fix(global_var): non-destructive .env writes; correct shell quoting

Three minimum-scope robustness fixes in .templates/00-global_var.sh:

1. shell_quote no longer doubles backslashes inside single quotes
   (e.g. 'C:\Users\test' was producing 'C:\\Users\\test' in injected
   scripts) and now uses the canonical '\'' escape for single quotes
   instead of the buggy '"'"' + trailing-space-trim form, which was
   mangling values containing apostrophes (e.g. "it's" -> "it' s").

2. /.env and /etc/environment are now patched in place: existing
   content from the upstream image and the system (PATH, LANG, etc.)
   is preserved and only the marked ADDON ENV block is replaced.
   Previously the whole files were overwritten, destroying upstream
   defaults.

3. Writing to /var/run/s6/container_environment is now best-effort
   (|| true) so a read-only mount on a single entry cannot abort the
   rest of the env injection under set -e.

.github/stargazer_countries.csv

@@ -691,6 +691,7 @@ TarrX,Germany
 Tastaturpilot,
 Tche333,
 Tchoupinax,
+TeaRexJack,
 Teberon,Poland
 TechCrazi,
 TechSaiyajin,Germany
@@ -746,9 +747,11 @@ VortexP,Finland
 W3Max,Canada
 WanterCry,
 WarC0zes,France
+Ward-P,
+WeatherWulf,
 Weatherwulf,
 Westwall98,
-Wheemer,
+Wheemer,Canada
 WhiteStar360,
 WhoAmI-ffff,
 WhoTheHeck,
@@ -825,6 +828,7 @@ alexit190,
 alexluckk,
 alexmalinoshevsky,
 alexneo2003,
+alexschwantes,
 alfredolvera,
 aliebald,Germany
 alinaqihassan,
@@ -1168,6 +1172,7 @@ devchristof,France
 devorient,
 devqcf,Kazakhstan
 devstuff,United States
+dewet22,United Kingdom
 dextersnp,
 dez011,
 dgalanberasaluce,
@@ -1544,7 +1549,7 @@ jj-csg,
 jkpe,United States
 jlunz,Germany
 jmbaggs,
-jmbish04,
+jmbish04,United States
 jmtramos,
 joao-ribafeita,
 joaolpinho,Portugal
@@ -1637,6 +1642,7 @@ kkosik,
 knuti1960,Germany
 koburg,
 kolorafa,
+kompuda,
 kongjudas,
 kongxx75,
 koto-games,
@@ -2199,6 +2205,7 @@ sensei73,
 sghnsk,
 sgranfield4403-3,
 shakeeltariq,
+shanport,
 shaonianzhentan,China
 shiqixixixi,
 shirou93,
@@ -2305,6 +2312,7 @@ swerveshot,Netherlands
 swiewiora,
 swimly,
 sycx2,Germany
+sysadm47362,United States
 szabinho,United Kingdom
 szjzaq,
 t-offline,
@@ -2463,6 +2471,7 @@ whc2001,United States
 wheeeyeyeye,
 whyisthisbroken,Italy
 wickedst,United Kingdom
+wildenono,
 wildnet,Poland
 wile-e1,Canada
 williamcorsel,Netherlands
@@ -2495,6 +2504,7 @@ xz0609,
 yNic0,
 yanghuatjy,
 yangxiongj,
+yannbertrand,France
 yannpub,
 ycardon,France
 yfranke,

.templates/00-global_var.sh

@@ -82,11 +82,10 @@ dotenv_quote() {
 }
 
 shell_quote() {
-    # Single-quote for safe injection in shell code
-    local s="$1"
-    s="${s//\\/\\\\}"
-    s="${s//\'/\'\"\'\"\' }"
-    s="${s% }"
+    # Single-quote for safe injection in shell code.
+    # Inside single quotes only the single quote needs escaping ('->'\'').
+    # Do NOT escape backslashes: they are literal inside single quotes.
+    local s="${1//\'/\'\\\'\'}"
     printf "'%s'" "$s"
 }
 
@@ -166,9 +165,9 @@ export_var() {
     # Runtime environment (no eval, safe for special chars)
     export "$k=$v"
 
-    # S6 environment (preferred for services)
+    # S6 environment (preferred for services); best-effort, tolerate RO mounts
     if [[ -d /var/run/s6/container_environment ]]; then
-        printf '%s' "$v" > "/var/run/s6/container_environment/$k"
+        printf '%s' "$v" > "/var/run/s6/container_environment/$k" || true
     fi
 
