diff --git a/.github/workflows/build-devcontainer.yaml b/.github/workflows/build-devcontainer.yaml index 00dd3aa..bb0f2b9 100644 --- a/.github/workflows/build-devcontainer.yaml +++ b/.github/workflows/build-devcontainer.yaml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Set up QEMU for multi-architecture builds uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 #v3.6.0 diff --git a/.github/workflows/tofu-format.yaml b/.github/workflows/tofu-format.yaml index d37a1cf..5008646 100644 --- a/.github/workflows/tofu-format.yaml +++ b/.github/workflows/tofu-format.yaml @@ -26,7 +26,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Tofu format uses: docker://ghcr.io/vehagn/homelab-devcontainer diff --git a/k8s/apps/media/arr/lidarr/deployment.yaml b/k8s/apps/media/arr/lidarr/deployment.yaml index 0e332f1..f90b73a 100644 --- a/k8s/apps/media/arr/lidarr/deployment.yaml +++ b/k8s/apps/media/arr/lidarr/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: lidarr - image: ghcr.io/home-operations/lidarr:2.12.1 # renovate: docker=ghcr.io/home-operations/lidarr + image: ghcr.io/home-operations/lidarr:2.13.0 # renovate: docker=ghcr.io/home-operations/lidarr securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/arr/prowlarr/deployment.yaml b/k8s/apps/media/arr/prowlarr/deployment.yaml index 1f75111..41a1ed1 100644 --- a/k8s/apps/media/arr/prowlarr/deployment.yaml +++ b/k8s/apps/media/arr/prowlarr/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: prowlarr - image: ghcr.io/home-operations/prowlarr:1.37.0 # renovate: docker=ghcr.io/home-operations/prowlarr + image: ghcr.io/home-operations/prowlarr:2.0.1 # renovate: docker=ghcr.io/home-operations/prowlarr securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/arr/radarr/deployment.yaml b/k8s/apps/media/arr/radarr/deployment.yaml index 01989ad..56906ed 100644 --- a/k8s/apps/media/arr/radarr/deployment.yaml +++ b/k8s/apps/media/arr/radarr/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: radarr - image: ghcr.io/home-operations/radarr:5.26.1 # renovate: docker=ghcr.io/home-operations/radarr + image: ghcr.io/home-operations/radarr:5.27.1 # renovate: docker=ghcr.io/home-operations/radarr securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/arr/sonarr/deployment.yaml b/k8s/apps/media/arr/sonarr/deployment.yaml index 269d304..eea3790 100644 --- a/k8s/apps/media/arr/sonarr/deployment.yaml +++ b/k8s/apps/media/arr/sonarr/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: sonarr - image: ghcr.io/home-operations/sonarr:4.0.14 # renovate: docker=ghcr.io/home-operations/sonarr + image: ghcr.io/home-operations/sonarr:4.0.15 # renovate: docker=ghcr.io/home-operations/sonarr securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/audiobookshelf/deployment.yaml b/k8s/apps/media/audiobookshelf/deployment.yaml index 1f65087..854b364 100644 --- a/k8s/apps/media/audiobookshelf/deployment.yaml +++ b/k8s/apps/media/audiobookshelf/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: audiobookshelf - image: ghcr.io/advplyr/audiobookshelf:2.24.0 # renovate: docker=ghcr.io/advplyr/audiobookshelf + image: ghcr.io/advplyr/audiobookshelf:2.26.1 # renovate: docker=ghcr.io/advplyr/audiobookshelf securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/media/plex/deployment.yaml b/k8s/apps/media/plex/deployment.yaml index 52df3a5..fca7707 100644 --- a/k8s/apps/media/plex/deployment.yaml +++ b/k8s/apps/media/plex/deployment.yaml @@ -28,7 +28,7 @@ spec: type: RuntimeDefault containers: - name: plex - image: ghcr.io/home-operations/plex:1.41.7.9823 # renovate: docker=ghcr.io/home-operations/plex versioning=loose + image: ghcr.io/home-operations/plex:1.41.9.9961 # renovate: docker=ghcr.io/home-operations/plex versioning=loose securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/apps/utils/torrent/deployment.yaml b/k8s/apps/utils/torrent/deployment.yaml index bf78c44..7088e6c 100644 --- a/k8s/apps/utils/torrent/deployment.yaml +++ b/k8s/apps/utils/torrent/deployment.yaml @@ -30,7 +30,7 @@ spec: type: RuntimeDefault containers: - name: git-sync-vuetorrent - image: registry.k8s.io/git-sync/git-sync:v4.4.1 # renovate: docker=registry.k8s.io/git-sync/git-sync + image: registry.k8s.io/git-sync/git-sync:v4.4.2 # renovate: docker=registry.k8s.io/git-sync/git-sync securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true @@ -57,7 +57,7 @@ spec: - name: tmp mountPath: /tmp - name: torrent - image: ghcr.io/home-operations/qbittorrent:5.1.0 # renovate: docker=ghcr.io/home-operations/qbittorrent + image: ghcr.io/home-operations/qbittorrent:5.1.2 # renovate: docker=ghcr.io/home-operations/qbittorrent securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/infra/auth/authelia/kustomization.yaml b/k8s/infra/auth/authelia/kustomization.yaml index e55036e..83ec7a5 100644 --- a/k8s/infra/auth/authelia/kustomization.yaml +++ b/k8s/infra/auth/authelia/kustomization.yaml @@ -26,7 +26,7 @@ helmCharts: repo: https://charts.authelia.com releaseName: authelia namespace: authelia - version: 0.10.34 + version: 0.10.41 valuesFile: values.yaml patches: diff --git a/k8s/infra/auth/authelia/values.yaml b/k8s/infra/auth/authelia/values.yaml index 0129b1a..3dce6d2 100644 --- a/k8s/infra/auth/authelia/values.yaml +++ b/k8s/infra/auth/authelia/values.yaml @@ -2,7 +2,7 @@ image: registry: ghcr.io repository: authelia/authelia - tag: 4.39.4 # renovate: docker=ghcr.io/authelia/authelia + tag: 4.39.5 # renovate: docker=ghcr.io/authelia/authelia pullPolicy: IfNotPresent pod: diff --git a/k8s/infra/controllers/cert-manager/kustomization.yaml b/k8s/infra/controllers/cert-manager/kustomization.yaml index 4039e13..e452f24 100644 --- a/k8s/infra/controllers/cert-manager/kustomization.yaml +++ b/k8s/infra/controllers/cert-manager/kustomization.yaml @@ -9,7 +9,7 @@ resources: helmCharts: - name: cert-manager repo: https://charts.jetstack.io - version: v1.17.2 # renovate: github-releases=cert-manager/cert-manager + version: v1.18.2 # renovate: github-releases=cert-manager/cert-manager releaseName: cert-manager namespace: cert-manager valuesFile: values.yaml diff --git a/k8s/infra/controllers/sealed-secrets/kustomization.yaml b/k8s/infra/controllers/sealed-secrets/kustomization.yaml index 8fde90e..a748380 100644 --- a/k8s/infra/controllers/sealed-secrets/kustomization.yaml +++ b/k8s/infra/controllers/sealed-secrets/kustomization.yaml @@ -4,7 +4,7 @@ kind: Kustomization helmCharts: - name: sealed-secrets repo: oci://registry-1.docker.io/bitnamicharts - version: 2.5.13 + version: 2.5.16 releaseName: sealed-secrets-controller namespace: sealed-secrets includeCRDs: true diff --git a/k8s/infra/monitoring/prometheus-stack/kube-prometheus-stack.yaml b/k8s/infra/monitoring/prometheus-stack/kube-prometheus-stack.yaml index 83477a2..80cf0f2 100644 --- a/k8s/infra/monitoring/prometheus-stack/kube-prometheus-stack.yaml +++ b/k8s/infra/monitoring/prometheus-stack/kube-prometheus-stack.yaml @@ -10,7 +10,7 @@ spec: sources: - repoURL: https://prometheus-community.github.io/helm-charts chart: kube-prometheus-stack - targetRevision: 73.2.0 # renovate: docker=ghcr.io/prometheus-community/charts/kube-prometheus-stack + targetRevision: 75.12.0 # renovate: docker=ghcr.io/prometheus-community/charts/kube-prometheus-stack helm: valueFiles: - $values/k8s/infra/monitoring/prometheus-stack/values.yaml diff --git a/k8s/infra/network/cilium/kustomization.yaml b/k8s/infra/network/cilium/kustomization.yaml index 64fca5d..f0f0073 100644 --- a/k8s/infra/network/cilium/kustomization.yaml +++ b/k8s/infra/network/cilium/kustomization.yaml @@ -8,7 +8,7 @@ resources: helmCharts: - name: cilium repo: https://helm.cilium.io - version: 1.17.4 # renovate: github-releases=cilium/cilium + version: 1.17.6 # renovate: github-releases=cilium/cilium releaseName: "cilium" includeCRDs: true namespace: kube-system diff --git a/k8s/infra/network/cloudflared/daemon-set.yaml b/k8s/infra/network/cloudflared/daemon-set.yaml index 34de931..fdb7b43 100644 --- a/k8s/infra/network/cloudflared/daemon-set.yaml +++ b/k8s/infra/network/cloudflared/daemon-set.yaml @@ -16,7 +16,7 @@ spec: spec: containers: - name: cloudflared - image: cloudflare/cloudflared:2025.5.0 # renovate: docker=cloudflare/cloudflared + image: cloudflare/cloudflared:2025.7.0 # renovate: docker=cloudflare/cloudflared imagePullPolicy: IfNotPresent args: - tunnel diff --git a/k8s/infra/network/dns/adguard/deployment.yaml b/k8s/infra/network/dns/adguard/deployment.yaml index 8d7c1c3..7f1ff08 100644 --- a/k8s/infra/network/dns/adguard/deployment.yaml +++ b/k8s/infra/network/dns/adguard/deployment.yaml @@ -49,7 +49,7 @@ spec: mountPath: /opt/adguardhome/conf containers: - name: adguard - image: docker.io/adguard/adguardhome:v0.107.62 # renovate: docker=docker.io/adguard/adguardhome + image: docker.io/adguard/adguardhome:v0.107.63 # renovate: docker=docker.io/adguard/adguardhome securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/k8s/infra/storage/proxmox-csi/kustomization.yaml b/k8s/infra/storage/proxmox-csi/kustomization.yaml index cfe1cd1..784b79d 100644 --- a/k8s/infra/storage/proxmox-csi/kustomization.yaml +++ b/k8s/infra/storage/proxmox-csi/kustomization.yaml @@ -4,7 +4,7 @@ kind: Kustomization helmCharts: - name: proxmox-csi-plugin repo: oci://ghcr.io/sergelogvinov/charts - version: 0.3.7 + version: 0.3.11 releaseName: proxmox-csi-plugin includeCRDs: true namespace: csi-proxmox diff --git a/k8s/infra/vpn/netbird/agent/daemon-set.yaml b/k8s/infra/vpn/netbird/agent/daemon-set.yaml index 2b02252..39164fe 100644 --- a/k8s/infra/vpn/netbird/agent/daemon-set.yaml +++ b/k8s/infra/vpn/netbird/agent/daemon-set.yaml @@ -22,7 +22,7 @@ spec: value: "1" containers: - name: agent - image: docker.io/netbirdio/netbird:0.46.0 # renovate: docker=docker.io/netbirdio/netbird + image: docker.io/netbirdio/netbird:0.51.1 # renovate: docker=docker.io/netbirdio/netbird securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: false diff --git a/k8s/infra/vpn/netbird/dashboard/deployment.yaml b/k8s/infra/vpn/netbird/dashboard/deployment.yaml index 394974f..0d04f62 100644 --- a/k8s/infra/vpn/netbird/dashboard/deployment.yaml +++ b/k8s/infra/vpn/netbird/dashboard/deployment.yaml @@ -17,7 +17,7 @@ spec: type: RuntimeDefault containers: - name: dashboard - image: docker.io/netbirdio/dashboard:v2.13.1 # renovate: docker=docker.io/netbirdio/dashboard + image: docker.io/netbirdio/dashboard:v2.14.0 # renovate: docker=docker.io/netbirdio/dashboard securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: false diff --git a/k8s/infra/vpn/netbird/management/deployment.yaml b/k8s/infra/vpn/netbird/management/deployment.yaml index d07ba6e..89a95e1 100644 --- a/k8s/infra/vpn/netbird/management/deployment.yaml +++ b/k8s/infra/vpn/netbird/management/deployment.yaml @@ -54,7 +54,7 @@ spec: mountPath: /tmp/netbird containers: - name: management - image: docker.io/netbirdio/management:0.46.0 # renovate: docker=docker.io/netbirdio/management + image: docker.io/netbirdio/management:0.51.1 # renovate: docker=docker.io/netbirdio/management args: [ --dns-domain, $(DNS_DOMAIN), --log-level, $(LOG_LEVEL), --log-file, console, --idp-sign-key-refresh-enabled ] securityContext: allowPrivilegeEscalation: false diff --git a/k8s/infra/vpn/netbird/relay/deployment.yaml b/k8s/infra/vpn/netbird/relay/deployment.yaml index 