Declare the RomM filesystem structure required since 5.3.0

Update CHANGELOG.md (#17475 )
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-09-24 11:08:07 +00:00 · 2026-09-24 10:28:54 +02:00 · 2026-09-24 06:44:33 +00:00 · 2026-09-24 06:07:14 +00:00 · 2026-09-24 08:06:49 +02:00 · 2026-09-23 18:50:08 +00:00
232 changed files with 807 additions and 351 deletions
@@ -22,7 +22,9 @@ generate_headers() {
  for script in "${file_list[@]}"; do
    [[ -f "$script" ]] || continue

-    app_name=$(grep -oP '^APP="\K[^"]+' "$script" 2>/dev/null)
+    # -m1: a script that sets APP twice (the second carrying ${var_version})
+    # otherwise yields both lines, and the filename gets a newline in it.
+    app_name=$(grep -m1 -oP '^APP="\K[^"]+' "$script" 2>/dev/null)
    if [[ -n "$app_name" ]]; then
      # core.func/vm-core.func look the header up as "${APP,,}" without spaces,
      # so the generated file has to be named after APP - not after the script.
@@ -546,17 +546,92 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-09-21
+## 2026-09-24

 ### 🚀 Updated Scripts

  - #### 🐞 Bug Fixes

+    - general: use apt_update_safe instead of aborting on a failed apt update [@MickLesk](https://github.com/MickLesk) ([#17462](https://github.com/community-scripts/ProxmoxVE/pull/17462))
+
+### 💾 Core
+
+  - core: accept an off-subnet gateway for /31 and /32 [@MickLesk](https://github.com/MickLesk) ([core#70](https://github.com/community-scripts/core/pull/70))
+
+## 2026-09-23
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(signoz): install the histogramQuantile ClickHouse function [@maksimtech](https://github.com/maksimtech) ([#17386](https://github.com/community-scripts/ProxmoxVE/pull/17386))
+    - omniroute: bump to 4 GB for the npm install [@MickLesk](https://github.com/MickLesk) ([#17461](https://github.com/community-scripts/ProxmoxVE/pull/17461))
+    - Run Borg-UI with a single gunicorn worker [@MickLesk](https://github.com/MickLesk) ([#17445](https://github.com/community-scripts/ProxmoxVE/pull/17445))
+    - immich: keep geodata linked and the build deps present on update [@MickLesk](https://github.com/MickLesk) ([#17438](https://github.com/community-scripts/ProxmoxVE/pull/17438))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Scanopy [@MickLesk](https://github.com/MickLesk) ([#16797](https://github.com/community-scripts/ProxmoxVE/pull/16797))
+
+### 💾 Core
+
+  - stop a partial find from aborting the caller under pipefail [@MickLesk](https://github.com/MickLesk) ([core#68](https://github.com/community-scripts/core/pull/68))
+- core: give RHEL-family containers an ostype PVE accepts [@MickLesk](https://github.com/MickLesk) ([core#67](https://github.com/community-scripts/core/pull/67))
+- core: do not abort on a failed apt update [@MickLesk](https://github.com/MickLesk) ([core#66](https://github.com/community-scripts/core/pull/66))
+- VM's: report a finished VM as done, not aborted [@MickLesk](https://github.com/MickLesk) ([core#65](https://github.com/community-scripts/core/pull/65))
+- VM-Core: decide console autologin from the image, not USE_CLOUD_INIT [@MickLesk](https://github.com/MickLesk) ([core#63](https://github.com/community-scripts/core/pull/63))
+- VM-Core: report failed image steps and restore tty1 autologin without cloud-init [@MickLesk](https://github.com/MickLesk) ([core#62](https://github.com/community-scripts/core/pull/62))
+- tools: raise pnpm/yarn fetch timeout and lower network concurrency [@MickLesk](https://github.com/MickLesk) ([core#59](https://github.com/community-scripts/core/pull/59))
+- VM-Core: stop discarding cloud-init error messages [@MickLesk](https://github.com/MickLesk) ([core#60](https://github.com/community-scripts/core/pull/60))
+
+## 2026-09-22
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(invoiceshelf): re-link storage during update [@owenvoke](https://github.com/owenvoke) ([#17431](https://github.com/community-scripts/ProxmoxVE/pull/17431))
+    - fix(alpine-it-tools): write the version file after a successful update [@Houtek](https://github.com/Houtek) ([#17421](https://github.com/community-scripts/ProxmoxVE/pull/17421))
+    - Umami: Align pnpm with engines.pnpm on update [@ReneNulschDE](https://github.com/ReneNulschDE) ([#17404](https://github.com/community-scripts/ProxmoxVE/pull/17404))
+
+  - #### 🔧 Refactor
+
+    - several scripts: let uv see the project before syncing it | refactor some scripts that use uv [@MickLesk](https://github.com/MickLesk) ([#17436](https://github.com/community-scripts/ProxmoxVE/pull/17436))
+
+### 💾 Core
+
+  - setup_uv: honour a project's required-version pin [@MickLesk](https://github.com/MickLesk) ([core#58](https://github.com/community-scripts/core/pull/58))
+- fix(motd): repair legacy 00_lxc-details.sh header and dead color placeholders [@BadFlo](https://github.com/BadFlo) ([core#53](https://github.com/community-scripts/core/pull/53))
+- meilisearch: take the raw binary, not the .deb [@MickLesk](https://github.com/MickLesk) ([core#57](https://github.com/community-scripts/core/pull/57))
+
+### 📚 Documentation
+
+  - github: Stop generating header filenames with a newline in them [@MickLesk](https://github.com/MickLesk) ([#17435](https://github.com/community-scripts/ProxmoxVE/pull/17435))
+
+### ❔ Uncategorized
+
+  - chore(ct): sync cloudflare-ddns defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17446](https://github.com/community-scripts/ProxmoxVE/pull/17446))
+
+## 2026-09-21
+
+### 🆕 New Scripts
+
+  - AudioMuse-AI ([#17415](https://github.com/community-scripts/ProxmoxVE/pull/17415))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(portabase): meet the default admin password rules [@maksimtech](https://github.com/maksimtech) ([#17384](https://github.com/community-scripts/ProxmoxVE/pull/17384))
+    - truenas-vm: strip the G before the storage allocation [@MickLesk](https://github.com/MickLesk) ([#17407](https://github.com/community-scripts/ProxmoxVE/pull/17407))
+    - Librenms - Fix local snmpd community string setup [@dopch](https://github.com/dopch) ([#17363](https://github.com/community-scripts/ProxmoxVE/pull/17363))
+    - fix(iventoy): preserve release data and migrate legacy service launchers [@Msprg](https://github.com/Msprg) ([#17161](https://github.com/community-scripts/ProxmoxVE/pull/17161))
    - xyops: bump Node.js from 22 to 24 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17398](https://github.com/community-scripts/ProxmoxVE/pull/17398))

