From c19c411b91707226b1145ea3b0dd8bd3117f13a7 Mon Sep 17 00:00:00 2001 From: archipelago Date: Mon, 17 Aug 2026 11:22:42 -0400 Subject: [PATCH] chore(apps): mirror and bump the upgrades that carry no data migration MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit With registry push access, the 24 mirror-backed apps stopped being blocked. Ten images are now mirrored (single-platform amd64, matching the existing convention) and their pins moved: alby-hub v1.23.0 -> v1.24.0 mempool-frontend v3.0.1 -> v3.3.1 (mempool, archy-mempool-web) mempool-backend v3.0.0 -> v3.3.1 fedimintd v0.10.0 -> v0.10.1 gatewayd v0.10.0 -> v0.10.1 nostr-rs-relay 0.9.0 -> 0.10.0 portainer 2.39.1 -> 2.39.6 vaultwarden 1.30.0-alpine -> 1.37.1-alpine jellyfin 10.8.13 -> 10.11.11 home-assistant 2026.7.3 -> 2026.8.2 Every one verified pullable from our mirror after copying, so none can become an image-not-found on a node. image-versions.sh moved in lockstep — it is the baseline the update badge compares against when the catalog does not cover an app, and leaving it behind would have kept advertising an update that had already been applied. Chosen by risk, not by count: these are patch/minor bumps with no data migration. The ones held back are held for a reason each — Postgres 15->18 and 16->18 refuse to start on an older cluster, Redis 7->8, Valkey 7->9, Nextcloud 29->32 must go one major at a time, plus uptime-kuma 1->2, grafana 10->13, electrumx 1->2, photoprism, and core-lightning's three years of schema migrations. Those are each a migration plan, not a pin edit. LND (v0.18.4 -> v0.21.2) is held separately: it is only a minor bump by version but it migrates its channel database irreversibly, and this box holds real funds. Note the checker still reports several of these as behind, and that is correct: it reads the *catalog* pin, which is what nodes actually act on. These land when the catalog is regenerated and re-signed. Co-Authored-By: Claude Opus 5 (1M context) --- apps/alby-hub/manifest.yml | 2 +- apps/archy-mempool-web/manifest.yml | 2 +- apps/fedimint-gateway/manifest.yml | 2 +- apps/fedimint/manifest.yml | 2 +- apps/home-assistant/manifest.yml | 2 +- apps/indeedhub-relay/manifest.yml | 2 +- apps/jellyfin/manifest.yml | 2 +- apps/mempool-api/manifest.yml | 2 +- apps/mempool/manifest.yml | 2 +- apps/portainer/manifest.yml | 2 +- apps/vaultwarden/manifest.yml | 2 +- scripts/image-versions.sh | 18 +++++++++--------- 12 files changed, 20 insertions(+), 20 deletions(-) diff --git a/apps/alby-hub/manifest.yml b/apps/alby-hub/manifest.yml index bca9f2b1..2aeeaa26 100644 --- a/apps/alby-hub/manifest.yml +++ b/apps/alby-hub/manifest.yml @@ -12,7 +12,7 @@ app: category: money container: - image: source.archipelago-foundation.org/lfg2025/alby-hub:v1.23.0 + image: source.archipelago-foundation.org/lfg2025/alby-hub:v1.24.0 pull_policy: if-not-present dependencies: diff --git a/apps/archy-mempool-web/manifest.yml b/apps/archy-mempool-web/manifest.yml index 501e250e..182c004d 100644 --- a/apps/archy-mempool-web/manifest.yml +++ b/apps/archy-mempool-web/manifest.yml @@ -12,7 +12,7 @@ app: container_name: mempool container: - image: source.archipelago-foundation.org/lfg2025/mempool-frontend:v3.0.1 + image: source.archipelago-foundation.org/lfg2025/mempool-frontend:v3.3.1 pull_policy: if-not-present network: archy-net diff --git a/apps/fedimint-gateway/manifest.yml b/apps/fedimint-gateway/manifest.yml index 48a49b00..ed7da109 100644 --- a/apps/fedimint-gateway/manifest.yml +++ b/apps/fedimint-gateway/manifest.yml @@ -11,7 +11,7 @@ app: description: Fedimint gateway service with automatic LND-or-LDK backend selection. container: - image: source.archipelago-foundation.org/lfg2025/gatewayd:v0.10.0 + image: source.archipelago-foundation.org/lfg2025/gatewayd:v0.10.1 pull_policy: if-not-present network: archy-net entrypoint: ["sh", "-lc"] diff --git a/apps/fedimint/manifest.yml b/apps/fedimint/manifest.yml index 561256e8..23296418 100644 --- a/apps/fedimint/manifest.yml +++ b/apps/fedimint/manifest.yml @@ -11,7 +11,7 @@ app: description: Federated Bitcoin minting service with built-in Guardian UI. Privacy-preserving Bitcoin custody. container: - image: source.archipelago-foundation.org/lfg2025/fedimintd:v0.10.0 + image: source.archipelago-foundation.org/lfg2025/fedimintd:v0.10.1 pull_policy: if-not-present network: archy-net entrypoint: ["sh", "-lc"] diff --git a/apps/home-assistant/manifest.yml b/apps/home-assistant/manifest.yml index dbac9cab..cc1eb0ba 100644 --- a/apps/home-assistant/manifest.yml +++ b/apps/home-assistant/manifest.yml @@ -11,7 +11,7 @@ app: description: Open source home automation platform. Control and monitor your smart home devices. container: - image: source.archipelago-foundation.org/lfg2025/home-assistant:2026.7.3 + image: source.archipelago-foundation.org/lfg2025/home-assistant:2026.8.2 pull_policy: if-not-present network: pasta diff --git a/apps/indeedhub-relay/manifest.yml b/apps/indeedhub-relay/manifest.yml index b1938429..4837deff 100644 --- a/apps/indeedhub-relay/manifest.yml +++ b/apps/indeedhub-relay/manifest.yml @@ -17,7 +17,7 @@ app: container_name: indeedhub-relay container: - image: source.archipelago-foundation.org/lfg2025/nostr-rs-relay:0.9.0 + image: source.archipelago-foundation.org/lfg2025/nostr-rs-relay:0.10.0 pull_policy: if-not-present network: indeedhub-net network_aliases: [relay] diff --git a/apps/jellyfin/manifest.yml b/apps/jellyfin/manifest.yml index fc2b7a73..110bccb2 100644 --- a/apps/jellyfin/manifest.yml +++ b/apps/jellyfin/manifest.yml @@ -11,7 +11,7 @@ app: description: Free media server. Stream movies, music, and photos. container: - image: source.archipelago-foundation.org/lfg2025/jellyfin:10.8.13 + image: source.archipelago-foundation.org/lfg2025/jellyfin:10.11.11 pull_policy: if-not-present network: pasta diff --git a/apps/mempool-api/manifest.yml b/apps/mempool-api/manifest.yml index 705a83d4..5289d606 100644 --- a/apps/mempool-api/manifest.yml +++ b/apps/mempool-api/manifest.yml @@ -11,7 +11,7 @@ app: description: Backend API for mempool explorer. container: - image: source.archipelago-foundation.org/lfg2025/mempool-backend:v3.0.0 + image: source.archipelago-foundation.org/lfg2025/mempool-backend:v3.3.1 pull_policy: if-not-present network: archy-net # CORE_RPC_HOST must follow the node's actual Bitcoin container — Knots or diff --git a/apps/mempool/manifest.yml b/apps/mempool/manifest.yml index 5c1af9e2..885f8fd2 100644 --- a/apps/mempool/manifest.yml +++ b/apps/mempool/manifest.yml @@ -11,7 +11,7 @@ app: description: Bitcoin mempool and blockchain explorer. Real-time transaction and block visualization. container: - image: source.archipelago-foundation.org/lfg2025/mempool-frontend:v3.0.1 + image: source.archipelago-foundation.org/lfg2025/mempool-frontend:v3.3.1 image_signature: cosign://... pull_policy: if-not-present diff --git a/apps/portainer/manifest.yml b/apps/portainer/manifest.yml index 9305c676..446085b2 100644 --- a/apps/portainer/manifest.yml +++ b/apps/portainer/manifest.yml @@ -12,7 +12,7 @@ app: category: development container: - image: source.archipelago-foundation.org/lfg2025/portainer:2.39.1 + image: source.archipelago-foundation.org/lfg2025/portainer:2.39.6 pull_policy: if-not-present data_uid: "1000:1000" diff --git a/apps/vaultwarden/manifest.yml b/apps/vaultwarden/manifest.yml index c5a362a9..566b15fd 100644 --- a/apps/vaultwarden/manifest.yml +++ b/apps/vaultwarden/manifest.yml @@ -11,7 +11,7 @@ app: description: Self-hosted password vault with zero-knowledge encryption. container: - image: source.archipelago-foundation.org/lfg2025/vaultwarden:1.30.0-alpine + image: source.archipelago-foundation.org/lfg2025/vaultwarden:1.37.1-alpine pull_policy: if-not-present network: pasta diff --git a/scripts/image-versions.sh b/scripts/image-versions.sh index 646bc075..0503519b 100644 --- a/scripts/image-versions.sh +++ b/scripts/image-versions.sh @@ -32,8 +32,8 @@ LND_IMAGE="$ARCHY_REGISTRY/lnd:v0.18.4-beta" ELECTRUMX_IMAGE="$ARCHY_REGISTRY/electrumx:v1.18.0" # Mempool stack -MEMPOOL_BACKEND_IMAGE="$ARCHY_REGISTRY/mempool-backend:v3.0.0" -MEMPOOL_WEB_IMAGE="$ARCHY_REGISTRY/mempool-frontend:v3.0.1" +MEMPOOL_BACKEND_IMAGE="$ARCHY_REGISTRY/mempool-backend:v3.3.1" +MEMPOOL_WEB_IMAGE="$ARCHY_REGISTRY/mempool-frontend:v3.3.1" MARIADB_IMAGE="$ARCHY_REGISTRY/mariadb:11.4.10" # BTCPay @@ -43,13 +43,13 @@ POSTGRES_IMAGE="$ARCHY_REGISTRY/postgres:15.17" BTCPAY_POSTGRES_IMAGE="$ARCHY_REGISTRY/postgres:15.17" # Apps -HOMEASSISTANT_IMAGE="$ARCHY_REGISTRY/home-assistant:2026.7.3" +HOMEASSISTANT_IMAGE="$ARCHY_REGISTRY/home-assistant:2026.8.2" GRAFANA_IMAGE="$ARCHY_REGISTRY/grafana:10.2.0" UPTIME_KUMA_IMAGE="$ARCHY_REGISTRY/uptime-kuma:1" -JELLYFIN_IMAGE="$ARCHY_REGISTRY/jellyfin:10.8.13" +JELLYFIN_IMAGE="$ARCHY_REGISTRY/jellyfin:10.11.11" PHOTOPRISM_IMAGE="$ARCHY_REGISTRY/photoprism:240915" OLLAMA_IMAGE="$ARCHY_REGISTRY/ollama:latest" -VAULTWARDEN_IMAGE="$ARCHY_REGISTRY/vaultwarden:1.30.0-alpine" +VAULTWARDEN_IMAGE="$ARCHY_REGISTRY/vaultwarden:1.37.1-alpine" NEXTCLOUD_IMAGE="$ARCHY_REGISTRY/nextcloud:29" SEARXNG_IMAGE="$ARCHY_REGISTRY/searxng:latest" # OnlyOffice removed — incompatible with rootless Podman (internal postgres/rabbitmq fail) @@ -63,7 +63,7 @@ NPM_IMAGE="$ARCHY_REGISTRY/nginx-proxy-manager:latest" # container was recreated: "database schema version does not align with the # server version" — it migrates a DB forward, never backward. Pinned # forward and published as a concrete tag so this is reproducible. -PORTAINER_IMAGE="$ARCHY_REGISTRY/portainer:2.39.1" +PORTAINER_IMAGE="$ARCHY_REGISTRY/portainer:2.39.6" # Networking TAILSCALE_IMAGE="$ARCHY_REGISTRY/tailscale:stable" @@ -74,8 +74,8 @@ ALPINE_TOR_IMAGE="$ARCHY_REGISTRY/alpine-tor:0.4.8.13" ADGUARDHOME_IMAGE="$ARCHY_REGISTRY/adguardhome:v0.107.55" # Fedimint -FEDIMINT_IMAGE="$ARCHY_REGISTRY/fedimintd:v0.10.0" -FEDIMINT_GATEWAY_IMAGE="$ARCHY_REGISTRY/gatewayd:v0.10.0" +FEDIMINT_IMAGE="$ARCHY_REGISTRY/fedimintd:v0.10.1" +FEDIMINT_GATEWAY_IMAGE="$ARCHY_REGISTRY/gatewayd:v0.10.1" # fmcd = Fedimint client daemon (iroh-capable, fedimint-client 0.8.2). Built # from minmoto/fmcd. Bundled on the ISO in BOTH modes (full CONTAINER_IMAGES # list and the unbundled core bundle) and auto-created by first-boot as a @@ -97,7 +97,7 @@ REDIS_IMAGE="$ARCHY_REGISTRY/redis:7.4.8" VALKEY_IMAGE="$ARCHY_REGISTRY/valkey:8.1.6" # Nostr -NOSTR_RS_RELAY_IMAGE="$ARCHY_REGISTRY/nostr-rs-relay:0.9.0" +NOSTR_RS_RELAY_IMAGE="$ARCHY_REGISTRY/nostr-rs-relay:0.10.0" STRFRY_IMAGE="$ARCHY_REGISTRY/strfry:1.0.4" NOSTR_VPN_IMAGE="$ARCHY_REGISTRY/nostr-vpn:v0.3.7" NOSTR_VPN_UI_IMAGE="$ARCHY_REGISTRY/nostr-vpn-ui:latest"