Update CHANGELOG.md (#16447)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -521,6 +521,27 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-08-12
+
+### 🆕 New Scripts
+
+  - Stalwart ([#16388](https://github.com/community-scripts/ProxmoxVE/pull/16388))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - networkoptimizer: mitigate dotnet publish hang in LXC [@MickLesk](https://github.com/MickLesk) ([#16436](https://github.com/community-scripts/ProxmoxVE/pull/16436))
+    - lazylibrarian: reinstall deps after git pull on update [@MickLesk](https://github.com/MickLesk) ([#16435](https://github.com/community-scripts/ProxmoxVE/pull/16435))
+    - wanderer: fix deprecated meilisearch upgrade flag [@MickLesk](https://github.com/MickLesk) ([#16434](https://github.com/community-scripts/ProxmoxVE/pull/16434))
+    - calibre-web: fix release asset filename pattern [@MickLesk](https://github.com/MickLesk) ([#16433](https://github.com/community-scripts/ProxmoxVE/pull/16433))
+    - fix(stirling-pdf): unoserver installed into the venv, and login mode truncates .env [@angusmaul](https://github.com/angusmaul) ([#16439](https://github.com/community-scripts/ProxmoxVE/pull/16439))
+    - fix(pulse): keep the container recoverable when an update fails [@rcourtman](https://github.com/rcourtman) ([#16311](https://github.com/community-scripts/ProxmoxVE/pull/16311))
+
+  - #### 🔧 Refactor
+
+    - ConvertX: add some new dependencies [@MickLesk](https://github.com/MickLesk) ([#16437](https://github.com/community-scripts/ProxmoxVE/pull/16437))
+
 ## 2026-08-11
 
 ### 🚀 Updated Scripts

ct/calibre-web.sh

@@ -38,7 +38,7 @@ function update_script() {
     create_backup /opt/calibre-web/app.db \
       /opt/calibre-web/data
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibre-web*.tar.gz"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibreweb*.tar.gz"
     setup_uv
 
     msg_info "Installing Dependencies"

ct/convertx.sh

@@ -34,7 +34,19 @@ function update_script() {
     systemctl stop convertx
     msg_info "Stopped Service"
 
-    ensure_dependencies libreoffice-writer
+    ensure_dependencies libreoffice-writer dasel graphicsmagick libemail-outlook-message-perl libheif-examples libjxl-tools resvg
+
+    if ! command -v markitdown &>/dev/null; then
+      setup_uv
+      msg_info "Installing markitdown"
+      export UV_TOOL_BIN_DIR=/usr/local/bin
+      $STD uv tool install "markitdown[all]"
+      msg_ok "Installed markitdown"
+    fi
+
+    if ! command -v vtracer &>/dev/null; then
+      fetch_and_deploy_gh_release "vtracer" "visioncortex/vtracer" "prebuild" "0.6.4" "/usr/local/bin" "vtracer-$(arch_resolve "x86_64" "aarch64")-unknown-linux-musl.tar.gz"
+    fi
 
     create_backup /opt/convertx/data
 

ct/headers/stalwart

@@ -0,0 +1,6 @@
+   _____ __        __                    __ 
+  / ___// /_____ _/ /      ______ ______/ /_
+  \__ \/ __/ __ `/ / | /| / / __ `/ ___/ __/
+ ___/ / /_/ /_/ / /| |/ |/ / /_/ / /  / /_  
+/____/\__/\__,_/_/ |__/|__/\__,_/_/   \__/  
+                                            

ct/lazylibrarian.sh

@@ -34,6 +34,7 @@ function update_script() {
 
     msg_info "Updating $APP LXC"
     $STD git -C /opt/LazyLibrarian pull origin master
+    $STD pip install --break-system-packages /opt/LazyLibrarian
     msg_ok "Updated $APP LXC"
 
     msg_info "Starting LazyLibrarian"

ct/networkoptimizer.sh

@@ -36,13 +36,16 @@ function update_script() {
     msg_ok "Stopped Service"
 
