Commit Graph

8399 Commits

Author SHA1 Message Date
50fc9b4c57 feat: disable l2 announcement
Some checks failed
lint-test-helm / lint-helm (push) Successful in 15s
render-manifests-push / render-manifests-push (push) Successful in 37s
renovate / renovate (push) Has been cancelled
2026-02-05 14:40:58 -06:00
d9c05c3407 Merge branch 'main' of https://gitea.alexlebens.net/alexlebens/infrastructure
All checks were successful
lint-test-helm / lint-helm (push) Successful in 14s
render-manifests-push / render-manifests-push (push) Successful in 30s
renovate / renovate (push) Successful in 1m52s
2026-02-05 14:08:40 -06:00
327fbe7d62 chore(deps): update helm release argo-cd to v9.4.1 (#3749)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Successful in 2m8s
2026-02-05 20:07:21 +00:00
fbc9f0d885 chore(deps): update helm release tailscale-operator to v1.94.1 (#3739)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 25s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [tailscale-operator](https://github.com/tailscale/tailscale) | minor | `1.92.5` → `1.94.1` |

---

### Release Notes

<details>
<summary>tailscale/tailscale (tailscale-operator)</summary>

### [`v1.94.1`](https://github.com/tailscale/tailscale/releases/tag/v1.94.1)

[Compare Source](https://github.com/tailscale/tailscale/compare/v1.92.5...v1.94.1)

Please refer to the changelog available at <https://tailscale.com/changelog>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3739
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 20:03:50 +00:00
149e5a0ae2 chore(deps): update helm release headlamp to v0.40.0 (#3737)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 18s
renovate / renovate (push) Successful in 1m10s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [headlamp](https://headlamp.dev/) ([source](https://github.com/kubernetes-sigs/headlamp)) | minor | `0.39.0` → `0.40.0` |

---

### Release Notes

<details>
<summary>kubernetes-sigs/headlamp (headlamp)</summary>

### [`v0.40.0`](https://github.com/kubernetes-sigs/headlamp/releases/tag/v0.40.0): 0.40.0

[Compare Source](https://github.com/kubernetes-sigs/headlamp/compare/v0.39.0...v0.40.0)

####  Enhancements:

- Add icon and color configuration to clusters. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)
- Allow saving selected namespaces per cluster. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Add configurable keyboard shortcuts Thanks to [@&#8203;alokdangre](https://github.com/alokdangre)
- Add HTTPRoute support for Gateway API via new values and template. Thanks to [@&#8203;hxrshxz](https://github.com/hxrshxz)
- Display a8r.io service metadata in service views. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Make in-cluster context name configurable. Thanks to [@&#8203;iamhalje](https://github.com/iamhalje)
- Minimize activities blocking the main content when needed Thanks to [@&#8203;joaquimrocha](https://github.com/joaquimrocha)
- Add extraContainers field to Helm chart. Thanks to [@&#8203;lszczepaniak-XM](https://github.com/lszczepaniak-XM)
- Add ability to specify topologySpreadConstraints in Helm chart. Thanks to [@&#8203;irasnyd](https://github.com/irasnyd)
- Add volume mounts on plugin helper sidecar. Thanks to [@&#8203;martinbfrey](https://github.com/martinbfrey)
- Add meUserInfoURL to secrets template. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Improve French translation. Thanks to [@&#8203;arthurphilippe](https://github.com/arthurphilippe)
- Allow configuring log level via command line arg and environment variable. Thanks to [@&#8203;aadhil2k4](https://github.com/aadhil2k4)
- Add vertical snap positions for activities. Thanks to [@&#8203;kahirokunn](https://github.com/kahirokunn)
- Add deeplink compatibility for viewing Pod logs. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Unauthenticated users can now follow deeplinks. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Add debugging ephemeral container support. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)

##### Appearance Configuration per cluster

<img width="517" height="384" alt="Icon for cluster" src="https://github.com/user-attachments/assets/2a3cd260-262f-4b32-aaa6-c7e4679d7e3c" />
<img width="353" height="291" alt="Appearance Configuration per cluster" src="https://github.com/user-attachments/assets/7b007ddb-ae5c-4b07-b3fe-7ba0b0f5933b" />

##### Add service info from a8r.io metadata
<img width="2416" height="1396" alt="Add service info from a8r.io metadata" src="https://github.com/user-attachments/assets/8db2b504-93f5-4f74-9df0-b530d4f944e5" />

#### 🧩 Shipped Plugins
- Update shipped plugin Prometheus
   - Settings: Added a test connection button
   - Add i18n support
   - Upgrade kinvolk/headlamp-plugin to 0.13.1

#### 🐞 Bug fixes

- Fix showing corrupt file on Mac. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Fix checking for existing project names. Thanks to [@&#8203;pallava-joshi](https://github.com/pallava-joshi)
- Fix focus trapping when resource drawer is open. Thanks to [@&#8203;pallava-joshi](https://github.com/pallava-joshi)
- Fix MaxListenersExceededWarning. Thanks to [@&#8203;greedy-wudpeckr](https://github.com/greedy-wudpeckr)
- Fix getMainAPIGroup undefined error. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Fix headlamp-plugin package failing on dist subdirectories. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Fix Deployment.yaml template. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Fix NameValueTable spacing issue. Thanks to [@&#8203;alokdangre](https://github.com/alokdangre)
- Fix ARIA labels for input fields. Thanks to [@&#8203;vyncent-t](https://github.com/vyncent-t)
- Fix warning label color contrast. Thanks to [@&#8203;vyncent-t](https://github.com/vyncent-t)
- Fix many a11y issues. Thanks to [@&#8203;illume](https://github.com/illume)
- Implement ad-hoc signing for macOS arm64 to fix damaged app error. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Quote OIDC\_USE\_PKCE value to ensure it's a string. Thanks to [@&#8203;dihmandrake](https://github.com/dihmandrake)
- Fix package pattern in Helm chart release workflow. Thanks to [@&#8203;onedr0p](https://github.com/onedr0p)
- Fix CI failures. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Hide empty top bar overflow menu on small screens. Thanks to [@&#8203;d1vyanshu-kumar](https://github.com/d1vyanshu-kumar)

#### 💻 Development

- Add AGENTS.md for AI-assisted development. Thanks to [@&#8203;illume](https://github.com/illume)
- Add AGENTS.md to created plugins and bundle examples. Thanks to [@&#8203;illume](https://github.com/illume)
- Add app/ development documentation and linting/formatting scripts. Thanks to [@&#8203;illume](https://github.com/illume)
- Move yolossn from headlamp-reviewers to headlamp-maintainers. Thanks to [@&#8203;yolossn](https://github.com/yolossn)
- Bump headlamp-plugin to 0.13.0 in example plugins. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Bump Storybook version in frontend plugins. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Bump tar to 7.5.7. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Update dependencies. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Add fast-check property tests for unit parsers. Thanks to [@&#8203;illume](https://github.com/illume)
- Pin GitHub Actions by hash in draft-release workflow. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Skip chart release if it already exists. Thanks to [@&#8203;sniok](https://github.com/sniok)
- Remove unused frontend code. Thanks to [@&#8203;skoeva](https://github.com/skoeva)

#### 📖 Documentation

- Add ingress basic auth guide for in-cluster deployments. Thanks to [@&#8203;aaryan359](https://github.com/aaryan359)
- Add Quick Start for Contributors section to README. Thanks to [@&#8203;TRIVENI206](https://github.com/TRIVENI206)
- Add Talos to supported platforms. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)
- Fix Dex OIDC block indentation in values.yaml snippet. Thanks to [@&#8203;archups](https://github.com/archups)

#### 🛡️ Security

- Add [@&#8203;illume](https://github.com/illume) and [@&#8203;yolossn](https://github.com/yolossn) to SECURITY\_CONTACTS. Thanks to [@&#8203;illume](https://github.com/illume)

