52 Releases 63 Tags

RSS Feed

• v0.14.0 a67452bc80

  Compare

  JellyTau v0.14.0 Stable

  dtourolle released this 2026-09-25 08:19:11 +00:00 | 0 commits to master since this release

  Video on the desktop is played by mpv, on Linux and now on Windows, and the
  built-in web player is gone from every platform. Windows gets real audio
  playback too.

  🔒 Security

  • A track title can no longer run a command on Linux. mpv was handed stream
    URLs and downloaded-file paths as a single command string, in which ; starts
    a new command — so a file whose title tag carried one could run a program
    when it played. Every mpv command now passes its arguments separately.
    (DR-298)
  • mpv checks the server's certificate. It did not by default, and the
    addresses it opens carry your login token, so anyone able to intercept the
    connection could read it. It also no longer hands a failed address to
    youtube-dl. (DR-299)
  • The app's web page can no longer reach the network. It needed that only
    for the web video player; everything now goes through the backend, so the
    permission was just a way out for anything injected into the page.

  ✨ Features

  • mpv plays all video on Linux and Windows. On Windows it draws into the app
    window under the controls; on Linux it no longer needs the experimental
    switch. Video still arrives transcoded to h264 for now — asking the server for
    the original file is the next step. (DR-235, DR-237)
  • Windows plays audio through mpv, so volume, the equalizer, volume
    normalization and gapless playback now work there. The installer ships
    mpv's LGPL-licensed library and its licence text. (DR-237)

  🐛 Fixes

  • Subtitles and audio-track switching work in desktop video. mpv now loads
    the subtitle list and switches subtitles and audio tracks itself; before this
    they did nothing once mpv drew the picture. (DR-023, DR-024)
  • Downloaded songs with a space in their title play offline on Linux.
    (DR-298)
  • A queued download on Windows keeps the path it was saved under, rather
    than having its separators rewritten. (DR-211)

  🧹 Removed

  • The built-in web video player and the "Native Video" setting. There is
    nothing left to switch between: every platform plays video natively.
    (DR-235)

  Downloads

  Platform	File
  Linux (portable)	*.AppImage — chmod +x and run
  Linux (Debian/Ubuntu)	*.deb — sudo dpkg -i
  Linux (Fedora/openSUSE)	*.rpm — sudo rpm -i
  Windows	*-setup.exe (NSIS). Unsigned — SmartScreen may warn on first run.
  Android	*.apk sideload, or *.aab for Play Console

  Desktop builds check for updates from here and can install a new
  version in place, verifying its signature first.

  Verifying your download

  sha256sum -c SHA256SUMS
  

  SHA256SUMS covers every file in this release. An SBOM
  (*.cdx.json, frontend-dependencies.txt) lists what went into it.

  Requirements

  • Linux: 64-bit, GLIBC 2.29+
  • Windows: 64-bit Windows 10 or later
  • Android: 8.0 or later, ~50 MB free

  ---

  Report a problem: https://gitea.tourolle.paris/dtourolle/jellytau/issues

  Downloads

  • JellyTau-0.14.0-1.x86_64.rpm
    12 MiB

    2026-09-25 10:07:52 +00:00
  • JellyTau_0.14.0_amd64.AppImage
    150 MiB

    2026-09-25 10:07:56 +00:00
  • JellyTau_0.14.0_amd64.AppImage.sig
    420 B

    2026-09-25 10:07:56 +00:00
  • JellyTau_0.14.0_amd64.deb
    12 MiB

    2026-09-25 10:07:56 +00:00
  • JellyTau_0.14.0_x64-setup.exe
    36 MiB

    2026-09-25 10:07:56 +00:00
  • JellyTau_0.14.0_x64-setup.exe.sig
    420 B

    2026-09-25 10:07:56 +00:00
  • SHA256SUMS
    747 B

    2026-09-25 10:07:56 +00:00
  • frontend-dependencies.txt
    14 KiB

    2026-09-25 10:08:07 +00:00
  • jellytau-release.apk
    41 MiB

    2026-09-25 10:08:06 +00:00
  • jellytau.cdx.json
    592 KiB

    2026-09-25 10:08:08 +00:00
  • jellytau.exe
    31 MiB

    2026-09-25 10:08:07 +00:00
  • Source Code (ZIP)
  • Source Code (TAR.GZ)