 ### 💾 Core

-  - github-api: take the release the maintainer marked as latest [@MickLesk](https://github.com/MickLesk) ([core#55](https://github.com/community-scripts/core/pull/55))
+  - Generate app headers [@github-actions[bot]](https://github.com/github-actions[bot]) ([core#56](https://github.com/community-scripts/core/pull/56))
+- github-api: take the release the maintainer marked as latest [@MickLesk](https://github.com/MickLesk) ([core#55](https://github.com/community-scripts/core/pull/55))
 - general: prune old Rust toolchains [@MickLesk](https://github.com/MickLesk) ([core#52](https://github.com/community-scripts/core/pull/52))
 - Ask when the preselected storage cannot hold the content [@MickLesk](https://github.com/MickLesk) ([core#51](https://github.com/community-scripts/core/pull/51))

@@ -33,7 +33,7 @@ function update_script() {
  fi
  setup_mariadb
  if check_for_gh_release "2fauth" "Bubka/2FAuth"; then
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade

    msg_info "Creating Backup"
@@ -40,6 +40,7 @@ function update_script() {
    cp -r /tmp/dist/* /usr/share/nginx/html
    rm -rf /tmp/dist
    rm -f it-tools.zip
+    echo "${RELEASE}" >/opt/${APP}_version.txt
    msg_ok "Updated successfully!"
  else
    msg_ok "No update required. ${APP} is already at ${RELEASE}"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Apache Cassandra"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y --only-upgrade cassandra cassandra-tools
  msg_ok "Updated Apache Cassandra"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Apache CouchDB"
-  $STD apt-get update
+  apt_update_safe
  $STD apt-get install -y --only-upgrade couchdb
  msg_ok "Updated Apache CouchDB"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Apt-Cacher-NG"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated Apt-Cacher-NG"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Aria2"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated Aria2"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
  fi

  msg_info "Updating AudiobookShelf"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated AudiobookShelf"
  msg_ok "Updated successfully!"
@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/NeptuneHub/AudioMuse-AI
+
+APP="AudioMuse-AI"
+var_tags="${var_tags:-music;ai}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-8192}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/audiomuse-ai ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "audiomuse-ai" "NeptuneHub/AudioMuse-AI"; then
+    msg_info "Stopping Services"
+    systemctl stop audiomuse-ai audiomuse-ai-worker audiomuse-ai-worker-high audiomuse-ai-janitor audiomuse-ai-control
+    msg_ok "Stopped Services"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "audiomuse-ai" "NeptuneHub/AudioMuse-AI" "tarball"
+
+    AUDIOMUSE_BACKEND="$(cat /opt/audiomuse-ai_data/.backend 2>/dev/null || echo cpu)"
+    REQ_COMMON="common.txt"
+    case "$AUDIOMUSE_BACKEND" in
+    gpu)
+      REQ_ACCEL="gpu.txt"
+      [[ "$(uname -m)" == "aarch64" ]] && REQ_ACCEL="gpu-arm64.txt"
+      ;;
+    cpu-noavx2)
+      REQ_COMMON="common-noavx2.txt"
+      REQ_ACCEL="cpu-noavx2.txt"
+      ;;
+    *)
+      REQ_ACCEL="cpu.txt"
+      ;;
+    esac
+
+    msg_info "Updating Python Environment (${AUDIOMUSE_BACKEND})"
+    cd /opt/audiomuse-ai
+    $STD uv venv --seed --python 3.12 /opt/audiomuse-ai/.venv
+    $STD uv pip install --python /opt/audiomuse-ai/.venv \
+      -r "/opt/audiomuse-ai/requirements/${REQ_COMMON}" \
+      -r "/opt/audiomuse-ai/requirements/${REQ_ACCEL}"
+    msg_ok "Updated Python Environment (${AUDIOMUSE_BACKEND})"
+
+    msg_info "Starting Services"
+    systemctl start audiomuse-ai audiomuse-ai-worker audiomuse-ai-worker-high audiomuse-ai-janitor audiomuse-ai-control
+    msg_ok "Started Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8000${CL}"
@@ -34,7 +34,7 @@ function update_script() {
  fi

  if check_for_gh_release "authelia" "authelia/authelia"; then
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    fetch_and_deploy_gh_release "authelia" "authelia/authelia" "binary"
    msg_ok "Updated successfully!"
@@ -45,7 +45,6 @@ function update_script() {

  NODE_VERSION="26" NODE_MODULE=pnpm@12 setup_nodejs
  $STD uv cache clean
-  UV_PYTHON_INSTALL_DIR="/usr/local/bin" PYTHON_VERSION="3.14.7" setup_uv
  RUST_PROFILE="minimal" RUST_TOOLCHAIN="stable" setup_rust
  setup_yq

