Update CHANGELOG.md (#9345)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -10,6 +10,23 @@
 > [!CAUTION]
 Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit the project's popularity for potentially malicious purposes.
 
+## 2025-11-22
+
+## 2025-11-21
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - plex: prevent [] syntax issue [@MickLesk](https://github.com/MickLesk) ([#9318](https://github.com/community-scripts/ProxmoxVE/pull/9318))
+    - fix: karakeep strip "v" from release version [@CrazyWolf13](https://github.com/CrazyWolf13) ([#9324](https://github.com/community-scripts/ProxmoxVE/pull/9324))
+    - NetVisor: fix grep in update [@vhsdream](https://github.com/vhsdream) ([#9334](https://github.com/community-scripts/ProxmoxVE/pull/9334))
+    - Immich: pin correct version [@vhsdream](https://github.com/vhsdream) ([#9332](https://github.com/community-scripts/ProxmoxVE/pull/9332))
+
+  - #### 🔧 Refactor
+
+    - Refactor IPv6 disable logic and add 'disable' option [@MickLesk](https://github.com/MickLesk) ([#9326](https://github.com/community-scripts/ProxmoxVE/pull/9326))
+
 ## 2025-11-20
 
 ### 🚀 Updated Scripts
@@ -20,6 +37,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### ✨ New Features
 
+    - Immich v2.3.1: OpenVINO tuning, OCR fixes, Maintenance mode, workflows/plugin framework [@vhsdream](https://github.com/vhsdream) ([#9310](https://github.com/community-scripts/ProxmoxVE/pull/9310))
     - kasm: add: update [@CrazyWolf13](https://github.com/CrazyWolf13) ([#9253](https://github.com/community-scripts/ProxmoxVE/pull/9253))
     - tools/pve: expand PVE support to 9.0–9.1 (post-install & netdata) [@MickLesk](https://github.com/MickLesk) ([#9298](https://github.com/community-scripts/ProxmoxVE/pull/9298))
 

ct/immich.sh

@@ -61,6 +61,15 @@ EOF
     msg_ok "Installed libmimalloc3"
   fi
 
+  if [[ ! -f /etc/apt/sources.list.d/mise.list ]]; then
+    msg_info "Installing Mise"
+    curl -fSs https://mise.jdx.dev/gpg-key.pub | tee /etc/apt/keyrings/mise-archive-keyring.pub 1>/dev/null
+    echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" | tee /etc/apt/sources.list.d/mise.list
+    $STD apt update
+    $STD apt install -y mise
+    msg_ok "Installed Mise"
+  fi
+
   STAGING_DIR=/opt/staging
   BASE_DIR=${STAGING_DIR}/base-images
   SOURCE_DIR=${STAGING_DIR}/image-source
@@ -93,7 +102,7 @@ EOF
     msg_ok "Image-processing libraries up to date"
   fi
 
-  RELEASE="2.2.3"
+  RELEASE="2.3.1"
   if check_for_gh_release "immich" "immich-app/immich" "${RELEASE}"; then
     msg_info "Stopping Services"
     systemctl stop immich-web
@@ -121,6 +130,7 @@ EOF
     UPLOAD_DIR="$(sed -n '/^IMMICH_MEDIA_LOCATION/s/[^=]*=//p' /opt/immich/.env)"
     SRC_DIR="${INSTALL_DIR}/source"
     APP_DIR="${INSTALL_DIR}/app"
+    PLUGIN_DIR="${APP_DIR}/corePlugin"
     ML_DIR="${APP_DIR}/machine-learning"
     GEO_DIR="${INSTALL_DIR}/geodata"
 
@@ -145,9 +155,7 @@ EOF
       rm -rf "${APP_DIR:?}"/*
     )
 
-    rm -rf "$SRC_DIR"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v${RELEASE}" "$SRC_DIR"
-
-    fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v${RELEASE}" "$SRC_DIR"
 
     msg_info "Updating ${APP} web and microservices"
     cd "$SRC_DIR"/server
@@ -180,7 +188,18 @@ EOF
     $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
     cd "$APP_DIR"
     mv "$INSTALL_DIR"/start.sh "$APP_DIR"/bin
-    msg_ok "Updated ${APP} web and microservices"
+
+    # plugins
+    cd "$SRC_DIR"
+    $STD mise trust --ignore ./mise.toml
+    $STD mise trust ./plugins/mise.toml
+    cd plugins
+    $STD mise install
+    $STD mise run build
+    mkdir -p "$PLUGIN_DIR"
+    cp -r ./dist "$PLUGIN_DIR"/dist
+    cp ./manifest.json "$PLUGIN_DIR"
+    msg_ok "Updated ${APP} server, web, cli and plugins"
 
     cd "$SRC_DIR"/machine-learning
     mkdir -p "$ML_DIR" && chown -R immich:immich "$ML_DIR"

ct/karakeep.sh

@@ -82,7 +82,7 @@ function update_script() {
     cd /opt/karakeep/packages/db
     $STD pnpm migrate
     $STD pnpm store prune
-    sed -i "s/^SERVER_VERSION=.*$/SERVER_VERSION=${CHECK_UPDATE_RELEASE}/" /etc/karakeep/karakeep.env
+    sed -i "s/^SERVER_VERSION=.*$/SERVER_VERSION=${CHECK_UPDATE_RELEASE#v}/" /etc/karakeep/karakeep.env
     msg_ok "Updated Karakeep"
 
     msg_info "Starting Services"

ct/netvisor.sh

@@ -51,7 +51,7 @@ function update_script() {
 
     cp /opt/netvisor.env.bak /opt/netvisor/.env
     LOCAL_IP="$(hostname -I | awk '{print $1}')"
-    if ! grep -q "PUBLIC_URL"; then
+    if ! grep -q "PUBLIC_URL" /opt/netvisor/.env; then
       sed -i "\|_PATH=|a\NETVISOR_PUBLIC_URL=http://${LOCAL_IP}:60072" /opt/netvisor/.env
     fi
     sed -i 's|_TARGET=.*$|_URL=http://127.0.0.1:60072|' /opt/netvisor/.env

ct/plex.sh

@@ -23,7 +23,8 @@ function update_script() {
   header_info
   check_container_storage
   check_container_resources
-  if [ ! -f /etc/apt/sources.list.d/plexmediaserver.list ]] && [[ ! -f /etc/apt/sources.list.d/plexmediaserver.sources ]]; then
+  if [[ ! -f /etc/apt/sources.list.d/plexmediaserver.list ]] \
+   && [[ ! -f /etc/apt/sources.list.d/plexmediaserver.sources ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi

frontend/public/json/filebrowser.json

@@ -11,7 +11,7 @@
   "privileged": false,
   "interface_port": 8080,
   "documentation": null,
-  "website": "https://filebrowser.org/features",
+  "website": "https://filebrowser.org/index.html#features",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/file-browser.webp",
   "config_path": "",
   "description": "File Browser offers a user-friendly web interface for managing files within a designated directory. It allows you to perform various actions such as uploading, deleting, previewing, renaming, and editing files.",

