Dependency Dashboard #30

Open
opened 2026-07-09 11:40:53 +00:00 by botaniker · 0 comments
Member

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

  • ⚠️ WARN: Repology lookup failed with unexpected error
  • ⚠️ WARN: Excess registryUrls found for datasource lookup - using first configured only
  • ⚠️ WARN: Error obtaining docker token
  • ⚠️ WARN: No docker auth found - returning
  • ⚠️ WARN: Package lookup failures
  • ⚠️ WARN: Error updating branch: update failure

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (11)

ℹ️ Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource Package Last Updated
flux keydb 2025-01-19
regex git-chglog/git-chglog 2023-02-15
regex gitlab-org/release-cli 2025-06-02
regex keydb 2025-01-19
regex norwoodj/helm-docs 2024-07-08
regex postgresql 2025-09-25
terraform template 2020-10-08

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • chore(deps): lock file maintenance

Errored

The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below.

  • chore(deps): pin dependencies (chideat/valkey-operator, docker.io/alpine, docker.io/alpine/git, docker.io/alpine/helm, docker.io/alpine/kubectl, docker.io/apache/tika, docker.io/chideat/valkey-operator, docker.io/curlimages/curl, docker.io/golangci/golangci-lint, docker.io/gotenberg/gotenberg, docker.io/helmunittest/helm-unittest, docker.io/jdkato/vale, docker.io/klakegg/hugo, docker.io/library/alpine, docker.io/library/caddy, docker.io/library/debian, docker.io/library/golang, docker.io/library/python, docker.io/velero/velero, gcr.io/projectsigstore/cosign, ghcr.io/budimanjojo/talhelper, ghcr.io/caarlos0/svu, ghcr.io/gitleaks/gitleaks, ghcr.io/go-semantic-release/semantic-release, ghcr.io/ko-build/ko, ghcr.io/paperless-ngx/paperless-ngx, ghcr.io/peaceiris/mdbook, ghcr.io/siderolabs/talosctl, ghcr.io/tektoncd/plumbing/tkn, ghcr.io/the-draupnir-project/draupnir, ghcr.io/theduffman85/crowdsec-web-ui, ghcr.io/yannh/kubeconform, rancher/system-upgrade-controller, registry.k8s.io/autoscaling/vpa-admission-controller, registry.k8s.io/autoscaling/vpa-recommender, registry.k8s.io/autoscaling/vpa-updater, registry.shivering-isles.com/dockerhub/alpine/git, registry.shivering-isles.com/dockerhub/alpine/helm, registry.shivering-isles.com/dockerhub/curlimages/curl, registry.shivering-isles.com/dockerhub/helmunittest/helm-unittest, registry.shivering-isles.com/dockerhub/jdkato/vale, registry.shivering-isles.com/dockerhub/klakegg/hugo, registry.shivering-isles.com/dockerhub/library/alpine, sparkyfitness)
  • chore(deps): update docker.io/library/alpine docker tag

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

  • chore(deps): update helm release loki to v18.13.7
  • chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.115.13
  • chore(deps): update helm release kube-prometheus-stack to v91.8.0
  • chore(deps): update helm release kube-state-metrics to v8.6.0
  • chore(deps): update helm release renovate to v46.321.12

⚠️ Warning

Renovate failed to look up the following dependencies: Failed to look up helm package matrix-synapse: no-result, Failed to look up repology package alpine_3_24/dovecot: no-result, Failed to look up repology package alpine_3_24/postfix: no-result, Failed to look up docker package gcr.io/k8s-skaffold/skaffold: no-result.

Files affected: apps/base/matrix/release.yaml, images/dovecot/Containerfile, images/postfix/Containerfile, images/mirror/Earthfile


Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Detected Dependencies

dockerfile (5)
images/demo/Containerfile (1)
  • quay.io/fedora/fedora 42
images/dovecot/Containerfile (1)
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
images/opencode/Containerfile (1)
  • docker.io/library/debian trixie-slim → [Updates: trixie-slim]
images/postfix/Containerfile (2)
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
images/tools/Containerfile (2)
  • quay.io/fedora/fedora 42
  • quay.io/fedora/fedora 42
flux (46)
apps/base/crowdsec/release.yaml (1)
  • crowdsec 0.24.2
apps/base/findmydevice/release.yaml
apps/base/forecastle/release.yaml (1)
  • forecastle 2.1.2
apps/base/hedgedoc/release.yaml
apps/base/iot/shelly-exporter.yaml (1)
  • prometheus-json-exporter 0.19.2 → [Updates: 0.20.1]
apps/base/keycloak/release.yaml
apps/base/loki/loki.yaml (1)
  • loki 18.13.5 → [Updates: 18.13.7]
apps/base/mail/release.yaml
apps/base/mastodon/release.yaml
apps/base/mastodon/sidekiq-monitor.yaml
apps/base/matrix/release.yaml (1)
  • matrix-synapse 3.12.38
apps/base/nextcloud/release.yaml
apps/base/nut-exporter/release.yaml
apps/base/renovate/release.yaml (1)
  • renovate 46.264.2 → [Updates: 46.321.12]
apps/base/sparkyfitness/release.yaml (1)
  • sparkyfitness 1.7.2 → [Updates: 1.7.3, 1.7.2]
apps/base/trek/release.yaml (1)
  • trek 4.3.3
apps/base/uptime-kuma/release.yaml (1)
  • uptime-kuma 4.2.0
apps/base/zot/release.yaml (1)
  • zot 0.1.125
bootstrap/calico/release.yaml (1)
  • tigera-operator v3.32.2
bootstrap/kube-system/snapshot-controller-crds.yaml (1)
  • external-snapshotter v8.6.0
clusters/k8s01/flux-system/gotk-components.yaml (1)
  • fluxcd/flux2 v2.9.5
clusters/k8s01/flux-system/gotk-sync.yaml
infrastructure/base/cert-manager/release.yaml (1)
  • cert-manager v1.21.2
infrastructure/base/drivers/amd-gpu.yaml (1)
  • amd-gpu 0.22.0
infrastructure/base/external-dns/release.yaml (1)
  • external-dns 1.22.0
infrastructure/base/flux-system/monitoring/kube-state-metrics.yaml (1)
  • kube-state-metrics 8.5.0 → [Updates: 8.6.0]
infrastructure/base/kube-system/descheduler.yaml (1)
  • descheduler 0.36.0
infrastructure/base/kube-system/metrics-server.yaml (1)
  • metrics-server 3.14.0
infrastructure/base/logging/promtail/promtail.yaml (1)
  • promtail 6.17.1
infrastructure/base/longhorn/release.yaml (1)
  • longhorn 1.12.1
infrastructure/base/monitoring/json-exporter.yaml (1)
  • prometheus-json-exporter 0.19.2 → [Updates: 0.20.1]
infrastructure/base/monitoring/release.yaml (1)
  • kube-prometheus-stack 91.5.1 → [Updates: 91.8.0]
infrastructure/base/monitoring/sloth.yaml (1)
  • sloth 0.16.0
infrastructure/base/monitoring/smartctl-exporter.yaml (1)
  • prometheus-smartctl-exporter 0.17.1
infrastructure/base/nginx-system/external.yaml (1)
  • ingress-nginx 4.15.1
infrastructure/base/nginx-system/internal.yaml (1)
  • ingress-nginx 4.15.1
infrastructure/base/node-features/release.yaml (1)
  • node-feature-discovery 0.19.0
infrastructure/base/postgres/release.yaml (1)
  • postgres-operator 2.0.2
infrastructure/base/system-upgrades/kured.yaml (1)
  • kured 6.1.0
infrastructure/base/traefik/external.yaml (1)
  • traefik 41.6.0
infrastructure/base/traefik/internal.yaml (1)
  • traefik 41.6.0
infrastructure/base/velero/release.yaml (1)
  • velero 12.1.0 → [Updates: 12.2.0]
shared/applications/oauth2-proxy.yaml (1)
  • oauth2-proxy 10.7.0
shared/components/keydb/release.yaml (1)
  • keydb 1.0.6
shared/components/oauth2-proxy/release.yaml (1)
  • oauth2-proxy 10.7.0
shared/components/valkey/release.yaml (1)
  • valkey 0.12.0
gitlabci (1)
charts/.utils/gitlab-ci.yaml (3)
  • quay.io/shivering-isles/koolbox 2026.04 → [Updates: 2026.07]
  • quay.io/shivering-isles/koolbox 2026.04 → [Updates: 2026.07]
  • docker.io/helmunittest/helm-unittest 3.18.4-0.8.2
gomod (1)
go/jellyfin-pdb-mgr/go.mod (5)
  • go 1.26.4
  • github.com/bitfield/script v0.25.1
  • k8s.io/apimachinery v0.36.2 → [Updates: v0.37.1]
  • k8s.io/client-go v0.36.2 → [Updates: v0.37.1]
  • golang.org/x/text v0.38.0 → [Updates: v0.39.0]
helm-values (7)
charts/findmydevice/values.yaml
charts/hedgedoc/values.yaml
charts/keycloak/values.yaml
charts/mastodon/values.yaml
charts/mok/values.yaml (2)
  • quay.io/shivering-isles/postfix 3.11.7
  • quay.io/shivering-isles/dovecot 2.3.21 → [Updates: 2.4.4]
charts/nextcloud/values.yaml (2)
  • docker.io/library/postgres 18
  • docker.io/xperimental/nextcloud-exporter 0.9.1
charts/nut-exporter/values.yaml
helmv3 (3)
charts/hedgedoc/Chart.yaml (1)
  • postgres 0.19.11 → [Updates: 0.20.6]
charts/mastodon/Chart.yaml (2)
  • postgres 0.19.11 → [Updates: 0.20.6]
  • valkey 0.12.0
charts/nextcloud/Chart.yaml (2)
  • postgres 0.19.11 → [Updates: 0.20.6]
  • valkey 0.12.0
kubernetes (284)
apps/base/ansteckschildchen/ansteckschildchen.yaml (3)
  • quay.io/sheogorath/ansteckschildchen v1.4.2
  • Deployment apps/v1
  • PodDisruptionBudget policy/v1
apps/base/anubis/deployment.yaml (2)
  • ghcr.io/techarohq/anubis v1.27.0@sha256:8828275668b7bc675679f100970f9714f731388fbbf66ae94de8aca952e3fc4a
  • Deployment apps/v1
apps/base/anubis/poddisruptionbudget.yaml (1)
  • PodDisruptionBudget policy/v1
apps/base/camo/deployment.yaml (2)
  • ghcr.io/cactus/go-camo v2.7.6@sha256:8ebe782b360eb2c380e4641b37bde3e306bc7c25d3f75ad359cca8f92c845974
  • Deployment apps/v1
apps/base/crowdsec/components/web-ui/web-ui.yaml (2)
  • ghcr.io/theduffman85/crowdsec-web-ui 2026.9.2 → [Updates: 2026.9.2]
  • Deployment apps/v1
apps/base/crowdsec/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/crowdsec/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/base/draupnir/deployment.yaml (2)
  • ghcr.io/the-draupnir-project/draupnir v3.1.0 → [Updates: v3.1.0]
  • Deployment apps/v1
apps/base/findmydevice/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/forecastle/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/forecastle/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/base/hedgedoc/namespace.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
apps/base/hedgedoc/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/base/hedgedoc/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/immich/machine-learning/deployment.yaml (2)
  • ghcr.io/immich-app/immich-machine-learning release@sha256:60dfcf266a9ef3b7376f5678e8c980d4fb61db5fc48c078fe8a326ab1535d60d
  • Deployment apps/v1
apps/base/immich/microservices/deployment.yaml (2)
  • ghcr.io/immich-app/immich-server release@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea
  • Deployment apps/v1
apps/base/immich/monitoring-integrity/cronjob.yaml (2)
  • ghcr.io/immich-app/immich-server release@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea
  • CronJob batch/v1
apps/base/immich/postgres-zalando/allow-zalando-database.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/base/immich/server/deployment.yaml (2)
  • ghcr.io/immich-app/immich-server release@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea
  • Deployment apps/v1
apps/base/iot/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/base/iot/shelly-exporter.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/iot/shelly-ht-monitor.yaml (2)
  • quay.io/shivering-isles/shelly-action-exporter v1.0.7
  • Deployment apps/v1
apps/base/jellyfin/deployment.yaml (2)
  • ghcr.io/jellyfin/jellyfin 12.1@sha256:008ec8024bdaaa6f0a3f0de468e185633eeba9d67c56936e8dbf5ef6b8d6200f
  • Deployment apps/v1
apps/base/jellyfin/jellyfin-pdb-mgr/poddisruptionbudget.yaml (1)
  • PodDisruptionBudget policy/v1
apps/base/jellyfin/jellyfin-pdb-mgr/role.yaml (2)
  • Role rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
apps/base/keycloak/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/base/keycloak/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/libravatar/deployment.yaml (1)
  • Deployment apps/v1
apps/base/loki/loki.yaml (5)
  • HelmRelease helm.toolkit.fluxcd.io/v2
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/base/loki/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/base/mail/namespace.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
apps/base/mail/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/mastodon/networkpolicy-ingress.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/base/mastodon/networkpolicy-monitoring.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/base/mastodon/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/mastodon/sidekiq-monitor.yaml (2)
  • HelmRepository source.toolkit.fluxcd.io/v1
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/matrix/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/base/matrix/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/matrix/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/base/matrix/synatainer/synatainer.yaml (2)
  • registry.gitlab.com/mb-saces/synatainer 0.4.4@sha256:b5e1270a0b7d9be6a6bd651332483fedb678b097775d8254fde3188d5525338d
  • CronJob batch/v1
apps/base/nextcloud/namespace.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
apps/base/nextcloud/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/base/nextcloud/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/nut-exporter/namespace.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
apps/base/nut-exporter/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/base/nut-exporter/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/opencode/deployment.yaml (2)
  • quay.io/shivering-isles/opencode 1.18.32
  • Deployment apps/v1
apps/base/paperless/deployment.yaml (2)
  • ghcr.io/paperless-ngx/paperless-ngx latest → [Updates: latest]
  • Deployment apps/v1
apps/base/paperless/gotenberg/deployment.yaml (2)
  • docker.io/gotenberg/gotenberg latest → [Updates: latest]
  • Deployment apps/v1
apps/base/paperless/tika/deployment.yaml (2)
  • docker.io/apache/tika latest → [Updates: latest]
  • Deployment apps/v1
apps/base/renovate/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/renovate/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/base/s3dav-proxy/deployment.yaml (2)
  • quay.io/shivering-isles/s3dav-proxy v1.1.39
  • Deployment apps/v1
apps/base/sparkyfitness/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/base/sparkyfitness/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/sparkyfitness/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/base/tekton/poddisruptionbudget.yaml (3)
  • PodDisruptionBudget policy/v1
  • PodDisruptionBudget policy/v1
  • PodDisruptionBudget policy/v1
apps/base/tekton/tekton-dashboard.yaml (12)
  • ghcr.io/tektoncd/dashboard/dashboard-9623576a202fe86c8b7d1bc489905f86 v0.72.0@sha256:f9551aabef68efb2e15ad284d85cb77f2298c47a7d4694f6cf8750a1710d5fd6
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • Deployment apps/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
apps/base/tekton/tekton-interceptors.yaml (2)
  • ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5 v0.37.1@sha256:0cfcae8722554cd96082256b5fc0ed41a32a7907f7b9d5c5a76729fda5fbb676
  • Deployment apps/v1
apps/base/tekton/tekton-pipelines.yaml (46)
  • ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36 v1.16.0@sha256:27458f2073bb6f826cbe7a97324ca5553d8d97e60f91f2b8dd37fea72c43fdf2
  • ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c v1.16.0@sha256:3b4777e52b0fcf98c3a24d1227eedf2984a222c1af18ea0d5f56da0f4832b6d1
  • ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d v1.16.0@sha256:318c3caf89aec173b4c4bb69da60d09e1a1f8d8ffb4b9255982832d9c63b70c5
  • ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1 v1.16.0@sha256:cc0f3620092c91d8a2eb18a155fd0504dae7043a1fae9851dc7b5b9ed1ea3626
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • ValidatingWebhookConfiguration admissionregistration.k8s.io/v1
  • MutatingWebhookConfiguration admissionregistration.k8s.io/v1
  • ValidatingWebhookConfiguration admissionregistration.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • Deployment apps/v1
  • Deployment apps/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • Deployment apps/v1
  • HorizontalPodAutoscaler autoscaling/v2
  • Deployment apps/v1
apps/base/tekton/tekton-triggers.yaml (31)
  • ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315 v0.37.1@sha256:668262c7e44ed93bfb7d9a5e0c18722399f2b7bd13e5d308be174b88b80f2661
  • ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6 v0.37.1@sha256:7515b83704901e1fad7c3651ae877c65a1bf3251d61e12a1a639665b2b639ec7
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • ValidatingWebhookConfiguration admissionregistration.k8s.io/v1
  • MutatingWebhookConfiguration admissionregistration.k8s.io/v1
  • ValidatingWebhookConfiguration admissionregistration.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • Deployment apps/v1
  • Deployment apps/v1
apps/base/trek/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/trek/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/base/uptime-kuma/namespace.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
apps/base/uptime-kuma/networkpolicy.yaml (3)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/base/uptime-kuma/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/uptime-kuma/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/base/zot/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/base/zot/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/base/zot/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
apps/k8s01/ansteckschildchen/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/anubis/haproxy/deployment.yaml (2)
  • docker.io/library/haproxy 3.4.5@sha256:76928c0d6b39bdd5f1c15d519cf48c47a6aa18c1dc552f7af1c146d2aa003c14
  • Deployment apps/v1
apps/k8s01/anubis/haproxy/networkpolicy.yaml (3)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/anubis/haproxy/poddisruptionbudget.yaml (1)
  • PodDisruptionBudget policy/v1
apps/k8s01/anubis/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/blog/blog.yaml (3)
  • quay.io/shivering-isles/blog 2026.07.21.0
  • Deployment apps/v1
  • PodDisruptionBudget policy/v1
apps/k8s01/blog/ingress.yaml (2)
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
apps/k8s01/camo/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/crowdsec/ban-cidr-import.yaml (4)
  • docker.io/curlimages/curl latest → [Updates: latest]
  • docker.io/library/debian 13.6-slim@sha256:d7e12182ce18b85b93007c1dedf31f2d29e01ccf3182cc4017c709b6259bc132 → [Updates: 13.7-slim]
  • docker.io/crowdsecurity/crowdsec v1.8.1@sha256:0f2523fa61ef507f15d953045cface490cc880670c62f2755ced17524107f71a
  • CronJob batch/v1
apps/k8s01/crowdsec/web-ui-ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/dns/dns.yaml (3)
  • ghcr.io/0xerr0r/blocky v0.35.0@sha256:4f165b63db0d76c96ecc47c7a8f57caeedc003a912bdce29abb0e283ce02e16b
  • Deployment apps/v1
  • PodDisruptionBudget policy/v1
apps/k8s01/dns/networkpolicy-patch.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/dns/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/forecastle/pdb.yaml (1)
  • PodDisruptionBudget policy/v1
apps/k8s01/hedgedoc/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/immich/backup.yaml (2)
  • docker.io/minio/mc unknown version
  • CronJob batch/v1
apps/k8s01/immich/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/iot/rainer.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/iot/shelly-ht-monitor.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/iot/shelly.yaml (6)
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
apps/k8s01/jellyfin/allow-from-ingress.patch.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/jellyfin/allow-to-public-web.patch.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/jellyfin/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/keycloak/egress-to-database.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/keycloak/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/libravatar/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/mastocloud/cronjob.yaml (2)
  • docker.io/library/alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b → [Updates: 3.24.2]
  • CronJob batch/v1
apps/k8s01/mastocloud/deployment.yaml (3)
  • docker.io/nginxinc/nginx-unprivileged 1.31.4-alpine@sha256:d9083fe47768377ef55dedafd67d4da7c2f2bc2bece7554954f29359deb0dce9 → [Updates: 1.31.6-alpine]
  • Deployment apps/v1
  • PodDisruptionBudget policy/v1
apps/k8s01/mastocloud/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/mastodon/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/mastodon/oauth2.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/nas/namespace.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
apps/k8s01/nas/s3.yaml (14)
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
apps/k8s01/nextcloud/oauth2.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/nextcloud/pdb.yaml (1)
  • PodDisruptionBudget policy/v1
apps/k8s01/opencode/components/caddy/kustomization.yaml (1)
  • docker.io/library/caddy 2.11.4-alpine → [Updates: 2.11.4-alpine]
apps/k8s01/opencode/ingress.yaml (2)
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
apps/k8s01/panoramax-mailer/cronjob.yaml (2)
  • quay.io/sheogorath/panoramax-report-mailer v1.1.0
  • CronJob batch/v1
apps/k8s01/paperless/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/renovate/release-overwrite.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
apps/k8s01/s3dav-proxy/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/sparkyfitness/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/tekton/dashboard/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/tekton/gitops-pipelines/cleanup.yaml (5)
