alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests Actions Activity

chore(deps): update deluan/navidrome docker tag to v0.60.0 #3687

Merged
alexlebens merged 1 commits from renovate/unified-deluannavidrome into main 2026-02-03 20:25:50 +00:00
Conversation 0 Commits 1 Files Changed 1 +1 -1
renovate-bot commented 2026-02-03 19:01:53 +00:00
Collaborator
Copy Link

This PR contains the following updates:

Package Update Change
deluan/navidrome minor 0.59.0 → 0.60.0

Release Notes

navidrome/navidrome (deluan/navidrome)

v0.60.0

Compare Source

Plugins

This release introduces a major rewrite of the experimental Plugin System, now with multi-language PDK support, enabling developers to extend Navidrome's functionality using WebAssembly-based plugins written in Go, Rust, Python or JavaScript. Plugins run in a secure sandbox and can provide additional metadata sources, custom integrations, and server-side enhancements. Users can now easily configure plugins directly from the UI through a new JSONForms-based configuration interface.

A couple of working plugins are already available:

For more plugins, keep an eye on the tag navidrome-plugins in GitHub.

More details and instructions on how to use and manage plugins can be found in our documentation.
New documentation will soon be added with details on how to create new plugins.

Metadata Extraction

Additionally, this version includes a pure-Go metadata extractor built on top of the new go-taglib library. This is a significant step toward removing the C++ TagLib dependency, which will simplify cross-platform builds and packaging in future releases. The new extractor is activated by default, but in case of any issues you can revert to the previous implementation by setting Scanner.Extractor="legacy-taglib" configuration option.

Instant Mix

The Instant Mix feature generates a playlist of similar songs based on a selected track. By default, it retrieves similar songs from Last.fm (if configured with an API key) or falls back to Deezer. It can also be configured to use external plugins, like AudioMuse-AI for sonic analysis-based similarity recommendations.

New and Changed Configuration Options

Plugin System Options
Option Default Description
Plugins.Enabled true Enable/disable the plugin system
Plugins.Folder "" Path to the plugins directory. Default: $DataFolder/Plugins
Plugins.CacheSize "200MB" Maximum cache size for storing compiled plugin WASM modules
Plugins.AutoReload false Automatically detect new/changed/removed plugins
Plugins.LogLevel "" Override log level for plugin-related messages
Subsonic API Options
Option Default Description
Subsonic.MinimalClients "" Comma-separated list of clients that receive reduced API responses (useful for resource-constrained devices like smartwatches)
Subsonic.EnableAverageRating true Include average rating in API responses
Metadata & Matching Options
Option Default Description
SimilarSongsMatchThreshold 85 Minimum similarity score (0-100) for matching similar songs from external sources to local library
LastFM.Language "en" Now supports comma-separated list of languages (e.g., "de,fr,en") for metadata fallback
Deezer.Language "en" Now supports comma-separated list of languages for metadata fallback
Renamed Options (Deprecation Notice)

The following options have been renamed. The old names still work but will be removed in a future release:

Old Name New Name
HTTPSecurityHeaders.CustomFrameOptionsValue HTTPHeaders.FrameOptions

Security

  • Fix potential XSS vulnerability by sanitizing user-supplied data before rendering (GHSA-rh3r-8pxm-hg4w). (d7ec735 by @​AlexGustafsson)
  • Fix potential DoS vulnerability in cover art upscaling by clamping requested square size to original dimensions (GHSA-hrr4-3wgr-68x3). (77367548 by @​deluan). Thanks to @​yunfachi

Added

Changed

Fixed

  • Playlists:

    • Fix M3U playlist import failing for paths with different UTF/Unicode representations (NFC/NFD normalization). (#​4890 by @​deluan)
    • Fix playlist name sorting to be case-insensitive. (#​4845 by @​deluan)

  • UI:

  • Scanner:

    • Fix FullScanInProgress not reflecting current scan request during interrupted scans. (8c80be5 by @​deluan)
    • Fix "Expression tree is too large" error by executing GetFolderUpdateInfo in batches. (cde5992 by @​deluan)
    • Fix stale role associations when artist role changes. (2d7b716 by @​deluan)
    • Fix infinite recursion in PID configuration. (1c4a7e8 by @​deluan)
    • Fix default PIDs not being set for Album and Track. In some circumstances it could lead to empty PIDs (71f549a by @​deluan)
    • Fix error when watcher detected too many folder changes, causing the scan to fail. (9ed309a by @​deluan)
    • Show scan errors in the UI more consistently. (ebbc31f by @​deluan)

