Update openclaw to version v2026.4.14 (#5342)

Co-authored-by: nmfretz <nmfretz@gmail.com>

.github/workflows/lint-apps.yml

@@ -10,4 +10,4 @@ jobs:
     name: Lint apps
     runs-on: ubuntu-latest
     steps:
-      - uses: sharknoon/umbrel-app-linter-action@28d2ca16e3899585a245f1a580cc2361035e23d5
+      - uses: sharknoon/umbrel-app-linter-action@d0b39f9ec5867fd001b05d5ddd6037dcc35f41bd

README.md

@@ -461,12 +461,12 @@ PROXY_AUTH_ADD: "false"
 ```
 
 ##### Whitelist/blacklist
-Some apps host a user facing at the root of their web application and then an API at e.g. `/api`. And in this case we would like `/` to be protected by Umbrel and `/api` protected by the apps existing/inbuilt API token system. This can be achieved by adding this env. var. to the `app_proxy` Docker Compose service:
+Some apps host a user-facing UI at the root of their web application and then an API at e.g. `/api`. And in this case we would like `/` to be protected by Umbrel and `/api` protected by the apps existing/inbuilt API token system. This can be achieved by adding this env. var. to the `app_proxy` Docker Compose service:
 ```
 PROXY_AUTH_WHITELIST: "/api/*"
 ```
 
-Another example could be that the root of the web application (`/`) should be publically accessible but the admin section be protected by Umbrel. This can be achieved by adding these env. vars. to the `app_proxy` Docker Compose service:
+Another example could be that the root of the web application (`/`) should be publicly accessible but the admin section be protected by Umbrel. This can be achieved by adding these env. vars. to the `app_proxy` Docker Compose service:
 ```
 PROXY_AUTH_WHITELIST: "*"
 PROXY_AUTH_BLACKLIST: "/admin/*"

activepieces/docker-compose.yml

@@ -9,7 +9,7 @@ services:
   app:
     ## does not work rootless as of yet
     #user: "1000:1000"
-    image: ghcr.io/activepieces/activepieces:0.71.2@sha256:6fc8b75f130d40d18ff80d335cc0291191a484192807965ad242955238e6b5df
+    image: ghcr.io/activepieces/activepieces:0.81.4@sha256:08229ab5e6374ace2ef9471eab0f519d9af1e7eed6dbaa989a5863387591544d
     restart: on-failure
     environment:
       AP_ENGINE_EXECUTABLE_PATH: dist/packages/engine/main.js

activepieces/umbrel-app.yml

@@ -2,9 +2,14 @@ manifestVersion: 1
 id: activepieces
 category: automation
 name: Activepieces
-version: "0.71.2"
+version: "0.81.4"
 releaseNotes: >-
-  This release fixes code piece execution that was failing on ARM-based machines when SANDBOX_CODE_ONLY was enabled.
+  This release includes bug fixes and minor improvements:
+    - Fixed project filter so admins no longer see other users' personal projects
+    - Added a database migration rollback system for safer upgrades
+    - Fixed retrying flows from a failed step that was getting stuck in queued status
+    - Fixed audit logs missing the retried case
+    - Fixed MCP OAuth registration returning incorrect numeric values
 
 
   Full release notes are found at https://github.com/activepieces/activepieces/releases

adguard-home/docker-compose.yml

@@ -2,7 +2,7 @@ version: "3.7"
 
 services:
   server:
-    image: adguard/adguardhome:v0.107.71@sha256:92929135ced2554aaf94706f766a98ad348f211df61b0704e2db7e8498cc00b7
+    image: adguard/adguardhome:v0.107.73@sha256:7fbf01d73ecb7a32d2d9e6cef8bf88e64bd787889ca80a1e8bce30cd4c084442
     # override the default command to set the web address to port 8095 to avoid conflict with Thunderhub
     # command from Dockerfile: https://github.com/AdguardTeam/AdGuardHome/blob/master/docker/Dockerfile
     command: ["--no-check-update", "-c", "/opt/adguardhome/conf/AdGuardHome.yaml", "-w", "/opt/adguardhome/work", "--web-addr", "0.0.0.0:8095"]

adguard-home/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: adguard-home
 category: networking
 name: AdGuard Home
-version: "0.107.71"
+version: "0.107.73"
 tagline: Network-wide software for blocking ads and tracking
 description: >-
   ⚠️ See below for important set-up instructions.
@@ -19,16 +19,11 @@ description: >-
   This ensures that the app will not conflict with other apps from the Umbrel App Store, and that the app will be accessible
   when clicking on the app icon in the umbrelOS homescreen.
 releaseNotes: >-
-  This release includes improvements and bug fixes.
+  🚨 Critical Security Update: This hotfix addresses a critical vulnerability that could allow users to bypass authentication and gain full access to AdGuard Home without valid credentials. Updating immediately is strongly recommended.
 
 
-  Improvements:
-    - Stale records in the optimistic DNS cache now have an upper age limit, configurable via `dns.cache_optimistic_max_age` (default 12 hours)
-    - The TTL for stale answers from optimistic DNS cache is now configurable via `dns.cache_optimistic_answer_ttl` (default 30 seconds)
-
-
-  Bug Fixes:
-    - Fixed an issue where the optimistic DNS cache was not working
+  Security Fix:
+    - Authentication is now enforced for requests upgraded from HTTP/2 Cleartext (H2C) to public resources
 
 
   Full release notes can be found at https://github.com/AdguardTeam/AdGuardHome/releases

adventurelog/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       PROXY_AUTH_ADD: "false"
 
   web:
-    image: ghcr.io/seanmorley15/adventurelog-frontend:v0.11.0@sha256:8a311035704a254de404e2054766e00fab993f4a01008c3999f09e26249fd143
+    image: ghcr.io/seanmorley15/adventurelog-frontend:v0.12.0@sha256:9aa653603eb1305f3c34c61bc99b40a394295aed3fecd8c9777a9e5c04c7155e
     restart: on-failure
     environment:
       PUBLIC_SERVER_URL: "http://adventurelogserver1:8000"
@@ -26,7 +26,7 @@ services:
       - ${APP_DATA_DIR}/data/db:/var/lib/postgresql/data/
 
   server:
-    image: ghcr.io/seanmorley15/adventurelog-backend:v0.11.0@sha256:d6460c7645311dc6a81e88aae5dfbe81f26291363ca812116a75fc90b283934c
+    image: ghcr.io/seanmorley15/adventurelog-backend:v0.12.0@sha256:68725d6a3692333e0049607f32078e865e95ebdb8a13e0c5512a01ef766770ae
     container_name: adventurelogserver1 # needs to be set for the frontend to be able to connect (underline not supported)
     restart: on-failure
     environment:

adventurelog/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1.1
 id: adventurelog
 category: files
 name: AdventureLog
-version: "v0.11.0"
+version: "v0.12.0"
 tagline: Self-hostable travel tracker and trip planner
 description: >-
   🗺️ Starting from a simple idea of tracking travel locations (called adventures), AdventureLog has grown into a full-fledged travel companion. With AdventureLog, you can log your adventures, keep track of where you've been on the world map, plan your next trip collaboratively, and share your experiences with friends and family.
@@ -10,16 +10,19 @@ description: >-
 
   AdventureLog was created to solve a problem: the lack of a modern, open-source, user-friendly travel companion. Many existing travel apps are either too complex, too expensive, or too closed-off to be useful for the average traveler. AdventureLog aims to be the opposite: simple, beautiful, and open to everyone.
 releaseNotes: >-
-  AdventureLog v0.11.0 brings a complete reimagining of how you track and plan your travels. Key highlights include:
+  AdventureLog v0.12.0 is a major update focused on trip planning, itineraries, and smarter travel tools. Key highlights include:
 
 
-    - Adventures are now called Locations throughout the app
-    - New features: Activities and Trails, which can be added manually or imported from Strava and Wanderer
-    - Full UI rewrite with a cleaner interface and improved mobile experience
-    - Collections now use invites for easier sharing and management
-    - New integrations with Strava and Wanderer for importing activities and trails
-    - Expanded localization and translations
-    - Enhanced map views including satellite and 3D terrain options
+    - Completely redesigned itinerary system with drag & drop, reordering, and map-pin-based planning
+    - Day-aware planning with day of week shown throughout collection and itinerary views
+    - Notes and checklists for trip-wide items, viewable and tickable from the itinerary
+    - New budgeting tools with cost fields for locations, transportations, and lodgings, plus currency settings
+    - GPX file upload support for transportation entries
+    - Improved OIDC authentication with auto-redirect, email-based account linking, and smoother flows
+    - Collection UI redesign with statuses, primary photo selection, and improved sharing
+    - New recommendation toggles and smarter city/location detection
+    - Itinerary items now included in backup and restore
+    - Various bug fixes for timezones, calendars, location editing, and UI rendering
 
 
   Full release notes can be found at https://github.com/seanmorley15/AdventureLog/releases/

affine/docker-compose.yml

@@ -6,7 +6,7 @@ services:
       APP_PORT: 3010
 
   web:
-    image: ghcr.io/toeverything/affine:0.25.7@sha256:e24e34c351e787dbfc61bf768bea5650447177a956649cecf06f6ddf01585716
+    image: ghcr.io/toeverything/affine:0.26.3@sha256:725aaceb0ed94d4b832ae6ef9414503291c9b2b4f60bd6f3c7eef571b6149add
     restart: on-failure
     environment:
       - AFFINE_CONFIG_PATH=/root/.affine/config
@@ -25,7 +25,7 @@ services:
         condition: service_completed_successfully
 
   migration:
-    image: ghcr.io/toeverything/affine:0.25.7@sha256:e24e34c351e787dbfc61bf768bea5650447177a956649cecf06f6ddf01585716
+    image: ghcr.io/toeverything/affine:0.26.3@sha256:725aaceb0ed94d4b832ae6ef9414503291c9b2b4f60bd6f3c7eef571b6149add
     restart: on-failure
     command:
       ['sh', '-c', 'node ./scripts/self-host-predeploy']

affine/umbrel-app.yml

@@ -3,7 +3,7 @@ id: affine
 name: Affine
 tagline: Open source alternative to Notion, Miro, and Airtable
 category: files
-version: "0.25.7"
+version: "0.26.3"
 port: 3013
 description: >-
   A privacy-focused, local-first, open-source, and ready-to-use alternative for Notion & Miro.
@@ -36,20 +36,13 @@ gallery:
   - 2.jpg
   - 3.jpg
 releaseNotes: >-
-  This release brings improvements to document management, importing capabilities, and overall stability.
-
-
   Key highlights include:
-    - Improved Notion import with folder hierarchy and page icons support
-    - New Word document (.docx) importer for easier content migration
-    - Added native document reader for faster indexing
-    - Enhanced editor with new callout component for richer documents
-    - Database blocks now remember collapsed state for grouped rows
-    - Font size adjustment available in editor settings
-    - Improved OAuth and Apple sign-in functionality
-    - Better handling of linked and synced documents across workspaces
-    - Fixed date picker behavior and various editor bugs
-    - Security updates for dependencies
+    - Improved edgeless performance during dragging and zooming
+    - Improved key mapping for non-U.S. keyboard layouts
+    - Improved database filter, callout default style, and dark mode visibility
+    - Improved S3 provider compatibility for self-hosted setups
+    - Improved admin panel with a better dashboard and settings interface
+    - Fixed an issue where history could be created repeatedly during concurrent operations
 
 
   Full release notes are found at https://github.com/toeverything/AFFiNE/releases

albyhub/docker-compose.yml

@@ -5,7 +5,7 @@ services:
       APP_HOST: albyhub_server_1
       APP_PORT: 8080
   server:
-    image: ghcr.io/getalby/hub:v1.21.4@sha256:d81ed5818c33c5b1926c13fe10e25b72ed1c057fc9738e025f6956254d3f69f3
+    image: ghcr.io/getalby/hub:v1.21.6@sha256:dc05806a3384f57ded8aca2ba58d47ec93a0aeb213539b5faf32e7a3c71b5c32
     user: 1000:1000
     volumes:
       - ${APP_DATA_DIR}/data:/data

albyhub/exports.sh

@@ -3,7 +3,7 @@
 # Check if Lightning Node app is installed and export required variables if so
 installed_apps=$("${UMBREL_ROOT}/scripts/app" ls-installed)
 
