ci(triage): catch a malformed credential, not just a revoked one

The token was replaced at 08:25 and the runs at 08:26 still failed — with a
different error, which this gate did not recognise:

  "Invalid auth token · Fix external auth token · Invalid Authorization header
   value from CLAUDE_CODE_OAUTH_TOKEN: it contains a line break at character 62
   (110 characters on 2 lines)."

  "error": "invalid_request", "api_error_status": null

No "authentication_failed", no 401 — so the gate added a few hours earlier
reported this as a generic workflow fault, which is exactly the unhelpful
message it existed to replace. Two shapes of the same problem inside a week:
revoked (401) and malformed (invalid_request, reason only in the message text).

Detection now also matches the text marker, but only on an object the SDK
itself flagged with is_api_error_message — an issue body that merely mentions
the secret's name cannot fake one, and a false positive would change only the
message since this branch exits 1 regardless.

The SDK's own wording is more useful than anything inferred here ("a line break
at character 62" names the exact defect), so it is now quoted verbatim in the
annotation, and the remedy says to re-enter the secret as a SINGLE line.

Verified against both real execution-file shapes captured from production —
today's malformed failure and the 08-30 revoked one — plus regression that
max_turns still escalates, generic failures keep the generic message, and an
issue mentioning CLAUDE_CODE_OAUTH_TOKEN is not misreported as a credential
fault.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

.github/stargazer_countries.csv

@@ -273,6 +273,7 @@ Gajalshankar,India,
 Gangol,,2026-08-10
 Garak1980,,2026-08-10
 GaryOG,,2026-08-10
+GentryChe,,2026-08-30
 Germaenace,,2026-08-10
 Getrio,Italy,
 Ghost-Sam1222,,2026-08-10
@@ -385,6 +386,7 @@ JosephBlock,United States,
 Julian1701,,2026-08-10
 JulienFloris,Netherlands,
 JuraLadanov,,2026-08-10
+Jutsch,,2026-08-30
 K0stIa,,2026-08-10
 KRC604,,2026-08-10
 KairuByte,,2026-08-10
@@ -441,6 +443,7 @@ Lizzardis,,2026-08-10
 LoginByCall,,2026-08-10
 Lolekpolek,,2026-08-10
 LonelySoul7X,,2026-08-10
+Loong-He,China,2026-08-30
 Lorsel,Italy,
 Luca2165801154,,2026-08-10
 Lucius-Waverly,,2026-08-16
@@ -990,6 +993,7 @@ berkovich98,,2026-08-10
 bertrand-f,,2026-08-10
 bes-r,Netherlands,
 bestnub,Germany,
+betechyou,,2026-08-30
 beyercenter,,2026-08-10
 bezigebever,,2026-08-10
 bggsolar,Germany,
@@ -1225,6 +1229,7 @@ denisgolius,Ukraine,
 dennisjonda,Germany,
 dennisvandalen,Netherlands,
 denvernbd,Russian Federation,2026-08-10
+der-berni,Germany,2026-08-30
 derailius,,2026-08-10
 dethpickle,United States,
 dev4jam,Australia,
@@ -1522,6 +1527,7 @@ hreikin,United Kingdom,
 hsiguy,,2026-08-10
 huangyixinv,,2026-08-10
 hubikj,,2026-08-10
+hufforguk,,2026-08-30
 hugobloem,United Kingdom,
 hujiayi0126,,2026-08-10
 hunterlong,United States,
@@ -1661,6 +1667,7 @@ joshcliffejones,United Kingdom,
 joshmeads,Canada,
 josiah-eichelman,,2026-08-10
 jpaulomt,,
+jpeisach,United States,2026-08-30
 jpmaldonado,,2026-08-10
 jpoll962,,2026-08-10
 jpombas,Portugal,
@@ -1831,6 +1838,7 @@ mProwler,United States,
 mStrangers,,2026-08-10
 mabt,,2026-08-10
 macedobernardo,,2026-08-10
+machineGnu,,2026-08-30
 madjetey,,2026-08-10
 maggle-swim,,2026-08-10
 malachitgruen,Germany,
@@ -1840,6 +1848,7 @@ manu7691,United States,
 manugratx,,2026-08-10
 mapeje,Sweden,
 maphouse,Canada,
+marat-365,,2026-08-30
 maratbakirov,,2026-08-10
 marcetad,,2026-08-10
 marcjay,United Kingdom,
@@ -1849,6 +1858,7 @@ marcschraepler,Austria,
 marcusrbrown,,2026-08-10
 mareklab,,2026-08-10
 marevers,Germany,
+marialaranjo,,2026-08-30
 marian-paun,Romania,
 mariusvslprts,Germany,
 mark-219,United States,2026-08-16
@@ -2173,6 +2183,7 @@ pwitte,,2026-08-10
 pxshh,,2026-08-10
 pynbbz,,2026-08-10
 pyrech,France,
+pysj,,2026-08-30
 pziezio,Poland,
 pzkpfw6,,2026-08-10
 qadk,,2026-08-10
@@ -2196,6 +2207,7 @@ rascasseuk,,2026-08-10
 raul811,,2026-08-10
 raulpetruta,Romania,
 rawpie2,,2026-08-10
+raymand211092,Cuba,2026-08-30
 raytedjaja,,2026-08-10
 rbalaev,,2026-08-10
 rbaron,,2026-08-10
@@ -2211,6 +2223,7 @@ reggiano,,2026-08-10
 reid,United States,
 reinvanhaaren,Netherlands,
 remb0,Netherlands,
+renatoptr,,2026-08-30
 renejr63,,2026-08-10
 resomi,,2026-08-10
 retpolanne,Brazil,

