ci: fail a PR that changes an add-on without bumping its version

Supervisor only offers a rebuild when `version` changes, so an add-on fix
merged without one reaches nobody: the image stays put, the issue looks closed.
Nothing in CI checked this. Not hypothetical — PR #2972 changed birdnet-pi's
99-run.sh with no bump and sat green.

Worse, it also hid the rest of CI. check-addon-changes derives `changedAddons`
from `^<addon>/config\.(json|ya?ml)$` alone, and the CHANGELOG gate, add-on
linter and Docker build are all matrixed over it — so a PR that edits only an
add-on's scripts produces an empty set and every one of them *skips*. #2972 was
never linted or built, and birdnet-pi-zach turned out to have been failing to
build for five weeks behind that same gap.

This check therefore does NOT reuse `changedAddons`: gating on it would make the
check a no-op in exactly the case it exists for. It runs its own scan and
changes nothing about which add-ons get linted or built — widening that
detection is a separate change with real build-time cost.

Significance is an allowlist of ignorable paths anchored at the add-on root
(CHANGELOG, top-level *.md, icon/logo/stats png, images/, updater.json) with
everything else counting, so a new kind of file defaults to needing a bump.
Note addon/images/ is artwork but addon/rootfs/**/images/ ships, hence the
anchoring.

Reads the manifest at HEAD by its own resolved filename, so renaming
config.yaml -> config.yml mid-PR cannot slip through; parses config.json with
jq so a minified file is read correctly; anchors the YAML `version:` match at
column 0 so an indented key in a nested mapping is not mistaken for the
manifest's; strips a trailing YAML comment so `version: "1.2.3" # note` is not
read as a change. An unreadable version is an error, not a warning — the check
refuses to pass where it could not be performed.

The bypass label is read live inside the job rather than in its `if:`, because
the workflow deliberately does not listen for `labeled`: adding that activity
type would re-run the ~3 h add-on builds on every label change. Labelling the
PR and re-running this one job is the intended sequence.

Verified across 22 cases against real history and synthetic diffs: fails #2972
as originally opened and passes it after the bump, passes #2973/#2974 and the
current #2972; stays quiet on CHANGELOG-, stats.png-, updater.json-,
README-, .templates- and addon/images-only diffs; and fails on a changed
Dockerfile/rootfs, a config.yaml option change, rootfs/**/images, a
comment-only version edit, an indented nested version key, a mid-PR manifest
rename, a config.json add-on, and a missing version key.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

