chore: bump click==8.3.3

debian/changelog

@@ -1,3 +1,9 @@
+navidrome-uploader (0.1.0-2) unstable; urgency=high
+
+  * Run pip install stage as navidrome-uploader user instead of root
+
+ -- Arian Nasr <arian@2ari.ca>  Tue, 14 Apr 2026 12:11:00 -0400
+
 navidrome-uploader (0.1.0-1) unstable; urgency=medium
 
   * Disable gunicorn control socket in systemd service unit

debian/navidrome-uploader.install

@@ -5,5 +5,5 @@ requirements.txt opt/navidrome-uploader/
 templates/* opt/navidrome-uploader/templates/
 static/css/* opt/navidrome-uploader/static/css/
 static/js/* opt/navidrome-uploader/static/js/
-contrib/navidrome-uploader.service lib/systemd/system/
+contrib/navidrome-uploader.service lib/systemd/system/navidrome-uploader.service
 

debian/navidrome-uploader.postinst

@@ -3,14 +3,17 @@ set -e
 
 APP_DIR="/opt/navidrome-uploader"
 VENV_DIR="${APP_DIR}/venv"
+APP_USER="navidrome-uploader"
 
 case "$1" in
   configure)
-        python3 -m venv "${VENV_DIR}"
-        "${VENV_DIR}/bin/pip" install --no-cache-dir --upgrade pip
-        "${VENV_DIR}/bin/pip" install --no-cache-dir -r "${APP_DIR}/requirements.txt"
+    chown -R "$APP_USER:$APP_USER" "$APP_DIR"
 
-        if command -v systemctl > /dev/null 2>&1; then
+    runuser -u "$APP_USER" -- python3 -m venv "$VENV_DIR"
+    runuser -u "$APP_USER" -- "$VENV_DIR/bin/pip" install --no-cache-dir --upgrade pip
+    runuser -u "$APP_USER" -- "$VENV_DIR/bin/pip" install --no-cache-dir -r "$APP_DIR/requirements.txt"
+
+    if command -v systemctl >/dev/null 2>&1; then
       systemctl daemon-reload || true
       systemctl enable navidrome-uploader.service || true
       systemctl restart navidrome-uploader.service || true
@@ -20,3 +23,4 @@ esac
 
 exit 0
 
+

debian/navidrome-uploader.postrm

@@ -8,6 +8,7 @@ fi
 if [ "$1" = "purge" ]; then
     rm -rf /etc/default/navidrome-uploader
     rm -rf /opt/navidrome-uploader/venv
+    rm -rf /opt/navidrome-uploader/__pycache__
 fi
 
 exit 0

requirements.txt

@@ -1,8 +1,10 @@
 blinker==1.9.0
-click==8.3.2
+click==8.3.3
 Flask==3.1.3
 itsdangerous==2.2.0
 Jinja2==3.1.6
 MarkupSafe==3.0.3
 Werkzeug==3.1.8
 gunicorn==25.3.0
+pip==26.0.1
+packaging==26.1