**Full Changelog**: <https://github.com/kubernetes-sigs/headlamp/compare/v0.39.0...v0.40.0>

***

<!-- end-release-notes -->

**Container image:** 🐳  [ghcr.io/headlamp-k8s/headlamp:v0.40.0](https://github.com/orgs/headlamp-k8s/packages/container/package/headlamp)
**Desktop Apps:**

🐧  [Flatpak / Linux (AMD64)](https://flathub.org/apps/details/io.kinvolk.Headlamp)
🐧  Linux AppImage [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-x64.AppImage), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-arm64.AppImage),  [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-armv7l.AppImage)
🐧 Linux Tarball [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-x64.tar.gz), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-arm64.tar.gz), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-armv7l.tar.gz)
🐧 Debian / Linux [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/headlamp_0.40.0-1_amd64.deb)
:green\_apple:  [Mac (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-mac-x64.dmg)
:green\_apple: [Mac (ARM/M1)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-mac-arm64.dmg)
:blue\_square:  [Windows (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-win-x64.exe)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3737
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 19:52:13 +00:00
8d5bdba52b chore(deps): update dependency headlamp-k8s/headlamp to v0.40.0 (#3733)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 21s
renovate / renovate (push) Failing after 2m53s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [headlamp-k8s/headlamp](https://github.com/headlamp-k8s/headlamp) | minor | `v0.39.0` → `v0.40.0` |

---

### Release Notes

<details>
<summary>headlamp-k8s/headlamp (headlamp-k8s/headlamp)</summary>

### [`v0.40.0`](https://github.com/kubernetes-sigs/headlamp/releases/tag/v0.40.0): 0.40.0

[Compare Source](https://github.com/headlamp-k8s/headlamp/compare/headlamp-helm-0.39.0...v0.40.0)

####  Enhancements:

- Add icon and color configuration to clusters. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)
- Allow saving selected namespaces per cluster. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Add configurable keyboard shortcuts Thanks to [@&#8203;alokdangre](https://github.com/alokdangre)
- Add HTTPRoute support for Gateway API via new values and template. Thanks to [@&#8203;hxrshxz](https://github.com/hxrshxz)
- Display a8r.io service metadata in service views. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Make in-cluster context name configurable. Thanks to [@&#8203;iamhalje](https://github.com/iamhalje)
- Minimize activities blocking the main content when needed Thanks to [@&#8203;joaquimrocha](https://github.com/joaquimrocha)
- Add extraContainers field to Helm chart. Thanks to [@&#8203;lszczepaniak-XM](https://github.com/lszczepaniak-XM)
- Add ability to specify topologySpreadConstraints in Helm chart. Thanks to [@&#8203;irasnyd](https://github.com/irasnyd)
- Add volume mounts on plugin helper sidecar. Thanks to [@&#8203;martinbfrey](https://github.com/martinbfrey)
- Add meUserInfoURL to secrets template. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Improve French translation. Thanks to [@&#8203;arthurphilippe](https://github.com/arthurphilippe)
- Allow configuring log level via command line arg and environment variable. Thanks to [@&#8203;aadhil2k4](https://github.com/aadhil2k4)
- Add vertical snap positions for activities. Thanks to [@&#8203;kahirokunn](https://github.com/kahirokunn)
- Add deeplink compatibility for viewing Pod logs. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Unauthenticated users can now follow deeplinks. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Add debugging ephemeral container support. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)

##### Appearance Configuration per cluster

<img width="517" height="384" alt="Icon for cluster" src="https://github.com/user-attachments/assets/2a3cd260-262f-4b32-aaa6-c7e4679d7e3c" />
<img width="353" height="291" alt="Appearance Configuration per cluster" src="https://github.com/user-attachments/assets/7b007ddb-ae5c-4b07-b3fe-7ba0b0f5933b" />

##### Add service info from a8r.io metadata
<img width="2416" height="1396" alt="Add service info from a8r.io metadata" src="https://github.com/user-attachments/assets/8db2b504-93f5-4f74-9df0-b530d4f944e5" />

#### 🧩 Shipped Plugins
- Update shipped plugin Prometheus
   - Settings: Added a test connection button
   - Add i18n support
   - Upgrade kinvolk/headlamp-plugin to 0.13.1

#### 🐞 Bug fixes

- Fix showing corrupt file on Mac. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Fix checking for existing project names. Thanks to [@&#8203;pallava-joshi](https://github.com/pallava-joshi)
- Fix focus trapping when resource drawer is open. Thanks to [@&#8203;pallava-joshi](https://github.com/pallava-joshi)
- Fix MaxListenersExceededWarning. Thanks to [@&#8203;greedy-wudpeckr](https://github.com/greedy-wudpeckr)
- Fix getMainAPIGroup undefined error. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Fix headlamp-plugin package failing on dist subdirectories. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Fix Deployment.yaml template. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Fix NameValueTable spacing issue. Thanks to [@&#8203;alokdangre](https://github.com/alokdangre)
- Fix ARIA labels for input fields. Thanks to [@&#8203;vyncent-t](https://github.com/vyncent-t)
- Fix warning label color contrast. Thanks to [@&#8203;vyncent-t](https://github.com/vyncent-t)
- Fix many a11y issues. Thanks to [@&#8203;illume](https://github.com/illume)
- Implement ad-hoc signing for macOS arm64 to fix damaged app error. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Quote OIDC\_USE\_PKCE value to ensure it's a string. Thanks to [@&#8203;dihmandrake](https://github.com/dihmandrake)
- Fix package pattern in Helm chart release workflow. Thanks to [@&#8203;onedr0p](https://github.com/onedr0p)
- Fix CI failures. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Hide empty top bar overflow menu on small screens. Thanks to [@&#8203;d1vyanshu-kumar](https://github.com/d1vyanshu-kumar)

#### 💻 Development

- Add AGENTS.md for AI-assisted development. Thanks to [@&#8203;illume](https://github.com/illume)
- Add AGENTS.md to created plugins and bundle examples. Thanks to [@&#8203;illume](https://github.com/illume)
- Add app/ development documentation and linting/formatting scripts. Thanks to [@&#8203;illume](https://github.com/illume)
- Move yolossn from headlamp-reviewers to headlamp-maintainers. Thanks to [@&#8203;yolossn](https://github.com/yolossn)
- Bump headlamp-plugin to 0.13.0 in example plugins. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Bump Storybook version in frontend plugins. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Bump tar to 7.5.7. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Update dependencies. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Add fast-check property tests for unit parsers. Thanks to [@&#8203;illume](https://github.com/illume)
- Pin GitHub Actions by hash in draft-release workflow. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Skip chart release if it already exists. Thanks to [@&#8203;sniok](https://github.com/sniok)
- Remove unused frontend code. Thanks to [@&#8203;skoeva](https://github.com/skoeva)

#### 📖 Documentation

- Add ingress basic auth guide for in-cluster deployments. Thanks to [@&#8203;aaryan359](https://github.com/aaryan359)
- Add Quick Start for Contributors section to README. Thanks to [@&#8203;TRIVENI206](https://github.com/TRIVENI206)
- Add Talos to supported platforms. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)
- Fix Dex OIDC block indentation in values.yaml snippet. Thanks to [@&#8203;archups](https://github.com/archups)

#### 🛡️ Security

- Add [@&#8203;illume](https://github.com/illume) and [@&#8203;yolossn](https://github.com/yolossn) to SECURITY\_CONTACTS. Thanks to [@&#8203;illume](https://github.com/illume)

**Full Changelog**: <https://github.com/kubernetes-sigs/headlamp/compare/v0.39.0...v0.40.0>

***

<!-- end-release-notes -->

**Container image:** 🐳  [ghcr.io/headlamp-k8s/headlamp:v0.40.0](https://github.com/orgs/headlamp-k8s/packages/container/package/headlamp)
**Desktop Apps:**