4682f19..ad8a8c6 100644 --- a/k8s/infra/vpn/netbird/relay/deployment.yaml +++ b/k8s/infra/vpn/netbird/relay/deployment.yaml @@ -16,7 +16,7 @@ spec: seccompProfile: type: RuntimeDefault containers: - - image: docker.io/netbirdio/relay:0.46.0 # renovate: docker=docker.io/netbirdio/relay + - image: docker.io/netbirdio/relay:0.51.1 # renovate: docker=docker.io/netbirdio/relay imagePullPolicy: IfNotPresent name: relay securityContext: diff --git a/k8s/infra/vpn/netbird/signal/deployment.yaml b/k8s/infra/vpn/netbird/signal/deployment.yaml index 4dbca6b..4169e38 100644 --- a/k8s/infra/vpn/netbird/signal/deployment.yaml +++ b/k8s/infra/vpn/netbird/signal/deployment.yaml @@ -21,7 +21,7 @@ spec: type: RuntimeDefault containers: - name: signal - image: docker.io/netbirdio/signal:0.46.0 # renovate: docker=docker.io/netbirdio/signal + image: docker.io/netbirdio/signal:0.51.1 # renovate: docker=docker.io/netbirdio/signal args: [ --port, $(PORT), --log-level, $(LOG_LEVEL), --log-file, console ] securityContext: allowPrivilegeEscalation: false diff --git a/tofu/home-assistant/main.tofu b/tofu/home-assistant/main.tofu index 06bbf9c..dd9d3f4 100644 --- a/tofu/home-assistant/main.tofu +++ b/tofu/home-assistant/main.tofu @@ -2,7 +2,7 @@ terraform { required_providers { proxmox = { source = "bpg/proxmox" - version = "0.78.1" + version = "0.80.0" } } } diff --git a/tofu/kubernetes/providers.tofu b/tofu/kubernetes/providers.tofu index d848696..fe6f021 100644 --- a/tofu/kubernetes/providers.tofu +++ b/tofu/kubernetes/providers.tofu @@ -6,7 +6,7 @@ terraform { } proxmox = { source = "bpg/proxmox" - version = "0.78.1" + version = "0.80.0" } talos = { source = "siderolabs/talos" diff --git a/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml b/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml index ebf1092..69c8f18 100644 --- a/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml +++ b/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml @@ -59,7 +59,7 @@ spec: hostNetwork: true containers: - name: cilium-install - image: quay.io/cilium/cilium-cli:v0.18.4 # renovate: github-releases=cilium/cilium-cli + image: quay.io/cilium/cilium-cli:v0.18.5 # renovate: github-releases=cilium/cilium-cli env: - name: KUBERNETES_SERVICE_HOST valueFrom: @@ -75,7 +75,7 @@ spec: command: - cilium - install - - --version=v1.17.4 # renovate: github-releases=cilium/cilium + - --version=v1.17.6 # renovate: github-releases=cilium/cilium - --set - kubeProxyReplacement=true - --values diff --git a/tofu/kubernetes/talos_cluster.auto.tfvars b/tofu/kubernetes/talos_cluster.auto.tfvars index 1aa4ad3..0bb94fb 100644 --- a/tofu/kubernetes/talos_cluster.auto.tfvars +++ b/tofu/kubernetes/talos_cluster.auto.tfvars @@ -9,7 +9,7 @@ talos_cluster_config = { # Uncomment to use this instead of version from talos_image. # talos_machine_config_version = "v1.9.2" proxmox_cluster = "homelab" - kubernetes_version = "v1.33.1" # renovate: github-releases=kubernetes/kubernetes + kubernetes_version = "v1.33.3" # renovate: github-releases=kubernetes/kubernetes cilium = { bootstrap_manifest_path = "talos/inline-manifests/cilium-install.yaml" values_file_path = "../../k8s/infra/network/cilium/values.yaml" diff --git a/tofu/kubernetes/talos_image.auto.tfvars b/tofu/kubernetes/talos_image.auto.tfvars index 5aaabee..db19c8d 100644 --- a/tofu/kubernetes/talos_image.auto.tfvars +++ b/tofu/kubernetes/talos_image.auto.tfvars @@ -1,6 +1,6 @@ talos_image = { version = "v1.10.3" - update_version = "v1.10.3" # renovate: github-releases=siderolabs/talos + update_version = "v1.10.5" # renovate: github-releases=siderolabs/talos schematic_path = "talos/image/schematic.yaml" # Point this to a new schematic file to update the schematic # update_schematic_path = "talos/image/schematic.yaml"