Update swingmusic to v2.1.4 (#4525)

swingmusic/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
 
   app:
-    image: ghcr.io/swingmx/swingmusic:v2.1.3@sha256:45eaad09a99e54a2e76c6b17364b150f4f384933b734442e0c55350fc369d001
+    image: ghcr.io/swingmx/swingmusic:v2.1.4@sha256:89009c016848946c35418eb8459fee9eba044fb3a4cd6808160a510ecb8b22f6
     restart: on-failure
     environment:
       - PUID=1000

swingmusic/umbrel-app.yml

@@ -3,7 +3,7 @@ id: swingmusic
 name: Swing Music
 tagline: Self-hosted music streaming
 category: media
-version: "2.1.3"
+version: "2.1.4"
 port: 1970
 description: >-
   🎵 Swing Music is a self-hosted music streaming app — modern, clean, and powerful.
@@ -25,15 +25,15 @@ defaultUsername: "admin"
 defaultPassword: "admin"
 dependencies: []
 releaseNotes: >-
-  🚨 This release fixes a critical security vulnerability that allowed an authenticated user to download arbitrary files from the host server. If you are running an older release, please upgrade immediately, especially if your server is exposed to the internet.
+  🚨 This release fixes a critical security vulnerability (path traversal on directory browser endpoint). If you are running an older release, please upgrade immediately, especially if your server is exposed to the internet.
 
 
   What's new in this release:
-    - Stats cards now use the album or artist accent color
-    - Fixed lowercase letter "b" being removed from track metadata
-    - Fixed double click on tracks not playing
-    - Fixed SEE ALL button visibility on favorites and artist pages
-    - Fixed server startup issues due to misconfigured web client
+    - Fixed Last.fm scrobbles being saved to incorrect user
+    - Fixed crash when trying to unset admin role
+    - Fixed Windows crash on startup
+    - Updated default artist split ignore list
+    - Albums ending with "the album" are now classified as soundtracks
 
 
   Full release notes can be found at https://github.com/swing-opensource/swingmusic/releases