.github/workflows/lint.yml

@@ -38,7 +38,7 @@ jobs:
         run: |
           set -euo pipefail
           CHANGED_FILES=$(git diff --name-only "$DIFF_RANGE")
-          UNICODE_SPACES_REGEX=$'[\\u00A0\\u2002\\u2003\\u2007\\u2008\\u2009\\u202F\\u205F\\u3000\\u200B]'
+          UNICODE_SPACES_REGEX='[\x{00A0}\x{2002}\x{2003}\x{2007}\x{2008}\x{2009}\x{202F}\x{205F}\x{3000}\x{200B}]'
           for file in $CHANGED_FILES; do
             if [ -f "$file" ]; then
               MIME_TYPE=$(file --mime-type -b "$file")
@@ -89,7 +89,7 @@ jobs:
       - name: Fix non-printable Unicode spaces in all text files
         run: |
           set -euo pipefail
-          UNICODE_SPACES_REGEX=$'[\\u00A0\\u2002\\u2003\\u2007\\u2008\\u2009\\u202F\\u205F\\u3000\\u200B]'
+          UNICODE_SPACES_REGEX='[\x{00A0}\x{2002}\x{2003}\x{2007}\x{2008}\x{2009}\x{202F}\x{205F}\x{3000}\x{200B}]'
           find . -type f ! -path "./.git/*" | while read -r file; do
             MIME_TYPE=$(file --mime-type -b "$file")
             if [[ "$MIME_TYPE" == text/* ]]; then

.github/workflows/on_issues_ai_triage.yaml

@@ -362,6 +362,50 @@ jobs:
                "$EXECUTION_FILE" >/dev/null 2>&1
           }
 