-if echo "$installed_apps" | grep --quiet 'lightning'; then
+if echo "$installed_apps" | grep --quiet -x 'lightning'; then
   export APP_ALBYHUB_LN_BACKEND="LND"
   export APP_ALBYHUB_LND_ADDRESS="10.21.21.9:10009"
   export APP_ALBYHUB_LND_CERT_FILE="/lnd/tls.cert"

albyhub/umbrel-app.yml

@@ -3,7 +3,7 @@ id: albyhub
 name: Alby Hub ✨
 tagline: Self-custodial Lightning wallet with integrated node and app connections
 category: bitcoin
-version: "1.21.4"
+version: "1.21.6"
 port: 59000
 description: >-
   Alby Hub is an open-source, self-custodial Bitcoin Lightning wallet, with the easiest-to-use Lightning Network node for everyone.
@@ -40,9 +40,14 @@ gallery:
   - 4.jpg
 releaseNotes: >-
   Key changes in this release:
-    - Fixed swapping from an external on-chain wallet to lightning from the Node page
-    - Improved dialog keyboard submission functionality
-    - Adjusted maximum dialog height for better display
+    - Updated Boltz dependency for improved swap functionality
+    - Swap-outs (Lightning to on-chain) now only require 1 on-chain confirmation instead of 2
+    - Added Alby's referral program to the earn page
+    - Added Castamatic to the app store
+    - Increased default Alby Account budget from 150k to 250k sats
+    - Removed Bitcoin Maxi Mode
+    - Added a 404 page
+    - Various bugfixes and minor improvements
 
 
   Full release notes are found at https://github.com/getAlby/hub/releases

appsmith/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
   
   app:
-    image: appsmith/appsmith-ce:v1.94@sha256:0776a0a9665919800d22fc736956ec54fedd16a9a30f9d4ad3f3fc0fd8ac8694
+    image: appsmith/appsmith-ce:v1.98@sha256:533d5bcb7a1715b967e9cfa4bd2eccfc081349261a44453d03d775d86cc6df27
     environment:
       APPSMITH_ENCRYPTION_PASSWORD: ${APP_PASSWORD}
       APPSMITH_ENCRYPTION_SALT: ${APP_PASSWORD}

appsmith/umbrel-app.yml

@@ -3,7 +3,7 @@ id: appsmith
 name: Appsmith
 tagline: Platform to build admin panels, internal tools, and dashboards
 category: developer
-version: "v1.94"
+version: "v1.98"
 port: 8654
 description: >-
   Appsmith is an open-source, low-code development platform designed to help developers and teams build internal tools and business applications quickly and efficiently. Whether you need dashboards, admin panels, database GUIs, or approval workflows, Appsmith provides a powerful yet flexible environment to create robust applications without the overhead of traditional software development.
@@ -34,10 +34,15 @@ defaultUsername: ""
 defaultPassword: ""
 dependencies: []
 releaseNotes: >-
-  This release introduces new features and improvements:
-    - Added a Redeploy button to sync the latest changes to App view mode
-    - Workspace logos now displayed in the sidebar navigation
-    - Fixed an issue where git pull created a sync commit, resulting in lost changes
+  This release introduces new features and security fixes:
+    - Added TLS (SSL mode) support for the Redis datasource
+    - Fixed a security issue allowing unauthorized deletion of application snapshots
+    - Fixed unauthenticated disclosure of instance metadata
+    - Fixed SQL injection vulnerabilities in filter and sort operations
+    - Restricted draft action execution to editors only
+    - Required fields now display a red asterisk for clarity
+    - Increased API timeout for consolidated API calls from 20 seconds to 60 seconds
+    - Various other bug fixes and stability improvements
 
 
   Full release notes are found at https://github.com/appsmithorg/appsmith/releases

arcane/docker-compose.yml

@@ -27,7 +27,7 @@ services:
       - ${APP_DATA_DIR}/data/docker:/data
 
   arcane:
-    image: ghcr.io/getarcaneapp/arcane:v1.13.0@sha256:426998d447e0447364d5604b15838d23ad065205814d8eb63e5df681bb13944d
+    image: ghcr.io/getarcaneapp/arcane:v1.17.4@sha256:97492274e59c9f822a9c49d67981912b81919c0edad6094e496fa3507348082e
     depends_on:
       - docker
     restart: on-failure

arcane/hooks/pre-start

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+APP_DATA_DIR="$(readlink -f $(dirname "${BASH_SOURCE[0]}")/..)/data"
+
+# Remove stale docker.pid file that can cause issues after power outages or crashes
+rm -f "${APP_DATA_DIR}/docker/docker.pid"

arcane/umbrel-app.yml

@@ -1,8 +1,8 @@
-manifestVersion: 1
+manifestVersion: 1.1
 id: arcane
 category: developer
 name: Arcane
-version: "1.13.0"
+version: "1.17.4"
 tagline: An easy and modern Docker management platform
 description: >-
   ⚠️ Make sure to only use named Docker volumes for your containers and projects. Data in bind-mounted volumes will be lost when the Arcane app is restarted or updated.
@@ -48,23 +48,32 @@ path: ""
 defaultUsername: "arcane"
 defaultPassword: "arcane-admin"
 releaseNotes: >-
-  ⚠️ This update patches a security vulnerability.
+  New features in this release:
+    - Added ECR (Amazon Elastic Container Registry) support
+    - Added a per-container redeploy button
+    - Added support for symlinked project directories
+    - Added static admin API key support
+    - Added additional theme variants
+    - Added an updated log viewer with improved streaming
+    - Added Docker Swarm support
+    - Added network ports and topology views
+    - Added per-container auto-update toggle
+    - Added inbound webhook support
+    - Added Git Sync folder support for GitOps workflows
+    - Added compose-aware update logic for projects
 
 
-  Key highlights in this release include:
-    - Bulk actions for containers and projects
-    - Auto-prune and prune scheduler job
-    - Project status filter selector
-    - JSON parsing and structured log display
-    - Sensitive environment variables can now be read from files
-
-
-  Bug fixes and improvements:
-    - Fixed network overview not reloading with new data
-    - Fixed git sync interval being incorrect
-    - Fixed unable to save environment variables in git synced projects
-    - Fixed invalid API input for container creation
-    - Fixed margin not being applied on resource pages
+  Bug fixes in this release:
+    - Fixed truncation of long image references in the container table
+    - Fixed project icons not loading when using YAML or env aliases
+    - Fixed project max depth not working for filesystem discovery
+    - Fixed the "Update Projects" button to only update project containers
+    - Fixed per-container redeploy to use the compose-aware path
+    - Fixed webhook URL query parameters being lost in generic notifications
+    - Fixed unnecessary container recreation when the image is already up to date
+    - Fixed various Svelte reactivity issues in project editors
+    - Fixed notifications not being sent on single container updates
+    - Fixed light mode contrast for CPU and memory monitor stats
 
 
   Full release notes are found at https://github.com/getarcaneapp/arcane/releases

audiobookshelf/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
 
   web:
-    image: ghcr.io/advplyr/audiobookshelf:2.32.1@sha256:a52dc5db694a5bf041ce38f285dd6c6a660a4b1b21e37ad6b6746433263b2ae5
+    image: ghcr.io/advplyr/audiobookshelf:2.33.1@sha256:a4a5841bba093d81e5f4ad1eaedb4da3fda6dbb2528c552349da50ad1f7ae708
     user: 1000:1000
     init: true
     restart: on-failure

audiobookshelf/umbrel-app.yml

@@ -3,7 +3,7 @@ id: audiobookshelf
 name: Audiobookshelf
 tagline: Audiobook and podcast server
 category: media
-version: "2.32.1"
+version: "2.33.1"
 port: 13378
 description: >-
   Features:
@@ -62,11 +62,9 @@ defaultUsername: ""
 defaultPassword: ""
 releaseNotes: >-
   Bug fixes:
-    - Fixed server crash when matching with Audible provider
-
-
-  Improvements:
-    - Various translation updates for multiple languages
+    - Fixed API keys not respecting user enabled/disabled flag
+    - Fixed podcast episode updates to sanitize HTML in subtitles
+    - Fixed playlist and collection endpoints to strip HTML tags from names
 
 
   Full release notes can be found at https://github.com/advplyr/audiobookshelf/releases

autobrr/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
 
   web:
-    image: ghcr.io/autobrr/autobrr:v1.71.0@sha256:db9794958a0f9db93059c1e9f06193a063ce3846d346d7a7c9eca607c6617c51
+    image: ghcr.io/autobrr/autobrr:v1.76.0@sha256:f0f4d73fcd77700b1c98233562cd94a78b9bf685a7594a0aac4f8a9436b5044d
     restart: on-failure
     stop_grace_period: 1m
     user: "1000:1000"

autobrr/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: autobrr
 category: media
 name: autobrr
-version: "1.71.0"
+version: "1.76.0"
 tagline: Modern, easy to use download automation for torrents and usenet
 description: >-
   autobrr is the modern download automation tool for torrents and usenet.
@@ -17,11 +17,21 @@ description: >-
 
   It then sends that torrent file to a download client of your choice. A download client can be anything from qBittorrent, Deluge, Radarr, Sonarr, watch folder, and more.
 releaseNotes: >-
-  This release includes bug fixes and improvements:
-    - Corrected config option description
-    - BTN API timeout increased and Test RPC method changed
-    - SeedPool new announcer support
-    - Added missing valid status for Delete
+  This release includes new features and improvements:
+    - Added PKCE support to OIDC authentication
+    - Added NZB download type support for RSS feeds
+    - Added InfinityHD indexer support
+    - Added Retro Movies Club indexer support
+    - Added Samaritano indexer support
+    - Added SeedPool (Music) indexer support
+    - Added support for `/sleep` in IRC connect commands
+    - Added French, German, Russian, and Spanish language support
+    - Added internationalization (i18n) support with English and Simplified Chinese locales
+
+
+  Bug fixes:
+    - Fixed releases being incorrectly deleted when PUSH_APPROVED is not in the cleanup list
+    - Fixed indexer proxy button overflow in the web UI
 
 
   Full release notes are available at https://autobrr.com/release-notes

bazarr/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_WHITELIST: "/api/*"
 
   server:
-    image: linuxserver/bazarr:1.5.4@sha256:3785c9b813985821c9b56ee88c516d96b37dc21242c8f315f52e87c029735695
+    image: linuxserver/bazarr:1.5.6@sha256:b0bc617664dbca25845ac3b1bb6411b145b6a44a6d173071c9d2f426524fdd9f
     environment:
       - PUID=1000
       - PGID=1000

bazarr/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: bazarr
 category: media
 name: Bazarr
-version: "1.5.4"
+version: "1.5.6"
 tagline: Manage and download subtitles for Sonarr and Radarr
 description: >-
   Bazarr is a companion application to Sonarr and Radarr that manages and downloads subtitles based on your requirements.
@@ -19,19 +19,20 @@ description: >-
   You will also need to input your API key for Sonarr and/or Radarr. You can find your API keys in the settings of the Sonarr and Radarr apps.
 releaseNotes: >-
   Key improvements in this release include:
-    - Added new jobs management system with notifications drawer to track job status
-    - Improved Plex integration with multiselect for libraries and unique instance identification
-    - Added new subtitle providers (AnimeSub.info for Polish anime, subsource.net)
-    - Enhanced subtitle translation with Lingarr API authentication and improved source language detection
-    - Added emoji removal and Japanese parentheses to HI removal mods
-    - Improved performance of episode synchronization and job scheduling
-    - Fixed issues with WhisperAI audio stream mapping and external subtitle saving
-    - Fixed subtitle format conversion when "use original format" is enabled
-    - Added support for PostgreSQL URL configuration
-    - Fixed various provider issues (Karagarga login, subdl throttling, titrari.ro search)
-    - Improved announcements caching using CDN provider
-    - Added Autopulse external webhook support
-    - Fixed race conditions in jobs manager and improved error handling
+    - Added Spain vs LATAM Spanish detection to SubX provider
+    - Added SubX subtitle proxy for Subdivx Latam Spanish provider
+    - Removed subdivx provider as it is no longer supported
+    - Added hostname setting in General for webhook security to prevent hostname poisoning
+    - Added audio delay detection in MKV headers for WhisperAI using FFprobe
+    - Added Plex library refresh after subtitle deletions or modifications
+    - Improved subdl provider with search by TMDB ID and better error handling
+    - Improved Gestdown provider release matching
+    - Fixed assrt provider skipping season pack subtitles for episode searches
+    - Fixed missing audio_exclude migration in language profile upgrades
+    - Fixed post-processing failing on non-English Windows systems
+    - Fixed subssabbz search, diacritics, language comparison, and download error handling
+    - Improved job queue handling to prevent high CPU usage from busy waiting
+    - Improved performance by replacing blocking job progress monitoring with async implementation
 
 
   Full release notes are found at https://github.com/morpheus65535/bazarr/releases

bentopdf/docker-compose.yml

@@ -7,5 +7,5 @@ services:
       APP_PORT: 8080
 
   web:
-    image: bentopdf/bentopdf:v1.15.3@sha256:4eb4ec8f5030faf87c29a73d3d5a2781f28a597cf440c3ab111eb96aee550871
+    image: ghcr.io/alam00000/bentopdf:v2.8.2@sha256:ceee3325f10c3c7e2eef582cc14492e809c1646b5bee4ef00094f2ef3bacebf9
     restart: on-failure

bentopdf/umbrel-app.yml

@@ -3,7 +3,7 @@ id: bentopdf
 name: BentoPDF
 tagline: A Privacy First PDF Toolkit
 category: files
-version: "1.15.3"
+version: "2.8.2"
 port: 8730
 description: >-
   📄 BentoPDF is an advanced privacy-oriented application designed to give users complete control over their PDF documents directly within the browser. It eliminates the need for external uploads or online conversion services, ensuring that every action takes place locally and confidentially. This focus on privacy makes BentoPDF a secure alternative to traditional cloud-based PDF tools.
@@ -28,18 +28,17 @@ gallery:
   - 3.jpg
   - 4.jpg
 releaseNotes: >-
-  This update brings Mermaid diagram support for Markdown conversion and important bug fixes to BentoPDF.
+  This update brings minor bug fixes and quality of life improvements.
 
