From 063b4ec2edf9951378b413bc8ccf9960da3ad86f Mon Sep 17 00:00:00 2001 From: "Alexander L." Date: Wed, 21 Jan 2026 09:10:59 +0100 Subject: [PATCH] Update swingmusic to v2.1.4 (#4525) --- swingmusic/docker-compose.yml | 2 +- swingmusic/umbrel-app.yml | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/swingmusic/docker-compose.yml b/swingmusic/docker-compose.yml index 2384dd6f..c0b64d2d 100644 --- a/swingmusic/docker-compose.yml +++ b/swingmusic/docker-compose.yml @@ -8,7 +8,7 @@ services: PROXY_AUTH_ADD: "false" app: - image: ghcr.io/swingmx/swingmusic:v2.1.3@sha256:45eaad09a99e54a2e76c6b17364b150f4f384933b734442e0c55350fc369d001 + image: ghcr.io/swingmx/swingmusic:v2.1.4@sha256:89009c016848946c35418eb8459fee9eba044fb3a4cd6808160a510ecb8b22f6 restart: on-failure environment: - PUID=1000 diff --git a/swingmusic/umbrel-app.yml b/swingmusic/umbrel-app.yml index ec58128e..2a59fff0 100644 --- a/swingmusic/umbrel-app.yml +++ b/swingmusic/umbrel-app.yml @@ -3,7 +3,7 @@ id: swingmusic name: Swing Music tagline: Self-hosted music streaming category: media -version: "2.1.3" +version: "2.1.4" port: 1970 description: >- 🎵 Swing Music is a self-hosted music streaming app — modern, clean, and powerful. @@ -25,15 +25,15 @@ defaultUsername: "admin" defaultPassword: "admin" dependencies: [] releaseNotes: >- - 🚨 This release fixes a critical security vulnerability that allowed an authenticated user to download arbitrary files from the host server. If you are running an older release, please upgrade immediately, especially if your server is exposed to the internet. + 🚨 This release fixes a critical security vulnerability (path traversal on directory browser endpoint). If you are running an older release, please upgrade immediately, especially if your server is exposed to the internet. What's new in this release: - - Stats cards now use the album or artist accent color - - Fixed lowercase letter "b" being removed from track metadata - - Fixed double click on tracks not playing - - Fixed SEE ALL button visibility on favorites and artist pages - - Fixed server startup issues due to misconfigured web client + - Fixed Last.fm scrobbles being saved to incorrect user + - Fixed crash when trying to unset admin role + - Fixed Windows crash on startup + - Updated default artist split ignore list + - Albums ending with "the album" are now classified as soundtracks Full release notes can be found at https://github.com/swing-opensource/swingmusic/releases