@@ -95,6 +94,7 @@ function update_script() {
    fi

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "authentik" "goauthentik/authentik" "tarball" "${AUTHENTIK_VERSION}" "/opt/authentik"
+    UV_PYTHON_INSTALL_DIR="/usr/local/bin" PYTHON_VERSION="3.14.7" UV_PROJECT_DIR="/opt/authentik" setup_uv
    GO_VERSION="$(grep -m1 '^go ' /opt/authentik/go.mod | awk '{print $2}')" setup_go

    msg_info "Configuring rust"
@@ -31,8 +31,6 @@ function update_script() {
    exit
  fi

-  setup_uv
-
  RELEASE=$(get_latest_codeberg_release "gelbphoenix/autocaliweb")
  if check_for_codeberg_release "autocaliweb" "gelbphoenix/autocaliweb"; then
    msg_info "Stopping Services"
@@ -43,6 +41,7 @@ function update_script() {
    export VIRTUAL_ENV="${INSTALL_DIR}/venv"
    $STD tar -cf ~/autocaliweb_bkp.tar "$INSTALL_DIR"/{metadata_change_logs,dirs.json,.env,scripts/ingest_watcher.sh,scripts/auto_zipper_wrapper.sh,scripts/metadata_change_detector_wrapper.sh}
    fetch_and_deploy_codeberg_release "autocaliweb" "gelbphoenix/autocaliweb" "tarball" "latest" "/opt/autocaliweb"
+    setup_uv $INSTALL_DIR
    
    msg_info "Updating Autocaliweb"
    cd "$INSTALL_DIR" 
@@ -39,6 +39,7 @@ function update_script() {

    create_backup /opt/baserow/.env
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "baserow" "baserow/baserow" "tarball"
+    UV_PROJECT_DIR="/opt/baserow/backend" setup_uv
    restore_backup

    msg_info "Configuring Baserow"
@@ -40,6 +40,7 @@ function update_script() {
    create_backup /opt/beaverhabits/.user

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "beaverhabits" "daya0576/beaverhabits" "tarball"
+    PYTHON_VERSION="3.14" UV_PROJECT_DIR="/opt/beaverhabits" setup_uv

    msg_info "Syncing Dependencies"
    cd /opt/beaverhabits
@@ -32,6 +32,14 @@ function update_script() {
    exit
  fi

+  if grep -q -- '--workers 2' /etc/systemd/system/borg-ui.service 2>/dev/null; then
+    msg_info "Reducing Service to a single worker"
+    sed -i 's/--workers 2/--workers 1/' /etc/systemd/system/borg-ui.service
+    systemctl daemon-reload
+    systemctl try-restart borg-ui
+    msg_ok "Reduced Service to a single worker"
+  fi
+
  if check_for_gh_release "borg-ui" "karanhudia/borg-ui"; then
    msg_info "Stopping Service"
    systemctl stop borg-ui
@@ -39,7 +39,7 @@ Package: bunkerweb
 Pin: version ${RELEASE}
 Pin-Priority: 1001
 EOF
-    $STD apt update
+    apt_update_safe
    $STD apt-mark unhold bunkerweb nginx
    $STD apt install -y --allow-downgrades bunkerweb="${RELEASE}"
    msg_ok "Updated BunkerWeb"
@@ -37,6 +37,7 @@ function update_script() {
    msg_ok "Stopped Service"

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Byparr" "ThePhaseless/Byparr" "tarball" "latest"
+    UV_PROJECT_DIR="/opt/Byparr" setup_uv

    if ! dpkg -l | grep -q ffmpeg; then
      msg_info "Installing dependencies"
@@ -40,7 +40,7 @@ update_deb_based() {
  fi

  msg_info "Updating Caddy LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Caddy LXC"

@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt-get update
+  apt_update_safe
  $STD apt-get -y upgrade
  msg_ok "Updated ${APP} LXC"
  msg_ok "Updated successfully!"
@@ -9,8 +9,8 @@ source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_

 APP="Cloudflare-DDNS"
 var_tags="${var_tags:-network}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-1024}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
 var_disk="${var_disk:-3}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated ${APP} LXC"

@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ddclient"
-  $STD apt update
+  apt_update_safe
  $STD apt install --only-upgrade -y ddclient
  $STD systemctl restart ddclient
  msg_ok "Updated ddclient"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating deCONZ"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated deCONZ"
  msg_ok "Updated successfully!"
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating Defguard"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y defguard defguard-proxy
  msg_ok "Updated Defguard"

@@ -32,7 +32,7 @@ function update_script() {
  fi
  msg_info "Updating Deluge"
  ensure_dependencies python3-setuptools
-  $STD apt update
+  apt_update_safe
  $STD pip3 install deluge[all] "pyopenssl<25" --upgrade
  msg_ok "Updated Deluge"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Devuan LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated Devuan LXC"
  exit
@@ -32,7 +32,6 @@ function update_script() {
    exit
  fi

-  setup_uv
  NODE_VERSION="24" setup_nodejs
  if [[ -f "/etc/nginx/sites-available/dispatcharr.conf" ]] && ! grep -q "real_forwarded_proto" "/etc/nginx/sites-available/dispatcharr.conf"; then
    msg_info "Migrating Nginx Configuration"
@@ -146,6 +145,7 @@ EOF
    msg_ok "Backup created: $BACKUP_FILE"

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "dispatcharr" "Dispatcharr/Dispatcharr" "tarball"
+    UV_PROJECT_DIR="/opt/dispatcharr" setup_uv

    restore_backup

@@ -36,7 +36,7 @@ catch_errors

 update_deb_based() {
  msg_info "Updating base system"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Base system updated"

@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt-get update
+    apt_update_safe
    $STD apt-get -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -37,7 +37,7 @@ function update_script() {
    msg_ok "Service stopped"

    msg_info "Updating Debian LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated Debian LXC"

@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP}"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y elasticsearch
  msg_ok "Updated ${APP}"

@@ -34,7 +34,7 @@ function update_script() {
  NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs

  msg_info "Updating LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated LXC"

