Commit Graph

6537 Commits

Author SHA1 Message Date
291e3b7e63 Update ghcr.io/immich-app/immich-machine-learning Docker tag to v1.137.1
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 16s
2025-08-01 00:23:55 +00:00
b3accd5a78 update image
All checks were successful
lint-test-helm / helm-lint (push) Successful in 13s
renovate / renovate (push) Successful in 1m35s
2025-07-31 19:23:07 -05:00
1e63931ef2 add docs site
All checks were successful
lint-test-helm / helm-lint (push) Successful in 30s
renovate / renovate (push) Successful in 1m20s
2025-07-31 19:11:34 -05:00
f123507de6 remove workflow 2025-07-31 16:39:43 -05:00
e7088c9451 update to match new spec
Some checks failed
lint-test-helm / helm-lint (push) Successful in 17s
process-repository / process-repository (push) Failing after 27s
renovate / renovate (push) Successful in 2m28s
2025-07-31 16:27:46 -05:00
381bd63684 Update directus/directus Docker tag to v11.10.0 (#1082)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 25s
renovate / renovate (push) Successful in 1m21s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [directus/directus](https://github.com/directus/directus) | minor | `11.9.3` -> `11.10.0` |

---

### Release Notes

<details>
<summary>directus/directus (directus/directus)</summary>

### [`v11.10.0`](https://github.com/directus/directus/releases/tag/v11.10.0)

[Compare Source](https://github.com/directus/directus/compare/v11.9.3...v11.10.0)

##### ⚠️ Potential Breaking Changes

**Exclude database-only tables from snapshots ([#&#8203;25271](https://github.com/directus/directus/pull/25271))**
Snapshots now exclude tables not tracked in `directus_collections` (database-only tables).

| Source Version | Target Version | Behavior                                                   | Impact                                       |
| -------------- | -------------- | ---------------------------------------------------------- | -------------------------------------------- |
| < 11.10.0      | ≥ 11.10.0      | Database-only tables from source will be created on target | ⚠️ Tables added                              |
| ≥ 11.10.0      | < 11.10.0      | Database-only tables will be dropped from target           | 🚨 Data loss risk                            |
| ≥ 11.10.0      | ≥ 11.10.0      | Database-only tables are ignored in snapshots              |  No changes                                |
| < 11.10.0      | < 11.10.0      | Database-only tables may be created or dropped             | ⚠️ Depends on the diff between source/target |

Please review your snapshot workflows to ensure these changes will not result in unexpected behaviour.

- **[@&#8203;directus/api](https://github.com/directus/api)**
  - Fixed replacing process.env.NODE\_ENV on backend extensions ([#&#8203;25180](https://github.com/directus/directus/pull/25180) by [@&#8203;Nitwel](https://github.com/Nitwel))
  - Exclude database-only tables from snapshots ([#&#8203;25271](https://github.com/directus/directus/pull/25271) by [@&#8203;Nitwel](https://github.com/Nitwel))
- **[@&#8203;directus/extensions-sdk](https://github.com/directus/extensions-sdk)**
  - Upgraded all dependencies of [@&#8203;directus/extensions-sdk](https://github.com/directus/extensions-sdk) to the latest major versions of Rollup and Vite, and resolved several false-positive security reports.   ([#&#8203;25486](https://github.com/directus/directus/pull/25486) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
    ⚠️ This change also raises the minimum supported Node.js version to **20.19.0**.
  - Fixed replacing process.env.NODE\_ENV on backend extensions ([#&#8203;25180](https://github.com/directus/directus/pull/25180) by [@&#8203;Nitwel](https://github.com/Nitwel))

#####  New Features & Improvements

- **[@&#8203;directus/app](https://github.com/directus/app)**
  - Added support for RTL rendering in the studio ([#&#8203;25494](https://github.com/directus/directus/pull/25494) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
  - Added Stylelint and refactored the styles to take advantage of logical properties ([#&#8203;25370](https://github.com/directus/directus/pull/25370) by [@&#8203;formfcw](https://github.com/formfcw))
  - Added the code tool to the WYSIWYG text editor by [@&#8203;Abdallah-Awwad](https://github.com/Abdallah-Awwad) & [@&#8203;robluton](https://github.com/robluton) ([#&#8203;25399](https://github.com/directus/directus/pull/25399) by [@&#8203;Abdallah-Awwad](https://github.com/Abdallah-Awwad))
  - Ensured that custom validation rules are executed in overlays ([#&#8203;25394](https://github.com/directus/directus/pull/25394) by [@&#8203;formfcw](https://github.com/formfcw))
  - Improved custom validation message handling ([#&#8203;25413](https://github.com/directus/directus/pull/25413) by [@&#8203;formfcw](https://github.com/formfcw))
  - Improved accessibility for anchors, iframes, labels and roles ([#&#8203;25531](https://github.com/directus/directus/pull/25531) by [@&#8203;formfcw](https://github.com/formfcw))
- **[@&#8203;directus/api](https://github.com/directus/api)**
  - Added support for RTL rendering in the studio ([#&#8203;25494](https://github.com/directus/directus/pull/25494) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
  - Added `websocket.authenticate` filter hook ([#&#8203;25344](https://github.com/directus/directus/pull/25344) by [@&#8203;8byr0](https://github.com/8byr0))
- **[@&#8203;directus/system-data](https://github.com/directus/system-data)**
  - Added support for RTL rendering in the studio ([#&#8203;25494](https://github.com/directus/directus/pull/25494) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))

