Update CHANGELOG.md (#15538)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -499,6 +499,9 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
+    - Stirling-PDF: patch libicudata execstack flag for LXC container compatibility [@MickLesk](https://github.com/MickLesk) ([#15531](https://github.com/community-scripts/ProxmoxVE/pull/15531))
+    - FlowiseAI: align install to use pnpm instead of npm to fix missing dependencies [@MickLesk](https://github.com/MickLesk) ([#15530](https://github.com/community-scripts/ProxmoxVE/pull/15530))
+    - Vaultwarden: handle version detection failure gracefully in update [@MickLesk](https://github.com/MickLesk) ([#15526](https://github.com/community-scripts/ProxmoxVE/pull/15526))
     - homarr: fix: update-fail [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15512](https://github.com/community-scripts/ProxmoxVE/pull/15512))
     - n8n: pin version to 2.27.5 [@tremor021](https://github.com/tremor021) ([#15516](https://github.com/community-scripts/ProxmoxVE/pull/15516))
 
@@ -506,6 +509,13 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
     - [arm64] feat: iventory arm64 support [@asylumexp](https://github.com/asylumexp) ([#15521](https://github.com/community-scripts/ProxmoxVE/pull/15521))
 
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: fix SDN vnet network parameter to use bridge instead of vnet [@MickLesk](https://github.com/MickLesk) ([#15527](https://github.com/community-scripts/ProxmoxVE/pull/15527))
+    - tools.func: use safe variable expansion in check_for_gh_release RETURN trap [@MickLesk](https://github.com/MickLesk) ([#15529](https://github.com/community-scripts/ProxmoxVE/pull/15529))
+
 ## 2026-06-30
 
 ### 🚀 Updated Scripts

ct/stirling-pdf.sh

@@ -38,6 +38,11 @@ function update_script() {
     PYTHON_VERSION="3.12" setup_uv
     JAVA_VERSION="25" setup_java
 
+    msg_info "Patching Native Libraries for LXC Compatibility"
+    ensure_dependencies patchelf
+    find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
+    msg_ok "Patched Native Libraries"
+
     msg_info "Stopping Services"
     systemctl stop stirlingpdf libreoffice-listener unoserver
     msg_ok "Stopped Services"

ct/vaultwarden.sh

@@ -37,7 +37,7 @@ function update_script() {
     "2" "Set Admin Token")
 
   if [ "$UPD" == "1" ]; then
-    INSTALLED_VERSION="$(/opt/vaultwarden/bin/vaultwarden --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -n1)"
+    INSTALLED_VERSION="$(/opt/vaultwarden/bin/vaultwarden --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -n1 || true)"
     if [[ -n "$INSTALLED_VERSION" ]] &&
       ! grep -qxF "$INSTALLED_VERSION" "$HOME/.vaultwarden" 2>/dev/null; then
       printf '%s\n' "$INSTALLED_VERSION" >"$HOME/.vaultwarden"

install/flowiseai-install.sh

@@ -20,16 +20,12 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 PYTHON_VERSION="3.11" setup_uv
-NODE_VERSION="22" setup_nodejs #needed because better-sql break
+NODE_VERSION="22" NODE_MODULE="pnpm" setup_nodejs
 
 msg_info "Installing FlowiseAI (Patience)"
 PYTHON_BIN="$(uv python find 3.11)"
 export npm_config_python="$PYTHON_BIN"
-$STD npm install -g flowise \
-  @opentelemetry/exporter-trace-otlp-grpc \
-  @opentelemetry/exporter-trace-otlp-proto \
-  @opentelemetry/sdk-trace-node \
-  langchainhub
+$STD pnpm add -g flowise
 mkdir -p /opt/flowiseai
 curl -fsSL "https://raw.githubusercontent.com/FlowiseAI/Flowise/main/packages/server/.env.example" -o "/opt/flowiseai/.env"
 msg_ok "Installed FlowiseAI"

install/stirling-pdf-install.sh

@@ -27,7 +27,8 @@ $STD apt install -y \
   fonts-urw-base35 \
   qpdf \
   poppler-utils \
-  jbig2
+  jbig2 \
+  patchelf
 msg_ok "Installed Dependencies"
 
 PYTHON_VERSION="3.12" setup_uv
@@ -115,6 +116,10 @@ EOF
 fi
 msg_ok "Created Environment Variables"
 
+msg_info "Patching Native Libraries for LXC Compatibility"
+find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \; || true
+msg_ok "Patched Native Libraries"
+
 msg_info "Refreshing Font Cache"
 $STD fc-cache -fv
 msg_ok "Font Cache Updated"

misc/build.func

@@ -3930,7 +3930,7 @@ build_container() {
 
   NET_STRING="-net0 name=eth0,bridge=${BRG:-vmbr0}"
   if [[ -n "${var_sdn_vnet:-${SDN_VNET:-}}" ]]; then
-    NET_STRING="-net0 name=eth0,vnet=${var_sdn_vnet:-$SDN_VNET}"
+    NET_STRING="-net0 name=eth0,bridge=${var_sdn_vnet:-$SDN_VNET}"
   fi
 
   # MAC

misc/tools.func

@@ -2647,9 +2647,9 @@ check_for_gh_release() {
 
   ensure_dependencies jq
 
-  local gh_check_json
+  local gh_check_json=""
   gh_check_json=$(mktemp /tmp/tools-gh-check-XXXXXX) || return 73
-  trap 'rm -f "$gh_check_json"' RETURN
+  trap 'rm -f "${gh_check_json:-}"' RETURN
 
   # Build auth header if token is available
   local header_args=()
@@ -7657,12 +7657,6 @@ setup_nodejs() {
     fi
   fi
 
-  # pnpm v10+ blocks dependency build scripts by default (ERR_PNPM_IGNORED_BUILDS).
-  # In a container environment all installed packages are trusted, so we enable builds globally.
-  if command -v pnpm >/dev/null 2>&1; then
-    pnpm config set --global dangerouslyAllowAllBuilds true >/dev/null 2>&1 || true
-  fi
-
   if [[ "$NODE_COREPACK_ENABLE" == "1" ]] && ((wants_corepack)) && command -v corepack >/dev/null 2>&1; then
     msg_info "Enabling corepack"
     if $STD corepack enable 2>/dev/null; then