Navidrome Daily: Database Statistics and Share Security Fixes
A deep dive into query-planner performance bugs produced a major overhaul of how Navidrome maintains its database statistics, while a separate fix closed a security gap in public share links. Together they mark a day focused on reliability and correctness under the hood.
Duration: PT2M25S
Episode overview
This episode is a short developer briefing from Navidrome Daily.
It explains recent repository work in plain language.
- Show: Navidrome Daily
- Published: 2026-07-14T10:00:32Z
- Audio duration: PT2M25S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good evening, and welcome to Navidrome Daily for July 14th, 2026.
The headline today is database health. Deluan's PR #5740 tracked down a nasty performance bug: SQLite's "PRAGMA optimize" was writing bad statistics for certain indexes, causing the query planner to pick the wrong plan on large libraries. On a 96,000-track test library, this made paginated song listings up to 90…
Second theme: tightening security boundaries. PR #5769 closes a gap in public share links, where a share's stream endpoint checked that a track existed and was accessible, but never confirmed the track was actually part of the share being accessed. That meant a valid share token could be used to reach tracks outside…
Smaller but useful: PR #5761 adds a native API for scrobble history, PR #5778 bumps a few GitHub Actions to their latest majors for CI hygiene, and a Chinese Simplified translation update in PR #5779 improves clarity around ReplayGain settings.
What to remember: if you're running self-hosted instances, expect noticeably better query performance on large libraries after these changes land, and know that share links are now properly scoped. Nothing here requires action from listeners beyond updating.
…