     # Queue for .env and /etc/environment (written once, idempotent)
@@ -180,6 +179,7 @@ export_var() {
 
 ################################################################################
 # JSON parsing (jq bug fixed: use "? //", not "?//")
+# Order: 1) top-level addon options first, 2) env_vars second (can override)
 ################################################################################
 while IFS= read -r -d $'\0' k && IFS= read -r v; do
     export_var "$k" "$v"
@@ -189,7 +189,15 @@ done < <(
 
         . as $root
         | (
-            # 1) env_vars[] (supported shapes)
+            # 1) top-level scalar options excluding env_vars (processed first)
+            $root
+            | to_entries[]
+            | select(.key != "env_vars")
+            | select((.value|type) != "object" and (.value|type) != "array" and (.value|type) != "null")
+            | emit(.key; .value)
+          ),
+          (
+            # 2) env_vars[] (processed second, overrides addon options if same key)
             ($root.env_vars? // [])[] as $e
             | if ($e|type) == "object" then
                   if ($e|has("name") and has("value")) then
@@ -205,31 +213,36 @@ done < <(
                         | emit($m.k; $m.v)
                     else empty end
               end
-          ),
-          (
-            # 2) top-level scalar options excluding env_vars
-            $root
-            | to_entries[]
-            | select(.key != "env_vars")
-            | select((.value|type) != "object" and (.value|type) != "array" and (.value|type) != "null")
-            | emit(.key; .value)
           )
     ' "$JSONSOURCE"
 )
 
 ################################################################################
-# Write .env and /etc/environment (idempotent: replace whole file content)
+# Write .env and /etc/environment (idempotent: replace only our block,
+# preserving any pre-existing content from the upstream image / system).
 # Notes:
 # - /.env is commonly used by apps expecting dotenv format
 # - /etc/environment is read by PAM/system tooling; KEY="value" is acceptable
 ################################################################################
-{
-    echo "$BLOCK_BEGIN"
-    cat "$KV_FILE"
-    echo "$BLOCK_END"
-} > "$ENV_FILE.tmp"
-mv "$ENV_FILE.tmp" "$ENV_FILE"
-cp "$ENV_FILE" "$ETC_ENV_FILE"
+update_env_file() {
+    local f="$1" tmp
+    tmp="$(mktemp_safe)"
+    if [[ -f "$f" ]]; then
+        awk -v b="$BLOCK_BEGIN" -v e="$BLOCK_END" '
+            $0==b { skip=1; next }
+            $0==e { skip=0; next }
+            !skip
+        ' "$f" > "$tmp"
+    fi
+    {
+        echo "$BLOCK_BEGIN"
+        cat "$KV_FILE"
+        echo "$BLOCK_END"
+    } >> "$tmp"
+    mv "$tmp" "$f"
+}
+update_env_file "$ENV_FILE"
+update_env_file "$ETC_ENV_FILE"
 
 ################################################################################
 # Inject into scripts and shells (best-effort)

autobrr/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 1.78.0 (2026-05-16)
+- Update to latest version from autobrr/autobrr (changelog : https://github.com/autobrr/autobrr/releases)
+
 ## 1.77.1 (2026-05-09)
 - Update to latest version from autobrr/autobrr (changelog : https://github.com/autobrr/autobrr/releases)
 

autobrr/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="1.77.1"
+ARG BUILD_UPSTREAM="1.78.0"
 FROM ${BUILD_FROM}
 
 ##################

autobrr/config.yaml

@@ -108,4 +108,4 @@ schema:
 slug: autobrr
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/autobrr
-version: "1.77.1"
+version: "1.78.0"

autobrr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "autborr",
   "source": "github",
   "upstream_repo": "autobrr/autobrr",
-  "upstream_version": "1.77.1"
+  "upstream_version": "1.78.0"
 }

birdnet-go/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## nightly-20260511-414 (2026-05-16)
+- Update to latest version from tphakala/birdnet-go (changelog : https://github.com/tphakala/birdnet-go/releases)
+
 ## nightly-20260429-405 (2026-05-02)
 - Update to latest version from tphakala/birdnet-go (changelog : https://github.com/tphakala/birdnet-go/releases)
 

birdnet-go/config.yaml

@@ -118,4 +118,4 @@ slug: birdnet-go
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/birdnet-go
 usb: true
-version: "nightly-20260429-405"
+version: "nightly-20260511-414"

birdnet-go/updater.json

@@ -2,10 +2,10 @@
   "github_beta": true,
   "github_fulltag": true,
   "github_tagfilter": "nightly",
-  "last_update": "2026-05-02",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "birdnet-go",
   "source": "github",
   "upstream_repo": "tphakala/birdnet-go",
-  "upstream_version": "nightly-20260429-405"
+  "upstream_version": "nightly-20260511-414"
 }

