fix: remove legacy apps/websocket and apps/tasks, exclude build artifacts from tsconfig

- Remove apps/websocket/ (merged into custom server in server.ts)
- Remove apps/tasks/ (merged into custom server in server.ts)
- Exclude customServer.cjs and customServer.css from tsconfig to prevent
  tsc errors when build artifacts are present
- Update pnpm-lock.yaml (removed 138 unnecessary packages)

Co-authored-by: ajnart <49837342+ajnart@users.noreply.github.com>
Agent-Logs-Url: https://github.com/homarr-labs/homarr/sessions/bd83b347-563b-494e-b8c6-91fcc199dd79

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -33,15 +33,6 @@ body:
       options:
         # The below comment is used to insert a new version with on-release.yml
         #NEXT_VERSION#
-        - 1.59.3
-        - 1.59.2
-        - 1.59.1
-        - 1.59.0
-        - 1.58.1
-        - 1.58.0
-        - 1.57.1
-        - 1.57.0
-        - 1.56.1
         - 1.56.0
         - 1.55.0
         - 1.54.0

.github/ISSUE_TEMPLATE/integration.yml

@@ -25,16 +25,16 @@ body:
       label: Public API available?
       description: Is there a public API available, that we can consume in Homarr?
       options:
-        - "Yes, available on a website"
-        - "Yes, available in the application itself"
-        - "No"
+        - Yes, available on a website
+        - Yes, available in the application itself
+        - No
     validations:
       required: true
   - type: dropdown
     attributes:
       label: Are you willing to contribute this yourself?
       options:
-        - "Yes"
-        - "No"
+      - Yes
+      - No
     validations:
       required: true

.github/ISSUE_TEMPLATE/widget.yml

@@ -24,7 +24,7 @@ body:
     attributes:
       label: Are you willing to contribute this yourself?
       options:
-        - "Yes"
-        - "No"
+        - Yes
+        - No
     validations:
       required: true

.github/actions/prebuilt-debian/action.yaml

@@ -15,11 +15,11 @@ runs:
       with:
         persist-credentials: false
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v4
+      uses: docker/setup-buildx-action@v3
 
     - name: Build docker image for ${{ inputs.architecture }}
       id: build
-      uses: docker/build-push-action@v7
+      uses: docker/build-push-action@v6
       with:
         push: false
         load: true

.github/renovate.json5

@@ -11,12 +11,6 @@
       matchPackageNames: ["tsx"],
       enabled: false,
     },
-    // Reenable once bug with undici v8 is fixed (https://github.com/homarr-labs/homarr/issues/5467)
-    {
-      matchPackageNames: ["undici"],
-      matchNewValue: "8.*",
-      enabled: false,
-    },
     {
       matchUpdateTypes: ["minor", "patch", "pin", "digest"],
       automerge: true,
@@ -37,12 +31,6 @@
       automerge: false,
     },
   ],
-  // Updates lockfile for prebuilt-debian after if package.json is updated, otherwise only root lockfile is updated
-  postUpgradeTasks: {
-    commands: ["cd deployments/prebuilt-debian && pnpm install --ignore-workspace --lockfile-only"],
-    fileFilters: ["deployments/prebuilt-debian/pnpm-lock.yaml"],
-    executionMode: "update",
-  },
   updateInternalDeps: true,
   rangeStrategy: "bump",
   automerge: false,

.github/workflows/automatic-approval.yml

@@ -9,21 +9,16 @@ jobs:
   approve-automatic-prs:
     runs-on: ubuntu-latest
     timeout-minutes: 2
-    # 158783068: homarr-renovate[bot]
-    # 190541745: homarr-crowdin[bot]
-    # 210161987: homarr-update-contributors[bot]
-    # 175486441: homarr-releases[bot]
-    # Extracted from https://api.github.com/users/<username>
-    if: github.actor_id == 158783068 || github.actor_id == 190541745 || github.actor_id == 210161987 || github.actor_id == 175486441
+    if: github.actor_id == 158783068 || github.actor_id == 190541745 || github.actor_id == 210161987 # Id of renovate bot and crowdin bot see https://api.github.com/users/homarr-renovate%5Bbot%5D and https://api.github.com/users/homarr-crowdin%5Bbot%5D and https://api.github.com/users/homarr-update-contributors%5Bbot%5D
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
       - name: Obtain token
         id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
           permission-pull-requests: write # required to approve pull request
 
       - name: Install GitHub CLI

.github/workflows/code-quality.yml

@@ -11,10 +11,14 @@ on:
 
 concurrency:
   group: "${{ github.workflow }}-${{ github.ref }}"
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
 
+# You can leverage Vercel Remote Caching with Turbo to speed up your builds
+# @link https://turborepo.org/docs/core-concepts/remote-caching#remote-caching-on-vercel-builds
 env:
   FORCE_COLOR: 3
+  TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
+  TURBO_TEAM: ${{ vars.TURBO_TEAM }}
 
 jobs:
   lint:
@@ -55,7 +59,7 @@ jobs:
         uses: ./tooling/github/setup
 
       - name: Typecheck
-        run: pnpm typecheck
+        run: turbo typecheck
 
   test:
     runs-on: ubuntu-latest
@@ -85,7 +89,7 @@ jobs:
         uses: ./tooling/github/setup
       - name: Build docker image
         id: build-docker-image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
         with:
           platforms: linux/amd64
           context: .

.github/workflows/crowdin-schedule-download.yml

@@ -19,10 +19,10 @@ jobs:
 
       - name: Obtain token
         id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.CROWDIN_APP_PRIVATE_KEY }}
-          client-id: ${{ secrets.CROWDIN_APP_ID }}
+          app-id: ${{ secrets.CROWDIN_APP_ID }}
           permission-contents: write # required to commit to crowdin branch
           permission-pull-requests: write # required to create pull request
 

.github/workflows/deployment-docker-image.yml

@@ -50,22 +50,22 @@ jobs:
       - name: Obtain token
         if: env.SKIP_RELEASE == 'false'
         id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
           permission-contents: write # required to commit package.json & changelog changes, merge them to dev and publish the release
 
       - uses: actions/checkout@v6
         if: env.SKIP_RELEASE == 'false'
         with:
           persist-credentials: false
-      - uses: pnpm/action-setup@v6
+      - uses: pnpm/action-setup@v4
         if: env.SKIP_RELEASE == 'false'
       - uses: actions/setup-node@v6
         if: env.SKIP_RELEASE == 'false'
         with:
-          node-version: 24.15.0
+          node-version: 24.14.0
           cache: "pnpm"
       - run: npm i -g pnpm
         if: env.SKIP_RELEASE == 'false'
@@ -123,7 +123,7 @@ jobs:
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v5
         with:
           images: "${{ env.GHCR_REPO }}"
 
@@ -135,11 +135,11 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v3
 
       - name: Build and push by digest
         id: build
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
         with:
           context: .
           network: host
@@ -162,7 +162,7 @@ jobs:
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v5
         with:
           images: "${{ env.GHCR_REPO }}"
 
@@ -174,11 +174,11 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v3
 
       - name: Build and push by digest
         id: build
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
         with:
           context: .
           network: host
@@ -231,10 +231,10 @@ jobs:
       - name: Obtain token
         if: needs.release.outputs.skipped == 'false'
         id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
           permission-contents: write # required to publish the release
 
       - name: Log in to the Container registry
@@ -274,6 +274,6 @@ jobs:
       - name: Discord notification
         env:
           DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
         with:
           args: "Successfully deployed images for branch **${{ github.ref_name }}**. Tagged as **${{env.NEXT_VERSION}}**."

.github/workflows/deployment-weekly-release.yml

@@ -21,10 +21,10 @@ jobs:
     timeout-minutes: 2
     steps:
       - name: Discord notification
-        if: ${{ github.event.inputs.send-notifications }}
+        if: ${{ github.events.inputs.send-notifications }}
         env:
           DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
         with:
           args: "Automatic release has been triggered: [run ${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})"
       - name: Checkout repository
@@ -38,23 +38,22 @@ jobs:
           token: ${{ github.token }}
           branch: dev
       - name: Create pull request
-        id: create-pull-request
         run: 'gh pr create --title "chore(release): automatic release ${{ steps.semver.outputs.next }}" --body "**This is an automatic release**.<br/>Manual action may be required for major bumps.<br/>Detected change to be ``${{ steps.semver.outputs.bump }}``<br/>Bump version from ``${{ steps.semver.outputs.current }}`` to ``${{ steps.semver.outputs.next }}``" --base main --head dev --label automerge'
         env:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
       - name: Discord notification
-        if: ${{ github.event.inputs.send-notifications }}
+        if: ${{ github.events.inputs.send-notifications }}
         env:
           DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
         with:
           args: "Created a release PR ${{ steps.create-pull-request.outputs.url }} for version ${{ steps.semver.outputs.next }} (new behaviour: ${{ steps.semver.outputs.bump }})"
       - name: Obtain token
         id: obtainApprovalToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
           permission-pull-requests: write
       - name: Approve PR
         env:
@@ -63,10 +62,10 @@ jobs:
           gh pr review --approve --body "Automatically approved by GitHub Action"
       - name: Obtain token
         id: obtainMergeToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
           permission-contents: write # write to main branch (due to merge)
           permission-pull-requests: write # merge pull request
       - id: automerge
@@ -75,7 +74,7 @@ jobs:
         uses: "pascalgn/automerge-action@v0.16.4"
         env:
           GITHUB_TOKEN: ${{ steps.obtainMergeToken.outputs.token }}
-          MERGE_METHOD: merge # we prefer merge commits for merging to main
+          MERGE_METHOD: merge # we prefer merge commits for merging to master
           MERGE_COMMIT_MESSAGE: "chore(release): automatic release ${{ steps.semver.outputs.next }}"
           MERGE_DELETE_BRANCH: false # never set to true!
           PULL_REQUEST: "${{ steps.create-pull-request.outputs.pr_number }}"
@@ -84,23 +83,23 @@ jobs:
           MERGE_REQUIRED_APPROVALS: 0 # do not require approvals
 
       - name: Merged Discord notification
-        if: ${{ steps.automerge.outputs.mergeResult == 'merged' && github.event.inputs.send-notifications }}
+        if: ${{ steps.automerge.outputs.mergeResult == 'merged' && github.events.inputs.send-notifications }}
         env:
           DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
         with:
           args: "Merged PR ${{ steps.create-pull-request.outputs.url }} for release ${{ steps.semver.outputs.next }}"
       - name: Major Bump Discord notification
-        if: ${{ steps.semver.outputs.bump == 'major' && github.event.inputs.send-notifications }}
+        if: ${{ steps.semver.outputs.bump == 'major' && github.events.inputs.send-notifications }}
         env:
           DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
         with:
           args: "The release PR must be manually merged because the next version is a major version: ${{ steps.create-pull-request.outputs.url }} for release ${{ steps.semver.outputs.next }}"
       - name: Discord Fail Notification
-        if: failure() && github.event.inputs.send-notifications
+        if: failure() && github.events.inputs.send-notifications
         env:
           DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
-        uses: Ilshidur/action-discord@0.4.0
+        uses: Ilshidur/action-discord@master
         with:
           args: "The automatic release workflow [run ${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}) has failed"

.github/workflows/on-release.yml

@@ -12,10 +12,10 @@ jobs:
     steps:
       - name: Obtain token
         id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.HOMARR_DOCS_RELEASE_APP_PRIVATE_KEY }}
-          client-id: ${{ vars.HOMARR_DOCS_RELEASE_APP_ID }}
+          app-id: ${{ vars.HOMARR_DOCS_RELEASE_APP_ID }}
           owner: homarr-labs
           repositories: |
             documentation
@@ -45,10 +45,10 @@ jobs:
     steps:
       - name: Obtain token
         id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }}
-          client-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
+          app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }}
           permission-contents: write # required to commit to branch
           permission-pull-requests: write # required to create pr & enable automerge
       - name: Checkout code

.github/workflows/skip-renovate-stability-days.yml

@@ -7,7 +7,7 @@ on:
 
 jobs:
   skip-stability-days:
-    if: ${{ !startsWith(github.head_ref, 'renovate/') && github.event.pull_request.head.repo.full_name == github.repository }}
+    if: ${{ !startsWith(github.head_ref, 'renovate/') }}
     name: Skip Stability Days
     runs-on: ubuntu-latest
     timeout-minutes: 1

.github/workflows/update-contributors.yml

@@ -21,10 +21,10 @@ jobs:
     steps:
       - name: Obtain token
         id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.HOMARR_UPDATE_CONTRIBUTORS_PRIVATE_KEY }}
-          client-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }}
+          app-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }}
           permission-contents: write # required to commit to branch
           permission-pull-requests: write # required to create pr & enable automerge
 
@@ -33,7 +33,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}
 
-      - uses: pnpm/action-setup@v6
+      - uses: pnpm/action-setup@v4
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v6
         with:

.github/workflows/update-integration-list.yml

@@ -21,10 +21,10 @@ jobs:
     steps:
       - name: Obtain token
         id: obtainToken
-        uses: actions/create-github-app-token@v3
+        uses: actions/create-github-app-token@v2
         with:
           private-key: ${{ secrets.HOMARR_UPDATE_CONTRIBUTORS_PRIVATE_KEY }}
-          client-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }}
+          app-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }}
           permission-contents: write # required to commit to branch
           permission-pull-requests: write # required to create pr & enable automerge
       - name: Checkout code

.gitignore

@@ -57,6 +57,7 @@ apps/tasks/tasks.cjs
 apps/tasks/tasks.css
 apps/websocket/wssServer.cjs
 apps/websocket/wssServer.css
+apps/nextjs/customServer.cjs
 apps/nextjs/.million/
 packages/cli/cli.cjs
 
@@ -69,6 +70,5 @@ apps/nextjs/public/images/background.png
 # next-intl
 en.d.json.ts
 
-# personal agent config
-AGENTS.md
-.opencode
+# Custom server build artifacts
+apps/nextjs/customServer.css

.nvmrc

@@ -1 +1 @@
-24.15.0
+24.14.0

APPROACHES.md

@@ -0,0 +1,369 @@
+# Memory Optimization Approaches
+
+This document describes the approaches tried and considered for reducing the RAM footprint of Homarr's server processes.
+
+## Baseline Architecture (Before)
+
+Homarr runs **three separate Node.js processes**:
+
+| Process | Port | Purpose |
+|---|---|---|
+| `apps/nextjs` (Next.js) | 3000 | Web UI + API routes |
+| `apps/websocket` (WS server) | 3001 | tRPC WebSocket subscriptions |
+| `apps/tasks` (Tasks/Cron server) | 3002 | Cron job scheduling + management API |
+
+Each process loads its own V8 heap, duplicates shared dependencies (`@homarr/db`, `@homarr/auth`, etc.), and runs its own event loop.
+
+**Measured baseline (dev mode, idle):** ~2,954 MB total RSS
+
+---
+
+## Approach 1: Integrate WebSocket Server into Next.js Custom Server
+
+**Status:** ✅ Implemented
+
+Eliminates `apps/websocket` by handling WebSocket upgrades inside a [Next.js custom server](https://nextjs.org/docs/pages/guides/custom-server):
+
+```ts
+const app = next({ dev, hostname, port, dir });
+const upgradeHandler = app.getUpgradeHandler();
+
+server.on("upgrade", (req, socket, head) => {
+  if (req.url?.startsWith("/websockets")) {
+    wss.handleUpgrade(req, socket, head, (ws) => wss.emit("connection", ws, req));
+  } else {
+    upgradeHandler(req, socket, head); // HMR, etc.
+  }
+});
+```
+
+### PROs
+- Eliminates one V8 heap (~208 MB)
+- WebSocket runs on same port as HTTP (simpler networking/proxying)
+- Shared `@homarr/db` connection pool and module cache
+- `getUpgradeHandler()` properly delegates HMR to Next.js in dev mode
+
+### CONs
+- Custom server disables some Next.js optimizations (automatic static optimization still works with `output: "standalone"`)
+- WebSocket errors could affect the main server process
+- Slightly more complex startup code
+
+---
+
+## Approach 2: Integrate Tasks/Cron Server into Next.js Custom Server
+
+**Status:** ✅ Implemented (combined with Approach 1)
+
+Eliminates `apps/tasks` by running the Fastify tRPC cron API and job scheduler inside the same process:
+
+```ts
+async function startTasksServer() {
+  const tasksServer = fastify({ maxParamLength: 5000 });
+  tasksServer.register(fastifyTRPCPlugin, { ... });
+  await cleanupSessionsAsync();
+  await invalidateUpdateCheckerCacheAsync();
+  await jobGroup.initializeAsync();
+  await jobGroup.startAllAsync();
+  await tasksServer.listen({ port: CRON_JOB_API_PORT });
+  return tasksServer;
+}
+```
+
+### PROs
+- Eliminates another V8 heap (~328 MB)
+- Shared database connection pool across Next.js API routes and cron jobs
+- Single process to manage (simpler Docker, `run.sh`, monitoring)
+- Cron jobs can directly share in-memory state with the web server
+
+### CONs
+- A misbehaving cron job could affect web request latency
+- Fastify still binds to port 3002 for internal tRPC communication (minor overhead)
+- More dependencies in the custom server bundle
+
+---
+
+## Combined Result (Approaches 1 + 2)
+
+| Component | Separate (before) | Integrated (after) |
+|---|---|---|
+| WebSocket server | ~208 MB | — |
+| Tasks/Cron server | ~328 MB | — |
+| Next.js (incl. workers) | ~2,418 MB | — |
+| Custom Server (all-in-one) | — | ~2,007 MB |
+| **Total RSS** | **~2,954 MB** | **~2,007 MB** |
+| **Savings** | — | **~947 MB (~32%)** |
+
+---
+
+## Approach 3: Eliminate Fastify — Direct Function Calls for Cron API
+
+**Status:** 📋 Considered, not implemented
+
+Since the cron job API client (`cronJobApi`) is only used from Next.js API routes (same process now), we could replace the HTTP+tRPC client with direct function calls to `JobManager`:
+
+```ts
+// Before: HTTP call to localhost:3002/trpc
+await cronJobApi.trigger.mutate({ name: "myJob" });
+
+// After: direct call in same process
+await jobManager.triggerAsync("myJob");
+```
+
+### PROs
+- Eliminates Fastify dependency and port 3002 listener entirely
+- Zero network overhead for cron API calls
+- Simpler architecture (no internal HTTP, no API key needed)
+
+### CONs
+- Requires refactoring `packages/api/src/router/cron-jobs.ts` and `packages/cron-job-api`
+- Breaks the clean separation between Next.js API and tasks concerns
+- If the architecture ever splits back to separate processes, this would need to be reverted
+- API key authentication for cron operations would need a different mechanism
+
+---
+
+## Approach 4: Node.js `--max-old-space-size` Flag
+
+**Status:** 📋 Considered, available as user override
+
+Setting `NODE_OPTIONS=--max-old-space-size=N` limits V8 heap growth and forces more aggressive garbage collection.
+
+```dockerfile
+# Example: limit heap to 512 MB
+ENV NODE_OPTIONS="--max-old-space-size=512"
+```
+
+### PROs
+- Can reduce peak memory usage in constrained environments
+- Easy to configure via environment variable
+- No code changes required
+
+### CONs
+- Too low a value causes OOM crashes under load
+- Doesn't reduce actual memory *needed*, just forces earlier GC
+- Default Node.js behavior (~1.7 GB limit on 64-bit) is reasonable for most deployments
+- Different deployments have different memory constraints — no single good default
+
+**Recommendation:** Don't set a default in the Dockerfile. Document as a tuning option for users running on low-memory hosts (e.g., `docker run -e NODE_OPTIONS="--max-old-space-size=512"`).
+
+---
+
+## Approach 5: Next.js `output: "standalone"` (Already in Use)
+
+**Status:** ✅ Already configured
+
+The `next.config.ts` already uses `output: "standalone"`, which:
+- Traces only the files needed for production
+- Creates a minimal `.next/standalone` directory
+- Avoids shipping full `node_modules`
+
+This is already optimized and no further action needed.
+
+---
+
+## Approach 6: Shared Redis Connection Pooling
+
+**Status:** 📋 Considered, not implemented
+
+With all services in one process, Redis connection pools could be shared. Currently, each module may create its own Redis client instance.
+
+### PROs
+- Fewer open connections to Redis
+- Slightly less memory for connection buffers
+
+### CONs
+- Marginal memory savings (Redis connections are lightweight)
+- Requires auditing all Redis usage across packages
+- Risk of connection contention under high load
+
+---
+
+## Summary of Recommendations
+
+| Approach | Impact | Effort | Status |
+|---|---|---|---|
+| 1. Integrate WS server | ~208 MB saved | Low | ✅ Done |
+| 2. Integrate Tasks server | ~328 MB saved | Medium | ✅ Done |
+| 3. Eliminate Fastify | ~10-30 MB saved | High | 📋 Future |
+| 4. `--max-old-space-size` | Configurable | None | 📋 User option |
+| 5. Standalone output | Already optimal | None | ✅ Already done |
+| 6. Shared Redis pools | ~5-10 MB saved | Medium | 📋 Future |
+| 7. Redis-backed initial query data | Faster page loads | Medium | 📋 POC documented |
+| 8. Client-side rendering with ISR shell | Faster TTFB | High | 📋 POC documented |
+
+---
+
+## Approach 7: Redis-Backed TanStack Query Initial Data
+
+**Status:** 📋 POC documented
+
+### Problem
+
+Currently, the dashboard page (`/`) is fully server-rendered on every request:
+
+1. Server calls `api.board.getHomeBoard()` (database query)
+2. Server prefetches all widget data via `prefetchForKindAsync()` (multiple database/integration queries)
+3. Server renders the full React tree with hydration boundary
+4. Client hydrates and takes over
+
+Each page load triggers a cascade: **Client → Next.js Server → tRPC → Database → Back**. For data that doesn't change often (board layout, widget configurations), this is wasteful.
+
+### Approach
+
+Use Redis as a shared cache layer between cron jobs and page loads. Cron jobs already populate Redis with integration data. The idea is to:
+
+1. **Cron jobs write to Redis** (already happening via `createItemAndIntegrationChannel`)
+2. **Server reads from Redis first** instead of hitting the database for widget data
+3. **Pass Redis data as `initialData`** to TanStack Query on the client
+4. **Client-side queries take over** with stale-while-revalidate behavior
+
+```tsx
+// POC: In _creator.tsx, read from Redis cache first for widget prefetching
+import { createItemAndIntegrationChannel } from "@homarr/redis";
+
+// Instead of always calling the database:
+const cachedData = await redisChannel.getAsync();
+if (cachedData) {
+  // Use cached data as initial query data - skip the database call
+  queryClient.setQueryData(queryKey, cachedData.data);
+} else {
+  // Fall back to normal prefetch
+  await prefetchForKindAsync(kind, queryClient, items);
+}
+```
+
+On the client side, TanStack Query's `initialData` option lets us hydrate from cache:
+
+```tsx
+// Client component using cached initial data
+const { data } = useQuery({
+  queryKey: ["widget", widgetId],
+  queryFn: () => fetchWidgetData(widgetId),
+  initialData: cachedWidgetData, // From Redis via server props
+  staleTime: 30_000, // Consider fresh for 30s
+});
+```
+
+### How TanStack Query Initial Data Works
+
+From the [TanStack Query docs](https://tanstack.com/query/v5/docs/framework/react/guides/initial-query-data):
+
+- `initialData` pre-populates the query cache before the component mounts
+- The query still revalidates in the background (stale-while-revalidate)
+- Combined with `staleTime`, the query won't refetch until the data is considered stale
+- This means the page renders instantly with cached data, then silently updates
+
+### PROs
+- **Faster page loads**: Redis reads are ~1ms vs ~50-200ms for database queries with joins
+- **Reduced database load**: Most page views hit Redis instead of SQLite/MySQL/PostgreSQL
+- **Leverages existing infrastructure**: Cron jobs already write widget data to Redis channels
+- **Graceful degradation**: Falls back to normal database queries on cache miss
+- **Non-breaking**: Can be adopted incrementally per widget type
+- **Shared across users**: Non-personal data (board layout, widget data) is the same for all users viewing the same board
+
+### CONs
+- **Cache staleness**: Data may be up to one cron interval old (typically 1-5 minutes)
+- **Cache invalidation complexity**: Need to invalidate Redis when boards are edited
+- **Memory usage**: More data stored in Redis (marginal since it's already stored for pub/sub)
+- **Serialization overhead**: superjson parse/stringify on every cache read
+- **Testing complexity**: Need to test cache hit/miss/stale scenarios
+
+### Estimated Impact
+
+| Metric | Before | After (cache hit) | Improvement |
+|---|---|---|---|
+| Dashboard TTFB | ~200-500ms | ~50-100ms | 2-5x faster |
+| Database queries per page load | 5-20 (depending on widgets) | 0-2 (board + auth only) | ~90% reduction |
+| Redis reads per page load | 0 | 5-20 | Acceptable (~1ms each) |
+
+### Implementation Path
+
+1. Create a `createBoardCacheChannel(boardId)` in `@homarr/redis`
+2. Populate it when boards are saved and when cron jobs update widget data
+3. In `_creator.tsx`, check cache before `prefetchForKindAsync()`
+4. Set `staleTime` to match cron interval for each widget type
+5. Add cache invalidation when boards are edited (`board.saveBoard` mutation)
+
+---
+
+## Approach 8: Client-Side Rendering with ISR Static Shell
+
+**Status:** 📋 POC documented (not recommended for Homarr's use case)
+
+### Concept
+
+Instead of server-rendering the entire dashboard on each request, serve a **static HTML shell** via Next.js ISR (Incremental Static Regeneration) and let the client fetch all dynamic content via TanStack Query.
+
+```tsx
+// Hypothetical ISR dashboard page
+export const revalidate = 60; // Regenerate every 60 seconds
+
+export default function DashboardPage() {
+  // Return a static shell - no server-side data fetching
+  return (
+    <DashboardShell>
+      <Suspense fallback={<BoardSkeleton />}>
+        <ClientBoard /> {/* Fetches via useQuery on mount */}
+      </Suspense>
+    </DashboardShell>
+  );
+}
+```
+
+The client component would then fetch everything:
+
+```tsx
+"use client";
+
+function ClientBoard() {
+  const { data: board, isLoading } = clientApi.board.getHomeBoard.useQuery(undefined, {
+    initialData: undefined, // Could be populated from Redis via API route
+  });
+
+  if (isLoading) return <BoardSkeleton />;
+  return <BoardContent board={board} />;
+}
+```
+
+### How Next.js ISR Works
+
+- On first request, Next.js generates the page and caches it
+- Subsequent requests serve the cached HTML instantly (TTFB ~0ms for CDN)
+- After `revalidate` seconds, the next request triggers background regeneration
+- The stale page is served until the new one is ready (stale-while-revalidate)
+
+### PROs
+- **Near-instant TTFB**: Static HTML served from disk/CDN cache
+- **Reduced server CPU**: No React SSR on every request
+- **Scalable**: Static pages can be served by any CDN or reverse proxy
+- **Good for public boards**: Shared boards viewed by many users benefit most
+
+### CONs
+- **Layout shift (CLS)**: Dashboard appears empty then fills in — bad UX for dashboards
+- **No SSR for SEO**: Not relevant for Homarr (it's a private dashboard app)
+- **Slower perceived load**: Users see a skeleton for 200-500ms while queries run
+- **Authentication complexity**: ISR pages must be the same for all users. Homarr's dashboard is user-specific (permissions, board access), making ISR caching ineffective for the page itself
+- **Breaks existing hydration pattern**: The current `HydrationBoundary` + `dehydrate()` pattern works well and ensures no layout shift
+- **WebSocket subscriptions delayed**: Real-time updates don't start until client JS loads and connects
+
+### Benchmark Comparison (Theoretical)
+
+| Metric | Current (SSR) | Approach 7 (Redis initial data) | Approach 8 (ISR + CSR) |
+|---|---|---|---|
+| TTFB | 200-500ms | 50-100ms | ~10ms (static) |
+| Time to Interactive | 200-500ms | 50-100ms | 200-500ms (same) |
+| Largest Contentful Paint | 200-500ms | 50-100ms | 400-800ms (worse) |
+| Cumulative Layout Shift | ~0 | ~0 | 0.1-0.3 (worse) |
+| Server CPU per request | High | Low | Near zero |
+
+### Recommendation
+
+**Approach 7 (Redis-backed initial data) is recommended over Approach 8 (ISR)** for Homarr because:
+
+1. **Dashboards are personalized**: Board access depends on user permissions, making ISR page-level caching ineffective
+2. **No layout shift**: Users expect the dashboard to appear fully rendered
+3. **Existing infrastructure**: Redis + cron jobs already provide the cache layer needed
+4. **Incremental adoption**: Can be applied per-widget without changing the overall rendering strategy
+5. **ISR is designed for content sites**: Blog posts, documentation pages, product pages — not interactive dashboards with real-time WebSocket subscriptions
+
+ISR could still be useful for specific Homarr pages like `/manage/about` or documentation pages that don't depend on user state, but the main dashboard is not a good candidate.

