fix: increase default widget preview dimensions for fullscreen view

Changes default widget preview dimensions from 128x128 to 960x640 so
table-based widgets like Docker containers aren't squished into a tiny
strip when viewed via the /widgets route in fullscreen mode.

Closes #6230

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -33,6 +33,7 @@ body:
       options:
         # The below comment is used to insert a new version with on-release.yml
         #NEXT_VERSION#
+        - 1.69.2
         - 1.69.0
         - 1.68.0
         - 1.67.0

.github/actions/prebuilt-debian/action.yaml

@@ -11,7 +11,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         persist-credentials: false
     - name: Set up Docker Buildx

.github/workflows/automatic-approval.yml

@@ -17,7 +17,7 @@ jobs:
     if: github.actor_id == 158783068 || github.actor_id == 190541745 || github.actor_id == 210161987 || github.actor_id == 175486441
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Obtain token
         id: obtainToken
         uses: actions/create-github-app-token@v3

.github/workflows/code-quality.yml

@@ -31,7 +31,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}
@@ -60,7 +60,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -78,7 +78,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -92,7 +92,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -106,7 +106,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup
         uses: ./tooling/github/setup
@@ -124,7 +124,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup
         uses: ./tooling/github/setup
       - name: Set up Docker Buildx
@@ -153,7 +153,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Setup
@@ -163,65 +163,3 @@ jobs:
         run: cp .env.example .env
       - name: Build
         run: pnpm turbo build --affected
-
-  memory-regression:
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v6
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
-      - name: Build Docker image
-        uses: docker/build-push-action@v7
-        with:
-          platforms: linux/amd64
-          context: .
-          push: false
-          load: true
-          tags: homarr-memory-test
-          network: host
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-        env:
-          SKIP_ENV_VALIDATION: true
-      - name: Start container and measure memory
-        run: |
-          docker run -d --name homarr-mem-test -p 17575:7575 homarr-memory-test
-          # Wait for container to be healthy (up to 60s)
-          healthy=false
-          for i in $(seq 1 30); do
-            if curl -sf http://localhost:17575/api/health 2>/dev/null; then
-              echo "Container healthy after $((i * 2))s"
-              healthy=true
-              break
-            fi
-            sleep 2
-          done
-          if [ "$healthy" != "true" ]; then
-            echo "ERROR: Container never became healthy"
-            docker logs homarr-mem-test --tail 50
-            exit 1
-          fi
-          # Warm up: hit the dashboard page a few times
-          for i in $(seq 1 5); do
-            curl -sf http://localhost:17575/ > /dev/null 2>&1 || true
-            sleep 2
-          done
-          # Measure RSS after warmup
-          MEM_KB=$(docker stats --no-stream --format '{{.MemUsage}}' homarr-mem-test | sed 's| /.*||')
-          echo "Raw memory: $MEM_KB"
-          # Convert to numeric MB (handles GiB and MiB suffixes)
-          MEM_NUM=$(echo "$MEM_KB" | awk '{
-            if ($0 ~ /GiB/) { gsub(/GiB/,""); print $1 * 1024 }
-            else if ($0 ~ /MiB/) { gsub(/MiB/,""); print $1 }
-            else if ($0 ~ /KiB/) { gsub(/KiB/,""); print $1 / 1024 }
-            else { print $1 / 1048576 }
-          }')
-          echo "Memory usage: ${MEM_NUM} MB"
-          MAX_MB=700
-          if awk "BEGIN {exit !($MEM_NUM > $MAX_MB)}"; then
-            echo "ERROR: Memory usage ${MEM_NUM} MB exceeds ${MAX_MB} MB threshold"
-            docker logs homarr-mem-test --tail 50
-            exit 1
-          fi
-          echo "Memory check passed: ${MEM_NUM} MB <= ${MAX_MB} MB"

.github/workflows/crowdin-schedule-download.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Obtain token
         id: obtainToken

.github/workflows/crowdin-upload.yml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Upload Crowdin translations
         uses: crowdin/github-action@v2

.github/workflows/deployment-beta-release.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           args: "Beta release has been triggered: [run ${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})"
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Get Next Version

.github/workflows/deployment-docker-image.yml

@@ -57,7 +57,7 @@ jobs:
           client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
           permission-contents: write # required to commit package.json & changelog changes, merge them to dev / next and publish the release
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         if: env.SKIP_RELEASE == 'false'
         with:
           persist-credentials: false
@@ -119,7 +119,7 @@ jobs:
     outputs:
       digest: ${{ steps.build.outputs.digest }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.release.outputs.git_ref }}
 
@@ -158,7 +158,7 @@ jobs:
     outputs:
       digest: ${{ steps.build.outputs.digest }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ needs.release.outputs.git_ref }}
 

.github/workflows/deployment-docs.yml

@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup
         uses: ./tooling/github/setup
       - name: Build docs

.github/workflows/deployment-weekly-release.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           args: "Automatic release has been triggered: [run ${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})"
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Get Next Version

.github/workflows/docs-algolia-recrawl.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Setup
         uses: ./tooling/github/setup

.github/workflows/docs-update-contributors.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: dev
 

.github/workflows/docs-update-openapi.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: dev
 

.github/workflows/on-pr-prebuilt-debian-validate.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Validate prebuilt dependencies for amd64
         id: validate-amd64
         uses: ./.github/actions/prebuilt-debian
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-24.04-arm
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Validate prebuilt dependencies for arm64
         id: validate-arm64
         uses: ./.github/actions/prebuilt-debian

.github/workflows/on-pr-renovate-validate.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 2
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: |
           npx --yes --package renovate -- \
               renovate-config-validator --strict .github/renovate.json5

.github/workflows/on-release.yml

@@ -52,7 +52,7 @@ jobs:
           permission-contents: write # required to commit to branch
           permission-pull-requests: write # required to create pr & enable automerge
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ steps.obtainToken.outputs.token }}
           ref: dev

.github/workflows/update-contributors.yml

@@ -29,7 +29,7 @@ jobs:
           permission-pull-requests: write # required to create pr & enable automerge
 
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         env:
           GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}
 

.github/workflows/update-integration-list.yml

@@ -28,7 +28,7 @@ jobs:
           permission-contents: write # required to commit to branch
           permission-pull-requests: write # required to create pr & enable automerge
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         env:
           GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}
       - name: Setup

CHANGELOG.md

@@ -1,3 +1,15 @@
+## [1.69.2](https://github.com/homarr-labs/homarr/compare/v1.69.1...v1.69.2) (2026-07-06)
+
+### Bug Fixes
+
+* **layout:** raise AppShellHeader z-index above Indicator dots ([687edb9](https://github.com/homarr-labs/homarr/commit/687edb9226307cb83986097abb24fe7f672e1778)), closes [#6194](https://github.com/homarr-labs/homarr/issues/6194)
+
+## [1.69.1](https://github.com/homarr-labs/homarr/compare/v1.69.0...v1.69.1) (2026-07-04)
+
+### Bug Fixes
+
+* unblock query cache mutations in demo mode and add cache buster ([#6176](https://github.com/homarr-labs/homarr/issues/6176)) ([a382c75](https://github.com/homarr-labs/homarr/commit/a382c75968e73bafff55b5890b1e95f0779b50d3))
+
 ## [1.69.0](https://github.com/homarr-labs/homarr/compare/v1.68.1...v1.69.0) (2026-07-03)
 
