diff --git a/.github/scripts/generate_metadata.py b/.github/scripts/generate_metadata.py
old mode 100644
new mode 100755
diff --git a/devbox.json b/devbox.json
index 2f92187b8d..4cbf5af051 100644
--- a/devbox.json
+++ b/devbox.json
@@ -1,22 +1,33 @@
 {
-  "$schema": "https://raw.githubusercontent.com/jetify-com/devbox/0.13.7/.schema/devbox.schema.json",
+  "$schema": "https://raw.githubusercontent.com/jetify-com/devbox/0.16.0/.schema/devbox.schema.json",
   "packages": [
     "python@3.11",
-    "python3Packages.pyyaml",
-    "python3Packages.pytest",
-    "python3Packages.pytest-cov",
-    "python3Packages.bcrypt",
-    "python3Packages.pydantic",
-    "git@latest"
+    "python311Packages.pytest",
+    "python311Packages.pytest-cov",
+    "python311Packages.bcrypt",
+    "python311Packages.pydantic",
+    "git@latest",
+    "python311Packages.pyyaml@latest"
   ],
   "shell": {
     "init_hook": [],
     "scripts": {
-      "ports": ["python3 ./.github/scripts/port_validation.py"],
+      "ports": ["./.github/scripts/port_validation.py"],
       "lib-test": [
         "pytest library/ -vvv",
         "rm -r library/**/__pycache__",
         "rm -r library/**/tests/__pycache__"
+      ],
+      "app-test": [
+        "./.github/scripts/ci.py --train \"$1\" --app \"$2\" --test-file \"${3:-basic-values.yaml}\" --wait=true",
+        "./.github/scripts/generate_metadata.py --train \"$1\" --app \"$2\""
+      ],
+      "app-render": [
+        "./.github/scripts/ci.py --train \"$1\" --app \"$2\" --test-file \"${3:-basic-values.yaml}\" --render-only=true",
+        "./.github/scripts/generate_metadata.py --train \"$1\" --app \"$2\""
+      ],
+      "copy-lib": [
+        "docker run --platform linux/amd64 --quiet --rm -v $PWD:/workspace ghcr.io/truenas/apps_validation:latest apps_catalog_hash_generate --path /workspace"
       ]
     }
   }
diff --git a/devbox.lock b/devbox.lock
index 8e8189fd3d..680fec9eb2 100644
--- a/devbox.lock
+++ b/devbox.lock
@@ -2,205 +2,255 @@
   "lockfile_version": "1",
   "packages": {
     "git@latest": {
-      "last_modified": "2025-07-28T17:09:23Z",
-      "resolved": "github:NixOS/nixpkgs/648f70160c03151bc2121d179291337ad6bc564b#git",
+      "last_modified": "2025-11-23T21:50:36Z",
+      "resolved": "github:NixOS/nixpkgs/ee09932cedcef15aaf476f9343d1dea2cb77e261#git",
       "source": "devbox-search",
-      "version": "2.50.1",
+      "version": "2.51.2",
       "systems": {
         "aarch64-darwin": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/jn9byxgdjndngf0d2by0djg8gcdll7xc-git-2.50.1",
+              "path": "/nix/store/x34bh6s6ighg7lb74nkjbx3nx52zj0j9-git-2.51.2",
               "default": true
             },
             {
               "name": "doc",
-              "path": "/nix/store/j8djmq64ckbah7bl6jv1y6arrjr0shmv-git-2.50.1-doc"
+              "path": "/nix/store/6wnscv0364r6430qmx33nn927dlw2vnf-git-2.51.2-doc"
             }
           ],
-          "store_path": "/nix/store/jn9byxgdjndngf0d2by0djg8gcdll7xc-git-2.50.1"
+          "store_path": "/nix/store/x34bh6s6ighg7lb74nkjbx3nx52zj0j9-git-2.51.2"
         },
