Merge branch 'dev'

Merge branch 'dev' into main
defined notificationSchema outside of class
2026-03-27 18:43:45 +01:00 · 2026-03-24 20:41:22 +01:00 · 2026-03-24 18:11:10 +01:00 · 2026-03-24 14:44:24 +01:00 · 2026-03-23 19:12:42 +01:00 · 2026-03-23 17:25:22 +01:00
302 changed files with 12890 additions and 43673 deletions
@@ -1,191 +0,0 @@
---
-description: Comprehensive Homarr codebase architecture and conventions reference
-alwaysApply: true
---
-
-# Homarr Codebase Context
-
-Homarr is an open-source, self-hosted dashboard for managing homelab services. It integrates with 50+ self-hosted apps (media servers, download clients, DNS, NAS, etc.) and provides a drag-and-drop widget-based UI.
-
-## Tech Stack
-
- **Monorepo**: pnpm workspaces + Turborepo
- **Framework**: Next.js (App Router, `output: "standalone"`) — T3 Stack
- **Language**: TypeScript throughout
- **ORM**: Drizzle (supports SQLite via better-sqlite3, MySQL, PostgreSQL)
- **API**: tRPC (HTTP + WebSocket subscriptions) with superjson + OpenAPI bridge via `trpc-to-openapi`
- **Auth**: NextAuth v5 (database sessions, Credentials/LDAP/OIDC providers)
- **UI**: Mantine v7 (not Tailwind) + Tabler icons
- **State**: Jotai (atoms), TanStack Query (server state via tRPC)
- **Realtime**: WebSocket server (`ws`) for tRPC subscriptions, backed by Redis pub/sub
- **Cron**: `node-cron` in a standalone Fastify service (`apps/tasks`)
- **i18n**: next-intl with `[locale]` dynamic segment (prefix mode: `"never"`, locale from cookie)
- **Testing**: Vitest + jsdom, Playwright for E2E
- **Package manager**: pnpm 10.33.2, Node >= 24.15.0
-
-## Repository Structure
-
-```
-homarr/
-├── apps/
-│   ├── nextjs/          # Main Next.js application (port 3000)
-│   ├── tasks/           # Cron job runner + Fastify tRPC API (port 3002)
-│   └── websocket/       # Standalone tRPC WebSocket server (port 3001)
-├── packages/
-│   ├── api/             # tRPC appRouter, procedures, OpenAPI
-│   ├── auth/            # NextAuth config, providers, session, API keys
-│   ├── db/              # Drizzle schema (3 DB drivers), migrations, queries
-│   ├── core/            # Env validation, DB/Redis driver factories, logging
-│   ├── definitions/     # Domain enums: WidgetKind, IntegrationKind, permissions
-│   ├── widgets/         # All 39 dashboard widgets (definitions + components)
-│   ├── integrations/    # Integration classes (HTTP clients to external apps)
-│   ├── redis/           # Redis pub/sub channels, caching abstractions
-│   ├── translation/     # next-intl setup, locale configs, lang JSON files
-│   ├── ui/              # Shared Mantine components, theme, hooks
-│   ├── validation/      # Shared zod schemas for API/forms
-│   ├── common/          # Shared utilities, IDs, errors
-│   ├── cron-jobs/       # Cron job implementations (25+ jobs)
-│   ├── cron-jobs-core/  # Cron scheduling primitives
-│   ├── cron-job-api/    # tRPC router for job management (start/stop/trigger)
-│   ├── cron-job-status/ # Cron status via Redis
-│   ├── boards/          # Board context, edit mode, cache updater
-│   ├── modals/          # Modal primitives on Mantine
-│   ├── modals-collection/ # Feature modals (apps, boards, docker, etc.)
-│   ├── form/            # useZodForm (Mantine + zod resolver)
-│   ├── forms-collection/# Reusable form UIs (new app, icon picker, upload)
-│   ├── spotlight/       # Command palette / search with multiple modes
-│   ├── request-handler/ # Server request handlers (feeds, integrations)
-│   ├── notifications/   # Mantine notifications wrapper
-│   ├── docker/          # Dockerode-based Docker access
-│   ├── icons/           # Icon DB/repo integration
-│   ├── image-proxy/     # Image proxy + caching
-│   ├── ping/            # Reachability / ping utilities
-│   ├── analytics/       # Server-side analytics (Umami)
-│   ├── server-settings/ # Server setting keys/types
-│   ├── settings/        # User-facing settings UI context
-│   ├── old-import/      # Legacy Homarr import
-│   ├── old-schema/      # Legacy Homarr zod schemas
-│   └── cli/             # Node CLI for ops (brocli)
-├── tooling/
-│   ├── eslint/          # Shared ESLint configs
-│   ├── prettier/        # Shared Prettier config
-│   ├── typescript/      # Base tsconfig
-│   └── github/          # CI setup action
-├── development/         # Dev docker-compose (Redis, MySQL, PostgreSQL)
-├── e2e/                 # E2E test specs
-└── Dockerfile           # Multi-stage production build
-```
-
-## Three Runtime Services
-
-| Service | Port | Role |
-|---------|------|------|
-| Next.js | 3000 | Main web app (SSR + API routes) |
-| WebSocket | 3001 | tRPC subscriptions via `ws` |
-| Tasks | 3002 | Cron job runner + management API via Fastify |
-
-In Docker, nginx listens on **7575** and proxies to all three. The tasks service authenticates via `CRON_JOB_API_KEY` header.
-
-## Package Dependency Layers
-
-1. **Foundation**: `core` (env, DB drivers, Redis client, logging) → no `@homarr` deps
-2. **Domain**: `definitions` → `common` → `core`
-3. **Data**: `db` → `core`, `definitions`, `common`
-4. **Auth**: `auth` → `db`, `definitions`, `core`, `validation`
-5. **Cross-cutting**: `translation`, `validation`, `redis`, `server-settings`
-6. **Feature backends**: `integrations`, `request-handler`, `cron-jobs`, `docker`, `ping`
-7. **API surface**: `api` → pulls in auth, db, redis, integrations, etc.
-8. **UI stack**: `ui`, `modals`, `form`, `notifications`, `boards`, `spotlight`
-9. **Composed features**: `widgets`, `modals-collection`, `forms-collection`
-
-## Key Patterns
-
-### tRPC
-
- **Server caller** (RSC): `import { api } from "@homarr/api/server"` → cached caller with auth context
- **Client hooks**: `import { clientApi } from "@homarr/api/client"` → React Query hooks
- **Router structure**: `packages/api/src/root.ts` defines top-level namespaces (`user`, `board`, `widget`, `integration`, `docker`, `kubernetes`, etc.)
- **Procedures**: `publicProcedure`, `protectedProcedure`, `permissionRequiredProcedure`, `onboardingProcedure`
- **WebSocket subscriptions**: Client uses `wsLink` when `type === "subscription"`, connects to port 3001
-
-### Multi-Database Support
-
-Drizzle schemas exist in three parallel implementations:
- `packages/db/schema/sqlite.ts`
- `packages/db/schema/mysql.ts`
- `packages/db/schema/postgresql.ts`
-
-Selected at runtime via `DB_DRIVER` env (`better-sqlite3` | `mysql2` | `node-postgres`). Migrations are per-engine in `packages/db/migrations/{sqlite,mysql,postgresql}/`.
-
-### Widget System
-
-Widgets are registered in `packages/widgets/src/index.tsx` as `widgetImports` (must satisfy `Record<WidgetKind, ...>`). Each widget:
- Has a `definition` created via `createWidgetDefinition(kind, { icon, createOptions, supportedIntegrations? })`
- Uses `optionsBuilder.from(factory => ({ ... }))` for typed options
- Loads dynamically via `next/dynamic`
- Fetches data via tRPC client hooks (backed by cron job caches)
-
-### Integration System
-
-Integrations are defined in `packages/definitions/src/integration.ts` (`integrationDefs`) and instantiated via `createIntegrationAsync` in `packages/integrations/src/base/creator.ts`. Each extends abstract `Integration` class with `testConnectionAsync` and typed methods.
-
-### Cron Job System
-
-Jobs defined in `packages/cron-jobs/src/jobs/`. Each job:
- Uses `createCronJob` with a cron expression
- Publishes results to Redis channels
- Widget subscriptions consume those channels via tRPC subscriptions
- Job management (start/stop/trigger) via `cronJobApi` HTTP client to port 3002
-
-### Modals
-
-Created with `createModal(component).withOptions({ defaultTitle })` from `@homarr/modals`. Opened via `useModalAction(SomeModal)`. Feature modals live in `packages/modals-collection/`.
-
-### Forms
-
-`useZodForm` from `@homarr/form` wraps Mantine `useForm` with zod validation. Shared form UIs in `packages/forms-collection/`.
-
-### Routing (App Router)
-
- `apps/nextjs/src/app/[locale]/` — all UI routes under locale segment
- Route groups: `(home)`, `(content)`, `(board)` — don't affect URLs
- Key routes: `boards/[name]`, `manage/...` (admin), `auth/login`, `init` (onboarding), `widgets/[kind]`
- Locale driven by cookie (no URL prefix)
-
-### Auth Providers
-
-Configured via `AUTH_PROVIDERS` env. Supports: `credentials` (local), `ldap`, `oidc`. Database sessions with httpOnly cookies. API key auth for programmatic access.
-
-## Environment Variables
-
-Key env vars (from `.env.example`):
- `DB_DRIVER`: `better-sqlite3` | `mysql2` | `node-postgres`
- `DB_URL`: Database connection string
- `AUTH_SECRET`: NextAuth secret
- `SECRET_ENCRYPTION_KEY`: AES-256-CBC for integration secrets
- `AUTH_PROVIDERS`: Comma-separated (`credentials`, `ldap`, `oidc`)
- `CRON_JOB_API_KEY`: Shared key between Next.js and tasks service
- `REDIS_*`: Redis connection (host, port, password)
- `ENABLE_KUBERNETES`: Optional Kubernetes integration
-
-## Development Commands
-
- `pnpm dev` — runs all three services in parallel via Turborepo
- `pnpm docker:dev` — starts Redis + MySQL + PostgreSQL containers
- `pnpm db:push` — push schema to SQLite (dev)
- `pnpm db:studio` — Drizzle Studio
- `pnpm test` — Vitest unit tests
- `pnpm test:e2e` — Playwright E2E
- `pnpm lint` / `pnpm format` — ESLint + Prettier
- `pnpm typecheck` — tsc --noEmit across all packages
-
-## Conventions
-
- Workspace packages use `@homarr/` scope
- All versions managed via pnpm `catalog:` in workspace
- Path alias `~/*` → `./src/*` in Next.js app
- Mantine for all UI (no Tailwind) — primary color is red, `autoContrast: true`
- Icons from `@tabler/icons-react`
- Drag-and-drop via `@dnd-kit/*`
- `typescript.ignoreBuildErrors: true` in next.config (types checked separately via `typecheck`)
- `serverExternalPackages`: `dockerode`, `isomorphic-dompurify`, `jsdom`
@@ -12,6 +12,10 @@ AUTH_SECRET="supersecret"
 # or starting the project without any (which will show a randomly generated one).
 SECRET_ENCRYPTION_KEY=0000000000000000000000000000000000000000000000000000000000000000

+# Cron job API key is generated every time the container starts as it is required for communication between nextjs-api and tasks-api
+# export CRON_JOB_API_KEY=$(openssl rand -base64 32)
+# CRON_JOB_API_KEY="your-generated-api-key"
+
 LOG_LEVEL='info'

 # This is how you can use the sqlite driver:
@@ -41,12 +45,6 @@ DB_URL='FULL_PATH_TO_YOUR_SQLITE_DB_FILE'

 TURBO_TELEMETRY_DISABLED=1

-# Comma-separated paths to Docker-compatible Unix sockets.
-# Useful for connecting to multiple runtimes (Docker + Podman) simultaneously.
-# When unset and no TCP hosts configured, defaults to /var/run/docker.sock.
-# Example: DOCKER_SOCKET_PATHS=/var/run/docker.sock,/run/user/1000/podman/podman.sock
-# DOCKER_SOCKET_PATHS=
-
 # Enable kubernetes tool
 # ENABLE_KUBERNETES=true

@@ -33,17 +33,6 @@ body:
      options:
        # The below comment is used to insert a new version with on-release.yml
        #NEXT_VERSION#
-        - 1.61.0
-        - 1.60.1-beta.1
-        - 1.60.0
-        - 1.59.3
-        - 1.59.2
-        - 1.59.1
-        - 1.59.0
-        - 1.58.1
-        - 1.58.0
-        - 1.57.1
-        - 1.57.0
        - 1.56.1
        - 1.56.0
        - 1.55.0
@@ -25,16 +25,16 @@ body:
      label: Public API available?
      description: Is there a public API available, that we can consume in Homarr?
      options:
-        - "Yes, available on a website"
-        - "Yes, available in the application itself"
-        - "No"
+        - Yes, available on a website
+        - Yes, available in the application itself
+        - No
    validations:
      required: true
  - type: dropdown
    attributes:
      label: Are you willing to contribute this yourself?
      options:
-        - "Yes"
-        - "No"
+      - Yes
+      - No
    validations:
      required: true
@@ -24,7 +24,7 @@ body:
    attributes:
      label: Are you willing to contribute this yourself?
      options:
-        - "Yes"
-        - "No"
+        - Yes
+        - No
    validations:
      required: true
@@ -15,11 +15,11 @@ runs:
      with:
        persist-credentials: false
    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v4
+      uses: docker/setup-buildx-action@v3

    - name: Build docker image for ${{ inputs.architecture }}
      id: build
-      uses: docker/build-push-action@v7
+      uses: docker/build-push-action@v6
      with:
        push: false
        load: true
@@ -11,12 +11,6 @@
      matchPackageNames: ["tsx"],
      enabled: false,
    },
-    // Reenable once bug with undici v8 is fixed (https://github.com/homarr-labs/homarr/issues/5467)
-    {
-      matchPackageNames: ["undici"],
-      matchNewValue: "8.*",
-      enabled: false,
-    },
    {
      matchUpdateTypes: ["minor", "patch", "pin", "digest"],
      automerge: true,
@@ -37,12 +31,6 @@
      automerge: false,
    },
  ],
-  // Updates lockfile for prebuilt-debian after if package.json is updated, otherwise only root lockfile is updated
-  postUpgradeTasks: {
-    commands: ["cd deployments/prebuilt-debian && pnpm install --ignore-workspace --lockfile-only"],
-    fileFilters: ["deployments/prebuilt-debian/pnpm-lock.yaml"],
-    executionMode: "update",
-  },
  updateInternalDeps: true,
  rangeStrategy: "bump",
  automerge: false,
@@ -9,21 +9,16 @@ jobs:
  approve-automatic-prs:
    runs-on: ubuntu-latest
    timeout-minutes: 2
-    # 158783068: homarr-renovate[bot]
-    # 190541745: homarr-crowdin[bot]
-    # 210161987: homarr-update-contributors[bot]
-    # 175486441: homarr-releases[bot]
-    # Extracted from https://api.github.com/users/<username>
-    if: github.actor_id == 158783068 || github.actor_id == 190541745 || github.actor_id == 210161987 || github.actor_id == 175486441
+    if: github.actor_id == 158783068 || github.actor_id == 190541745 || github.actor_id == 210161987 # Id of renovate bot and crowdin bot see https://api.github.com/users/homarr-renovate%5Bbot%5D and https://api.github.com/users/homarr-crowdin%5Bbot%5D and https://api.github.com/users/homarr-update-contributors%5Bbot%5D
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
      - name: Obtain token
        id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
          permission-pull-requests: write # required to approve pull request

      - name: Install GitHub CLI
@@ -11,10 +11,14 @@ on:

 concurrency:
  group: "${{ github.workflow }}-${{ github.ref }}"
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}

+# You can leverage Vercel Remote Caching with Turbo to speed up your builds
+# @link https://turborepo.org/docs/core-concepts/remote-caching#remote-caching-on-vercel-builds
 env:
  FORCE_COLOR: 3
+  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
+  TURBO_TEAM: ${{ vars.TURBO_TEAM }}

 jobs:
  lint:
@@ -55,7 +59,7 @@ jobs:
        uses: ./tooling/github/setup

      - name: Typecheck
-        run: pnpm typecheck
+        run: turbo typecheck

  test:
    runs-on: ubuntu-latest
@@ -85,7 +89,7 @@ jobs:
        uses: ./tooling/github/setup
      - name: Build docker image
        id: build-docker-image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
        with:
          platforms: linux/amd64
          context: .
@@ -19,10 +19,10 @@ jobs:

      - name: Obtain token
        id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.CROWDIN_APP_PRIVATE_KEY }}
-          client-id: ${{ secrets.CROWDIN_APP_ID }}
+          app-id: ${{ secrets.CROWDIN_APP_ID }}
          permission-contents: write # required to commit to crowdin branch
          permission-pull-requests: write # required to create pull request

