Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

README.md

@@ -56,7 +56,7 @@ If you want to do add the repository manually, please follow the procedure highl
 
 ### Number of addons
 
-- In the repository : 128
+- In the repository : 127
 - Installed : 195429
 
 ### Top 3
@@ -648,12 +648,6 @@ If you want to do add the repository manually, please follow the procedure highl
 ![smb][smb-badge]
 ![localdisks][localdisks-badge]
 
-✓  [Nginx Proxy Manager + Static Web Server](nginx_webserver_proxy/) : Nginx Proxy Manager with a built-in configurable static file server. Manage reverse proxies via NPM UI on port 81 while serving files from HA storage on port 80.
-
-  ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fnginx_webserver_proxy%2Fconfig.yaml)
-![aarch64][aarch64-badge]
-![amd64][amd64-badge]
-
 ✓ ![image](https://api.iconify.design/mdi/arrow-down-bold-circle-outline.svg) [Nzbget](nzbget/) : usenet downloader
 
   ![Version](https://img.shields.io/badge/dynamic/yaml?label=Version&query=%24.version&url=https%3A%2F%2Fraw.githubusercontent.com%2Falexbelgium%2Fhassio-addons%2Fmaster%2Fnzbget%2Fconfig.yaml)

fireflyiii/CHANGELOG.md

@@ -1,6 +1,7 @@
 
 ## 6.6.2-1 (2026-05-10)
-- Fix MariaDB connection on HAOS >=17.3 by forcing IPv4 host resolution (#2688)
+
+- Fix: Force IPv4 for MariaDB connections to resolve access denied errors after HAOS 17.3 (IPv6 networking change)
 
 ## 6.6.2 (2026-05-02)
 - Update to latest version from firefly-iii/firefly-iii (changelog : https://github.com/firefly-iii/firefly-iii/releases)

fireflyiii/rootfs/etc/cont-init.d/99-run.sh

@@ -86,20 +86,17 @@ case $(bashio::config 'DB_CONNECTION') in
                 "Please ensure it is installed and started"
         fi
 
-        # Resolve MariaDB hostname to IPv4: on HAOS >=17.3 the Supervisor network
-        # gained IPv6, but the MariaDB addon only grants its user from the IPv4
-        # subnet (issue #2688). Fall back to the raw hostname if resolution fails.
-        mariadb_host_raw="$(bashio::services "mysql" "host")"
-        mariadb_host_ipv4="$(getent ahostsv4 "$mariadb_host_raw" 2> /dev/null | awk '{print $1; exit}')"
-        DB_HOST="${mariadb_host_ipv4:-$mariadb_host_raw}"
-        if [ "$DB_HOST" != "$mariadb_host_raw" ]; then
-            bashio::log.info "Resolved ${mariadb_host_raw} -> ${DB_HOST} (forcing IPv4)"
-        fi
-
         # Use values
         DB_CONNECTION=mysql
+        DB_HOST=$(bashio::services "mysql" "host")
         DB_PORT=$(bashio::services "mysql" "port")
 
+        # Force IPv4 to avoid access denied errors when the container network uses IPv6 (HAOS 17.3+)
+        if DB_HOST_V4=$(getent ahostsv4 "$DB_HOST" 2>/dev/null | awk 'NR==1{print $1}') && [ -n "$DB_HOST_V4" ]; then
+            bashio::log.info "Resolved MariaDB host to IPv4: $DB_HOST_V4"
+            DB_HOST="$DB_HOST_V4"
+        fi
+
         # Always fetch service discovery credentials for bootstrap operations (CREATE DATABASE)
         BOOTSTRAP_USERNAME=$(bashio::services "mysql" "username")
         BOOTSTRAP_PASSWORD=$(bashio::services "mysql" "password")

manyfold/CHANGELOG.md

@@ -1,5 +1,3 @@
-## 0.139.3 (11-05-2026)
-- Minor bugs fixed
 ## 0.138.0 (24-04-2026)
 - Minor bugs fixed
 ## 0.137.0 (13-04-2026)

manyfold/config.yaml

@@ -1,7 +1,7 @@
 name: "Manyfold"
 slug: manyfold
 description: "Manyfold 3D model manager as a Home Assistant add-on, using the upstream image with configurable library/index paths."
-version: "0.139.3"
+version: "0.138.0"
 url: "https://github.com/alexbelgium/hassio-addons/tree/master/manyfold"
 image: ghcr.io/alexbelgium/manyfold-{arch}
 arch:

mealie/CHANGELOG.md

@@ -1,7 +1,4 @@
 
-## v3.17.0-1 (2026-05-10)
-- Fix sidebar panel not visible to non-admin HA users (remove duplicate panel_admin key, keep panel_admin: false)
-
 ## v3.17.0 (2026-05-09)
 - Update to latest version from mealie-recipes/mealie (changelog : https://github.com/mealie-recipes/mealie/releases)
 

mealie/config.yaml

@@ -94,6 +94,7 @@ options:
   ssl: false
 panel_admin: false
 panel_icon: mdi:silverware-fork-knife
+panel_admin: false
 ports:
   9001/tcp: 9090
 ports_description:
@@ -114,4 +115,4 @@ schema:
 slug: mealie
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "v3.17.0-1"
+version: "v3.17.0"

monica/CHANGELOG.md

@@ -1,5 +1,5 @@
 ## 5.0.0b5-3 (2026-05-10)
-- Fix MariaDB connection on HAOS >=17.3 by forcing IPv4 host resolution (#2688)
+- Fix: Force IPv4 for MariaDB connections to resolve access denied errors after HAOS 17.3 (IPv6 networking change)
 
 ## 5.0.0b5-2 (26-02-2026)
 - Minor bugs fixed

monica/rootfs/etc/cont-init.d/99-run.sh

@@ -45,18 +45,15 @@ case "$database" in
             bashio::exit.nok "Please ensure it is installed and started"
         fi
 
-        # Resolve MariaDB hostname to IPv4: on HAOS >=17.3 the Supervisor network
-        # gained IPv6, but the MariaDB addon only grants its user from the IPv4
-        # subnet (issue #2688). Fall back to the raw hostname if resolution fails.
-        mariadb_host_raw="$(bashio::services "mysql" "host")"
-        mariadb_host_ipv4="$(getent ahostsv4 "$mariadb_host_raw" 2> /dev/null | awk '{print $1; exit}')"
-        DB_HOST="${mariadb_host_ipv4:-$mariadb_host_raw}"
-        if [ "$DB_HOST" != "$mariadb_host_raw" ]; then
-            bashio::log.info "Resolved ${mariadb_host_raw} -> ${DB_HOST} (forcing IPv4)"
-        fi
-
         # Use values
-        bashio::log.blue "DB_HOST=$DB_HOST" && sed -i "1a export DB_HOST=$DB_HOST" /usr/local/bin/entrypoint.sh
+        DB_HOST=$(bashio::services "mysql" "host")
+        # Force IPv4 to avoid access denied errors when the container network uses IPv6 (HAOS 17.3+)
+        if DB_HOST_V4=$(getent ahostsv4 "$DB_HOST" 2>/dev/null | awk 'NR==1{print $1}') && [ -n "$DB_HOST_V4" ]; then
+            bashio::log.info "Resolved MariaDB host to IPv4: $DB_HOST_V4"
+            DB_HOST="$DB_HOST_V4"
+        fi
+        bashio::log.blue "DB_HOST=$DB_HOST"
+        sed -i "1a export DB_HOST=$DB_HOST" /usr/local/bin/entrypoint.sh
         DB_PORT=$(bashio::services "mysql" "port") && bashio::log.blue "DB_PORT=$DB_PORT" && sed -i "1a export DB_PORT=$DB_PORT" /usr/local/bin/entrypoint.sh
         DB_DATABASE=monica && bashio::log.blue "DB_DATABASE=$DB_DATABASE" && sed -i "1a export DB_DATABASE=$DB_DATABASE" /usr/local/bin/entrypoint.sh
         DB_USERNAME=$(bashio::services "mysql" "username") && bashio::log.blue "DB_USERNAME=$DB_USERNAME" && sed -i "1a export DB_USERNAME=$DB_USERNAME" /usr/local/bin/entrypoint.sh

photoprism/CHANGELOG.md

@@ -1,6 +1,7 @@
 
 ## ubuntu-2026-03-05-1 (2026-05-10)
-- Fix MariaDB connection on HAOS >=17.3 by forcing IPv4 host resolution (#2688)
+
+- Fix: Force IPv4 for MariaDB connections to resolve access denied errors after HAOS 17.3 (IPv6 networking change)
 