  • ghcr.io/tektoncd/plumbing/tkn latest → [Updates: latest]
  • ghcr.io/tektoncd/plumbing/tkn latest → [Updates: latest]
  • CronJob batch/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
apps/k8s01/tekton/gitops-pipelines/forgejo-webhook-ingress.yaml (1)
  • Ingress networking.k8s.io/v1
apps/k8s01/tekton/gitops-pipelines/monthly-release.yaml (4)
  • quay.io/fedora/fedora-minimal 42
  • CronJob batch/v1
  • Role rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
apps/k8s01/tekton/gitops-pipelines/network-policy-patch.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/tekton/gitops-pipelines/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/tekton/gitops-pipelines/resourcequota.yaml (1)
  • PriorityClass scheduling.k8s.io/v1
apps/k8s01/tekton/gitops-pipelines/tekton-resources.yaml (1)
  • Kustomization kustomize.toolkit.fluxcd.io/v1
apps/k8s01/trek/ingress.yaml (2)
  • Ingress networking.k8s.io/v1
  • Ingress networking.k8s.io/v1
apps/k8s01/unpoller/deployment.yaml (2)
  • ghcr.io/unpoller/unpoller v5.2.8@sha256:ca82e584b9bb3c8d2f9998adb429ab9f9bbb8840388ba10f2c62f07bd31ea0e9
  • Deployment apps/v1
apps/k8s01/unpoller/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
apps/k8s01/uptime-kuma/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
bootstrap/calico/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
bootstrap/calico/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
bootstrap/kube-system/snapshot-controller-crds.yaml (2)
  • GitRepository source.toolkit.fluxcd.io/v1
  • Kustomization kustomize.toolkit.fluxcd.io/v1
bootstrap/system-upgrades/clusterrolebinding.yaml (1)
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
bootstrap/system-upgrades/crd.yaml (1)
  • CustomResourceDefinition apiextensions.k8s.io/v1
bootstrap/system-upgrades/system-upgrade-controller.yaml (8)
  • rancher/system-upgrade-controller v0.19.0 → [Updates: v0.20.2, v0.19.0]
  • Role rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • Deployment apps/v1
clusters/k8s01/apps.yaml (1)
  • Kustomization kustomize.toolkit.fluxcd.io/v1
clusters/k8s01/bootstrap.yaml (1)
  • Kustomization kustomize.toolkit.fluxcd.io/v1
clusters/k8s01/flux-system/gotk-patches.yaml (2)
  • GitRepository source.toolkit.fluxcd.io/v1
  • Kustomization kustomize.toolkit.fluxcd.io/v1
clusters/k8s01/flux-system/reciever.yaml (2)
  • Receiver notification.toolkit.fluxcd.io/v1
  • Ingress networking.k8s.io/v1
clusters/k8s01/infrastructure.yaml (1)
  • Kustomization kustomize.toolkit.fluxcd.io/v1
clusters/k8s01/kube-system/anonymous-oidc-access.yaml (1)
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
clusters/k8s01/kube-system/cluster-admin.yaml (1)
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
clusters/k8s01/kube-system/oidc-cluster-admin.yaml (1)
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/cert-manager/networkpolicy-patch.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/cert-manager/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/cert-manager/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/cert-manager/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/drivers/amd-gpu.yaml (2)
  • HelmRepository source.toolkit.fluxcd.io/v1
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/errorpages/deployment.yaml (2)
  • ghcr.io/tarampampam/error-pages 4.2.5@sha256:6d42b5d6e1a014fa2373e3587f9e85c25589a089fd5f6fc4f2a496858f5e365d
  • Deployment apps/v1
infrastructure/base/errorpages/poddisruptionbudget.yaml (1)
  • PodDisruptionBudget policy/v1
infrastructure/base/external-dns/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/external-dns/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/flux-system/monitoring/kube-state-metrics.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/flux-system/monitoring/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/flux-system/monitoring/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/kube-system/descheduler.yaml (2)
  • HelmRepository source.toolkit.fluxcd.io/v1
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/kube-system/metrics-server.yaml (2)
  • HelmRepository source.toolkit.fluxcd.io/v1
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/kube-system/poddisruptionbudget.yaml (2)
  • PodDisruptionBudget policy/v1
  • PodDisruptionBudget policy/v1
infrastructure/base/kube-system/quorum.yaml (5)
  • registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a
  • registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a
  • registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a
  • registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a
  • Deployment apps/v1
infrastructure/base/kube-system/snapshot-controller.yaml (1)
  • Kustomization kustomize.toolkit.fluxcd.io/v1
infrastructure/base/kube-system/talos-etcd-defrag/cronjob.yaml (2)
  • docker.io/alpine/kubectl 1.36.2 → [Updates: 1.37.1, 1.36.2]
  • CronJob batch/v1
infrastructure/base/kube-system/talos-etcd-defrag/job.yaml (1)
  • ghcr.io/siderolabs/talosctl v1.14.1@sha256:30791b2ec3ab1dec4093c342306159ebfe876eb9f646d5a710b853844a65ba13
infrastructure/base/kube-system/talos-etcd-defrag/rbac.yaml (4)
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/logging/promtail/promtail.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/logging/promtail/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/longhorn/namespace.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/longhorn/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/longhorn/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/longhorn/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/longhorn/storageclass.yaml (1)
  • StorageClass storage.k8s.io/v1
infrastructure/base/metallb/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/metallb/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/metallb/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/monitoring/calico-networkpolicy.yaml (1)
  • NetworkPolicy projectcalico.org/v3
infrastructure/base/monitoring/json-exporter.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/monitoring/namespace.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/monitoring/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/monitoring/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/monitoring/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/monitoring/sloth.yaml (2)
  • HelmRepository source.toolkit.fluxcd.io/v1
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/monitoring/smartctl-exporter.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/nginx-system/external.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/nginx-system/internal.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/nginx-system/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/node-features/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/node-features/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/postgres/release.yaml (2)
  • quay.io/prometheuscommunity/postgres-exporter v0.20.1
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/postgres/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/priorityclasses/priorityclass.yaml (3)
  • PriorityClass scheduling.k8s.io/v1
  • PriorityClass scheduling.k8s.io/v1
  • PriorityClass scheduling.k8s.io/v1
infrastructure/base/rapt/rapt.yaml (1)
  • CustomResourceDefinition apiextensions.k8s.io/v1
infrastructure/base/system-upgrades/calver-server.yaml (2)
  • quay.io/shivering-isles/calver-server v1
  • Deployment apps/v1
infrastructure/base/system-upgrades/fedora/fedora-autoupdate.yaml (1)
  • quay.io/fedora/fedora 42
infrastructure/base/system-upgrades/fedora/fedora-system-upgrade.yaml (1)
  • quay.io/fedora/fedora 42
infrastructure/base/system-upgrades/fedora/fedora-temperature-management.yaml (1)
  • quay.io/fedora/fedora 42
infrastructure/base/system-upgrades/kubelet.yaml (1)
  • quay.io/fedora/fedora 42
infrastructure/base/system-upgrades/kubernetes.yaml (1)
  • quay.io/fedora/fedora 42
infrastructure/base/system-upgrades/kured.yaml (3)
  • HelmRepository source.toolkit.fluxcd.io/v1
  • HelmRelease helm.toolkit.fluxcd.io/v2
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/system-upgrades/talos/kubernetes.yaml (4)
  • docker.io/bitnamilegacy/kubectl 1.33@sha256:cd354d5b25562b195b277125439c23e4046902d7f1abc0dc3c75aad04d298c17
  • ghcr.io/siderolabs/talosctl v1.14.1@sha256:30791b2ec3ab1dec4093c342306159ebfe876eb9f646d5a710b853844a65ba13
  • ghcr.io/siderolabs/talosctl v1.14.1@sha256:30791b2ec3ab1dec4093c342306159ebfe876eb9f646d5a710b853844a65ba13
  • docker.io/rancher/kubectl v1.36.2@sha256:06c7a7a9772737494ae1e0c3af90f1b5385630c147e47c1c7cea92f4bed55fbe
infrastructure/base/system-upgrades/talos/os.yaml (4)
  • docker.io/bitnamilegacy/kubectl 1.33@sha256:cd354d5b25562b195b277125439c23e4046902d7f1abc0dc3c75aad04d298c17
  • ghcr.io/siderolabs/talosctl unknown version → [Updates: undefined]
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/system-upgrades/talos/rbac.yaml (4)
  • RoleBinding rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/system-upgrades/talos/serviceaccount.yaml (1)
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/traefik/external.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/traefik/internal.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/traefik/networkpolicies.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/traefik/networkpolicy-patches.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
infrastructure/base/traefik/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/valkey/valkey-operator/config/crd/bases/rds.valkey.buf.red_valkeys.yaml (1)
  • CustomResourceDefinition apiextensions.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/crd/bases/valkey.buf.red_clusters.yaml (1)
  • CustomResourceDefinition apiextensions.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/crd/bases/valkey.buf.red_failovers.yaml (1)
  • CustomResourceDefinition apiextensions.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/crd/bases/valkey.buf.red_sentinels.yaml (1)
  • CustomResourceDefinition apiextensions.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/crd/bases/valkey.buf.red_users.yaml (1)
  • CustomResourceDefinition apiextensions.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/manager/manager.yaml (2)
  • controller latest
  • Deployment apps/v1
infrastructure/base/valkey/valkey-operator/config/rbac/cluster_editor_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/cluster_viewer_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/failover_editor_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/failover_viewer_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/leader_election_role_binding.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/leader_election_role.yaml (1)
  • Role rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/metrics_auth_role_binding.yaml (1)
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/metrics_auth_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/metrics_reader_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/rds_valkey_editor_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/rds_valkey_viewer_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/role_binding.yaml (1)
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/sentinel_editor_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/sentinel_viewer_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/user_editor_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/rbac/user_viewer_role.yaml (1)
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/base/valkey/valkey-operator/config/webhook/manifests.yaml (2)
  • MutatingWebhookConfiguration admissionregistration.k8s.io/v1
  • ValidatingWebhookConfiguration admissionregistration.k8s.io/v1
infrastructure/base/velero/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
infrastructure/base/velero/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/admission-controller-deployment.yaml (2)
  • registry.k8s.io/autoscaling/vpa-admission-controller 1.7.1 → [Updates: 1.8.0, 1.7.1]
  • Deployment apps/v1
infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/recommender-deployment.yaml (2)
  • registry.k8s.io/autoscaling/vpa-recommender 1.7.1 → [Updates: 1.8.0, 1.7.1]
  • Deployment apps/v1
infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/updater-deployment.yaml (2)
  • registry.k8s.io/autoscaling/vpa-updater 1.7.1 → [Updates: 1.8.0, 1.7.1]
  • Deployment apps/v1
infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/vpa-rbac.yaml (22)
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
  • Role rbac.authorization.k8s.io/v1
  • RoleBinding rbac.authorization.k8s.io/v1
infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/vpa-v1-crd-gen.yaml (2)
  • CustomResourceDefinition apiextensions.k8s.io/v1
  • CustomResourceDefinition apiextensions.k8s.io/v1
infrastructure/k8s01/calico/whisker/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
infrastructure/k8s01/drivers/cpufreq-disable-boost.yaml (3)
  • quay.io/fedora/fedora 42
  • registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a
  • DaemonSet apps/v1
infrastructure/k8s01/drivers/cryptsetup.yaml (5)
  • docker.io/bitnamilegacy/kubectl 1.33@sha256:cd354d5b25562b195b277125439c23e4046902d7f1abc0dc3c75aad04d298c17
  • quay.io/fedora/fedora 42
  • DaemonSet apps/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
  • ClusterRole rbac.authorization.k8s.io/v1
infrastructure/k8s01/gvisor/runtimeclass.yaml (2)
  • RuntimeClass node.k8s.io/v1
  • RuntimeClass node.k8s.io/v1
infrastructure/k8s01/kata-containers/runtimeclass.yaml (1)
  • RuntimeClass node.k8s.io/v1
infrastructure/k8s01/logging/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
infrastructure/k8s01/longhorn/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
infrastructure/k8s01/monitoring/ingress.yaml (1)
  • Ingress networking.k8s.io/v1
infrastructure/k8s01/monitoring/watchdog.yaml (2)
  • docker.io/curlimages/curl latest → [Updates: latest]
  • CronJob batch/v1
infrastructure/k8s01/system-upgrades/dns.yaml (1)
  • quay.io/fedora/fedora 42
infrastructure/k8s01/system-upgrades/iscsid_hotfix.yaml (1)
  • quay.io/fedora/fedora 42
infrastructure/k8s01/system-upgrades/registry.yaml (1)
  • quay.io/fedora/fedora 42
shared/components/flux-namespace-admin/rolebinding.yaml (1)
  • RoleBinding rbac.authorization.k8s.io/v1
shared/components/keydb/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
shared/components/keydb/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
shared/components/keydb/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
shared/components/oauth2-proxy/networkpolicy.yaml (2)
  • NetworkPolicy networking.k8s.io/v1
  • NetworkPolicy networking.k8s.io/v1
shared/components/oauth2-proxy/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
shared/components/oauth2-proxy/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
shared/components/valkey-sentinel/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
shared/components/valkey/networkpolicy.yaml (1)
  • NetworkPolicy networking.k8s.io/v1
shared/components/valkey/release.yaml (1)
  • HelmRelease helm.toolkit.fluxcd.io/v2
shared/components/valkey/repository.yaml (1)
  • HelmRepository source.toolkit.fluxcd.io/v1
tekton/eventlistener/forgejo/0.1/forgejo.yaml (2)
  • RoleBinding rbac.authorization.k8s.io/v1
  • ClusterRoleBinding rbac.authorization.k8s.io/v1
tekton/pipeline/libravatar-nginx/0.1/libravatar-nginx.yaml (3)
  • quay.io/containers/buildah v1.43.4
  • docker.io/alpine/git 2.54.0 → [Updates: 2.54.0]
  • quay.io/containers/buildah v1.43.4
tekton/pipeline/monthly-gitops-release/0.1/monthly-gitops-release.yaml (1)
  • quay.io/fedora/fedora-minimal 42
tekton/task/create-forgejo-release/0.1/create-forgejo-release.yaml (1)
  • docker.io/curlimages/curl latest → [Updates: latest]
tekton/task/forgejo-package-upload/0.1/forgejo-package-upload.yaml (1)
  • docker.io/curlimages/curl 8.22.0 → [Updates: 8.22.0]
tekton/task/forgejo-set-status/0.1/forgejo-set-status.yaml (1)
  • docker.io/curlimages/curl latest → [Updates: latest]
tekton/task/git-chglog/0.1/git-chglog.yaml (1)
  • quay.io/git-chglog/git-chglog 0.15.4
tekton/task/git-clone-alpine/0.1/git-clone-alpine.yaml (1)
  • docker.io/alpine/git unknown version → [Updates: undefined]
tekton/task/git-restore-mtime/0.1/git-restore-mtime.yaml (1)
  • docker.io/alpine/git unknown version → [Updates: undefined]
tekton/task/gitleaks-detect/0.1/gitleaks-detect.yaml (1)
  • ghcr.io/gitleaks/gitleaks v8.30.1 → [Updates: v8.30.1]
tekton/task/go-lint/0.1/go-lint.yaml (2)
  • docker.io/golangci/golangci-lint v2.13.2 → [Updates: v2.14.0, v2.13.2]
  • docker.io/golangci/golangci-lint v2.13.2 → [Updates: v2.14.0, v2.13.2]
tekton/task/helm-forgejo-upload/0.1/helm-forgejo-upload.yaml (1)
  • docker.io/curlimages/curl 8.22.0 → [Updates: 8.22.0]
tekton/task/helm-lint/0.2/helm-lint.yaml (1)
  • docker.io/alpine/helm 3.21.4 → [Updates: 3.22.0, 4.3.0, 3.21.4]
tekton/task/helm-oci-push/0.1/helm-oci-push.yaml (1)
  • docker.io/alpine/helm 3.21.4 → [Updates: 3.22.0, 4.3.0, 3.21.4]
tekton/task/helm-package/0.2/helm-package.yaml (1)
  • docker.io/alpine/helm 3.21.4 → [Updates: 3.22.0, 4.3.0, 3.21.4]
tekton/task/helm-template-validate/0.2/helm-template-validate.yaml (2)
  • docker.io/alpine/helm 3.21.4 → [Updates: 3.22.0, 4.3.0, 3.21.4]
  • ghcr.io/yannh/kubeconform unknown version → [Updates: undefined]
tekton/task/helm-unittest/0.2/helm-unittest.yaml (1)
