Navidrome Daily: API Hardening and Backup Safety

Three API fixes tighten client input handling and library isolation, while a merged backup check stops bad restores from wiping the live database. A proposed contribution policy signals tighter scope control going forward.

Duration: PT2M14S

Episode overview

This episode is a short developer briefing from Navidrome Daily.

It explains recent repository work in plain language.

  • Show: Navidrome Daily
  • Published: 2026-11-03T11:01:37Z
  • Audio duration: PT2M14S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Good morning, it's Tuesday, November 3rd, 2026.

The signal today is validation at the boundaries — Navidrome stopped trusting files and client parameters it used to accept blindly.

First, client-facing APIs get stricter. Three open fixes from the same contributor address different versions of the same problem: unfiltered input. In PR 6413, the Subsonic rating endpoint now rejects values outside zero to five. Previously a rating of one thousand or negative three would save, skewing the average…

Second, local data gets safer. Merged PR 6296 fixes backup restore, which previously only checked that the file exists. Because of how SQLite handles empty files, restoring a zero-byte or non-Navidrome database would overwrite the live database and report success. Restore now verifies expected core tables, at least…

What's next: watch the proposed contribution policy in PR 6417. It is not adopted yet, but it would require agreeing on scope first, disclosing AI assistance, and keeping changes maintainable — plus a lighter bug form and updated pull request template. For developers, the takeaway is test multi-client search and…

That's it for today. Thanks for listening.

Nearby episodes from Navidrome Daily

  1. Virtualized Libraries and Player Fixes
  2. Production Search Focus Fix
  3. Easypanel Deploy Listing Proposal
  4. Rating Validation, Jellyfin Metadata, and Cave Theme
  5. Opt-In Waveforms and Last.fm Love Sync
  6. Weekly Recap - Playback Upgrades and Listening Integrations
  7. Secure Casting and Accurate Now-Playing
  8. Fork Rename Proposal and Toolchain Bump