DJ Toolkit v0.1.3

Added

• The downloads now say what is inside them. THIRD-PARTY-LICENSES.txt lists the software from other people in the
  app, each part's licence and where its source is, and carries the full licence texts. It is next to DJ Toolkit.exe
  on Windows, and on a Mac inside the app (right-click it, Show Package Contents, Contents, Resources).

What's Changed

• Add test that website colour tokens stay in sync with the app by @HarshRajSinghania in #137
• ci: add weekly external link checker by @SwetaKumari7 in #131
• Say what is inside the downloads: THIRD-PARTY-LICENSES.txt, written at build time (#78) by @tomgreef in #146
• Release 0.1.3 by @tomgreef in #147

New Contributors

• @HarshRajSinghania made their first contribution in #137
• @SwetaKumari7 made their first contribution in #131

Full Changelog: v0.1.2...v0.1.3

DJ Toolkit v0.1.2

Added

• You can change the Spotify callback port (Spotify sync, More, Callback port) if something else uses 8888.
• You can now check a download. GitHub keeps a signed record of where each file was built, and the release has a
  SHA256SUMS.txt to check it arrived whole. How:
  Check a download.
• Each release now has a list of the libraries inside the app, one for Windows and one for Mac (a software bill of
  materials), so a company or a security scanner can see what the download is made of. It says what it leaves out in
  Check a download.

Fixed

• The Spotify page works with the keyboard and a screen reader. Tab reaches every control, including the preview
  table: the arrow keys move between playlists, and a ring shows where you are, in Booth and Daylight. A screen reader
  now names every field.
• The More menu on the Spotify page is readable in the Daylight theme: its background and text follow the theme, and
  the entry that is switched off looks switched off.

What's Changed

• Make every outside and AI-written change wait for the owner by @tomgreef in #63
• Pin every GitHub Action to a commit SHA by @tomgreef in #68
• Run the tests on Linux too by @tomgreef in #66
• Require a documented row for every dependency by @tomgreef in #73
• Run OpenSSF Scorecard and show the score by @tomgreef in #69
• Link Discussions from the new-issue page, docs and website by @tomgreef in #67
• Check the workflows with zizmor, report only by @tomgreef in #72
• Check that a pull request's issue is assigned to its author by @tomgreef in #70
• Guard the dependency files against changes by anyone but Dependabot by @tomgreef in #71
• Give pages.yml's deploy job the permissions only it needs by @tomgreef in #84
• Mark the two pull_request_target workflows as intended for zizmor by @tomgreef in #86
• Don't restore an npm cache in the website build by @tomgreef in #85
• Make the checks that only warn fail the build by @tomgreef in #88
• Install the Qt libraries in Copilot's workspace by @tomgreef in #89
• Pin the pre-commit hook repositories to commit SHAs by @tomgreef in #92
• Check the workflows are valid with actionlint by @tomgreef in #94
• Require the actionlint check by @tomgreef in #98
• Ask outside pull requests with no issue which one it is for by @tomgreef in #93
• Announce each release in Discussions by @tomgreef in #96
• Skip npm install scripts when building the website by @tomgreef in #99
• Tell contributors to run npm ci --ignore-scripts by @tomgreef in #102
• Prove where each download came from, with checksums by @tomgreef in #103
• List the libraries inside each release download by @tomgreef in #105
• Only publish a release from this repository by @tomgreef in #106
• Pin Python dependencies with hashes by @tomgreef in #111
• Bump virtualenv from 21.14.12 to 21.14.13 by @dependabot[bot] in #115
• Bump the python group with 5 updates by @dependabot[bot] in #116
• docs: add Chinese translation of the user guide by @lijin68 in #110
• Bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0 in the actions group by @dependabot[bot] in #117
• Install only wheels in CI and the release by @tomgreef in #118
• Make the Dependency files check watch tools/deps by @tomgreef in #119
• Link the private report form in SECURITY.md and correct what it says about CI by @tomgreef in #122
• Add configurable callback port to Spotify sync tab by @lijin68 in #44
• docs: mention dependency register in docs index and AGENTS.md by @udayx-dev in #107
• Fix QMenu text contrast in Daylight theme by @lijin68 in #109
• Add a maintainer's agent that answers, triages and suggests, but can't merge by @tomgreef in #108
• feat: add labeler configuration and workflow for issue #28 by @kazuto4526-wq in #42
• Test Python requirement hashes in workflows and lock files by @Golden007-prog in #125
• docs: add introduce yourself link to CONTRIBUTING.md by @lijin68 in #129
• docs: add free acapella list by @spacepirateX in #123
• docs: link roadmap board from README and roadmap.md by @lijin68 in #133
• docs(brand): add brand kit assets and usage guidelines (Fixes #51) by @gaurika-analyst in #136
• Test that the ruff hook and requirements-dev.txt agree (#95, test by kazuto4526-wq) by @tomgreef in #138
• Decide #121: branch protection stays at 5 of 10 on Scorecard, on purpose by @tomgreef in #139
• feat: add accessibility names and tab order to Spotify sync page by @lijin68 in #130
• README: say the downloads contain software under other licences (refs #78) by @tomgreef in #140
• Release 0.1.2 by @tomgreef in #142

New Contributors

• @dependabot[bot] made their first contribution in #115
• @lijin68 made their first contribution in #110
• @udayx-dev made their first contribution in #107
• @kazuto4526-wq made their first contribution in #42
• @Golden007-prog made their first contribution in #125
• @spacepirateX made their first contribution in #123
• @gaurika-analyst made their first contribution in #136

Full Changelog: v0.1.1...v0.1.2

DJ Toolkit v0.1.1

Changed

• The repository is now tomgreef/dj-toolkit, to match the name of the app, and the website moved to
  tomgreef.github.io/dj-toolkit/. Old repository links redirect; the old website address doesn't.

Fixed

• The Requests page loads the most-voted ideas again. Version 0.1.0 looked them up under the repository's old name and
  can't find them, so update to this version.
• On macOS, Open the unmatched report (Spotify sync, More) now opens the report. It only worked on Windows.

What's Changed

• Rename the repository to dj-toolkit by @tomgreef in #40
• Open the unmatched report on macOS too by @tomgreef in #41
• Release 0.1.1 by @tomgreef in #43

Full Changelog: v0.1.0...v0.1.1

DJ Toolkit v0.1.0

Added

• Open-source setup: MIT licence, contributor guide, code of conduct, security policy, issue and pull request
  templates, and CI on Windows and macOS.
• Rules for working together: from issue to merged pull request, roles from contributor to maintainer
  (GOVERNANCE.md), Dependabot updates, and GitHub's security checks on every pull request.
• A harness for AI-assisted work: AGENTS.md, one command that checks everything (tools/check.py), real-window
  screenshots in both themes (tools/screenshots.py), and guardrail tests that turn the project's written rules
  into checks.
• A landing page in website/ (Astro), published with GitHub Pages.
• Requests, a new page: the most-voted ideas from GitHub, with ways to vote, suggest a feature and report a bug
  (pre-filled). The website lists the same ideas.
• macOS support, and downloads for Windows and macOS built by GitHub Actions, each checked with --self-test.
• Shortcut hints follow the system (Ctrl on Windows, Cmd on macOS).

Changed

• The code is formatted with ruff, and dependencies are pinned to the versions the tests pass with.
• The music folder field's example no longer shows a personal folder name.

What's Changed

• Voting, Windows and macOS downloads, and the rules for contributing by @tomgreef in #20

New Contributors

• @tomgreef made their first contribution in #20

Full Changelog: https://github.com/tomgreef/on-the-one/commits/v0.1.0