chore(deps): merge renovate PRs

chore(deps): update netbird to v0.28.9

chore(deps): update netbirdio/management docker tag to v0.28.9

chore(deps): update netbirdio/netbird docker tag to v0.28.9

chore(deps): update netbirdio/signal docker tag to v0.28.9

chore(deps): update cloudflare/cloudflared docker tag to v2024.8.3

chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.9.1

chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8897-e5987a19d

chore(deps): update helm release argo-cd to v7.4.5

chore(deps): update terraform proxmox to v0.63.0

chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3

chore(deps): update keycloak docker tag to v22.1.3

chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.10

chore(deps): update proxmox-csi-plugin docker tag to v0.2.9

k8s/apps/media/arr/radarr/deployment.yaml

@@ -30,7 +30,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: radarr
-          image: ghcr.io/onedr0p/radarr:5.8.3 # renovate: docker=ghcr.io/onedr0p/radarr
+          image: ghcr.io/onedr0p/radarr:5.9.1 # renovate: docker=ghcr.io/onedr0p/radarr
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/apps/media/jellyfin/deployment.yaml

@@ -25,7 +25,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jellyfin
-          image: ghcr.io/jellyfin/jellyfin:10.9.9 # renovate: docker=ghcr.io/jellyfin/jellyfin
+          image: ghcr.io/jellyfin/jellyfin:10.9.10 # renovate: docker=ghcr.io/jellyfin/jellyfin
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/apps/media/plex/deployment.yaml

@@ -28,7 +28,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: plex
-          image: ghcr.io/onedr0p/plex:1.40.5.8854-f36c552fd # renovate: docker=ghcr.io/onedr0p/plex versioning=loose
+          image: ghcr.io/onedr0p/plex:1.40.5.8897-e5987a19d # renovate: docker=ghcr.io/onedr0p/plex versioning=loose
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/infra/auth/keycloak/kustomization.yaml

@@ -13,5 +13,5 @@ helmCharts:
     repo: oci://registry-1.docker.io/bitnamicharts
     releaseName: keycloak
     namespace: keycloak
-    version: 22.1.2
+    version: 22.1.3
     valuesFile: values.yaml

k8s/infra/controllers/argocd/kustomization.yaml

@@ -8,7 +8,7 @@ resources:
 helmCharts:
   - name: argo-cd
     repo: https://argoproj.github.io/argo-helm
-    version: 7.4.4
+    version: 7.4.5
     releaseName: "argocd"
     namespace: argocd
     valuesFile: values.yaml

k8s/infra/crossplane-crds/config/keycloak/functions.yaml

@@ -17,5 +17,5 @@ kind: Function
 metadata:
   name: function-keycloak-builtin-objects
 spec:
-  package: registry.gitlab.com/corewire/images/crossplane/function-keycloak-builtin-objects:v2.0.0 # renovate: gitlab-releases=corewire/images/crossplane/function-keycloak-builtin-objects
+  package: registry.gitlab.com/corewire/images/crossplane/function-keycloak-builtin-objects:v3.0.0 # renovate: gitlab-releases=corewire/images/crossplane/function-keycloak-builtin-objects
   packagePullPolicy: Always

k8s/infra/network/cloudflared/daemon-set.yaml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: cloudflared
-          image: cloudflare/cloudflared:2024.8.2 # renovate: docker=cloudflare/cloudflared
+          image: cloudflare/cloudflared:2024.8.3 # renovate: docker=cloudflare/cloudflared
           imagePullPolicy: IfNotPresent
           args:
             - tunnel

k8s/infra/storage/proxmox-csi/kustomization.yaml

@@ -4,7 +4,7 @@ kind: Kustomization
 helmCharts:
   - name: proxmox-csi-plugin
     repo: oci://ghcr.io/sergelogvinov/charts
-    version: 0.2.5
+    version: 0.2.9
     releaseName: proxmox-csi-plugin
     includeCRDs: true
     namespace: csi-proxmox

k8s/infra/vpn/netbird/agent/daemon-set.yaml

@@ -17,7 +17,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: netbird
-          image: netbirdio/netbird:0.28.7 # renovate: docker=netbirdio/netbird
+          image: netbirdio/netbird:0.28.9 # renovate: docker=netbirdio/netbird
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false

k8s/infra/vpn/netbird/backend/values.yaml

@@ -23,7 +23,7 @@ idp:
 
 management:
   image:
-    tag: 0.28.7 # renovate: docker=netbirdio/management
+    tag: 0.28.9 # renovate: docker=netbirdio/management
   nodeSelector:
     topology.kubernetes.io/zone: abel
   ingress:
@@ -31,7 +31,7 @@ management:
 
 signal:
   image:
-    tag: 0.28.7 # renovate: docker=netbirdio/signal
+    tag: 0.28.9 # renovate: docker=netbirdio/signal
   nodeSelector:
     topology.kubernetes.io/zone: abel
   uri: netbird.stonegarden.dev:443

tofu/home-assistant/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     proxmox = {
       source  = "bpg/proxmox"
-      version = "0.62.0"
+      version = "0.63.0"
     }
   }
 }

tofu/kubernetes/providers.tf

@@ -6,7 +6,7 @@ terraform {
     }
     proxmox = {
       source  = "bpg/proxmox"
-      version = "0.62.0"
+      version = "0.63.0"
     }
     talos = {
       source  = "siderolabs/talos"