  • Subsonic API:

    • Fix username parameter validation for getUser endpoint. (6ed6524 by @​deluan)
    • Fix getNowPlaying endpoint to always be enabled regardless of configuration. (603cccd by @​deluan)

  • Server:

    • Fix JWT-related errors being exposed on share page. (#​4892 by @​AlexGustafsson)
    • Fix user context not preserved in async NowPlaying dispatch. (396eee4 by @​deluan)
    • Fix environment variable configuration loading not being logged when no config file is found. (51ca2de by @​deluan)
    • Fix items with no annotation not being included for starred=false filter, handle has_rating=false. (#​4921 by @​kgarner7)
    • Last.fm's scrobble and updateNowPlaying methods should send parameters in request body. (51026de by @​deluan)

New Contributors

Full Changelog: https://github.com/navidrome/navidrome/compare/v0.59.0...v0.60.0

Helping out

This release is only possible thanks to the support of some awesome people!

Want to be one of them?
You can sponsor, pay me a Ko-fi,
or contribute with code.

Where to go next?

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [deluan/navidrome](https://github.com/navidrome/navidrome) | minor | `0.59.0` → `0.60.0` | --- ### Release Notes <details> <summary>navidrome/navidrome (deluan/navidrome)</summary> ### [`v0.60.0`](https://github.com/navidrome/navidrome/releases/tag/v0.60.0) [Compare Source](https://github.com/navidrome/navidrome/compare/v0.59.0...v0.60.0) #### Plugins This release introduces a major rewrite of the experimental **Plugin System**, now with multi-language PDK support, enabling developers to extend Navidrome's functionality using WebAssembly-based plugins written in Go, Rust, Python or JavaScript. Plugins run in a secure sandbox and can provide additional metadata sources, custom integrations, and server-side enhancements. Users can now easily configure plugins directly from the UI through a new JSONForms-based configuration interface. A couple of working plugins are already available: - [AudioMuse-AI integration](https://github.com/NeptuneHub/AudioMuse-AI-NV-plugin) - [ListenBrainz Daily Playlist Importer](https://github.com/kgarner7/navidrome-listenbrainz-daily-playlist) - [Discord Rich Presence](https://github.com/navidrome/discord-rich-presence-plugin) For more plugins, keep an eye on the tag [navidrome-plugins](https://github.com/topics/navidrome-plugin) in GitHub. More details and instructions on how to use and manage plugins can be found in our [documentation](https://www.navidrome.org/docs/usage/features/plugins/). New documentation will soon be added with details on how to create new plugins. #### Metadata Extraction Additionally, this version includes a **pure-Go metadata extractor** built on top of the new `go-taglib` library. This is a significant step toward removing the C++ TagLib dependency, which will simplify cross-platform builds and packaging in future releases. The new extractor is activated by default, but in case of any issues you can revert to the previous implementation by setting `Scanner.Extractor="legacy-taglib"` configuration option. #### Instant Mix The Instant Mix feature generates a playlist of similar songs based on a selected track. By default, it retrieves similar songs from Last.fm (if configured with an API key) or falls back to Deezer. It can also be configured to use external plugins, like [AudioMuse-AI](https://github.com/NeptuneHub/AudioMuse-AI-NV-plugin) for sonic analysis-based similarity recommendations. #### New and Changed Configuration Options ##### Plugin System Options | Option | Default | Description | | -------------------- | --------- | ------------------------------------------------------------- | | `Plugins.Enabled` | `true` | Enable/disable the plugin system | | `Plugins.Folder` | `""` | Path to the plugins directory. Default: `$DataFolder/Plugins` | | `Plugins.CacheSize` | `"200MB"` | Maximum cache size for storing compiled plugin WASM modules | | `Plugins.AutoReload` | `false` | Automatically detect new/changed/removed plugins | | `Plugins.LogLevel` | `""` | Override log level for plugin-related messages | ##### Subsonic API Options | Option | Default | Description | | ------------------------------ | ------- | ------------------------------------------------------------------------------------------------------------------------------ | | `Subsonic.MinimalClients` | `""` | Comma-separated