.github/scripts/check_version_bump.sh

@@ -0,0 +1,143 @@
+#!/usr/bin/env bash
+# Destination: .github/scripts/check_version_bump.sh
+#
+# Fails a pull request that changes what an add-on ships without bumping that
+# add-on's `version`. Supervisor only offers a rebuild when `version` changes,
+# so a fix merged without one leaves every user on the old image: merged, inert,
+# and the issue looks closed. Nothing else in CI checks this.
+#
+# It deliberately does NOT reuse check-addon-changes' `changedAddons`. That
+# output is built from `^<addon>/config\.(json|ya?ml)$` alone, so it is empty
+# for exactly the pull requests this check exists to catch — an add-on whose
+# scripts changed while config.yaml did not. Reusing it would make this a no-op.
+# This scan is local to this check and does not affect which add-ons get linted
+# or built.
+#
+# Env:
+#   BASE_SHA (required) — commit this PR is diffed against
+#   HEAD_SHA (required) — the PR's merge commit
+#
+# Exit 0 = every add-on that needs a bump got one (or nothing relevant changed).
+
+set -euo pipefail
+
+: "${BASE_SHA:?BASE_SHA must be set}"
+: "${HEAD_SHA:?HEAD_SHA must be set}"
+
+# Files that ship to users only as repo metadata, or that bots rewrite on their
+# own schedule. Changing one of these alone does not require anybody to receive
+# a new image, so it must not demand a version bump — otherwise every changelog
+# or stats-graph commit would fail CI.
+#
+# Everything else under an add-on directory counts: Dockerfile, rootfs/,
+# build.json|yaml (base images), apparmor.txt and translations/ (Supervisor
+# re-reads them on update), root-level *.sh that Dockerfiles COPY, and
+# config.yaml itself — an added option or changed port needs the update offered
+# just as much as a code change does. Allowlisting the ignorable and treating
+# the remainder as significant fails closed: a new kind of file defaults to
+# "needs a bump" rather than silently escaping the check.
+is_ignorable() {
+    local rel="$1"   # path relative to the add-on directory
+    # addon/images/** is artwork; addon/rootfs/**/images/** is shipped content,
+    # so this must be anchored at the add-on root rather than matching any
+    # path that happens to contain an "images" segment.
+    case "$rel" in
+        images/*) return 0 ;;
+    esac
+    # Anything else nested ships inside the image (rootfs/, translations/, ...).
+    case "$rel" in
+        */*) return 1 ;;
+    esac
+    case "$rel" in
+        CHANGELOG.md | updater.json | stats.png | icon.png | logo.png | *.md) return 0 ;;
+    esac
+    return 1
+}
+
+# An add-on is a top-level directory with a config file. Tested against the
+# BASE tree so a directory deleted by this PR is still recognised (and then
+# skipped below), and .github/, .templates/ and .claude/ are excluded for free
+# by simply not having one.
+addon_config_at() {
+    local ref="$1" addon="$2" f
+    for f in config.yaml config.yml config.json; do
+        if git cat-file -e "${ref}:${addon}/${f}" 2> /dev/null; then
+            printf '%s' "$f"
+            return 0
+        fi
+    done
+    return 1
+}
+
+# Reads the add-on's declared version. JSON goes through jq so a minified or
+# reordered config.json is read correctly rather than silently returning empty.
+# YAML is matched at column 0 on purpose: an indented `version:` belongs to a
+# nested mapping (a schema entry, an option literally named version) and
+# comparing it would compare the wrong value. A trailing YAML comment is
+# stripped before quotes so `version: "1.2.3" # note` does not read as a bump.
+version_at() {
+    local ref="$1" path="$2" content
+    content=$(git show "${ref}:${path}" 2> /dev/null) || return 1
+    case "$path" in
+        *.json)
+            printf '%s' "$content" | jq -r '.version // empty' 2> /dev/null
+            ;;
+        *)
+            printf '%s\n' "$content" |
+                grep -m1 -E '^version[[:space:]]*:' |
+                sed -E 's/^version[[:space:]]*:[[:space:]]*//; s/[[:space:]]+#.*$//; s/^["'\'']//; s/["'\'']$//; s/[[:space:]]*$//'
+            ;;
+    esac
+}
+
+mapfile -t CHANGED < <(git diff --name-only "$BASE_SHA" "$HEAD_SHA")
+
+declare -A NEEDS_BUMP=()
+for file in "${CHANGED[@]}"; do
+    [ -n "$file" ] || continue
+    case "$file" in */*) ;; *) continue ;; esac   # top-level files are not add-ons
+    addon="${file%%/*}"
+    is_ignorable "${file#*/}" && continue
+    addon_config_at "$BASE_SHA" "$addon" > /dev/null 2>&1 || continue
+    NEEDS_BUMP["$addon"]=1
+done
+
+if [ "${#NEEDS_BUMP[@]}" -eq 0 ]; then
+    echo "No add-on changes that require a version bump."
+    exit 0
+fi
+
+FAILED=0
+for addon in $(printf '%s\n' "${!NEEDS_BUMP[@]}" | sort); do
+    base_cfg=$(addon_config_at "$BASE_SHA" "$addon")
+    # Resolved separately at HEAD: an add-on that renames its manifest between
+    # supported names (config.yaml -> config.yml) while changing shipped files
+    # would otherwise be read at the old path, come back empty, and slip through.
+    if ! head_cfg=$(addon_config_at "$HEAD_SHA" "$addon"); then
+        echo "  $addon: removed by this PR, skipping"
+        continue
+    fi
+    old=$(version_at "$BASE_SHA" "$addon/$base_cfg" || true)
+    new=$(version_at "$HEAD_SHA" "$addon/$head_cfg" || true)
+    # Fail closed. An unreadable version used to warn and skip, which let the
+    # job go green on exactly the add-ons whose manifest this check could not
+    # understand — the opposite of what it is for.
+    if [ -z "$old" ] || [ -z "$new" ]; then
+        echo "::error file=$addon/$head_cfg::$addon: could not read a version from $base_cfg (base) or $head_cfg (head). Refusing to pass a check that could not be performed."
+        FAILED=1
+        continue
+    fi
+    if [ "$old" = "$new" ]; then
+        echo "::error file=$addon/$head_cfg::$addon ships changed files but version is still $old. Supervisor only offers a rebuild when version changes, so this would merge without reaching anyone. Bump it following this add-on's own convention: for a local patch counter take the boundary from updater.json's upstream_version (append .1 when version equals it, otherwise increment the digits after it); date-based and LSIO-style versions have no counter and follow their own scheme."
+        FAILED=1
+    else
+        echo "  $addon: $old -> $new"
+    fi
+done
+
+if [ "$FAILED" -ne 0 ]; then
+    echo "::error::One or more add-ons changed without a version bump. Add the 'skip-version-check' label and re-run this job if that is deliberate."
+    exit 1
+fi
+
+echo "All changed add-ons have a version bump."