🐧  [Flatpak / Linux (AMD64)](https://flathub.org/apps/details/io.kinvolk.Headlamp)
🐧  Linux AppImage [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-x64.AppImage), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-arm64.AppImage),  [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-armv7l.AppImage)
🐧 Linux Tarball [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-x64.tar.gz), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-arm64.tar.gz), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-armv7l.tar.gz)
🐧 Debian / Linux [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/headlamp_0.40.0-1_amd64.deb)
:green\_apple:  [Mac (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-mac-x64.dmg)
:green\_apple: [Mac (ARM/M1)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-mac-arm64.dmg)
:blue\_square:  [Windows (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-win-x64.exe)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3733
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 19:48:24 +00:00
4d1ccd1164 chore(deps): update helm release cloudnative-pg to v0.27.1 (#3746)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Failing after 1m29s
2026-02-05 19:36:46 +00:00
ad9f4e7ef2 chore(deps): update dependency cloudnative-pg/cloudnative-pg to v1.28.1 (#3745)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 23s
renovate / renovate (push) Has been cancelled
2026-02-05 19:34:58 +00:00
afe7463a65 chore(deps): update gethomepage/homepage to v1.10.1 (#3734)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 13s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [gethomepage/homepage](https://github.com/gethomepage/homepage) | minor | `v1.9.0` → `v1.10.1` |
| [ghcr.io/gethomepage/homepage](https://github.com/gethomepage/homepage) | minor | `v1.9.0` → `v1.10.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>gethomepage/homepage (gethomepage/homepage)</summary>

### [`v1.10.1`](https://github.com/gethomepage/homepage/releases/tag/v1.10.1)

[Compare Source](https://github.com/gethomepage/homepage/compare/v1.10.0...v1.10.1)

##### What's Changed

- Chore: move to Zensical docs by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6279](https://github.com/gethomepage/homepage/pull/6279)
- Enhancement: better display of Arcane widget errors by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6281](https://github.com/gethomepage/homepage/pull/6281)

**Full Changelog**: <https://github.com/gethomepage/homepage/compare/v1.10.0...v1.10.1>

### [`v1.10.0`](https://github.com/gethomepage/homepage/releases/tag/v1.10.0)

[Compare Source](https://github.com/gethomepage/homepage/compare/v1.9.0...v1.10.0)

##### What's Changed

- Feature: dockhand service widget by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6229](https://github.com/gethomepage/homepage/pull/6229)
- Enhancement: handle Vikunja v1rc4 breaking changes by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6234](https://github.com/gethomepage/homepage/pull/6234)
- Enhancement: Add support for PWA icons and shortcuts by [@&#8203;kpau](https://github.com/kpau) in [#&#8203;6235](https://github.com/gethomepage/homepage/pull/6235)
- Feature: Dispatcharr widget by [@&#8203;muertocaloh](https://github.com/muertocaloh) in [#&#8203;6035](https://github.com/gethomepage/homepage/pull/6035)
- Enhancement: support jellyfin 10.12 breaking API changes by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6252](https://github.com/gethomepage/homepage/pull/6252)
- Fix: fix authentik widget login counts for v2 api by [@&#8203;jeliozver](https://github.com/jeliozver) in [#&#8203;6257](https://github.com/gethomepage/homepage/pull/6257)
- Chore(deps): Bump swr from 2.3.3 to 2.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6260](https://github.com/gethomepage/homepage/pull/6260)
- Chore(deps): Bump winston from 3.17.0 to 3.19.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6264](https://github.com/gethomepage/homepage/pull/6264)
- Chore(deps-dev): Bump next-js and eslint-config-next from 15.2.4 to 15.5.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6261](https://github.com/gethomepage/homepage/pull/6261)
- Chore(deps-dev): Bump tailwindcss from 4.0.9 to 4.1.18 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6262](https://github.com/gethomepage/homepage/pull/6262)
- Chore(deps): Bump i18next from 25.5.3 to 25.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6263](https://github.com/gethomepage/homepage/pull/6263)
- Chore: move to eslint by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6270](https://github.com/gethomepage/homepage/pull/6270)
- Enhancement: DNS fallback for Alpine/musl compatibility by [@&#8203;lexfrei](https://github.com/lexfrei) in [#&#8203;6265](https://github.com/gethomepage/homepage/pull/6265)
- Feature: arcane service widget by [@&#8203;kmendell](https://github.com/kmendell) in [#&#8203;6274](https://github.com/gethomepage/homepage/pull/6274)
- Chore: homepage tests by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6278](https://github.com/gethomepage/homepage/pull/6278)
- New Crowdin translations by GitHub Action by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;6220](https://github.com/gethomepage/homepage/pull/6220)

##### New Contributors

- [@&#8203;kpau](https://github.com/kpau) made their first contribution in [#&#8203;6235](https://github.com/gethomepage/homepage/pull/6235)
- [@&#8203;muertocaloh](https://github.com/muertocaloh) made their first contribution in [#&#8203;6035](https://github.com/gethomepage/homepage/pull/6035)
- [@&#8203;jeliozver](https://github.com/jeliozver) made their first contribution in [#&#8203;6257](https://github.com/gethomepage/homepage/pull/6257)
- [@&#8203;lexfrei](https://github.com/lexfrei) made their first contribution in [#&#8203;6265](https://github.com/gethomepage/homepage/pull/6265)
- [@&#8203;kmendell](https://github.com/kmendell) made their first contribution in [#&#8203;6274](https://github.com/gethomepage/homepage/pull/6274)

**Full Changelog**: <https://github.com/gethomepage/homepage/compare/v1.9.0...v1.10.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3734
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 19:30:30 +00:00
4e78ecddaf feat: enable l2 announcement 2026-02-05 13:17:52 -06:00
95ae20b9b9 feat: increment backup
All checks were successful
renovate / renovate (push) Successful in 10m34s
lint-test-helm / lint-helm (push) Successful in 3m58s
render-manifests-push / render-manifests-push (push) Successful in 4m48s
2026-02-05 12:59:34 -06:00
1db96b6c1b fix: downgrade
Some checks failed
lint-test-helm / lint-helm (push) Successful in 17s
render-manifests-push / render-manifests-push (push) Successful in 38s
renovate / renovate (push) Failing after 4m41s
2026-02-05 12:24:58 -06:00
deff987341 fix: set legacy host routing
Some checks failed
lint-test-helm / lint-helm (push) Failing after 2s
render-manifests-push / render-manifests-push (push) Successful in 3m30s
renovate / renovate (push) Successful in 7m10s
2026-02-05 11:27:44 -06:00
d5f7531c05 feat: add l2 announcement
All checks were successful
lint-test-helm / lint-helm (push) Successful in 20s
render-manifests-push / render-manifests-push (push) Successful in 50s
renovate / renovate (push) Successful in 1m31s
2026-02-04 22:13:45 -06:00
890e02b3f5 feat: specify ip
All checks were successful
lint-test-helm / lint-helm (push) Successful in 21s
render-manifests-push / render-manifests-push (push) Successful in 39s
renovate / renovate (push) Successful in 1m46s
2026-02-04 22:10:19 -06:00
98f40236de chore(deps): update dependency cilium/cilium to v1.19.0 (#3715)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 1m17s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium/cilium](https://github.com/cilium/cilium) | minor | `1.18.6` → `1.19.0` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium/cilium)</summary>

### [`v1.19.0`](https://github.com/cilium/cilium/releases/tag/v1.19.0): 1.19.0

[Compare Source](https://github.com/cilium/cilium/compare/1.18.6...1.19.0)

🎉 **Release Announcement** 🎉: We are excited to announce the [Cilium 1.19.0](https://github.com/cilium/cilium/releases/tag/v1.19.0) release!