##### 🐛 Bug Fixes & Optimizations

- **[@&#8203;directus/app](https://github.com/directus/app)**
  - Fixed an issue that could cause the notifications to be rendered in the wrong location ([#&#8203;25499](https://github.com/directus/directus/pull/25499) by [@&#8203;formfcw](https://github.com/formfcw))
  - Added copy id to file details panel in sidebar ([#&#8203;25434](https://github.com/directus/directus/pull/25434) by [@&#8203;robluton](https://github.com/robluton))
  - Added latest material symbols font and generated the associated icons json file ([#&#8203;25512](https://github.com/directus/directus/pull/25512) by [@&#8203;robluton](https://github.com/robluton))
  - Ensured that relational interfaces could reset their saved edits in versions ([#&#8203;25384](https://github.com/directus/directus/pull/25384) by [@&#8203;formfcw](https://github.com/formfcw))
  - Fixed a bug that prevented negative signs from being entered into number fields ([#&#8203;25548](https://github.com/directus/directus/pull/25548) by [@&#8203;formfcw](https://github.com/formfcw))
  - Fixed a bug that caused “Save as Copy” to mutate edits before saving ([#&#8203;25418](https://github.com/directus/directus/pull/25418) by [@&#8203;formfcw](https://github.com/formfcw))
  - Changed select-color interface to pass opacity value to color-presets ([#&#8203;25441](https://github.com/directus/directus/pull/25441) by [@&#8203;robluton](https://github.com/robluton))
  - Fixed issue causing color preset tooltip from triggering when clicking on color picker icon ([#&#8203;25451](https://github.com/directus/directus/pull/25451) by [@&#8203;robluton](https://github.com/robluton))
  - Fixed a bug that caused the buttons in the field template to appear unstyled after saving ([#&#8203;25447](https://github.com/directus/directus/pull/25447) by [@&#8203;formfcw](https://github.com/formfcw))
  - Prevented save from being enabled by default for existing drawer items (m2o and o2m) ([#&#8203;25469](https://github.com/directus/directus/pull/25469) by [@&#8203;robluton](https://github.com/robluton))
  - Added logout flow when user removes own account. ([#&#8203;25424](https://github.com/directus/directus/pull/25424) by [@&#8203;robluton](https://github.com/robluton))
  - Added redirect to profile page when user registers and not required to verify by email. ([#&#8203;25425](https://github.com/directus/directus/pull/25425) by [@&#8203;robluton](https://github.com/robluton))
  - Fixed a bug that prevented popups from working in the WYSIWYG interface when opened in a drawer ([#&#8203;25432](https://github.com/directus/directus/pull/25432) by [@&#8203;DantonMariano](https://github.com/DantonMariano))
  - Fixed a bug that was preventing overlay forms with junction fields from correctly applying filters in M2O fields ([#&#8203;25421](https://github.com/directus/directus/pull/25421) by [@&#8203;formfcw](https://github.com/formfcw))
  - Fixed a bug that caused the M2O display to shift and cut off ([#&#8203;25477](https://github.com/directus/directus/pull/25477) by [@&#8203;formfcw](https://github.com/formfcw))
  - Ensured app access permission rules are applied consistently, regardless of the selection context ([#&#8203;25402](https://github.com/directus/directus/pull/25402) by [@&#8203;formfcw](https://github.com/formfcw))
  - Fixed a bug that was preventing translations from displaying in the calendar layout ([#&#8203;25431](https://github.com/directus/directus/pull/25431) by [@&#8203;u12206050](https://github.com/u12206050))
  - Fixed a bug that caused the upload modal to appear behind the drawer ([#&#8203;25393](https://github.com/directus/directus/pull/25393) by [@&#8203;formfcw](https://github.com/formfcw))
  - Fixed a bug that prevented the horizontal rule from appearing in the WYSIWYG editor ([#&#8203;25395](https://github.com/directus/directus/pull/25395) by [@&#8203;formfcw](https://github.com/formfcw))
  - Ensured that text on a kanban card doesn’t overflow its container ([#&#8203;25446](https://github.com/directus/directus/pull/25446) by [@&#8203;formfcw](https://github.com/formfcw))
  - Added tooltip that displays complete url for flow panels that have url endpoints ([#&#8203;25527](https://github.com/directus/directus/pull/25527) by [@&#8203;robluton](https://github.com/robluton))
  - Added code to update the file list ui when importing a file via url ([#&#8203;25429](https://github.com/directus/directus/pull/25429) by [@&#8203;robluton](https://github.com/robluton))
  - Ensured skip link uses correct href in production environments ([#&#8203;25514](https://github.com/directus/directus/pull/25514) by [@&#8203;formfcw](https://github.com/formfcw))
- **[@&#8203;directus/api](https://github.com/directus/api)**
  - Upgrade dependencies ([#&#8203;25545](https://github.com/directus/directus/pull/25545) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
  - Fixed parsing functions in aliases ([#&#8203;25139](https://github.com/directus/directus/pull/25139) by [@&#8203;Nitwel](https://github.com/Nitwel))
  - Fixed importing CSV with nested dot notation ([#&#8203;25454](https://github.com/directus/directus/pull/25454) by [@&#8203;joselcvarela](https://github.com/joselcvarela))
  - Removed duplicate code in fields readAll ([#&#8203;25184](https://github.com/directus/directus/pull/25184) by [@&#8203;amosmurmu](https://github.com/amosmurmu))
  - Added support for bundling with Rolldown and improved app extensions loading by streaming from disk ([#&#8203;25317](https://github.com/directus/directus/pull/25317) by [@&#8203;Nitwel](https://github.com/Nitwel))
- **[@&#8203;directus/extensions-registry](https://github.com/directus/extensions-registry)**
  - Upgrade dependencies ([#&#8203;25545](https://github.com/directus/directus/pull/25545) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
- **[@&#8203;directus/extensions-sdk](https://github.com/directus/extensions-sdk)**
  - Upgrade dependencies ([#&#8203;25545](https://github.com/directus/directus/pull/25545) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
- **[@&#8203;directus/composables](https://github.com/directus/composables)**
  - Upgrade dependencies ([#&#8203;25545](https://github.com/directus/directus/pull/25545) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
- **[@&#8203;directus/system-data](https://github.com/directus/system-data)**
  - Hide accepted terms field in settings ([#&#8203;25391](https://github.com/directus/directus/pull/25391) by [@&#8203;licitdev](https://github.com/licitdev))
- **create-directus-extension**
  - Updated dependencies ([#&#8203;25550](https://github.com/directus/directus/pull/25550) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
- **[@&#8203;directus/sdk](https://github.com/directus/sdk)**
  - Added a message property to the SDK error object ([#&#8203;25474](https://github.com/directus/directus/pull/25474) by [@&#8203;jclaveau](https://github.com/jclaveau))
  - Improved output types for relational fields in the SDK ([#&#8203;25428](https://github.com/directus/directus/pull/25428) by [@&#8203;br41nslug](https://github.com/br41nslug))
- **[@&#8203;directus/env](https://github.com/directus/env)**
  - Ensured password env options are always strings ([#&#8203;25248](https://github.com/directus/directus/pull/25248) by [@&#8203;Nitwel](https://github.com/Nitwel))
- **[@&#8203;directus/themes](https://github.com/directus/themes)**
  - Fixed an issue that caused custom fonts to fail if multiple weights were used out of order ([#&#8203;25452](https://github.com/directus/directus/pull/25452) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))

##### 📦 Published Versions

- `@directus/app@13.12.0`
- `@directus/api@29.0.0`
- `@directus/composables@11.2.1`
- `create-directus-extension@11.0.16`
- `@directus/env@5.1.1`
- `@directus/extensions@3.0.8`
- `@directus/extensions-registry@3.0.8`
- `@directus/extensions-sdk@15.0.0`
- `@directus/memory@3.0.7`
- `@directus/pressure@3.0.7`
- `@directus/storage-driver-azure@12.0.7`
- `@directus/storage-driver-cloudinary@12.0.7`
- `@directus/storage-driver-gcs@12.0.7`
- `@directus/storage-driver-s3@&#8203;12.0.7`
- `@directus/storage-driver-supabase@3.0.7`
- `@directus/system-data@3.2.0`
- `@directus/themes@1.1.3`
- `@directus/utils@13.0.8`
- `@directus/validation@2.0.7`
- `@directus/sdk@20.0.1`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #1082
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-31 21:15:58 +00:00
c2fbc4ebfe Update ollama/ollama Docker tag to v0.10.0 (#1080)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 11s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change | Pending |
|---|---|---|---|
| ollama/ollama | minor | `0.9.6` -> `0.10.0` | `0.10.1` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #1080
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-31 21:15:16 +00:00
83532cbc11 Update ghcr.io/tailscale/tailscale Docker tag to v1.86.2 (#1079)
Some checks failed
lint-test-docker / docker-lint (push) Successful in 9s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/tailscale/tailscale](https://tailscale.com/kb/1282/docker) ([source](https://github.com/tailscale/tailscale)) | minor | `v1.84.3` -> `v1.86.2` |