 ## ubuntu-2026-03-05 (2026-03-05)
 - Update to latest version from photoprism/photoprism

photoprism/rootfs/etc/cont-init.d/99-run.sh

@@ -28,20 +28,29 @@ case $(bashio::config 'DB_TYPE') in
         # Install mysqlclient
         pip install pymysql &> /dev/null || true
 
-        # Resolve MariaDB hostname to IPv4: on HAOS >=17.3 the Supervisor network
-        # gained IPv6, but the MariaDB addon only grants its user from the IPv4
-        # subnet (issue #2688). Fall back to the raw hostname if resolution fails.
-        mariadb_host_raw="$(bashio::services 'mysql' 'host')"
-        mariadb_host_ipv4="$(getent ahostsv4 "$mariadb_host_raw" 2> /dev/null | awk '{print $1; exit}')"
-        mariadb_host="${mariadb_host_ipv4:-$mariadb_host_raw}"
-        if [ "$mariadb_host" != "$mariadb_host_raw" ]; then
-            bashio::log.info "Resolved ${mariadb_host_raw} -> ${mariadb_host} (forcing IPv4)"
-        fi
-        mariadb_port="$(bashio::services 'mysql' 'port')"
-
         # Use values
         PHOTOPRISM_DATABASE_DRIVER="mysql"
-        PHOTOPRISM_DATABASE_SERVER="${mariadb_host}:${mariadb_port}"
+        MYSQL_HOST="$(bashio::services 'mysql' 'host')"
+        MYSQL_PORT="$(bashio::services 'mysql' 'port')"
+
+        # Force IPv4 to avoid access denied errors when the container network uses IPv6 (HAOS 17.3+)
+        MYSQL_HOST_V4=""
+        if command -v getent >/dev/null 2>&1; then
+            MYSQL_HOST_V4="$(getent ahostsv4 "$MYSQL_HOST" 2>/dev/null | awk 'NR==1{print $1}')"
+        elif command -v nslookup >/dev/null 2>&1; then
+            MYSQL_HOST_V4="$(nslookup "$MYSQL_HOST" 2>/dev/null | awk '/^Address [0-9]+: / { print $3; exit } /^Address: / && $2 ~ /^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$/ { print $2; exit }')"
+        else
+            bashio::log.warning "Unable to resolve MariaDB host to IPv4: neither getent nor nslookup is available"
+        fi
+
+        if [ -n "$MYSQL_HOST_V4" ]; then
+            bashio::log.info "Resolved MariaDB host to IPv4: $MYSQL_HOST_V4"
+            MYSQL_HOST="$MYSQL_HOST_V4"
+        else
+            bashio::log.warning "Unable to resolve MariaDB host '$MYSQL_HOST' to IPv4; continuing with hostname"
+        fi
+
+        PHOTOPRISM_DATABASE_SERVER="${MYSQL_HOST}:${MYSQL_PORT}"
         PHOTOPRISM_DATABASE_NAME="photoprism"
         PHOTOPRISM_DATABASE_USER="$(bashio::services 'mysql' 'username')"
         PHOTOPRISM_DATABASE_PASSWORD="$(bashio::services 'mysql' 'password')"
@@ -69,9 +78,9 @@ case $(bashio::config 'DB_TYPE') in
         bashio::log.warning "Uninstalling the MariaDB addon will remove any data"
 
         # Create database
-        mysql --skip-ssl --host="${mariadb_host}" --port="${mariadb_port}" --user="$PHOTOPRISM_DATABASE_USER" --password="$PHOTOPRISM_DATABASE_PASSWORD" -e"CREATE DATABASE IF NOT EXISTS $PHOTOPRISM_DATABASE_NAME;"
+        mysql --skip-ssl --host="$MYSQL_HOST" --port="$MYSQL_PORT" --user="$PHOTOPRISM_DATABASE_USER" --password="$PHOTOPRISM_DATABASE_PASSWORD" -e"CREATE DATABASE IF NOT EXISTS $PHOTOPRISM_DATABASE_NAME;"
         # Force character set
-        mysql --skip-ssl --host="${mariadb_host}" --port="${mariadb_port}" --user="$PHOTOPRISM_DATABASE_USER" --password="$PHOTOPRISM_DATABASE_PASSWORD" -e"ALTER DATABASE $PHOTOPRISM_DATABASE_NAME CHARACTER SET = utf8mb4 COLLATE = utf8mb4_unicode_ci;" || true
+        mysql --skip-ssl --host="$MYSQL_HOST" --port="$MYSQL_PORT" --user="$PHOTOPRISM_DATABASE_USER" --password="$PHOTOPRISM_DATABASE_PASSWORD" -e"ALTER DATABASE $PHOTOPRISM_DATABASE_NAME CHARACTER SET = utf8mb4 COLLATE = utf8mb4_unicode_ci;" || true
         ;;
 esac
 