+          # Did the run die because the Claude credential is bad? The action
+          # reports this uselessly — the failure surfaces as "--json-schema was
+          # provided but Claude did not return structured_output", which points
+          # at the schema and not at auth. The execution file carries the truth.
+          #
+          # A bad credential shows up in more than one shape, and both have been
+          # seen in production within a week:
+          #   * revoked token  -> error "authentication_failed", HTTP 401
+          #   * malformed token -> error "invalid_request", api_error_status
+          #     null, and the reason only in the SDK's message text ("Invalid
+          #     Authorization header value from CLAUDE_CODE_OAUTH_TOKEN: it
+          #     contains a line break at character 62").
+          # Matching only the first shape reported the second as a generic
+          # workflow fault, so the text marker is checked too — but only on an
+          # object the SDK itself flagged as an API error, so an issue body that
+          # merely mentions the secret's name cannot fake one. A false positive
+          # would change only the message: this branch exits 1 either way.
+          hit_auth_failure() {
+            [ -n "${EXECUTION_FILE:-}" ] && [ -s "${EXECUTION_FILE:-}" ] || return 1
+            jq -e '(type == "array") and
+                   any(.[]?;
+                       (type == "object") and
+                       (((.error? // "") == "authentication_failed") or
+                        ((.error_status? // 0) == 401) or
+                        ((.api_error_status? // 0) == 401) or
+                        (((.is_api_error_message? // false) == true) and
+                         (tostring | test("CLAUDE_CODE_OAUTH_TOKEN|Invalid auth token")))))' \
+               "$EXECUTION_FILE" >/dev/null 2>&1
+          }
+
+          # The SDK's own words are far more useful than anything this script
+          # can infer — "it contains a line break at character 62" names the
+          # exact defect. Surface it verbatim when present.
+          auth_failure_detail() {
+            [ -n "${EXECUTION_FILE:-}" ] && [ -s "${EXECUTION_FILE:-}" ] || return 0
+            jq -r 'if type == "array" then
+                     [ .[]? | select(type == "object")
+                            | select((.is_api_error_message? // false) == true)
+                            | tostring
+                            | capture("(?<m>Invalid Authorization header value[^\"]*|Invalid auth token[^\"]*)")
+                            | .m ] | first // ""
+                   else "" end' "$EXECUTION_FILE" 2> /dev/null || true
+          }
+
           # GATE 1 — did the action itself run? This is checked BEFORE looking
           # at the payload, because the action can fail *after* having written
           # a valid structured output: the object would sail through the shape
@@ -380,6 +424,17 @@ jobs:
           if [ "${CLASSIFY_OUTCOME:-}" = "failure" ]; then
             restore_needs_info
 
+            # Checked before anything else, because it is the one failure with
+            # a specific remedy and it takes down every tier at once — tier 1
+            # cannot label, so tier 2's batch is empty and the whole pipeline
+            # goes quiet while each run still fails in a way that reads like a
+            # per-issue problem. Say plainly what is wrong and what to do.
+            if hit_auth_failure; then
+              DETAIL=$(auth_failure_detail)
+              echo "::error::CLAUDE_CODE_OAUTH_TOKEN is being rejected${DETAIL:+ — $DETAIL}. This is NOT a problem with issue #$ISSUE: every AI workflow is down until the credential is fixed. Regenerate with 'claude setup-token' and re-enter the secret in the CR_PAT environment as a SINGLE line with no line break or trailing newline. Set the AI_DISABLED repo variable to 'true' to silence these runs meanwhile."
+              exit 1
+            fi
+
             # ...with one exception. Exhausting the turn budget is NOT a
             # workflow fault: the action ran fine and this particular issue was
             # just too tangled to finish inside the turn budget. Treating it as systemic

birdnet-go-dev/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 20260829.2 (29-08-2026)
+- Minor bugs fixed
+## 20260829.1 (29-08-2026)
+- Minor bugs fixed
+## 20260829 (29-08-2026)
+- Minor bugs fixed
 ## 20260828.2 (28-08-2026)
 - Synced with upstream birdnet-go; fork PR #57 updated
 ## 20260828.1 (28-08-2026)

birdnet-go-dev/config.yaml

@@ -127,5 +127,5 @@ slug: birdnet-go-dev
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
 usb: true
-version: "20260828.2"
+version: "20260829.2"
 video: true

calibre_web/CHANGELOG.md

@@ -1,4 +1,8 @@
  
+## 0.6.27.3 (2026-08-30)
+- Doc: explain in the README that Calibre-Web's optional extras (metadata, kobo, gdrive, gmail, goodreads, ldap, oauth, comics) are already installed by the LinuxServer base image, that `pip install calibreweb[...]` inside the container is useless and not persistent, and that the cover fields on the Edit Metadata page are gated on `Enable Uploads` plus the user's `Upload` permission (https://github.com/alexbelgium/hassio-addons/issues/1143)
+- Fix: remove the Dockerfile step that claimed to install the Calibre binaries into `/opt/calibre`. There is no `wget` in the image, so the command failed silently and left the layer empty; the binaries are and were provided at start by the default `linuxserver/mods:universal-calibre` docker mod
+
 ## 0.6.27.2 (2026-08-23)
 - Fix: trust the whole supervisor network range for the ingress auth header instead of the addon's own address, which changes across restarts. The list is only written when that range is missing, so an entry added in the calibre-web admin page is no longer erased on every start (https://github.com/alexbelgium/hassio-addons/pull/3010)
 