 ### Features

apps/docs/docs/integrations/immich/index.mdx

@@ -39,13 +39,26 @@ import { immichServerStatsWidget } from '../../widgets/immich-server-stats';
     'Scroll down to "API Keys"', 
     'Click "New API Key"', 
     'Enter a name, e.g. "Homarr"', 
-    (<span>
-      Select the following permissions:{" "}
-      <code>album.read</code>,{" "}
-      <code>user.read</code>,{" "}
-      <code>server.statistics</code>,{" "}
-      <code>asset.download</code>
-    </span>), 
+(
+
+  <span>
+
+    Select the following permissions:{" "}
+    <code>album.statistics</code>,{" "}
+    <code>album.read</code>,{" "}
+    <code>album.create</code>,{" "}
+    <code>user.read</code>,{" "}
+    <code>user.update</code>,{" "}
+    <code>asset.read</code>,{" "}
+    <code>asset.download</code>,{" "}
+    <code>asset.statistics</code>,{" "}
+    <code>server.statistics</code>,{" "}
+    <code>server.about</code>.
+    <br />
+    Additional permissions may be required depending on your Immich version. If you encounter authorization errors, grant any missing permissions requested by the server.
+  </span>
+
+),
     'Create the integration in Homarr and copy the API key to there'
     ]
-}]} />
+}]} />

apps/docs/package.json

@@ -32,7 +32,7 @@
     "@scalar/api-reference-react": "catalog:",
     "@signalwire/docusaurus-plugin-llms-txt": "^1.2.2",
     "@tabler/icons-react": "catalog:",
-    "@tailwindcss/postcss": "^4.3.1",
+    "@tailwindcss/postcss": "^4.3.2",
     "clsx": "catalog:",
     "dayjs": "catalog:",
     "docusaurus-plugin-image-zoom": "^3.0.1",
@@ -43,8 +43,8 @@
     "random-word-slugs": "^0.1.7",
     "react": "catalog:",
     "react-dom": "catalog:",
-    "swiper": "^12.2.0",
-    "tailwindcss": "^4.3.1"
+    "swiper": "^14.0.1",
+    "tailwindcss": "^4.3.2"
   },
   "devDependencies": {
     "@docusaurus/module-type-aliases": "^3.10.1",

apps/docs/src/css/custom.css

@@ -1,8 +1,7 @@
+@import url("https://api.fontshare.com/v2/css?f[]=work-sans@2,1&display=swap");
 @import "tailwindcss/theme" layer(theme);
 @import "tailwindcss/utilities" layer(utilities);
 
-@import url(https://api.fontshare.com/v2/css?f[]=work-sans@2,1&display=swap);
-
 @custom-variant dark (&:where([data-theme="dark"], [data-theme="dark"] *));
 
 @theme {

apps/docs/tsconfig.json

@@ -1,9 +1,6 @@
 {
-  "extends": "@docusaurus/tsconfig",
   "compilerOptions": {
-    "ignoreDeprecations": "6.0",
-    "baseUrl": ".",
-    "target": "es5",
+    "target": "ES2022",
     "lib": ["dom", "dom.iterable", "esnext"],
     "allowJs": true,
     "skipLibCheck": true,
@@ -12,10 +9,14 @@
     "noEmit": true,
     "esModuleInterop": true,
     "module": "esnext",
+    "moduleResolution": "bundler",
     "resolveJsonModule": true,
     "isolatedModules": true,
     "jsx": "preserve",
     "incremental": true,
+    "paths": {
+      "@site/*": ["./*"]
+    },
   },
   "include": [
     "**/*.ts",

apps/nextjs/next.config.ts

@@ -5,21 +5,9 @@ import "@homarr/common/env";
 import "@homarr/core/infrastructure/logs/env";
 import "@homarr/docker/env";
 
-import { readFileSync } from "fs";
-
 import type { NextConfig } from "next";
 import createNextIntlPlugin from "next-intl/plugin";
 
-const homarrVersion = (() => {
-  for (const candidate of ["../../package.json", "./package.json"]) {
-    try {
-      const pkg = JSON.parse(readFileSync(candidate, "utf-8"));
-      if (pkg.name === "homarr") return pkg.version as string;
-    } catch {}
-  }
-  return "unknown";
-})();
-
 // Package path does not work... so we need to use relative path
 const withNextIntl = createNextIntlPlugin({
   requestConfig: "../../packages/translation/src/request.ts",
@@ -27,7 +15,7 @@ const withNextIntl = createNextIntlPlugin({
 
 const nextConfig: NextConfig = {
   env: {
-    HOMARR_VERSION: homarrVersion,
+    HOMARR_VERSION: process.env.HOMARR_VERSION ?? "unknown",
   },
   output: "standalone",
   reactStrictMode: true,
@@ -43,9 +31,19 @@ const nextConfig: NextConfig = {
   experimental: {
     optimizePackageImports: ["@mantine/core", "@mantine/hooks", "@tabler/icons-react"],
     turbopackFileSystemCacheForDev: true,
-    preloadEntriesOnStart: false,
     webpackMemoryOptimizations: true,
   },
+  turbopack: {
+    // ponytail: known Turbopack NFT warning from path.join(process.cwd(), …) in
+    // src/app/api/backup/{route,shared}.ts. No working placement in 16.2.x
+    // (see vercel/next.js#95125). Suppress until upstream fix lands.
+    ignoreIssue: [
+      {
+        path: "**/*",
+        title: "Encountered unexpected file in NFT list",
+      },
+    ],
+  },
   transpilePackages: ["@homarr/ui", "@homarr/notifications", "@homarr/modals", "@homarr/spotlight", "@homarr/widgets"],
   images: {
     localPatterns: [

apps/nextjs/package.json

@@ -4,7 +4,7 @@
   "private": true,
   "type": "module",
   "scripts": {
-    "build": "pnpm with-env next build",
+    "build": "HOMARR_VERSION=$(node -p \"require('../../package.json').version\") pnpm with-env next build",
     "clean": "git clean -xdf .next .turbo node_modules",
     "dev": "pnpm with-env next dev",
     "format": "oxfmt .",