 
   ✨ New features and improvements:
-    - Markdown to PDF now supports Mermaid diagrams for creating flowcharts and diagrams
-    - Fixed excessive spacing issues in exported PDFs
-    - Updated self-hosted documentation
-
-
-  🐛 Bug fixes:
-    - Fixed spacing problems in PDF exports
-    - Corrected self-hosting documentation
+    - The container listen port can now be changed via the PORT environment variable
+    - All tools now preserve the original filename on download instead of adding prefixes like "encrypted-" or "rotated_"
+    - Auto orientation in Page Size now correctly matches the source page layout
+    - Multi-channel TIFF formats are now supported with added compression options
+    - OCR quality improved by copying original pages instead of embedding rasterized images
+    - Fixed permission errors when running as a non-root user introduced in v2.8
+    - Dutch translation corrections
 
 
   Full release notes are found at https://github.com/alam00000/bentopdf/releases

bitaxe-sentry/docker-compose.yml

@@ -5,7 +5,7 @@ services:
       APP_PORT: 7070
 
   sentry:
-    image: zachprice105/bitaxe-sentry:v0.6.0@sha256:f1908c24783f604f98b615c14d2790d00d3098b59d316aafd687abdff3774897
+    image: zachprice105/bitaxe-sentry:v0.6.1@sha256:2326e3ea1f7e054da41768a4648277cd523d19a235490a2c0ae364315abbc8ee
     user: "1000:1000"
     restart: on-failure
     stop_grace_period: 1m
@@ -16,7 +16,7 @@ services:
       DB_DATA_DIR: "/var/lib/bitaxe"
 
   web:
-    image: zachprice105/bitaxe-sentry:v0.6.0@sha256:f1908c24783f604f98b615c14d2790d00d3098b59d316aafd687abdff3774897
+    image: zachprice105/bitaxe-sentry:v0.6.1@sha256:2326e3ea1f7e054da41768a4648277cd523d19a235490a2c0ae364315abbc8ee
     user: "1000:1000"
     restart: on-failure
     stop_grace_period: 1m

bitaxe-sentry/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: bitaxe-sentry
 category: bitcoin
 name: Bitaxe Sentry
-version: "0.6.0"
+version: "0.6.1"
 tagline: Bitaxe stats and alerts, all in one
 description: >-
   Bitaxe Sentry is a monitoring and management solution for Bitaxe ASIC miners.
@@ -14,11 +14,8 @@ description: >-
     - 🌡️ Temperature and hashrate monitoring
     - 🚨 Discord notifications for critical events
 releaseNotes: >-
-  This release includes multiple feature improvements:
-    - Added error rate tracking and visualization for Bitaxe miners
-    - Display timestamps in user's local timezone instead of UTC
-    - Allow muting individual miner notifications for a time duration
-    - Added Alembic database migration system for future schema changes
+  This release includes a minor bug fix:
+    - Changed mh/s to gh/s to reflect the correct unit of hashrate
 developer: Zach Price
 website: https://github.com/zachchan105/bitaxe-sentry
 repo: https://github.com/zachchan105/bitaxe-sentry

bitcoin-knots/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 3000
   
   app:
-    image: ghcr.io/retropex/umbrel-bitcoin-knots:1.2.0@sha256:17ddedb9c462be300c848840103cb675bbd76895353274825e53edccc2bcc78e
+    image: ghcr.io/retropex/umbrel-bitcoin-knots:1.2.10@sha256:4dc37d9014eb29d47898d512422736ad2eed89bf31d321fc27b27547f04d0866
     user: "1000:1000"
     restart: on-failure
     stop_grace_period: 15m30s

bitcoin-knots/umbrel-app.yml

@@ -4,7 +4,7 @@ implements:
   - bitcoin
 category: bitcoin
 name: Bitcoin Knots
-version: "29.2-3"
+version: "1.2.10"
 tagline: Run your personal node powered by Bitcoin Knots
 description: >-
   Take control of your digital sovereignty by choosing Bitcoin Knots to run your node! By using Knots, you’re supporting a version of Bitcoin that prioritizes efficiency, security, and flexibility. With Bitcoin Knots’ enhanced configuration options, you can fine-tune your node to help keep the network clean and resilient, actively reducing unnecessary load from spam or parasitic transactions.
@@ -36,7 +36,7 @@ gallery:
 path: ""
 defaultPassword: ""
 releaseNotes: >-
-  Update to Bitcoin Knots v29.2.knots20251110
+  Internal changes
 widgets:
   - id: "stats"
     type: "four-stats"

bitcoin/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 3000
 
   app:
-    image: ghcr.io/getumbrel/umbrel-bitcoin:v1.1.0@sha256:be68b700d56e9454a9b92902a3fcd25adebfef93e3cd24179374303fc2e9f14c
+    image: ghcr.io/getumbrel/umbrel-bitcoin:v1.2.2@sha256:bc72c7fe705c582b8be1740c52449ac82de4d40b0e91ea090513aac6d4fc9393
     user: "1000:1000"
     restart: on-failure
     stop_grace_period: 15m30s
@@ -74,7 +74,7 @@ services:
         ipv4_address: "${APP_BITCOIN_TOR_PROXY_IP}"
   
   i2pd_daemon:
-    image: purplei2p/i2pd:release-2.44.0@sha256:d154a599793c393cf9c91f8549ba7ece0bb40e5728e1813aa6dd4c210aa606f6
+    image: purplei2p/i2pd:release-2.59.0@sha256:257653c18ce0b127ef480e3d8373b3ddbf1495e842674c8cfc59909be0015979
     user: "root"
     command: --sam.enabled=true --sam.address=0.0.0.0 --sam.port=7656 --loglevel=error
     restart: on-failure

bitcoin/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1.1
 id: bitcoin
 category: bitcoin
 name: Bitcoin Node
-version: "1.1"
+version: "1.2.2"
 tagline: Run your personal node powered by Bitcoin Core
 description: >-
   Run your Bitcoin node, powered by Bitcoin Core. Independently store and validate every Bitcoin transaction.
@@ -36,13 +36,7 @@ gallery:
 path: ""
 defaultPassword: ""
 releaseNotes: >-
-  This update brings Bitcoin Core v30.0 and gives you simple, powerful control over which Bitcoin Core version you run.
-    - Switch between the latest or a specific version (v30.0 or v29.2) with confidence.
-    - Smart checks and clear guidance help prevent incompatible settings when changing versions.
-    - UI refinements, bug fixes, and reliability improvements.
-
-
-  Note: Version selection affects only the Bitcoin Core version. Your Bitcoin Node app will continue to receive regular updates from the Umbrel App Store.
+  This update fixes an issue that could cause the Bitcoin Node app to crash and restart unexpectedly.
 widgets:
   - id: "stats"
     type: "four-stats"

blinko/docker-compose.yml

@@ -24,7 +24,7 @@ services:
     restart: on-failure
 
   app:
-    image: blinkospace/blinko:1.8.3@sha256:9c0d7e0ab6b16e24c94687fe940a2dca7bb218fa9aeb22f506049c2bd8891fa2
+    image: blinkospace/blinko:1.8.7@sha256:f7c1167f8c86db586599d849539a732929d89adb10977046e7b427813b2a84b4
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:1111"]
       interval: 30s 

blinko/umbrel-app.yml

@@ -3,7 +3,7 @@ id: blinko
 name: Blinko
 tagline: An AI-powered hub for your ideas and notes
 category: files
-version: "1.8.3"
+version: "1.8.7"
 port: 1111
 description: >-
   😉 Blinko is an open-source application that combines note-taking, microblogging, pastebin functionality, task management, and AI-powered features in a self-hosted environment. The platform allows users to quickly and efficiently capture their thoughts, with full Markdown support for easy formatting.
@@ -35,16 +35,10 @@ releaseNotes: >-
 
 
   Key highlights in this version:
-    - Added AI scheduled tasks with pg-boss migration
-    - Added MCP server management functionality
-    - Enhanced card interface with swipe actions
-    - Added customizable font options with multiple font choices
-    - Improved AI provider model fetching for Docker network compatibility
-    - Added customizable signin footer for compliance notices
-    - Optimized streaming render with scroll support during responses
-    - Fixed fullscreen editor drag issues
-    - Fixed multi-select duplicate and export authentication issues
-    - Multiple translation updates for Russian, Spanish, Polish, and Korean
+    - Added MiniMax as a new built-in AI/LLM provider option
+    - Fixed file upload errors caused by special characters in filenames
+    - Fixed tag filters not being cleared when resetting search
+    - Updated Turkish translations for various UI elements
 
 
   Full release notes are available at https://github.com/blinko-space/blinko/releases

booklore/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 6060
       
   web:
-    image: booklore/booklore:v1.17.0@sha256:5b594a607fb0d9533d06a850156e2b54877ed0ddd0da8cd1f0240cb38bb6ac70
+    image: booklore/booklore:v2.2.0@sha256:346064cb1fef6149dad2d8a373ea5fd1a7e3b61c22540995e40e8452136e202b
     # does not work rootless
     #user: "1000:1000"
     restart: on-failure

booklore/umbrel-app.yml

@@ -3,7 +3,7 @@ id: booklore
 name: BookLore
 tagline: An app for managing and reading books
 category: files
-version: "1.17.0"
+version: "2.2.0"
 port: 6060
 description: >-
   📖 BookLore is a modern web application created to transform the way digital libraries are managed and experienced. It is designed for readers who want to bring order and beauty to their collection of books and comics while also making them instantly accessible. Instead of leaving files scattered across folders, BookLore gathers them into a central library that can be explored and enjoyed directly through the browser. It provides a seamless reading environment where organization, discovery, and enjoyment flow together.
@@ -48,21 +48,11 @@ gallery:
   - 5.jpg
   - 6.jpg
 releaseNotes: >-
-  This release brings exciting new features and enhancements to improve your reading experience.
-
-
-  Key highlights in this release:
-    - Custom fonts in the EPUB reader - upload and use up to 10 of your favorite fonts for personalized reading
-    - Reading progress sync to Hardcover books, tracked per user
-    - Revamped metadata search with live, real-time results for a smoother experience
-    - Multi-select functionality for book selection with footer actions
-    - Per-user font management permissions
-    - Configurable file size limits for different book types
-    - Enhanced cover resolution and redesigned layout for generated covers
-    - Genre filter support for magic shelves
-    - Series number overlay for More in Series
-    - Improved Kobo sync with better series handling
-    - Better error handling for corrupt or invalid files
+  New features and improvements in this release:
+    - Two new library organization modes: Book per File (every file becomes its own book) and Book per Folder (files in the same folder are grouped into one book)
+    - Auto-detect mode is now marked as legacy and cannot be changed on existing libraries
+    - Configurable magnifier zoom and lens size for the CBX reader
+    - OIDC scopes are now configurable
 
 
   Full release notes can be found at: https://github.com/booklore-app/booklore/releases

btcpay-server/docker-compose.yml

@@ -29,7 +29,7 @@ services:
       NBXPLORER_BTCHASTXINDEX: 1
 
   web:
-    image: btcpayserver/btcpayserver:2.3.3@sha256:3db2bf1d5681d30e6385dad33c10cf594dec2e9b8efa29452df776f6c3dde0ed
+    image: btcpayserver/btcpayserver:2.3.6@sha256:0ff445daffc6d3d6bb8a59cf37f0f6c0d958eafb9b62147f65de7d66d5132392
     user: "1000:1000"
     restart: on-failure
     stop_grace_period: 1m

btcpay-server/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: btcpay-server
 category: bitcoin
 name: BTCPay Server
-version: "2.3.3"
+version: "2.3.6"
 tagline: Accept Bitcoin payments with 0 fees & no 3rd party
 description: >-
   BTCPay Server is a payment processor that allows you to receive
@@ -34,30 +34,28 @@ path: ""
 defaultUsername: ""
 defaultPassword: ""
 releaseNotes: >-
-  This release comes with a notable change, new features and several bug fixes.
-
-
-  ⚠️ **Note**
-  CoinGecko's API now mandates the use of an API Key for accessing rates. Consequently, it's been decided to discontinue support of CoinGecko-based rate sources. For those who relied on CoinGecko, invoice creation will now fail, and they must choose an alternative rate provider.
+  This release comes with new features, bug fixes, improvements, and reverts a regression.
 
