Refresh nginx_webserver_proxy startup fix

.coderabbit.yaml

@@ -1,173 +0,0 @@
-# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
-#
-# CodeRabbit configuration for alexbelgium/hassio-addons
-# Goals:
-#   1. Triage and provide first-line help on issues (bug reports, feature requests).
-#   2. Review pull requests against this repository's add-on conventions and linters.
-# Docs: https://docs.coderabbit.ai/getting-started/configure-coderabbit
-language: "en-US"
-
-# Max 250 chars. Detailed context lives in path_instructions below.
-tone_instructions: "HA add-on repo with 120+ Docker add-ons for Home Assistant Supervisor. Be concise, practical and friendly; most contributors are hobbyists. Link to add-on READMEs and the repo wiki. Follow existing conventions over generic best practices."
-
-early_access: false
-enable_free_tier: true
-
-reviews:
-  # "chill" keeps reviews helpful without nitpicking the many small upstream
-  # version-bump PRs that dominate this repo.
-  profile: "chill"
-  # Don't block merges; this repo merges frequently and relies on CI gating.
-  request_changes_workflow: false
-  high_level_summary: true
-  high_level_summary_placeholder: "@coderabbitai summary"
-  auto_title_placeholder: "@coderabbitai"
-  review_status: true
-  commit_status: true
-  poem: false
-  collapse_walkthrough: false
-  changed_files_summary: true
-  sequence_diagrams: false
-  assess_linked_issues: true
-  related_issues: true
-  related_prs: true
-  suggested_labels: true
-  suggested_reviewers: true
-
-  # Auto-apply labels consistent with the repo's existing scheme.
-  labeling_instructions:
-    - label: "bug"
-      instructions: >-
-        Apply when the PR fixes incorrect behavior in an add-on (broken startup,
-        crash, regression) rather than adding functionality.
-    - label: "enhancement"
-      instructions: >-
-        Apply when the PR adds a new add-on, a new option/feature, or otherwise
-        extends functionality.
-
-  # Skip generated/vendored content and large data artifacts that produce noise.
-  path_filters:
-    - "!**/*.png"
-    - "!**/*.svg"
-    - "!**/*.jpg"
-    - "!**/*.jpeg"
-    - "!**/*.csv"
-    - "!**/Stats"
-    - "!**/Stats2"
-    - "!README.md"
-    - "!.github/stargazer_countries.csv"
-    - "!**/translations/**"
-
-  # Repository-specific review guidance keyed by file path.
-  path_instructions:
-    - path: "**/config.yaml"
-      instructions: >-
-        Home Assistant add-on metadata. Verify that `version` was bumped when the
-        upstream version changes, that `image` follows
-        `ghcr.io/alexbelgium/{slug}-{arch}`, and that `arch`, `schema`, `map` and
-        `ports` are internally consistent. The `env_vars` schema key enables
-        arbitrary env-var passthrough handled at runtime by 00-global_var.sh; do
-        not flag it as insecure by default. Versions legitimately vary in format
-        (semver, X.Y.Z-N patch counter, LSIO tags, date-based, nightly).
-    - path: "**/Dockerfile"
-      instructions: >-
-        Add-on Dockerfiles follow a 6-section pattern and pull shared scripts from
-        .templates/. `ARG BUILD_FROM` + `FROM ${BUILD_FROM}` is expected. Package
-        pinning is NOT required (Hadolint DL3008/DL3018 are intentionally ignored).
-        If the file has an `ARG BUILD_UPSTREAM` line it must match the upstream
-        version in config.yaml. Do not suggest generic pinning or multi-stage
-        rewrites that conflict with the shared-template convention.
-    - path: "**/rootfs/etc/cont-init.d/**"
-      instructions: >-
-        S6-overlay init scripts that run in lexicographic order. Respect the
-        numbering convention (20- folders, 32- nginx ingress, 80- app config,
-        90- misc, 99- launch). Check that scripts use bashio where appropriate and
-        fail safely. SC2002 is intentionally disabled in shellcheck.
-    - path: "**/rootfs/etc/services.d/**"
-      instructions: >-
-        S6-overlay supervised service definitions. Verify run/finish scripts are
-        executable and long-running services do not exit prematurely.
-    - path: "**/*.sh"
-      instructions: >-
-        Shell scripts are formatted with shfmt (4-space indent) and linted with
-        shellcheck (SC2002 disabled). Prefer bashio helpers in add-on scripts.
-    - path: "**/updater.json"
-      instructions: >-
-        Upstream tracking config for the addons_updater automation. Validate the
-        `source` is a supported type (github, dockerhub, pip, gitlab, bitbucket,
-        helm_chart, ...) and that `upstream_repo`/`slug` are coherent. Do not
-        hand-edit `upstream_version`; it is auto-populated.
-    - path: "**/CHANGELOG.md"
-      instructions: >-
-        Every changed add-on must update its CHANGELOG.md (CI enforces this).
-        Confirm the new entry matches the bumped version in config.yaml.
-    - path: ".github/workflows/**"
-      instructions: >-
-        GitHub Actions CI/CD. Be careful with permissions and pinned action
-        versions. Note that `[nobuild]` in a commit message intentionally skips
-        the builder workflow.
-
-  abort_on_close: true
-
-  auto_review:
-    enabled: true
-    auto_incremental_review: true
-    drafts: false
-    # Skip bot-generated upstream version bumps and explicit skip markers to
-    # save review budget; humans can still request a review with @coderabbitai.
-    ignore_title_keywords:
-      - "[nobuild]"
-      - "bump"
-      - "dependabot"
-    base_branches:
-      - "master"
-
-  finishing_touches:
-    docstrings:
-      enabled: true
-    unit_tests:
-      enabled: false
-
-  # Enable the linters that match this repo's CI so CodeRabbit surfaces the same
-  # issues reviewers and CI would flag.
-  tools:
-    shellcheck:
-      enabled: true
-    hadolint:
-      enabled: true
-    markdownlint:
-      enabled: true
-    yamllint:
-      enabled: true
-    actionlint:
-      enabled: true
-    gitleaks:
-      enabled: true
-    checkov:
-      enabled: true
-    languagetool:
-      enabled: true
-      level: "default"
-    github-checks:
-      enabled: true
-      timeout_ms: 120000
-
-# Issue triage & first-line help. CodeRabbit replies in issues and PRs; auto_reply
-# lets it respond without an explicit @coderabbitai mention, and the knowledge
-# base lets it reuse past issues/PRs/learnings for better triage.
-chat:
-  auto_reply: true
-
-knowledge_base:
-  opt_out: false
-  learnings:
-    scope: "auto"
-  issues:
-    scope: "auto"
-  pull_requests:
-    scope: "auto"
-
-# Match generated docstrings to the repo language.
-code_generation:
-  docstrings:
-    language: "en-US"