  • docker.io/helmunittest/helm-unittest 3.21.0-1.0.3 → [Updates: 4.1.4-1.0.3, 3.21.0-1.0.3]
tekton/task/hugo-build/0.1/hugo-build.yaml (2)
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
  • docker.io/klakegg/hugo 0.111.3-ext-debian → [Updates: 0.111.3-ext-debian]
tekton/task/image-build/0.1/image-build.yaml (1)
  • quay.io/containers/buildah v1.43.4
tekton/task/image-build/0.2/image-build.yaml (1)
  • quay.io/containers/buildah v1.43.4
tekton/task/list-charts/0.2/list-charts.yaml (1)
  • docker.io/alpine 3.24 → [Updates: 3.24]
tekton/task/list-images/0.1/list-images.yaml (1)
  • docker.io/library/alpine 3.24 → [Updates: 3.24]
tekton/task/list-images/0.2/list-images.yaml (1)
  • docker.io/library/alpine 3.24 → [Updates: 3.24]
tekton/task/list-images/0.3/list-images.yaml (1)
  • docker.io/alpine/git 2.54.0 → [Updates: 2.54.0]
tekton/task/mc-mirror/0.1/mc-mirror.yaml (1)
  • docker.io/minio/mc unknown version
tekton/task/mdbook-build/0.1/mdbook-build.yaml (1)
  • ghcr.io/peaceiris/mdbook v0.5.0 → [Updates: v0.5.0]
tekton/task/renovate-config-lint/0.1/renovate-config-lint.yaml (1)
  • ghcr.io/renovatebot/renovate 44.105.0@sha256:ae7c74bbb093b5ee53bdafe5a325f1b2bbe32b1574b8e8922be089feb183e588 → [Updates: 44.115.13]
tekton/task/semantic-release/0.1/semantic-release.yaml (2)
  • ghcr.io/go-semantic-release/semantic-release 2.31.0 → [Updates: 2.31.0]
  • docker.io/alpine/git 2.54.0 → [Updates: 2.54.0]
tekton/task/vale-lint/0.1/vale-lint.yaml (2)
  • docker.io/jdkato/vale v3.20.0 → [Updates: v3.23.0, v3.20.0]
  • docker.io/jdkato/vale v3.20.0 → [Updates: v3.23.0, v3.20.0]
kustomize (7)
apps/base/immich/kustomization.yaml (2)
  • ghcr.io/immich-app/immich-machine-learning v3.2.2@sha256:60dfcf266a9ef3b7376f5678e8c980d4fb61db5fc48c078fe8a326ab1535d60d
  • ghcr.io/immich-app/immich-server v3.2.2@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea
apps/base/immich/microservices/kustomization.yaml (1)
  • ghcr.io/immich-app/immich-server v3.2.2@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea
apps/base/immich/monitoring-integrity/kustomization.yaml (1)
  • ghcr.io/immich-app/immich-server v3.2.2@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea
apps/base/paperless/kustomization.yaml (3)
  • ghcr.io/paperless-ngx/paperless-ngx 3.2.1@sha256:5fa76604a81df6945086e0837b14b56543d137e8ce4f311cc5d9ebe907e74e79
  • docker.io/gotenberg/gotenberg 8.36.0@sha256:87c16b9f364279d321bc9772d31fa58aa6abe036423c270698bd636c3a8e9466 → [Updates: 8.37.0]
  • docker.io/apache/tika 3.3.1.0@sha256:90b7fa1dc018434075fce9e1d9b88b1e3d0ea6979d0cf86e116c79a8073ae973
infrastructure/base/valkey/kustomization.yaml (1)
  • docker.io/chideat/valkey-operator latest → [Updates: latest]
infrastructure/base/valkey/valkey-operator/config/manager/kustomization.yaml (1)
  • chideat/valkey-operator latest → [Updates: latest]
tekton/kustomization.yaml (15)
  • ghcr.io/peaceiris/mdbook v0.5.0@sha256:c3ebda4ac14229472778470de3d33969419416a17a85e69fffe1af2dd174eaf9 → [Updates: v0.5.0]
  • quay.io/git-chglog/git-chglog 0.15.4
  • registry.shivering-isles.com/dockerhub/jdkato/vale v3.18.0 → [Updates: v3.18.0]
  • registry.shivering-isles.com/dockerhub/klakegg/hugo 0.111.3-ext-debian → [Updates: 0.111.3-ext-debian]
  • registry.shivering-isles.com/dockerhub/library/alpine 3.24.1 → [Updates: 3.24.1]
  • registry.shivering-isles.com/dockerhub/curlimages/curl 8.21.0 → [Updates: 8.21.0]
  • registry.shivering-isles.com/dockerhub/helmunittest/helm-unittest 3.21.0-1.0.3 → [Updates: 3.21.0-1.0.3]
  • registry.shivering-isles.com/dockerhub/alpine/helm 3.21.4 → [Updates: 3.21.4]
  • ghcr.io/yannh/kubeconform v0.8.0@sha256:faffaf43f95aa6425306e1ab8d6fcad72acb9049158f38e574c085ea1ec0f64e
  • registry.shivering-isles.com/dockerhub/alpine/git 2.54.0 → [Updates: 2.54.0]
  • ghcr.io/gitleaks/gitleaks v8.30.1@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f
  • ghcr.io/renovatebot/renovate 44.105.0@sha256:ae7c74bbb093b5ee53bdafe5a325f1b2bbe32b1574b8e8922be089feb183e588 → [Updates: 44.115.13]
  • quay.io/containers/buildah v1.43.4
  • ghcr.io/go-semantic-release/semantic-release 2.31.0 → [Updates: 2.31.0]
  • registry.shivering-isles.com/dockerhub/golangci/golangci-lint v2.13.2@sha256:84977fb6c47114e41a02413a6de9d146011ab625e818cd1e2e639b09c5424529
regex (71)
apps/base/crowdsec/components/web-ui/web-ui.yaml (1)
  • ghcr.io/theduffman85/crowdsec-web-ui 2026.9.2 → [Updates: 2026.9.2]
apps/base/immich/postgres-zalando/database.yaml (1)
  • postgresql 15
apps/base/paperless/postgres-zalando/database.yaml (1)
  • postgresql 15
apps/base/tekton/mirror-releases.sh (3)
  • tektoncd/pipeline v1.16.0
  • tektoncd/triggers v0.37.1
  • tektoncd/dashboard v0.72.0
apps/base/tekton/tekton-dashboard.yaml (1)
  • ghcr.io/tektoncd/dashboard/dashboard-9623576a202fe86c8b7d1bc489905f86 v0.72.0@sha256:f9551aabef68efb2e15ad284d85cb77f2298c47a7d4694f6cf8750a1710d5fd6
apps/base/tekton/tekton-interceptors.yaml (1)
  • ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5 v0.37.1@sha256:0cfcae8722554cd96082256b5fc0ed41a32a7907f7b9d5c5a76729fda5fbb676
apps/base/tekton/tekton-pipelines.yaml (4)
  • ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36 v1.16.0@sha256:27458f2073bb6f826cbe7a97324ca5553d8d97e60f91f2b8dd37fea72c43fdf2
  • ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c v1.16.0@sha256:3b4777e52b0fcf98c3a24d1227eedf2984a222c1af18ea0d5f56da0f4832b6d1
  • ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d v1.16.0@sha256:318c3caf89aec173b4c4bb69da60d09e1a1f8d8ffb4b9255982832d9c63b70c5
  • ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1 v1.16.0@sha256:cc0f3620092c91d8a2eb18a155fd0504dae7043a1fae9851dc7b5b9ed1ea3626
apps/base/tekton/tekton-triggers.yaml (2)
  • ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315 v0.37.1@sha256:668262c7e44ed93bfb7d9a5e0c18722399f2b7bd13e5d308be174b88b80f2661
  • ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6 v0.37.1@sha256:7515b83704901e1fad7c3651ae877c65a1bf3251d61e12a1a639665b2b639ec7
apps/k8s01/tekton/gitops-pipelines/cleanup.yaml (2)
  • ghcr.io/tektoncd/plumbing/tkn latest → [Updates: latest]
  • ghcr.io/tektoncd/plumbing/tkn latest → [Updates: latest]
apps/k8s01/tekton/gitops-pipelines/monthly-release.yaml (1)
  • quay.io/fedora/fedora-minimal 42
charts/findmydevice/Chart.yaml (1)
  • registry.gitlab.com/fmd-foss/fmd-server 0.17.0-distroless
charts/hedgedoc/Chart.yaml (1)
  • quay.io/hedgedoc/hedgedoc 1.12.0
charts/keycloak/Chart.yaml (1)
  • quay.io/keycloak/keycloak 26.7.4
charts/mastodon/Chart.yaml (1)
  • ghcr.io/mastodon/mastodon v4.7.2
charts/nextcloud/Chart.yaml (1)
  • docker.io/library/nextcloud 34.0.4 → [Updates: 35.0.1]
charts/nut-exporter/Chart.yaml (1)
  • ghcr.io/druggeri/nut_exporter 3.3.0
Earthfile (1)
  • quay.io/fedora/fedora 42
images/demo/Containerfile (1)
  • quay.io/fedora/fedora 42
images/dovecot/Containerfile (1)
  • alpine_3_24/dovecot 2.4.5
images/dovecot/Containerfile (1)
  • alpine_3_24/dovecot 2.4.5
images/dovecot/Containerfile (1)
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
images/dovecot/Containerfile (1)
  • docker.io/library/alpine 3_24 → [Updates: 3.24]
images/mirror/Earthfile (20)
  • gcr.io/distroless/base-debian12 nonroot@sha256:fa5f94fa433728f8df3f63363ffc8dec4adcfb57e4d8c18b44bceccfea095ebc
  • gcr.io/distroless/static debug-nonroot@sha256:765ef30aff979959710073e7ba3b163d479a285d7d96d0020fca8c1501de48cb
  • gcr.io/distroless/static nonroot@sha256:c0f429e16b13e583da7e5a6ec20dd656d325d88e6819cafe0adb0828976529dc
  • docker.io/library/golang 1.26.6-bookworm → [Updates: 1.27.1-bookworm, 1.26.6-bookworm]
  • docker.io/library/python 3.14.7-bookworm → [Updates: 3.14.7-bookworm]
  • docker.io/library/python 3.14.7-slim-bookworm → [Updates: 3.14.7-slim-bookworm]
  • ghcr.io/getsops/sops v3.10.2@sha256:42514a95c2758596864ee0f2cbf463f140e905a04c127c940e1eec558415466c
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
  • quay.io/fedora/fedora 42
  • quay.io/fedora/fedora-minimal 42
  • quay.io/fedora/fedora-toolbox 42
  • gcr.io/projectsigstore/cosign v3.1.3 → [Updates: v3.1.3]
  • docker.io/klakegg/hugo 0.111.3-ext-debian → [Updates: 0.111.3-ext-debian]
  • ghcr.io/siderolabs/talosctl v1.12.3@sha256:98e49db6d5b181689cb51624788cccf2d2797045f0a1aa26267b128e089f9fa4
  • ghcr.io/budimanjojo/talhelper v3.1.17 → [Updates: v3.1.17]
  • docker.io/jnorwood/helm-docs v1.14.2@sha256:7e562b49ab6b1dbc50c3da8f2dd6ffa8a5c6bba327b1c6335cc15ce29267979c
  • ghcr.io/opentofu/opentofu 1.9.0@sha256:319a00ffec7ffdc5bf90c8edfc9d80aa8e73b893a056e390fcdf97526b0f162c
  • gcr.io/k8s-skaffold/skaffold v2.24.0
  • ghcr.io/ko-build/ko v0.19.1 → [Updates: v0.19.1]
  • docker.io/velero/velero v1.18.2 → [Updates: v1.18.4, v1.18.2]
images/opencode/Containerfile (1)
  • anomalyco/opencode 1.18.32 → [Updates: 1.18.33]
images/opencode/Containerfile (1)
  • anomalyco/opencode 1.18.32 → [Updates: 1.18.33]
images/opencode/Containerfile (1)
  • docker.io/library/debian trixie-slim → [Updates: trixie-slim]
images/postfix/Containerfile (1)
  • alpine_3_24/postfix 3.11.7
images/postfix/Containerfile (1)
  • alpine_3_24/postfix 3.11.7
images/postfix/Containerfile (2)
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
images/postfix/Containerfile (1)
  • docker.io/library/alpine 3_24 → [Updates: 3.24]
images/tools/Containerfile (1)
  • go-task/task v3.53.1
images/tools/Containerfile (1)
  • go-task/task v3.53.1
images/tools/Containerfile (2)
  • quay.io/fedora/fedora 42
  • quay.io/fedora/fedora 42
images/tools/Earthfile (3)
  • ghcr.io/caarlos0/svu 3.4.1 → [Updates: 3.4.1]
  • quay.io/git-chglog/git-chglog 0.15.4
  • docker.io/jdkato/vale v3.20.0 → [Updates: v3.23.0, v3.20.0]
images/tools/Earthfile (11)
  • kubernetes/kubernetes v1.37.1
  • helm/helm v3.22.0 → [Updates: v4.3.0]
  • fluxcd/flux2 v2.9.5
  • kubernetes-sigs/cluster-api v1.14.2
  • kubernetes-sigs/kustomize 4.1.3
  • lig/rapt v1.1.0
  • mikefarah/yq v4.53.6
  • kubernetes-sigs/krew v0.5.0
  • rust-lang/mdBook v0.5.4
  • tektoncd/cli v0.46.1
  • go-task/task v3.53.1
images/tools/Taskfile.dist.yaml (24)
  • kubernetes/kubernetes v1.37.1
  • helm/helm v3.22.0 → [Updates: v4.3.0]
  • fluxcd/flux2 v2.9.5
  • kubernetes-sigs/cluster-api v1.14.2
  • kubernetes-sigs/kustomize 4.1.3
  • mikefarah/yq v4.53.6
  • rust-lang/mdBook v0.5.4
  • tektoncd/cli v0.46.1
  • kubernetes-sigs/krew v0.5.0
  • siderolabs/talos v1.13.8 → [Updates: v1.13.10, v1.14.1]
  • vmware-tanzu/velero v1.18.2 → [Updates: v1.18.4]
  • budimanjojo/talhelper v3.1.17
  • gitlab-org/release-cli v0.24.0
  • caarlos0/svu 3.4.1
  • git-chglog/git-chglog 0.15.4
  • GoogleCloudPlatform/skaffold v2.25.0
  • ko-build/ko v0.19.1
  • golangci/golangci-lint v2.13.2 → [Updates: v2.14.0]
  • getsops/sops v3.13.3
  • norwoodj/helm-docs v1.14.2
  • go-task/task v3.53.1
  • errata-ai/vale v3.22.0 → [Updates: v3.23.0]
  • gohugoio/hugo v0.166.0
  • opentofu/opentofu v1.12.6
images/tools/Taskfile.dist.yaml (24)
  • kubernetes/kubernetes v1.37.1
  • helm/helm v3.22.0 → [Updates: v4.3.0]
  • fluxcd/flux2 v2.9.5
  • kubernetes-sigs/cluster-api v1.14.2
  • kubernetes-sigs/kustomize 4.1.3
  • mikefarah/yq v4.53.6
  • rust-lang/mdBook v0.5.4
  • tektoncd/cli v0.46.1
  • kubernetes-sigs/krew v0.5.0
  • siderolabs/talos v1.13.8 → [Updates: v1.13.10, v1.14.1]
  • vmware-tanzu/velero v1.18.2 → [Updates: v1.18.4]
  • budimanjojo/talhelper v3.1.17
  • gitlab-org/release-cli v0.24.0
  • caarlos0/svu 3.4.1
  • git-chglog/git-chglog 0.15.4
  • GoogleCloudPlatform/skaffold v2.25.0
  • ko-build/ko v0.19.1
  • golangci/golangci-lint v2.13.2 → [Updates: v2.14.0]
  • getsops/sops v3.13.3
  • norwoodj/helm-docs v1.14.2
  • go-task/task v3.53.1
  • errata-ai/vale v3.22.0 → [Updates: v3.23.0]
  • gohugoio/hugo v0.166.0
  • opentofu/opentofu v1.12.6
infrastructure/base/postgres/release.yaml (1)
  • quay.io/prometheuscommunity/postgres-exporter v0.20.1
infrastructure/base/system-upgrades/talos/kubernetes.yaml (4)
  • siderolabs/kubelet 1.36.4 → [Updates: 1.36.5, 1.37.1]
  • siderolabs/kubelet 1.36.4 → [Updates: 1.36.5, 1.37.1]
  • siderolabs/kubelet 1.36.4 → [Updates: 1.36.5, 1.37.1]
  • siderolabs/kubelet 1.36.4 → [Updates: 1.36.5, 1.37.1]
infrastructure/base/system-upgrades/talos/os.yaml (1)
  • siderolabs/talos v1.13.7 → [Updates: v1.13.10, v1.14.1]
infrastructure/base/traefik/external.yaml (1)
  • maxlerebourg/crowdsec-bouncer-traefik-plugin v1.7.1
shared/applications/oauth2-proxy.yaml (1)
  • oauth2-proxy 10.7.0
shared/components/keydb/release.yaml (1)
  • keydb 1.0.6
shared/components/oauth2-proxy/release.yaml (1)
  • oauth2-proxy 10.7.0
shared/components/valkey/release.yaml (1)
  • valkey 0.12.0
talos/talconfig.yaml (2)
  • siderolabs/talos v1.13.7 → [Updates: v1.13.10, v1.14.1]
  • siderolabs/kubelet v1.36.4 → [Updates: v1.36.5, v1.37.1]
tekton/pipeline/libravatar-nginx/0.1/libravatar-nginx.yaml (3)
  • quay.io/containers/buildah v1.43.4
  • docker.io/alpine/git 2.54.0 → [Updates: 2.54.0]
  • quay.io/containers/buildah v1.43.4
tekton/pipeline/monthly-gitops-release/0.1/monthly-gitops-release.yaml (1)
  • quay.io/fedora/fedora-minimal 42
tekton/task/create-forgejo-release/0.1/create-forgejo-release.yaml (1)
  • docker.io/curlimages/curl latest → [Updates: latest]
tekton/task/forgejo-package-upload/0.1/forgejo-package-upload.yaml (1)
  • docker.io/curlimages/curl 8.22.0 → [Updates: 8.22.0]
tekton/task/forgejo-set-status/0.1/forgejo-set-status.yaml (1)
  • docker.io/curlimages/curl latest → [Updates: latest]
tekton/task/git-chglog/0.1/git-chglog.yaml (1)
  • quay.io/git-chglog/git-chglog 0.15.4
tekton/task/gitleaks-detect/0.1/gitleaks-detect.yaml (1)
  • ghcr.io/gitleaks/gitleaks v8.30.1 → [Updates: v8.30.1]
tekton/task/go-lint/0.1/go-lint.yaml (2)
  • docker.io/golangci/golangci-lint v2.13.2 → [Updates: v2.14.0, v2.13.2]
  • docker.io/golangci/golangci-lint v2.13.2 → [Updates: v2.14.0, v2.13.2]
tekton/task/helm-forgejo-upload/0.1/helm-forgejo-upload.yaml (1)
  • docker.io/curlimages/curl 8.22.0 → [Updates: 8.22.0]
tekton/task/helm-lint/0.2/helm-lint.yaml (1)
  • docker.io/alpine/helm 3.21.4 → [Updates: 3.22.0, 4.3.0, 3.21.4]
tekton/task/helm-oci-push/0.1/helm-oci-push.yaml (1)
  • docker.io/alpine/helm 3.21.4 → [Updates: 3.22.0, 4.3.0, 3.21.4]
tekton/task/helm-package/0.2/helm-package.yaml (1)
  • docker.io/alpine/helm 3.21.4 → [Updates: 3.22.0, 4.3.0, 3.21.4]
tekton/task/helm-template-validate/0.2/helm-template-validate.yaml (1)
  • docker.io/alpine/helm 3.21.4 → [Updates: 3.22.0, 4.3.0, 3.21.4]
tekton/task/helm-unittest/0.2/helm-unittest.yaml (1)
  • docker.io/helmunittest/helm-unittest 3.21.0-1.0.3 → [Updates: 4.1.4-1.0.3, 3.21.0-1.0.3]
tekton/task/hugo-build/0.1/hugo-build.yaml (2)
  • docker.io/library/alpine 3.24.1 → [Updates: 3.24.2, 3.24.1]
  • docker.io/klakegg/hugo 0.111.3-ext-debian → [Updates: 0.111.3-ext-debian]
tekton/task/image-build/0.1/image-build.yaml (1)
  • quay.io/containers/buildah v1.43.4
tekton/task/image-build/0.2/image-build.yaml (1)
  • quay.io/containers/buildah v1.43.4
tekton/task/list-charts/0.2/list-charts.yaml (1)
  • docker.io/alpine 3.24 → [Updates: 3.24]
tekton/task/list-images/0.1/list-images.yaml (1)
  • docker.io/library/alpine 3.24 → [Updates: 3.24]
tekton/task/list-images/0.2/list-images.yaml (1)
  • docker.io/library/alpine 3.24 → [Updates: 3.24]
tekton/task/list-images/0.3/list-images.yaml (1)
  • docker.io/alpine/git 2.54.0 → [Updates: 2.54.0]
tekton/task/mdbook-build/0.1/mdbook-build.yaml (1)
  • ghcr.io/peaceiris/mdbook v0.5.0 → [Updates: v0.5.0]
tekton/task/renovate-config-lint/0.1/renovate-config-lint.yaml (1)
  • ghcr.io/renovatebot/renovate 44.105.0@sha256:ae7c74bbb093b5ee53bdafe5a325f1b2bbe32b1574b8e8922be089feb183e588 → [Updates: 44.115.13]
tekton/task/semantic-release/0.1/semantic-release.yaml (2)
  • ghcr.io/go-semantic-release/semantic-release 2.31.0 → [Updates: 2.31.0]
  • docker.io/alpine/git 2.54.0 → [Updates: 2.54.0]
tekton/task/vale-lint/0.1/vale-lint.yaml (2)
  • docker.io/jdkato/vale v3.20.0 → [Updates: v3.23.0, v3.20.0]
  • docker.io/jdkato/vale v3.20.0 → [Updates: v3.23.0, v3.20.0]
renovate-config (1)
renovate.json
terraform (3)
terraform/k8s01/main.tf
terraform/k8s01/provider.tf
terraform/versions.tf (6)
  • cloudflare 4.52.8 → [Updates: 4.52.9, 5.26.0]
  • hcloud 1.68.0 → [Updates: 1.69.0]
  • local 2.9.0 → [Updates: 2.9.1]
  • sops 1.4.1
  • template 2.2.0
  • hashicorp/terraform >= 0.14
