SoundSync repository migration (v2.0.7)

SoundSync repository migration

The SoundSync repo moved to the Botify Network organization and was renamed.

• Old: HIGH-TEXAS-LIST/sc-auto-downloader
• New: Botify-Network/soundsync

What changed in v2.0.7

• Auto-update configuration updated to the new GitHub Releases source. New installs and v2.0.7+ clients check Botify-Network/soundsync directly.
• No user data reset. The legacy %AppData%/soundcloud-auto-sync → %AppData%/SoundSync userData migration introduced in v2.0.6 remains intact, as does the CLI's %APPDATA%/soundsync/config.json fallback to the old path.

Auto-update continuity for older clients

GitHub redirects API requests for transferred repos, so installed v2.0.5 and v2.0.6 clients will continue to resolve update checks even though they still call the old HIGH-TEXAS-LIST/sc-auto-downloader URL — they will discover v2.0.7 and pick up the new publish URL from the freshly installed app.

Manual install

Download SoundSync Setup 2.0.7.exe below.

SoundSync rebrand (v2.0.6)

SoundSync rebrand

The app previously released as SoundCloud Auto Sync / SC Auto Downloader is now SoundSync by Botify.

What's new

• Rebranded SC Auto Downloader / SoundCloud Auto Sync to SoundSync
• Updated app logo, banner, taskbar icon, and installer/app metadata
• Updated GitHub release auto-update configuration (electron-updater publish → HIGH-TEXAS-LIST/sc-auto-downloader)
• Included new premium transparent branding assets under assets/brand/
• One-time migration from the legacy %AppData%/soundcloud-auto-sync userData folder so upgraders keep their electron-store settings and download history
• CLI reads from %APPDATA%/soundsync/config.json, falling back to the legacy soundcloud-auto-sync path if present

Auto-update

Installed v2.0.5 clients will detect this release through electron-updater and download SoundSync Setup 2.0.6.exe automatically (Settings → App Updates).

Manual install

Download SoundSync Setup 2.0.6.exe below.

v2.0.5

Security and hardening

• Fixed renderer injection risk in settings UI by replacing user-data innerHTML rendering with safe DOM construction.
• Replaced shell-interpolated command execution in main-process diagnostics and playlist metadata fetching with argument-array process execution.
• Replaced fragile shell-interpolated CLI command execution with argument-array execution.
• Added configurable auto-updater controls for automatic checks/downloads and install-on-quit behavior.
• Added user-facing update check/install controls in Settings.
• Improved update error/status visibility via tray notifications.
• Hardened yt-dlp calls against SoundCloud rate limiting with retry, pacing, cooldown, timeout, and backoff behavior.
• Bumped app version to 2.0.5.

Validation

• node --check src/main.js
• node --check src/preload.js
• node --check cli.js
• node --check src/services/downloader.js
• node --check src/services/soundcloud-monitor.js

Notes

Full electron-updater verification still requires a packaged install and a published GitHub Release artifact.

v2.0.4 - Security & Quality Improvements

What's New in v2.0.4

Security Fixes

• Fixed shell injection vulnerability in SoundCloud monitor (now uses safe spawn() instead of exec())
• Added URL validation — only SoundCloud URLs are accepted for downloads

Bug Fixes

• Fixed yt-dlp version comparison — versions are now compared numerically instead of as strings
• Fixed missing download path fallback — prevents errors when path is not configured
• Added concurrent sync guard — prevents duplicate downloads when sync is triggered multiple times

Code Quality

• Deduplicated path utilities — extracted shared getYtDlpPath() / getFfmpegPath() (was duplicated 3x)
• Removed dead code — unused filterNewTracks() method
• Updated axios from 0.27.2 to 1.7.x (security patches)

Other

• Transferred repository to HIGH-TEXAS-LIST organization
• Auto-update now pulls from the new org

---

Download: SoundCloud Auto Sync Setup 2.0.4.exe
Existing users will be prompted to update automatically.

v2.0.2

What's Changed

Bug Fixes

• Fix yt-dlp update mechanism — Added proper redirect handling, User-Agent headers, and Accept headers required by GitHub's release asset CDN. The updater now extracts the actual .exe asset URL from the GitHub API instead of hardcoding a /latest/ URL that relied on unpredictable redirects.
• Download validation — Added file size validation (>1MB) to catch corrupt/truncated downloads, and post-install version verification
• Temp file cleanup — Update temp files are now cleaned up on failure

Improvements

• Better SoundCloud diagnostics — Changed diagnostic test URL from /charts/top to /discover for better reliability. Added detailed error classification (extractor issues, HTTP errors, network problems, timeouts) with actionable guidance
• CLI diagnostics — Same improvements applied to the CLI test command

How to Update

Download and run the installer below, or use the in-app auto-updater.

Full Changelog: v2.0.1...v2.0.2