@@ -40,7 +40,7 @@ function update_script() {
      "main"
  fi
  msg_info "Updating evcc LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt --only-upgrade install -y evcc
  msg_ok "Updated successfully!"
  exit
@@ -32,7 +32,7 @@ function update_script() {
    fi

    msg_info "Updating FHEM"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated FHEM"
    msg_ok "Updated successfully!"
@@ -39,6 +39,7 @@ function update_script() {

    create_backup /opt/fireshare/fireshare.env
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "fireshare" "ShaneIsrael/fireshare" "tarball"
+    UV_PROJECT_DIR="/opt/fireshare" setup_uv
    restore_backup
    rm -f /usr/local/bin/fireshare

@@ -38,10 +38,10 @@ function update_script() {

    create_backup /opt/flatnotes/.env /opt/flatnotes/data

-    PYTHON_VERSION="3.13" setup_uv
    NODE_VERSION="24" setup_nodejs

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "flatnotes" "dullage/flatnotes" "tarball"
+    PYTHON_VERSION="3.13" UV_PROJECT_DIR="/opt/flatnotes" setup_uv

    restore_backup

@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating GitLab (Patience)"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y gitlab-ce
  msg_ok "Updated GitLab"

@@ -31,7 +31,7 @@ function update_script() {
  fi

  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -49,7 +49,7 @@ update_deb_based() {
  fi

  msg_info "Updating Grafana LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt --only-upgrade install -y grafana
  msg_ok "Updated successfully!"
 }
@@ -43,17 +43,17 @@ function update_script() {
    MONGO_VERSION="8.2" setup_mongodb

    msg_info "Updating Graylog"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    curl -fsSL "https://packages.graylog2.org/repo/packages/graylog-7.0-repository_latest.deb" -o "graylog-7.0-repository_latest.deb"
    $STD dpkg -i graylog-7.0-repository_latest.deb
-    $STD apt update
+    apt_update_safe
    ensure_dependencies graylog-server graylog-datanode
    rm -f graylog-7.0-repository_latest.deb
    msg_ok "Updated Graylog"
  elif dpkg --compare-versions "$CURRENT_VERSION" ge "7.0"; then
    msg_info "Updating Graylog"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated Graylog"
  fi
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP}"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y haproxy
  msg_ok "Updated ${APP}"

@@ -0,0 +1,6 @@
+    ___             ___       __  ___                      ___    ____
+   /   | __  ______/ (_)___  /  |/  /_  __________        /   |  /  _/
+  / /| |/ / / / __  / / __ \/ /|_/ / / / / ___/ _ \______/ /| |  / /  
+ / ___ / /_/ / /_/ / / /_/ / /  / / /_/ (__  )  __/_____/ ___ |_/ /   
+/_/  |_\__,_/\__,_/_/\____/_/  /_/\__,_/____/\___/     /_/  |_/___/   
+                                                                      
@@ -63,7 +63,7 @@ EOF
    fi

    msg_info "Updating Nodejs"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade nodejs -y
    msg_ok "Updated Nodejs"

@@ -63,7 +63,7 @@ function update_script() {
  fi
  if [ "$UPD" == "3" ]; then
    msg_info "Installing Home Assistant Community Store (HACS)"
-    $STD apt update
+    apt_update_safe
    cd /var/lib/docker/volumes/hass_config/_data
    $STD bash <(curl -fsSL https://get.hacs.xyz)
    msg_ok "Installed Home Assistant Community Store (HACS)"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y homebridge
  msg_ok "Updated successfully!"
  exit
@@ -32,7 +32,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y hyperion
  msg_ok "Updated successfully!"
  exit
@@ -56,7 +56,7 @@ Pin:release a=testing
 Pin-Priority: 450
 EOF
    [[ -f /etc/apt/preferences.d/immich ]] && rm /etc/apt/preferences.d/immich
-    $STD apt update
+    apt_update_safe
    msg_ok "Added Debian Testing repo"
  fi

@@ -105,6 +105,7 @@ EOF
    libraries=("libjxl" "jpegli" "libheif" "libraw" "imagemagick" "libvips")
    cd "$BASE_DIR"
    msg_warn "Checking for updates to custom image-processing libraries (recompile time: 2-15min per library)"
+    ensure_dependencies liblcms2-dev libjpeg62-turbo-dev libspng-dev libexif-dev
    $STD git pull
    for library in "${libraries[@]}"; do
      compile_"$library"
@@ -192,6 +193,8 @@ EOF
    export SHARP_FORCE_GLOBAL_LIBVIPS=true
    $STD pnpm --dir "$APP_DIR/node_modules/sharp" exec npm run build

+    ln -sfn "$GEO_DIR" "$APP_DIR/geodata"
+
    # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
    if [[ -f "$APP_DIR/helmet.json" ]]; then
      jq '.contentSecurityPolicy.directives["upgrade-insecure-requests"] = null' "$APP_DIR/helmet.json" >"$APP_DIR/helmet.json.tmp" && mv "$APP_DIR/helmet.json.tmp" "$APP_DIR/helmet.json"
@@ -42,7 +42,7 @@ function update_script() {
  msg_ok "Created backup"

  msg_info "Updating Infisical"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y infisical-core
  $STD infisical-ctl reconfigure
  msg_ok "Updated Infisical"
@@ -32,7 +32,7 @@ function update_script() {
  fi
  
  msg_info "Updating InfluxDB"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated InfluxDB"
  msg_ok "Updated successfully!"
@@ -38,7 +38,7 @@ function update_script() {
  fi

  msg_info "Updating InvenTree"
-  $STD apt update
+  apt_update_safe
  $STD apt install --only-upgrade inventree -y
  msg_ok "Updated InvenTree"
  msg_ok "Updated successfully!"
@@ -54,6 +54,7 @@ function update_script() {
      $STD pnpm run build
    fi
    $STD php artisan migrate --force
+    $STD php artisan storage:link
    $STD php artisan optimize:clear
    chown -R www-data:www-data /opt/invoiceshelf
    msg_ok "Updated Application"
@@ -34,7 +34,7 @@ function update_script() {
  NODE_VERSION="24" NPM_VERSION="11" setup_nodejs