calibre_web/Dockerfile

@@ -35,11 +35,9 @@ RUN \
     && echo '#!/bin/sh' > /usr/bin/xdg-desktop-menu && chmod +x /usr/bin/xdg-desktop-menu \
     && echo '#!/bin/sh' > /usr/bin/xdg-mime && chmod +x /usr/bin/xdg-mime
 
-# Install calibre binaries (provides calibredb required for book downloads)
-# hadolint ignore=DL4006
-RUN \
-    wget -nv -O- https://download.calibre-ebook.com/linux-installer.sh | sh /dev/stdin install_dir=/opt/calibre
-ENV PATH="/opt/calibre:${PATH}"
+# By default the calibre binaries (calibredb, ebook-convert, ebook-meta) are installed at start by
+# the linuxserver/mods:universal-calibre docker mod, set as the default DOCKER_MODS in config.yaml.
+# The xdg-* stubs above keep its calibre_postinstall step quiet.
 
 # Global LSIO modifications
 COPY ha_lsio.sh /ha_lsio.sh

calibre_web/README.md

@@ -97,6 +97,18 @@ This addon supports mounting both local drives and remote SMB shares:
 - **Local drives**: See [Mounting Local Drives in Addons](https://github.com/alexbelgium/hassio-addons/wiki/Mounting-Local-Drives-in-Addons)
 - **Remote shares**: See [Mounting Remote Shares in Addons](https://github.com/alexbelgium/hassio-addons/wiki/Mounting-remote-shares-in-Addons)
 
+### Optional Calibre-Web features
+
+Calibre-Web documents optional extras that a manual installation adds with `pip install calibreweb[metadata]` and similar. **You do not need to install anything here**: the LinuxServer base image this add-on builds on installs Calibre-Web's `requirements.txt` *and* its full `optional-requirements.txt` into the application's virtualenv, so the gdrive, gmail, goodreads, ldap, oauth, metadata, comics and kobo dependencies are all present already. Running `pip install calibreweb[...]` inside the container is not a supported way to enable them: it installs the PyPI distribution of Calibre-Web over an installation that already has those dependencies, and it can disturb the versions the base image pinned. It is also thrown away, because the Supervisor recreates the add-on container on restart.
+
+Optional features are switched on in the Calibre-Web web interface, not in the add-on options, under `Admin` -> `Basic Configuration` -> `Feature Configuration` (for example `Enable Uploads`, `Enable Kobo sync`, `Use Goodreads`).
+
+**Book covers.** The `Fetch Cover from URL` and `Upload Cover from Local Disk` fields only appear on a book's `Edit Metadata` page when `Enable Uploads` is ticked in `Feature Configuration` **and** the logged-in user has the `Upload` permission (`Admin` -> the user -> `Upload`). A missing Python package is not what hides them.
+
+**Conversion, metadata embedding and the other Calibre integrations** use command-line binaries such as `ebook-convert`, `ebook-meta` and `calibredb`. Those are installed at start by the `linuxserver/mods:universal-calibre` docker mod, which is the shipped default of the `DOCKER_MODS` option. If you set `DOCKER_MODS` yourself, keep `linuxserver/mods:universal-calibre` in the list (mods are separated by `|`) or those binaries disappear.
+
+**Other compatible Python packages** can be installed from the add-on's custom script (see the section below); `pip` there points at Calibre-Web's own virtualenv. Such a script runs on every start, and it has to, since the container's writable layer does not persist.
+
 ### Custom Scripts and Environment Variables
 
 This addon supports custom scripts and environment variables:

calibre_web/config.yaml

@@ -116,5 +116,5 @@ schema:
 slug: calibre-web
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/calibre_web
-version: "0.6.27.2"
+version: "0.6.27.3"
 video: true

emby_beta/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 4.10.0.29 (2026-08-29)
+- Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
+ 
 ## 4.10.0.28 (2026-08-29)
 - Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
  

emby_beta/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="4.10.0.28"
+ARG BUILD_UPSTREAM="4.10.0.29"
 FROM ${BUILD_FROM}
 