@@ -1,104 +0,0 @@
-name: "[Deployment] Beta Release"
-
-on:
-  workflow_dispatch:
-    inputs:
-      send-notifications:
-        type: boolean
-        required: false
-        default: true
-        description: Send notifications
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  create-and-merge-pr:
-    runs-on: ubuntu-latest
-    timeout-minutes: 2
-    steps:
-      - name: Discord notification
-        if: ${{ github.event.inputs.send-notifications }}
-        env:
-          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
-        with:
-          args: "Beta release has been triggered: [run ${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})"
-      - name: Checkout repository
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-      - name: Get Next Version
-        id: semver
-        uses: ietf-tools/semver-action@v1
-        with:
-          token: ${{ github.token }}
-          branch: next
-      - name: Create pull request
-        id: create-pull-request
-        run: 'gh pr create --title "chore(release): release ${{ steps.semver.outputs.next }}-beta" --body "Detected change to be ``${{ steps.semver.outputs.bump }}``<br/>Bump version from ``${{ steps.semver.outputs.current }}`` to ``${{ steps.semver.outputs.next }}-beta``" --base beta --head next --label automerge'
-        env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-      - name: Discord notification
-        if: ${{ github.event.inputs.send-notifications }}
-        env:
-          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
-        with:
-          args: "Created a release PR ${{ steps.create-pull-request.outputs.url }} for version ${{ steps.semver.outputs.next }}-beta (new behaviour: ${{ steps.semver.outputs.bump }})"
-      - name: Obtain token
-        id: obtainApprovalToken
-        uses: actions/create-github-app-token@v3
-        with:
-          private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
-          permission-pull-requests: write
-      - name: Approve PR
-        env:
-          GITHUB_TOKEN: ${{ steps.obtainApprovalToken.outputs.token }}
-        run: |
-          gh pr review --approve --body "Automatically approved by GitHub Action"
-      - name: Obtain token
-        id: obtainMergeToken
-        uses: actions/create-github-app-token@v3
-        with:
-          private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
-          permission-contents: write # write to beta branch (due to merge)
-          permission-pull-requests: write # merge pull request
-      - id: automerge
-        if: ${{ steps.semver.outputs.bump != 'major' }}
-        name: automerge
-        uses: "pascalgn/automerge-action@v0.16.4"
-        env:
-          GITHUB_TOKEN: ${{ steps.obtainMergeToken.outputs.token }}
-          MERGE_METHOD: merge # we prefer merge commits for merging to beta
-          MERGE_COMMIT_MESSAGE: "chore(release): release ${{ steps.semver.outputs.next }}-beta"
-          MERGE_DELETE_BRANCH: false # never set to true!
-          PULL_REQUEST: "${{ steps.create-pull-request.outputs.pr_number }}"
-          MERGE_RETRIES: 20 # 20 retries * MERGE_RETRY_SLEEP until step fails
-          MERGE_RETRY_SLEEP: 10000 # 10 seconds * MERGE_RETRIES until step fails
-          MERGE_REQUIRED_APPROVALS: 0 # do not require approvals
-
-      - name: Merged Discord notification
-        if: ${{ steps.automerge.outputs.mergeResult == 'merged' && github.event.inputs.send-notifications }}
-        env:
-          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
-        with:
-          args: "Merged PR ${{ steps.create-pull-request.outputs.url }} for release ${{ steps.semver.outputs.next }}-beta"
-      - name: Major Bump Discord notification
-        if: ${{ steps.semver.outputs.bump == 'major' && github.event.inputs.send-notifications }}
-        env:
-          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
-        with:
-          args: "The release PR must be manually merged because the next version is a major version: ${{ steps.create-pull-request.outputs.url }} for release ${{ steps.semver.outputs.next }}-beta"
-      - name: Discord Fail Notification
-        if: failure() && github.event.inputs.send-notifications
-        env:
-          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
-        with:
-          args: "The beta release workflow [run ${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}) has failed"
@@ -5,7 +5,6 @@ on:
    branches:
      - main
      - beta
-      - next
      - dev
  workflow_dispatch:
    inputs:
@@ -35,7 +34,7 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 5
    env:
-      SKIP_RELEASE: ${{ github.event_name == 'workflow_dispatch' || github.ref_name == 'dev' || github.ref_name == 'next' }}
+      SKIP_RELEASE: ${{ github.event_name == 'workflow_dispatch' || github.ref_name == 'dev' }}
    outputs:
      version: ${{ steps.read-semver.outputs.version || steps.version-fallback.outputs.version }}
      git_ref: ${{ steps.read-git-ref.outputs.ref || github.ref }}
@@ -51,23 +50,23 @@ jobs:
      - name: Obtain token
        if: env.SKIP_RELEASE == 'false'
        id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
-          permission-contents: write # required to commit package.json & changelog changes, merge them to dev / next and publish the release
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          permission-contents: write # required to commit package.json & changelog changes, merge them to dev and publish the release

      - uses: actions/checkout@v6
        if: env.SKIP_RELEASE == 'false'
        with:
          persist-credentials: false
-      - uses: pnpm/action-setup@v6
+      - uses: pnpm/action-setup@v4
        if: env.SKIP_RELEASE == 'false'
      - uses: actions/setup-node@v6
        if: env.SKIP_RELEASE == 'false'
        with:
-          node-version: 24.15.0
-          package-manager-cache: false
+          node-version: 24.14.0
+          cache: "pnpm"
      - run: npm i -g pnpm
        if: env.SKIP_RELEASE == 'false'
      - name: Install dependencies
@@ -96,21 +95,20 @@ jobs:
        id: read-git-ref
        run: |
          echo "ref=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
-      - name: Update dev / next branch
+      - name: Update dev branch
        if: env.SKIP_RELEASE == 'false'
        continue-on-error: true # Prevent pipeline from failing when merge fails
        env:
          GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}
-          UPSTREAM_BRANCH: ${{ github.ref_name == 'main' && 'dev' || 'next' }}
        run: |
          git config user.name "Releases Homarr"
          git config user.email "175486441+homarr-releases[bot]@users.noreply.github.com"
          git remote set-url origin https://x-access-token:${{ steps.obtainToken.outputs.token }}@github.com/${{ github.repository }}.git
-          git fetch origin ${{ env.UPSTREAM_BRANCH }}
-          git checkout ${{ env.UPSTREAM_BRANCH }}
-          git pull origin ${{ env.UPSTREAM_BRANCH }}
+          git fetch origin dev
+          git checkout dev
+          git pull origin dev
          git rebase ${{ github.ref_name }}
-          git push origin ${{ env.UPSTREAM_BRANCH }}
+          git push origin dev
  build-amd64:
    name: Build docker image for amd64
    needs: release
@@ -125,7 +123,7 @@ jobs:

      - name: Docker meta
        id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v5
        with:
          images: "${{ env.GHCR_REPO }}"

@@ -137,11 +135,11 @@ jobs:
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v3

      - name: Build and push by digest
        id: build
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
        with:
          context: .
          network: host
@@ -164,7 +162,7 @@ jobs:

      - name: Docker meta
        id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v5
        with:
          images: "${{ env.GHCR_REPO }}"

@@ -176,11 +174,11 @@ jobs:
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v3

      - name: Build and push by digest
        id: build
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
        with:
          context: .
          network: host
@@ -193,7 +191,7 @@ jobs:
    name: Extract amd64 asset from docker image
    needs: [release, build-amd64]
    runs-on: ubuntu-latest
-    timeout-minutes: 5
+    timeout-minutes: 2
    steps:
      - name: Extract amd64
        if: needs.release.outputs.skipped == 'false'
@@ -209,7 +207,7 @@ jobs:
    name: Extract arm64 asset from docker image
    needs: [release, build-arm64]
    runs-on: ubuntu-24.04-arm
-    timeout-minutes: 5
+    timeout-minutes: 2
    steps:
      - name: Extract arm64
        if: needs.release.outputs.skipped == 'false'
@@ -233,10 +231,10 @@ jobs:
      - name: Obtain token
        if: needs.release.outputs.skipped == 'false'
        id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
          permission-contents: write # required to publish the release

      - name: Log in to the Container registry
@@ -276,6 +274,6 @@ jobs:
      - name: Discord notification
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
        with:
          args: "Successfully deployed images for branch **${{ github.ref_name }}**. Tagged as **${{env.NEXT_VERSION}}**."
@@ -21,10 +21,10 @@ jobs:
    timeout-minutes: 2
    steps:
      - name: Discord notification
-        if: ${{ github.event.inputs.send-notifications }}
+        if: ${{ github.events.inputs.send-notifications }}
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
        with:
          args: "Automatic release has been triggered: [run ${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})"
      - name: Checkout repository
@@ -38,23 +38,22 @@ jobs:
          token: ${{ github.token }}
          branch: dev
      - name: Create pull request
-        id: create-pull-request
        run: 'gh pr create --title "chore(release): automatic release ${{ steps.semver.outputs.next }}" --body "**This is an automatic release**.<br/>Manual action may be required for major bumps.<br/>Detected change to be ``${{ steps.semver.outputs.bump }}``<br/>Bump version from ``${{ steps.semver.outputs.current }}`` to ``${{ steps.semver.outputs.next }}``" --base main --head dev --label automerge'
        env:
          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
      - name: Discord notification
-        if: ${{ github.event.inputs.send-notifications }}
+        if: ${{ github.events.inputs.send-notifications }}
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
        with:
          args: "Created a release PR ${{ steps.create-pull-request.outputs.url }} for version ${{ steps.semver.outputs.next }} (new behaviour: ${{ steps.semver.outputs.bump }})"
      - name: Obtain token
        id: obtainApprovalToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
          permission-pull-requests: write
      - name: Approve PR
        env:
@@ -63,10 +62,10 @@ jobs:
          gh pr review --approve --body "Automatically approved by GitHub Action"
      - name: Obtain token
        id: obtainMergeToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
          permission-contents: write # write to main branch (due to merge)
          permission-pull-requests: write # merge pull request
      - id: automerge
@@ -75,7 +74,7 @@ jobs:
        uses: "pascalgn/automerge-action@v0.16.4"
        env:
          GITHUB_TOKEN: ${{ steps.obtainMergeToken.outputs.token }}
-          MERGE_METHOD: merge # we prefer merge commits for merging to main
+          MERGE_METHOD: merge # we prefer merge commits for merging to master
          MERGE_COMMIT_MESSAGE: "chore(release): automatic release ${{ steps.semver.outputs.next }}"
          MERGE_DELETE_BRANCH: false # never set to true!
          PULL_REQUEST: "${{ steps.create-pull-request.outputs.pr_number }}"
@@ -84,23 +83,23 @@ jobs:
          MERGE_REQUIRED_APPROVALS: 0 # do not require approvals

      - name: Merged Discord notification
-        if: ${{ steps.automerge.outputs.mergeResult == 'merged' && github.event.inputs.send-notifications }}
+        if: ${{ steps.automerge.outputs.mergeResult == 'merged' && github.events.inputs.send-notifications }}
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
        with:
          args: "Merged PR ${{ steps.create-pull-request.outputs.url }} for release ${{ steps.semver.outputs.next }}"
      - name: Major Bump Discord notification
-        if: ${{ steps.semver.outputs.bump == 'major' && github.event.inputs.send-notifications }}
+        if: ${{ steps.semver.outputs.bump == 'major' && github.events.inputs.send-notifications }}
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
        with:
          args: "The release PR must be manually merged because the next version is a major version: ${{ steps.create-pull-request.outputs.url }} for release ${{ steps.semver.outputs.next }}"
      - name: Discord Fail Notification
-        if: failure() && github.event.inputs.send-notifications
+        if: failure() && github.events.inputs.send-notifications
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
        with:
          args: "The automatic release workflow [run ${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}) has failed"
@@ -12,10 +12,10 @@ jobs:
    steps:
      - name: Obtain token
        id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.HOMARR_DOCS_RELEASE_APP_PRIVATE_KEY }}
-          client-id: ${{ vars.HOMARR_DOCS_RELEASE_APP_ID }}
+          app-id: ${{ vars.HOMARR_DOCS_RELEASE_APP_ID }}
          owner: homarr-labs
          repositories: |
            documentation
@@ -45,10 +45,10 @@ jobs:
    steps:
      - name: Obtain token
        id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
          permission-contents: write # required to commit to branch
          permission-pull-requests: write # required to create pr & enable automerge
      - name: Checkout code
@@ -7,7 +7,7 @@ on:

 jobs:
  skip-stability-days:
-    if: ${{ !startsWith(github.head_ref, 'renovate/') && github.event.pull_request.head.repo.full_name == github.repository }}
+    if: ${{ !startsWith(github.head_ref, 'renovate/') }}
    name: Skip Stability Days
    runs-on: ubuntu-latest
    timeout-minutes: 1
@@ -21,10 +21,10 @@ jobs:
    steps:
      - name: Obtain token
        id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.HOMARR_UPDATE_CONTRIBUTORS_PRIVATE_KEY }}
-          client-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }}
+          app-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }}
          permission-contents: write # required to commit to branch
          permission-pull-requests: write # required to create pr & enable automerge

@@ -33,7 +33,7 @@ jobs:
        env:
          GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}

-      - uses: pnpm/action-setup@v6
+      - uses: pnpm/action-setup@v4
      - name: Use Node.js ${{ matrix.node-version }}
        uses: actions/setup-node@v6
        with:
@@ -21,10 +21,10 @@ jobs:
    steps:
      - name: Obtain token
        id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
        with:
          private-key: ${{ secrets.HOMARR_UPDATE_CONTRIBUTORS_PRIVATE_KEY }}
-          client-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }}
+          app-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }}
          permission-contents: write # required to commit to branch
          permission-pull-requests: write # required to create pr & enable automerge
      - name: Checkout code
@@ -67,8 +67,4 @@ e2e/shared/tmp
 apps/nextjs/public/images/background.png

 # next-intl
-en.d.json.ts
-
-# personal agent config
-AGENTS.md
-.opencode
+en.d.json.ts
@@ -1 +1 @@
-24.15.0
+24.14.0
@@ -3,11 +3,7 @@

 # Exempt Renovate‑managed files (no owners)
 package.json
-**/package.json
 package-lock.json
-**/package-lock.json
 pnpm-lock.yaml
-**/pnpm-lock.yaml
-pnpm-workspace.yaml
 Dockerfile
 docker-compose.yml
@@ -1,4 +1,4 @@
-FROM node:24.15.0-alpine AS base
+FROM node:24.14.0-alpine AS base

 FROM base AS builder
 RUN apk add --no-cache libc6-compat
@@ -43,6 +43,8 @@ RUN mkdir -p /var/cache/nginx && \
 COPY --from=builder /app/apps/nextjs/next.config.ts .
 COPY --from=builder /app/apps/nextjs/package.json .

+COPY --from=builder /app/apps/tasks/tasks.cjs ./apps/tasks/tasks.cjs
+COPY --from=builder /app/apps/websocket/wssServer.cjs ./apps/websocket/wssServer.cjs
 COPY --from=builder /app/node_modules/better-sqlite3/build/Release/better_sqlite3.node /app/build/better_sqlite3.node

 COPY --from=builder /app/packages/db/migrations ./db/migrations
@@ -10,21 +10,4 @@ export default [
  ...baseConfig,
  ...reactConfig,
  ...nextjsConfig,
-  {
-    files: ["public/sw.js"],
-    languageOptions: {
-      globals: {
-        self: "readonly",
-        clients: "readonly",
-        skipWaiting: "readonly",
-        importScripts: "readonly",
-        caches: "readonly",
-        fetch: "readonly",
-      },
-    },
-    rules: {
-      "@typescript-eslint/no-unsafe-call": "off",
-      "@typescript-eslint/no-unsafe-member-access": "off",
-    },
-  },
 ];
@@ -32,8 +32,6 @@ const nextConfig: NextConfig = {
  experimental: {
    optimizePackageImports: ["@mantine/core", "@mantine/hooks", "@tabler/icons-react"],
    turbopackFileSystemCacheForDev: true,
-    preloadEntriesOnStart: false,
-    webpackMemoryOptimizations: true,
  },
  transpilePackages: ["@homarr/ui", "@homarr/notifications", "@homarr/modals", "@homarr/spotlight", "@homarr/widgets"],
  images: {
@@ -44,18 +42,9 @@ const nextConfig: NextConfig = {
      },
    ],
  },
-  // skipcq: JS-0116
  // eslint-disable-next-line @typescript-eslint/require-await,no-restricted-syntax
  async headers() {
    return [
-      {
-        source: "/sw.js",
-        headers: [
-          { key: "Content-Type", value: "application/javascript; charset=utf-8" },
-          { key: "Cache-Control", value: "no-cache, no-store, must-revalidate" },
-          { key: "Content-Security-Policy", value: "default-src 'self'; script-src 'self'" },
-        ],
-      },
      {
        source: "/(.*)", // Apply CSP to all routes
        headers: [
@@ -15,10 +15,10 @@
  },
  "prettier": "@homarr/prettier-config",
  "dependencies": {
-    "@dnd-kit/core": "catalog:",
-    "@dnd-kit/modifiers": "catalog:",
-    "@dnd-kit/sortable": "catalog:",
-    "@dnd-kit/utilities": "catalog:",
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/modifiers": "^9.0.0",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
    "@homarr/analytics": "workspace:^0.1.0",
    "@homarr/api": "workspace:^0.1.0",
    "@homarr/auth": "workspace:^0.1.0",
@@ -31,7 +31,7 @@
    "@homarr/docker": "workspace:^0.1.0",
    "@homarr/form": "workspace:^0.1.0",
    "@homarr/forms-collection": "workspace:^0.1.0",
-    "@homarr/gridstack": "catalog:",
+    "@homarr/gridstack": "^1.12.0",
    "@homarr/icons": "workspace:^0.1.0",
    "@homarr/image-proxy": "workspace:^0.1.0",
    "@homarr/integrations": "workspace:^0.1.0",
@@ -44,68 +44,65 @@
    "@homarr/server-settings": "workspace:^0.1.0",
    "@homarr/settings": "workspace:^0.1.0",
    "@homarr/spotlight": "workspace:^0.1.0",
-    "@homarr/tasks": "workspace:^0.1.0",
    "@homarr/translation": "workspace:^0.1.0",
    "@homarr/ui": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "@homarr/websocket": "workspace:^0.1.0",
    "@homarr/widgets": "workspace:^0.1.0",
-    "@mantine/colors-generator": "catalog:",
-    "@mantine/core": "catalog:",
-    "@mantine/dropzone": "catalog:",
-    "@mantine/hooks": "catalog:",
-    "@mantine/modals": "catalog:",
-    "@mantine/tiptap": "catalog:",
-    "@million/lint": "catalog:",
-    "@tabler/icons-react": "catalog:",
-    "@tanstack/react-query": "catalog:",
-    "@tanstack/react-query-devtools": "catalog:",
-    "@tanstack/react-query-next-experimental": "catalog:",
-    "@trpc/client": "catalog:",
-    "@trpc/next": "catalog:",
-    "@trpc/react-query": "catalog:",
-    "@trpc/server": "catalog:",
-    "@xterm/addon-canvas": "catalog:",
-    "@xterm/addon-fit": "catalog:",
-    "@xterm/xterm": "catalog:",
-    "babel-plugin-react-compiler": "catalog:",
-    "chroma-js": "catalog:",
-    "clsx": "catalog:",
-    "dayjs": "catalog:",
-    "dotenv": "catalog:",
-    "flag-icons": "catalog:",
-    "glob": "catalog:",
-    "isomorphic-dompurify": "catalog:",
-    "jotai": "catalog:",
-    "mantine-react-table": "catalog:",
-    "next": "catalog:",
-    "postcss-preset-mantine": "catalog:",
-    "prismjs": "catalog:",
-    "react": "catalog:",
-    "react-dom": "catalog:",
-    "react-error-boundary": "catalog:",
-    "react-simple-code-editor": "catalog:",
-    "sass": "catalog:",
-    "superjson": "catalog:",
-    "swagger-ui-react": "catalog:",
-    "use-deep-compare-effect": "catalog:",
-    "yaml": "catalog:",
-    "zod": "catalog:"
+    "@mantine/colors-generator": "^8.3.18",
+    "@mantine/core": "^8.3.18",
+    "@mantine/dropzone": "^8.3.18",
+    "@mantine/hooks": "^8.3.18",
+    "@mantine/modals": "^8.3.18",
+    "@mantine/tiptap": "^8.3.18",
+    "@million/lint": "1.0.14",
+    "@tabler/icons-react": "^3.40.0",
+    "@tanstack/react-query": "^5.91.2",
+    "@tanstack/react-query-devtools": "^5.91.3",
+    "@tanstack/react-query-next-experimental": "^5.91.0",
+    "@trpc/client": "^11.13.4",
+    "@trpc/next": "^11.13.4",
+    "@trpc/react-query": "^11.13.4",
+    "@trpc/server": "^11.13.4",
+    "@xterm/addon-canvas": "^0.7.0",
+    "@xterm/addon-fit": "0.11.0",
+    "@xterm/xterm": "^6.0.0",
+    "babel-plugin-react-compiler": "^1.0.0",
+    "chroma-js": "^3.2.0",
+    "clsx": "^2.1.1",
+    "dayjs": "^1.11.20",
+    "dotenv": "^17.3.1",
+    "flag-icons": "^7.5.0",
+    "glob": "^13.0.6",
+    "isomorphic-dompurify": "^3.5.1",
+    "jotai": "^2.18.1",
+    "mantine-react-table": "2.0.0-beta.9",
+    "next": "16.2.0",
+    "postcss-preset-mantine": "^1.18.0",
+    "prismjs": "^1.30.0",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "react-error-boundary": "^6.1.1",
+    "react-simple-code-editor": "^0.14.1",
+    "sass": "^1.98.0",
+    "superjson": "2.2.6",
+    "swagger-ui-react": "^5.32.1",
+    "use-deep-compare-effect": "^1.8.1",
+    "zod": "^4.2.1"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/chroma-js": "catalog:",
-    "@types/node": "catalog:",
-    "@types/prismjs": "catalog:",
-    "@types/react": "catalog:",
-    "@types/react-dom": "catalog:",
-    "@types/swagger-ui-react": "catalog:",
-    "concurrently": "catalog:",
-    "eslint": "catalog:",
-    "node-loader": "catalog:",
-    "prettier": "catalog:",
-    "typescript": "catalog:"
+    "@types/chroma-js": "3.1.2",
+    "@types/node": "^24.12.0",
+    "@types/prismjs": "^1.26.6",
+    "@types/react": "19.2.14",
+    "@types/react-dom": "19.2.3",
+    "@types/swagger-ui-react": "^5.18.0",
+    "concurrently": "^9.2.1",
+    "eslint": "^9.39.4",
+    "node-loader": "^2.1.0",
+    "prettier": "^3.8.1",
+    "typescript": "^5.9.3"
  }
 }
@@ -1,7 +0,0 @@
-self.addEventListener("install", () => {
-  self.skipWaiting();
-});
-
-self.addEventListener("activate", (event) => {
-  event.waitUntil(self.clients.claim());
-});
@@ -8,12 +8,13 @@ import dayjs from "dayjs";
 import { clientApi } from "@homarr/api/client";
 import { useSession } from "@homarr/auth/client";
 import { parseCookies, setClientCookie } from "@homarr/common";
+import type { ColorScheme } from "@homarr/definitions";
 import { colorSchemeCookieKey } from "@homarr/definitions";

 export const CustomMantineProvider = ({
  children,
  defaultColorScheme,
-}: PropsWithChildren<{ defaultColorScheme: MantineColorScheme }>) => {
+}: PropsWithChildren<{ defaultColorScheme: ColorScheme }>) => {
  const manager = useColorSchemeManager();
  return (
    <DirectionProvider>
@@ -34,7 +35,7 @@ export const CustomMantineProvider = ({
 export function useColorSchemeManager(): MantineColorSchemeManager {
  const { data: session } = useSession();

