music-assistant/server 2.10.0.dev2026070706 on GitHub

📦 Nightly Release

fastmcp_server: update provider to v0.13.3 (queue, library-URI, and playback tools + localizable config) (by @trudenboy in #4486)
Use radio playlists in the MCP play_media tool (by @marcelveldt in #4501)
Smart fades analyzer v2: frequency band envelopes, time signature and anti-aliased energy binning (by @MarvinSchenkel in #4580)
Smart crossfade: content-aware 3-band EQ from frequency band analysis (by @MarvinSchenkel in #4591)
Add taxonomy genre icons, update genre icon image resolver (by @jozefKruszynski in #4611)

Harden JWT token expiration and fix guest token revocation (by @MarvinSchenkel in #4556)
Fix smart playlist artwork not displaying in recommendations (by @dmoo500 in #4571)
Sample smart playlist seeds evenly in discover mode (by @MarvinSchenkel in #4621)
Fix media position exceeding duration on squeezelite players (by @MarvinSchenkel in #4623)
Shuffle smart playlist seed tracks before sampling (by @MarvinSchenkel in #4625)

Exclude parent directory ("..") item from selection in browse mode (by @MarvinSchenkel in #2029)

7 changes

Scope based authorization for API commands and centralized user impersonation (by @marcelveldt in #4613)
Cache negative results in @use_cache and avoid the SWR double read (by @marcelveldt in #4616)
Slim cache indexes, upsert in place, and clean up stale SWR rows (by @marcelveldt in #4617)
Run dependency security checks without an untrusted privileged checkout (by @MarvinSchenkel in #4618)
Bump API schema version for scope based authorization (by @marcelveldt in #4622)
⬆️ Update music-assistant-frontend to 2.17.211 (by @music-assistant-machine in #4635)
Auto-approve automated frontend/models bump PRs in dependency security gate (by @MarvinSchenkel in #4638)

Special thanks to the following contributors who helped with this release: