Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content

Packages

5.7k Topics 57.1k Posts

Questions about packages in the App Store

Subcategories


  • 9 79
    9 Topics
    79 Posts
    Package UpdatesP
    [1.22.1] Update 2FAuth to 9.0.1 Full Changelog issue #579 Upgrading to v9.0.0 (docker latest) does not create the twofaccount_user_favorites table issue #580 Transfer ownership doesn't work when initiated from an openid user issue #581 Login page always displays in English despite browser language being set to Chinese Fix an Observable Response Discrepancy on user account. Fix possible host header injection in password reset and WebAuthn recovery emails (thx @akash111-hue). Fix previously issued Personal Access Tokens being authorized when SSO-only mode is enabled and PAT usage is not allowed (thx @JimmypageLedz). Fix the Auto-logout being bypassed on web routes (thx @d3do-23). Fix SSRF protection bypass of the remote icon fetching guard using IPv4-mapped IPv6 addresses (thx @xHacktivist).
  • 10 89
    10 Topics
    89 Posts
    Package UpdatesP
    [1.10.1] Update Ackee to 3.7.1 Full Changelog
  • 7 65
    7 Topics
    65 Posts
    Package UpdatesP
    [1.32.0] Update actual to 26.11.0 Full Changelog View release notes
  • 41 439
    41 Topics
    439 Posts
    Package UpdatesP
    [1.15.1] Update AdGuardHome to 0.107.80 Full Changelog Client settings in the new web interface: Use global settings now applies to Protection only, blocked services have a separate Use global blocked services switch, and upstream DNS servers and the DNS cache are always editable. Invalid SVCB record from DDR when DoH routes are empty. Schedule shift on clock change cases (#8670). Incorrect behaviour on the first launch with the --check-config flag. Reading partially received TCP prefix. A panic when updating AdGuard Home binary via the command line with use_private_ptr_resolvers set to true (#8613). log.enabled set to false leaving the legacy logger enabled (#8565). DHCP server persisting uncommitted leases with zero expiry after DHCPDISCOVER messages (#8572). DHCPv4 settings not being saved when an IPv6-capable interface is selected and DHCPv6 is not configured (#8608). DHCP not being enabled when only the DHCPv6 section is configured.
  • 12 115
    12 Topics
    115 Posts
    S
    This look like a good replacement for Alltube (which we were using) https://github.com/alexta69/metube
  • 4 10
    4 Topics
    10 Posts
    Package UpdatesP
    [0.5.0] Update affine | stage to 0.27.4
  • 16 199
    16 Topics
    199 Posts
    Package UpdatesP
    [1.34.0] Update ampache to 8.4.0 Full Changelog reborn gains four new colors: Dusk, Dawn, Sepia and High-Contrast reborn gains nine colors modeled on Nord, Dracula, Gruvbox, Catppuccin Mocha, Tokyo Night, Monokai, Ros Pine, Solarized Dark and Solarized Light New catalog_clean_empty_dirs key; Clean/Garbage Collection/Scan Folder can now also remove an empty directory from disk, not just its row New folder search type (name, path, parent folder, catalog, ratings, play counts, dates), web Search page and API8 advanced_search Grid view browses (album, artist, playlist, etc.) gain a Sort By control, like the list view already had Removed the Amazon art search plugin; Amazon shut down the API it used years ago Deleting an album_disk row now removes just that disk; the album itself goes once its last disk is gone Add, Clean and Verify maintain catalog_map and album/artist counts per row, instead of a full resync after every scan getIndexes could drop artists from a catalog whose folder data was incomplete, not just when it was empty The native API's folders action returned nothing for every catalog and every user
  • 7 Topics
    70 Posts
    Package UpdatesP
    [1.8.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 6 28
    6 Topics
    28 Posts
    K
    @girish I understand. Thanks!
  • 4 25
    4 Topics
    25 Posts
    jamesJ
    Hello @andreasdueren Thanks for the report. Fixing it right now.
  • 8 Topics
    126 Posts
    Package UpdatesP
    [1.102.1] Update audiobookshelf to 2.37.2 Full Changelog File copy and move fails with EPERM on some systems (e.g. TrueNAS) #5637 by @nichwall in #5668 RSS feed cover images not updating after cover change #5306 by @SharonZhu0122 in #5418 Audible search when API returns null products #5176 by @boqiaok in #5430 Upload crash when multipart form repeats file fields by @rtainaan in #5437 Debian package ships audiobookshelf.service with executable bit causing systemd warnings on install/upgrade #5629 ROUTER_BASE_PATH env variable normalized (leading slash, no trailing slash)
  • 10 35
    10 Topics
    35 Posts
    girishG
    Thanks for reporting here @gardinermichael . We have in fact hidden the app package because there were many issues with it and we couldn't manage to get it to be stable . Maybe we should revisit this.
  • 40 415
    40 Topics
    415 Posts
    Package UpdatesP
    [1.40.3] Update Node.js to 24.22.1 for Broccoli2Shell
  • 5 70
    5 Topics
    70 Posts
    Package UpdatesP
    [1.9.2] Update beszel to 0.21.1 Full Changelog Add TLS certificate expiry alert for network monitors (#2627) Add opt-in cgroup CPU and memory accounting (#2505) Add pagination with a shared rows-per-page setting to data tables (#2444) Add IRQ, SoftIRQ and Nice to the CPU usage breakdown (#2647) Add OAUTH_DEFAULT_USER_ROLE environment variable to set the role of new OAuth users (#2516) Fix users being able to reassign record ownership through updates (#2632) Fix dashboard universal tokens appearing in request URLs (#2630) Fix fan sensor reads blocking collection indefinitely (#2638, #2639) Fix HTTPS monitor certificates not being re-checked (now hourly) (#2673) Fix scheduled monitor probes running while the hub isn't requesting stats
  • 13 264
    13 Topics
    264 Posts
    Package UpdatesP
    [2.3.0] Update php-base | final to 8.5-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 1 14
    1 Topics
    14 Posts
    Package UpdatesP
    [1.2.1] Update bugsink to 2.6.3 Full Changelog Replace the C Brotli decoder with Rust-based brotli-rs to reduce security risks. See #566. Brotli decoding can now be disabled with FEATURE_BROTLI=False (FEATURE_BROTLI=false in Docker). See #568. Superusers can now receive and dismiss messages from Bugsink, such as upgrade notices, through the existing phonehome connection. See #177. Speed up minidump processing by unwinding stacks only once, using symalot. See #576. Keep debug files and source bundles that are still being used for minidumps from expiring. See #571. Report source-map upload status and assembly failures to sentry-cli. See #563. Allow upload chunks to use object storage instead of the database. See #575. Reduce file cleanup batches to shorten database write transactions. See #574. Reject incomplete gzip and deflate request bodies. See #567.
  • 11 130
    11 Topics
    130 Posts
    Package UpdatesP
    [2.10.3] fix: update doc links from /apps/ to /packages/
  • 58 716
    58 Topics
    716 Posts
    J
    @marylou unfortunately, upstream calcom has stopped development and it is not an opensource project anymore. Might be best to migrate away to another app like Tymeslot or our Calendar app (which has booking pages).
  • 35 340
    35 Topics
    340 Posts
    Package UpdatesP
    [1.46.1] Update kepubify to 5.0.0
  • 19 161
    19 Topics
    161 Posts
    jamesJ
    Hello @karlemilnikka Thanks for reporting this issue. This should be resolved with the app version 2.14.1. Please update your @castopod app and report back.
  • 29 Topics
    397 Posts
    jamesJ
    Hello @imc67 Thanks for reporting. Should be resolved with app update 1.37.2
  • 62 463
    62 Topics
    463 Posts
    Package UpdatesP
    [1.57.2] Update chatwoot to 4.19.1 Full Changelog Updated Node.js to the 24.22.1 security release. Hardened Twilio webhook verification and CSS sanitization. Added business hours and withheld caller ID support for Twilio calls. [Enterprise] Improved WhatsApp campaign recovery and duplicate-send protection. [Enterprise] Added SAML metadata URL support with certificate refresh. [Enterprise] Updated Captain AI and transcription models. [Enterprise] Added Stripe and auto-translation to paid Cloud plan entitlements. Fixed duplicate Help Center articles and conflicting inbox bots. Removed unnecessary session cookies from public pages. Thanks to @xamimran for the contributions.
  • 41 Topics
    529 Posts
    Package UpdatesP
    [1.64.0] Update code to 26.04.6.1.1
  • 3 33
    3 Topics
    33 Posts
    Package UpdatesP
    [1.10.1] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 12 81
    12 Topics
    81 Posts
    girishG
    @gh0stface yup, they made a release yesterday it seems and it should have the PRs we made upstream. @vladimir-d is checking the package again.
  • 20 127
    20 Topics
    127 Posts
    U
    @girish Yep, exactly that. AnyType and Appflowy are growing in popularity. Would be nice to see them
  • 4 Topics
    25 Posts
    girishG
    @atridad Thanks for the heads up, the app is gone from our library as well.
  • 17 117
    17 Topics
    117 Posts
    B
    That fixed it! Thank you!
  • 6 100
    6 Topics
    100 Posts
    Package UpdatesP
    [1.32.0] Update ctfreak to 1.42.0 Full Changelog SSH terminal: for SSH nodes, a new Terminal button opens an interactive shell in the browser (administrators only)
  • 13 143
    13 Topics
    143 Posts
    Package UpdatesP
    [1.27.0] Update dawarich to 1.22.0 Full Changelog With ARCHIVE_RAW_DATA=true, set ARCHIVE_ENCRYPTION_KEY before upgrading: without it, production stops archiving raw data and only logs an error. On an instance that already has archives, use the current SECRET_KEY_BASE value; otherwise generate a key with bin/rails secret. Keep the key safe, because cleared raw data cannot be recovered without it. Split Tracks at midnight in your timezone with a new option in the map's Track generation settings, so a night at home with your phone still reporting no longer joins several days into one Track. It is off by default; press Recalculate tracks & stats to apply it to existing Tracks. (#3306) The Timeline also shows the local time of a visit, or of a journey's start, when the place is in a different time zone than your account, for example "19:30 local" next to a Kansas visit for an account in Berlin. Days are still split by your account's time zone. The API and the MCP get_timeline tool return the place's time zone as local_timezone. Time zone boundaries come from timezone-boundary-builder ( OpenStreetMap contributors, ODbL) and load during the database migration; without them, times stay in the account's time zone as before. (#3886) Bumped Rails to 8.1.4.1 to close the security advisories fixed in that release, including GHSA-f3w6-w445-fwh9 (arbitrary file read and write in Active Storage image analysis). Self-hosters get the fixes by upgrading. A stop long enough to count as a visit (5 minutes by default, never less) now ends a Track, even when it is shorter than the time gap between Tracks. The Timeline shows separate journeys before and after such a visit instead of one journey across it, and position noise during a stay no longer cuts it into short Tracks. Press Recalculate tracks & stats to apply it to existing Tracks. (#3454) The interface is restyled with quieter colours and sentence-case labels across the app. Points recorded shortly after a route ended are attached to that route again instead of failing while tracks were generated in parallel. Merging a route that has a shared link or corrected segments no longer fails the same way. GPS filtering now hides a single imprecise network point that jumps to a distant cell tower and back while the phone stays put, such as an Android phone idle at home that reports one fix across a bay. To check your existing history, press "Re-evaluate past data" in the map settings under GPS Noise Filtering. (#3892) Countries you only flew over no longer count when the flight comes from a GPX or GeoJSON file without speed data either, including files imported earlier: speed is worked out from the time and distance between points. In a GeoJSON file without a speed field, points no longer get a speed of 0. (#3900) Raw data archival no longer clears points whose archive file has gone missing, and account exports now include raw data that was already archived and cleared from the database.
  • 66 660
    66 Topics
    660 Posts
    Package UpdatesP
    [3.7.2] Update directus to 12.6.1 Full Changelog Added an "Allowed Link Protocols" option to the WYSIWYG interface so text and image links with custom URL schemes (e.g. myapp://) are kept, and made the link drawer show an error for a scheme that is not allowed instead of saving an empty link (#28447 by @alvarosabu) Fixed searching a many-to-many list so it matches the related fields shown in the list, not only the junction's own fields. Searching a number no longer matches hidden ID fields, such as the junction row ID (#28422 by @robluton) Added presets to Environment Sync. Global and role-scoped bookmarks and default views are synced; personal presets stay on their instance, and role presets whose role is missing on the target are skipped with a warning and counted in the new skipped field of the --json data report. Fixed add-mode pushes silently skipping a new permission whose source ID matched an unrelated target record (#28357 by @bryantgillespie) Improved table, select, menu, and color display rendering performance by replacing per-instance CSS v-bind() with inline styles (#28435 by @bryantgillespie) Updated vue-i18n, joi, follow-redirects, decode-uri-component, qs, glob, and @hono/node-server to address CVEs (#28451 by @br41nslug) Added a check to prevent the public page shader and video backgrounds from downloading and rendering on narrow screens when they are hidden. (#28432 by @bryantgillespie) Sped up table row selection checks by looking up selected keys in a set instead of scanning the whole selection for every row (#28438 by @bryantgillespie) Fixed login redirects normalizing into protocol-relative URLs (#28456 by @br41nslug) Fixed sandbox request URL scope validation not being applied to redirect destinations (#28457 by @br41nslug) Fixed Run Script operations and sandboxed extensions failing with "illegal access" when their data contained errors, such as the validation errors from a failed Condition operation. Errors are now passed into the sandbox as plain objects (with name, message, code, status and extensions) instead of Error instances (#28441 by @AlexGaillard)
  • 92 790
    92 Topics
    790 Posts
    Package UpdatesP
    [2.20.0] Update discourse to 2026.10.0 Full Changelog
  • 24 Topics
    266 Posts
    Package UpdatesP
    [2.7.2] Add timestamp argumens to registry-client script
  • 5 48
    5 Topics
    48 Posts
    Package UpdatesP
    [1.6.0] Update docmost to 0.97.0 Full Changelog
  • 13 131
    13 Topics
    131 Posts
    Package UpdatesP
    [1.34.1] Update documenso to 2.21.1 Full Changelog feat: persist signatures for authless embed signers by @Mythie in #3465 fix: don't remove passkeys on user disable by @Mythie in #3470
  • 12 64
    12 Topics
    64 Posts
    Package UpdatesP
    [1.12.1] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 17 285
    17 Topics
    285 Posts
    Package UpdatesP
    [1.21.2] Update docuseal to 3.3.5 Full Changelog JSON log format with LOG_FORMATTER=json environment variable Bug fixes and performance improvements We've made DocuSeal Android app available for Cloud and self-hosted: https://play.google.com/store/apps/details?id=com.docuseal.app
  • 17 140
    17 Topics
    140 Posts
    Package UpdatesP
    [1.34.0] Update dokuwiki-plugin-oauth to 2026-10-29
  • 42 362
    42 Topics
    362 Posts
    Package UpdatesP
    [1.16.0] Update php-base | final to 8.4-20261021 security: fix eMudhra cert compromise
  • 13 Topics
    91 Posts
    Package UpdatesP
    [1.9.0] Update php-base | final to 8.4-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 12 103
    12 Topics
    103 Posts
    Package UpdatesP
    [1.19.3] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 53 526
    53 Topics
    526 Posts
    Package UpdatesP
    [3.1.1] Update espocrm to 10.0.11 Full Changelog Kanban: Error message when changing status field value to a kanban-hidden status #3821
  • 31 299
    31 Topics
    299 Posts
    Package UpdatesP
    [4.11.6] Update etherpad-lite to 3.3.16 Full Changelog Collaboration every socket message now stays bound to the pad it was authorized for (GHSA-c36r-65p6-q3m9, #8458). The earlier fix for GHSA-6mcx-x5h6-rpw2 only pinned the target pad for USER_CHANGES. Chat, history (CHANGESET_REQ), saved revisions, pad options and pad deletion still read the pad from the socket's session when they ran. A second CLIENT_READY on the same socket rewrote that session before its own access check. A message authorized for one pad could then run against another, which leaked the other pad's text, history and chat and let chat messages and saved revisions be written into it, including on pads the user could only view. CLIENT_READY now changes the session only after access is granted, and each message carries the pad and access mode it was authorized with. Reported by @leograntquinn-crypto. Database ueberdb2 6.1.19 (#8444). Fixes SQL injection in the MSSQL driver's bulk writes (GHSA-xmqq-59rx-x7pf). Only installs using "dbType": "mssql" are affected. The default-content author test no longer depends on the local defaultPadText setting (#8445). Dependency updates, including undici 8.12.4, mssql 12.7.14, entities 9.0.0, surrealdb 2.2.2 and resolve 1.22.14.
  • 5 Topics
    22 Posts
    Package UpdatesP
    [1.1.3] Update DocumentServer to 9.3.7 Full Changelog server: build: bump Node to 24 LTS (stable-9.3.7) by juliusknorr in server#66
  • 2 136
    2 Topics
    136 Posts
    Package UpdatesP
    [1.34.1] Update evcc to 0.318.2 Full Changelog FoxESS H3-Pro/Smart: don't overwrite Off-Grid (EPS) min SoC (#35671) sonnenBatterie: repeat charge setpoint while charging (#35393) fix(eudataact): support Auth0 Universal Login Page for CUPRA/VW (#35390)
  • 7 51
    7 Topics
    51 Posts
    Package UpdatesP
    [3.6.0] Update fider to 0.39.0 Full Changelog LOG_SQL now defaults to false (#1688). Fider no longer writes every log entry to the logs table, which was never pruned and could grow to many GB. Console logging is unchanged. If you read logs from the database, set LOG_SQL=true. To reclaim the space on an existing install, run TRUNCATE logs; once. GHSA-f9m2-vm33-7hvh: a blocked administrator's API key still worked when combined with the X-Fider-UserID impersonation header (#1751) OAuth sign-in rejects redirect targets that start with several slashes (#1737) DOMPurify updated to 3.4.17 (#1743) Disable sign-ups (#1732 a new toggle under Site Settings > Privacy stops visitors creating their own accounts, so a public board can be invite-only. Trusted OAuth providers can still create accounts. Thanks @kevinpapst. Post actions have moved into a 3-dot menu at the top of the post (#1725) The members menu lists every user level (Administrator, Collaborator, Trusted member, Member, Blocked) and you can move a user between any of them. The API roles filter also accepts member, trusted and blocked (#1726) Fider stops responding (#1744, fixes #1042 the SQL blob storage opened a second database connection for every image request, so a few concurrent image requests could use up the connection pool and hang every request after that. Thanks @kevinpapst for tracking this one down. Mobile layout fixes for posts, comments, modals and sign-in (#1720) Declining a post takes you back to the home page instead of a 404 (#1746, thanks @kevinpapst)
  • 5 38
    5 Topics
    38 Posts
    Package UpdatesP
    [1.17.1] Update filepizza to 1e4d02f
  • 2 Topics
    18 Posts
    Package UpdatesP
    [1.4.2] Update fmd-server to 0.17.1 Full Changelog Add Prometheus metric for account versions (!283) Make log level configurable (#167) Format dates in selected language, thanks to @SelfRef (!286) Fix concurrent map writes in AccessController (#134) Add explicit referrerPolicy to leaflet (!279) Remove {s} prefix from OSM tile server URL (!280)
  • 25 294
    25 Topics
    294 Posts
    S
    I can report that with the latest update, the formatting is correct and all errors have disappeared. Thanks @nebulon.
  • 8 138
    8 Topics
    138 Posts
    Package UpdatesP
    [3.2.2] Update formbricks to 6.1.4 Full Changelog Fix CSP violations in choice and matrix survey questions with styled headlines by removing inline styles before parsing survey HTML. #9931 Add an optional SMTP_REQUIRE_TLS=1 setting to require STARTTLS for explicit-TLS SMTP (typically port 587). The default remains 0 for compatibility with local relays; enable it only after confirming your provider supports STARTTLS. #9922 Bound collection sizes in authentication requests and reject unsupported request bodies early. #9938 Restore AuthZed projection delivery after transient Redis interruptions with an outbox recovery safety net and updated job dependencies. #9947
  • 6 39
    6 Topics
    39 Posts
    Package UpdatesP
    [1.4.2] Update forgejo to 17.0.1 Full Changelog
  • 78 860
    78 Topics
    860 Posts
    Package UpdatesP
    [1.17.2] Update freescout to 1.8.250 Full Changelog Delete attachment when Attachment::duplicate() fails. Bumped phpunit version (GHSA-vvj3-c3rp-c85p) Revoke web sessions on password reset (GHSA-55m5-wx6v-hf27) Check password min length when resettings passwords. Fixed "BAD UID SEARCH not allowed now" on fetching (#5786) Fixed vewing PDF attachments in Safari (#5788) Fixed duplicate conversations in the split view list (#5790) Fixed summernoteInit() with multiple textarea elements (#5792) Fixed escaping in plain text part of email notifications (#5793) Open thread menu upwards when it is cut off at the bottom of the page (#5795)
  • 22 174
    22 Topics
    174 Posts
    Package UpdatesP
    [1.30.1] Update FreshRSS to 1.30.4 Full Changelog Docker alternative image (Alpine 3.24) updated with PHP 8.5.12 and Apache 2.4.69 #9475 Improve Dutch #9479 Docker default image (Debian 13 Trixie) updated with PHP 8.4.27-1~deb13u1 and Apache 2.4.69 #9475 New hook: Minz_HookType::AutofillField for auth views #9362 Improve Brazilian Portuguese #9473 Translate non-English code comments and identifiers #9383
  • 2 22
    2 Topics
    22 Posts
    Package UpdatesP
    [1.2.1] Update funkwhale to 2.0.13 Full Changelog
  • 85 1k
    85 Topics
    1k Posts
    Package UpdatesP
    [4.207.0] Update ghost to 6.75.0 Full Changelog Add "paid subscription changed" automation trigger (#32482) - Evan Hahn Added picking a video card's thumbnail from its own frames (#32460) - Renato Costa Fixed embeds of upcoming YouTube livestreams missing from emails - Rob Lester Added "is all of" to the members label filter - Rob Lester Added "Copy link" to the comment menu (#32125) - Matthew Matsuzaki Fixed stale tier list in automation editor (#32471) - Evan Hahn Fixed newsletter recipient picker for sites with large amount of labels (#32189) - Sag Fixed billing portal opening the wrong Stripe customer (#31690) - Steve Larson Fixed newsletters being sent to addresses that keep rejecting them - Jannis Fedoruk-Betschki Fixed member code sign-in deadlock with a single database connection (#32193) - Pavel Zakharov
  • 51 460
    51 Topics
    460 Posts
    Package UpdatesP
    [1.44.0] Update gitea to 28.3.0 Full Changelog Improve hover border of colored button groups (#39861) (#39899) Mention release assets in notifications (#39631) (#39912) Filter project milestones by linked issues (#39958) (#39984) Cache successful runner token verification (#39934) (#39959) Speed up the issue and pull request dashboards and fix table indices (#40001) (#40096) Tolerate invalid stored review commit_id (#39849) (#39857) Prevent system users from watching a repository (#39886) (#39895) Enforce public-only token scope on more routes (#39690) (#39853) Decode form-encoded client credentials in HTTP Basic auth (#39926) (#39931) Harden context user access scope (#39945) (#40115)
  • 22 154
    22 Topics
    154 Posts
    Package UpdatesP
    [2.1.0] Update github-pages to 233 Full Changelog This release updates four bundled plugins to versions that fix published security advisories. jekyll-redirect-from 0.16.0 to 0.17.0: GHSA-xfg6-hjrc-hpvx: script injection through redirect_to jekyll-seo-tag 2.8.0 to 2.9.1: GHSA-572m-7cg5-6j5r: HTML/script injection through metadata and JSON-LD jekyll-feed 0.17.0 to 0.18.0: GHSA-3gx8-pqcm-38hw: unescaped post.lang and CDATA breakout jekyll-remote-theme 0.4.3 to 0.6.2: Allows rubyzip 3.x for the CVE-2026-85396 fix (#966); fixes GHSA-3343-386p-v26g jekyll-remote-theme 0.6.x requires Ruby 3.0 or later and adds a runtime dependency on openssl (>= 3.1.2). jekyll-seo-tag 2.9.x changes some <head> output: it adds twitter:description, shortens descriptions to 100 words and supports canonical: false. jekyll-redirect-from 0.17.0 skips redirect_to targets that aren't http(s) or relative, with a build warning. It also percent-encodes characters such as quotes, < and >.
  • 70 702
    70 Topics
    702 Posts
    robiR
    Ah yeah, from the chown it seems it is necessary for GitLab to start, but maybe not all at once. If the command is run twice, once with depth 1 to allow GitLab to start, then later full depth if needed; that should solve the startup delay. If there's any changes to the container/updates those permissions reset.
  • 3 25
    3 Topics
    25 Posts
    Package UpdatesP
    [1.3.2] Update glpi-singlesignon to 2.1.1 Full Changelog Restore provider templates compatibility with GLPI 12 (fix #219) - (96f052d) - Edgard Handle multiple matching profile authorizations (fix #220) - (7081ce1) - Edgard Safely update SSO user links when remote IDs change (fix #209) - (6863aac) - Edgard Roll back failed SSO registrations and address CI checks - (3870f23) - Edgard
  • 7 62
    7 Topics
    62 Posts
    Package UpdatesP
    [1.24.1] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 23 266
    23 Topics
    266 Posts
    Package UpdatesP
    [2.9.0] Update grafana to 13.3.0 Full Changelog Plugins marketplace: rename config.ini section from marketplace to plugins_marketplace #132172, @xnyo Alerting: Fix alerts going to the built-in Alertmanager after startup for external-only orgs #134481, @gillesdemey Dashboards: Fix browse crash and hangs when a dashboard shares its folder's UID #132634, @Clarity-89 Security: Fix CVE-2026-17183 #131061, @github-actions[bot] Table: fix JSON cell indentation, styling, and hover reveal #130452, @fastfrwrd Dashboards: Make the auto grid to be default #130749, @bfmatei Alerting: Promote AlertRule, RecordingRule and RuleSequence to v1beta1 #134883, @moustafab Dashboard: Adds new a subtitle option for panel descriptions #129164, @torkelo Standard options: Add Ordinal unit. #130091, @simonprickett Provisioning: Fix folder rename UID collision during full sync #130401, @ferruvich
  • 15 218
    15 Topics
    218 Posts
    Package UpdatesP
    [2.3.11] Update grav to 2.2.27 Full Changelog Showing the same image twice with different derivatives() ranges, for example in two modules on one page, no longer stretches the second set of responsive images, and the second set can now go up to the full width of the original #4389 Cropping or resizing an image after derivatives(), such as derivatives(400, 800, 400).cropZoom(300, 300), scales its responsive images down with it instead of making them larger than the image itself Links and images to media files with #, ? or % in their names work again, written percent-encoded (Invoice%20%2312.pdf) or in angle brackets. Media URLs now come out percent-encoded too, so a space is %20 #4388
  • 19 170
    19 Topics
    170 Posts
    Package UpdatesP
    [1.13.1] Update greenlight to 3.9.1 Full Changelog This release fixes a critical vulnerability. All administrators should upgrade immediately. Fixed: arbitrary file read/write through image uploads (Critical).\ Greenlight processes uploaded avatars and presentations with ImageMagick. Through GHSA-f3w6-w445-fwh9 in Rails' Active Storage, a user who can upload a file could read or write files on the server. This release upgrades to Rails 8.0.5.2, which applies a restrictive ImageMagick security policy to all image processing If your instance stores uploads on local disk (the default, i.e. you have not configured S3 or Google Cloud Storage), assume that secrets readable by the application may have been exposed, and rotate them: SECRET_KEY_BASE. Changing it signs every user out. Database password (DATABASE_URL) BIGBLUEBUTTON_SECRET SMTP, OpenID Connect, S3/GCS and any other credentials in your environment
  • 10 70
    10 Topics
    70 Posts
    Package UpdatesP
    [1.3.1] Update grist-core to 1.7.22 Full Changelog Widget Creator. "Create your own" in the widget picker opens a code editor with a live preview, for writing a widget's HTML and JavaScript right in the document. Errors from the code show under the widget. Widgets made with the old Custom Widget Builder can switch over and keep their code. See the Widget Creator docs (commit) Under "More sort options", empty values can go first or last in any column. The old "Empty values last" did nothing on Date, Numeric, or Reference columns, where empties already sorted last. Existing saved sorts keep their order (commit) On some S3-compatible stores, such as DigitalOcean Spaces, saves could stall until the server ran out of memory, because listing a document's versions looped forever (#2632) With APP_STATIC_URL set, translations failed to load, so the UI showed raw keys such as "columns" in place of labels. A regression in 1.7.21 (commit) Switching a calendar between Day, Week, and Month saved the choice for everyone, or failed with "No write access" for viewers. It now stays local until saved, as with sort and filter (#2658) EDATE() and DATEADD() with months or years stop at the end of a shorter month, so Jan 31 plus one month is Feb 28, not Mar 3 (#2692) RIGHT(text, 0) returns an empty string instead of the whole text. Contributed by @RaphaelFakhri (#2687)
  • 55 322
    55 Topics
    322 Posts
    Package UpdatesP
    [2.7.0] Update maven to 9673eef
  • 4 23
    4 Topics
    23 Posts
    girishG
    App discontinued due to no upstream updates.
  • 18 148
    18 Topics
    148 Posts
    Package UpdatesP
    [1.24.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 13 Topics
    180 Posts
    Package UpdatesP
    [1.27.0] Update core to 2026.11.0 Full Changelog 38 new integrations 5,827 pull requests by 557 people Full changelog Use the standard cover speeds in Overkiz (@Bascht74 - #188980) Fix Plugwise removing the started listener twice (@joostlek - #189313) Fix System Monitor IP sensor setup with missing addresses (@jagostinhoj - #189353) Fix aerosmart polling after general timeout (@kayloehmann - #189475) Fix Sofar reload loop and phantom sensors after a night setup (@darkrain-nl - #189423) Deprecate silent and default speeds in Velux covers (@gjohansson-ST - #189438) Run delayed commands as the user who set the timer (@balloob - #190287)
  • 28 264
    28 Topics
    264 Posts
    Package UpdatesP
    [1.11.2] Update humhub to 1.19.3 Full Changelog Fix #8646: Text of notifications in the top bar dropdown was invisible (top bar text color instead of the list text color, since 1.19.1) Fix #8648: Invite tokens (link and email) could end with - or _, which is often cut off when the link is auto-detected in texts Fix #8647: Text of notifications in the top bar dropdown was invisible (top bar text color instead of the list text color, since 1.19.1) Fix #8652: Concurrent requests with the same new or expired session ID (e.g. several AJAX requests after the session expired) failed with "Duplicate entry" in user_http_session Fix #8654: Activity types excluded from e-mail summaries reappeared after the update to 1.19 (renamed activity classes were not migrated in settings) Fix #8656: A failing daily or hourly cron handler caused the whole run to repeat on every cron tick (e.g. daily summary e-mail spam); run times are now stored before the handlers run; Exceptions of cron handlers are now logged (category cron) Fix #8657: A user gate page (e.g. /twofa/check) opened by a guest was stored as the return URL and caused an endless redirect loop after login Fix #8660: Update phpoffice/phpspreadsheet to 5.10.0 (GHSA-3x94-m842-937c), symfony/http-foundation and symfony/yaml to 7.4.21 (security fixes)
  • 78 755
    78 Topics
    755 Posts
    Package UpdatesP
    [1.103.14] Update immich to 3.3.6 Full Changelog fix(ml): disable onnxruntime telemetry by @mjkent in #32956
  • 5 73
    5 Topics
    73 Posts
    Package UpdatesP
    [1.13.0] Update it-tools to 2026.10.25 Full Changelog json-viewer, yaml-viewer, currency-converter, geo-coordinates-converter: support intranet mirrors (3af8e4a) gitignore-generator, gitattributes-generator: fall back to a bundled template snapshot (81c1201) translator, remove-background, math-ocr, ocr-image, gif-to-mp4: ship runtimes with the app (d53e745) settings: add an offline mode that hides internet-only tools (4a80283) zpool-memo: add localized content and recategorize (f196182) dns-query, gitattributes-generator: hide dns-query offline, pin commands to the snapshot (788d4fd) explainshell, ocr-image: honour the configured mirrors (8ec5590) countdown, cron-alarm, time-alarm: resolve Beep.mp3 against the app base (94c0bbf) markdown-editor, unicode-formatter, pomodoro-timer: bundle editor extensions and fonts (b536f04) visualsubnetcalc, zpool-calc: escape user data before inserting HTML (de40fc7)
  • 4 45
    4 Topics
    45 Posts
    Package UpdatesP
    [1.2.4] Update infisical to v0.167.6 Full Changelog fix(frontend): keep secret share revoked badge clear of row actions by @andrewhuhh in #9094 feat(agent-vault): add descriptions to proxies by @devin-ai-integration in #8963 feat(pam): supporting changes for tf 388 by @lb-vn in #9027 fix(pam): reject direct pam project creation, matching agent vault by @lb-vn in #9066 fix(frontend): version locale URLs so cached translations pick up new keys by @andrewhuhh in #9098 feat(ui): confirm before disabling or narrowing cross-project secret sharing by @claude in #9093 fix(secrets): close environment menu after selecting a single environment by @andrewhuhh in #9105 feat(secret-scanning): link resource rows to their filtered findings by @andrewhuhh in #9108 fix(secret-syncs): accept KMS key IDs and ARNs in AWS sync KMS picker by @andrewhuhh in #9057 feat(projects): add grace period and restore for deleted secret manager projects by @DimitrisStaratzis in #8965
  • 18 197
    18 Topics
    197 Posts
    Package UpdatesP
    [1.12.9] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 71 Topics
    1k Posts
    Package UpdatesP
    [1.23.4] Update invoiceninja to 5.13.53 Full Changelog v5.13.53 by @turbo124 in #13414 Full Changelog: https://github.com/invoiceninja/invoiceninja/compare/v5.13.52...v5.13.53
  • 44 357
    44 Topics
    357 Posts
    M
    Depending on the amount of image files created by your settings, this could help out a bit: https://github.com/rxng/jellyfin-plugin-CompressImages
  • 4 18
    4 Topics
    18 Posts
    girishG
    App discontinued due to no upstream updates.
  • 13 108
    13 Topics
    108 Posts
    Package UpdatesP
    [1.13.0] Update php-base | final to 8.4-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 34 375
    34 Topics
    375 Posts
    jamesJ
    Hello @stoccafisso Not by default, no. You could build the jitsi app yourself and install it or maybe someone will make it a community app.
  • 12 120
    12 Topics
    120 Posts
    Package UpdatesP
    [2.7.2] Update joplin to 3.7.4 Full Changelog Improved: Index locked note resources (#15717) (#15714 by @keshav0479) Fixed: Fix renderer crash loop when sqlite-vec is unavailable (#15762) (#15761)
  • 12 157
    12 Topics
    157 Posts
    Package UpdatesP
    [1.66.0] Update jupyterhub to 6.2.0 Full Changelog
  • 8 78
    8 Topics
    78 Posts
    Package UpdatesP
    [1.18.2] Update kanboard to 1.2.57 Full Changelog fix(sqlite): make LIKE case-insensitive for non-ASCII characters fix(bulk): check access to opposite task when adding internal links fix(api): hide inaccessible projects from lookup procedures fix: remove PHP 8.5 deprecation warnings feat(user): allow searching users by exact email address
  • 8 59
    8 Topics
    59 Posts
    Package UpdatesP
    [1.14.1] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 8 117
    8 Topics
    117 Posts
    Package UpdatesP
    [1.8.3] Update keycloak to 26.8.2 Full Changelog #53061 [CVE-2026-92358] Cross-browser fallback proof survives successful account linking and self-service unlink organizations #53618 [CVE-2026-105305] Device Authorization Grant bypasses per-client minimum.acr.value enforcement authentication #53749 CVE-2026-107623: OIDC DCR read-modify-write silently disables offline token revocation on backchannel logout oidc #53813 [CVE-2026-107889] Stored XSS on the login page via kcSanitize bypass authentication #54184 Upgrade to Quarkus 3.40.1.1 dist/quarkus #44474 Keycloak Maximum Concurrent Session Limit is incorrectly registered as a login failure, triggering Keycloak's Brute Force protection authentication #52870 Realm import: JSON representation migration fails with LazyInitializationException when a users file is present (regression in 26.3) import-export #53238 Theme resources intermittently 404 on a cold gzip cache: GzipResourceEncodingProvider replaces the cached file non-atomically core #53612 BCFIPS imports only the first certificate from a multi-certificate PEM trust bundle core #53809 ISPN000427 timeout on distributed caches when entry lock is contended during topology change infinispan
  • 5 41
    5 Topics
    41 Posts
    Package UpdatesP
    [1.4.2] Update keila to 0.40.2 Full Changelog Unsubscribe links without a signature, which were used by Keila before v0.11.0, are no longer supported Updated dependencies to address high-severity CVEs: Bandit (CVE-2026-116078), phx_html (CVE-2026-117645), and ssl_verify_fun (CVE-2026-117666) Changing the password now signs out all other sessions API endpoints now limit page size to 1,000 entries
  • 16 267
    16 Topics
    267 Posts
    Package UpdatesP
    [2.64.0] Update kimai to 2.71.0 Full Changelog Remove API password from user profile screen (#6277) Deactivate API passwords (#6267) - thanks @haxxordan Check if API is allowed to set begin (#6275) - thanks @Deniiz23 Use edit permission to check if times can be set via API (#6276) - thanks @Deniiz23
  • 16 237
    16 Topics
    237 Posts
    Package UpdatesP
    [1.51.0] Update php-base | final to 8.4-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 11 132
    11 Topics
    132 Posts
    girishG
    Running TURN server on port 443 only matters for setups where a Client is unable to contact the server on non-port 443. This is only common in some ultra locked down intranet setups.
  • 5 74
    5 Topics
    74 Posts
    Package UpdatesP
    [1.12.0] Update komga to 1.30.0 Full Changelog default to storing HTTP sessions in database (1eccb04) add user settings to fill poster containers (85b7514) add user menu and relocate some actions into it (008f3c5) persist/restore library sub-view (b91a0c4) edit books in bulk (27f8a42) organize collection elements (19ba5cc) prevent concurrent user creation for unclaimed server (c7397c2) publish readlist/collection creation event after database commit (3ae0def), closes #2434 #2496 toggle for overview section not working on chrome mobile (00444db) clarify wording for age restrictions (ef1d65e), closes #2538
  • 25 198
    25 Topics
    198 Posts
    Package UpdatesP
    [2.6.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 146 1k
    146 Topics
    1k Posts
    andres.moyaA
    I have updated my LAMP application from a quite old version to the latest 5.3.1. Then the PHP is not recognized. When I access the app I see the PHP source code, like in this issue. After investigating for some time, I just discovered that I need to update the PHP version as explained in the doc. Now it works. Anyway I create this post for if it's useful for other people with the same problem that didn't remember this setting.
  • 18 202
    18 Topics
    202 Posts
    Package UpdatesP
    [1.69.3] Update languagetool to 27eabfd
  • 23 249
    23 Topics
    249 Posts
    Package UpdatesP
    [1.19.0] Update leantime to 3.13.2 Full Changelog Marketplace install reporting - Plugin installations now report their results and server details back to the marketplace (#3979) Top loader clears after Save & Close - The loading indicator no longer stays active after using Save & Close in a modal (#3984) Resume owner setup during install - The /install flow can now resume owner setup even after the post-install redirect is lost (#3983) Correct calendar event times - Event times now follow the user's current time format instead of a stale session copy (#3982) More reliable OIDC login - OIDC authentication now sends PKCE and displays provider errors instead of crashing the callback (#3981) Clearer plugin install errors - Plugin installation now shows the marketplace's actual error message instead of a generic one (#3977) Mobile push notifications - Delivery tier, category and routing data in push payloads, a dedicated mobile push toggle, and a relay send path with admin settings for self-hosted servers (#3966, #3969, #3964, #3974) Per-project modules - Turn individual modules, including Time Tracking, on or off per project (#3928, #3935, #3937) Expanded roles and permissions - New projects.viewAll and roles.manage permissions reach custom roles, with roles stored as data keyed by level and base role (#3944, #3940) Plugin authors: htmx client events are now declared on the domain event classes (CLIENT_EVENT), and the HtmxTicketEvents enum is gone. Reference events by class, e.g. TicketUpdated::class (#3949).
  • 19 176
    19 Topics
    176 Posts
    Package UpdatesP
    [1.4.8] Update uv to 0.13.7
  • 19 459
    19 Topics
    459 Posts
    Package UpdatesP
    [1.67.0] Update LimeSurvey to 7.9.0+261029 Full Changelog
  • 16 140
    16 Topics
    140 Posts
    Package UpdatesP
    [1.29.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 15 186
    15 Topics
    186 Posts
    Package UpdatesP
    [1.27.0] Update playwright to 1.65.0 Full Changelog The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js: New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output. New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests: TypeScript class fields now follow useDefineForClassFields from your tsconfig.json, the same as tsc. It is enabled for ES2022 and later targets, and when target is not specified. A field initializer that reads a constructor parameter property now fails, because the initializer runs first: Actions such as locator.click(), locator.check(), locator.tap(), locator.fill(), locator.clear() and locator.selectOption() now wait for the element to be not inert. An action on an element with the inert attribute, or inside such an element, now times out if the element stays inert. A sharded run now fails with "No tests found" when no tests match across all shards. Pass --pass-with-no-tests to allow this. An empty shard still passes when other shards have tests. Cookie matching now follows RFC 6265. With a URL, browserContext.cookies() and apiRequestContext.cookies() no longer return host-only cookies for subdomains or Path=/api cookies for /apiv2, and a Path=/foo/ cookie does not match /foo. APIRequestContext sends a cookie without a name as Cookie: x instead of Cookie: =x, and stores Set-Cookie: token as a cookie without a name. Proxy credentials are no longer sent to websites. The credentials in the proxy option now answer only proxy challenges. To authenticate on a website, use httpCredentials. Text that the browser does not render, such as text that is not assigned to a slot or text directly inside a closed <details>, is no longer part of accessible names and aria snapshots. This can change the results of page.getByRole() with a name, locator.ariaSnapshot() and expect(locator).toMatchAriaSnapshot(). Playwright no longer tests on Node.js 20. Use Node.js 22, 24 or 26, as listed in the system requirements.
  • 33 241
    33 Topics
    241 Posts
    N
    Oh thanks! I'm seeing from headers that you're right. Apologies, I misunderstood the configuration.
  • 8 158
    8 Topics
    158 Posts
    Package UpdatesP
    [1.30.1] Update loomio to 3.14.1 Full Changelog Fix: Rails and other dependencies contained security vulnerabilities. Updated versions include the Rails 8.1.4.1 security fixes. Fix: Time poll outcomes could display meeting times in the device's time zone rather than the profile's time zone. They now use the profile setting. New: The profile time-zone selector offers a compact regional list with translated labels and retains any currently saved or detected zone. Fix: Markdown mentions appeared as plain text, and autocomplete could leave the caret before the inserted handle. Mentions now render consistently with rich text, and typing continues after the handle. Fix: Collaborative editor initialization could duplicate content or restore stale drafts after a format change. Clients now initialize the same saved content consistently, including when the collaboration server is unavailable. Fix: Choosing Edit tags from the inbox could leave existing tags unselected. The form now shows the tags already assigned to the thread's opening post. Fix: Improved database query performance when loading notifications and reactions. New: Compose backup and restore scripts package the database, configuration, and supported local files into a portable archive.
  • 19 245
    19 Topics
    245 Posts
    Package UpdatesP
    [2.54.0] Update Lychee to 7.13.0 Full Changelog feat(v8): Use Struct-of-Arrays approach by default. by @ildyria in #4961 feat(v8): configurable album tile size and gap with live size preview by @ildyria in #4962 fix(auth): show inline feedback for throttled password logins by @dangu in #4964 fix(ssrf): avoid obscure IP scenarios by @ildyria in #4965
  • 10 61
    10 Topics
    61 Posts
    marcusquinnM
    @girish That is a super handy feature!