---

### Release Notes

<details>
<summary>tailscale/tailscale (ghcr.io/tailscale/tailscale)</summary>

### [`v1.86.2`](https://github.com/tailscale/tailscale/releases/tag/v1.86.2)

[Compare Source](https://github.com/tailscale/tailscale/compare/v1.84.3...v1.86.2)

Please refer to the changelog available at https://tailscale.com/changelog

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #1079
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-31 21:14:32 +00:00
10e5ceb9cf Update searxng/searxng:latest Docker digest to 3c0a2ee (#1081)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 13s
renovate / renovate (push) Successful in 2m18s
2025-07-31 19:02:07 +00:00
dbf22fd8c1 Update Helm release traefik to v37 (#1074)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 8s
renovate / renovate (push) Successful in 2m23s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://traefik.io/) ([source](https://github.com/traefik/traefik-helm-chart)) | major | `36.3.0` -> `37.0.0` |

---

### Release Notes

<details>
<summary>traefik/traefik-helm-chart (traefik)</summary>

### [`v37.0.0`](https://github.com/traefik/traefik-helm-chart/releases/tag/v37.0.0)

[Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v36.3.0...v37.0.0)

#### 💥 BREAKING CHANGES

- feat(gateway-api)!: support selector for namespace policy [#&#8203;1465](https://github.com/traefik/traefik-helm-chart/issues/1465) by [@&#8203;ajago](https://github.com/ajago)

#### 🚀 Features

- feat(podtemplate): add capacity to set GOMEMLIMIT with default at 90% of user-set memory limit [#&#8203;1418](https://github.com/traefik/traefik-helm-chart/issues/1418) by [@&#8203;shlomitubul](https://github.com/shlomitubul)
- feat(podtemplate): add support for localPlugins [#&#8203;1473](https://github.com/traefik/traefik-helm-chart/issues/1473) by [@&#8203;bpsoraggi](https://github.com/bpsoraggi)
- feat(CRDs): update Traefik Hub to v1.21.0 [#&#8203;1480](https://github.com/traefik/traefik-helm-chart/issues/1480) by [@&#8203;traefiker](https://github.com/traefiker)
- feat(hub): offline mode [#&#8203;1477](https://github.com/traefik/traefik-helm-chart/issues/1477) by [@&#8203;jspdown](https://github.com/jspdown)
- feat(CRDs): update for Traefik Proxy v3.5 and Gateway API v1.3.0 [#&#8203;1486](https://github.com/traefik/traefik-helm-chart/issues/1486) by [@&#8203;bpsoraggi](https://github.com/bpsoraggi)
- feat(deps): update traefik docker tag to v3.5.0 [#&#8203;1478](https://github.com/traefik/traefik-helm-chart/issues/1478) by [@&#8203;renovate](https://github.com/renovate)\[bot]

#### 🐛 Bug fixes

- fix(Deployment): revision history should be disableable [#&#8203;1470](https://github.com/traefik/traefik-helm-chart/issues/1470) by [@&#8203;bpsoraggi](https://github.com/bpsoraggi)
- fix(entryPoint): allow scheme to be unset on redirect [#&#8203;1471](https://github.com/traefik/traefik-helm-chart/issues/1471) by [@&#8203;bpsoraggi](https://github.com/bpsoraggi)
- fix(observability): allow `tracing.sampleRate` to be set to zero  [#&#8203;1483](https://github.com/traefik/traefik-helm-chart/issues/1483) by [@&#8203;yogeek](https://github.com/yogeek)
- fix(CI): helm signing [#&#8203;1490](https://github.com/traefik/traefik-helm-chart/issues/1490) by [@&#8203;bpsoraggi](https://github.com/bpsoraggi)

#### 📦 Others

- chore(ci): add linter for CRDs and kustomization consistency [#&#8203;1472](https://github.com/traefik/traefik-helm-chart/issues/1472) by [@&#8203;bpsoraggi](https://github.com/bpsoraggi)
- docs(plugins): improve wording and sync with `VALUES.md` [#&#8203;1481](https://github.com/traefik/traefik-helm-chart/issues/1481) by [@&#8203;jnoordsij](https://github.com/jnoordsij)
- chore(ci): check docs on all PRs [#&#8203;1484](https://github.com/traefik/traefik-helm-chart/issues/1484) by [@&#8203;jnoordsij](https://github.com/jnoordsij)
- docs: 📚️ add markdown linter [#&#8203;1469](https://github.com/traefik/traefik-helm-chart/issues/1469) by [@&#8203;mloiseleur](https://github.com/mloiseleur)
- chore(deps): update appany/helm-oci-chart-releaser action to v0.5.0 [#&#8203;1479](https://github.com/traefik/traefik-helm-chart/issues/1479) by [@&#8203;renovate](https://github.com/renovate)\[bot]
- chore(ci): add signing to release [#&#8203;1474](https://github.com/traefik/traefik-helm-chart/issues/1474) by [@&#8203;bpsoraggi](https://github.com/bpsoraggi)
- chore(release): 🚀 Publish 37.0.0 and 1.10.0 [#&#8203;1488](https://github.com/traefik/traefik-helm-chart/issues/1488) by [@&#8203;bpsoraggi](https://github.com/bpsoraggi)

#### New Contributors

- [@&#8203;shlomitubul](https://github.com/shlomitubul) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1418
- [@&#8203;bpsoraggi](https://github.com/bpsoraggi) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1470
- [@&#8203;yogeek](https://github.com/yogeek) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1483
- [@&#8203;ajago](https://github.com/ajago) made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1465

**Full Changelog**: https://github.com/traefik/traefik-helm-chart/compare/v36.3.0...v37.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/1074
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-31 15:11:15 +00:00
c7f1cde10a Update mirror.gcr.io/aquasec/trivy Docker tag to v0.65.0 (#1073)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 8s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [mirror.gcr.io/aquasec/trivy](https://www.aquasec.com/products/trivy/) ([source](https://github.com/aquasecurity/trivy)) | minor | `0.64.1` -> `0.65.0` |

---

### Release Notes

<details>
<summary>aquasecurity/trivy (mirror.gcr.io/aquasec/trivy)</summary>

### [`v0.65.0`](https://github.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0650-2025-07-30)

[Compare Source](https://github.com/aquasecurity/trivy/compare/v0.64.1...v0.65.0)

