feat: add CopycatWarningToast component for user warnings

Introduced a new CopycatWarningToast component that displays a warning about copycat sites. The toast appears at the top-center of the screen and can be dismissed, with the dismissal state stored in local storage to prevent reappearing. Integrated the component into the RootLayout for global visibility.

CHANGELOG.md

@@ -424,12 +424,22 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ### 🚀 Updated Scripts
 
+  - Pin Opencloud to 5.2.0 [@vhsdream](https://github.com/vhsdream) ([#12721](https://github.com/community-scripts/ProxmoxVE/pull/12721))
+
   - #### 🐞 Bug Fixes
 
+    - [Hotfix] qBittorrent: Disable UPnP port forwarding by default [@vhsdream](https://github.com/vhsdream) ([#12728](https://github.com/community-scripts/ProxmoxVE/pull/12728))
+    - [Quickfix] Opencloud: ensure correct case for binary [@vhsdream](https://github.com/vhsdream) ([#12729](https://github.com/community-scripts/ProxmoxVE/pull/12729))
+    - Omada: Bump libssl [@MickLesk](https://github.com/MickLesk) ([#12724](https://github.com/community-scripts/ProxmoxVE/pull/12724))
+    - openwebui: Ensure required dependencies [@MickLesk](https://github.com/MickLesk) ([#12717](https://github.com/community-scripts/ProxmoxVE/pull/12717))
     - Frigate: try an OpenVino model build fallback [@MickLesk](https://github.com/MickLesk) ([#12704](https://github.com/community-scripts/ProxmoxVE/pull/12704))
     - Change cronjob setup to use www-data user [@opastorello](https://github.com/opastorello) ([#12695](https://github.com/community-scripts/ProxmoxVE/pull/12695))
     - RustDesk Server: Fix check_for_gh_release function call [@tremor021](https://github.com/tremor021) ([#12694](https://github.com/community-scripts/ProxmoxVE/pull/12694))
 
+  - #### ✨ New Features
+
+    - feat: improve zigbee2mqtt backup handler [@MickLesk](https://github.com/MickLesk) ([#12714](https://github.com/community-scripts/ProxmoxVE/pull/12714))
+
   - #### 💥 Breaking Changes
 
     - Reactive Resume: rewrite for v5 using original repo amruthpilla/reactive-resume [@MickLesk](https://github.com/MickLesk) ([#12705](https://github.com/community-scripts/ProxmoxVE/pull/12705))

ct/opencloud.sh

@@ -29,7 +29,7 @@ function update_script() {
     exit
   fi
 
-  RELEASE="v5.1.0"
+  RELEASE="v5.2.0"
   if check_for_gh_release "OpenCloud" "opencloud-eu/opencloud" "${RELEASE}"; then
     msg_info "Stopping services"
     systemctl stop opencloud opencloud-wopi
@@ -41,7 +41,9 @@ function update_script() {
     ensure_dependencies "inotify-tools"
     msg_ok "Updated packages"
 
+    rm -f /usr/bin/{OpenCloud,opencloud}
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "${RELEASE}" "/usr/bin" "opencloud-*-linux-amd64"
+    mv /usr/bin/OpenCloud /usr/bin/opencloud
 
     if ! grep -q 'POSIX_WATCH' /etc/opencloud/opencloud.env; then
       sed -i '/^## External/i ## Uncomment below to enable PosixFS Collaborative Mode\

ct/openwebui.sh

@@ -25,6 +25,8 @@ function update_script() {
   check_container_storage
   check_container_resources
 
+  ensure_dependencies zstd build-essential libmariadb-dev
+
   if [[ -d /opt/open-webui ]]; then
     msg_warn "Legacy installation detected — migrating to uv based install..."
     msg_info "Stopping Service"
@@ -92,7 +94,6 @@ EOF
     OLLAMA_VERSION=$(ollama -v | awk '{print $NF}')
     RELEASE=$(curl -s https://api.github.com/repos/ollama/ollama/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4)}')
     if [ "$OLLAMA_VERSION" != "$RELEASE" ]; then
-      ensure_dependencies zstd
       msg_info "Ollama update available: v$OLLAMA_VERSION -> v$RELEASE"
       msg_info "Downloading Ollama v$RELEASE \n"
       curl -fS#LO https://github.com/ollama/ollama/releases/download/v${RELEASE}/ollama-linux-amd64.tar.zst

ct/zigbee2mqtt.sh

@@ -35,13 +35,16 @@ function update_script() {
     msg_ok "Stopped Service"
 
