chore(deps): update updates-patch-minor

[truenasbot]

This PR contains the following updates:

Package	Update	Change
alexta69/metube	patch	2025.12.27 → 2025.12.30
freikin/dawarich	minor	0.36.4 → 0.37.1
ghcr.io/booklore-app/booklore	patch	v1.16.1 → v1.16.2
ghcr.io/coollabsio/coolify (source)	patch	4.0.0-beta.459 → 4.0.0-beta.460
ghcr.io/esphome/esphome (source)	patch	2025.12.2 → 2025.12.3
ghcr.io/home-operations/jackett (source)	patch	0.24.622 → 0.24.645
ghcr.io/linuxserver/piwigo (source)	minor	16.1.0 → 16.2.0
penpotapp/backend	minor	2.11.1 → 2.12.1
penpotapp/exporter	minor	2.11.1 → 2.12.1
penpotapp/frontend	minor	2.11.1 → 2.12.1
rustfs/rustfs	patch	1.0.0-alpha.77 → 1.0.0-alpha.78
solidnerd/bookstack	patch	25.12.0 → 25.12.1
vaultwarden/server	patch	1.35.0 → 1.35.1

---

Release Notes

Freika/dawarich (freikin/dawarich)

v0.37.1

Compare Source

Fixed

• The db migration preventing the app from starting.
• Raw data archive verifier now allows having points deleted from the db after archiving.

v0.37.0

Compare Source

Added

• In the beginning of the year users will receive a year-end digest email with stats about their tracking activity during the past year. Users can opt out of receiving these emails in User Settings -> Notifications. Emails won't be sent if no email is configured in the SMTP settings or if user has no points tracked during the year.

Changed

• Added and removed some indexes to improve the app performance based on the production usage data.

Changed

• Deleting an import will now be processed in the background to prevent request timeouts for large imports.

Fixed

• Deleting an import will no longer result in negative points count for the user.
• Updating stats. #​2022
• Validate trip start date to be earlier than end date. #​2057
• Fog of war radius slider in map v2 settings is now being respected correctly. #​2041
• Applying changes in map v2 settings now works correctly. #​2041
• Invalidate stats cache on recalculation and other operations that change stats data.

booklore-app/booklore (ghcr.io/booklore-app/booklore)

v1.16.2

Compare Source

🌟 What's New in v1.16.2

✨ Enhancements

• fix(ui): update tasks last run time to include timezone information (#​2047) by @​CounterClops
• feat(api): add healthcheck endpoint for monitoring health from Docker/Podman (#​2024) by @​davejlong
• fix(metadata): cover no longer fails to extract with invalid zip files (#​2012) by @​MightyHalfGinger
• fix(bookdrop): improve pattern extractor date extraction (#​2032) by @​CounterClops
• feat(cover-search): trigger search automatically when form is valid after autofill (#​2035) by @​balazs-szucs

🐛 Bug Fixes

• fix(upload): truncate long filenames to safe length while preserving extension for bookdrop and additional files (#​2059) by @​balazs-szucs
• fix(cbz): exclude macOS metadata and hidden files from image extraction (#​2056) by @​balazs-szucs
• fix(upload): preserve original filename as title when metadata extraction returns temp file name (#​2053) by @​balazs-szucs
• fix(metadata-viewer): show only allowed other actions and localize amazon link (#​2031) by @​xcashy
• fix(metadata): add null handling for MetadataRefreshService and improve default initialization in MetadataRefreshOptions (#​2034) by @​balazs-szucs

🛠️ Refactoring & Maintenance

• refactor(api): remove unused imports/fields, pre-compile regex patterns, use EnumMap for enum keys (#​2036) by @​balazs-szucs
• Refine telemetry (#​2054) by @​acx10
• Allow hash in file naming pattern (#​2062) by @​acx10

📖 Documentation

• Change the official domain from booklore.dev to booklore.org (#​2046) by @​acx10

🐳 Docker Images

• Docker Hub: booklore/booklore:v1.16.2
• GitHub Container Registry: ghcr.io/booklore-app/booklore:v1.16.2

Full Changelog: booklore-app/booklore@v1.16.1...v1.16.2

esphome/esphome (ghcr.io/esphome/esphome)

v2025.12.3

Compare Source

• [lvgl] Fix lambdas in canvas actions called from outside LVGL context esphome#12671 by @​bdraco
• [core] Fix incremental build failures when adding components on ESP32-Arduino esphome#12745 by @​bdraco

Jackett/Jackett (ghcr.io/home-operations/jackett)

v0.24.645

Compare Source

Changes:

• a73b0b0 torrenttip: bump domain
• 5bc506e torrentsome: bump domain
• cd77da0 world-torrent: add alt domain
• ec6377f world-torrent: add cats
• 50ac75b cardiganIndexerHtmlTest: year change 1of2
• fc87956 Update world-torrent.yml
• f7e0fd7 Revert "nortorrent: replaced by world-torrent resolves #​15217"
• abbcee7 nortorrent: replaced by world-torrent resolves #​15217
• 33b568a rutor: add info 8000 category
• 6988deb zetorrents -> world-torrent #​7574

See More

• 35a0387 magnetcat: bump alt domains
• c4aea7d 52bt: bump alt domains

This list of changes was auto generated.

penpot/penpot (penpotapp/backend)

v2.12.1

Compare Source

🐛 Bugs fixed

• Fix setting a portion of text as bold or underline messes things up Github #​7980

v2.12.0

Compare Source

💥 Breaking changes & Deprecations

Backend RPC API changes

The backend RPC API URLS are changed from /api/rpc/command/<name> to
/api/main/methods/<name>. The previous PATH is preserved for backward
compatibility; however, if you are a user of this API, it is strongly
recommended that you adapt your code to use the new PATH.

