Typing fixes for the tracks controller (#2635)

* Typing fixes for the tracks controller

* Fix logic change

* Fix _set_track_artist to handle ItemMappings without numeric IDs

* Remove db asserts

* Change base class

* Convert itemmapping to artist if needed

* convert itemmapping to artist if necessary #2

Chore(deps): Bump isort from 6.0.1 to 7.0.0 (#2517)

* Chore(deps): Bump isort from 6.0.1 to 7.0.0

Bumps [isort](https://github.com/PyCQA/isort) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/6.0.1...7.0.0)

---
updated-dependencies:
- dependency-name: isort
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
* Remove unused isort

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

Typing fixes for the playlists controller (#2628)

* Typing fixes for the playlists controller

* Re-add comment

* Fix typos

* Restore comments

* Remove db asserts

* Resolve conflicts

* adjust comment

---------

Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

Typing fixes for the base media controller (#2633)

* Typing fixes for the base media controller

* Remove db asserts

* PR review comments

* remove unused function

---------

Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

Typing fixes for the podcasts controller (#2627)

* Typing fixes for the podcasts controller

* Fix overlooked typing issue

* Remove db asserts

* Remove ignore

Subsonic: Give user control over pagination size (#2665)

The selected value of 500 entries per invocation may not be ideal for
all users. Given that there isn't a single value that is ideal for all
users, let each configure their own. The default is shrinking to 200 as
a starting point.

Signed-off-by: Eric B Munson <eric@munsonfam.org>

Chore(deps): Bump alexapy from 1.29.9 to 1.29.10 (#2670)

* Chore(deps): Bump alexapy from 1.29.9 to 1.29.10

Bumps [alexapy](https://gitlab.com/keatontaylor/alexapy) from 1.29.9 to 1.29.10.
- [Release notes](https://gitlab.com/keatontaylor/alexapy/tags)
- [Changelog](https://gitlab.com/keatontaylor/alexapy/blob/dev/CHANGELOG.md)
- [Commits](https://gitlab.com/keatontaylor/alexapy/compare/v1.29.9...v1.29.10)

---
updated-dependencies:
- dependency-name: alexapy
  dependency-version: 1.29.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
* Bump alexapy in provider manifest

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

Chore(deps): Bump certifi from 2025.10.5 to 2025.11.12 (#2671)

Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.10.5 to 2025.11.12.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2025.11.12)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2025.11.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Chore(deps-dev): Bump ruff from 0.14.4 to 0.14.6 (#2672)

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.4 to 0.14.6.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.14.4...0.14.6)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.14.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Chore(deps): Bump mashumaro from 3.16 to 3.17 (#2673)

Bumps [mashumaro](https://github.com/Fatal1ty/mashumaro) from 3.16 to 3.17.
- [Release notes](https://github.com/Fatal1ty/mashumaro/releases)
- [Commits](https://github.com/Fatal1ty/mashumaro/compare/v3.16...v3.17)

---
updated-dependencies:
- dependency-name: mashumaro
  dependency-version: '3.17'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Plex: added remote control feature (#2608)

* Plex: moved scrobbling and playback reporting logic to plugin

* Plex connect: introducing new plugin

* Plex Connect: implemented copilot's suggestions

* Plex connect: corrected link to documentation

Co-authored-by: OzGav <gavnosp@hotmail.com>
---------

Co-authored-by: OzGav <gavnosp@hotmail.com>

Fix handler type of register_api_command

Typing fixes for the player queues controller (#2611)

* Initial drafting

* Fix pyproject.toml

* Formatting

* Filter for track items

* Replace assert with error checks

* Fix grammar typo

* Lint

* Lint

* Revert assert

* Revert logic change

* Revert logic change

* add return type hints

* PR review fixes

* Fix play_media

* Remove some asserts

* Apply feedback

---------

Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

⬆️ Update music-assistant-frontend to 2.17.9 (#2674)

Co-authored-by: marcelveldt <6389780+marcelveldt@users.noreply.github.com>

Subsonic: Add ProviderFeature for Favorites (#2667)

These features were missing from
f2c30347988e5c31799a9ef9efa4f19e5eff1e60
Add the features we now provide.