-  const updateCookieValue = (value: MantineColorScheme) => {
+  const updateCookieValue = (value: Exclude<MantineColorScheme, "auto">) => {
    setClientCookie(colorSchemeCookieKey, value, { expires: dayjs().add(1, "year").toDate(), path: "/" });
  };

@@ -59,6 +60,7 @@ export function useColorSchemeManager(): MantineColorSchemeManager {
    },

    set: (value) => {
+      if (value === "auto") return;
      try {
        if (session) {
          mutateColorScheme({ colorScheme: value });
@@ -2,7 +2,7 @@

 import { useEffect, useRef } from "react";
 import { Button, Grid, Group, Loader, Stack, TextInput } from "@mantine/core";
-import { useDebouncedValue, useDocumentTitle } from "@mantine/hooks";
+import { useDebouncedValue, useDocumentTitle, useFavicon } from "@mantine/hooks";

 import { useUpdateBoard } from "@homarr/boards/updater";
 import { useZodForm } from "@homarr/form";
@@ -10,7 +10,6 @@ import { IconPicker } from "@homarr/forms-collection";
 import { useI18n } from "@homarr/translation/client";
 import { boardSavePartialSettingsSchema } from "@homarr/validation/board";

-import { homarrLogoPath } from "~/components/layout/logo/homarr-logo";
 import { createMetaTitle } from "~/metadata";
 import type { Board } from "../../_types";
 import { useSavePartialSettingsMutation } from "./_shared";
@@ -54,6 +53,7 @@ export const GeneralSettingsContent = ({ board }: Props) => {
  );

  useLogoPreview(form.values.logoImageUrl);
+  useFaviconPreview(form.values.faviconImageUrl);
  const metaTitleStatus = useMetaTitlePreview(form.values.metaTitle);

  // Cleanup for not applied changes of the page title and logo image URL
@@ -75,7 +75,6 @@ export const GeneralSettingsContent = ({ board }: Props) => {
          pageTitle: values.pageTitle,
          logoImageUrl: values.logoImageUrl,
        };
-        updateFavicon(values.faviconImageUrl ?? homarrLogoPath);
        savePartialSettings({
          id: board.id,
          ...values,
@@ -147,13 +146,7 @@ const useMetaTitlePreview = (title: string | null) => {
  };
 };

-// Previously we used the useFavicon hook from Mantine
-// However if the user tried to click on a link to a different page
-// it caused an error "Cannot read properties of null (reading 'removeChild')"
-// Probably because the head element was null (https://github.com/mantinedev/mantine/blob/b90d9b81031f45f5d15e75f25138ed6477f65bce/packages/%40mantine/hooks/src/use-favicon/use-favicon.ts#L21)
-// See https://github.com/homarr-labs/homarr/issues/4905
-const updateFavicon = (url: string) => {
-  const link: HTMLLinkElement | null = document.querySelector('link[rel="icon"]');
-  if (!link) return;
-  link.href = url;
+const useFaviconPreview = (url: string | null) => {
+  const [faviconDebounced] = useDebouncedValue(url ?? "", 500);
+  useFavicon(faviconDebounced);
 };
@@ -4,7 +4,6 @@ import { Inter } from "next/font/google";
 import "@homarr/notifications/styles.css";
 import "@homarr/spotlight/styles.css";
 import "@homarr/ui/styles.css";
-import "~/styles/color-scheme.scss";
 import "~/styles/scroll-area.scss";

 import { notFound } from "next/navigation";
@@ -26,7 +25,6 @@ import { isLocaleRTL, isLocaleSupported } from "@homarr/translation";
 import { Analytics } from "~/components/layout/analytics";
 import { CrowdinLiveTranslation } from "~/components/layout/crowdin-live-translation";
 import { SearchEngineOptimization } from "~/components/layout/search-engine-optimization";
-import { ServiceWorkerRegistration } from "~/components/layout/service-worker-registration";
 import { getCurrentColorSchemeAsync } from "~/theme/color-scheme";
 import { DayJsLoader } from "./_client-providers/dayjs-loader";
 import { JotaiProvider } from "./_client-providers/jotai";
@@ -131,7 +129,7 @@ export default async function Layout(props: {
      dir={direction}
      data-mantine-color-scheme={colorScheme}
      style={{
-        backgroundColor: colorScheme === "dark" ? "#242424" : colorScheme === "auto" ? undefined : "#fff",
+        backgroundColor: colorScheme === "dark" ? "#242424" : "#fff",
      }}
      suppressHydrationWarning
    >
@@ -143,7 +141,6 @@ export default async function Layout(props: {
      <body className={["font-sans", fontSans.variable].join(" ")}>
        <StackedProvider>
          <Notifications />
-          <ServiceWorkerRegistration />
          {props.children}
        </StackedProvider>
      </body>
@@ -1,7 +1,3 @@
 .contributorCard {
  background-color: light-dark(var(--mantine-color-gray-1), var(--mantine-color-dark-5));
 }
-
-.dependencyCard:hover {
-  background-color: light-dark(var(--mantine-color-gray-1), var(--mantine-color-dark-5));
-}
@@ -12,7 +12,8 @@ import {
  Flex,
  Group,
  Kbd,
-  SimpleGrid,
+  List,
+  ListItem,
  Stack,
  Table,
  TableTbody,
@@ -21,18 +22,9 @@ import {
  TableThead,
  TableTr,
  Text,
-  ThemeIcon,
  Title,
-  UnstyledButton,
 } from "@mantine/core";
-import {
-  IconKeyboard,
-  IconLanguage,
-  IconLibrary,
-  IconMoneybagHeart,
-  IconPackage,
-  IconUsers,
-} from "@tabler/icons-react";
+import { IconKeyboard, IconLanguage, IconLibrary, IconUsers } from "@tabler/icons-react";

 import { capitalize, objectEntries } from "@homarr/common";
 import { hotkeys } from "@homarr/definitions";
@@ -41,10 +33,8 @@ import { getScopedI18n } from "@homarr/translation/server";
 import { homarrLogoPath } from "~/components/layout/logo/homarr-logo";
 import { DynamicBreadcrumb } from "~/components/navigation/dynamic-breadcrumb";
 import { createMetaTitle } from "~/metadata";
-import type { PackageJsonDependencies } from "~/versions/package-reader";
-import { getPackageVersion } from "~/versions/package-reader";
+import { getPackageAttributesAsync } from "~/versions/package-reader";
 import type githubContributorsJson from "../../../../../../../static-data/contributors.json";
-import type openCollectiveContributorsJson from "../../../../../../../static-data/opencollective-contributors.json";
 import type crowdinContributorsJson from "../../../../../../../static-data/translators.json";
 import classes from "./about.module.css";

@@ -67,10 +57,7 @@ const getHostAsync = async () => {
 export default async function AboutPage() {
  const baseServerUrl = `http://${await getHostAsync()}`;
  const t = await getScopedI18n("management.page.about");
-  const version = getPackageVersion();
-  const dependencies = (await fetch(`${baseServerUrl}/api/about/dependencies`).then((res) =>
-    res.json(),
-  )) as PackageJsonDependencies;
+  const attributes = await getPackageAttributesAsync();
  const githubContributors = (await fetch(`${baseServerUrl}/api/about/contributors/github`).then((res) =>
    res.json(),
  )) as typeof githubContributorsJson;
@@ -79,10 +66,6 @@ export default async function AboutPage() {
    res.json(),
  )) as typeof crowdinContributorsJson;

-  const openCollectiveContributors = (await fetch(`${baseServerUrl}/api/about/contributors/opencollective`).then(
-    (res) => res.json(),
-  )) as typeof openCollectiveContributorsJson;
-
  return (
    <div>
      <DynamicBreadcrumb />
@@ -93,7 +76,7 @@ export default async function AboutPage() {
            <Title order={1} tt="uppercase">
              Homarr
            </Title>
-            <Title order={2}>{t("version", { version })}</Title>
+            <Title order={2}>{t("version", { version: attributes.version })}</Title>
          </Stack>
        </Group>
      </Center>
@@ -148,72 +131,31 @@ export default async function AboutPage() {
            </Flex>
          </AccordionPanel>
        </AccordionItem>
-        <AccordionItem value="sponsors">
-          <AccordionControl icon={<IconMoneybagHeart size="1rem" />}>
-            <Stack gap={0}>
-              <Text>{t("accordion.sponsors.title")}</Text>
-              <Text size="sm" c="dimmed">
-                {t("accordion.sponsors.subtitle", {
-                  count: String(openCollectiveContributors.length),
-                })}
-              </Text>
-            </Stack>
-          </AccordionControl>
-          <AccordionPanel>
-            <Flex wrap="wrap" gap="xs">
-              {openCollectiveContributors.map((sponsor) => (
-                <GenericContributorLinkCard
-                  key={sponsor.slug}
-                  link={`https://opencollective.com/${sponsor.slug}`}
-                  image={sponsor.imageUrl}
-                  name={sponsor.name}
-                />
-              ))}
-            </Flex>
-          </AccordionPanel>
-        </AccordionItem>
        <AccordionItem value="libraries">
          <AccordionControl icon={<IconLibrary size="1rem" />}>
            <Stack gap={0}>
              <Text>{t("accordion.libraries.title")}</Text>
              <Text size="sm" c="dimmed">
                {t("accordion.libraries.subtitle", {
-                  count: String(Object.keys(dependencies).length),
+                  count: String(Object.keys(attributes.dependencies).length),
                })}
              </Text>
            </Stack>
          </AccordionControl>
          <AccordionPanel>
-            <SimpleGrid cols={{ xs: 1, sm: 2, md: 3, lg: 4, xl: 5 }} spacing="md">
-              {Object.entries(dependencies)
-                .filter(([, value]) => !value.includes("workspace:"))
+            <List>
+              {Object.entries(attributes.dependencies)
                .sort(([key1], [key2]) => key1.localeCompare(key2))
-                .map(([name, version]) => (
-                  <UnstyledButton
-                    key={name}
-                    component="a"
-                    href={`https://www.npmjs.com/package/${name}`}
-                    target="_blank"
-                  >
-                    <Card withBorder radius="md" p="xs" className={classes.dependencyCard}>
-                      <Group gap="sm" wrap="nowrap">
-                        <ThemeIcon variant="light" size="lg" radius="md">
-                          <IconPackage size="1.5rem" stroke={1.5} />
-                        </ThemeIcon>
-
-                        <Stack gap={0}>
-                          <Text size="sm" fw="bold" lineClamp={1} title={name}>
-                            {name}
-                          </Text>
-                          <Text size="sm" c="dimmed">
-                            v{version.replace("^", "").replace("~", "")}
-                          </Text>
-                        </Stack>
-                      </Group>
-                    </Card>
-                  </UnstyledButton>
+                .map(([key, value]) => (
+                  <ListItem key={key}>
+                    {value.includes("workspace:") ? (
+                      <Text>{key}</Text>
+                    ) : (
+                      <a href={`https://www.npmjs.com/package/${key}`}>{key}</a>
+                    )}
+                  </ListItem>
                ))}
-            </SimpleGrid>
+            </List>
          </AccordionPanel>
        </AccordionItem>
        <AccordionItem value="hotkeys">
@@ -1,7 +1,7 @@
 "use client";

 import { Group, Text } from "@mantine/core";
-import { IconDeviceDesktop, IconMoon, IconSun } from "@tabler/icons-react";
+import { IconMoon, IconSun } from "@tabler/icons-react";

 import type { ColorScheme } from "@homarr/definitions";
 import { colorSchemes } from "@homarr/definitions";
@@ -34,7 +34,6 @@ export const AppearanceSettingsForm = ({ defaultValues }: { defaultValues: Serve
 };

 const appearanceIcons = {
-  auto: IconDeviceDesktop,
  light: IconSun,
  dark: IconMoon,
 };
@@ -2,7 +2,7 @@ import { headers } from "next/headers";
 import { notFound } from "next/navigation";
 import { Stack, Tabs, TabsList, TabsPanel, TabsTab } from "@mantine/core";

-import { openApiDocument } from "@homarr/api/open-api";
+import { openApiDocument } from "@homarr/api";
 import { api } from "@homarr/api/server";
 import { auth } from "@homarr/auth/next";
 import { extractBaseUrlFromHeaders } from "@homarr/common";
@@ -58,18 +58,6 @@ const createColumns = (
      return <ContainerStateBadge state={cell.row.original.state} />;
    },
  },
-  {
-    accessorKey: "host",
-    header: t("docker.field.host.label"),
-    size: 140,
-    Cell({ row }) {
-      return (
-        <Text truncate="end" title={row.original.host}>
-          {row.original.host}
-        </Text>
-      );
-    },
-  },
  {
    accessorKey: "image",
    header: t("docker.field.containerImage.label"),
@@ -88,7 +76,6 @@ const createColumns = (
    accessorKey: "ports",
    header: t("docker.field.ports.label"),
    Cell({ cell }) {
-      if (!cell.row.original.ports) return null;
      if (!cell.row.original.ports.length) return null;
      return (
        <OverflowBadge overflowCount={1} data={cell.row.original.ports.map((port) => port.PrivatePort.toString())} />
@@ -26,7 +26,6 @@ export const ChangeSearchPreferencesForm = ({ user, searchEnginesData }: ChangeS
      form.setInitialValues({
        defaultSearchEngineId: variables.defaultSearchEngineId,
        openInNewTab: variables.openInNewTab,
-        ddgBangsEnabled: variables.ddgBangsEnabled,
      });
      showSuccessNotification({
        message: t("user.action.changeSearchPreferences.notification.success.message"),
@@ -42,7 +41,6 @@ export const ChangeSearchPreferencesForm = ({ user, searchEnginesData }: ChangeS
    initialValues: {
      defaultSearchEngineId: user.defaultSearchEngineId,
      openInNewTab: user.openSearchInNewTab,
-      ddgBangsEnabled: user.ddgBangs,
    },
  });

@@ -66,10 +64,6 @@ export const ChangeSearchPreferencesForm = ({ user, searchEnginesData }: ChangeS
          label={t("user.field.openSearchInNewTab.label")}
          {...form.getInputProps("openInNewTab", { type: "checkbox" })}
        />
-        <Switch
-          label={t("user.field.ddgBangs.label")}
-          {...form.getInputProps("ddgBangsEnabled", { type: "checkbox" })}
-        />

        <Group justify="end">
          <Button type="submit" loading={isPending}>
@@ -30,7 +30,7 @@ export const FirstDayOfWeek = ({ user }: FirstDayOfWeekProps) => {
    },
    onSuccess(_, variables) {
      form.setInitialValues({
-        firstDayOfWeek: variables.firstDayOfWeek as DayOfWeek,
+        firstDayOfWeek: variables.firstDayOfWeek,
      });
      showSuccessNotification({
        message: t("user.action.changeFirstDayOfWeek.notification.success.message"),
@@ -2,8 +2,7 @@ import type { NextRequest } from "next/server";
 import { userAgent } from "next/server";
 import { createOpenApiFetchHandler } from "trpc-to-openapi";

-import { createTRPCContext } from "@homarr/api";
-import { openApiRouter } from "@homarr/api/open-api";
+import { appRouter, createTRPCContext } from "@homarr/api";
 import { API_KEY_HEADER_NAME, getSessionFromApiKeyAsync } from "@homarr/auth/api-key";
 import { ipAddressFromHeaders } from "@homarr/common/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -31,7 +30,7 @@ const handlerAsync = async (req: NextRequest) => {
  return createOpenApiFetchHandler({
    req,
    endpoint: "/",
-    router: openApiRouter,
+    router: appRouter,
    createContext: () => createTRPCContext({ session, headers: req.headers }),
    onError({ error, path, type }) {
      logger.error(new ErrorWithMetadata("tRPC Error occured", { path, type }, { cause: error }));
@@ -1,9 +0,0 @@
-import { NextResponse } from "next/server";
-
-import openCollectiveContributors from "../../../../../../../../static-data/opencollective-contributors.json";
-
-export const GET = () => {
-  return NextResponse.json(openCollectiveContributors);
-};
-
-export const dynamic = "force-static";
@@ -1,10 +0,0 @@
-import { NextResponse } from "next/server";
-
-import { getDependenciesAsync } from "../../../../versions/package-reader";
-
-export const GET = async () => {
-  const dependencies = await getDependenciesAsync();
-  return NextResponse.json(dependencies);
-};
-
-export const dynamic = "force-static";
@@ -1,6 +1,6 @@
 import { NextResponse } from "next/server";