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Repository Problems Renovate tried to run on this repository, but found these problems. - ⚠️ WARN: Repology lookup failed with unexpected error - ⚠️ WARN: Excess registryUrls found for datasource lookup - using first configured only - ⚠️ WARN: Error obtaining docker token - ⚠️ WARN: No docker auth found - returning - ⚠️ WARN: Package lookup failures - ⚠️ WARN: Error updating branch: update failure ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. <details> <summary>View abandoned dependencies (11)</summary> > ℹ️ **Note** > Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > | Datasource | Package | Last Updated | |------------|------|-------------| | flux | [keydb](https://github.com/fniko/keydb-helm-chart) | `2025-01-19` | | regex | [git-chglog/git-chglog](https://github.com/git-chglog/git-chglog) | `2023-02-15` | | regex | [gitlab-org/release-cli](https://gitlab.com/gitlab-org/release-cli) | `2025-06-02` | | regex | [keydb](https://github.com/fniko/keydb-helm-chart) | `2025-01-19` | | regex | [norwoodj/helm-docs](https://github.com/norwoodj/helm-docs) | `2024-07-08` | | regex | `postgresql` | `2025-09-25` | | terraform | [template](https://github.com/hashicorp/terraform-provider-template) | `2020-10-08` | </details> ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] <!-- unschedule-branch=renovate/lock-file-maintenance -->chore(deps): lock file maintenance ## Errored The following updates encountered an error and will be retried. To force a retry now, click on a checkbox below. - [ ] <!-- retry-branch=renovate/pin-dependencies -->chore(deps): pin dependencies (`chideat/valkey-operator`, `docker.io/alpine`, `docker.io/alpine/git`, `docker.io/alpine/helm`, `docker.io/alpine/kubectl`, `docker.io/apache/tika`, `docker.io/chideat/valkey-operator`, `docker.io/curlimages/curl`, `docker.io/golangci/golangci-lint`, `docker.io/gotenberg/gotenberg`, `docker.io/helmunittest/helm-unittest`, `docker.io/jdkato/vale`, `docker.io/klakegg/hugo`, `docker.io/library/alpine`, `docker.io/library/caddy`, `docker.io/library/debian`, `docker.io/library/golang`, `docker.io/library/python`, `docker.io/velero/velero`, `gcr.io/projectsigstore/cosign`, `ghcr.io/budimanjojo/talhelper`, `ghcr.io/caarlos0/svu`, `ghcr.io/gitleaks/gitleaks`, `ghcr.io/go-semantic-release/semantic-release`, `ghcr.io/ko-build/ko`, `ghcr.io/paperless-ngx/paperless-ngx`, `ghcr.io/peaceiris/mdbook`, `ghcr.io/siderolabs/talosctl`, `ghcr.io/tektoncd/plumbing/tkn`, `ghcr.io/the-draupnir-project/draupnir`, `ghcr.io/theduffman85/crowdsec-web-ui`, `ghcr.io/yannh/kubeconform`, `rancher/system-upgrade-controller`, `registry.k8s.io/autoscaling/vpa-admission-controller`, `registry.k8s.io/autoscaling/vpa-recommender`, `registry.k8s.io/autoscaling/vpa-updater`, `registry.shivering-isles.com/dockerhub/alpine/git`, `registry.shivering-isles.com/dockerhub/alpine/helm`, `registry.shivering-isles.com/dockerhub/curlimages/curl`, `registry.shivering-isles.com/dockerhub/helmunittest/helm-unittest`, `registry.shivering-isles.com/dockerhub/jdkato/vale`, `registry.shivering-isles.com/dockerhub/klakegg/hugo`, `registry.shivering-isles.com/dockerhub/library/alpine`, `sparkyfitness`) - [ ] <!-- retry-branch=renovate/docker.io-library-alpine-3.x -->chore(deps): update docker.io/library/alpine docker tag ## Pending Branch Automerge The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below. - [ ] <!-- approvePr-branch=renovate/loki-18.x -->chore(deps): update helm release loki to v18.13.7 - [ ] <!-- approvePr-branch=renovate/ghcr.io-renovatebot-renovate-44.x -->chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.115.13 - [ ] <!-- approvePr-branch=renovate/kube-prometheus-stack-91.x -->chore(deps): update helm release kube-prometheus-stack to v91.8.0 - [ ] <!-- approvePr-branch=renovate/kube-state-metrics-8.x -->chore(deps): update helm release kube-state-metrics to v8.6.0 - [ ] <!-- approvePr-branch=renovate/renovate-46.x -->chore(deps): update helm release renovate to v46.321.12 --- > ⚠️ **Warning** > > Renovate failed to look up the following dependencies: `Failed to look up helm package matrix-synapse: no-result`, `Failed to look up repology package alpine_3_24/dovecot: no-result`, `Failed to look up repology package alpine_3_24/postfix: no-result`, `Failed to look up docker package gcr.io/k8s-skaffold/skaffold: no-result`. > > Files affected: `apps/base/matrix/release.yaml`, `images/dovecot/Containerfile`, `images/postfix/Containerfile`, `images/mirror/Earthfile` --- ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/go-golang.org-x-text-vulnerability -->[chore(deps): update module golang.org/x/text to v0.39.0 [security]](pulls/341) - [ ] <!-- rebase-branch=renovate/ghcr.io-peaceiris-mdbook-v0.5.0 -->[chore(deps): update ghcr.io/peaceiris/mdbook:v0.5.0 docker digest to cbec471](pulls/1) - [ ] <!-- rebase-branch=renovate/anomalyco-opencode-1.x -->[chore(deps): update dependency anomalyco/opencode to v1.18.33](pulls/368) - [ ] <!-- rebase-branch=renovate/siderolabs-kubelet-1.36.x -->[chore(deps): update dependency siderolabs/kubelet to v1.36.5](pulls/355) - [ ] <!-- rebase-branch=renovate/siderolabs-talos-1.13.x -->[chore(deps): update dependency siderolabs/talos to v1.13.10](pulls/120) - [ ] <!-- rebase-branch=renovate/vmware-tanzu-velero-1.x -->[chore(deps): update dependency vmware-tanzu/velero to v1.18.4](pulls/338) - [ ] <!-- rebase-branch=renovate/docker.io-nginxinc-nginx-unprivileged-1.x -->[chore(deps): update docker.io/nginxinc/nginx-unprivileged docker tag to v1.31.6](pulls/362) - [ ] <!-- rebase-branch=renovate/docker.io-velero-velero-1.x -->[chore(deps): update docker.io/velero/velero docker tag to v1.18.4](pulls/339) - [ ] <!-- rebase-branch=renovate/sparkyfitness-1.x -->[chore(deps): update sparkyfitness docker tag to v1.7.3](pulls/369) - [ ] <!-- rebase-branch=renovate/cloudflare-4.x -->[chore(deps): update terraform cloudflare to v4.52.9](pulls/227) - [ ] <!-- rebase-branch=renovate/local-2.x -->[chore(deps): update terraform local to v2.9.1](pulls/304) - [ ] <!-- rebase-branch=renovate/errata-ai-vale-3.x -->[chore(deps): update dependency errata-ai/vale to v3.23.0](pulls/365) - [ ] <!-- rebase-branch=renovate/golangci-golangci-lint-2.x -->[chore(deps): update dependency golangci/golangci-lint to v2.14.0](pulls/357) - [ ] <!-- rebase-branch=renovate/siderolabs-kubelet-1.x -->[chore(deps): update dependency siderolabs/kubelet to v1.37.1](pulls/193) - [ ] <!-- rebase-branch=renovate/siderolabs-talos-1.x -->[chore(deps): update dependency siderolabs/talos to v1.14.1](pulls/237) - [ ] <!-- rebase-branch=renovate/docker.io-alpine-helm-3.x -->[chore(deps): update docker.io/alpine/helm docker tag to v3.22.0](pulls/274) - [ ] <!-- rebase-branch=renovate/docker.io-alpine-kubectl-1.x -->[chore(deps): update docker.io/alpine/kubectl docker tag to v1.37.1](pulls/91) - [ ] <!-- rebase-branch=renovate/docker.io-golangci-golangci-lint-2.x -->[chore(deps): update docker.io/golangci/golangci-lint docker tag to v2.14.0](pulls/358) - [ ] <!-- rebase-branch=renovate/docker.io-gotenberg-gotenberg-8.x -->[chore(deps): update docker.io/gotenberg/gotenberg docker tag to v8.37.0](pulls/305) - [ ] <!-- rebase-branch=renovate/docker.io-jdkato-vale-3.x -->[chore(deps): update docker.io/jdkato/vale docker tag to v3.23.0](pulls/306) - [ ] <!-- rebase-branch=renovate/docker.io-library-debian-13.x -->[chore(deps): update docker.io/library/debian docker tag to v13.7](pulls/351) - [ ] <!-- rebase-branch=renovate/docker.io-library-golang-1.x -->[chore(deps): update docker.io/library/golang docker tag to v1.27.1](pulls/366) - [ ] <!-- rebase-branch=renovate/prometheus-json-exporter-0.x -->[chore(deps): update helm release prometheus-json-exporter to v0.20.1](pulls/297) - [ ] <!-- rebase-branch=renovate/velero-12.x -->[chore(deps): update helm release velero to v12.2.0](pulls/309) - [ ] <!-- rebase-branch=renovate/postgres-0.x -->[chore(deps): update postgres docker tag to v0.20.6](pulls/216) - [ ] <!-- rebase-branch=renovate/quay.io-shivering-isles-dovecot-2.x -->[chore(deps): update quay.io/shivering-isles/dovecot docker tag to v2.4.4](pulls/285) - [ ] <!-- rebase-branch=renovate/quay.io-shivering-isles-koolbox-2026.x -->[chore(deps): update quay.io/shivering-isles/koolbox docker tag to v2026.07](pulls/286) - [ ] <!-- rebase-branch=renovate/rancher-system-upgrade-controller-0.x -->[chore(deps): update rancher/system-upgrade-controller docker tag to v0.20.2](pulls/9) - [ ] <!-- rebase-branch=renovate/registry.k8s.io-autoscaling-vpa-admission-controller-1.x -->[chore(deps): update registry.k8s.io/autoscaling/vpa-admission-controller docker tag to v1.8.0](pulls/347) - [ ] <!-- rebase-branch=renovate/registry.k8s.io-autoscaling-vpa-recommender-1.x -->[chore(deps): update registry.k8s.io/autoscaling/vpa-recommender docker tag to v1.8.0](pulls/348) - [ ] <!-- rebase-branch=renovate/registry.k8s.io-autoscaling-vpa-updater-1.x -->[chore(deps): update registry.k8s.io/autoscaling/vpa-updater docker tag to v1.8.0](pulls/349) - [ ] <!-- rebase-branch=renovate/hcloud-1.x -->[chore(deps): update terraform hcloud to v1.69.0](pulls/310) - [ ] <!-- rebase-branch=renovate/kubernetes-monorepo -->[fix(deps): update kubernetes monorepo to v0.37.1](pulls/320) (`k8s.io/apimachinery`, `k8s.io/client-go`) - [ ] <!-- rebase-branch=renovate/helm-helm-4.x -->[chore(deps): update dependency helm/helm to v4](pulls/22) - [ ] <!-- rebase-branch=renovate/docker.io-alpine-helm-4.x -->[chore(deps): update docker.io/alpine/helm docker tag to v4](pulls/23) - [ ] <!-- rebase-branch=renovate/docker.io-helmunittest-helm-unittest-4.x -->[chore(deps): update docker.io/helmunittest/helm-unittest docker tag to v4](pulls/219) - [ ] <!-- rebase-branch=renovate/docker.io-library-nextcloud-35.x -->[chore(deps): update docker.io/library/nextcloud docker tag to v35](pulls/316) - [ ] <!-- rebase-branch=renovate/cloudflare-5.x -->[chore(deps): update terraform cloudflare to v5](pulls/29) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>dockerfile (5)</summary> <blockquote> <details><summary>images/demo/Containerfile (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>images/dovecot/Containerfile (1)</summary> - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] </details> <details><summary>images/opencode/Containerfile (1)</summary> - `docker.io/library/debian trixie-slim` → [Updates: `trixie-slim`] </details> <details><summary>images/postfix/Containerfile (2)</summary> - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] </details> <details><summary>images/tools/Containerfile (2)</summary> - `quay.io/fedora/fedora 42` - `quay.io/fedora/fedora 42` </details> </blockquote> </details> <details><summary>flux (46)</summary> <blockquote> <details><summary>apps/base/crowdsec/release.yaml (1)</summary> - `crowdsec 0.24.2` </details> <details><summary>apps/base/findmydevice/release.yaml</summary> </details> <details><summary>apps/base/forecastle/release.yaml (1)</summary> - `forecastle 2.1.2` </details> <details><summary>apps/base/hedgedoc/release.yaml</summary> </details> <details><summary>apps/base/iot/shelly-exporter.yaml (1)</summary> - `prometheus-json-exporter 0.19.2` → [Updates: `0.20.1`] </details> <details><summary>apps/base/keycloak/release.yaml</summary> </details> <details><summary>apps/base/loki/loki.yaml (1)</summary> - `loki 18.13.5` → [Updates: `18.13.7`] </details> <details><summary>apps/base/mail/release.yaml</summary> </details> <details><summary>apps/base/mastodon/release.yaml</summary> </details> <details><summary>apps/base/mastodon/sidekiq-monitor.yaml</summary> </details> <details><summary>apps/base/matrix/release.yaml (1)</summary> - `matrix-synapse 3.12.38` </details> <details><summary>apps/base/nextcloud/release.yaml</summary> </details> <details><summary>apps/base/nut-exporter/release.yaml</summary> </details> <details><summary>apps/base/renovate/release.yaml (1)</summary> - `renovate 46.264.2` → [Updates: `46.321.12`] </details> <details><summary>apps/base/sparkyfitness/release.yaml (1)</summary> - `sparkyfitness 1.7.2` → [Updates: `1.7.3`, `1.7.2`] </details> <details><summary>apps/base/trek/release.yaml (1)</summary> - `trek 4.3.3` </details> <details><summary>apps/base/uptime-kuma/release.yaml (1)</summary> - `uptime-kuma 4.2.0` </details> <details><summary>apps/base/zot/release.yaml (1)</summary> - `zot 0.1.125` </details> <details><summary>bootstrap/calico/release.yaml (1)</summary> - `tigera-operator v3.32.2` </details> <details><summary>bootstrap/kube-system/snapshot-controller-crds.yaml (1)</summary> - `external-snapshotter v8.6.0` </details> <details><summary>clusters/k8s01/flux-system/gotk-components.yaml (1)</summary> - `fluxcd/flux2 v2.9.5` </details> <details><summary>clusters/k8s01/flux-system/gotk-sync.yaml</summary> </details> <details><summary>infrastructure/base/cert-manager/release.yaml (1)</summary> - `cert-manager v1.21.2` </details> <details><summary>infrastructure/base/drivers/amd-gpu.yaml (1)</summary> - `amd-gpu 0.22.0` </details> <details><summary>infrastructure/base/external-dns/release.yaml (1)</summary> - `external-dns 1.22.0` </details> <details><summary>infrastructure/base/flux-system/monitoring/kube-state-metrics.yaml (1)</summary> - `kube-state-metrics 8.5.0` → [Updates: `8.6.0`] </details> <details><summary>infrastructure/base/kube-system/descheduler.yaml (1)</summary> - `descheduler 0.36.0` </details> <details><summary>infrastructure/base/kube-system/metrics-server.yaml (1)</summary> - `metrics-server 3.14.0` </details> <details><summary>infrastructure/base/logging/promtail/promtail.yaml (1)</summary> - `promtail 6.17.1` </details> <details><summary>infrastructure/base/longhorn/release.yaml (1)</summary> - `longhorn 1.12.1` </details> <details><summary>infrastructure/base/monitoring/json-exporter.yaml (1)</summary> - `prometheus-json-exporter 0.19.2` → [Updates: `0.20.1`] </details> <details><summary>infrastructure/base/monitoring/release.yaml (1)</summary> - `kube-prometheus-stack 91.5.1` → [Updates: `91.8.0`] </details> <details><summary>infrastructure/base/monitoring/sloth.yaml (1)</summary> - `sloth 0.16.0` </details> <details><summary>infrastructure/base/monitoring/smartctl-exporter.yaml (1)</summary> - `prometheus-smartctl-exporter 0.17.1` </details> <details><summary>infrastructure/base/nginx-system/external.yaml (1)</summary> - `ingress-nginx 4.15.1` </details> <details><summary>infrastructure/base/nginx-system/internal.yaml (1)</summary> - `ingress-nginx 4.15.1` </details> <details><summary>infrastructure/base/node-features/release.yaml (1)</summary> - `node-feature-discovery 0.19.0` </details> <details><summary>infrastructure/base/postgres/release.yaml (1)</summary> - `postgres-operator 2.0.2` </details> <details><summary>infrastructure/base/system-upgrades/kured.yaml (1)</summary> - `kured 6.1.0` </details> <details><summary>infrastructure/base/traefik/external.yaml (1)</summary> - `traefik 41.6.0` </details> <details><summary>infrastructure/base/traefik/internal.yaml (1)</summary> - `traefik 41.6.0` </details> <details><summary>infrastructure/base/velero/release.yaml (1)</summary> - `velero 12.1.0` → [Updates: `12.2.0`] </details> <details><summary>shared/applications/oauth2-proxy.yaml (1)</summary> - `oauth2-proxy 10.7.0` </details> <details><summary>shared/components/keydb/release.yaml (1)</summary> - `keydb 1.0.6` </details> <details><summary>shared/components/oauth2-proxy/release.yaml (1)</summary> - `oauth2-proxy 10.7.0` </details> <details><summary>shared/components/valkey/release.yaml (1)</summary> - `valkey 0.12.0` </details> </blockquote> </details> <details><summary>gitlabci (1)</summary> <blockquote> <details><summary>charts/.utils/gitlab-ci.yaml (3)</summary> - `quay.io/shivering-isles/koolbox 2026.04` → [Updates: `2026.07`] - `quay.io/shivering-isles/koolbox 2026.04` → [Updates: `2026.07`] - `docker.io/helmunittest/helm-unittest 3.18.4-0.8.2` </details> </blockquote> </details> <details><summary>gomod (1)</summary> <blockquote> <details><summary>go/jellyfin-pdb-mgr/go.mod (5)</summary> - `go 1.26.4` - `github.com/bitfield/script v0.25.1` - `k8s.io/apimachinery v0.36.2` → [Updates: `v0.37.1`] - `k8s.io/client-go v0.36.2` → [Updates: `v0.37.1`] - `golang.org/x/text v0.38.0` → [Updates: `v0.39.0`] </details> </blockquote> </details> <details><summary>helm-values (7)</summary> <blockquote> <details><summary>charts/findmydevice/values.yaml</summary> </details> <details><summary>charts/hedgedoc/values.yaml</summary> </details> <details><summary>charts/keycloak/values.yaml</summary> </details> <details><summary>charts/mastodon/values.yaml</summary> </details> <details><summary>charts/mok/values.yaml (2)</summary> - `quay.io/shivering-isles/postfix 3.11.7` - `quay.io/shivering-isles/dovecot 2.3.21` → [Updates: `2.4.4`] </details> <details><summary>charts/nextcloud/values.yaml (2)</summary> - `docker.io/library/postgres 18` - `docker.io/xperimental/nextcloud-exporter 0.9.1` </details> <details><summary>charts/nut-exporter/values.yaml</summary> </details> </blockquote> </details> <details><summary>helmv3 (3)</summary> <blockquote> <details><summary>charts/hedgedoc/Chart.yaml (1)</summary> - `postgres 0.19.11` → [Updates: `0.20.6`] </details> <details><summary>charts/mastodon/Chart.yaml (2)</summary> - `postgres 0.19.11` → [Updates: `0.20.6`] - `valkey 0.12.0` </details> <details><summary>charts/nextcloud/Chart.yaml (2)</summary> - `postgres 0.19.11` → [Updates: `0.20.6`] - `valkey 0.12.0` </details> </blockquote> </details> <details><summary>kubernetes (284)</summary> <blockquote> <details><summary>apps/base/ansteckschildchen/ansteckschildchen.yaml (3)</summary> - `quay.io/sheogorath/ansteckschildchen v1.4.2` - `Deployment apps/v1` - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/base/anubis/deployment.yaml (2)</summary> - `ghcr.io/techarohq/anubis v1.27.0@sha256:8828275668b7bc675679f100970f9714f731388fbbf66ae94de8aca952e3fc4a` - `Deployment apps/v1` </details> <details><summary>apps/base/anubis/poddisruptionbudget.yaml (1)</summary> - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/base/camo/deployment.yaml (2)</summary> - `ghcr.io/cactus/go-camo v2.7.6@sha256:8ebe782b360eb2c380e4641b37bde3e306bc7c25d3f75ad359cca8f92c845974` - `Deployment apps/v1` </details> <details><summary>apps/base/crowdsec/components/web-ui/web-ui.yaml (2)</summary> - `ghcr.io/theduffman85/crowdsec-web-ui 2026.9.2` → [Updates: `2026.9.2`] - `Deployment apps/v1` </details> <details><summary>apps/base/crowdsec/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/crowdsec/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/base/draupnir/deployment.yaml (2)</summary> - `ghcr.io/the-draupnir-project/draupnir v3.1.0` → [Updates: `v3.1.0`] - `Deployment apps/v1` </details> <details><summary>apps/base/findmydevice/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/forecastle/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/forecastle/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/base/hedgedoc/namespace.