.github/addon_submitters.json

@@ -8,7 +8,6 @@
   "manyfold": "ToledoEM",
   "navidrome": "baldarn",
   "netalertx": "jokob-sk",
-  "nginx proxy manager": "ToledoEM",
   "openproject": "baldarn",
   "resiliosync": "tyjtyj",
   "spotweb": "woutercoppens",

.github/stargazer_countries.csv

@@ -18,7 +18,6 @@ username,country
 5kat3R,
 5quirrel,
 5vy4-88,
-6zXo8aMn2TRXOs,
 92Xiaowang,
 9turnbull,
 A-n-k-a,
@@ -414,7 +413,7 @@ LackyUA,
 Laithsters,
 Lancenas,
 LaneaLucy,
-Lars6503,Sweden
+Lars6503,
 LazyTarget,Sweden
 Lea-MR,
 Lee-View,
@@ -877,7 +876,6 @@ andrey-kovalev,Latvia
 andrkrasnov,
 andygrunwald,Germany
 andynbaker,
-andyrockt,
 angelside,United Kingdom
 anggiaj,Indonesia
 angristan,France
@@ -1117,7 +1115,6 @@ coxde,Colombia
 cpsancha,
 craftyshaun,Australia
 cramertj,
-crazyrokr,
 crazzyyfool,United Kingdom
 croess,
 cromulus,United States
@@ -1267,7 +1264,6 @@ ebahou,
 ebertti,Brazil
 ebonyschneider462359,
 echauvet,France
-economistgame,Spain
 ecrfix,United States
 eddgeywing,
 eduba,
@@ -1636,7 +1632,6 @@ justinmarks1,
 justinreeves00,United States
 jvdeijnden,
 jweingardt12,United States
-jzabroski,United States
 k-wojcik,Poland
 kabaumanis,
 kaesekuchen32,
@@ -1920,7 +1915,6 @@ muCruiser,
 mustafababil,Netherlands
 mwhaite,
 mww,
-mxstzdev,Germany
 mxwlf,United States
 myAlterX,Portugal
 mytire,United States
@@ -2067,7 +2061,6 @@ pietervanh,Belgium
 pietervanstee,
 pilottijavier,
 ping-localhost,
-pipchell,United Kingdom
 pixeye33,
 pjolivon,
 pjosalgado,Brazil
@@ -2348,7 +2341,6 @@ swerveshot,Netherlands
 swiewiora,
 swimly,
 sycx2,Germany
-syl-25,
 sysadm47362,United States
 szabinho,United Kingdom
 szjzaq,
@@ -2462,7 +2454,6 @@ user45876,
 ustoopia,Netherlands
 ustsv,
 v1k70rk4,Hungary
-valodec,
 vandyckruben,
 vanessa,Brazil
 vantuh,Ukraine
@@ -2521,7 +2512,6 @@ willigenburggihaux,
 willnewcombe,United Kingdom
 wimb0,
 witold-gren,Poland
-wonderfulhuber,
 wonkygecko,United States
 worgarside,United Kingdom
 wotography,

.github/workflows/archived_lint-checks.yaml

@@ -13,7 +13,7 @@ jobs:
     container: ghcr.io/hadolint/hadolint:latest-alpine
     steps:
       - name: ↩️ Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: Get changed files
         id: changed_files
@@ -34,7 +34,7 @@ jobs:
     container: koalaman/shellcheck-alpine:latest
     steps:
       - name: ↩️ Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: Get changed files
         id: changed_files
@@ -54,7 +54,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: ↩️ Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
         with:
           # Full git history is needed to get a proper list of changed files within `super-linter`
           fetch-depth: 0

.github/workflows/daily_README.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: Install jq + yq (v4)
         run: |

.github/workflows/daily_stale.yml

@@ -8,8 +8,8 @@
 name: Mark stale issues and pull requests
 
 on:
-  schedule:
+  #schedule:
-  - cron: '0 12 * * 0'
+  #- cron: '0 12 * * 0'
   workflow_dispatch:
 
 jobs:

.github/workflows/generate_stargazer_map.yml

@@ -9,7 +9,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v6

.github/workflows/helper_stats_graphs.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
       - name: Install apps
         run: |
           git pull --rebase origin master

.github/workflows/lint.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -82,7 +82,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/on_issues.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Repo
-      uses: actions/checkout@v7
+      uses: actions/checkout@v6
     - name: Assign issues
       run: |
         # Init

.github/workflows/on_issues_ping_submitter.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: Ping mapped submitter when add-on is mentioned
         env:

.github/workflows/onpr_check-pr.yaml

@@ -18,7 +18,7 @@ jobs:
       changedChangelogFiles: ${{ steps.changed-files.outputs.changelogs_files }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
       - name: Find changed addon directories
         id: find_addons
         run: |
@@ -72,7 +72,7 @@ jobs:
         addon: ${{ fromJSON(needs.check-addon-changes.outputs.changedAddons) }}
     steps:
       - name: ↩️ Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: 🔎 Run Home Assistant Add-on Lint
         uses: frenck/action-addon-linter@v2
@@ -90,7 +90,7 @@ jobs:
         addon: ${{ fromJSON(needs.check-addon-changes.outputs.changedAddons) }}
     steps:
       - name: ↩️ Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: ℹ️ Gather addon info
         id: information