frontend/public/json/versions.json

@@ -1,4 +1,199 @@
 [
+  {
+    "name": "TwiN/gatus",
+    "version": "v5.33.0",
+    "date": "2025-11-21T22:54:49Z"
+  },
+  {
+    "name": "BerriAI/litellm",
+    "version": "v1.78.5-stable-patch-1",
+    "date": "2025-11-21T19:57:45Z"
+  },
+  {
+    "name": "laurent22/joplin",
+    "version": "server-v3.4.4",
+    "date": "2025-09-25T13:19:26Z"
+  },
+  {
+    "name": "homarr-labs/homarr",
+    "version": "v1.44.0",
+    "date": "2025-11-21T19:17:09Z"
+  },
+  {
+    "name": "gelbphoenix/autocaliweb",
+    "version": "v0.11.0",
+    "date": "2025-11-21T18:42:15Z"
+  },
+  {
+    "name": "rclone/rclone",
+    "version": "v1.72.0",
+    "date": "2025-11-21T18:20:58Z"
+  },
+  {
+    "name": "readeck/readeck",
+    "version": "0.21.1",
+    "date": "2025-11-21T17:17:52Z"
+  },
+  {
+    "name": "mattermost/mattermost",
+    "version": "v10.11.8",
+    "date": "2025-11-21T17:06:07Z"
+  },
+  {
+    "name": "home-assistant/core",
+    "version": "2025.11.3",
+    "date": "2025-11-21T17:03:22Z"
+  },
+  {
+    "name": "Bubka/2FAuth",
+    "version": "v5.6.1",
+    "date": "2025-11-21T16:51:21Z"
+  },
+  {
+    "name": "steveiliop56/tinyauth",
+    "version": "v4.0.1",
+    "date": "2025-10-15T16:53:55Z"
+  },
+  {
+    "name": "BookStackApp/BookStack",
+    "version": "v25.11.3",
+    "date": "2025-11-21T14:06:50Z"
+  },
+  {
+    "name": "pommee/goaway",
+    "version": "v0.62.19",
+    "date": "2025-11-21T13:24:09Z"
+  },
+  {
+    "name": "fuma-nama/fumadocs",
+    "version": "fumadocs-ui@16.1.0",
+    "date": "2025-11-21T13:02:57Z"
+  },
+  {
+    "name": "forgejo/forgejo",
+    "version": "v13.0.3",
+    "date": "2025-11-21T12:43:04Z"
+  },
+  {
+    "name": "bunkerity/bunkerweb",
+    "version": "v1.6.5",
+    "date": "2025-10-06T15:25:17Z"
+  },
+  {
+    "name": "chrisbenincasa/tunarr",
+    "version": "v0.23.0-alpha.24",
+    "date": "2025-11-21T12:16:39Z"
+  },
+  {
+    "name": "rcourtman/Pulse",
+    "version": "v4.32.3",
+    "date": "2025-11-21T11:16:25Z"
+  },
+  {
+    "name": "seriousm4x/UpSnap",
+    "version": "5.2.4",
+    "date": "2025-11-21T10:25:05Z"
+  },
+  {
+    "name": "emqx/emqx",
+    "version": "e6.0.2-beta.2",
+    "date": "2025-11-21T10:20:27Z"
+  },
+  {
+    "name": "sabnzbd/sabnzbd",
+    "version": "4.5.5",
+    "date": "2025-10-24T11:12:22Z"
+  },
+  {
+    "name": "openobserve/openobserve",
+    "version": "v0.16.3",
+    "date": "2025-11-21T08:54:06Z"
+  },
+  {
+    "name": "booklore-app/booklore",
+    "version": "v1.11.0",
+    "date": "2025-11-21T08:09:03Z"
+  },
+  {
+    "name": "MariaDB/server",
+    "version": "mariadb-12.1.2",
+    "date": "2025-11-18T15:16:21Z"
+  },
+  {
+    "name": "morpheus65535/bazarr",
+    "version": "v1.5.3",
+    "date": "2025-09-20T12:12:33Z"
+  },
+  {
+    "name": "Jackett/Jackett",
+    "version": "v0.24.338",
+    "date": "2025-11-21T05:55:33Z"
+  },
+  {
+    "name": "bluenviron/mediamtx",
+    "version": "v1.15.4",
+    "date": "2025-11-21T01:21:03Z"
+  },
+  {
+    "name": "jeedom/core",
+    "version": "4.4.20",
+    "date": "2025-11-21T00:27:06Z"
+  },
+  {
+    "name": "TasmoAdmin/TasmoAdmin",
+    "version": "v4.3.2",
+    "date": "2025-10-18T12:11:00Z"
+  },
+  {
+    "name": "project-zot/zot",
+    "version": "v2.1.11",
+    "date": "2025-11-20T20:14:44Z"
+  },
+  {
+    "name": "saltstack/salt",
+    "version": "v3007.9",
+    "date": "2025-11-20T17:58:32Z"
+  },
+  {
+    "name": "keycloak/keycloak",
+    "version": "26.4.5",
+    "date": "2025-11-12T15:24:23Z"
+  },
+  {
+    "name": "msgbyte/tianji",
+    "version": "v1.30.12",
+    "date": "2025-11-20T16:13:19Z"
+  },
+  {
+    "name": "neo4j/neo4j",
+    "version": "5.26.17",
+    "date": "2025-11-20T16:09:28Z"
+  },
+  {
+    "name": "meilisearch/meilisearch",
+    "version": "prototype-v1.26.0.arm-native-docker-build-1",
+    "date": "2025-11-20T15:38:39Z"
+  },
+  {
+    "name": "duplicati/duplicati",
+    "version": "v2.2.0.101-2.2.0.101_canary_2025-11-20",
+    "date": "2025-11-20T14:50:45Z"
+  },
+  {
+    "name": "NodeBB/NodeBB",
+    "version": "v4.6.3",
+    "date": "2025-11-20T14:13:22Z"
+  },
+  {
+    "name": "n8n-io/n8n",
+    "version": "n8n@1.120.4",
+    "date": "2025-11-19T12:57:55Z"
+  },
+  {
+    "name": "SigNoz/signoz",
+    "version": "v0.102.1",