apps/nextjs/src/app/[locale]/_client-providers/trpc.tsx

@@ -24,6 +24,7 @@ import type { AppRouter } from "@homarr/api";
 import { clientApi } from "@homarr/api/client";
 import {
   isPersistableWidgetQueryKey,
+  queryCacheBuster,
   queryCacheDefaultGcTimeMs,
   queryCacheDefaultRefetchIntervalMs,
   queryCacheDefaultStaleTimeMs,
@@ -136,6 +137,7 @@ export function TRPCReactProvider(props: PropsWithChildren) {
         client={queryClient}
         persistOptions={{
           persister,
+          buster: queryCacheBuster,
           maxAge: queryCacheDefaultGcTimeMs,
           dehydrateOptions: {
             shouldDehydrateQuery: (query) =>

apps/nextjs/src/app/[locale]/boards/(content)/_creator.tsx

@@ -7,6 +7,8 @@ import "~/styles/gridstack.scss";
 
 import { dehydrate, HydrationBoundary } from "@tanstack/react-query";
 import type { PersistedClient } from "@tanstack/react-query-persist-client";
+import superjson from "superjson";
+import { queryCacheBuster } from "@homarr/api/query-cache";
 import { getQueryClient } from "@homarr/api/server";
 import { IntegrationProvider } from "@homarr/auth/client";
 import { auth } from "@homarr/auth/next";
@@ -121,7 +123,8 @@ async function QueryCacheHydration({ userId, boardId }: { userId: string; boardI
     const serialized = await getQueryCacheAsync(userId, boardId);
     if (!serialized) return null;
 
-    const persisted = JSON.parse(serialized) as PersistedClient;
+    const persisted = superjson.parse<PersistedClient>(serialized);
+    if (persisted.buster !== queryCacheBuster) return null;
     if (!persisted?.clientState?.queries?.length) return null;
 
     return <HydrationBoundary state={persisted.clientState} />;

apps/nextjs/src/app/[locale]/widgets/[kind]/_content.tsx

@@ -37,8 +37,8 @@ export const WidgetPreviewPageContent = ({ kind, integrationData }: WidgetPrevie
   const currentDefinition = useMemo(() => widgetImports[kind].definition, [kind]);
   const [editMode, setEditMode] = useState(false);
   const [dimensions, setDimensions] = useState<Dimensions>({
-    width: 128,
-    height: 128,
+    width: 960,
+    height: 640,
   });
   const [state, setState] = useState<{
     options: Record<string, unknown>;

apps/nextjs/src/app/api/backup/shared.ts

@@ -1,11 +1,13 @@
 import fs from "fs";
 import path from "path";
 
-const migrationsFolderCandidates = [
-  path.join(process.cwd(), "db/migrations/sqlite"),
-  path.join(process.cwd(), "packages/db/migrations/sqlite"),
-  path.resolve(process.cwd(), "../../db/migrations/sqlite"),
-  "/app/db/migrations/sqlite",
-];
-
-export const findMigrationsFolder = () => migrationsFolderCandidates.find((candidate) => fs.existsSync(candidate));
+export const findMigrationsFolder = () => {
+  const cwd = process.cwd();
+  const migrationsFolderCandidates = [
+    path.join(cwd, "db/migrations/sqlite"),
+    path.join(cwd, "packages/db/migrations/sqlite"),
+    path.resolve(cwd, "../../db/migrations/sqlite"),
+    "/app/db/migrations/sqlite",
+  ];
+  return migrationsFolderCandidates.find((candidate) => fs.existsSync(candidate));
+};

apps/nextjs/src/components/layout/header.tsx

@@ -18,7 +18,7 @@ interface Props {
 
 export const MainHeader = ({ logo, actions, hasNavigation = true }: Props) => {
   return (
-    <AppShellHeader maw="100vw" style={{ overflowX: "hidden" }}>
+    <AppShellHeader maw="100vw" zIndex={201} style={{ overflowX: "hidden" }}>
       <Group h="100%" gap="xl" px="md" justify="apart" wrap="nowrap">
         <Group h="100%" align="center" style={{ flex: 1 }} wrap="nowrap">
           {hasNavigation && <ClientBurger />}

deployments/prebuilt-debian/package.json

@@ -2,7 +2,7 @@
   "name": "homarr-prebuilt-debian",
   "private": true,
   "dependencies": {
-    "better-sqlite3": "^12.10.0"
+    "better-sqlite3": "^12.11.1"
   },
   "engines": {
     "node": ">=24.18.0",

deployments/prebuilt-debian/pnpm-lock.yaml

@@ -9,16 +9,16 @@ importers:
   .:
     dependencies:
       better-sqlite3:
-        specifier: ^12.10.0
-        version: 12.10.0
+        specifier: ^12.11.1
+        version: 12.11.1
 
 packages:
 
   base64-js@1.5.1:
     resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
 
-  better-sqlite3@12.10.0:
-    resolution: {integrity: sha512-CyzaZRQKyHkB2ZInfTTl2nvT33EbDpjkLEbE8/Zck3Ll6O0qqvuGdrJ45HgtH+HykRg88ITY3AdreBGN70aBSQ==}
+  better-sqlite3@12.11.1:
+    resolution: {integrity: sha512-dq9AtApgg5PGFtBzPFSBl3HZQjHok5gaQCM6zh2Yk0aSmDCs1CbnVI8/HgASQkNKsWFpseIO9beg5xxpYhbIfA==}
     engines: {node: 20.x || 22.x || 23.x || 24.x || 25.x || 26.x}
 
   bindings@1.5.0:
@@ -148,7 +148,7 @@ snapshots:
 
   base64-js@1.5.1: {}
 
-  better-sqlite3@12.10.0:
+  better-sqlite3@12.11.1:
     dependencies:
       bindings: 1.5.0
       prebuild-install: 7.1.3

package.json

@@ -1,6 +1,6 @@
 {
   "name": "homarr",
-  "version": "1.69.0",
+  "version": "1.69.2",
   "private": true,
   "scripts": {
     "build": "cross-env CI=true turbo build",
@@ -43,6 +43,7 @@
     "@semantic-release/release-notes-generator": "catalog:",
     "@testcontainers/redis": "catalog:",
     "@turbo/gen": "catalog:",
+
     "@vitejs/plugin-react": "catalog:",
     "@vitest/coverage-v8": "catalog:",
     "@vitest/ui": "catalog:",

packages/api/src/query-cache.ts

@@ -5,6 +5,7 @@ export const queryCacheDefaultRefetchIntervalMs = 30_000;
 export const queryCacheDefaultGcTimeMs = 1000 * 60 * 60 * 24;
 export const queryCacheMaxValueBytes = 1024 * 1024;
 export const queryCacheStoragePrefix = "homarr-widget-query";
+export const queryCacheBuster = "v2-superjson";
 
 let activeQueryCacheBoardId: string | null = null;
 

packages/api/src/router/query-cache.ts

@@ -5,7 +5,7 @@ import { boards } from "@homarr/db/schema";
 import { removeQueryCacheAsync, setQueryCacheAsync } from "@homarr/redis";
 