-import { openApiDocument } from "@homarr/api/open-api";
+import { openApiDocument } from "@homarr/api";
 import { extractBaseUrlFromHeaders } from "@homarr/common";

 export function GET(request: Request) {
@@ -1,94 +0,0 @@
-"use client";
-
-import React from "react";
-import { Combobox, Group, InputBase, Text, useCombobox } from "@mantine/core";
-import { IconCheck, IconDeviceDesktop, IconMoon, IconSun } from "@tabler/icons-react";
-
-import type { ColorScheme } from "@homarr/definitions";
-import { colorSchemes } from "@homarr/definitions";
-import { useScopedI18n } from "@homarr/translation/client";
-
-const schemeIcons: Record<ColorScheme, React.ElementType> = {
-  auto: IconDeviceDesktop,
-  light: IconSun,
-  dark: IconMoon,
-};
-
-interface ColorSchemeComboboxProps {
-  value: ColorScheme;
-  onChange: (value: ColorScheme) => void;
-  width?: string;
-}
-
-export const ColorSchemeCombobox = ({ value, onChange, width }: ColorSchemeComboboxProps) => {
-  const tOptions = useScopedI18n("common.colorScheme.options");
-
-  const combobox = useCombobox({
-    onDropdownClose: () => combobox.resetSelectedOption(),
-  });
-
-  const handleOnOptionSubmit = React.useCallback(
-    (val: string) => {
-      if (!val) return;
-      onChange(val as ColorScheme);
-      combobox.closeDropdown();
-    },
-    [onChange, combobox],
-  );
-
-  const handleOnClick = React.useCallback(() => {
-    combobox.toggleDropdown();
-  }, [combobox]);
-
-  return (
-    <Combobox store={combobox} onOptionSubmit={handleOnOptionSubmit}>
-      <Combobox.Target>
-        <InputBase
-          component="button"
-          type="button"
-          pointer
-          rightSection={<Combobox.Chevron />}
-          rightSectionPointerEvents="none"
-          onClick={handleOnClick}
-          variant="filled"
-          w={width}
-        >
-          <OptionItem scheme={value} currentScheme={value} tOptions={tOptions} />
-        </InputBase>
-      </Combobox.Target>
-      <Combobox.Dropdown>
-        <Combobox.Options>
-          {colorSchemes.map((scheme) => (
-            <Combobox.Option value={scheme} key={scheme}>
-              <OptionItem scheme={scheme} currentScheme={value} tOptions={tOptions} showCheck />
-            </Combobox.Option>
-          ))}
-        </Combobox.Options>
-      </Combobox.Dropdown>
-    </Combobox>
-  );
-};
-
-const OptionItem = ({
-  scheme,
-  currentScheme,
-  tOptions,
-  showCheck,
-}: {
-  scheme: ColorScheme;
-  currentScheme: ColorScheme;
-  tOptions: (key: ColorScheme) => string;
-  showCheck?: boolean;
-}) => {
-  const Icon = schemeIcons[scheme];
-
-  return (
-    <Group wrap="nowrap" justify="space-between">
-      <Group wrap="nowrap">
-        <Icon size={16} stroke={1.5} />
-        <Text>{tOptions(scheme)}</Text>
-      </Group>
-      {showCheck && scheme === currentScheme && <IconCheck color="currentColor" size={16} />}
-    </Group>
-  );
-};
@@ -1,17 +1,49 @@
 "use client";

-import { useMantineColorScheme } from "@mantine/core";
+import { Group, Text, useMantineColorScheme } from "@mantine/core";
+import { IconMoon, IconSun } from "@tabler/icons-react";

 import type { ColorScheme } from "@homarr/definitions";
-
-import { ColorSchemeCombobox } from "./color-scheme-combobox";
+import { colorSchemes } from "@homarr/definitions";
+import { useScopedI18n } from "@homarr/translation/client";
+import { SelectWithCustomItems } from "@homarr/ui";

 interface CurrentColorSchemeComboboxProps {
  w?: string;
 }

 export const CurrentColorSchemeCombobox = ({ w }: CurrentColorSchemeComboboxProps) => {
+  const tOptions = useScopedI18n("common.colorScheme.options");
  const { colorScheme, setColorScheme } = useMantineColorScheme();

-  return <ColorSchemeCombobox value={colorScheme as ColorScheme} onChange={setColorScheme} width={w} />;
+  return (
+    <SelectWithCustomItems
+      value={colorScheme}
+      onChange={(value) => setColorScheme((value as ColorScheme | null) ?? "light")}
+      data={colorSchemes.map((scheme) => ({
+        value: scheme,
+        label: tOptions(scheme),
+      }))}
+      SelectOption={ColorSchemeCustomOption}
+      w={w}
+    />
+  );
+};
+
+const appearanceIcons = {
+  light: IconSun,
+  dark: IconMoon,
+};
+
+const ColorSchemeCustomOption = ({ value, label }: { value: ColorScheme; label: string }) => {
+  const Icon = appearanceIcons[value];
+
+  return (
+    <Group>
+      <Icon size={16} stroke={1.5} />
+      <Text fz="sm" fw={500}>
+        {label}
+      </Text>
+    </Group>
+  );
 };
@@ -1,14 +0,0 @@
-"use client";
-
-import { useEffect } from "react";
-
-export const ServiceWorkerRegistration = () => {
-  useEffect(() => {
-    if (!("serviceWorker" in navigator)) return;
-    navigator.serviceWorker.register("/sw.js", { scope: "/", updateViaCache: "none" }).catch((error) => {
-      console.error("Service worker registration failed", error);
-    });
-  }, []);
-
-  return null;
-};
@@ -5,7 +5,16 @@ import { useCallback, useEffect } from "react";
 import { useRouter } from "next/navigation";
 import { Center, Menu, Stack, Text, useMantineColorScheme } from "@mantine/core";
 import { useHotkeys, useTimeout } from "@mantine/hooks";
-import { IconCheck, IconHome, IconLogin, IconLogout, IconSettings, IconTool } from "@tabler/icons-react";
+import {
+  IconCheck,
+  IconHome,
+  IconLogin,
+  IconLogout,
+  IconMoon,
+  IconSettings,
+  IconSun,
+  IconTool,
+} from "@tabler/icons-react";

 import type { RouterOutputs } from "@homarr/api";
 import { signOut, useSession } from "@homarr/auth/client";
@@ -15,7 +24,6 @@ import { useScopedI18n } from "@homarr/translation/client";
 import { Link } from "@homarr/ui";

 import { useAuthContext } from "~/app/[locale]/_client-providers/session";
-import { CurrentColorSchemeCombobox } from "./color-scheme/current-color-scheme-combobox";
 import { CurrentLanguageCombobox } from "./language/current-language-combobox";
 import { AvailableUpdatesMenuItem } from "./layout/header/update";

@@ -26,9 +34,13 @@ interface UserAvatarMenuProps {

 export const UserAvatarMenu = ({ children, availableUpdatesPromise }: UserAvatarMenuProps) => {
  const t = useScopedI18n("common.userAvatar.menu");
-  const { toggleColorScheme } = useMantineColorScheme();
+  const { colorScheme, toggleColorScheme } = useMantineColorScheme();
  useHotkeys([[hotkeys.toggleColorScheme, toggleColorScheme]]);

+  const ColorSchemeIcon = colorScheme === "dark" ? IconSun : IconMoon;
+
+  const colorSchemeText = colorScheme === "dark" ? t("switchToLightMode") : t("switchToDarkMode");
+
  const session = useSession();
  const router = useRouter();

@@ -55,14 +67,14 @@ export const UserAvatarMenu = ({ children, availableUpdatesPromise }: UserAvatar
    <Menu width={300} withArrow withinPortal keepMounted>
      <Menu.Dropdown>
        <AvailableUpdatesMenuItem availableUpdatesPromise={availableUpdatesPromise} />
+        <Menu.Item onClick={toggleColorScheme} leftSection={<ColorSchemeIcon size="1rem" />}>
+          {colorSchemeText}
+        </Menu.Item>
        <Menu.Item component={Link} href="/boards" leftSection={<IconHome size="1rem" />}>
          {t("homeBoard")}
        </Menu.Item>
        <Menu.Divider />

-        <Menu.Item p={0} closeMenuOnClick={false} component="div">
-          <CurrentColorSchemeCombobox />
-        </Menu.Item>
        <Menu.Item p={0} closeMenuOnClick={false} component="div">
          <CurrentLanguageCombobox />
        </Menu.Item>
@@ -1,6 +0,0 @@
-export async function register() {
-  if (process.env.NEXT_RUNTIME === "nodejs") {
-    await import("@homarr/tasks");
-    await import("@homarr/websocket");
-  }
-}
@@ -1,12 +0,0 @@
-// Prevent flash of white background when color scheme is "auto" and OS prefers dark.
-// CSS media queries are evaluated synchronously during the browser's initial paint,
-// before any JavaScript executes, so this eliminates the white→dark flicker.
-html[data-mantine-color-scheme="auto"] {
-  background-color: #fff;
-}
-
-@media (prefers-color-scheme: dark) {
-  html[data-mantine-color-scheme="auto"] {
-    background-color: #242424;
-  }
-}
@@ -1,16 +1,12 @@
 import fsPromises from "fs/promises";
-import path from "path";
-import { fileURLToPath } from "url";
 import { glob } from "glob";
-import { parse as parseYaml } from "yaml";
-import z from "zod";

 import packageJson from "../../../../package.json";

-export const getPackageVersion = () => packageJson.version;
-export const getDependenciesAsync = async (): Promise<PackageJsonDependencies> => {
+const getPackageVersion = () => packageJson.version;
+const getDependenciesAsync = async (): Promise<PackageJsonDependencies> => {
  const pathNames = await glob("**/package.json", {
-    ignore: "**/node_modules/**",
+    ignore: "node_modules/**",
    cwd: "../../",
    absolute: true,
  });
@@ -19,37 +15,21 @@ export const getDependenciesAsync = async (): Promise<PackageJsonDependencies> =
    .map((packageContent) => (JSON.parse(packageContent) as PackageJson).dependencies)
    .filter((dependencies) => dependencies !== undefined);

-  const catalog = await parseDependencyCatalogsAsync();
-
  let dependencies = {};
  for (const dependenciesOfPackage of packageDependencies) {
-    const resolvedDependencies = Object.entries(dependenciesOfPackage).map(([name, version]) => {
-      const catalogVersion = catalog.get(name);
-      return [name, catalogVersion ?? version] as const;
-    });
-    dependencies = { ...dependencies, ...Object.fromEntries(resolvedDependencies) };
+    dependencies = { ...dependencies, ...dependenciesOfPackage };
  }
  return dependencies;
 };

-type DependencyCatalog = Map<string, string>;
-const parseDependencyCatalogsAsync = async (): Promise<DependencyCatalog> => {
-  const currentDir = path.dirname(fileURLToPath(import.meta.url));
-  const workspaceConfigContent = await fsPromises.readFile(
-    path.join(currentDir, "..", "..", "..", "..", "pnpm-workspace.yaml"),
-    "utf-8",
-  );
-  const workspaceConfig: unknown = parseYaml(workspaceConfigContent);
-  const parseResult = workspaceConfigCatalogSchema.parse(workspaceConfig);
-
-  return new Map(Object.entries(parseResult.catalog ?? {}));
+export const getPackageAttributesAsync = async () => {
+  return {
+    version: getPackageVersion(),
+    dependencies: await getDependenciesAsync(),
+  };
 };

-const workspaceConfigCatalogSchema = z.object({
-  catalog: z.record(z.string(), z.string()).optional(),
-});
-
-export type PackageJsonDependencies = Record<string, string>;
+type PackageJsonDependencies = Record<string, string>;
 interface PackageJson {
  dependencies: PackageJsonDependencies | undefined;
 }
@@ -5,11 +5,12 @@
  "license": "Apache-2.0",
  "type": "module",
  "exports": {
-    ".": "./src/main.ts"
+    ".": "./src/index.ts"
  },
  "main": "./src/main.ts",
  "types": "./src/main.ts",
  "scripts": {
+    "build": "esbuild src/main.ts --bundle --platform=node --loader:.scss=text --external:*.node --external:@opentelemetry/api --external:deasync --external:bcrypt --outfile=tasks.cjs",
    "clean": "rm -rf .turbo node_modules",
    "dev": "pnpm with-env tsx ./src/main.ts",
    "format": "prettier --check . --ignore-path ../../.gitignore",
@@ -23,6 +24,7 @@
    "@homarr/auth": "workspace:^0.1.0",
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/core": "workspace:^",
+    "@homarr/cron-job-api": "workspace:^0.1.0",
    "@homarr/cron-jobs": "workspace:^0.1.0",
    "@homarr/cron-jobs-core": "workspace:^0.1.0",
    "@homarr/db": "workspace:^0.1.0",
@@ -35,23 +37,22 @@
    "@homarr/server-settings": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
    "@homarr/widgets": "workspace:^0.1.0",
-    "croner": "catalog:",
-    "dayjs": "catalog:",
-    "dotenv": "catalog:",
-    "fastify": "catalog:",
-    "superjson": "catalog:",
-    "undici": "catalog:"
+    "dayjs": "^1.11.20",
+    "dotenv": "^17.3.1",
+    "fastify": "^5.8.2",
+    "superjson": "2.2.6",
+    "undici": "7.24.5"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/node": "catalog:",
-    "dotenv-cli": "catalog:",
-    "esbuild": "catalog:",
-    "eslint": "catalog:",
-    "prettier": "catalog:",
-    "tsx": "catalog:",
-    "typescript": "catalog:"
+    "@types/node": "^24.12.0",
+    "dotenv-cli": "^11.0.0",
+    "esbuild": "^0.27.4",
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
+    "tsx": "4.20.4",
+    "typescript": "^5.9.3"
  }
 }
@@ -1,6 +1,7 @@
-import { Cron } from "croner";
+import { schedule, validate as validateCron } from "node-cron";

 import { createLogger } from "@homarr/core/infrastructure/logs";
+import type { IJobManager } from "@homarr/cron-job-api";
 import type { jobGroup as cronJobGroup, JobGroupKeys } from "@homarr/cron-jobs";
 import type { Database, InferInsertModel } from "@homarr/db";
 import { eq } from "@homarr/db";
@@ -8,7 +9,7 @@ import { cronJobConfigurations } from "@homarr/db/schema";

 const logger = createLogger({ module: "jobManager" });

-export class JobManager {
+export class JobManager implements IJobManager {
  constructor(
    private db: Database,
    private jobGroup: typeof cronJobGroup,
@@ -20,31 +21,28 @@ export class JobManager {
  public async triggerAsync(name: JobGroupKeys): Promise<void> {
    await this.jobGroup.runManuallyAsync(name);
  }
-  public stop(name: JobGroupKeys): void {
-    this.jobGroup.stop(name);
+  public async stopAsync(name: JobGroupKeys): Promise<void> {
+    await this.jobGroup.stopAsync(name);
  }
  public async updateIntervalAsync(name: JobGroupKeys, cron: string): Promise<void> {
    logger.info("Updating cron job interval", { name, expression: cron });
    const job = this.jobGroup.getJobRegistry().get(name);
    if (!job) throw new Error(`Job ${name} not found`);
+    if (!validateCron(cron)) {
+      throw new Error(`Invalid cron expression: ${cron}`);
+    }
    if (job.preventCustomInterval && cron !== job.cronExpression) {
      throw new Error(`Custom cron expressions are not allowed for job ${name}`);
    }

-    const updatedConfig = await this.updateConfigurationAsync(name, { cronExpression: cron });
-    this.jobGroup.getTask(name)?.stop();
+    await this.updateConfigurationAsync(name, { cronExpression: cron });
+    await this.jobGroup.getTask(name)?.destroy();

    this.jobGroup.setTask(
      name,
-      new Cron(
-        cron,
-        {
-          name,
-          timezone: job.timezone,
-          paused: !updatedConfig.isEnabled,
-        },
-        () => void job.executeAsync(),
-      ),
+      schedule(cron, () => void job.executeAsync(), {
+        name,
+      }),
    );
    logger.info("Cron job interval updated", { name, expression: cron });
  }
@@ -54,7 +52,7 @@ export class JobManager {
    if (!job) throw new Error(`Job ${name} not found`);

    await this.updateConfigurationAsync(name, { isEnabled: false });
-    this.jobGroup.stop(name);
+    await this.jobGroup.stopAsync(name);
    logger.info("Cron job disabled", { name });
  }
  public async enableAsync(name: JobGroupKeys): Promise<void> {
@@ -88,27 +86,21 @@ export class JobManager {
        name,
        configuration: JSON.stringify(configuration),
      });
-      return {
-        name,
-        cronExpression: configuration.cronExpression ?? existingConfig.cronExpression,
-        isEnabled: configuration.isEnabled ?? existingConfig.isEnabled,
-      };
+      return;
    }

    const job = this.jobGroup.getJobRegistry().get(name);
    if (!job) throw new Error(`Job ${name} not found`);

-    const updatedConfig = {
+    await this.db.insert(cronJobConfigurations).values({
      name,
      cronExpression: configuration.cronExpression ?? job.cronExpression,
      isEnabled: configuration.isEnabled ?? true,
-    };
-    await this.db.insert(cronJobConfigurations).values(updatedConfig);
+    });
    logger.debug("Cron job configuration updated", {
      name,
      configuration: JSON.stringify(configuration),
    });
-    return updatedConfig;
  }

  public async getAllAsync(): Promise<
@@ -1,12 +1,52 @@
 // This import has to be the first import in the file so that the agent is overridden before any other modules are imported.
 import "./overrides";

-import { jobGroup } from "@homarr/cron-jobs";
+import type { FastifyTRPCPluginOptions } from "@trpc/server/adapters/fastify";
+import { fastifyTRPCPlugin } from "@trpc/server/adapters/fastify";
+import fastify from "fastify";

+import { createLogger } from "@homarr/core/infrastructure/logs";
+import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
+import type { JobRouter } from "@homarr/cron-job-api";
+import { jobRouter } from "@homarr/cron-job-api";
+import { CRON_JOB_API_KEY_HEADER, CRON_JOB_API_PATH, CRON_JOB_API_PORT } from "@homarr/cron-job-api/constants";
+import { jobGroup } from "@homarr/cron-jobs";
+import { db } from "@homarr/db";
+
+import { JobManager } from "./job-manager";
 import { onStartAsync } from "./on-start";