     create_backup /opt/networkoptimizer/networkoptimizer.env
-
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "networkoptimizer" "Ozark-Connect/NetworkOptimizer" "tarball"
+    restore_backup
 
     msg_info "Rebuilding NetworkOptimizer"
     RID="linux-x64"
     [[ "$(dpkg --print-architecture)" == "arm64" ]] && RID="linux-arm64"
     cd /opt/networkoptimizer
+    export MSBUILDDISABLENODEREUSE=1
+    export DOTNET_CLI_TELEMETRY_OPTOUT=1
+    export DOTNET_SYSTEM_NET_DISABLEIPV6=1
     $STD dotnet publish src/NetworkOptimizer.Web -c Release -r "$RID" --self-contained -o /opt/networkoptimizer/publish
     chmod +x /opt/networkoptimizer/publish/NetworkOptimizer.Web
     mkdir -p /opt/networkoptimizer/publish/tools
@@ -50,8 +53,6 @@ function update_script() {
     CGO_ENABLED=0 GOOS=linux GOARCH=arm64 $STD go build -trimpath -ldflags "-s -w" -o /opt/networkoptimizer/publish/tools/uwnspeedtest-linux-arm64 .
     msg_ok "Rebuilt NetworkOptimizer"
 
-    restore_backup
-
     msg_info "Starting Service"
     systemctl start networkoptimizer
     msg_ok "Started Service"

ct/pulse.sh

@@ -35,22 +35,34 @@ function update_script() {
     systemctl stop pulse*.service
     msg_ok "Stopped Services"
 
-    if [[ -f /opt/pulse/pulse ]]; then
-      rm -f /opt/pulse/pulse
+    if ! CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pulse" "rcourtman/Pulse" "prebuild" "latest" "/opt/pulse" "pulse-v*-linux-$(arch_resolve).tar.gz"; then
+      msg_error "Download or deployment failed - check network connectivity and GitHub API availability"
+      if systemctl start pulse 2>/dev/null || systemctl start pulse-backend 2>/dev/null; then
+        msg_ok "Restarted the previously installed ${APP}"
+      else
+        msg_error "${APP} could not be restarted - reinstall it or restore the container from a backup"
+      fi
+      exit 250
     fi
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pulse" "rcourtman/Pulse" "prebuild" "latest" "/opt/pulse" "pulse-v*-linux-$(arch_resolve).tar.gz"
     ln -sf /opt/pulse/bin/pulse /usr/local/bin/pulse
     mkdir -p /etc/pulse
     chown pulse:pulse /etc/pulse
     chown -R pulse:pulse /opt/pulse
     chmod 700 /etc/pulse
+    UNIT_WAS_ENABLED=0
     if [[ -f "$SERVICE_PATH"/pulse-backend.service ]]; then
+      if [[ $(systemctl is-enabled pulse-backend) == enabled ]]; then
+        UNIT_WAS_ENABLED=1
+      fi
+      systemctl disable -q pulse-backend.service 2>/dev/null || true
       mv "$SERVICE_PATH"/pulse-backend.service "$SERVICE_PATH"/pulse.service
     fi
     sed -i -e 's|pulse/pulse|pulse/bin/pulse|' \
       -e 's/^Environment="API.*$//' "$SERVICE_PATH"/pulse.service
     systemctl daemon-reload
+    if [[ "$UNIT_WAS_ENABLED" == "1" ]]; then
+      systemctl enable -q pulse
+    fi
     if grep -q 'pulse-home:/bin/bash' /etc/passwd; then
       usermod -s /usr/sbin/nologin pulse
     fi

ct/stalwart.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/stalwartlabs/stalwart
+
+APP="Stalwart"
+var_tags="${var_tags:-mail;smtp;imap}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/stalwart ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "stalwart" "stalwartlabs/stalwart"; then
+    msg_info "Stopping Service"
+    systemctl stop stalwart
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "stalwart" "stalwartlabs/stalwart" "prebuild" "latest" "/opt/stalwart" "stalwart-$(arch_resolve x86_64 aarch64)-unknown-linux-gnu.tar.gz"
+    chmod +x /opt/stalwart/stalwart
+
+    msg_info "Starting Service"
+    systemctl start stalwart
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8080/admin${CL}"
+echo -e "${INFO}${YW}The bootstrap admin password was printed to the service log:${CL}"
+echo -e "${TAB}${DEFAULT}${BGN}journalctl -u stalwart | grep -A8 'bootstrap mode'${CL}"