list of clients that receive reduced API responses (useful for resource-constrained devices like smartwatches) | | `Subsonic.EnableAverageRating` | `true` | Include average rating in API responses | ##### Metadata & Matching Options | Option | Default | Description | | ---------------------------- | ------- | -------------------------------------------------------------------------------------------------- | | `SimilarSongsMatchThreshold` | `85` | Minimum similarity score (0-100) for matching similar songs from external sources to local library | | `LastFM.Language` | `"en"` | Now supports comma-separated list of languages (e.g., `"de,fr,en"`) for metadata fallback | | `Deezer.Language` | `"en"` | Now supports comma-separated list of languages for metadata fallback | ##### Renamed Options (Deprecation Notice) The following options have been renamed. The old names still work but will be removed in a future release: | Old Name | New Name | | --------------------------------------------- | -------------------------- | | `HTTPSecurityHeaders.CustomFrameOptionsValue` | `HTTPHeaders.FrameOptions` | #### Security - Fix potential XSS vulnerability by sanitizing user-supplied data before rendering (GHSA-rh3r-8pxm-hg4w). ([d7ec735](https://github.com/navidrome/navidrome/commit/d7ec7355c) by [@&#8203;AlexGustafsson](https://github.com/AlexGustafsson)) - Fix potential DoS vulnerability in cover art upscaling by clamping requested square size to original dimensions (GHSA-hrr4-3wgr-68x3). ([77367548](https://github.com/navidrome/navidrome/commit/77367548f) by [@&#8203;deluan](https://github.com/deluan)). Thanks to [@&#8203;yunfachi](https://github.com/yunfachi) #### Added - Plugins: - Add new WebAssembly-based plugin system with multi-language PDK support (Go, Rust, Python). ([#&#8203;4833](https://github.com/navidrome/navidrome/pull/4833) by [@&#8203;deluan](https://github.com/deluan)) - Add JSONForms-based plugin configuration UI. ([#&#8203;4911](https://github.com/navidrome/navidrome/pull/4911) by [@&#8203;deluan](https://github.com/deluan)) - Add similar songs retrieval functions to plugins API. ([#&#8203;4933](https://github.com/navidrome/navidrome/pull/4933) by [@&#8203;deluan](https://github.com/deluan)) - Server: - Add pure-Go metadata extractor (`go-taglib`) as alternative to FFmpeg-based extraction. ([#&#8203;4902](https://github.com/navidrome/navidrome/pull/4902) by [@&#8203;deluan](https://github.com/deluan)) - Add support for reading embedded images using the new taglib extractor by default. ([66474fc](https://github.com/navidrome/navidrome/commit/66474fc9f) by [@&#8203;deluan](https://github.com/deluan)) - Add Instant Mix (song-based Similar Songs) functionality with MBID, ISRC and Title/Artist fuzzy matching. ([#&#8203;4919](https://github.com/navidrome/navidrome/pull/4919), [#&#8203;4946](https://github.com/navidrome/navidrome/pull/4946) by [@&#8203;deluan](https://github.com/deluan)) - Add support for multiple languages when fetching metadata from Last.fm and Deezer. ([#&#8203;4952](https://github.com/navidrome/navidrome/pull/4952) by [@&#8203;deluan](https://github.com/deluan)) - Add `Subsonic.MinimalClients` configuration option for improved compatibility with minimal Subsonic clients. Default list is `"SubMusic"` ([#&#8203;4850](https://github.com/navidrome/navidrome/pull/4850) by [@&#8203;typhoon2099](https://github.com/typhoon2099)) - Add support for public/private playlists in NSP import. ([c5447a6](https://github.com/navidrome/navidrome/commit/c5447a637) by [@&#8203;deluan](https://github.com/deluan)) - Add RISCV64 builds. ([#&#8203;4949](https://github.com/navidrome/navidrome/pull/4949) by [@&#8203;MichaIng](https://github.com/MichaIng)) - UI Features: - Add composer field to table views. ([#&#8203;4857](https://github.com/navidrome/navidrome/pull/4857) by [@&#8203;AlexGustafsson](https://github.com/AlexGustafsson)) - Add prompt before closing window if music is playing. ([#&#8203;4899](https://github.com/navidrome/navidrome/pull/4899) by [@&#8203;alannnna](https://github.com/alannnna)) - Add Nautiline-like theme. ([#&#8203;4909](https://github.com/navidrome/navidrome/pull/4909) by [@&#8203;borisrorsvort](https://github.com/borisrorsvort)) - Add multiline