  • 151 1k
    151 Topics
    1k Posts
    Package UpdatesP
    [1.20.2] Update mastodon to 4.7.5 Full Changelog Fix password authentication bypass for inactive accounts (GHSA-3xjw-gv43-3w62) Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6) Fix Forwarded header taking precedence over X-Forwarded-For (#41481 by @ClearlyClaire, GHSA-qp4r-p842-mw5c) If your reverse-proxy setup uses Forwarded instead of X-Forwarded-For, please make sure it ignores user-provided X-Forwarded-For headers. If you are using our provided nginx.conf, please consider updating it. Updated dependencies, in particular to address security advisories in addressable, loofah, rack, and rails-html-sanitizer Change invites use counts to not decrease if an invited user deletes their account (#41458 by @ClearlyClaire)
  • 53 450
    53 Topics
    450 Posts
    Package UpdatesP
    [1.62.1] Update matomo to 5.14.2 Full Changelog
  • 135 Topics
    1k Posts
    Package UpdatesP
    [1.147.2] Update synapse to 1.164.2 Full Changelog Restore the unstable MSC2965 /auth_metadata endpoint, which Element X clients still request after upgrading from Synapse 1.162 or earlier, causing them to fail to refresh their access token. (#20460)
  • 61 665
    61 Topics
    665 Posts
    jamesJ
    Hello @recliner2042 Please check the following topic https://forum.cloudron.io/topic/14416/mattermost-11-drops-mysql-support You are still using the outdated Mattermost app that needs to be manually migrated.
  • 66 519
    66 Topics
    519 Posts
    Package UpdatesP
    [6.3.1] Update mautic to 7.2.2 Full Changelog CVE-2026-115188: Remote Code Execution in Campaign Import - Advisory: GHSA-mxjf-pghx-h299 CVE-2026-115189: Twig Sandbox Escape in Theme Templates - Advisory: GHSA-h7pm-79gc-8867 CVE-2026-115191: SQL Injection in Contact Lookup AJAX Endpoint - Advisory: GHSA-fj8v-c9c3-7q26 CVE-2026-115192: SQL Injection in Dashboard Widget API - Advisory: GHSA-qpmx-7pq3-5q2v CVE-2026-115193: Stored Cross-Site Scripting (XSS) in HTML-type Custom Contact Field on Contact Detail View - Advisory: GHSA-3295-vq3p-93rw CVE-2026-115194: Arbitrary File Read via Path Traversal in Asset API - Advisory: GHSA-wfhm-289v-79vp CVE-2026-115195: Broken Access Control in Stats API - Advisory: GHSA-7j28-9rg4-wg63 CVE-2026-115196: Open Redirect in Form Submission - Advisory: GHSA-5mm3-3g7p-9868 Downloaded assets now keep their original filename instead of an internal ID by @patrykgruszka in #17526 Discarding an email draft no longer clears fields of the saved email by @gcomneno in #17653
  • 9 120
    9 Topics
    120 Posts
    Package UpdatesP
    [1.53.0] Update mealie to 3.30.0 Full Changelog feat: In-app AI prompt customization @michael-genson (#8736) feat: Sort recipes by total time @NutzerXY (#8692) feat: Instruction durations @granto (#8705) feat: weekly meal planning @michael-genson (#8836) feat: Show recipe owner @michael-genson (#8823) fix: scope migration imports to the group and limit archive size @hay-kot (#8761) fix: preserve recipe image when upload validation fails @YibingZhang325 (#8506) fix: reject an unrecognized DB_ENGINE instead of using SQLite @Yi-111-a (#8605) fix: listen on IPv4 and IPv6 by default @mvanhorn (#8569) fix: backfill missing AI provider settings @michael-genson (#8924)
  • 9 97
    9 Topics
    97 Posts
    Package UpdatesP
    [3.8.0] Update php-base | final to 8.5-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619 security: fix eMudhra cert compromise
  • 6 53
    6 Topics
    53 Posts
    Package UpdatesP
    [2.3.2] Update memos | stage to 26.11.0 Full Changelog
  • 22 775
    22 Topics
    775 Posts
    Package UpdatesP
    [3.33.3] Update metabase to 0.65.3.6 Full Changelog
  • 2 8
    2 Topics
    8 Posts
    Package UpdatesP
    [1.0.0] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 52 531
    52 Topics
    531 Posts
    Package UpdatesP
    [2.39.4] Update bedrock to 1.26.63.1
  • 11 103
    11 Topics
    103 Posts
    Package UpdatesP
    [1.7.6] Update v2 to 2.3.5 Full Changelog Added OpenID Connect admin role mapping: set OAUTH2_ADMIN_GROUP and OAUTH2_GROUP_CLAIM to grant or revoke the admin role at login based on the user's groups. The group claim is read from the user info response or the ID token, and OAUTH2_ADDITIONAL_SCOPES can request extra scopes from the provider. Allowed WebAuthn/Passkeys as the only login method when DISABLE_LOCAL_AUTH is enabled. Register at least one passkey while another authentication method is still available before turning off local authentication. Added a force parameter to the feed refresh API endpoint (PUT /v1/feeds/{id}/refresh?force=true) to bypass the HTTP cache and reprocess existing entries, matching the forced refresh in the web UI. The Go client gains ForceRefreshFeed. Took the client IP from the right side of X-Forwarded-For, skipping addresses in TRUSTED_REVERSE_PROXY_NETWORKS, so clients can no longer spoof the IP recorded in logs and sessions. If you chain several reverse proxies (e.g. Cloudflare in front of nginx), add the networks of every proxy to TRUSTED_REVERSE_PROXY_NETWORKS. Fixed the Fever API toggling the starred state when saving or unsaving an entry that was already in that state. Fixed the Fever API marking all entries as read, including newer ones, while ignoring the before timestamp. Fixed the Fever API returning an arbitrary set of entries for some item requests, which could cause clients to miss entries. Fixed a crash in the Google Reader API caused by an unknown stream type. Matched category titles case-insensitively, fixing "category not found" errors with Google Reader labels and duplicate categories created by OPML imports. Parsed RFC 3339 dates with a lower-case t or z.
  • 55 706
    55 Topics
    706 Posts
    Package UpdatesP
    [6.0.0] Update base | final to 6.0.1 IMPORTANT: This is last release of MinIO. This package is deprecated and there will be no further updates. See https://forum.cloudron.io/topic/16181/minio-unlisted-from-app-store for more information
  • 50 2k
    50 Topics
    2k Posts
    Package UpdatesP
    [1.24.11] Update mirotalkp2p to 2.2.80
  • 16 104
    16 Topics
    104 Posts
    Package UpdatesP
    [1.40.0] Update php-base | final to 8.5-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 43 353
    43 Topics
    353 Posts
    Package UpdatesP
    [4.4.0] Update php-base | final to 8.5-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 164 2k
    164 Topics
    2k Posts
    Package UpdatesP
    [4.51.1] Update n8n to 2.46.6 Full Changelog Make npm install of n8n work on all platforms again (#43035) (6abcfc7) AI Agent Node: Point the deprecated agent type callout to an action that works (#42908) (6fa6e60) core: Improve credential resolution for node parameter loading (#42755) (e4e033e) core: Read named array keys in expressions (#42970) (00a1fbc) core: Hide archived workflows in the migration report by default (#42995) (23232e7) editor: Show a message when the migration report takes long to load (#43001) (f7dafbb)
  • 21 186
    21 Topics
    186 Posts
    Package UpdatesP
    [1.31.4] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 414 3k
    414 Topics
    3k Posts
    G
    @james that's fantastic! Thanks for clarifying it!
  • 31 313
    31 Topics
    313 Posts
    Package UpdatesP
    [1.52.1] Update nocodb | stage to 2026.10.1 Full Changelog Classic apps on phones - Published classic apps fit phone screens, including the sidebar, toolbars, record forms, dashboard groups and pivot widgets. Group by more field types - Classic app pages group by Links, Formula, Lookup, Rollup and link count fields, and List widgets get a group by setting. Learn more Resize columns in classic apps - Drag a column edge in a List widget to resize it. Builders save the width for everyone. Learn more Open records from view widgets - Calendar, Timeline and Gantt widgets on a dashboard can open a record when you click it. Learn more Hide widget titles - Data, chart and number widgets in a classic app have a Show title switch. Button visibility by role - Page buttons in a classic app can show only to the roles you choose. Learn more Reorder user filter tabs - Builders drag user filter tabs into a new order. Learn more Sort Single Select by option order - A sort on a Single Select field can follow the order of its options instead of A to Z. Learn more
  • 67 583
    67 Topics
    583 Posts
    Package UpdatesP
    [2.33.9] Update NodeBB to 4.16.7 Full Changelog xss in chat message restore via translateHtml (760ded4) add dedicated purge button to chat messages, same patter as posts (cdde44e)
  • 15 136
    15 Topics
    136 Posts
    Package UpdatesP
    [1.41.1] Update ntfy to 2.37.2 Full Changelog 0510957 Merge pull request #2169 from binwiederhier/release-2380
  • 6 133
    6 Topics
    133 Posts
    Package UpdatesP
    [1.19.14] Update ollama to 0.40.15 Full Changelog ollama launch now supports Kimi Code CLI the successor to kimi-cli and offers to migrate existing kimi-cli setups ollama launch now fills in Pi's model list automatically so models can be picked inside Pi, and Claude Desktop's model picker shows Ollama's actual model names Recurrent and vision GGUF models can now serve more than one request at a time Qwen3 and Qwen3.5 models using long-context (YaRN) scaling Running ollama with no arguments opens the welcome launcher Full Changelog: https://github.com/ollama/ollama/compare/v0.40.14...v0.40.15
  • 5 48
    5 Topics
    48 Posts
    Package UpdatesP
    [1.6.1] cleanup and migrate to OIDC
  • 52 438
    52 Topics
    438 Posts
    Package UpdatesP
    [1.28.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 6 42
    6 Topics
    42 Posts
    Package UpdatesP
    [0.9.0] Update opencloud to 6.1.0 Full Changelog Add a flag to the reindex command to force a full reindex [#2606] proxy: Allow mapping from an external tenant id to the internal id [#2569] feat: enable EnableInsertRemoteFile WOPI flag for Collabora [#2555] feat(multi-tenancy): verify tenant via OIDC claim [#2559] Fix race conditions in the hybrid metadata backend [#594] fix: error handling in upload session cleanup [#582] experimental: add darwin watchfs support [#471] Tracing [#596] fix: favorites list, undo delte doesn't return item to the favorites [#2382] feat: handle UI_InsertFile postMessage from Collabora [#2270]
  • 4 56
    4 Topics
    56 Posts
    Package UpdatesP
    [1.9.5] Update openhab-distro to 5.2.4 Full Changelog Fix auth requests through myopenHAB (5893) Don't cache stale references to classes/services (5914) Fix discovery null pointer exception (22000) Device manager lifecycle handling (22002) Fix device filtering on received messages (21900) Fix long polling timeout passed in milliseconds instead of seconds (21995) Fix exception in polling (21978) Skip unsupported serial properties (21987) oh-state-series: Fix mapState applied in place; map into a copy instead (4587) Fix operator precedence of multi-input AND/OR block (4641)
  • 24 299
    24 Topics
    299 Posts
    Package UpdatesP
    [3.54.1] Update openproject to 17.9.6 Full Changelog Bugfix: Workflow changes are not saved [#82358] Bugfix: There is no possibility to increase or decrease activity [#82172]
  • 4 Topics
    35 Posts
    Package UpdatesP
    [1.14.0] Update python-base | final to 3.14-20261023 security: fix eMudhra cert compromise
  • 81 765
    81 Topics
    765 Posts
    Package UpdatesP
    [3.8.1] Update open-webui to 0.13.3 Full Changelog Security Advisory: This release contains security fixes. We strongly recommend updating all deployments as soon as possible to have the latest security fixes in place. These fixes are not listed in this changelog; we will publish the security advisories for them immediately following CVE assignment. Advisories Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility. Preload files off by default. With native function calling, the default, attached files are no longer added to the conversation automatically, and models read them with their file tools instead. Models without tool support or without the Files built-in tool can no longer see attached files until you turn on Preload files in the model's Capabilities. Legacy function calling, and API requests that do not come from a chat in the web UI, keep the old behavior. #33815 Chat over plain HTTP. Opening Open WebUI over plain HTTP at a LAN or Docker address now loads new and existing chats instead of staying on a spinner with "crypto.randomUUID is not a function". #33919 Agents in automations. The automation editor now lets you choose a terminal and working folder, then select a coding agent available there. Scheduled runs use that saved terminal and folder, and check that the terminal and agent are still available before starting. Agent automations send their results to a chat; channel destinations remain available for ordinary models. Commit Coding agents as models. On an Open Terminal that offers agents, coding agents such as Claude Code, Codex and Pi now appear in the model picker. You can chat with them or call them by voice, choose their reasoning effort and service tier, and approve their tool requests in the chat. Each conversation uses one agent, and agent chats cannot be regenerated, continued or edited and resent. #33843, #33860, #33880, #33857 Much cheaper tool chats. Chats that use tools now cost much less. Citation instructions, memory recall, the skills list and attached knowledge are no longer rewritten into the system prompt or your message on every tool round, so the start of the conversation stays the same between requests and providers can serve it from their prompt cache. #33852 Side chats are saved. Side chats, which were always temporary in 0.13.0, are now saved as regular chats and appear in the chat list. They stay temporary only when you turn on Temporary Chat in the side chat or your admin enforces temporary chats. Ollama broken tool calls. Chats with Ollama models no longer get stuck after a tool call with cut-off, rejected or empty arguments. #33697, #33671 DeepSeek thinking mode with skills, knowledge and memories. These chats no longer fail with a missing reasoning error when the connection's Provider is set to "llama.cpp". DeepSeek thinking mode still requires that setting; connections using "Default" are unchanged. #33950
  • 3 16
    3 Topics
    16 Posts
    Package UpdatesP
    [1.3.0] Update php-base | final to 8.4-20261021 Fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 16 97
    16 Topics
    97 Posts
    jamesJ
    With the package update 2.6.0 @osticket was migrated from LDAP to OIDC. If you find anything not working as intended, please use this topic to report the issue.