 import { queryCacheDefaultGcTimeMs, queryCacheMaxValueBytes } from "../query-cache";
-import { createTRPCRouter, publicProcedure } from "../trpc";
+import { createTRPCRouter, internalProcedure } from "../trpc";
 import { throwIfActionForbiddenAsync } from "./board/board-access";
 
 const queryCacheBoardInput = z.object({
@@ -21,7 +21,7 @@ const validateBoardAccessAsync = async (ctx: Parameters<typeof throwIfActionForb
 };
 
 export const queryCacheRouter = createTRPCRouter({
-  setItem: publicProcedure.input(queryCacheSetInput).mutation(async ({ ctx, input }) => {
+  setItem: internalProcedure.input(queryCacheSetInput).mutation(async ({ ctx, input }) => {
     await validateBoardAccessAsync(ctx, input.boardId);
     const userId = ctx.session?.user.id ?? "anonymous";
     return {
@@ -34,7 +34,7 @@ export const queryCacheRouter = createTRPCRouter({
       ),
     };
   }),
-  removeItem: publicProcedure.input(queryCacheBoardInput).mutation(async ({ ctx, input }) => {
+  removeItem: internalProcedure.input(queryCacheBoardInput).mutation(async ({ ctx, input }) => {
     await validateBoardAccessAsync(ctx, input.boardId);
     const userId = ctx.session?.user.id ?? "anonymous";
     await removeQueryCacheAsync(userId, input.boardId);

packages/api/src/trpc.ts

@@ -116,6 +116,8 @@ const baseProcedure = env.DEMO_MODE ? t.procedure.use(enforceDemoModeReadOnly) :
  */
 export const publicProcedure = baseProcedure;
 
+export const internalProcedure = t.procedure;
+
 const enforceUserIsAuthed = t.middleware(({ ctx, next }) => {
   if (!ctx.session?.user) {
     throw new TRPCError({ code: "UNAUTHORIZED" });

packages/common/src/cookie.ts

@@ -6,5 +6,5 @@ export function parseCookies(cookieString: string) {
 }
 
 export function setClientCookie(name: string, value: string, options: SerializeOptions = {}) {
-  document.cookie = stringifySetCookie(name, value, options);
+  document.cookie = stringifySetCookie({ name, value, ...options });
 }

packages/common/src/errors/http/handlers/axios-http-error-handler.ts

@@ -25,7 +25,7 @@ export class AxiosHttpErrorHandler extends HttpErrorHandler {
 
     return new RequestError(requestErrorInput, {
       cause: error,
-    });
+    }) as AnyRequestError;
   }
   handleResponseError(error: unknown): ResponseError | undefined {
     if (!(error instanceof AxiosError)) return undefined;

packages/common/src/errors/http/handlers/fetch-http-error-handler.ts

@@ -20,7 +20,7 @@ export class FetchHttpErrorHandler extends HttpErrorHandler {
     const result = matchErrorCode(error.cause.code);
     if (!result) return undefined;
 
-    return new RequestError(result, { cause: error });
+    return new RequestError(result, { cause: error }) as AnyRequestError;
   }
 
   /**
@@ -59,7 +59,7 @@ export const matchErrorCode = (code: string): AnyRequestErrorInput | undefined =
       type: key,
       reason: found[0] as RequestErrorReason<typeof key>,
       code: code as RequestErrorCode,
-    };
+    } as AnyRequestErrorInput;
   }
 
   return undefined;

packages/common/src/errors/http/handlers/node-fetch-http-error-handler.ts

@@ -30,7 +30,7 @@ export class NodeFetchHttpErrorHandler extends HttpErrorHandler {
 
     return new RequestError(requestErrorInput, {
       cause: error,
-    });
+    }) as AnyRequestError;
   }
 
   /**

packages/db/migrations/mysql/0042_add_widget_secret.sql

@@ -0,0 +1,9 @@
+CREATE TABLE `widget_secret` (
+	`item_id` varchar(64) NOT NULL,
+	`kind` varchar(64) NOT NULL,
+	`value` text NOT NULL,
+	`updated_at` timestamp NOT NULL,
+	CONSTRAINT `widget_secret_item_id_kind_pk` PRIMARY KEY(`item_id`,`kind`)
+);
+--> statement-breakpoint
+ALTER TABLE `widget_secret` ADD CONSTRAINT `widget_secret_item_id_item_id_fk` FOREIGN KEY (`item_id`) REFERENCES `item`(`id`) ON DELETE cascade ON UPDATE no action;

packages/db/migrations/mysql/meta/_journal.json

@@ -295,6 +295,13 @@
       "when": 1780764500000,
       "tag": "0041_merge_custom_widget_url",
       "breakpoints": true
+    },
+    {
+      "idx": 42,
+      "version": "5",
+      "when": 1783176100870,
+      "tag": "0042_add_widget_secret",
+      "breakpoints": true
     }
   ]
 }

packages/db/migrations/postgresql/0008_add_widget_secret.sql

@@ -0,0 +1,9 @@
+CREATE TABLE "widget_secret" (
+	"item_id" varchar(64) NOT NULL,
+	"kind" varchar(64) NOT NULL,
+	"value" text NOT NULL,
+	"updated_at" timestamp NOT NULL,
+	CONSTRAINT "widget_secret_item_id_kind_pk" PRIMARY KEY("item_id","kind")
+);
+--> statement-breakpoint
+ALTER TABLE "widget_secret" ADD CONSTRAINT "widget_secret_item_id_item_id_fk" FOREIGN KEY ("item_id") REFERENCES "public"."item"("id") ON DELETE cascade ON UPDATE no action;

packages/db/migrations/postgresql/meta/_journal.json

@@ -57,6 +57,13 @@
       "when": 1780764500000,
       "tag": "0007_merge_custom_widget_url",
       "breakpoints": true
+    },
+    {
+      "idx": 8,
+      "version": "7",
+      "when": 1783176100870,
+      "tag": "0008_add_widget_secret",
+      "breakpoints": true
     }
   ]
 }

packages/db/migrations/sqlite/0040_add_widget_secret.sql

@@ -0,0 +1,8 @@
+CREATE TABLE `widget_secret` (
+	`item_id` text NOT NULL,
+	`kind` text NOT NULL,
+	`value` text NOT NULL,
+	`updated_at` integer NOT NULL,
+	PRIMARY KEY(`item_id`, `kind`),
+	FOREIGN KEY (`item_id`) REFERENCES `item`(`id`) ON UPDATE no action ON DELETE cascade
+);

packages/db/migrations/sqlite/meta/_journal.json

@@ -281,6 +281,13 @@
       "when": 1780764500000,
       "tag": "0039_merge_custom_widget_url",
       "breakpoints": true
+    },
+    {
+      "idx": 40,
+      "version": "6",
+      "when": 1783176100870,
+      "tag": "0040_add_widget_secret",
+      "breakpoints": true
     }
   ]
 }

packages/forms-collection/src/new-app/_form.tsx

@@ -72,7 +72,14 @@ export const AppForm = ({
     }
 
     form.initialize(toFormValues(initialValues));
-  }, [initialValuesKey, form, initialValues]);
+    // `form` is a new object every render (Mantine useForm returns a fresh literal),
+    // so it must not be a dep here — it would re-run every render and, since
+    // form.initialize() always calls clearErrors() (new {} object) internally,
+    // trigger an infinite update loop. initialValuesKey (a primitive string)
+    // already captures the only case this effect exists for: re-initializing
+    // when initialValues actually changes (e.g. navigating between edit pages).
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [initialValuesKey]);
 