         "aarch64-linux": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/h4pvvix6pvnvys9a6y1xj2442r1ajdhl-git-2.50.1",
+              "path": "/nix/store/gzdcfmx2p9nvd4z21b6ns00cp4sv1d2h-git-2.51.2",
               "default": true
             },
             {
-              "name": "doc",
-              "path": "/nix/store/q8sicpx16gyzxnp3345a46lj4cz9wd09-git-2.50.1-doc"
+              "name": "debug",
+              "path": "/nix/store/5l5ln59lpi4qv2qm59aqchlz32j9zcm9-git-2.51.2-debug"
             },
             {
-              "name": "debug",
-              "path": "/nix/store/rpxnrnsn4nbx8wm9d2vrgj0fr5xzz5lg-git-2.50.1-debug"
+              "name": "doc",
+              "path": "/nix/store/w28mqxb1bd51f5rwh5127pvbp31lnqmv-git-2.51.2-doc"
             }
           ],
-          "store_path": "/nix/store/h4pvvix6pvnvys9a6y1xj2442r1ajdhl-git-2.50.1"
+          "store_path": "/nix/store/gzdcfmx2p9nvd4z21b6ns00cp4sv1d2h-git-2.51.2"
         },
         "x86_64-darwin": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/8d1n8cvi5x1j0v61459lvhqs26vmcqbl-git-2.50.1",
+              "path": "/nix/store/zz5xiyzpnn06cdgw1xnlvs1sbly5247r-git-2.51.2",
               "default": true
             },
             {
               "name": "doc",
-              "path": "/nix/store/yn9cvbs7jz4dfdb17qralgr0ybi5rmjf-git-2.50.1-doc"
+              "path": "/nix/store/vrisnm56c5v8mzbv55yrq28wgkvga8nm-git-2.51.2-doc"
             }
           ],
-          "store_path": "/nix/store/8d1n8cvi5x1j0v61459lvhqs26vmcqbl-git-2.50.1"
+          "store_path": "/nix/store/zz5xiyzpnn06cdgw1xnlvs1sbly5247r-git-2.51.2"
         },
         "x86_64-linux": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/5i8zvall945kypmwgqd0y47f02pldwp4-git-2.50.1",
+              "path": "/nix/store/4qhdhmi7pzgad0zfd7c5lsg235mbf9hv-git-2.51.2",
               "default": true
             },
             {
               "name": "debug",
-              "path": "/nix/store/l46kpjpcwwp8l7kzzr1s2dlk646r73z2-git-2.50.1-debug"
+              "path": "/nix/store/pjr2vd588sxa47glfg0ky0df3vk79dcs-git-2.51.2-debug"
             },
             {
               "name": "doc",
-              "path": "/nix/store/d2lhlzkdziwmijik8nszfwp8srbkskb9-git-2.50.1-doc"
+              "path": "/nix/store/9k6ivrdddy9s3z1hiwgavl0kfr2czgav-git-2.51.2-doc"
             }
           ],
-          "store_path": "/nix/store/5i8zvall945kypmwgqd0y47f02pldwp4-git-2.50.1"
+          "store_path": "/nix/store/4qhdhmi7pzgad0zfd7c5lsg235mbf9hv-git-2.51.2"
         }
       }
     },
     "github:NixOS/nixpkgs/nixpkgs-unstable": {
-      "last_modified": "2025-08-19T04:17:39Z",
-      "resolved": "github:NixOS/nixpkgs/97eb7ee0da337d385ab015a23e15022c865be75c?lastModified=1755577059&narHash=sha256-5hYhxIpco8xR%2BIpP3uU56%2B4%2BBw7mf7EMyxS%2FHqUYHQY%3D"
+      "last_modified": "2025-11-27T07:58:14Z",
+      "resolved": "github:NixOS/nixpkgs/0d59e0290eefe0f12512043842d7096c4070f30e?lastModified=1764230294&narHash=sha256-Z63xl5Scj3Y%2FzRBPAWq1eT68n2wBWGCIEF4waZ0bQBE%3D"
     },
-    "python3Packages.bcrypt": {
-      "resolved": "github:NixOS/nixpkgs/75a52265bda7fd25e06e3a67dee3f0354e73243c#python3Packages.bcrypt",