+    "date": "2025-11-20T12:20:18Z"
+  },
   {
     "name": "kimai/kimai",
     "version": "2.44.0",
@@ -9,26 +204,11 @@
     "version": "v2.1.1",
     "date": "2025-11-20T10:54:07Z"
   },
-  {
-    "name": "fuma-nama/fumadocs",
-    "version": "fumadocs-ui@16.0.15",
-    "date": "2025-11-20T10:52:04Z"
-  },
-  {
-    "name": "mattermost/mattermost",
-    "version": "v10.11.7",
-    "date": "2025-11-17T08:40:53Z"
-  },
   {
     "name": "Athou/commafeed",
     "version": "5.12.0",
     "date": "2025-11-20T06:18:58Z"
   },
-  {
-    "name": "Jackett/Jackett",
-    "version": "v0.24.336",
-    "date": "2025-11-20T05:55:54Z"
-  },
   {
     "name": "documenso/documenso",
     "version": "v2.0.14",
@@ -44,31 +224,11 @@
     "version": "v1.56.0",
     "date": "2025-11-20T02:28:35Z"
   },
-  {
-    "name": "BerriAI/litellm",
-    "version": "v1.80.0.dev6",
-    "date": "2025-11-20T02:03:21Z"
-  },
-  {
-    "name": "jeedom/core",
-    "version": "4.4.20",
-    "date": "2025-11-20T00:27:04Z"
-  },
-  {
-    "name": "steveiliop56/tinyauth",
-    "version": "v4.0.1",
-    "date": "2025-10-15T16:53:55Z"
-  },
   {
     "name": "coder/code-server",
     "version": "v4.106.2",
     "date": "2025-11-20T00:23:05Z"
   },
-  {
-    "name": "keycloak/keycloak",
-    "version": "26.4.5",
-    "date": "2025-11-12T15:24:23Z"
-  },
   {
     "name": "esphome/esphome",
     "version": "2025.11.0",
@@ -104,16 +264,6 @@
     "version": "0.51.3",
     "date": "2025-11-19T15:45:28Z"
   },
-  {
-    "name": "NodeBB/NodeBB",
-    "version": "v4.6.2",
-    "date": "2025-11-19T15:31:59Z"
-  },
-  {
-    "name": "BookStackApp/BookStack",
-    "version": "v25.11.2",
-    "date": "2025-11-19T15:26:29Z"
-  },
   {
     "name": "grafana/grafana",
     "version": "v12.3.0",
@@ -139,11 +289,6 @@
     "version": "v0.13.0",
     "date": "2025-11-19T14:16:07Z"
   },
-  {
-    "name": "n8n-io/n8n",
-    "version": "n8n@1.120.4",
-    "date": "2025-11-19T12:57:55Z"
-  },
   {
     "name": "AdguardTeam/AdGuardHome",
     "version": "v0.107.69",
@@ -159,16 +304,6 @@
     "version": "v7.5.0",
     "date": "2025-11-19T08:36:29Z"
   },
-  {
-    "name": "SigNoz/signoz",
-    "version": "v0.102.0",
-    "date": "2025-11-19T06:53:59Z"
-  },
-  {
-    "name": "morpheus65535/bazarr",
-    "version": "v1.5.3",
-    "date": "2025-09-20T12:12:33Z"
-  },
   {
     "name": "element-hq/synapse",
     "version": "v1.143.0rc1",
@@ -184,16 +319,6 @@
     "version": "v1.0.1-stable",
     "date": "2025-11-10T16:51:44Z"
   },
-  {
-    "name": "bunkerity/bunkerweb",
-    "version": "testing",
-    "date": "2025-11-17T16:24:26Z"
-  },
-  {
-    "name": "chrisbenincasa/tunarr",
-    "version": "v0.23.0-alpha.23",
-    "date": "2025-11-18T21:36:15Z"
-  },
   {
     "name": "umami-software/umami",
     "version": "v3.0.1",
@@ -209,11 +334,6 @@
     "version": "v3.6.2",
     "date": "2025-11-18T16:25:16Z"
   },
-  {
-    "name": "MariaDB/server",
-    "version": "mariadb-12.1.2",
-    "date": "2025-11-18T15:16:21Z"
-  },
   {
     "name": "redis/redis",
     "version": "8.4.0",
@@ -229,11 +349,6 @@
     "version": "v0.7.5",
     "date": "2025-11-18T10:50:21Z"
   },
-  {
-    "name": "emqx/emqx",
-    "version": "e6.1.0-alpha.1",
-    "date": "2025-11-18T10:33:45Z"
-  },
   {
     "name": "wazuh/wazuh",
     "version": "coverity-w47-4.14.2",
@@ -274,11 +389,6 @@
     "version": "v1.4.5",
     "date": "2025-11-17T15:20:35Z"
   },
-  {
-    "name": "meilisearch/meilisearch",
-    "version": "latest",
-    "date": "2025-11-17T09:29:20Z"
-  },
   {
     "name": "rabbitmq/rabbitmq-server",
     "version": "v4.2.1",
@@ -309,11 +419,6 @@
     "version": "v0.21.0",
     "date": "2025-08-23T18:33:53Z"
   },
-  {
-    "name": "TwiN/gatus",
-    "version": "v5.32.0",
-    "date": "2025-11-16T21:08:56Z"
-  },
   {
     "name": "binwiederhier/ntfy",
     "version": "v2.15.0",
@@ -324,11 +429,6 @@
     "version": "3.3.8",
     "date": "2025-11-16T17:04:37Z"
   },
-  {
-    "name": "msgbyte/tianji",
-    "version": "v1.30.11",
-    "date": "2025-11-16T16:21:04Z"
-  },
   {
     "name": "AlexxIT/go2rtc",
     "version": "v1.9.12",
@@ -384,16 +484,6 @@
     "version": "v0.16.1",
     "date": "2025-11-14T22:50:06Z"
   },
-  {
-    "name": "home-assistant/core",
-    "version": "2025.11.2",
-    "date": "2025-11-14T22:10:50Z"
-  },
-  {
-    "name": "homarr-labs/homarr",
-    "version": "v1.43.3",
-    "date": "2025-11-14T19:16:17Z"
-  },
   {
     "name": "mealie-recipes/mealie",
     "version": "v3.5.0",
@@ -404,11 +494,6 @@
     "version": "22.0.3",
     "date": "2025-11-14T14:49:25Z"
   },
-  {
-    "name": "openobserve/openobserve",
-    "version": "v0.16.2",
-    "date": "2025-11-14T12:05:36Z"
-  },
   {
     "name": "zitadel/zitadel",
     "version": "v4.7.0",
@@ -434,21 +519,11 @@
     "version": "v0.86.1",
     "date": "2025-11-14T05:05:44Z"
   },
-  {
-    "name": "rcourtman/Pulse",
-    "version": "v4.31.0",
-    "date": "2025-11-14T00:18:50Z"
-  },
   {
     "name": "gristlabs/grist-core",
     "version": "v1.7.7",
     "date": "2025-11-13T21:28:44Z"
   },
-  {
-    "name": "pommee/goaway",
-    "version": "v0.62.18",
-    "date": "2025-11-13T19:49:21Z"
-  },
   {
     "name": "pocketbase/pocketbase",
     "version": "v0.33.0",
@@ -564,11 +639,6 @@
     "version": "v1.0.0-beta19",
     "date": "2025-11-09T17:26:30Z"
   },
-  {
-    "name": "duplicati/duplicati",
-    "version": "v2.2.0.1_stable_2025-11-09",
-    "date": "2025-11-09T17:21:54Z"
-  },
   {
     "name": "Cleanuparr/Cleanuparr",
     "version": "v2.4.5",
@@ -664,11 +734,6 @@
     "version": "v0.9.1",
     "date": "2025-11-06T02:26:53Z"
   },
-  {
-    "name": "neo4j/neo4j",
-    "version": "5.26.16",
-    "date": "2025-11-05T20:41:40Z"
-  },
   {
     "name": "leiweibau/Pi.Alert",
     "version": "v2025-11-05",
@@ -824,21 +889,11 @@
     "version": "v1.11.1",
     "date": "2025-10-29T22:09:26Z"
   },
-  {
-    "name": "laurent22/joplin",
-    "version": "server-v3.4.4",
-    "date": "2025-09-25T13:19:26Z"
-  },
   {
     "name": "apache/cassandra",
     "version": "cassandra-5.0.6",
     "date": "2025-10-29T07:40:47Z"
   },
-  {
-    "name": "booklore-app/booklore",
-    "version": "v1.10.0",
-    "date": "2025-10-28T19:04:35Z"
-  },
   {
     "name": "pi-hole/pi-hole",
     "version": "v6.2.2",
@@ -864,21 +919,11 @@
     "version": "v25.8.0",
     "date": "2025-10-26T14:23:37Z"
   },
-  {
-    "name": "forgejo/forgejo",
-    "version": "v13.0.2",
-    "date": "2025-10-26T06:33:05Z"
-  },
   {
     "name": "usememos/memos",
     "version": "v0.25.2",
     "date": "2025-10-24T12:30:04Z"
   },
-  {
-    "name": "sabnzbd/sabnzbd",
-    "version": "4.5.5",
-    "date": "2025-10-24T11:12:22Z"
-  },
   {
     "name": "crowdsecurity/crowdsec",
     "version": "v1.7.3",
@@ -904,26 +949,11 @@
     "version": "release-1.24.1",
     "date": "2025-10-22T10:28:00Z"
   },
-  {
-    "name": "bluenviron/mediamtx",
-    "version": "v1.15.3",
-    "date": "2025-10-21T19:56:55Z"
-  },
   {
     "name": "kyantech/Palmr",
     "version": "v3.2.5-beta",
     "date": "2025-10-21T16:49:14Z"
   },
-  {
-    "name": "rclone/rclone",
-    "version": "v1.71.2",
-    "date": "2025-10-20T15:25:52Z"
-  },
-  {
-    "name": "seriousm4x/UpSnap",
-    "version": "5.2.3",
-    "date": "2025-10-19T20:50:15Z"
-  },
   {
     "name": "Part-DB/Part-DB-server",
     "version": "v2.2.1",
@@ -939,21 +969,6 @@
     "version": "v4.5.0",
     "date": "2025-10-18T22:00:50Z"
   },
-  {
-    "name": "project-zot/zot",
-    "version": "v2.1.10",
-    "date": "2025-10-18T18:46:36Z"
-  },
-  {
-    "name": "TasmoAdmin/TasmoAdmin",
-    "version": "v4.3.2",
-    "date": "2025-10-18T12:11:00Z"
-  },
-  {
-    "name": "readeck/readeck",
-    "version": "0.20.4",
-    "date": "2025-10-18T10:00:42Z"
-  },
   {
     "name": "diced/zipline",
     "version": "v4.3.2",
@@ -1004,11 +1019,6 @@
     "version": "v5.0.85",
     "date": "2025-10-12T19:55:18Z"
   },
-  {
-    "name": "gelbphoenix/autocaliweb",
-    "version": "v0.10.4",
-    "date": "2025-10-11T19:53:39Z"
-  },
   {
     "name": "projectsend/projectsend",
     "version": "r1945",
@@ -1104,11 +1114,6 @@
     "version": "v0.17.0",
     "date": "2025-09-19T22:23:28Z"
   },
-  {
-    "name": "saltstack/salt",
-    "version": "v3007.8",
-    "date": "2025-09-18T18:19:04Z"
-  },
   {
     "name": "docmost/docmost",
     "version": "v0.23.2",
@@ -1314,11 +1319,6 @@
     "version": "v1.11.11",
     "date": "2025-06-18T18:04:50Z"
   },
-  {
-    "name": "Bubka/2FAuth",
-    "version": "v5.6.0",
-    "date": "2025-06-18T12:19:54Z"
-  },
   {
     "name": "TriliumNext/Notes",
     "version": "v0.95.0",

install/documenso-install.sh

@@ -71,7 +71,11 @@ export TURBO_CACHE=1
 export NEXT_TELEMETRY_DISABLED=1
 export CYPRESS_INSTALL_BINARY=0
 export NODE_OPTIONS="--max-old-space-size=4096"
+$STD turbo prune --scope=@documenso/remix --docker
+cd out
+cp -r json/* .
 $STD npm ci
+cp -r full/* .
 $STD turbo run build --filter=@documenso/remix
 $STD npm run prisma:migrate-deploy
 echo "${RELEASE}" >"/opt/${APPLICATION}_version.txt"

install/immich-install.sh

@@ -84,6 +84,13 @@ if [[ "$CTTYPE" == "0" && -d /dev/dri ]]; then
 fi
 msg_ok "Dependencies Installed"
 
+msg_info "Installing Mise"
+curl -fSs https://mise.jdx.dev/gpg-key.pub | tee /etc/apt/keyrings/mise-archive-keyring.pub 1>/dev/null
+echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" | tee /etc/apt/sources.list.d/mise.list
+$STD apt update
+$STD apt install -y mise
+msg_ok "Installed Mise"
+
 read -r -p "${TAB3}Install OpenVINO dependencies for Intel HW-accelerated machine-learning? y/N " prompt
 if [[ ${prompt,,} =~ ^(y|yes)$ ]]; then
   msg_info "Installing OpenVINO dependencies"
@@ -277,12 +284,13 @@ INSTALL_DIR="/opt/${APPLICATION}"
 UPLOAD_DIR="${INSTALL_DIR}/upload"
 SRC_DIR="${INSTALL_DIR}/source"
 APP_DIR="${INSTALL_DIR}/app"
+PLUGIN_DIR="${APP_DIR}/corePlugin"
 ML_DIR="${APP_DIR}/machine-learning"
 GEO_DIR="${INSTALL_DIR}/geodata"
 mkdir -p "$INSTALL_DIR"
 mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}
 
-fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v2.2.3" "$SRC_DIR"
+fetch_and_deploy_gh_release "immich" "immich-app/immich" "tarball" "v2.3.1" "$SRC_DIR"
 
 msg_info "Installing ${APPLICATION} (patience)"
 
@@ -314,7 +322,18 @@ cp LICENSE "$APP_DIR"
 $STD pnpm --filter @immich/sdk --filter @immich/cli --frozen-lockfile install
 $STD pnpm --filter @immich/sdk --filter @immich/cli build
 $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
-msg_ok "Installed Immich Server and Web Components"
+
+# plugins
+cd "$SRC_DIR"
+$STD mise trust --ignore ./mise.toml
+$STD mise trust ./plugins/mise.toml
+cd plugins
+$STD mise install
+$STD mise run build
+mkdir -p "$PLUGIN_DIR"
+cp -r ./dist "$PLUGIN_DIR"/dist
+cp ./manifest.json "$PLUGIN_DIR"
+msg_ok "Installed Immich Server, Web and Plugin Components"
 
 cd "$SRC_DIR"/machine-learning
 $STD useradd -U -s /usr/sbin/nologin -r -M -d "$INSTALL_DIR" immich
@@ -378,6 +397,10 @@ DB_VECTOR_EXTENSION=vectorchord
 REDIS_HOSTNAME=127.0.0.1
 IMMICH_MACHINE_LEARNING_URL=http://127.0.0.1:3003
 MACHINE_LEARNING_CACHE_FOLDER=${INSTALL_DIR}/cache
+## - For OpenVINO only - uncomment below to increase
+## - inference speed while reducing accuracy
+## - Default is FP32
+# MACHINE_LEARNING_OPENVINO_PRECISION=FP16
 
 IMMICH_MEDIA_LOCATION=${UPLOAD_DIR}
 EOF

install/karakeep-install.sh

@@ -64,7 +64,7 @@ export DATA_DIR=/opt/karakeep_data
 karakeep_SECRET=$(openssl rand -base64 36 | cut -c1-24)
 mkdir -p /etc/karakeep
 cat <<EOF >/etc/karakeep/karakeep.env
-SERVER_VERSION="$(cat ~/.karakeep)"
+SERVER_VERSION="$(sed 's/^v//' ~/.karakeep)"
 NEXTAUTH_SECRET="$karakeep_SECRET"
 NEXTAUTH_URL="http://localhost:3000"
 DATA_DIR=${DATA_DIR}

install/mealie-install.sh

@@ -25,14 +25,27 @@ msg_ok "Installed Dependencies"
 
 PYTHON_VERSION="3.12" setup_uv
 POSTGRES_VERSION="16" setup_postgresql
-NODE_MODULE="yarn" NODE_VERSION="24" setup_nodejs
+NODE_MODULE="yarn" NODE_VERSION="20" setup_nodejs
-fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball" "latest" "/opt/mealie"
-PG_DB_NAME="mealie_db" PG_DB_USER="mealie_user" PG_DB_GRANT_SUPERUSER="true" setup_postgresql_db
 
-msg_info "Installing Python Dependencies with uv"
+fetch_and_deploy_gh_release "mealie" "mealie-recipes/mealie" "tarball" "latest" "/opt/mealie"
-cd /opt/mealie
+
-$STD uv sync --frozen --extra pgsql
+msg_info "Setup Database"
-msg_ok "Installed Python Dependencies"
+DB_NAME=mealie_db
+DB_USER=mealie__user
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
+$STD sudo -u postgres psql -c "ALTER USER $DB_USER WITH SUPERUSER;"
+{
+  echo "Mealie-Credentials"
+  echo "Mealie Database User: $DB_USER"
+  echo "Mealie Database Password: $DB_PASS"
+  echo "Mealie Database Name: $DB_NAME"
+} >>~/mealie.creds
+msg_ok "Set up Database"
 
 msg_info "Building Frontend"
 export NUXT_TELEMETRY_DISABLED=1
@@ -41,35 +54,33 @@ $STD yarn install --prefer-offline --frozen-lockfile --non-interactive --product
 $STD yarn generate
 msg_ok "Built Frontend"
 
-msg_info "Copying Built Frontend"
+msg_info "Copying Built Frontend into Backend Package"
-mkdir -p /opt/mealie/mealie/frontend
+cp -r /opt/mealie/frontend/dist /opt/mealie/mealie/frontend
-cp -r /opt/mealie/frontend/dist/* /opt/mealie/mealie/frontend/
 msg_ok "Copied Frontend"
 
-msg_info "Downloading NLTK Data"
+msg_info "Preparing Backend (Poetry)"
-mkdir -p /nltk_data/
+$STD uv venv /opt/mealie/.venv
+$STD /opt/mealie/.venv/bin/python -m ensurepip --upgrade
+$STD /opt/mealie/.venv/bin/python -m pip install --upgrade pip
+$STD /opt/mealie/.venv/bin/pip install uv
 cd /opt/mealie
-$STD uv run python -m nltk.downloader -d /nltk_data averaged_perceptron_tagger_eng
+$STD /opt/mealie/.venv/bin/uv pip install poetry==2.0.1
-msg_ok "Downloaded NLTK Data"
+$STD /opt/mealie/.venv/bin/poetry self add "poetry-plugin-export>=1.9"
+msg_ok "Prepared Poetry"
 
 msg_info "Writing Environment File"
-SECRET=$(openssl rand -hex 32)
-mkdir -p /run/secrets
 cat <<EOF >/opt/mealie/mealie.env
-MEALIE_HOME=/opt/mealie
+HOST=0.0.0.0
-NLTK_DATA=/nltk_data
+PORT=9000
-SECRET=${SECRET}
-
 DB_ENGINE=postgres
 POSTGRES_SERVER=localhost
 POSTGRES_PORT=5432
-POSTGRES_USER=${PG_DB_USER}
+POSTGRES_USER=${DB_USER}
-POSTGRES_PASSWORD=${PG_DB_PASS}
+POSTGRES_PASSWORD=${DB_PASS}
-POSTGRES_DB=${PG_DB_NAME}
+POSTGRES_DB=${DB_NAME}
-
+NLTK_DATA=/nltk_data
 PRODUCTION=true
-HOST=0.0.0.0
+STATIC_FILES=/opt/mealie/frontend/dist
-PORT=9000
 EOF
 msg_ok "Wrote Environment File"
 
@@ -79,32 +90,60 @@ cat <<'EOF' >/opt/mealie/start.sh
 set -a
 source /opt/mealie/mealie.env
 set +a
-exec uv run mealie
+exec /opt/mealie/.venv/bin/mealie
 EOF
 chmod +x /opt/mealie/start.sh
 msg_ok "Created Start Script"
 
+msg_info "Building Mealie Backend Wheel"
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/poetry build --output dist
+MEALIE_VERSION=$(/opt/mealie/.venv/bin/poetry version --short)
+$STD /opt/mealie/.venv/bin/poetry export --only=main --extras=pgsql --output=dist/requirements.txt
+echo "mealie[pgsql]==$MEALIE_VERSION \\" >>dist/requirements.txt
+/opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.whl | tail -n1 | tr -d '\n' >>dist/requirements.txt
+echo " \\" >>dist/requirements.txt
+/opt/mealie/.venv/bin/poetry run pip hash dist/mealie-$MEALIE_VERSION*.tar.gz | tail -n1 >>dist/requirements.txt
+msg_ok "Built Wheel + Requirements"
+
+msg_info "Installing Mealie via uv"
+cd /opt/mealie
+$STD /opt/mealie/.venv/bin/uv pip install --require-hashes -r /opt/mealie/dist/requirements.txt --find-links dist
+msg_ok "Installed Mealie"
+
+msg_info "Downloading NLTK Data"
+mkdir -p /nltk_data/
+$STD /opt/mealie/.venv/bin/python -m nltk.downloader -d /nltk_data averaged_perceptron_tagger_eng
+msg_ok "Downloaded NLTK Data"
+
+msg_info "Set Symbolic Links for Mealie"
+ln -sf /opt/mealie/.venv/bin/mealie /usr/local/bin/mealie
+ln -sf /opt/mealie/.venv/bin/poetry /usr/local/bin/poetry
+msg_ok "Set Symbolic Links"
+
 msg_info "Creating Systemd Service"
-cat <<'EOF' >/etc/systemd/system/mealie.service
+cat <<EOF >/etc/systemd/system/mealie.service
 [Unit]
-Description=Mealie Recipe Manager
+Description=Mealie Backend Server
 After=network.target postgresql.service
-Wants=postgresql.service
 
 [Service]
-Type=simple
 User=root
 WorkingDirectory=/opt/mealie
 ExecStart=/opt/mealie/start.sh
-Restart=on-failure
+Restart=always
-RestartSec=5
 
