flatnotes: bump Node.js from 22 to 24

.github/workflows/check-node-versions.yml

@@ -497,25 +497,15 @@ jobs:
           PR_EOF
             )
 
-            # Labels go on at creation, not in a second call: they are what
+            # The label goes on at creation, not in a second call: it is what
             # exempts the PR from the template check, and that check runs on
             # "opened" — a label added a moment later can arrive too late.
-            #
-            # "keep-open" rather than "automated pr" for that exemption: both
-            # skip the template check, but changelog-pr.yml drops every PR
-            # carrying "automated pr" (it marks its own PR with it), so that
-            # label would keep these bumps out of the changelog entirely.
-            # "update script" and "bugfix" place them under Updated Scripts →
-            # Bug Fixes; the autolabeler cannot do it, since a PR opened with
-            # GITHUB_TOKEN never triggers its pull_request_target run.
             if url=$(gh pr create \
               --title "${slug}: bump Node.js from ${our} to ${upstream}" \
               --body "$body" \
               --base main \
               --head "$branch" \
-              --label "keep-open" \
-              --label "update script" \
-              --label "bugfix" 2>/dev/null); then
+              --label "automated pr" 2>/dev/null); then
               printf '%s|open|%s\n' "$slug" "$url" >>/tmp/drift_prs.txt
             else
               printf '%s|failed||\n' "$slug" >>/tmp/drift_prs.txt

CHANGELOG.md

@@ -546,8 +546,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
-    - kaneo: bump Node.js from 22 to 24 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17086](https://github.com/community-scripts/ProxmoxVE/pull/17086))
-    - iobroker: bump Node.js from 24 to 26 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17085](https://github.com/community-scripts/ProxmoxVE/pull/17085))
     - reactive-resume: repair any wrong WorkingDirectory on update [@MickLesk](https://github.com/MickLesk) ([#17068](https://github.com/community-scripts/ProxmoxVE/pull/17068))
     - mediamtx: keep mediamtx.yml across updates [@MickLesk](https://github.com/MickLesk) ([#17069](https://github.com/community-scripts/ProxmoxVE/pull/17069))
     - omnitools: allow remote action while npm ci [@MickLesk](https://github.com/MickLesk) ([#17070](https://github.com/community-scripts/ProxmoxVE/pull/17070))

ct/headers/onetimesecret

@@ -1,6 +0,0 @@
-   ____           _______               _____                     __ 
-  / __ \____  ___/_  __(_)___ ___  ___ / ___/___  _____________  / /_
- / / / / __ \/ _ \/ / / / __ `__ \/ _ \\__ \/ _ \/ ___/ ___/ _ \/ __/
-/ /_/ / / / /  __/ / / / / / / / /  __/__/ /  __/ /__/ /  /  __/ /_  
-\____/_/ /_/\___/_/ /_/_/ /_/ /_/\___/____/\___/\___/_/   \___/\__/  
-                                                                     

ct/iobroker.sh

@@ -31,7 +31,7 @@ function update_script() {
     exit
   fi
 
-  NODE_VERSION="26" NPM_VERSION="11" setup_nodejs
+  NODE_VERSION="24" setup_nodejs
 
   msg_info "Updating ${APP} LXC"
   $STD apt update

ct/kaneo.sh

@@ -42,7 +42,7 @@ function update_script() {
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "kaneo" "usekaneo/kaneo" "tarball"
 
     PNPM_VERSION=$(sed -n 's/.*"packageManager": "pnpm@\([^"+]*\).*/\1/p' /opt/kaneo/package.json)
-    NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION:-10.32.1}" setup_nodejs
+    NODE_VERSION="22" NODE_MODULE="pnpm@${PNPM_VERSION:-10.32.1}" setup_nodejs
 
