diff --git a/k8s/apps/media/arr/lidarr/deployment.yaml b/k8s/apps/media/arr/lidarr/deployment.yaml index 5741031..62c6ed5 100644 --- a/k8s/apps/media/arr/lidarr/deployment.yaml +++ b/k8s/apps/media/arr/lidarr/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: lidarr - image: ghcr.io/home-operations/lidarr:2.11.0 # renovate: docker=ghcr.io/home-operations/lidarr + image: ghcr.io/home-operations/lidarr:2.11.1 # renovate: docker=ghcr.io/home-operations/lidarr securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/arr/prowlarr/deployment.yaml b/k8s/apps/media/arr/prowlarr/deployment.yaml index c5078af..647d6b9 100644 --- a/k8s/apps/media/arr/prowlarr/deployment.yaml +++ b/k8s/apps/media/arr/prowlarr/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: prowlarr - image: ghcr.io/home-operations/prowlarr:1.33.1 # renovate: docker=ghcr.io/home-operations/prowlarr + image: ghcr.io/home-operations/prowlarr:1.34.0 # renovate: docker=ghcr.io/home-operations/prowlarr securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/arr/radarr/deployment.yaml b/k8s/apps/media/arr/radarr/deployment.yaml index 472a23d..82e36b6 100644 --- a/k8s/apps/media/arr/radarr/deployment.yaml +++ b/k8s/apps/media/arr/radarr/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: radarr - image: ghcr.io/home-operations/radarr:5.22.0 # renovate: docker=ghcr.io/home-operations/radarr + image: ghcr.io/home-operations/radarr:5.22.2 # renovate: docker=ghcr.io/home-operations/radarr securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/jellyfin/deployment.yaml b/k8s/apps/media/jellyfin/deployment.yaml index 5723751..11705c2 100644 --- a/k8s/apps/media/jellyfin/deployment.yaml +++ b/k8s/apps/media/jellyfin/deployment.yaml @@ -25,7 +25,7 @@ spec: type: RuntimeDefault containers: - name: jellyfin - image: ghcr.io/jellyfin/jellyfin:10.10.6 # renovate: docker=ghcr.io/jellyfin/jellyfin + image: ghcr.io/jellyfin/jellyfin:10.10.7 # renovate: docker=ghcr.io/jellyfin/jellyfin securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/plex/deployment.yaml b/k8s/apps/media/plex/deployment.yaml index e152ea0..505a9ba 100644 --- a/k8s/apps/media/plex/deployment.yaml +++ b/k8s/apps/media/plex/deployment.yaml @@ -28,7 +28,7 @@ spec: type: RuntimeDefault containers: - name: plex - image: ghcr.io/home-operations/plex:1.41.5.9522 # renovate: docker=ghcr.io/home-operations/plex versioning=loose + image: ghcr.io/home-operations/plex:1.41.6.9685 # renovate: docker=ghcr.io/home-operations/plex versioning=loose securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/infra/auth/authelia/kustomization.yaml b/k8s/infra/auth/authelia/kustomization.yaml index e715d8b..a6c383c 100644 --- a/k8s/infra/auth/authelia/kustomization.yaml +++ b/k8s/infra/auth/authelia/kustomization.yaml @@ -19,7 +19,7 @@ helmCharts: repo: https://charts.authelia.com releaseName: authelia namespace: authelia - version: 0.10.4 + version: 0.10.5 valuesFile: values.yaml patches: diff --git a/k8s/infra/auth/keycloak/kustomization.yaml b/k8s/infra/auth/keycloak/kustomization.yaml index e1e9163..c7ee272 100644 --- a/k8s/infra/auth/keycloak/kustomization.yaml +++ b/k8s/infra/auth/keycloak/kustomization.yaml @@ -15,5 +15,5 @@ helmCharts: repo: oci://registry-1.docker.io/bitnamicharts releaseName: keycloak namespace: keycloak - version: 24.4.13 + version: 24.5.2 valuesFile: values.yaml diff --git a/k8s/infra/controllers/argocd/kustomization.yaml b/k8s/infra/controllers/argocd/kustomization.yaml index 3e530b7..57c35c3 100644 --- a/k8s/infra/controllers/argocd/kustomization.yaml +++ b/k8s/infra/controllers/argocd/kustomization.yaml @@ -9,7 +9,7 @@ resources: helmCharts: - name: argo-cd repo: https://argoproj.github.io/argo-helm - version: 7.8.15 + version: 7.8.26 releaseName: "argocd" namespace: argocd valuesFile: values.yaml diff --git a/k8s/infra/controllers/sealed-secrets/kustomization.yaml b/k8s/infra/controllers/sealed-secrets/kustomization.yaml index 99c1d5d..492b828 100644 --- a/k8s/infra/controllers/sealed-secrets/kustomization.yaml +++ b/k8s/infra/controllers/sealed-secrets/kustomization.yaml @@ -4,7 +4,7 @@ kind: Kustomization helmCharts: - name: sealed-secrets repo: oci://registry-1.docker.io/bitnamicharts - version: 2.5.8 + version: 2.5.9 releaseName: sealed-secrets-controller namespace: sealed-secrets includeCRDs: true diff --git a/k8s/infra/crossplane-crds/functions/keycloak-builtin-objects.yaml b/k8s/infra/crossplane-crds/functions/keycloak-builtin-objects.yaml index e170836..67ff059 100644 --- a/k8s/infra/crossplane-crds/functions/keycloak-builtin-objects.yaml +++ b/k8s/infra/crossplane-crds/functions/keycloak-builtin-objects.yaml @@ -3,5 +3,5 @@ kind: Function metadata: name: function-keycloak-builtin-objects spec: - package: registry.gitlab.com/corewire/images/crossplane/function-keycloak-builtin-objects:v3.0.0 # renovate: gitlab-releases=corewire/images/crossplane/function-keycloak-builtin-objects + package: registry.gitlab.com/corewire/images/crossplane/function-keycloak-builtin-objects:v3.0.1 # renovate: gitlab-releases=corewire/images/crossplane/function-keycloak-builtin-objects packagePullPolicy: Always diff --git a/k8s/infra/monitoring/prometheus-stack/kube-prometheus-stack.yaml b/k8s/infra/monitoring/prometheus-stack/kube-prometheus-stack.yaml index 2d59c53..db25a32 100644 --- a/k8s/infra/monitoring/prometheus-stack/kube-prometheus-stack.yaml +++ b/k8s/infra/monitoring/prometheus-stack/kube-prometheus-stack.yaml @@ -10,7 +10,7 @@ spec: sources: - repoURL: https://prometheus-community.github.io/helm-charts chart: kube-prometheus-stack - targetRevision: 70.3.0 # renovate: docker=ghcr.io/prometheus-community/charts/kube-prometheus-stack + targetRevision: 70.7.0 # renovate: docker=ghcr.io/prometheus-community/charts/kube-prometheus-stack helm: valueFiles: - $values/k8s/infra/monitoring/prometheus-stack/values.yaml diff --git a/k8s/infra/network/cilium/kustomization.yaml b/k8s/infra/network/cilium/kustomization.yaml index 267d80a..d001039 100644 --- a/k8s/infra/network/cilium/kustomization.yaml +++ b/k8s/infra/network/cilium/kustomization.yaml @@ -8,7 +8,7 @@ resources: helmCharts: - name: cilium repo: https://helm.cilium.io - version: 1.17.2 # renovate: github-releases=cilium/cilium + version: 1.17.3 # renovate: github-releases=cilium/cilium releaseName: "cilium" includeCRDs: true namespace: kube-system diff --git a/k8s/infra/network/cloudflared/daemon-set.yaml b/k8s/infra/network/cloudflared/daemon-set.yaml index 2356311..fa1d73e 100644 --- a/k8s/infra/network/cloudflared/daemon-set.yaml +++ b/k8s/infra/network/cloudflared/daemon-set.yaml @@ -16,7 +16,7 @@ spec: spec: containers: - name: cloudflared - image: cloudflare/cloudflared:2025.2.1 # renovate: docker=cloudflare/cloudflared + image: cloudflare/cloudflared:2025.4.0 # renovate: docker=cloudflare/cloudflared imagePullPolicy: IfNotPresent args: - tunnel diff --git a/k8s/infra/network/dns/adguard/deployment.yaml b/k8s/infra/network/dns/adguard/deployment.yaml index 02adf0f..03dc72f 100644 --- a/k8s/infra/network/dns/adguard/deployment.yaml +++ b/k8s/infra/network/dns/adguard/deployment.yaml @@ -49,7 +49,7 @@ spec: mountPath: /opt/adguardhome/conf containers: - name: adguard - image: docker.io/adguard/adguardhome:v0.107.59 # renovate: docker=docker.io/adguard/adguardhome + image: docker.io/adguard/adguardhome:v0.107.60 # renovate: docker=docker.io/adguard/adguardhome securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/infra/vpn/netbird/agent/daemon-set.yaml b/k8s/infra/vpn/netbird/agent/daemon-set.yaml index 3f23d65..2a4d39c 100644 --- a/k8s/infra/vpn/netbird/agent/daemon-set.yaml +++ b/k8s/infra/vpn/netbird/agent/daemon-set.yaml @@ -22,7 +22,7 @@ spec: value: "1" containers: - name: agent - image: docker.io/netbirdio/netbird:0.39.2 # renovate: docker=docker.io/netbirdio/netbird + image: docker.io/netbirdio/netbird:0.41.3 # renovate: docker=docker.io/netbirdio/netbird securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: false diff --git a/k8s/infra/vpn/netbird/management/deployment.yaml b/k8s/infra/vpn/netbird/management/deployment.yaml index 039a0be..c946fa2 100644 --- a/k8s/infra/vpn/netbird/management/deployment.yaml +++ b/k8s/infra/vpn/netbird/management/deployment.yaml @@ -58,7 +58,7 @@ spec: mountPath: /tmp/netbird containers: - name: management - image: docker.io/netbirdio/management:0.39.2 # renovate: docker=docker.io/netbirdio/management + image: docker.io/netbirdio/management:0.41.3 # renovate: docker=docker.io/netbirdio/management args: [ --dns-domain, $(DNS_DOMAIN), --log-level, $(LOG_LEVEL), --log-file, console, --idp-sign-key-refresh-enabled ] securityContext: allowPrivilegeEscalation: false diff --git a/k8s/infra/vpn/netbird/relay/deployment.yaml b/k8s/infra/vpn/netbird/relay/deployment.yaml index 74010aa..e220e4f 100644 --- a/k8s/infra/vpn/netbird/relay/deployment.yaml +++ b/k8s/infra/vpn/netbird/relay/deployment.yaml @@ -16,7 +16,7 @@ spec: seccompProfile: type: RuntimeDefault containers: - - image: docker.io/netbirdio/relay:0.39.2 # renovate: docker=docker.io/netbirdio/relay + - image: docker.io/netbirdio/relay:0.41.3 # renovate: docker=docker.io/netbirdio/relay imagePullPolicy: IfNotPresent name: relay securityContext: diff --git a/k8s/infra/vpn/netbird/signal/deployment.yaml b/k8s/infra/vpn/netbird/signal/deployment.yaml index b69a757..c1ad757 100644 --- a/k8s/infra/vpn/netbird/signal/deployment.yaml +++ b/k8s/infra/vpn/netbird/signal/deployment.yaml @@ -21,7 +21,7 @@ spec: type: RuntimeDefault containers: - name: signal - image: docker.io/netbirdio/signal:0.39.2 # renovate: docker=docker.io/netbirdio/signal + image: docker.io/netbirdio/signal:0.41.3 # renovate: docker=docker.io/netbirdio/signal args: [ --port, $(PORT), --log-level, $(LOG_LEVEL), --log-file, console ] securityContext: allowPrivilegeEscalation: false diff --git a/tofu/home-assistant/main.tf b/tofu/home-assistant/main.tf index 62293b3..f3671c4 100644 --- a/tofu/home-assistant/main.tf +++ b/tofu/home-assistant/main.tf @@ -2,7 +2,7 @@ terraform { required_providers { proxmox = { source = "bpg/proxmox" - version = "0.74.0" + version = "0.76.0" } } } diff --git a/tofu/kubernetes/providers.tf b/tofu/kubernetes/providers.tf index 9c9c5bc..dfdcf4f 100644 --- a/tofu/kubernetes/providers.tf +++ b/tofu/kubernetes/providers.tf @@ -6,7 +6,7 @@ terraform { } proxmox = { source = "bpg/proxmox" - version = "0.74.0" + version = "0.76.0" } talos = { source = "siderolabs/talos" diff --git a/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml b/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml index 79d66bc..efd1e9c 100644 --- a/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml +++ b/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml @@ -75,7 +75,7 @@ spec: command: - cilium - install - - --version=v1.17.2 # renovate: github-releases=cilium/cilium + - --version=v1.17.3 # renovate: github-releases=cilium/cilium - --set - kubeProxyReplacement=true - --values