##### Features

- add graceful shutdown with signal handling ([#&#8203;9242](https://github.com/aquasecurity/trivy/issues/9242)) ([2c05882](2c05882f45))
- add HTTP request/response tracing support ([#&#8203;9125](https://github.com/aquasecurity/trivy/issues/9125)) ([aa5b32a](aa5b32a19f))
- **alma:** add AlmaLinux 10 support ([#&#8203;9207](https://github.com/aquasecurity/trivy/issues/9207)) ([861d51e](861d51e99a))
- **flag:** add schema validation for `--server` flag ([#&#8203;9270](https://github.com/aquasecurity/trivy/issues/9270)) ([ed4640e](ed4640ec27))
- **image:** add Docker context resolution ([#&#8203;9166](https://github.com/aquasecurity/trivy/issues/9166)) ([99cd4e7](99cd4e776c))
- **license:** observe pkg types option in license scanner ([#&#8203;9091](https://github.com/aquasecurity/trivy/issues/9091)) ([d44af8c](d44af8cfa2))
- **misconf:** add private ip google access attribute to subnetwork ([#&#8203;9199](https://github.com/aquasecurity/trivy/issues/9199)) ([263845c](263845cfc1))
- **misconf:** added logging and versioning to the gcp storage bucket ([#&#8203;9226](https://github.com/aquasecurity/trivy/issues/9226)) ([110f80e](110f80ea29))
- **repo:** add git repository metadata to reports ([#&#8203;9252](https://github.com/aquasecurity/trivy/issues/9252)) ([f4b2cf1](f4b2cf10e9))
- **report:** add CVSS vectors in sarif report ([#&#8203;9157](https://github.com/aquasecurity/trivy/issues/9157)) ([60723e6](60723e6cfc))
- **sbom:** add SHA-512 hash support for CycloneDX SBOM ([#&#8203;9126](https://github.com/aquasecurity/trivy/issues/9126)) ([12d6706](12d6706961))

##### Bug Fixes

- **alma:** parse epochs from rpmqa file ([#&#8203;9101](https://github.com/aquasecurity/trivy/issues/9101)) ([82db2fc](82db2fcc80))
- also check `filepath` when removing duplicate packages ([#&#8203;9142](https://github.com/aquasecurity/trivy/issues/9142)) ([4d10a81](4d10a815dd))
- **aws:** update amazon linux 2 EOL date ([#&#8203;9176](https://github.com/aquasecurity/trivy/issues/9176)) ([0ecfed6](0ecfed6ea7))
- **cli:** Add more non-sensitive flags to telemetry ([#&#8203;9110](https://github.com/aquasecurity/trivy/issues/9110)) ([7041a39](7041a39bdc))
- **cli:** ensure correct command is picked by telemetry ([#&#8203;9260](https://github.com/aquasecurity/trivy/issues/9260)) ([b4ad00f](b4ad00f301))
- **cli:** panic: attempt to get os.Args\[1] when len(os.Args) < 2 ([#&#8203;9206](https://github.com/aquasecurity/trivy/issues/9206)) ([adfa879](adfa879e4e))
- **license:** add missed `GFDL-NIV-1.1` and `GFDL-NIV-1.2` into Trivy mapping ([#&#8203;9116](https://github.com/aquasecurity/trivy/issues/9116)) ([a692f29](a692f296d1))
- **license:** handle WITH operator for `LaxSplitLicenses` ([#&#8203;9232](https://github.com/aquasecurity/trivy/issues/9232)) ([b4193d0](b4193d0d31))
- migrate from `*.list` to `*.md5sums` files for `dpkg` ([#&#8203;9131](https://github.com/aquasecurity/trivy/issues/9131)) ([f224de3](f224de3e39))
- **misconf:** correctly adapt azure storage account ([#&#8203;9138](https://github.com/aquasecurity/trivy/issues/9138)) ([51aa022](51aa022260))
- **misconf:** correctly parse empty port ranges in google\_compute\_firewall ([#&#8203;9237](https://github.com/aquasecurity/trivy/issues/9237)) ([77bab7b](77bab7b6d2))
- **misconf:** fix log bucket in schema ([#&#8203;9235](https://github.com/aquasecurity/trivy/issues/9235)) ([7ebc129](7ebc129ab7))
- **misconf:** skip rewriting expr if attr is nil ([#&#8203;9113](https://github.com/aquasecurity/trivy/issues/9113)) ([42ccd3d](42ccd3df9a))
- **nodejs:** don't use prerelease logic for compare npm constraints  ([#&#8203;9208](https://github.com/aquasecurity/trivy/issues/9208)) ([fe96436](fe96436b99))
- prevent graceful shutdown message on normal exit ([#&#8203;9244](https://github.com/aquasecurity/trivy/issues/9244)) ([6095984](6095984d53))
- **rootio:** check full version to detect `root.io` packages ([#&#8203;9117](https://github.com/aquasecurity/trivy/issues/9117)) ([c2ddd44](c2ddd44d98))
- **rootio:** fix severity selection ([#&#8203;9181](https://github.com/aquasecurity/trivy/issues/9181)) ([6fafbeb](6fafbeb606))
- **sbom:** merge in-graph and out-of-graph OS packages in scan results ([#&#8203;9194](https://github.com/aquasecurity/trivy/issues/9194)) ([aa944cc](aa944cc6da))
- **sbom:** use correct field for licenses in CycloneDX reports ([#&#8203;9057](https://github.com/aquasecurity/trivy/issues/9057)) ([143da88](143da88dd8))
- **secret:** add UTF-8 validation in secret scanner to prevent protobuf marshalling errors ([#&#8203;9253](https://github.com/aquasecurity/trivy/issues/9253)) ([54832a7](54832a77b5))
- **secret:** fix line numbers for multiple-line secrets ([#&#8203;9104](https://github.com/aquasecurity/trivy/issues/9104)) ([e579746](e57974649e))
- **server:** add HTTP transport setup to server mode ([#&#8203;9217](https://github.com/aquasecurity/trivy/issues/9217)) ([1163b04](1163b044c7))
- supporting .egg-info/METADATA in python.Packaging analyzer ([#&#8203;9151](https://github.com/aquasecurity/trivy/issues/9151)) ([e306e2d](e306e2dc52))
- **terraform:** `for_each` on a map returns a resource for every key ([#&#8203;9156](https://github.com/aquasecurity/trivy/issues/9156)) ([153318f](153318f65f))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #1073
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-31 15:10:56 +00:00
b8601d813e Update Helm release reloader to v2.2.0 (#1071)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 9s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [reloader](https://github.com/stakater/Reloader) | minor | `2.1.5` -> `2.2.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #1071
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-31 15:10:31 +00:00
351d6d00a2 Update vectorim/element-web Docker tag to v1.11.108 (#1078)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 9s
renovate / renovate (push) Successful in 2m7s
2025-07-31 15:02:13 +00:00
a0ac4067ec Update vaultwarden/server Docker tag to v1.34.3
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
lint-test-helm / helm-lint (pull_request) Successful in 16s
lint-test-helm / helm-lint (push) Successful in 17s
renovate / renovate (push) Successful in 1m53s
2025-07-31 10:01:54 +00:00
3b636f3a23 Update Helm release argo-cd to v8.2.4
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
lint-test-helm / helm-lint (pull_request) Successful in 11s
lint-test-helm / helm-lint (push) Successful in 11s
renovate / renovate (push) Successful in 1m3s
2025-07-31 08:01:28 +00:00
55ef383ca1 Update ghcr.io/linuxserver/code-server Docker tag to v4.102.3 (#1069)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 8s
renovate / renovate (push) Successful in 2m23s
2025-07-31 05:02:00 +00:00
deb9e01503 Update harbor.alexlebens.net/images/site-profile Docker tag to v1.1.1
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 21s
lint-test-helm / helm-lint (push) Successful in 16s
renovate / renovate (push) Successful in 1m29s
2025-07-31 02:36:40 +00:00
e1bc5e5912 disable repo archive
All checks were successful
lint-test-helm / helm-lint (push) Successful in 21s
renovate / renovate (push) Successful in 2m2s
2025-07-30 21:34:45 -05:00
74c04884d5 enable cron
All checks were successful
lint-test-helm / helm-lint (push) Successful in 13s
renovate / renovate (push) Successful in 1m46s
2025-07-30 19:54:15 -05:00
ffe99c5c46 Update harbor.alexlebens.net/images/site-profile Docker tag to v1.1.0 (#1067)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 9s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [harbor.alexlebens.net/images/site-profile](https://gitea.alexlebens.dev/alexlebens/site-profile) | minor | `1.0.1` -> `1.1.0` |