birdnet-pipy/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 0.6.10 (2026-05-16)
+- Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
+
 ## 0.6.8 (2026-05-09)
 - Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
 ## 0.6.6-4 (2026-05-02)

birdnet-pipy/config.yaml

@@ -96,4 +96,4 @@ schema:
   ssl: bool?
 slug: birdnet-pipy
 url: https://github.com/alexbelgium/hassio-addons/tree/master/birdnet-pipy
-version: "0.6.8"
+version: "0.6.10"

birdnet-pipy/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "birdnet-pipy",
   "source": "github",
   "upstream_repo": "Suncuss/BirdNET-PiPy",
-  "upstream_version": "0.6.8"
+  "upstream_version": "0.6.10"
 }

browser_brave/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 1.90.122-ls99 (2026-05-16)
+- Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
+
 ## 1.90.121-ls97 (2026-05-09)
 - Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
 

browser_brave/config.yaml

@@ -69,5 +69,5 @@ slug: brave
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.90.121-ls97"
+version: "1.90.122-ls99"
 video: true

browser_brave/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "brave",
   "source": "github",
   "upstream_repo": "linuxserver/docker-brave",
-  "upstream_version": "1.90.121-ls97"
+  "upstream_version": "1.90.122-ls99"
 }

browser_chromium/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## version-09ce6dc3 (2026-05-16)
+- Update to latest version from linuxserver/docker-chromium (changelog : https://github.com/linuxserver/docker-chromium/releases)
+
 ## version-3f0abc3c (2026-05-09)
 - Update to latest version from linuxserver/docker-chromium (changelog : https://github.com/linuxserver/docker-chromium/releases)
 

browser_chromium/config.yaml

@@ -71,5 +71,5 @@ slug: chromium
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "version-3f0abc3c"
+version: "version-09ce6dc3"
 video: true

browser_chromium/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "chromium",
   "source": "github",
   "upstream_repo": "linuxserver/docker-chromium",
-  "upstream_version": "version-3f0abc3c"
+  "upstream_version": "version-09ce6dc3"
 }

browserless_chrome/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 2.49.0 (2026-05-16)
+- Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
+
 ## 2.48.3 (2026-05-09)
 - Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
 

browserless_chrome/config.yaml

@@ -86,5 +86,5 @@ schema:
 slug: browserless_chrome
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/browserless_chrome
-version: "2.48.3"
+version: "2.49.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]/docs"

browserless_chrome/updater.json

@@ -1,9 +1,9 @@
 {
   "github_tagfilter": "v",
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "browserless_chrome",
   "source": "github",
   "upstream_repo": "browserless/chrome",
-  "upstream_version": "2.48.3"
+  "upstream_version": "2.49.0"
 }

cleanuparr/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 2.9.13 (2026-05-16)
+- Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)
+
 ## 2.9.11 (2026-05-09)
 - Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)
 

cleanuparr/Dockerfile

@@ -11,7 +11,7 @@
 #=== Home Assistant Addon ===#
 
 # ARGs used in FROM must be declared before any FROM instruction
-ARG BUILD_UPSTREAM="2.9.11"
+ARG BUILD_UPSTREAM="2.9.13"
 
 #################
 # 1 Build Image #

cleanuparr/config.yaml

@@ -91,5 +91,5 @@ schema:
   TZ: str?
 slug: cleanuparr
 url: https://github.com/alexbelgium/hassio-addons/tree/master/cleanuparr
-version: "2.9.11"
+version: "2.9.13"
 webui: "[PROTO:ssl]://[HOST]:[PORT:11011]"

cleanuparr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "cleanuparr",
   "source": "github",
   "upstream_repo": "Cleanuparr/Cleanuparr",
-  "upstream_version": "2.9.11"
+  "upstream_version": "2.9.13"
 }

codex/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 1.12.4 (2026-05-16)
+- Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
+
 ## 1.11.4 (2026-05-09)
 - Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
 

codex/config.yaml

@@ -101,4 +101,4 @@ schema:
 slug: codex
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.11.4"
+version: "1.12.4"

codex/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "codex",
   "source": "github",
   "upstream_repo": "ajslater/codex",
-  "upstream_version": "1.11.4"
+  "upstream_version": "1.12.4"
 }

ente/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 4.4.22 (2026-05-16)
+- Update to latest version from ente-io/ente (changelog : https://github.com/ente-io/ente/releases)
+
 ## 4.4.21 (2026-05-09)
 - Update to latest version from ente-io/ente (changelog : https://github.com/ente-io/ente/releases)
 

ente/config.yaml

@@ -120,6 +120,6 @@ schema:
 slug: ente
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "4.4.21"
+version: "4.4.22"
 video: true
 webui: http://[HOST]:[PORT:3000]