 
   New features:
-    - Cold wallet transaction support via Greenfield API
-    - Add Norwegian lang in the available language packs
+    - Wallets: Add filtering using search bar on the label filter dropdown when labels exceed more than 20
+    - API: Include a payment method in the Get invoices endpoint
+    - BTCPay Invoice Modal: Add a paymentMethodId parameter
+    - Security: Include API key permission analysis metadata
+    - A plugin can now create new permission policies
 
   Bug fixes:
-    - It shouldn't be possible to create an invoice when all store users are disabled
-    - Remove CoinGecko and any rate source provided by them
-    - Change the default rate source for LTC conversion from CoinGecko to Kraken
-    - In monetization, it was impossible to recreate a user with email of a previously deleted user
-    - Backend translations would sometimes fail to load during startup
-    - Subs plan checkout always showed 'per month'
-    - Editing a plan subscription set the Currency back to USD
-    - Disable zero amount invoices in PoS doesn't show when Keypad mode is selected
-    - Adding labels payment requests would sometimes not work as expected
-    - PSBT Scan via Camera was not closing the modal dialog when signing a multisig transaction
-    - Selecting some rate source would crash the Stores/Rates page
+    - Dashboard layout issues on mobile, regression from 2.3.5
+    - Subscriber portal sessions can be created again via API
+    - Can't upgrade/downgrade a Lifetime subscription
 
+  Improvements:
+    - Update Wasabi wallet folder access instructions
+    - Security: Apply CSRF protection globally to UI controllers
+    - Update many missing translations from the language packs
+
+  Regression:
+    - Revert: Dashboard: Support multi-crypto wallet balance widgets
 
   Full release notes can be found at https://github.com/btcpayserver/btcpayserver/releases
 submitter: Umbrel

btctracker/docker-compose.yml

@@ -1,5 +1,4 @@
-version: '3.7'
-
+version: "3.7"
 services:
   app_proxy:
     environment:
@@ -7,7 +6,7 @@ services:
       APP_PORT: 3000
 
   web:
-    image: thewilqq/btc-tracker:v0.6.8@sha256:282ea7c343a3455b6c12c9fd283d192717b788ace5ed2e2331090ed6df1b8450
+    image: thewilqq/btc-tracker:v0.7.0@sha256:0c7beea5e0791cc39c9294f0a62faa24aa2ef42ed04571b63977c0afe085321b
     restart: on-failure
     user: 1000:1000
     environment:
@@ -18,9 +17,3 @@ services:
       - NEXTAUTH_URL=http://${DEVICE_DOMAIN_NAME}:3947
     volumes:
       - ${APP_DATA_DIR}/data:/app/data
-
-
-
-
-
-

btctracker/umbrel-app.yml

@@ -3,7 +3,7 @@ id: btctracker
 name: BTC Tracker
 tagline: A simple, privacy-focused Bitcoin investment tracker
 category: bitcoin
-version: "0.6.8"
+version: "0.7.0"
 port: 3947
 description: >-
   BTC Tracker is a user-friendly yet powerful application designed for managing and analyzing Bitcoin investments. It was created to offer a privacy-focused and straightforward alternative to existing tracking tools, which are often cluttered with unnecessary features, complicated to set up, or designed for managing large, diversified portfolios. Many of those tools require connections to external services and the sharing of sensitive information such as wallet addresses or transaction histories.
@@ -34,17 +34,20 @@ gallery:
   - 3.jpg
   - 4.jpg
 releaseNotes: >-
-  🚨 Breaking Change since version 0.6.0: all existing data will be deleted and the update is not backward compatible, so please export your transactions from the previous version before updating. After installation, register again and reimport your data.
-  
-  
+  ✨ New Features
+    - Exchange Auto-Sync (Beta) — connect exchange API keys to automatically import BTC spot trades; supports Binance, Kraken, Coinbase, Bybit, and Gemini
+    - Exchange Connections UI — new "Exchanges" tab in Settings to manage connections, test credentials, and trigger syncs
+
+
   🐛 Bug Fixes
-  
-    - Fixed Yahoo Finance price fetching - Upgraded yahoo-finance2 from v2.13.3 to v3.11.2 to fix rate limiting and API compatibility issues that prevented Bitcoin price updates
-  
-  
+    - Fixed "Net Holdings" on Transactions page showing USD values regardless of display currency setting
+
+
   🔧 Improvements
-  
-    - Updated Yahoo Finance service to use v3 class-based initialization 
+    - Calendar now has month/year dropdowns for faster navigation
+    - Sort and filter on Transactions page now works across all pages (server-side)
+    - New optional "Wallet" column in transactions showing source/destination wallet
+    - Named wallets now show individual BTC balances in the portfolio sidebar
 dependencies: []
 path: ""
 defaultUsername: ""

budibase/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
 
   budibase:
-    image: budibase/budibase:3.24.1@sha256:0c748487534ce4d3c72642f337467bcdb66a3961eefad8820f4b92f6cf5b3257
+    image: budibase/budibase:3.34.11@sha256:5f13b4c0939c5905cfeb8770bf982f71c7914f36b414c85a90a5986d251bd902
     restart: on-failure
     stop_grace_period: 1m
     volumes:

budibase/umbrel-app.yml

@@ -3,7 +3,7 @@ id: budibase
 name: Budibase
 tagline: The low code platform you'll enjoy using 
 category: developer
-version: "3.24.1"
+version: "3.34.11"
 port: 6733
 description: >-
   Budibase is an open-source low-code platform that saves engineers 100s of hours building forms, portals, and approval apps, securely.
@@ -11,7 +11,7 @@ description: >-
 
   🔨 Build and ship real software
 
-  Unlike other platforms, with Budibase you build and ship single page applications. Budibase applications have performance baked in and can be designed responsively, providing users with a great experience. 
+  Unlike other platforms, with Budibase you build and ship real software. Budibase applications have performance baked in and can be designed responsively, providing users with a great experience. 
 
 
   🗄️ Load data or start from scratch
@@ -39,12 +39,8 @@ gallery:
   - 3.jpg
 releaseNotes: >-
   Key improvements in this release include:
-    - Added REST templates for Figma and Zendesk
-    - Improved AI Agent instrumentation and LLM observability support
-    - Fixed date JavaScript formulas
-    - Added automation filtering options
-    - Fixed OAuth2 configuration modal issues
-    - Added LiteLLM configuration to automation worker deployment
+    - Fixed context passing to formatter
+    - Implemented EventBrokerProcessor HTTP request to Account Portal
 
 
   Full release notes are found at https://github.com/Budibase/budibase/releases

calibre-web/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 8083
 
   server:
-    image: linuxserver/calibre-web:0.6.25@sha256:ab176faac42ad33f5fa898f7c975fa590f4507b35afaf6c4cc3e9acf4ba860fa
+    image: linuxserver/calibre-web:0.6.26@sha256:95fa0d0d07bf1be2404236222a882a467431f34ee35ad29b6e7b3b4bca3b0376
     stop_grace_period: 1m
     environment:
       - PUID=1000

calibre-web/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: calibre-web
 category: files
 name: Calibre Web
-version: "0.6.25"
+version: "0.6.26"
 tagline: A clean web app for your eBooks
 description: >-
   Calibre-Web is a web app providing a clean interface for browsing, reading and downloading eBooks using an existing Calibre database.
@@ -32,15 +32,15 @@ releaseNotes: >-
   This update includes several new features and improvements:
 
 
-    - Enhanced metadata extraction for audio files during upload
-    - Improved PDF viewer functionality
-    - Better shelf sorting capabilities
-    - Improved contrast for epub reader in dark modes
-    - Support for multiple e-reader email addresses
-    - Enhanced whitespace handling and string formatting
-    - Improvements to Kobo sync and browser experience
-    - Various bug fixes and stability enhancements
-    - Better support for Windows installations
+    - Multi-edit capability for books in the book list
+    - Instapaper configuration support for Kobo sync
+    - Enhanced EPUB reader with page count display and Books button to return to Calibre-Web
+    - Additional EPUB reader theme
+    - Improved performance during search operations
+    - Fixed compatibility with Calibre 9
+    - Fixed read status updates when books are archived
+    - Fixed mass removal of books from shelves
+    - Security improvement: API keys are no longer exposed in config exports
 
 
   Full release notes can be found here: https://github.com/janeczku/calibre-web/releases

canary/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_WHITELIST: "/api/*"
 
   backend:
-    image: schjonhaug/canary-backend:v1.3.0@sha256:c3f61e6f8af79bb5e2d9f2f0b1f27e366ea968f528bc438c9abf95ff53489adc
+    image: schjonhaug/canary-backend:v1.4.0@sha256:daf6920e1f0ff781c526fa92ee0e39720dd1b18b5d7e1bcdd0aeff0cb76a68ad
     user: "1000:1000"
     restart: on-failure
     stop_grace_period: 1m
@@ -19,11 +19,12 @@ services:
       CANARY_DATA_DIR: /app/data
       CANARY_MODE: "self-hosted"
       CANARY_SYNC_INTERVAL: 60
+      CANARY_MEMPOOL_PORT: ${APP_CANARY_MEMPOOL_PORT:-}
     volumes:
       - ${APP_DATA_DIR}/data:/app/data
 
   web:
-    image: schjonhaug/canary-frontend:v1.3.0@sha256:3109b8f47a4960b537aed336bfdb519526964f0020639782158e3bb249fd5e24
+    image: schjonhaug/canary-frontend:v1.4.0@sha256:5c273df8bf4dc16af0edc8f6d48519ecffb4a76b49ad8eb0cef99259c6188511
     user: "1000:1000"
     restart: on-failure
     stop_grace_period: 1m

canary/exports.sh

@@ -0,0 +1,10 @@
+export APP_CANARY_PORT="3005"
+
+# Auto-detect optional Mempool integration
+# If Mempool is installed on Umbrel, pass its port so Canary can link to it
+# Note: APP_MEMPOOL_PORT comes from Mempool's exports.sh, which is only sourced
+# if Mempool is a dependency. Since it's optional, we hardcode the known port.
+installed_apps=$("${UMBREL_ROOT}/scripts/app" ls-installed)
+if echo "$installed_apps" | grep --quiet 'mempool'; then
+  export APP_CANARY_MEMPOOL_PORT="3006"
+fi

canary/umbrel-app.yml

@@ -1,8 +1,8 @@
-manifestVersion: 1
+manifestVersion: 1.1
 id: canary
 category: bitcoin
 name: Canary
-version: "1.3.0"
+version: "1.4.0"
 tagline: Early warning system for Bitcoin cold storage
 description: >-
   A canary in the cold mine. When your bitcoins are in cold storage, you seldom check on them.
@@ -27,7 +27,7 @@ gallery:
   - 2.jpg
   - 3.jpg
 releaseNotes: >-
-  Added support for 8 new languages (Norwegian, Spanish, Portuguese, German, French, Japanese, Danish, Swedish) with full UI and notification translations. Improved contact modal UX and wallet syncing display.
+  Monitor individual Bitcoin addresses alongside HD wallets, with automatic transaction lookup via your local Mempool instance when installed on Umbrel. Added the ability to test your ntfy notification setup directly from the app.
 path: ""
 defaultUsername: ""
 defaultPassword: ""

cashu-me/docker-compose.yml

@@ -7,6 +7,6 @@ services:
       APP_PORT: 80
       
   web:
-    image: rstmsn/cashu-me:v0.1@sha256:f9d1abeac775620ff589208b72d66707db3f639691682568c9d06e4e0e7b3604
+    image: rstmsn/cashu-me:0.1.1@sha256:46cf3752f58e20b7fd191b270208f6f41aa143ba950fddb0efb390ed3ea2851b
     restart: on-failure
     stop_grace_period: 1m

cashu-me/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: cashu-me
 category: bitcoin
 name: Cashu.me Wallet
-version: "0.1"
+version: "0.1.1"
 tagline: An open-source Bitcoin ecash wallet
 description: >- 
   🥜 Cashu.me is a free and open-source Bitcoin wallet built on the Cashu ecash protocol.
@@ -30,7 +30,8 @@ description: >-
     - 🧪 **Beta Warning**: This wallet is in active development and considered beta software.
       Use at your own risk.
     - 🧾 **License**: Open-source and MIT licensed.
-releaseNotes: ""
+releaseNotes: >-
+  This release contains various improvements and bug fixes.
 developer: cashubtc
 website: https://cashu.space
 dependencies: []
@@ -45,4 +46,4 @@ path: ""
 defaultUsername: ""
 defaultPassword: ""
 submitter: RSTMSN
-submission: https://github.com/getumbrel/umbrel-apps/pull/3044
+submission: https://github.com/getumbrel/umbrel\-apps/pull/3044

cloudflared/docker-compose.yml

@@ -21,7 +21,7 @@ services:
       CLOUDFLARED_TOKEN_FILE: "/app/data/token"
 
   connector:
-    image: ghcr.io/radiokot/umbrel-cloudflared-connector:1.0.1-cf.2025.10.0@sha256:036b1d4d0f9d654a4e235e8d25f41887827f7f4d7988ed263c6c37451eee5a96
+    image: ghcr.io/radiokot/umbrel-cloudflared-connector:1.0.1-cf.2026.3.0@sha256:8f883ef254bbf44ba94a2647233b36723fe51cf84690ba9b5311145f3b2a8892
     hostname: cloudflared-connector
     restart: on-failure
     stop_grace_period: 3s

cloudflared/umbrel-app.yml

@@ -3,7 +3,7 @@ id: cloudflared
 name: Cloudflare Tunnel
 tagline: Access your Umbrel apps from the Internet using Cloudflare network
 category: networking
-version: "2025.10.0"
+version: "2026.3.0"
 port: 4499
 description: >-
   Start a secure tunnel to access your Umbrel apps from the Internet using the Cloudflare network. 
@@ -34,12 +34,7 @@ gallery:
   - 2.jpg
   - 3.jpg
 releaseNotes: >-
-  This release contains various improvements and bug fixes.
-
-
-  Key Highlights:
-    - The tunneling daemon (cloudflared) has been updated to 2025.10.0
-    - Fixed slow tunnel restart when changing an already configured token
+  The tunneling daemon (cloudflared) has been updated to 2026.3.0
 dependencies: []
 path: ""
 defaultUsername: ""

code-server/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 8080
 
   server:
-    image: codercom/code-server:4.108.0@sha256:2956e005c038f3d050886163b290adf0cad38cc7605435a1038f4b4b5b3dc5c8
+    image: codercom/code-server:4.112.0@sha256:ddd9b0b854fec5a3c65ec0095b5c59fb8505ad44d8a18d00d6fcf6a3179692dd
     restart: on-failure
     user: "1000:1000"
     volumes:

code-server/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: code-server
 category: developer
 name: code-server
-version: "4.108.0"
+version: "4.112.0"
 tagline: Run VS Code on your Umbrel
 description: >-
   Run VS Code on your Umbrel and access it in the browser so you can
@@ -13,7 +13,7 @@ description: >-
 
   By running all intensive tasks run on your Umbrel, preserve battery life of your devices when you're on the go.
 releaseNotes: >-
-  This release updates the underlying VS Code editor to 1.108.0.
+  This release updates the underlying VS Code editor to 1.112.0.
 
 
   Full release notes are available at https://github.com/coder/code-server/releases

copyparty/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 3923
 
   web:
-    image: ghcr.io/9001/copyparty-ac:1.20.1@sha256:747faf2a3e050183c9738614a43d55182c031f2c7de6545d30e8cbbb5e339fa9
+    image: ghcr.io/9001/copyparty-ac:1.20.13@sha256:059c7e2c75a4d2402ccc23febc281b87dc80ec2ba2dcb23de1f666f0b33b9b74
     restart: on-failure
     user: "1000:1000"
     volumes:

copyparty/umbrel-app.yml

@@ -3,7 +3,7 @@ id: copyparty
 name: copyparty
 tagline: A versatile all-in-one file server for everything
 category: files
-version: "1.20.1"
+version: "1.20.13"
 port: 3923
 description: >-
   📼 copyparty is a lightweight yet incredibly powerful file sharing platform designed to give you complete control over your data. It transforms any environment into a personal and fully featured file hub where you can upload, download, edit, and organize files directly through an intuitive web interface. Everything happens in the browser without the need for additional software, making it fast, convenient, and accessible from virtually anywhere.
@@ -32,17 +32,17 @@ gallery:
   - 4.jpg
   - 5.jpg
 releaseNotes: >-
-  Key highlights in this release:
-    - Added Japanese translation
-    - Right-click menu now works in grid view
-    - IP addresses can now be specified per protocol
+  New features in this release:
+    - Added support for `.hidden` files to exclude specific files from directory listings without affecting their availability
+    - Added thumbnail pregeneration option
+    - Shares can now grant permission to view dotfiles
 
 
-  Bugfixes and other improvements:
-    - Various SFTP server fixes for permissions and file operations
-    - Fixed disk-usage quotas compatibility with shares
-    - Fixed right-click menu stripping file keys when copying links
-    - Updated Pillow library to version 12.1.0
+  Bugfixes in this release:
+    - Fixed missing thumbnails when the server OS lacked JXL support and the browser requested JXL images
+    - Fixed the new-version alert only appearing for admins with permissions on the webroot specifically
+    - Fixed mkdir not being blocked in cases where it should have been
+    - Fixed the nohtml and noscript volume flags breaking the web UI when set on the webroot
 
 
   Full release notes can be found at https://github.com/9001/copyparty/releases

core-lightning-rtl/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 3000
 
   web:
-    image: shahanafarooqui/rtl:v0.15.6@sha256:5cac3cbe5e730b86c6f888b2b5b4c37faa08fe0232eefda3d6895e2b46629369
+    image: shahanafarooqui/rtl:v0.15.8@sha256:54131152cba02a968d83fcc89c07426bfb979372f743649ba1e2626426a34dc0
     restart: on-failure
     environment:
       PORT: 3000
@@ -28,7 +28,7 @@ services:
       - "${APP_DATA_DIR}/data/boltz:/boltz:ro"
 
   boltz:
-    image: boltz/boltz-client:2.10.2@sha256:239e78726ff14524d6f1d0174a301fe015e08e50cdbb75c33a209f46355a3f94
+    image: boltz/boltz-client:2.11.1@sha256:25a984cc76b0d232573cffe7088c2cb2e50b6b8955e09f68d768ef5fc7215c1d
     restart: "on-failure"
     stop_grace_period: "1m"
     environment:

core-lightning-rtl/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1.1
 id: core-lightning-rtl
 category: bitcoin
 name: Ride The Lightning (Core Lightning)
-version: "0.15.6-beta-boltz"
+version: "0.15.8-beta-boltz"
 tagline: Manage your Core Lightning node with RTL
 description: >-
   This version of RTL is specifically configured to use your Core Lightning node.
@@ -44,7 +44,9 @@ gallery:
 path: ""
 deterministicPassword: true
 releaseNotes: >-
-  This release contains the following updates:
-    - Bump boltz-client to 2.10.2
+  This release updates Ride The Lightning to v0.15.8-beta and includes the following changes:
+    - Fix payments bug introduced in v0.15.7
+    - Fix memos not displaying for standard invoices
+    - Bump boltz-client to 2.11.1
 submitter: Umbrel
 submission: https://github.com/getumbrel/umbrel-apps/pull/7

deepsea/docker-compose.yml

@@ -4,10 +4,10 @@ services:
   app_proxy:
     environment:
       APP_HOST: deepsea_deepsea_1
-      APP_PORT: 5000
+      APP_PORT: 8000
 
   deepsea:
-    image: ghcr.io/retropex/custom-dashboard-ocean:v1.1.3@sha256:381f6f58d35ae27a0927acfc7a2356e1b6460fb7afc6d22ee6cd3b4525d3e6a3
+    image: ghcr.io/retropex/custom-dashboard-ocean:v2.0.4@sha256:9f5b867d2c5873390614a5e7faab58a4279ecd451b47b2db0034308c35166970
     user: 1000:1000
     restart: on-failure
     volumes:

deepsea/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1.1
 id: deepsea
 category: bitcoin
 name: DeepSea Dashboard
-version: "1.1.3"
+version: "2.0.4"
 tagline: Retro style Ocean dashboard
 description: >-
   This open-source dashboard monitors Ocean.xyz pool miners in real time. It presents hashrate, profitability, worker status and network metrics through a retro terminal interface. The goal is to keep miners fully informed with minimal fuss.
@@ -94,15 +94,20 @@ path: ""
 releaseNotes: >-
   This release comes with new features and various improvements and fixes.
 
-  
+
   Key Highlights:
-    - Refactored backend into modular blueprints for better scalability
-    - Improved earnings calculations and UI consistency
-    - Enhanced memory management with safer session handling
-    - Reworked scheduler and SSE into separate services
-    - Added dynamic audio controls with theme-aware styling
-    - Strengthened cache and memory cleanup mechanisms
-    - Added regression tests and fixed various UI bugs
+    - Complete platform rebuild with React 18 + TypeScript + Vite frontend and FastAPI backend
+    - Smooth boot-to-dashboard transition with fade animations, progress bar, and 25-step boot sequence
+    - Server-persisted worker settings (ASIC overrides, electricity rate) synced across devices via SQLite
+    - Full Progressive Web App (PWA) support with offline fallback, install prompt, and versioned service worker caching
+    - Eliminated chart flicker with in-place updates and retroactive block annotation seeding
+    - Low-hashrate mode for BitAxe and small miners with relaxed notification thresholds
+    - Three immersive themes: Bitcoin, DeepSea (bubbles/droplets), and Matrix (rain/glyphs)
+    - Rich workers page with ASIC model selector, fleet cost/profit calculations, and manual overrides
+    - Fixed ASIC override accuracy for power, cost, and profit calculations
+    - Hardened SPA path traversal protection and service worker host validation
+    - Extended chart history up to 30 days with zero-hashrate guard and auto-scaling units
+    - Upgraded frontend tooling: Vite 8.0.1, Vitest 4.1.0, @vitejs/plugin-react v6
 
 
   Full release notes are available at https://github.com/Djobleezy/DeepSea-Dashboard/releases

docmost/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 3000
 
   web:
-    image: docmost/docmost:0.24.1@sha256:ae9a964d58fe45071b2d87afe44ec1b0fb74a6e0124e831e906fce96b0258a84
+    image: docmost/docmost:0.71.1@sha256:6a2979ce26186cf50665338fbcf1253637773d820441d331ce971d199db86c03
     user: "1000:1000"
     depends_on:
       - db

docmost/umbrel-app.yml

@@ -3,7 +3,7 @@ id: docmost
 name: Docmost
 tagline: An collaborative wiki and documentation software
 category: files
-version: "0.24.1"
+version: "0.71.1"
 port: 8941
 description: >-
   Docmost is an open source collaborative documentation and knowledge management platform designed to help teams create and maintain structured content together. It serves as a modern alternative to tools like Notion and Confluence with a strong focus on real time collaboration and ease of use.
@@ -39,17 +39,16 @@ gallery:
   - 5.jpg
   - 6.jpg
 releaseNotes: >-
-  ⚠️ This release contains important security fixes
+  ⚠️ This release contains security fixes and enhancements. Upgrading is recommended.
 
 
-  Key highlights in this release include:
-    - Text background highlight color
-    - Anchor links for easier navigation
-    - Editor performance improvements
-    - Fixed crash affecting certain CPU types
-    - Fixed AI streaming bug
-    - Enhanced page import hierarchy
-    - Security updates and bug fixes
+  This release includes bug fixes and the following features introduced in v0.71.0:
+    - Page update notifications to keep users informed of changes
+    - PDF embed support directly within pages
+    - Built-in audio player for embedded audio files
+    - User login session management
+    - Performance improvements with new database indexes
+    - Various editor fixes and improvements
 
 
   Full release notes can be found at https://github.com/docmost/docmost/releases

docuseal/docker-compose.yml

@@ -5,7 +5,7 @@ services:
       APP_PORT: 3000
 
   server:
-    image: docuseal/docuseal:2.2.9@sha256:694d8be7080f79abdd6df3bae85d8eb17e8471026885157482e840e80bd012c7
+    image: docuseal/docuseal:2.4.4@sha256:be48b0737379e55edcbf203d80cd7d0ed1b12b42fb66f44b8a7bf951f6e14577
     user: "1000:1000"
     depends_on:
       - db
@@ -15,7 +15,7 @@ services:
       DATABASE_URL: 'postgresql://docusealuser:docusealpass@docuseal_db_1:5432/docuseal?sslmode=disable'
     volumes:
       - ${APP_DATA_DIR}/data/app:/data/docuseal
-  
+
   db:
     image: postgres:17.3@sha256:0321e2252ebfeecb8bc1a899755084d29bce872953e1a5a3e25ec0860b739098
     user: "1000:1000"

docuseal/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: docuseal
 category: files
 name: DocuSeal
-version: "2.2.9"
+version: "2.4.4"
 tagline: Open source document filling and signing
 description: >
   DocuSeal is an open source platform that provides secure and efficient digital document signing and processing.
@@ -35,8 +35,9 @@ path: ""
 defaultPassword: ""
 releaseNotes: >-
   Some of the key highlights in this release include:
-    - Fields added to documents are now inserted in the order they appear on the page
-    - Download partially filled or signed documents as a single merged PDF
+    - Bug fixes, performance improvements, and security hardening
+    - Fixed unicode and right-to-left text in the Stamp field
+    - Memory usage optimization
 
 
   Full release notes are found at https://github.com/docusealco/docuseal/releases

domain-locker/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 3000
 
   app:
-    image: lissy93/domain-locker:0.1.2@sha256:2c293f75c2095ee38ae5ca3b4f002a51ae4c159b7130f59d0f25e130dc1bae74
+    image: lissy93/domain-locker:0.1.4@sha256:c49d00d31d0bc948c01c046ce283a11af4bdc0742643ee1ab21675ce7f80da69
     user: "1000:1000"
     restart: on-failure
     environment:

domain-locker/umbrel-app.yml

@@ -3,7 +3,7 @@ id: domain-locker
 name: Domain Locker
 tagline: An all-in-one tool for keeping track of your domain name portfolio
 category: networking
-version: "0.1.2"
+version: "0.1.4"
 port: 8839
 description: >-
   Domain Locker is a powerful, open-source platform designed for managing and monitoring domain names across multiple registrars and services. It provides users with a unified interface to organize, track, and safeguard their domain assets with a strong emphasis on automation, security, and data privacy. The tool automatically collects comprehensive information about each domain, including DNS records, SSL certificates, WHOIS data, subdomains, and related IP addresses. This real-time asset tracking ensures users are always aware of the current state and health of their domains.
@@ -29,11 +29,15 @@ gallery:
   - 4.jpg
   - 5.jpg
 releaseNotes: >-
-  This version brings multiple bug fixes and improvements, including:
-    - Improved reliability of domain information lookups
-    - Fixed issues with the registrars view
-    - Added support for secret environment variables
-    - Fixed notification-related errors
+  This release contains performance improvements and bug fixes for the self-hosted edition, including:
+    - Added support for Docker secrets
+    - Added support for additional domain extensions
+    - Fixed bulk domain import issues
+    - Improved currency symbol display across different locales
+    - Added dropdown menu for selecting previously used registrars
+    - Implemented full domain data export functionality
+    - Fixed registrar, SSL, and host statistics display
+    - Added support for using different Postgres usernames
 
 
   Full release notes can be found at https://github.com/Lissy93/domain-locker/releases

donetick/docker-compose.yml

@@ -1,19 +1,19 @@
-version: '3.7'
-
-services:
-  app_proxy:
-    environment:
-      APP_HOST: donetick_app_1
-      APP_PORT: 2021
-      PROXY_AUTH_ADD: "false"
-
-  app:
-    image: donetick/donetick:v0.1.64@sha256:e2474d903a60df7d15142e89acc04f8ef32347bc13c3c6f47750f7f14c6dae34
-    user: "1000:1000"
-    restart: on-failure
-    volumes:
-      - ${APP_DATA_DIR}/data/app:/donetick-data
-      - ${APP_DATA_DIR}/data/config:/config
-    environment:
-      - DT_ENV=selfhosted
-      - DT_SQLITE_PATH=/donetick-data/donetick.db
+version: '3.7'
+
+services:
+  app_proxy:
+    environment:
+      APP_HOST: donetick_app_1
+      APP_PORT: 2021
+      PROXY_AUTH_ADD: "false"
+
+  app:
+    image: donetick/donetick:v0.1.75@sha256:5c207a86e5425052e9ffe5286f96f71babfe57337760d303a5fb56a856790d11
+    user: "1000:1000"
+    restart: on-failure
+    volumes:
+      - ${APP_DATA_DIR}/data/app:/donetick-data
+      - ${APP_DATA_DIR}/data/config:/config
+    environment:
+      - DT_ENV=selfhosted
+      - DT_SQLITE_PATH=/donetick-data/donetick.db

donetick/umbrel-app.yml

@@ -3,7 +3,7 @@ id: donetick
 name: Donetick
 tagline: An intelligent way to organize tasks and chores
 category: files
-version: "0.1.64"
+version: "0.1.75"
 port: 8121
 description: >-
   Donetick is an open-source task management application designed to streamline the organization of household chores and other recurring responsibilities. It provides a flexible system for assigning tasks to multiple users, using various selection strategies such as random allocation or assignment based on the fewest completed tasks. Tasks can be scheduled with customizable recurrence patterns, making it easy to manage both daily routines and less frequent responsibilities.
@@ -28,7 +28,25 @@ gallery:
   - 3.jpg
   - 4.jpg
   - 5.jpg
-releaseNotes: ""
+releaseNotes: >-
+  This is a big release with many new features and improvements:
+    - Internationalization support added - more languages coming with community contributions
+    - Rescheduling history now tracked for chores, giving better visibility into how tasks have been moved
+    - Label filtering now available in the advanced filter system
+    - New Smart Insights panel added to the side panel for task analysis and suggestions
+    - "Available for Me" quick filter refined to show chores assigned to you or unassigned
+    - Extended API documentation and authentication coverage via Swagger
+    - Added 30-second grace period for edit time checks
+    - Aligned password requirements and increased maximum password length to 64 characters
+    - Custom from-email and separate SMTP user configuration now supported
+    - TaskCreated event now enabled
+    - Fixed a bug where a non-assignee could be incorrectly assigned a chore based on prior completions
+    - Fixed "next assigned" rules not being respected for triggered chores
+    - Added simple health check API endpoint
+    - Fixed cache headers for static assets
+
+
+  Full release notes can be found at https://github.com/donetick/donetick
 dependencies: []
 path: ""
 defaultUsername: ""

downtify/docker-compose.yml

@@ -7,8 +7,7 @@ services:
       APP_PORT: 8000
 
   downtify:
-    image: ghcr.io/henriquesebastiao/downtify:1.1.2@sha256:d17b4b2155dbe0accee602f98e4707bdb739e3d825fe7e1dafe50a0946dc7576
-    restart: on-failure
+    image: ghcr.io/henriquesebastiao/downtify:1.1.4@sha256:6d5035afa5d1c1b8013b59f19b90727b38c2715251f0e99db282b3875c5b821a
     stop_grace_period: 1m
     volumes:
       - ${UMBREL_ROOT}/data/storage/downloads/downtify:/downloads

downtify/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: downtify
 category: media
 name: Downtify
-version: "1.1.2"
+version: "1.1.4"
 tagline: Download Spotify music with album art and metadata
 description: >-
   Downtify allows you to download music by copy-pasting the Spotify link for a song, album, etc. The songs are downloaded from YouTube, along with album art, lyrics, and other metadata about the songs.
@@ -20,7 +20,7 @@ repo: https://github.com/henriquesebastiao/downtify
 port: 8789
 releaseNotes: >-
   This release includes the following bug fixes:
-    - Fixed error Your application has reached a rate/request limit in music download and search
+    - Resolved authentication issues with the Spotify API
 
 
   Full release notes can be found at https://github.com/henriquesebastiao/downtify/releases

element/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 80
 
   web:
-    image: vectorim/element-web:v1.12.8@sha256:c875fdc104165c36d76faf0599d8550f6d6358718345906ae3cf156f44a5435b
+    image: vectorim/element-web:v1.12.15@sha256:c7fa40b5ba3891f8af3ce63da0818f457c1802a9ee4d2f5e46a9df36a2388eed
     user: "nginx:nginx"
     restart: on-failure
     stop_grace_period: 1m

element/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: element
 category: social
 name: Element
-version: "1.12.8"
+version: "1.12.15"
 tagline: A glossy Matrix client compatible with Synapse
 description: >-
   Element is a new type of messaging app. You choose where your messages are stored, putting you in control of your data.
@@ -46,16 +46,17 @@ submitter: Umbrel
 submission: https://github.com/getumbrel/umbrel/commit/bb10e17a6256db19767af7eaeb93d665ac275b24
 releaseNotes: >-
   Some key highlights in this release include:
-    - Updated history visibility interface with improved user experience
-    - Switched to rendering SVG icons for better visual quality and performance
-    - Added support for encrypted state events
-    - Improved icon rendering throughout the app with Compound design tokens
-    - Added button to restore from backup in developer tools
-    - Fixed bundled font or custom font not applying after theme switch
-    - Fixed reaction left margin in timeline card
-    - Fixed right panel timeline when jumping to event with maximised widget
-    - Fixed room preview card layout
-    - Fixed styling issues when using Element Web modules
+    - Added analytics tracking for URL previews
+    - Implemented collapsible panels for the new room list with improved performance
+    - Clicking on a room list separator now expands to the last set width
+    - Hidden the names of banned users behind a spoiler tag
+    - Fixed incoming verification request appearing above the please verify prompt
+    - Fixed room list often showing the wrong icons for calls
+    - Fixed presence indicators not showing without cache
+    - Fixed emoticon slash commands including stale buffers
+    - Fixed icon size of badges in the right panel
+    - Show space name instead of "Empty room" after space creation
+    - Stripped ephemeral query params from OIDC redirect URI
 
 
   Full release notes can be found at https://github.com/vector-im/element-web/releases

endurain/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
 
   app:
-    image: ghcr.io/endurain-project/endurain:v0.16.6@sha256:05bf60d33ae7fe1ce2402d1c6d8bb5a803a549b3a5fff0bcd65be7a804f3b7c1
+    image: ghcr.io/endurain-project/endurain:v0.17.6@sha256:d18d18d69b0c280db85c6f91172b678fcfc58b081e835aa6284b63b0fb87e023
     environment:
       UID: "1000"
       GID: "1000"

endurain/umbrel-app.yml

@@ -3,7 +3,7 @@ id: endurain
 name: Endurain
 tagline: Fitness tracking, Open Source, Self-Hosted
 category: social
-version: "0.16.6"
+version: "0.17.6"
 port: 8865
 description: >-
   Endurain is a self-hosted fitness tracking service designed to give users full control over their data and hosting environment. 
@@ -45,17 +45,14 @@ defaultUsername: "admin"
 defaultPassword: "admin"
 dependencies: []
 releaseNotes: >-
-  ⚠️ Warning: RunnerUp integration is broken since v0.16.4. If you use it, refrain from updating until further notice.
+  ⚠️ Warning: Your user sessions will be deleted on upgrade. Users will have to authenticate again.
 
 
-  New features and improvements:
-    - Secure one-time tokens for identity provider account linking
-    - Dynamic tile domain support for custom map servers
-
-
-  Bug fixes:
-    - Fixed issue with identity provider link and login
-    - Fixed unable to change server settings
+  Bug fixes and improvements:
+    - Fixed mobile OAuth2/SSO not working with system browser
+    - Fixed weight not being stored and displayed as a decimal value
+    - Fixed wrong cadence unit of measure
+    - Fixed activity page not updating when selecting a different activity from the notification drop-down
 
 
   Full release notes can be found at https://github.com/joaovitoriasilva/endurain/releases

esphome/docker-compose.yml

@@ -2,7 +2,7 @@ version: "3.7"
 
 services:
   server:
-    image: esphome/esphome:2025.12.6@sha256:797375a111562df90108d7b0d0ec59bcd8b98ee1c7f164c20f8ce6350b070f42
+    image: esphome/esphome:2026.3.3@sha256:a97aec43684597d32c4eeb2b929c8945f2a09098b447e97703f5c83570f0272d
     network_mode: host
     volumes:
       - ${APP_DATA_DIR}/data:/config

esphome/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: esphome
 category: automation
 name: ESPHome
-version: "2025.12.6"
+version: "2026.3.3"
 tagline: Intelligently manage all your ESP8266/ESP32 devices
 description: >-
   ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.
@@ -22,14 +22,11 @@ defaultPassword: ""
 torOnly: false
 releaseNotes: >-
   This release includes bug fixes and stability improvements:
-    - Fixed channel validation for ESP-NOW communication
-    - Fixed conditional entity type compilation for Seeed MR24HPC1 sensors
-    - Removed incorrect device class from LTR ALS/PS count sensors
-    - Fixed packet size validation to account for padding in packet transport
-    - Fixed ESP8266 remote transmitter timing using busy loop
-    - Fixed OTA backend abort not being called on error
+    - Fixed Nextion queue age check using inconsistent time sources
+    - Fixed online image LVGL descriptor not being cleared when image size changes
+    - Fixed ESP32 build not being cleaned when sdkconfig options change
 
 
-  Full release notes can be found at https://esphome.io/changelog/2025.12.0.html
+  Full release notes can be found at https://esphome.io/changelog/2026.3.3/
 submitter: ShonP40
 submission: https://github.com/getumbrel/umbrel-apps/pull/43

etherpad/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 9001
       
   app:
-    image: etherpad/etherpad:2.6.0@sha256:55f7fc63021ea1d2b72278ee22ea4454ab7ce791a603ff88b7df6b102c2afa67
+    image: etherpad/etherpad:2.6.1@sha256:69a697fe6bf75aecf8748d734bcca5f0e596a6eeec8342ab030d0da8a6f224d5
     volumes:
       - ${APP_DATA_DIR}/data/plugins:/opt/etherpad-lite/src/plugin_packages
       - ${APP_DATA_DIR}/data/etherpad-var:/opt/etherpad-lite/var:rw

etherpad/umbrel-app.yml

@@ -3,7 +3,7 @@ id: etherpad
 name: Etherpad
 tagline: An intuitive tool for real-time collaborative writing
 category: files
-version: "2.6.0"
+version: "2.6.1"
 port: 9002
 description: >-
   ⚙️ The admin panel for Etherpad is accessible at "http://umbrel.local:9002/admin/".
@@ -35,8 +35,8 @@ gallery:
   - 3.jpg
 releaseNotes: >-
   This release includes various enhancements and fixes:
-    - Added native option to transfer your Etherpad session between browsers or devices, allowing you to maintain the same authorship color across different sessions
-    - Updated to OIDC provider v2.6.0 after resolving compatibility issues
+    - Minor fixes and improvements to the session transfer feature introduced in 2.6.0
+    - Dependencies upgrades
 
 
   Full release notes can be found at https://github.com/ether/etherpad-lite/releases

excalidraw/docker-compose.yml

@@ -1,17 +1,17 @@
-version: '3.7'
-
-services:
-  app_proxy:
-    environment:
-      APP_HOST: excalidraw_app_1
-      APP_PORT: 80
-
-  app:
-    image: ghcr.io/ozencb/excalidraw-persist:0.18.0-persist.1@sha256:ea4604355b13a15b2071efb674aeb77411c30aa10c3721fe589a8eda319d0bef
-    restart: on-failure
-    environment:
-      - PORT=4000
-      - NODE_ENV=production
-      - DB_PATH=/app/data/database.sqlite
-    volumes:
-      - ${APP_DATA_DIR}/data:/app/data:rw
+version: '3.7'
+
+services:
+  app_proxy:
+    environment:
+      APP_HOST: excalidraw_app_1
+      APP_PORT: 80
+
+  app:
+    image: ghcr.io/ozencb/excalidraw-persist:0.18.0-persist.7@sha256:8c86a50d299cdcd27e178e80e7567479bf9b6c5eb62d08abbbfcd5ddba60bc26
+    restart: on-failure
+    environment:
+      - PORT=4000
+      - NODE_ENV=production
+      - DB_PATH=/app/data/database.sqlite
+    volumes:
+      - ${APP_DATA_DIR}/data:/app/data:rw

excalidraw/umbrel-app.yml

@@ -3,7 +3,7 @@ id: excalidraw
 name: Excalidraw
 tagline: An open source virtual hand-drawn style whiteboard
 category: files
-version: "0.18.0-1"
+version: "0.18.0-7"
 port: 4422
 description: >-
   ✏️ Excalidraw is a free and open-source virtual whiteboard that allows users to create diagrams, sketches, and visual concepts in a hand-drawn style. Designed to simulate the look of informal sketches, it offers a playful yet functional way to visualize ideas, plan projects, and collaborate with others. Unlike traditional diagramming tools that aim for polished, rigid layouts, Excalidraw embraces rough edges and fluid lines, making it ideal for creative thinking, brainstorming sessions, and rapid prototyping.
@@ -30,7 +30,13 @@ gallery:
   - 2.jpg
   - 3.jpg
 releaseNotes: >-
-  This update addresses a problem that prevented libraries from persisting correctly.
+  This update brings several new features and fixes:
+    - Board sharing is now supported via shareable links with separate edit and read-only permissions
+    - Board IDs have been migrated to UUIDs, with automatic migration of existing boards
+    - Saving is now incremental, syncing only changed elements for better performance
+    - The "Trash" tab has been renamed to "Archive" in the interface
+    - Fixed the copy URL button not working on non-HTTPS connections
+    - Fixed various issues with loading states and error handling
 dependencies: []
 path: ""
 defaultUsername: ""

fedimint-gateway/data/entrypoint.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+# Bcrypt hash the password before giving it to the gateway
+export FM_GATEWAY_BCRYPT_PASSWORD_HASH=$(gateway-cli create-password-hash $APP_PASSWORD \
+  | sed 's/^"//; s/"$//' \
+  | sed 's/\$/$$/g'
+)
+
+gatewayd lnd

fedimint-gateway/docker-compose.yml

@@ -0,0 +1,33 @@
+version: '3.7'
+
+services:
+  app_proxy:
+    environment:
+      APP_HOST: fedimint-gateway_gatewayd_1
+      APP_PORT: 8178 # ui
+
+  gatewayd:
+    image: fedimint/gatewayd:v0.10.0@sha256:4e9a41fe0f0705c463709fa34bdcbc4e29e396bb99ab5c2cc101fc5db2ac3069
+    restart: on-failure
+    ports:
+      - 8177:8177/udp # iroh
+    volumes:
+      - ${APP_DATA_DIR}/data:/data
+      - ${APP_LIGHTNING_NODE_DATA_DIR}:/lnd:ro
+    environment:
+      FM_GATEWAY_DATA_DIR: "/data"
+      FM_GATEWAY_NETWORK: ${APP_BITCOIN_NETWORK_ELECTRS}
+      FM_GATEWAY_LISTEN_ADDR: 0.0.0.0:8178
+      FM_GATEWAY_IROH_LISTEN_ADDR: 0.0.0.0:8177
+      APP_PASSWORD: "${APP_PASSWORD}"
+
+      # LND connection environment variables
+      FM_LND_RPC_ADDR: "https://${APP_LIGHTNING_NODE_IP}:${APP_LIGHTNING_NODE_GRPC_PORT}"
+      FM_LND_TLS_CERT: "/lnd/tls.cert"
+      FM_LND_MACAROON: "/lnd/data/chain/bitcoin/${APP_BITCOIN_NETWORK}/admin.macaroon"
+
+      # Bitcoind connection environment variables
+      FM_BITCOIND_USERNAME: ${APP_BITCOIN_RPC_USER}
+      FM_BITCOIND_PASSWORD: ${APP_BITCOIN_RPC_PASS}
+      FM_BITCOIND_URL: "http://${APP_BITCOIN_NODE_IP}:${APP_BITCOIN_RPC_PORT}"
+    entrypoint: /data/entrypoint.sh

fedimint-gateway/umbrel-app.yml

@@ -0,0 +1,50 @@
+manifestVersion: 1
+id: fedimint-gateway
+category: bitcoin
+name: Fedimint Lightning Gateway
+version: "v0.10.0"
+tagline: Lightning routing for Fedimints
+description: >-
+  The Fedimint Lightning Gateway is an ecash wallet that connects Fedimint users to the broader Lightning Network. Operators can earn fees by providing outbound
+  and inbound Lightning liquidity via their existing LND node.
+
+  # Key Characteristics
+   - Trust Model: Just like a Lightning node, a Lightning Gateway is not a custodian of the payments it is routing. Lightning Gateways should trust the federations they provide liquidity services to, but users do not need to trust the Lightning Gateway.
+
+   - Multi-federation support: A single gateway can service multiple Fedimints simultaneously and swap ecash when payments occur between federations, bypassing the Lightning Network altogether.
+
+   - Liquidity Management: Also like a Lightning node, gateways must maintain ecash balances in each federation to facilitate incoming payments, similar to inbound liquidity in Lightning.
+
+  # Operating a Lightning Gateway
+
+  1. Installing a Lightning Gateway is easy, just one click and it connects to your already provisioned LND node!
+
+  2. Make sure your LND node has sufficient connectivity to the broader Lightning Network, ideally with balanced outbound and inbound liquidity.
+
+  3. Operators must then connect to a federation using the federation's invite code.
+
+  4. After connected, operators must pegin some ecash to the federation so that there is inbound liquidity.
+
+  5. After the operator has obtained the ecash, the connection URL of the Lightning Gateway can be provided to the guardians. The guardians will then advertise that this Lightning Gateway is providing Lightning services to the federation.
+    
+  6. All set! The Fedimint can now send and receive payments over the Lightning Network.
+  
+developer: Fedimint Developers
+website: https://fedimint.org/
+dependencies:
+  - bitcoin
+  - lightning
+repo: https://github.com/fedimint/fedimint
+support: https://github.com/fedimint/fedimint/issues
+port: 8178
+gallery:
+  - 1.jpg
+  - 2.jpg
+  - 3.jpg
+path: ""
+deterministicPassword: true
+defaultUsername: ""
+defaultPassword: ""
+submitter: Fedimint Developers
+submission: https://github.com/getumbrel/umbrel-apps/pull/4554
+releaseNotes: ""

fedimintd/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 8175 # ui
 
   fedimintd:
-    image: fedimint/fedimintd:v0.9.1@sha256:cb195f2ce852ce92584b27fcedf93558ced630683ed70c5b0fd9ddc6fceeb6f1
+    image: fedimint/fedimintd:v0.10.0@sha256:310533faa11cad65d51abcb1f65c5ed4a8afb49779593a309c282160192ff3e5
     ports:
       - 8173:8173/tcp # p2p tls
       - 8173:8173/udp # p2p iroh

fedimintd/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: fedimintd
 category: bitcoin
 name: Fedimint
-version: "v0.9.1"
+version: "v0.10.0"
 tagline: Federated Chaumian E-Cash Mint for Bitcoin
 description: >-
   Fedimint is a federated Chaumian E-Cash Mint to custody and transact bitcoin in a community. It allows groups of trusted individuals, 
@@ -43,9 +43,10 @@ description: >-
 
   Fedimint supports Lightning payments via a Lightning Gateway. To use Lightning in your federation, there are two options:
 
-  1. Use an existing Lightning Gateway. [Reach out on Discord to get setup](https://chat.fedimint.org).
+  1. Run your own! - [Deploy a Lightning Gateway on your Umbrel](https://apps.umbrel.com/app/fedimint-gateway).
+
+  2. Use an existing Lightning Gateway. [Reach out on Discord to get setup](https://chat.fedimint.org).
 
-  2. Run your own - [see Lightning Gateway docs for more information](https://github.com/fedimint/fedimint/blob/master/docs/gateway.md).
   
 developer: Fedimint Developers
 website: https://fedimint.org/
@@ -64,7 +65,14 @@ defaultPassword: ""
 submitter: Fedimint Developers
 submission: https://github.com/getumbrel/umbrel-apps/pull/3371
 releaseNotes: >-
-  This release includes several bug fixes and improvements.
+  This release includes major improvements to the Gateway experience and networking capabilities:
+    - Self-hosting a gateway is now much easier with Iroh networking that works behind NAT without firewall configuration
+    - New Gateway UI for managing Lightning channels, on-chain wallet, and ecash wallet across federations
+    - Enhanced gateway features including payment summaries, automatic ecash backups, and channel management
+    - Improved networking with support for multiple transport protocols
+    - Guardian password change functionality and ability to disable modules during setup
+    - Support for federations without Lightning v1
+    - Faster client preview and join flows
 
 
   Full release notes can be found at https://github.com/fedimint/fedimint/releases

file-browser/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 80
 
   server:
-    image: filebrowser/filebrowser:v2.54.0@sha256:b4ae9ddf584d1632e0071f67d374e4fa250545d22583b2b12998156ddaf0d09b
+    image: filebrowser/filebrowser:v2.62.2@sha256:d01ee49248ef1d2a26616bc11c196b1768e2a2b67040ff085c8ffd35c037d123
     user: "1000:1000"
     restart: on-failure
     volumes:

file-browser/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: file-browser
 category: files
 name: File Browser
-version: "2.54.0"
+version: "2.62.2"
 tagline: Browse and manage the files you download on your Umbrel
 description: >-
   File Browser lets you upload, delete, preview, rename and edit your folders and files.
@@ -11,12 +11,13 @@ description: >-
   Easily manage files in the Umbrel's storage folder where your downloads from apps like Transmission, Sonarr, Radarr, and Lidarr are currently held.
 releaseNotes: >-
   Key updates in this version include:
-    - Added "redirect after copy/move" user setting for improved workflow
-    - Fixed selection clearing by clicking on empty area
-    - Hidden "change password form" in noauth setting
-    - Forced file sync while uploading files for better reliability
-    - Updated translations and improved internationalization support
-    - Various dependency updates for improved stability
+    - Fixed shares listing
+    - Fixed JSON escaping
+    - Fixed scripted content being enabled in EPUB files
+    - Fixed self-registered users incorrectly receiving execute permissions
+    - Fixed filename not being included in Content-Disposition header for inline downloads
+    - Fixed double slash in TUS upload path when reading multiple batches
+    - Fixed Redis upload cache key expiry on GetLength
 
 
   Full release notes are available at https://github.com/filebrowser/filebrowser/releases

firefly-iii-importer/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       APP_PORT: 8080
 
   importer:
-    image: fireflyiii/data-importer:version-2.0.4@sha256:a594248f2e1a561187b9b96462ef9769bfb1f980e3b9d278ca6fa74f7f457654
+    image: fireflyiii/data-importer:version-2.2.3@sha256:ab52bf9325466431af8b311e9879f0a271b1b555b34cb0e1115d0d10a4ef9665
     restart: on-failure
     environment:
       # firefly-iii container:

firefly-iii-importer/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1.1
 id: firefly-iii-importer
 category: finance
 name: Firefly III Importer
-version: "2.0.4"
+version: "2.2.3"
 tagline: Import your transactions into Firefly III
 description: >-
   Firefly III is a manager for your personal finances. The data importer is built to help you import transactions into Firefly III. It is separated from Firefly III for security and maintenance reasons.
@@ -30,16 +30,13 @@ path: ""
 deterministicPassword: false
 torOnly: false
 releaseNotes: >-
-  ⚠️ This release introduces many new things, so there may be bugs. Some changes may also unexpectedly lead to duplicate transactions due to changes in data handling routines.
+  ⚠️ Some changes in this release may lead to duplicate transactions due to changes in data handling routines.
 
 
-  This release includes fixes for issues from previous versions:
-    - Fixed data importer looping from Convert to Map to Convert when importing from external providers
-    - Fixed importer not skipping mapping and failing to find accounts when using SimpleFIN
-    - Fixed importer failing with expired GoCardless requisition
-    - Fixed initial SimpleFIN import failing during data conversion
-    - Fixed importer redirecting without starting job when "skip configuration" is enabled
-    - Fixed config key inconsistency in MapController
+  This release fixes various import issues:
+    - Fixed duplicate transactions not being ignored correctly
+    - Fixed Enable Banking duplicate detection failing due to session-scoped account IDs
+    - Clarified support for file-based environment variables in importer configuration
 
 
   Full release notes can be found at https://github.com/firefly-iii/data-importer/releases

firefly-iii/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_WHITELIST: "/api/*"
 
   server:
-    image: fireflyiii/core:version-6.4.15@sha256:499b7f2899880a3e37fa02cc2d9283eed485893c23a358161e5158c4530ea8df
+    image: fireflyiii/core:version-6.5.9@sha256:fe4ecec4c2ba2b2978a32b3defaf270407f9fddf0e789a18648121ab84bb68d2
     # This image runs under the user/group www-data:www-data
     # user: "1000:1000"
     restart: on-failure

firefly-iii/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1.1
 id: firefly-iii
 category: finance
 name: Firefly III
-version: "6.4.15"
+version: "6.5.9"
 tagline: Your personal finance manager
 description: >-
   Firefly III is a manager for your personal finances. It is self-hosted and open source. This means that it's free, it has no ads and no tracking.
@@ -48,18 +48,9 @@ deterministicPassword: false
 torOnly: false
 releaseNotes: >-
   Key improvements in this release:
-    - Added GUI for some settings, replacing environment variables
-    - Updates to date range selection
-    - Fixed wrong account balance with initial transfer from different currency
-    - Fixed login flow redirect issues
-    - Resolved account balances corruption during upgrade
-    - Fixed reconciliation adding extra digits
-    - Corrected unusual behavior in audit logs for multi-currency transactions
-    - Fixed piggy banks details view error
-    - Improved bulk edit tags to keep the option chosen
-    - Fixed subscription exceptions in foreign currency
-    - Resolved reconcile screen breaking with year to date layout
-    - Fixed non-strict rules breaking with apply rule operations
+    - Fixed test notification buttons always generating an error
+    - Fixed converting a transaction to a transfer with a different currency breaking the audit log
+    - Improved transaction pagination for large data sets
 
 
   Full release notes are found at https://github.com/firefly-iii/firefly-iii/releases

forgejo/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
 
   server:
-    image: codeberg.org/forgejo/forgejo:11.0.8-rootless@sha256:962eff77a6a4a0d4ccf573a63c856eb33457e27035b38ecfa0469ada7a42978d
+    image: codeberg.org/forgejo/forgejo:11.0.11-rootless@sha256:3372178750d690c577487dbf37b07d6a20cf2364acf876ca217d0ffa13046590
     user: "1000:1000"
     restart: on-failure
     ports:

forgejo/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1.1
 id: forgejo
 category: developer
 name: Forgejo
-version: "11.0.8"
+version: "11.0.11"
 tagline: A self-hosted lightweight software forge
 description: >-
   Forgejo is a self-hosted lightweight software forge, designed to be a fully self-hosted, privacy-respecting alternative to GitHub, GitLab, and Bitbucket. It is a fork of Gitea with additional features and community-driven enhancements. Forgejo is written in Go and can run on low-resource hardware like a Raspberry Pi. 
@@ -49,12 +49,13 @@ gallery:
   - 3.jpg
 releaseNotes: >-
   🚨 This release includes important security fixes:
-    - Fixed dependency repository permission checks in API operations
-    - Prevented draft releases from being read before publication
-    - Fixed misconfigured security checks on tag delete operations
-    - Corrected enforcement of head branch protection rules during pull request updates
-    - Fixed issue where issue owners could delete other users' comment edit history
-    - Prevented bypassing of tag protection rules during tag deletion
+    - Fixed PKCE challenge validation for OAuth identity provider when using the S256 algorithm
+    - Fixed improper scope enforcement when using OAuth Bearer tokens with HTTP basic authentication
+    - Fixed missing permission checks in attachment endpoints that allowed modifying attachments a user did not own
+    - Fixed email notifications for new releases being sent to users who lost repository access or are inactive
+    - Fixed missing permission checks in user/org-owned projects that allowed unauthorized changes to project state
+    - Fixed missing permission check that allowed unauthorized cancellation of pull request automerge
+    - Fixed path-traversal vulnerability in post-login redirect parameters that could allow arbitrary redirects
 
 
   Full release notes are available at https://forgejo.org/releases/

fossflow/docker-compose.yml

@@ -6,7 +6,7 @@ services:
       APP_PORT: "80"
 
   web:
-    image: stnsmith/fossflow:master-6cb6496@sha256:891e3b2296e5cf3ee8d319ea0d6b8ea03597323b4a61cbba5d98259f13a108c5
+    image: stnsmith/fossflow:master-0da9ff3@sha256:5554f931d6197ae1e3c12045089d436dc42181e5f94dc7cfff6dd0357a8b0089
     restart: on-failure
     volumes:
       - ${APP_DATA_DIR}/data/diagrams:/data/diagrams

fossflow/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: fossflow
 category: networking
 name: FossFLOW
-version: "6cb6496"
+version: "0da9ff3"
 tagline: Make beautiful isometric infrastructure diagrams
 description: >-
   FossFLOW is a feature-rich, open-source Progressive Web App (PWA) designed for creating elegant and professional **isometric diagrams**.
@@ -33,8 +33,10 @@ submitter: Kanishk Pachauri
 submission: https://github.com/getumbrel/umbrel-apps/pull/3959
 releaseNotes: >-
   This release includes:
-    - Transparent background support for PNG exports
-    - Improved zoom controls with 5% increments for better usability
+    - Added HTTP Basic Authentication support
+    - Fixed icon position glitching when placing icons
+    - Made settings tabs scrollable to prevent content from being hidden
+    - Resolved security vulnerabilities in dependencies
 
 
   Full release notes can be found at: https://github.com/stan-smith/FossFLOW/blob/master/CHANGELOG.md

freshrss/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_WHITELIST: "/api/*"
 
   server:
-    image: linuxserver/freshrss:1.28.0@sha256:cd05a77730c6d569177e87caea010e5a1e99827dd302e49f440eb099a603c1af
+    image: linuxserver/freshrss:1.28.1@sha256:873fa0d53fbdfeca6f9fcd1c001aeec3db80e5918637f90dc4489495bb858253
     restart: on-failure
     environment:
       - PUID=1000

freshrss/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: freshrss
 category: social
 name: FreshRSS
-version: "1.28.0"
+version: "1.28.1"
 tagline: A free, self-hostable aggregator for rss feeds
 description: >-
   FreshRSS is an RSS aggregator and reader. It enables you to seamlessly read and follow content from multiple websites at
@@ -23,38 +23,28 @@ description: >-
   
   - and more!
 releaseNotes: >-
-  This major release includes several new features and improvements.
+  This release focuses on bug fixes, particularly addressing issues from version 1.28.0.
 
 
   New features:
-    - New sorting and filtering by date of user modified articles
-    - New sorting by article length
-    - New advanced search form
-    - New overview of dates with most unread articles
-    - New ability to share feed visibility through API
-    - Configurable notification timeout
-    - Better transitions between groups of articles with new navigation links
+    - Customizable message for closed registrations
+    - Username now appears in Apache access logs for API requests
+
+
+  Bug fixes:
+    - Fixed unwanted expansion of saved searches in filters
+    - Fixed encoding of filter actions for labels
+    - Fixed tag searching functionality
+    - Fixed feed refreshing with tokens when anonymous refresh is disabled
+    - Fixed RSS and OPML access by token
+    - Fixed shortcut for next unread article
+    - Fixed custom session cookie lifetime
+    - Fixed feed validator button when changing feed URL
+    - Hidden feeds no longer counted in category unread articles
 
 
   Performance improvements:
-    - Improved SQL speed for large databases
-    - Scaling of user statistics for instances with many users
-    - API streaming of large responses for better performance
-
-
-  User interface:
-    - New button for toggling sidebar on desktop view
-    - More visible selected article
-    - Show parsed search query instead of original input
-    - Improved scroll behavior and navigation
-    - Dark background in web app manifest
-
-
-  Other improvements:
-    - Docker image updated to Debian 13 with PHP 8.4
-    - OPML export/import of feed settings
-    - Support for CSS selector subsequent-sibling
-    - Multiple bug fixes and security enhancements
+    - Disabled counting articles in user labels for Ajax requests
 
 
   Full release notes are available at https://github.com/FreshRSS/FreshRSS/releases

frigate/docker-compose.yml

@@ -10,7 +10,7 @@ services:
   web:
     privileged: true # this may not be necessary for all setups
     restart: on-failure
-    image: ghcr.io/blakeblackshear/frigate:0.16.3@sha256:cf4305d9f1c673d71c4d0fab30ca56ca05ac91168711a74ee7867a4691a7ad02
+    image: ghcr.io/blakeblackshear/frigate:0.17.1@sha256:1724960349dad0bd2ae8ec884171a6fd5755a4dc242a0e66cadbda9c0e85c99b
     shm_size: "128mb" # update for your cameras based on calculation above
     volumes:
       - /etc/localtime:/etc/localtime:ro

frigate/umbrel-app.yml

@@ -2,7 +2,7 @@ manifestVersion: 1
 id: frigate
 category: automation
 name: Frigate
-version: "0.16.3"
+version: "0.17.1"
 tagline: A complete and local NVR
 description: >-
   A complete and local NVR designed for Home Assistant with AI object detection. 
@@ -20,15 +20,22 @@ releaseNotes: >-
   ⚠️ As usual, Frigate will attempt to update its configuration automatically. It is still recommended to back up your current config and database before upgrading.
 
 
-  This release includes a security fix for authenticated users:
-    - Fixed a vulnerability that could allow viewer users to delete admin and other user accounts
+  🚨 This is a maintenance release with security fixes and bugfixes:
+    - Restricted raw config endpoint to admin role only
+    - Fixed cross-camera authentication in timeline and media endpoints
+    - Fixed RKNN ArcFace input format
+    - Fixed storage cleanup being attempted when Frigate is in safe mode
 
 
   Other improvements in this update include:
-    - Improved recording playback efficiency
-    - Fixed certificate generation crash when using webpush notifications
-    - Fixed YOLOv9 and RF-DETR model export functionality
-    - Updated documentation for various camera models and hardware
+    - Improved playback of videos in Tracking Details
+    - Fixed preview retrieval to handle missing previews gracefully
+    - Fixed thumbnail encoding logic
+    - Fixed go2rtc config handling
+    - Fixed GenAI issues
+    - Fixed audio event maintainer
+    - Push notifications now filtered by user role camera access
+    - Various UI fixes and improvements
 
 
   Full release notes are available at https://github.com/blakeblackshear/frigate/releases

ghost/docker-compose.yml

@@ -8,7 +8,7 @@ services:
       PROXY_AUTH_ADD: "false"
 
   web:
-    image: ghost:6.13.1@sha256:bd3ed30f99c6c244ac8901ead0fdf29f3178ba36af7b0afe9161fae54bc3acde
+    image: ghost:6.25.1@sha256:1e72c22226bc4e668e0eb197fb2e56e996b038e77d96e49072451f221ae94f1f
     restart: on-failure
     user: "1000:1000"
     volumes:

ghost/umbrel-app.yml

@@ -3,7 +3,7 @@ id: ghost
 name: Ghost
 tagline: A platform for creators to publish, grow, and monetize their content
 category: files
-version: "6.13.1"
+version: "6.25.1"
 port: 3368
 description: >-
   Ghost is a powerful, open-source content management system (CMS) primarily designed for professional bloggers, journalists, and content creators. Unlike more traditional CMS platforms like WordPress, which offer a wide range of plugins and customization options, Ghost focuses on providing a streamlined, fast, and minimalist platform that prioritizes the writing and publishing experience. It was initially created with bloggers in mind, but over time, it has evolved to include more features such as membership management, email newsletters, and monetization tools.
@@ -37,11 +37,7 @@ gallery:
   - 6.jpg
   - 7.jpg
 releaseNotes: >-
-  This release includes several improvements and bug fixes:
-    - Released web traffic filters
-    - Fixed reply form showing parent comment author's details
-    - Fixed force upgrade mode not blocking React shell routes
-    - Updated translations for Simplified Chinese, Bulgarian, and other languages
+  This release contains fixes for minor bugs and issues reported by Ghost users.
 
 
   Full release notes can be found at https://github.com/TryGhost/Ghost/releases