CHANGELOG.md

@@ -1,232 +1,3 @@
-## [1.60.0](https://github.com/homarr-labs/homarr/compare/v1.59.3...v1.60.0) (2026-05-01)
-
-### Features
-
-* **about:** add opencollective contributors ([#5481](https://github.com/homarr-labs/homarr/issues/5481)) ([3d202d4](https://github.com/homarr-labs/homarr/commit/3d202d409febf33d0218b589c979744c84f87407))
-
-### Bug Fixes
-
-* migrate from node-cron to croner ([#5407](https://github.com/homarr-labs/homarr/issues/5407)) ([e8edc20](https://github.com/homarr-labs/homarr/commit/e8edc203b6c862141668b043ef4232c22b8fae24))
-* **openapi:** openapi document empty ([#5579](https://github.com/homarr-labs/homarr/issues/5579)) ([ce8e330](https://github.com/homarr-labs/homarr/commit/ce8e330c82bc0be9f299f3071a1e80daafc5f789))
-
-### Performance Improvements
-
-* **icons:** updater takes 10 seconds to run with high cpu usage ([#5608](https://github.com/homarr-labs/homarr/issues/5608)) ([ed6680b](https://github.com/homarr-labs/homarr/commit/ed6680ba6a42864185818eb8d90b2303846c1761))
-
-## [1.60.0](https://github.com/homarr-labs/homarr/compare/v1.59.3...v1.60.0) (2026-05-01)
-
-### Features
-
-* **about:** add opencollective contributors ([#5481](https://github.com/homarr-labs/homarr/issues/5481)) ([3d202d4](https://github.com/homarr-labs/homarr/commit/3d202d409febf33d0218b589c979744c84f87407))
-
-### Bug Fixes
-
-* migrate from node-cron to croner ([#5407](https://github.com/homarr-labs/homarr/issues/5407)) ([e8edc20](https://github.com/homarr-labs/homarr/commit/e8edc203b6c862141668b043ef4232c22b8fae24))
-* **openapi:** openapi document empty ([#5579](https://github.com/homarr-labs/homarr/issues/5579)) ([ce8e330](https://github.com/homarr-labs/homarr/commit/ce8e330c82bc0be9f299f3071a1e80daafc5f789))
-
-### Performance Improvements
-
-* **icons:** updater takes 10 seconds to run with high cpu usage ([#5608](https://github.com/homarr-labs/homarr/issues/5608)) ([ed6680b](https://github.com/homarr-labs/homarr/commit/ed6680ba6a42864185818eb8d90b2303846c1761))
-
-## [1.59.3](https://github.com/homarr-labs/homarr/compare/v1.59.2...v1.59.3) (2026-04-24)
-
-### Bug Fixes
-
-* **deps:** update dependency better-sqlite3 to ^12.9.0 ([#5531](https://github.com/homarr-labs/homarr/issues/5531)) ([7852f1d](https://github.com/homarr-labs/homarr/commit/7852f1d987d40707ae13494f9c934a563581f97f))
-
-## [1.59.3](https://github.com/homarr-labs/homarr/compare/v1.59.2...v1.59.3) (2026-04-24)
-
-### Bug Fixes
-
-* **deps:** update dependency better-sqlite3 to ^12.9.0 ([#5531](https://github.com/homarr-labs/homarr/issues/5531)) ([7852f1d](https://github.com/homarr-labs/homarr/commit/7852f1d987d40707ae13494f9c934a563581f97f))
-
-## [1.59.2](https://github.com/homarr-labs/homarr/compare/v1.59.1...v1.59.2) (2026-04-17)
-
-### Bug Fixes
-
-* **about:** add missing dependencies ([#5480](https://github.com/homarr-labs/homarr/issues/5480)) ([c48588c](https://github.com/homarr-labs/homarr/commit/c48588c6a748920b05f8afcd79fad17dc65f2930))
-* **deps:** update dependency @drizzle-team/brocli to ^0.12.0 ([#5489](https://github.com/homarr-labs/homarr/issues/5489)) ([74611b7](https://github.com/homarr-labs/homarr/commit/74611b75a736df43a77ebc780d2e0eee5c40e3f3))
-* **deps:** update dependency @immich/sdk to ^2.7.0 ([#5490](https://github.com/homarr-labs/homarr/issues/5490)) ([9cdf2aa](https://github.com/homarr-labs/homarr/commit/9cdf2aa1f2b1477522879095b603b100c1dd3ac0))
-* **deps:** update dependency @immich/sdk to ^2.7.2 ([#5494](https://github.com/homarr-labs/homarr/issues/5494)) ([0927f45](https://github.com/homarr-labs/homarr/commit/0927f45b2573753152fd5e9e318ba62b88abca35))
-* **deps:** update dependency fast-xml-parser to ^5.5.11 ([#5500](https://github.com/homarr-labs/homarr/issues/5500)) ([652ed1a](https://github.com/homarr-labs/homarr/commit/652ed1a5ed0beeb2dbd44976890f24dc12b90cf6))
-* **deps:** update dependency isomorphic-dompurify to ^3.8.0 ([#5503](https://github.com/homarr-labs/homarr/issues/5503)) ([0731b7c](https://github.com/homarr-labs/homarr/commit/0731b7c5ef272bcf69c566cdec723f2696309e67))
-* **deps:** update dependency jotai to ^2.19.1 ([#5487](https://github.com/homarr-labs/homarr/issues/5487)) ([efd8a55](https://github.com/homarr-labs/homarr/commit/efd8a55b6ea113bc42bc90d9ccb0db6c1d2b68ef))
-* **deps:** update dependency next-intl to v4.9.1 [security] ([#5470](https://github.com/homarr-labs/homarr/issues/5470)) ([f2437c4](https://github.com/homarr-labs/homarr/commit/f2437c473106689e9fa93e7dcbea84b00800ea4a))
-* **deps:** update dependency swagger-ui-react to ^5.32.2 ([#5488](https://github.com/homarr-labs/homarr/issues/5488)) ([cf131c5](https://github.com/homarr-labs/homarr/commit/cf131c5c51f6c21f942ab89d02353f93dc05774c))
-* **deps:** update dependency typescript-eslint to ^8.58.1 ([#5496](https://github.com/homarr-labs/homarr/issues/5496)) ([f88984c](https://github.com/homarr-labs/homarr/commit/f88984cda844beb1099a08c9cdeb6691ad13b5a8))
-* **deps:** update react monorepo to v19.2.5 ([#5502](https://github.com/homarr-labs/homarr/issues/5502)) ([c8a61a9](https://github.com/homarr-labs/homarr/commit/c8a61a9df3087de28c76f573623725eec246dd32))
-* **deps:** update testcontainers-node monorepo to ^11.14.0 ([#5498](https://github.com/homarr-labs/homarr/issues/5498)) ([1057b47](https://github.com/homarr-labs/homarr/commit/1057b478c37d02e9de7bcd155f0b3fb764149abe))
-* **deps:** update tiptap monorepo to v3.22.3 ([#5499](https://github.com/homarr-labs/homarr/issues/5499)) ([95abd2c](https://github.com/homarr-labs/homarr/commit/95abd2c9d3a563c7eaebe12f3b8015e3299e27e8))
-* **deps:** update turbo monorepo to ^2.9.4 ([#5476](https://github.com/homarr-labs/homarr/issues/5476)) ([813f2fa](https://github.com/homarr-labs/homarr/commit/813f2fa5efb999d3364882578fdf456537dba3a6))
-* **deps:** update turbo monorepo to ^2.9.5 ([#5491](https://github.com/homarr-labs/homarr/issues/5491)) ([ed24ce6](https://github.com/homarr-labs/homarr/commit/ed24ce6381466fa530ce225363231303be4ed92e))
-* preserve all-day event dates in Nextcloud calendar integration ([#5523](https://github.com/homarr-labs/homarr/issues/5523)) ([2e78979](https://github.com/homarr-labs/homarr/commit/2e789795ed11c816550b6a3ce88fe92a360ede9c))
-
-## [1.59.1](https://github.com/homarr-labs/homarr/compare/v1.59.0...v1.59.1) (2026-04-10)
-
-### Bug Fixes
-
-* **qbittorrent:** requests fail ([#5473](https://github.com/homarr-labs/homarr/issues/5473)) ([db6bb87](https://github.com/homarr-labs/homarr/commit/db6bb870e3be14c7895a2882755d3aee09e44fa6))
-
-### Reverts
-
-* **deps:** downgrade undici from v8 to v7 ([#5473](https://github.com/homarr-labs/homarr/issues/5473)) ([dc44fac](https://github.com/homarr-labs/homarr/commit/dc44fac42aab5679427b2921402dfa11e634e1cf))
-
-## [1.59.0](https://github.com/homarr-labs/homarr/compare/v1.58.1...v1.59.0) (2026-04-10)
-
-### Features
-
-* Anchor integration and Anchor Note widget ([#5040](https://github.com/homarr-labs/homarr/issues/5040)) ([7879b31](https://github.com/homarr-labs/homarr/commit/7879b3163074b6af9381b8eb70dced55faddc506))
-* **rss-feed:** add optional poster ([#5452](https://github.com/homarr-labs/homarr/issues/5452)) ([6ec058c](https://github.com/homarr-labs/homarr/commit/6ec058c835040dbf72cd2490d49f94be7da066dc))
-* **rss-feed:** add periodic live updates ([#5449](https://github.com/homarr-labs/homarr/issues/5449)) ([faffb81](https://github.com/homarr-labs/homarr/commit/faffb818f99900e3abb5fa78cfbb7980692362b5))
-* speedtest tracker integration ([#5363](https://github.com/homarr-labs/homarr/issues/5363)) ([22d599c](https://github.com/homarr-labs/homarr/commit/22d599c0cf64b39f3d616ceadc6c2ac32551f99d))
-
-### Bug Fixes
-
-* **deps:** update dependency @tabler/icons-react to ^3.41.1 ([#5400](https://github.com/homarr-labs/homarr/issues/5400)) ([f0ef472](https://github.com/homarr-labs/homarr/commit/f0ef4729bfb7c3672968b77b9b757bc34877c60f))
-* **deps:** update dependency adm-zip to v0.5.17 ([#5422](https://github.com/homarr-labs/homarr/issues/5422)) ([dbe8d84](https://github.com/homarr-labs/homarr/commit/dbe8d84202b00687f16784cbedf61d7488efbbff))
-* **deps:** update dependency dotenv to ^17.4.0 ([#5427](https://github.com/homarr-labs/homarr/issues/5427)) ([50bf7cd](https://github.com/homarr-labs/homarr/commit/50bf7cdf194c13bcbf95ef8a6a1bc7eb4c9c3865))
-* **deps:** update dependency dotenv to ^17.4.1 ([#5462](https://github.com/homarr-labs/homarr/issues/5462)) ([845f115](https://github.com/homarr-labs/homarr/commit/845f11526ea7b3dd6f543fad48a158a4782c52bb))
-* **deps:** update dependency fast-xml-parser to ^5.5.10 ([#5439](https://github.com/homarr-labs/homarr/issues/5439)) ([a7b195d](https://github.com/homarr-labs/homarr/commit/a7b195d2cb25fffe81266e7f6fa9499d94cae733))
-* **deps:** update dependency next to v16.2.3 [security] ([#5461](https://github.com/homarr-labs/homarr/issues/5461)) ([7982def](https://github.com/homarr-labs/homarr/commit/7982def853fd69c269946dc2d6377186512baaf9))
-* **deps:** update dependency next-intl to v4.8.4 ([#5413](https://github.com/homarr-labs/homarr/issues/5413)) ([6047eb4](https://github.com/homarr-labs/homarr/commit/6047eb4477584172f7d8e6e14237c251ac487d81))
-* **deps:** update dependency next-intl to v4.9.0 ([#5426](https://github.com/homarr-labs/homarr/issues/5426)) ([612038a](https://github.com/homarr-labs/homarr/commit/612038ad070681c582cb54ac4298bc07700765c9))
-* **deps:** update dependency react-quill-new to ^3.8.3 ([#5463](https://github.com/homarr-labs/homarr/issues/5463)) ([13e13ba](https://github.com/homarr-labs/homarr/commit/13e13ba3526436b044ac83d08c346e8e406ca3d4))
-* **deps:** update dependency sass to ^1.99.0 ([#5437](https://github.com/homarr-labs/homarr/issues/5437)) ([3f73474](https://github.com/homarr-labs/homarr/commit/3f73474d3125279d94395272365aa67e0a0f69e8))
-* **deps:** update dependency typescript-eslint to ^8.58.0 ([#5409](https://github.com/homarr-labs/homarr/issues/5409)) ([1e869f6](https://github.com/homarr-labs/homarr/commit/1e869f6a96d7e34af068b5666e01093a4b20fe97))
-* **deps:** update dependency undici to v8 ([#5432](https://github.com/homarr-labs/homarr/issues/5432)) ([f2f5128](https://github.com/homarr-labs/homarr/commit/f2f5128cbd961b6576e195ac8b695f12996c377e))
-* **deps:** update dependency undici to v8.0.1 ([#5440](https://github.com/homarr-labs/homarr/issues/5440)) ([a0e0083](https://github.com/homarr-labs/homarr/commit/a0e0083b16ea6ce42a0e3594ad53321210c98141))
-* **deps:** update dependency undici to v8.0.2 ([#5446](https://github.com/homarr-labs/homarr/issues/5446)) ([75b36bb](https://github.com/homarr-labs/homarr/commit/75b36bb1609a0ea1a97158f4674ebf8f4c5f205e))
-* **deps:** update nextjs monorepo to v16.2.2 ([#5418](https://github.com/homarr-labs/homarr/issues/5418)) ([8597470](https://github.com/homarr-labs/homarr/commit/859747037b4a0caca9e208e0b4ebce638b6c5d4e))
-* **deps:** update tanstack-query monorepo to ^5.96.0 ([#5410](https://github.com/homarr-labs/homarr/issues/5410)) ([8b1e3ba](https://github.com/homarr-labs/homarr/commit/8b1e3babc02d8ab6a7db9fd85325a0b92813ce8c))
-* **deps:** update tanstack-query monorepo to ^5.96.1 ([#5421](https://github.com/homarr-labs/homarr/issues/5421)) ([72ad935](https://github.com/homarr-labs/homarr/commit/72ad935ddf831c008e53ae3a1c5e924cc82710d1))
-* **deps:** update tanstack-query monorepo to ^5.96.2 ([#5442](https://github.com/homarr-labs/homarr/issues/5442)) ([b619ba1](https://github.com/homarr-labs/homarr/commit/b619ba1d46768cc3ed1d3739e0f379e0059bc2d9))
-* **deps:** update tiptap monorepo to v3.22.0 ([#5414](https://github.com/homarr-labs/homarr/issues/5414)) ([402d948](https://github.com/homarr-labs/homarr/commit/402d948fe7d36406b7a75a4e4861330c6bcaa78b))
-* **deps:** update tiptap monorepo to v3.22.1 ([#5434](https://github.com/homarr-labs/homarr/issues/5434)) ([2baab54](https://github.com/homarr-labs/homarr/commit/2baab5402d79caba0e1b3c53f52fdf0cbeb6875d))
-* **deps:** update tiptap monorepo to v3.22.2 ([#5448](https://github.com/homarr-labs/homarr/issues/5448)) ([8cab4b0](https://github.com/homarr-labs/homarr/commit/8cab4b03333050376ae22a14eaaa1c0f045992d3))
-* **deps:** update turbo monorepo to ^2.9.1 ([#5408](https://github.com/homarr-labs/homarr/issues/5408)) ([7607140](https://github.com/homarr-labs/homarr/commit/7607140f94f5b19a6b9cbacc7deabd2afc004d24))
-* **deps:** update turbo monorepo to ^2.9.2 ([#5415](https://github.com/homarr-labs/homarr/issues/5415)) ([d8480c0](https://github.com/homarr-labs/homarr/commit/d8480c05a63525dc655a73675c2a9eec575a9539))
-* **deps:** update turbo monorepo to ^2.9.3 ([#5419](https://github.com/homarr-labs/homarr/issues/5419)) ([dfa8793](https://github.com/homarr-labs/homarr/commit/dfa87939f200719af9f34e0e409895cf6e5a9c13))
-* **logs:** missing fields from top level error with metadata in output ([#5456](https://github.com/homarr-labs/homarr/issues/5456)) ([41a03ef](https://github.com/homarr-labs/homarr/commit/41a03ef4e03675c5adf1171be152a767679bc466))
-* **security:** remove salt from database ([#5412](https://github.com/homarr-labs/homarr/issues/5412)) ([2454cac](https://github.com/homarr-labs/homarr/commit/2454cac7be14207f822bf3e38f9a7fd261645dc5))
-
-## [1.58.1](https://github.com/homarr-labs/homarr/compare/v1.58.0...v1.58.1) (2026-04-04)
-
-### Bug Fixes
-
-* arabic text in english translations ([a86cdb9](https://github.com/homarr-labs/homarr/commit/a86cdb9fb91a10c8250f849e70c17777c18ada77))
-
-## [1.58.0](https://github.com/homarr-labs/homarr/compare/v1.57.1...v1.58.0) (2026-04-03)
-
-### Features
-
-* **integrations:** add search.ch integration with timetable widget ([#5180](https://github.com/homarr-labs/homarr/issues/5180)) ([abb2dfc](https://github.com/homarr-labs/homarr/commit/abb2dfc92ab51b16e7172374cfee8b9c0c752454))
-
-### Bug Fixes
-
-* **boards:** unable to click on links at settings page ([#5230](https://github.com/homarr-labs/homarr/issues/5230)) ([6a200c3](https://github.com/homarr-labs/homarr/commit/6a200c39afaa1a9a1057643612065a40ad1cdd82))
-* **deps:** update dependency @ctrl/deluge to ^7.5.3 ([#5365](https://github.com/homarr-labs/homarr/issues/5365)) ([9c134c5](https://github.com/homarr-labs/homarr/commit/9c134c5ceb742b21b021ef3b49de8cc0d526d460))
-* **deps:** update dependency @ctrl/deluge to v8 ([#5367](https://github.com/homarr-labs/homarr/issues/5367)) ([e88e3d1](https://github.com/homarr-labs/homarr/commit/e88e3d17c01dab8836bec11d2ac01195f06cdc2e))
-* **deps:** update dependency @immich/sdk to ^2.6.2 ([#5370](https://github.com/homarr-labs/homarr/issues/5370)) ([4a5bafa](https://github.com/homarr-labs/homarr/commit/4a5bafa79092b209e94a56f72362011f416bf115))
-* **deps:** update dependency @immich/sdk to ^2.6.3 ([#5380](https://github.com/homarr-labs/homarr/issues/5380)) ([2dd3c90](https://github.com/homarr-labs/homarr/commit/2dd3c906c4215b55e23f4b15ba4b423e23be8376))
-* **deps:** update dependency @tabler/icons-react to ^3.41.0 ([#5384](https://github.com/homarr-labs/homarr/issues/5384)) ([a9bcc9d](https://github.com/homarr-labs/homarr/commit/a9bcc9d04bdfcf28ea561cd590ca2a4bd775593c))
-* **deps:** update dependency better-sqlite3 to ^12.8.0 ([#5266](https://github.com/homarr-labs/homarr/issues/5266)) ([46db8b6](https://github.com/homarr-labs/homarr/commit/46db8b6ab32406fb4ff7a7a9938692954778a070))
-* **deps:** update dependency drizzle-orm to ^0.45.2 ([#5388](https://github.com/homarr-labs/homarr/issues/5388)) ([0a78e3f](https://github.com/homarr-labs/homarr/commit/0a78e3f12aa99509f42d7af647a478c5abaf5c96))
-* **deps:** update dependency fast-xml-parser to ^5.5.9 ([#5359](https://github.com/homarr-labs/homarr/issues/5359)) ([189806b](https://github.com/homarr-labs/homarr/commit/189806b5a2b8e67f925cc8def6bc8ddefdc5bfc4))
-* **deps:** update dependency fastify to ^5.8.4 ([#5351](https://github.com/homarr-labs/homarr/issues/5351)) ([728f7e4](https://github.com/homarr-labs/homarr/commit/728f7e489aa499bcd7e97c7ec8571e29e7e2cab3))
-* **deps:** update dependency isomorphic-dompurify to ^3.7.0 ([#5366](https://github.com/homarr-labs/homarr/issues/5366)) ([c2b54dd](https://github.com/homarr-labs/homarr/commit/c2b54ddfaab93daa4e65c0c38bf5c27e4402a492))