.github/workflows/onpush_builder.yaml

@@ -22,7 +22,7 @@ jobs:
       changedAddons: ${{ steps.find_addons.outputs.changed_addons }}
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -56,7 +56,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -108,7 +108,7 @@ jobs:
       matrix:
         addon: ${{ fromJSON(needs.detect-changed-addons.outputs.changedAddons) }}
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
       - name: Run Home Assistant Add-on Lint
         uses: frenck/action-addon-linter@v2
         with:
@@ -133,7 +133,7 @@ jobs:
           - arch: aarch64
             runner: ubuntu-24.04-arm
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
         with:
           persist-credentials: false
 
@@ -331,7 +331,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -402,7 +402,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/weekly_crlftolf.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository contents
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: Use action to check for CRLF endings
         uses: erclu/check-crlf@v1
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest # Use a Linux runner
     steps:
       - name: Checkout repository contents
-        uses: actions/checkout@v7 # Use the checkout action
+        uses: actions/checkout@v6 # Use the checkout action
       - name: Find files with CRLF endings
         uses: erclu/check-crlf@v1.2.0 # Use the check-crlf action
         id: check-crlf # Assign an id to this step

.github/workflows/weekly_reduceimagesize.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
 
       - name: Compress Images
         id: calibre

.github/workflows/weekly_stats.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@v6
       - name: Create stats
         run: |
           echo "Starting"

README.md

@@ -56,7 +56,7 @@ If you want to do add the repository manually, please follow the procedure highl
 
 ### Number of addons
 
-- In the repository : 132
+- In the repository : 131
 - Installed : 187951
 
 ### Top 3
@@ -1044,13 +1044,6 @@ If you want to do add the repository manually, please follow the procedure highl
 ![amd64][amd64-badge]
 ![MariaDB][mariadb-badge]
 
-✓  [Zoraxy](zoraxy/) : 🦓 General purpose request (reverse) proxy and forwarding tool with web management UI
-
-  ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fzoraxy%2Fconfig.yaml)
-![Update](https://img.shields.io/badge/dynamic/json?label=Updated&query=%24.last_update&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fzoraxy%2Fupdater.json)
-![aarch64][aarch64-badge]
-![amd64][amd64-badge]
-
 ✓ ![image](https://api.iconify.design/mdi/monitor.svg) [chromium](browser_chromium/) : chromium browser
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fbrowser_chromium%2Fconfig.yaml)

addons_updater/apparmor.txt

@@ -2,7 +2,6 @@
 
 profile addon_updater flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
-  capability sys_chroot,
 
   # Capabilities
   file,

arpspoof/apparmor.txt

@@ -9,7 +9,6 @@ profile arpspoof_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

aurral/apparmor.txt

@@ -2,7 +2,6 @@
 
 profile aurral flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
-  capability sys_chroot,
 
   file,
   signal (send) set=(kill,term,int,hup,cont),

autobrr/apparmor.txt

@@ -9,7 +9,6 @@ profile autobrr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

baikal/apparmor.txt

@@ -9,7 +9,6 @@ profile baikal_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

battybirdnet-pi/apparmor.txt

@@ -9,7 +9,6 @@ profile battybirdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

bazarr/apparmor.txt

@@ -10,7 +10,6 @@ profile bazarr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

bentopdf/apparmor.txt

@@ -2,7 +2,6 @@
 
 profile bentopdf flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
-  capability sys_chroot,
 
   # Capabilities
   file,

binance-trading-bot/apparmor.txt

@@ -9,7 +9,6 @@ profile db21ed7f_binance-trading-bot flags=(attach_disconnected,mediate_deleted)
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

birdnet-go/CHANGELOG.md

@@ -1,13 +1,4 @@
-## nightly-20260615-2 (2026-06-23)
+ 
-- MariaDB auto-config: resolve MariaDB hostname to IPv4 before connecting — on HAOS >=17.3 the Supervisor network gained IPv6 but the MariaDB addon only grants the service user from the IPv4 subnet, causing authentication failures and `CREATE DATABASE` errors; also add `--skip-ssl` to match the connection approach used by other addons
-- MariaDB auto-config: disabling `mariadb_auto_config` now reverts to SQLite only when `output.mysql.host` in config.yaml matches the HA MariaDB host (avoids clobbering manually-configured MySQL pointing at a different server)
-- Added `mariadb-client` to the addon packages so the `mysql` CLI used for database creation is available inside the container
-
- - MQTT auto-config now also enables BirdNET-Go's native Home Assistant MQTT auto-discovery: detection sensors appear in Home Assistant automatically with no manual YAML (existing UI/config.yaml edits are preserved)
-- MQTT auto-config seeds `realtime.mqtt.retain: true` (only when unset) so sensor states survive Home Assistant restarts
-- Added supervisor watchdog (tcp://[HOST]:[PORT:8080]) so the add-on is automatically restarted if BirdNET-Go stops responding
-- Added backup_exclude for rotated logs, making Home Assistant backups smaller (SQLite journals are kept so hot backups stay consistent)
-
 ## nightly-20260615 (2026-06-17)
 - Update to latest version from tphakala/birdnet-go (changelog : https://github.com/tphakala/birdnet-go/releases)
 ## nightly-20260601-2 (03-06-2026)

birdnet-go/Dockerfile

@@ -62,7 +62,7 @@ COPY ha_automodules.sh /ha_automodules.sh
 RUN chmod 744 /ha_automodules.sh && /ha_automodules.sh "$MODULES" && rm /ha_automodules.sh
 
 # Manual apps
-ENV PACKAGES="alsa-utils libasound2-plugins mariadb-client nginx yq"
+ENV PACKAGES="alsa-utils libasound2-plugins nginx yq"
 
 # Automatic apps & bashio
 COPY ha_autoapps.sh /ha_autoapps.sh

birdnet-go/HAINTEGRATION.md

@@ -2,15 +2,6 @@
 
 BirdNET-Go can be integrated with Home Assistant using a MQTT Broker.
 