support and resizing for playlist comment input. ([6fce30c](https://github.com/navidrome/navidrome/commit/6fce30c13) by [@&#8203;deluan](https://github.com/deluan)) - Subsonic API: - Add `avgRating` field from Subsonic spec. ([#&#8203;4900](https://github.com/navidrome/navidrome/pull/4900) by [@&#8203;terry90](https://github.com/terry90)) - Insights: - Add insights collection for Scanner.Extractor configuration to measure go-taglib usage. ([63517e9](https://github.com/navidrome/navidrome/commit/63517e904) by [@&#8203;deluan](https://github.com/deluan)) - Add file suffix counting to insights. ([0473c50](https://github.com/navidrome/navidrome/commit/0473c50b4) by [@&#8203;deluan](https://github.com/deluan)) #### Changed - Optimize cross-library move detection for single-library setups. ([#&#8203;4888](https://github.com/navidrome/navidrome/pull/4888) by [@&#8203;deluan](https://github.com/deluan)) - Improve Deezer artist search ranking. ([a081569](https://github.com/navidrome/navidrome/commit/a081569ed) by [@&#8203;deluan](https://github.com/deluan)) - Rename `HTTPSecurityHeaders.CustomFrameOptionsValue` to `HTTPHeaders.FrameOptions`. ([7ccf44b](https://github.com/navidrome/navidrome/commit/7ccf44b8e) by [@&#8203;deluan](https://github.com/deluan)) - Update translations: Bulgarian, Catalan, German, Greek, Spanish, Finnish, French, Galician, Indonesian, Dutch, Polish, Russian, Slovenian, Swedish, Thai by [POEditor contributors](https://www.navidrome.org/docs/developers/translations/). - Update Spanish translations. ([#&#8203;4904](https://github.com/navidrome/navidrome/pull/4904) by [@&#8203;abrugues](https://github.com/abrugues)) - Update Basque translation. ([#&#8203;4815](https://github.com/navidrome/navidrome/pull/4815) by [@&#8203;xabirequejo](https://github.com/xabirequejo)) #### Fixed - Playlists: - Fix M3U playlist import failing for paths with different UTF/Unicode representations (NFC/NFD normalization). ([#&#8203;4890](https://github.com/navidrome/navidrome/pull/4890) by [@&#8203;deluan](https://github.com/deluan)) - Fix playlist name sorting to be case-insensitive. ([#&#8203;4845](https://github.com/navidrome/navidrome/pull/4845) by [@&#8203;deluan](https://github.com/deluan)) - UI: - Fix various UI issues and improve styling coherence. ([#&#8203;4910](https://github.com/navidrome/navidrome/pull/4910) by [@&#8203;borisrorsvort](https://github.com/borisrorsvort)) - Fix AMusic theme player buttons and delete button color. ([#&#8203;4797](https://github.com/navidrome/navidrome/pull/4797) by [@&#8203;dragonish](https://github.com/dragonish)) - Fix export missing files showing only first 1000 results. ([017676c](https://github.com/navidrome/navidrome/commit/017676c45) by [@&#8203;deluan](https://github.com/deluan)) - Scanner: - Fix `FullScanInProgress` not reflecting current scan request during interrupted scans. ([8c80be5](https://github.com/navidrome/navidrome/commit/8c80be56d) by [@&#8203;deluan](https://github.com/deluan)) - Fix "Expression tree is too large" error by executing GetFolderUpdateInfo in batches. ([cde5992](https://github.com/navidrome/navidrome/commit/cde5992c4) by [@&#8203;deluan](https://github.com/deluan)) - Fix stale role associations when artist role changes. ([2d7b716](https://github.com/navidrome/navidrome/commit/2d7b71683) by [@&#8203;deluan](https://github.com/deluan)) - Fix infinite recursion in PID configuration. ([1c4a7e8](https://github.com/navidrome/navidrome/commit/1c4a7e855) by [@&#8203;deluan](https://github.com/deluan)) - Fix default PIDs not being set for Album and Track. In some circumstances it could lead to empty PIDs ([71f549a](https://github.com/navidrome/navidrome/commit/71f549afb) by [@&#8203;deluan](https://github.com/deluan)) - Fix error when watcher detected too many folder changes, causing the scan to fail. ([9ed309a](https://github.com/navidrome/navidrome/commit/9ed309ac8) by [@&#8203;deluan](https://github.com/deluan)) - Show scan errors in the UI more consistently. ([ebbc31f](https://github.com/navidrome/navidrome/commit/ebbc31f1a) by [@&#8203;deluan](https://github.com/deluan)) - Subsonic API: - Fix username parameter validation for `getUser` endpoint. ([6ed6524](https://github.com/navidrome/navidrome/commit/6ed652475) by [@&#8203;deluan](https://github.com/deluan)) - Fix `getNowPlaying` endpoint