     msg_info "Creating Backup"
-    rm -rf /opt/${APP}_backup*.tar.gz
-    mkdir -p /opt/z2m_backup
-    $STD tar -czf /opt/z2m_backup/${APP}_backup_$(date +%Y%m%d%H%M%S).tar.gz -C /opt zigbee2mqtt
-    mv /opt/zigbee2mqtt/data /opt/z2m_backup
-    msg_ok "Backup Created"
+    ensure_dependencies zstd
+    mkdir -p /opt/{backups,z2m_backup}
+    BACKUP_VERSION="$(<"$HOME/.zigbee2mqtt")"
+    BACKUP_FILE="/opt/backups/${APP}_backup_${BACKUP_VERSION}.tar.zst"
+    $STD tar -cf - -C /opt zigbee2mqtt | zstd -q -o "$BACKUP_FILE"
+    ls -t /opt/backups/${APP}_backup_*.tar.zst 2>/dev/null | tail -n +6 | xargs -r rm -f
+    mv /opt/zigbee2mqtt/data /opt/z2m_backup/data
+    msg_ok "Backup Created (${BACKUP_VERSION})"
 
-    fetch_and_deploy_gh_release "Zigbee2MQTT" "Koenkk/zigbee2mqtt" "tarball" "latest" "/opt/zigbee2mqtt"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Zigbee2MQTT" "Koenkk/zigbee2mqtt" "tarball" "latest" "/opt/zigbee2mqtt"
 
     msg_info "Updating Zigbee2MQTT"
     rm -rf /opt/zigbee2mqtt/data

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-03-09T06:22:44Z",
+  "generated": "2026-03-09T18:17:48Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -228,9 +228,9 @@
     {
       "slug": "configarr",
       "repo": "raydak-labs/configarr",
-      "version": "v1.23.0",
+      "version": "v1.24.0",
       "pinned": false,
-      "date": "2026-02-23T12:28:13Z"
+      "date": "2026-03-09T15:16:08Z"
     },
     {
       "slug": "convertx",
@@ -837,9 +837,9 @@
     {
       "slug": "manyfold",
       "repo": "manyfold3d/manyfold",
-      "version": "v0.133.1",
+      "version": "v0.134.0",
       "pinned": false,
-      "date": "2026-02-26T15:50:34Z"
+      "date": "2026-03-09T13:20:45Z"
     },
     {
       "slug": "mealie",
@@ -998,9 +998,9 @@
     {
       "slug": "opencloud",
       "repo": "opencloud-eu/opencloud",
-      "version": "v5.1.0",
+      "version": "v5.2.0",
       "pinned": true,
-      "date": "2026-02-16T15:04:28Z"
+      "date": "2026-03-09T13:32:31Z"
     },
     {
       "slug": "opengist",
@@ -1305,10 +1305,10 @@
     },
     {
       "slug": "reactive-resume",
-      "repo": "lazy-media/Reactive-Resume",
-      "version": "v1.2.7",
+      "repo": "amruthpillai/reactive-resume",
+      "version": "v5.0.11",
       "pinned": false,
-      "date": "2026-01-20T11:59:40Z"
+      "date": "2026-03-04T20:39:11Z"
     },
     {
       "slug": "recyclarr",
@@ -1362,9 +1362,9 @@
     {
       "slug": "scanopy",
       "repo": "scanopy/scanopy",
-      "version": "v0.14.16",
+      "version": "v0.14.17",
       "pinned": false,
-      "date": "2026-03-08T06:39:25Z"
+      "date": "2026-03-09T05:04:49Z"
     },
     {
       "slug": "scraparr",
@@ -1397,9 +1397,9 @@
     {
       "slug": "semaphore",
       "repo": "semaphoreui/semaphore",
-      "version": "v2.17.17",
+      "version": "v2.17.21",
       "pinned": false,
-      "date": "2026-03-08T21:42:11Z"
+      "date": "2026-03-09T09:33:06Z"
     },
     {
       "slug": "shelfmark",
@@ -1586,9 +1586,9 @@
     {
       "slug": "tracearr",
       "repo": "connorgallopo/Tracearr",
-      "version": "v1.4.21",
+      "version": "v1.4.22",
       "pinned": false,
-      "date": "2026-03-03T18:43:20Z"
+      "date": "2026-03-09T17:39:52Z"
     },
     {
       "slug": "tracktor",
@@ -1712,9 +1712,9 @@
     {
       "slug": "wanderer",
       "repo": "meilisearch/meilisearch",
-      "version": "v1.37.0",
+      "version": "v1.38.0",
       "pinned": false,
-      "date": "2026-03-02T09:16:36Z"
+      "date": "2026-03-09T08:06:29Z"
     },
     {
       "slug": "warracker",
@@ -1726,9 +1726,9 @@
     {
       "slug": "watcharr",
       "repo": "sbondCo/Watcharr",
-      "version": "v3.0.0",
+      "version": "v3.0.1",
       "pinned": false,
-      "date": "2026-03-04T09:29:14Z"
+      "date": "2026-03-09T11:33:44Z"
     },
     {
       "slug": "watchyourlan",
@@ -1838,9 +1838,9 @@
     {
       "slug": "zoraxy",
       "repo": "tobychui/zoraxy",
-      "version": "v3.3.2-rc2",
+      "version": "v3.3.2-rc3",
       "pinned": false,
-      "date": "2026-02-27T03:31:25Z"
+      "date": "2026-03-09T13:56:45Z"
     },
     {
       "slug": "zwave-js-ui",