 [Install]
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now mealie
-msg_ok "Created and Started Service"
+msg_ok "Created Service"
 
 motd_ssh
 customize
-cleanup_lxc
+
+msg_info "Cleaning up"
+$STD apt -y autoremove
+$STD apt -y autoclean
+$STD apt -y clean
+msg_ok "Cleaned"

misc/alpine-install.func

@@ -13,14 +13,17 @@ load_functions
 verb_ip6() {
   set_std_mode # Set STD mode based on VERBOSE
 
-  if [ "$IPV6_METHOD" == "none" ] || [ "$DISABLEIPV6" == "yes" ]; then
+  if [ "$IPV6_METHOD" == "disable" ]; then
-    msg_info "Disabling IPv6"
+    msg_info "Disabling IPv6 (this may affect some services)"
     $STD sysctl -w net.ipv6.conf.all.disable_ipv6=1
     $STD sysctl -w net.ipv6.conf.default.disable_ipv6=1
     $STD sysctl -w net.ipv6.conf.lo.disable_ipv6=1
-    echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
+    mkdir -p /etc/sysctl.d
-    echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.conf
+    $STD tee /etc/sysctl.d/99-disable-ipv6.conf >/dev/null <<EOF
-    echo "net.ipv6.conf.lo.disable_ipv6 = 1" >>/etc/sysctl.conf
+net.ipv6.conf.all.disable_ipv6 = 1
+net.ipv6.conf.default.disable_ipv6 = 1
+net.ipv6.conf.lo.disable_ipv6 = 1
+EOF
     $STD rc-update add sysctl default
     msg_ok "Disabled IPv6"
   fi

misc/build.func

@@ -627,11 +627,12 @@ advanced_settings() {
   # IPv6 Address Management selection
   while true; do
     IPV6_METHOD=$(whiptail --backtitle "Proxmox VE Helper Scripts" --menu \
-      "Select IPv6 Address Management Type:" 15 58 4 \
+      "Select IPv6 Address Management Type:" 16 70 5 \
-      "auto" "SLAAC/AUTO (recommended, default)" \
+      "auto" "SLAAC/AUTO (recommended) - Dynamic IPv6 from network" \
-      "dhcp" "DHCPv6" \
+      "dhcp" "DHCPv6 - DHCP-assigned IPv6 address" \
-      "static" "Static (manual entry)" \
+      "static" "Static - Manual IPv6 address configuration" \
-      "none" "Disabled" \
+      "none" "None - No IPv6 assignment (most containers)" \
+      "disable" "Fully Disabled - (breaks some services)" \
       --default-item "auto" 3>&1 1>&2 2>&3)
     [ $? -ne 0 ] && exit_script
 
@@ -680,7 +681,15 @@ advanced_settings() {
       break
       ;;
     none)
-      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}Disabled${CL}"
+      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}None${CL}"
+      IPV6_ADDR="none"
+      IPV6_GATE=""
+      break
+      ;;
+    disable)
+      whiptail --backtitle "Proxmox VE Helper Scripts" --msgbox \
+        "⚠️  WARNING - FULLY DISABLE IPv6:\n\nThis will completely disable IPv6 inside the container via sysctl.\n\nSide Effects:\n  • Services requiring IPv6 will fail\n  • Localhost IPv6 (::1) will not work\n  • Some applications may not start\n\nOnly use if you have a specific reason to completely disable IPv6.\n\nFor most use cases, select 'None' instead." 14 70
+      echo -e "${NETWORK}${BOLD}${DGN}IPv6: ${BGN}Fully Disabled (IPv6 disabled via sysctl)${CL}"
       IPV6_ADDR="none"
       IPV6_GATE=""
       break

misc/install.func

@@ -15,12 +15,16 @@ load_functions
 verb_ip6() {
   set_std_mode # Set STD mode based on VERBOSE
 
-  if [ "$IPV6_METHOD" == "none" ] || [ "$DISABLEIPV6" == "yes" ]; then
+  if [ "$IPV6_METHOD" == "disable" ]; then
-    msg_info "Disabling IPv6"
+    msg_info "Disabling IPv6 (this may affect some services)"
-    $STD echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
+    mkdir -p /etc/sysctl.d
-    $STD echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.conf
+    $STD tee /etc/sysctl.d/99-disable-ipv6.conf >/dev/null <<EOF
-    $STD echo "net.ipv6.conf.lo.disable_ipv6 = 1" >>/etc/sysctl.conf
+# Disable IPv6 (set by community-scripts)
-    $STD sysctl -p
+net.ipv6.conf.all.disable_ipv6 = 1
+net.ipv6.conf.default.disable_ipv6 = 1
+net.ipv6.conf.lo.disable_ipv6 = 1
+EOF
+    $STD sysctl -p /etc/sysctl.d/99-disable-ipv6.conf
     msg_ok "Disabled IPv6"
   fi
 }

misc/tools.func

@@ -4439,7 +4439,7 @@ function setup_rust() {
     }
 
     # Update to latest patch version
-    $STD rustup update "$RUST_TOOLCHAIN" || true
+    $STD rustup update "$RUST_TOOLCHAIN" </dev/null || true
 
     # Ensure PATH is updated for current shell session
     export PATH="$CARGO_BIN:$PATH"