A total of **2934 new commits** have been contributed to this release by a growing community of over **1010 developers** and over **23,600 GitHub stars**! 🤩

⚠️ You may need to take action during upgrade to Cilium v1.19 if you use Network Policies, Cluster Mesh, LoadBalancer IPAM or BGP. See the [Upgrade Guide](https://docs.cilium.io/en/v1.19/operations/upgrade/#upgrade-notes) for more details.

The full changelog can be found [here](https://github.com/cilium/cilium/blob/v1.19/CHANGELOG.md).

Here are some of the highlights:

- 🛡️ **Network Policy**
  - 🃏 **Multi-Level DNS Matches**: DNS Policies match pattern now support a wildcard prefix(*`**.`*) to match multilevel subdomain as pattern prefix. ([cilium/cilium#43420](https://github.com/cilium/cilium/pull/43420), [@&#8203;fristonio](https://github.com/fristonio))
  - 📡 **Match New Protocols**: You can now match VRRP and IGMP protocols in host firewall rules. ([cilium/cilium#39872](https://github.com/cilium/cilium/pull/39872), [@&#8203;aditighag](https://github.com/aditighag); [cilium/cilium#41949](https://github.com/cilium/cilium/pull/41949), [@&#8203;kyounghunJang](https://github.com/kyounghunJang))
  -  **Actively Deny Connections**: When Network Policies deny a connection, Cilium can return ICMPv4 "Destination unreachable" messages for a friendlier deny. ([cilium/cilium#41406](https://github.com/cilium/cilium/pull/41406), [@&#8203;antonipp](https://github.com/antonipp))
  - 🌐 **Select Clusters Explicitly**: When network policy selectors don't explicitly define a cluster for communication to be allowed, they will now default to only allowing the local cluster. ([cilium/cilium#40609](https://github.com/cilium/cilium/pull/40609), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 🔧 **Unlock Future Work**: This release brings several internal improvements to the network policy engine in preparation for features planned in the next Cilium minor release ([cilium/cilium#39906](https://github.com/cilium/cilium/pull/39906), [@&#8203;vipul-21](https://github.com/vipul-21); [cilium/cilium#42784](https://github.com/cilium/cilium/pull/42784), [cilium/cilium#42896](https://github.com/cilium/cilium/pull/42896), [@&#8203;jrajahalme](https://github.com/jrajahalme))
  - ⚠️ **Deprecate underutilized features**: To focus on solving common problems Cilium users face, this release deprecates the Kafka protocol match fields (beta), as well as the `ToRequires` and `FromRequires` policy fields. ([cilium/cilium#43167](https://github.com/cilium/cilium/pull/43167), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#40967](https://github.com/cilium/cilium/pull/40967), [@&#8203;TheBeeZee](https://github.com/TheBeeZee))

- 🔒 **Encryption & Authentication**
  - 🔐 **Encryption Strict Modes**: Both IPsec and WireGuard transparent encryption modes now support a "strict mode" to require traffic to be encrypted between nodes. Unencrypted traffic will be dropped in this mode. ([cilium/cilium#39239](https://github.com/cilium/cilium/pull/39239), [cilium/cilium#42115](https://github.com/cilium/cilium/pull/42115), [@&#8203;rgo3](https://github.com/rgo3), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))
  - 🚇 **Ztunnel Beta**: You can enroll namespaces into Ztunnel, which enables TCP connections between workloads to be transparently encrypted and authenticated. ([cilium/cilium#42766](https://github.com/cilium/cilium/pull/42766), [cilium/cilium#42819](https://github.com/cilium/cilium/pull/42819), [cilium/cilium#43227](https://github.com/cilium/cilium/pull/43227) and others,  [@&#8203;ldelossa](https://github.com/ldelossa), [@&#8203;rgo3](https://github.com/rgo3), [@&#8203;nddq](https://github.com/nddq))
  - 👥 **Mutual Authentication**: The out-of-band [Mutual Authentication](https://docs.cilium.io/en/v1.19.0/network/servicemesh/mutual-authentication/mutual-authentication/) feature is now disabled by default, pending community feedback. If you have a requirement for mTLS, consider trying the new Ztunnel integration. ([cilium/cilium#42665](https://github.com/cilium/cilium/pull/42665), [@&#8203;christarazi](https://github.com/christarazi))
  - ↪️ **Accelerate IPsec**: The IPsec encryption mode now supports BPF Host Routing for faster route lookups ([cilium/cilium#41997](https://github.com/cilium/cilium/pull/41997), [@&#8203;pchaigno](https://github.com/pchaigno))

- 🚠 **Networking**
  - 🚀  **BIG TCP in Tunnels**: Leverage upcoming Linux support for BIG TCP when communicating over UDP-based tunnels such as VXLAN and Geneve. ([cilium/cilium#43416](https://github.com/cilium/cilium/pull/43416), [@&#8203;gentoo-root](https://github.com/gentoo-root))
  - 🥌 **Packetization-Layer Path MTU Discovery**: Detect maximum transmission unit (MTU) sizes for network paths using TCP. ([cilium/cilium#42012](https://github.com/cilium/cilium/pull/42012), [cilium/cilium#43710](https://github.com/cilium/cilium/pull/43710), [@&#8203;tommyp1ckles](https://github.com/tommyp1ckles))
  - 🚆 **IPv6 Underlay**: You can now choose IPv6 for the tunnel underlay address family on dual-stack clusters. ([cilium/cilium#40324](https://github.com/cilium/cilium/pull/40324), [@&#8203;pchaigno](https://github.com/pchaigno))
  - 🏷️ **Multi-Pool IPAM is ready for wider use**: Update the Multi-Pool IPAM feature to work with IPsec and direct routing modes, and promote it from Beta to Stable. ([cilium/cilium#40460](https://github.com/cilium/cilium/pull/40460), [cilium/cilium#42191](https://github.com/cilium/cilium/pull/42191), [@&#8203;pippolo84](https://github.com/pippolo84))
  - 🎭 **More Configurable Masquerade**: IP Masquerade configuration can now be customized for traffic sent to nodes in other IP subnets, and addresses in IPAM pools can be excluded from masquerade ([cilium/cilium#37568](https://github.com/cilium/cilium/pull/37568), [@&#8203;behzad-mir](https://github.com/behzad-mir); [cilium/cilium#43380](https://github.com/cilium/cilium/pull/43380), [@&#8203;alimehrabikoshki](https://github.com/alimehrabikoshki))

- 🕸️ **Services and Service Mesh**
  - 📣 **Layer-2 Announcements**: Add support for Neighbor Discovery Advertisements for IPv6 Layer-2 Announcements. ([cilium/cilium#39648](https://github.com/cilium/cilium/pull/39648), [@&#8203;msune](https://github.com/msune))
  - 🔁 **IPv6 Service Loopback**: Pods can now connect to themselves via a Kubernetes "loopback service" using IPv6. ([cilium/cilium#39594](https://github.com/cilium/cilium/pull/39594), [@&#8203;saiaunghlyanhtet](https://github.com/saiaunghlyanhtet))
  - ⛩️ **Gateway API Enhancements**: Cilium's GAMMA support now includes support for using GRPCRoute as well as HTTPRoute. ([cilium/cilium#41936](https://github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://github.com/youngnick))

- 🛣️ **Border Gateway Protocol (BGP)**
  - 🔌 **Advertise Addresses from Interfaces**: There's a new Interface BGP advertisement type that allows advertisement of IPs assigned on local interfaces. This can be useful for example in multi-homing setups, where a common node's loopback address can be advertised via multiple BGP sessions over different network interfaces. ([cilium/cilium#42469](https://github.com/cilium/cilium/pull/42469), [@&#8203;rastislavs](https://github.com/rastislavs))
  - ✉️ **Override Source IP addresses**: You can override the auto-generated BGP session source IP with the IP address applied on the configured `sourceInterface` to allow binding the BGP connection to the loopback address which is not tied to the specific physical interface's lifecycle ([cilium/cilium#42583](https://github.com/cilium/cilium/pull/42583), [@&#8203;rastislavs](https://github.com/rastislavs))
  - 🔁 **Withdraw Empty Routes**: Optionally withdraw BGP routes when a service has 0 endpoints, to allow balancing to a different DC/cluster with `externalTrafficPolicy=Cluster` ([cilium/cilium#40717](https://github.com/cilium/cilium/pull/40717), [@&#8203;oblazek](https://github.com/oblazek))
  - ⚠️ **Move to `cilium.io/v2` API**: The support for the older `CiliumBGPPeeringPolicy` v1 API is now removed and should be replaced with v2 APIs. ([cilium/cilium#42278](https://github.com/cilium/cilium/pull/42278), [@&#8203;rastislavs](https://github.com/rastislavs))

