v1.0.0

Aggregato 1.0.0

• Add a Spotify recently-played provider and a Media view for browsing works.
• Restrict archives and operational diagnostics to operators. Read-only run summaries hide logs,
  detailed errors, and cursors; response diagnostics retain only the method, sanitized endpoint,
  and status.
• Preserve valid data when normalization replay encounters a bad record or is interrupted, and
  retain manual creator splits through resync and merge/undo operations. Failed full runs cannot
  infer deletions.
• Enforce one scheduler worker per database and bound shutdown while provider children are cleaned
  up. Suspended history syncs resume only after an explicit enable, sync, or valid configuration
  change; checks and queued imports or replays remain available while disabled.
• Apply title and review search before pagination, preserve indexed keyset bounds for deep pages,
  and calculate weekly statistics by ISO week.
• Improve correction feedback, undo state, provider-check polling, settings, and session-aware live
  updates. Show when instance configuration locks image caching while preserving its saved
  preference, and report payload estimates and SQLite file size.
• Support WebSocket upgrades through the production proxy, release idle handlers on disconnect,
  contain backend static-file paths, and include the PostgreSQL driver in the backend image.
• License the project under AGPLv3 and add private vulnerability reporting; update provider,
  operations, and release guidance and remove stale specifications.

Upgrade and data handling

The API applies pending migrations automatically at startup. This release adds forward-only
migrations 0019, which preserves
provenance for existing manual creator splits, and 0020,
which indexes entry lookups by provider item. SQLite creates a pre-migration backup when an upgrade
is pending; PostgreSQL does not, so take a native backup before upgrading.

The portable archive is available only for on-disk SQLite. It omits configured credentials, sessions, queued
jobs, failure payloads, diagnostics, and cursor state, but still contains personal history and
retained provider payloads. Keep archives private. Full database backups can also contain
credentials and sessions and should remain private. Feed and recently-played sources expose limited
windows; a full resync cannot recover history the source no longer supplies. See the
provider table and operations guide for details.

Full changelog.

v0.2.5

What's Changed

• Improve sync history diagnostics by @minipps in #59
• feat(auth): allow public read-only frontend access by @minipps in #60
• chore(deps-dev): bump @types/node from 26.1.2 to 26.2.0 in /frontend by @dependabot[bot] in #58
• chore(deps): bump nginx from 1.29.1-alpine-slim to 1.31.0-alpine-slim in /docker by @dependabot[bot] in #57
• chore(deps): bump actions/setup-node from 5 to 7 by @dependabot[bot] in #56
• chore(deps): bump vue from 3.5.40 to 3.5.41 in /frontend by @dependabot[bot] in #55
• chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #53
• chore(deps): bump actions/attest-build-provenance from 3 to 4 by @dependabot[bot] in #52
• chore(deps-dev): bump vite from 8.2.0 to 8.2.1 in /frontend by @dependabot[bot] in #54
• chore(deps): bump actions/checkout from 5 to 7 by @dependabot[bot] in #50
• chore(deps): bump node from 26.5.1-slim to 26.7.0-slim in /docker by @dependabot[bot] in #49
• chore(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #47
• chore(deps): bump nginx from 1.31.0-alpine-slim to 1.31.4-alpine-slim in /docker by @dependabot[bot] in #61
• chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1 by @dependabot[bot] in #64
• feat: add provider now-playing websocket by @minipps in #65
• chore(deps-dev): bump vue-tsc from 3.3.9 to 3.3.10 in /frontend by @dependabot[bot] in #63

Full Changelog: v0.2.4...v0.2.5

v0.2.4

What's Changed

• feat(sync): expose live progress and websocket status by @minipps in #45

Full Changelog: v0.2.3...v0.2.4

v0.2.3

What's Changed

• Refactor overengineered sync and provider surfaces by @minipps in #44

Full Changelog: v0.2.2...v0.2.3

v0.2.2

What's Changed

• fix: simplify image cache validation by @minipps in #43

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• feat: run frontend in Docker production stack by @minipps in #40
• fix: make release script transactional by @minipps in #42

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed

• Fix SQLite scheduler claim admission by @minipps in #26
• Close adversarial review remediation backlog by @minipps in #27
• fix: update release examples automatically by @minipps in #38
• chore(deps): bump node from 22.23.2-slim to 26.5.1-slim in /docker by @dependabot[bot] in #37
• chore(deps-dev): bump vite from 8.1.5 to 8.2.0 in /frontend by @dependabot[bot] in #35
• chore(deps-dev): bump @types/node from 22.20.1 to 26.1.2 in /frontend by @dependabot[bot] in #33
• chore(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #32
• chore(deps-dev): bump vue-tsc from 3.3.8 to 3.3.9 in /frontend by @dependabot[bot] in #34
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #28
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #31
• chore(deps): bump actions/attest-build-provenance from 2 to 3 by @dependabot[bot] in #29
• chore(deps): bump astral-sh/setup-uv from 6 to 9.0.0 by @dependabot[bot] in #30
• Retire unsupported podcast media types by @minipps in #39

New Contributors

• @dependabot[bot] made their first contribution in #37

Full Changelog: v0.1.5...v0.2.0

v0.1.5

What's Changed

• Update frontend Node and npm toolchain by @minipps in #22
• Fix blank provider configuration fields by @minipps in #23
• Replace the over-time stat with a day activity heatmap by @minipps in #24
• Fix creator asserted identifier resolution by @minipps in #25

Full Changelog: v0.1.4...v0.1.5

v0.1.4

What's Changed

• feat(frontend): Bento grid UI in Catppuccin Mocha by @minipps in #19
• Fix resolution queue linked decisions by @minipps in #20
• Hide fixture provider from API listings by @minipps in #21

Full Changelog: v0.1.3...v0.1.4

v0.1.3

What's Changed

• fix: serialize SQLite sync runs after restart by @minipps in #14
• feat: refresh Letterboxd RSS and infer username from imports by @minipps in #15
• Show safe provider settings in UI by @minipps in #16
• feat: sync Goodreads bookshelf RSS by @minipps in #17
• chore: remove SpecKit project scaffolding by @minipps in #18

Full Changelog: v0.1.2...v0.1.3