 ##################

emby_beta/config.yaml

@@ -122,5 +122,5 @@ schema:
 slug: emby_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/emby
-version: "4.10.0.28"
+version: "4.10.0.29"
 video: true

emby_beta/updater.json

@@ -5,5 +5,5 @@
   "slug": "emby",
   "source": "github",
   "upstream_repo": "linuxserver/docker-emby",
-  "upstream_version": "4.10.0.28"
+  "upstream_version": "4.10.0.29"
 }

epicgamesfree/CHANGELOG.md

@@ -1,4 +1,8 @@
  
+## 2026.08.29 (2026-08-29)
+- Update to latest version from charlocharlie/epicgames-freegames
+- Upstream tag : debian-2026-08-29
+ 
 ## 2026.08.13 (2026-08-13)
 - Update to latest version from charlocharlie/epicgames-freegames
 - Upstream tag : debian-2026-08-13

epicgamesfree/config.yaml

@@ -88,5 +88,5 @@ schema:
 slug: epicgamesfree
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2026.08.13"
+version: "2026.08.29"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]"

epicgamesfree/updater.json

@@ -2,10 +2,10 @@
   "dockerhub_by_date": true,
   "dockerhub_list_size": 2,
   "github_exclude": "-",
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "epicgamesfree",
   "source": "dockerhub",
   "upstream_repo": "charlocharlie/epicgames-freegames",
-  "upstream_version": "debian-2026-08-13"
+  "upstream_version": "debian-2026-08-29"
 }

filebrowser_quantum/CHANGELOG.md

@@ -1,4 +1,26 @@
  
+## 1.5.3.2 (2026-08-30)
+- Fix Download in the Home Assistant iOS companion app (iOS 17 and later),
+  where a file opened and showed its content with no way to save it.
+  FileBrowser downloads by clicking a link that carries no `download`
+  attribute, and the app's WKWebView only turns a click into a real download
+  when that attribute is present, so inside the ingress panel the file was
+  simply rendered. The ingress filter now adds the attribute to FileBrowser's
+  own download link. "Open file" still opens, and the public-share sidebar's
+  own download button is not covered. Desktop browsers already downloaded
+  these and are unchanged, as is direct access on port 8071.
+ 
+## 1.5.3.1 (2026-08-29)
+- Fix "open parent directory" in Tools -> File Size Analyzer under Home
+  Assistant ingress. FileBrowser opened the parent folder in a new tab, which
+  lands on the raw ingress URL with no Home Assistant frontend around it to
+  keep the ingress session alive, so the new tab answered 401 instead of
+  showing the folder. The ingress vhost now turns that popup into a navigation
+  of the panel itself. The same fix covers the other tool views and the "go to
+  item" action on search results, which open a new tab the same way. Download
+  and preview popups, links pointing out of the add-on, and direct access on
+  port 8071 are unchanged.
+ 
 ## 1.5.3 (2026-08-29)
 - Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
  

filebrowser_quantum/config.yaml

@@ -118,4 +118,4 @@ schema:
 slug: filebrowser_quantum
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.5.3"
+version: "1.5.3.2"

filebrowser_quantum/rootfs/etc/nginx/servers/ingress.conf

@@ -3,7 +3,7 @@ server {
 
     include /etc/nginx/includes/server_params.conf;
     include /etc/nginx/includes/proxy_params.conf;
-    
+
     client_max_body_size 0;
 
