chore(deps): update dependency largemodgames/spotatui to v0.46.0

[renovate]

This PR contains the following updates:

Package	Update	Change
LargeModGames/spotatui	minor	0.45.0 → 0.46.0

---

Release Notes

LargeModGames/spotatui

v0.46.0

Compare Source

Added

• Play on Cast and Spotify Connect speakers on your network: the device list now shows Google Cast speakers, Spotify Connect speakers and Sonos rooms on your local network, also the ones the Spotify app has never used. Pick one and spotatui logs it in to your account and moves playback to it, as the Spotify app does; the audio goes from Spotify to the speaker directly. Cast groups, DIAL TVs and speakers that want an encrypted login are not supported yet (#​251).

• Search Liked Songs: Ctrl+F in Liked Songs filters the songs spotatui has loaded, with no request to Spotify, as it already did in a playlist. An empty search, q or the back key brings back the full list. While Liked Songs is still loading, the search waits and says so.

• A setting to turn lyrics off: behavior.enable_lyrics (Settings > Lyrics, in the terminal and the desktop app, on by default). Off, spotatui no longer sends the title, artist and length of each track to LRCLIB, or to Spotify for Spotify tracks, and the lyrics view says no lyrics were found.

• The desktop app catches up with the terminal app: in Your Library you can create a playlist, delete one of yours or remove another from your library (right-click a playlist), open your playlist folders as a tree, sort your saved albums and artists, and open your podcasts and the full Recently played list. A playlist or Liked Songs has a filter field and a Sort by choice, and a song row in a playlist you own has Remove from this playlist. Podcasts have their own search tab and a show page with the episodes, a Follow button and copy links; the queue shows episodes too. An album page can remove the album from your library and copy its link, a song row's menu has Go to song radio and Copy album link, and the Settings page has the three default sorts. T or the new player bar button opens a mini player: in the desktop app the window shrinks and stays on top until you go back.

• The desktop app and the browser GUI play the other sources: local files, Subsonic, internet radio, YouTube and Qobuz, plus Apple Music on macOS, as in the terminal app. YouTube needs yt-dlp installed (ffmpeg recommended).

• Set up a source after the first launch: Settings, in the terminal and the desktop app, has rows for the Subsonic server, user name and password, the Local Files music folder and the yt-dlp path, so you can set up or change a source at any time. The password shows masked and is saved in config.yml as before; SPOTATUI_SUBSONIC_PASSWORD still overrides it.

Changed

• A cleaner release page: every download, terminal and desktop, is a link in the release notes, and one checksums.txt lists the SHA-256 of every file. The desktop installers and .deb packages no longer get a .sha256 file of their own. A release goes public only when all its files are on it. The terminal app's self-update checks its download against checksums.txt and installs exactly the release it checked; before, it could install a newer pre-release that it never checked.

• Discover shows Spotify's Made For You playlists: the Discover page in the terminal and the desktop app now lists the shelves of Spotify's own Made For You page, such as daylist, On Repeat, your Daily Mixes, Release Radar, Discover Weekly and your genre and mood mixes, also the ones you do not follow. In the terminal, Enter opens a playlist, e plays it and w saves it to your library. The desktop Home page has a Made For You shelf in place of Your top tracks and Artists mix. Top Tracks, its time range and the Top Artists Mix are gone; the Stats screen still ranks your top tracks and artists from your listening history.

• behavior.disable_auto_update stops the desktop app's update check too: before, the desktop app still asked GitHub for a new release at launch and every 6 hours and only skipped the download. Now those timed checks stop and Check for updates on the Settings page looks on demand, as the terminal app already skipped its check at start. Turning auto-update back on checks at once.

• Your saved artists are one list: the Artists screen in the terminal showed one page at a time and swapped pages. It now scrolls through every artist you follow and loads the next page when you reach the bottom, as Liked Songs does; the page keys move half a screen (#​802).

• Faster artist pages and search: an artist page loads the discography in pages of 50, fetched at the same time, so a cold artist load takes a fraction of the time it did. A search asks Spotify for each result type on its own, which returns about a tenth of the data.

Security

• rustls 0.23.46 and rand 0.9.5: both updates close open advisories (GHSA-2mjx-qc3c-rqvc, GHSA-cq8v-f236-94qc), in the terminal app and the desktop app.

• No more rustls 0.22 in native streaming: the librespot fork 0.8.6 does the TLS of a proxied connection with its own connector, so the old rustls 0.22 and rustls-webpki 0.102 that the proxy crate brought in, with four open advisories, are gone. A proxy set through SPOTATUI_STREAMING_PROXY or http_proxy works as before.

Fixed

• Media keys pause the device that plays: while another Spotify device played (your phone or a speaker), play, pause and stop from MPRIS clients (playerctl, a panel widget, a headset) and from the macOS media keys went to spotatui's own idle player and did nothing. They now reach the device that plays, and so do MPRIS seek, shuffle and repeat (#​797).

• Keyboard focus in the desktop app: Down in the top search field moves into the results, Space after you go Home toggles playback instead of opening Liked Songs, and closing a song menu, the queue panel or the Room gives the keyboard back to the page. On a first visit to Liked Songs, a playlist, an album or an artist, j and k work as soon as the list loads. A saved album opened from the Albums page shows a filled heart and can be removed (#​764).

• Synced lyrics with several timestamps on one line: an LRC line such as [00:12.00][00:45.30]Chorus showed once at the first time and printed [00:45.30] in the text. It now shows at each timestamp, and synced lyrics are sorted by time (#​826).

• Absolute seeking from MPRIS clients: spotatui's MPRIS metadata had no mpris:trackid, so playerctl position 60 and other clients that seek to an absolute position refused to send the call ("Could not get track id"); relative seeks worked. Each track now publishes an id, and a seek aimed at a track that has already changed is ignored instead of landing in the next song. Clients that send no id of their own keep working.

• The desktop app can log in to Spotify again after a failed first login: when the first login failed or timed out, the next launch opened with an empty library and no way to log in, because the source picker shows only when a build has more than one source and the hint named the terminal app's d key. Your Library now shows a Log in to Spotify button while Spotify has no session. A second click during a login shows the pairing code again instead of replacing it (#​787).

• Playlist edits show at once: a playlist you remove from your library leaves the playlist list right away instead of at the next refresh, and a song you remove from the open playlist leaves the list, which loads again with the right positions, so a second remove in a row takes the right song.

• A podcast opened from a link shows its own episodes: opening a show by its link or id showed the episodes of the show opened before it. It now loads its own episodes, and a show page and an album page say whether the show or album is in your library.

• Playbar navigation follows its configured position: when the playbar was set to top, you still had to press Down to access it, even though the layout placed it at the top. Navigating to and from the playbar now follows its actual position.

• Clearing a playlist search keeps your edits: a remove marked the playlist's loaded pages out of date but never refreshed the visible table, so clearing a search rebuilt it from those pages and the removed track came back with the rows from before the search. When the loaded pages are out of date, clearing the filter now reloads the playlist from its first page instead (#​785).

• Counts of one read in the singular: the Stats screen and the Local Files browser said "1 plays", "1 track hits" and "1 tracks" for a count of one. They now say "1 play", "1 track hit" and "1 track"; other counts keep the plural. The recap and share card pick up the same wording (#​821).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.