- 🛰️ **Observability**
  - 🔬 **Trace IP Options**: Configure Cilium and Hubble to trace specific packets through the cluster using IP Options. ([cilium/cilium#41306](https://github.com/cilium/cilium/pull/41306), [@&#8203;Bigdelle](https://github.com/Bigdelle))
  - 🚩 **Filter Encrypted Flows**: Filter flows when using the `hubble` command line to understand the encryption status of the traffic, either `--encrypted` or `--unencrypted`. ([cilium/cilium#43096](https://github.com/cilium/cilium/pull/43096), [@&#8203;SRodi](https://github.com/SRodi))
  - 🔖 **Tag Drops with Policy Names**: Hubble v1.Events drop messages now include which Network Policy caused the drop. ([cilium/cilium#41693](https://github.com/cilium/cilium/pull/41693), [@&#8203;41ks](https://github.com/41ks))

- 🌅 **Performance and Scale**
  -  **Faster Network Policy Computation**: Improve Cilium resource usage for handling selectors in network policies. ([cilium/cilium#42008](https://github.com/cilium/cilium/pull/42008), [@&#8203;jrajahalme](https://github.com/jrajahalme); [cilium/cilium#42580](https://github.com/cilium/cilium/pull/42580), [@&#8203;odinuge](https://github.com/odinuge))
  - 🔌 **More Efficient Connection Tracking**: Several improvements have been made to reduce the number of connections being tracked by Cilium, particularly when using Geneve, VXLAN or WireGuard. ([cilium/cilium#38782](https://github.com/cilium/cilium/pull/38782), [@&#8203;BenoitKnecht](https://github.com/BenoitKnecht); [cilium/cilium#41990](https://github.com/cilium/cilium/pull/41990), [@&#8203;bersoare](https://github.com/bersoare))
  - 💾 **Better Scale in AWS**: Reduce memory usage for cilium-operator in large AWS environments with many resources. ([cilium/cilium#42529](https://github.com/cilium/cilium/pull/42529), [@&#8203;liyihuang](https://github.com/liyihuang))

- ⚙️ **Operations**
  - 📦 **Access Helm charts via Registry**: Helm charts are also available under `quay.io/cilium/charts/cilium` ([cilium/cilium#43624](https://github.com/cilium/cilium/pull/43624), [@&#8203;aanm](https://github.com/aanm))
  - 📊 **Metrics Encryption**: Add TLS/mTLS support for Prometheus metrics exposed by the Cilium Operator. ([cilium/cilium#42077](https://github.com/cilium/cilium/pull/42077), [@&#8203;phuhung273](https://github.com/phuhung273))
  - 🤖 **Easier Multi-Cluster install**: There's now support for auto-installing the Custom Resource Definitions (CRDs) for Multi-Cluster  Services (MCS). ([cilium/cilium#40729](https://github.com/cilium/cilium/pull/40729), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 📜 **Simpler Certificate Management**: Streamline Cluster Mesh and Hubble certificate generation when using GitOps approaches. ([cilium/cilium#42298](https://github.com/cilium/cilium/pull/42298), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 🛠️ **Cilium dependencies** were updated to Kubernetes v1.35, Envoy v1.35, Gateway API v1.4, and GoBGP v3.37. ([cilium/cilium#43422](https://github.com/cilium/cilium/pull/43422), [@&#8203;aanm](https://github.com/aanm); [cilium/cilium#40569](https://github.com/cilium/cilium/pull/40569), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#41936](https://github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://github.com/youngnick); [cilium/cilium#42824](https://github.com/cilium/cilium/pull/42824), [@&#8203;rastislavs](https://github.com/rastislavs)).

- 🏠 **Community**
  - ❤️ **Production Case Studies**: Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
  - 📰 See studies with [Airbnb](https://youtu.be/7KHenRXNGAw?si=ldTS-X_W0svxo429\&t=546), [Cloudera](https://aws.amazon.com/blogs/migration-and-modernization/scaling-clouderas-development-environment-leveraging-amazon-eks-karpenter-bottlerocket-and-cilium-for-hybrid-cloud/),[ Cybozu](https://www.cncf.io/case-studies/cybozu/), [ESnet](https://www.cncf.io/case-studies/esnet/),[ Nutanix](https://www.cncf.io/case-studies/nutanix/), [OVHcloud](https://corporate.ovhcloud.com/en-gb/newsroom/news/ovhcloud-managed-kubernetes-service-standard-3az/), [TikTok](https://www.youtube.com/watch?v=y0qlhiKtDGo), [University of Wisconsin–Madison](https://www.cncf.io/case-studies/university-of-wisconsin-madison/).
  - 🇺🇸 **Atlanta Events**: The community gathered at [CiliumCon](https://www.youtube.com/playlist?list=PLDg_GiBbAx-mOnWuzd_NXoRfuW9HZAxeZ) and the [Cilium Developer Summit](https://github.com/cilium/dev-summits/blob/main/2025-NA/README.md) in Atlanta.
  - 🇳🇱 **Amsterdam Events**: Meet us at the upcoming [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/) and [Cilium Developer Summit](https://github.com/cilium/dev-summits/tree/main/2026-EU) in Amsterdam, March 23-27. [Read more](https://cilium.io/blog/2026/01/23/cilium-at-kubecon-eu-2026/) about where to find Cilium during the show.
  - 🔟 **Cilium is 10**: Read the [2025 Cilium Annual Report](https://www.cncf.io/wp-content/uploads/2025/12/cilium-annual-report-2025-final.pdf) to see the latest project milestones, a decade on from its first commit.

To keep up to date with all the latest Cilium releases, join #release 🎉

:birthday::heart::heart::heart:🎂
This is a very special release for Cilium, as it celebrates **10 years** since the first commit. We couldn’t be more proud of what this project has accomplished. All the GitHub issues, pull requests, reviews, stars, forks, Docker pulls, Helm installs, Kubernetes applies, CI runs, bug reports, design docs, discussions, meetings, Slack messages, YouTube streams, eCHO episodes, conference talks, blog posts, demos, and presentations have made the project the success it is today.
:birthday::heart::heart:❤️🎂

#### Docker Manifests

##### cilium

`quay.io/cilium/cilium:v1.19.0@&#8203;sha256:be9f8571c2e114b3e12e41f785f2356ade703b2eac936aa878805565f0468c60`

##### clustermesh-apiserver

`quay.io/cilium/clustermesh-apiserver:v1.19.0@&#8203;sha256:0e3b89fdb116eb0f5579fe8ee3fabb1a7c4d97987a1ae927491d9185785d4a49`

##### docker-plugin

`quay.io/cilium/docker-plugin:v1.19.0@&#8203;sha256:35727047384f3d7a2684885003b266bf7a7add8fc66ca564b222f71c16057f50`

##### hubble-relay

`quay.io/cilium/hubble-relay:v1.19.0@&#8203;sha256:7f17e5bb51a9f35bbc8e7a9ad5e347f03ff8003c2e5cc81171e8727a10bf03b4`

##### operator-alibabacloud

`quay.io/cilium/operator-alibabacloud:v1.19.0@&#8203;sha256:5cb3d6981c233616037f3e13b5bc0020d114ad8db1b7360618b224e4c0b02ef0`