.github/stargazer_countries.csv

@@ -377,6 +377,7 @@ JochenZhou,China,
 Johndrmg,,2026-08-10
 Jojo-05,Austria,
 JonBAL,,2026-08-10
+Joni12v,,2026-08-23
 JonnyMcBanjo,United States,
 JordyThery,Belgium,
 Joriex,Germany,
@@ -446,6 +447,7 @@ Lucius-Waverly,,2026-08-16
 LuciusEternal,,2026-08-10
 LuckyTriple7,Germany,
 Luckyfuzz,,2026-08-10
+Ludy87,Germany,2026-08-23
 Lukas0120,,2026-08-10
 LukasGail,Germany,
 LunyaaDev,,2026-08-10
@@ -1366,6 +1368,7 @@ fenyag7,Germany,
 fermuch,,2026-08-10
 fernbrun,,2026-08-10
 fess1100,,2026-08-10
+ffhjansen,,2026-08-23
 filiphch,Belgium,
 fischer-felix,Germany,
 fisco,,2026-08-10

.github/workflows/onpr_check-pr.yaml

@@ -58,6 +58,69 @@ jobs:
           echo "Changed addons: $changed_addons"
           echo "changed_addons=$changed_addons" >> "$GITHUB_OUTPUT"
 
+  # 1b. A pull request that changes what an add-on ships must bump that add-on's
+  # version. Supervisor only offers a rebuild when `version` changes, so without
+  # one the fix merges and no user ever receives it - inert, while the issue
+  # looks closed. Nothing else in CI checks this (the add-on linter validates
+  # the schema, not that the value moved).
+  #
+  # Deliberately independent of check-addon-changes above: that job derives
+  # `changedAddons` from `^<addon>/config.(json|ya?ml)$` alone, so it is empty
+  # for precisely the pull requests this catches - an add-on whose scripts
+  # changed while config.yaml did not. Gating this on its output would make it
+  # a no-op. It does its own scan and changes nothing about which add-ons are
+  # linted or built.
+  check-version-bump:
+    name: Check add-on version bumped
+    if: ${{ github.repository_owner == 'alexbelgium' }}
+    runs-on: ubuntu-latest
+    # Only reads git history and the PR's labels.
+    permissions:
+      contents: read
+      pull-requests: read
+    steps:
+      # The bypass label is read LIVE here rather than from the job's `if:`.
+      # The event payload is a snapshot from trigger time, and this workflow
+      # deliberately does not listen for `labeled` — adding that activity type
+      # would re-run the ~3 h add-on builds on every label change. Reading it
+      # at run time instead means "label the PR, then re-run this one job"
+      # works, which is the sequence the failure message asks for.
+      - name: Check for the bypass label
+        id: bypass
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR: ${{ github.event.pull_request.number }}
+          REPO: ${{ github.repository }}
+        run: |
+          set -euo pipefail
+          skip=$(gh pr view "$PR" --repo "$REPO" --json labels \
+                 --jq '[.labels[].name] | index("skip-version-check") != null')
+          echo "skip=$skip" >> "$GITHUB_OUTPUT"
+          [ "$skip" = "true" ] && echo "skip-version-check label present; skipping." || true
+
+      - name: Checkout repo
+        if: steps.bypass.outputs.skip != 'true'
+        uses: actions/checkout@v7.0.1
+        with:
+          # Same reason as check-addon-changes: HEAD^1 must be resolvable.
+          fetch-depth: 2
+          # Nothing here pushes, and the repo is public, so an anonymous fetch
+          # of the base commit is enough - do not leave a token in .git/config.
+          persist-credentials: false
+
+      - name: Check every changed add-on bumped its version
+        if: steps.bypass.outputs.skip != 'true'
+        env:
+          HEAD_SHA: ${{ github.sha }}
+        run: |
+          set -euo pipefail
+          # HEAD^1, not pull_request.base.sha, for the same reason as above: the
+          # event payload's base can be stale if master advanced since trigger.
+          BASE_SHA=$(git rev-parse HEAD^1)
+          git fetch origin "$BASE_SHA"
+          export BASE_SHA
+          bash .github/scripts/check_version_bump.sh
+
   check-changed-changelog:
     name: Check if CHANGELOG.md changed
     needs: check-addon-changes

aurral/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.5.1 (2026-08-22)
+- Update to latest version from lklynet/aurral (changelog : https://github.com/lklynet/aurral/releases)
+ 
 ## 2.4.0 (2026-08-13)
 - Update to latest version from lklynet/aurral (changelog : https://github.com/lklynet/aurral/releases)
  

aurral/config.yaml

@@ -1,5 +1,5 @@
 name: Aurral
-version: "2.4.0"
+version: "2.5.1"
 slug: aurral
 description: >-
   Self-hosted music discovery, request management, flows, and playlist

aurral/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "aurral",
   "source": "github",
   "upstream_repo": "lklynet/aurral",
-  "upstream_version": "2.4.0",
+  "upstream_version": "2.5.1",
   "github_beta": false
 }

birdnet-pipy/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 0.8.8 (2026-08-22)
+- Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
+ 
 ## 0.8.6 (2026-08-13)
 - Update to latest version from Suncuss/BirdNET-PiPy (changelog : https://github.com/Suncuss/BirdNET-PiPy/releases)
  

birdnet-pipy/config.yaml

@@ -96,4 +96,4 @@ schema:
   ssl: bool?
 slug: birdnet-pipy
 url: https://github.com/alexbelgium/hassio-addons/tree/master/birdnet-pipy
-version: "0.8.6"
+version: "0.8.8"