ente/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "false",
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "ente",
   "source": "github",
   "upstream_repo": "ente-io/ente",
-  "upstream_version": "4.4.21"
+  "upstream_version": "4.4.22"
 }

filebrowser_quantum/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 1.3.2 (2026-05-16)
+- Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
+
 ## 1.3.1 (2026-05-02)
 - Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
 

filebrowser_quantum/config.yaml

@@ -110,4 +110,4 @@ schema:
 slug: filebrowser_quantum
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.3.1"
+version: "1.3.2"

filebrowser_quantum/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "false",
-  "last_update": "2026-05-02",
+  "last_update": "2026-05-16",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "filebrowser_quantum",
   "source": "github",
   "upstream_repo": "gtsteffaniak/filebrowser",
-  "upstream_version": "1.3.1"
+  "upstream_version": "1.3.2"
 }

fireflyiii_data_importer/CHANGELOG.md

@@ -1,3 +1,5 @@
+## 2.3.2-2 (18-05-2026)
+- Minor bugs fixed
 
 ## 2.3.2 (2026-04-23)
 - Update to latest version from firefly-iii/data-importer (changelog : https://github.com/firefly-iii/data-importer/releases)

fireflyiii_data_importer/Dockerfile

@@ -173,7 +173,7 @@ RUN \
     fi
 
 ENV HEALTH_PORT="8080" \
-    HEALTH_URL="/health"
+    HEALTH_URL="/healthcheck"
 HEALTHCHECK \
     --interval=5s \
     --retries=5 \

fireflyiii_data_importer/config.yaml

@@ -101,5 +101,5 @@ schema:
 slug: fireflyiii_data_importer
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.3.2"
+version: "2.3.2-3"
 webui: "[PROTO:ssl]://[HOST]:[PORT:8080]"

fireflyiii_data_importer/rootfs/etc/cont-init.d/99-run.sh

@@ -54,7 +54,7 @@ if bashio::config.has_value 'Updates'; then
     chmod 755 /etc/cron."${FREQUENCY}"/cronupdate
 
     # Sets cron to run with www-data user
-    # sed -i 's|root|www-data|g' /etc/crontab
+    sed -i 's|root|www-data|g' /etc/crontab
 
     # Starts cron
     service cron start

flexget/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 3.19.19 (2026-05-16)
+- Update to latest version from wiserain/flexget
+
 ## 3.19.16 (2026-05-09)
 - Update to latest version from wiserain/flexget
 

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.19.16"
+version: "3.19.19"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,9 +1,9 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.19.16"
+  "upstream_version": "3.19.19"
 }

grampsweb/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 26.5.1 (2026-05-16)
+- Update to latest version from gramps-project/gramps-web (changelog : https://github.com/gramps-project/gramps-web/releases)
+
 ## 26.5.0 (2026-05-09)
 - Update to latest version from gramps-project/gramps-web (changelog : https://github.com/gramps-project/gramps-web/releases)
 

grampsweb/config.yaml

@@ -115,5 +115,5 @@ services:
 slug: grampsweb
 tmpfs: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/grampsweb
-version: "26.5.0"
+version: "26.5.1"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5001]"

grampsweb/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": true,
-  "last_update": "2026-05-09",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "grampsweb",
   "source": "github",
   "upstream_repo": "gramps-project/gramps-web",
-  "upstream_version": "26.5.0"
+  "upstream_version": "26.5.1"
 }

immich/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 2.7.5 (2026-05-17)
+- Switch upstream image tags from arch-specific (`arm64v8-latest`/`amd64-latest`) to `:latest`
+
 ## 2.7.5 (2026-04-18)
 - Update to latest version from imagegenius/docker-immich (changelog : https://github.com/imagegenius/docker-immich/releases)
 

immich/build.json

@@ -1,6 +1,6 @@
 {
   "build_from": {
-    "aarch64": "ghcr.io/imagegenius/immich:arm64v8-latest",
-    "amd64": "ghcr.io/imagegenius/immich:amd64-latest"
+    "aarch64": "ghcr.io/imagegenius/immich:latest",
+    "amd64": "ghcr.io/imagegenius/immich:latest"
   }
 }

jackett/CHANGELOG.md

@@ -1,4 +1,7 @@
 
+## 0.24.1866 (2026-05-16)
+- Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
+
 ## 0.24.1822 (2026-05-09)
 - Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
 

jackett/config.yaml

@@ -106,5 +106,5 @@ schema:
 slug: jackett_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/jackett
-version: "0.24.1822"
+version: "0.24.1866"
 webui: http://[HOST]:[PORT:9117]