github DroppedNeedle/DroppedNeedle v2.3.0
v2.3.0 - MINOR - Free Music, import your purchases, where-to-buy links, and an experimental plugin API

4 hours ago

v2.3.0 (2026-07-11)

Breaking Changes

None.

New Features

  • Free Music. A lawful source that ships with the app. It downloads Creative Commons and public-domain releases from the Internet Archive, with the licence shown before anything downloads. No account or API key, on by default, one toggle in Settings turns it off. Requests now work out of the box even with no download client configured.
  • Import your purchases. Drop a zip or loose files onto your home page or the Downloads Import tab. They're identified by the scanner's pipeline (MusicBrainz tags, then AcoustID), tagged, organised into your library, and any matching request is resolved. A better-quality copy upgrades in place; anything unidentified waits under "Needs a match". Admin and trusted users can import.
  • Where to buy. Album and artist pages now list where to buy, from MusicBrainz purchase links with iTunes and Bandcamp fallbacks. Stores are ordered by how fairly they pay artists, Bandcamp first. Optional affiliate tags (Amazon, Apple, Qobuz) earn the project a small commission at no cost to you, with a disclosure line and a Settings toggle to turn it off.
  • An experimental plugin API. Third parties can add scrobblers and purchase-link providers, installed from a GitHub URL or the plugins folder. Plugins run in-process with no sandbox, so read the code before enabling. No plugin can download music. Full reference in PLUGINS.md.

Fixes

  • The YouTube player now stays inside Google's embed policies: a fixed 200x200 pop-out, visible while it plays, no background playback.

Security

  • The no-bundled-sources and no-P2P-protocol promises are now enforced in CI, and the audio-source plugin capability was removed so plugins can't be an acquisition source.
  • OIDC PKCE is now an independent implementation, and a contributor licence agreement was added for pull requests.

Docs & Chores

  • Repo URLs and Docker images now point at the DroppedNeedle organisation, with legacy habirabbu tags kept on stable releases so older installs still update.

Don't miss a new DroppedNeedle release

NewReleases is sending notifications on new releases.