birdnet-pipy/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "birdnet-pipy",
   "source": "github",
   "upstream_repo": "Suncuss/BirdNET-PiPy",
-  "upstream_version": "0.8.6"
+  "upstream_version": "0.8.8"
 }

browser_brave/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 1.93.138-ls124 (2026-08-22)
+- Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
+ 
 ## 1.93.136-ls122 (2026-08-13)
 - Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
  

browser_brave/config.yaml

@@ -69,5 +69,5 @@ slug: brave
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.93.136-ls122"
+version: "1.93.138-ls124"
 video: true

browser_brave/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "brave",
   "source": "github",
   "upstream_repo": "linuxserver/docker-brave",
-  "upstream_version": "1.93.136-ls122"
+  "upstream_version": "1.93.138-ls124"
 }

browserless_chrome/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.56.0 (2026-08-22)
+- Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
+ 
 ## 2.55.4 (2026-08-13)
 - Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
  

browserless_chrome/config.yaml

@@ -86,5 +86,5 @@ schema:
 slug: browserless_chrome
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/browserless_chrome
-version: "2.55.4"
+version: "2.56.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]/docs"

browserless_chrome/updater.json

@@ -1,9 +1,9 @@
 {
   "github_tagfilter": "v",
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "browserless_chrome",
   "source": "github",
   "upstream_repo": "browserless/chrome",
-  "upstream_version": "2.55.4"
+  "upstream_version": "2.56.0"
 }

calibre_web/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 0.6.27.1 (2026-08-23)
+- Fix: Ingress login was rejected since 0.6.27, which only accepts the reverse proxy auth header from trusted source addresses. The addon now adds its own ip to that list (https://github.com/alexbelgium/hassio-addons/issues/3003)
+
 ## 0.6.27 (2026-08-13)
 - Update to latest version from linuxserver/docker-calibre-web (changelog : https://github.com/linuxserver/docker-calibre-web/releases)
 

calibre_web/config.yaml

@@ -116,5 +116,5 @@ schema:
 slug: calibre-web
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/calibre_web
-version: "0.6.27"
+version: "0.6.27.1"
 video: true

calibre_web/rootfs/etc/cont-init.d/80-configuration.sh

@@ -18,6 +18,26 @@ if [ ! -f /config/app.db ]; then
     bashio::log.warning "First boot : disabling Ingress until addon restart"
 else
     sqlite3 /config/app.db 'update settings set config_reverse_proxy_login_header_name="X-WebAuth-User",config_allow_reverse_proxy_header_login=1'
+
+    # Calibre-web 0.6.27 only accepts the ingress auth header from a trusted source address, and
+    # defaults that list to "127.0.0.1,::1". Nginx binds its upstream socket to the addon ip
+    # (proxy_bind $server_addr in ingress.conf) and calibre-web listens dual-stack, so it sees
+    # ::ffff:<addon ip> and drops the header. Both the plain and the ipv4-mapped forms are listed
+    # because an ipv4 entry never matches an ipv6-mapped address on the calibre-web side.
+    # The column only exists once calibre-web 0.6.27+ has migrated app.db, so a failure here is
+    # not fatal : the next start applies it.
+    addon_ip=$(bashio::addon.ip_address)
+    trusted_ips="127.0.0.1,::1,::ffff:127.0.0.1"
+    if bashio::var.has_value "${addon_ip}"; then
+        trusted_ips="${trusted_ips},${addon_ip},::ffff:${addon_ip}"
+    fi
+    trusted_ips_error=$(sqlite3 /config/app.db "update settings set config_reverse_proxy_trusted_ips='${trusted_ips}'" 2>&1) || {
+        if echo "${trusted_ips_error}" | grep -q "no such column"; then
+            bashio::log.warning "Could not set the ingress trusted ip list, it will be applied at next start"
+        else
+            bashio::log.warning "Could not set the ingress trusted ip list: ${trusted_ips_error}"
+        fi
+    }
 fi
 
 bashio::log.info "Default username:password is admin:admin123"

claude_desktop/CHANGELOG.md

@@ -1,3 +1,7 @@
+ 
+## 07308545.4 (2026-08-22)
+- Update to latest version from aaddrick/claude-desktop-debian (changelog : https://github.com/aaddrick/claude-desktop-debian/releases)
+- Upstream tag : v3.2.2+claude1.32885.1
 ## 07308545.3 (19-08-2026)
 - Fix an incompletely installed Codex CLI, which silently broke every Codex tool call. Since
   codex-cli 0.147.0 the CLI does not execute shell commands or file reads itself; it delegates

claude_desktop/config.yaml

@@ -136,5 +136,5 @@ schema:
 slug: claude_desktop
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "07308545.3"
+version: "07308545.4"
 video: true

claude_desktop/updater.json

@@ -4,6 +4,6 @@
   "github_fulltag": true,
   "slug": "claude_desktop",
   "paused": false,
-  "upstream_version": "v3.2.2+claude1.30096.1",
-  "last_update": "2026-08-15"
+  "upstream_version": "v3.2.2+claude1.32885.1",
+  "last_update": "2026-08-22"
 }