+    "python311Packages.bcrypt": {
+      "resolved": "github:NixOS/nixpkgs/0d59e0290eefe0f12512043842d7096c4070f30e?narHash=sha256-Z63xl5Scj3Y%2FzRBPAWq1eT68n2wBWGCIEF4waZ0bQBE%3D#python311Packages.bcrypt",
       "source": "nixpkg",
       "systems": {
         "aarch64-darwin": {
           "outputs": [
             {
-              "path": "/nix/store/0bialsv3mzc3hfkynkky2h4g0fkhl27b-python3.11-bcrypt-4.0.1",
+              "path": "/nix/store/4dz8bhavd4h0m7mxdxg7j6s8a83qmx8m-python3.11-bcrypt-5.0.0",
               "default": true
             }
           ]
         }
       }
     },
-    "python3Packages.pydantic": {
-      "resolved": "github:NixOS/nixpkgs/75a52265bda7fd25e06e3a67dee3f0354e73243c#python3Packages.pydantic",
+    "python311Packages.pydantic": {
+      "resolved": "github:NixOS/nixpkgs/0d59e0290eefe0f12512043842d7096c4070f30e?narHash=sha256-Z63xl5Scj3Y%2FzRBPAWq1eT68n2wBWGCIEF4waZ0bQBE%3D#python311Packages.pydantic",
       "source": "nixpkg",
       "systems": {
         "aarch64-darwin": {
           "outputs": [
             {
-              "path": "/nix/store/lmhr8skgkpbf8y9frfcfhyd1cwbp7d35-python3.11-pydantic-1.10.12",
+              "path": "/nix/store/fwya33dkqmx8gp0ly5aq6pqscnvvc6hi-python3.11-pydantic-2.11.7",
               "default": true
             }
           ]
         }
       }
     },
-    "python3Packages.pytest": {
-      "resolved": "github:NixOS/nixpkgs/75a52265bda7fd25e06e3a67dee3f0354e73243c#python3Packages.pytest",
+    "python311Packages.pytest": {
+      "resolved": "github:NixOS/nixpkgs/0d59e0290eefe0f12512043842d7096c4070f30e?narHash=sha256-Z63xl5Scj3Y%2FzRBPAWq1eT68n2wBWGCIEF4waZ0bQBE%3D#python311Packages.pytest",
       "source": "nixpkg",
       "systems": {
         "aarch64-darwin": {
           "outputs": [
             {
-              "path": "/nix/store/97pny9bx1msg7nlj5zgvj7abfyyx76rg-python3.11-pytest-7.4.2",
+              "path": "/nix/store/gqky37yynbq4danh48hvjmfyzx28a1gq-python3.11-pytest-8.4.2",
               "default": true
             }
           ]
         }
       }
     },
-    "python3Packages.pytest-cov": {
-      "resolved": "github:NixOS/nixpkgs/75a52265bda7fd25e06e3a67dee3f0354e73243c#python3Packages.pytest-cov",
+    "python311Packages.pytest-cov": {
+      "resolved": "github:NixOS/nixpkgs/0d59e0290eefe0f12512043842d7096c4070f30e?narHash=sha256-Z63xl5Scj3Y%2FzRBPAWq1eT68n2wBWGCIEF4waZ0bQBE%3D#python311Packages.pytest-cov",
       "source": "nixpkg",
       "systems": {
         "aarch64-darwin": {
           "outputs": [
             {
-              "path": "/nix/store/a2j6csrpmnzfp2shblk00z3b4b6jdgax-python3.11-pytest-cov-4.1.0",
+              "path": "/nix/store/mk2hgldi4vwxmi3skyp8ddmq9gk40gmx-python3.11-pytest-cov-6.2.1",
               "default": true
             }
           ]
         }
       }
     },
-    "python3Packages.pyyaml": {
-      "resolved": "github:NixOS/nixpkgs/75a52265bda7fd25e06e3a67dee3f0354e73243c#python3Packages.pyyaml",
-      "source": "nixpkg",
-      "systems": {
-        "aarch64-darwin": {
-          "outputs": [
-            {
