diff --git a/testing/openmg/APKBUILD b/testing/openmg/APKBUILD
index 05d68f04766..b3c15ada930 100644
--- a/testing/openmg/APKBUILD
+++ b/testing/openmg/APKBUILD
@@ -1,25 +1,28 @@
 # Contributor: Sergio Iglesias <sergiotarxz@posteo.net>
 # Maintainer: Sergio Iglesias <sergiotarxz@posteo.net>
 pkgname=openmg
-pkgver=0.0.8
-pkgrel=1
+pkgver=0.0.9
+pkgrel=0
 pkgdesc="Manga reader for GNOME"
-url="https://gitea.sergiotarxz.freemyip.com/sergiotarxz/mangareader"
+url="https://github.com/sergiotarxz/openmg"
 arch="all !s390x !riscv64"
 license="GPL-3.0-or-later"
 makedepends="gtk4.0-dev meson libsoup-dev libadwaita-dev pcre2-dev json-glib-dev"
 options="!check" # no tests
-source="$pkgname-$pkgver.tar.gz::https://gitea.sergiotarxz.freemyip.com/sergiotarxz/mangareader/archive/v$pkgver.tar.gz"
-builddir="$srcdir/mangareader"
+source="$pkgname-$pkgver.tar.gz::https://github.com/sergiotarxz/openmg/archive/refs/tags/v$pkgver.tar.gz
+	format-security.patch
+	"
 
 build() {
 	abuild-meson . output
-	meson compile ${JOBS:+-j ${JOBS}} -C output
+	meson compile -C output
 }
 
 package() {
 	DESTDIR="$pkgdir" meson install --no-rebuild -C output
 }
+
 sha512sums="
-2298e41e09438cd812778c1c0e4fc68d4c31005f2a2b1e86cc1dd5487aac17b53773e85d32f8a199e692e4da09e6165b4469219ff05a8c6bf1cf5cf7ad307226  openmg-0.0.8.tar.gz
+862ee4bfec1aee50060ea8cf375eb650c2f2646f39eb0148bec4661934cdac939b2e1255f0761142730949ff242549113087d2bc0e6142823c88d37fffdc0fe8  openmg-0.0.9.tar.gz
+880c8309c7fc6b6000cb3135e7dc1f32d740856d4d14de1e9529e9045605502692db6c5e3e6d052c3b1ecd2e5d944718d7373635b00339a3487404b216b5e668  format-security.patch
 "
diff --git a/testing/openmg/format-security.patch b/testing/openmg/format-security.patch
new file mode 100644
index 00000000000..faccc20905e
--- /dev/null
+++ b/testing/openmg/format-security.patch
@@ -0,0 +1,119 @@
+diff --git a/src/database.c b/src/database.c
+index 778ccf7..ccbb9bf 100644
+--- a/src/database.c
++++ b/src/database.c
+@@ -172,22 +172,22 @@ mg_database_register_next_migration_atttempt_insert (MgDatabase *self, sqlite3 *
+     int error = sqlite3_prepare_v2 (sqlite, "insert into options (key, value) values (?, ?);",
+             -1, &statement, NULL);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_register_next_migration_attempt_insert;
+     }
+     error = sqlite3_bind_text (statement, 1, "migration", -1, SQLITE_TRANSIENT);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_register_next_migration_attempt_insert;
+     }
+     error = sqlite3_bind_int (statement, 2, next_migration);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_register_next_migration_attempt_insert;
+     }
+     error = sqlite3_step (statement);
+     if (error != SQLITE_DONE) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_register_next_migration_attempt_insert;
+     }
+     return_value = sqlite3_changes (sqlite);
+@@ -204,22 +204,22 @@ mg_database_register_next_migration_update (MgDatabase *self, sqlite3 *sqlite,
+     int error = sqlite3_prepare_v2 (sqlite, "update options set value = ? where key = ?;",
+             -1, &statement, NULL);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_register_next_migration_update;
+     }
+     error = sqlite3_bind_int (statement, 1, next_migration);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_register_next_migration_update;
+     }
+     error = sqlite3_bind_text (statement, 2, "migration", -1, SQLITE_TRANSIENT);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_register_next_migration_update;
+     }
+     error = sqlite3_step (statement);
+     if (error != SQLITE_DONE) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_register_next_migration_update;
+     }
+     return_value = sqlite3_changes (sqlite);
+@@ -245,12 +245,12 @@ mg_database_retrieve_next_migration (MgDatabase *self, sqlite3 *sqlite) {
+     sqlite3_stmt *statement = NULL;
+     error = sqlite3_prepare_v2 (sqlite, "select value from options where key = ?;", -1, &statement, NULL);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_retrieve_next_migration;
+     }
+     error = sqlite3_bind_text (statement, 1, "migration", -1, SQLITE_TRANSIENT);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_retrieve_next_migration;
+     }
+     error = sqlite3_step (statement);
+@@ -269,12 +269,12 @@ mg_database_apply_single_migration (MgDatabase *self, sqlite3 *sqlite, int migra
+     gboolean return_value = 0;
+     int error = sqlite3_prepare_v2 (sqlite, current_migration, -1, &statement, NULL);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_apply_single_migration;
+     }
+     error = sqlite3_step (statement);
+     if (error != SQLITE_DONE) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         goto cleanup_mg_database_apply_single_migration;
+     }
+     return_value = 1;
+@@ -303,7 +303,7 @@ mg_database_prepare (MgDatabase *self, char *z_sql, const char **pz_tail) {
+     sqlite3 *sqlite = mg_database_get_sqlite (self);
+     int error = sqlite3_prepare_v2 (sqlite, z_sql, -1, &statement, pz_tail);
+     if (error != SQLITE_OK) {
+-        g_warning (sqlite3_errmsg (sqlite));
++        g_warning ("%s", sqlite3_errmsg (sqlite));
+         return NULL;
+     }
+     return mg_database_statement_new (self, statement);
+diff --git a/src/database/statement.c b/src/database/statement.c
+index 1599354..7218f22 100644
+--- a/src/database/statement.c
++++ b/src/database/statement.c
+@@ -137,7 +137,7 @@ mg_database_statement_bind_text (MgDatabaseStatement *self,
+     sqlite3_stmt *stmt = mg_database_statement_get_stmt (self);
+     int error = sqlite3_bind_text (stmt, index, value, -1, SQLITE_TRANSIENT);
+     if ( error != SQLITE_OK ) {
+-        g_error (mg_database_get_error_string (self->owner));
++        g_error ("%s", mg_database_get_error_string (self->owner));
+     }
+     return error;
+ }
+@@ -149,7 +149,7 @@ mg_database_statement_step (MgDatabaseStatement *self) {
+     while ((error = sqlite3_step (stmt)) == SQLITE_BUSY) {
+     }
+     if (error != SQLITE_DONE && error != SQLITE_ROW) {
+-        g_error (mg_database_get_error_string (self->owner));
++        g_error ("%s", mg_database_get_error_string (self->owner));
+     }
+     return error;
+ }