codex/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.2.8 (2026-08-22)
+- Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
+ 
 ## 2.2.6 (2026-08-08)
 - Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
  

codex/config.yaml

@@ -101,4 +101,4 @@ schema:
 slug: codex
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.2.6"
+version: "2.2.8"

codex/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-08-08",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "codex",
   "source": "github",
   "upstream_repo": "ajslater/codex",
-  "upstream_version": "2.2.6"
+  "upstream_version": "2.2.8"
 }

emby_beta/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 4.10.0.26 (2026-08-22)
+- Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
+ 
 ## 4.10.0.25 (2026-08-15)
 - Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
  

emby_beta/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="4.10.0.25"
+ARG BUILD_UPSTREAM="4.10.0.26"
 FROM ${BUILD_FROM}
 
 ##################

emby_beta/config.yaml

@@ -122,5 +122,5 @@ schema:
 slug: emby_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/emby
-version: "4.10.0.25"
+version: "4.10.0.26"
 video: true

emby_beta/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "emby",
   "source": "github",
   "upstream_repo": "linuxserver/docker-emby",
-  "upstream_version": "4.10.0.25"
+  "upstream_version": "4.10.0.26"
 }

filebrowser_quantum/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 1.5.2 (2026-08-22)
+- Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
+ 
 ## 1.5.1.2 (2026-08-19)
 - Fix direct access on port 8071, which was broken in 1.5.1.1: the root
   redirect pointed at the container-internal port 8072 instead of the

filebrowser_quantum/config.yaml

@@ -118,4 +118,4 @@ schema:
 slug: filebrowser_quantum
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.5.1.2"
+version: "1.5.2"

filebrowser_quantum/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "false",
-  "last_update": "2026-08-08",
+  "last_update": "2026-08-22",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "filebrowser_quantum",
   "source": "github",
   "upstream_repo": "gtsteffaniak/filebrowser",
-  "upstream_version": "1.5.1"
+  "upstream_version": "1.5.2"
 }

flexget/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 3.20.6 (2026-08-22)
+- Update to latest version from wiserain/flexget
+ 
 ## 3.20.5 (2026-08-15)
 - Update to latest version from wiserain/flexget
  

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.20.5"
+version: "3.20.6"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,9 +1,9 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.20.5"
+  "upstream_version": "3.20.6"
 }

grav/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.0.20 (2026-08-22)
+- Update to latest version from linuxserver/docker-grav (changelog : https://github.com/linuxserver/docker-grav/releases)
+ 
 ## 2.0.19 (2026-08-15)
 - Update to latest version from linuxserver/docker-grav (changelog : https://github.com/linuxserver/docker-grav/releases)
  

grav/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="2.0.19"
+ARG BUILD_UPSTREAM="2.0.20"
 FROM ${BUILD_FROM}
 
 ##################

grav/config.yaml

@@ -89,5 +89,5 @@ schema:
 slug: grav
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.0.19"
+version: "2.0.20"
 webui: "[PROTO:ssl]://[HOST]:[PORT:80]"

grav/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": false,
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "grav",
   "source": "github",
   "upstream_repo": "linuxserver/docker-grav",
-  "upstream_version": "2.0.19"
+  "upstream_version": "2.0.20"
 }

jackett/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 0.24.2434 (2026-08-22)
+- Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
+ 
 ## 0.24.2406 (2026-08-15)
 - Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
  

jackett/config.yaml

@@ -106,5 +106,5 @@ schema:
 slug: jackett_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/jackett
-version: "0.24.2406"
+version: "0.24.2434"
 webui: http://[HOST]:[PORT:9117]

jackett/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "jackett",
   "source": "github",
   "upstream_repo": "linuxserver/docker-jackett",
-  "upstream_version": "0.24.2406"
+  "upstream_version": "0.24.2434"
 }

kometa/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.4.8 (2026-08-22)
+- Update to latest version from linuxserver/docker-kometa (changelog : https://github.com/linuxserver/docker-kometa/releases)
+ 
 ## 2.4.7 (2026-08-13)
 - Update to latest version from linuxserver/docker-kometa (changelog : https://github.com/linuxserver/docker-kometa/releases)
  

kometa/config.yaml

@@ -96,4 +96,4 @@ schema:
 slug: kometa
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/kometa
-version: "2.4.7"
+version: "2.4.8"

kometa/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "kometa",
   "source": "github",
   "upstream_repo": "linuxserver/docker-kometa",
-  "upstream_version": "2.4.7"
+  "upstream_version": "2.4.8"
 }

linkwarden/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.16.1 (2026-08-22)
+- Update to latest version from linkwarden/linkwarden (changelog : https://github.com/linkwarden/linkwarden/releases)
+ 
 ## 2.16.0 (2026-08-01)
 - Update to latest version from linkwarden/linkwarden (changelog : https://github.com/linkwarden/linkwarden/releases)
 ## 2.15.1.2 (2026-07-22)