qbittorrent/CHANGELOG.md

@@ -1,15 +1,3 @@
-## 5.2.0-7 (12-05-2026)
-- Fix OpenVPN stale-process crash loop on S6 service restart: kill any existing OpenVPN daemon and clean up stale interface/routing state before re-establishing the tunnel (same class of fix as WireGuard 5.2.0-3)
-- Fix broken routing rule cleanup: `_routing_del` was deleting rules with `from all`/`to all` wildcard which never matched the specific `from IP`/`to IP` rules added by `_routing_add`, leaving stale routing rules after VPN teardown and causing DNS resolution failures when OpenVPN tried to reconnect
-
-## 5.2.0-6 (12-05-2026)
-- Minor bugs fixed
-
-## 5.2.0-3 (2026-05-12)
-- Fix WireGuard "RTNETLINK answers: File exists" crash loop: clean up stale interface and routing rules before re-establishing the tunnel on S6 service restart
-
-## 5.2.0-2 (2026-05-10)
-- Fix startup loop on aarch64: drop s6-notifyoncheck wrapper so s6 supervises qbittorrent-nox directly (LSIO arm64 image has no notification-fd, causing EBADF restart loop)
 
 ## 5.2.0-1 (2026-05-10)
 - Fix qbittorrent-nox path (/usr/bin → /app) after LSIO image update

qbittorrent/config.yaml

@@ -143,4 +143,4 @@ schema:
 slug: qbittorrent
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "5.2.0-7"
+version: "5.2.0-1"

qbittorrent/rootfs/etc/s6-overlay/s6-rc.d/svc-qbittorrent/run

@@ -37,17 +37,13 @@ fi
 # --- Launch qBittorrent ---
 
 # Determine log output based on silent mode
-QB_OUTPUT="/proc/1/fd/1"
+QB_OUTPUT="/dev/stdout"
 if bashio::config.true 'silent'; then
     QB_OUTPUT="/dev/null"
 fi
 
 bashio::log.info "Starting qBittorrent..."
 
-if [ -f /etc/s6-overlay/s6-rc.d/svc-qbittorrent/notification-fd ]; then
-    exec \
-        s6-notifyoncheck -d -n 300 -w 1000 -c "nc -z localhost ${WEBUI_PORT}" \
-        s6-setuidgid abc /app/qbittorrent-nox --webui-port="${WEBUI_PORT}" > "${QB_OUTPUT}"
-else
-    exec s6-setuidgid abc /app/qbittorrent-nox --webui-port="${WEBUI_PORT}" > "${QB_OUTPUT}"
-fi
+exec \
+    s6-notifyoncheck -d -n 300 -w 1000 -c "nc -z localhost ${WEBUI_PORT}" \
+    s6-setuidgid abc /app/qbittorrent-nox --webui-port="${WEBUI_PORT}" > "${QB_OUTPUT}"

qbittorrent/rootfs/usr/local/sbin/vpn

@@ -192,36 +192,13 @@ _routing_add() {
 
 _routing_del() {
     bashio::log.info "Removing routing rules for VPN interface ${config["Interface"]}..."
-    local table="${config["Table"]}"
-    local line prio rest
 