Signed-off-by: Eric B Munson <eric@munsonfam.org>

⬆️ Update music-assistant-models to 1.1.70 (#2666)

Co-authored-by: marcelveldt <6389780+marcelveldt@users.noreply.github.com>

Disallow malicious playlist updates (#2661)

Chore(deps): Bump actions/checkout from 5 to 6 (#2659)

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Subsonic: Support syncing favorites to subsonic server (#2663)

⬆️ Update music-assistant-models to 1.1.69 (#2664)

Co-authored-by: marcelveldt <6389780+marcelveldt@users.noreply.github.com>

Types fixes for the Albums Controller (#2632)

* Typing fixes for the albums controller

* Revert instance check

* Fix type annotations and mypy compliance

* Remove db asserts

* Switch uniquelist to list

* typo

Chore(deps): Bump pywidevine from 1.8.0 to 1.9.0 (#2590)

* Chore(deps): Bump pywidevine from 1.8.0 to 1.9.0

Bumps [pywidevine](https://github.com/devine-dl/pywidevine) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/devine-dl/pywidevine/releases)
- [Changelog](https://github.com/devine-dl/pywidevine/blob/master/CHANGELOG.md)
- [Commits](https://github.com/devine-dl/pywidevine/compare/v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: pywidevine
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
* Also bump deps in the provider

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

Chore(deps): Bump liblistenbrainz from 0.6.0 to 0.6.1 (#2592)

* Chore(deps): Bump liblistenbrainz from 0.6.0 to 0.6.1

Bumps [liblistenbrainz](https://github.com/metabrainz/liblistenbrainz) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/metabrainz/liblistenbrainz/releases)
- [Commits](https://github.com/metabrainz/liblistenbrainz/compare/v0.6.0...v0.6.1)

---
updated-dependencies:
- dependency-name: liblistenbrainz
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
* Also bump deps in the provider

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

Fix Chromecast volume rounding bug (#2656)

* Fix Chromecast volume rounding bug for values 8% and below

Changed volume level conversion from int() to round() to fix floating-point
precision issues. Chromecast reports volume as float (0.0-1.0) which can have
slight imprecision (e.g., 4% = 0.03999999910593033). Using int() truncated
these values, causing displayed volume to be 1% less than actual for values
8% and below.

Fixes the issue where setting volume to 5% would display as 4%, etc.

* Fix Chromecast volume rounding bug for values 8% and below

Changed volume level conversion to use round() instead of int() in both
directions to fix floating-point precision issues:

1. When setting volume: round to 2 decimal places before sending to device
2. When reading volume: round to nearest integer when converting to percentage

This fixes the issue where Chromecast reports volume as float (0.0-1.0) with
slight imprecision (e.g., 4% = 0.03999999910593033). Using int() truncated
these values, causing displayed volume to be 1% less than actual for values
8% and below.

Fixes the issue where setting volume to 5% would display as 4%, etc.

---------

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

Chore(deps): Bump aiohttp from 3.13.1 to 3.13.2 (#2620)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Typing fixes for the audiobooks controller (#2626)

* Typing fixes for the audiobooks controller

* Remove duplicate code

* Remove db asserts

fix(tidal): auth refresh time diff (#2653)

* fix(tidal): auth refresh time diff

Auth expiration check was using only 60 seconds rather than the intended
60 minutes. Using timedelta to show full intention

Closes #4425

* fix(tidal): invert current logic, and use constant for buffer

Disable Zone Handling if needed for MusicCast players (#2650)

* disable zone handling if desired

* bump lib

* wording

---------

Co-authored-by: OzGav <gavnosp@hotmail.com>

Typing fixes for artists controller (#2625)

* Typing fixes for artists controller

* Fix circular import

* Minor type change

* Switch tracks method return type to list

* Remove db asserts

* fix albums() return type

Add TLS options with fingerprint support to Fully Kiosk provider (#2649)

* feat(fully-kiosk): add TLS options with fingerprint support

* fix(fully_kiosk): satisfy linters

---------

Co-authored-by: Marcel van der Veldt <m.vanderveldt@outlook.com>

Some typing fixes for the music controller (#2629)

* Some typing fixes for the music controller

* Make self.database a property

* Restore comment

Update alexapy requirement to version 1.29.9 (#2647)

* Update alexapy requirement to version 1.29.9

Fix for login issues with Alexa Player Provider.