linkwarden/config.yaml

@@ -45,5 +45,5 @@ schema:
   STORAGE_FOLDER: str?
 slug: linkwarden
 url: https://github.com/alexbelgium/hassio-addons/tree/master/linkwarden
-version: "2.16.0"
+version: "2.16.1"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]"

linkwarden/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-01",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "linkwarden",
   "source": "github",
   "upstream_repo": "linkwarden/linkwarden",
-  "upstream_version": "2.16.0"
+  "upstream_version": "2.16.1"
 }

maintainerr/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 3.24.0 (2026-08-22)
+- Update to latest version from maintainerr/maintainerr (changelog : https://github.com/maintainerr/maintainerr/releases)
+ 
 ## 3.22.1 (2026-08-13)
 - Update to latest version from maintainerr/maintainerr (changelog : https://github.com/maintainerr/maintainerr/releases)
  

maintainerr/Dockerfile

@@ -11,7 +11,7 @@
 #=== Home Assistant Addon ===#
 
 # ARGs used in FROM must be declared before any FROM instruction
-ARG BUILD_UPSTREAM="3.22.1"
+ARG BUILD_UPSTREAM="3.24.0"
 
 ############################
 # 0) Tools stage           #

maintainerr/config.yaml

@@ -88,5 +88,5 @@ schema:
   TZ: str?
 slug: maintainerr
 url: https://github.com/alexbelgium/hassio-addons/tree/master/maintainerr
-version: "3.22.1"
+version: "3.24.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:6246]"

maintainerr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "maintainerr",
   "source": "github",
   "upstream_repo": "maintainerr/maintainerr",
-  "upstream_version": "3.22.1"
+  "upstream_version": "3.24.0"
 }

mealie/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## v3.23.1 (2026-08-22)
+- Update to latest version from mealie-recipes/mealie (changelog : https://github.com/mealie-recipes/mealie/releases)
+ 
 ## v3.22.0 (2026-08-01)
 - Update to latest version from mealie-recipes/mealie (changelog : https://github.com/mealie-recipes/mealie/releases)
  

mealie/Dockerfile

@@ -21,7 +21,7 @@ FROM node:22 AS frontend-builder
 ARG SUB_PATH="/mealie/"
 ENV SUB_PATH=$SUB_PATH
 
-ENV MEALIE_VERSION="v3.22.0"
+ENV MEALIE_VERSION="v3.23.1"
 
 # Clone the Mealie repository to get the frontend source code
 WORKDIR /frontend

mealie/config.yaml

@@ -114,4 +114,4 @@ schema:
 slug: mealie
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "v3.22.0"
+version: "v3.23.1"

mealie/updater.json

@@ -1,11 +1,11 @@
 {
   "github_beta": "true",
   "github_fulltag": "true",
-  "last_update": "2026-08-01",
+  "last_update": "2026-08-22",
   "paused": "false",
   "repository": "alexbelgium/hassio-addons",
   "slug": "mealie",
   "source": "github",
   "upstream_repo": "mealie-recipes/mealie",
-  "upstream_version": "v3.22.0"
+  "upstream_version": "v3.23.1"
 }

mylar3/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 0.11.0 (2026-08-22)
+- Update to latest version from linuxserver/docker-mylar3 (changelog : https://github.com/linuxserver/docker-mylar3/releases)
+ 
 ## 0.10.0 (2026-06-17)
 - Update to latest version from linuxserver/docker-mylar3 (changelog : https://github.com/linuxserver/docker-mylar3/releases)
 

mylar3/config.yaml

@@ -100,5 +100,5 @@ schema:
 slug: mylar3
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "0.10.0"
+version: "0.11.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:8090]"

mylar3/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-06-17",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "mylar3",
   "source": "github",
   "upstream_repo": "linuxserver/docker-mylar3",
-  "upstream_version": "0.10.0"
+  "upstream_version": "0.11.0"
 }

nzbget/CHANGELOG.md

@@ -1,4 +1,8 @@
  
+## v26.2.260 (2026-08-22)
+- Update to latest version from linuxserver/docker-nzbget (changelog : https://github.com/linuxserver/docker-nzbget/releases)
+- Upstream tag : v26.2-ls260
+ 
 ## v26.2.258 (2026-08-15)
 - Update to latest version from linuxserver/docker-nzbget (changelog : https://github.com/linuxserver/docker-nzbget/releases)
 - Upstream tag : v26.2-ls258

nzbget/config.yaml

@@ -104,4 +104,4 @@ schema:
 slug: nzbget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "v26.2.258"
+version: "v26.2.260"

nzbget/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "nzbget",
   "source": "github",
   "upstream_repo": "linuxserver/docker-nzbget",
-  "upstream_version": "v26.2-ls258"
+  "upstream_version": "v26.2-ls260"
 }