   // Debounce the name value with 200ms delay
   const [debouncedName] = useDebouncedValue(form.values.name, 200);

packages/request-handler/src/lib/request-handler.ts

@@ -6,12 +6,9 @@ interface Options<TData, TInput extends Record<string, unknown>> {
 type CacheEntry<TData> = { data: TData; timestamp: Date; expiresAt: number };
 
 const MAX_CACHE_SIZE = 1000;
-const cache = new Map<string, CacheEntry<unknown>>();
-const inflight = new Map<string, Promise<CacheEntry<unknown>>>();
-
 const DEFAULT_TTL_MS = 10_000;
 
-const evictExpired = () => {
+const evictExpired = <TData>(cache: Map<string, CacheEntry<TData>>) => {
   const now = Date.now();
   for (const [key, entry] of cache) {
     if (now >= entry.expiresAt) cache.delete(key);
@@ -20,41 +17,46 @@ const evictExpired = () => {
 
 export const createRequestHandler = <TData, TInput extends Record<string, unknown>>(
   options: Options<TData, TInput>,
-) => ({
-  handler: (input: TInput) => ({
-    async getDataAsync(): Promise<{ data: TData; timestamp: Date }> {
-      const ttl = options.cacheTtlMs ?? DEFAULT_TTL_MS;
-      const key = JSON.stringify(input);
+) => {
+  const cache = new Map<string, CacheEntry<TData>>();
+  const inflight = new Map<string, Promise<CacheEntry<TData>>>();
 
-      const cached = cache.get(key) as CacheEntry<TData> | undefined;
-      if (cached && Date.now() < cached.expiresAt) {
-        return { data: cached.data, timestamp: cached.timestamp };
-      }
-      if (cached) cache.delete(key);
+  return {
+    handler: (input: TInput) => ({
+      async getDataAsync(): Promise<{ data: TData; timestamp: Date }> {
+        const ttl = options.cacheTtlMs ?? DEFAULT_TTL_MS;
+        const key = JSON.stringify(input);
 
-      const existing = inflight.get(key);
-      if (existing) return existing as Promise<CacheEntry<TData>>;
+        const cached = cache.get(key);
+        if (cached && Date.now() < cached.expiresAt) {
+          return { data: cached.data, timestamp: cached.timestamp };
+        }
+        if (cached) cache.delete(key);
 
-      const promise = options
-        .requestAsync(input)
-        .then((data) => {
-          if (cache.size >= MAX_CACHE_SIZE) evictExpired();
-          if (cache.size >= MAX_CACHE_SIZE) {
-            const oldest = cache.keys().next().value;
-            if (oldest) cache.delete(oldest);
-          }
-          const entry: CacheEntry<TData> = { data, timestamp: new Date(), expiresAt: Date.now() + ttl };
-          cache.set(key, entry as CacheEntry<unknown>);
-          inflight.delete(key);
-          return entry;
-        })
-        .catch((err) => {
-          inflight.delete(key);
-          throw err;
-        });
+        const existing = inflight.get(key);
+        if (existing) return existing;
 
-      inflight.set(key, promise as Promise<CacheEntry<unknown>>);
-      return promise;
-    },
-  }),
-});
+        const promise = options
+          .requestAsync(input)
+          .then((data) => {
+            if (cache.size >= MAX_CACHE_SIZE) evictExpired(cache);
+            if (cache.size >= MAX_CACHE_SIZE) {
+              const oldest = cache.keys().next().value;
+              if (oldest) cache.delete(oldest);
+            }
+            const entry: CacheEntry<TData> = { data, timestamp: new Date(), expiresAt: Date.now() + ttl };
+            cache.set(key, entry);
+            inflight.delete(key);
+            return entry;
+          })
+          .catch((err) => {
+            inflight.delete(key);
+            throw err;
+          });
+
+        inflight.set(key, promise);
+        return promise;
+      },
+    }),
+  };
+};

packages/translation/src/lang/fr.json

@@ -732,8 +732,8 @@
       "displayType": "",
       "jsonPath": "",
       "jsonPathHint": "",
-      "label": "",
-      "unit": "",
+      "label": "Étiquette",
+      "unit": "Unité",
       "mappings": "",
       "tablePath": "",
       "tablePathHint": "",
@@ -755,14 +755,14 @@
       "striped": "",
       "compact": "",
       "maxHeight": "",
-      "color": "",
+      "color": "Couleur",
       "buttonLabel": "",
       "buttonColor": "",
-      "confirmText": "",
+      "confirmText": "Texte de confirmation",
       "confirmTextHint": "",
-      "successMessage": "",
+      "successMessage": "Message de réussite",
       "successMessageHint": "",
-      "enabled": "",
+      "enabled": "Activé",
       "template": {
         "label": "",
         "description": ""
@@ -1017,13 +1017,13 @@
       "timetable": "",
       "photoService": "",
       "documents": "",
-      "notes": "",
-      "mediaMonitoring": "",
-      "speedtest": "",
+      "notes": "Notes",
+      "mediaMonitoring": "Supervision",
+      "speedtest": "Test de débit",
       "analytics": "",
       "vpn": "",
-      "mediaLibrary": "",
-      "uptimeMonitoring": ""
+      "mediaLibrary": "Bibliothèque de médias",
+      "uptimeMonitoring": "Surveillance des disponibilités"
     },
     "testConnection": {
       "action": {
@@ -1298,7 +1298,7 @@
           "newLabel": "Nouvelle clé privée"
         },
         "slug": {
-          "label": "",
+          "label": "Slug de la page de statut",
           "newLabel": ""
         }
       }