Updated SSO Callback URL

The OAuth / Single Sign-On (SSO) callback endpoint has changed to
align with the new OpenID Connect (OIDC) implementation.

Old callback URL:

https://<your_domain>/api/auth/oauth/<oauth_provider>/callback

New callback URL:

https://<your_domain>/api/auth/oidc/callback

Action required:

If you have SSO/Social-Auth configured on your on-premise instance,
the following actions are required before update:

Update your OAuth or SSO provider configuration (e.g., Okta, Google,
Azure AD, etc.) to use the new callback URL. Failure to update may
result in authentication failures after upgrading.

Reason for change:

This update standardizes all authentication flows under the single URL
and makis it more modular, enabling the ability to configure SSO auth
provider dinamically.

Changes on default docker compose

We have updated the docker/images/docker-compose.yaml with a small
change related to the PENPOT_SECRET_KEY. Since this version, this
environment variable is also required on exporter. So if you are using
penpot on-premise you will need to apply the same changes on your own
docker-compose.yaml file.

We have removed the Minio server from the docker/images/docker-compose.yml
example. It's still usable as before, we just removed the example.

🚀 Epics and highlights

❤️ Community contributions (Thank you!)

• Ensure consistent snap behavior across all zoom levels Github #​7774 by @​Tokytome
• Fix crash in token grid view due to tooltip validation (by @​dfelinto) Github #​7887
• Enable Hindi translations on the application

✨ New features & Enhancements

• Add the ability to select boards to export as PDF Taiga #​12320
• Add toggle for switching boolean property values Taiga #​12341
• Make the file export process more reliable Taiga #​12555
• Add auth flow changes Taiga #​12333
• Add new shape validation mechanism for shapes Github #​7696
• Apply color tokens from sidebar Taiga #​11353
• Display tokens in the inspect tab Taiga #​9313
• Refactor clipboard behavior to assess some minor inconsistencies and make pasting binary data faster. Taiga #​12571

🐛 Bugs fixed

• Fix text line-height values are wrong Taiga #​12252
• Fix an error translation Taiga #​12402
• Fix pan cursor not disabling viewport guides Github #​6985
• Fix viewport resize on locked shapes Taiga #​11974
• Fix nested variant in a component doesn't keep inherited overrides Taiga #​12299
• Fix on copy instance inside a components chain touched are missing Taiga #​12371
• Fix problem with multiple selection and shadows Github #​7437
• Fix search shortcut Taiga #​10265
• Fix shortcut conflict in text editor (increase/decrease font size vs word selection)
• Fix problem with plugins generating code for pages different than current one Taiga #​12312
• Fix input confirmation behavior is not uniform Taiga #​12294
• Fix copy/pasting application/transit+json Taiga #​12721
• Fix problem with plugins content attribute Plugins #​209
• Fix U and E icon displayed in project list Taiga #​12806
• Fix unpublish library modal not scrolling a long file list Taiga #​12285
• Fix incorrect interaction betwen hower and scroll on assets sidebar Taiga #​12389
• Fix switch variants with paths Taiga #​12841
• Fix referencing typography tokens on font-family tokens Taiga #​12492
• Fix horizontal scroll on layer panel Taiga #​12843
• Fix unicode handling on email template abbreviation filter Github #​7966

solidnerd/docker-bookstack (solidnerd/bookstack)

v25.12.1

Compare Source

• 967b8b0 - feat: update Dockerfile to use Bookstack v25.12.1
• 46faf3f - Merge pull request #​603 from solidnerd/rjh_update
• fdb9cad - doc: update documentation to reference 25.12.0
• 66bc5d9 - Merge pull request #​602 from solidnerd/rjh_update

dani-garcia/vaultwarden (vaultwarden/server)

v1.35.1

Compare Source

Notable changes

• Fixed issue with applications being logged out after upgrading due to changes to refresh token parsing
• Updated web vault to 2025.12.1
• Correctly publish alpine tag, which was missing in 1.35.0

What's Changed

• Update lockfile by @​dani-garcia in #​6600
• Re-add alpine tag by @​dfunkt in #​6626
• Misc updates by @​BlackDex in #​6627
• Try old refresh token if we fail to decode jwt by @​dani-garcia in #​6629

Full Changelog: dani-garcia/vaultwarden@1.35.0...1.35.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.