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/base/hedgedoc/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/hedgedoc/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/immich/machine-learning/deployment.yaml (2)</summary> - `ghcr.io/immich-app/immich-machine-learning release@sha256:60dfcf266a9ef3b7376f5678e8c980d4fb61db5fc48c078fe8a326ab1535d60d` - `Deployment apps/v1` </details> <details><summary>apps/base/immich/microservices/deployment.yaml (2)</summary> - `ghcr.io/immich-app/immich-server release@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea` - `Deployment apps/v1` </details> <details><summary>apps/base/immich/monitoring-integrity/cronjob.yaml (2)</summary> - `ghcr.io/immich-app/immich-server release@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea` - `CronJob batch/v1` </details> <details><summary>apps/base/immich/postgres-zalando/allow-zalando-database.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/immich/server/deployment.yaml (2)</summary> - `ghcr.io/immich-app/immich-server release@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea` - `Deployment apps/v1` </details> <details><summary>apps/base/iot/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/iot/shelly-exporter.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/iot/shelly-ht-monitor.yaml (2)</summary> - `quay.io/shivering-isles/shelly-action-exporter v1.0.7` - `Deployment apps/v1` </details> <details><summary>apps/base/jellyfin/deployment.yaml (2)</summary> - `ghcr.io/jellyfin/jellyfin 12.1@sha256:008ec8024bdaaa6f0a3f0de468e185633eeba9d67c56936e8dbf5ef6b8d6200f` - `Deployment apps/v1` </details> <details><summary>apps/base/jellyfin/jellyfin-pdb-mgr/poddisruptionbudget.yaml (1)</summary> - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/base/jellyfin/jellyfin-pdb-mgr/role.yaml (2)</summary> - `Role rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/base/keycloak/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/keycloak/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/libravatar/deployment.yaml (1)</summary> - `Deployment apps/v1` </details> <details><summary>apps/base/loki/loki.yaml (5)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/loki/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/base/mail/namespace.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/base/mail/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/mastodon/networkpolicy-ingress.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/mastodon/networkpolicy-monitoring.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/mastodon/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/mastodon/sidekiq-monitor.yaml (2)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/matrix/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/matrix/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/matrix/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/base/matrix/synatainer/synatainer.yaml (2)</summary> - `registry.gitlab.com/mb-saces/synatainer 0.4.4@sha256:b5e1270a0b7d9be6a6bd651332483fedb678b097775d8254fde3188d5525338d` - `CronJob batch/v1` </details> <details><summary>apps/base/nextcloud/namespace.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/base/nextcloud/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/nextcloud/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/nut-exporter/namespace.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/base/nut-exporter/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/nut-exporter/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/opencode/deployment.yaml (2)</summary> - `quay.io/shivering-isles/opencode 1.18.32` - `Deployment apps/v1` </details> <details><summary>apps/base/paperless/deployment.yaml (2)</summary> - `ghcr.io/paperless-ngx/paperless-ngx latest` → [Updates: `latest`] - `Deployment apps/v1` </details> <details><summary>apps/base/paperless/gotenberg/deployment.yaml (2)</summary> - `docker.io/gotenberg/gotenberg latest` → [Updates: `latest`] - `Deployment apps/v1` </details> <details><summary>apps/base/paperless/tika/deployment.yaml (2)</summary> - `docker.io/apache/tika latest` → [Updates: `latest`] - `Deployment apps/v1` </details> <details><summary>apps/base/renovate/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/renovate/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/base/s3dav-proxy/deployment.yaml (2)</summary> - `quay.io/shivering-isles/s3dav-proxy v1.1.39` - `Deployment apps/v1` </details> <details><summary>apps/base/sparkyfitness/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/sparkyfitness/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/sparkyfitness/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/base/tekton/poddisruptionbudget.yaml (3)</summary> - `PodDisruptionBudget policy/v1` - `PodDisruptionBudget policy/v1` - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/base/tekton/tekton-dashboard.yaml (12)</summary> - `ghcr.io/tektoncd/dashboard/dashboard-9623576a202fe86c8b7d1bc489905f86 v0.72.0@sha256:f9551aabef68efb2e15ad284d85cb77f2298c47a7d4694f6cf8750a1710d5fd6` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `Deployment apps/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/base/tekton/tekton-interceptors.yaml (2)</summary> - `ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5 v0.37.1@sha256:0cfcae8722554cd96082256b5fc0ed41a32a7907f7b9d5c5a76729fda5fbb676` - `Deployment apps/v1` </details> <details><summary>apps/base/tekton/tekton-pipelines.yaml (46)</summary> - `ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36 v1.16.0@sha256:27458f2073bb6f826cbe7a97324ca5553d8d97e60f91f2b8dd37fea72c43fdf2` - `ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c v1.16.0@sha256:3b4777e52b0fcf98c3a24d1227eedf2984a222c1af18ea0d5f56da0f4832b6d1` - `ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d v1.16.0@sha256:318c3caf89aec173b4c4bb69da60d09e1a1f8d8ffb4b9255982832d9c63b70c5` - `ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1 v1.16.0@sha256:cc0f3620092c91d8a2eb18a155fd0504dae7043a1fae9851dc7b5b9ed1ea3626` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `ValidatingWebhookConfiguration admissionregistration.k8s.io/v1` - `MutatingWebhookConfiguration admissionregistration.k8s.io/v1` - `ValidatingWebhookConfiguration admissionregistration.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `Deployment apps/v1` - `Deployment apps/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `Deployment apps/v1` - `HorizontalPodAutoscaler autoscaling/v2` - `Deployment apps/v1` </details> <details><summary>apps/base/tekton/tekton-triggers.yaml (31)</summary> - `ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315 v0.37.1@sha256:668262c7e44ed93bfb7d9a5e0c18722399f2b7bd13e5d308be174b88b80f2661` - `ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6 v0.37.1@sha256:7515b83704901e1fad7c3651ae877c65a1bf3251d61e12a1a639665b2b639ec7` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `ValidatingWebhookConfiguration admissionregistration.k8s.io/v1` - `MutatingWebhookConfiguration admissionregistration.k8s.io/v1` - `ValidatingWebhookConfiguration admissionregistration.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `Deployment apps/v1` - `Deployment apps/v1` </details> <details><summary>apps/base/trek/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/trek/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/base/uptime-kuma/namespace.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/base/uptime-kuma/networkpolicy.yaml (3)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/uptime-kuma/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/uptime-kuma/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/base/zot/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/base/zot/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/base/zot/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>apps/k8s01/ansteckschildchen/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/anubis/haproxy/deployment.yaml (2)</summary> - `docker.io/library/haproxy 3.4.5@sha256:76928c0d6b39bdd5f1c15d519cf48c47a6aa18c1dc552f7af1c146d2aa003c14` - `Deployment apps/v1` </details> <details><summary>apps/k8s01/anubis/haproxy/networkpolicy.yaml (3)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/anubis/haproxy/poddisruptionbudget.yaml (1)</summary> - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/k8s01/anubis/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/blog/blog.yaml (3)</summary> - `quay.io/shivering-isles/blog 2026.07.21.0` - `Deployment apps/v1` - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/k8s01/blog/ingress.yaml (2)</summary> - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/camo/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/crowdsec/ban-cidr-import.yaml (4)</summary> - `docker.io/curlimages/curl latest` → [Updates: `latest`] - `docker.io/library/debian 13.6-slim@sha256:d7e12182ce18b85b93007c1dedf31f2d29e01ccf3182cc4017c709b6259bc132` → [Updates: `13.7-slim`] - `docker.io/crowdsecurity/crowdsec v1.8.1@sha256:0f2523fa61ef507f15d953045cface490cc880670c62f2755ced17524107f71a` - `CronJob batch/v1` </details> <details><summary>apps/k8s01/crowdsec/web-ui-ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/dns/dns.yaml (3)</summary> - `ghcr.io/0xerr0r/blocky v0.35.0@sha256:4f165b63db0d76c96ecc47c7a8f57caeedc003a912bdce29abb0e283ce02e16b` - `Deployment apps/v1` - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/k8s01/dns/networkpolicy-patch.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/dns/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/forecastle/pdb.yaml (1)</summary> - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/k8s01/hedgedoc/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/immich/backup.yaml (2)</summary> - `docker.io/minio/mc unknown version` - `CronJob batch/v1` </details> <details><summary>apps/k8s01/immich/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/iot/rainer.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/iot/shelly-ht-monitor.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/iot/shelly.yaml (6)</summary> - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/jellyfin/allow-from-ingress.patch.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/jellyfin/allow-to-public-web.patch.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/jellyfin/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/keycloak/egress-to-database.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/keycloak/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/libravatar/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/mastocloud/cronjob.yaml (2)</summary> - `docker.io/library/alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b` → [Updates: `3.24.2`] - `CronJob batch/v1` </details> <details><summary>apps/k8s01/mastocloud/deployment.yaml (3)</summary> - `docker.io/nginxinc/nginx-unprivileged 1.31.4-alpine@sha256:d9083fe47768377ef55dedafd67d4da7c2f2bc2bece7554954f29359deb0dce9` → [Updates: `1.31.6-alpine`] - `Deployment apps/v1` - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/k8s01/mastocloud/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/mastodon/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/mastodon/oauth2.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/nas/namespace.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/k8s01/nas/s3.yaml (14)</summary> - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/nextcloud/oauth2.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/nextcloud/pdb.yaml (1)</summary> - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/k8s01/opencode/components/caddy/kustomization.yaml (1)</summary> - `docker.io/library/caddy 2.11.4-alpine` → [Updates: `2.11.4-alpine`] </details> <details><summary>apps/k8s01/opencode/ingress.yaml (2)</summary> - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/panoramax-mailer/cronjob.yaml (2)</summary> - `quay.io/sheogorath/panoramax-report-mailer v1.1.0` - `CronJob batch/v1` </details> <details><summary>apps/k8s01/paperless/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/renovate/release-overwrite.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>apps/k8s01/s3dav-proxy/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/sparkyfitness/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/tekton/dashboard/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/cleanup.yaml (5)</summary> - `ghcr.io/tektoncd/plumbing/tkn latest` → [Updates: `latest`] - `ghcr.io/tektoncd/plumbing/tkn latest` → [Updates: `latest`] - `CronJob batch/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/forgejo-webhook-ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/monthly-release.yaml (4)</summary> - `quay.io/fedora/fedora-minimal 42` - `CronJob batch/v1` - `Role rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/network-policy-patch.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/resourcequota.yaml (1)</summary> - `PriorityClass scheduling.k8s.io/v1` </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/tekton-resources.yaml (1)</summary> - `Kustomization kustomize.toolkit.fluxcd.io/v1` </details> <details><summary>apps/k8s01/trek/ingress.yaml (2)</summary> - `Ingress networking.k8s.io/v1` - `Ingress networking.k8s.io/v1` </details> <details><summary>apps/k8s01/unpoller/deployment.yaml (2)</summary> - `ghcr.io/unpoller/unpoller v5.2.8@sha256:ca82e584b9bb3c8d2f9998adb429ab9f9bbb8840388ba10f2c62f07bd31ea0e9` - `Deployment apps/v1` </details> <details><summary>apps/k8s01/unpoller/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/k8s01/uptime-kuma/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>bootstrap/calico/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>bootstrap/calico/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>bootstrap/kube-system/snapshot-controller-crds.yaml (2)</summary> - `GitRepository source.toolkit.fluxcd.io/v1` - `Kustomization kustomize.toolkit.fluxcd.io/v1` </details> <details><summary>bootstrap/system-upgrades/clusterrolebinding.yaml (1)</summary> - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>bootstrap/system-upgrades/crd.yaml (1)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>bootstrap/system-upgrades/system-upgrade-controller.yaml (8)</summary> - `rancher/system-upgrade-controller v0.19.0` → [Updates: `v0.20.2`, `v0.19.0`] - `Role rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>clusters/k8s01/apps.yaml (1)</summary> - `Kustomization kustomize.toolkit.fluxcd.io/v1` </details> <details><summary>clusters/k8s01/bootstrap.yaml (1)</summary> - `Kustomization kustomize.toolkit.fluxcd.io/v1` </details> <details><summary>clusters/k8s01/flux-system/gotk-patches.yaml (2)</summary> - `GitRepository source.toolkit.fluxcd.io/v1` - `Kustomization kustomize.toolkit.fluxcd.io/v1` </details> <details><summary>clusters/k8s01/flux-system/reciever.yaml (2)</summary> - `Receiver notification.toolkit.fluxcd.io/v1` - `Ingress networking.k8s.io/v1` </details> <details><summary>clusters/k8s01/infrastructure.yaml (1)</summary> - `Kustomization kustomize.toolkit.fluxcd.io/v1` </details> <details><summary>clusters/k8s01/kube-system/anonymous-oidc-access.yaml (1)</summary> - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>clusters/k8s01/kube-system/cluster-admin.yaml (1)</summary> - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>clusters/k8s01/kube-system/oidc-cluster-admin.yaml (1)</summary> - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/cert-manager/networkpolicy-patch.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/cert-manager/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/cert-manager/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/cert-manager/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/drivers/amd-gpu.yaml (2)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/errorpages/deployment.yaml (2)</summary> - `ghcr.io/tarampampam/error-pages 4.2.5@sha256:6d42b5d6e1a014fa2373e3587f9e85c25589a089fd5f6fc4f2a496858f5e365d` - `Deployment apps/v1` </details> <details><summary>infrastructure/base/errorpages/poddisruptionbudget.yaml (1)</summary> - `PodDisruptionBudget policy/v1` </details> <details><summary>infrastructure/base/external-dns/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/external-dns/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/flux-system/monitoring/kube-state-metrics.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/flux-system/monitoring/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/flux-system/monitoring/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/kube-system/descheduler.yaml (2)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/kube-system/metrics-server.yaml (2)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/kube-system/poddisruptionbudget.yaml (2)</summary> - `PodDisruptionBudget policy/v1` - `PodDisruptionBudget policy/v1` </details> <details><summary>infrastructure/base/kube-system/quorum.yaml (5)</summary> - `registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a` - `registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a` - `registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a` - `registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a` - `Deployment apps/v1` </details> <details><summary>infrastructure/base/kube-system/snapshot-controller.yaml (1)</summary> - `Kustomization kustomize.