-* **deps:** update dependency isomorphic-dompurify to ^3.7.1 ([#5369](https://github.com/homarr-labs/homarr/issues/5369)) ([8d1ff40](https://github.com/homarr-labs/homarr/commit/8d1ff4065d669268f0e6a03f2b68c1ba728a756a))
-* **deps:** update dependency jotai to ^2.19.0 ([#5368](https://github.com/homarr-labs/homarr/issues/5368)) ([14d8717](https://github.com/homarr-labs/homarr/commit/14d87178b5a93bdc6fb74793feed95d014814d0b))
-* **deps:** update dependency node-ical to ^0.23.1 - abandoned ([#4856](https://github.com/homarr-labs/homarr/issues/4856)) ([b07c545](https://github.com/homarr-labs/homarr/commit/b07c545f17f4dafa62167047baa9eed4b7ee4395))
-* **deps:** update dependency typescript-eslint to ^8.57.2 ([#5360](https://github.com/homarr-labs/homarr/issues/5360)) ([cefbf0e](https://github.com/homarr-labs/homarr/commit/cefbf0e2715e9adbc72cdb0b83d84c309e3257d6))
-* **deps:** update dependency undici to v7.24.6 ([#5374](https://github.com/homarr-labs/homarr/issues/5374)) ([4f2cc9a](https://github.com/homarr-labs/homarr/commit/4f2cc9af2a42e19624def3bdea60fcb00334c483))
-* **deps:** update dependency zod to ^4.3.5 - abandoned ([#4803](https://github.com/homarr-labs/homarr/issues/4803)) ([2b4c83d](https://github.com/homarr-labs/homarr/commit/2b4c83dccac168ffa6f9b6e184ed004659373cf7))
-* **deps:** update dependency zod to ^4.3.6 ([#5376](https://github.com/homarr-labs/homarr/issues/5376)) ([a9582f0](https://github.com/homarr-labs/homarr/commit/a9582f04edb0e161d1fab6e64b13d0ce463ef341))
-* **deps:** update tanstack-query monorepo to ^5.95.0 ([#5325](https://github.com/homarr-labs/homarr/issues/5325)) ([b11bf36](https://github.com/homarr-labs/homarr/commit/b11bf367d0567e4c8b9068804442ebd200dab01c))
-* **deps:** update tanstack-query monorepo to ^5.95.1 ([#5355](https://github.com/homarr-labs/homarr/issues/5355)) ([332b6b4](https://github.com/homarr-labs/homarr/commit/332b6b4f42e7c90570cd4c25a6e6a331a76c660f))
-* **deps:** update tanstack-query monorepo to ^5.95.2 ([#5357](https://github.com/homarr-labs/homarr/issues/5357)) ([6820991](https://github.com/homarr-labs/homarr/commit/682099189b689ea17e16af41fd280a72ed68016f))
-* **deps:** update tiptap monorepo to v3.20.5 ([#5371](https://github.com/homarr-labs/homarr/issues/5371)) ([6820f8a](https://github.com/homarr-labs/homarr/commit/6820f8afea622587c1ee18b13d13a041ca0572ee))
-* **deps:** update tiptap monorepo to v3.21.0 ([#5386](https://github.com/homarr-labs/homarr/issues/5386)) ([b30dbaf](https://github.com/homarr-labs/homarr/commit/b30dbafbbbad468ff37ff11237a64ec29df62345))
-* **deps:** update trpc monorepo to ^11.15.0 ([#5354](https://github.com/homarr-labs/homarr/issues/5354)) ([2fb2981](https://github.com/homarr-labs/homarr/commit/2fb2981d2fb79ca2ca6a9bc5c08d91c8fa5710e7))
-* **deps:** update trpc monorepo to ^11.15.1 ([#5381](https://github.com/homarr-labs/homarr/issues/5381)) ([451e68a](https://github.com/homarr-labs/homarr/commit/451e68ab57551e23dd7ae772b7483cc56d57ebbb))
-* **deps:** update trpc monorepo to ^11.16.0 ([#5392](https://github.com/homarr-labs/homarr/issues/5392)) ([72a93e6](https://github.com/homarr-labs/homarr/commit/72a93e681f3701459176692857220730c279f80b))
-* **deps:** update turbo monorepo to ^2.8.21 ([#5391](https://github.com/homarr-labs/homarr/issues/5391)) ([fa40b6b](https://github.com/homarr-labs/homarr/commit/fa40b6b647b884a7f10c268a22330e0e68b50d4d))
-* honor trusted certificates in Immich integration requests ([#5275](https://github.com/homarr-labs/homarr/issues/5275)) ([7679553](https://github.com/homarr-labs/homarr/commit/7679553f16ff2945a3eb6cb668ca3a701d13d5ce)), closes [#5242](https://github.com/homarr-labs/homarr/issues/5242)
-* node-ical prevents many trpc queries from loading ([#5395](https://github.com/homarr-labs/homarr/issues/5395)) ([c977b84](https://github.com/homarr-labs/homarr/commit/c977b84e2d84d5724219f5ff5f99bc550438e168))
-
-## [1.57.1](https://github.com/homarr-labs/homarr/compare/v1.57.0...v1.57.1) (2026-03-27)
-
-### Bug Fixes
-
-* dashdot gpu ([#5347](https://github.com/homarr-labs/homarr/issues/5347)) ([192a43a](https://github.com/homarr-labs/homarr/commit/192a43a031eb9431da2c11395eda69a6c7236b9b))
-* **deps:** update dependency @t3-oss/env-nextjs to ^0.13.11 ([#5345](https://github.com/homarr-labs/homarr/issues/5345)) ([49d9394](https://github.com/homarr-labs/homarr/commit/49d9394cd78b2a1146c8dc00dd982215a2f9a580))
-* **deps:** update dependency dockerode to ^4.0.10 ([#5327](https://github.com/homarr-labs/homarr/issues/5327)) ([42a3791](https://github.com/homarr-labs/homarr/commit/42a3791e6b5664a0f28d3ee4d29d5257ef3765f6))
-* **deps:** update dependency fast-xml-parser to ^5.5.8 ([#5324](https://github.com/homarr-labs/homarr/issues/5324)) ([7982938](https://github.com/homarr-labs/homarr/commit/798293813cf82e38d7059069823f927b7cdfb3b8))
-
-## [1.57.0](https://github.com/homarr-labs/homarr/compare/v1.56.1...v1.57.0) (2026-03-27)
-
-### Features
-
-* add "allowModals" option for iframe widget ([#5339](https://github.com/homarr-labs/homarr/issues/5339)) ([2fefd9d](https://github.com/homarr-labs/homarr/commit/2fefd9da01c827160fa5fd9b63a38615ea9969e2))
-* add GPU monitoring support via Glances integration ([#5255](https://github.com/homarr-labs/homarr/issues/5255)) ([003dac4](https://github.com/homarr-labs/homarr/commit/003dac4744f2e23535f1cbb7494187201af4b164)), closes [#5102](https://github.com/homarr-labs/homarr/issues/5102)
-* add nextcloud notification provider ([#5343](https://github.com/homarr-labs/homarr/issues/5343)) ([f88bf95](https://github.com/homarr-labs/homarr/commit/f88bf9582e1cf45a6b7fd898e12d227869a3849f))
-
-### Bug Fixes
-
-* **deps:** update dependency @immich/sdk to ^2.6.0 ([#5318](https://github.com/homarr-labs/homarr/issues/5318)) ([20a9b3d](https://github.com/homarr-labs/homarr/commit/20a9b3d556a15e6fdf7d1dbd78b677b5ce219c75))
-* **deps:** update dependency @immich/sdk to ^2.6.1 ([#5319](https://github.com/homarr-labs/homarr/issues/5319)) ([feaf022](https://github.com/homarr-labs/homarr/commit/feaf022965cf4a27112c7e3bcb9ef3ad0dd5c281))
-* **deps:** update dependency @next/eslint-plugin-next to v16.1.7 ([#5289](https://github.com/homarr-labs/homarr/issues/5289)) ([237d11d](https://github.com/homarr-labs/homarr/commit/237d11d2c021e28d58b0d627d2802d509d4c1b2b))
-* **deps:** update dependency @tanstack/react-query to ^5.91.0 ([#5305](https://github.com/homarr-labs/homarr/issues/5305)) ([13b99d0](https://github.com/homarr-labs/homarr/commit/13b99d021b46fe0541ce9b42ba66756fafd26c30))
-* **deps:** update dependency @tanstack/react-query to ^5.91.2 ([#5314](https://github.com/homarr-labs/homarr/issues/5314)) ([6fa6ba3](https://github.com/homarr-labs/homarr/commit/6fa6ba385e6691fefbb9f045a0ff976bcd85de16))
-* **deps:** update dependency drizzle-kit to ^0.31.10 ([#5291](https://github.com/homarr-labs/homarr/issues/5291)) ([09227a3](https://github.com/homarr-labs/homarr/commit/09227a3884d291032f1012b59ce06babc3c87103))
-* **deps:** update dependency fast-xml-parser to ^5.5.6 ([#5297](https://github.com/homarr-labs/homarr/issues/5297)) ([991044e](https://github.com/homarr-labs/homarr/commit/991044ebd78288bea7b441d3c14b159b5e66915b))
-* **deps:** update dependency fast-xml-parser to ^5.5.7 ([#5315](https://github.com/homarr-labs/homarr/issues/5315)) ([2336f9e](https://github.com/homarr-labs/homarr/commit/2336f9ee5e35f7b610743dee55b91caf8434c1e4))
-* **deps:** update dependency ioredis to v5.10.1 ([#5316](https://github.com/homarr-labs/homarr/issues/5316)) ([47b2d36](https://github.com/homarr-labs/homarr/commit/47b2d36f7a0933b6a6bbb61a449888be9304e1c5))
-* **deps:** update dependency isomorphic-dompurify to ^3.4.0 ([#5292](https://github.com/homarr-labs/homarr/issues/5292)) ([6276449](https://github.com/homarr-labs/homarr/commit/62764499e7bbc9995ecf3de7351c9224d6aee4b6))
-* **deps:** update dependency isomorphic-dompurify to ^3.5.0 ([#5299](https://github.com/homarr-labs/homarr/issues/5299)) ([b6b11c3](https://github.com/homarr-labs/homarr/commit/b6b11c39d2b4a33c5732ae239d7c1aaba6003cc6))
-* **deps:** update dependency isomorphic-dompurify to ^3.5.1 ([#5300](https://github.com/homarr-labs/homarr/issues/5300)) ([94dfddf](https://github.com/homarr-labs/homarr/commit/94dfddf8bde2966b46bcd2d30e5e4f886ebe4605))
-* **deps:** update dependency isomorphic-dompurify to ^3.6.0 ([#5334](https://github.com/homarr-labs/homarr/issues/5334)) ([8d64cb8](https://github.com/homarr-labs/homarr/commit/8d64cb8a5e276677b033774152c921aedc1e6c8a))
-* **deps:** update dependency mysql2 to v3.20.0 ([#5283](https://github.com/homarr-labs/homarr/issues/5283)) ([4fb48c2](https://github.com/homarr-labs/homarr/commit/4fb48c23a2ccb1c047bab0d354933561e81cc3ed))
-* **deps:** update dependency swagger-ui-react to ^5.32.1 ([#5296](https://github.com/homarr-labs/homarr/issues/5296)) ([63c55ce](https://github.com/homarr-labs/homarr/commit/63c55cec5711c41544c65ab83f24d09e63b10354))
-* **deps:** update dependency trpc-to-openapi to ^3.2.0 ([#5320](https://github.com/homarr-labs/homarr/issues/5320)) ([22f5d3b](https://github.com/homarr-labs/homarr/commit/22f5d3b95959cf0a835c9750b41106eaafc4432e))
-* **deps:** update dependency typescript-eslint to ^8.57.1 ([#5286](https://github.com/homarr-labs/homarr/issues/5286)) ([d4e4c96](https://github.com/homarr-labs/homarr/commit/d4e4c9669d648632a055b5ec0515821b50821142))
-* **deps:** update dependency undici to v7.24.5 ([#5338](https://github.com/homarr-labs/homarr/issues/5338)) ([22bbef9](https://github.com/homarr-labs/homarr/commit/22bbef9d8e03215abddf6c6e26a5df45f252626d))
-* **deps:** update dependency ws to ^8.20.0 ([#5337](https://github.com/homarr-labs/homarr/issues/5337)) ([d53c922](https://github.com/homarr-labs/homarr/commit/d53c922688606bd7d9494089e1ec43b930ad9923))
-* **deps:** update mantine monorepo to ^8.3.18 ([#5298](https://github.com/homarr-labs/homarr/issues/5298)) ([6f8e629](https://github.com/homarr-labs/homarr/commit/6f8e62963a4eb47cb3095dff46ee0e759e1cbd3c))
-* **deps:** update nextjs monorepo to v16.2.0 ([#5309](https://github.com/homarr-labs/homarr/issues/5309)) ([8831613](https://github.com/homarr-labs/homarr/commit/883161357dab4d94ff794f9444040d88074c464c))
-* **deps:** update nextjs monorepo to v16.2.1 ([#5330](https://github.com/homarr-labs/homarr/issues/5330)) ([e23a397](https://github.com/homarr-labs/homarr/commit/e23a397a80e4409f5da50c737aeb26b295ce79fc))
-* **deps:** update testcontainers-node monorepo to ^11.13.0 ([#5293](https://github.com/homarr-labs/homarr/issues/5293)) ([c009dd7](https://github.com/homarr-labs/homarr/commit/c009dd7de649bf24ab9bcf5ea25c65ebd18540bb))
-* **deps:** update tiptap monorepo to v3.20.4 ([#5287](https://github.com/homarr-labs/homarr/issues/5287)) ([369b4d4](https://github.com/homarr-labs/homarr/commit/369b4d486327d0eaa04b70dd692c426f9a39afd7))
-* **deps:** update trpc monorepo to ^11.14.1 ([#5328](https://github.com/homarr-labs/homarr/issues/5328)) ([d7f0596](https://github.com/homarr-labs/homarr/commit/d7f0596db8e44e2e79bb26095abd142b50675cc3))
-* **deps:** update turbo monorepo to ^2.8.18 ([#5308](https://github.com/homarr-labs/homarr/issues/5308)) ([24694b9](https://github.com/homarr-labs/homarr/commit/24694b92411aae818b97a3a5c9add97d707a2f38))
-* **deps:** update turbo monorepo to ^2.8.19 ([#5310](https://github.com/homarr-labs/homarr/issues/5310)) ([7537184](https://github.com/homarr-labs/homarr/commit/7537184a8168a4837d0a83a925a70c938555f199))
-* **deps:** update turbo monorepo to ^2.8.20 ([#5317](https://github.com/homarr-labs/homarr/issues/5317)) ([5b4e6fc](https://github.com/homarr-labs/homarr/commit/5b4e6fcc11c877815c4730607de84ab70d630fb8))
-* handle null ports in Docker container table ([#5313](https://github.com/homarr-labs/homarr/issues/5313)) ([1639da5](https://github.com/homarr-labs/homarr/commit/1639da57794d2555426e56030b4b34e2cc201aa9)), closes [#5311](https://github.com/homarr-labs/homarr/issues/5311)
-* warnings in code ([4f2b821](https://github.com/homarr-labs/homarr/commit/4f2b8217f819b91ec4b05e32aebd6bc5473db155))
-
-## [1.56.1](https://github.com/homarr-labs/homarr/compare/v1.56.0...v1.56.1) (2026-03-20)
-
-### Bug Fixes
-
-* **deps:** update dependency dayjs to ^1.11.20 ([#5253](https://github.com/homarr-labs/homarr/issues/5253)) ([615062c](https://github.com/homarr-labs/homarr/commit/615062c6b141fa1e4bc91d2fab505fa1652608d2))
-* **deps:** update dependency fast-xml-parser to ^5.5.1 ([#5246](https://github.com/homarr-labs/homarr/issues/5246)) ([91a9b6b](https://github.com/homarr-labs/homarr/commit/91a9b6bec9438e9a812960b829cea343e8478c63))
-* **deps:** update dependency fast-xml-parser to ^5.5.3 ([#5251](https://github.com/homarr-labs/homarr/issues/5251)) ([d1d8659](https://github.com/homarr-labs/homarr/commit/d1d8659f951cdd22bf4a22b407a4f3027f036ec2))
-* **deps:** update dependency fast-xml-parser to ^5.5.5 ([#5270](https://github.com/homarr-labs/homarr/issues/5270)) ([2423ecd](https://github.com/homarr-labs/homarr/commit/2423ecdce57353dd50d678444da800c02a246223))
-* **deps:** update dependency isomorphic-dompurify to ^3.1.0 ([#5239](https://github.com/homarr-labs/homarr/issues/5239)) ([63f91b6](https://github.com/homarr-labs/homarr/commit/63f91b6352e9ba58a0823434d86915371f1c1d30))
-* **deps:** update dependency isomorphic-dompurify to ^3.3.0 ([#5252](https://github.com/homarr-labs/homarr/issues/5252)) ([e8f6876](https://github.com/homarr-labs/homarr/commit/e8f6876d2477fb0e1936006b81f7324b90b6eb33))
-* **deps:** update dependency jotai to ^2.18.1 ([#5238](https://github.com/homarr-labs/homarr/issues/5238)) ([729b49f](https://github.com/homarr-labs/homarr/commit/729b49ffa9b1f91ebd7bcd2300febba4d9d0fbb9))
-* **deps:** update dependency mysql2 to v3.19.1 ([#5240](https://github.com/homarr-labs/homarr/issues/5240)) ([1040eca](https://github.com/homarr-labs/homarr/commit/1040ecac04fd0b10e101495d5230a3fa4898097a))
-* **deps:** update dependency next to v16.1.7 [security] ([#5263](https://github.com/homarr-labs/homarr/issues/5263)) ([3bbde3c](https://github.com/homarr-labs/homarr/commit/3bbde3cbb8eb3aa528485f17d40817cb982a8687))
-* **deps:** update dependency sass to ^1.98.0 ([#5247](https://github.com/homarr-labs/homarr/issues/5247)) ([f995cba](https://github.com/homarr-labs/homarr/commit/f995cba157c9954b6f266bd5b2bb8d60a08f51f1))
-* **deps:** update dependency typescript-eslint to ^8.57.0 ([#5241](https://github.com/homarr-labs/homarr/issues/5241)) ([7841b58](https://github.com/homarr-labs/homarr/commit/7841b58f0fdd4a4494b6f3d61881a1efb4c9eba3))
-* **deps:** update mantine monorepo to ^8.3.17 ([#5271](https://github.com/homarr-labs/homarr/issues/5271)) ([6fa9087](https://github.com/homarr-labs/homarr/commit/6fa9087a119334dee63e4ca4ed51276b25c4564a))
-* **deps:** update tiptap monorepo to v3.20.2 ([#5279](https://github.com/homarr-labs/homarr/issues/5279)) ([55cf3c7](https://github.com/homarr-labs/homarr/commit/55cf3c72a3d9cd9f702e802716d549d7d2644105))
-* **deps:** update trpc monorepo to ^11.13.2 ([#5273](https://github.com/homarr-labs/homarr/issues/5273)) ([7d93b10](https://github.com/homarr-labs/homarr/commit/7d93b1003245ab89fdba7175b0b4f745041cd1fe))
-* **deps:** update trpc monorepo to ^11.13.3 ([#5276](https://github.com/homarr-labs/homarr/issues/5276)) ([0e0b857](https://github.com/homarr-labs/homarr/commit/0e0b857905a7b5196dbf529520f86467aa94d8ce))
-* **deps:** update trpc monorepo to ^11.13.4 ([#5278](https://github.com/homarr-labs/homarr/issues/5278)) ([9648d9e](https://github.com/homarr-labs/homarr/commit/9648d9e99f02be8ba16a5238bd47866f7303724d))
-* **deps:** update turbo monorepo to ^2.8.15 ([#5243](https://github.com/homarr-labs/homarr/issues/5243)) ([1bd924e](https://github.com/homarr-labs/homarr/commit/1bd924ea9917949ac64ab754d97964b12c083b82))
-* **deps:** update turbo monorepo to ^2.8.16 ([#5250](https://github.com/homarr-labs/homarr/issues/5250)) ([ac80008](https://github.com/homarr-labs/homarr/commit/ac80008ce0796cb6927642c83ff2e667f6e9d24c))
-* **deps:** update turbo monorepo to ^2.8.17 ([#5265](https://github.com/homarr-labs/homarr/issues/5265)) ([d2f438f](https://github.com/homarr-labs/homarr/commit/d2f438f294df3093b249213ac0a018b770705e3b))
-
 ## [1.56.0](https://github.com/homarr-labs/homarr/compare/v1.55.0...v1.56.0) (2026-03-13)
 
