Merge branch 'refs/heads/2025.03'

# Conflicts:
#	.github/workflows/sentry.yaml

Author: al-one

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -26,7 +26,7 @@ body:
     attributes:
       label: What type of installation are you running?
       description: >
-        If you don't know, can be found in [Settings -> System -> Repairs -> System Information](https://my.home-assistant.io/redirect/system_health/).
+        If you don't know, can be found in [Settings -> System -> Repairs -> (three dot menu) -> System Information](https://my.home-assistant.io/redirect/system_health/).
         It is listed as the `Installation Type` value.
       options:
         - Home Assistant OS
@@ -72,9 +72,9 @@ body:
     validations:
       required: true
     attributes:
-      label: System Health information
+      label: System information
       description: >
-        System Health information can be found in the top right menu in [Settings -> System -> Repairs](https://my.home-assistant.io/redirect/repairs/).
+        The System information can be found in [Settings -> System -> Repairs -> (three dot menu) -> System Information](https://my.home-assistant.io/redirect/system_health/).
         Click the copy button at the bottom of the pop-up and paste it here.
         
         [![Open your Home Assistant instance and show health information about your system.](https://my.home-assistant.io/badges/system_health.svg)](https://my.home-assistant.io/redirect/system_health/)
@@ -83,8 +83,9 @@ body:
       label: Supervisor diagnostics
       placeholder: "drag-and-drop the diagnostics data file here (do not copy-and-paste the content)"
       description: >-
-        Supervisor diagnostics can be found in [Settings -> Integrations](https://my.home-assistant.io/redirect/integrations/).
-        Find the card that says `Home Assistant Supervisor`, open its menu and select 'Download diagnostics'.
+        Supervisor diagnostics can be found in [Settings -> Devices & services](https://my.home-assistant.io/redirect/integrations/).
+        Find the card that says `Home Assistant Supervisor`, open it, and select the three dot menu of the Supervisor integration entry
+        and select 'Download diagnostics'.
         
         **Please drag-and-drop the downloaded file into the textbox below. Do not copy and paste its contents.**
   - type: textarea

.github/workflows/builder.yml

@@ -106,9 +106,9 @@ jobs:
 
       - name: Build wheels
         if: needs.init.outputs.requirements == 'true'
-        uses: home-assistant/wheels@2024.11.0
+        uses: home-assistant/wheels@2025.02.0
         with:
-          abi: cp312
+          abi: cp313
           tag: musllinux_1_2
           arch: ${{ matrix.arch }}
           wheels-key: ${{ secrets.WHEELS_KEY }}
@@ -131,7 +131,7 @@ jobs:
 
       - name: Install Cosign
         if: needs.init.outputs.publish == 'true'
-        uses: sigstore/[email protected].0
+        uses: sigstore/[email protected].1
         with:
           cosign-release: "v2.4.0"
 
@@ -160,7 +160,7 @@ jobs:
         run: echo "BUILD_ARGS=--test" >> $GITHUB_ENV
 
       - name: Build supervisor
-        uses: home-assistant/builder@2024.08.2
+        uses: home-assistant/builder@2025.02.0
         with:
           args: |
             $BUILD_ARGS \
@@ -208,7 +208,7 @@ jobs:
 
       - name: Build the Supervisor
         if: needs.init.outputs.publish != 'true'
-        uses: home-assistant/builder@2024.08.2
+        uses: home-assistant/builder@2025.02.0
         with:
           args: |
             --test \