plex/CHANGELOG.md

@@ -1,4 +1,8 @@
  
+## 1.43.3.10896.321 (2026-08-22)
+- Update to latest version from linuxserver/docker-plex (changelog : https://github.com/linuxserver/docker-plex/releases)
+- Upstream tag : 1.43.3.10896-cb3ebc72d-ls321
+ 
 ## 1.43.3.10861.319 (2026-08-13)
 - Update to latest version from linuxserver/docker-plex (changelog : https://github.com/linuxserver/docker-plex/releases)
 - Upstream tag : 1.43.3.10861-07dfddaeb-ls319

plex/config.yaml

@@ -175,6 +175,6 @@ slug: plex_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/plex
 usb: true
-version: "1.43.3.10861.319"
+version: "1.43.3.10896.321"
 video: true
 webui: "[PROTO:ssl]://[HOST]:[PORT:32400]/web"

plex/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "plex",
   "source": "github",
   "upstream_repo": "linuxserver/docker-plex",
-  "upstream_version": "1.43.3.10861-07dfddaeb-ls319"
+  "upstream_version": "1.43.3.10896-cb3ebc72d-ls321"
 }

portainer_agent/CHANGELOG.md

@@ -1,3 +1,8 @@
+## 2025.12.7 (2026-08-23)
+
+- Fix: Docker reported the addon as `unhealthy` in Portainer. The healthcheck script could never run because its shebang required the s6-overlay environment, which this addon's entrypoint does not set up (https://github.com/alexbelgium/hassio-addons/issues/3002)
+- Remove the unused and broken `wait-for-signal` script; nothing invoked it
+
 ## 2025.12.6 (2026-08-01)
 
 - Version renamed from `2025.12-6`, which Home Assistant could not order and therefore could not reliably offer as an update: every number of the previous version is kept, as a section of its own. The addon itself and the upstream version it tracks are unchanged

portainer_agent/Dockerfile

@@ -81,8 +81,7 @@ RUN chmod 777 /ha_entrypoint.sh
 COPY bashio-standalone.sh /usr/local/lib/bashio-standalone.sh
 RUN chmod 0755 /usr/local/lib/bashio-standalone.sh
 
-RUN chmod a+x /usr/sbin/healthcheck && \
-    chmod a+x /usr/sbin/wait-for-signal
+RUN chmod a+x /usr/sbin/healthcheck
 WORKDIR "/app"
 
 ENTRYPOINT [ "/usr/bin/env" ]

portainer_agent/config.yaml

@@ -41,4 +41,4 @@ schema:
 slug: portainer_agent
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2025.12.6"
+version: "2025.12.7"

portainer_agent/rootfs/usr/sbin/healthcheck

@@ -1,4 +1,8 @@
-#!/usr/bin/with-contenv bash
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# Plain bash on purpose : ha_entrypoint.sh replaces s6-overlay's /init, so
+# /run/s6/container_environment is never created and a with-contenv shebang
+# would fail before this script runs. Nothing here needs the s6 environment.
 
 if [ -f "/tmp/healthcheck-signal" ]; then
   curl -k --fail https://127.0.0.1:9001/ping || exit 1

portainer_agent/rootfs/usr/sbin/wait-for-signal

@@ -1,21 +0,0 @@
-#!/usr/bin/with-contenv bashio
-
-START_TIME="$(date +%s)"
-
-echo "Waiting for first healthcheck execution (max $FIRST_HEALTHCHECK_TIMEOUT seconds)..."
-
-while [ ! -f "/tmp/healthcheck-signal" ];
-do
-  sleep 1
-
-  ELAPSED_TIME="$(expr \date +%s\ - $START_TIME)"
-
-  if [ $ELAPSED_TIME -gt $FIRST_HEALTHCHECK_TIMEOUT ]
-  then
-    echo "Signal from healthcheck not received in time, failing the execution..."
-    exit 20
-  fi
-done
-
-echo "Signal from healthcheck received"
-exit 0

prowlarr/CHANGELOG.md

@@ -1,4 +1,8 @@
  
+## 2.6.2.5558.10 (2026-08-22)
+- Update to latest version from linuxserver/docker-prowlarr (changelog : https://github.com/linuxserver/docker-prowlarr/releases)
+- Upstream tag : nightly-2.6.2.5558-ls10
+ 
 ## 2.6.2.5548.10 (2026-08-13)
 - Update to latest version from linuxserver/docker-prowlarr (changelog : https://github.com/linuxserver/docker-prowlarr/releases)
 - Upstream tag : nightly-2.6.2.5548-ls10

prowlarr/config.yaml

@@ -110,4 +110,4 @@ schema:
 slug: prowlarr
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.6.2.5548.10"
+version: "2.6.2.5558.10"

prowlarr/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "true",
   "github_fulltag": "true",
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "prowlarr",
   "source": "github",
   "upstream_repo": "linuxserver/docker-prowlarr",
-  "upstream_version": "nightly-2.6.2.5548-ls10"
+  "upstream_version": "nightly-2.6.2.5558-ls10"
 }