##### operator-aws

`quay.io/cilium/operator-aws:v1.19.0@&#8203;sha256:7a236ae256a4fbd3f72d516921131eba5b43f401ba37cdee5cd0e8c26f9263e6`

##### operator-azure

`quay.io/cilium/operator-azure:v1.19.0@&#8203;sha256:6ae7e0d75c74836af3600b775201c89ea7fcc13d6e08fdb0c52927309f31cd2a`

##### operator-generic

`quay.io/cilium/operator-generic:v1.19.0@&#8203;sha256:5b04006015e5800307dc6314676edc4c0bb7ac2fc7848be2b94b43bb030ab648`

##### operator

`quay.io/cilium/operator:v1.19.0@&#8203;sha256:deca84f442752dca0745dd09b13e8004569414839019ad79ac58f9fcaa3b9d65`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjMiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3715
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 04:00:17 +00:00
5490094d1a chore(deps): update helm release cilium to v1.19.0 (#3699)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | minor | `1.18.6` → `1.19.0` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

### [`v1.19.0`](https://github.com/cilium/cilium/releases/tag/v1.19.0): 1.19.0

[Compare Source](https://github.com/cilium/cilium/compare/1.18.6...1.19.0)

🎉 **Release Announcement** 🎉: We are excited to announce the [Cilium 1.19.0](https://github.com/cilium/cilium/releases/tag/v1.19.0) release!

A total of **2934 new commits** have been contributed to this release by a growing community of over **1010 developers** and over **23,600 GitHub stars**! 🤩

⚠️ You may need to take action during upgrade to Cilium v1.19 if you use Network Policies, Cluster Mesh, LoadBalancer IPAM or BGP. See the [Upgrade Guide](https://docs.cilium.io/en/v1.19/operations/upgrade/#upgrade-notes) for more details.

The full changelog can be found [here](https://github.com/cilium/cilium/blob/v1.19/CHANGELOG.md).

Here are some of the highlights:

- 🛡️ **Network Policy**
  - 🃏 **Multi-Level DNS Matches**: DNS Policies match pattern now support a wildcard prefix(*`**.`*) to match multilevel subdomain as pattern prefix. ([cilium/cilium#43420](https://github.com/cilium/cilium/pull/43420), [@&#8203;fristonio](https://github.com/fristonio))
  - 📡 **Match New Protocols**: You can now match VRRP and IGMP protocols in host firewall rules. ([cilium/cilium#39872](https://github.com/cilium/cilium/pull/39872), [@&#8203;aditighag](https://github.com/aditighag); [cilium/cilium#41949](https://github.com/cilium/cilium/pull/41949), [@&#8203;kyounghunJang](https://github.com/kyounghunJang))
  -  **Actively Deny Connections**: When Network Policies deny a connection, Cilium can return ICMPv4 "Destination unreachable" messages for a friendlier deny. ([cilium/cilium#41406](https://github.com/cilium/cilium/pull/41406), [@&#8203;antonipp](https://github.com/antonipp))
  - 🌐 **Select Clusters Explicitly**: When network policy selectors don't explicitly define a cluster for communication to be allowed, they will now default to only allowing the local cluster. ([cilium/cilium#40609](https://github.com/cilium/cilium/pull/40609), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 🔧 **Unlock Future Work**: This release brings several internal improvements to the network policy engine in preparation for features planned in the next Cilium minor release ([cilium/cilium#39906](https://github.com/cilium/cilium/pull/39906), [@&#8203;vipul-21](https://github.com/vipul-21); [cilium/cilium#42784](https://github.com/cilium/cilium/pull/42784), [cilium/cilium#42896](https://github.com/cilium/cilium/pull/42896), [@&#8203;jrajahalme](https://github.com/jrajahalme))
  - ⚠️ **Deprecate underutilized features**: To focus on solving common problems Cilium users face, this release deprecates the Kafka protocol match fields (beta), as well as the `ToRequires` and `FromRequires` policy fields. ([cilium/cilium#43167](https://github.com/cilium/cilium/pull/43167), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#40967](https://github.com/cilium/cilium/pull/40967), [@&#8203;TheBeeZee](https://github.com/TheBeeZee))

- 🔒 **Encryption & Authentication**
  - 🔐 **Encryption Strict Modes**: Both IPsec and WireGuard transparent encryption modes now support a "strict mode" to require traffic to be encrypted between nodes. Unencrypted traffic will be dropped in this mode. ([cilium/cilium#39239](https://github.com/cilium/cilium/pull/39239), [cilium/cilium#42115](https://github.com/cilium/cilium/pull/42115), [@&#8203;rgo3](https://github.com/rgo3), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))
  - 🚇 **Ztunnel Beta**: You can enroll namespaces into Ztunnel, which enables TCP connections between workloads to be transparently encrypted and authenticated. ([cilium/cilium#42766](https://github.com/cilium/cilium/pull/42766), [cilium/cilium#42819](https://github.com/cilium/cilium/pull/42819), [cilium/cilium#43227](https://github.com/cilium/cilium/pull/43227) and others,  [@&#8203;ldelossa](https://github.com/ldelossa), [@&#8203;rgo3](https://github.com/rgo3), [@&#8203;nddq](https://github.com/nddq))
  - 👥 **Mutual Authentication**: The out-of-band [Mutual Authentication](https://docs.cilium.io/en/v1.19.0/network/servicemesh/mutual-authentication/mutual-authentication/) feature is now disabled by default, pending community feedback. If you have a requirement for mTLS, consider trying the new Ztunnel integration. ([cilium/cilium#42665](https://github.com/cilium/cilium/pull/42665), [@&#8203;christarazi](https://github.com/christarazi))
  - ↪️ **Accelerate IPsec**: The IPsec encryption mode now supports BPF Host Routing for faster route lookups ([cilium/cilium#41997](https://github.com/cilium/cilium/pull/41997), [@&#8203;pchaigno](https://github.com/pchaigno))

- 🚠 **Networking**
  - 🚀  **BIG TCP in Tunnels**: Leverage upcoming Linux support for BIG TCP when communicating over UDP-based tunnels such as VXLAN and Geneve. ([cilium/cilium#43416](https://github.com/cilium/cilium/pull/43416), [@&#8203;gentoo-root](https://github.com/gentoo-root))
  - 🥌 **Packetization-Layer Path MTU Discovery**: Detect maximum transmission unit (MTU) sizes for network paths using TCP. ([cilium/cilium#42012](https://github.com/cilium/cilium/pull/42012), [cilium/cilium#43710](https://github.com/cilium/cilium/pull/43710), [@&#8203;tommyp1ckles](https://github.com/tommyp1ckles))
  - 🚆 **IPv6 Underlay**: You can now choose IPv6 for the tunnel underlay address family on dual-stack clusters. ([cilium/cilium#40324](https://github.com/cilium/cilium/pull/40324), [@&#8203;pchaigno](https://github.com/pchaigno))
  - 🏷️ **Multi-Pool IPAM is ready for wider use**: Update the Multi-Pool IPAM feature to work with IPsec and direct routing modes, and promote it from Beta to Stable. ([cilium/cilium#40460](https://github.com/cilium/cilium/pull/40460), [cilium/cilium#42191](https://github.com/cilium/cilium/pull/42191), [@&#8203;pippolo84](https://github.com/pippolo84))
  - 🎭 **More Configurable Masquerade**: IP Masquerade configuration can now be customized for traffic sent to nodes in other IP subnets, and addresses in IPAM pools can be excluded from masquerade ([cilium/cilium#37568](https://github.com/cilium/cilium/pull/37568), [@&#8203;behzad-mir](https://github.com/behzad-mir); [cilium/cilium#43380](https://github.com/cilium/cilium/pull/43380), [@&#8203;alimehrabikoshki](https://github.com/alimehrabikoshki))