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/kube-system/talos-etcd-defrag/cronjob.yaml (2)</summary> - `docker.io/alpine/kubectl 1.36.2` → [Updates: `1.37.1`, `1.36.2`] - `CronJob batch/v1` </details> <details><summary>infrastructure/base/kube-system/talos-etcd-defrag/job.yaml (1)</summary> - `ghcr.io/siderolabs/talosctl v1.14.1@sha256:30791b2ec3ab1dec4093c342306159ebfe876eb9f646d5a710b853844a65ba13` </details> <details><summary>infrastructure/base/kube-system/talos-etcd-defrag/rbac.yaml (4)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/logging/promtail/promtail.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/logging/promtail/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/longhorn/namespace.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/longhorn/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/longhorn/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/longhorn/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/longhorn/storageclass.yaml (1)</summary> - `StorageClass storage.k8s.io/v1` </details> <details><summary>infrastructure/base/metallb/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/metallb/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/metallb/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/monitoring/calico-networkpolicy.yaml (1)</summary> - `NetworkPolicy projectcalico.org/v3` </details> <details><summary>infrastructure/base/monitoring/json-exporter.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/monitoring/namespace.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/monitoring/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/monitoring/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/monitoring/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/monitoring/sloth.yaml (2)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/monitoring/smartctl-exporter.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/nginx-system/external.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/nginx-system/internal.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/nginx-system/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/node-features/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/node-features/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/postgres/release.yaml (2)</summary> - `quay.io/prometheuscommunity/postgres-exporter v0.20.1` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/postgres/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/priorityclasses/priorityclass.yaml (3)</summary> - `PriorityClass scheduling.k8s.io/v1` - `PriorityClass scheduling.k8s.io/v1` - `PriorityClass scheduling.k8s.io/v1` </details> <details><summary>infrastructure/base/rapt/rapt.yaml (1)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>infrastructure/base/system-upgrades/calver-server.yaml (2)</summary> - `quay.io/shivering-isles/calver-server v1` - `Deployment apps/v1` </details> <details><summary>infrastructure/base/system-upgrades/fedora/fedora-autoupdate.yaml (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>infrastructure/base/system-upgrades/fedora/fedora-system-upgrade.yaml (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>infrastructure/base/system-upgrades/fedora/fedora-temperature-management.yaml (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>infrastructure/base/system-upgrades/kubelet.yaml (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>infrastructure/base/system-upgrades/kubernetes.yaml (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>infrastructure/base/system-upgrades/kured.yaml (3)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` - `HelmRelease helm.toolkit.fluxcd.io/v2` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/system-upgrades/talos/kubernetes.yaml (4)</summary> - `docker.io/bitnamilegacy/kubectl 1.33@sha256:cd354d5b25562b195b277125439c23e4046902d7f1abc0dc3c75aad04d298c17` - `ghcr.io/siderolabs/talosctl v1.14.1@sha256:30791b2ec3ab1dec4093c342306159ebfe876eb9f646d5a710b853844a65ba13` - `ghcr.io/siderolabs/talosctl v1.14.1@sha256:30791b2ec3ab1dec4093c342306159ebfe876eb9f646d5a710b853844a65ba13` - `docker.io/rancher/kubectl v1.36.2@sha256:06c7a7a9772737494ae1e0c3af90f1b5385630c147e47c1c7cea92f4bed55fbe` </details> <details><summary>infrastructure/base/system-upgrades/talos/os.yaml (4)</summary> - `docker.io/bitnamilegacy/kubectl 1.33@sha256:cd354d5b25562b195b277125439c23e4046902d7f1abc0dc3c75aad04d298c17` - `ghcr.io/siderolabs/talosctl unknown version` → [Updates: `undefined`] - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/system-upgrades/talos/rbac.yaml (4)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/system-upgrades/talos/serviceaccount.yaml (1)</summary> - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/traefik/external.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/traefik/internal.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/traefik/networkpolicies.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/traefik/networkpolicy-patches.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/base/traefik/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/crd/bases/rds.valkey.buf.red_valkeys.yaml (1)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/crd/bases/valkey.buf.red_clusters.yaml (1)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/crd/bases/valkey.buf.red_failovers.yaml (1)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/crd/bases/valkey.buf.red_sentinels.yaml (1)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/crd/bases/valkey.buf.red_users.yaml (1)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/manager/manager.yaml (2)</summary> - `controller latest` - `Deployment apps/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/cluster_editor_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/cluster_viewer_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/failover_editor_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/failover_viewer_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/leader_election_role_binding.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/leader_election_role.yaml (1)</summary> - `Role rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/metrics_auth_role_binding.yaml (1)</summary> - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/metrics_auth_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/metrics_reader_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/rds_valkey_editor_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/rds_valkey_viewer_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/role_binding.yaml (1)</summary> - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/sentinel_editor_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/sentinel_viewer_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/user_editor_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/rbac/user_viewer_role.yaml (1)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/webhook/manifests.yaml (2)</summary> - `MutatingWebhookConfiguration admissionregistration.k8s.io/v1` - `ValidatingWebhookConfiguration admissionregistration.k8s.io/v1` </details> <details><summary>infrastructure/base/velero/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>infrastructure/base/velero/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/admission-controller-deployment.yaml (2)</summary> - `registry.k8s.io/autoscaling/vpa-admission-controller 1.7.1` → [Updates: `1.8.0`, `1.7.1`] - `Deployment apps/v1` </details> <details><summary>infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/recommender-deployment.yaml (2)</summary> - `registry.k8s.io/autoscaling/vpa-recommender 1.7.1` → [Updates: `1.8.0`, `1.7.1`] - `Deployment apps/v1` </details> <details><summary>infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/updater-deployment.yaml (2)</summary> - `registry.k8s.io/autoscaling/vpa-updater 1.7.1` → [Updates: `1.8.0`, `1.7.1`] - `Deployment apps/v1` </details> <details><summary>infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/vpa-rbac.yaml (22)</summary> - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `Role rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/base/vpa/vpa-1.7.1/vertical-pod-autoscaler/deploy/vpa-v1-crd-gen.yaml (2)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>infrastructure/k8s01/calico/whisker/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>infrastructure/k8s01/drivers/cpufreq-disable-boost.yaml (3)</summary> - `quay.io/fedora/fedora 42` - `registry.k8s.io/pause 3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a` - `DaemonSet apps/v1` </details> <details><summary>infrastructure/k8s01/drivers/cryptsetup.yaml (5)</summary> - `docker.io/bitnamilegacy/kubectl 1.33@sha256:cd354d5b25562b195b277125439c23e4046902d7f1abc0dc3c75aad04d298c17` - `quay.io/fedora/fedora 42` - `DaemonSet apps/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` </details> <details><summary>infrastructure/k8s01/gvisor/runtimeclass.yaml (2)</summary> - `RuntimeClass node.k8s.io/v1` - `RuntimeClass node.k8s.io/v1` </details> <details><summary>infrastructure/k8s01/kata-containers/runtimeclass.yaml (1)</summary> - `RuntimeClass node.k8s.io/v1` </details> <details><summary>infrastructure/k8s01/logging/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>infrastructure/k8s01/longhorn/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>infrastructure/k8s01/monitoring/ingress.yaml (1)</summary> - `Ingress networking.k8s.io/v1` </details> <details><summary>infrastructure/k8s01/monitoring/watchdog.yaml (2)</summary> - `docker.io/curlimages/curl latest` → [Updates: `latest`] - `CronJob batch/v1` </details> <details><summary>infrastructure/k8s01/system-upgrades/dns.yaml (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>infrastructure/k8s01/system-upgrades/iscsid_hotfix.yaml (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>infrastructure/k8s01/system-upgrades/registry.yaml (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>shared/components/flux-namespace-admin/rolebinding.yaml (1)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>shared/components/keydb/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>shared/components/keydb/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>shared/components/keydb/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>shared/components/oauth2-proxy/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>shared/components/oauth2-proxy/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>shared/components/oauth2-proxy/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>shared/components/valkey-sentinel/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>shared/components/valkey/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>shared/components/valkey/release.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>shared/components/valkey/repository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>tekton/eventlistener/forgejo/0.1/forgejo.yaml (2)</summary> - `RoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>tekton/pipeline/libravatar-nginx/0.1/libravatar-nginx.yaml (3)</summary> - `quay.io/containers/buildah v1.43.4` - `docker.io/alpine/git 2.54.0` → [Updates: `2.54.0`] - `quay.io/containers/buildah v1.43.4` </details> <details><summary>tekton/pipeline/monthly-gitops-release/0.1/monthly-gitops-release.yaml (1)</summary> - `quay.io/fedora/fedora-minimal 42` </details> <details><summary>tekton/task/create-forgejo-release/0.1/create-forgejo-release.yaml (1)</summary> - `docker.io/curlimages/curl latest` → [Updates: `latest`] </details> <details><summary>tekton/task/forgejo-package-upload/0.1/forgejo-package-upload.yaml (1)</summary> - `docker.io/curlimages/curl 8.22.0` → [Updates: `8.22.0`] </details> <details><summary>tekton/task/forgejo-set-status/0.1/forgejo-set-status.yaml (1)</summary> - `docker.io/curlimages/curl latest` → [Updates: `latest`] </details> <details><summary>tekton/task/git-chglog/0.1/git-chglog.yaml (1)</summary> - `quay.io/git-chglog/git-chglog 0.15.4` </details> <details><summary>tekton/task/git-clone-alpine/0.1/git-clone-alpine.yaml (1)</summary> - `docker.io/alpine/git unknown version` → [Updates: `undefined`] </details> <details><summary>tekton/task/git-restore-mtime/0.1/git-restore-mtime.yaml (1)</summary> - `docker.io/alpine/git unknown version` → [Updates: `undefined`] </details> <details><summary>tekton/task/gitleaks-detect/0.1/gitleaks-detect.yaml (1)</summary> - `ghcr.io/gitleaks/gitleaks v8.30.1` → [Updates: `v8.30.1`] </details> <details><summary>tekton/task/go-lint/0.1/go-lint.yaml (2)</summary> - `docker.io/golangci/golangci-lint v2.13.2` → [Updates: `v2.14.0`, `v2.13.2`] - `docker.io/golangci/golangci-lint v2.13.2` → [Updates: `v2.14.0`, `v2.13.2`] </details> <details><summary>tekton/task/helm-forgejo-upload/0.1/helm-forgejo-upload.yaml (1)</summary> - `docker.io/curlimages/curl 8.22.0` → [Updates: `8.22.0`] </details> <details><summary>tekton/task/helm-lint/0.2/helm-lint.yaml (1)</summary> - `docker.io/alpine/helm 3.21.4` → [Updates: `3.22.0`, `4.3.0`, `3.21.4`] </details> <details><summary>tekton/task/helm-oci-push/0.1/helm-oci-push.yaml (1)</summary> - `docker.io/alpine/helm 3.21.4` → [Updates: `3.22.0`, `4.3.0`, `3.21.4`] </details> <details><summary>tekton/task/helm-package/0.2/helm-package.yaml (1)</summary> - `docker.io/alpine/helm 3.21.4` → [Updates: `3.22.0`, `4.3.0`, `3.21.4`] </details> <details><summary>tekton/task/helm-template-validate/0.2/helm-template-validate.yaml (2)</summary> - `docker.io/alpine/helm 3.21.4` → [Updates: `3.22.0`, `4.3.0`, `3.21.4`] - `ghcr.io/yannh/kubeconform unknown version` → [Updates: `undefined`] </details> <details><summary>tekton/task/helm-unittest/0.2/helm-unittest.yaml (1)</summary> - `docker.io/helmunittest/helm-unittest 3.21.0-1.0.3` → [Updates: `4.1.4-1.0.3`, `3.21.0-1.0.3`] </details> <details><summary>tekton/task/hugo-build/0.1/hugo-build.yaml (2)</summary> - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] - `docker.io/klakegg/hugo 0.111.3-ext-debian` → [Updates: `0.111.3-ext-debian`] </details> <details><summary>tekton/task/image-build/0.1/image-build.yaml (1)</summary> - `quay.io/containers/buildah v1.43.4` </details> <details><summary>tekton/task/image-build/0.2/image-build.yaml (1)</summary> - `quay.io/containers/buildah v1.43.4` </details> <details><summary>tekton/task/list-charts/0.2/list-charts.yaml (1)</summary> - `docker.io/alpine 3.24` → [Updates: `3.24`] </details> <details><summary>tekton/task/list-images/0.1/list-images.yaml (1)</summary> - `docker.io/library/alpine 3.24` → [Updates: `3.24`] </details> <details><summary>tekton/task/list-images/0.2/list-images.yaml (1)</summary> - `docker.io/library/alpine 3.24` → [Updates: `3.24`] </details> <details><summary>tekton/task/list-images/0.3/list-images.yaml (1)</summary> - `docker.io/alpine/git 2.54.0` → [Updates: `2.54.0`] </details> <details><summary>tekton/task/mc-mirror/0.1/mc-mirror.yaml (1)</summary> - `docker.io/minio/mc unknown version` </details> <details><summary>tekton/task/mdbook-build/0.1/mdbook-build.yaml (1)</summary> - `ghcr.io/peaceiris/mdbook v0.5.0` → [Updates: `v0.5.0`] </details> <details><summary>tekton/task/renovate-config-lint/0.1/renovate-config-lint.yaml (1)</summary> - `ghcr.io/renovatebot/renovate 44.105.0@sha256:ae7c74bbb093b5ee53bdafe5a325f1b2bbe32b1574b8e8922be089feb183e588` → [Updates: `44.115.13`] </details> <details><summary>tekton/task/semantic-release/0.1/semantic-release.yaml (2)</summary> - `ghcr.io/go-semantic-release/semantic-release 2.31.0` → [Updates: `2.31.0`] - `docker.io/alpine/git 2.54.0` → [Updates: `2.54.0`] </details> <details><summary>tekton/task/vale-lint/0.1/vale-lint.yaml (2)</summary> - `docker.io/jdkato/vale v3.20.0` → [Updates: `v3.23.0`, `v3.20.0`] - `docker.io/jdkato/vale v3.20.0` → [Updates: `v3.23.0`, `v3.20.0`] </details> </blockquote> </details> <details><summary>kustomize (7)</summary> <blockquote> <details><summary>apps/base/immich/kustomization.yaml (2)</summary> - `ghcr.io/immich-app/immich-machine-learning v3.2.2@sha256:60dfcf266a9ef3b7376f5678e8c980d4fb61db5fc48c078fe8a326ab1535d60d` - `ghcr.io/immich-app/immich-server v3.2.2@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea` </details> <details><summary>apps/base/immich/microservices/kustomization.yaml (1)</summary> - `ghcr.io/immich-app/immich-server v3.2.2@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea` </details> <details><summary>apps/base/immich/monitoring-integrity/kustomization.yaml (1)</summary> - `ghcr.io/immich-app/immich-server v3.2.2@sha256:79cc1623323d5894922686d8743b4780181428f98eecbfb58ce12c41ef02d1ea` </details> <details><summary>apps/base/paperless/kustomization.yaml (3)</summary> - `ghcr.io/paperless-ngx/paperless-ngx 3.2.1@sha256:5fa76604a81df6945086e0837b14b56543d137e8ce4f311cc5d9ebe907e74e79` - `docker.io/gotenberg/gotenberg 8.36.0@sha256:87c16b9f364279d321bc9772d31fa58aa6abe036423c270698bd636c3a8e9466` → [Updates: `8.37.0`] - `docker.io/apache/tika 