sabnzbd/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 5.1.1 (2026-08-22)
+- Update to latest version from linuxserver/docker-sabnzbd (changelog : https://github.com/linuxserver/docker-sabnzbd/releases)
+ 
 ## 5.1.0 (2026-08-13)
 - Update to latest version from linuxserver/docker-sabnzbd (changelog : https://github.com/linuxserver/docker-sabnzbd/releases)
  

sabnzbd/config.yaml

@@ -106,5 +106,5 @@ schema:
 slug: sabnzbd
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "5.1.0"
+version: "5.1.1"
 webui: http://[HOST]:[PORT:8080]

sabnzbd/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "sabnzbd",
   "source": "github",
   "upstream_repo": "linuxserver/docker-sabnzbd",
-  "upstream_version": "5.1.0"
+  "upstream_version": "5.1.1"
 }

scrutiny/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## v1.69.1 (2026-08-22)
+- Update to latest version from Starosdev/scrutiny (changelog : https://github.com/Starosdev/scrutiny/releases)
+ 
 ## v1.69.0 (2026-08-15)
 - Update to latest version from Starosdev/scrutiny (changelog : https://github.com/Starosdev/scrutiny/releases)
  

scrutiny/config.yaml

@@ -113,4 +113,4 @@ schema:
 slug: scrutiny
 udev: true
 url: https://github.com/Starosdev/scrutiny
-version: "v1.69.0"
+version: "v1.69.1"

scrutiny/updater.json

@@ -1,10 +1,10 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-22",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "scrutiny",
   "source": "github",
   "upstream_repo": "Starosdev/scrutiny",
-  "upstream_version": "v1.69.0"
+  "upstream_version": "v1.69.1"
 }

scrutiny_fa/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## v1.69.1 (2026-08-22)
+- Update to latest version from Starosdev/scrutiny (changelog : https://github.com/Starosdev/scrutiny/releases)
+ 
 ## v1.69.0 (2026-08-15)
 - Update to latest version from Starosdev/scrutiny (changelog : https://github.com/Starosdev/scrutiny/releases)
  

scrutiny_fa/config.yaml

@@ -45,4 +45,4 @@ schema:
 slug: scrutiny_fa
 udev: true
 url: https://github.com/Starosdev/scrutiny
-version: "v1.69.0"
+version: "v1.69.1"

scrutiny_fa/updater.json

@@ -1,10 +1,10 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-22",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "scrutiny_fa",
   "source": "github",
   "upstream_repo": "Starosdev/scrutiny",
-  "upstream_version": "v1.69.0"
+  "upstream_version": "v1.69.1"
 }

signalk/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.31.1 (2026-08-22)
+- Update to latest version from SignalK/signalk-server (changelog : https://github.com/SignalK/signalk-server/releases)
+ 
 ## 2.31.0 (2026-08-15)
 - Update to latest version from SignalK/signalk-server (changelog : https://github.com/SignalK/signalk-server/releases)
  

signalk/config.yaml

@@ -57,5 +57,5 @@ uart: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
 usb: true
-version: "2.31.0"
+version: "2.31.1"
 webui: http://[HOST]:[PORT:3000]

signalk/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "signalk",
   "source": "github",
   "upstream_repo": "SignalK/signalk-server",
-  "upstream_version": "2.31.0"
+  "upstream_version": "2.31.1"
 }

transmission_openvpn/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## v5.5.2 (2026-08-22)
+- Update to latest version from haugene/docker-transmission-openvpn (changelog : https://github.com/haugene/docker-transmission-openvpn/releases)
+ 
 ## v5.5.1 (2026-08-08)
 - Update to latest version from haugene/docker-transmission-openvpn (changelog : https://github.com/haugene/docker-transmission-openvpn/releases)
  

transmission_openvpn/config.yaml

@@ -138,4 +138,4 @@ schema:
 slug: transmission_openvpn
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "v5.5.1"
+version: "v5.5.2"

transmission_openvpn/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-08",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "transmission_openvpn",
   "source": "github",
   "upstream_repo": "haugene/docker-transmission-openvpn",
-  "upstream_version": "v5.5.1"
+  "upstream_version": "v5.5.2"
 }

zzz_archived_code-server/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 4.133.0 (2026-08-22)
+- Update to latest version from linuxserver/docker-code-server (changelog : https://github.com/linuxserver/docker-code-server/releases)
+ 
 ## 4.132.0 (2026-08-13)
 - Update to latest version from linuxserver/docker-code-server (changelog : https://github.com/linuxserver/docker-code-server/releases)
  

zzz_archived_code-server/config.yaml

@@ -101,5 +101,5 @@ schema:
 slug: code-server
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/coder-server
-version: "4.132.0"
+version: "4.133.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:8443]"

zzz_archived_code-server/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-22",
   "repository": "alexbelgium/hassio-addons",
   "slug": "code-server",
   "source": "github",
   "upstream_repo": "linuxserver/docker-code-server",
-  "upstream_version": "4.132.0"
+  "upstream_version": "4.133.0"
 }