  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
  exit
@@ -34,7 +34,7 @@ function update_script() {
  setup_mariadb

  msg_info "Updating ITSM-NG"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  chown -R www-data:www-data /var/lib/itsm-ng
  mkdir -p /usr/share/itsm-ng/css/palettes
@@ -33,15 +33,43 @@ function update_script() {

  if check_for_gh_release "iventoy" "ventoy/PXE"; then
    msg_info "Stopping iVentoy"
-    $STD /opt/iventoy/iventoy.sh stop
+    systemctl stop iventoy
    msg_ok "Stopped iVentoy"

-    create_backup /opt/iventoy/data /opt/iventoy/iso
+    # Only preserve user state; data/iventoy.dat must match the new executable.
+    create_backup /opt/iventoy/data/config.dat /opt/iventoy/iso /opt/iventoy/user
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "iventoy" "ventoy/PXE" "prebuild" "latest" "/opt/iventoy" "iventoy-*-linux-$(arch_resolve x86_64-free arm64-trial).tar.gz"
    restore_backup

+    # Migrate existing services that invoke the Bash launcher with sh.
+    mkdir -p /etc/systemd/system/iventoy.service.d
+    cat <<EOF >/etc/systemd/system/iventoy.service.d/launcher.conf
+[Service]
+ExecStart=
+ExecStart=/bin/bash /opt/iventoy/iventoy.sh -R start
+ExecStop=
+ExecStop=/bin/bash /opt/iventoy/iventoy.sh stop
+PIDFile=/run/iventoy.pid
+RestartSec=5
+EOF
+    systemctl daemon-reload
+
    msg_info "Starting iVentoy"
-    $STD /opt/iventoy/iventoy.sh -R start
+    systemctl reset-failed iventoy
+    systemctl start iventoy
+    # The launcher can return success before the daemon fails initialization.
+    local i ready=0
+    for ((i = 0; i < 90; i++)); do
+      if systemctl is-active --quiet iventoy && curl -fsS --max-time 2 "${IVENTOY_HEALTH_URL:-http://127.0.0.1:26000/}" >/dev/null 2>&1; then
+        ready=1
+        break
+      fi
+      sleep 2
+    done
+    if [[ "$ready" -ne 1 ]]; then
+      msg_error "iVentoy did not become ready; check journalctl -u iventoy and /opt/iventoy/log/log.txt"
+      exit 1
+    fi
    msg_ok "Started iVentoy"
    msg_ok "Updated Successfully"
  fi
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating Container OS"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated Container OS"

@@ -34,7 +34,7 @@ function update_script() {
  JAVA_VERSION="21" setup_java

  msg_info "Updating Jenkins"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Jenkins"
  msg_ok "Updated successfully!"
@@ -41,7 +41,7 @@ function update_script() {
  fi

  msg_info "Updating Jitsi Meet"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y --only-upgrade \
    jitsi-meet \
    jicofo \
@@ -38,6 +38,7 @@ function update_script() {
    msg_ok "Stopped Services"

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "journiv" "journiv/journiv-app" "tarball"
+    UV_PROJECT_DIR="/opt/journiv" setup_uv

    msg_info "Updating Python Environment"
    cd /opt/journiv
@@ -44,7 +44,7 @@ function update_script() {
    msg_ok "Stopped Service"

    msg_info "Updating packages"
-    $STD apt-get update
+    apt_update_safe
    $STD apt-get -y upgrade
    msg_ok "Updated packages"

@@ -42,6 +42,7 @@ function update_script() {
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "kitchenowl" "TomBursch/kitchenowl" "tarball" "latest" "/opt/kitchenowl"
    rm -rf /opt/kitchenowl/web
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "kitchenowl-web" "TomBursch/kitchenowl" "prebuild" "latest" "/opt/kitchenowl/web" "kitchenowl_Web.tar.gz"
+    PYTHON_VERSION="3.14" UV_PROJECT_DIR="/opt/kitchenowl/backend" setup_uv

    restore_backup
    sed -i 's/default=True/default=False/' /opt/kitchenowl/backend/wsgi.py
@@ -35,7 +35,7 @@ function update_script() {
  CURRENT=$(dpkg-query -W -f='${Version}' kiwix-tools 2>/dev/null)

  msg_info "Updating Package Index"
-  $STD apt update
+  apt_update_safe
  msg_ok "Updated Package Index"

  CANDIDATE=$(apt-cache policy kiwix-tools | awk '/Candidate:/{print $2}')
@@ -40,6 +40,7 @@ function update_script() {
    create_backup /opt/linkding/data /opt/linkding/.env

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "linkding" "sissbruecker/linkding" "tarball"
+    UV_PROJECT_DIR="/opt/linkding" setup_uv

    restore_backup
    ln -sf /usr/lib/$(arch_resolve "x86_64-linux-gnu" "aarch64-linux-gnu")/mod_icu.so /opt/linkding/libicu.so
@@ -38,7 +38,7 @@ function update_script() {
    msg_info "Stopped Service"

    msg_info "Updating Container"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated Container"

@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating lldap"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y lldap
  msg_ok "Updated lldap"
  msg_ok "Updated successfully!"
@@ -51,7 +51,7 @@ update_deb_based() {
    msg_ok "Stopped Loki"

    msg_info "Updating Loki"
-    $STD apt update
+    apt_update_safe
    $STD apt install -y --only-upgrade loki
    msg_ok "Updated Loki"