 ### Features

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.15.0-alpine AS base
+FROM node:24.14.0-alpine AS base
 
 FROM base AS builder
 RUN apk add --no-cache libc6-compat
@@ -43,8 +43,7 @@ RUN mkdir -p /var/cache/nginx && \
 COPY --from=builder /app/apps/nextjs/next.config.ts .
 COPY --from=builder /app/apps/nextjs/package.json .
 
-COPY --from=builder /app/apps/tasks/tasks.cjs ./apps/tasks/tasks.cjs
-COPY --from=builder /app/apps/websocket/wssServer.cjs ./apps/websocket/wssServer.cjs
+COPY --from=builder /app/apps/nextjs/customServer.cjs ./apps/nextjs/customServer.cjs
 COPY --from=builder /app/node_modules/better-sqlite3/build/Release/better_sqlite3.node /app/build/better_sqlite3.node
 
 COPY --from=builder /app/packages/db/migrations ./db/migrations

apps/nextjs/package.json

@@ -4,34 +4,38 @@
   "private": true,
   "type": "module",
   "scripts": {
-    "build": "pnpm with-env next build",
+    "build": "pnpm with-env next build && pnpm build:custom-server",
+    "build:custom-server": "esbuild server.ts --bundle --platform=node --outfile=customServer.cjs --external:next --external:fastify --external:bcrypt --external:@opentelemetry/api --external:deasync --external:cpu-features --loader:.html=text --loader:.scss=text --loader:.node=text",
     "clean": "git clean -xdf .next .turbo node_modules",
-    "dev": "pnpm with-env next dev",
+    "dev": "pnpm with-env tsx ./server.ts",
     "format": "prettier --check . --ignore-path ../../.gitignore",
     "lint": "eslint",
-    "start": "pnpm with-env next start",
+    "start": "pnpm with-env node customServer.cjs",
     "typecheck": "tsc --noEmit",
     "with-env": "dotenv -e ../../.env --"
   },
   "prettier": "@homarr/prettier-config",
   "dependencies": {
-    "@dnd-kit/core": "catalog:",
-    "@dnd-kit/modifiers": "catalog:",
-    "@dnd-kit/sortable": "catalog:",
-    "@dnd-kit/utilities": "catalog:",
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/modifiers": "^9.0.0",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
     "@homarr/analytics": "workspace:^0.1.0",
     "@homarr/api": "workspace:^0.1.0",
     "@homarr/auth": "workspace:^0.1.0",
     "@homarr/boards": "workspace:^0.1.0",
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
+    "@homarr/cron-job-api": "workspace:^0.1.0",
     "@homarr/cron-job-status": "workspace:^0.1.0",
+    "@homarr/cron-jobs": "workspace:^0.1.0",
+    "@homarr/cron-jobs-core": "workspace:^0.1.0",
     "@homarr/db": "workspace:^0.1.0",
     "@homarr/definitions": "workspace:^0.1.0",
     "@homarr/docker": "workspace:^0.1.0",
     "@homarr/form": "workspace:^0.1.0",
     "@homarr/forms-collection": "workspace:^0.1.0",
-    "@homarr/gridstack": "catalog:",
+    "@homarr/gridstack": "^1.12.0",
     "@homarr/icons": "workspace:^0.1.0",
     "@homarr/image-proxy": "workspace:^0.1.0",
     "@homarr/integrations": "workspace:^0.1.0",
@@ -40,7 +44,9 @@
     "@homarr/notifications": "workspace:^0.1.0",
     "@homarr/old-import": "workspace:^0.1.0",
     "@homarr/old-schema": "workspace:^0.1.0",
+    "@homarr/ping": "workspace:^0.1.0",
     "@homarr/redis": "workspace:^0.1.0",
+    "@homarr/request-handler": "workspace:^0.1.0",
     "@homarr/server-settings": "workspace:^0.1.0",
     "@homarr/settings": "workspace:^0.1.0",
     "@homarr/spotlight": "workspace:^0.1.0",
@@ -48,62 +54,66 @@
     "@homarr/ui": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
     "@homarr/widgets": "workspace:^0.1.0",
-    "@mantine/colors-generator": "catalog:",
-    "@mantine/core": "catalog:",
-    "@mantine/dropzone": "catalog:",
-    "@mantine/hooks": "catalog:",
-    "@mantine/modals": "catalog:",
-    "@mantine/tiptap": "catalog:",
-    "@million/lint": "catalog:",
-    "@tabler/icons-react": "catalog:",
-    "@tanstack/react-query": "catalog:",
-    "@tanstack/react-query-devtools": "catalog:",
-    "@tanstack/react-query-next-experimental": "catalog:",
-    "@trpc/client": "catalog:",
-    "@trpc/next": "catalog:",
-    "@trpc/react-query": "catalog:",
-    "@trpc/server": "catalog:",
-    "@xterm/addon-canvas": "catalog:",
-    "@xterm/addon-fit": "catalog:",
-    "@xterm/xterm": "catalog:",
-    "babel-plugin-react-compiler": "catalog:",
-    "chroma-js": "catalog:",
-    "clsx": "catalog:",
-    "dayjs": "catalog:",
-    "dotenv": "catalog:",
-    "flag-icons": "catalog:",
-    "glob": "catalog:",
-    "isomorphic-dompurify": "catalog:",
-    "jotai": "catalog:",
-    "mantine-react-table": "catalog:",
-    "next": "catalog:",
-    "postcss-preset-mantine": "catalog:",
-    "prismjs": "catalog:",
-    "react": "catalog:",
-    "react-dom": "catalog:",
-    "react-error-boundary": "catalog:",
-    "react-simple-code-editor": "catalog:",
-    "sass": "catalog:",
-    "superjson": "catalog:",
-    "swagger-ui-react": "catalog:",
-    "use-deep-compare-effect": "catalog:",
-    "yaml": "catalog:",
-    "zod": "catalog:"
+    "@mantine/colors-generator": "^8.3.16",
+    "@mantine/core": "^8.3.16",
+    "@mantine/dropzone": "^8.3.16",
+    "@mantine/hooks": "^8.3.16",
+    "@mantine/modals": "^8.3.16",
+    "@mantine/tiptap": "^8.3.16",
+    "@million/lint": "1.0.14",
+    "@tabler/icons-react": "^3.40.0",
+    "@tanstack/react-query": "^5.90.21",
+    "@tanstack/react-query-devtools": "^5.91.3",
+    "@tanstack/react-query-next-experimental": "^5.91.0",
+    "@trpc/client": "^11.12.0",
+    "@trpc/next": "^11.12.0",
+    "@trpc/react-query": "^11.12.0",
+    "@trpc/server": "^11.12.0",
+    "@xterm/addon-canvas": "^0.7.0",
+    "@xterm/addon-fit": "0.11.0",
+    "@xterm/xterm": "^6.0.0",
+    "babel-plugin-react-compiler": "^1.0.0",
+    "chroma-js": "^3.2.0",
+    "clsx": "^2.1.1",
+    "dayjs": "^1.11.19",
+    "dotenv": "^17.3.1",
+    "fastify": "^5.7.4",
+    "flag-icons": "^7.5.0",
+    "glob": "^13.0.6",
+    "isomorphic-dompurify": "^3.1.0",
+    "jotai": "^2.18.1",
+    "mantine-react-table": "2.0.0-beta.9",
+    "next": "16.1.6",
+    "postcss-preset-mantine": "^1.18.0",
+    "prismjs": "^1.30.0",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "react-error-boundary": "^6.1.1",
+    "react-simple-code-editor": "^0.14.1",
+    "sass": "^1.97.3",
+    "superjson": "2.2.6",
+    "swagger-ui-react": "^5.32.0",
+    "use-deep-compare-effect": "^1.8.1",
+    "ws": "^8.19.0",
+    "zod": "^4.2.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/chroma-js": "catalog:",
-    "@types/node": "catalog:",
-    "@types/prismjs": "catalog:",
-    "@types/react": "catalog:",
-    "@types/react-dom": "catalog:",
-    "@types/swagger-ui-react": "catalog:",
-    "concurrently": "catalog:",
-    "eslint": "catalog:",
-    "node-loader": "catalog:",
-    "prettier": "catalog:",
-    "typescript": "catalog:"
+    "@types/chroma-js": "3.1.2",
+    "@types/node": "^24.12.0",
+    "@types/prismjs": "^1.26.6",
+    "@types/react": "19.2.14",
+    "@types/react-dom": "19.2.3",
+    "@types/swagger-ui-react": "^5.18.0",
+    "@types/ws": "^8.18.1",
+    "concurrently": "^9.2.1",
+    "esbuild": "^0.27.3",
+    "eslint": "^9.39.4",
+    "node-loader": "^2.1.0",
+    "prettier": "^3.8.1",
+    "tsx": "4.20.4",
+    "typescript": "^5.9.3"
   }
 }

apps/nextjs/server.ts

@@ -0,0 +1,318 @@
+// Must be imported first to set up globalThis.AsyncLocalStorage for Next.js
+import "next/dist/server/node-environment-baseline";
+
+// Set up undici HTTP agent override (from tasks app)
+import { setGlobalDispatcher } from "undici";
+import { UndiciHttpAgent } from "@homarr/core/infrastructure/http";
+setGlobalDispatcher(new UndiciHttpAgent());
+
+import { createServer } from "http";
+import path from "path";
+import next from "next";
+import { parse } from "url";
+import { applyWSSHandler } from "@trpc/server/adapters/ws";
+import { WebSocketServer } from "ws";
+import type { FastifyTRPCPluginOptions } from "@trpc/server/adapters/fastify";
+import { fastifyTRPCPlugin } from "@trpc/server/adapters/fastify";
+import fastify from "fastify";
+
+import { appRouter, createTRPCContext } from "@homarr/api/websocket";
+import { getSessionFromToken, sessionTokenCookieName } from "@homarr/auth";
+import { env as authEnv } from "@homarr/auth/env";
+import { parseCookies } from "@homarr/common";
+import { createLogger } from "@homarr/core/infrastructure/logs";
+import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
+import type { JobRouter } from "@homarr/cron-job-api";
+import { jobRouter } from "@homarr/cron-job-api";
+import { CRON_JOB_API_KEY_HEADER, CRON_JOB_API_PATH, CRON_JOB_API_PORT } from "@homarr/cron-job-api/constants";
+import { jobGroup } from "@homarr/cron-jobs";
+import { db, eq, inArray } from "@homarr/db";
+import { cronJobConfigurations, sessions, users } from "@homarr/db/schema";
+import { supportedAuthProviders } from "@homarr/definitions";
+import { updateCheckerRequestHandler } from "@homarr/request-handler/update-checker";
+import { schedule, validate as validateCron } from "node-cron";
+
+const logger = createLogger({ module: "customServer" });
+
+// --- JobManager (from apps/tasks/src/job-manager.ts) ---
+import type { IJobManager } from "@homarr/cron-job-api";
+import type { jobGroup as CronJobGroup, JobGroupKeys } from "@homarr/cron-jobs";
+import type { Database, InferInsertModel } from "@homarr/db";
+
+class JobManager implements IJobManager {
+  constructor(
+    private db: Database,
+    private jobGroup: typeof CronJobGroup,
+  ) {}
+
+  public async startAsync(name: JobGroupKeys): Promise<void> {
+    await this.jobGroup.startAsync(name);
+  }
+  public async triggerAsync(name: JobGroupKeys): Promise<void> {
+    await this.jobGroup.runManuallyAsync(name);
+  }
+  public async stopAsync(name: JobGroupKeys): Promise<void> {
+    await this.jobGroup.stopAsync(name);
+  }
+  public async updateIntervalAsync(name: JobGroupKeys, cron: string): Promise<void> {
+    logger.info("Updating cron job interval", { name, expression: cron });
+    const job = this.jobGroup.getJobRegistry().get(name);
+    if (!job) throw new Error(`Job ${name} not found`);
+    if (!validateCron(cron)) {
+      throw new Error(`Invalid cron expression: ${cron}`);
+    }
+    if (job.preventCustomInterval && cron !== job.cronExpression) {
+      throw new Error(`Custom cron expressions are not allowed for job ${name}`);
+    }
+
+    await this.updateConfigurationAsync(name, { cronExpression: cron });
+    await this.jobGroup.getTask(name)?.destroy();
+
+    this.jobGroup.setTask(
+      name,
+      schedule(cron, () => void job.executeAsync(), {
+        name,
+      }),
+    );
+    logger.info("Cron job interval updated", { name, expression: cron });
+  }
+  public async disableAsync(name: JobGroupKeys): Promise<void> {
+    logger.info("Disabling cron job", { name });
+    const job = this.jobGroup.getJobRegistry().get(name);
+    if (!job) throw new Error(`Job ${name} not found`);
+
+    await this.updateConfigurationAsync(name, { isEnabled: false });
+    await this.jobGroup.stopAsync(name);
+    logger.info("Cron job disabled", { name });
+  }
+  public async enableAsync(name: JobGroupKeys): Promise<void> {
+    logger.info("Enabling cron job", { name });
+    await this.updateConfigurationAsync(name, { isEnabled: true });
+    await this.jobGroup.startAsync(name);
+    logger.info("Cron job enabled", { name });
+  }
+
+  private async updateConfigurationAsync(
+    name: JobGroupKeys,
+    configuration: Omit<Partial<InferInsertModel<typeof cronJobConfigurations>>, "name">,
+  ) {
+    const existingConfig = await this.db.query.cronJobConfigurations.findFirst({
+      where: (table, { eq }) => eq(table.name, name),
+    });
+
+    if (existingConfig) {
+      await this.db
+        .update(cronJobConfigurations)
+        .set({ ...configuration, name: undefined })
+        .where(eq(cronJobConfigurations.name, name));
+      return;
+    }
+
+    const job = this.jobGroup.getJobRegistry().get(name);
+    if (!job) throw new Error(`Job ${name} not found`);
+
+    await this.db.insert(cronJobConfigurations).values({
+      name,
+      cronExpression: configuration.cronExpression ?? job.cronExpression,
+      isEnabled: configuration.isEnabled ?? true,
+    });
+  }
+
+  public async getAllAsync(): Promise<
+    {
+      name: JobGroupKeys;
+      cron: string;
+      preventManualExecution: boolean;
+      preventCustomInterval: boolean;
+      isEnabled: boolean;
+    }[]
+  > {
+    const configurations = await this.db.query.cronJobConfigurations.findMany();
+
+    return [...this.jobGroup.getJobRegistry().entries()].map(([name, job]) => {
+      const config = configurations.find((config) => config.name === name);
+      return {
+        name,
+        cron: config?.cronExpression ?? job.cronExpression,
+        preventManualExecution: job.preventManualExecution,
+        preventCustomInterval: job.preventCustomInterval,
+        isEnabled: config?.isEnabled ?? true,
+      };
+    });
+  }
+}
+
+// --- On-start functions (from apps/tasks/src/on-start/) ---
+async function cleanupSessionsAsync() {
+  try {
+    const currentAuthProviders = authEnv.AUTH_PROVIDERS;
+    const inactiveAuthProviders = supportedAuthProviders.filter((provider) => !currentAuthProviders.includes(provider));
+    const subQuery = db
+      .select({ id: users.id })
+      .from(users)
+      .where(inArray(users.provider, inactiveAuthProviders))
+      .as("sq");
+    const sessionsWithInactiveProviders = await db
+      .select({ userId: sessions.userId })
+      .from(sessions)
+      .rightJoin(subQuery, eq(sessions.userId, subQuery.id));
+
+    const userIds = sessionsWithInactiveProviders.map(({ userId }) => userId).filter((value) => value !== null);
+    await db.delete(sessions).where(inArray(sessions.userId, userIds));
+
+    if (sessionsWithInactiveProviders.length > 0) {
+      logger.info("Deleted sessions for inactive providers", { count: userIds.length });
+    }
+  } catch (error) {
+    logger.error(new Error("Failed to clean up sessions", { cause: error }));
+  }
+}
+
+async function invalidateUpdateCheckerCacheAsync() {
+  try {
+    const handler = updateCheckerRequestHandler.handler({});
+    await handler.invalidateAsync();
+    logger.debug("Update checker cache invalidated");
+  } catch (error) {
+    logger.error(new Error("Failed to invalidate update checker cache", { cause: error }));
+  }
+}
+
+// --- Tasks/Cron Fastify server setup ---
+async function startTasksServer() {
+  const tasksLogger = createLogger({ module: "tasksMain" });
+
+  const tasksServer = fastify({ maxParamLength: 5000 });
+  tasksServer.register(fastifyTRPCPlugin, {
+    prefix: CRON_JOB_API_PATH,
+    trpcOptions: {
+      router: jobRouter,
+      createContext: ({ req }) => ({
+        manager: new JobManager(db, jobGroup),
+        apiKey: req.headers[CRON_JOB_API_KEY_HEADER] as string | undefined,
+      }),
+      onError({ path, error }) {
+        tasksLogger.error(new ErrorWithMetadata("Error in tasks tRPC handler", { path }, { cause: error }));
+      },
+    } satisfies FastifyTRPCPluginOptions<JobRouter>["trpcOptions"],
+  });
+
+  // Run on-start tasks
+  await cleanupSessionsAsync();
+  await invalidateUpdateCheckerCacheAsync();
+
+  // Initialize and start cron jobs
+  await jobGroup.initializeAsync();
+  await jobGroup.startAllAsync();
+
+  try {
+    await tasksServer.listen({ port: CRON_JOB_API_PORT });
+    tasksLogger.info("Tasks web server started successfully", { port: CRON_JOB_API_PORT });
+  } catch (err) {
+    tasksLogger.error(
+      new ErrorWithMetadata("Failed to start tasks web server", { port: CRON_JOB_API_PORT }, { cause: err }),
+    );
+  }
+
+  return tasksServer;
+}
+
+// --- Main server setup ---
+const dev = process.env.NODE_ENV !== "production";
+const hostname = process.env.HOSTNAME || "localhost";
+const port = parseInt(process.env.PORT || "3000", 10);
+// Resolve the directory of this file so Next.js can find the app/pages dirs
+const dir = path.resolve(__dirname);
+
+const app = next({ dev, hostname, port, dir });
+const handle = app.getRequestHandler();
+const upgradeHandler = app.getUpgradeHandler();
+
+app.prepare().then(async () => {
+  const server = createServer((req, res) => {
+    const parsedUrl = parse(req.url!, true);
+    handle(req, res, parsedUrl);
+  });
+
+  // Create WebSocket server in noServer mode so we handle upgrade manually
+  const wss = new WebSocketServer({ noServer: true });
+
+  const wssHandler = applyWSSHandler({
+    wss,
+    router: appRouter,
+    // eslint-disable-next-line no-restricted-syntax
+    createContext: async ({ req }) => {
+      try {
+        const headers = Object.entries(req.headers).map(
+          ([key, value]) => [key, typeof value === "string" ? value : value?.[0]] as [string, string],
+        );
+        const nextHeaders = new Headers(headers);
+
+        const store = parseCookies(nextHeaders.get("cookie") ?? "");
+        const sessionToken = store[sessionTokenCookieName];
+
+        const session = await getSessionFromToken(db, sessionToken);
+
+        return createTRPCContext({
+          headers: nextHeaders,
+          session,
+        });
+      } catch (error) {
+        logger.error(error);
+        return createTRPCContext({
+          headers: new Headers(),
+          session: null,
+        });
+      }
+    },
+    keepAlive: {
+      enabled: true,
+      pingMs: 30000,
+      pongWaitMs: 5000,
+    },
+  });
+
+  // Handle upgrade requests: route /websockets to our WS server,
+  // delegate everything else (e.g. HMR _next/webpack-hmr) to Next.js
+  server.on("upgrade", (req, socket, head) => {
+    if (req.url?.startsWith("/websockets")) {
+      wss.handleUpgrade(req, socket, head, (ws) => {
+        wss.emit("connection", ws, req);
+      });
+    } else {
+      upgradeHandler(req, socket, head);
+    }
+  });
+
+  wss.on("connection", (websocket, incomingMessage) => {
+    logger.info(`➕ Connection (${wss.clients.size}) ${incomingMessage.method} ${incomingMessage.url}`);
+    websocket.once("close", (code, reason) => {
+      logger.info(`➖ Connection (${wss.clients.size}) ${code} ${reason.toString()}`);
+    });
+  });
+
+  // Start the integrated tasks/cron server
+  const tasksServer = await startTasksServer();
+
+  server.once("error", (err) => {
+    logger.error(new ErrorWithMetadata("Server error", {}, { cause: err }));
+    wssHandler.broadcastReconnectNotification();
+    wss.close();
+    tasksServer.close().catch((closeError) => logger.error("Failed to close tasks server", closeError));
+    server.close(() => process.exit(1));
+  });
+
+  server.listen(port, () => {
+    logger.info(`✅ Custom server ready on http://${hostname}:${port}`);
+    logger.info(`✅ WebSocket Server integrated on ws://${hostname}:${port}/websockets`);
+    logger.info(`✅ Tasks/Cron server integrated on port ${CRON_JOB_API_PORT}`);
+  });
+
+  process.on("SIGTERM", () => {
+    logger.info("SIGTERM");
+    wssHandler.broadcastReconnectNotification();
+    wss.close();
+    tasksServer.close().catch((closeError) => logger.error("Failed to close tasks server", closeError));
+    server.close();
+  });
+});

apps/nextjs/src/app/[locale]/_client-providers/trpc.tsx

@@ -32,13 +32,12 @@ const getWebSocketProtocol = () => {
 };
 
 const constructWebsocketUrl = () => {
-  const fallback = `${getWebSocketProtocol()}://localhost:3001/websockets`;
   if (typeof window === "undefined") {
-    return fallback;
+    return `${getWebSocketProtocol()}://localhost:3000/websockets`;
   }
 
   if (env.NODE_ENV === "development") {
-    return fallback;
+    return `${getWebSocketProtocol()}://localhost:3000/websockets`;
   }
 
   return `${getWebSocketProtocol()}://${window.location.hostname}:${window.location.port}/websockets`;

apps/nextjs/src/app/[locale]/auth/login/_login-form.tsx

@@ -13,7 +13,6 @@ import type { useForm } from "@homarr/form";
 import { useZodForm } from "@homarr/form";
 import { showErrorNotification, showSuccessNotification } from "@homarr/notifications";
 import { useScopedI18n } from "@homarr/translation/client";
-import { sanitizeRedirectionUrl } from "@homarr/validation/redirection-url";
 import { userSignInSchema } from "@homarr/validation/user";
 
 type Provider = "credentials" | "ldap" | "oidc";
@@ -71,7 +70,7 @@ export const LoginForm = ({ providers, oidcClientName, isOidcAutoLoginEnabled, c
 
       // Redirect to the callback URL if the response is defined and comes from a credentials provider (ldap or credentials). oidc is redirected automatically.
       await revalidatePathActionAsync("/");
-      router.push(sanitizeRedirectionUrl(callbackUrl));
+      router.push(callbackUrl);
     },
     [t, router, callbackUrl],
   );

apps/nextjs/src/app/[locale]/auth/login/page.tsx

@@ -4,7 +4,6 @@ import { Card, Center, Stack, Text, Title } from "@mantine/core";
 import { env } from "@homarr/auth/env";
 import { auth } from "@homarr/auth/next";
 import { getScopedI18n } from "@homarr/translation/server";
-import { sanitizeRedirectionUrl } from "@homarr/validation/redirection-url";
 
 import { HomarrLogoWithTitle } from "~/components/layout/logo/homarr-logo";
 import { LoginForm } from "./_login-form";
@@ -20,7 +19,7 @@ export default async function Login(props: LoginProps) {
   const session = await auth();
 
   if (session) {
-    redirect(sanitizeRedirectionUrl(searchParams.callbackUrl));
+    redirect(searchParams.callbackUrl ?? "/");
   }
 
   const t = await getScopedI18n("user.page.login");

apps/nextjs/src/app/[locale]/boards/(content)/_header-actions.tsx

@@ -264,5 +264,6 @@ const usePreventLeaveWithDirty = (isDirty: boolean) => {
       window.removeEventListener("popstate", handlePopState);
       window.removeEventListener("beforeunload", handleBeforeUnload);
     };
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [isDirty]);
 };

apps/nextjs/src/app/[locale]/boards/(content)/_ready-context.tsx

@@ -27,6 +27,7 @@ export const BoardReadyProvider = ({ children }: PropsWithChildren) => {
 
   useEffect(() => {
     setReadySections((previous) => previous.filter((id) => board.sections.some((section) => section.id === id)));
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [board.sections.length, setReadySections]);
 
   const markAsReady = useCallback((id: string) => {

apps/nextjs/src/app/[locale]/boards/[name]/settings/_general.tsx

@@ -2,7 +2,7 @@
 
 import { useEffect, useRef } from "react";
 import { Button, Grid, Group, Loader, Stack, TextInput } from "@mantine/core";
-import { useDebouncedValue, useDocumentTitle } from "@mantine/hooks";
+import { useDebouncedValue, useDocumentTitle, useFavicon } from "@mantine/hooks";
 
 import { useUpdateBoard } from "@homarr/boards/updater";
 import { useZodForm } from "@homarr/form";
@@ -10,7 +10,6 @@ import { IconPicker } from "@homarr/forms-collection";
 import { useI18n } from "@homarr/translation/client";
 import { boardSavePartialSettingsSchema } from "@homarr/validation/board";
 
-import { homarrLogoPath } from "~/components/layout/logo/homarr-logo";
 import { createMetaTitle } from "~/metadata";
 import type { Board } from "../../_types";
 import { useSavePartialSettingsMutation } from "./_shared";
@@ -54,6 +53,7 @@ export const GeneralSettingsContent = ({ board }: Props) => {
   );
 
   useLogoPreview(form.values.logoImageUrl);
+  useFaviconPreview(form.values.faviconImageUrl);
   const metaTitleStatus = useMetaTitlePreview(form.values.metaTitle);
 
   // Cleanup for not applied changes of the page title and logo image URL
@@ -75,7 +75,6 @@ export const GeneralSettingsContent = ({ board }: Props) => {
           pageTitle: values.pageTitle,
           logoImageUrl: values.logoImageUrl,
         };
-        updateFavicon(values.faviconImageUrl ?? homarrLogoPath);
         savePartialSettings({
           id: board.id,
           ...values,
@@ -147,13 +146,7 @@ const useMetaTitlePreview = (title: string | null) => {
   };
 };
 
-// Previously we used the useFavicon hook from Mantine
-// However if the user tried to click on a link to a different page
-// it caused an error "Cannot read properties of null (reading 'removeChild')"
-// Probably because the head element was null (https://github.com/mantinedev/mantine/blob/b90d9b81031f45f5d15e75f25138ed6477f65bce/packages/%40mantine/hooks/src/use-favicon/use-favicon.ts#L21)
-// See https://github.com/homarr-labs/homarr/issues/4905
-const updateFavicon = (url: string) => {
-  const link: HTMLLinkElement | null = document.querySelector('link[rel="icon"]');
-  if (!link) return;
-  link.href = url;
+const useFaviconPreview = (url: string | null) => {
+  const [faviconDebounced] = useDebouncedValue(url ?? "", 500);
+  useFavicon(faviconDebounced);
 };

apps/nextjs/src/app/[locale]/manage/about/about.module.css

@@ -1,7 +1,3 @@
 .contributorCard {
   background-color: light-dark(var(--mantine-color-gray-1), var(--mantine-color-dark-5));
 }
-
-.dependencyCard:hover {
-  background-color: light-dark(var(--mantine-color-gray-1), var(--mantine-color-dark-5));
-}

apps/nextjs/src/app/[locale]/manage/about/page.tsx

@@ -12,7 +12,8 @@ import {
   Flex,
   Group,
   Kbd,
-  SimpleGrid,
+  List,
+  ListItem,
   Stack,
   Table,
   TableTbody,
@@ -21,18 +22,9 @@ import {
   TableThead,
   TableTr,
   Text,
-  ThemeIcon,
   Title,
-  UnstyledButton,
 } from "@mantine/core";
-import {
-  IconKeyboard,
-  IconLanguage,
-  IconLibrary,
-  IconMoneybagHeart,
-  IconPackage,
-  IconUsers,
-} from "@tabler/icons-react";
+import { IconKeyboard, IconLanguage, IconLibrary, IconUsers } from "@tabler/icons-react";
 
 import { capitalize, objectEntries } from "@homarr/common";
 import { hotkeys } from "@homarr/definitions";
@@ -41,10 +33,8 @@ import { getScopedI18n } from "@homarr/translation/server";
 import { homarrLogoPath } from "~/components/layout/logo/homarr-logo";
 import { DynamicBreadcrumb } from "~/components/navigation/dynamic-breadcrumb";
 import { createMetaTitle } from "~/metadata";
-import type { PackageJsonDependencies } from "~/versions/package-reader";
-import { getPackageVersion } from "~/versions/package-reader";
+import { getPackageAttributesAsync } from "~/versions/package-reader";
 import type githubContributorsJson from "../../../../../../../static-data/contributors.json";
-import type openCollectiveContributorsJson from "../../../../../../../static-data/opencollective-contributors.json";
 import type crowdinContributorsJson from "../../../../../../../static-data/translators.json";
 import classes from "./about.module.css";
 
@@ -67,10 +57,7 @@ const getHostAsync = async () => {
 export default async function AboutPage() {
   const baseServerUrl = `http://${await getHostAsync()}`;
   const t = await getScopedI18n("management.page.about");
-  const version = getPackageVersion();
-  const dependencies = (await fetch(`${baseServerUrl}/api/about/dependencies`).then((res) =>
-    res.json(),
-  )) as PackageJsonDependencies;
+  const attributes = await getPackageAttributesAsync();
   const githubContributors = (await fetch(`${baseServerUrl}/api/about/contributors/github`).then((res) =>
     res.json(),
   )) as typeof githubContributorsJson;
@@ -79,10 +66,6 @@ export default async function AboutPage() {
     res.json(),
   )) as typeof crowdinContributorsJson;
 