-> **💡 Easiest path — automatic discovery.** If you run the Home Assistant
-> Mosquitto (MQTT) addon, just set `mqtt_auto_config: true` in this add-on's
-> options. The add-on then wires in the broker credentials **and** enables
-> BirdNET-Go's native Home Assistant MQTT auto-discovery, so the detection
-> sensors appear in Home Assistant automatically with **no manual YAML at
-> all**. The manual sensor/template/card configuration below is only needed if
-> you want to build your own custom entities instead of (or in addition to) the
-> auto-discovered ones.
-
 ## MQTT Configuration
 
 Your Home Assistant must be setup with MQTT and BirdNET-Go MQTT integration must be enabled. Modify the BirdNET-Go config.yaml file to enable MQTT. If you are using the Mosquitto Broker addon, you will see a log message during the BirdNET-Go startup showing the internal MQTT server details needed for configuration similar to below.

birdnet-go/README.md

@@ -64,7 +64,7 @@ Additional environment variables can be configured there
 
 ### MQTT and MariaDB auto-configuration (opt-in)
 
-If the Home Assistant **MQTT** addon is installed and running and you set `mqtt_auto_config: true` in the addon options, the addon writes the HA Mosquitto credentials directly into BirdNET-Go's `config.yaml` on every startup: `realtime.mqtt.enabled`, `broker`, `username`, and `password` are populated, and the topic defaults to `birdnet`. In addition, it enables BirdNET-Go's **native Home Assistant MQTT auto-discovery** (`realtime.mqtt.homeassistant.enabled`), so the detection sensors show up in Home Assistant automatically — **no manual MQTT sensor YAML required** (the hand-written sensors in [HAINTEGRATION.md](./HAINTEGRATION.md) remain available if you prefer to build your own). Messages are also retained (`realtime.mqtt.retain: true`) so sensor states survive Home Assistant restarts. When the option is `false` (the default), the addon still logs the broker details and reminds you about the option whenever Mosquitto is detected — nothing is written.
+If the Home Assistant **MQTT** addon is installed and running and you set `mqtt_auto_config: true` in the addon options, the addon writes the HA Mosquitto credentials directly into BirdNET-Go's `config.yaml` on every startup: `realtime.mqtt.enabled`, `broker`, `username`, and `password` are populated, and the topic defaults to `birdnet`. When the option is `false` (the default), the addon still logs the broker details and reminds you about the option whenever Mosquitto is detected — nothing is written.
 
 If the Home Assistant **MariaDB** addon is installed and running and you set `mariadb_auto_config: true`, the addon writes the HA credentials into `output.mysql.*` and sets `output.sqlite.enabled` to `false` (database name `birdnet`, created on first connect). When the option is `false` (the default), the addon only logs the credentials so you can configure them manually.
 

birdnet-go/apparmor.txt

@@ -9,7 +9,6 @@ profile db21ed7f_birdnet-go flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   capability sys_resource,
   file,

birdnet-go/config.yaml

@@ -2,8 +2,6 @@ arch:
   - aarch64
   - amd64
 audio: true
-backup_exclude:
-  - logs/**
 description: Realtime BirdNET and Battybirdnet soundscape analyzer
 devices:
   - /dev/dri
@@ -128,5 +126,4 @@ slug: birdnet-go
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/birdnet-go
 usb: true
-version: "nightly-20260615-2"
+version: "nightly-20260615"
-video: true

birdnet-go/rootfs/etc/cont-init.d/33-mariadb.sh

@@ -6,17 +6,8 @@ set -e
 # credentials directly into BirdNET-Go's config.yaml. Upstream reads MySQL
 # settings only from YAML (no env-var overrides exist), so this is the only
 # way to auto-configure them. The behaviour is opt-in via the
-# mariadb_auto_config addon option.
+# mariadb_auto_config addon option. When the option is off but MariaDB is
-#
+# detected, we log a one-shot hint pointing users at the option.
-# When the option is off but MariaDB is detected, we log a one-shot hint and
-# ensure config.yaml falls back to SQLite (reverting any previously written
-# mysql block). This is safe because BirdNET-Go's config.yaml defaults to
-# SQLite and the mysql block is only ever written by this script.
-#
-# When the option is on we:
-#   1. Create the "birdnet" database if it does not already exist — birdnet-go
-#      connects to an existing schema and does not create it automatically.
-#   2. Write the MySQL credentials into config.yaml and disable SQLite.
 
 CONFIG_LOCATION="/config/config.yaml"
 MYSQL_DATABASE="birdnet"
@@ -32,27 +23,13 @@ MYSQL_PASS="$(bashio::services 'mysql' 'password')"
 
 if ! bashio::config.true 'mariadb_auto_config'; then
     bashio::log.green "---"
-    bashio::log.yellow "Home Assistant MariaDB addon detected but mariadb_auto_config is disabled; ensuring BirdNET-Go uses SQLite."
+    bashio::log.yellow "Home Assistant MariaDB addon detected. Set 'mariadb_auto_config: true' in the addon options to wire it into BirdNET-Go automatically (and disable SQLite). Connection details:"
-    bashio::log.yellow "Set 'mariadb_auto_config: true' in the addon options to wire MariaDB into BirdNET-Go automatically. Connection details:"
     bashio::log.blue "Database user    : ${MYSQL_USER}"
-    bashio::log.blue "Database password: [redacted]"
+    bashio::log.blue "Database password: ${MYSQL_PASS}"
     bashio::log.blue "Database name    : ${MYSQL_DATABASE}"
     bashio::log.blue "Host-name        : ${MYSQL_HOST}"
     bashio::log.blue "Port             : ${MYSQL_PORT}"
     bashio::log.green "---"
-    if [ -f "$CONFIG_LOCATION" ]; then
-        # Only revert if config.yaml points at the HA MariaDB host we would have
-        # written — a mysql block pointing at a different host was set manually.
-        # shellcheck disable=SC2016
-        CURRENT_MYSQL_HOST="$(yq -r '.output.mysql.host // empty' "$CONFIG_LOCATION" 2>/dev/null || true)"
-        if yq -e '.output.mysql.enabled == true' "$CONFIG_LOCATION" >/dev/null 2>&1 \
-            && [ "${CURRENT_MYSQL_HOST}" = "${MYSQL_HOST}" ]; then
-            yq -i -y \
-                '.output.mysql.enabled = false
-                 | .output.sqlite.enabled = true' \
-                "$CONFIG_LOCATION"
-        fi
-    fi
     exit 0
 fi
 