-    # Remove all IPv4 policy rules pointing to our custom routing table.
-    # We must parse `ip rule list` and delete each matching rule individually,
-    # because the rules were added with specific from/to selectors (e.g.
-    # "from 10.8.0.2" or "to 8.8.8.8") — not the "from all" wildcard that
-    # the old code tried to delete, which never matched anything.
-    while IFS= read -r line; do
-        [[ "${line}" =~ ^[[:space:]]*([0-9]+):[[:space:]]+(.*lookup[[:space:]]+${table}.*)$ ]] || continue
-        prio="${BASH_REMATCH[1]}"
-        rest="${BASH_REMATCH[2]}"
-        # shellcheck disable=SC2206 — word-split is intentional: ip needs individual tokens
-        local -a rule_args=( ${rest} )
-        ip -4 rule del prio "${prio}" "${rule_args[@]}" 2>/dev/null || true
-    done < <(ip -4 rule list 2>/dev/null)
-
-    # Same for IPv6
-    while IFS= read -r line; do
-        [[ "${line}" =~ ^[[:space:]]*([0-9]+):[[:space:]]+(.*lookup[[:space:]]+${table}.*)$ ]] || continue
-        prio="${BASH_REMATCH[1]}"
-        rest="${BASH_REMATCH[2]}"
-        # shellcheck disable=SC2206 — word-split is intentional: ip needs individual tokens
-        local -a rule_args=( ${rest} )
-        ip -6 rule del prio "${prio}" "${rule_args[@]}" 2>/dev/null || true
-    done < <(ip -6 rule list 2>/dev/null)
-
-    # Flush all routes in our custom table
-    ip -4 route flush table "${table}" 2>/dev/null || true
-    ip -6 route flush table "${table}" 2>/dev/null || true
+    while _cmd "ip -4 rule del priority 1 from all table ${config["Table"]} 2>/dev/null"; do :; done
+    while _cmd "ip -4 rule del priority 1 to all table ${config["Table"]} 2>/dev/null"; do :; done
+    while _cmd "ip -4 route del default dev ${config["Interface"]} table ${config["Table"]} 2>/dev/null"; do :; done
+    while _cmd "ip -6 rule del priority 1 from all table ${config["Table"]} 2>/dev/null"; do :; done
+    while _cmd "ip -6 rule del priority 1 to all table ${config["Table"]} 2>/dev/null"; do :; done
+    while _cmd "ip -6 route del default dev ${config["Interface"]} table ${config["Table"]} 2>/dev/null"; do :; done
 }
 
 # --- Firewall Specific Functions ---
@@ -302,16 +279,6 @@ _wireguard_up() {
         fi
     done
 
-    # Clean up any leftover state from a previous run (e.g., after an S6 service restart).
-    # Without this, `ip link add` and `ip rule add` fail with "RTNETLINK answers: File exists"
-    # when the svc-qbittorrent service is restarted while the WireGuard interface is still up.
-    if ip link show "${config["Interface"]}" > /dev/null 2>&1; then
-        bashio::log.info "WireGuard interface ${config["Interface"]} already exists. Cleaning up before re-establishing connection."
-        ip link set "${config["Interface"]}" down 2>/dev/null || true
-        ip link del "${config["Interface"]}" 2>/dev/null || true
-    fi
-    _routing_del 2>/dev/null || true
-
     _cmd "ip link add ${config["Interface"]} type wireguard" || return 1
 
     mapfile -d ',' -t local_ips < <(echo "${config["Address"]}" | tr -d ' ')
@@ -523,22 +490,6 @@ _openvpn_up() {
     bashio::log.warning "This routing table will be used for traffic from the VPN interface and to the configured DNS servers."
     bashio::log.warning "Qbittorrent bittorrent client shall be set to use the VPN interface ${config["Interface"]} only."
 
-    # Clean up any leftover state from a previous run (e.g., after an S6 service restart).
-    # Without this, a second OpenVPN daemon starts while the first is still running, leaving
-    # stale routing rules that cause DNS resolution failures during reconnect — the same class
-    # of bug that was fixed for WireGuard in 5.2.0-3.
-    if pgrep -f "openvpn --config ${config["ConfigFile"]}" > /dev/null 2>&1; then
-        bashio::log.info "Previous OpenVPN process found. Stopping it before re-establishing connection."
-        pkill -TERM -f "openvpn --config ${config["ConfigFile"]}" 2>/dev/null || true
-        sleep 2
-    fi
-    if ip link show "${config["Interface"]}" > /dev/null 2>&1; then
-        bashio::log.info "OpenVPN interface ${config["Interface"]} already exists. Cleaning up before re-establishing connection."
-        ip link set "${config["Interface"]}" down 2>/dev/null || true
-    fi
-    _routing_del 2>/dev/null || true
-    _resolvconf "reset" 2>/dev/null || true
-
     # Register this script as OpenVPN up/down handlers to manage routing
     echo '#!/bin/bash' > ${config["PostUpScript"]}
     echo "${config["MySelf"]} openvpn postup" >> ${config["PostUpScript"]}