-  const openCollectiveContributors = (await fetch(`${baseServerUrl}/api/about/contributors/opencollective`).then(
-    (res) => res.json(),
-  )) as typeof openCollectiveContributorsJson;
-
   return (
     <div>
       <DynamicBreadcrumb />
@@ -93,7 +76,7 @@ export default async function AboutPage() {
             <Title order={1} tt="uppercase">
               Homarr
             </Title>
-            <Title order={2}>{t("version", { version })}</Title>
+            <Title order={2}>{t("version", { version: attributes.version })}</Title>
           </Stack>
         </Group>
       </Center>
@@ -148,72 +131,31 @@ export default async function AboutPage() {
             </Flex>
           </AccordionPanel>
         </AccordionItem>
-        <AccordionItem value="sponsors">
-          <AccordionControl icon={<IconMoneybagHeart size="1rem" />}>
-            <Stack gap={0}>
-              <Text>{t("accordion.sponsors.title")}</Text>
-              <Text size="sm" c="dimmed">
-                {t("accordion.sponsors.subtitle", {
-                  count: String(openCollectiveContributors.length),
-                })}
-              </Text>
-            </Stack>
-          </AccordionControl>
-          <AccordionPanel>
-            <Flex wrap="wrap" gap="xs">
-              {openCollectiveContributors.map((sponsor) => (
-                <GenericContributorLinkCard
-                  key={sponsor.slug}
-                  link={`https://opencollective.com/${sponsor.slug}`}
-                  image={sponsor.imageUrl}
-                  name={sponsor.name}
-                />
-              ))}
-            </Flex>
-          </AccordionPanel>
-        </AccordionItem>
         <AccordionItem value="libraries">
           <AccordionControl icon={<IconLibrary size="1rem" />}>
             <Stack gap={0}>
               <Text>{t("accordion.libraries.title")}</Text>
               <Text size="sm" c="dimmed">
                 {t("accordion.libraries.subtitle", {
-                  count: String(Object.keys(dependencies).length),
+                  count: String(Object.keys(attributes.dependencies).length),
                 })}
               </Text>
             </Stack>
           </AccordionControl>
           <AccordionPanel>
-            <SimpleGrid cols={{ xs: 1, sm: 2, md: 3, lg: 4, xl: 5 }} spacing="md">
-              {Object.entries(dependencies)
-                .filter(([, value]) => !value.includes("workspace:"))
+            <List>
+              {Object.entries(attributes.dependencies)
                 .sort(([key1], [key2]) => key1.localeCompare(key2))
-                .map(([name, version]) => (
-                  <UnstyledButton
-                    key={name}
-                    component="a"
-                    href={`https://www.npmjs.com/package/${name}`}
-                    target="_blank"
-                  >
-                    <Card withBorder radius="md" p="xs" className={classes.dependencyCard}>
-                      <Group gap="sm" wrap="nowrap">
-                        <ThemeIcon variant="light" size="lg" radius="md">
-                          <IconPackage size="1.5rem" stroke={1.5} />
-                        </ThemeIcon>
-
-                        <Stack gap={0}>
-                          <Text size="sm" fw="bold" lineClamp={1} title={name}>
-                            {name}
-                          </Text>
-                          <Text size="sm" c="dimmed">
-                            v{version.replace("^", "").replace("~", "")}
-                          </Text>
-                        </Stack>
-                      </Group>
-                    </Card>
-                  </UnstyledButton>
+                .map(([key, value]) => (
+                  <ListItem key={key}>
+                    {value.includes("workspace:") ? (
+                      <Text>{key}</Text>
+                    ) : (
+                      <a href={`https://www.npmjs.com/package/${key}`}>{key}</a>
+                    )}
+                  </ListItem>
                 ))}
-            </SimpleGrid>
+            </List>
           </AccordionPanel>
         </AccordionItem>
         <AccordionItem value="hotkeys">

apps/nextjs/src/app/[locale]/manage/tools/api/page.tsx

@@ -2,7 +2,7 @@ import { headers } from "next/headers";
 import { notFound } from "next/navigation";
 import { Stack, Tabs, TabsList, TabsPanel, TabsTab } from "@mantine/core";
 
-import { openApiDocument } from "@homarr/api/open-api";
+import { openApiDocument } from "@homarr/api";
 import { api } from "@homarr/api/server";
 import { auth } from "@homarr/auth/next";
 import { extractBaseUrlFromHeaders } from "@homarr/common";
@@ -14,7 +14,7 @@ import { ApiKeysManagement } from "./components/api-keys";
 
 export async function generateMetadata() {
   const session = await auth();
-  if (!session?.user.permissions.includes("admin")) {
+  if (!session?.user || !session.user.permissions.includes("admin")) {
     return {};
   }
 
@@ -27,7 +27,7 @@ export async function generateMetadata() {
 
 export default async function ApiPage() {
   const session = await auth();
-  if (!session?.user.permissions.includes("admin")) {
+  if (!session?.user || !session.user.permissions.includes("admin")) {
     notFound();
   }
   const document = openApiDocument(extractBaseUrlFromHeaders(await headers()));

apps/nextjs/src/app/[locale]/manage/tools/docker/docker-table.tsx

@@ -76,7 +76,6 @@ const createColumns = (
     accessorKey: "ports",
     header: t("docker.field.ports.label"),
     Cell({ cell }) {
-      if (!cell.row.original.ports) return null;
       if (!cell.row.original.ports.length) return null;
       return (
         <OverflowBadge overflowCount={1} data={cell.row.original.ports.map((port) => port.PrivatePort.toString())} />

apps/nextjs/src/app/[locale]/manage/tools/logs/page.tsx

@@ -18,7 +18,7 @@ import { LogContextProvider } from "./log-context";
 
 export async function generateMetadata() {
   const session = await auth();
-  if (!session?.user.permissions.includes("admin")) {
+  if (!session?.user || !session.user.permissions.includes("admin")) {
     return {};
   }
   const t = await getScopedI18n("management");
@@ -30,7 +30,7 @@ export async function generateMetadata() {
 
 export default async function LogsManagementPage() {
   const session = await auth();
-  if (!session?.user.permissions.includes("other-view-logs")) {
+  if (!session?.user || !session.user.permissions.includes("other-view-logs")) {
     notFound();
   }
 

apps/nextjs/src/app/[locale]/manage/users/[userId]/general/_components/_first-day-of-week.tsx

@@ -30,7 +30,7 @@ export const FirstDayOfWeek = ({ user }: FirstDayOfWeekProps) => {
     },
     onSuccess(_, variables) {
       form.setInitialValues({
-        firstDayOfWeek: variables.firstDayOfWeek as DayOfWeek,
+        firstDayOfWeek: variables.firstDayOfWeek,
       });
       showSuccessNotification({
         message: t("user.action.changeFirstDayOfWeek.notification.success.message"),

apps/nextjs/src/app/api/[...trpc]/route.ts

@@ -2,8 +2,7 @@ import type { NextRequest } from "next/server";
 import { userAgent } from "next/server";
 import { createOpenApiFetchHandler } from "trpc-to-openapi";
 
-import { createTRPCContext } from "@homarr/api";
-import { openApiRouter } from "@homarr/api/open-api";
+import { appRouter, createTRPCContext } from "@homarr/api";
 import { API_KEY_HEADER_NAME, getSessionFromApiKeyAsync } from "@homarr/auth/api-key";
 import { ipAddressFromHeaders } from "@homarr/common/server";
 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -31,7 +30,7 @@ const handlerAsync = async (req: NextRequest) => {
   return createOpenApiFetchHandler({
     req,
     endpoint: "/",
-    router: openApiRouter,
+    router: appRouter,
     createContext: () => createTRPCContext({ session, headers: req.headers }),
     onError({ error, path, type }) {
       logger.error(new ErrorWithMetadata("tRPC Error occured", { path, type }, { cause: error }));

apps/nextjs/src/app/api/about/contributors/opencollective/route.ts

@@ -1,9 +0,0 @@
-import { NextResponse } from "next/server";
-
-import openCollectiveContributors from "../../../../../../../../static-data/opencollective-contributors.json";
-
-export const GET = () => {
-  return NextResponse.json(openCollectiveContributors);
-};
-
-export const dynamic = "force-static";

apps/nextjs/src/app/api/about/dependencies/route.ts

@@ -1,10 +0,0 @@
-import { NextResponse } from "next/server";
-
-import { getDependenciesAsync } from "../../../../versions/package-reader";
-
-export const GET = async () => {
-  const dependencies = await getDependenciesAsync();
-  return NextResponse.json(dependencies);
-};
-
-export const dynamic = "force-static";

apps/nextjs/src/app/api/health/live/route.ts

@@ -75,6 +75,7 @@ const executeHealthCheckSafelyAsync = async (
       },
     };
   } catch (error) {
+    // eslint-disable-next-line @typescript-eslint/restrict-template-expressions
     logger.error(new ErrorWithMetadata("Healthcheck failed", { name }, { cause: error }));
     return {
       status: "unhealthy",

apps/nextjs/src/app/api/openapi/route.ts

@@ -1,6 +1,6 @@
 import { NextResponse } from "next/server";
 
-import { openApiDocument } from "@homarr/api/open-api";
+import { openApiDocument } from "@homarr/api";
 import { extractBaseUrlFromHeaders } from "@homarr/common";
 
 export function GET(request: Request) {

apps/nextjs/src/components/board/items/item-content.tsx

@@ -117,6 +117,7 @@ const InnerContent = ({ item, ...dimensions }: InnerContentProps) => {
             when={
               widgetSupportsIntegrations &&
               item.integrationIds.length === 0 &&
+              // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
               (!("integrationsRequired" in definition) || definition.integrationsRequired !== false)
             }
           />

apps/nextjs/src/components/board/sections/gridstack/use-gridstack.ts

@@ -206,6 +206,7 @@ export const useGridstack = (section: Omit<Section, "items">, itemIds: string[])
     }
 
     // Only run this effect when the section items change
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [itemIds.length, columnCount]);
 
   /**

apps/nextjs/src/versions/package-reader.ts

@@ -1,16 +1,12 @@
 import fsPromises from "fs/promises";
-import path from "path";
-import { fileURLToPath } from "url";
 import { glob } from "glob";
-import { parse as parseYaml } from "yaml";
-import z from "zod";
 
 import packageJson from "../../../../package.json";
 
-export const getPackageVersion = () => packageJson.version;
-export const getDependenciesAsync = async (): Promise<PackageJsonDependencies> => {
+const getPackageVersion = () => packageJson.version;
+const getDependenciesAsync = async (): Promise<PackageJsonDependencies> => {
   const pathNames = await glob("**/package.json", {
-    ignore: "**/node_modules/**",
+    ignore: "node_modules/**",
     cwd: "../../",
     absolute: true,
   });
@@ -19,37 +15,21 @@ export const getDependenciesAsync = async (): Promise<PackageJsonDependencies> =
     .map((packageContent) => (JSON.parse(packageContent) as PackageJson).dependencies)
     .filter((dependencies) => dependencies !== undefined);
 
-  const catalog = await parseDependencyCatalogsAsync();
-
   let dependencies = {};
   for (const dependenciesOfPackage of packageDependencies) {
-    const resolvedDependencies = Object.entries(dependenciesOfPackage).map(([name, version]) => {
-      const catalogVersion = catalog.get(name);
-      return [name, catalogVersion ?? version] as const;
-    });
-    dependencies = { ...dependencies, ...Object.fromEntries(resolvedDependencies) };
+    dependencies = { ...dependencies, ...dependenciesOfPackage };
   }
   return dependencies;
 };
 
-type DependencyCatalog = Map<string, string>;
-const parseDependencyCatalogsAsync = async (): Promise<DependencyCatalog> => {
-  const currentDir = path.dirname(fileURLToPath(import.meta.url));
-  const workspaceConfigContent = await fsPromises.readFile(
-    path.join(currentDir, "..", "..", "..", "..", "pnpm-workspace.yaml"),
-    "utf-8",
-  );
-  const workspaceConfig: unknown = parseYaml(workspaceConfigContent);
-  const parseResult = workspaceConfigCatalogSchema.parse(workspaceConfig);
-
-  return new Map(Object.entries(parseResult.catalog ?? {}));
+export const getPackageAttributesAsync = async () => {
+  return {
+    version: getPackageVersion(),
+    dependencies: await getDependenciesAsync(),
+  };
 };
 
-const workspaceConfigCatalogSchema = z.object({
-  catalog: z.record(z.string(), z.string()).optional(),
-});
-
-export type PackageJsonDependencies = Record<string, string>;
+type PackageJsonDependencies = Record<string, string>;
 interface PackageJson {
   dependencies: PackageJsonDependencies | undefined;
 }

apps/nextjs/tsconfig.json

@@ -14,5 +14,5 @@
     "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
   },
   "include": [".", ".next/types/**/*.ts"],
-  "exclude": ["node_modules", ".next"]
+  "exclude": ["node_modules", ".next", "customServer.cjs", "customServer.css"]
 }

apps/tasks/eslint.config.js

@@ -1,9 +0,0 @@
-import baseConfig from "@homarr/eslint-config/base";
-
-/** @type {import('typescript-eslint').Config} */
-export default [
-  {
-    ignores: ["tasks.cjs"],
-  },
-  ...baseConfig,
-];

apps/tasks/package.json

@@ -1,59 +0,0 @@
-{
-  "name": "@homarr/tasks",
-  "version": "0.1.0",
-  "private": true,
-  "license": "Apache-2.0",
-  "type": "module",
-  "exports": {
-    ".": "./src/index.ts"
-  },
-  "main": "./src/main.ts",
-  "types": "./src/main.ts",
-  "scripts": {
-    "build": "esbuild src/main.ts --bundle --platform=node --loader:.scss=text --external:*.node --external:@opentelemetry/api --external:deasync --external:bcrypt --outfile=tasks.cjs",
-    "clean": "rm -rf .turbo node_modules",
-    "dev": "pnpm with-env tsx ./src/main.ts",
-    "format": "prettier --check . --ignore-path ../../.gitignore",
-    "lint": "eslint",
-    "typecheck": "tsc --noEmit",
-    "with-env": "dotenv -e ../../.env --"
-  },
-  "prettier": "@homarr/prettier-config",
-  "dependencies": {
-    "@homarr/analytics": "workspace:^0.1.0",
-    "@homarr/auth": "workspace:^0.1.0",
-    "@homarr/common": "workspace:^0.1.0",
-    "@homarr/core": "workspace:^",
-    "@homarr/cron-job-api": "workspace:^0.1.0",
-    "@homarr/cron-jobs": "workspace:^0.1.0",
-    "@homarr/cron-jobs-core": "workspace:^0.1.0",
-    "@homarr/db": "workspace:^0.1.0",
-    "@homarr/definitions": "workspace:^0.1.0",
-    "@homarr/icons": "workspace:^0.1.0",
-    "@homarr/integrations": "workspace:^0.1.0",
-    "@homarr/ping": "workspace:^0.1.0",
-    "@homarr/redis": "workspace:^0.1.0",
-    "@homarr/request-handler": "workspace:^0.1.0",
-    "@homarr/server-settings": "workspace:^0.1.0",
-    "@homarr/validation": "workspace:^0.1.0",
-    "@homarr/widgets": "workspace:^0.1.0",
-    "croner": "catalog:",
-    "dayjs": "catalog:",
-    "dotenv": "catalog:",
-    "fastify": "catalog:",
-    "superjson": "catalog:",
-    "undici": "catalog:"
-  },
-  "devDependencies": {
-    "@homarr/eslint-config": "workspace:^0.2.0",
-    "@homarr/prettier-config": "workspace:^0.1.0",
-    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/node": "catalog:",
-    "dotenv-cli": "catalog:",
-    "esbuild": "catalog:",
-    "eslint": "catalog:",
-    "prettier": "catalog:",
-    "tsx": "catalog:",
-    "typescript": "catalog:"
-  }
-}

apps/tasks/src/job-manager.ts

@@ -1,137 +0,0 @@
-import { Cron } from "croner";
-
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import type { IJobManager } from "@homarr/cron-job-api";
-import type { jobGroup as cronJobGroup, JobGroupKeys } from "@homarr/cron-jobs";
-import type { Database, InferInsertModel } from "@homarr/db";
-import { eq } from "@homarr/db";
-import { cronJobConfigurations } from "@homarr/db/schema";
-
-const logger = createLogger({ module: "jobManager" });
-
-export class JobManager implements IJobManager {
-  constructor(
-    private db: Database,
-    private jobGroup: typeof cronJobGroup,
-  ) {}
-
-  public async startAsync(name: JobGroupKeys): Promise<void> {
-    await this.jobGroup.startAsync(name);
-  }
-  public async triggerAsync(name: JobGroupKeys): Promise<void> {
-    await this.jobGroup.runManuallyAsync(name);
-  }
-  public stop(name: JobGroupKeys): void {
-    this.jobGroup.stop(name);
-  }
-  public async updateIntervalAsync(name: JobGroupKeys, cron: string): Promise<void> {
-    logger.info("Updating cron job interval", { name, expression: cron });
-    const job = this.jobGroup.getJobRegistry().get(name);
-    if (!job) throw new Error(`Job ${name} not found`);
-    if (job.preventCustomInterval && cron !== job.cronExpression) {
-      throw new Error(`Custom cron expressions are not allowed for job ${name}`);
-    }
-
-    const updatedConfig = await this.updateConfigurationAsync(name, { cronExpression: cron });
-    this.jobGroup.getTask(name)?.stop();
-
-    this.jobGroup.setTask(
-      name,
-      new Cron(
-        cron,
-        {
-          name,
-          timezone: job.timezone,
-          paused: !updatedConfig.isEnabled,
-        },
-        () => void job.executeAsync(),
-      ),
-    );
-    logger.info("Cron job interval updated", { name, expression: cron });
-  }
-  public async disableAsync(name: JobGroupKeys): Promise<void> {
-    logger.info("Disabling cron job", { name });
-    const job = this.jobGroup.getJobRegistry().get(name);
-    if (!job) throw new Error(`Job ${name} not found`);
-
-    await this.updateConfigurationAsync(name, { isEnabled: false });
-    this.jobGroup.stop(name);
-    logger.info("Cron job disabled", { name });
-  }
-  public async enableAsync(name: JobGroupKeys): Promise<void> {
-    logger.info("Enabling cron job", { name });
-    await this.updateConfigurationAsync(name, { isEnabled: true });
-    await this.jobGroup.startAsync(name);
-    logger.info("Cron job enabled", { name });
-  }
-
-  private async updateConfigurationAsync(
-    name: JobGroupKeys,
-    configuration: Omit<Partial<InferInsertModel<typeof cronJobConfigurations>>, "name">,
-  ) {
-    const existingConfig = await this.db.query.cronJobConfigurations.findFirst({
-      where: (table, { eq }) => eq(table.name, name),
-    });
-
-    logger.debug("Updating cron job configuration", {
-      name,
-      configuration: JSON.stringify(configuration),
-      exists: Boolean(existingConfig),
-    });
-
-    if (existingConfig) {
-      await this.db
-        .update(cronJobConfigurations)
-        // prevent updating the name, as it is the primary key
-        .set({ ...configuration, name: undefined })
-        .where(eq(cronJobConfigurations.name, name));
-      logger.debug("Cron job configuration updated", {
-        name,
-        configuration: JSON.stringify(configuration),
-      });
-      return {
-        name,
-        cronExpression: configuration.cronExpression ?? existingConfig.cronExpression,
-        isEnabled: configuration.isEnabled ?? existingConfig.isEnabled,
-      };
-    }
-
-    const job = this.jobGroup.getJobRegistry().get(name);
-    if (!job) throw new Error(`Job ${name} not found`);
-
-    const updatedConfig = {
-      name,
-      cronExpression: configuration.cronExpression ?? job.cronExpression,
-      isEnabled: configuration.isEnabled ?? true,
-    };
-    await this.db.insert(cronJobConfigurations).values(updatedConfig);
-    logger.debug("Cron job configuration updated", {
-      name,
-      configuration: JSON.stringify(configuration),
-    });
-    return updatedConfig;
-  }
-
-  public async getAllAsync(): Promise<
-    {
-      name: JobGroupKeys;
-      cron: string;
-      preventManualExecution: boolean;
-      preventCustomInterval: boolean;
-      isEnabled: boolean;
-    }[]
-  > {
-    const configurations = await this.db.query.cronJobConfigurations.findMany();
-
-    return [...this.jobGroup.getJobRegistry().entries()].map(([name, job]) => {
-      const config = configurations.find((config) => config.name === name);
-      return {
-        name,
-        cron: config?.cronExpression ?? job.cronExpression,
-        preventManualExecution: job.preventManualExecution,
-        preventCustomInterval: job.preventCustomInterval,
-        isEnabled: config?.isEnabled ?? true,
-      };
-    });
-  }
-}

apps/tasks/src/main.ts

@@ -1,52 +0,0 @@
-// This import has to be the first import in the file so that the agent is overridden before any other modules are imported.
-import "./overrides";
-
-import type { FastifyTRPCPluginOptions } from "@trpc/server/adapters/fastify";
-import { fastifyTRPCPlugin } from "@trpc/server/adapters/fastify";
-import fastify from "fastify";
-
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
-import type { JobRouter } from "@homarr/cron-job-api";
-import { jobRouter } from "@homarr/cron-job-api";
-import { CRON_JOB_API_KEY_HEADER, CRON_JOB_API_PATH, CRON_JOB_API_PORT } from "@homarr/cron-job-api/constants";
-import { jobGroup } from "@homarr/cron-jobs";
-import { db } from "@homarr/db";
-
-import { JobManager } from "./job-manager";
-import { onStartAsync } from "./on-start";
-
-const logger = createLogger({ module: "tasksMain" });
-
-const server = fastify({
-  maxParamLength: 5000,
-});
-server.register(fastifyTRPCPlugin, {
-  prefix: CRON_JOB_API_PATH,
-  trpcOptions: {
-    router: jobRouter,
-    createContext: ({ req }) => ({
-      manager: new JobManager(db, jobGroup),
-      apiKey: req.headers[CRON_JOB_API_KEY_HEADER] as string | undefined,
-    }),
-    onError({ path, error }) {
-      logger.error(new ErrorWithMetadata("Error in tasks tRPC handler", { path }, { cause: error }));
-    },
-  } satisfies FastifyTRPCPluginOptions<JobRouter>["trpcOptions"],
-});
-
-void (async () => {
-  await onStartAsync();
-  await jobGroup.initializeAsync();
-  await jobGroup.startAllAsync();
-
-  try {
-    await server.listen({ port: CRON_JOB_API_PORT });
-    logger.info("Tasks web server started successfully", { port: CRON_JOB_API_PORT });
-  } catch (err) {
-    logger.error(
-      new ErrorWithMetadata("Failed to start tasks web server", { port: CRON_JOB_API_PORT }, { cause: err }),
-    );
-    process.exit(1);
-  }
-})();

apps/tasks/src/on-start/index.ts

@@ -1,7 +0,0 @@
-import { invalidateUpdateCheckerCacheAsync } from "./invalidate-update-checker-cache";
-import { cleanupSessionsAsync } from "./session-cleanup";
-
-export async function onStartAsync() {
-  await cleanupSessionsAsync();
-  await invalidateUpdateCheckerCacheAsync();
-}

apps/tasks/src/on-start/invalidate-update-checker-cache.ts

@@ -1,18 +0,0 @@
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { updateCheckerRequestHandler } from "@homarr/request-handler/update-checker";
-
-const logger = createLogger({ module: "invalidateUpdateCheckerCache" });
-
-/**
- * Invalidates the update checker cache on startup to ensure fresh data.
- * It is important as we want to avoid showing pending updates after the update to latest version.
- */
-export async function invalidateUpdateCheckerCacheAsync() {
-  try {
-    const handler = updateCheckerRequestHandler.handler({});
-    await handler.invalidateAsync();
-    logger.debug("Update checker cache invalidated");
-  } catch (error) {
-    logger.error(new Error("Failed to invalidate update checker cache", { cause: error }));
-  }
-}