---

### Release Notes

<details>
<summary>alexlebens/site-profile (harbor.alexlebens.net/images/site-profile)</summary>

### [`v1.1.0`](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/1.0.1...1.1.0)

[Compare Source](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/1.0.1...1.1.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #1067
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-31 00:53:10 +00:00
3fc2a7a874 Update cloudflared Docker tag to v1.19.0 (#1066)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 15s
process-repository / process-repository (push) Failing after 29s
renovate / renovate (push) Successful in 2m18s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cloudflared](https://github.com/cloudflare/cloudflared) | minor | `1.18.0` -> `1.19.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #1066
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-30 23:07:54 +00:00
5183040eb3 Update Helm release cilium to v1.18.0 (#1062)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 13s
renovate / renovate (push) Successful in 1m10s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | minor | `1.17.6` -> `1.18.0` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

### [`v1.18.0`](https://github.com/cilium/cilium/releases/tag/v1.18.0): 1.18.0

[Compare Source](https://github.com/cilium/cilium/compare/1.17.6...1.18.0)

We are excited to announce the **[Cilium 1.18.0](https://github.com/cilium/cilium/releases/tag/v1.18.0)** release!

A total of **3298 new commits** have been contributed to this release by a growing community of over **955 developers** and over **22,000 GitHub stars**! 

To keep up to date with all the latest Cilium releases, see [Announcements](https://github.com/cilium/cilium/discussions/categories/announcements)

Here's what's new in [v1.18.0](https://github.com/cilium/cilium/releases/tag/v1.18.0):

#### 🚠 Networking

- **⚖️ Load Balancing Redesign**: The service load-balancing control-plane in the Cilium agent has been redesigned to reduce memory usage and improve future extensibility of load-balancing features ([cilium/cilium#38469](https://github.com/cilium/cilium/pull/38469), [@&#8203;joamaki](https://github.com/joamaki))
- **🔌 Virtual Network Devices**: Added support for new virtual network device configurations such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://github.com/cilium/cilium/pull/37723), [@&#8203;ldelossa](https://github.com/ldelossa); [cilium/cilium#37346](https://github.com/cilium/cilium/pull/37346), [@&#8203;gyutaeb](https://github.com/gyutaeb))
- **Ⓜ️ Multiple Egress Gateways**: Egress Gateways policies can now direct traffic towards multiple gateway nodes ([cilium/cilium#39304](https://github.com/cilium/cilium/pull/39304), [@&#8203;carlos-abad](https://github.com/carlos-abad))
- **🚦 Ingress Rate Limiting**: The bandwidth manager now supports ingress rate limiting ([cilium/cilium#36351](https://github.com/cilium/cilium/pull/36351), [@&#8203;l1b0k](https://github.com/l1b0k))
- **📢 Multi-Device L2 Announcements**: The L2 pod announcement feature now supports multiple devices ([cilium/cilium#38198](https://github.com/cilium/cilium/pull/38198), [@&#8203;dylandreimerink](https://github.com/dylandreimerink))
- **🏢 Neighbor Subsystem Rework**: The neighbor subsystem was made more resilient through a new system that reconciles desired neighbor entries with the kernel state ([cilium/cilium#39987](https://github.com/cilium/cilium/pull/39987), [@&#8203;dylandreimerink](https://github.com/dylandreimerink))

#### 🌐 IPv6

- **🚇 Tunneling Underlay**: The tunneling datapath mode now supports using an IPv6 network underlay, including when configured with IPsec transparent encryption ([cilium/cilium#38296](https://github.com/cilium/cilium/pull/38296), [cilium/cilium#39497](https://github.com/cilium/cilium/pull/39497), [@&#8203;pchaigno](https://github.com/pchaigno))
- **💬 Kube Proxy Replacement**: Cilium now implements service translation when running on an IPv6 underlay ([cilium/cilium#39074](https://github.com/cilium/cilium/pull/39074), [@&#8203;pchaigno](https://github.com/pchaigno))
- **📋 Delegated IPAM**: When delegating IP address management to a third party plugin, Cilium now configures IPv6 routes for connectivity if the plugin supports IPv6 ([cilium/cilium#38249](https://github.com/cilium/cilium/pull/38249), [@&#8203;caorui-io](https://github.com/caorui-io), [@&#8203;kadevu](https://github.com/kadevu))
- **📦 IP Fragment Support**: Cilium now processes ordered IPv6 fragments to apply policy and routing functionality ([cilium/cilium#38110](https://github.com/cilium/cilium/pull/38110), [@&#8203;gentoo-root](https://github.com/gentoo-root))
- **🚪 Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://github.com/cilium/cilium/pull/38452), [@&#8203;rgo3](https://github.com/rgo3))