packages/translation/src/lang/it.json

@@ -1599,7 +1599,7 @@
     "menu": {
       "label": {
         "settings": "Impostazioni",
-        "refresh": "",
+        "refresh": "Aggiorna",
         "options": "Opzioni",
         "actions": "Azioni"
       }
@@ -1904,7 +1904,7 @@
       "noStation": "Nessuna stazione selezionata",
       "option": {
         "baseUrl": {
-          "label": ""
+          "label": "Url Search.ch"
         },
         "station": {
           "label": "Stazione"
@@ -2791,8 +2791,8 @@
           "description": "Visualizza la data dell'immagine e l'indice corrente nella parte inferiore della presentazione"
         },
         "randomizePhotos": {
-          "label": "",
-          "description": ""
+          "label": "Immagini casuali",
+          "description": "Mostra le foto in ordine casuale invece di iniziare sempre con lo stesso ordine degli album."
         }
       },
       "description": "Presentazione delle immagini nel tuo album Immich",
@@ -3158,7 +3158,7 @@
             "label": "Provider"
           },
           "providerUrl": {
-            "label": ""
+            "label": "URL Provider"
           },
           "identifier": {
             "label": "Identificatore",
@@ -3209,10 +3209,10 @@
             "tooltip": "Impossibile analizzare il provider, impostarlo manualmente dopo aver importato le immagini"
           },
           "tokens": {
-            "label": "",
-            "token": "",
-            "configured": "",
-            "notConfigured": "",
+            "label": "Token Provider",
+            "token": "Token",
+            "configured": "Token configurato",
+            "notConfigured": "Nessun token impostato",
             "save": "Salva"
           }
         }
@@ -3236,9 +3236,9 @@
           "invalidIdentifier": "Identificatore non valido",
           "noMatchingVersion": "Nessuna versione corrispondente trovata",
           "noReleasesFound": "Nessun rilascio trovato",
-          "noProviderSelected": "",
+          "noProviderSelected": "Nessun provider selezionato",
           "noProviderResponse": "Nessuna risposta dal provider",
-          "unexpected": ""
+          "unexpected": "Errore provider inaspettato"
         }
       }
     },

packages/translation/src/lang/lv.json

@@ -6,9 +6,9 @@
         "subtitle": "",
         "description": "",
         "action": {
-          "scratch": "",
+          "scratch": "Sākt no jauna",
           "importOldmarr": "",
-          "restoreSqlite": "",
+          "restoreSqlite": "SQLite rezerves kopija",
           "restoreSqliteDescription": "",
           "backToOptions": ""
         }
@@ -26,19 +26,19 @@
           }
         },
         "importSettings": {
-          "title": "",
+          "title": "Importēt iestatījumus",
           "description": ""
         },
         "boardSelection": {
           "title": "",
           "description": "",
           "action": {
-            "selectAll": "",
+            "selectAll": "Atzīmēt visu",
             "unselectAll": ""
           }
         },
         "summary": {
-          "title": "",
+          "title": "Importēšanas kopsavilkums",
           "description": "",
           "action": {
             "import": ""
@@ -46,7 +46,7 @@
           "entities": {
             "apps": "Lietotnes",
             "boards": "Dēļi",
-            "integrations": "",
+            "integrations": "Integrācijas",
             "credentialUsers": ""
           }
         },
@@ -67,15 +67,15 @@
         }
       },
       "user": {
-        "title": "",
+        "title": "Administratora lietotājs",
         "subtitle": "",
         "notification": {
           "success": {
-            "title": "",
+            "title": "Lietotājs izveidots",
             "message": ""
           },
           "error": {
-            "title": ""
+            "title": "Lietotāja izveide neizdevās"
           }
         }
       },
@@ -94,19 +94,19 @@
         "subtitle": ""
       },
       "integrations": {
-        "title": "",
+        "title": "Integrācijas",
         "subtitle": "",
         "description": "",
         "action": {
-          "continue": "",
-          "skip": ""
+          "continue": "Turpināt",
+          "skip": "Pagaidām izlaist šo soli"
         },
         "configure": {
-          "progress": "",
-          "skip": "",
+          "progress": "{current} no {total}",
+          "skip": "Izlaist šo integrāciju",
           "finishing": "",
           "error": {
-            "title": "",
+            "title": "Neizdevās iestatīt!",
             "message": ""
           },
           "helpers": {
@@ -115,7 +115,7 @@
           }
         },
         "urlTemplate": {
-          "label": "",
+          "label": "Bāzes URL",
           "placeholder": "",
           "hint": "",
           "warning": "",
@@ -136,14 +136,14 @@
         }
       },
       "finish": {
-        "title": "",
+        "title": "Pabeigt Iestatīšanu",
         "subtitle": "",
         "description": "",
         "action": {
           "goToBoard": "",
           "createBoard": "",
-          "inviteUser": "",
-          "docs": ""
+          "inviteUser": "Ielūgt citus lietotājus",
+          "docs": "Lasīt dokumentāciju"
         }
       }
     },
@@ -158,7 +158,7 @@
         "subtitle": ""
       },
       "invite": {
-        "title": "",
+        "title": "Pievienoties Homarr",
         "subtitle": "",
         "description": ""
       },
@@ -177,20 +177,20 @@
       },
       "password": {
         "label": "Parole",
-        "suggestionsTitle": "",
+        "suggestionsTitle": "Paroles ieteikumi",
         "suggestion": {
-          "length": "",
+          "length": "Vismaz 8 rakstzīmes",
           "lowercase": "Ietver mazo burtu",
           "uppercase": "Ietver lielo burtu",
           "number": "Ietver numuru",
-          "special": ""
+          "special": "Iekļauj speciālo simbolu"
         }
       },
       "passwordConfirm": {
         "label": "Apstipriniet paroli"
       },
       "previousPassword": {
-        "label": ""
+        "label": "Iepriekšējā parole"
       },
       "homeBoard": {
         "label": ""
@@ -218,10 +218,10 @@
         "notification": {
           "success": {
             "title": "",
-            "message": ""
+            "message": "Jūs esat veiksmīgi pieteicies"
           },
           "error": {
-            "title": "",
+            "title": "Pieteikšanās neizdevās",
             "message": ""
           }
         },
@@ -245,13 +245,13 @@
       },
       "create": "Izveidot lietotāju",
       "changePassword": {
-        "label": "",
+        "label": "Mainīt paroli",
         "notification": {
           "success": {
-            "message": ""
+            "message": "Parole veiksmīgi nomainīta."
           },
           "error": {
-            "message": ""
+            "message": "Nav iespējams nomainīt paroli"
           }
         }
       },
@@ -595,12 +595,12 @@
       }
     },
     "defaultGroup": {
-      "name": "",
+      "name": "Noklusētā grupa",
       "description": ""
     }
   },
   "app": {
-    "search": "",
+    "search": "Atrast aplikāciju",
     "page": {
       "list": {
         "title": "Lietotnes",
@@ -689,7 +689,7 @@
       "list": {
         "title": "",
         "noResults": "",
-        "loading": ""
+        "loading": "Notiek ielāde..."
       },
       "create": {
         "title": "",
@@ -700,7 +700,7 @@
       }
     },
     "action": {
-      "create": "",
+      "create": "Izveidot",
       "import": "",
       "save": "",
       "delete": "",