- 🕸️ **Services and Service Mesh**
  - 📣 **Layer-2 Announcements**: Add support for Neighbor Discovery Advertisements for IPv6 Layer-2 Announcements. ([cilium/cilium#39648](https://github.com/cilium/cilium/pull/39648), [@&#8203;msune](https://github.com/msune))
  - 🔁 **IPv6 Service Loopback**: Pods can now connect to themselves via a Kubernetes "loopback service" using IPv6. ([cilium/cilium#39594](https://github.com/cilium/cilium/pull/39594), [@&#8203;saiaunghlyanhtet](https://github.com/saiaunghlyanhtet))
  - ⛩️ **Gateway API Enhancements**: Cilium's GAMMA support now includes support for using GRPCRoute as well as HTTPRoute. ([cilium/cilium#41936](https://github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://github.com/youngnick))

- 🛣️ **Border Gateway Protocol (BGP)**
  - 🔌 **Advertise Addresses from Interfaces**: There's a new Interface BGP advertisement type that allows advertisement of IPs assigned on local interfaces. This can be useful for example in multi-homing setups, where a common node's loopback address can be advertised via multiple BGP sessions over different network interfaces. ([cilium/cilium#42469](https://github.com/cilium/cilium/pull/42469), [@&#8203;rastislavs](https://github.com/rastislavs))
  - ✉️ **Override Source IP addresses**: You can override the auto-generated BGP session source IP with the IP address applied on the configured `sourceInterface` to allow binding the BGP connection to the loopback address which is not tied to the specific physical interface's lifecycle ([cilium/cilium#42583](https://github.com/cilium/cilium/pull/42583), [@&#8203;rastislavs](https://github.com/rastislavs))
  - 🔁 **Withdraw Empty Routes**: Optionally withdraw BGP routes when a service has 0 endpoints, to allow balancing to a different DC/cluster with `externalTrafficPolicy=Cluster` ([cilium/cilium#40717](https://github.com/cilium/cilium/pull/40717), [@&#8203;oblazek](https://github.com/oblazek))
  - ⚠️ **Move to `cilium.io/v2` API**: The support for the older `CiliumBGPPeeringPolicy` v1 API is now removed and should be replaced with v2 APIs. ([cilium/cilium#42278](https://github.com/cilium/cilium/pull/42278), [@&#8203;rastislavs](https://github.com/rastislavs))

- 🛰️ **Observability**
  - 🔬 **Trace IP Options**: Configure Cilium and Hubble to trace specific packets through the cluster using IP Options. ([cilium/cilium#41306](https://github.com/cilium/cilium/pull/41306), [@&#8203;Bigdelle](https://github.com/Bigdelle))
  - 🚩 **Filter Encrypted Flows**: Filter flows when using the `hubble` command line to understand the encryption status of the traffic, either `--encrypted` or `--unencrypted`. ([cilium/cilium#43096](https://github.com/cilium/cilium/pull/43096), [@&#8203;SRodi](https://github.com/SRodi))
  - 🔖 **Tag Drops with Policy Names**: Hubble v1.Events drop messages now include which Network Policy caused the drop. ([cilium/cilium#41693](https://github.com/cilium/cilium/pull/41693), [@&#8203;41ks](https://github.com/41ks))

- 🌅 **Performance and Scale**
  -  **Faster Network Policy Computation**: Improve Cilium resource usage for handling selectors in network policies. ([cilium/cilium#42008](https://github.com/cilium/cilium/pull/42008), [@&#8203;jrajahalme](https://github.com/jrajahalme); [cilium/cilium#42580](https://github.com/cilium/cilium/pull/42580), [@&#8203;odinuge](https://github.com/odinuge))
  - 🔌 **More Efficient Connection Tracking**: Several improvements have been made to reduce the number of connections being tracked by Cilium, particularly when using Geneve, VXLAN or WireGuard. ([cilium/cilium#38782](https://github.com/cilium/cilium/pull/38782), [@&#8203;BenoitKnecht](https://github.com/BenoitKnecht); [cilium/cilium#41990](https://github.com/cilium/cilium/pull/41990), [@&#8203;bersoare](https://github.com/bersoare))
  - 💾 **Better Scale in AWS**: Reduce memory usage for cilium-operator in large AWS environments with many resources. ([cilium/cilium#42529](https://github.com/cilium/cilium/pull/42529), [@&#8203;liyihuang](https://github.com/liyihuang))

- ⚙️ **Operations**
  - 📦 **Access Helm charts via Registry**: Helm charts are also available under `quay.io/cilium/charts/cilium` ([cilium/cilium#43624](https://github.com/cilium/cilium/pull/43624), [@&#8203;aanm](https://github.com/aanm))
  - 📊 **Metrics Encryption**: Add TLS/mTLS support for Prometheus metrics exposed by the Cilium Operator. ([cilium/cilium#42077](https://github.com/cilium/cilium/pull/42077), [@&#8203;phuhung273](https://github.com/phuhung273))
  - 🤖 **Easier Multi-Cluster install**: There's now support for auto-installing the Custom Resource Definitions (CRDs) for Multi-Cluster  Services (MCS). ([cilium/cilium#40729](https://github.com/cilium/cilium/pull/40729), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 📜 **Simpler Certificate Management**: Streamline Cluster Mesh and Hubble certificate generation when using GitOps approaches. ([cilium/cilium#42298](https://github.com/cilium/cilium/pull/42298), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 🛠️ **Cilium dependencies** were updated to Kubernetes v1.35, Envoy v1.35, Gateway API v1.4, and GoBGP v3.37. ([cilium/cilium#43422](https://github.com/cilium/cilium/pull/43422), [@&#8203;aanm](https://github.com/aanm); [cilium/cilium#40569](https://github.com/cilium/cilium/pull/40569), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#41936](https://github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://github.com/youngnick); [cilium/cilium#42824](https://github.com/cilium/cilium/pull/42824), [@&#8203;rastislavs](https://github.com/rastislavs)).

- 🏠 **Community**
  - ❤️ **Production Case Studies**: Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
  - 📰 See studies with [Airbnb](https://youtu.be/7KHenRXNGAw?si=ldTS-X_W0svxo429\&t=546), [Cloudera](https://aws.amazon.com/blogs/migration-and-modernization/scaling-clouderas-development-environment-leveraging-amazon-eks-karpenter-bottlerocket-and-cilium-for-hybrid-cloud/),[ Cybozu](https://www.cncf.io/case-studies/cybozu/), [ESnet](https://www.cncf.io/case-studies/esnet/),[ Nutanix](https://www.cncf.io/case-studies/nutanix/), [OVHcloud](https://corporate.ovhcloud.com/en-gb/newsroom/news/ovhcloud-managed-kubernetes-service-standard-3az/), [TikTok](https://www.youtube.com/watch?v=y0qlhiKtDGo), [University of Wisconsin–Madison](https://www.cncf.io/case-studies/university-of-wisconsin-madison/).
  - 🇺🇸 **Atlanta Events**: The community gathered at [CiliumCon](https://www.youtube.com/playlist?list=PLDg_GiBbAx-mOnWuzd_NXoRfuW9HZAxeZ) and the [Cilium Developer Summit](https://github.com/cilium/dev-summits/blob/main/2025-NA/README.md) in Atlanta.
  - 🇳🇱 **Amsterdam Events**: Meet us at the upcoming [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/) and [Cilium Developer Summit](https://github.com/cilium/dev-summits/tree/main/2026-EU) in Amsterdam, March 23-27. [Read more](https://cilium.io/blog/2026/01/23/cilium-at-kubecon-eu-2026/) about where to find Cilium during the show.
  - 🔟 **Cilium is 10**: Read the [2025 Cilium Annual Report](https://www.cncf.io/wp-content/uploads/2025/12/cilium-annual-report-2025-final.pdf) to see the latest project milestones, a decade on from its first commit.