@@ -40,7 +40,7 @@ update_deb_based() {
  fi
  setup_mariadb
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
 }
@@ -30,7 +30,7 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  NODE_VERSION="24" NODE_MODULE="matterbridge" setup_nodejs
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -32,7 +32,6 @@ function update_script() {
    exit
  fi
  if check_for_gh_release "mealie" "mealie-recipes/mealie"; then
-    PYTHON_VERSION="3.12" setup_uv

    msg_info "Stopping Service"
    systemctl stop mealie
@@ -44,6 +43,7 @@ function update_script() {
    msg_ok "Backup completed"

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball"
+    PYTHON_VERSION="3.12" UV_PROJECT_DIR="/opt/mealie" setup_uv

    msg_info "Restoring Configuration"
    mv -f /opt/mealie.env /opt/mealie/mealie.env
@@ -31,14 +31,13 @@ function update_script() {
    exit
  fi

-  setup_uv
-
  if check_for_gh_release "mediamanager" "maxdorninger/MediaManager"; then
    msg_info "Stopping Service"
    systemctl stop mediamanager
    msg_ok "Stopped Service"

    fetch_and_deploy_gh_release "MediaManager" "maxdorninger/MediaManager" "tarball" "latest" "/opt/mediamanager"
+    UV_PROJECT_DIR="/opt/mediamanager" setup_uv
    msg_info "Updating MediaManager"
    MM_DIR="/opt/mm"
    export CONFIG_DIR="${MM_DIR}/config"
@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -53,6 +53,7 @@ function update_script() {
    create_backup /opt/metube/.env

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "metube" "alexta69/metube" "tarball" "latest"
+    UV_PROJECT_DIR="/opt/metube" setup_uv

    restore_backup

@@ -37,7 +37,7 @@ function update_script() {
  msg_ok "Stopped Service"

  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated ${APP} LXC"

@@ -32,7 +32,7 @@ function update_script() {
    fi
    
    msg_info "Updating MongoDB LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated successfully!"
    exit
@@ -41,7 +41,7 @@ function update_script() {
  fi

  msg_info "Updating MQTT"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated successfully!"
  exit
@@ -40,7 +40,7 @@ function update_script() {
    create_backup /etc/mumble/mumble-server.ini /var/lib/mumble-server/mumble-server.sqlite

    msg_info "Updating Mumble"
-    $STD apt update
+    apt_update_safe
    $STD apt install -y mumble-server
    cat <<EOF >~/.mumble
 $(get_latest_github_release "mumble-voip/mumble")
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
  exit
@@ -33,7 +33,7 @@ function update_script() {
  JAVA_VERSION="21" setup_java

  msg_info "Updating ${APP}"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
  exit
@@ -34,7 +34,7 @@ function update_script() {
  fi

  msg_info "Updating Netbird"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated successfully!"
  exit
@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -37,7 +37,7 @@ function update_script() {
  msg_ok "Stopped Service"

  msg_info "Updating LXC packages"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated LXC packages"

@@ -40,6 +40,7 @@ function update_script() {
    create_backup /opt/notediscovery/data /opt/notediscovery/config.yaml

    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "notediscovery" "gamosoft/NoteDiscovery" "tarball"
+    UV_PROJECT_DIR="/opt/notediscovery" setup_uv

    msg_info "Syncing Dependencies"
    cd /opt/notediscovery
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Notifiarr"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Notifiarr"
  msg_ok "Updated successfully!"
@@ -54,7 +54,7 @@ update_deb_based() {
  fi

  msg_info "Updating ntfy"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated ntfy"
  msg_ok "Updated successfully!"
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ntopng"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y ntopng
  msg_ok "Updated ntopng"

@@ -41,7 +41,7 @@ function update_script() {
  fi

  msg_info "Updating NZBGet"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated NZBGet"
  msg_ok "Updated successfully!"
@@ -39,7 +39,7 @@ function update_script() {
  create_backup /var/lib/couchdb /opt/couchdb/etc/local.d/obsidian-livesync.ini /opt/obsidian-livesync/.env

  msg_info "Updating Container OS"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Container OS"

@@ -10,7 +10,7 @@ source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_
 APP="OmniRoute"
 var_tags="${var_tags:-ai;gateway;llm}"
 var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
+var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-10}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
@@ -39,7 +39,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
  exit
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating OnlyOffice Document Server"
-  $STD apt update
+  apt_update_safe
  $STD apt -y --only-upgrade install onlyoffice-documentserver
  msg_ok "Updated OnlyOffice Document Server"

@@ -39,7 +39,7 @@ function update_script() {
    msg_ok "Stopped services"

    msg_info "Updating packages"
-    $STD apt-get update
+    apt_update_safe
    $STD apt-get dist-upgrade -y
    ensure_dependencies "inotify-tools"
    msg_ok "Updated packages"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated successfully!"
  exit
@@ -32,7 +32,7 @@ function update_script() {
  fi