packages/translation/src/lang/pl.json

@@ -1599,7 +1599,7 @@
     "menu": {
       "label": {
         "settings": "Ustawienia",
-        "refresh": "",
+        "refresh": "Odśwież",
         "options": "Opcje",
         "actions": "Akcje"
       }
@@ -1904,7 +1904,7 @@
       "noStation": "Nie wybrano stacji",
       "option": {
         "baseUrl": {
-          "label": ""
+          "label": "Szukaj adresu URL"
         },
         "station": {
           "label": "Stacja"
@@ -2791,8 +2791,8 @@
           "description": "Wyświetl datę zdjęcia oraz bieżący indeks na dole pokazu slajdów"
         },
         "randomizePhotos": {
-          "label": "",
-          "description": ""
+          "label": "Losowe zdjęcia",
+          "description": "Pokaż zdjęcia w losowej kolejności, zamiast zawsze rozpoczynać się od tej samej kolejności albumu."
         }
       },
       "description": "Pokaz slajdów zdjęć z Twojego albumu w Immich",
@@ -3158,7 +3158,7 @@
             "label": "Dostawca"
           },
           "providerUrl": {
-            "label": ""
+            "label": "URL dostawcy"
           },
           "identifier": {
             "label": "Identyfikator",
@@ -3209,11 +3209,11 @@
             "tooltip": "Nie udało się rozpoznać dostawcy. Ustaw go ręcznie po zaimportowaniu obrazów."
           },
           "tokens": {
-            "label": "",
-            "token": "",
-            "configured": "",
-            "notConfigured": "",
-            "save": ""
+            "label": "Tokeny dostawcy",
+            "token": "Token",
+            "configured": "Token skonfigurowany",
+            "notConfigured": "Brak ustawionych tokenów",
+            "save": "Zapisz"
           }
         }
       },
@@ -3236,9 +3236,9 @@
           "invalidIdentifier": "Nieprawidłowy identyfikator",
           "noMatchingVersion": "Nie znaleziono pasującej wersji",
           "noReleasesFound": "Nie znaleziono wydań!",
-          "noProviderSelected": "",
+          "noProviderSelected": "Nie wybrano dostawcy",
           "noProviderResponse": "Brak odpowiedzi od dostawcy",
-          "unexpected": ""
+          "unexpected": "Nieoczekiwany błąd dostawcy"
         }
       }
     },

packages/translation/src/lang/uk.json

@@ -3132,7 +3132,7 @@
           "label": ""
         },
         "showOnlyIcon": {
-          "label": ""
+          "label": "Показати тільки іконку"
         },
         "topReleases": {
           "label": "",
@@ -3229,7 +3229,7 @@
       "openReleasePage": "",
       "releaseDescription": "",
       "projectDescription": "",
-      "created": "",
+      "created": "Створено",
       "error": {
         "label": "",
         "messages": {
@@ -3350,7 +3350,7 @@
           "label": ""
         }
       },
-      "latestResult": "",
+      "latestResult": "Останній результат",
       "averages": "",
       "tests": "",
       "recentResults": "",
@@ -3437,7 +3437,7 @@
           "description": ""
         },
         "maxNowPlayingItems": {
-          "label": "",
+          "label": "Максимум елементів для відтворення",
           "description": ""
         },
         "showLibraryCount": {

packages/widgets/src/_inputs/widget-multiReleasesRepositories-input.tsx

@@ -50,6 +50,7 @@ import {
 } from "@homarr/definitions";
 import { findBestIconMatch, IconPicker } from "@homarr/forms-collection";
 import { createModal, useModalAction } from "@homarr/modals";
+import { showErrorNotification } from "@homarr/notifications";
 import { useScopedI18n } from "@homarr/translation/client";
 import { MaskedImage } from "@homarr/ui";
 
@@ -269,8 +270,24 @@ const providersWithAuth: ReleaseProviderKind[] = [
 const ProviderTokensSection = ({ itemId, repositories }: { itemId: string; repositories: ReleasesRepository[] }) => {
   const tRepository = useScopedI18n("widget.releases.option.repositories");
   const { data: configuredKinds = [], refetch } = clientApi.widget.secrets.getConfiguredKinds.useQuery({ itemId });
-  const setSecret = clientApi.widget.secrets.setSecret.useMutation({ onSuccess: () => refetch() });
-  const deleteSecret = clientApi.widget.secrets.deleteSecret.useMutation({ onSuccess: () => refetch() });
+  const setSecret = clientApi.widget.secrets.setSecret.useMutation({
+    onSuccess: () => refetch(),
+    onError: (error) => {
+      showErrorNotification({
+        title: "Failed to save token",
+        message: error.message,
+      });
+    },
+  });
+  const deleteSecret = clientApi.widget.secrets.deleteSecret.useMutation({
+    onSuccess: () => refetch(),
+    onError: (error) => {
+      showErrorNotification({
+        title: "Failed to delete token",
+        message: error.message,
+      });
+    },
+  });
 
   const authProviders = useMemo(() => {
     const usedProviders = repositories.map((r) => r.provider).filter((p): p is ReleaseProviderKind => p !== undefined);