+const logger = createLogger({ module: "tasksMain" });
+
+const server = fastify({
+  maxParamLength: 5000,
+});
+server.register(fastifyTRPCPlugin, {
+  prefix: CRON_JOB_API_PATH,
+  trpcOptions: {
+    router: jobRouter,
+    createContext: ({ req }) => ({
+      manager: new JobManager(db, jobGroup),
+      apiKey: req.headers[CRON_JOB_API_KEY_HEADER] as string | undefined,
+    }),
+    onError({ path, error }) {
+      logger.error(new ErrorWithMetadata("Error in tasks tRPC handler", { path }, { cause: error }));
+    },
+  } satisfies FastifyTRPCPluginOptions<JobRouter>["trpcOptions"],
+});
+
 void (async () => {
  await onStartAsync();
  await jobGroup.initializeAsync();
  await jobGroup.startAllAsync();
+
+  try {
+    await server.listen({ port: CRON_JOB_API_PORT });
+    logger.info("Tasks web server started successfully", { port: CRON_JOB_API_PORT });
+  } catch (err) {
+    logger.error(
+      new ErrorWithMetadata("Failed to start tasks web server", { port: CRON_JOB_API_PORT }, { cause: err }),
+    );
+    process.exit(1);
+  }
 })();
@@ -4,12 +4,10 @@
  "private": true,
  "license": "Apache-2.0",
  "type": "module",
-  "exports": {
-    ".": "./src/main.ts"
-  },
  "main": "./src/main.ts",
  "types": "./src/main.ts",
  "scripts": {
+    "build": "esbuild src/main.ts --bundle --platform=node --outfile=wssServer.cjs --external:bcrypt --external:@opentelemetry/api --external:deasync --external:cpu-features --loader:.html=text --loader:.scss=text --loader:.node=text",
    "clean": "rm -rf .turbo node_modules",
    "dev": "pnpm with-env tsx ./src/main.ts",
    "format": "prettier --check . --ignore-path ../../.gitignore",
@@ -27,18 +25,18 @@
    "@homarr/definitions": "workspace:^0.1.0",
    "@homarr/redis": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "dotenv": "catalog:",
-    "tsx": "catalog:",
-    "ws": "catalog:"
+    "dotenv": "^17.3.1",
+    "tsx": "4.20.4",
+    "ws": "^8.19.0"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/ws": "catalog:",
-    "esbuild": "catalog:",
-    "eslint": "catalog:",
-    "prettier": "catalog:",
-    "typescript": "catalog:"
+    "@types/ws": "^8.18.1",
+    "esbuild": "^0.27.4",
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
+    "typescript": "^5.9.3"
  }
 }
@@ -1,4 +1,4 @@
-FROM node:24.15.0-trixie AS base
+FROM node:24.14.0-trixie AS base
 WORKDIR /app
 COPY package.json .
 COPY pnpm-lock.yaml .
@@ -2,12 +2,12 @@
  "name": "homarr-prebuilt-debian",
  "private": true,
  "dependencies": {
-    "better-sqlite3": "^12.9.0"
+    "better-sqlite3": "^12.6.2"
  },
-  "packageManager": "pnpm@10.33.4",
+  "packageManager": "pnpm@10.32.1",
  "engines": {
-    "node": ">=24.15.0",
-    "pnpm": ">=10.33.4"
+    "node": ">=24.14.0",
+    "pnpm": ">=10.32.1"
  },
  "pnpm": {
    "onlyBuiltDependencies": [
@@ -9,16 +9,16 @@ importers:
  .:
    dependencies:
      better-sqlite3:
-        specifier: ^12.9.0
-        version: 12.9.0
+        specifier: ^12.6.2
+        version: 12.6.2

 packages:

  base64-js@1.5.1:
    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}

-  better-sqlite3@12.9.0:
-    resolution: {integrity: sha512-wqUv4Gm3toFpHDQmaKD4QhZm3g1DjUBI0yzS4UBl6lElUmXFYdTQmmEDpAFa5o8FiFiymURypEnfVHzILKaxqQ==}
+  better-sqlite3@12.6.2:
+    resolution: {integrity: sha512-8VYKM3MjCa9WcaSAI3hzwhmyHVlH8tiGFwf0RlTsZPWJ1I5MkzjiudCo4KC4DxOaL/53A5B1sI/IbldNFDbsKA==}
    engines: {node: 20.x || 22.x || 23.x || 24.x || 25.x}

  bindings@1.5.0:
@@ -93,7 +93,6 @@ packages:
  prebuild-install@7.1.3:
    resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==}
    engines: {node: '>=10'}
-    deprecated: No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
    hasBin: true

  pump@3.0.3:
@@ -148,7 +147,7 @@ snapshots:

  base64-js@1.5.1: {}

-  better-sqlite3@12.9.0:
+  better-sqlite3@12.6.2:
    dependencies:
      bindings: 1.5.0
      prebuild-install: 7.1.3
@@ -64,13 +64,6 @@
 </a>
 </td>
 <td align="center">
-<a href="https://homarr.dev/docs/integrations/anchor" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/anchor.svg" alt="Anchor" width="90" height="90" />
-  <br/>  
-  <p align="center">Anchor</p>
-</a>
-</td>
-<td align="center">
 <a href="https://homarr.dev/docs/integrations/aria2" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/PapirusDevelopmentTeam/papirus_icons@latest/src/system_downloads_3.svg" alt="Aria2" width="90" height="90" />
  <br/>  
@@ -104,15 +97,15 @@
  <br/>  
  <p align="center">Deluge</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/docker-hub" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/docker.svg" alt="Docker Hub" width="90" height="90" />
  <br/>  
  <p align="center">Docker<br/>Hub</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/emby" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/emby.svg" alt="Emby" width="90" height="90" />
  <br/>  
@@ -153,15 +146,15 @@
  <br/>  
  <p align="center">Home<br/>Assistant</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/ical" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/ical.svg" alt="iCal" width="90" height="90" />
  <br/>  
  <p align="center">iCal</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/immich" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/immich.svg" alt="Immich" width="90" height="90" />
  <br/>  
@@ -202,15 +195,15 @@
  <br/>  
  <p align="center">Nextcloud</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/npm" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/npm.svg" alt="NPM" width="90" height="90" />
  <br/>  
  <p align="center">NPM</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/ntfy" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/ntfy.svg" alt="ntfy" width="90" height="90" />
  <br/>  
@@ -251,15 +244,15 @@
  <br/>  
  <p align="center">Pi-hole</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/plex" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/plex.svg" alt="Plex" width="90" height="90" />
  <br/>  
  <p align="center">Plex</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/prowlarr" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/prowlarr.svg" alt="Prowlarr" width="90" height="90" />
  <br/>  
@@ -300,22 +293,15 @@
  <br/>  
  <p align="center">Readarr</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/sabnzbd" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/sabnzbd.svg" alt="SABnzbd" width="90" height="90" />
  <br/>  
  <p align="center">SABnzbd</p>
 </a>
-</td>
-<td align="center">
-<a href="https://homarr.dev/docs/integrations/search-ch" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/search-ch.png" alt="Search.ch" width="90" height="90" />
-  <br/>  
-  <p align="center">Search.ch</p>
-</a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/seerr" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/seerr.svg" alt="Seerr" width="90" height="90" />
  <br/>  
@@ -337,20 +323,13 @@
 </a>
 </td>
 <td align="center">
-<a href="https://homarr.dev/docs/integrations/speedtest-tracker" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/speedtest-tracker.png" alt="Speedtest Tracker" width="90" height="90" />
-  <br/>  
-  <p align="center">Speedtest<br/>Tracker</p>
-</a>
-</td>
-<td align="center">
 <a href="https://homarr.dev/docs/integrations/tdarr" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/tdarr.png" alt="Tdarr" width="90" height="90" />
  <br/>  
  <p align="center">Tdarr</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/tracearr" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/tracearr.svg" alt="Tracearr" width="90" height="90" />
  <br/>  
@@ -370,15 +349,8 @@
  <br/>  
  <p align="center">TrueNAS</p>
 </a>
-</td>
-<td align="center">
-<a href="https://homarr.dev/docs/integrations/umami" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/umami.svg" alt="Umami" width="90" height="90" />
-  <br/>  
-  <p align="center">Umami</p>
-</a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/unifi-controller" target="_blank" rel="noreferrer noopener">
  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/unifi.png" alt="Unifi Controller" width="90" height="90" />
  <br/>  
@@ -1,6 +1,6 @@
 {
  "name": "homarr",
-  "version": "1.61.1-beta.1",
+  "version": "1.56.1",
  "private": true,
  "scripts": {
    "build": "cross-env CI=true turbo build",
@@ -15,7 +15,7 @@
    "db:migration:sqlite:run": "pnpm -F db migration:sqlite:run",
    "db:push": "pnpm -F db push:sqlite",
    "db:studio": "pnpm -F db studio",
-    "dev": "pnpm -F nextjs dev",
+    "dev": "turbo dev --parallel",
    "docker:dev": "docker compose -f ./development/development.docker-compose.yml up",
    "format": "turbo format --continue -- --cache --cache-location node_modules/.cache/.prettiercache",
    "format:fix": "turbo format --continue -- --write --cache --cache-location node_modules/.cache/.prettiercache",
@@ -36,33 +36,33 @@
  "prettier": "@homarr/prettier-config",
  "devDependencies": {
    "@homarr/prettier-config": "workspace:^0.1.0",
-    "@semantic-release/changelog": "catalog:",
-    "@semantic-release/commit-analyzer": "catalog:",
-    "@semantic-release/git": "catalog:",
-    "@semantic-release/github": "catalog:",
-    "@semantic-release/npm": "catalog:",
-    "@semantic-release/release-notes-generator": "catalog:",
-    "@testcontainers/redis": "catalog:",
-    "@turbo/gen": "catalog:",
-    "@vitejs/plugin-react": "catalog:",
-    "@vitest/coverage-v8": "catalog:",
-    "@vitest/ui": "catalog:",
-    "conventional-changelog-conventionalcommits": "catalog:",
-    "cross-env": "catalog:",
-    "jsdom": "catalog:",
-    "json5": "catalog:",
-    "prettier": "catalog:",
-    "semantic-release": "catalog:",
-    "testcontainers": "catalog:",
-    "turbo": "catalog:",
-    "typescript": "catalog:",
-    "vite-tsconfig-paths": "catalog:",
-    "vitest": "catalog:"
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/commit-analyzer": "^13.0.1",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/npm": "^13.1.5",
+    "@semantic-release/release-notes-generator": "^14.1.0",
+    "@testcontainers/redis": "^11.13.0",
+    "@turbo/gen": "^2.8.20",
+    "@vitejs/plugin-react": "^5.2.0",
+    "@vitest/coverage-v8": "^4.1.0",
+    "@vitest/ui": "^4.1.0",
+    "conventional-changelog-conventionalcommits": "^9.3.0",
+    "cross-env": "^10.1.0",
+    "jsdom": "^28.1.0",
+    "json5": "^2.2.3",
+    "prettier": "^3.8.1",
+    "semantic-release": "^25.0.3",
+    "testcontainers": "^11.13.0",
+    "turbo": "^2.8.20",
+    "typescript": "^5.9.3",
+    "vite-tsconfig-paths": "^6.1.1",
+    "vitest": "^4.1.0"
  },
-  "packageManager": "pnpm@10.33.4",
+  "packageManager": "pnpm@10.32.1",
  "engines": {
-    "node": ">=24.15.0",
-    "pnpm": ">=10.33.4"
+    "node": ">=24.14.0",
+    "pnpm": ">=10.32.1"
  },
  "pnpm": {
    "onlyBuiltDependencies": [
@@ -79,23 +79,23 @@
    "overrides": {
      "@babel/helpers@<7.26.10": ">=7.29.2",
      "@babel/runtime@<7.26.10": ">=7.29.2",
-      "axios@>=1.0.0 <1.8.2": ">=1.16.0",
-      "brace-expansion@>=2.0.0 <=2.0.1": ">=5.0.6",
-      "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.6",
-      "esbuild@<=0.24.2": ">=0.28.0",
+      "axios@>=1.0.0 <1.8.2": ">=1.13.6",
+      "brace-expansion@>=2.0.0 <=2.0.1": ">=5.0.4",
+      "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.4",
+      "esbuild@<=0.24.2": ">=0.27.4",
      "form-data@>=4.0.0 <4.0.4": ">=4.0.5",
-      "hono@<4.6.5": ">=4.12.16",
+      "hono@<4.6.5": ">=4.12.8",
      "linkifyjs@<4.3.2": ">=4.3.2",
-      "nanoid@>=4.0.0 <5.0.9": ">=5.1.11",
+      "nanoid@>=4.0.0 <5.0.9": ">=5.1.7",
      "prismjs@<1.30.0": ">=1.30.0",
-      "proxmox-api>undici": "7.24.6",
-      "react-is": "^19.2.6",
-      "rollup@>=4.0.0 <4.22.4": ">=4.60.3",
+      "proxmox-api>undici": "7.24.0",
+      "react-is": "^19.2.4",
+      "rollup@>=4.0.0 <4.22.4": ">=4.59.0",
      "sha.js@<=2.4.11": ">=2.4.12",
      "tar-fs@>=3.0.0 <3.0.9": ">=3.1.2",
      "tar-fs@>=2.0.0 <2.1.3": ">=3.1.2",
      "tmp@<=0.2.3": ">=0.2.5",
-      "vite@>=5.0.0 <=5.4.18": ">=8.0.11"
+      "vite@>=5.0.0 <=5.4.18": ">=8.0.1"
    },
    "patchedDependencies": {
      "@types/node-unifi": "patches/@types__node-unifi.patch",
@@ -28,14 +28,14 @@
    "@homarr/db": "workspace:^0.1.0",
    "@homarr/docker": "workspace:^0.1.0",
    "@homarr/server-settings": "workspace:^0.1.0",
-    "@umami/node": "catalog:",
-    "superjson": "catalog:"
+    "@umami/node": "^0.4.0",
+    "superjson": "2.2.6"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
  }
 }
@@ -9,8 +9,7 @@
    "./client": "./src/client.ts",
    "./server": "./src/server.ts",
    "./websocket": "./src/websocket.ts",
-    "./shared": "./src/shared.ts",
-    "./open-api": "./src/open-api.ts"
+    "./shared": "./src/shared.ts"
  },
  "main": "./index.ts",
  "types": "./index.ts",
@@ -25,6 +24,7 @@
    "@homarr/auth": "workspace:^0.1.0",
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/core": "workspace:^0.1.0",
+    "@homarr/cron-job-api": "workspace:^0.1.0",
    "@homarr/cron-job-status": "workspace:^0.1.0",
    "@homarr/cron-jobs": "workspace:^0.1.0",
    "@homarr/db": "workspace:^0.1.0",
@@ -40,26 +40,26 @@
    "@homarr/server-settings": "workspace:^0.1.0",
    "@homarr/translation": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "@kubernetes/client-node": "catalog:",
-    "@tanstack/react-query": "catalog:",
-    "@trpc/client": "catalog:",
-    "@trpc/react-query": "catalog:",
-    "@trpc/server": "catalog:",
-    "@trpc/tanstack-react-query": "catalog:",
-    "lodash.clonedeep": "catalog:",
-    "next": "catalog:",
-    "react": "catalog:",
-    "react-dom": "catalog:",
-    "superjson": "catalog:",
-    "trpc-to-openapi": "catalog:",
-    "zod": "catalog:"
+    "@kubernetes/client-node": "^1.4.0",
+    "@tanstack/react-query": "^5.91.2",
+    "@trpc/client": "^11.13.4",
+    "@trpc/react-query": "^11.13.4",
+    "@trpc/server": "^11.13.4",
+    "@trpc/tanstack-react-query": "^11.13.4",
+    "lodash.clonedeep": "^4.5.0",
+    "next": "16.2.0",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "superjson": "2.2.6",
+    "trpc-to-openapi": "^3.1.0",
+    "zod": "^4.2.1"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "prettier": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
+    "typescript": "^5.9.3"
  }
 }
@@ -1,5 +1,6 @@
 import type { inferRouterInputs, inferRouterOutputs } from "@trpc/server";

+import { openApiDocument } from "./open-api";
 import type { AppRouter } from "./root";
 import { appRouter } from "./root";
 import { createCallerFactory, createTRPCContext } from "./trpc";
@@ -29,5 +30,5 @@ type RouterInputs = inferRouterInputs<AppRouter>;
 **/
 type RouterOutputs = inferRouterOutputs<AppRouter>;

-export { createTRPCContext, appRouter, createCaller };
+export { createTRPCContext, appRouter, createCaller, openApiDocument };
 export type { AppRouter, RouterInputs, RouterOutputs };
@@ -2,21 +2,10 @@ import { generateOpenApiDocument } from "trpc-to-openapi";

 import { API_KEY_HEADER_NAME } from "@homarr/auth/api-key";

-import { appRouter } from "./router/app";
-import { infoRouter } from "./router/info";
-import { inviteRouter } from "./router/invite";
-import { userRouter } from "./router/user";
-import { createTRPCRouter } from "./trpc";
-
-export const openApiRouter = createTRPCRouter({
-  appRouter,
-  infoRouter,
-  inviteRouter,
-  userRouter,
-});
+import { appRouter } from "./root";

 export const openApiDocument = (base: string) =>
-  generateOpenApiDocument(openApiRouter, {
+  generateOpenApiDocument(appRouter, {
    title: "Homarr API documentation",
    version: "1.0.0",
    baseUrl: base,
@@ -26,7 +26,6 @@ export const appRouter = createTRPCRouter({
  media: lazy(() => import("./router/medias/media-router").then((mod) => mod.mediaRouter)),
  updateChecker: lazy(() => import("./router/update-checker").then((mod) => mod.updateCheckerRouter)),
  certificates: lazy(() => import("./router/certificates/certificate-router").then((mod) => mod.certificateRouter)),
-  bangs: lazy(() => import("./router/bangs/bangs-router").then((mod) => mod.bangsRouter)),
  info: lazy(() => import("./router/info").then((mod) => mod.infoRouter)),
 });

@@ -1,6 +1,6 @@
 import { z } from "zod/v4";

-import { hashPasswordAsync } from "@homarr/auth";
+import { createSaltAsync, hashPasswordAsync } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { generateSecureRandomToken } from "@homarr/common/server";
 import { db, eq } from "@homarr/db";
@@ -14,6 +14,7 @@ export const apiKeysRouter = createTRPCRouter({
      columns: {
        id: true,
        apiKey: false,
+        salt: false,
      },
      with: {
        user: {
@@ -28,12 +29,14 @@ export const apiKeysRouter = createTRPCRouter({
    });
  }),
  create: permissionRequiredProcedure.requiresPermission("admin").mutation(async ({ ctx }) => {
+    const salt = await createSaltAsync();
    const randomToken = generateSecureRandomToken(64);
-    const hashedRandomToken = await hashPasswordAsync(randomToken);
+    const hashedRandomToken = await hashPasswordAsync(randomToken, salt);
    const id = createId();
    await db.insert(apiKeys).values({
      id,
      apiKey: hashedRandomToken,
+      salt,
      userId: ctx.session.user.id,
    });
    return {
@@ -1,17 +0,0 @@
-import { z } from "zod/v4";
-
-import { searchDuckDuckGoBangsAsync } from "../../services/duckduckgo-bangs";
-import { createTRPCRouter, publicProcedure } from "../../trpc";
-
-export const bangsRouter = createTRPCRouter({
-  search: publicProcedure
-    .input(
-      z.object({
-        query: z.string(),
-        limit: z.number().int().min(1).max(50).default(20),
-      }),
-    )
-    .query(async ({ input }) => {
-      return await searchDuckDuckGoBangsAsync({ query: input.query, limit: input.limit });
-    }),
-});
@@ -2,62 +2,59 @@ import { observable } from "@trpc/server/observable";
 import z from "zod/v4";

 import { createLogger } from "@homarr/core/infrastructure/logs";
+import { cronExpressionSchema, jobGroupKeys, jobNameSchema } from "@homarr/cron-job-api";
+import { cronJobApi } from "@homarr/cron-job-api/client";
 import type { TaskStatus } from "@homarr/cron-job-status";
 import { createCronJobStatusChannel } from "@homarr/cron-job-status";
-import { jobGroup } from "@homarr/cron-jobs";
-import { JobManager } from "@homarr/cron-jobs/job-manager";

 import { createTRPCRouter, permissionRequiredProcedure } from "../trpc";