     restore_backup
 

ct/onetimesecret.sh

@@ -1,101 +0,0 @@
-#!/usr/bin/env bash
-_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Hai Tran (epiHATR)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://onetimesecret.com/ | Github: https://github.com/onetimesecret/onetimesecret
-
-APP="OneTimeSecret"
-var_tags="${var_tags:-security;privacy;secrets}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  SSL_VALUE="${OTS_SSL:-}"
-  if [[ -n "${SSL_VALUE}" ]]; then
-    case "${SSL_VALUE,,}" in
-    1 | true | yes | on) SSL_VALUE="true" ;;
-    0 | false | no | off) SSL_VALUE="false" ;;
-    *)
-      msg_error "Invalid OTS_SSL value '${OTS_SSL}' (use true/false)"
-      exit 1
-      ;;
-    esac
-  fi
-
-  if [[ ! -d /opt/onetimesecret ]] || [[ ! -f /opt/onetimesecret/.env ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "onetimesecret" "onetimesecret/onetimesecret"; then
-    msg_info "Stopping Service"
-    systemctl stop onetimesecret
-    msg_ok "Stopped Service"
-
-    create_backup /opt/onetimesecret/.env
-    
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "onetimesecret" "onetimesecret/onetimesecret" "tarball"
-    RUBY_VERSION=$(tr -d ' \n' </opt/onetimesecret/.ruby-version 2>/dev/null)
-    RUBY_VERSION="${RUBY_VERSION:-3.4.10}" setup_ruby
-
-    PNPM_VERSION=$(sed -n 's/.*"packageManager": "pnpm@\([^"]*\)".*/\1/p' /opt/onetimesecret/package.json)
-    NODE_VERSION=$(tr -d ' \n' </opt/onetimesecret/.nvmrc 2>/dev/null)
-    NODE_VERSION="${NODE_VERSION:-25}" NODE_MODULE="pnpm@${PNPM_VERSION:-11.1.2}" setup_nodejs
-
-    restore_backup
-
-    msg_info "Reconciling Application"
-    systemctl enable -q --now redis-server
-    cd /opt/onetimesecret
-    mkdir -p tmp/pids log
-    $STD bash bin/setup reconcile
-    msg_ok "Reconciled Application"
-
-    msg_info "Building Frontend"
-    cd /opt/onetimesecret
-    $STD pnpm run build
-    msg_ok "Built Frontend"
-
-    msg_info "Starting Service"
-    systemctl start onetimesecret
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-DISPLAY_HOST="${OTS_HOST:-$IP}"
-case "${OTS_SSL:-false,,}" in
-1 | true | yes | on)
-  DISPLAY_SCHEME="https"
-  ;;
-*)
-  DISPLAY_SCHEME="http"
-  ;;
-esac
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}${DISPLAY_SCHEME}://${DISPLAY_HOST}${CL}"

install/flatnotes-install.sh

@@ -15,7 +15,7 @@ update_os
 
 fetch_and_deploy_gh_release "flatnotes" "dullage/flatnotes" "tarball"
 USE_UVX="YES" setup_uv
-NODE_VERSION="22" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 
 msg_info "Setting up Flatnotes"
 cd /opt/flatnotes

install/iobroker-install.sh

@@ -28,7 +28,7 @@ if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
   exit 10
 fi
 
-NODE_VERSION="26" NPM_VERSION="11" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 
 msg_info "Installing ioBroker (Patience)"
 $STD bash <(curl -fsSL https://iobroker.net/install.sh)

install/kaneo-install.sh

@@ -22,7 +22,7 @@ PG_DB_NAME="kaneo" PG_DB_USER="kaneo" setup_postgresql_db
 fetch_and_deploy_gh_release "kaneo" "usekaneo/kaneo" "tarball"
 
 PNPM_VERSION=$(sed -n 's/.*"packageManager": "pnpm@\([^"+]*\).*/\1/p' /opt/kaneo/package.json)
-NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION:-10.32.1}" setup_nodejs
+NODE_VERSION="22" NODE_MODULE="pnpm@${PNPM_VERSION:-10.32.1}" setup_nodejs
 