ct/wanderer.sh

@@ -66,7 +66,7 @@ function update_script() {
     msg_ok "Stopped service"
 
     fetch_and_deploy_gh_release "meilisearch" "meilisearch/meilisearch" "binary" "latest" "/opt/wanderer/source/search"
-    grep -q -- '--experimental-dumpless-upgrade' /opt/wanderer/start.sh || sed -i 's|meilisearch --master-key|meilisearch --experimental-dumpless-upgrade --master-key|' /opt/wanderer/start.sh
+    grep -q -- '--upgrade-db' /opt/wanderer/start.sh || sed -i 's|meilisearch --master-key|meilisearch --upgrade-db --master-key|' /opt/wanderer/start.sh
 
     msg_info "Starting service"
     systemctl start wanderer-web

install/calibre-web-install.sh

@@ -32,7 +32,7 @@ msg_info "Installing Calibre (for eBook conversion)"
 $STD apt install -y calibre
 msg_ok "Installed Calibre"
 
-fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibre-web*.tar.gz"
+fetch_and_deploy_gh_release "Calibre-Web" "janeczku/calibre-web" "prebuild" "latest" "/opt/calibre-web" "calibreweb*.tar.gz"
 setup_uv
 
 msg_info "Installing Python Dependencies"

install/convertx-install.sh

@@ -20,10 +20,15 @@ msg_info "Installing Dependencies"
 $STD apt install -y \
   assimp-utils \
   calibre \
+  dasel \
   dcraw \
   dvisvgm \
   ffmpeg \
+  graphicsmagick \
   inkscape \
+  libemail-outlook-message-perl \
+  libheif-examples \
+  libjxl-tools \
   libreoffice-writer \
   libva2 \
   libvips-tools \
@@ -33,6 +38,7 @@ $STD apt install -y \
   poppler-utils \
   potrace \
   python3-numpy \
+  resvg \
   texlive \
   texlive-fonts-recommended \
   texlive-latex-extra \
@@ -40,6 +46,15 @@ $STD apt install -y \
   texlive-xetex
 msg_ok "Installed Dependencies"
 
+setup_uv
+
+msg_info "Installing markitdown"
+export UV_TOOL_BIN_DIR=/usr/local/bin
+$STD uv tool install "markitdown[all]"
+msg_ok "Installed markitdown"
+
+fetch_and_deploy_gh_release "vtracer" "visioncortex/vtracer" "prebuild" "0.6.4" "/usr/local/bin" "vtracer-$(arch_resolve "x86_64" "aarch64")-unknown-linux-musl.tar.gz"
+
 NODE_VERSION="22" NODE_MODULE="bun" setup_nodejs
 fetch_and_deploy_gh_release "ConvertX" "C4illin/ConvertX" "tarball" "latest" "/opt/convertx"
 

install/networkoptimizer-install.sh

@@ -35,6 +35,9 @@ RID="linux-x64"
 [[ "$(dpkg --print-architecture)" == "arm64" ]] && RID="linux-arm64"
 cd /opt/networkoptimizer
 export MinVerVersionOverride="$(cat ~/.networkoptimizer)"
+export MSBUILDDISABLENODEREUSE=1
+export DOTNET_CLI_TELEMETRY_OPTOUT=1
+export DOTNET_SYSTEM_NET_DISABLEIPV6=1
 $STD dotnet publish src/NetworkOptimizer.Web -c Release -r "$RID" --self-contained -o /opt/networkoptimizer/publish
 chmod +x /opt/networkoptimizer/publish/NetworkOptimizer.Web
 msg_ok "Built NetworkOptimizer"