.github/workflows/ci.yaml

@@ -33,7 +33,7 @@ jobs:
           python-version: ${{ env.DEFAULT_PYTHON }}
       - name: Restore Python virtual environment
         id: cache-venv
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: venv
           key: |
@@ -47,7 +47,7 @@ jobs:
           pip install -r requirements.txt -r requirements_tests.txt
       - name: Restore pre-commit environment from cache
         id: cache-precommit
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: ${{ env.PRE_COMMIT_CACHE }}
           lookup-only: true
@@ -75,7 +75,7 @@ jobs:
           python-version: ${{ needs.prepare.outputs.python-version }}
       - name: Restore Python virtual environment
         id: cache-venv
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: venv
           key: |
@@ -87,7 +87,7 @@ jobs:
           exit 1
       - name: Restore pre-commit environment from cache
         id: cache-precommit
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: ${{ env.PRE_COMMIT_CACHE }}
           key: |
@@ -118,7 +118,7 @@ jobs:
           python-version: ${{ needs.prepare.outputs.python-version }}
       - name: Restore Python virtual environment
         id: cache-venv
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: venv
           key: |
@@ -130,7 +130,7 @@ jobs:
           exit 1
       - name: Restore pre-commit environment from cache
         id: cache-precommit
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: ${{ env.PRE_COMMIT_CACHE }}
           key: |
@@ -176,7 +176,7 @@ jobs:
           python-version: ${{ needs.prepare.outputs.python-version }}
       - name: Restore Python virtual environment
         id: cache-venv
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: venv
           key: |
@@ -188,7 +188,7 @@ jobs:
           exit 1
       - name: Restore pre-commit environment from cache
         id: cache-precommit
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: ${{ env.PRE_COMMIT_CACHE }}
           key: |
@@ -220,7 +220,7 @@ jobs:
           python-version: ${{ needs.prepare.outputs.python-version }}
       - name: Restore Python virtual environment
         id: cache-venv
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: venv
           key: |
@@ -232,7 +232,7 @@ jobs:
           exit 1
       - name: Restore pre-commit environment from cache
         id: cache-precommit
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: ${{ env.PRE_COMMIT_CACHE }}
           key: |
@@ -264,7 +264,7 @@ jobs:
           python-version: ${{ needs.prepare.outputs.python-version }}
       - name: Restore Python virtual environment
         id: cache-venv
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: venv
           key: |
@@ -299,12 +299,12 @@ jobs:
         with:
           python-version: ${{ needs.prepare.outputs.python-version }}
       - name: Install Cosign
-        uses: sigstore/[email protected].0
+        uses: sigstore/[email protected].1
         with:
           cosign-release: "v2.4.0"
       - name: Restore Python virtual environment
         id: cache-venv
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: venv
           key: |
@@ -339,7 +339,7 @@ jobs:
             -o console_output_style=count \
             tests
       - name: Upload coverage artifact
-        uses: actions/[email protected].0
+        uses: actions/[email protected].1
         with:
           name: coverage-${{ matrix.python-version }}
           path: .coverage
@@ -359,7 +359,7 @@ jobs:
           python-version: ${{ needs.prepare.outputs.python-version }}
       - name: Restore Python virtual environment
         id: cache-venv
-        uses: actions/[email protected].0
+        uses: actions/[email protected].2
         with:
           path: venv
           key: |
@@ -370,12 +370,12 @@ jobs:
           echo "Failed to restore Python virtual environment from cache"
           exit 1
       - name: Download all coverage artifacts
-        uses: actions/[email protected].8
+        uses: actions/[email protected].9
       - name: Combine coverage results
         run: |
           . venv/bin/activate
           coverage combine coverage*/.coverage*
           coverage report
           coverage xml
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5.3.1
+        uses: codecov/codecov-action@v5.4.0

.github/workflows/sentry.yaml

@@ -3,7 +3,7 @@ name: Sentry Release
 # yamllint disable-line rule:truthy
 on:
   release:
-    types: [published, prereleased]
+    types: [prereleased]
 
 jobs:
   createSentryRelease:
@@ -12,8 +12,7 @@ jobs:
       - name: Check out code from GitHub
         uses: actions/[email protected]
       - name: Sentry Release
-        uses: getsentry/[email protected]
-        if: ${{ secrets.SENTRY_ORG != '' }}
+        uses: getsentry/[email protected]
         env:
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
           SENTRY_ORG: ${{ secrets.SENTRY_ORG }}

.github/workflows/update_frontend.yml

@@ -10,7 +10,8 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       skip: ${{ steps.check_version.outputs.skip || steps.check_existing_pr.outputs.skip }}
-      latest_tag: ${{ steps.latest_frontend_version.outputs.latest_tag }}
+      current_version: ${{ steps.check_version.outputs.current_version }}
+      latest_version: ${{ steps.latest_frontend_version.outputs.latest_tag }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -23,11 +24,11 @@ jobs:
       - name: Check if version is up to date
         id: check_version
         run: |
-          SUPERVISOR_VERSION=$(cat .ha-frontend-version)
-          LATEST_VERSION=${{ steps.latest_frontend_version.outputs.latest_tag }}
-          echo "SUPERVISOR_VERSION=$SUPERVISOR_VERSION" >> $GITHUB_ENV
-          echo "LATEST_VERSION=$LATEST_VERSION" >> $GITHUB_ENV
-          if [[ ! "$SUPERVISOR_VERSION" < "$LATEST_VERSION" ]]; then
+          current_version="$(cat .ha-frontend-version)"
+          latest_version="${{ steps.latest_frontend_version.outputs.latest_tag }}"
+          echo "current_version=${current_version}" >> $GITHUB_OUTPUT
+          echo "LATEST_VERSION=${latest_version}" >> $GITHUB_ENV
+          if [[ ! "$current_version" < "$latest_version" ]]; then
             echo "Frontend version is up to date"
             echo "skip=true" >> $GITHUB_OUTPUT
           fi
@@ -37,7 +38,7 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
-          PR=$(gh pr list --state open --base main --json title --search "Autoupdate frontend to version $LATEST_VERSION")
+          PR=$(gh pr list --state open --base main --json title --search "Update frontend to version $LATEST_VERSION")
           if [[ "$PR" != "[]" ]]; then
             echo "Skipping - There is already a PR open for version $LATEST_VERSION"
             echo "skip=true" >> $GITHUB_OUTPUT
@@ -54,21 +55,25 @@ jobs:
           rm -rf supervisor/api/panel/*
       - name: Update version file
         run: |
-          echo "${{ needs.check-version.outputs.latest_tag }}" > .ha-frontend-version
+          echo "${{ needs.check-version.outputs.latest_version }}" > .ha-frontend-version
       - name: Download release assets
         uses: robinraju/release-downloader@v1
         with:
           repository: 'home-assistant/frontend'
-          tag: ${{ needs.check-version.outputs.latest_tag }}
-          fileName: home_assistant_frontend_supervisor-${{ needs.check-version.outputs.latest_tag }}.tar.gz
+          tag: ${{ needs.check-version.outputs.latest_version }}
+          fileName: home_assistant_frontend_supervisor-${{ needs.check-version.outputs.latest_version }}.tar.gz
           extract: true
           out-file-path: supervisor/api/panel/
       - name: Create PR
         uses: peter-evans/create-pull-request@v7
         with:
-          commit-message: "Autoupdate frontend to version ${{ needs.check-version.outputs.latest_tag }}"
+          commit-message: "Update frontend to version ${{ needs.check-version.outputs.latest_version }}"
           branch: autoupdate-frontend
           base: main
           draft: true
           sign-commits: true
-          title: "Autoupdate frontend to version ${{ needs.check-version.outputs.latest_tag }}"
+          title: "Update frontend to version ${{ needs.check-version.outputs.latest_version }}"
+          body: >
+            Update frontend from ${{ needs.check-version.outputs.current_version }} to
+            [${{ needs.check-version.outputs.latest_version }}](https://github.com/home-assistant/frontend/releases/tag/${{ needs.check-version.outputs.latest_version }})
+

