription
• Let tidlers fetch playback info for tracks and videos

Performance

• Stop artwork writes from stalling navigation
• Serve thumbnail requests in a window, not all at once

Full Changelog: v0.3.2...v0.3.4

v0.3.2

Breaking changes

• Relicense to GPL-3.0-only (breaking)

CI

• Cache the dependency build, and stop compiling the app four times
• Install the tools just check needs, so its gates actually gate

Documentation

• Add CONTRIBUTING.md, and gate dependency licences

Full Changelog: v0.3.1...v0.3.2

v0.3.1

✨ Features

• Sign in with TIDAL through the browser
• Right-click the back arrow to jump straight home
• Track credits view with per-role contributor links

🐛 Bug Fixes

• Drop stale URL resolutions and debounce the request
• Request the FLAC hi-res tier and badge what was served
• Keep the audible branch at the stream's native rate
• Notice when the pop-out window dies
• Fade the header pane's non-wrapping text
• Clock-sync the PCM tap so the bars match what you hear
• Avoid overflow panic in parse_lrc_timestamp on long digit runs
• Revive the fuzz harness — sync lockfile to main, retarget to parse_lrc

🔧 Maintenance & Dependencies

• Bump github/codeql-action/analyze from 4.37.6 to 4.37.9
• Bump cargo-bins/cargo-binstall from 1.21.1 to 1.22.0
• Bump github/codeql-action/upload-sarif
• Bump github/codeql-action/init from 4.37.6 to 4.37.9
• Bump actions/attest-build-provenance from 4.1.1 to 4.2.2
• Silence the lru unsoundness and refresh the ignore list
• Clear the warnings just check and cargo doc report
• Cargo update
• Bump github/codeql-action/analyze from 4.37.3 to 4.37.6
• Bump base64 from 0.23.0 to 0.23.1
• Bump open from 5.4.0 to 5.4.1
• Bump github/codeql-action/upload-sarif
• Bump github/codeql-action/init from 4.37.3 to 4.37.6
• Delegate the roles leg to tidlers' get_track_credits
• Cargo update
• Drop the now-redundant proc-macro-error2 ignore
• Cargo update; re-anchor the quick-xml audit ignores
• Bump github/codeql-action/upload-sarif
• Bump libcosmic from ef162b8 to 7e77707
• Bump ossf/scorecard-action from 2.4.3 to 2.4.4
• Bump github/codeql-action/init from 4.37.2 to 4.37.3
• Bump cargo-bins/cargo-binstall from 1.21.0 to 1.21.1
• Bump github/codeql-action/analyze from 4.37.2 to 4.37.3
• Bump base64 from 0.22.1 to 0.23.0
• Bump turso from 0.7.0 to 0.7.1
• Bump i18n-embed-fl from 0.10.0 to 0.10.1
• Bump pprof from 0.14.1 to 0.15.0
• Bump turso from 0.6.1 to 0.7.0
• Bump rand from 0.9.5 to 0.10.2
• Bump signal-hook from 0.3.18 to 0.4.4
• Bump github/codeql-action/init from 4.37.1 to 4.37.2
• Bump github/codeql-action/analyze from 4.37.1 to 4.37.2
• Bump actions/checkout from 7.0.0 to 7.0.1
• Bump github/codeql-action/upload-sarif
• Refresh stale fuzz/Cargo.lock (drops phantom serde_with)

🤖 CI

• Compile the tests
• Gate on rustfmt so formatting can't drift again
• Manage cargo deps for the main crate and the fuzz workspace

📝 Documentation

• Cut the sign-in rationale down to what a reader can act on

Full Changelog: v0.3.0...v0.3.1

v0.3.0 — oily

✨ Features

• Show a red banner when the cache DB can't be opened

🐛 Bug Fixes

• Make the text fade alpha-native for frosted-glass panels

🔧 Maintenance & Dependencies

• Update libcosmic, cosmic-panel, winit, iced
• Bump cargo-bins/cargo-binstall from 1.20.1 to 1.21.0
• Bump github/codeql-action/upload-sarif
• Bump softprops/action-gh-release from 3.0.1 to 3.0.2
• Bump github/codeql-action/init from 4.37.0 to 4.37.1
• Bump github/codeql-action/analyze from 4.37.0 to 4.37.1
• Ignore RUSTSEC-2026-0206 (rustybuzz unmaintained, transitive via libcosmic)