  • 30 207
    30 Topics
    207 Posts
    Package UpdatesP
    [1.28.0] Update outline to 1.12.0 Full Changelog Every user now has a personal section for private documents in the sidebar in #14062 #14187 (Admins can disable in settings) Mermaid diagrams are now faster, much prettier, and responsive as they are rendered with Pele in #14126 Passkey login is now possible inside the desktop app (Make sure you're running the latest version) in #14180 #14241 #14242 OAuth Client ID Metadata Documents are now supported for MCP clients in #14015 The MCP SDK has been upgraded to v2 with support for the 2026-07-28 protocol in #14244 Tables can now be placed inside notices in #14175 Emails now support one-click unsubscribe (RFC 8058) in #14148 Moving a document drops permissions its children inherit from it by @misha-sunborn in #13879 Missing rate limit on documents.update in #14189 Node.js has been updated to 26.12.1 in #14228
  • 17 107
    17 Topics
    107 Posts
    Package UpdatesP
    [1.7.2] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 3 17
    3 Topics
    17 Posts
    Package UpdatesP
    [1.4.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 71 605
    71 Topics
    605 Posts
    Package UpdatesP
    [1.70.0] Update gotenberg to 8.40.0
  • 2 11
    2 Topics
    11 Posts
    girishG
    You can still install it like this https://my.<cloudron>/#/appstore/rocks.paperwork.cloudronapp . But note that it was last updated 3 years ago. I tried to build a new version with latest with PHP a year ago and the app was not even building anymore. They have been re-writing a new version for a couple of years now.
  • 108 936
    108 Topics
    936 Posts
    jdaviescoatesJ
    @ikalou said: For Peertube 8.3 I didn't know about the migration script, I followed your indication archos and it everything works fine, the p2pMediaLoaderInfohashes errors are gone I think I missed this too. How can I check if I need to do the migration script?
  • 22 207
    22 Topics
    207 Posts
    Package UpdatesP
    [1.21.3] Update penpot to 2.18.6 Full Changelog Fix upload endpoints storing server files when the path points outside the temp dir #12771 (MR: #12772)
  • 6 Topics
    24 Posts
    girishG
    App discontinued due to no upstream updates.
  • 4 Topics
    12 Posts
    girishG
    The upstream project has not released in almost 3 years now. We had to build from develop to get some PHP 8 support going, but there are bugs like https://github.com/phpservermon/phpservermon/issues/1196 , https://github.com/phpservermon/phpservermon/issues/1232 . There's also a bunch of basic issues: Normal user cannot login after admin user logs in. Some issue related to service worker. LDAP functionality is incomplete
  • 5 64
    5 Topics
    64 Posts
    Package UpdatesP
    [3.5.0] Update php-base | final to 8.5-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 81 688
    81 Topics
    688 Posts
    Package UpdatesP
    [1.26.1] Update pixelfed to 0.15.2 Full Changelog Our primary docker image was updated to 5.0.2 - https://github.com/serversideup/docker-php/releases/tag/v5.0.2 (this includes the PHP security patching for 2 CVEs). Details here: https://www.php.net/archive/2026.php#2026-10-21-5 Rebuilt release images with updated CAs Details here: https://emudhra.we-have-a-problem.com/ Major refactoring will continue as we work towards the new Nuxt based WebUI. Please continue to submit issues and bugs to us, and make noise for any regressions! Remove EXP_CPT & EXP_CHT, and enabled cached timelines by default by @shleeable in https://github.com/pixelfed/pixelfed/pull/7728 A bunch of timeline related bug fixes and improvements A bunch of non-timeline related bug fixes and improvements Update Helpers, improve webfinger handling by @dansup in https://github.com/pixelfed/pixelfed/pull/7792
  • 4 22
    4 Topics
    22 Posts
    Package UpdatesP
    [2.2.1] Update planka to 2.3.1 Full Changelog Fix the description editor crashing to a blank page on boards with a member who has no username
  • 9 168
    9 Topics
    168 Posts
    Package UpdatesP
    [1.18.7] Update pocketbase to 0.40.6 Full Changelog Replaced the GitHub update command with update from the new host in relation to #7841. Additional fileblob bucket escape checks for just in case if the filesystem abstraction is used as standalone without the PocketBase validations. Added a global restriction for the max WxH pixels size when generating a thumb to reduce the risk of excessive memory usage. The default limit is pretty generous and currently set to max 250<<20 (262144000) pixels and can be changed with the env PB_THUMBS_MAX_SOURCE_PIXELS. The workaround is not bulletproof and thumbs generation remains one of the main culprit for potential OOMs in PocketBase, so better solutions will have to be investigated in the future, including eventually switching to libvips or other similar library once there is better CGO portability (if you have better suggestions, please open a discussion). Bumped the min Go GitHub action version to 1.27.3 as it includes a security fix related to the recent eMudhra CA compromise. Bumped golang.org/x/ dependencies (#7865). Bumped goja and its related dependencies (string allocations optimization, Date.getYear/setYear support and other minor correctness fixes). Minor UI fixes - superuser IPs description grammar fix, rotating btn loader icon alignment fix, slight dark background correction in attempt to minimize the color profile differences between Chrome and Firefox, etc.
  • 22 223
    22 Topics
    223 Posts
    micmcM
    It's too bad this app has been abandoned. Yet, there's a full docker install and I might have missed it or upstream might have changed their but I haven't seen a trace of a mention about the use of a "temporal server" as a requirement to run this. Anyway, on the other hand, there's a cool work around for anyone running Hermes can run the Postiz Skill within one's Hermes instance. https://postiz.com/hermes There also is the option to run it from a N8N Node https://www.npmjs.com/package/n8n-nodes-postiz Enjoy!
  • 9 87
    9 Topics
    87 Posts
    Package UpdatesP
    [1.13.0] Update pretix to 2026.9.0 Full Changelog
  • 9 69
    9 Topics
    69 Posts
    Package UpdatesP
    [1.13.3] Update PrivateBin to 2.1.1 Full Changelog ADDED: Translation for Korean (#2071) ADDED: Comments authenticate the IDs of their document and parent comment if present. Older comments without these IDs are still accepted and shown, unless the new discussionrequireauthenticatedids option is enabled to validate these fields (#2101) CHANGED: Check sizelimit over full request, before attempting decoding CHANGED: Database backend now logs errors when reading comments, like it already did for comment existence checks (#2100) FIXED: Creating a document failed with a JavaScript error when the discussion, password, e-mail or QR code option is disabled, as the top navigation accessed the omitted elements FIXED: Slovenian plural forms were stored in the wrong order, i.e. "1 uri" instead of "1 ura" for one hour (#1951) FIXED: SVG attachment previews could turn non-ASCII characters into markup after sanitization, enabling script execution when opening the preview in a new tab FIXED: SVG attachment previews use a data URL, so they no longer run in the instance's origin when opened in a new tab FIXED: Password characters above U+00FF got truncated before key derivation, now passwords get UTF-8 encoded and existing documents remain readable FIXED: E-mail button sent several e-mails after being shown again or after its confirmation dialog was dismissed
  • 20 240
    20 Topics
    240 Posts
    Package UpdatesP
    [2.16.0] Update prometheus to 3.16.0 Full Changelog API: The experimental search endpoints now clamp batch_size to 1000. #19731 Configuration: Default --web.external-url to https when --web.config.file enables TLS. #19241 Remote write: Stop exposing the deprecated prometheus_remote_storage_metadata_total, prometheus_remote_storage_metadata_failed_total, prometheus_remote_storage_metadata_retried_total, and prometheus_remote_storage_metadata_bytes_total metrics for Remote Write 2.0 queues. #20080 TSDB: Reject exemplars whose label names are not unique, instead of storing them and serving a duplicate JSON key from /api/v1/query_exemplars. #19896 API: Allow overriding PromQL Start Timestamp processing on a per-query basis using the X-Prometheus-Use-Start-Timestamps HTTP header. #19066 PromQL: Add experimental integral() function for computing integral-over-time of range vectors behind the --enable-feature=promql-experimental-functions flag. #14440 PromQL: Add experimental query cost estimation, actual cost reporting, and configurable execution limits, enabled with --enable-feature=query-cost. #20028 PromQL: Allow unquoted Unicode letters and dots behind a feature flag #20162 BUGFIX] Remote read: Abort failed streaming responses without writing duplicate headers or appending plain-text errors to the protobuf stream #19749 BUGFIX] TSDB: Fix loss of out-of-order samples when a WAL checkpoint drops a series record that the out-of-order write-behind log still needs #19737
  • 6 110
    6 Topics
    110 Posts
    Package UpdatesP
    [2.30.2] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 15 169
    15 Topics
    169 Posts
    Package UpdatesP
    [2.18.0] chore(deps): update dependency radicale to v3.9.0
  • 16 213
    16 Topics
    213 Posts
    Package UpdatesP
    [2.17.3] Update rallly to 4.16.3 Full Changelog Poll times saved an hour off around daylight saving changes In the week view, the hour skipped when clocks go forward is shown as a hatched "Clocks go forward" band, and a slot can't start inside it. In the month view, the start time dropdown lists exactly the times that exist in the poll's time zone. Options you already saved are not changed. If you created a poll with times close to a daylight saving change, check its options.