    location / {
@@ -12,6 +12,60 @@ server {
        proxy_send_timeout 30m;
        proxy_read_timeout 30m;
        proxy_pass         %%protocol%%://backend%%subpath%%;
+
+       # Two things the ingress panel needs that a plain browser tab does not.
+       # Both are injected into the page's existing nonce-carrying inline script
+       # rather than next to <div id="app">: FileBrowser sends
+       # script-src 'self' 'nonce-<random>', so a standalone inline <script>
+       # would be blocked. If upstream ever drops that
+       # window.__pwaDeferredPrompt line the filter stops matching and both
+       # behaviours revert, which is the state before either fix.
+       #
+       # 1. Opening a folder. The tool views (Tools -> File Size Analyzer and
+       # the others) always set the context menu's showLimitedOptions flag, and
+       # openParentFolder() hands that same flag to goToItem() as its newTab
+       # argument, so the folder is opened with window.open(<url>, '_blank').
+       # Behind ingress that popup lands on the raw /api/hassio_ingress/<token>/
+       # url with no Home Assistant frontend around it to keep the ingress
+       # session alive, so the new tab answers 401 instead of showing the
+       # folder. Turn it into a navigation of the panel itself. The context
+       # menu's "go to item" action, offered by search results and the tool
+       # views, hardcodes the same new tab and is fixed with it.
+       #
+       # Scoped to the two prefixes goToItem() builds, "files/" and
+       # "public/share/", so the window.open calls that download or preview a
+       # file (they go to api/resources/download) keep their own tab: sending
+       # an inline raw file to location.assign would replace the whole app. A
+       # link out of the add-on keeps its own tab as well, unless a user points
+       # a sidebar link -- or a link inside a file open in the editor -- at this
+       # same instance's files/ or public/share/ route. Same shape as the komga
+       # add-on's ingress filter.
+       #
+       # 2. Download. FileBrowser downloads a file by building an <a> with no
+       # download attribute, clicking it, and letting the attachment response do
+       # the rest. The Home Assistant iOS companion app is a WKWebView, and a
+       # download happens there only when WebKit turns a navigation *action*
+       # into a WKDownload, which is what the download attribute does -- the app
+       # hands that to its own download manager
+       # (WebViewController+WebKitDelegates.swift, navigationAction:didBecome
+       # download:). Its response policy delegate returns .allow for every
+       # sub-frame and never returns .download, so a plain attachment navigation
+       # inside the ingress panel is just rendered: a text file opens and shows
+       # its content with no way to save it. Adding the attribute makes the same
+       # click a real download. Desktop browsers already downloaded these and
+       # are unaffected, and an empty value keeps the filename the server sends
+       # in Content-Disposition. Matched on the two exact download endpoints,
+       # minus inline=true: the "no preview available" fallback renders an
+       # "Open file" link on the same endpoint with that parameter
+       # (views/files/Preview.vue), and it is meant to open, not save. Only
+       # programmatic clicks pass through here -- a person clicking a link never
+       # calls HTMLAnchorElement.prototype.click -- so this reaches
+       # FileBrowser's own hidden download anchor and nothing a user clicks.
+       #
+       # Not covered: the public-share sidebar downloads with window.open()
+       # rather than an anchor, and the app's download manager is gated on
+       # iOS 17 (WebViewController+WebKitDelegates.swift).
+       sub_filter "window.__pwaDeferredPrompt = null;" "window.__pwaDeferredPrompt = null;(function(){var o=window.open;window.open=function(u,n,f){try{var b=(window.globalVars||{}).baseURL;if(u&&n==='_blank'&&!f&&b){if(b.slice(-1)!=='/')b+='/';var t=new URL(u,location.href);if((t.protocol==='http:'||t.protocol==='https:')&&t.origin===location.origin&&(t.pathname.indexOf(b+'files/')===0||t.pathname.indexOf(b+'public/share/')===0)){location.assign(t.href);return window}}}catch(e){}return o.apply(window,arguments)};var c=HTMLAnchorElement.prototype.click;HTMLAnchorElement.prototype.click=function(){try{var b=(window.globalVars||{}).baseURL;if(b&&this.href&&!this.hasAttribute('download')){if(b.slice(-1)!=='/')b+='/';var t=new URL(this.href,location.href);if(t.origin===location.origin&&t.searchParams.get('inline')!=='true'&&(t.pathname===b+'api/resources/download'||t.pathname===b+'public/api/resources/download')){this.download=''}}}catch(e){}return c.apply(this,arguments)}})();";
   }
 
 }

flexget/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 3.20.8 (2026-08-29)
+- Update to latest version from wiserain/flexget
+ 
 ## 3.20.6 (2026-08-22)
 - Update to latest version from wiserain/flexget
  

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.20.6"
+version: "3.20.8"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,9 +1,9 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.20.6"
+  "upstream_version": "3.20.8"
 }