Bot Updating Package Versions

.github/workflows/call_issue_pr_tracker.yml

@@ -8,6 +8,9 @@ on:
   pull_request_review:
     types: [submitted,edited,dismissed]
 
+permissions:
+  contents: read
+
 jobs:
   manage-project:
     permissions:

.github/workflows/call_issues_cron.yml

@@ -4,6 +4,9 @@ on:
     - cron:  '35 15 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   stale:
     permissions:

.github/workflows/external_trigger.yml

@@ -3,6 +3,9 @@ name: External Trigger Main
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   external-trigger-master:
     runs-on: ubuntu-latest
@@ -43,8 +46,8 @@ jobs:
               "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }}
             exit 1
           fi
-          EXT_RELEASE=$(echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g')
+          EXT_RELEASE_SANITIZED=$(echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g')
-          echo "External version: \`${EXT_RELEASE}\`" >> $GITHUB_STEP_SUMMARY
+          echo "Sanitized external version: \`${EXT_RELEASE_SANITIZED}\`" >> $GITHUB_STEP_SUMMARY
           echo "Retrieving last pushed version" >> $GITHUB_STEP_SUMMARY
           image="linuxserver/swag"
           tag="latest"
@@ -100,8 +103,8 @@ jobs:
             exit 1
           fi
           echo "Last pushed version: \`${IMAGE_VERSION}\`" >> $GITHUB_STEP_SUMMARY
-          if [ "${EXT_RELEASE}" == "${IMAGE_VERSION}" ]; then
+          if [ "${EXT_RELEASE_SANITIZED}" == "${IMAGE_VERSION}" ]; then
-            echo "Version \`${EXT_RELEASE}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY
+            echo "Sanitized version \`${EXT_RELEASE_SANITIZED}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY
             exit 0
           elif [ $(curl -s https://ci.linuxserver.io/job/Docker-Pipeline-Builders/job/docker-swag/job/master/lastBuild/api/json | jq -r '.building') == "true" ]; then
             echo "New version \`${EXT_RELEASE}\` found; but there already seems to be an active build on Jenkins; exiting" >> $GITHUB_STEP_SUMMARY
@@ -116,7 +119,7 @@ jobs:
                 "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }}
             else
               printf "\n## Trigger new build\n\n" >> $GITHUB_STEP_SUMMARY
-              echo "New version \`${EXT_RELEASE}\` found; old version was \`${IMAGE_VERSION}\`. Triggering new build" >> $GITHUB_STEP_SUMMARY
+              echo "New sanitized version \`${EXT_RELEASE_SANITIZED}\` found; old version was \`${IMAGE_VERSION}\`. Triggering new build" >> $GITHUB_STEP_SUMMARY
               if [[ "${artifacts_found}" == "true" ]]; then
                 echo "All artifacts seem to be uploaded." >> $GITHUB_STEP_SUMMARY
               fi
@@ -136,7 +139,7 @@ jobs:
                 --data-urlencode "description=GHA external trigger https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
                 --data-urlencode "Submit=Submit"
               echo "**** Notifying Discord ****"
-              TRIGGER_REASON="A version change was detected for swag tag latest. Old version:${IMAGE_VERSION} New version:${EXT_RELEASE}"
+              TRIGGER_REASON="A version change was detected for swag tag latest. Old version:${IMAGE_VERSION} New version:${EXT_RELEASE_SANITIZED}"
               curl -X POST -H "Content-Type: application/json" --data '{"avatar_url": "https://cdn.discordapp.com/avatars/354986384542662657/df91181b3f1cf0ef1592fbe18e0962d7.png","embeds": [{"color": 9802903,
                 "description": "**Build Triggered** \n**Reason:** '"${TRIGGER_REASON}"' \n**Build URL:** '"${buildurl}display/redirect"' \n"}],
                 "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }}

.github/workflows/external_trigger_scheduler.yml

@@ -5,6 +5,9 @@ on:
     - cron:  '2 * * * *'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   external-trigger-scheduler:
     runs-on: ubuntu-latest

.github/workflows/greetings.yml

@@ -2,8 +2,14 @@ name: Greetings
 
 on: [pull_request_target, issues]
 
+permissions:
+  contents: read
+
 jobs:
   greeting:
+    permissions:
+      issues: write
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/first-interaction@v1

.github/workflows/package_trigger_scheduler.yml

@@ -5,6 +5,9 @@ on:
     - cron:  '1 3 * * 6'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   package-trigger-scheduler:
     runs-on: ubuntu-latest

.gitignore

@@ -1 +1,2 @@
+.idea
 .jenkins-external

Jenkinsfile

@@ -95,7 +95,11 @@ pipeline {
           env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DOCKERHUB_IMAGE + '/tags/'
           env.PULL_REQUEST = env.CHANGE_ID
           env.TEMPLATED_FILES = 'Jenkinsfile README.md LICENSE .editorconfig ./.github/CONTRIBUTING.md ./.github/FUNDING.yml ./.github/ISSUE_TEMPLATE/config.yml ./.github/ISSUE_TEMPLATE/issue.bug.yml ./.github/ISSUE_TEMPLATE/issue.feature.yml ./.github/PULL_REQUEST_TEMPLATE.md ./.github/workflows/external_trigger_scheduler.yml ./.github/workflows/greetings.yml ./.github/workflows/package_trigger_scheduler.yml ./.github/workflows/call_issue_pr_tracker.yml ./.github/workflows/call_issues_cron.yml ./.github/workflows/permissions.yml ./.github/workflows/external_trigger.yml ./root/donate.txt'
+          if ( env.SYFT_IMAGE_TAG == null ) {
+            env.SYFT_IMAGE_TAG = 'latest'
+          }
         }
+        echo "Using syft image tag ${SYFT_IMAGE_TAG}"
         sh '''#! /bin/bash
               echo "The default github branch detected as ${GH_DEFAULT_BRANCH}" '''
         script{
@@ -780,7 +784,7 @@ pipeline {
               docker run --rm \
                 -v /var/run/docker.sock:/var/run/docker.sock:ro \
                 -v ${TEMPDIR}:/tmp \
-                ghcr.io/anchore/syft:latest \
+                ghcr.io/anchore/syft:${SYFT_IMAGE_TAG} \
                 ${LOCAL_CONTAINER} -o table=/tmp/package_versions.txt
               NEW_PACKAGE_TAG=$(md5sum ${TEMPDIR}/package_versions.txt | cut -c1-8 )
               echo "Package tag sha from current packages in buit container is ${NEW_PACKAGE_TAG} comparing to old ${PACKAGE_TAG} from github"
@@ -890,6 +894,7 @@ pipeline {
                 -e WEB_AUTH=\"${CI_AUTH}\" \
                 -e WEB_PATH=\"${CI_WEBPATH}\" \
                 -e NODE_NAME=\"${NODE_NAME}\" \
+                -e SYFT_IMAGE_TAG=\"${CI_SYFT_IMAGE_TAG:-${SYFT_IMAGE_TAG}}\" \
                 -t ghcr.io/linuxserver/ci:latest \
                 python3 test_build.py'''
         }

README.md

@@ -5,7 +5,6 @@
 [![Blog](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=Blog)](https://blog.linuxserver.io "all the things you can do with our containers including How-To guides, opinions and much more!")
 [![Discord](https://img.shields.io/discord/354974912613449730.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Discord&logo=discord)](https://linuxserver.io/discord "realtime support / chat with the community and the team.")
 [![Discourse](https://img.shields.io/discourse/https/discourse.linuxserver.io/topics.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&logo=discourse)](https://discourse.linuxserver.io "post on our community forum.")
-[![Fleet](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=Fleet)](https://fleet.linuxserver.io "an online web interface which displays all of our maintained images.")
 [![GitHub](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=GitHub&logo=github)](https://github.com/linuxserver "view the source for all of our repositories.")
 [![Open Collective](https://img.shields.io/opencollective/all/linuxserver.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Supporters&logo=open%20collective)](https://opencollective.com/linuxserver "please consider helping us by either donating or contributing to our budget")
 
@@ -22,7 +21,6 @@ Find us at:
 * [Blog](https://blog.linuxserver.io) - all the things you can do with our containers including How-To guides, opinions and much more!
 * [Discord](https://linuxserver.io/discord) - realtime support / chat with the community and the team.
 * [Discourse](https://discourse.linuxserver.io) - post on our community forum.
-* [Fleet](https://fleet.linuxserver.io) - an online web interface which displays all of our maintained images.
 * [GitHub](https://github.com/linuxserver) - view the source for all of our repositories.
 * [Open Collective](https://opencollective.com/linuxserver) - please consider helping us by either donating or contributing to our budget
 
@@ -54,7 +52,6 @@ The architectures supported by this image are:
 | :----: | :----: | ---- |
 | x86-64 | ✅ | amd64-\<version tag\> |
 | arm64 | ✅ | arm64v8-\<version tag\> |
-| armhf | ❌ | |
 
 ## Application Setup
 

package_versions.txt

@@ -1,7 +1,7 @@
 NAME                            VERSION           TYPE                    
 Simple Launcher                 1.1.0.14          binary  (+5 duplicates)  
 acl-libs                        2.3.2-r1          apk                      
-acme                            4.0.0             python                   
+acme                            4.1.1             python                   
 alpine-baselayout               3.6.8-r1          apk                      
 alpine-baselayout-data          3.6.8-r1          apk                      
 alpine-keys                     2.5-r0            apk                      
@@ -15,15 +15,15 @@ argon2-libs                     20190702-r5       apk
 attrs                           25.3.0            python                   
 autocommand                     2.2.2             python                   
 azure-common                    1.1.28            python                   
-azure-core                      1.34.0            python                   
+azure-core                      1.35.0            python                   
 azure-identity                  1.23.0            python                   
-azure-mgmt-core                 1.5.0             python                   
+azure-mgmt-core                 1.6.0             python                   
 azure-mgmt-dns                  8.2.0             python                   
 backports-tarfile               1.2.0             python                   
 bash                            5.2.37-r0         apk                      
 beautifulsoup4                  4.13.4            python                   
-boto3                           1.38.27           python                   
+boto3                           1.39.3            python                   
-botocore                        1.38.27           python                   
+botocore                        1.39.3            python                   
 brotli-libs                     1.1.0-r2          apk                      
 bs4                             0.0.2             python                   
 busybox                         1.37.0-r12        apk                      
@@ -34,18 +34,18 @@ ca-certificates                 20241121-r1       apk
 ca-certificates-bundle          20241121-r1       apk                      
 cachetools                      5.5.2             python                   
 catatonit                       0.2.0-r0          apk                      
-certbot                         4.0.0             python                   
+certbot                         4.1.1             python                   
 certbot-dns-acmedns             0.1.0             python                   
 certbot-dns-aliyun              2.0.0             python                   
 certbot-dns-azure               1.5.0             python                   
 certbot-dns-bunny               3.0.0             python                   
-certbot-dns-cloudflare          4.0.0             python                   
+certbot-dns-cloudflare          4.1.1             python                   
 certbot-dns-cpanel              0.4.0             python                   
 certbot-dns-desec               1.2.1             python                   
-certbot-dns-digitalocean        4.0.0             python                   
+certbot-dns-digitalocean        4.1.1             python                   
 certbot-dns-directadmin         1.0.15            python                   
-certbot-dns-dnsimple            4.0.0             python                   
+certbot-dns-dnsimple            4.1.1             python                   
-certbot-dns-dnsmadeeasy         4.0.0             python                   
+certbot-dns-dnsmadeeasy         4.1.1             python                   
 certbot-dns-dnspod              0.1.0             python                   
 certbot-dns-do                  0.31.0            python                   
 certbot-dns-domeneshop          0.2.9             python                   
@@ -53,32 +53,32 @@ certbot-dns-dreamhost           1.0               python
 certbot-dns-duckdns             1.6               python                   
 certbot-dns-dynudns             0.0.6             python                   
 certbot-dns-freedns             0.2.0             python                   
-certbot-dns-gehirn              4.0.0             python                   
+certbot-dns-gehirn              4.1.1             python                   
 certbot-dns-glesys              2.1.0             python                   
 certbot-dns-godaddy             2.8.0             python                   
-certbot-dns-google              4.0.0             python                   
+certbot-dns-google              4.1.1             python                   
 certbot-dns-he                  1.0.0             python                   
 certbot-dns-hetzner             2.0.1             python                   
 certbot-dns-infomaniak          0.2.3             python                   
-certbot-dns-inwx                3.0.2             python                   
+certbot-dns-inwx                3.0.3             python                   
 certbot-dns-ionos               2024.11.9         python                   
-certbot-dns-linode              4.0.0             python                   
+certbot-dns-linode              4.1.1             python                   
 certbot-dns-loopia              1.0.1             python                   
-certbot-dns-luadns              4.0.0             python                   
+certbot-dns-luadns              4.1.1             python                   
 certbot-dns-namecheap           1.0.0             python                   
 certbot-dns-netcup              1.4.4             python                   
 certbot-dns-njalla              2.0.2             python                   
-certbot-dns-nsone               4.0.0             python                   
+certbot-dns-nsone               4.1.1             python                   
-certbot-dns-ovh                 4.0.0             python                   
+certbot-dns-ovh                 4.1.1             python                   
 certbot-dns-porkbun             0.10.1            python                   
-certbot-dns-rfc2136             4.0.0             python                   
+certbot-dns-rfc2136             4.1.1             python                   
-certbot-dns-route53             4.0.0             python                   
+certbot-dns-route53             4.1.1             python                   
-certbot-dns-sakuracloud         4.0.0             python                   
+certbot-dns-sakuracloud         4.1.1             python                   
 certbot-dns-standalone          1.2.1             python                   
 certbot-dns-transip             0.5.2             python                   
 certbot-dns-vultr               1.1.0             python                   
 certbot-plugin-gandi            1.5.0             python                   
-certifi                         2025.4.26         python                   
+certifi                         2025.6.15         python                   
 cffi                            1.17.1            python                   
 charset-normalizer              3.4.2             python                   
 cli                             UNKNOWN           binary                   
@@ -93,7 +93,7 @@ coreutils                       9.5-r2            apk
 coreutils-env                   9.5-r2            apk                      
 coreutils-fmt                   9.5-r2            apk                      
 coreutils-sha512sum             9.5-r2            apk                      
-cryptography                    45.0.3            python                   
+cryptography                    45.0.5            python                   
 curl                            8.12.1-r1         apk                      
 distro                          1.9.0             python                   
 dns-lexicon                     3.21.1            python                   
@@ -120,9 +120,9 @@ gnupg-keyboxd                   2.4.7-r0          apk
 gnupg-utils                     2.4.7-r0          apk                      
 gnupg-wks-client                2.4.7-r0          apk                      
 gnutls                          3.8.8-r0          apk                      
-google-api-core                 2.24.2            python                   
+google-api-core                 2.25.1            python                   
-google-api-python-client        2.170.0           python                   
+google-api-python-client        2.175.0           python                   
-google-auth                     2.40.2            python                   
+google-auth                     2.40.3            python                   
 google-auth-httplib2            0.2.0             python                   
 googleapis-common-protos        1.70.0            python                   
 gpg                             2.4.7-r0          apk                      
@@ -155,7 +155,7 @@ jmespath                        1.0.1             python
 josepy                          2.0.0             python                   
 jq                              1.7.1-r0          apk                      
 jsonlines                       4.0.0             python                   
-jsonpickle                      4.1.0             python                   
+jsonpickle                      4.1.1             python                   
 libassuan                       2.5.7-r0          apk                      
 libattr                         2.5.2-r2          apk                      
 libavif                         1.0.4-r0          apk                      
@@ -217,7 +217,7 @@ libzip                          1.11.2-r0         apk
 linux-pam                       1.6.1-r1          apk                      
 logrotate                       3.21.0-r1         apk                      
 loopialib                       0.2.0             python                   
-lxml                            5.4.0             python                   
+lxml                            6.0.0             python                   
 lz4-libs                        1.10.0-r0         apk                      
 markupsafe                      3.0.2             python                   
 memcached                       1.6.32-r0         apk                      
@@ -315,7 +315,7 @@ php83-xsl                       8.3.19-r0         apk
 php83-zip                       8.3.19-r0         apk                      
 pinentry                        1.3.1-r0          apk                      
 pip                             25.1.1            python                   
-pkb-client                      2.1.1             python                   
+pkb-client                      2.2.0             python                   
 platformdirs                    4.2.2             python                   
 popt                            1.19-r4           apk                      
 procps-ng                       4.0.4-r2          apk                      
@@ -324,7 +324,7 @@ protobuf                        6.31.1            python
 pyacmedns                       0.4               python                   
 pyasn1                          0.6.1             python                   
 pyasn1-modules                  0.4.2             python                   
-pyc                             3.12.10-r1        apk                      
+pyc                             3.12.11-r0        apk                      
 pycparser                       2.22              python                   
 pyjwt                           2.10.1            python                   
 pynamecheap                     0.0.3             python                   
@@ -335,13 +335,13 @@ pyrfc3339                       2.0.1             python
 python-dateutil                 2.9.0.post0       python                   
 python-digitalocean             1.17.0            python                   
 python-transip                  0.6.0             python                   
-python3                         3.12.10-r1        apk                      
+python3                         3.12.11-r0        apk                      
-python3-pyc                     3.12.10-r1        apk                      
+python3-pyc                     3.12.11-r0        apk                      
-python3-pycache-pyc0            3.12.10-r1        apk                      
+python3-pycache-pyc0            3.12.11-r0        apk                      
 pytz                            2025.2            python                   
 pyyaml                          6.0.2             python                   
 readline                        8.2.13-r0         apk                      
-requests                        2.32.3            python                   
+requests                        2.32.4            python                   
 requests-file                   2.1.0             python                   
 requests-mock                   1.12.1            python                   
 rsa                             4.9.1             python                   
@@ -359,11 +359,11 @@ tldextract                      5.3.0             python
 tomli                           2.0.1             python                   
 typeguard                       4.3.0             python                   
 typing-extensions               4.12.2            python                   
-typing-extensions               4.13.2            python                   
+typing-extensions               4.14.1            python                   
 tzdata                          2025b-r0          apk                      
 unixodbc                        2.3.12-r0         apk                      
-uritemplate                     4.1.1             python                   
+uritemplate                     4.2.0             python                   
-urllib3                         2.4.0             python                   
+urllib3                         2.5.0             python                   
 utmps-libs                      0.1.2.3-r2        apk                      
 wheel                           0.45.1            python  (+1 duplicate)   
 whois                           5.5.23-r0         apk                      

root/defaults/nginx/tinyauth-location.conf.sample

@@ -0,0 +1,9 @@
+## Version 2025/06/08 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-location.conf.sample
+# Make sure that your tinyauth container is in the same user defined bridge network and is named tinyauth
+# Rename /config/nginx/proxy-confs/tinyauth.subdomain.conf.sample to /config/nginx/proxy-confs/tinyauth.subdomain.conf
+
+## Send a subrequest to tinyauth to verify if the user is authenticated and has permission to access the resource
+auth_request /tinyauth;
+
+## If the subreqest returns 200 pass to the backend, if the subrequest returns 401 redirect to the portal
+error_page 401 = @tinyauth_login;

root/defaults/nginx/tinyauth-server.conf.sample

@@ -0,0 +1,35 @@
+## Version 2025/06/08 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-server.conf.sample
+# Make sure that your tinyauth container is in the same user defined bridge network and is named tinyauth
+# Rename /config/nginx/proxy-confs/tinyauth.subdomain.conf.sample to /config/nginx/proxy-confs/tinyauth.subdomain.conf
+
+# location for tinyauth auth requests
+location /tinyauth {
+    internal;
+
+    include /config/nginx/proxy.conf;
+    include /config/nginx/resolver.conf;
+    set $upstream_tinyauth tinyauth;
+    proxy_pass http://$upstream_tinyauth:3000/api/auth/nginx;
+
+    proxy_set_header x-forwarded-proto $scheme;
+    proxy_set_header x-forwarded-host $http_host;
+    proxy_set_header x-forwarded-uri $request_uri;
+}
+
+# virtual location for tinyauth 401 redirects
+location @tinyauth_login {
+    internal;
+
+    ## Set the $target_url variable based on the original request
+    set_escape_uri $target_url $scheme://$http_host$request_uri;
+    
+    ## Set the $signin_url variable
+    set $domain $host;
+    if ($host ~* "^[^.]+\.([^.]+\..+)$") {
+        set $domain $1;
+    }
+    set $signin_url https://tinyauth.$domain/login?redirect_uri=$target_url;
+
+    ## Redirect to login
+    return 302 $signin_url;
+}

root/etc/s6-overlay/s6-rc.d/init-swag-config/run

@@ -22,6 +22,14 @@ if [[ ! -f /config/nginx/authentik-server.conf ]]; then
     cp /defaults/nginx/authentik-server.conf.sample /config/nginx/authentik-server.conf
 fi
 
+# copy tinyauth config files if they don't exist
+if [[ ! -f /config/nginx/tinyauth-location.conf ]]; then
+    cp /defaults/nginx/tinyauth-location.conf.sample /config/nginx/tinyauth-location.conf
+fi
+if [[ ! -f /config/nginx/tinyauth-server.conf ]]; then
+    cp /defaults/nginx/tinyauth-server.conf.sample /config/nginx/tinyauth-server.conf
+fi
+
 # copy old ldap config file to new location
 if [[ -f /config/nginx/ldap.conf ]] && [[ ! -f /config/nginx/ldap-server.conf ]]; then
     cp /config/nginx/ldap.conf /config/nginx/ldap-server.conf