to always be enabled regardless of configuration. ([603cccd](https://github.com/navidrome/navidrome/commit/603cccde1) by [@&#8203;deluan](https://github.com/deluan)) - Server: - Fix JWT-related errors being exposed on share page. ([#&#8203;4892](https://github.com/navidrome/navidrome/pull/4892) by [@&#8203;AlexGustafsson](https://github.com/AlexGustafsson)) - Fix user context not preserved in async NowPlaying dispatch. ([396eee4](https://github.com/navidrome/navidrome/commit/396eee48c) by [@&#8203;deluan](https://github.com/deluan)) - Fix environment variable configuration loading not being logged when no config file is found. ([51ca2de](https://github.com/navidrome/navidrome/commit/51ca2dee6) by [@&#8203;deluan](https://github.com/deluan)) - Fix items with no annotation not being included for `starred=false` filter, handle `has_rating=false`. ([#&#8203;4921](https://github.com/navidrome/navidrome/pull/4921) by [@&#8203;kgarner7](https://github.com/kgarner7)) - Last.fm's `scrobble` and `updateNowPlaying` methods should send parameters in request body. ([51026de](https://github.com/navidrome/navidrome/commit/51026de80) by [@&#8203;deluan](https://github.com/deluan)) #### New Contributors - [@&#8203;alannnna](https://github.com/alannnna) made their first contribution in [#&#8203;4899](https://github.com/navidrome/navidrome/pull/4899) - [@&#8203;abrugues](https://github.com/abrugues) made their first contribution in [#&#8203;4904](https://github.com/navidrome/navidrome/pull/4904) - [@&#8203;AlexGustafsson](https://github.com/AlexGustafsson) made their first contribution in [#&#8203;4857](https://github.com/navidrome/navidrome/pull/4857) - [@&#8203;borisrorsvort](https://github.com/borisrorsvort) made their first contribution in [#&#8203;4909](https://github.com/navidrome/navidrome/pull/4909) - [@&#8203;dragonish](https://github.com/dragonish) made their first contribution in [#&#8203;4797](https://github.com/navidrome/navidrome/pull/4797) - [@&#8203;MichaIng](https://github.com/MichaIng) made their first contribution in [#&#8203;4949](https://github.com/navidrome/navidrome/pull/4949) - [@&#8203;terry90](https://github.com/terry90) made their first contribution in [#&#8203;4900](https://github.com/navidrome/navidrome/pull/4900) - [@&#8203;typhoon2099](https://github.com/typhoon2099) made their first contribution in [#&#8203;4850](https://github.com/navidrome/navidrome/pull/4850) **Full Changelog**: <https://github.com/navidrome/navidrome/compare/v0.59.0...v0.60.0> #### Helping out This release is only possible thanks to the support of some **awesome people**! Want to be one of them? You can [sponsor](https://github.com/sponsors/deluan), pay me a [Ko-fi](https://ko-fi.com/deluan), or [contribute with code](https://www.navidrome.org/docs/developers/). #### Where to go next? - Read installation instructions on our [website](https://www.navidrome.org/docs/installation/). - Host Navidrome on [PikaPods](https://www.pikapods.com/pods/navidrome) for a simple cloud solution. - Reach out on [Discord](https://discord.gg/xh7j7yF), [Reddit](https://www.reddit.com/r/navidrome/) and [Twitter](https://twitter.com/navidrome)! </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->
renovate-bot added the image label 2026-02-03 19:01:53 +00:00
renovate-bot added 1 commit 2026-02-03 19:01:54 +00:00
chore(deps): update deluan/navidrome docker tag to v0.60.0
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 18s
Details
5325509407
renovate-bot force-pushed renovate/unified-deluannavidrome from 5325509407 to 0aaf100bca 2026-02-03 20:19:08 +00:00 Compare
alexlebens merged commit 945eee11ef into main 2026-02-03 20:25:50 +00:00
alexlebens deleted branch renovate/unified-deluannavidrome 2026-02-03 20:25:54 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Renovate
Issue generated by Renovate.
 automerge
This PR will be automerged by Renovate.
 chart
Chart update generated by Renovate.
 image
Image update generated by Renovate.
 stale
PR or Issue that has not been updated recently.
No Label image
Milestone
No items
No Milestone
Assignees
Clear assignees
gitea-bot renovate-bot alexlebens
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alexlebens/infrastructure#3687
Delete Branch "renovate/unified-deluannavidrome"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?