  • 9 75
    9 Topics
    75 Posts
    girishG
    App discontinued due to no upstream updates.
  • 14 123
    14 Topics
    123 Posts
    Package UpdatesP
    [5.5.16] Update uv to 0.13.7
  • 18 179
    18 Topics
    179 Posts
    Package UpdatesP
    [3.20.7] Update redmine to 7.0.3 Full Changelog
  • 71 794
    71 Topics
    794 Posts
    Package UpdatesP
    [3.8.3] Update Rocket.Chat to 8.9.1 Full Changelog Fixes high database load on busy workspaces with the Engagement Dashboard enabled, where every sent or deleted message read all of the day's dashboard records Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) Fixes the server staying up without ever accepting connections when a step of its startup fails; it now logs the error and exits Fixes instances started at the same time on a new database hanging at startup on a duplicate key error while creating the GENERAL room or the rocket.cat user Bump the Node.js base image of the Docker images to 24.22.1 (the Debian image moves from bullseye to bookworm), which fixes a Brotli decoder out-of-bounds write (CVE-2026-111497). Fixes push and email notifications piling up under load because the server paused for 2 seconds after every 100 notifications, even when more were waiting Fixes high database load when many users disconnect at once, such as after a network outage or an instance restart Stops the presence service from writing and broadcasting the user's status on every connection heartbeat when the status did not change Fixes push notifications arriving minutes late under load when the push gateway is slow to answer; each server now sends many push notifications at once instead of one at a time Fixes app slash commands that declare a permission being listed and executed for users without that permission
  • 55 382
    55 Topics
    382 Posts
    Package UpdatesP
    [2.11.0] Update php-base | final to 8.4-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 9 63
    9 Topics
    63 Posts
    Package UpdatesP
    [1.17.0] Update php-base | final to 8.4-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 2 50
    2 Topics
    50 Posts
    Package UpdatesP
    [1.0.3] Update rustfs to 1.0.4 Full Changelog fix(test): backport scanner wait correction for 1.0.4 by @overtrue in #8930
  • 4 15
    4 Topics
    15 Posts
    girishG
    Given that the upstream project is not maintained anymore, we have hidden this in the appstore. I had also submitted a PR upstream for a basic issue which is ignored - https://github.com/aliasaria/scrumblr/pull/161
  • 18 273
    18 Topics
    273 Posts
    Package UpdatesP
    [2.120.1] Update searxng to 3a3dd15
  • 2 39
    2 Topics
    39 Posts
    Package UpdatesP
    [1.29.0] Update seaweedfs to 4.52 Full Changelog webdav: copy a file onto a collection URL without losing the collection by @jayhemnani9910 in #12068 s3: group ListMultipartUploads by delimiter into CommonPrefixes by @jayhemnani9910 in #12069 filer: support nanosecond timestamps for conditional delete (#11339) by @Tyagiquamar in #12071 iceberg: fix CREATE TABLE rejecting a partition on the first column by @omninguyen in #12072 fix: volume.fsck -volumeId purges live chunks referenced from outside the volume's bucket by @kisow in #12076 fix(volume): keep preallocated growth above -volume.minFreeSpace by @JoePassanante in #12067 mount: resume metadata-log replay where a dropped stream stopped by @chrislusf in #12079 security: fail closed on gRPC TLS errors, verify dialed server identity by @chrislusf in #12263 vector: seaweed-vector workspace + flat/indexed top-K engine (P0 phase 1) by @chrislusf in #12096 deps: bump seaweedfs/raft for PreVote (leader survives partition rejoins) by @chrislusf in #12264
  • 5 38
    5 Topics
    38 Posts
    Package UpdatesP
    [1.5.2] Update serpbear to 3.1.2 Full Changelog
  • 15 97
    15 Topics
    97 Posts
    Package UpdatesP
    [1.5.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 5 53
    5 Topics
    53 Posts
    Package UpdatesP
    [2.19.1] Update Shaarli to 0.16.10 Full Changelog doc: plugins/playvideos: update Content-Security-Policy (CSP) documentation update vulnerable npm build dependencies rebuild Docker image against latest alpine:3.24.2 (PHP CVE-2026-109618, CVE-2026-109619) Full Changelog: https://github.com/shaarli/Shaarli/compare/v0.16.9...v0.16.10
  • 7 50
    7 Topics
    50 Posts
    jdaviescoatesJ
    @girish said in SickChill unlisted from app store: I hope they atleast bring back the issue tracker Out of interest, why does this matter for Cloudron? BTW, someone has replied to the thread I started on Discord informing me that the master releases are these https://pypi.org/project/sickchill/ Doesn't look like there has been a new one since March though.
  • 2 16
    2 Topics
    16 Posts
    Package UpdatesP
    [1.3.1] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 4 Topics
    41 Posts
    girishG
    The upstream project is archived - https://github.com/boypt/simple-torrent/ . There has been no changes in 2 years and modules are not updated.
  • 33 367
    33 Topics
    367 Posts
    nichu42N
    I wish Snappy and Tachyon would join forces.
  • 24 238
    24 Topics
    238 Posts
    Package UpdatesP
    [1.24.1] Update snipe-it to 8.8.3 Full Changelog Fixed #19895 - remove PHP 8.4/8.5 deprecation notices by @sudarshanvashisht in #19896 Fixed #19870 and #19869 - small maintenance improvements by @snipe in #19871 Fixed #19595 - numbers in custom fields exporting inconsistently by @snipe in #19872 Fixed #19778 - allow bulk scanner auditing by 2D bardcode by @snipe in #19874 Fixed #19626 - respect lastname firstname order more thoroughly by @snipe in #19875 Fixed potentially missing rows in license seats api endpoint by @marcusmoore in #19883 Bulk Checkout: Fixes redirect option not persisting by @Godmartinz in #19881 Fixed #19887 - use alpine 3.24 to get newer php by @markof88 in #19889 Fixed #18508 Custom Fields: Allow cloning custom fieldsets by @marcusmoore in #19793
  • 62 439
    62 Topics
    439 Posts
    Package UpdatesP
    [2.18.14] Update sogo to 5.12.13 Full Changelog
  • 13 104
    13 Topics
    104 Posts
    girishG
    Just checked on this again but it seems statping-ng is not going forward much . https://github.com/statping-ng/statping-ng/tags says the release was almost a year ago.
  • 45 481
    45 Topics
    481 Posts
    jamesJ
    Hello @teiluj If possible we will add SSO again. Thanks for sharring!
  • 15 146
    15 Topics
    146 Posts
    Package UpdatesP
    [1.13.0] Update python-base | final to 3.11-20261023 security: fix eMudhra cert compromise
  • 32 246
    32 Topics
    246 Posts
    Package UpdatesP
    [1.34.7] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 5 14
    5 Topics
    14 Posts
    jamesJ
    Hello @necrevistonnezr We are aware that there are currently no updates for the Tachyon app from us. Currently there are some issues with the app we are investigating.
  • 21 205
    21 Topics
    205 Posts
    Package UpdatesP
    [2.20.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 6 105
    6 Topics
    105 Posts
    Package UpdatesP
    [1.14.2] Update Node.js to 26.12.1 for Broccoli2Shell
  • 10 70
    10 Topics
    70 Posts
    Package UpdatesP
    [1.6.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 9 79
    9 Topics
    79 Posts
    timconsidineT
    @timconsidine said in Teddit Subscriptions no longer working: Just FYI - my LibReddit - selfhosted as Docker on another VPS = is still working. But now it is down. Maybe they have caught up with me.
  • 5 53
    5 Topics
    53 Posts
    Package UpdatesP
    [1.24.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 10 67
    10 Topics
    67 Posts
    girishG
    @Sam_uk we have unlisted TLDraw by now. Please see https://forum.cloudron.io/topic/10806/no-more-updates-to-tldraw . The license and company direction has changed.
  • 22 246
    22 Topics
    246 Posts
    Package UpdatesP
    [1.30.0] Update traccar to 6.17.0 Full Changelog
  • 10 104
    10 Topics
    104 Posts
    Package UpdatesP
    [2.8.0] Update python-base | final to 3.12-20261023 security: fix eMudhra cert compromise
  • 12 83
    12 Topics
    83 Posts
    Package UpdatesP
    [2.5.5] Update transmission to 4.1.4 Full Changelog Fixed a Transmission 4.1.0 regression that could cause torrents with zero-byte files to be handled incorrectly, sometimes losing downloaded progress (#9165) Hardened the torrent-add RPC method against malformed requests. (#9158) Fixed a rare bug that could prevent downloading webseeds from finishing. (#9146) Fixed per-torrent session speed-limit overrides so they apply to both downloads and uploads. (#9154) Fixed a potential RCE vulnerability in the macOS client. It requires local write access to the user's preferences, so it is not remotely exploitable. (GHSA-v7mp-fpv3-jf5r) Minimum supported version increased to macOS 12 (#9166) Improved UI code to use less CPU. (#9161) The torrent list now re-sorts and re-applies its filter when the torrent's top folder's name changes, eg after a rename or after a magnet link's metadata arrives. (#9159) Fixed a display bug that sometimes listed torrent names as 'Unknown'. (#9135) Fixed a 4.0.0 bug that broke transmission-remote --list-groups. (#9157)
  • 14 168
    14 Topics
    168 Posts
    Package UpdatesP
    [1.34.1] better postinstall msg
  • 37 430
    37 Topics
    430 Posts
    Package UpdatesP
    [2.107.1] Update tt-rss to 29ad90a
  • 11 114
    11 Topics
    114 Posts
    Package UpdatesP
    [1.30.0] Update tymeslot to 1.41.0 Full Changelog calendar: Make the selected date, today marker and schedule tabs readable calendar: Make the calendar grid usable from the keyboard and screen readers dashboard: Name the setup checklist by the text it shows dashboard: Make the selected option of toggle controls readable booking: Show the organiser's legal links when a group booking is full themes: Preload booking page fonts so the page stops jumping on load payments: Stop an earlier dispute's late close clearing a live one admin: Let admins cancel a pending invitation admin: Invite users by email from the admin users page embed: Keep the booking popup inside the window on tablets
  • 14 122
    14 Topics
    122 Posts
    Package UpdatesP
    [1.30.0] Update twenty to 2.56.1 Full Changelog [BREAKING_CHANGE] Let AI workflow steps run from their own config and permission scope (#29368) by @FelixMalfait feat(filter): add case-sensitive IS/IS_NOT operands for TEXT fields (#29201) by @etiennejouan feat(billing): add billing arrangement entity and validation (#29321) by @etiennejouan feat(billing): reject overlapping billing arrangements on insert (#29550) by @etiennejouan feat(front): pick the sending account from the Messages widget + button (#29562) by @martmull feat(getting-started): require a payment method to hide Getting started for good (#29607) by @etiennejouan feat(getting-started): add a completed state to onboarding cards (#29671) by @etiennejouan fix(twenty-shared): reject two-digit years when parsing date-time strings (#29176) by @Abhishek-B-R fix(CommonAPI): cap GraphQL find-many page size at QUERY_MAX_RECORDS (#29546) by @etiennejouan fix(billing): set Organization monthly fallback price to $52 (#29658) by @etiennejouan
  • 43 307
    43 Topics
    307 Posts
    Package UpdatesP
    [1.28.0] Update node-base | stage to 24-20261021 security: fix eMudhra cert compromise
  • 33 293
    33 Topics
    293 Posts
    Package UpdatesP
    [3.28.1] Update umami to 3.4.1 Full Changelog Upgraded Next.js to 16.4.2 (from 16.3.4 in v3.4.0). This fixes a critical RCE in next/og, SSRF in image optimization, cache poisoning, and an information disclosure issue. #4645 Upgraded React and React DOM to 19.3.1. Pinned the Docker base image to Node 22.23.4-alpine, which includes the October 2026 Node.js security fixes. Rebuild or re-pull your images to pick this up. #4657 Upgraded @modelcontextprotocol/server to 2.3.1 and @modelcontextprotocol/client to ^2.3.1. This fixes an OAuth credential leak (GHSA-6qxp-vccf-f47h) along with other advisories. #4645 #4661 Raised the security floors for vulnerable transitive dependencies: vite, undici, sharp, shell-quote, brace-expansion, fast-uri, postcss-selector-parser, and source-map-js. #4645 #4661
  • 40 386
    40 Topics
    386 Posts
    C
    Fantastic!