@@ -62,36 +39,12 @@ if [ ! -f "$CONFIG_LOCATION" ]; then
 fi
 
 bashio::log.green "---"
-bashio::log.blue "mariadb_auto_config enabled; creating MariaDB database and wiring credentials into BirdNET-Go config"
+bashio::log.blue "mariadb_auto_config enabled; writing Home Assistant MariaDB credentials into BirdNET-Go config and disabling SQLite"
 bashio::log.blue "Host:     ${MYSQL_HOST}:${MYSQL_PORT}"
 bashio::log.blue "User:     ${MYSQL_USER}"
-bashio::log.blue "Database: ${MYSQL_DATABASE}"
+bashio::log.blue "Database: ${MYSQL_DATABASE} (will be created by BirdNET-Go on first connect)"
 bashio::log.green "---"
 
-# Resolve MariaDB hostname to IPv4: on HAOS >=17.3 the Supervisor network
-# gained IPv6, but the MariaDB addon only grants its user from the IPv4
-# subnet. Fall back to the raw hostname if resolution fails.
-MYSQL_HOST_RESOLVED="$(getent ahostsv4 "${MYSQL_HOST}" 2>/dev/null | awk '{print $1; exit}')"
-MYSQL_HOST_RESOLVED="${MYSQL_HOST_RESOLVED:-${MYSQL_HOST}}"
-if [ "${MYSQL_HOST_RESOLVED}" != "${MYSQL_HOST}" ]; then
-    bashio::log.blue "Resolved ${MYSQL_HOST} -> ${MYSQL_HOST_RESOLVED} (forcing IPv4)"
-fi
-
-# Create the database — birdnet-go connects to an existing schema and does NOT
-# create it automatically. MYSQL_PWD avoids exposing the password via the
-# process command line.
-if ! MYSQL_PWD="${MYSQL_PASS}" mysql \
-    --skip-ssl \
-    --host="${MYSQL_HOST_RESOLVED}" \
-    --port="${MYSQL_PORT}" \
-    --user="${MYSQL_USER}" \
-    --connect-timeout=10 \
-    -e "CREATE DATABASE IF NOT EXISTS \`${MYSQL_DATABASE}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"; then
-    bashio::log.error "Failed to create MariaDB database '${MYSQL_DATABASE}' — verify the MariaDB addon is running and the user has CREATE DATABASE privileges"
-    exit 1
-fi
-bashio::log.blue "Database '${MYSQL_DATABASE}' is ready"
-
 # Upstream config.go stores port as a string; pass it as such to match.
 # $host / $port / etc. are jq/yq variables, not shell expansions — the
 # single quotes around the filter are intentional.

birdnet-go/rootfs/etc/cont-init.d/33-mqtt.sh

@@ -8,11 +8,6 @@ set -e
 # way to auto-configure them. The behaviour is opt-in via the
 # mqtt_auto_config addon option. When the option is off but Mosquitto is
 # detected, we log a one-shot hint pointing users at the option.
-#
-# In addition to the broker credentials we enable BirdNET-Go's native Home
-# Assistant MQTT auto-discovery (realtime.mqtt.homeassistant.*). This makes
-# the detection sensors appear in Home Assistant automatically, so users no
-# longer have to hand-write the MQTT sensor YAML from HAINTEGRATION.md.
 
 CONFIG_LOCATION="/config/config.yaml"
 
@@ -28,7 +23,7 @@ MQTT_BROKER="tcp://${MQTT_HOST}:${MQTT_PORT}"
 
 if ! bashio::config.true 'mqtt_auto_config'; then
     bashio::log.green "---"
-    bashio::log.yellow "Home Assistant MQTT addon detected. Set 'mqtt_auto_config: true' in the addon options to wire it into BirdNET-Go automatically AND enable Home Assistant auto-discovery (sensors appear in HA with no manual YAML). Connection details:"
+    bashio::log.yellow "Home Assistant MQTT addon detected. Set 'mqtt_auto_config: true' in the addon options to wire it into BirdNET-Go automatically. Connection details:"
     bashio::log.blue "MQTT user    : ${MQTT_USER}"
     bashio::log.blue "MQTT password: ${MQTT_PASS}"
     bashio::log.blue "MQTT broker  : ${MQTT_BROKER}"
@@ -45,21 +40,10 @@ bashio::log.green "---"
 bashio::log.blue "mqtt_auto_config enabled; writing Home Assistant MQTT credentials into BirdNET-Go config"
 bashio::log.blue "Broker: ${MQTT_BROKER}"
 bashio::log.blue "User:   ${MQTT_USER}"
-bashio::log.blue "Home Assistant auto-discovery: enabled (sensors appear in HA automatically)"
 bashio::log.green "---"
 
 # $broker / $user / $pass / "birdnet" are jq/yq variables and literals,
 # not shell expansions, so the single quotes are intentional.
-#
-# Connection fields (enabled/broker/username/password) are force-set on every
-# start so they track the HA MQTT addon's rotating credentials. Topic and the
-# homeassistant.* discovery knobs use "//=" so they are only seeded when
-# missing. retain is seeded via an explicit has() check rather than "//=",
-# because jq treats a user-set "retain: false" as falsy and "//=" would wrongly
-# flip it back to true; has() seeds the default only when the key is truly
-# absent. Any value the user later changes in the BirdNET-Go UI or config.yaml
-# therefore survives restarts. homeassistant.enabled is force-set to true
-# because turning on discovery is the whole point of the auto-config option.
 # shellcheck disable=SC2016
 yq -i -y \
     --arg broker "$MQTT_BROKER" \
@@ -69,9 +53,5 @@ yq -i -y \
      | .realtime.mqtt.broker = $broker
      | .realtime.mqtt.username = $user
      | .realtime.mqtt.password = $pass
-     | .realtime.mqtt.topic //= "birdnet"
+     | .realtime.mqtt.topic //= "birdnet"' \
-     | (if (.realtime.mqtt | has("retain")) then . else .realtime.mqtt.retain = true end)
-     | .realtime.mqtt.homeassistant.enabled = true
-     | .realtime.mqtt.homeassistant.discovery_prefix //= "homeassistant"
-     | .realtime.mqtt.homeassistant.device_name //= "BirdNET-Go"' \
     "$CONFIG_LOCATION"