Changelog: https://gitlab.com/keatontaylor/alexapy/-/blob/dev/CHANGELOG.md#v1299-2025-11-08

Motivating discussion: https://github.com/orgs/music-assistant/discussions/431#discussioncomment-14954976

* Update requirements_all.txt for alexapy 1.29.9

Generated using scripts/gen_requirements_all.py

---------

Co-authored-by: Marvin Schenkel <marvinschenkel@gmail.com>

Add VBAN Receiver plugin provider (#2498)

Enable disabled lint rules (#2658)

Undo yield to event loop

⬆️ Update music-assistant-frontend to 2.17.8 (#2655)

Co-authored-by: marcelveldt <6389780+marcelveldt@users.noreply.github.com>

Chore(deps-dev): Bump ruff from 0.14.3 to 0.14.4 (#2621)

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.3 to 0.14.4.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.14.3...0.14.4)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.14.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

YTM: Yield control to event loop during stream url resolution to prevent blocking the main thread.

Refactor streams controller + smart fades  (#2613)

* Refactor streamscontroller + smartfades

* Adjust log levels and add mixer property

* Define separate smart fades logger in the streamcontroller

* Define separate smart fades logger in the streamcontroller

* Remove leftover

* Rewrite loggers as instance attributes

Fix DLNA player showing external source instead of MA queue (#2648)

Fix Spotify audiobook instance routing (#2502)

Typing fixes for snapcast (#2624)

* Typing fix for SiriusXM

* Typing fixes for snapcast

* fix return types

* Remove erroneous commit

* Revert erroneous commit

* Fix minor errors

Typing fixes for the stream controller (#2540)

* work in progress

* mypy fixes for streams.py

* Fix typos

* Another typo

* PR review changes

* Fixes after merge conflicts

* Revert unnecessary change

* Remove unnecessary comments

* More changes post conflict resolve

* Remove exclude

* organise imports

* Updates post other commits

* Catch possible no stream details

* Updates for new commits

* Fix type error post conflict merge

* Simplify

* Simplify with type hints to config controller

* Typing adjustments

* Fix missing return type

* improve code clarity

* switch to assert for none check

* Fix return type mypy error

* Revert unnecessary bracket

* Use default parameter

Improve lyrics lookup failure visibility (#2651)

Typing fix for SiriusXM (#2623)

Typing fixes for the Cache controller (#2569)

* mypy fixes for cache.py

* Fix  __init__ signature to match CoreController

* Adjust checksum typing

* Guarantee checksum is a str

* Apply suggestion from @marcelveldt

---------

Co-authored-by: Marcel van der Veldt <m.vanderveldt@outlook.com>

Add default value argument to get_*_config_value

Minor AirPlay tweaks (#2646)

Add type hints to config controller functions (#2639)

Add (initial) support for AirPlay 2 (#2571)

Handle non-UTF8 .lrc files gracefully to prevent playback blocking (#2640)

Fix squeezelite sync group source selection (#2642)

Fix squeezelite group playback

fix: tracks tab not being populated (#2637)

fix: abs progress (again!) (#2641)

* fix: another progress fix

* fix: forgot a not

Update Resonate provider with `MULTI_DEVICE_DSP` support and other improvements (#2616)