#### 🛡️ Policy & Observability

- **🏷️ Policy Names in Hubble-CLI**: Show the names of (C)CNPs that allowed or denied traffic when monitoring flows in Hubble ([cilium/cilium#39453](https://github.com/cilium/cilium/pull/39453), [@&#8203;antonipp](https://github.com/antonipp))
- **📝 Policy Log Fields**: A new free-text log field is added to policies, which is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://github.com/cilium/cilium/pull/39902), [@&#8203;squeed](https://github.com/squeed))
- **🛰️ Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for deeper introspection into traffic flows ([cilium/cilium#37634](https://github.com/cilium/cilium/pull/37634), [@&#8203;kaworu](https://github.com/kaworu))
- **🏰 ClusterMesh Policy Restriction**: A new option allows the **cluster** entity to apply only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://github.com/cilium/cilium/pull/39338), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
- ** Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard has been improved to show more relevant graphs, including policy drops in both directions ([cilium/cilium#36492](https://github.com/cilium/cilium/pull/36492), [cilium/cilium#37445](https://github.com/cilium/cilium/pull/37445), [@&#8203;squeed](https://github.com/squeed))

#### 🌅 Performance

- **📊 Scale Test Results**: Cilium implements policies and services up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://github.com/marseel), [cilium/cilium#40227](https://github.com/cilium/cilium/pull/40227))
- **📦 Image Size Reduction**: Docker image sizes are reduced by 32% on arm64 architecture images ([cilium/cilium#40005](https://github.com/cilium/cilium/pull/40005), [@&#8203;marseel](https://github.com/marseel))
- ** Improved Policy Performance**: The DNS proxy can process large numbers of IPs faster, and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://github.com/cilium/cilium/pull/39340), [@&#8203;squeed](https://github.com/squeed); [cilium/cilium#40414](https://github.com/cilium/cilium/pull/40414), [@&#8203;marseel](https://github.com/marseel))
- **🪞 EndpointSlice Mirroring for Multi-Cluster Services**: Clustermesh mirrors EndpointSlice from the local cluster instead of copying the Service selectors when using the MCS-API controller ([cilium/cilium#38596](https://github.com/cilium/cilium/pull/38596), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
- **🌐 KVStoreMesh Optimization**: Cross-cluster state distribution is optimized by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://github.com/cilium/cilium/pull/36471), [@&#8203;HadrienPatte](https://github.com/HadrienPatte))
- **🧠 Egress Gateway Processing**: Egress gateway policy processing is significantly improved when matching a large number of pods ([cilium/cilium#37714](https://github.com/cilium/cilium/pull/37714), [@&#8203;giorio94](https://github.com/giorio94))
- **🗑️ Optimized Garbage Collection for Connection Tracking**: Cilium leverages batched iterators for CTMap GC ([cilium/cilium#36288](https://github.com/cilium/cilium/pull/36288), [@&#8203;tommyp1ckles](https://github.com/tommyp1ckles))

#### ⚙️ Operations

- **📈 API Server Connections at Scale**: Improve kube-apiserver connections behavior at scale through failover and setting better jitter and backoff configurations ([cilium/cilium#37601](https://github.com/cilium/cilium/pull/37601), [@&#8203;aditighag](https://github.com/aditighag); [cilium/cilium#38031](https://github.com/cilium/cilium/pull/38031), [@&#8203;orange30](https://github.com/orange30); [cilium/cilium#36648](https://github.com/cilium/cilium/pull/36648), [@&#8203;wedaly](https://github.com/wedaly))
- **🔄 ConfigMap Synchronization**: New option to automatically synchronize ConfigMap changes into the agent and report metrics for when the effective configuration is different from the desired configuration ([cilium/cilium#36510](https://github.com/cilium/cilium/pull/36510), [@&#8203;ovidiutirla](https://github.com/ovidiutirla))
- **🎓 CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool** and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://github.com/cilium/cilium/pull/38940), [@&#8203;christarazi](https://github.com/christarazi); [cilium/cilium#39090](https://github.com/cilium/cilium/pull/39090), [@&#8203;pippolo84](https://github.com/pippolo84); [cilium/cilium#37765](https://github.com/cilium/cilium/pull/37765), [@&#8203;rastislavs](https://github.com/rastislavs))
- ** Node Taints Handling**: The cilium-operator Deployment uses a new default set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://github.com/cilium/cilium/pull/40137), [@&#8203;Murat](https://github.com/Murat) Parlakisik)
- **🪵 Migrate to Slog**: Cilium now uses slog as log library for all components ([cilium/cilium#39664](https://github.com/cilium/cilium/pull/39664), [@&#8203;aanm](https://github.com/aanm))
- **🔧 Cilium dependencies** were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1, and CNI v1.1 ([cilium/cilium#39124](https://github.com/cilium/cilium/pull/39124), [cilium/cilium#40175](https://github.com/cilium/cilium/pull/40175), [cilium/cilium#39632](https://github.com/cilium/cilium/pull/39632), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#38868](https://github.com/cilium/cilium/pull/38868), [@&#8203;squeed](https://github.com/squeed))
- **🐧 Minimum Linux Requirements**: The minimum kernel version for this release series is Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://github.com/cilium/cilium/pull/38308), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))

#### 🕸️ Service Mesh & Gateway API

- **⛩️ Gateway API v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://github.com/cilium/cilium/pull/39590), [@&#8203;sayboras](https://github.com/sayboras))
- **🔗 Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig object adds service type validation allows the configuration of extra settings on a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef fields. This allows Cilium to reconcile multiple GatewayClasses with different configurations ([cilium/cilium#37792](https://github.com/cilium/cilium/pull/37792), [cilium/cilium#37402](https://github.com/cilium/cilium/pull/37402), [cilium/cilium#40138](https://github.com/cilium/cilium/pull/40138), [@&#8203;sayboras](https://github.com/sayboras))
- **🚏 Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple HTTPRoutes to the same Service ([cilium/cilium#39922](https://github.com/cilium/cilium/pull/39922), [@&#8203;youngnick](https://github.com/youngnick))
- **🪄 Route Changes Reconciliation**: Reconcile Gateway API based on all changes to routes. This allows label updates to trigger reconciliation correctly, amongst other things ([cilium/cilium#37798](https://github.com/cilium/cilium/pull/37798), [@&#8203;sayboras](https://github.com/sayboras))

#### 🏷️ IP Address Management

- **☁️ AWS Prefix Delegation**: Prefix delegation on AWS bare metal instances is now supported natively in Cilium's AWS ENI IPAM mode ([cilium/cilium#39678](https://github.com/cilium/cilium/pull/39678), [@&#8203;41ks](https://github.com/41ks))
- **🏬 Multi-Pool IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore mode ([cilium/cilium#39638](https://github.com/cilium/cilium/pull/39638), [@&#8203;pippolo84](https://github.com/pippolo84))
- **🔐 Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with IPSec transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://github.com/cilium/cilium/pull/39442), [@&#8203;pippolo84](https://github.com/pippolo84))
- **↪️ Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool IPAM mode ([cilium/cilium#38483](https://github.com/cilium/cilium/pull/38483), [@&#8203;pippolo84](https://github.com/pippolo84))