.ha-frontend-version

@@ -1 +1 @@
-20250205.0
+20250221.0

Dockerfile

@@ -9,7 +9,8 @@ ENV \
 
 ARG \
     COSIGN_VERSION \
-    BUILD_ARCH
+    BUILD_ARCH \
+    QEMU_CPU
 
 # Install base
 WORKDIR /usr/src
@@ -28,22 +29,23 @@ RUN \
     \
     && curl -Lso /usr/bin/cosign "https://github.com/home-assistant/cosign/releases/download/${COSIGN_VERSION}/cosign_${BUILD_ARCH}" \
     && chmod a+x /usr/bin/cosign \
-    && pip3 install uv==0.2.21
+    && pip3 install uv==0.6.1
 
 # Install requirements
 COPY requirements.txt .
 RUN \
     if [ "${BUILD_ARCH}" = "i386" ]; then \
-        linux32 uv pip install --no-build -r requirements.txt; \
+        setarch="linux32"; \
     else \
-        uv pip install --no-build -r requirements.txt; \
+        setarch=""; \
     fi \
+    && ${setarch} uv pip install --compile-bytecode --no-cache --no-build -r requirements.txt \
     && rm -f requirements.txt
 
 # Install Home Assistant Supervisor
 COPY . supervisor
 RUN \
-    pip3 install -e ./supervisor \
+    uv pip install --no-cache -e ./supervisor \
     && python3 -m compileall ./supervisor/supervisor
 
 

requirements.txt

@@ -1,13 +1,13 @@
 aiodns==3.2.0
-aiohttp==3.11.12
+aiohttp==3.11.13
 atomicwrites-homeassistant==1.4.1
 attrs==25.1.0
 awesomeversion==24.6.0
 brotli==1.1.0
 ciso8601==2.3.2
 colorlog==6.9.0
 cpe==1.3.1
-cryptography==44.0.0
+cryptography==44.0.2
 debugpy==1.8.12
 deepmerge==2.0
 dirhash==0.5.0
@@ -20,10 +20,10 @@ pulsectl==24.12.0
 pyudev==0.24.3
 PyYAML==6.0.2
 requests==2.32.3
-securetar==2025.1.4
-sentry-sdk==2.20.0
-setuptools==75.8.0
+securetar==2025.2.1
+sentry-sdk==2.22.0
+setuptools==75.8.2
 voluptuous==0.15.2
-dbus-fast==2.33.0
+dbus-fast==2.34.0
 typing_extensions==4.12.2
-zlib-fast==0.2.0
+zlib-fast==0.2.1

requirements_tests.txt

@@ -6,8 +6,8 @@ pytest-aiohttp==1.1.0
 pytest-asyncio==0.25.2
 pytest-cov==6.0.0
 pytest-timeout==2.3.1
-pytest==8.3.4
-ruff==0.9.6
+pytest==8.3.5
+ruff==0.9.9
 time-machine==2.16.0
 typing_extensions==4.12.2
 urllib3==2.3.0

supervisor/__main__.py

@@ -54,8 +54,7 @@ def run_os_startup_check_cleanup() -> None:
     loop.set_debug(coresys.config.debug)
     loop.run_until_complete(coresys.core.connect())
 
-    bootstrap.supervisor_debugger(coresys)
-    bootstrap.migrate_system_env(coresys)
+    loop.run_until_complete(bootstrap.supervisor_debugger(coresys))
 
     # Signal health startup for container
     run_os_startup_check_cleanup()