apps/tasks/src/on-start/session-cleanup.ts

@@ -1,41 +0,0 @@
-import { env } from "@homarr/auth/env";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { db, eq, inArray } from "@homarr/db";
-import { sessions, users } from "@homarr/db/schema";
-import { supportedAuthProviders } from "@homarr/definitions";
-
-const logger = createLogger({ module: "sessionCleanup" });
-
-/**
- * Deletes sessions for users that have inactive auth providers.
- * Sessions from other providers are deleted so they can no longer be used.
- */
-export async function cleanupSessionsAsync() {
-  try {
-    const currentAuthProviders = env.AUTH_PROVIDERS;
-
-    const inactiveAuthProviders = supportedAuthProviders.filter((provider) => !currentAuthProviders.includes(provider));
-    const subQuery = db
-      .select({ id: users.id })
-      .from(users)
-      .where(inArray(users.provider, inactiveAuthProviders))
-      .as("sq");
-    const sessionsWithInactiveProviders = await db
-      .select({ userId: sessions.userId })
-      .from(sessions)
-      .rightJoin(subQuery, eq(sessions.userId, subQuery.id));
-
-    const userIds = sessionsWithInactiveProviders.map(({ userId }) => userId).filter((value) => value !== null);
-    await db.delete(sessions).where(inArray(sessions.userId, userIds));
-
-    if (sessionsWithInactiveProviders.length > 0) {
-      logger.info("Deleted sessions for inactive providers", {
-        count: userIds.length,
-      });
-    } else {
-      logger.debug("No sessions to delete");
-    }
-  } catch (error) {
-    logger.error(new Error("Failed to clean up sessions", { cause: error }));
-  }
-}

apps/tasks/src/overrides.ts

@@ -1,5 +0,0 @@
-import { setGlobalDispatcher } from "undici";
-
-import { UndiciHttpAgent } from "@homarr/core/infrastructure/http";
-
-setGlobalDispatcher(new UndiciHttpAgent());

apps/tasks/tsconfig.json

@@ -1,13 +0,0 @@
-{
-  "extends": "@homarr/tsconfig/base.json",
-  "compilerOptions": {
-    "baseUrl": ".",
-    "paths": {
-      "~/*": ["src/*"],
-      "@homarr/node-unifi": ["../../node_modules/@types/node-unifi"]
-    },
-    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
-  },
-  "include": ["."],
-  "exclude": ["node_modules"]
-}

apps/websocket/eslint.config.js

@@ -1,9 +0,0 @@
-import baseConfig from "@homarr/eslint-config/base";
-
-/** @type {import('typescript-eslint').Config} */
-export default [
-  {
-    ignores: ["wssServer.cjs"],
-  },
-  ...baseConfig,
-];

apps/websocket/package.json

@@ -1,42 +0,0 @@
-{
-  "name": "@homarr/websocket",
-  "version": "0.1.0",
-  "private": true,
-  "license": "Apache-2.0",
-  "type": "module",
-  "main": "./src/main.ts",
-  "types": "./src/main.ts",
-  "scripts": {
-    "build": "esbuild src/main.ts --bundle --platform=node --outfile=wssServer.cjs --external:bcrypt --external:@opentelemetry/api --external:deasync --external:cpu-features --loader:.html=text --loader:.scss=text --loader:.node=text",
-    "clean": "rm -rf .turbo node_modules",
-    "dev": "pnpm with-env tsx ./src/main.ts",
-    "format": "prettier --check . --ignore-path ../../.gitignore",
-    "lint": "eslint",
-    "typecheck": "tsc --noEmit",
-    "with-env": "dotenv -e ../../.env --"
-  },
-  "prettier": "@homarr/prettier-config",
-  "dependencies": {
-    "@homarr/api": "workspace:^0.1.0",
-    "@homarr/auth": "workspace:^0.1.0",
-    "@homarr/common": "workspace:^0.1.0",
-    "@homarr/core": "workspace:^",
-    "@homarr/db": "workspace:^0.1.0",
-    "@homarr/definitions": "workspace:^0.1.0",
-    "@homarr/redis": "workspace:^0.1.0",
-    "@homarr/validation": "workspace:^0.1.0",
-    "dotenv": "catalog:",
-    "tsx": "catalog:",
-    "ws": "catalog:"
-  },
-  "devDependencies": {
-    "@homarr/eslint-config": "workspace:^0.2.0",
-    "@homarr/prettier-config": "workspace:^0.1.0",
-    "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/ws": "catalog:",
-    "esbuild": "catalog:",
-    "eslint": "catalog:",
-    "prettier": "catalog:",
-    "typescript": "catalog:"
-  }
-}

apps/websocket/src/main.ts

@@ -1,66 +0,0 @@
-import { applyWSSHandler } from "@trpc/server/adapters/ws";
-import { WebSocketServer } from "ws";
-
-import { appRouter, createTRPCContext } from "@homarr/api/websocket";
-import { getSessionFromToken, sessionTokenCookieName } from "@homarr/auth";
-import { parseCookies } from "@homarr/common";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { db } from "@homarr/db";
-
-const logger = createLogger({ module: "websocketMain" });
-
-const wss = new WebSocketServer({
-  port: 3001,
-});
-const handler = applyWSSHandler({
-  wss,
-  router: appRouter,
-  // ignore error on next line because the createContext must be set with this name
-  // eslint-disable-next-line no-restricted-syntax
-  createContext: async ({ req }) => {
-    try {
-      const headers = Object.entries(req.headers).map(
-        ([key, value]) => [key, typeof value === "string" ? value : value?.[0]] as [string, string],
-      );
-      const nextHeaders = new Headers(headers);
-
-      const store = parseCookies(nextHeaders.get("cookie") ?? "");
-      const sessionToken = store[sessionTokenCookieName];
-
-      const session = await getSessionFromToken(db, sessionToken);
-
-      return createTRPCContext({
-        headers: nextHeaders,
-        session,
-      });
-    } catch (error) {
-      logger.error(error);
-      return createTRPCContext({
-        headers: new Headers(),
-        session: null,
-      });
-    }
-  },
-  // Enable heartbeat messages to keep connection open (disabled by default)
-  keepAlive: {
-    enabled: true,
-    // server ping message interval in milliseconds
-    pingMs: 30000,
-    // connection is terminated if pong message is not received in this many milliseconds
-    pongWaitMs: 5000,
-  },
-});
-
-wss.on("connection", (websocket, incomingMessage) => {
-  logger.info(`➕ Connection (${wss.clients.size}) ${incomingMessage.method} ${incomingMessage.url}`);
-  websocket.once("close", (code, reason) => {
-    logger.info(`➖ Connection (${wss.clients.size}) ${code} ${reason.toString()}`);
-  });
-});
-logger.info("✅ WebSocket Server listening on ws://localhost:3001");
-
-process.on("SIGTERM", () => {
-  logger.info("SIGTERM");
-  handler.broadcastReconnectNotification();
-  wss.close();
-});

apps/websocket/tsconfig.json

@@ -1,13 +0,0 @@
-{
-  "extends": "@homarr/tsconfig/base.json",
-  "compilerOptions": {
-    "baseUrl": ".",
-    "paths": {
-      "~/*": ["src/*"],
-      "@homarr/node-unifi": ["../../node_modules/@types/node-unifi"]
-    },
-    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
-  },
-  "include": ["."],
-  "exclude": ["node_modules"]
-}

deployments/prebuilt-debian/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.15.0-trixie AS base
+FROM node:24.14.0-trixie AS base
 WORKDIR /app
 COPY package.json .
 COPY pnpm-lock.yaml .

deployments/prebuilt-debian/package.json

@@ -2,12 +2,12 @@
   "name": "homarr-prebuilt-debian",
   "private": true,
   "dependencies": {
-    "better-sqlite3": "^12.9.0"
+    "better-sqlite3": "^12.6.2"
   },
-  "packageManager": "pnpm@10.33.2",
+  "packageManager": "pnpm@10.32.0",
   "engines": {
-    "node": ">=24.15.0",
-    "pnpm": ">=10.33.2"
+    "node": ">=24.14.0",
+    "pnpm": ">=10.32.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": [

deployments/prebuilt-debian/pnpm-lock.yaml

@@ -9,16 +9,16 @@ importers:
   .:
     dependencies:
       better-sqlite3:
-        specifier: ^12.9.0
-        version: 12.9.0
+        specifier: ^12.6.2
+        version: 12.6.2
 
 packages:
 
   base64-js@1.5.1:
     resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
 
-  better-sqlite3@12.9.0:
-    resolution: {integrity: sha512-wqUv4Gm3toFpHDQmaKD4QhZm3g1DjUBI0yzS4UBl6lElUmXFYdTQmmEDpAFa5o8FiFiymURypEnfVHzILKaxqQ==}
+  better-sqlite3@12.6.2:
+    resolution: {integrity: sha512-8VYKM3MjCa9WcaSAI3hzwhmyHVlH8tiGFwf0RlTsZPWJ1I5MkzjiudCo4KC4DxOaL/53A5B1sI/IbldNFDbsKA==}
     engines: {node: 20.x || 22.x || 23.x || 24.x || 25.x}
 
   bindings@1.5.0:
@@ -93,7 +93,6 @@ packages:
   prebuild-install@7.1.3:
     resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==}
     engines: {node: '>=10'}
-    deprecated: No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
     hasBin: true
 
   pump@3.0.3:
@@ -148,7 +147,7 @@ snapshots:
 
   base64-js@1.5.1: {}
 
-  better-sqlite3@12.9.0:
+  better-sqlite3@12.6.2:
     dependencies:
       bindings: 1.5.0
       prebuild-install: 7.1.3

docs/README.md

@@ -64,13 +64,6 @@
 </a>
 </td>
 <td align="center">
-<a href="https://homarr.dev/docs/integrations/anchor" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/anchor.svg" alt="Anchor" width="90" height="90" />
-  <br/>  
-  <p align="center">Anchor</p>
-</a>
-</td>
-<td align="center">
 <a href="https://homarr.dev/docs/integrations/aria2" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/PapirusDevelopmentTeam/papirus_icons@latest/src/system_downloads_3.svg" alt="Aria2" width="90" height="90" />
   <br/>  
@@ -104,15 +97,15 @@
   <br/>  
   <p align="center">Deluge</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/docker-hub" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/docker.svg" alt="Docker Hub" width="90" height="90" />
   <br/>  
   <p align="center">Docker<br/>Hub</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/emby" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/emby.svg" alt="Emby" width="90" height="90" />
   <br/>  
@@ -153,15 +146,15 @@
   <br/>  
   <p align="center">Home<br/>Assistant</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/ical" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/ical.svg" alt="iCal" width="90" height="90" />
   <br/>  
   <p align="center">iCal</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/immich" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/immich.svg" alt="Immich" width="90" height="90" />
   <br/>  
@@ -202,15 +195,15 @@
   <br/>  
   <p align="center">Nextcloud</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/npm" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/npm.svg" alt="NPM" width="90" height="90" />
   <br/>  
   <p align="center">NPM</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/ntfy" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/ntfy.svg" alt="ntfy" width="90" height="90" />
   <br/>  
@@ -251,15 +244,15 @@
   <br/>  
   <p align="center">Pi-hole</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/plex" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/plex.svg" alt="Plex" width="90" height="90" />
   <br/>  
   <p align="center">Plex</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/prowlarr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/prowlarr.svg" alt="Prowlarr" width="90" height="90" />
   <br/>  
@@ -300,22 +293,15 @@
   <br/>  
   <p align="center">Readarr</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/sabnzbd" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/sabnzbd.svg" alt="SABnzbd" width="90" height="90" />
   <br/>  
   <p align="center">SABnzbd</p>
 </a>
-</td>
-<td align="center">
-<a href="https://homarr.dev/docs/integrations/search-ch" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/search-ch.png" alt="Search.ch" width="90" height="90" />
-  <br/>  
-  <p align="center">Search.ch</p>
-</a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/seerr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/seerr.svg" alt="Seerr" width="90" height="90" />
   <br/>  
@@ -337,20 +323,13 @@
 </a>
 </td>
 <td align="center">
-<a href="https://homarr.dev/docs/integrations/speedtest-tracker" target="_blank" rel="noreferrer noopener">
-  <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/speedtest-tracker.png" alt="Speedtest Tracker" width="90" height="90" />
-  <br/>  
-  <p align="center">Speedtest<br/>Tracker</p>
-</a>
-</td>
-<td align="center">
 <a href="https://homarr.dev/docs/integrations/tdarr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/tdarr.png" alt="Tdarr" width="90" height="90" />
   <br/>  
   <p align="center">Tdarr</p>
 </a>
-</td></tr>
-<tr><td align="center">
+</td>
+<td align="center">
 <a href="https://homarr.dev/docs/integrations/tracearr" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/tracearr.svg" alt="Tracearr" width="90" height="90" />
   <br/>  
@@ -370,15 +349,15 @@
   <br/>  
   <p align="center">TrueNAS</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/unifi-controller" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/png/unifi.png" alt="Unifi Controller" width="90" height="90" />
   <br/>  
   <p align="center">Unifi<br/>Controller</p>
 </a>
-</td>
-<td align="center">
+</td></tr>
+<tr><td align="center">
 <a href="https://homarr.dev/docs/integrations/unraid" target="_blank" rel="noreferrer noopener">
   <img src="https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons@master/svg/unraid.svg" alt="Unraid" width="90" height="90" />
   <br/>  

nginx.conf

@@ -7,9 +7,9 @@ http {
         listen 7575;
         listen [::]:7575;
 
-        # Route websockets traffic to port 3001
+        # Route websockets traffic to port 3000 (integrated custom server)
         location /websockets {
-            proxy_pass http://${HOSTNAME}:3001;
+            proxy_pass http://${HOSTNAME}:3000;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection "Upgrade";

package.json

@@ -1,6 +1,6 @@
 {
   "name": "homarr",
-  "version": "1.60.0",
+  "version": "1.56.0",
   "private": true,
   "scripts": {
     "build": "cross-env CI=true turbo build",
@@ -17,6 +17,9 @@
     "db:studio": "pnpm -F db studio",
     "dev": "turbo dev --parallel",
     "docker:dev": "docker compose -f ./development/development.docker-compose.yml up",
+    "docker:build": "docker build -t homarr:test .",
+    "docker:test": "bash scripts/docker-test.sh",
+    "docker:test:skip-build": "bash scripts/docker-test.sh --skip-build",
     "format": "turbo format --continue -- --cache --cache-location node_modules/.cache/.prettiercache",
     "format:fix": "turbo format --continue -- --write --cache --cache-location node_modules/.cache/.prettiercache",
     "lint": "turbo lint --continue -- --cache --cache-location node_modules/.cache/.eslintcache",
@@ -26,7 +29,7 @@
     "release": "semantic-release",
     "scripts:update-bug-report-template": "tsx ./scripts/update-bug-report-template.mts",
     "scripts:update-readme-integrations": "tsx ./scripts/update-integration-list.mts",
-    "start": "concurrently \"pnpm with-env node apps/tasks/tasks.cjs\" \"pnpm with-env node apps/websocket/wssServer.cjs\" \"pnpm -F nextjs start\"",
+    "start": "pnpm -F nextjs start",
     "test": "cross-env NODE_ENV=development CI=true vitest run --exclude e2e --coverage.enabled ",
     "test:e2e": "cross-env NODE_ENV=development CI=true vitest e2e",
     "test:ui": "cross-env NODE_ENV=development CI=true vitest --exclude e2e --ui --coverage.enabled",
@@ -36,33 +39,33 @@
   "prettier": "@homarr/prettier-config",
   "devDependencies": {
     "@homarr/prettier-config": "workspace:^0.1.0",
-    "@semantic-release/changelog": "catalog:",
-    "@semantic-release/commit-analyzer": "catalog:",
-    "@semantic-release/git": "catalog:",
-    "@semantic-release/github": "catalog:",
-    "@semantic-release/npm": "catalog:",
-    "@semantic-release/release-notes-generator": "catalog:",
-    "@testcontainers/redis": "catalog:",
-    "@turbo/gen": "catalog:",
-    "@vitejs/plugin-react": "catalog:",
-    "@vitest/coverage-v8": "catalog:",
-    "@vitest/ui": "catalog:",
-    "conventional-changelog-conventionalcommits": "catalog:",
-    "cross-env": "catalog:",
-    "jsdom": "catalog:",
-    "json5": "catalog:",
-    "prettier": "catalog:",
-    "semantic-release": "catalog:",
-    "testcontainers": "catalog:",
-    "turbo": "catalog:",
-    "typescript": "catalog:",
-    "vite-tsconfig-paths": "catalog:",
-    "vitest": "catalog:"
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/commit-analyzer": "^13.0.1",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/npm": "^13.1.5",
+    "@semantic-release/release-notes-generator": "^14.1.0",
+    "@testcontainers/redis": "^11.12.0",
+    "@turbo/gen": "^2.8.15",
+    "@vitejs/plugin-react": "^5.1.4",
+    "@vitest/coverage-v8": "^4.0.18",
+    "@vitest/ui": "^4.0.18",
+    "conventional-changelog-conventionalcommits": "^9.3.0",
+    "cross-env": "^10.1.0",
+    "jsdom": "^28.1.0",
+    "json5": "^2.2.3",
+    "prettier": "^3.8.1",
+    "semantic-release": "^25.0.3",
+    "testcontainers": "^11.12.0",
+    "turbo": "^2.8.15",
+    "typescript": "^5.9.3",
+    "vite-tsconfig-paths": "^6.1.1",
+    "vitest": "^4.0.18"
   },
-  "packageManager": "pnpm@10.33.2",
+  "packageManager": "pnpm@10.32.0",
   "engines": {
-    "node": ">=24.15.0",
-    "pnpm": ">=10.33.2"
+    "node": ">=24.14.0",
+    "pnpm": ">=10.32.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": [
@@ -77,25 +80,25 @@
       "tree-sitter-json"
     ],
     "overrides": {
-      "@babel/helpers@<7.26.10": ">=7.29.2",
-      "@babel/runtime@<7.26.10": ">=7.29.2",
-      "axios@>=1.0.0 <1.8.2": ">=1.15.2",
-      "brace-expansion@>=2.0.0 <=2.0.1": ">=5.0.5",
-      "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.5",
-      "esbuild@<=0.24.2": ">=0.28.0",
+      "@babel/helpers@<7.26.10": ">=7.28.6",
+      "@babel/runtime@<7.26.10": ">=7.28.6",
+      "axios@>=1.0.0 <1.8.2": ">=1.13.6",
+      "brace-expansion@>=2.0.0 <=2.0.1": ">=5.0.4",
+      "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.4",
+      "esbuild@<=0.24.2": ">=0.27.3",
       "form-data@>=4.0.0 <4.0.4": ">=4.0.5",
-      "hono@<4.6.5": ">=4.12.15",
+      "hono@<4.6.5": ">=4.12.7",
       "linkifyjs@<4.3.2": ">=4.3.2",
-      "nanoid@>=4.0.0 <5.0.9": ">=5.1.9",
+      "nanoid@>=4.0.0 <5.0.9": ">=5.1.6",
       "prismjs@<1.30.0": ">=1.30.0",
-      "proxmox-api>undici": "7.24.6",
-      "react-is": "^19.2.5",
-      "rollup@>=4.0.0 <4.22.4": ">=4.60.2",
+      "proxmox-api>undici": "7.19.2",
+      "react-is": "^19.2.4",
+      "rollup@>=4.0.0 <4.22.4": ">=4.59.0",
       "sha.js@<=2.4.11": ">=2.4.12",
       "tar-fs@>=3.0.0 <3.0.9": ">=3.1.2",
       "tar-fs@>=2.0.0 <2.1.3": ">=3.1.2",
       "tmp@<=0.2.3": ">=0.2.5",
-      "vite@>=5.0.0 <=5.4.18": ">=8.0.10"
+      "vite@>=5.0.0 <=5.4.18": ">=7.3.1"
     },
     "patchedDependencies": {
       "@types/node-unifi": "patches/@types__node-unifi.patch",

packages/analytics/package.json

@@ -28,14 +28,14 @@
     "@homarr/db": "workspace:^0.1.0",
     "@homarr/docker": "workspace:^0.1.0",
     "@homarr/server-settings": "workspace:^0.1.0",
-    "@umami/node": "catalog:",
-    "superjson": "catalog:"
+    "@umami/node": "^0.4.0",
+    "superjson": "2.2.6"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/api/package.json

@@ -9,8 +9,7 @@
     "./client": "./src/client.ts",
     "./server": "./src/server.ts",
     "./websocket": "./src/websocket.ts",
-    "./shared": "./src/shared.ts",
-    "./open-api": "./src/open-api.ts"
+    "./shared": "./src/shared.ts"
   },
   "main": "./index.ts",
   "types": "./index.ts",
@@ -41,26 +40,26 @@
     "@homarr/server-settings": "workspace:^0.1.0",
     "@homarr/translation": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
-    "@kubernetes/client-node": "catalog:",
-    "@tanstack/react-query": "catalog:",
-    "@trpc/client": "catalog:",
-    "@trpc/react-query": "catalog:",
-    "@trpc/server": "catalog:",
-    "@trpc/tanstack-react-query": "catalog:",
-    "lodash.clonedeep": "catalog:",
-    "next": "catalog:",
-    "react": "catalog:",
-    "react-dom": "catalog:",
-    "superjson": "catalog:",
-    "trpc-to-openapi": "catalog:",
-    "zod": "catalog:"
+    "@kubernetes/client-node": "^1.4.0",
+    "@tanstack/react-query": "^5.90.21",
+    "@trpc/client": "^11.12.0",
+    "@trpc/react-query": "^11.12.0",
+    "@trpc/server": "^11.12.0",
+    "@trpc/tanstack-react-query": "^11.12.0",
+    "lodash.clonedeep": "^4.5.0",
+    "next": "16.1.6",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "superjson": "2.2.6",
+    "trpc-to-openapi": "^3.1.0",
+    "zod": "^4.2.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "prettier": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
+    "typescript": "^5.9.3"
   }
 }

packages/api/src/index.ts

@@ -1,5 +1,6 @@
 import type { inferRouterInputs, inferRouterOutputs } from "@trpc/server";
 
+import { openApiDocument } from "./open-api";
 import type { AppRouter } from "./root";
 import { appRouter } from "./root";
 import { createCallerFactory, createTRPCContext } from "./trpc";
@@ -29,5 +30,5 @@ type RouterInputs = inferRouterInputs<AppRouter>;
  **/
 type RouterOutputs = inferRouterOutputs<AppRouter>;
 
-export { createTRPCContext, appRouter, createCaller };
+export { createTRPCContext, appRouter, createCaller, openApiDocument };
 export type { AppRouter, RouterInputs, RouterOutputs };

packages/api/src/open-api.ts

@@ -2,21 +2,10 @@ import { generateOpenApiDocument } from "trpc-to-openapi";
 
 import { API_KEY_HEADER_NAME } from "@homarr/auth/api-key";
 
-import { appRouter } from "./router/app";
-import { infoRouter } from "./router/info";
-import { inviteRouter } from "./router/invite";
-import { userRouter } from "./router/user";
-import { createTRPCRouter } from "./trpc";
-
-export const openApiRouter = createTRPCRouter({
-  appRouter,
-  infoRouter,
-  inviteRouter,
-  userRouter,
-});
+import { appRouter } from "./root";
 
 export const openApiDocument = (base: string) =>
-  generateOpenApiDocument(openApiRouter, {
+  generateOpenApiDocument(appRouter, {
     title: "Homarr API documentation",
     version: "1.0.0",
     baseUrl: base,

packages/api/src/router/apiKeys.ts

@@ -1,6 +1,6 @@
 import { z } from "zod/v4";
 
-import { hashPasswordAsync } from "@homarr/auth";
+import { createSaltAsync, hashPasswordAsync } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { generateSecureRandomToken } from "@homarr/common/server";
 import { db, eq } from "@homarr/db";
@@ -14,6 +14,7 @@ export const apiKeysRouter = createTRPCRouter({
       columns: {
         id: true,
         apiKey: false,
+        salt: false,
       },
       with: {
         user: {
@@ -28,12 +29,14 @@ export const apiKeysRouter = createTRPCRouter({
     });
   }),
   create: permissionRequiredProcedure.requiresPermission("admin").mutation(async ({ ctx }) => {
+    const salt = await createSaltAsync();
     const randomToken = generateSecureRandomToken(64);
-    const hashedRandomToken = await hashPasswordAsync(randomToken);
+    const hashedRandomToken = await hashPasswordAsync(randomToken, salt);
     const id = createId();
     await db.insert(apiKeys).values({
       id,
       apiKey: hashedRandomToken,
+      salt,
       userId: ctx.session.user.id,
     });
     return {

packages/api/src/router/cron-jobs.ts

@@ -2,7 +2,7 @@ import { observable } from "@trpc/server/observable";
 import z from "zod/v4";
 
 import { createLogger } from "@homarr/core/infrastructure/logs";
-import { jobGroupKeys, jobNameSchema } from "@homarr/cron-job-api";
+import { cronExpressionSchema, jobGroupKeys, jobNameSchema } from "@homarr/cron-job-api";
 import { cronJobApi } from "@homarr/cron-job-api/client";
 import type { TaskStatus } from "@homarr/cron-job-status";
 import { createCronJobStatusChannel } from "@homarr/cron-job-status";
@@ -35,7 +35,7 @@ export const cronJobsRouter = createTRPCRouter({
     .input(
       z.object({
         name: jobNameSchema,
-        cron: z.string(),
+        cron: cronExpressionSchema,
       }),
     )
     .mutation(async ({ input }) => {

packages/api/src/router/docker/docker-router.ts

@@ -140,7 +140,7 @@ interface DockerContainer {
   id: string;
   state: ContainerState;
   image: string;
-  ports: Port[] | undefined;
+  ports: Port[];
   iconUrl: string | null;
   cpuUsage: number;
   memoryUsage: number;

packages/api/src/router/test/widgets/rssFeed.spec.ts

@@ -208,7 +208,6 @@ async function setupUrlRestrictionAsync(dbUrls: string[]) {
               hideDescription: false,
               textLinesClamp: 3,
               maximumAmountPosts: 5,
-              showPosterImage: true,
             } satisfies WidgetComponentProps<"rssFeed">["options"]),
           }) satisfies InferInsertModel<typeof items>,
       ),

packages/api/src/router/user.ts

@@ -1,18 +1,16 @@
 import { TRPCError } from "@trpc/server";
-import type { MySqlRawQueryResult } from "drizzle-orm/mysql2";
-import type { QueryResult } from "pg";
 import { z } from "zod/v4";
 