#### 🛣️ BGP

- **📇 Route Aggregation**: Add support for BGP route aggregation in the control plane ([cilium/cilium#37275](https://github.com/cilium/cilium/pull/37275), [@&#8203;romanspb80](https://github.com/romanspb80))
- **🎯 Overlapping Selector Matches**: Support overlapping selector matches in **CiliumBGPAdvertisement** resources ([cilium/cilium#36414](https://github.com/cilium/cilium/pull/36414), [@&#8203;dswaffordcw](https://github.com/dswaffordcw))
- **🆔 New Router ID generation modes**: Generate router-id based on MAC addresses, or from an IP address pool ([cilium/cilium#36451](https://github.com/cilium/cilium/pull/36451), [@&#8203;yushoyamaguchi](https://github.com/yushoyamaguchi); [cilium/cilium#38300](https://github.com/cilium/cilium/pull/38300), [@&#8203;liyihuang](https://github.com/liyihuang))

#### 🧑‍💻 Development Experience

- **🧪 Test attribution**: Identify owners of test in GitHub workflow results to make it easier to connect with other developers on tricky problems ([cilium/cilium#37027](https://github.com/cilium/cilium/pull/37027), [@&#8203;Joe](https://github.com/Joe) Stringer)
- **🛏️ Policy REST API**: The Cilium policy API exposed over a local unix socket is deprecated. The other mechanisms to configure policy via Kubernetes resources or the local filesystem are preferred ([cilium/cilium#40212](https://github.com/cilium/cilium/pull/40212), [@&#8203;squeed](https://github.com/squeed))
- **🏗️ Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder API and External Workloads ([cilium/cilium#38480](https://github.com/cilium/cilium/pull/38480), [cilium/cilium#39642](https://github.com/cilium/cilium/pull/39642), [cilium/cilium#37418](https://github.com/cilium/cilium/pull/37418), [@&#8203;brb](https://github.com/brb))

#### 🏢 Community

- **❤️ Production Case Studies**: Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
  - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY), [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/), [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/), [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/), and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)
- **🇬🇧 London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/) and the [Cilium Developer Summit](https://github.com/cilium/dev-summits/tree/main/2025-EU) in London
- **🇺🇸 Atlanta Events**: Meet us at the upcoming [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/) and Cilium Developers Summit in Atlanta, Georgia
- **👥 SIG Community Meetings**: [SIG Community](https://github.com/cilium/community/tree/main/sig-community) now meets every first and third Thursday to foster, grow, and sustain the Cilium open source community

#### 📔 Full CHANGELOG

- Full CHANGELOG.md can be found [here](https://github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).

And finally, we would like to thank you to all contributors of Cilium that helped directly and indirectly with the project. The success of Cilium could not happen without all of you. ❤️ :people\_holding\_hands:  ❤️

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #1062
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-30 21:18:13 +00:00
432b9d269a Update Helm release eck-operator to v3.1.0 (#1057)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 7s
renovate / renovate (push) Successful in 1m37s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [eck-operator](https://github.com/elastic/cloud-on-k8s) | minor | `3.0.0` -> `3.1.0` |

---

### Release Notes

<details>
<summary>elastic/cloud-on-k8s (eck-operator)</summary>

### [`v3.1.0`](https://github.com/elastic/cloud-on-k8s/releases/tag/v3.1.0)

[Compare Source](https://github.com/elastic/cloud-on-k8s/compare/v3.0.0...v3.1.0)

### Elastic Cloud on Kubernetes 3.1.0

- [Quickstart guide](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s#eck-quickstart)

##### Release Highlights

- It is now possible to propagate metadata from the parent custom resource to the child resources created by the operator. If you add labels or annotations on an Elasticsearch, Kibana, or Agent resource, for example, these can be automatically propagated to the Pods, Services, and other resources created by the operator. Refer to the [Propagate Labels and Annotations](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s/propagate-labels-annotations.md) page for examples and more details.
- To reduce the attack surface and improve overall security UBI images are now based on the UBI micro base image.

##### Features and enhancements

- UBI: Use micro image instead of minimal [#&#8203;8704](https://github.com/elastic/cloud-on-k8s/pull/8704)
- Propagate metadata to children [#&#8203;8673](https://github.com/elastic/cloud-on-k8s/pull/8673) (issue: [#&#8203;2652](https://github.com/elastic/cloud-on-k8s/issues/2652))
- Allow advanced configuration for fleet-managed Elastic Agents [#&#8203;8623](https://github.com/elastic/cloud-on-k8s/pull/8623) (issue: [#&#8203;8619](https://github.com/elastic/cloud-on-k8s/issues/8619))

##### Fixes

- Set owner on service account Secret, update it when application is recreated [#&#8203;8716](https://github.com/elastic/cloud-on-k8s/pull/8716)
- fix: Cannot disable TLS in Logstash [#&#8203;8706](https://github.com/elastic/cloud-on-k8s/pull/8706) (issue: [#&#8203;8600](https://github.com/elastic/cloud-on-k8s/issues/8600))
- Move from deprecated container input to filestream [#&#8203;8679](https://github.com/elastic/cloud-on-k8s/pull/8679) (issue: [#&#8203;8667](https://github.com/elastic/cloud-on-k8s/issues/8667))
- Add automated workaround for 9.0.0 maps issue [#&#8203;8665](https://github.com/elastic/cloud-on-k8s/pull/8665) (issue: [#&#8203;8655](https://github.com/elastic/cloud-on-k8s/issues/8655))
- Bump go.mod to v3 [#&#8203;8609](https://github.com/elastic/cloud-on-k8s/pull/8609)
- Helm: Add support for missing `remoteClusterServer` value [#&#8203;8612](https://github.com/elastic/cloud-on-k8s/pull/8612)

##### Documentation improvements

- \[Helm] Fix examples/logstash/basic-eck.yaml [#&#8203;8695](https://github.com/elastic/cloud-on-k8s/pull/8695)