birdnet-pi/apparmor.txt

@@ -9,7 +9,6 @@ profile birdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

birdnet-pipy/apparmor.txt

@@ -8,7 +8,6 @@ profile birdnet-pipy_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

bitwarden/apparmor.txt

@@ -8,7 +8,6 @@ profile bitwarden_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

booksonic_air/apparmor.txt

@@ -9,7 +9,6 @@ profile booksonic-air_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

browser_brave/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 1.91.175-ls106 (2026-06-20)
-- Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
- 
 ## 1.91.172-ls105 (2026-06-13)
 - Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
  

browser_brave/apparmor.txt

@@ -1,72 +0,0 @@
-#include <tunables/global>
-
-profile browser_brave_addon flags=(attach_disconnected,mediate_deleted) {
-  #include <abstractions/base>
-
-  capability chown,
-  capability dac_override,
-  capability dac_read_search,
-  capability fowner,
-  capability setgid,
-  capability setuid,
-  capability sys_chroot,
-  capability sys_admin,
-  file,
-  signal,
-  mount,
-  umount,
-  remount,
-  network udp,
-  network tcp,
-  network dgram,
-  network stream,
-  network inet,
-  network inet6,
-  network netlink raw,
-  network unix dgram,
-
-
-# S6-Overlay
-  /init ix,
-  /run/{s6,s6-rc*,service}/** ix,
-  /package/** ix,
-  /command/** ix,
-  /run/{,**} rwk,
-  /dev/tty rw,
-  /bin/** ix,
-  /usr/bin/** ix,
-  /usr/lib/bashio/** ix,
-  /etc/s6/** rix,
-  /run/s6/** rix,
-  /etc/services.d/** rwix,
-  /etc/cont-init.d/** rwix,
-  /etc/cont-finish.d/** rwix,
-  /init rix,
-  /var/run/** mrwkl,
-  /var/run/ mrwkl,
-  /dev/i2c-1 mrwkl,
-  # Files required
-  /dev/fuse mrwkl,
-  /dev/sda1 mrwkl,
-  /dev/sdb1 mrwkl,
-  /dev/nvme0 mrwkl,
-  /dev/nvme0n1 mrwkl,
-  /dev/nvme1 mrwkl,
-  /dev/mmcblk0p1 mrwkl,
-  /dev/* mrwkl,
-  /udev/* mrwkl,
-  /tmp/** mrkwl,
-  /dev/fuse/** mrkwl,
-  /dev/** mrkwl,
-  /sys/firmware/** mrkwl,
-
-  # Data access
-  /data/** rw,
-
-  # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
-  ptrace (trace,read) peer=docker-default,
-
-  # docker daemon confinement requires explict allow rule for signal
-  signal (receive) set=(kill,term) peer=/usr/bin/docker,
-
-}

browser_brave/apparmor.txt

@@ -0,0 +1 @@
+../browser_chromium/apparmor.txt

browser_brave/config.yaml

@@ -69,5 +69,5 @@ slug: brave
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.91.175-ls106"
+version: "1.91.172-ls105"
 video: true

browser_brave/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-13",
   "repository": "alexbelgium/hassio-addons",
   "slug": "brave",
   "source": "github",
   "upstream_repo": "linuxserver/docker-brave",
-  "upstream_version": "1.91.175-ls106"
+  "upstream_version": "1.91.172-ls105"
 }

browser_chromium/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## version-b9b82d3e (2026-06-20)
-- Update to latest version from linuxserver/docker-chromium (changelog : https://github.com/linuxserver/docker-chromium/releases)
- 
 ## version-cca5154d (2026-06-11)
 - Update to latest version from linuxserver/docker-chromium (changelog : https://github.com/linuxserver/docker-chromium/releases)
 ## version-89f88890 (2026-06-05)

browser_chromium/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile browser_chromium_addon flags=(attach_disconnected,mediate_deleted) {
+profile chromium_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile browser_chromium_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

browser_chromium/config.yaml

@@ -71,5 +71,5 @@ slug: chromium
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "version-b9b82d3e"
+version: "version-cca5154d"
 video: true

browser_chromium/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-11",
   "repository": "alexbelgium/hassio-addons",
   "slug": "chromium",
   "source": "github",
   "upstream_repo": "linuxserver/docker-chromium",
-  "upstream_version": "version-b9b82d3e"
+  "upstream_version": "version-cca5154d"
 }

browserless_chrome/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 2.54.0 (2026-06-20)
-- Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
- 
 ## 2.52.2 (2026-06-17)
 - Update to latest version from browserless/chrome (changelog : https://github.com/browserless/chrome/releases)
  

browserless_chrome/apparmor.txt

@@ -9,7 +9,6 @@ profile browserlesschrome_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

browserless_chrome/config.yaml

@@ -86,5 +86,5 @@ schema:
 slug: browserless_chrome
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/browserless_chrome
-version: "2.54.0"
+version: "2.52.2"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]/docs"

browserless_chrome/updater.json

@@ -1,9 +1,9 @@
 {
   "github_tagfilter": "v",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-17",
   "repository": "alexbelgium/hassio-addons",
   "slug": "browserless_chrome",
   "source": "github",
   "upstream_repo": "browserless/chrome",
-  "upstream_version": "2.54.0"
+  "upstream_version": "2.52.2"
 }

calibre/apparmor.txt

@@ -10,7 +10,6 @@ profile calibre_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

calibre_web/apparmor.txt

@@ -10,7 +10,6 @@ profile calibre-web_addon flags=(attach_disconnected,mediate_deleted) {
   capability net_admin,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

changedetection.io/apparmor.txt

@@ -8,7 +8,6 @@ profile addon_db21ed7f_changedetection.io_nas flags=(attach_disconnected,mediate
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

cleanuparr/CHANGELOG.md

@@ -1,6 +1,3 @@
- 
-## 2.9.14 (2026-06-20)
-- Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)
 