-const jobGroupKeys = jobGroup.getKeys();
-const jobNameSchema = z.enum(jobGroup.getKeys());
-
 const logger = createLogger({ module: "cronJobsRouter" });

 export const cronJobsRouter = createTRPCRouter({
  triggerJob: permissionRequiredProcedure
    .requiresPermission("admin")
    .input(jobNameSchema)
-    .mutation(async ({ input, ctx }) => {
-      await new JobManager(ctx.db, jobGroup).triggerAsync(input);
+    .mutation(async ({ input }) => {
+      await cronJobApi.trigger.mutate(input);
    }),
  startJob: permissionRequiredProcedure
    .requiresPermission("admin")
    .input(jobNameSchema)
-    .mutation(async ({ input, ctx }) => {
-      await new JobManager(ctx.db, jobGroup).startAsync(input);
+    .mutation(async ({ input }) => {
+      await cronJobApi.start.mutate(input);
    }),
  stopJob: permissionRequiredProcedure
    .requiresPermission("admin")
    .input(jobNameSchema)
-    .mutation(({ input, ctx }) => {
-      new JobManager(ctx.db, jobGroup).stop(input);
+    .mutation(async ({ input }) => {
+      await cronJobApi.stop.mutate(input);
    }),
  updateJobInterval: permissionRequiredProcedure
    .requiresPermission("admin")
    .input(
      z.object({
        name: jobNameSchema,
-        cron: z.string(),
+        cron: cronExpressionSchema,
      }),
    )
-    .mutation(async ({ input, ctx }) => {
-      await new JobManager(ctx.db, jobGroup).updateIntervalAsync(input.name, input.cron);
+    .mutation(async ({ input }) => {
+      await cronJobApi.updateInterval.mutate(input);
    }),
  disableJob: permissionRequiredProcedure
    .requiresPermission("admin")
    .input(jobNameSchema)
-    .mutation(async ({ input, ctx }) => {
-      await new JobManager(ctx.db, jobGroup).disableAsync(input);
+    .mutation(async ({ input }) => {
+      await cronJobApi.disable.mutate(input);
    }),
  enableJob: permissionRequiredProcedure
    .requiresPermission("admin")
    .input(jobNameSchema)
-    .mutation(async ({ input, ctx }) => {
-      await new JobManager(ctx.db, jobGroup).enableAsync(input);
+    .mutation(async ({ input }) => {
+      await cronJobApi.enable.mutate(input);
    }),
-  getJobs: permissionRequiredProcedure.requiresPermission("admin").query(async ({ ctx }) => {
-    return await new JobManager(ctx.db, jobGroup).getAllAsync();
+  getJobs: permissionRequiredProcedure.requiresPermission("admin").query(async () => {
+    return await cronJobApi.getAll.query();
  }),
  subscribeToStatusUpdates: permissionRequiredProcedure.requiresPermission("admin").subscription(() => {
    return observable<TaskStatus>((emit) => {
@@ -138,10 +138,9 @@ const getContainerOrThrowAsync = async (id: string) => {
 interface DockerContainer {
  name: string;
  id: string;
-  host: string;
  state: ContainerState;
  image: string;
-  ports: Port[] | undefined;
+  ports: Port[];
  iconUrl: string | null;
  cpuUsage: number;
  memoryUsage: number;
@@ -208,7 +208,6 @@ async function setupUrlRestrictionAsync(dbUrls: string[]) {
              hideDescription: false,
              textLinesClamp: 3,
              maximumAmountPosts: 5,
-              showPosterImage: true,
            } satisfies WidgetComponentProps<"rssFeed">["options"]),
          }) satisfies InferInsertModel<typeof items>,
      ),
@@ -3,7 +3,7 @@ import type { MySqlRawQueryResult } from "drizzle-orm/mysql2";
 import type { QueryResult } from "pg";
 import { z } from "zod/v4";

-import { comparePasswordsAsync, hashPasswordAsync } from "@homarr/auth";
+import { createSaltAsync, hashPasswordAsync } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import type { Database } from "@homarr/db";
@@ -11,8 +11,8 @@ import { and, eq, handleTransactionsAsync, like } from "@homarr/db";
 import { getMaxGroupPositionAsync } from "@homarr/db/queries";
 import { boards, groupMembers, groupPermissions, groups, invites, users } from "@homarr/db/schema";
 import { selectUserSchema } from "@homarr/db/validationSchemas";
-import type { SupportedAuthProvider } from "@homarr/definitions";
 import { credentialsAdminGroup } from "@homarr/definitions";
+import type { SupportedAuthProvider } from "@homarr/definitions";
 import { byIdSchema } from "@homarr/validation/common";
 import type { userBaseCreateSchema } from "@homarr/validation/user";
 import {
@@ -21,7 +21,6 @@ import {
  userChangePasswordApiSchema,
  userChangeSearchPreferencesSchema,
  userCreateSchema,
-  userDdgBangsSchema,
  userEditProfileSchema,
  userFirstDayOfWeekSchema,
  userInitSchema,
@@ -93,13 +92,15 @@ export const userRouter = createTRPCRouter({

      await checkUsernameAlreadyTakenAndThrowAsync(ctx.db, "credentials", input.username);

-      const hashedPassword = await hashPasswordAsync(input.password);
+      const salt = await createSaltAsync();
+      const hashedPassword = await hashPasswordAsync(input.password, salt);

      const userId = createId();
      const user = {
        id: userId,
        name: input.username,
        password: hashedPassword,
+        salt,
      };

      await handleTransactionsAsync(ctx.db, {
@@ -111,7 +112,7 @@ export const userRouter = createTRPCRouter({
            const queryResult = (await trx.delete(schema.invites).where(inviteWhere)) as
              | QueryResult
              | MySqlRawQueryResult;
-            let count: number;
+            let count = 0;
            if (Array.isArray(queryResult)) {
              count = queryResult[0].affectedRows;
            } else {
@@ -144,7 +145,7 @@ export const userRouter = createTRPCRouter({
  create: permissionRequiredProcedure
    .requiresPermission("admin")
    .meta({ openapi: { method: "POST", path: "/api/users", tags: ["users"], protect: true } })
-    .input(convertIntersectionToZodObject(userCreateSchema))
+    .input(userCreateSchema)
    .output(z.void())
    .mutation(async ({ ctx, input }) => {
      throwIfCredentialsDisabled();
@@ -277,7 +278,6 @@ export const userRouter = createTRPCRouter({
        pingIconsEnabled: true,
        defaultSearchEngineId: true,
        openSearchInNewTab: true,
-        ddgBangs: true,
      }),
    )
    .meta({ openapi: { method: "GET", path: "/api/users/{userId}", tags: ["users"], protect: true } })
@@ -303,7 +303,6 @@ export const userRouter = createTRPCRouter({
          pingIconsEnabled: true,
          defaultSearchEngineId: true,
          openSearchInNewTab: true,
-          ddgBangs: true,
        },
        where: eq(users.id, input.userId),
      });
@@ -377,7 +376,7 @@ export const userRouter = createTRPCRouter({
      await ctx.db.delete(users).where(eq(users.id, input.userId));
    }),
  changePassword: protectedProcedure
-    .input(convertIntersectionToZodObject(userChangePasswordApiSchema))
+    .input(userChangePasswordApiSchema)
    .output(z.void())
    .meta({ openapi: { method: "PATCH", path: "/api/users/{userId}/changePassword", tags: ["users"], protect: true } })
    .mutation(async ({ ctx, input }) => {
@@ -394,6 +393,7 @@ export const userRouter = createTRPCRouter({
        columns: {
          id: true,
          password: true,
+          salt: true,
          provider: true,
        },
        where: eq(users.id, input.userId),
@@ -423,7 +423,8 @@ export const userRouter = createTRPCRouter({
      });

      if (isPreviousPasswordRequired) {
-        const isValid = await comparePasswordsAsync(input.previousPassword, dbUser.password ?? "");
+        const previousPasswordHash = await hashPasswordAsync(input.previousPassword, dbUser.salt ?? "");
+        const isValid = previousPasswordHash === dbUser.password;

        if (!isValid) {
          throw new TRPCError({
@@ -433,7 +434,8 @@ export const userRouter = createTRPCRouter({
        }
      }

-      const hashedPassword = await hashPasswordAsync(input.password);
+      const salt = await createSaltAsync();
+      const hashedPassword = await hashPasswordAsync(input.password, salt);
      await ctx.db
        .update(users)
        .set({
@@ -544,33 +546,6 @@ export const userRouter = createTRPCRouter({
        })
        .where(eq(users.id, ctx.session.user.id));
    }),
-  changeDdgBangs: protectedProcedure
-    .input(convertIntersectionToZodObject(userDdgBangsSchema.and(byIdSchema)))
-    .output(z.void())
-    .meta({
-      openapi: {
-        method: "PATCH",
-        path: "/api/users/ddg-bangs",
-        tags: ["users"],
-        protect: true,
-        deprecated: true,
-      },
-    })
-    .mutation(async ({ input, ctx }) => {
-      if (!ctx.session.user.permissions.includes("admin") && ctx.session.user.id !== input.id) {
-        throw new TRPCError({
-          code: "NOT_FOUND",
-          message: "User not found",
-        });
-      }
-
-      await ctx.db
-        .update(users)
-        .set({
-          ddgBangs: input.ddgBangs,
-        })
-        .where(eq(users.id, input.id));
-    }),
  changeFirstDayOfWeek: protectedProcedure
    .input(convertIntersectionToZodObject(userFirstDayOfWeekSchema.and(byIdSchema)))
    .output(z.void())
@@ -608,7 +583,8 @@ export const userRouter = createTRPCRouter({
 });

 const createUserAsync = async (db: Database, input: Omit<z.infer<typeof userBaseCreateSchema>, "groupIds">) => {
-  const hashedPassword = await hashPasswordAsync(input.password);
+  const salt = await createSaltAsync();
+  const hashedPassword = await hashPasswordAsync(input.password, salt);

  const userId = createId();
  await db.insert(users).values({
@@ -616,6 +592,7 @@ const createUserAsync = async (db: Database, input: Omit<z.infer<typeof userBase
    name: input.username,
    email: input.email,
    password: hashedPassword,
+    salt,
  });
  return userId;
 };
@@ -15,13 +15,10 @@ export const changeSearchPreferencesInputSchema = userChangeSearchPreferencesSch
 export const changeSearchPreferencesAsync = async (
  db: Database,
  session: Session,
-  input: Modify<
-    z.infer<typeof changeSearchPreferencesInputSchema>,
-    { openInNewTab: boolean | undefined; ddgBangsEnabled: boolean | undefined }
-  >,
+  input: Modify<z.infer<typeof changeSearchPreferencesInputSchema>, { openInNewTab: boolean | undefined }>,
 ) => {
  const user = session.user;
-  // Only admins can change other users search preferences
+  // Only admins can change other users passwords
  if (!user.permissions.includes("admin") && user.id !== input.userId) {
    throw new TRPCError({
      code: "NOT_FOUND",
@@ -48,7 +45,6 @@ export const changeSearchPreferencesAsync = async (
    .set({
      defaultSearchEngineId: input.defaultSearchEngineId,
      openSearchInNewTab: input.openInNewTab,
-      ddgBangs: input.ddgBangsEnabled,
    })
    .where(eq(users.id, input.userId));
 };
@@ -1,114 +0,0 @@
-import { TRPCError } from "@trpc/server";
-import { z } from "zod/v4";
-
-import { ResponseError } from "@homarr/common/server";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { anchorNotesListInputSchema, anchorNoteUpdateInputSchema, createIntegrationAsync } from "@homarr/integrations";
-import { anchorNoteRequestHandler, anchorNotesListRequestHandler } from "@homarr/request-handler/anchor-notes";
-
-import { createOneIntegrationMiddleware } from "../../middlewares/integration";
-import { createTRPCRouter, protectedProcedure, publicProcedure } from "../../trpc";
-
-const noteIdInput = z.object({
-  noteId: z.string(),
-});
-
-const logger = createLogger({ module: "anchorNotesRouter" });
-
-const isJsonDeltaString = (value: string) => {
-  try {
-    const parsed: unknown = JSON.parse(value);
-    return typeof parsed === "object" && parsed !== null && Array.isArray((parsed as { ops?: unknown }).ops);
-  } catch {
-    return false;
-  }
-};
-
-const normalizeAnchorContent = (content: string | undefined) => {
-  if (content === undefined) return undefined;
-
-  const trimmed = content.trim();
-  if (!trimmed) {
-    return JSON.stringify({ ops: [{ insert: "\n" }] });
-  }
-
-  if (isJsonDeltaString(content)) return content;
-
-  const normalizedText = content.endsWith("\n") ? content : `${content}\n`;
-  return JSON.stringify({ ops: [{ insert: normalizedText }] });
-};
-
-export const anchorNotesRouter = createTRPCRouter({
-  listNotes: publicProcedure
-    .concat(createOneIntegrationMiddleware("query", "anchor"))
-    .input(anchorNotesListInputSchema)
-    .query(async ({ ctx, input }) => {
-      const handler = anchorNotesListRequestHandler.handler(ctx.integration, { ...input, limit: input.limit ?? 50 });
-
-      const { data } = await handler.getCachedOrUpdatedDataAsync({
-        forceUpdate: false,
-      });
-
-      return data;
-    }),
-  getNote: publicProcedure
-    .concat(createOneIntegrationMiddleware("query", "anchor"))
-    .input(noteIdInput)
-    .query(async ({ ctx, input }) => {
-      const handler = anchorNoteRequestHandler.handler(ctx.integration, { noteId: input.noteId });
-
-      const { data } = await handler.getCachedOrUpdatedDataAsync({
-        forceUpdate: false,
-      });
-
-      return data;
-    }),
-  updateNote: protectedProcedure
-    .concat(createOneIntegrationMiddleware("interact", "anchor"))
-    .input(anchorNoteUpdateInputSchema)
-    .mutation(async ({ ctx, input }) => {
-      const integrationInstance = await createIntegrationAsync(ctx.integration);
-      const normalizedContent = normalizeAnchorContent(input.content);
-      const isContentNormalized =
-        input.content !== undefined && normalizedContent !== undefined && input.content !== normalizedContent;
-
-      try {
-        const updatedNote = await integrationInstance.updateNoteAsync({
-          noteId: input.noteId,
-          ...(input.title !== undefined ? { title: input.title } : {}),
-          ...(normalizedContent !== undefined ? { content: normalizedContent } : {}),
-        });
-
-        const noteHandler = anchorNoteRequestHandler.handler(ctx.integration, { noteId: input.noteId });
-        await noteHandler.invalidateAsync();
-
-        return updatedNote;
-      } catch (error) {
-        if (error instanceof ResponseError && error.statusCode === 400) {
-          logger.warn("Anchor update note failed validation", {
-            noteId: input.noteId,
-            integrationId: ctx.integration.id,
-            contentLength: input.content?.length ?? 0,
-            contentIsJsonDelta: input.content ? isJsonDeltaString(input.content) : false,
-            contentNormalized: isContentNormalized,
-          });
-        }
-
-        if (error instanceof ResponseError && error.statusCode === 403) {
-          throw new TRPCError({
-            code: "FORBIDDEN",
-            message: "You do not have permission to edit this note",
-          });
-        }
-
-        if (error instanceof ResponseError && error.statusCode === 404) {
-          throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Note not found",
-          });
-        }
-
-        throw error;
-      }
-    }),
-});
@@ -2,8 +2,6 @@ import { observable } from "@trpc/server/observable";
 import { z } from "zod/v4";

 import type { Modify } from "@homarr/common/types";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
 import type { Integration } from "@homarr/db/schema";
 import type { IntegrationKindByCategory } from "@homarr/definitions";
 import { getIntegrationKindsByCategory } from "@homarr/definitions";
@@ -14,8 +12,6 @@ import { calendarMonthRequestHandler } from "@homarr/request-handler/calendar";
 import { createManyIntegrationMiddleware } from "../../middlewares/integration";
 import { createTRPCRouter, publicProcedure } from "../../trpc";

-const logger = createLogger({ module: "calendarRouter" });
-
 export const calendarRouter = createTRPCRouter({
  findAllEvents: publicProcedure
    .input(
@@ -28,7 +24,7 @@ export const calendarRouter = createTRPCRouter({
    )
    .concat(createManyIntegrationMiddleware("query", ...getIntegrationKindsByCategory("calendar")))
    .query(async ({ ctx, input }) => {
-      const settled = await Promise.allSettled(
+      return await Promise.all(
        ctx.integrations.map(async (integration) => {
          const { integrationIds: _integrationIds, ...handlerInput } = input;
          const innerHandler = calendarMonthRequestHandler.handler(integration, handlerInput);
@@ -44,24 +40,6 @@ export const calendarRouter = createTRPCRouter({
          };
        }),
      );
-
-      return settled.flatMap((result, index) => {
-        if (result.status === "fulfilled") {
-          return [result.value];
-        }
-        const integration = ctx.integrations[index];
-        logger.warn(
-          new ErrorWithMetadata(
-            "Calendar integration request failed; skipping events for this integration",
-            {
-              integrationId: integration?.id,
-              integrationKind: integration?.kind,
-            },
-            { cause: result.reason },
-          ),
-        );
-        return [];
-      });
    }),
  subscribeToEvents: publicProcedure
    .input(
@@ -3,7 +3,6 @@ import { lazy } from "@trpc/server";
 import { createTRPCRouter } from "../../trpc";

 export const widgetRouter = createTRPCRouter({
-  anchorNotes: lazy(() => import("./anchor-notes").then((mod) => mod.anchorNotesRouter)),
  coolify: lazy(() => import("./coolify").then((mod) => mod.coolifyRouter)),
  immich: lazy(() => import("./immich").then((mod) => mod.immichRouter)),
  notebook: lazy(() => import("./notebook").then((mod) => mod.notebookRouter)),
@@ -27,8 +26,5 @@ export const widgetRouter = createTRPCRouter({
  networkController: lazy(() => import("./network-controller").then((mod) => mod.networkControllerRouter)),
  firewall: lazy(() => import("./firewall").then((mod) => mod.firewallRouter)),
  notifications: lazy(() => import("./notifications").then((mod) => mod.notificationsRouter)),
-  timetable: lazy(() => import("./timetable").then((mod) => mod.timetableRouter)),
  tracearr: lazy(() => import("./tracearr").then((mod) => mod.tracearrRouter)),
-  speedtestTracker: lazy(() => import("./speedtest-tracker").then((mod) => mod.speedtestTrackerRouter)),
-  umami: lazy(() => import("./umami").then((mod) => mod.umamiRouter)),
 });
@@ -1,4 +1,3 @@
-import { observable } from "@trpc/server/observable";
 import SuperJSON from "superjson";
 import { z } from "zod/v4";