🤖 CI

• Add SLSA provenance (.intoto.jsonl) via slsa-github-generator
• Attach Sigstore provenance bundle as a release asset

Full Changelog: v0.2.9...v0.3.0

v0.2.9

✨ Features

• Live log-level selector and journal-only stderr output
• Share music videos via a direct TIDAL video link

🐛 Bug Fixes

• Drop non-actionable promo cards like "TIDAL MAGAZINE"
• Silence naga shader-compiler debug spam
• Redact auth tokens from *UrlReceived log lines
• Adapt to libcosmic Theme::background accessor
• Use tidlers' lossless-capable OAuth client for FLAC

⚡ Performance

• Flatten track detail into a single virtual list
• Virtualize albums, mixes, profiles, and feed grids
• Stop over-fetching covers for hidden search results
• Flatten artist detail into a single virtual list
• Load list thumbnails lazily instead of eagerly bulk-fetching

🔧 Maintenance & Dependencies

• Play DASH manifests inline via data: URI, drop disk cache
• Store play history in a dedicated table, retire kv
• Add Track Display for readable track logs
• Update dependencies
• Bump github/codeql-action/upload-sarif
• Bump github/codeql-action/analyze from 4.36.3 to 4.37.0
• Bump github/codeql-action/init from 4.36.3 to 4.37.0
• Ignore unreachable build-time quick-xml advisories
• Bump github/codeql-action/analyze from 4.36.2 to 4.36.3
• Bump github/codeql-action/upload-sarif
• Bump github/codeql-action/init from 4.36.2 to 4.36.3
• Ignore unmaintained ttf-parser advisory
• Remove dead song-caching subsystem
• Bump actions/attest-build-provenance from 4.1.0 to 4.1.1

🤖 CI

• Migrate deprecated codecov test-results-action to codecov-action
• Generate categorized release notes from commits

📝 Documentation

• Document journal-only logging and how to view logs

Full Changelog: v0.2.8...v0.2.9

v0.2.8 — schumann

✨ Features

• Pop music videos out into a separate window
• Add a music videos section to the artist detail view
• Include music videos in search, in a dedicated section
• Hide now-playing lyrics icon for tracks without lyrics, cache lyrics in the DB
• Unify playback on GStreamer, retire symphonia
• Consolidate caching onto an embedded turso database

🐛 Bug Fixes

• Keep faded text in window screenshots
• Fit the embedded video to its aspect ratio (no black bars)
• Remove the favorite heart for videos (they can't be liked)
• Hide the track-radio icon for videos
• Cube the user volume so the GStreamer taper matches the mixer
• Tolerate null artist on video items in playlists

🎨 UI & UX

• Drop the redundant 'Collection' section header

🔧 Maintenance & Dependencies

• Update tidlers, adapt to optional Track.album
• Bump cargo-bins/cargo-binstall from 1.20.0 to 1.20.1

🤖 CI

• Retry transient crates.io download failures
• Install GStreamer dev libraries for the analysis build

📝 Documentation

• Drop pinned release block, refresh feature list

Full Changelog: v0.2.7...v0.2.8

v0.2.7 — chinesa videomaker

Full Changelog: v0.2.4...v0.2.7

v0.2.4 — v0.2.4

What's Changed

• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #28
• chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in #27
• chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #30
• chore(deps): bump cargo-bins/cargo-binstall from 1.19.1 to 1.20.0 by @dependabot[bot] in #29
• chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 by @dependabot[bot] in #32
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #31

Full Changelog: v0.2.3...v0.2.4