3.3.1.0@sha256:90b7fa1dc018434075fce9e1d9b88b1e3d0ea6979d0cf86e116c79a8073ae973` </details> <details><summary>infrastructure/base/valkey/kustomization.yaml (1)</summary> - `docker.io/chideat/valkey-operator latest` → [Updates: `latest`] </details> <details><summary>infrastructure/base/valkey/valkey-operator/config/manager/kustomization.yaml (1)</summary> - `chideat/valkey-operator latest` → [Updates: `latest`] </details> <details><summary>tekton/kustomization.yaml (15)</summary> - `ghcr.io/peaceiris/mdbook v0.5.0@sha256:c3ebda4ac14229472778470de3d33969419416a17a85e69fffe1af2dd174eaf9` → [Updates: `v0.5.0`] - `quay.io/git-chglog/git-chglog 0.15.4` - `registry.shivering-isles.com/dockerhub/jdkato/vale v3.18.0` → [Updates: `v3.18.0`] - `registry.shivering-isles.com/dockerhub/klakegg/hugo 0.111.3-ext-debian` → [Updates: `0.111.3-ext-debian`] - `registry.shivering-isles.com/dockerhub/library/alpine 3.24.1` → [Updates: `3.24.1`] - `registry.shivering-isles.com/dockerhub/curlimages/curl 8.21.0` → [Updates: `8.21.0`] - `registry.shivering-isles.com/dockerhub/helmunittest/helm-unittest 3.21.0-1.0.3` → [Updates: `3.21.0-1.0.3`] - `registry.shivering-isles.com/dockerhub/alpine/helm 3.21.4` → [Updates: `3.21.4`] - `ghcr.io/yannh/kubeconform v0.8.0@sha256:faffaf43f95aa6425306e1ab8d6fcad72acb9049158f38e574c085ea1ec0f64e` - `registry.shivering-isles.com/dockerhub/alpine/git 2.54.0` → [Updates: `2.54.0`] - `ghcr.io/gitleaks/gitleaks v8.30.1@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f` - `ghcr.io/renovatebot/renovate 44.105.0@sha256:ae7c74bbb093b5ee53bdafe5a325f1b2bbe32b1574b8e8922be089feb183e588` → [Updates: `44.115.13`] - `quay.io/containers/buildah v1.43.4` - `ghcr.io/go-semantic-release/semantic-release 2.31.0` → [Updates: `2.31.0`] - `registry.shivering-isles.com/dockerhub/golangci/golangci-lint v2.13.2@sha256:84977fb6c47114e41a02413a6de9d146011ab625e818cd1e2e639b09c5424529` </details> </blockquote> </details> <details><summary>regex (71)</summary> <blockquote> <details><summary>apps/base/crowdsec/components/web-ui/web-ui.yaml (1)</summary> - `ghcr.io/theduffman85/crowdsec-web-ui 2026.9.2` → [Updates: `2026.9.2`] </details> <details><summary>apps/base/immich/postgres-zalando/database.yaml (1)</summary> - `postgresql 15` </details> <details><summary>apps/base/paperless/postgres-zalando/database.yaml (1)</summary> - `postgresql 15` </details> <details><summary>apps/base/tekton/mirror-releases.sh (3)</summary> - `tektoncd/pipeline v1.16.0` - `tektoncd/triggers v0.37.1` - `tektoncd/dashboard v0.72.0` </details> <details><summary>apps/base/tekton/tekton-dashboard.yaml (1)</summary> - `ghcr.io/tektoncd/dashboard/dashboard-9623576a202fe86c8b7d1bc489905f86 v0.72.0@sha256:f9551aabef68efb2e15ad284d85cb77f2298c47a7d4694f6cf8750a1710d5fd6` </details> <details><summary>apps/base/tekton/tekton-interceptors.yaml (1)</summary> - `ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5 v0.37.1@sha256:0cfcae8722554cd96082256b5fc0ed41a32a7907f7b9d5c5a76729fda5fbb676` </details> <details><summary>apps/base/tekton/tekton-pipelines.yaml (4)</summary> - `ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36 v1.16.0@sha256:27458f2073bb6f826cbe7a97324ca5553d8d97e60f91f2b8dd37fea72c43fdf2` - `ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c v1.16.0@sha256:3b4777e52b0fcf98c3a24d1227eedf2984a222c1af18ea0d5f56da0f4832b6d1` - `ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d v1.16.0@sha256:318c3caf89aec173b4c4bb69da60d09e1a1f8d8ffb4b9255982832d9c63b70c5` - `ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1 v1.16.0@sha256:cc0f3620092c91d8a2eb18a155fd0504dae7043a1fae9851dc7b5b9ed1ea3626` </details> <details><summary>apps/base/tekton/tekton-triggers.yaml (2)</summary> - `ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315 v0.37.1@sha256:668262c7e44ed93bfb7d9a5e0c18722399f2b7bd13e5d308be174b88b80f2661` - `ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6 v0.37.1@sha256:7515b83704901e1fad7c3651ae877c65a1bf3251d61e12a1a639665b2b639ec7` </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/cleanup.yaml (2)</summary> - `ghcr.io/tektoncd/plumbing/tkn latest` → [Updates: `latest`] - `ghcr.io/tektoncd/plumbing/tkn latest` → [Updates: `latest`] </details> <details><summary>apps/k8s01/tekton/gitops-pipelines/monthly-release.yaml (1)</summary> - `quay.io/fedora/fedora-minimal 42` </details> <details><summary>charts/findmydevice/Chart.yaml (1)</summary> - `registry.gitlab.com/fmd-foss/fmd-server 0.17.0-distroless` </details> <details><summary>charts/hedgedoc/Chart.yaml (1)</summary> - `quay.io/hedgedoc/hedgedoc 1.12.0` </details> <details><summary>charts/keycloak/Chart.yaml (1)</summary> - `quay.io/keycloak/keycloak 26.7.4` </details> <details><summary>charts/mastodon/Chart.yaml (1)</summary> - `ghcr.io/mastodon/mastodon v4.7.2` </details> <details><summary>charts/nextcloud/Chart.yaml (1)</summary> - `docker.io/library/nextcloud 34.0.4` → [Updates: `35.0.1`] </details> <details><summary>charts/nut-exporter/Chart.yaml (1)</summary> - `ghcr.io/druggeri/nut_exporter 3.3.0` </details> <details><summary>Earthfile (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>images/demo/Containerfile (1)</summary> - `quay.io/fedora/fedora 42` </details> <details><summary>images/dovecot/Containerfile (1)</summary> - `alpine_3_24/dovecot 2.4.5` </details> <details><summary>images/dovecot/Containerfile (1)</summary> - `alpine_3_24/dovecot 2.4.5` </details> <details><summary>images/dovecot/Containerfile (1)</summary> - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] </details> <details><summary>images/dovecot/Containerfile (1)</summary> - `docker.io/library/alpine 3_24` → [Updates: `3.24`] </details> <details><summary>images/mirror/Earthfile (20)</summary> - `gcr.io/distroless/base-debian12 nonroot@sha256:fa5f94fa433728f8df3f63363ffc8dec4adcfb57e4d8c18b44bceccfea095ebc` - `gcr.io/distroless/static debug-nonroot@sha256:765ef30aff979959710073e7ba3b163d479a285d7d96d0020fca8c1501de48cb` - `gcr.io/distroless/static nonroot@sha256:c0f429e16b13e583da7e5a6ec20dd656d325d88e6819cafe0adb0828976529dc` - `docker.io/library/golang 1.26.6-bookworm` → [Updates: `1.27.1-bookworm`, `1.26.6-bookworm`] - `docker.io/library/python 3.14.7-bookworm` → [Updates: `3.14.7-bookworm`] - `docker.io/library/python 3.14.7-slim-bookworm` → [Updates: `3.14.7-slim-bookworm`] - `ghcr.io/getsops/sops v3.10.2@sha256:42514a95c2758596864ee0f2cbf463f140e905a04c127c940e1eec558415466c` - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] - `quay.io/fedora/fedora 42` - `quay.io/fedora/fedora-minimal 42` - `quay.io/fedora/fedora-toolbox 42` - `gcr.io/projectsigstore/cosign v3.1.3` → [Updates: `v3.1.3`] - `docker.io/klakegg/hugo 0.111.3-ext-debian` → [Updates: `0.111.3-ext-debian`] - `ghcr.io/siderolabs/talosctl v1.12.3@sha256:98e49db6d5b181689cb51624788cccf2d2797045f0a1aa26267b128e089f9fa4` - `ghcr.io/budimanjojo/talhelper v3.1.17` → [Updates: `v3.1.17`] - `docker.io/jnorwood/helm-docs v1.14.2@sha256:7e562b49ab6b1dbc50c3da8f2dd6ffa8a5c6bba327b1c6335cc15ce29267979c` - `ghcr.io/opentofu/opentofu 1.9.0@sha256:319a00ffec7ffdc5bf90c8edfc9d80aa8e73b893a056e390fcdf97526b0f162c` - `gcr.io/k8s-skaffold/skaffold v2.24.0` - `ghcr.io/ko-build/ko v0.19.1` → [Updates: `v0.19.1`] - `docker.io/velero/velero v1.18.2` → [Updates: `v1.18.4`, `v1.18.2`] </details> <details><summary>images/opencode/Containerfile (1)</summary> - `anomalyco/opencode 1.18.32` → [Updates: `1.18.33`] </details> <details><summary>images/opencode/Containerfile (1)</summary> - `anomalyco/opencode 1.18.32` → [Updates: `1.18.33`] </details> <details><summary>images/opencode/Containerfile (1)</summary> - `docker.io/library/debian trixie-slim` → [Updates: `trixie-slim`] </details> <details><summary>images/postfix/Containerfile (1)</summary> - `alpine_3_24/postfix 3.11.7` </details> <details><summary>images/postfix/Containerfile (1)</summary> - `alpine_3_24/postfix 3.11.7` </details> <details><summary>images/postfix/Containerfile (2)</summary> - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] </details> <details><summary>images/postfix/Containerfile (1)</summary> - `docker.io/library/alpine 3_24` → [Updates: `3.24`] </details> <details><summary>images/tools/Containerfile (1)</summary> - `go-task/task v3.53.1` </details> <details><summary>images/tools/Containerfile (1)</summary> - `go-task/task v3.53.1` </details> <details><summary>images/tools/Containerfile (2)</summary> - `quay.io/fedora/fedora 42` - `quay.io/fedora/fedora 42` </details> <details><summary>images/tools/Earthfile (3)</summary> - `ghcr.io/caarlos0/svu 3.4.1` → [Updates: `3.4.1`] - `quay.io/git-chglog/git-chglog 0.15.4` - `docker.io/jdkato/vale v3.20.0` → [Updates: `v3.23.0`, `v3.20.0`] </details> <details><summary>images/tools/Earthfile (11)</summary> - `kubernetes/kubernetes v1.37.1` - `helm/helm v3.22.0` → [Updates: `v4.3.0`] - `fluxcd/flux2 v2.9.5` - `kubernetes-sigs/cluster-api v1.14.2` - `kubernetes-sigs/kustomize 4.1.3` - `lig/rapt v1.1.0` - `mikefarah/yq v4.53.6` - `kubernetes-sigs/krew v0.5.0` - `rust-lang/mdBook v0.5.4` - `tektoncd/cli v0.46.1` - `go-task/task v3.53.1` </details> <details><summary>images/tools/Taskfile.dist.yaml (24)</summary> - `kubernetes/kubernetes v1.37.1` - `helm/helm v3.22.0` → [Updates: `v4.3.0`] - `fluxcd/flux2 v2.9.5` - `kubernetes-sigs/cluster-api v1.14.2` - `kubernetes-sigs/kustomize 4.1.3` - `mikefarah/yq v4.53.6` - `rust-lang/mdBook v0.5.4` - `tektoncd/cli v0.46.1` - `kubernetes-sigs/krew v0.5.0` - `siderolabs/talos v1.13.8` → [Updates: `v1.13.10`, `v1.14.1`] - `vmware-tanzu/velero v1.18.2` → [Updates: `v1.18.4`] - `budimanjojo/talhelper v3.1.17` - `gitlab-org/release-cli v0.24.0` - `caarlos0/svu 3.4.1` - `git-chglog/git-chglog 0.15.4` - `GoogleCloudPlatform/skaffold v2.25.0` - `ko-build/ko v0.19.1` - `golangci/golangci-lint v2.13.2` → [Updates: `v2.14.0`] - `getsops/sops v3.13.3` - `norwoodj/helm-docs v1.14.2` - `go-task/task v3.53.1` - `errata-ai/vale v3.22.0` → [Updates: `v3.23.0`] - `gohugoio/hugo v0.166.0` - `opentofu/opentofu v1.12.6` </details> <details><summary>images/tools/Taskfile.dist.yaml (24)</summary> - `kubernetes/kubernetes v1.37.1` - `helm/helm v3.22.0` → [Updates: `v4.3.0`] - `fluxcd/flux2 v2.9.5` - `kubernetes-sigs/cluster-api v1.14.2` - `kubernetes-sigs/kustomize 4.1.3` - `mikefarah/yq v4.53.6` - `rust-lang/mdBook v0.5.4` - `tektoncd/cli v0.46.1` - `kubernetes-sigs/krew v0.5.0` - `siderolabs/talos v1.13.8` → [Updates: `v1.13.10`, `v1.14.1`] - `vmware-tanzu/velero v1.18.2` → [Updates: `v1.18.4`] - `budimanjojo/talhelper v3.1.17` - `gitlab-org/release-cli v0.24.0` - `caarlos0/svu 3.4.1` - `git-chglog/git-chglog 0.15.4` - `GoogleCloudPlatform/skaffold v2.25.0` - `ko-build/ko v0.19.1` - `golangci/golangci-lint v2.13.2` → [Updates: `v2.14.0`] - `getsops/sops v3.13.3` - `norwoodj/helm-docs v1.14.2` - `go-task/task v3.53.1` - `errata-ai/vale v3.22.0` → [Updates: `v3.23.0`] - `gohugoio/hugo v0.166.0` - `opentofu/opentofu v1.12.6` </details> <details><summary>infrastructure/base/postgres/release.yaml (1)</summary> - `quay.io/prometheuscommunity/postgres-exporter v0.20.1` </details> <details><summary>infrastructure/base/system-upgrades/talos/kubernetes.yaml (4)</summary> - `siderolabs/kubelet 1.36.4` → [Updates: `1.36.5`, `1.37.1`] - `siderolabs/kubelet 1.36.4` → [Updates: `1.36.5`, `1.37.1`] - `siderolabs/kubelet 1.36.4` → [Updates: `1.36.5`, `1.37.1`] - `siderolabs/kubelet 1.36.4` → [Updates: `1.36.5`, `1.37.1`] </details> <details><summary>infrastructure/base/system-upgrades/talos/os.yaml (1)</summary> - `siderolabs/talos v1.13.7` → [Updates: `v1.13.10`, `v1.14.1`] </details> <details><summary>infrastructure/base/traefik/external.yaml (1)</summary> - `maxlerebourg/crowdsec-bouncer-traefik-plugin v1.7.1` </details> <details><summary>shared/applications/oauth2-proxy.yaml (1)</summary> - `oauth2-proxy 10.7.0` </details> <details><summary>shared/components/keydb/release.yaml (1)</summary> - `keydb 1.0.6` </details> <details><summary>shared/components/oauth2-proxy/release.yaml (1)</summary> - `oauth2-proxy 10.7.0` </details> <details><summary>shared/components/valkey/release.yaml (1)</summary> - `valkey 0.12.0` </details> <details><summary>talos/talconfig.yaml (2)</summary> - `siderolabs/talos v1.13.7` → [Updates: `v1.13.10`, `v1.14.1`] - `siderolabs/kubelet v1.36.4` → [Updates: `v1.36.5`, `v1.37.1`] </details> <details><summary>tekton/pipeline/libravatar-nginx/0.1/libravatar-nginx.yaml (3)</summary> - `quay.io/containers/buildah v1.43.4` - `docker.io/alpine/git 2.54.0` → [Updates: `2.54.0`] - `quay.io/containers/buildah v1.43.4` </details> <details><summary>tekton/pipeline/monthly-gitops-release/0.1/monthly-gitops-release.yaml (1)</summary> - `quay.io/fedora/fedora-minimal 42` </details> <details><summary>tekton/task/create-forgejo-release/0.1/create-forgejo-release.yaml (1)</summary> - `docker.io/curlimages/curl latest` → [Updates: `latest`] </details> <details><summary>tekton/task/forgejo-package-upload/0.1/forgejo-package-upload.yaml (1)</summary> - `docker.io/curlimages/curl 8.22.0` → [Updates: `8.22.0`] </details> <details><summary>tekton/task/forgejo-set-status/0.1/forgejo-set-status.yaml (1)</summary> - `docker.io/curlimages/curl latest` → [Updates: `latest`] </details> <details><summary>tekton/task/git-chglog/0.1/git-chglog.yaml (1)</summary> - `quay.io/git-chglog/git-chglog 0.15.4` </details> <details><summary>tekton/task/gitleaks-detect/0.1/gitleaks-detect.yaml (1)</summary> - `ghcr.io/gitleaks/gitleaks v8.30.1` → [Updates: `v8.30.1`] </details> <details><summary>tekton/task/go-lint/0.1/go-lint.yaml (2)</summary> - `docker.io/golangci/golangci-lint v2.13.2` → [Updates: `v2.14.0`, `v2.13.2`] - `docker.io/golangci/golangci-lint v2.13.2` → [Updates: `v2.14.0`, `v2.13.2`] </details> <details><summary>tekton/task/helm-forgejo-upload/0.1/helm-forgejo-upload.yaml (1)</summary> - `docker.io/curlimages/curl 8.22.0` → [Updates: `8.22.0`] </details> <details><summary>tekton/task/helm-lint/0.2/helm-lint.yaml (1)</summary> - `docker.io/alpine/helm 3.21.4` → [Updates: `3.22.0`, `4.3.0`, `3.21.4`] </details> <details><summary>tekton/task/helm-oci-push/0.1/helm-oci-push.yaml (1)</summary> - `docker.io/alpine/helm 3.21.4` → [Updates: `3.22.0`, `4.3.0`, `3.21.4`] </details> <details><summary>tekton/task/helm-package/0.2/helm-package.yaml (1)</summary> - `docker.io/alpine/helm 3.21.4` → [Updates: `3.22.0`, `4.3.0`, `3.21.4`] </details> <details><summary>tekton/task/helm-template-validate/0.2/helm-template-validate.yaml (1)</summary> - `docker.io/alpine/helm 3.21.4` → [Updates: `3.22.0`, `4.3.0`, `3.21.4`] </details> <details><summary>tekton/task/helm-unittest/0.2/helm-unittest.yaml (1)</summary> - `docker.io/helmunittest/helm-unittest 3.21.0-1.0.3` → [Updates: `4.1.4-1.0.3`, `3.21.0-1.0.3`] </details> <details><summary>tekton/task/hugo-build/0.1/hugo-build.yaml (2)</summary> - `docker.io/library/alpine 3.24.1` → [Updates: `3.24.2`, `3.24.1`] - `docker.io/klakegg/hugo 0.111.3-ext-debian` → [Updates: `0.111.3-ext-debian`] </details> <details><summary>tekton/task/image-build/0.1/image-build.yaml (1)</summary> - `quay.io/containers/buildah v1.43.4` </details> <details><summary>tekton/task/image-build/0.2/image-build.yaml (1)</summary> - `quay.io/containers/buildah v1.43.4` </details> <details><summary>tekton/task/list-charts/0.2/list-charts.yaml (1)</summary> - `docker.io/alpine 3.24` → [Updates: `3.24`] </details> <details><summary>tekton/task/list-images/0.1/list-images.yaml (1)</summary> - `docker.io/library/alpine 3.24` → [Updates: `3.24`] </details> <details><summary>tekton/task/list-images/0.2/list-images.yaml (1)</summary> - `docker.io/library/alpine 3.24` → [Updates: `3.24`] </details> <details><summary>tekton/task/list-images/0.3/list-images.yaml (1)</summary> - `docker.io/alpine/git 2.54.0` → [Updates: `2.54.0`] </details> <details><summary>tekton/task/mdbook-build/0.1/mdbook-build.yaml (1)</summary> - `ghcr.io/peaceiris/mdbook v0.5.0` → [Updates: `v0.5.0`] </details> <details><summary>tekton/task/renovate-config-lint/0.1/renovate-config-lint.yaml (1)</summary> - `ghcr.io/renovatebot/renovate 44.105.0@sha256:ae7c74bbb093b5ee53bdafe5a325f1b2bbe32b1574b8e8922be089feb183e588` → [Updates: `44.115.13`] </details> <details><summary>tekton/task/semantic-release/0.1/semantic-release.yaml (2)</summary> - `ghcr.io/go-semantic-release/semantic-release 2.31.0` → [Updates: `2.31.0`] - `docker.io/alpine/git 2.54.0` → [Updates: `2.54.0`] </details> <details><summary>tekton/task/vale-lint/0.1/vale-lint.yaml (2)</summary> - `docker.io/jdkato/vale v3.20.0` → [Updates: `v3.23.0`, `v3.20.0`] - `docker.io/jdkato/vale v3.20.0` → [Updates: `v3.23.0`, `v3.20.0`] </details> </blockquote> </details> <details><summary>renovate-config (1)</summary> <blockquote> <details><summary>renovate.json</summary> </details> </blockquote> </details> <details><summary>terraform (3)</summary> <blockquote> <details><summary>terraform/k8s01/main.tf</summary> </details> <details><summary>terraform/k8s01/provider.tf</summary> </details> <details><summary>terraform/versions.tf (6)</summary> - `cloudflare 4.52.8` → [Updates: `4.52.9`, `5.26.0`] - `hcloud 1.68.0` → [Updates: `1.69.0`] - `local 2.9.0` → [Updates: `2.9.1`] - `sops 1.4.1` - `template 2.2.0` - `hashicorp/terraform >= 0.14` </details> </blockquote> </details>
Sign in to join this conversation.
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
shivering-isles/infrastructure-gitops#30
No description provided.