@@ -6,59 +5,45 @@ import type { Session } from "@homarr/auth";
 import type { Database } from "@homarr/db";
 import { eq } from "@homarr/db";
 import { items, users } from "@homarr/db/schema";
-import type { ExtendedFeedEntry } from "@homarr/request-handler/rss-feeds";
 import { rssFeedsRequestHandler } from "@homarr/request-handler/rss-feeds";

 import type { WidgetComponentProps } from "../../../../widgets/src";
 import { createTRPCRouter, publicProcedure } from "../../trpc";

-const feedsInput = z.object({
-  urls: z.array(z.string()).max(100),
-  maximumAmountPosts: z.number(),
-});
-
 export const rssFeedRouter = createTRPCRouter({
-  getFeeds: publicProcedure.input(feedsInput).query(async ({ ctx, input }) => {
-    const urls = (await canAccessAllFeedsAsync(ctx.db, ctx.session))
-      ? input.urls
-      : await restrictUrlsAsync(ctx.db, input.urls);
-
-    const rssFeeds = await Promise.all(
-      urls.map(async (url) => {
-        const innerHandler = rssFeedsRequestHandler.handler({
-          url,
-          count: input.maximumAmountPosts,
-        });
-        return await innerHandler.getCachedOrUpdatedDataAsync({
-          forceUpdate: false,
-        });
+  getFeeds: publicProcedure
+    .input(
+      z.object({
+        urls: z.array(z.string()).max(100),
+        maximumAmountPosts: z.number(),
      }),
-    );
+    )
+    .query(async ({ ctx, input }) => {
+      const urls = (await canAccessAllFeedsAsync(ctx.db, ctx.session))
+        ? input.urls
+        : await restrictUrlsAsync(ctx.db, input.urls);

-    return rssFeeds
-      .flatMap((rssFeed) => rssFeed.data.entries)
-      .slice(0, input.maximumAmountPosts)
-      .sort((entryA, entryB) => {
-        return entryA.published && entryB.published
-          ? new Date(entryB.published).getTime() - new Date(entryA.published).getTime()
-          : 0;
-      });
-  }),
-  subscribeFeeds: publicProcedure.input(feedsInput).subscription(({ input }) => {
-    // It is not necessary to check access to all feeds here, as the client will only subscribe to feeds which already exist
-    return observable<{ url: string; entries: ExtendedFeedEntry[] }>((emit) => {
-      const unsubscribes = input.urls.map((url) => {
-        const innerHandler = rssFeedsRequestHandler.handler({ url, count: input.maximumAmountPosts });
-        return innerHandler.subscribe((data) => {
-          emit.next({ url, entries: data.entries });
+      const rssFeeds = await Promise.all(
+        urls.map(async (url) => {
+          const innerHandler = rssFeedsRequestHandler.handler({
+            url,
+            count: input.maximumAmountPosts,
+          });
+          return await innerHandler.getCachedOrUpdatedDataAsync({
+            forceUpdate: false,
+          });
+        }),
+      );
+
+      return rssFeeds
+        .flatMap((rssFeed) => rssFeed.data.entries)
+        .slice(0, input.maximumAmountPosts)
+        .sort((entryA, entryB) => {
+          return entryA.published && entryB.published
+            ? new Date(entryB.published).getTime() - new Date(entryA.published).getTime()
+            : 0;
        });
-      });
-
-      return () => {
-        unsubscribes.forEach((unsubscribe) => unsubscribe());
-      };
-    });
-  }),
+    }),
 });

 export async function canAccessAllFeedsAsync(db: Database, session: Session | null) {
@@ -1,55 +0,0 @@
-import { observable } from "@trpc/server/observable";
-
-import type { SpeedtestTrackerDashboardData } from "@homarr/integrations/types";
-import { speedtestTrackerRequestHandler } from "@homarr/request-handler/speedtest-tracker";
-
-import { createManyIntegrationMiddleware } from "../../middlewares/integration";
-import { createTRPCRouter, publicProcedure } from "../../trpc";
-
-export const speedtestTrackerRouter = createTRPCRouter({
-  getDashboard: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "speedtestTracker"))
-    .query(async ({ ctx }) => {
-      const results = await Promise.all(
-        ctx.integrations.map(async (integration) => {
-          const innerHandler = speedtestTrackerRequestHandler.handler(integration, {});
-          const { data, timestamp } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-
-          return {
-            integrationId: integration.id,
-            integrationName: integration.name,
-            integrationUrl: integration.url,
-            dashboard: data,
-            updatedAt: timestamp,
-          };
-        }),
-      );
-
-      return results;
-    }),
-
-  subscribeToDashboard: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "speedtestTracker"))
-    .subscription(({ ctx }) => {
-      return observable<{
-        integrationId: string;
-        dashboard: SpeedtestTrackerDashboardData;
-        timestamp: Date;
-      }>((emit) => {
-        const unsubscribes = ctx.integrations.map((integration) => {
-          const innerHandler = speedtestTrackerRequestHandler.handler(integration, {});
-          return innerHandler.subscribe((dashboard) => {
-            emit.next({
-              integrationId: integration.id,
-              dashboard,
-              timestamp: new Date(),
-            });
-          });
-        });
-
-        return () => {
-          unsubscribes.forEach((unsubscribe) => unsubscribe());
-        };
-      });
-    }),
-});
@@ -1,43 +0,0 @@
-import z from "zod";
-
-import { getIntegrationKindsByCategory } from "@homarr/definitions";
-import { timetableOptionsSchema } from "@homarr/integrations/types";
-import {
-  timetableGetTimetableRequestHandler,
-  timetableSearchStationsRequestHandler,
-} from "@homarr/request-handler/timetable";
-
-import { createOneIntegrationMiddleware } from "../../middlewares/integration";
-import { createTRPCRouter, publicProcedure } from "../../trpc";
-
-export const timetableRouter = createTRPCRouter({
-  getTimetable: publicProcedure
-    .concat(createOneIntegrationMiddleware("query", ...getIntegrationKindsByCategory("timetable")))
-    .input(timetableOptionsSchema)
-    .query(async ({ input, ctx }) => {
-      const innerHandler = timetableGetTimetableRequestHandler.handler(ctx.integration, {
-        stationId: input.stationId,
-        limit: input.limit,
-      });
-
-      const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-
-      return data;
-    }),
-  searchStations: publicProcedure
-    .concat(createOneIntegrationMiddleware("query", ...getIntegrationKindsByCategory("timetable")))
-    .input(
-      z.object({
-        query: z.string(),
-      }),
-    )
-    .query(async ({ input, ctx }) => {
-      const innerHandler = timetableSearchStationsRequestHandler.handler(ctx.integration, {
-        query: input.query,
-      });
-
-      const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-
-      return data;
-    }),
-});
@@ -1,205 +0,0 @@
-import { observable } from "@trpc/server/observable";
-import { z } from "zod/v4";
-
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
-import { createIntegrationAsync } from "@homarr/integrations";
-import {
-  umamiActiveVisitorsRequestHandler,
-  umamiEventNamesRequestHandler,
-  umamiMultiEventRequestHandler,
-  umamiRequestHandler,
-  umamiTopPagesRequestHandler,
-  umamiTopReferrersRequestHandler,
-} from "@homarr/request-handler/umami";
-
-import { createManyIntegrationMiddleware, createOneIntegrationMiddleware } from "../../middlewares/integration";
-import { createTRPCRouter, publicProcedure } from "../../trpc";
-
-const logger = createLogger({ module: "umami-router" });
-
-export const umamiRouter = createTRPCRouter({
-  getWebsites: publicProcedure.concat(createOneIntegrationMiddleware("query", "umami")).query(async ({ ctx }) => {
-    try {
-      const instance = await createIntegrationAsync(ctx.integration);
-      return await instance.getWebsitesAsync();
-    } catch (error) {
-      logger.warn(new Error("Failed to load websites", { cause: error }));
-      return [];
-    }
-  }),
-
-  getVisitorStats: publicProcedure
-    .input(
-      z.object({
-        websiteId: z.string(),
-        timeFrame: z.string(),
-        eventName: z.string().optional(),
-      }),
-    )
-    .concat(createManyIntegrationMiddleware("query", "umami"))
-    .query(async ({ ctx, input }) => {
-      const results = await Promise.all(
-        ctx.integrations.map(async (integration) => {
-          const innerHandler = umamiRequestHandler.handler(integration, {
-            websiteId: input.websiteId,
-            timeFrame: input.timeFrame,
-            eventName: input.eventName,
-          });
-          const { data, timestamp } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-
-          return {
-            integrationId: integration.id,
-            integrationName: integration.name,
-            integrationUrl: integration.url,
-            visitorStats: data,
-            updatedAt: timestamp,
-          };
-        }),
-      );
-
-      return results;
-    }),
-
-  getEventNames: publicProcedure
-    .input(z.object({ websiteId: z.string() }))
-    .concat(createOneIntegrationMiddleware("query", "umami"))
-    .query(async ({ ctx, input }) => {
-      try {
-        const innerHandler = umamiEventNamesRequestHandler.handler(ctx.integration, { websiteId: input.websiteId });
-        const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-        return data;
-      } catch (error) {
-        logger.warn(
-          new ErrorWithMetadata("Failed to load event names", { websiteId: input.websiteId }, { cause: error }),
-        );
-        return [];
-      }
-    }),
-
-  getTopPages: publicProcedure
-    .input(
-      z.object({
-        websiteId: z.string(),
-        timeFrame: z.string(),
-        limit: z.number().int().min(1).max(500),
-      }),
-    )
-    .concat(createOneIntegrationMiddleware("query", "umami"))
-    .query(async ({ ctx, input }) => {
-      try {
-        const innerHandler = umamiTopPagesRequestHandler.handler(ctx.integration, {
-          websiteId: input.websiteId,
-          timeFrame: input.timeFrame,
-          limit: input.limit,
-        });
-        const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-        return data;
-      } catch (error) {
-        logger.warn(
-          new ErrorWithMetadata(
-            "Failed to load top pages",
-            { websiteId: input.websiteId, timeFrame: input.timeFrame, limit: input.limit },
-            { cause: error },
-          ),
-        );
-        return [];
-      }
-    }),
-
-  getTopReferrers: publicProcedure
-    .input(
-      z.object({
-        websiteId: z.string(),
-        timeFrame: z.string(),
-        limit: z.number().int().min(1).max(500),
-      }),
-    )
-    .concat(createOneIntegrationMiddleware("query", "umami"))
-    .query(async ({ ctx, input }) => {
-      try {
-        const innerHandler = umamiTopReferrersRequestHandler.handler(ctx.integration, {
-          websiteId: input.websiteId,
-          timeFrame: input.timeFrame,
-          limit: input.limit,
-        });
-        const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-        return data;
-      } catch (error) {
-        logger.warn(
-          new ErrorWithMetadata(
-            "Failed to load top referrers",
-            { websiteId: input.websiteId, timeFrame: input.timeFrame, limit: input.limit },
-            { cause: error },
-          ),
-        );
-        return [];
-      }
-    }),
-
-  getMultiEventTimeSeries: publicProcedure
-    .input(
-      z.object({
-        websiteId: z.string(),
-        timeFrame: z.string(),
-        eventNames: z.array(z.string()),
-      }),
-    )
-    .concat(createOneIntegrationMiddleware("query", "umami"))
-    .query(async ({ ctx, input }) => {
-      try {
-        const sortedNames = [...input.eventNames].sort();
-        const innerHandler = umamiMultiEventRequestHandler.handler(ctx.integration, {
-          websiteId: input.websiteId,
-          timeFrame: input.timeFrame,
-          eventNames: sortedNames,
-        });
-        const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-        return data;
-      } catch (error) {
-        logger.warn(
-          new ErrorWithMetadata(
-            "Failed to load multi-event time series",
-            { websiteId: input.websiteId, timeFrame: input.timeFrame, eventNames: JSON.stringify(input.eventNames) },
-            { cause: error },
-          ),
-        );
-        return [];
-      }
-    }),
-
-  getActiveVisitors: publicProcedure
-    .input(z.object({ websiteId: z.string() }))
-    .concat(createOneIntegrationMiddleware("query", "umami"))
-    .query(async ({ ctx, input }) => {
-      try {
-        const innerHandler = umamiActiveVisitorsRequestHandler.handler(ctx.integration, {
-          websiteId: input.websiteId,
-        });
-        const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-        return data;
-      } catch (error) {
-        logger.warn(
-          new ErrorWithMetadata("Failed to load active visitors", { websiteId: input.websiteId }, { cause: error }),
-        );
-        return 0;
-      }
-    }),
-
-  subscribeActiveVisitors: publicProcedure
-    .input(z.object({ websiteId: z.string() }))
-    .concat(createOneIntegrationMiddleware("query", "umami"))
-    .subscription(({ ctx, input }) => {
-      return observable<number>((emit) => {
-        const innerHandler = umamiActiveVisitorsRequestHandler.handler(ctx.integration, {
-          websiteId: input.websiteId,
-        });
-        const unsubscribe = innerHandler.subscribe((count) => {
-          emit.next(count);
-        });
-        return () => {
-          unsubscribe();
-        };
-      });
-    }),
-});
@@ -1,55 +0,0 @@
-import { duckDuckGoBangsRequestHandler } from "@homarr/request-handler/duckduckgo-bangs";
-import type { DuckDuckGoBang } from "@homarr/request-handler/duckduckgo-bangs";
-
-// DuckDuckGo bang keys are intentionally short:
-// - `t`: token (e.g. "yt"), `s`: display name, `u`: URL template (contains `{{{s}}}`)
-// - `d`: domain, `c`: category, `sc`: subcategory, `r`: rank (optional)
-
-const normalizeBangToken = (token: string) => token.toLowerCase().trim();
-
-/**
- * Binary search to find the first index where bang.t >= tokenPrefix.
- * This is O(log n) vs O(n) for findIndex, which matters because DuckDuckGo
- * has ~13,000+ bangs. Combined with the pre-sorted data, this allows
- * efficient prefix matching by finding the start position and iterating
- * only through consecutive matches.
- */
-const lowerBound = (arr: DuckDuckGoBang[], tokenPrefix: string) => {
-  let low = 0;
-  let high = arr.length;
-  while (low < high) {
-    const mid = (low + high) >> 1;
-    const midBang = arr[mid];
-    // Must use the same ordering as the source list sort (localeCompare),
-    // otherwise binary search can miss tokens with symbols like "&" or "_".
-    if (!midBang || midBang.t.localeCompare(tokenPrefix) >= 0) {
-      high = mid;
-      continue;
-    }
-
-    low = mid + 1;
-  }
-  return low;
-};
-
-export const searchDuckDuckGoBangsAsync = async (input: {
-  query: string;
-  limit: number;
-}): Promise<DuckDuckGoBang[]> => {
-  const queryTokenPrefix = normalizeBangToken(input.query);
-  if (!queryTokenPrefix) return [];
-
-  const { data: allBangs } = await duckDuckGoBangsRequestHandler.handler({}).getCachedOrUpdatedDataAsync({});
-  const startIndex = lowerBound(allBangs, queryTokenPrefix);
-  const matches: DuckDuckGoBang[] = [];
-
-  for (let index = startIndex; index < allBangs.length; index++) {
-    const bang = allBangs[index];
-    if (!bang) break;
-    if (!bang.t.startsWith(queryTokenPrefix)) break;
-    matches.push(bang);
-    if (matches.length >= input.limit) break;
-  }
-
-  return matches;
-};
@@ -5,7 +5,7 @@ import type { Database } from "@homarr/db";
 import { eq } from "@homarr/db";
 import { apiKeys } from "@homarr/db/schema";

-import { comparePasswordsAsync } from "../security";
+import { hashPasswordAsync } from "../security";
 import { createSessionAsync } from "../server";

 const logger = createLogger({ module: "apiKeyAuth" });
@@ -41,6 +41,7 @@ export const getSessionFromApiKeyAsync = async (
    columns: {
      id: true,
      apiKey: true,
+      salt: true,
    },
    with: {
      user: {
@@ -59,9 +60,9 @@ export const getSessionFromApiKeyAsync = async (
    return null;
  }

-  const isValid = await comparePasswordsAsync(apiKey, apiKeyFromDb.apiKey);
+  const hashedApiKey = await hashPasswordAsync(apiKey, apiKeyFromDb.salt);

-  if (!isValid) {
+  if (apiKeyFromDb.apiKey !== hashedApiKey) {
    logger.warn("Failed to authenticate with api-key", { ipAddress, userAgent, reason: "API_KEY_MISMATCH" });
    return null;
  }
@@ -5,7 +5,7 @@ import { createId } from "@homarr/common";
 import { apiKeys, users } from "@homarr/db/schema";
 import { createDb } from "@homarr/db/test";

-import { hashPasswordAsync } from "../../security";
+import { createSaltAsync, hashPasswordAsync } from "../../security";
 import { getSessionFromApiKeyAsync } from "../get-api-key-session";

 // Mock the logger to avoid console output during tests
@@ -118,9 +118,11 @@ const setupAsync = async (options?: SetupOptions) => {
  });

  if (options?.token) {
+    const salt = await createSaltAsync();
    await db.insert(apiKeys).values({
      id: defaultApiKeyId,
-      apiKey: await hashPasswordAsync(options.token),
+      apiKey: await hashPasswordAsync(options.token, salt),
+      salt,
      userId: defaultUserId,
    });
  }
@@ -36,7 +36,7 @@ export const createSessionAsync = async (
      ...user,
      email: user.email ?? "",
      permissions: await getCurrentUserPermissionsAsync(db, user.id),
-      colorScheme: "auto",
+      colorScheme: "dark",
    },
  } as Session;
 };
@@ -24,30 +24,30 @@
  },
  "prettier": "@homarr/prettier-config",
  "dependencies": {
-    "@auth/core": "catalog:",
-    "@auth/drizzle-adapter": "catalog:",
+    "@auth/core": "^0.41.1",
+    "@auth/drizzle-adapter": "^1.11.1",
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/core": "workspace:^0.1.0",
    "@homarr/db": "workspace:^0.1.0",
    "@homarr/definitions": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "bcrypt": "catalog:",
-    "cookies": "catalog:",
-    "ldapts": "catalog:",
-    "next": "catalog:",
-    "next-auth": "catalog:",
-    "react": "catalog:",
-    "react-dom": "catalog:",
-    "zod": "catalog:"
+    "bcrypt": "^6.0.0",
+    "cookies": "^0.9.1",
+    "ldapts": "8.1.7",
+    "next": "16.2.0",
+    "next-auth": "5.0.0-beta.30",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "zod": "^4.2.1"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/bcrypt": "catalog:",
-    "@types/cookies": "catalog:",
-    "eslint": "catalog:",
-    "prettier": "catalog:",
-    "typescript": "catalog:"
+    "@types/bcrypt": "6.0.0",
+    "@types/cookies": "0.9.2",
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
+    "typescript": "^5.9.3"
  }
 }
@@ -1,3 +1,4 @@
+import bcrypt from "bcrypt";
 import type { z } from "zod/v4";

 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -6,8 +7,6 @@ import { and, eq } from "@homarr/db";
 import { users } from "@homarr/db/schema";
 import type { userSignInSchema } from "@homarr/validation/user";