frontend/src/app/layout.tsx

@@ -5,6 +5,7 @@ import { Inter } from "next/font/google";
 import Script from "next/script";
 import React from "react";
 
+import { CopycatWarningToast } from "@/components/copycat-warning-toast";
 import { ThemeProvider } from "@/components/theme-provider";
 import { analytics, basePath } from "@/config/site-config";
 import QueryProvider from "@/components/query-provider";
@@ -116,6 +117,7 @@ export default function RootLayout({
                     <div className="w-full max-w-[1440px] ">
                       {children}
                       <Toaster richColors />
+                      <CopycatWarningToast />
                     </div>
                   </div>
                   <Footer />

frontend/src/components/copycat-warning-toast.tsx

@@ -0,0 +1,24 @@
+"use client";
+
+import { useEffect } from "react";
+import { toast } from "sonner";
+
+const STORAGE_KEY = "copycat-warning-dismissed";
+
+export function CopycatWarningToast() {
+  useEffect(() => {
+    if (typeof window === "undefined")
+      return;
+    if (localStorage.getItem(STORAGE_KEY) === "true")
+      return;
+
+    toast.warning("Beware of copycat sites. Always verify the URL is correct before trusting or running scripts.", {
+      position: "top-center",
+      duration: Number.POSITIVE_INFINITY,
+      closeButton: true,
+      onDismiss: () => localStorage.setItem(STORAGE_KEY, "true"),
+    });
+  }, []);
+
+  return null;
+}

install/omada-install.sh

@@ -28,7 +28,7 @@ fi
 
 if ! dpkg -l | grep -q 'libssl1.1'; then
   msg_info "Installing libssl (if needed)"
-  curl -fsSL "https://security.debian.org/debian-security/pool/updates/main/o/openssl/libssl1.1_1.1.1w-0+deb11u4_amd64.deb" -o "/tmp/libssl.deb"
+  curl -fsSL "https://security.debian.org/debian-security/pool/updates/main/o/openssl/libssl1.1_1.1.1w-0+deb11u5_amd64.deb" -o "/tmp/libssl.deb"
   $STD dpkg -i /tmp/libssl.deb
   rm -f /tmp/libssl.deb
   msg_ok "Installed libssl1.1"

install/opencloud-install.sh

@@ -64,7 +64,8 @@ $STD sudo -u cool coolconfig set-admin-password --user=admin --password="$COOLPA
 echo "$COOLPASS" >~/.coolpass
 msg_ok "Installed Collabora Online"
 
-fetch_and_deploy_gh_release "opencloud" "opencloud-eu/opencloud" "singlefile" "v5.1.0" "/usr/bin" "opencloud-*-linux-amd64"
+fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v5.2.0" "/usr/bin" "opencloud-*-linux-amd64"
+mv /usr/bin/OpenCloud /usr/bin/opencloud
 
 msg_info "Configuring OpenCloud"
 DATA_DIR="/var/lib/opencloud"

install/openwebui-install.sh

@@ -16,7 +16,9 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   ffmpeg \
-  zstd
+  zstd \
+  build-essential \
+  libmariadb-dev
 msg_ok "Installed Dependencies"
 
 setup_hwaccel

install/qbittorrent-install.sh

@@ -27,6 +27,9 @@ WebUI\Password_PBKDF2="@ByteArray(amjeuVrF3xRbgzqWQmes5A==:XK3/Ra9jUmqUc4RwzCtrh
 WebUI\Port=8090
 WebUI\UseUPnP=false
 WebUI\Username=admin
+
+[Network]
+PortForwardingEnabled=false
 EOF
 msg_ok "Setup qBittorrent-nox"