 msg_info "Configuring Kaneo"
 cat <<EOF >/opt/kaneo/.env

install/onetimesecret-install.sh

@@ -1,142 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Hai Tran (epiHATR)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://onetimesecret.com/ | Github: https://github.com/onetimesecret/onetimesecret
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  git \
-  libffi-dev \
-  libgmp-dev \
-  libpq-dev \
-  libreadline-dev \
-  libsodium23 \
-  libsqlite3-dev \
-  libssl-dev \
-  libxml2-dev \
-  libxslt1-dev \
-  libyaml-dev \
-  nginx \
-  pkg-config \
-  python3 \
-  redis-server \
-  zlib1g-dev
-msg_ok "Installed Dependencies"
-
-fetch_and_deploy_gh_release "onetimesecret" "onetimesecret/onetimesecret" "tarball"
-
-RUBY_VERSION=$(tr -d ' \n' </opt/onetimesecret/.ruby-version 2>/dev/null)
-RUBY_VERSION="${RUBY_VERSION:-3.4.10}" setup_ruby
-PNPM_VERSION=$(sed -n 's/.*"packageManager": "pnpm@\([^"]*\)".*/\1/p' /opt/onetimesecret/package.json)
-NODE_VERSION=$(tr -d ' \n' </opt/onetimesecret/.nvmrc 2>/dev/null)
-NODE_VERSION="${NODE_VERSION:-25}" NODE_MODULE="pnpm@${PNPM_VERSION:-11.1.2}" setup_nodejs
-HOST_VALUE="${OTS_HOST:-$LOCAL_IP}"
-SSL_VALUE="${OTS_SSL:-false}"
-case "${SSL_VALUE,,}" in
-1 | true | yes | on) SSL_VALUE="true" ;;
-0 | false | no | off | "") SSL_VALUE="false" ;;
-*)
-  msg_error "Invalid OTS_SSL value '${OTS_SSL}' (use true/false)"
-  exit 1
-  ;;
-esac
-
-msg_info "Configuring Application"
-systemctl enable -q --now redis-server
-cd /opt/onetimesecret
-$STD bash bin/setup init
-sed -i \
-  -e "s|^REDIS_URL=.*|REDIS_URL=redis://127.0.0.1:6379/0|" \
-  -e "s|^HOST=.*|HOST=${HOST_VALUE//&/\\&}|" \
-  -e "s|^SSL=.*|SSL=${SSL_VALUE}|" \
-  /opt/onetimesecret/.env
-if grep -q '^RACK_ENV=' /opt/onetimesecret/.env; then
-  sed -i 's|^RACK_ENV=.*|RACK_ENV=production|' /opt/onetimesecret/.env
-else
-  echo "RACK_ENV=production" >>/opt/onetimesecret/.env
-fi
-if grep -q '^AUTHENTICATION_MODE=' /opt/onetimesecret/.env; then
-  sed -i 's|^AUTHENTICATION_MODE=.*|AUTHENTICATION_MODE=simple|' /opt/onetimesecret/.env
-else
-  echo "AUTHENTICATION_MODE=simple" >>/opt/onetimesecret/.env
-fi
-if ! grep -q '^PORT=' /opt/onetimesecret/.env; then
-  echo "PORT=3000" >>/opt/onetimesecret/.env
-fi
-chmod 600 /opt/onetimesecret/.env
-mkdir -p /opt/onetimesecret/tmp/pids /opt/onetimesecret/log
-msg_ok "Configured Application"
-
-msg_info "Reconciling Application"
-cd /opt/onetimesecret
-$STD bash bin/setup reconcile
-msg_ok "Reconciled Application"
-
-msg_info "Building Frontend"
-cd /opt/onetimesecret
-$STD pnpm run build
-msg_ok "Built Frontend"
-
-msg_info "Creating Service"
-cat <<'EOF' >/etc/systemd/system/onetimesecret.service
-[Unit]
-Description=Onetime Secret Service
-After=network.target redis-server.service
-Requires=redis-server.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/onetimesecret
-Environment=HOME=/root
-Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
-EnvironmentFile=/opt/onetimesecret/.env
-ExecStart=/root/.rbenv/shims/bundle exec puma -C etc/puma.rb
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now onetimesecret
-msg_ok "Created Service"
-
-msg_info "Configuring Nginx"
-cat <<'EOF' >/etc/nginx/sites-available/onetimesecret
-server {
-  listen 80 default_server;
-  server_name _;
-
-  location / {
-    proxy_pass http://127.0.0.1:3000;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection "upgrade";
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-  }
-}
-EOF
-ln -sf /etc/nginx/sites-available/onetimesecret /etc/nginx/sites-enabled/onetimesecret
-rm -f /etc/nginx/sites-enabled/default
-$STD nginx -t
-systemctl enable -q --now nginx
-systemctl reload nginx
-msg_ok "Configured Nginx"
-
-motd_ssh
-customize
-cleanup_lxc