-import { comparePasswordsAsync } from "../../../security";
-
 const logger = createLogger({ module: "basicAuthorization" });

 export const authorizeWithBasicCredentialsAsync = async (
@@ -24,7 +23,7 @@ export const authorizeWithBasicCredentialsAsync = async (
  }

  logger.info("User is trying to log in. Checking password...", { userName: user.name });
-  const isValidPassword = await comparePasswordsAsync(credentials.password, user.password);
+  const isValidPassword = await bcrypt.compare(credentials.password, user.password);

  if (!isValidPassword) {
    logger.warn("Password for user was incorrect", { userName: user.name });
@@ -4,7 +4,7 @@ import { createId } from "@homarr/common";
 import { users } from "@homarr/db/schema";
 import { createDb } from "@homarr/db/test";

-import { hashPasswordAsync } from "../../security";
+import { createSaltAsync, hashPasswordAsync } from "../../security";
 import { authorizeWithBasicCredentialsAsync } from "../credentials/authorization/basic-authorization";

 const defaultUserId = createId();
@@ -13,10 +13,12 @@ describe("authorizeWithBasicCredentials", () => {
  test("should authorize user with correct credentials", async () => {
    // Arrange
    const db = createDb();
+    const salt = await createSaltAsync();
    await db.insert(users).values({
      id: defaultUserId,
      name: "test",
-      password: await hashPasswordAsync("test"),
+      salt,
+      password: await hashPasswordAsync("test", salt),
    });

    // Act
@@ -32,10 +34,12 @@ describe("authorizeWithBasicCredentials", () => {
  test("should not authorize user with incorrect credentials", async () => {
    // Arrange
    const db = createDb();
+    const salt = await createSaltAsync();
    await db.insert(users).values({
      id: defaultUserId,
      name: "test",
-      password: await hashPasswordAsync("test"),
+      salt,
+      password: await hashPasswordAsync("test", salt),
    });

    // Act
@@ -51,10 +55,12 @@ describe("authorizeWithBasicCredentials", () => {
  test("should not authorize user with incorrect username", async () => {
    // Arrange
    const db = createDb();
+    const salt = await createSaltAsync();
    await db.insert(users).values({
      id: defaultUserId,
      name: "test",
-      password: await hashPasswordAsync("test"),
+      salt,
+      password: await hashPasswordAsync("test", salt),
    });

    // Act
@@ -1,15 +1,9 @@
 import bcrypt from "bcrypt";

-export const hashPasswordAsync = async (password: string) => {
-  return bcrypt.hash(password, 10);
+export const createSaltAsync = async () => {
+  return bcrypt.genSalt(10);
 };

-/**
- * Compares a plaintext password with a hashed password and returns whether they match.
- * @param password plaintext password
- * @param hash hashed password
- * @returns wheter it is the same
- */
-export const comparePasswordsAsync = async (password: string, hash: string) => {
-  return await bcrypt.compare(password, hash);
+export const hashPasswordAsync = async (password: string, salt: string) => {
+  return bcrypt.hash(password, salt);
 };
@@ -1,11 +1,25 @@
 import { describe, expect, it } from "vitest";

-import { comparePasswordsAsync, hashPasswordAsync } from "../security";
+import { createSaltAsync, hashPasswordAsync } from "../security";
+
+describe("createSalt should return a salt", () => {
+  it("should return a salt", async () => {
+    const result = await createSaltAsync();
+    expect(result).toBeDefined();
+    expect(result.length).toBeGreaterThan(25);
+  });
+  it("should return a different salt each time", async () => {
+    const result1 = await createSaltAsync();
+    const result2 = await createSaltAsync();
+    expect(result1).not.toEqual(result2);
+  });
+});

 describe("hashPassword should return a hash", () => {
  it("should return a hash", async () => {
    const password = "password";
-    const result = await hashPasswordAsync(password);
+    const salt = await createSaltAsync();
+    const result = await hashPasswordAsync(password, salt);
    expect(result).toBeDefined();
    expect(result.length).toBeGreaterThan(55);
    expect(result).not.toEqual(password);
@@ -13,44 +27,21 @@ describe("hashPassword should return a hash", () => {
  it("should return a different hash each time", async () => {
    const password = "password";
    const password2 = "another password";
+    const salt = await createSaltAsync();

-    const result1 = await hashPasswordAsync(password);
-    const result2 = await hashPasswordAsync(password2);
+    const result1 = await hashPasswordAsync(password, salt);
+    const result2 = await hashPasswordAsync(password2, salt);

    expect(result1).not.toEqual(result2);
  });
  it("should return a different hash for the same password with different salts", async () => {
    const password = "password";
+    const salt1 = await createSaltAsync();
+    const salt2 = await createSaltAsync();

-    const result1 = await hashPasswordAsync(password);
-    const result2 = await hashPasswordAsync(password);
+    const result1 = await hashPasswordAsync(password, salt1);
+    const result2 = await hashPasswordAsync(password, salt2);

    expect(result1).not.toEqual(result2);
  });
 });
-
-describe("comparePasswordsAsync should compare passwords correctly", () => {
-  it("should return true for matching passwords", async () => {
-    // Arrange
-    const password = "password";
-    const hash = await hashPasswordAsync(password);
-
-    // Act
-    const result = await comparePasswordsAsync(password, hash);
-
-    // Assert
-    expect(result).toBe(true);
-  });
-  it("should return false for non-matching passwords", async () => {
-    // Arrange
-    const password = "password";
-    const wrongPassword = "wrongpassword";
-    const hash = await hashPasswordAsync(password);
-
-    // Act
-    const result = await comparePasswordsAsync(wrongPassword, hash);
-
-    // Assert
-    expect(result).toBe(false);
-  });
-});
@@ -25,14 +25,14 @@
  "prettier": "@homarr/prettier-config",
  "dependencies": {
    "@homarr/api": "workspace:^0.1.0",
-    "react": "catalog:",
-    "react-dom": "catalog:"
+    "react": "19.2.4",
+    "react-dom": "19.2.4"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
  }
 }
@@ -25,19 +25,19 @@
  },
  "prettier": "@homarr/prettier-config",
  "dependencies": {
-    "@drizzle-team/brocli": "catalog:",
+    "@drizzle-team/brocli": "^0.11.0",
    "@homarr/auth": "workspace:^0.1.0",
    "@homarr/common": "workspace:^0.1.0",
    "@homarr/db": "workspace:^0.1.0",
    "@homarr/validation": "workspace:^0.1.0",
-    "dotenv": "catalog:"
+    "dotenv": "^17.3.1"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "esbuild": "catalog:",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "esbuild": "^0.27.4",
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
  }
 }
@@ -1,6 +1,6 @@
 import { command, string } from "@drizzle-team/brocli";

-import { hashPasswordAsync } from "@homarr/auth";
+import { createSaltAsync, hashPasswordAsync } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { generateSecureRandomToken } from "@homarr/common/server";
 import { and, count, db, eq } from "@homarr/db";
@@ -67,8 +67,9 @@ export const recreateAdmin = command({
      permission: "admin",
    });

+    const salt = await createSaltAsync();
    const password = generateSecureRandomToken(24);
-    const hashedPassword = await hashPasswordAsync(password);
+    const hashedPassword = await hashPasswordAsync(password, salt);

    const userId = createId();
    await db.insert(users).values({
@@ -76,6 +77,7 @@ export const recreateAdmin = command({
      name: result.data,
      provider: "credentials",
      password: hashedPassword,
+      salt,
    });

    await db.insert(groupMembers).values({
@@ -22,7 +22,7 @@ export const resetPassword = command({
      where: and(eq(users.name, options.username), eq(users.provider, "credentials")),
    });

-    if (!user?.password) {
+    if (!user?.salt) {
      console.error(`User ${options.username} not found`);
      return;
    }
@@ -33,7 +33,7 @@ export const resetPassword = command({
    await db
      .update(users)
      .set({
-        password: await hashPasswordAsync(newPassword),
+        password: await hashPasswordAsync(newPassword, user.salt),
      })
      .where(eq(users.id, user.id));

@@ -29,7 +29,7 @@ export const usersUpdatePassword = command({
      where: options.id ? eq(users.id, options.id) : eq(users.name, options.username!),
    });

-    if (!user?.password) {
+    if (!user?.salt) {
      console.error("User not found or has no credentials record");
      return;
    }
@@ -37,7 +37,7 @@ export const usersUpdatePassword = command({
    await db
      .update(users)
      .set({
-        password: await hashPasswordAsync(options.password),
+        password: await hashPasswordAsync(options.password, user.salt),
      })
      .where(eq(users.id, user.id));

@@ -27,22 +27,22 @@
  "prettier": "@homarr/prettier-config",
  "dependencies": {
    "@homarr/core": "workspace:^0.1.0",
-    "@paralleldrive/cuid2": "catalog:",
-    "cookie": "catalog:",
-    "dayjs": "catalog:",
-    "next": "catalog:",
-    "octokit": "catalog:",
-    "react": "catalog:",
-    "react-dom": "catalog:",
-    "undici": "catalog:",
-    "zod": "catalog:",
-    "zod-validation-error": "catalog:"
+    "@paralleldrive/cuid2": "^3.3.0",
+    "cookie": "1.1.1",
+    "dayjs": "^1.11.20",
+    "next": "16.2.0",
+    "octokit": "^5.0.5",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "undici": "7.24.5",
+    "zod": "^4.2.1",
+    "zod-validation-error": "^5.0.0"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
  }
 }
@@ -41,10 +41,6 @@ export class Stopwatch {
    return dayjs().millisecond(this.startTime).fromNow(true);
  }

-  getElapsedInFormattedMilliseconds() {
-    return `${this.getElapsedInMilliseconds().toFixed(0)}ms`;
-  }
-
  getElapsedInMilliseconds() {
    return performance.now() - this.startTime;
  }
@@ -37,24 +37,24 @@
  },
  "prettier": "@homarr/prettier-config",
  "dependencies": {
-    "@t3-oss/env-nextjs": "catalog:",
-    "better-sqlite3": "catalog:",
-    "dns-caching": "catalog:",
-    "drizzle-orm": "catalog:",
-    "ioredis": "catalog:",
-    "mysql2": "catalog:",
-    "pg": "catalog:",
-    "superjson": "catalog:",
-    "winston": "catalog:",
-    "zod": "catalog:"
+    "@t3-oss/env-nextjs": "^0.13.10",
+    "better-sqlite3": "^12.6.2",
+    "dns-caching": "^0.2.9",
+    "drizzle-orm": "^0.45.1",
+    "ioredis": "5.10.1",
+    "mysql2": "3.20.0",
+    "pg": "^8.20.0",
+    "superjson": "2.2.6",
+    "winston": "3.19.0",
+    "zod": "^4.2.1"
  },
  "devDependencies": {
    "@homarr/eslint-config": "workspace:^0.2.0",
    "@homarr/prettier-config": "workspace:^0.1.0",
    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/better-sqlite3": "catalog:",
-    "@types/pg": "catalog:",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "@types/better-sqlite3": "7.6.13",
+    "@types/pg": "^8.18.0",
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
  }
 }
@@ -1,10 +1,7 @@
 import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";

 export const formatMetadata = (metadata: Record<string, unknown> | Error, ignoreKeys?: string[]) => {
-  const metadataObject =
-    metadata instanceof ErrorWithMetadata || ("metadata" in metadata && typeof metadata.metadata === "object")
-      ? (metadata.metadata as Record<string, unknown>)
-      : metadata;
+  const metadataObject = metadata instanceof ErrorWithMetadata ? metadata.metadata : metadata;

  const filteredMetadata = Object.keys(metadataObject)
    .filter((key) => !ignoreKeys?.includes(key))
@@ -0,0 +1,9 @@
+import baseConfig from "@homarr/eslint-config/base";
+
+/** @type {import('typescript-eslint').Config} */
+export default [
+  {
+    ignores: [],
+  },
+  ...baseConfig,
+];
@@ -0,0 +1,48 @@
+{
+  "name": "@homarr/cron-job-api",
+  "version": "0.1.0",
+  "private": true,
+  "license": "Apache-2.0",
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts",
+    "./env": "./src/env.ts",
+    "./constants": "./src/constants.ts",
+    "./client": "./src/client.ts"
+  },
+  "typesVersions": {
+    "*": {
+      "*": [
+        "src/*"
+      ]
+    }
+  },
+  "scripts": {
+    "clean": "rm -rf .turbo node_modules",
+    "format": "prettier --check . --ignore-path ../../.gitignore",
+    "lint": "eslint",
+    "typecheck": "tsc --noEmit"
+  },
+  "prettier": "@homarr/prettier-config",
+  "dependencies": {
+    "@homarr/common": "workspace:^0.1.0",
+    "@homarr/core": "workspace:^0.1.0",
+    "@homarr/cron-jobs": "workspace:^0.1.0",
+    "@tanstack/react-query": "^5.91.2",
+    "@trpc/client": "^11.13.4",
+    "@trpc/server": "^11.13.4",
+    "@trpc/tanstack-react-query": "^11.13.4",
+    "node-cron": "^4.2.1",
+    "react": "19.2.4",
+    "zod": "^4.2.1"
+  },
+  "devDependencies": {
+    "@homarr/eslint-config": "workspace:^0.2.0",
+    "@homarr/prettier-config": "workspace:^0.1.0",
+    "@homarr/tsconfig": "workspace:^0.1.0",
+    "@types/node-cron": "^3.0.11",
+    "@types/react": "19.2.14",
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
+  }
+}
@@ -0,0 +1,20 @@
+import { createTRPCClient, httpLink } from "@trpc/client";
+
+import type { JobRouter } from ".";
+import { CRON_JOB_API_KEY_HEADER, CRON_JOB_API_PATH, CRON_JOB_API_PORT } from "./constants";
+import { env } from "./env";
+
+export const cronJobApi = createTRPCClient<JobRouter>({
+  links: [
+    httpLink({
+      url: `${getBaseUrl()}${CRON_JOB_API_PATH}`,
+      headers: {
+        [CRON_JOB_API_KEY_HEADER]: env.CRON_JOB_API_KEY,
+      },
+    }),
+  ],
+});
+
+function getBaseUrl() {
+  return `http://localhost:${CRON_JOB_API_PORT}`;
+}
@@ -0,0 +1,3 @@
+export const CRON_JOB_API_PORT = 3002;
+export const CRON_JOB_API_PATH = "/trpc";
+export const CRON_JOB_API_KEY_HEADER = "cron-job-api-key";
@@ -0,0 +1,11 @@
+import { z } from "zod/v4";
+
+import { env as commonEnv } from "@homarr/common/env";
+import { createEnv } from "@homarr/core/infrastructure/env";
+
+export const env = createEnv({
+  server: {
+    CRON_JOB_API_KEY: commonEnv.NODE_ENV === "development" ? z.string().default("test") : z.string(),
+  },
+  experimental__runtimeEnv: process.env,
+});
@@ -0,0 +1,90 @@
+import { initTRPC, TRPCError } from "@trpc/server";
+import { validate } from "node-cron";
+import { z } from "zod/v4";
+
+import type { JobGroupKeys } from "@homarr/cron-jobs";
+import { jobGroup } from "@homarr/cron-jobs";
+
+import { env } from "./env";
+
+export const jobGroupKeys = jobGroup.getKeys();
+export const jobNameSchema = z.enum(jobGroup.getKeys());
+
+export interface IJobManager {
+  startAsync(name: JobGroupKeys): Promise<void>;
+  triggerAsync(name: JobGroupKeys): Promise<void>;
+  stopAsync(name: JobGroupKeys): Promise<void>;
+  updateIntervalAsync(name: JobGroupKeys, cron: string): Promise<void>;
+  disableAsync(name: JobGroupKeys): Promise<void>;
+  enableAsync(name: JobGroupKeys): Promise<void>;
+  getAllAsync(): Promise<
+    {
+      name: JobGroupKeys;
+      cron: string;
+      preventManualExecution: boolean;
+      preventCustomInterval: boolean;
+      isEnabled: boolean;
+    }[]
+  >;
+}
+
+const t = initTRPC
+  .context<{
+    manager: IJobManager;
+    apiKey?: string;
+  }>()
+  .create();
+
+const createTrpcRouter = t.router;
+const apiKeyProcedure = t.procedure.use(({ ctx, next }) => {
+  if (ctx.apiKey !== env.CRON_JOB_API_KEY) {
+    throw new TRPCError({
+      code: "FORBIDDEN",
+      message: "Missing or invalid API key",
+    });
+  }
+
+  return next({
+    ctx: {
+      ...ctx,
+      apiKey: undefined, // Clear the API key after checking
+    },
+  });
+});
+
+export const cronExpressionSchema = z.string().refine((expression) => validate(expression), {
+  error: "Invalid cron expression",
+});
+
+export const jobRouter = createTrpcRouter({
+  start: apiKeyProcedure.input(jobNameSchema).mutation(async ({ input, ctx }) => {
+    await ctx.manager.startAsync(input);
+  }),
+  trigger: apiKeyProcedure.input(jobNameSchema).mutation(async ({ input, ctx }) => {
+    await ctx.manager.triggerAsync(input);
+  }),
+  stop: apiKeyProcedure.input(jobNameSchema).mutation(async ({ input, ctx }) => {
+    await ctx.manager.stopAsync(input);
+  }),
+  updateInterval: apiKeyProcedure
+    .input(
+      z.object({
+        name: jobNameSchema,
+        cron: cronExpressionSchema,
+      }),
+    )
+    .mutation(async ({ input, ctx }) => {
+      await ctx.manager.updateIntervalAsync(input.name, input.cron);
+    }),
+  disable: apiKeyProcedure.input(jobNameSchema).mutation(async ({ input, ctx }) => {
+    await ctx.manager.disableAsync(input);
+  }),
+  enable: apiKeyProcedure.input(jobNameSchema).mutation(async ({ input, ctx }) => {
+    await ctx.manager.enableAsync(input);
+  }),
+  getAll: apiKeyProcedure.query(({ ctx }) => {
+    return ctx.manager.getAllAsync();
+  }),
+});
+
+export type JobRouter = typeof jobRouter;
@@ -0,0 +1,8 @@
+{
+  "extends": "@homarr/tsconfig/base.json",
+  "compilerOptions": {
+    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
+  },
+  "include": ["*.ts", "src"],
+  "exclude": ["node_modules"]
+}
Author	SHA1	Message	Date
Manuel	0db0c656b2	Merge branch 'dev'	2026-03-27 18:43:45 +01:00
Lorinc936	d48254fa57	Merge branch 'dev' into main	2026-03-24 20:41:22 +01:00
Lorinc936	b2fdab0418	defined notificationSchema outside of class	2026-03-24 18:11:10 +01:00
Lorinc936	e78dc86aa3	Update nextcloud.integration.ts	2026-03-24 14:44:24 +01:00
Lorinc936andManuel	e70d804ab8	Update packages/integrations/src/nextcloud/nextcloud.integration.ts Co-authored-by: Manuel <30572287+manuel-rw@users.noreply.github.com>	2026-03-23 19:12:42 +01:00
Lorinc936	b7c3a48377	feat: add Nextcloud notification provider fix: resolve hydration error in add-board modal	2026-03-23 17:25:22 +01:00
@@ -1 +1 @@
 .15.0
 .14.0