##### Miscellaneous

- Update Go version to 1.24.5 [#&#8203;8745](https://github.com/elastic/cloud-on-k8s/pull/8745)
- chore(deps): update registry.access.redhat.com/ubi9/ubi-micro docker tag to v9.6-1750858477 [#&#8203;8711](https://github.com/elastic/cloud-on-k8s/pull/8711)
- fix(deps): update k8s to v0.33.2 [#&#8203;8699](https://github.com/elastic/cloud-on-k8s/pull/8699)
- fix(deps): update module cloud.google.com/go/storage to v1.52.0 [#&#8203;8629](https://github.com/elastic/cloud-on-k8s/pull/8629)
- fix(deps): update module github.com/go-git/go-git/v5 to v5.16.0 [#&#8203;8631](https://github.com/elastic/cloud-on-k8s/pull/8631)
- fix(deps): update module github.com/google/go-containerregistry to v0.20.6 [#&#8203;8672](https://github.com/elastic/cloud-on-k8s/pull/8672)
- fix(deps): update module github.com/magiconair/properties to v1.8.10 [#&#8203;8625](https://github.com/elastic/cloud-on-k8s/pull/8625)
- fix(deps): update module github.com/prometheus/common to v0.63.0 [#&#8203;8569](https://github.com/elastic/cloud-on-k8s/pull/8569)
- fix(deps): update module github.com/spf13/viper to v1.20.1 [#&#8203;8570](https://github.com/elastic/cloud-on-k8s/pull/8570)
- fix(deps): update module google.golang.org/api to v0.227.0 [#&#8203;8529](https://github.com/elastic/cloud-on-k8s/pull/8529)
- fix(deps): update module helm.sh/helm/v3 to 3.17.3 [#&#8203;8598](https://github.com/elastic/cloud-on-k8s/pull/8598)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/1057
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-30 21:07:35 +00:00
bd9e13db31 Update Helm release loki to v6.34.0 (#1065)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 14s
renovate / renovate (push) Successful in 2m56s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.33.0` -> `6.34.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #1065
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-07-30 20:59:02 +00:00
95f527369e Update ghcr.io/calibrain/calibre-web-automated-book-downloader:latest Docker digest to 7d01e56
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 14s
lint-test-helm / helm-lint (push) Successful in 14s
renovate / renovate (push) Successful in 1m19s
2025-07-30 16:01:09 +00:00
a7247be871 Update ghcr.io/calibrain/calibre-web-automated-book-downloader:latest Docker digest to 4f92221 (#1063)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 10s
renovate / renovate (push) Successful in 2m32s
2025-07-30 15:02:12 +00:00
438e2c2ec8 Update vectorim/element-web Docker tag to v1.11.107
All checks were successful
lint-test-helm / helm-lint (push) Successful in 10s
renovate / renovate (push) Successful in 2m25s
2025-07-30 14:02:09 +00:00
2159b0cd40 Update ghcr.io/calibrain/calibre-web-automated-book-downloader:latest Docker digest to d85a14f
Some checks failed
lint-test-helm / helm-lint (pull_request) Successful in 9s
lint-test-helm / helm-lint (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2025-07-30 14:01:38 +00:00
3a96b1668c Update ghcr.io/calibrain/calibre-web-automated-book-downloader:latest Docker digest to e7894be
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 15s
lint-test-helm / helm-lint (push) Successful in 10s
renovate / renovate (push) Successful in 2m3s
2025-07-30 13:01:24 +00:00
abd7a133e8 Update rmcrackan/libation Docker tag to v12.4.11
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
lint-test-helm / helm-lint (pull_request) Successful in 15s
lint-test-helm / helm-lint (push) Successful in 16s
renovate / renovate (push) Successful in 1m30s
2025-07-30 12:01:54 +00:00
32ddfaeedd Update ghcr.io/gitroomhq/postiz-app Docker tag to v2.0.8 (#1056)
All checks were successful
lint-test-helm / helm-lint (push) Successful in 10s
renovate / renovate (push) Successful in 2m23s
2025-07-30 10:01:30 +00:00
59ad5134d0 Update ghcr.io/gitroomhq/postiz-app Docker tag to v2.0.7
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 15s
lint-test-helm / helm-lint (push) Successful in 9s
renovate / renovate (push) Successful in 1m27s
2025-07-30 09:01:30 +00:00
9ab6742b53 Update d3fk/s3cmd:latest Docker digest to 02eaa25
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 35s
lint-test-helm / helm-lint (push) Successful in 29s
renovate / renovate (push) Successful in 1m0s
2025-07-30 04:02:05 +00:00
8f88765923 remove valkey secret
All checks were successful
lint-test-helm / helm-lint (push) Successful in 1m10s
renovate / renovate (push) Successful in 1m37s
2025-07-29 20:36:23 -05:00
ffc1e7cd78 fix host
All checks were successful
lint-test-helm / helm-lint (push) Successful in 13s
renovate / renovate (push) Successful in 1m27s
2025-07-29 20:34:49 -05:00
e2f0c91b20 remove valkey
All checks were successful
lint-test-helm / helm-lint (push) Successful in 10s
renovate / renovate (push) Successful in 1m3s
2025-07-29 20:33:20 -05:00
55d31fe4d2 add redis
All checks were successful
renovate / renovate (push) Successful in 1m6s
lint-test-helm / helm-lint (push) Successful in 1m9s
2025-07-29 20:29:39 -05:00
e51325b58a remove valkey
All checks were successful
lint-test-helm / helm-lint (push) Successful in 10s
renovate / renovate (push) Successful in 1m19s
2025-07-29 20:28:19 -05:00
280de0b09d add redis
All checks were successful
lint-test-helm / helm-lint (push) Successful in 1m13s
renovate / renovate (push) Successful in 2m18s
2025-07-29 20:23:55 -05:00
23346060fd switch redis
Some checks failed
lint-test-helm / helm-lint (push) Successful in 48s
renovate / renovate (push) Has been cancelled
2025-07-29 20:22:44 -05:00
b26b99b83d switch redis
Some checks failed
lint-test-helm / helm-lint (push) Successful in 1m6s
renovate / renovate (push) Has been cancelled
2025-07-29 20:21:01 -05:00
c9263167fd add redis
All checks were successful
lint-test-helm / helm-lint (push) Successful in 13s
renovate / renovate (push) Successful in 1m17s
2025-07-29 20:16:44 -05:00
6727510c06 add secret
All checks were successful
lint-test-helm / helm-lint (push) Successful in 13s
renovate / renovate (push) Successful in 1m6s
2025-07-29 20:15:34 -05:00
c7aef50428 switch redis
Some checks failed
lint-test-helm / helm-lint (push) Successful in 12s
renovate / renovate (push) Has been cancelled
2025-07-29 20:14:41 -05:00
f4d0eb8ce0 add redis
All checks were successful
lint-test-helm / helm-lint (push) Successful in 16s
renovate / renovate (push) Successful in 1m30s
2025-07-29 20:09:59 -05:00
2716355912 remove valkey
All checks were successful
lint-test-helm / helm-lint (push) Successful in 11s
renovate / renovate (push) Successful in 1m50s
2025-07-29 20:05:04 -05:00
afb0351d4e switch redis
Some checks failed
lint-test-helm / helm-lint (push) Successful in 1m8s
renovate / renovate (push) Has been cancelled
2025-07-29 20:03:12 -05:00
3ac6645815 add rdis
All checks were successful
lint-test-helm / helm-lint (push) Successful in 10s
renovate / renovate (push) Successful in 1m37s
2025-07-29 20:00:16 -05:00
50c33107e6 switch redis
All checks were successful
lint-test-helm / helm-lint (push) Successful in 14s
renovate / renovate (push) Successful in 49s
2025-07-29 19:54:44 -05:00
5c670a2325 add rdis
All checks were successful
lint-test-helm / helm-lint (push) Successful in 15s
renovate / renovate (push) Successful in 1m7s
2025-07-29 19:52:14 -05:00