* Update `MediaStream` usage

* Support `MULTI_DEVICE_DSP` for resonate

* Rename `stream` to `channel` in `MediaStream`

* Initial working implementation for per player DSP support

* Refactors, fixes, and comments

* Rename `shared_buffer` to `chunk_buffer`

* Use `UUID` instead of `str`

* Use seconds in `multi_client_stream`

* Move attribute definitions to class level

* Remove dead code

* Refactor `_cleanup_old_chunks`

* Rename `MultiClientStream` to `TimedClientStream`

* Refactor `_read_chunk_from`

* Convert main channel to 16-bit PCM for aioresonate compatibility

* Use separate host and advertise_host

Pass bind_ip for socket binding and publish_ip for mDNS advertising to
correctly handle scenarios where the server binds to all interfaces
(0.0.0.0) but advertises a specific IP address to clients.

* Bump `aioresonate`

* Add safety check to `TimedClientStream` to avoid memory leaks

* Update `MIN_BUFFER_DURATION` comment with findings

* Update music_assistant/providers/resonate/timed_client_stream.py

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Clean up `timed_client_stream` reference after playback

* Bump `aioresonate`

* Update call to the now async friendly `set_media_art`

* Update `playback_state` when joining a new group

* Update `group_members` based on `aioresonate` events

Instead of optimistically setting them.

* Move `MusicAssistantMediaStream` outside a method

* Run audio cleanup immediately

* Remove redundant type annotation

* Use `anext()`

* Remove unused async from `_cleanup_old_chunks`

* Simplify method name and clarify lock requirement

* Move `_generate` to class-level method

* Refactor `MusicAssistantMediaStream` parameters

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Paulus Schoutsen <balloob@gmail.com>

Delete and ignore uv.lock file

Fix CI by installing all provider's dependencies when linting (#2619)

Fix CI lint job by installing all provider dependencies

Added deno for YTMusic Provider (#2636)

* Added deno for YTMusic Provider

* Commiting uv lock

Fix UGP member detection in `get_stream` (#2617)

Use `get_stream` helper in builtin player (#2618)

Typing fixes for the Qobuz provider (#2610)

Use secure connection to MusicBrainz API (#2615)

Update base image versions to 1.4.8

Remove explicit lvvmlite and numpy dependencies now that we are using debian.

Apple Music: Add remaining favourite parsing + custom music token config (#2609)

Add logging filter

Fix bugs in webserver

Typing fixes for the config controller (#2570)

Refactor Smart fades (#2582)

Typing fixes for the squeezelite provider (#2589)

fix macos librespot binary

Apple music improvements (#2607)

Remove sonos workaround

More crossfade tweaks

Merge branch 'dev' of https://github.com/music-assistant/server into dev

Add more debugging of stopped streams

fix: abs: another in progress fix (#2605)

fix: MusicCast - non-existing player in zone handling (#2606)

yield to loop tweaks

Typing fixes for the Webserver controller (#2586)

* Fix merge conflicts

* more mypy fixes

* Drafting post upstream changes

* fix run_handler

* PR review comment

* Merge conflict fixes

* Fix WebserverController __init__ signature to match CoreController

Ensure Spotify Connect is passive

Add some temporary debug info to stream controller

Add Airport Receiver Plugin provider (#2604)

Add logging to Spotify streaming

Fix Spotify streaming (#2603)

Fix deadlock when trying to join a paused Airplay player to a group (#2602)

Add more error handling and logging to (different sample rate) crossfade actions

Fix: start stream as fast as possible

Dont wait until the buffer has the crossfade duration if we just started playback

try other values for readrate

Small fix for source switching

debug log check_binary returncode and output

Merge branch 'dev' of https://github.com/music-assistant/server into dev

Fix AirPlay late join sync

Fix typo in active source property

Allow buffered named pipe writing

Chore(deps-dev): Bump ruff from 0.13.2 to 0.14.3 (#2591)

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.13.2 to 0.14.3.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.13.2...0.14.3)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.14.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fix CoreController init signature to match model (#2594)

Spotify: Refactor search method to reduce complexity (#2601)

Refactor search method to reduce complexity by extracting helper methods

Don't stop the music improvements (#2597)

Fixed various issues with (plugin)sources (#2600)