-import { comparePasswordsAsync, hashPasswordAsync } from "@homarr/auth";
+import { createSaltAsync, hashPasswordAsync } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import type { Database } from "@homarr/db";
-import { and, eq, handleTransactionsAsync, like } from "@homarr/db";
+import { and, eq, like } from "@homarr/db";
 import { getMaxGroupPositionAsync } from "@homarr/db/queries";
 import { boards, groupMembers, groupPermissions, groups, invites, users } from "@homarr/db/schema";
 import { selectUserSchema } from "@homarr/db/validationSchemas";
-import type { SupportedAuthProvider } from "@homarr/definitions";
 import { credentialsAdminGroup } from "@homarr/definitions";
+import type { SupportedAuthProvider } from "@homarr/definitions";
 import { byIdSchema } from "@homarr/validation/common";
 import type { userBaseCreateSchema } from "@homarr/validation/user";
 import {
@@ -92,58 +90,15 @@ export const userRouter = createTRPCRouter({
 
       await checkUsernameAlreadyTakenAndThrowAsync(ctx.db, "credentials", input.username);
 
-      const hashedPassword = await hashPasswordAsync(input.password);
+      await createUserAsync(ctx.db, input);
 
-      const userId = createId();
-      const user = {
-        id: userId,
-        name: input.username,
-        password: hashedPassword,
-      };
-
-      await handleTransactionsAsync(ctx.db, {
-        async handleAsync(db, schema) {
-          await db.transaction(async (trx) => {
-            await trx.insert(schema.users).values(user);
-
-            // Delete invite as it's used
-            const queryResult = (await trx.delete(schema.invites).where(inviteWhere)) as
-              | QueryResult
-              | MySqlRawQueryResult;
-            let count = 0;
-            if (Array.isArray(queryResult)) {
-              count = queryResult[0].affectedRows;
-            } else {
-              count = queryResult.rowCount ?? 0;
-            }
-            if (count === 0) {
-              throw new TRPCError({
-                code: "FORBIDDEN",
-                message: "Invalid invite",
-              });
-            }
-          });
-        },
-        handleSync(db) {
-          db.transaction((trx) => {
-            trx.insert(users).values(user).run();
-            // Delete invite as it's used
-            const result = trx.delete(invites).where(inviteWhere).run();
-
-            if (result.changes === 0) {
-              throw new TRPCError({
-                code: "FORBIDDEN",
-                message: "Invalid invite",
-              });
-            }
-          });
-        },
-      });
+      // Delete invite as it's used
+      await ctx.db.delete(invites).where(inviteWhere);
     }),
   create: permissionRequiredProcedure
     .requiresPermission("admin")
     .meta({ openapi: { method: "POST", path: "/api/users", tags: ["users"], protect: true } })
-    .input(convertIntersectionToZodObject(userCreateSchema))
+    .input(userCreateSchema)
     .output(z.void())
     .mutation(async ({ ctx, input }) => {
       throwIfCredentialsDisabled();
@@ -374,7 +329,7 @@ export const userRouter = createTRPCRouter({
       await ctx.db.delete(users).where(eq(users.id, input.userId));
     }),
   changePassword: protectedProcedure
-    .input(convertIntersectionToZodObject(userChangePasswordApiSchema))
+    .input(userChangePasswordApiSchema)
     .output(z.void())
     .meta({ openapi: { method: "PATCH", path: "/api/users/{userId}/changePassword", tags: ["users"], protect: true } })
     .mutation(async ({ ctx, input }) => {
@@ -391,6 +346,7 @@ export const userRouter = createTRPCRouter({
         columns: {
           id: true,
           password: true,
+          salt: true,
           provider: true,
         },
         where: eq(users.id, input.userId),
@@ -420,7 +376,8 @@ export const userRouter = createTRPCRouter({
       });
 
       if (isPreviousPasswordRequired) {
-        const isValid = await comparePasswordsAsync(input.previousPassword, dbUser.password ?? "");
+        const previousPasswordHash = await hashPasswordAsync(input.previousPassword, dbUser.salt ?? "");
+        const isValid = previousPasswordHash === dbUser.password;
 
         if (!isValid) {
           throw new TRPCError({
@@ -430,7 +387,8 @@ export const userRouter = createTRPCRouter({
         }
       }
 
-      const hashedPassword = await hashPasswordAsync(input.password);
+      const salt = await createSaltAsync();
+      const hashedPassword = await hashPasswordAsync(input.password, salt);
       await ctx.db
         .update(users)
         .set({
@@ -578,7 +536,8 @@ export const userRouter = createTRPCRouter({
 });
 
 const createUserAsync = async (db: Database, input: Omit<z.infer<typeof userBaseCreateSchema>, "groupIds">) => {
-  const hashedPassword = await hashPasswordAsync(input.password);
+  const salt = await createSaltAsync();
+  const hashedPassword = await hashPasswordAsync(input.password, salt);
 
   const userId = createId();
   await db.insert(users).values({
@@ -586,6 +545,7 @@ const createUserAsync = async (db: Database, input: Omit<z.infer<typeof userBase
     name: input.username,
     email: input.email,
     password: hashedPassword,
+    salt,
   });
   return userId;
 };

packages/api/src/router/widgets/anchor-notes.ts

@@ -1,114 +0,0 @@
-import { TRPCError } from "@trpc/server";
-import { z } from "zod/v4";
-
-import { ResponseError } from "@homarr/common/server";
-import { createLogger } from "@homarr/core/infrastructure/logs";
-import { anchorNotesListInputSchema, anchorNoteUpdateInputSchema, createIntegrationAsync } from "@homarr/integrations";
-import { anchorNoteRequestHandler, anchorNotesListRequestHandler } from "@homarr/request-handler/anchor-notes";
-
-import { createOneIntegrationMiddleware } from "../../middlewares/integration";
-import { createTRPCRouter, protectedProcedure, publicProcedure } from "../../trpc";
-
-const noteIdInput = z.object({
-  noteId: z.string(),
-});
-
-const logger = createLogger({ module: "anchorNotesRouter" });
-
-const isJsonDeltaString = (value: string) => {
-  try {
-    const parsed: unknown = JSON.parse(value);
-    return typeof parsed === "object" && parsed !== null && Array.isArray((parsed as { ops?: unknown }).ops);
-  } catch {
-    return false;
-  }
-};
-
-const normalizeAnchorContent = (content: string | undefined) => {
-  if (content === undefined) return undefined;
-
-  const trimmed = content.trim();
-  if (!trimmed) {
-    return JSON.stringify({ ops: [{ insert: "\n" }] });
-  }
-
-  if (isJsonDeltaString(content)) return content;
-
-  const normalizedText = content.endsWith("\n") ? content : `${content}\n`;
-  return JSON.stringify({ ops: [{ insert: normalizedText }] });
-};
-
-export const anchorNotesRouter = createTRPCRouter({
-  listNotes: publicProcedure
-    .concat(createOneIntegrationMiddleware("query", "anchor"))
-    .input(anchorNotesListInputSchema)
-    .query(async ({ ctx, input }) => {
-      const handler = anchorNotesListRequestHandler.handler(ctx.integration, { ...input, limit: input.limit ?? 50 });
-
-      const { data } = await handler.getCachedOrUpdatedDataAsync({
-        forceUpdate: false,
-      });
-
-      return data;
-    }),
-  getNote: publicProcedure
-    .concat(createOneIntegrationMiddleware("query", "anchor"))
-    .input(noteIdInput)
-    .query(async ({ ctx, input }) => {
-      const handler = anchorNoteRequestHandler.handler(ctx.integration, { noteId: input.noteId });
-
-      const { data } = await handler.getCachedOrUpdatedDataAsync({
-        forceUpdate: false,
-      });
-
-      return data;
-    }),
-  updateNote: protectedProcedure
-    .concat(createOneIntegrationMiddleware("interact", "anchor"))
-    .input(anchorNoteUpdateInputSchema)
-    .mutation(async ({ ctx, input }) => {
-      const integrationInstance = await createIntegrationAsync(ctx.integration);
-      const normalizedContent = normalizeAnchorContent(input.content);
-      const isContentNormalized =
-        input.content !== undefined && normalizedContent !== undefined && input.content !== normalizedContent;
-
-      try {
-        const updatedNote = await integrationInstance.updateNoteAsync({
-          noteId: input.noteId,
-          ...(input.title !== undefined ? { title: input.title } : {}),
-          ...(normalizedContent !== undefined ? { content: normalizedContent } : {}),
-        });
-
-        const noteHandler = anchorNoteRequestHandler.handler(ctx.integration, { noteId: input.noteId });
-        await noteHandler.invalidateAsync();
-
-        return updatedNote;
-      } catch (error) {
-        if (error instanceof ResponseError && error.statusCode === 400) {
-          logger.warn("Anchor update note failed validation", {
-            noteId: input.noteId,
-            integrationId: ctx.integration.id,
-            contentLength: input.content?.length ?? 0,
-            contentIsJsonDelta: input.content ? isJsonDeltaString(input.content) : false,
-            contentNormalized: isContentNormalized,
-          });
-        }
-
-        if (error instanceof ResponseError && error.statusCode === 403) {
-          throw new TRPCError({
-            code: "FORBIDDEN",
-            message: "You do not have permission to edit this note",
-          });
-        }
-
-        if (error instanceof ResponseError && error.statusCode === 404) {
-          throw new TRPCError({
-            code: "NOT_FOUND",
-            message: "Note not found",
-          });
-        }
-
-        throw error;
-      }
-    }),
-});

packages/api/src/router/widgets/index.ts

@@ -3,7 +3,6 @@ import { lazy } from "@trpc/server";
 import { createTRPCRouter } from "../../trpc";
 
 export const widgetRouter = createTRPCRouter({
-  anchorNotes: lazy(() => import("./anchor-notes").then((mod) => mod.anchorNotesRouter)),
   coolify: lazy(() => import("./coolify").then((mod) => mod.coolifyRouter)),
   immich: lazy(() => import("./immich").then((mod) => mod.immichRouter)),
   notebook: lazy(() => import("./notebook").then((mod) => mod.notebookRouter)),
@@ -27,7 +26,5 @@ export const widgetRouter = createTRPCRouter({
   networkController: lazy(() => import("./network-controller").then((mod) => mod.networkControllerRouter)),
   firewall: lazy(() => import("./firewall").then((mod) => mod.firewallRouter)),
   notifications: lazy(() => import("./notifications").then((mod) => mod.notificationsRouter)),
-  timetable: lazy(() => import("./timetable").then((mod) => mod.timetableRouter)),
   tracearr: lazy(() => import("./tracearr").then((mod) => mod.tracearrRouter)),
-  speedtestTracker: lazy(() => import("./speedtest-tracker").then((mod) => mod.speedtestTrackerRouter)),
 });

packages/api/src/router/widgets/rssFeed.ts

@@ -1,4 +1,3 @@
-import { observable } from "@trpc/server/observable";
 import SuperJSON from "superjson";
 import { z } from "zod/v4";
 
@@ -6,59 +5,45 @@ import type { Session } from "@homarr/auth";
 import type { Database } from "@homarr/db";
 import { eq } from "@homarr/db";
 import { items, users } from "@homarr/db/schema";
-import type { ExtendedFeedEntry } from "@homarr/request-handler/rss-feeds";
 import { rssFeedsRequestHandler } from "@homarr/request-handler/rss-feeds";
 
 import type { WidgetComponentProps } from "../../../../widgets/src";
 import { createTRPCRouter, publicProcedure } from "../../trpc";
 
-const feedsInput = z.object({
-  urls: z.array(z.string()).max(100),
-  maximumAmountPosts: z.number(),
-});
-
 export const rssFeedRouter = createTRPCRouter({
-  getFeeds: publicProcedure.input(feedsInput).query(async ({ ctx, input }) => {
-    const urls = (await canAccessAllFeedsAsync(ctx.db, ctx.session))
-      ? input.urls
-      : await restrictUrlsAsync(ctx.db, input.urls);
-
-    const rssFeeds = await Promise.all(
-      urls.map(async (url) => {
-        const innerHandler = rssFeedsRequestHandler.handler({
-          url,
-          count: input.maximumAmountPosts,
-        });
-        return await innerHandler.getCachedOrUpdatedDataAsync({
-          forceUpdate: false,
-        });
+  getFeeds: publicProcedure
+    .input(
+      z.object({
+        urls: z.array(z.string()).max(100),
+        maximumAmountPosts: z.number(),
       }),
-    );
+    )
+    .query(async ({ ctx, input }) => {
+      const urls = (await canAccessAllFeedsAsync(ctx.db, ctx.session))
+        ? input.urls
+        : await restrictUrlsAsync(ctx.db, input.urls);
 
-    return rssFeeds
-      .flatMap((rssFeed) => rssFeed.data.entries)
-      .slice(0, input.maximumAmountPosts)
-      .sort((entryA, entryB) => {
-        return entryA.published && entryB.published
-          ? new Date(entryB.published).getTime() - new Date(entryA.published).getTime()
-          : 0;
-      });
-  }),
-  subscribeFeeds: publicProcedure.input(feedsInput).subscription(({ input }) => {
-    // It is not necessary to check access to all feeds here, as the client will only subscribe to feeds which already exist
-    return observable<{ url: string; entries: ExtendedFeedEntry[] }>((emit) => {
-      const unsubscribes = input.urls.map((url) => {
-        const innerHandler = rssFeedsRequestHandler.handler({ url, count: input.maximumAmountPosts });
-        return innerHandler.subscribe((data) => {
-          emit.next({ url, entries: data.entries });
+      const rssFeeds = await Promise.all(
+        urls.map(async (url) => {
+          const innerHandler = rssFeedsRequestHandler.handler({
+            url,
+            count: input.maximumAmountPosts,
+          });
+          return await innerHandler.getCachedOrUpdatedDataAsync({
+            forceUpdate: false,
+          });
+        }),
+      );
+
+      return rssFeeds
+        .flatMap((rssFeed) => rssFeed.data.entries)
+        .slice(0, input.maximumAmountPosts)
+        .sort((entryA, entryB) => {
+          return entryA.published && entryB.published
+            ? new Date(entryB.published).getTime() - new Date(entryA.published).getTime()
+            : 0;
         });
-      });
-
-      return () => {
-        unsubscribes.forEach((unsubscribe) => unsubscribe());
-      };
-    });
-  }),
+    }),
 });
 
 export async function canAccessAllFeedsAsync(db: Database, session: Session | null) {

packages/api/src/router/widgets/speedtest-tracker.ts

@@ -1,55 +0,0 @@
-import { observable } from "@trpc/server/observable";
-
-import type { SpeedtestTrackerDashboardData } from "@homarr/integrations/types";
-import { speedtestTrackerRequestHandler } from "@homarr/request-handler/speedtest-tracker";
-
-import { createManyIntegrationMiddleware } from "../../middlewares/integration";
-import { createTRPCRouter, publicProcedure } from "../../trpc";
-
-export const speedtestTrackerRouter = createTRPCRouter({
-  getDashboard: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "speedtestTracker"))
-    .query(async ({ ctx }) => {
-      const results = await Promise.all(
-        ctx.integrations.map(async (integration) => {
-          const innerHandler = speedtestTrackerRequestHandler.handler(integration, {});
-          const { data, timestamp } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-
-          return {
-            integrationId: integration.id,
-            integrationName: integration.name,
-            integrationUrl: integration.url,
-            dashboard: data,
-            updatedAt: timestamp,
-          };
-        }),
-      );
-
-      return results;
-    }),
-
-  subscribeToDashboard: publicProcedure
-    .concat(createManyIntegrationMiddleware("query", "speedtestTracker"))
-    .subscription(({ ctx }) => {
-      return observable<{
-        integrationId: string;
-        dashboard: SpeedtestTrackerDashboardData;
-        timestamp: Date;
-      }>((emit) => {
-        const unsubscribes = ctx.integrations.map((integration) => {
-          const innerHandler = speedtestTrackerRequestHandler.handler(integration, {});
-          return innerHandler.subscribe((dashboard) => {
-            emit.next({
-              integrationId: integration.id,
-              dashboard,
-              timestamp: new Date(),
-            });
-          });
-        });
-
-        return () => {
-          unsubscribes.forEach((unsubscribe) => unsubscribe());
-        };
-      });
-    }),
-});

packages/api/src/router/widgets/timetable.ts

@@ -1,43 +0,0 @@
-import z from "zod";
-
-import { getIntegrationKindsByCategory } from "@homarr/definitions";
-import { timetableOptionsSchema } from "@homarr/integrations/types";
-import {
-  timetableGetTimetableRequestHandler,
-  timetableSearchStationsRequestHandler,
-} from "@homarr/request-handler/timetable";
-
-import { createOneIntegrationMiddleware } from "../../middlewares/integration";
-import { createTRPCRouter, publicProcedure } from "../../trpc";
-
-export const timetableRouter = createTRPCRouter({
-  getTimetable: publicProcedure
-    .concat(createOneIntegrationMiddleware("query", ...getIntegrationKindsByCategory("timetable")))
-    .input(timetableOptionsSchema)
-    .query(async ({ input, ctx }) => {
-      const innerHandler = timetableGetTimetableRequestHandler.handler(ctx.integration, {
-        stationId: input.stationId,
-        limit: input.limit,
-      });
-
-      const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-
-      return data;
-    }),
-  searchStations: publicProcedure
-    .concat(createOneIntegrationMiddleware("query", ...getIntegrationKindsByCategory("timetable")))
-    .input(
-      z.object({
-        query: z.string(),
-      }),
-    )
-    .query(async ({ input, ctx }) => {
-      const innerHandler = timetableSearchStationsRequestHandler.handler(ctx.integration, {
-        query: input.query,
-      });
-
-      const { data } = await innerHandler.getCachedOrUpdatedDataAsync({ forceUpdate: false });
-
-      return data;
-    }),
-});

packages/auth/api-key/get-api-key-session.ts

@@ -5,7 +5,7 @@ import type { Database } from "@homarr/db";
 import { eq } from "@homarr/db";
 import { apiKeys } from "@homarr/db/schema";
 
-import { comparePasswordsAsync } from "../security";
+import { hashPasswordAsync } from "../security";
 import { createSessionAsync } from "../server";
 
 const logger = createLogger({ module: "apiKeyAuth" });
@@ -41,6 +41,7 @@ export const getSessionFromApiKeyAsync = async (
     columns: {
       id: true,
       apiKey: true,
+      salt: true,
     },
     with: {
       user: {
@@ -59,9 +60,9 @@ export const getSessionFromApiKeyAsync = async (
     return null;
   }
 
-  const isValid = await comparePasswordsAsync(apiKey, apiKeyFromDb.apiKey);
+  const hashedApiKey = await hashPasswordAsync(apiKey, apiKeyFromDb.salt);
 
-  if (!isValid) {
+  if (apiKeyFromDb.apiKey !== hashedApiKey) {
     logger.warn("Failed to authenticate with api-key", { ipAddress, userAgent, reason: "API_KEY_MISMATCH" });
     return null;
   }

packages/auth/api-key/test/get-api-key-session.spec.ts

@@ -5,7 +5,7 @@ import { createId } from "@homarr/common";
 import { apiKeys, users } from "@homarr/db/schema";
 import { createDb } from "@homarr/db/test";
 
-import { hashPasswordAsync } from "../../security";
+import { createSaltAsync, hashPasswordAsync } from "../../security";
 import { getSessionFromApiKeyAsync } from "../get-api-key-session";
 
 // Mock the logger to avoid console output during tests
@@ -118,9 +118,11 @@ const setupAsync = async (options?: SetupOptions) => {
   });
 
   if (options?.token) {
+    const salt = await createSaltAsync();
     await db.insert(apiKeys).values({
       id: defaultApiKeyId,
-      apiKey: await hashPasswordAsync(options.token),
+      apiKey: await hashPasswordAsync(options.token, salt),
+      salt,
       userId: defaultUserId,
     });
   }

packages/auth/package.json

@@ -24,30 +24,30 @@
   },
   "prettier": "@homarr/prettier-config",
   "dependencies": {
-    "@auth/core": "catalog:",
-    "@auth/drizzle-adapter": "catalog:",
+    "@auth/core": "^0.41.1",
+    "@auth/drizzle-adapter": "^1.11.1",
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/db": "workspace:^0.1.0",
     "@homarr/definitions": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
-    "bcrypt": "catalog:",
-    "cookies": "catalog:",
-    "ldapts": "catalog:",
-    "next": "catalog:",
-    "next-auth": "catalog:",
-    "react": "catalog:",
-    "react-dom": "catalog:",
-    "zod": "catalog:"
+    "bcrypt": "^6.0.0",
+    "cookies": "^0.9.1",
+    "ldapts": "8.1.7",
+    "next": "16.1.6",
+    "next-auth": "5.0.0-beta.30",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "zod": "^4.2.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/bcrypt": "catalog:",
-    "@types/cookies": "catalog:",
-    "eslint": "catalog:",
-    "prettier": "catalog:",
-    "typescript": "catalog:"
+    "@types/bcrypt": "6.0.0",
+    "@types/cookies": "0.9.2",
+    "eslint": "^9.39.4",
+    "prettier": "^3.8.1",
+    "typescript": "^5.9.3"
   }
 }

packages/auth/providers/credentials/authorization/basic-authorization.ts

@@ -1,3 +1,4 @@
+import bcrypt from "bcrypt";
 import type { z } from "zod/v4";
 
 import { createLogger } from "@homarr/core/infrastructure/logs";
@@ -6,8 +7,6 @@ import { and, eq } from "@homarr/db";
 import { users } from "@homarr/db/schema";
 import type { userSignInSchema } from "@homarr/validation/user";
 
-import { comparePasswordsAsync } from "../../../security";
-
 const logger = createLogger({ module: "basicAuthorization" });
 
 export const authorizeWithBasicCredentialsAsync = async (
@@ -24,7 +23,7 @@ export const authorizeWithBasicCredentialsAsync = async (
   }
 
   logger.info("User is trying to log in. Checking password...", { userName: user.name });
-  const isValidPassword = await comparePasswordsAsync(credentials.password, user.password);
+  const isValidPassword = await bcrypt.compare(credentials.password, user.password);
 
   if (!isValidPassword) {
     logger.warn("Password for user was incorrect", { userName: user.name });

packages/auth/providers/test/basic-authorization.spec.ts

@@ -4,7 +4,7 @@ import { createId } from "@homarr/common";
 import { users } from "@homarr/db/schema";
 import { createDb } from "@homarr/db/test";
 
-import { hashPasswordAsync } from "../../security";
+import { createSaltAsync, hashPasswordAsync } from "../../security";
 import { authorizeWithBasicCredentialsAsync } from "../credentials/authorization/basic-authorization";
 
 const defaultUserId = createId();
@@ -13,10 +13,12 @@ describe("authorizeWithBasicCredentials", () => {
   test("should authorize user with correct credentials", async () => {
     // Arrange
     const db = createDb();
+    const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
       name: "test",
-      password: await hashPasswordAsync("test"),
+      salt,
+      password: await hashPasswordAsync("test", salt),
     });
 
     // Act
@@ -32,10 +34,12 @@ describe("authorizeWithBasicCredentials", () => {
   test("should not authorize user with incorrect credentials", async () => {
     // Arrange
     const db = createDb();
+    const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
       name: "test",
-      password: await hashPasswordAsync("test"),
+      salt,
+      password: await hashPasswordAsync("test", salt),
     });
 
     // Act
@@ -51,10 +55,12 @@ describe("authorizeWithBasicCredentials", () => {
   test("should not authorize user with incorrect username", async () => {
     // Arrange
     const db = createDb();
+    const salt = await createSaltAsync();
     await db.insert(users).values({
       id: defaultUserId,
       name: "test",
-      password: await hashPasswordAsync("test"),
+      salt,
+      password: await hashPasswordAsync("test", salt),
     });
 
     // Act

packages/auth/security.ts

@@ -1,15 +1,9 @@
 import bcrypt from "bcrypt";
 
-export const hashPasswordAsync = async (password: string) => {
-  return bcrypt.hash(password, 10);
+export const createSaltAsync = async () => {
+  return bcrypt.genSalt(10);
 };
 
