github: add GitHub-based versions.json updater (#10021)

* feat(workflow): add GitHub-based versions.json updater

Replaces newreleases.io with direct GitHub API queries.
Extracts repos from fetch_and_deploy_gh_release calls in install scripts.
Runs 2x daily (06:00 and 18:00 UTC).

* feat(workflow): extend version crawler with multiple sources

- Method 1: fetch_and_deploy_gh_release calls (direct)
- Method 2: GitHub URLs extracted from all scripts
- Method 3: VM image sources (HAOS)
- Method 4: Docker Hub / GHCR versions
- Method 5: npm Registry versions

Also tries tags fallback when no releases exist.

* feat(workflow): rewrite with version-sources.json config

- Generates version-sources.json with structured metadata
- Each entry has: slug, type, source, script, version, date
- Extracts from: fetch_and_deploy_gh_release, GitHub URLs, npm, Docker
- Generates versions.json for backward compatibility
- Fully automatic, no manual mapping needed

* feat(workflow): add manual GitHub mappings and pveam support

- Method 5: Manual GitHub mappings for 36 apt-based apps
  (grafana, redis, postgresql, mariadb, influxdb, etc.)
- Method 6: Proxmox LXC templates (debian, ubuntu, alpine)
  via download.proxmox.com index
- Method 7: Special sources (HAOS VM)

Total coverage: ~310+ apps

* feat(workflow): expand manual GitHub mappings to 75 apps

Added mappings for:
- Apache projects (cassandra, couchdb, guacamole, tomcat)
- Media apps (tdarr, unmanic, shinobi)
- DevOps (coolify, dokploy, runtipi, sonarqube)
- Databases (mongodb, mysql, neo4j, rabbitmq)
- And 30+ more apps

Total manual mappings: 75

* feat: add manual placeholders for 34 unknown-source apps

- Added 34 apps with 'manual:-' type for apps without known sources
- Added manual type handler in version-fetch (returns '-' placeholder)
- Added manual counter to summary output
- Coverage now 100% (all 405 scripts included)

Manual entries can be updated later when sources are discovered.

* Refactor and update GitHub workflow files

Moved several workflow files to a 'bak' backup directory and renamed 'close-ttek-issues.yaml' to 'close-tteck-issues.yaml'. Refactored 'update-versions-github.yml' to focus on extracting and updating GitHub versions, simplified the extraction logic, and updated the workflow schedule to run four times daily. Minor variable and logic improvements were made in 'close-discussion.yml'.

* clean file

* chore: empty versions.json for workflow test

.github/workflows/bak/close_template_issue.yml

@@ -0,0 +1,55 @@
+name: Auto-Close Wrong Template Issues
+on:
+  issues:
+    types: [opened]
+
+jobs:
+  close_tteck_issues:
+    if: github.repository == 'community-scripts/ProxmoxVE'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Auto-close if wrong Template issue detected
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const issue = context.payload.issue;
+            const content = `${issue.title}\n${issue.body}`;
+            const issueNumber = issue.number;
+
+            // Regex patterns (case-insensitive, flexible versioning)
+            const patterns = [
+              /Template\s+debian-13-standard_[\d.]+-[\d]+_amd64\.tar\.zst\s*\[(online|local)\]/i,
+              /Template\s+debian-13-standard_[\d.]+-[\d]+_amd64\.tar\.zst\s+is\s+missing\s+or\s+corrupted/i,
+              /Container\s+creation\s+failed\.?\s+Checking\s+if\s+template\s+is\s+corrupted\s+or\s+incomplete/i,
+              /Template\s+is\s+valid,\s+but\s+container\s+creation\s+still\s+failed/i,
+              /exit\s+code\s+0:\s+while\s+executing\s+command\s+bash\s+-c\s+"\$?\(curl\s+-fsSL\s+https:\/\/raw\.githubusercontent\.com\/[\w/-]+\/create_lxc\.sh\)"/i
+            ];
+
+            const matched = patterns.some((regex) => regex.test(content));
+
+            if (matched) {
+              const message = "👋 Hello!\n\n" +
+                "It looks like you are referencing a **container creation issue with a Debian 13 template** (e.g. `debian-13-standard_13.x-x_amd64.tar.zst`).\n\n" +
+                "We receive many similar reports about this, and it's not related to the scripts themselves but to **a Proxmox base template bug**.\n\n" +
+                "Please refer to [discussion #8126](https://github.com/community-scripts/ProxmoxVE/discussions/8126) for details.\n" +
+                "If your issue persists after following the guidance there, feel free to reopen this issue.\n\n" +
+                "_This issue was automatically closed by a bot._";
+
+              await github.rest.issues.createComment({
+                ...context.repo,
+                issue_number: issueNumber,
+                body: message
+              });
+
+              await github.rest.issues.addLabels({
+                ...context.repo,
+                issue_number: issueNumber,
+                labels: ["not planned"]
+              });
+
+              await github.rest.issues.update({
+                ...context.repo,
+                issue_number: issueNumber,
+                state: "closed"
+              });
+            }

.github/workflows/bak/crawl-versions.yaml

@@ -0,0 +1,126 @@
+name: Crawl Versions from newreleases.io
+
+on:
+  workflow_dispatch:
+  schedule:
+    # Runs at 12:00 AM and 12:00 PM UTC
+    - cron: "0 0,12 * * *"
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  crawl-versions:
+    if: github.repository == 'community-scripts/ProxmoxVE'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v2
+        with:
+          repository: community-scripts/ProxmoxVE
+          ref: main
+
+      - name: Generate a token
+        id: generate-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ vars.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
+      - name: Crawl from newreleases.io
+        env:
+          token: ${{ secrets.NEWRELEASES_TOKEN }}
+        run: |
+          page=1
+          projects_file="project_json"
+          output_file="frontend/public/json/versions.json"
+
+          echo "[]" > $output_file
+
+          while true; do
+
+            echo "Start loop on page: $page"
+
+            projects=$(curl -s -H "X-Key: $token" "https://api.newreleases.io/v1/projects?page=$page")
+            total_pages=$(echo "$projects" | jq -r '.total_pages')
+
+            if [ -z "$total_pages" ] || [ "$total_pages" -eq 0 ]; then
+             echo "No pages available. Exiting."
+             exit 1
+            fi
+            if [ $page == $total_pages ]; then
+              break
+            fi
+
+            if [ -z "$projects" ] || ! echo "$projects" | jq -e '.projects' > /dev/null; then
+              echo "No more projects or invalid response. Exiting."
+              break
+            fi
+
+            echo "$projects" > "$projects_file"
+
+            jq -r '.projects[] | "\(.id) \(.name)"' "$projects_file" | while read -r id name; do
+              version=$(curl -s -H "X-Key: $token" "https://api.newreleases.io/v1/projects/$id/latest-release")
+              version_data=$(echo "$version" | jq -r '.version // empty')
+              date=$(echo "$version" | jq -r '.date // empty')
+              if [ -n "$version_data" ]; then
+                jq --arg name "$name" --arg version "$version_data" --arg date "$date" \
+                  '. += [{"name": $name, "version": $version, "date": $date}]' "$output_file" > "$output_file.tmp" && mv "$output_file.tmp" "$output_file"
+              fi
+            done
+            ((page++))
+          done
+
+      - name: Commit JSON
+        env:
+          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
+        run: |
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "GitHub Actions[bot]"
+          git checkout -b update_versions || git checkout update_versions
+          git add frontend/public/json/versions.json
+          if git diff --cached --quiet; then
+            echo "No changes detected."
+            echo "changed=false" >> "$GITHUB_ENV"
+            exit 0
+          else
+            echo "Changes detected:"
+            git diff --stat --cached
+            echo "changed=true" >> "$GITHUB_ENV"
+          fi
+          git commit -m "Update versions.json"
+          git push origin update_versions --force
+          gh pr create --title "[Github Action] Update versions.json" --body "Update versions.json, crawled from newreleases.io" --base main --head update_versions --label "automated pr"
+
+      - name: Approve pull request
+        if: env.changed == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          PR_NUMBER=$(gh pr list --head "update_versions" --json number --jq '.[].number')
+          if [ -n "$PR_NUMBER" ]; then
+            gh pr review $PR_NUMBER --approve
+          fi
+
+      - name: Approve pull request and merge
+        if: env.changed == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.PAT_AUTOMERGE }}
+        run: |
+          PR_NUMBER=$(gh pr list --head "update_versions" --json number --jq '.[].number')
+          if [ -n "$PR_NUMBER" ]; then
+            gh pr review $PR_NUMBER --approve
+            gh pr merge $PR_NUMBER --squash --admin
+          fi
+
+      - name: Re-approve pull request after update
+        if: env.changed == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          PR_NUMBER=$(gh pr list --head "update_versions" --json number --jq '.[].number')
+          if [ -n "$PR_NUMBER" ]; then
+            gh pr review $PR_NUMBER --approve
+          fi

.github/workflows/bak/script-test.yml

@@ -0,0 +1,175 @@
+name: Run Scripts on PVE Node for testing
+permissions:
+  pull-requests: write
+on:
+  pull_request_target:
+    branches:
+      - main
+    paths:
+      - "install/**.sh"
+      - "ct/**.sh"
+
+jobs:
+  run-install-script:
+    if: github.repository == 'community-scripts/ProxmoxVE'
+    runs-on: pvenode
+    steps:
+      - name: Checkout PR branch
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          fetch-depth: 0
+
+      - name: Add Git safe directory
+        run: |
+          git config --global --add safe.directory /__w/ProxmoxVE/ProxmoxVE
+
+      - name: Set up GH_TOKEN
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          echo "GH_TOKEN=${GH_TOKEN}" >> $GITHUB_ENV
+
+      - name: Get Changed Files
+        run: |
+          CHANGED_FILES=$(gh pr diff ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --name-only)
+          CHANGED_FILES=$(echo "$CHANGED_FILES" | tr '\n' ' ')
+          echo "Changed files: $CHANGED_FILES"
+          echo "SCRIPT=$CHANGED_FILES" >> $GITHUB_ENV
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Get scripts
+        id: check-install-script
+        run: |
+          ALL_FILES=()
+          ADDED_FILES=()  
+          for FILE in ${{ env.SCRIPT }}; do           
+            if [[ $FILE =~ ^install/.*-install\.sh$ ]] || [[ $FILE =~ ^ct/.*\.sh$ ]]; then             
+              STRIPPED_NAME=$(basename "$FILE" | sed 's/-install//' | sed 's/\.sh$//')
+              if [[ ! " ${ADDED_FILES[@]} " =~ " $STRIPPED_NAME " ]]; then
+                ALL_FILES+=("$FILE")
+                ADDED_FILES+=("$STRIPPED_NAME")  # Mark this base file as added (without the path)
+              fi
+            fi
+          done
+          ALL_FILES=$(echo "${ALL_FILES[@]}" | xargs)
+          echo "$ALL_FILES"
+          echo "ALL_FILES=$ALL_FILES" >> $GITHUB_ENV
+
+      - name: Run scripts
+        id: run-install
+        continue-on-error: true
+        run: |
+          set +e  
+          #run for each files in /ct
+          for FILE in ${{ env.ALL_FILES }}; do            
+            STRIPPED_NAME=$(basename "$FILE" | sed 's/-install//' | sed 's/\.sh$//')
+            echo "Running Test for: $STRIPPED_NAME"
+            if grep -E -q 'read\s+-r\s+-p\s+".*"\s+\w+' "$FILE"; then
+              echo "The script contains an interactive prompt. Skipping execution."
+              continue
+            fi
+            if [[ $FILE =~ ^install/.*-install\.sh$ ]]; then
+              CT_SCRIPT="ct/$STRIPPED_NAME.sh"
+              if [[ ! -f $CT_SCRIPT ]]; then
+                echo "No CT script found for $STRIPPED_NAME"
+                ERROR_MSG="No CT script found for $FILE"
+                echo "$ERROR_MSG" > result_$STRIPPED_NAME.log
+                continue
+              fi
+                if grep -E -q 'read\s+-r\s+-p\s+".*"\s+\w+' "install/$STRIPPED_NAME-install.sh"; then
+                  echo "The script contains an interactive prompt. Skipping execution."
+                  continue
+                fi
+                echo "Found CT script for $STRIPPED_NAME"
+                chmod +x "$CT_SCRIPT"
+                RUNNING_FILE=$CT_SCRIPT
+            elif [[ $FILE =~ ^ct/.*\.sh$ ]]; then
+              INSTALL_SCRIPT="install/$STRIPPED_NAME-install.sh"
+              if [[ ! -f $INSTALL_SCRIPT ]]; then
+                echo "No install script found for $STRIPPED_NAME"
+                ERROR_MSG="No install script found for $FILE"
+                echo "$ERROR_MSG" > result_$STRIPPED_NAME.log
+                continue
+              fi                
+                echo "Found install script for $STRIPPED_NAME"
+                chmod +x "$INSTALL_SCRIPT"
+                RUNNING_FILE=$FILE
+                if grep -E -q 'read\s+-r\s+-p\s+".*"\s+\w+' "ct/$STRIPPED_NAME.sh"; then
+                  echo "The script contains an interactive prompt. Skipping execution."
+                  continue
+                fi
+            fi
+            git remote add community-scripts https://github.com/community-scripts/ProxmoxVE.git
+            git fetch community-scripts
+            rm -f .github/workflows/scripts/app-test/pr-build.func || true
+            rm -f .github/workflows/scripts/app-test/pr-install.func || true
+            rm -f .github/workflows/scripts/app-test/pr-alpine-install.func || true
+            rm -f .github/workflows/scripts/app-test/pr-create-lxc.sh || true
+            git checkout community-scripts/main -- .github/workflows/scripts/app-test/pr-build.func
+            git checkout community-scripts/main -- .github/workflows/scripts/app-test/pr-install.func
+            git checkout community-scripts/main -- .github/workflows/scripts/app-test/pr-alpine-install.func
+            git checkout community-scripts/main -- .github/workflows/scripts/app-test/pr-create-lxc.sh
+            chmod +x $RUNNING_FILE         
+            chmod +x .github/workflows/scripts/app-test/pr-create-lxc.sh
+            chmod +x .github/workflows/scripts/app-test/pr-install.func
+            chmod +x .github/workflows/scripts/app-test/pr-alpine-install.func
+            chmod +x .github/workflows/scripts/app-test/pr-build.func
+            sed -i 's|source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)|source .github/workflows/scripts/app-test/pr-build.func|g' "$RUNNING_FILE"
+            echo "Executing $RUNNING_FILE"
+            ERROR_MSG=$(./$RUNNING_FILE 2>&1 > /dev/null)
+            echo "Finished running $FILE"
+            if [ -n "$ERROR_MSG" ]; then
+              echo "ERROR in $STRIPPED_NAME: $ERROR_MSG"
+              echo "$ERROR_MSG" > result_$STRIPPED_NAME.log
+            fi
+          done
+          set -e  # Restore exit-on-error
+
+      - name: Cleanup PVE Node
+        run: |
+          containers=$(pct list | tail -n +2 | awk '{print $0 " " $4}' | awk '{print $1}')
+
+          for container_id in $containers; do
+            status=$(pct status $container_id | awk '{print $2}')
+            if [[ $status == "running" ]]; then
+                pct stop $container_id
+                pct destroy $container_id
+            fi            
+          done
+
+      - name: Post error comments
+        run: |
+          ERROR="false"
+          SEARCH_LINE=".github/workflows/scripts/app-test/pr-build.func: line 255:"
+
+          # Get all existing comments on the PR
+          EXISTING_COMMENTS=$(gh pr view ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --json comments --jq '.comments[].body')
+
+          for FILE in ${{ env.ALL_FILES }}; do
+            STRIPPED_NAME=$(basename "$FILE" | sed 's/-install//' | sed 's/\.sh$//')
+            if [[ ! -f result_$STRIPPED_NAME.log ]]; then
+              continue
+            fi
+            ERROR_MSG=$(cat result_$STRIPPED_NAME.log)
+
+            if [ -n "$ERROR_MSG" ]; then
+              CLEANED_ERROR_MSG=$(echo "$ERROR_MSG" | sed "s|$SEARCH_LINE.*||")
+              COMMENT_BODY=":warning: The script _**$FILE**_ failed with the following message: <br> <div><strong>${CLEANED_ERROR_MSG}</strong></div>"
+
+              # Check if the comment already exists
+              if echo "$EXISTING_COMMENTS" | grep -qF "$COMMENT_BODY"; then
+                echo "Skipping duplicate comment for $FILE"
+              else
+                echo "Posting error message for $FILE"
+                gh pr comment ${{ github.event.pull_request.number }} \
+                  --repo ${{ github.repository }} \
+                  --body "$COMMENT_BODY"
+                ERROR="true"
+              fi
+            fi
+          done
+
+          echo "ERROR=$ERROR" >> $GITHUB_ENV

.github/workflows/bak/script_format.yml

@@ -0,0 +1,243 @@
+name: Script Format Check
+permissions:
+  pull-requests: write
+on:
+  pull_request_target:
+    branches:
+      - main
+    paths:
+      - "install/*.sh"
+      - "ct/*.sh"
+
+jobs:
+  run-install-script:
+    if: github.repository == 'community-scripts/ProxmoxVE'
+    runs-on: pvenode
+    steps:
+      - name: Checkout PR branch (supports forks)
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          fetch-depth: 0
+
+      - name: Add Git safe directory
+        run: |
+          git config --global --add safe.directory /__w/ProxmoxVE/ProxmoxVE
+
+      - name: Set up GH_TOKEN
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          echo "GH_TOKEN=${GH_TOKEN}" >> $GITHUB_ENV
+
+      - name: Get Changed Files
+        run: |
+          CHANGED_FILES=$(gh pr diff ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --name-only)
+          CHANGED_FILES=$(echo "$CHANGED_FILES" | tr '\n' ' ')
+          echo "Changed files: $CHANGED_FILES"
+          echo "SCRIPT=$CHANGED_FILES" >> $GITHUB_ENV
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Check scripts
+        id: run-install
+        continue-on-error: true
+        run: |
+          for FILE in ${{ env.SCRIPT }}; do
+              STRIPPED_NAME=$(basename "$FILE" | sed 's/-install//' | sed 's/\.sh$//')
+              echo "Running Test for: $STRIPPED_NAME"
+              FILE_STRIPPED="${FILE##*/}"
+              LOG_FILE="result_$FILE_STRIPPED.log"
+
+              if [[ $FILE =~ ^ct/.*\.sh$ ]]; then
+
+                FIRST_LINE=$(sed -n '1p' "$FILE")
+                [[ "$FIRST_LINE" != "#!/usr/bin/env bash" ]] && echo "Line 1 was $FIRST_LINE | Should be: #!/usr/bin/env bash" >> "$LOG_FILE"
+                SECOND_LINE=$(sed -n '2p' "$FILE")
+                [[ "$SECOND_LINE" != "source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)" ]] && 
+                echo "Line 2 was $SECOND_LINE | Should be: source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)" >> "$LOG_FILE"
+                THIRD_LINE=$(sed -n '3p' "$FILE")
+                 if ! [[ "$THIRD_LINE" =~ ^#\ Copyright\ \(c\)\ [0-9]{4}-[0-9]{4}\ community-scripts\ ORG$ || "$THIRD_LINE" =~ ^Copyright\ \(c\)\ [0-9]{4}-[0-9]{4}\ tteck$ ]]; then
+                     echo "Line 3 was $THIRD_LINE | Should be: # Copyright (c) 2021-2026 community-scripts ORG" >> "$LOG_FILE"
+                 fi
+
+              EXPECTED_AUTHOR="# Author:"
+              EXPECTED_LICENSE="# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE"
+              EXPECTED_SOURCE="# Source:"
+              EXPECTED_EMPTY=""
+
+              for i in {4..7}; do
+                  LINE=$(sed -n "${i}p" "$FILE")
+
+                  case $i in
+                      4) 
+                          [[ $LINE == $EXPECTED_AUTHOR* ]] || printf "Line %d was: '%s' | Should start with: '%s'\n" "$i" "$LINE" "$EXPECTED_AUTHOR" >> $LOG_FILE
+                          ;;
+                      5) 
+                          [[ "$LINE" == "$EXPECTED_LICENSE" ]] || printf "Line %d was: '%s' | Should be: '%s'\n" "$i" "$LINE" "$EXPECTED_LICENSE" >> $LOG_FILE
+                          ;;
+                      6) 
+                          [[ $LINE == $EXPECTED_SOURCE* ]] || printf "Line %d was: '%s' | Should start with: '%s'\n" "$i" "$LINE" "$EXPECTED_SOURCE" >> $LOG_FILE
+                          ;;
+                      7) 
+                          [[ -z $LINE ]] || printf "Line %d was: '%s' | Should be empty\n" "$i" "$LINE" >> $LOG_FILE
+                          ;;
+                  esac
+              done
+                  
+              
+              EXPECTED_PREFIXES=(
+                  "APP="
+                  "var_tags="
+                  "var_cpu="   # Must be a number
+                  "var_ram="   # Must be a number
+                  "var_disk="  # Must be a number
+                  "var_os="    # Must be debian, alpine, or ubuntu
+                  "var_version="
+                  "var_unprivileged="  # Must be 0 or 1
+              )
+
+
+              for i in {8..15}; do
+                  LINE=$(sed -n "${i}p" "$FILE")
+                  INDEX=$((i - 8))
+
+                  case $INDEX in
+                      2|3|4)  # var_cpu, var_ram, var_disk (must be numbers)
+                          if [[ "$LINE" =~ ^${EXPECTED_PREFIXES[$INDEX]}([0-9]+)$ ]]; then
+                              continue  # Valid
+                          else
+                              echo "Line $i was '$LINE' | Should be: '${EXPECTED_PREFIXES[$INDEX]}<NUMBER>'" >> "$LOG_FILE"
+                          fi
+                          ;;
+                      5)  # var_os (must be debian, alpine, or ubuntu)
+                          if [[ "$LINE" =~ ^var_os=(debian|alpine|ubuntu)$ ]]; then
+                              continue  # Valid
+                          else
+                              echo "Line $i was '$LINE' | Should be: 'var_os=[debian|alpine|ubuntu]'" >> "$LOG_FILE"
+                          fi
+                          ;;
+                      7)  # var_unprivileged (must be 0 or 1)
+                          if [[ "$LINE" =~ ^var_unprivileged=[01]$ ]]; then
+                              continue  # Valid
+                          else
+                              echo "Line $i was '$LINE' | Should be: 'var_unprivileged=[0|1]'" >> "$LOG_FILE"
+                          fi
+                          ;;
+                      *)  # Other lines (must start with expected prefix)
+                          if [[ "$LINE" == ${EXPECTED_PREFIXES[$INDEX]}* ]]; then
+                              continue  # Valid
+                          else
+                              echo "Line $i was '$LINE' | Should start with '${EXPECTED_PREFIXES[$INDEX]}'" >> "$LOG_FILE"
+                          fi
+                          ;;
+                  esac
+              done
+
+              for i in {16..20}; do
+                  LINE=$(sed -n "${i}p" "$FILE")
+                  EXPECTED=(
+                      "header_info \"$APP\""
+                      "variables"
+                      "color"
+                      "catch_errors"
+                      "function update_script() {"
+                  )
+                  [[ "$LINE" != "${EXPECTED[$((i-16))]}" ]] && echo "Line $i was $LINE | Should be: ${EXPECTED[$((i-16))]}" >> "$LOG_FILE"
+              done
+            cat "$LOG_FILE"
+          elif [[ $FILE =~ ^install/.*-install\.sh$ ]]; then
+
+              FIRST_LINE=$(sed -n '1p' "$FILE")
+              [[ "$FIRST_LINE" != "#!/usr/bin/env bash" ]] && echo "Line 1 was $FIRST_LINE | Should be: #!/usr/bin/env bash" >> "$LOG_FILE"
+
+              SECOND_LINE=$(sed -n '2p' "$FILE")
+              [[ -n "$SECOND_LINE" ]] && echo "Line 2 should be empty" >> "$LOG_FILE"
+
+              THIRD_LINE=$(sed -n '3p' "$FILE")
+              if ! [[ "$THIRD_LINE" =~ ^#\ Copyright\ \(c\)\ [0-9]{4}-[0-9]{4}\ community-scripts\ ORG$ || "$THIRD_LINE" =~ ^Copyright\ \(c\)\ [0-9]{4}-[0-9]{4}\ tteck$ ]]; then
+                  echo "Line 3 was $THIRD_LINE | Should be: # Copyright (c) 2021-2026 community-scripts ORG" >> "$LOG_FILE"
+              fi
+
+              EXPECTED_AUTHOR="# Author:"
+              EXPECTED_LICENSE="# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE"
+              EXPECTED_SOURCE="# Source:"
+              EXPECTED_EMPTY=""
+
+              for i in {4..7}; do
+                  LINE=$(sed -n "${i}p" "$FILE")
+
+                  case $i in
+                      4) 
+                          [[ $LINE == $EXPECTED_AUTHOR* ]] || printf "Line %d was: '%s' | Should start with: '%s'\n" "$i" "$LINE" "$EXPECTED_AUTHOR" >> $LOG_FILE
+                          ;;
+                      5) 
+                          [[ "$LINE" == "$EXPECTED_LICENSE" ]] || printf "Line %d was: '%s' | Should be: '%s'\n" "$i" "$LINE" "$EXPECTED_LICENSE" >> $LOG_FILE
+                          ;;
+                      6) 
+                          [[ $LINE == $EXPECTED_SOURCE* ]] || printf "Line %d was: '%s' | Should start with: '%s'\n" "$i" "$LINE" "$EXPECTED_SOURCE" >> $LOG_FILE
+                          ;;
+                      7) 
+                          [[ -z $LINE ]] || printf "Line %d was: '%s' | Should be empty\n" "$i" "$LINE" >> $LOG_FILE
+                          ;;
+                  esac
+              done
+
+            [[ "$(sed -n '8p' "$FILE")" != 'source /dev/stdin <<< "$FUNCTIONS_FILE_PATH"' ]] && echo 'Line 8 should be: source /dev/stdin <<< "$FUNCTIONS_FILE_PATH"' >> "$LOG_FILE"
+
+            for i in {9..14}; do
+                LINE=$(sed -n "${i}p" "$FILE")
+                EXPECTED=(
+                    "color"
+                    "verb_ip6"
+                    "catch_errors"
+                    "setting_up_container"
+                    "network_check"
+                    "update_os"
+                )
+                [[ "$LINE" != "${EXPECTED[$((i-9))]}" ]] && echo "Line $i was $LINE | Should be: ${EXPECTED[$((i-9))]}" >> "$LOG_FILE"
+            done
+
+            [[ -n "$(sed -n '15p' "$FILE")" ]] && echo "Line 15 should be empty" >> "$LOG_FILE"
+            [[ "$(sed -n '16p' "$FILE")" != 'msg_info "Installing Dependencies"' ]] && echo 'Line 16 should be: msg_info "Installing Dependencies"' >> "$LOG_FILE"
+
+            LAST_3_LINES=$(tail -n 3 "$FILE")
+            [[ "$LAST_3_LINES" != *"$STD apt-get -y autoremove"* ]] && echo 'Third to last line should be: $STD apt-get -y autoremove' >> "$LOG_FILE"
+            [[ "$LAST_3_LINES" != *"$STD apt-get -y autoclean"* ]] && echo 'Second to last line should be: $STD apt-get -y clean' >> "$LOG_FILE"
+            [[ "$LAST_3_LINES" != *'msg_ok "Cleaned"'* ]] && echo 'Last line should be: msg_ok "Cleaned"' >> "$LOG_FILE"
+          cat "$LOG_FILE"
+          fi
+            
+          done
+
+      - name: Post error comments
+        run: |
+          ERROR="false"
+          for FILE in ${{ env.SCRIPT }}; do
+            FILE_STRIPPED="${FILE##*/}"
+            LOG_FILE="result_$FILE_STRIPPED.log"
+            echo $LOG_FILE
+            if [[ ! -f $LOG_FILE ]]; then
+              continue
+            fi
+            ERROR_MSG=$(cat $LOG_FILE)
+
+            if [ -n "$ERROR_MSG" ]; then
+              echo "Posting error message for $FILE"
+              echo ${ERROR_MSG}
+              gh pr comment ${{ github.event.pull_request.number }} \
+                --repo ${{ github.repository }} \
+                --body ":warning: The script _**$FILE**_ has the following formatting errors: <br> <div><strong>${ERROR_MSG}</strong></div>"
+
+              
+              ERROR="true"
+            fi
+          done
+          echo "ERROR=$ERROR" >> $GITHUB_ENV
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Fail if error
+        if: ${{ env.ERROR == 'true' }}
+        run: exit 1

.github/workflows/bak/validate-filenames.yml

@@ -0,0 +1,158 @@
+name: Validate filenames
+
+on:
+  pull_request_target:
+    paths:
+      - "ct/*.sh"
+      - "install/*.sh"
+      - "frontend/public/json/*.json"
+
+jobs:
+  check-files:
+    if: github.repository == 'community-scripts/ProxmoxVE'
+    name: Check changed files
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+
+    steps:
+      - name: Get pull request information
+        if: github.event_name == 'pull_request_target'
+        uses: actions/github-script@v7
+        id: pr
+        with:
+          script: |
+            const { data: pullRequest } = await github.rest.pulls.get({
+              ...context.repo,
+              pull_number: context.payload.pull_request.number,
+            });
+            return pullRequest;
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # Ensure the full history is fetched for accurate diffing
+          ref: ${{ github.event_name == 'pull_request_target' && fromJSON(steps.pr.outputs.result).merge_commit_sha || '' }}
+
+      - name: Get changed files
+        id: changed-files
+        run: |
+          if ${{ github.event_name == 'pull_request_target' }}; then
+              echo "files=$(git diff --name-only ${{ github.event.pull_request.base.sha }} ${{ steps.pr.outputs.result && fromJSON(steps.pr.outputs.result).merge_commit_sha }} | xargs)" >> $GITHUB_OUTPUT
+          else
+              echo "files=$(git diff --name-only ${{ github.event.before }} ${{ github.event.after }} | xargs)" >> $GITHUB_OUTPUT
+          fi
+
+      - name: "Validate filenames in ct and install directory"
+        if: always() && steps.changed-files.outputs.files != ''
+        id: check-scripts
+        run: |
+          CHANGED_FILES=$(printf "%s\n" ${{ steps.changed-files.outputs.files }} | { grep -E '^(ct|install)/.*\.sh$' || true; })
+
+          NON_COMPLIANT_FILES=""
+          for FILE in $CHANGED_FILES; do
+            BASENAME=$(echo "$(basename "${FILE%.*}")")
+            if [[ ! "$BASENAME" =~ ^[a-z0-9-]+$ ]]; then
+              NON_COMPLIANT_FILES="$NON_COMPLIANT_FILES $FILE"
+            fi
+          done
+
+          if [ -n "$NON_COMPLIANT_FILES" ]; then
+            echo "files=$NON_COMPLIANT_FILES" >> $GITHUB_OUTPUT
+            echo "Non-compliant filenames found, change to lowercase:"
+            for FILE in $NON_COMPLIANT_FILES; do
+              echo "$FILE"
+            done
+            exit 1
+          fi
+
+      - name: "Validate filenames in json directory."
+        if: always() && steps.changed-files.outputs.files != ''
+        id: check-json
+        run: |
+          CHANGED_FILES=$(printf "%s\n" ${{ steps.changed-files.outputs.files }} | { grep -E '^json/.*\.json$' || true; })
+
+          NON_COMPLIANT_FILES=""
+          for FILE in $CHANGED_FILES; do
+            BASENAME=$(echo "$(basename "${FILE%.*}")")
+            if [[ ! "$BASENAME" =~ ^[a-z0-9-]+$ ]]; then
+                    NON_COMPLIANT_FILES="$NON_COMPLIANT_FILES $FILE"
+            fi
+          done
+
+          if [ -n "$NON_COMPLIANT_FILES" ]; then
+            echo "files=$NON_COMPLIANT_FILES" >> $GITHUB_OUTPUT
+            echo "Non-compliant filenames found, change to lowercase:"
+            for FILE in $NON_COMPLIANT_FILES; do
+              echo "$FILE"
+            done
+            exit 1
+          fi
+
+      - name: Post results and comment
+        if: always() && steps.check-scripts.outputs.files != '' && steps.check-json.outputs.files != '' && github.event_name == 'pull_request_target'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const result = "${{ job.status }}" === "success" ? "success" : "failure";
+            const nonCompliantFiles = {
+              script: "${{ steps.check-scripts.outputs.files }}",
+              JSON: "${{ steps.check-json.outputs.files }}",
+            };
+
+            const issueNumber = context.payload.pull_request
+              ? context.payload.pull_request.number
+              : null;
+            const commentIdentifier = "validate-filenames";
+            let newCommentBody = `<!-- ${commentIdentifier}-start -->\n### Filename validation\n\n`;
+
+            if (result === "failure") {
+              newCommentBody += ":x: We found issues in the following changed files:\n\n";
+              for (const [check, files] of Object.entries(nonCompliantFiles)) {
+                if (files) {
+                  newCommentBody += `**${check.charAt(0).toUpperCase() + check.slice(1)} filename invalid:**\n${files
+                    .trim()
+                    .split(" ")
+                    .map((file) => `- ${file}`)
+                    .join("\n")}\n\n`;
+                }
+              }
+              newCommentBody +=
+                "Please change the filenames to lowercase and use only alphanumeric characters and dashes.\n";
+            } else {
+              newCommentBody += `:rocket: All files passed filename validation!\n`;
+            }
+
+            newCommentBody += `\n\n<!-- ${commentIdentifier}-end -->`;
+
+            if (issueNumber) {
+              const { data: comments } = await github.rest.issues.listComments({
+                ...context.repo,
+                issue_number: issueNumber,
+              });
+
+              const existingComment = comments.find(
+                (comment) => comment.user.login === "github-actions[bot]",
+              );
+
+              if (existingComment) {
+                if (existingComment.body.includes(commentIdentifier)) {
+                  const re = new RegExp(String.raw`<!-- ${commentIdentifier}-start -->[\s\S]*?<!-- ${commentIdentifier}-end -->`, "");
+                  newCommentBody = existingComment.body.replace(re, newCommentBody);
+                } else {
+                  newCommentBody = existingComment.body + '\n\n---\n\n' + newCommentBody;
+                }
+
+                await github.rest.issues.updateComment({
+                  ...context.repo,
+                  comment_id: existingComment.id,
+                  body: newCommentBody,
+                });
+              } else {
+                await github.rest.issues.createComment({
+                  ...context.repo,
+                  issue_number: issueNumber,
+                  body: newCommentBody,
+                });
+              }
+            }