  msg_info "Updating OpenProject"
-  $STD apt update
+  apt_update_safe
  $STD apt install --only-upgrade -y openproject
  msg_ok "Updated OpenProject"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating Orb"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y --only-upgrade orb
  msg_ok "Updated successfully!"
  exit
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
MickLesk	8b8bbe784d	Declare the RomM filesystem structure required since 5.3.0	2026-09-24 10:28:54 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	03702ce31a	Update CHANGELOG.md (#17475 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-24 06:44:33 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	e38cc1c631	Update CHANGELOG.md (#17474 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-24 06:07:14 +00:00
CanbiZ (MickLesk)	b855a5782a	Use apt_update_safe instead of aborting on a failed apt update (#17462 )	2026-09-24 08:06:49 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	ba1409a920	Update CHANGELOG.md (#17468 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 18:50:08 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	79b10733ed	Update CHANGELOG.md (#17467 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 16:24:04 +00:00
maksimtech	31ead526dc	fix(signoz): install the histogramQuantile ClickHouse function (#17386 )	2026-09-23 18:23:31 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	16f9714662	Update CHANGELOG.md (#17465 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 16:17:07 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	7dc23b42b4	Update CHANGELOG.md (#17464 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 15:59:17 +00:00
CanbiZ (MickLesk)	572e9f6512	Give omniroute 4 GB for the npm install (#17461 )	2026-09-23 17:58:47 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	1f092bcfc3	Update CHANGELOG.md (#17463 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:52:25 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	a77102b390	Update CHANGELOG.md (#17459 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:27:13 +00:00
CanbiZ (MickLesk)	050e6a02b7	Refactor: Scanopy (#16797 ) * scanopy: use prebuilt server binary, relax release profile for generate-fixtures * scanopy: drop unneeded rust build, use committed UI fixtures * scanopy: restore generate-fixtures build, ui/src/lib/data is gitignored and incomplete * scanopy: serve the UI from the binary, drop the source build Upstream confirmed in scanopy/scanopy#698 that scanopy-server-linux-* has carried the built UI since v0.17.13, fixtures and service logos included, served on the same port as the API. The release notes never said so, which is why we kept building it. That removes the source tarball, the Rust toolchain and generate-fixtures, Node with npm ci and npm run build, and SCANOPY_WEB_EXTERNAL_PATH. With the variable set to a directory that no longer has an index.html, v0.17.14 and earlier refuse to start, so the update deletes the line rather than leaving it. build-essential, libssl-dev and pkg-config go too: the release binary is static-pie with no INTERP segment, so it has no runtime library dependencies. /opt/scanopy stays, now only for .env and oidc.toml, and the unit's WorkingDirectory follows it out of the removed backend directory. Since nothing wipes that directory any more, the config survives an update on its own, which is the report upstream passed on of an update coming back without SCANOPY_WEB_EXTERNAL_PATH and the server starting API-only. The update keeps the running binary until the new one answers /api/health and puts it back if it does not, so a bad release leaves a working server instead of a stopped one. check_for_gh_release now keys on scanopy-server, matching the version file the binary deploy writes; the Scanopy key belonged to the tarball that is gone. Existing containers run one extra update, then agree. * Refactor scanopy-install.sh for server setup Updated installation script to configure Scanopy server and removed daemon configuration section. * Update service names from 'scanopy-server' to 'Scanopy' * Fix case sensitivity in fetch_and_deploy_gh_release * scanopy: make the rollback restore the whole old setup The health check put the previous binary back but nothing else, and the source tree it needs was already gone by then: the update deleted /opt/scanopy/ui before starting the new server, and removed SCANOPY_WEB_EXTERNAL_PATH from the env at the same time. A failed health check therefore left the old binary running without the UI it serves from disk, so the rollback produced an API-only server. Back up the env file and the unit alongside the binary, restore all three when the check fails, and delete the source tree only once the new server has answered. Nothing the old version needs is removed before the new one has proven itself. * scanopy: name the deployed binary what the unit starts singlefile mode writes the asset to <target>/<app name>: local target_file="$app" [[ "${USE_ORIGINAL_FILENAME:-false}" == "true" ]] && target_file="$filename" so with the app renamed to Scanopy the binary lands at /usr/bin/Scanopy while the unit starts /usr/bin/scanopy-server, and the service never comes up on a fresh install. Rename it after the deploy, the same way the daemon block already renames "Scanopy Daemon". Keeping the app name is what matters here: it is also the version file (~/.scanopy), and changing it would make every existing container report an update it does not need.	2026-09-23 16:26:45 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	9a8bd0c380	Update CHANGELOG.md (#17458 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:26:14 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	4c03276ef7	Update CHANGELOG.md (#17456 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:18:04 +00:00
CanbiZ (MickLesk)	ab57fd7f94	Run Borg-UI with a single gunicorn worker (#17445 )	2026-09-23 16:17:35 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	e11a07c197	Update CHANGELOG.md (#17455 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:14:27 +00:00
CanbiZ (MickLesk)	743c0b6ac6	immich: keep geodata linked and the build deps present on update (#17438 ) * immich: keep geodata linked and the build deps present on update The update wipes $APP_DIR before redeploying, which takes the geodata symlink the install created with it, and never puts it back. The app then finds no reverse-geocoding data and the web UI does not come up. The library recompile assumes headers that only reached the install list later, so a container built before that fails at the first missing one - LCMS2 in the reported case. * immich: keep geodata linked and the build deps present on update The update wipes $APP_DIR before redeploying, which takes the geodata symlink the install created with it, and never puts it back. The app then finds no reverse-geocoding data and the web UI does not come up. The library recompile assumes headers that only reached the install list later, so a container built before that fails at the first missing one - LCMS2 in the reported case.	2026-09-23 16:13:54 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	b050d4bf4d	Update CHANGELOG.md (#17453 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 07:57:10 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	8113393fc1	Update CHANGELOG.md (#17452 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 07:26:12 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	d95f42489d	Update CHANGELOG.md (#17450 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 07:06:07 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	a27c4edb98	Update CHANGELOG.md (#17449 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 07:00:40 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	a3ddd29410	Update CHANGELOG.md (#17447 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-22 14:16:53 +00:00