 ## 2.9.13 (2026-05-16)
 - Update to latest version from Cleanuparr/Cleanuparr (changelog : https://github.com/Cleanuparr/Cleanuparr/releases)

cleanuparr/Dockerfile

@@ -11,7 +11,7 @@
 #=== Home Assistant Addon ===#
 
 # ARGs used in FROM must be declared before any FROM instruction
-ARG BUILD_UPSTREAM="2.9.14"
+ARG BUILD_UPSTREAM="2.9.13"
 
 #################
 # 1 Build Image #

cleanuparr/apparmor.txt

@@ -8,7 +8,6 @@ profile cleanuparr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

cleanuparr/config.yaml

@@ -91,5 +91,5 @@ schema:
   TZ: str?
 slug: cleanuparr
 url: https://github.com/alexbelgium/hassio-addons/tree/master/cleanuparr
-version: "2.9.14"
+version: "2.9.13"
 webui: "[PROTO:ssl]://[HOST]:[PORT:11011]"

cleanuparr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-06-20",
+  "last_update": "2026-05-16",
   "repository": "alexbelgium/hassio-addons",
   "slug": "cleanuparr",
   "source": "github",
   "upstream_repo": "Cleanuparr/Cleanuparr",
-  "upstream_version": "2.9.14"
+  "upstream_version": "2.9.13"
 }

cloudcommander/apparmor.txt

@@ -9,7 +9,6 @@ profile cloudcommander_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

codex/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 2.0.0 (2026-06-20)
-- Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
- 
 ## 1.12.8 (2026-06-17)
 - Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
 

codex/apparmor.txt

@@ -9,7 +9,6 @@ profile db21ed7f_codex flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

codex/config.yaml

@@ -101,4 +101,4 @@ schema:
 slug: codex
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.0.0"
+version: "1.12.8"

codex/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-17",
   "repository": "alexbelgium/hassio-addons",
   "slug": "codex",
   "source": "github",
   "upstream_repo": "ajslater/codex",
-  "upstream_version": "2.0.0"
+  "upstream_version": "1.12.8"
 }

collabora/apparmor.txt

@@ -8,7 +8,6 @@ profile collabora_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

comixed/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile comixed_addon flags=(attach_disconnected,mediate_deleted) {
+profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile comixed_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

elasticsearch/CHANGELOG.md

@@ -1,7 +1,3 @@
-## 8.14.3-3 (2026-06-19)
-- Fix startup failing with `chroot: cannot change root directory` by allowing `capability sys_chroot` in the AppArmor profile (#2709)
-- Fix AppArmor profile name (was `inadyn_addon`, colliding with several other add-ons); renamed to `elasticsearch_addon`
-
 ## 8.14.3-2 (2025-11-18)
 - 8.14.3-1 (2025-11-18)
   - Added `env_vars` option to support custom environment variables from the add-on configuration.

elasticsearch/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile elasticsearch_addon flags=(attach_disconnected,mediate_deleted) {
+profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile elasticsearch_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

elasticsearch/config.yaml

@@ -90,4 +90,4 @@ slug: elasticsearch
 startup: services
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/elasticsearch
-version: 8.14.3-3
+version: 8.14.3-1

emby/apparmor.txt

@@ -9,7 +9,6 @@ profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

emby_beta/CHANGELOG.md

@@ -1,6 +1,3 @@
- 
-## 4.10.0.15 (2026-06-20)
-- Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
 ## 4.10.0.14 (2026-06-05)
 - Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
 

emby_beta/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="4.10.0.15"
+ARG BUILD_UPSTREAM="4.10.0.14"
 FROM ${BUILD_FROM}
 
 ##################

emby_beta/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile emby_beta_addon flags=(attach_disconnected,mediate_deleted) {
+profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile emby_beta_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

emby_beta/config.yaml

@@ -122,5 +122,5 @@ schema:
 slug: emby_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/emby
-version: "4.10.0.15"
+version: "4.10.0.14"
 video: true

emby_beta/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-05",
   "repository": "alexbelgium/hassio-addons",
   "slug": "emby",
   "source": "github",
   "upstream_repo": "linuxserver/docker-emby",
-  "upstream_version": "4.10.0.15"
+  "upstream_version": "4.10.0.14"
 }

enedisgateway2mqtt/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile enedisgateway2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
+profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile enedisgateway2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

enedisgateway2mqtt_dev/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile enedisgateway2mqtt_dev_addon flags=(attach_disconnected,mediate_deleted) {
+profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile enedisgateway2mqtt_dev_addon flags=(attach_disconnected,mediate_deleted)
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

ente/apparmor.txt

@@ -9,7 +9,6 @@ profile ente_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

epicgamesfree/apparmor.txt

@@ -8,7 +8,6 @@ profile epicgamesfree_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

filebrowser/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile filebrowser_addon flags=(attach_disconnected,mediate_deleted) {
+profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile filebrowser_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

filebrowser_quantum/CHANGELOG.md

@@ -1,6 +1,3 @@
- 
-## 1.4.0 (2026-06-20)
-- Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
 ## 1.3.3-8 (2026-06-03)
 - Add `default_user_scope` option: sets the FileBrowser source path and default user scope (must be an existing absolute directory path, defaults to `/`)
 

filebrowser_quantum/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile filebrowser_quantum_addon flags=(attach_disconnected,mediate_deleted) {
+profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -9,7 +9,6 @@ profile filebrowser_quantum_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   capability sys_admin,
   file,
   signal,