  • 20 131
    20 Topics
    131 Posts
    Package UpdatesP
    [1.6.2] Update base | final to 6.0.1 security: fix eMudhra cert compromise
  • 4 125
    4 Topics
    125 Posts
    Package UpdatesP
    [1.85.2] Update vault to 2.2.1 Full Changelog
  • 99 857
    99 Topics
    857 Posts
    Package UpdatesP
    [1.26.6] Update vaultwarden to 1.37.5 Full Changelog Website icons [GHSA-x9cq-f669-vrr4] (Medium, 5.3) Emergency access [GHSA-9pjj-f9g5-3x4c] (Medium, 4.3) Web vault: the bundled web vault is now v2026.10.1. If you serve your own web vault older than v2026.7.1, you might have compatibility issues. Configuration: invalid values now stop startup with an error. Numeric options have tighter types, so negative or too large values are rejected, for example above 65535 for LOGIN_RATELIMIT_MAX_BURST, TRASH_AUTO_DELETE_DAYS, EVENTS_DAYS_RETAIN or SMTP_TIMEOUT, or above 255 for EMAIL_ATTEMPTS_LIMIT. The rate limit *_SECONDS and *_MAX_BURST options, DATABASE_TIMEOUT and DATABASE_IDLE_TIMEOUT must be at least 1, DATABASE_MIN_CONNS can't be larger than DATABASE_MAX_CONNS, and DUO_CONTEXT_PURGE_SCHEDULE and PURGE_INCOMPLETE_SSO_AUTH must be empty or a valid cron expression. Close WebSocket connections that stop responding by @Cassian433 in #7807 Fix group import to update groups on data change by @Jogius in #7671 [Web 2026.9.0] Support new Emergency Access password payload by @tom27052006 in #7746 Fix email 2FA for SSO logins on iOS and Android by @dani-garcia in #7827 Make 2FA remember duration configurable by @tom27052006 in #7421 fix(attachments): enforce quota at v2 metadata reservation by @lucavb in #7450
  • 1 1
    1 Topics
    1 Posts
    Package UpdatesP
    You can use this thread to track updates to the Versitygw package. Please open issues in a separate topic instead of replying here.
  • 10 188
    10 Topics
    188 Posts
    Package UpdatesP
    [1.88.0] Update verdaccio to 7.1.0 Full Changelog @verdaccio/config, @verdaccio/store, @verdaccio/tarball, @verdaccio/web: Add the experimental flags.tarballMetadata option, which lets the web UI show the README of the exact version being viewed and fills missing dist.fileCount/dist.unpackedSize from the tarball itself. (#6409) @verdaccio/middleware, @verdaccio/proxy, @verdaccio/store, @verdaccio/ui-theme, @verdaccio/web: Show the provenance and registry signature of a version in the web UI. (#6447) @verdaccio/api, @verdaccio/config, @verdaccio/core, @verdaccio/middleware, @verdaccio/proxy, @verdaccio/store: Make npm audit signatures work through Verdaccio for packages proxied from an uplink, behind the experimental flags.signatures setting. (#6450) @verdaccio/core, @verdaccio/package-filter: Fix HTTP 500 responses for package requests when an installation forces minimatch 11. The access-rule matcher called the removed makeRe API. Use the supported matching API while retaining case-insensitive package access rules and first-match precedence. (#6434) @verdaccio/api: Fix the registry closing the client connection after answering a failed tarball download, which made the next request on that keep-alive connection fail with ECONNRESET or "other side closed". (#6438)
  • 40 287
    40 Topics
    287 Posts
    Package UpdatesP
    [1.28.0] Update vikunja to 2.8.0 Full Changelog Reject JSON bodies containing NUL on /api/v1 Reject JSON bodies containing NUL on /api/v2 Apply calendar-query filters to tasks Restore task cards to kanban boards Auto-scroll the board while dragging a task to off-screen buckets Return the user object instead of user_id on time entries Sync teams from oidc groups claim (#4311) Persist linked OIDC identities and authenticate local accounts Lock account after 10 failed password attempts Trash and restore project trees
  • 20 171
    20 Topics
    171 Posts
    Package UpdatesP
    [2.5.8] Update wallabag to 2.6.15 Full Changelog Support PHP 8.4 while retaining compatibility with PHP 7.4 and the locked legacy dependencies. Deprecation notices may still be emitted. Backport documentation monorepo merge to 2.6 by @yguedidi in #8780 Introduce a REDIS_URL (backport) by @Kdecherf in #8868 (read the doc about that) Hide delete public link item if not necessary by @nicosomb in #8878 Update graby and php-readability dependencies by @Kdecherf in #8891 Backport #8585 Prefetch content ISO to fetch URL content to 2.6 by @Kdecherf in #8889 Escape dynamic data in the ePub export by @j0k3r in #8968 Fix content and fetchedContent merging by @Simounet in #8985 Backport translations from master by @j0k3r in #9113 Full Changelog: https://github.com/wallabag/wallabag/compare/2.6.14...2.6.15
  • 5 105
    5 Topics
    105 Posts
    Package UpdatesP
    [1.33.0] Update Wallos to 5.11.1 Full Changelog escape folder names on output and let the Telegram test use the instance bot (259b12e) add mark/unmark paid buttons to subscriptions (#1139, thanks @NodeJSmith) (e9c9141) colored folders to group subscriptions (#1156, thanks @Itaromi) (591112b) add allratestoday.com as a second exchange-rate provider (#1291, thanks @cahthuranag) (cc58669) one Gotify server for the installation, tokens stay personal (#1234, thanks @thorstenhornung1) (9975646) one ntfy server for the installation, topics stay personal (#1233, thanks @thorstenhornung1) (fcfd3a0) one Pushover application for the installation, user keys stay personal (#1235, thanks @thorstenhornung1) (7f9aed8) one Telegram bot for the installation, chat ids stay personal (#1232, thanks @thorstenhornung1) (f17b36e) scope statistics and calendar to the user's pay period (#1213, thanks @gwpreston) (89a0347) continue notifications after SMTP exceptions (#1281, thanks @rmtshnik) (e7a4e1a)
  • 5 89
    5 Topics
    89 Posts
    Package UpdatesP
    [1.45.4] Update whitebophir to 2.18.33 Full Changelog Add personal-information rules, text warnings, and anonymous-board safety guidance by @lovasoa in #471
  • 8 165
    8 Topics
    165 Posts
    Package UpdatesP
    [1.55.0] Update weblate to 2026.11.1 Full Changelog Added account security findings with CSV leaked-password validation, persistent reports, and bulk password resets or dismissal. Added an upgrade check for legacy lookalike verified e-mail identities, with administrator cleanup in account security findings. Added authenticated GET /api/activity/ for daily activity and recently active projects. Require acceptance of invitations from automatic team assignments to project and workspace teams, including rules restored from project backups. Bound file-mask matching during component validation and repository updates to prevent crafted masks from exhausting workers. Require recent credential verification for browser changes to access rights, user accounts, and project visibility; use a password or linked sign-in provider when two-factor authentication is absent. See Two-factor authentication. Prevent overlapping automatic translation operations for the same component and language. Fixed lock contention when updating inconsistent and reused translation checks concurrently. Preserve plural forms when uploading translations as suggestions. Removed /activity/month.json; use GET /api/activity/ instead.
  • 25 617
    25 Topics
    617 Posts
    Package UpdatesP
    [4.215.0] Update wekan to 13.01 Full Changelog
  • 16 141
    16 Topics
    141 Posts
    Package UpdatesP
    [1.14.0] Update node-base | final to 24-20261021 security: fix eMudhra cert compromise
  • 5 79
    5 Topics
    79 Posts
    Package UpdatesP
    [2.22.1] Update woodpecker to 3.20.1 Full Changelog Restore drone envsubst [#7433] Fix step lop group UX [#7431]
  • 116 Topics
    892 Posts
    Package UpdatesP
    [3.21.1] Update WordPress to 7.1.4 Full Changelog
  • 231 Topics
    2k Posts
    Package UpdatesP
    [3.17.1] Update WordPress to 7.1.4 Full Changelog
  • 14 72
    14 Topics
    72 Posts
    Package UpdatesP
    [1.5.0] Update php-base | final to 8.5-20261021 security: fix RCEs CVE-2026-109618 / CVE-2026-109619
  • 21 141
    21 Topics
    141 Posts
    jamesJ
    With the package version 1.14.0 we have migrated the @yourls package from LDAP to OIDC. If you find anything not working as intended, please use this topic to report the issue.
  • 2 Topics
    35 Posts
    Package UpdatesP
    [1.16.0] Update urlaubsverwaltung to 6.21.0 Full Changelog blackoutperiod a11y fixes #6881 Feiertage fr Lettland ergnzen #6877 Keep the shown months of the overview calendar when navigating back #6859 Pflichtfelder ber das required-Attribut auszeichnen #6879 Use retrying locator waits in UI test page objects #6873 Include blackout periods in backup/restore #6861 Keep closed card info hints out of the tab order #6830