-              "path": "/nix/store/wr951m2xcgnndqjdh7i51dknsmnbxa4f-python3.11-pyyaml-6.0.1",
-              "default": true
-            }
-          ]
-        }
-      }
-    },
-    "python@3.11": {
-      "last_modified": "2025-07-28T17:09:23Z",
-      "plugin_version": "0.0.4",
-      "resolved": "github:NixOS/nixpkgs/648f70160c03151bc2121d179291337ad6bc564b#python311",
+    "python311Packages.pyyaml@latest": {
+      "last_modified": "2024-12-03T12:40:06Z",
+      "resolved": "github:NixOS/nixpkgs/566e53c2ad750c84f6d31f9ccb9d00f823165550#python311Packages.pyyaml",
       "source": "devbox-search",
-      "version": "3.11.13",
+      "version": "6.0.2",
       "systems": {
         "aarch64-darwin": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/ifxz6hniba9h7p1lcfi8zd4xpslgsy6x-python3-3.11.13",
+              "path": "/nix/store/lb90xpkw4j58hnglfylmpspkhwb51vkk-python3.11-pyyaml-6.0.2",
               "default": true
+            },
+            {
+              "name": "dist",
+              "path": "/nix/store/wmk39d6dnq0s5qhisfim3kbwg0yjyjy0-python3.11-pyyaml-6.0.2-dist"
             }
           ],
-          "store_path": "/nix/store/ifxz6hniba9h7p1lcfi8zd4xpslgsy6x-python3-3.11.13"
+          "store_path": "/nix/store/lb90xpkw4j58hnglfylmpspkhwb51vkk-python3.11-pyyaml-6.0.2"
         },
         "aarch64-linux": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/9gj7a7mjy47l19xx1sh8zrgh687ilqbs-python3-3.11.13",
+              "path": "/nix/store/7gw5f1vbcnq9fwf462xm3qmxxmvf4x9x-python3.11-pyyaml-6.0.2",
               "default": true
             },
             {
-              "name": "debug",
-              "path": "/nix/store/ixsm2j4hkbwbdvx35qyy4lb0hycg0cix-python3-3.11.13-debug"
+              "name": "dist",
+              "path": "/nix/store/f888ga1a6m91wpja733wsl60l5xwz7yw-python3.11-pyyaml-6.0.2-dist"
             }
           ],
-          "store_path": "/nix/store/9gj7a7mjy47l19xx1sh8zrgh687ilqbs-python3-3.11.13"
+          "store_path": "/nix/store/7gw5f1vbcnq9fwf462xm3qmxxmvf4x9x-python3.11-pyyaml-6.0.2"
         },
         "x86_64-darwin": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/bg2fr8g676s6cvf6afh7md21bz86j4sv-python3-3.11.13",
+              "path": "/nix/store/7hjycsm0v5kzc788s7bzh0s8qfs0d6bm-python3.11-pyyaml-6.0.2",
               "default": true
+            },
+            {
+              "name": "dist",
+              "path": "/nix/store/6544bpvcd7v8v1gr0g6117hva8jmmzns-python3.11-pyyaml-6.0.2-dist"
             }
           ],
-          "store_path": "/nix/store/bg2fr8g676s6cvf6afh7md21bz86j4sv-python3-3.11.13"
+          "store_path": "/nix/store/7hjycsm0v5kzc788s7bzh0s8qfs0d6bm-python3.11-pyyaml-6.0.2"
         },
         "x86_64-linux": {
           "outputs": [
             {
               "name": "out",
-              "path": "/nix/store/xldyfac0kbcl5c1yp9ygsag5y23irwxs-python3-3.11.13",
+              "path": "/nix/store/1rjppp6jmm23c4i8r5iq5w6q1j81f67y-python3.11-pyyaml-6.0.2",
+              "default": true
+            },
+            {
+              "name": "dist",
+              "path": "/nix/store/i12506fl6prvz04yvcsxq31dlxg15dsq-python3.11-pyyaml-6.0.2-dist"
+            }
+          ],
+          "store_path": "/nix/store/1rjppp6jmm23c4i8r5iq5w6q1j81f67y-python3.11-pyyaml-6.0.2"
+        }
+      }
+    },
+    "python@3.11": {
+      "last_modified": "2025-11-23T21:50:36Z",
+      "plugin_version": "0.0.4",
+      "resolved": "github:NixOS/nixpkgs/ee09932cedcef15aaf476f9343d1dea2cb77e261#python311",
+      "source": "devbox-search",
+      "version": "3.11.14",
+      "systems": {
+        "aarch64-darwin": {
+          "outputs": [
+            {
+              "name": "out",
+              "path": "/nix/store/ymffyssaavagb5jc1hbx1pkdq21gh16b-python3-3.11.14",
+              "default": true
+            }
+          ],
+          "store_path": "/nix/store/ymffyssaavagb5jc1hbx1pkdq21gh16b-python3-3.11.14"
+        },
+        "aarch64-linux": {
+          "outputs": [
+            {
+              "name": "out",
+              "path": "/nix/store/kbyysxq0ry8vqbpkdwld118fi92wvqsf-python3-3.11.14",
               "default": true
             },
             {
               "name": "debug",
-              "path": "/nix/store/5ay9f62pyshj15dxfpvw40wa8w6pzwbc-python3-3.11.13-debug"
+              "path": "/nix/store/y8il90w9kvh1anv432rj8vz3nf7316w5-python3-3.11.14-debug"
             }
           ],
-          "store_path": "/nix/store/xldyfac0kbcl5c1yp9ygsag5y23irwxs-python3-3.11.13"
+          "store_path": "/nix/store/kbyysxq0ry8vqbpkdwld118fi92wvqsf-python3-3.11.14"
+        },
+        "x86_64-darwin": {
+          "outputs": [
+            {
+              "name": "out",
+              "path": "/nix/store/i4bd9nz257aph5lpjr19ggcaqc62qjn0-python3-3.11.14",
+              "default": true
+            }
+          ],
+          "store_path": "/nix/store/i4bd9nz257aph5lpjr19ggcaqc62qjn0-python3-3.11.14"
+        },
+        "x86_64-linux": {
+          "outputs": [
+            {
+              "name": "out",
+              "path": "/nix/store/00x3abm7y8j13i6n4sahvbar99irkc7d-python3-3.11.14",
+              "default": true
+            },
+            {
+              "name": "debug",
+              "path": "/nix/store/2lj58b7mhib83mb0cx8flyahbs9pnd9z-python3-3.11.14-debug"
+            }
+          ],
+          "store_path": "/nix/store/00x3abm7y8j13i6n4sahvbar99irkc7d-python3-3.11.14"
         }
       }
     }
diff --git a/ix-dev/community/maintainerr/app.yaml b/ix-dev/community/maintainerr/app.yaml
index 385fb80476..6d0250e132 100644
--- a/ix-dev/community/maintainerr/app.yaml
+++ b/ix-dev/community/maintainerr/app.yaml
@@ -1,4 +1,4 @@
-app_version: 2.22.0
+app_version: 2.22.1
 capabilities: []
 categories:
 - media
@@ -29,4 +29,4 @@ sources:
 - https://github.com/maintainerr/Maintainerr
 title: Maintainerr
 train: community
-version: 1.0.21
+version: 1.0.22
diff --git a/ix-dev/community/maintainerr/ix_values.yaml b/ix-dev/community/maintainerr/ix_values.yaml
index 0157aaedc3..ab8f5bfac1 100644
--- a/ix-dev/community/maintainerr/ix_values.yaml
+++ b/ix-dev/community/maintainerr/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: ghcr.io/maintainerr/maintainerr
-    tag: 2.22.0
+    tag: 2.22.1
   container_utils_image:
     repository: ixsystems/container-utils
     tag: 1.0.2
diff --git a/ix-dev/community/opencloud/app.yaml b/ix-dev/community/opencloud/app.yaml
index d6ef4de648..5dcd7ff9ea 100644
--- a/ix-dev/community/opencloud/app.yaml
+++ b/ix-dev/community/opencloud/app.yaml
@@ -37,4 +37,4 @@ sources:
 - https://hub.docker.com/r/opencloudeu/opencloud-rolling
 title: OpenCloud
 train: community
-version: 1.0.21
+version: 1.0.22
diff --git a/ix-dev/community/opencloud/app_migrations.yaml b/ix-dev/community/opencloud/app_migrations.yaml
index 0b478d2738..566fc14766 100644
--- a/ix-dev/community/opencloud/app_migrations.yaml
+++ b/ix-dev/community/opencloud/app_migrations.yaml
@@ -9,3 +9,8 @@ migrations:
     max_version: 1.0.18
   target:
     min_version: 1.0.19
+- file: fix_csp
+  from:
+    max_version: 1.0.20
+  target:
+    min_version: 1.0.22
diff --git a/ix-dev/community/opencloud/migrations/fix_csp b/ix-dev/community/opencloud/migrations/fix_csp
new file mode 100755
index 0000000000..d612342bdf
--- /dev/null
+++ b/ix-dev/community/opencloud/migrations/fix_csp
@@ -0,0 +1,28 @@
+#!/usr/bin/python3
+
+import os
+import sys
+import yaml
+
+
+def migrate(values):
+    new_csp = []
+    for x in values["opencloud"]["additional_csp"]:
+        new_item = {"directive": x["directive"], "items": []}
+        for i in x["items"]:
+            if isinstance(i, str):
+                new_item["items"].append({"value": i, "placeholder": ""})
+            else:
+                new_item["items"].append(i)
+        new_csp.append(new_item)  # ← This line was missing!
+    values["opencloud"]["additional_csp"] = new_csp
+    return values
+
+
+if __name__ == "__main__":
+    if len(sys.argv) != 2:
+        exit(1)
+
+    if os.path.exists(sys.argv[1]):
+        with open(sys.argv[1], "r") as f:
+            print(yaml.dump(migrate(yaml.safe_load(f.read()))))
diff --git a/ix-dev/community/opencloud/templates/docker-compose.yaml b/ix-dev/community/opencloud/templates/docker-compose.yaml
index 40c6afdf76..c43bec84ea 100644
--- a/ix-dev/community/opencloud/templates/docker-compose.yaml
+++ b/ix-dev/community/opencloud/templates/docker-compose.yaml
@@ -12,7 +12,8 @@
   {% do csp.x.update({key: values}) %}
 {% endfor %}
 {% for x in values.opencloud.additional_csp %}
-  {% set values = csp.x.get(x.directive, []) + x['items'] %}
+  {% set list_items = x['items'] | map(attribute="value") | list %}
+  {% set values = csp.x.get(x.directive, []) + list_items %}
   {% do csp.x.update({x.directive: values}) %}
 {% endfor %}
 
diff --git a/ix-dev/community/opencloud/templates/test_values/basic-values.yaml b/ix-dev/community/opencloud/templates/test_values/basic-values.yaml
index ee8adad72c..9a89cd5e9d 100644
--- a/ix-dev/community/opencloud/templates/test_values/basic-values.yaml
+++ b/ix-dev/community/opencloud/templates/test_values/basic-values.yaml
@@ -41,15 +41,15 @@ opencloud:
   additional_csp:
     - directive: connect-src
       items:
-        - https://raw.githubusercontent.com/opencloud-eu/awesome-apps/
-        - https://update.opencloud.eu/
+        - value: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/
+        - value: https://update.opencloud.eu/
     - directive: frame-src
       items:
-        - https://embed.diagrams.net/
+        - value: https://embed.diagrams.net/
     - directive: img-src
       items:
-        - https://raw.githubusercontent.com/opencloud-eu/awesome-apps/
-        - https://tile.openstreetmap.org/
+        - value: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/
+        - value: https://tile.openstreetmap.org/
   additional_envs:
     - name: OC_LOG_PRETTY
       value: "true"
diff --git a/ix-dev/community/opencloud/templates/test_values/https-values.yaml b/ix-dev/community/opencloud/templates/test_values/https-values.yaml
index dd7fdd27be..875d861dcd 100644
--- a/ix-dev/community/opencloud/templates/test_values/https-values.yaml
+++ b/ix-dev/community/opencloud/templates/test_values/https-values.yaml
@@ -41,15 +41,15 @@ opencloud:
   additional_csp:
     - directive: connect-src
       items:
-        - https://raw.githubusercontent.com/opencloud-eu/awesome-apps/
-        - https://update.opencloud.eu/
+        - value: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/
+        - value: https://update.opencloud.eu/
     - directive: frame-src
       items:
-        - https://embed.diagrams.net/
+        - value: https://embed.diagrams.net/
     - directive: img-src
       items:
-        - https://raw.githubusercontent.com/opencloud-eu/awesome-apps/
-        - https://tile.openstreetmap.org/
+        - value: https://raw.githubusercontent.com/opencloud-eu/awesome-apps/
+        - value: https://tile.openstreetmap.org/
   additional_envs: []
 
 network:
diff --git a/ix-dev/community/pocket-id/app.yaml b/ix-dev/community/pocket-id/app.yaml
index d60fa828fa..d27eb251e4 100644
--- a/ix-dev/community/pocket-id/app.yaml
+++ b/ix-dev/community/pocket-id/app.yaml
@@ -1,4 +1,4 @@
-app_version: v1.15.0
+app_version: v1.16.0
 capabilities: []
 categories:
 - authentication
@@ -37,4 +37,4 @@ sources:
 - https://github.com/pocket-id/pocket-id
 title: Pocket ID
 train: community
-version: 1.0.26
+version: 1.0.27
diff --git a/ix-dev/community/pocket-id/ix_values.yaml b/ix-dev/community/pocket-id/ix_values.yaml
index fa03b37b8d..cc00d782fc 100644
--- a/ix-dev/community/pocket-id/ix_values.yaml
+++ b/ix-dev/community/pocket-id/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: ghcr.io/pocket-id/pocket-id
-    tag: v1.15.0
+    tag: v1.16.0
   container_utils_image:
     repository: ixsystems/container-utils
     tag: 1.0.2
diff --git a/ix-dev/community/speedtest-tracker/app.yaml b/ix-dev/community/speedtest-tracker/app.yaml
index e58d173a00..1ffc1f898a 100644
--- a/ix-dev/community/speedtest-tracker/app.yaml
+++ b/ix-dev/community/speedtest-tracker/app.yaml
@@ -1,4 +1,4 @@
-app_version: 1.10.2
+app_version: 1.10.3
 capabilities:
 - description: Speedtest Tracker is able to change file ownership arbitrarily
   name: CHOWN
@@ -41,4 +41,4 @@ sources:
 - https://github.com/alexjustesen/speedtest-tracker
 title: Speedtest Tracker
 train: community
-version: 1.0.30
+version: 1.0.31
diff --git a/ix-dev/community/speedtest-tracker/ix_values.yaml b/ix-dev/community/speedtest-tracker/ix_values.yaml
index 1bd03ee622..ee5c3f4ca5 100644
--- a/ix-dev/community/speedtest-tracker/ix_values.yaml
+++ b/ix-dev/community/speedtest-tracker/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: ghcr.io/linuxserver/speedtest-tracker
-    tag: 1.10.2
+    tag: 1.10.3
 
 consts:
   speedtest_container_name: speedtest-tracker
diff --git a/ix-dev/community/spottarr/app.yaml b/ix-dev/community/spottarr/app.yaml
index 18d7b20ef1..ad215c3768 100644
--- a/ix-dev/community/spottarr/app.yaml
+++ b/ix-dev/community/spottarr/app.yaml
@@ -1,4 +1,4 @@
-app_version: 1.12.0
+app_version: 1.12.1
 capabilities: []
 categories:
 - networking
@@ -31,4 +31,4 @@ sources:
 - https://github.com/Spottarr/Spottarr
 title: Spottarr
 train: community
-version: 1.0.30
+version: 1.0.31
diff --git a/ix-dev/community/spottarr/ix_values.yaml b/ix-dev/community/spottarr/ix_values.yaml
index 408a6274bd..fd76f316ef 100644
--- a/ix-dev/community/spottarr/ix_values.yaml
+++ b/ix-dev/community/spottarr/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: ghcr.io/spottarr/spottarr
-    tag: 1.12.0
+    tag: 1.12.1
   container_utils_image:
     repository: ixsystems/container-utils
     tag: 1.0.2
diff --git a/ix-dev/community/tianji/app.yaml b/ix-dev/community/tianji/app.yaml
index 90c74a6202..f6b9aa805d 100644
--- a/ix-dev/community/tianji/app.yaml
+++ b/ix-dev/community/tianji/app.yaml
@@ -1,4 +1,4 @@
-app_version: 1.30.16
+app_version: 1.30.17
 capabilities: []
 categories:
 - monitoring
@@ -43,4 +43,4 @@ sources:
 - https://github.com/msgbyte/tianji
 title: Tianji
 train: community
-version: 1.0.125
+version: 1.0.126
diff --git a/ix-dev/community/tianji/ix_values.yaml b/ix-dev/community/tianji/ix_values.yaml
index 36405fdc7a..d2b8ac356b 100644
--- a/ix-dev/community/tianji/ix_values.yaml
+++ b/ix-dev/community/tianji/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: ghcr.io/msgbyte/tianji
-    tag: 1.30.16
+    tag: 1.30.17
   container_utils_image:
     repository: ixsystems/container-utils
     tag: 1.0.2
diff --git a/ix-dev/community/windmill/app.yaml b/ix-dev/community/windmill/app.yaml
index b0814514ff..0a50d0019a 100644
--- a/ix-dev/community/windmill/app.yaml
+++ b/ix-dev/community/windmill/app.yaml
@@ -1,4 +1,4 @@
-app_version: 1.586.0
+app_version: 1.587.0
 capabilities:
 - description: Worker Reports is able to change file ownership arbitrarily
   name: CHOWN
@@ -74,4 +74,4 @@ sources:
 - https://www.windmill.dev/
 title: Windmill
 train: community
-version: 1.0.138
+version: 1.0.139
diff --git a/ix-dev/community/windmill/ix_values.yaml b/ix-dev/community/windmill/ix_values.yaml
index 449bfd6f3d..c72a6e08f3 100644
--- a/ix-dev/community/windmill/ix_values.yaml
+++ b/ix-dev/community/windmill/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: ghcr.io/windmill-labs/windmill
-    tag: "1.586.0"
+    tag: "1.587.0"
   container_utils_image:
     repository: ixsystems/container-utils
     tag: 1.0.2
@@ -16,7 +16,7 @@ images:
     tag: "latest"
   lsp_image:
     repository: ghcr.io/windmill-labs/windmill-lsp
-    tag: "1.586.0"
+    tag: "1.587.0"
 
 consts:
   server_container_name: server