-/**
- * Compares a plaintext password with a hashed password and returns whether they match.
- * @param password plaintext password
- * @param hash hashed password
- * @returns wheter it is the same
- */
-export const comparePasswordsAsync = async (password: string, hash: string) => {
-  return await bcrypt.compare(password, hash);
+export const hashPasswordAsync = async (password: string, salt: string) => {
+  return bcrypt.hash(password, salt);
 };

packages/auth/test/security.spec.ts

@@ -1,11 +1,25 @@
 import { describe, expect, it } from "vitest";
 
-import { comparePasswordsAsync, hashPasswordAsync } from "../security";
+import { createSaltAsync, hashPasswordAsync } from "../security";
+
+describe("createSalt should return a salt", () => {
+  it("should return a salt", async () => {
+    const result = await createSaltAsync();
+    expect(result).toBeDefined();
+    expect(result.length).toBeGreaterThan(25);
+  });
+  it("should return a different salt each time", async () => {
+    const result1 = await createSaltAsync();
+    const result2 = await createSaltAsync();
+    expect(result1).not.toEqual(result2);
+  });
+});
 
 describe("hashPassword should return a hash", () => {
   it("should return a hash", async () => {
     const password = "password";
-    const result = await hashPasswordAsync(password);
+    const salt = await createSaltAsync();
+    const result = await hashPasswordAsync(password, salt);
     expect(result).toBeDefined();
     expect(result.length).toBeGreaterThan(55);
     expect(result).not.toEqual(password);
@@ -13,44 +27,21 @@ describe("hashPassword should return a hash", () => {
   it("should return a different hash each time", async () => {
     const password = "password";
     const password2 = "another password";
+    const salt = await createSaltAsync();
 
-    const result1 = await hashPasswordAsync(password);
-    const result2 = await hashPasswordAsync(password2);
+    const result1 = await hashPasswordAsync(password, salt);
+    const result2 = await hashPasswordAsync(password2, salt);
 
     expect(result1).not.toEqual(result2);
   });
   it("should return a different hash for the same password with different salts", async () => {
     const password = "password";
+    const salt1 = await createSaltAsync();
+    const salt2 = await createSaltAsync();
 
-    const result1 = await hashPasswordAsync(password);
-    const result2 = await hashPasswordAsync(password);
+    const result1 = await hashPasswordAsync(password, salt1);
+    const result2 = await hashPasswordAsync(password, salt2);
 
     expect(result1).not.toEqual(result2);
   });
 });
-
-describe("comparePasswordsAsync should compare passwords correctly", () => {
-  it("should return true for matching passwords", async () => {
-    // Arrange
-    const password = "password";
-    const hash = await hashPasswordAsync(password);
-
-    // Act
-    const result = await comparePasswordsAsync(password, hash);
-
-    // Assert
-    expect(result).toBe(true);
-  });
-  it("should return false for non-matching passwords", async () => {
-    // Arrange
-    const password = "password";
-    const wrongPassword = "wrongpassword";
-    const hash = await hashPasswordAsync(password);
-
-    // Act
-    const result = await comparePasswordsAsync(wrongPassword, hash);
-
-    // Assert
-    expect(result).toBe(false);
-  });
-});

packages/boards/package.json

@@ -25,14 +25,14 @@
   "prettier": "@homarr/prettier-config",
   "dependencies": {
     "@homarr/api": "workspace:^0.1.0",
-    "react": "catalog:",
-    "react-dom": "catalog:"
+    "react": "19.2.4",
+    "react-dom": "19.2.4"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/cli/package.json

@@ -25,19 +25,19 @@
   },
   "prettier": "@homarr/prettier-config",
   "dependencies": {
-    "@drizzle-team/brocli": "catalog:",
+    "@drizzle-team/brocli": "^0.11.0",
     "@homarr/auth": "workspace:^0.1.0",
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/db": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
-    "dotenv": "catalog:"
+    "dotenv": "^17.3.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "esbuild": "catalog:",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "esbuild": "^0.27.3",
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/cli/src/commands/recreate-admin.ts

@@ -1,6 +1,6 @@
 import { command, string } from "@drizzle-team/brocli";
 
-import { hashPasswordAsync } from "@homarr/auth";
+import { createSaltAsync, hashPasswordAsync } from "@homarr/auth";
 import { createId } from "@homarr/common";
 import { generateSecureRandomToken } from "@homarr/common/server";
 import { and, count, db, eq } from "@homarr/db";
@@ -67,8 +67,9 @@ export const recreateAdmin = command({
       permission: "admin",
     });
 
+    const salt = await createSaltAsync();
     const password = generateSecureRandomToken(24);
-    const hashedPassword = await hashPasswordAsync(password);
+    const hashedPassword = await hashPasswordAsync(password, salt);
 
     const userId = createId();
     await db.insert(users).values({
@@ -76,6 +77,7 @@ export const recreateAdmin = command({
       name: result.data,
       provider: "credentials",
       password: hashedPassword,
+      salt,
     });
 
     await db.insert(groupMembers).values({

packages/cli/src/commands/reset-password.ts

@@ -22,7 +22,7 @@ export const resetPassword = command({
       where: and(eq(users.name, options.username), eq(users.provider, "credentials")),
     });
 
-    if (!user?.password) {
+    if (!user?.salt) {
       console.error(`User ${options.username} not found`);
       return;
     }
@@ -33,7 +33,7 @@ export const resetPassword = command({
     await db
       .update(users)
       .set({
-        password: await hashPasswordAsync(newPassword),
+        password: await hashPasswordAsync(newPassword, user.salt),
       })
       .where(eq(users.id, user.id));
 

packages/cli/src/commands/users-update-password.ts

@@ -29,7 +29,7 @@ export const usersUpdatePassword = command({
       where: options.id ? eq(users.id, options.id) : eq(users.name, options.username!),
     });
 
-    if (!user?.password) {
+    if (!user?.salt) {
       console.error("User not found or has no credentials record");
       return;
     }
@@ -37,7 +37,7 @@ export const usersUpdatePassword = command({
     await db
       .update(users)
       .set({
-        password: await hashPasswordAsync(options.password),
+        password: await hashPasswordAsync(options.password, user.salt),
       })
       .where(eq(users.id, user.id));
 

packages/common/package.json

@@ -27,22 +27,22 @@
   "prettier": "@homarr/prettier-config",
   "dependencies": {
     "@homarr/core": "workspace:^0.1.0",
-    "@paralleldrive/cuid2": "catalog:",
-    "cookie": "catalog:",
-    "dayjs": "catalog:",
-    "next": "catalog:",
-    "octokit": "catalog:",
-    "react": "catalog:",
-    "react-dom": "catalog:",
-    "undici": "catalog:",
-    "zod": "catalog:",
-    "zod-validation-error": "catalog:"
+    "@paralleldrive/cuid2": "^3.3.0",
+    "cookie": "1.1.1",
+    "dayjs": "^1.11.19",
+    "next": "16.1.6",
+    "octokit": "^5.0.5",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "undici": "7.18.2",
+    "zod": "^4.2.1",
+    "zod-validation-error": "^5.0.0"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/common/src/stopwatch.ts

@@ -41,10 +41,6 @@ export class Stopwatch {
     return dayjs().millisecond(this.startTime).fromNow(true);
   }
 
-  getElapsedInFormattedMilliseconds() {
-    return `${this.getElapsedInMilliseconds().toFixed(0)}ms`;
-  }
-
   getElapsedInMilliseconds() {
     return performance.now() - this.startTime;
   }

packages/core/package.json

@@ -37,24 +37,24 @@
   },
   "prettier": "@homarr/prettier-config",
   "dependencies": {
-    "@t3-oss/env-nextjs": "catalog:",
-    "better-sqlite3": "catalog:",
-    "dns-caching": "catalog:",
-    "drizzle-orm": "catalog:",
-    "ioredis": "catalog:",
-    "mysql2": "catalog:",
-    "pg": "catalog:",
-    "superjson": "catalog:",
-    "winston": "catalog:",
-    "zod": "catalog:"
+    "@t3-oss/env-nextjs": "^0.13.10",
+    "better-sqlite3": "^12.6.2",
+    "dns-caching": "^0.2.9",
+    "drizzle-orm": "^0.45.1",
+    "ioredis": "5.10.0",
+    "mysql2": "3.19.1",
+    "pg": "^8.20.0",
+    "superjson": "2.2.6",
+    "winston": "3.19.0",
+    "zod": "^4.2.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/better-sqlite3": "catalog:",
-    "@types/pg": "catalog:",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "@types/better-sqlite3": "7.6.13",
+    "@types/pg": "^8.18.0",
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/core/src/infrastructure/logs/format/metadata.ts

@@ -1,10 +1,7 @@
 import { ErrorWithMetadata } from "@homarr/core/infrastructure/logs/error";
 
 export const formatMetadata = (metadata: Record<string, unknown> | Error, ignoreKeys?: string[]) => {
-  const metadataObject =
-    metadata instanceof ErrorWithMetadata || ("metadata" in metadata && typeof metadata.metadata === "object")
-      ? (metadata.metadata as Record<string, unknown>)
-      : metadata;
+  const metadataObject = metadata instanceof ErrorWithMetadata ? metadata.metadata : metadata;
 
   const filteredMetadata = Object.keys(metadataObject)
     .filter((key) => !ignoreKeys?.includes(key))

packages/cron-job-api/package.json

@@ -28,19 +28,21 @@
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^0.1.0",
     "@homarr/cron-jobs": "workspace:^0.1.0",
-    "@tanstack/react-query": "catalog:",
-    "@trpc/client": "catalog:",
-    "@trpc/server": "catalog:",
-    "@trpc/tanstack-react-query": "catalog:",
-    "react": "catalog:",
-    "zod": "catalog:"
+    "@tanstack/react-query": "^5.90.21",
+    "@trpc/client": "^11.12.0",
+    "@trpc/server": "^11.12.0",
+    "@trpc/tanstack-react-query": "^11.12.0",
+    "node-cron": "^4.2.1",
+    "react": "19.2.4",
+    "zod": "^4.2.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "@types/react": "catalog:",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "@types/node-cron": "^3.0.11",
+    "@types/react": "19.2.14",
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/cron-job-api/src/index.ts

@@ -1,4 +1,5 @@
 import { initTRPC, TRPCError } from "@trpc/server";
+import { validate } from "node-cron";
 import { z } from "zod/v4";
 
 import type { JobGroupKeys } from "@homarr/cron-jobs";
@@ -12,7 +13,7 @@ export const jobNameSchema = z.enum(jobGroup.getKeys());
 export interface IJobManager {
   startAsync(name: JobGroupKeys): Promise<void>;
   triggerAsync(name: JobGroupKeys): Promise<void>;
-  stop(name: JobGroupKeys): void;
+  stopAsync(name: JobGroupKeys): Promise<void>;
   updateIntervalAsync(name: JobGroupKeys, cron: string): Promise<void>;
   disableAsync(name: JobGroupKeys): Promise<void>;
   enableAsync(name: JobGroupKeys): Promise<void>;
@@ -51,6 +52,10 @@ const apiKeyProcedure = t.procedure.use(({ ctx, next }) => {
   });
 });
 
+export const cronExpressionSchema = z.string().refine((expression) => validate(expression), {
+  error: "Invalid cron expression",
+});
+
 export const jobRouter = createTrpcRouter({
   start: apiKeyProcedure.input(jobNameSchema).mutation(async ({ input, ctx }) => {
     await ctx.manager.startAsync(input);
@@ -58,14 +63,14 @@ export const jobRouter = createTrpcRouter({
   trigger: apiKeyProcedure.input(jobNameSchema).mutation(async ({ input, ctx }) => {
     await ctx.manager.triggerAsync(input);
   }),
-  stop: apiKeyProcedure.input(jobNameSchema).mutation(({ input, ctx }) => {
-    ctx.manager.stop(input);
+  stop: apiKeyProcedure.input(jobNameSchema).mutation(async ({ input, ctx }) => {
+    await ctx.manager.stopAsync(input);
   }),
   updateInterval: apiKeyProcedure
     .input(
       z.object({
         name: jobNameSchema,
-        cron: z.string(),
+        cron: cronExpressionSchema,
       }),
     )
     .mutation(async ({ input, ctx }) => {

packages/cron-job-status/package.json

@@ -29,7 +29,7 @@
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/cron-jobs-core/package.json

@@ -27,13 +27,14 @@
     "@homarr/common": "workspace:^0.1.0",
     "@homarr/core": "workspace:^",
     "@homarr/db": "workspace:^0.1.0",
-    "croner": "catalog:"
+    "node-cron": "^4.2.1"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "@types/node-cron": "^3.0.11",
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/cron-jobs-core/src/creator.ts

@@ -1,4 +1,4 @@
-import { Cron } from "croner";
+import { createTask, validate } from "node-cron";
 
 import { Stopwatch } from "@homarr/common";
 import type { MaybePromise } from "@homarr/common/types";
@@ -83,15 +83,10 @@ const createCallback = <TAllowedNames extends string, TName extends TAllowedName
           ? defaultCronExpression
           : (configuration?.cronExpression ?? defaultCronExpression);
 
-        const scheduledTask = new Cron(
-          cronExpression,
-          {
-            name,
-            timezone: creatorOptions.timezone,
-            paused: true,
-          },
-          () => void catchingCallbackAsync(),
-        );
+        const scheduledTask = createTask(cronExpression, () => void catchingCallbackAsync(), {
+          name,
+          timezone: creatorOptions.timezone,
+        });
         creatorOptions.logger.logDebug("The scheduled task for cron job was created", {
           name,
           cronExpression: defaultCronExpression,
@@ -121,7 +116,6 @@ const createCallback = <TAllowedNames extends string, TName extends TAllowedName
       },
       preventManualExecution: options.preventManualExecution ?? false,
       preventCustomInterval: options.preventCustomInterval ?? false,
-      timezone: creatorOptions.timezone,
     };
   };
 };
@@ -138,6 +132,13 @@ export const createCronJobCreator = <TAllowedNames extends string = string>(
     defaultCronExpression: TExpression,
     options: CreateCronJobOptions = { runOnStart: false },
   ) => {
+    creatorOptions.logger.logDebug("Validating cron expression for cron job", {
+      name,
+      cronExpression: defaultCronExpression,
+    });
+    if (!validate(defaultCronExpression)) {
+      throw new Error(`Invalid cron expression '${defaultCronExpression}' for job '${name}'`);
+    }
     creatorOptions.logger.logDebug("Cron job expression for cron job is valid", {
       name,
       cronExpression: defaultCronExpression,

packages/cron-jobs-core/src/group.ts

@@ -1,4 +1,4 @@
-import type { Cron } from "croner";
+import type { ScheduledTask } from "node-cron";
 
 import { objectEntries, objectKeys } from "@homarr/common";
 import { db } from "@homarr/db";
@@ -34,7 +34,7 @@ export const createJobGroupCreator = <TAllowedNames extends string = string>(
       });
     }
 
-    const tasks = new Map<string, Cron>();
+    const tasks = new Map<string, ScheduledTask>();
 
     return {
       initializeAsync: async () => {
@@ -62,7 +62,7 @@ export const createJobGroupCreator = <TAllowedNames extends string = string>(
           name: job.name,
         });
         await job.onStartAsync();
-        tasks.get(name as string)?.resume();
+        await tasks.get(name as string)?.start();
       },
       startAllAsync: async () => {
         for (const job of jobRegistry.values()) {
@@ -74,7 +74,7 @@ export const createJobGroupCreator = <TAllowedNames extends string = string>(
             name: job.name,
           });
           await job.onStartAsync();
-          tasks.get(job.name)?.resume();
+          await tasks.get(job.name)?.start();
         }
       },
       runManuallyAsync: async (name: keyof TJobs) => {
@@ -87,23 +87,23 @@ export const createJobGroupCreator = <TAllowedNames extends string = string>(
         options.logger.logInfo("Running schedule cron job manually.", {
           name: job.name,
         });
-        await tasks.get(name as string)?.trigger();
+        await tasks.get(name as string)?.execute();
       },
-      stop: (name: keyof TJobs) => {
+      stopAsync: async (name: keyof TJobs) => {
         const job = jobRegistry.get(name as string);
         if (!job) return;
 
         options.logger.logInfo("Stopping schedule of cron job.", {
           name: job.name,
         });
-        tasks.get(name as string)?.pause();
+        await tasks.get(name as string)?.stop();
       },
-      stopAll: () => {
+      stopAllAsync: async () => {
         for (const job of jobRegistry.values()) {
           options.logger.logInfo("Stopping schedule of cron job.", {
             name: job.name,
           });
-          tasks.get(job.name)?.pause();
+          await tasks.get(job.name)?.stop();
         }
       },
       getJobRegistry() {
@@ -112,8 +112,8 @@ export const createJobGroupCreator = <TAllowedNames extends string = string>(
       getTask(name: keyof TJobs) {
         return tasks.get(name as string) ?? null;
       },
-      setTask(name: keyof TJobs, cron: Cron) {
-        tasks.set(name as string, cron);
+      setTask(name: keyof TJobs, task: ScheduledTask) {
+        tasks.set(name as string, task);
       },
       getKeys() {
         return objectKeys(jobs);

packages/cron-jobs/package.json

@@ -38,13 +38,13 @@
     "@homarr/server-settings": "workspace:^0.1.0",
     "@homarr/translation": "workspace:^0.1.0",
     "@homarr/validation": "workspace:^0.1.0",
-    "semver-parser": "catalog:"
+    "semver-parser": "^4.1.8"
   },
   "devDependencies": {
     "@homarr/eslint-config": "workspace:^0.2.0",
     "@homarr/prettier-config": "workspace:^0.1.0",
     "@homarr/tsconfig": "workspace:^0.1.0",
-    "eslint": "catalog:",
-    "typescript": "catalog:"
+    "eslint": "^9.39.4",
+    "typescript": "^5.9.3"
   }
 }

packages/cron-jobs/src/index.ts

@@ -18,7 +18,6 @@ import { mediaServerJob } from "./jobs/integrations/media-server";
 import { mediaTranscodingJob } from "./jobs/integrations/media-transcoding";
 import { networkControllerJob } from "./jobs/integrations/network-controller";
 import { refreshNotificationsJob } from "./jobs/integrations/notifications";
-import { timetableJob } from "./jobs/integrations/timetable";
 import { tracearrJob } from "./jobs/integrations/tracearr";
 import { minecraftServerStatusJob } from "./jobs/minecraft-server-status";
 import { pingJob } from "./jobs/ping";
@@ -52,7 +51,6 @@ export const jobGroup = createCronJobGroup({
   firewallInterfaces: firewallInterfacesJob,
   refreshNotifications: refreshNotificationsJob,
   weather: weatherJob,
-  timetable: timetableJob,
   tracearr: tracearrJob,
 });
 

packages/cron-jobs/src/jobs/icons-updater.ts

@@ -1,12 +1,9 @@
-import type { MySqlRawQueryResult } from "drizzle-orm/mysql2";
-import type { QueryResult } from "pg";
-
 import { createId, splitToNChunks, Stopwatch } from "@homarr/common";
 import { env } from "@homarr/common/env";
 import { createLogger } from "@homarr/core/infrastructure/logs";
 import { EVERY_WEEK } from "@homarr/cron-jobs-core/expressions";
 import type { InferInsertModel } from "@homarr/db";
-import { and, db, eq, handleTransactionsAsync, inArray, notInArray, or } from "@homarr/db";
+import { db, handleTransactionsAsync, inArray, sql } from "@homarr/db";
 import { iconRepositories, icons } from "@homarr/db/schema";
 import { fetchIconsAsync } from "@homarr/icons";
 
@@ -29,7 +26,7 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
   logger.info("Fetched icons from repositories", {
     repositoryCount: repositoryIconGroups.length,
     iconCount: countIcons,
-    duration: stopWatch.getElapsedInFormattedMilliseconds(),
+    duration: stopWatch.getElapsedInHumanWords(),
   });
 
   const databaseIconRepositories = await db.query.iconRepositories.findMany({
@@ -38,7 +35,7 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
     },
   });
 
-  const skippedChecksums = new Map<string, string[]>();
+  const skippedChecksums: `${string}.${string}`[] = [];
   let countDeleted = 0;
   let countInserted = 0;
 
@@ -53,7 +50,6 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
     if (!repositoryIconGroup.success) {
       continue;
     }
-    const localSkippedChecksums: string[] = [];
 
     const repositoryInDb = databaseIconRepositories.find(
       (dbIconGroup) => dbIconGroup.slug === repositoryIconGroup.slug,
@@ -70,7 +66,7 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
 
     for (const icon of repositoryIconGroup.icons) {
       if (dbIconsInRepository.some((dbIcon) => dbIcon.checksum === icon.checksum)) {
-        localSkippedChecksums.push(icon.checksum);
+        skippedChecksums.push(`${iconRepositoryId}.${icon.checksum}`);
         continue;
       }
 
@@ -83,38 +79,19 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
       });
       countInserted++;
     }
-
-    skippedChecksums.set(iconRepositoryId, localSkippedChecksums);
   }
 
+  const deadIcons = allDbIcons.filter(
+    (icon) => !skippedChecksums.includes(`${icon.iconRepositoryId}.${icon.checksum}`),
+  );
+
   const deadIconRepositories = databaseIconRepositories.filter(
     (iconRepository) => !repositoryIconGroups.some((group) => group.slug === iconRepository.slug),
   );
 
-  const deadIconsFilter = or(
-    ...[...skippedChecksums.entries()].map(([iconRepositoryId, checksums]) =>
-      and(eq(icons.iconRepositoryId, iconRepositoryId), notInArray(icons.checksum, checksums)),
-    ),
-  );
-
   await handleTransactionsAsync(db, {
     async handleAsync(db, schema) {
       await db.transaction(async (transaction) => {
-        const result = (await transaction.delete(schema.icons).where(deadIconsFilter)) as
-          | MySqlRawQueryResult
-          | QueryResult;
-
-        countDeleted += Array.isArray(result) ? result[0].affectedRows : (result.rowCount ?? 0);
-
-        if (deadIconRepositories.length >= 1) {
-          await transaction.delete(schema.iconRepositories).where(
-            inArray(
-              iconRepositories.id,
-              deadIconRepositories.map((iconRepository) => iconRepository.id),
-            ),
-          );
-        }
-
         if (newIconRepositories.length >= 1) {
           await transaction.insert(schema.iconRepositories).values(newIconRepositories);
         }
@@ -125,12 +102,52 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
             await transaction.insert(schema.icons).values(chunck);
           }
         }
+        if (deadIcons.length >= 1) {
+          await transaction.delete(schema.icons).where(
+            inArray(
+              // Combine iconRepositoryId and checksum to allow same icons on different repositories
+              sql`concat(${icons.iconRepositoryId}, '.', ${icons.checksum})`,
+              deadIcons.map((icon) => `${icon.iconRepositoryId}.${icon.checksum}`),
+            ),
+          );
+        }
+
+        if (deadIconRepositories.length >= 1) {
+          await transaction.delete(schema.iconRepositories).where(
+            inArray(
+              iconRepositories.id,
+              deadIconRepositories.map((iconRepository) => iconRepository.id),
+            ),
+          );
+        }
+
+        countDeleted += deadIcons.length;
       });
     },
     handleSync() {
       db.transaction((transaction) => {
-        const result = transaction.delete(icons).where(deadIconsFilter).run();
-        countDeleted += result.changes;
+        if (newIconRepositories.length >= 1) {
+          transaction.insert(iconRepositories).values(newIconRepositories).run();
+        }
+
+        if (newIcons.length >= 1) {
+          // We only insert 5000 icons at a time to avoid SQLite limitations
+          for (const chunck of splitToNChunks(newIcons, Math.ceil(newIcons.length / 5000))) {
+            transaction.insert(icons).values(chunck).run();
+          }
+        }
+        if (deadIcons.length >= 1) {
+          transaction
+            .delete(icons)
+            .where(
+              inArray(
+                // Combine iconRepositoryId and checksum to allow same icons on different repositories
+                sql`concat(${icons.iconRepositoryId}, '.', ${icons.checksum})`,
+                deadIcons.map((icon) => `${icon.iconRepositoryId}.${icon.checksum}`),
+              ),
+            )
+            .run();
+        }
 
         if (deadIconRepositories.length >= 1) {
           transaction
@@ -144,22 +161,13 @@ export const iconsUpdaterJob = createCronJob("iconsUpdater", EVERY_WEEK, {
             .run();
         }
 
-        if (newIconRepositories.length >= 1) {
-          transaction.insert(iconRepositories).values(newIconRepositories).run();
-        }
-
-        if (newIcons.length >= 1) {
-          // We only insert 5000 icons at a time to avoid SQLite limitations
-          for (const chunck of splitToNChunks(newIcons, Math.ceil(newIcons.length / 5000))) {
-            transaction.insert(icons).values(chunck).run();
-          }
-        }
+        countDeleted += deadIcons.length;
       });
     },
   });
 
   logger.info("Updated icons in database", {
-    duration: stopWatch.getElapsedInFormattedMilliseconds(),
+    duration: stopWatch.getElapsedInHumanWords(),
     added: countInserted,
     deleted: countDeleted,
   });