Skip to content

v0.1.9.9 — consolidated release (Docker named volume, CI-hang fix, Windows installer hardening)

Choose a tag to compare

View all tags
@kosm1x kosm1x released this 27 Jul 15:03
v0.1.9.9
bb26cca

Consolidates everything shipped since v0.1.9.4 under one audited release, closing the v0.1.9.5–v0.1.9.8 rapid-fix arc.

⚠ Upgrading from v0.1.9.8 or earlier — read this first

Every previous release bind-mounted ./data. This release moves Docker storage to the named volume vlmp-data (it fixes the fresh-clone crash loop), but switching does not move your database — without migration the server starts healthy on empty storage. With the stack stopped:

docker compose down
if [ -f data/vlmp.db ]; then
  docker run --rm -v "$PWD/data":/from -v vlmp-data:/to alpine \
    sh -c 'cp -a /from/. /to/ && chown -R 1000:1000 /to'
else
  echo "no ./data/vlmp.db here — nothing to migrate"
fi
docker compose up -d

Full details in the README's Quick start.

What's consolidated since v0.1.9.4

  • CI hang root-caused and fixed — ChildProcess.killed guards signalled reaped, reassigned PIDs; every kill site now gates on real liveness (isProcessAlive). The intermittent exit-137 test kills are gone.
  • Startup failures exit non-zero — a boot error used to log and exit 0, which supervisors read as a clean stop.
  • ffmpeg transcode pacing actually applies — both image stages moved to trixie (ffmpeg 7.1); pacing had been inert in every previous image.
  • Security dependency train — fastify 5.10, @fastify/static 10, fast-uri 3.1.4, brace-expansion 5.0.8: npm audit is clean (was 1 critical + 8 high).
  • Named-volume quick start — a fresh clone boots on the first docker compose up, no root-owned ./data crash loop.
  • Subtitle extraction can no longer hang a scan — the last unbounded ffmpeg spawn is bounded (15 min) with a liveness-gated kill.
  • Image pointer tags fixed — 0.1.9 and 0.1 are now gated per-line, so a future hotfix on an older line still reaches users pinned to it (:latest remains globally gated).
  • Windows installer hardening — service scripts fail closed (nssm calls are all checked; no more "installed and started" over a dead service), the firewall step reports failure, and the published .sha256 now works with sha256sum -c.

Windows

vlmp-setup-0.1.9.9-win-x64.exe below (SHA-256 in the adjacent .sha256, verifiable with sha256sum -c or Get-FileHash). See docs/WINDOWS.md.

Container image

docker pull ghcr.io/kosm1x/vlmp:0.1.9.9

Immutable pins: v0.1.9.9 / 0.1.9.9 · moving pointers updated: 0.1.9, 0.1, latest.

Assets 4
Loading