pnpm-workspace.yaml

@@ -14,7 +14,7 @@ catalog:
   "@dnd-kit/utilities": ^3.2.2
   "@drizzle-team/brocli": ^0.12.0
   "@extractus/feed-extractor": 7.2.1
-  '@gfazioli/mantine-onboarding-tour': ^4.0.6
+  "@gfazioli/mantine-onboarding-tour": ^4.0.6
   "@gitbeaker/rest": ^43.8.0
   "@homarr/gridstack": ^1.12.0
   "@homarr/node-unifi": ^2.6.0
@@ -40,19 +40,19 @@ catalog:
   "@semantic-release/changelog": ^6.0.3
   "@semantic-release/commit-analyzer": ^13.0.1
   "@semantic-release/git": ^10.0.1
-  "@semantic-release/github": ^12.0.8
+  "@semantic-release/github": ^12.0.9
   "@semantic-release/npm": ^13.1.5
   "@semantic-release/release-notes-generator": ^14.1.1
   "@t3-oss/env-nextjs": ^0.13.11
   "@tabler/icons-react": ^3.44.0
-  "@tanstack/query-async-storage-persister": ^5.101.0
-  "@tanstack/react-query": ^5.101.0
-  "@tanstack/react-query-devtools": ^5.101.0
-  "@tanstack/react-query-next-experimental": ^5.101.0
-  "@tanstack/react-query-persist-client": ^5.101.0
-  "@testcontainers/mysql": ^12.0.3
-  "@testcontainers/postgresql": ^12.0.3
-  "@testcontainers/redis": ^12.0.3
+  "@tanstack/query-async-storage-persister": ^5.101.2
+  "@tanstack/react-query": ^5.101.2
+  "@tanstack/react-query-devtools": ^5.101.2
+  "@tanstack/react-query-next-experimental": ^5.101.2
+  "@tanstack/react-query-persist-client": ^5.101.2
+  "@testcontainers/mysql": ^12.0.4
+  "@testcontainers/postgresql": ^12.0.4
+  "@testcontainers/redis": ^12.0.4
   "@tiptap/extension-color": 3.27.1
   "@tiptap/extension-highlight": 3.27.1
   "@tiptap/extension-image": 3.27.1
@@ -69,12 +69,12 @@ catalog:
   "@tiptap/extension-underline": 3.27.1
   "@tiptap/react": ^3.27.1
   "@tiptap/starter-kit": ^3.27.1
-  "@trpc/client": ^11.17.0
-  "@trpc/next": ^11.17.0
-  "@trpc/react-query": ^11.17.0
-  "@trpc/server": ^11.17.0
-  "@trpc/tanstack-react-query": ^11.17.0
-  "@turbo/gen": ^2.10.0
+  "@trpc/client": ^11.18.0
+  "@trpc/next": ^11.18.0
+  "@trpc/react-query": ^11.18.0
+  "@trpc/server": ^11.18.0
+  "@trpc/tanstack-react-query": ^11.18.0
+  "@turbo/gen": ^2.10.2
   "@types/adm-zip": 0.5.8
   "@types/bcrypt": 6.0.0
   "@types/better-sqlite3": 7.6.13
@@ -89,29 +89,29 @@ catalog:
   "@types/prismjs": ^1.26.6
   "@types/react": 19.2.17
   "@types/react-dom": 19.2.3
-  "@scalar/api-reference-react": ^0.9.49
+  "@scalar/api-reference-react": ^0.9.50
   "@types/video.js": ^7.3.58
   "@types/ws": ^8.18.1
   "@types/xml2js": ^0.4.14
-  posthog-js: ^1.395.0
-  posthog-node: ^4.18.0
+  posthog-js: ^1.396.4
+  posthog-node: ^5.39.2
   "@vitejs/plugin-react": ^6.0.3
   "@vitest/coverage-v8": ^4.1.9
   "@vitest/ui": ^4.1.9
   "@xterm/addon-canvas": ^0.7.0
   "@xterm/addon-fit": 0.11.0
   "@xterm/xterm": ^6.0.0
-  adm-zip: 0.5.17
+  adm-zip: 0.5.18
   jszip: ^3.10.1
   sql.js: ^1.14.1
   babel-plugin-react-compiler: ^1.0.0
   bcrypt: ^6.0.0
-  better-sqlite3: ^12.10.0
+  better-sqlite3: ^12.11.1
   chroma-js: ^3.2.0
   clsx: ^2.1.1
   concurrently: ^10.0.3
-  conventional-changelog-conventionalcommits: ^9.3.1
-  cookie: 1.1.1
+  conventional-changelog-conventionalcommits: ^10.2.0
+  cookie: 2.0.1
   cookies: ^0.9.1
   croner: 10.0.1
   cross-env: ^10.1.0
@@ -139,7 +139,7 @@ catalog:
   jsonpath-plus: ^10.4.0
   ldapts: 8.1.8
   lodash.clonedeep: ^4.5.0
-  lucide-react: ^1.22.0
+  lucide-react: ^1.23.0
   "mantine-contextmenu": ^9.3.1
   mantine-datatable: ^9.3.1
   mantine-react-table: npm:mantine-react-table-open@9.0.3
@@ -148,11 +148,11 @@ catalog:
   mysql2: 3.22.5
   next: 16.2.9
   next-auth: 5.0.0-beta.31
-  next-intl: 4.13.0
+  next-intl: 4.13.1
   node-loader: ^2.1.0
   octokit: ^5.0.5
-  oxfmt: ^0.56.0
-  oxlint: ^1.71.0
+  oxfmt: ^0.57.0
+  oxlint: ^1.72.0
   pg: ^8.22.0
   postcss-preset-mantine: ^1.18.0
   prismjs: ^1.30.0
@@ -164,22 +164,22 @@ catalog:
   react-markdown: ^10.1.0
   react-quill-new: ^3.8.3
   react-simple-code-editor: ^0.14.1
-  recharts: ^3.9.0
+  recharts: ^3.9.1
   sass: ^1.101.0
   semantic-release: ^25.0.5
   semver-parser: ^4.2.1
   superjson: 2.2.6
   svgson: ^5.3.1
-  testcontainers: ^12.0.3
+  testcontainers: ^12.0.4
   timezones-ical-library: ^2.2.1
   trpc-to-mcp: ^1.3.2
   trpc-to-openapi: ^3.3.0
-  tsdav: ^2.2.2
+  tsdav: ^2.3.0
   tsx: 4.20.4
-  turbo: ^2.10.0
+  turbo: ^2.10.2
   typescript: ^6.0.3
-  vite: ^8.1.0
-  undici: 7.27.2
+  vite: ^8.1.2
+  undici: 7.28.0
   use-deep-compare-effect: ^1.8.1
   video.js: ^8.23.9
   vite-tsconfig-paths: ^6.1.1
@@ -191,6 +191,7 @@ catalog:
   zod: ^4.4.3
   zod-form-data: ^3.0.2
   zod-validation-error: ^5.0.0
+
 catalogMode: strict
 nodeLinker: hoisted
 strictPeerDependencies: false
@@ -205,29 +206,34 @@ minimumReleaseAgeExclude:
   - turbo@2.9.14
   # Renovate security update: form-data@4.0.6
   - form-data@4.0.6
+  # Renovate security update: undici@7.28.0
+  - undici@7.28.0
+  # Renovate security update: esbuild@0.28.1
+  - esbuild@0.28.1
 overrides:
   "@babel/helpers@<7.26.10": ">=7.29.7"
   "@babel/runtime@<7.26.10": ">=7.29.7"
   "axios@>=1.0.0 <1.8.2": ">=1.18.1"
   "brace-expansion@>=2.0.0 <=2.0.1": ">=5.0.7"
   "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.7"
-  "esbuild@<=0.24.2": ">=0.28.0"
+  "esbuild@<=0.24.2": ">=0.28.1"
   "form-data@>=4.0.0 <4.0.4": ">=4.0.6"
   "hono@<4.6.5": ">=4.12.27"
   "linkifyjs@<4.3.2": ">=4.3.3"
   "nanoid@>=4.0.0 <5.0.9": ">=5.1.16"
   "prismjs@<1.30.0": ">=1.30.0"
-  "proxmox-api>undici": "7.27.1"
+  "proxmox-api>undici": "7.28.0"
   "react-is": "^19.2.7"
   "rollup@>=4.0.0 <4.22.4": ">=4.62.2"
   "sha.js@<=2.4.11": ">=2.4.12"
   "tar-fs@>=3.0.0 <3.0.9": ">=3.1.3"
   "tar-fs@>=2.0.0 <2.1.3": ">=3.1.3"
   "tmp@<=0.2.3": ">=0.2.7"
-  "vite@>=5.0.0 <=5.4.18": ">=8.1.0"
+  "vite@>=5.0.0 <=5.4.18": ">=8.1.2"
 patchedDependencies:
   "@types/node-unifi": "patches/@types__node-unifi.patch"
   "trpc-to-openapi": "patches/trpc-to-openapi.patch"
+
 allowUnusedPatches: true
 allowBuilds:
   "@tree-sitter-grammars/tree-sitter-yaml": true