github-actions[bot]	24f0c8379a	chore(ct): sync cloudflare-ddns defaults from PocketBase (#17446 ) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-09-22 16:16:27 +02:00
community-scripts-pr-app[bot]andGitHub Actions	699aa1b4b8	Update .app files (#17441 ) Co-authored-by: GitHub Actions <github-actions[bot]@users.noreply.github.com>	2026-09-22 16:07:59 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	abdc1fb099	Update CHANGELOG.md (#17443 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-22 14:07:00 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	08e6a64bda	Update CHANGELOG.md (#17440 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-22 14:06:46 +00:00
CanbiZ (MickLesk)	76b839b04c	several scripts: let uv see the project before syncing it \| refactor some scripts that use uv (#17436 ) * Let uv see the project before syncing it uv refuses to run when a project pins a required-version it does not match, in either direction: RomM pins ==0.12.13, which fails against both the 0.10.3 a container was built with and the 0.12.17 latest installs. UV_PROJECT_DIR points setup_uv at the project so it reads that pin. It is a prefix like PYTHON_VERSION and UV_VERSION, and the call sits directly under fetch_and_deploy: the project is on disk by then, and the deploy has closed its message block, which setup_uv needs since it opens one of its own. That is also the only call needed - nothing between the old early call and the deploy uses uv or Python, so the two collapse into one. Two things found along the way: UV_PYTHON was set as a command prefix on setup_uv in 14 places. setup_uv reads PYTHON_VERSION, never UV_PYTHON, and a prefix assignment does not outlive the call, so those pins did nothing. They now use PYTHON_VERSION, which installs the interpreter they were asking for. Five update scripts had no setup_uv at all while their install counterpart pinned a Python version. They now carry the same pin. immich is left out: it runs uv through sudo -u inside a retry loop. * yubal: drop the uv 0.7.19 pin The pin came in with the script and was never explained. uv 0.7.19 is from 2025-07-02; yubal's uv.lock has carried revision 3 since at least 2025-12-27, and older uv refuses a newer lockfile revision. The script runs uv sync --frozen, so there is no fallback. yubal declares no required-version of its own, so latest is what it gets - and if it ever pins one, that pin is now honoured.	2026-09-22 16:06:15 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	9f47f1fa03	Update CHANGELOG.md (#17437 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-22 12:31:47 +00:00
CanbiZ (MickLesk)	f212f93d89	Stop generating header filenames with a newline in them (#17435 ) generate-app-headers.sh read APP with a plain grep -oP, so a script that sets APP twice yielded both lines and the filename became "almalinux almalinux${var_version}vm". Three of those are in the tree and they make main impossible to check out on Windows. Nothing reads vm/headers: get_header fetches banners from the core repo, which already carries clean almalinux, debian and ubuntu.	2026-09-22 14:30:44 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	994bd8787a	Update CHANGELOG.md (#17434 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-22 10:56:10 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	41a64a83d9	Update CHANGELOG.md (#17432 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-22 08:59:38 +00:00
Owen Voke	53125f4e08	fix(invoiceshelf): re-link storage during update (#17431 ) The update script doesn't run `php artisan storage:link`, so the symlink at `public/storage` is left pointing at the old release path after an update. As a result, uploaded images 404 in the frontend until the link is recreated by hand. This change runs `storage:link` after the release is swapped in, to ensure that the storage path is symlinked correctly.	2026-09-22 10:59:09 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	b5aa23e1bc	Update CHANGELOG.md (#17427 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-22 06:15:59 +00:00
Sascha Henke	cb842007ea	fix(alpine-it-tools): write version file after a successful update (#17421 ) update_script() compared the upstream tag against /opt/${APP}_version.txt but never wrote it back, so the stored version stayed at whatever the installer wrote. Every subsequent run took the update branch, wiping the web root and re-downloading the full release archive even with no new upstream release. Write the tag after a successful update, matching what the installer already does at install/alpine-it-tools-install.sh:42. Closes #17420	2026-09-22 08:15:30 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	830abd4eb2	Update CHANGELOG.md (#17426 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-22 05:32:48 +00:00
Rene NulschandClaude Opus 5	3915f7a5c0	Umami: Align pnpm with engines.pnpm on update (#17404 ) Umami 3.4.0 pins engines.pnpm to 12.3.4. update_script() never refreshed pnpm, so containers installed with pnpm < 12 fail at pnpm install with ERR_PNPM_UNSUPPORTED_ENGINE after the service was already stopped and the old release replaced. Read engines.pnpm from the deployed package.json and pass it to setup_nodejs (same approach as ct/seerr.sh), falling back to latest. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>	2026-09-22 07:32:24 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	e00809902f	Update CHANGELOG.md (#17423 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-21 21:30:04 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	41328d66c4	Update CHANGELOG.md (#17417 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-21 15:16:42 +00:00
push-app-to-main[bot]andCanbiZ	e0980b06b1	AudioMuse-AI (#17415 ) * Add audiomuse-ai (ct) * Uncomment var_arm64 variable in audiomuse-ai.sh Uncomment var_arm64 variable assignment for user input. --------- Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com> Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>	2026-09-21 17:16:05 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	011cb8b4f1	Update CHANGELOG.md (#17414 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-21 13:46:05 +00:00
maksimtechandClaude Opus 5	84b272c6bc	fix(portabase): meet the default admin password rules (#17384 ) Portabase creates the default admin from AUTH_DEFAULT_PASSWORD and checks it with assertValidPassword (src/utils/password.ts): at least 8 characters, an uppercase letter, a lowercase letter, a number and a special character. The generated password is alphanumeric only, so the first start fails with "Password must contain at least 1 special character". Generate until each class is present rather than appending fixed characters, and leave #, $, quotes and backticks out of the charset, because the value is written unquoted into .env. Fixes #17370 Co-authored-by: Claude Opus 5 <claude-opus-5@anthropic.com>	2026-09-21 15:45:35 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	e24b690307	Update CHANGELOG.md (#17413 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-21 13:44:35 +00:00
CanbiZ (MickLesk)	1ca4284ac3	truenas-vm: strip the G before the storage allocation (#17407 ) storage:N wants a plain number; vm_prompt_disk_size returns 32G, so the advanced path failed with "unable to parse zfs volume name '32G'".	2026-09-21 15:44:05 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	977db91cbe	Update CHANGELOG.md (#17412 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-21 12:54:27 +00:00
Dopch	2e5df311e6	Fix local snmpd community string setup (#17363 ) snmpd sed placement for community string is using the wrong variable RANDOMSTRINGHERE need to be RANDOMSTRINGGOESHERE	2026-09-21 14:54:02 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	a6cd257253	Update CHANGELOG.md (#17411 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-21 12:53:59 +00:00
Curious, aren't we?	af047da360	fix(iventoy): preserve release data and migrate legacy service launchers (#17161 )	2026-09-21 14:53:29 +02:00