filebrowser_quantum/config.yaml

@@ -114,4 +114,4 @@ schema:
 slug: filebrowser_quantum
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.4.0"
+version: "1.3.3-8"

filebrowser_quantum/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "false",
-  "last_update": "2026-06-20",
+  "last_update": "2026-05-19",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "filebrowser_quantum",
   "source": "github",
   "upstream_repo": "gtsteffaniak/filebrowser",
-  "upstream_version": "1.4.0"
+  "upstream_version": "1.3.3"
 }

fireflyiii/apparmor.txt

@@ -8,7 +8,6 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

fireflyiii_data_importer/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile fireflyiii_data_importer_addon flags=(attach_disconnected,mediate_deleted) {
+profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile fireflyiii_data_importer_addon flags=(attach_disconnected,mediate_delete
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

fireflyiii_fints_importer/apparmor.txt

@@ -8,7 +8,6 @@ profile fireflyiii_fints_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

flaresolverr/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile flaresolverr_addon flags=(attach_disconnected,mediate_deleted) {
+profile joplin flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile flaresolverr_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

flexget/CHANGELOG.md

@@ -1,7 +1,4 @@
  
-## 3.19.24 (2026-06-20)
-- Update to latest version from wiserain/flexget
- 
 ## 3.19.23 (2026-06-06)
 - Update to latest version from wiserain/flexget
 

flexget/apparmor.txt

@@ -8,7 +8,6 @@ profile flexget_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.19.24"
+version: "3.19.23"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,9 +1,9 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "2026-06-20",
+  "last_update": "2026-06-06",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.19.24"
+  "upstream_version": "3.19.23"
 }

free_games_claimer/apparmor.txt

@@ -8,7 +8,6 @@ profile free_games_claimer_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

gazpar2mqtt/apparmor.txt

@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-profile gazpar2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
+profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
   #include <abstractions/base>
 
   capability chown,
@@ -8,7 +8,6 @@ profile gazpar2mqtt_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

gitea/CHANGELOG.md

@@ -1,11 +1,3 @@
-## 1.26.2-3 (19-06-2026)
-- Minor bugs fixed
-
-## 1.26.2-2 (2026-06-19)
-- Expose app.ini in the addon_config folder so users can edit it directly via the HA file editor
-
-## 1.26.2-1 (2026-06-19)
-- Fix SSH authentication failing with `chroot("/var/empty"): Operation not permitted [preauth]` by allowing `capability sys_chroot` in the AppArmor profile, which sshd needs for privilege-separation (#2653)
 
 ## 1.26.2 (2026-05-22)
 - Update to latest version from go-gitea/gitea (changelog : https://github.com/go-gitea/gitea/releases)

gitea/README.md

@@ -1,3 +1,4 @@
+## ⚠ Open Request : [✨ [REQUEST] Access to Gitea app.ini (opened 2025-06-10)](https://github.com/alexbelgium/hassio-addons/issues/1907) by [@UplandJacob](https://github.com/UplandJacob)
 # Home assistant add-on: Gitea
 
 
@@ -61,15 +62,6 @@ DOMAIN: "homeassistant.local"
 ROOT_URL: "http://homeassistant.local:3000"
 ```
 
-### Direct app.ini Access
-
-The Gitea `app.ini` configuration file is exposed in the add-on's config folder (`/addon_configs/gitea/app.ini` on the host), making it directly editable via the HA file editor or Studio Code add-on.
-
-- **On first run**: complete the Gitea setup wizard, then restart the add-on. The generated `app.ini` will be copied to the addon_config folder automatically.
-- **On subsequent runs**: edit `/addon_configs/gitea/app.ini` directly for any Gitea setting not covered by the options above. The add-on options (SSL, DOMAIN, ROOT_URL, APP_NAME) are still applied on top of your file each restart.
-
-See the [Gitea configuration cheat sheet](https://docs.gitea.com/administration/config-cheat-sheet) for all available options.
-
 ### Custom Scripts and Environment Variables
 
 This addon supports custom scripts and environment variables through the `addon_config` mapping:

gitea/apparmor.txt

@@ -8,7 +8,6 @@ profile gitea_addon flags=(attach_disconnected,mediate_deleted) {
   capability fowner,
   capability setgid,
   capability setuid,
-  capability sys_chroot,
   file,
   signal,
   mount,

gitea/config.yaml

@@ -97,5 +97,5 @@ schema:
 slug: gitea
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/gitea
-version: "1.26.2-3"
+version: "1.26.2"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]"

gitea/rootfs/etc/cont-init.d/99-run.sh

@@ -2,32 +2,7 @@
 # shellcheck shell=bash
 set -e
 
-############################
+for file in /data/gitea/conf/app.ini /etc/templates/app.ini; do
-# EXPOSE APP.INI IN CONFIG #
-############################
-
-# Ensure the gitea conf directory exists
-mkdir -p /data/gitea/conf
-
-# If a real file (not a symlink) exists, move it to /config.
-# This covers both the initial migration from older installs and the post-wizard
-# case where Gitea's atomic SaveTo replaces the symlink with the completed config.
-# Always overwrite /config/app.ini so the installed settings are never discarded.
-if [ -f "/data/gitea/conf/app.ini" ] && [ ! -L "/data/gitea/conf/app.ini" ]; then
-    bashio::log.info "Moving app.ini to addon_config folder for direct access"
-    cp /data/gitea/conf/app.ini /config/app.ini
-    rm /data/gitea/conf/app.ini
-fi
-
-# Symlink /data/gitea/conf/app.ini -> /config/app.ini so the file is visible in the
-# addon_config folder (accessible via the HA file editor). When Gitea's first-run
-# wizard writes the config it lands in /config/app.ini via this symlink.
-if [ ! -L "/data/gitea/conf/app.ini" ]; then
-    ln -s /config/app.ini /data/gitea/conf/app.ini
-    bashio::log.info "app.ini is now accessible in your addon_config folder"
-fi
-
-for file in /config/app.ini /etc/templates/app.ini; do
 
     if [ ! -f "$file" ]; then
         continue