install/paperless-ngx-install.sh

@@ -151,7 +151,7 @@ Requires=redis.service
 
 [Service]
 WorkingDirectory=/opt/paperless/src
-ExecStartPre=uv run -- python manage.py document_index reindex --if-needed --no-progress-bar
+#ExecStartPre=uv run -- python manage.py document_index reindex --if-needed --no-progress-bar
 ExecStart=uv run -- granian --interface asginl --ws --loop uvloop "paperless.asgi:application"
 Environment=GRANIAN_HOST=::
 Environment=GRANIAN_PORT=8000

install/stalwart-install.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/stalwartlabs/stalwart
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "stalwart" "stalwartlabs/stalwart" "prebuild" "latest" "/opt/stalwart" "stalwart-$(arch_resolve x86_64 aarch64)-unknown-linux-gnu.tar.gz"
+chmod +x /opt/stalwart/stalwart
+
+msg_info "Configuring Stalwart"
+mkdir -p /opt/stalwart_data/{etc,data,logs}
+cat <<EOF >/opt/stalwart_data/etc/stalwart.env
+# Uncomment and edit an entry to override its default.
+# Apply changes with: systemctl restart stalwart
+
+#STALWART_HOSTNAME=mail.example.com
+#STALWART_PUBLIC_URL=https://mail.example.com
+#STALWART_RECOVERY_MODE=true
+#STALWART_RECOVERY_ADMIN=admin:changeme
+EOF
+chmod 600 /opt/stalwart_data/etc/stalwart.env
+msg_ok "Configured Stalwart"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/stalwart.service
+[Unit]
+Description=Stalwart Mail Server
+Conflicts=postfix.service sendmail.service exim4.service
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/stalwart_data
+EnvironmentFile=-/opt/stalwart_data/etc/stalwart.env
+ExecStart=/opt/stalwart/stalwart --config=/opt/stalwart_data/etc/config.json
+LimitNOFILE=65536
+KillMode=process
+KillSignal=SIGINT
+Restart=on-failure
+RestartSec=5
+SyslogIdentifier=stalwart
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now stalwart
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/stirling-pdf-install.sh

@@ -34,7 +34,11 @@ msg_ok "Installed Dependencies"
 PYTHON_VERSION="3.12" setup_uv
 JAVA_VERSION="25" setup_java
 
-read -r -p "${TAB3}Do you want to use Stirling-PDF with Login? (no/n = without Login) [Y/n] " response
+if ! read -r -p "${TAB3}Do you want to use Stirling-PDF with Login? (no/n = without Login) [Y/n] " response; then
+  # No interactive stdin (EOF): fall back to the no-login install instead of
+  # silently selecting login, which the -z test below would otherwise do.
+  response="n"
+fi
 response=${response,,} # Convert to lowercase
 login_mode="false"
 if [[ "$response" == "y" || "$response" == "yes" || -z "$response" ]]; then
@@ -72,7 +76,10 @@ $STD uv pip install \
   pillow \
   pdf2image
 $STD apt install -y python3-uno python3-pip
-$STD pip3 install --break-system-packages --timeout=120 unoserver
+# Install unoserver for the system Python, not the venv activated above: `uno` is
+# provided by python3-uno for /usr/bin/python3 only, and unoserver.service expects
+# /usr/local/bin/unoserver. A bare `pip3` here resolves to the venv's pip.
+$STD /usr/bin/python3 -m pip install --break-system-packages --timeout=120 unoserver
 ln -sf /opt/.venv/bin/python3 /usr/local/bin/python3
 ln -sf /opt/.venv/bin/pip /usr/local/bin/pip
 msg_ok "Installed Python Dependencies"
@@ -104,7 +111,7 @@ PATH=/opt/.venv/bin:/usr/lib/libreoffice/program:/usr/local/sbin:/usr/local/bin:
 EOF
 
 if [[ "$login_mode" == "true" ]]; then
-  cat <<EOF >/opt/Stirling-PDF/.env
+  cat <<EOF >>/opt/Stirling-PDF/.env
 # activate Login
 DISABLE_ADDITIONAL_FEATURES=false
 SECURITY_ENABLELOGIN=true