To keep up to date with all the latest Cilium releases, join #release 🎉

:birthday::heart::heart::heart:🎂
This is a very special release for Cilium, as it celebrates **10 years** since the first commit. We couldn’t be more proud of what this project has accomplished. All the GitHub issues, pull requests, reviews, stars, forks, Docker pulls, Helm installs, Kubernetes applies, CI runs, bug reports, design docs, discussions, meetings, Slack messages, YouTube streams, eCHO episodes, conference talks, blog posts, demos, and presentations have made the project the success it is today.
:birthday::heart::heart:❤️🎂

##### Docker Manifests

##### cilium

`quay.io/cilium/cilium:v1.19.0@&#8203;sha256:be9f8571c2e114b3e12e41f785f2356ade703b2eac936aa878805565f0468c60`

##### clustermesh-apiserver

`quay.io/cilium/clustermesh-apiserver:v1.19.0@&#8203;sha256:0e3b89fdb116eb0f5579fe8ee3fabb1a7c4d97987a1ae927491d9185785d4a49`

##### docker-plugin

`quay.io/cilium/docker-plugin:v1.19.0@&#8203;sha256:35727047384f3d7a2684885003b266bf7a7add8fc66ca564b222f71c16057f50`

##### hubble-relay

`quay.io/cilium/hubble-relay:v1.19.0@&#8203;sha256:7f17e5bb51a9f35bbc8e7a9ad5e347f03ff8003c2e5cc81171e8727a10bf03b4`

##### operator-alibabacloud

`quay.io/cilium/operator-alibabacloud:v1.19.0@&#8203;sha256:5cb3d6981c233616037f3e13b5bc0020d114ad8db1b7360618b224e4c0b02ef0`

##### operator-aws

`quay.io/cilium/operator-aws:v1.19.0@&#8203;sha256:7a236ae256a4fbd3f72d516921131eba5b43f401ba37cdee5cd0e8c26f9263e6`

##### operator-azure

`quay.io/cilium/operator-azure:v1.19.0@&#8203;sha256:6ae7e0d75c74836af3600b775201c89ea7fcc13d6e08fdb0c52927309f31cd2a`

##### operator-generic

`quay.io/cilium/operator-generic:v1.19.0@&#8203;sha256:5b04006015e5800307dc6314676edc4c0bb7ac2fc7848be2b94b43bb030ab648`

##### operator

`quay.io/cilium/operator:v1.19.0@&#8203;sha256:deca84f442752dca0745dd09b13e8004569414839019ad79ac58f9fcaa3b9d65`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3699
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 03:59:16 +00:00
19ffd3bb2f feat: switch gateway
All checks were successful
lint-test-helm / lint-helm (push) Successful in 16s
render-manifests-push / render-manifests-push (push) Successful in 50s
lint-test-docker / lint-docker-compose (push) Successful in 1m20s
renovate / renovate (push) Successful in 1m45s
2026-02-04 21:55:11 -06:00
b973102274 feat: change address
All checks were successful
lint-test-helm / lint-helm (push) Successful in 21s
render-manifests-push / render-manifests-push (push) Successful in 48s
renovate / renovate (push) Successful in 1m50s
2026-02-04 21:53:49 -06:00
c1860ad8fd feat: add address
All checks were successful
lint-test-helm / lint-helm (push) Successful in 18s
render-manifests-push / render-manifests-push (push) Successful in 30s
renovate / renovate (push) Successful in 1m44s
2026-02-04 21:45:55 -06:00
cc1bab42ae feat: enable gateway
All checks were successful
lint-test-helm / lint-helm (push) Successful in 16s
render-manifests-push / render-manifests-push (push) Successful in 31s
renovate / renovate (push) Successful in 1m33s
2026-02-04 21:34:23 -06:00
521184fa37 feat: upgrade crd before 1.19
Some checks failed
lint-test-helm / lint-helm (push) Successful in 14s
render-manifests-push / render-manifests-push (push) Successful in 48s
renovate / renovate (push) Has been cancelled
2026-02-04 21:33:03 -06:00
470520fb2f feat: use slim image
All checks were successful
lint-test-helm / lint-helm (push) Successful in 13s
render-manifests-push / render-manifests-push (push) Successful in 42s
renovate / renovate (push) Successful in 2m3s
2026-02-04 21:25:52 -06:00
5a91c1d870 chore(deps): update nginx docker tag to v1.29.5 (#3724)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 1m23s
render-manifests-dispatch / render-manifests-dispatch (push) Successful in 22m36s
2026-02-05 02:02:54 +00:00
95faf21426 chore(deps): update hashicorp/vault docker tag to v1.21.3 (#3723)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-02-05 02:02:44 +00:00
c1e1199008 chore(deps): update plexguide/huntarr to v9.1.12 (#3721)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 15s
renovate / renovate (push) Successful in 2m11s
2026-02-04 21:02:34 +00:00
a34b97702c chore(deps): update ghcr.io/home-assistant/home-assistant docker tag to v2026.2.0 (#3720)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 18s
renovate / renovate (push) Successful in 2m10s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/home-assistant/home-assistant](https://www.home-assistant.io/) ([source](https://github.com/home-assistant/core)) | minor | `2026.1.3` → `2026.2.0` |

---

### Release Notes

<details>
<summary>home-assistant/core (ghcr.io/home-assistant/home-assistant)</summary>

### [`v2026.2.0`](https://github.com/home-assistant/core/releases/tag/2026.2.0)

[Compare Source](https://github.com/home-assistant/core/compare/2026.1.3...2026.2.0)

<https://www.home-assistant.io/blog/2026/02/04/release-20262/>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3720
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 20:12:33 +00:00
a0284d28f0 chore(deps): update dependency home-assistant/core to v2026.2.0 (#3719)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 22s
renovate / renovate (push) Successful in 2m6s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [home-assistant/core](https://github.com/home-assistant/core) | minor | `2026.1.3` → `2026.2.0` |

---

### Release Notes

<details>
<summary>home-assistant/core (home-assistant/core)</summary>

### [`v2026.2.0`](https://github.com/home-assistant/core/releases/tag/2026.2.0)

[Compare Source](https://github.com/home-assistant/core/compare/2026.1.3...2026.2.0)

<https://www.home-assistant.io/blog/2026/02/04/release-20262/>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3719
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 20:08:08 +00:00
be4bb8466d chore(deps): update dependency clidey/whodb to v0.91.0 (#3718)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clidey/whodb](https://github.com/clidey/whodb) | minor | `0.90.0` → `0.91.0` |

---

### Release Notes

<details>
<summary>clidey/whodb (clidey/whodb)</summary>

### [`v0.91.0`](https://github.com/clidey/whodb/releases/tag/0.91.0)

[Compare Source](https://github.com/clidey/whodb/compare/0.90.0...0.91.0)

- SSL Support - our biggest change of the year so far! We've added support for the various SSL modes that the databases generally support
- Ability to disable the credential form via env key WHODB\_DISABLE\_CREDENTIAL\_FORM=true and expose only pre-defined env proifles (thanks to [@&#8203;orangutangent](https://github.com/orangutangent)!)
- Health logic - now if your server or database goes down, WhoDB will let you know and let you connect to an alternative profile
- Mock data generation improvements - we now support foreign keys as well as more data types and more relevant data based on the types (thanks to [@&#8203;majiayu000](https://github.com/majiayu000)!)
- CLI improvements including prompt injection protection, HTTP streaming, safe mode, better descriptions, and more. Check it out <https://www.npmjs.com/package/@&#8203;clidey/whodb-cli>
- General bug fixes

Please report any issues you run into at <https://github.com/clidey/whodb/issues>

#### Installation

##### Mac App Store

[Download from the Apple Store](https://apps.apple.com/app/whodb/id6754566536)

##### Microsoft Store

[Download from the Microsoft Store](https://apps.microsoft.com/detail/9pftx5bv4ds6)

##### Snap Store

```bash
sudo snap install whodb
```

[View on Snapcraft](https://snapcraft.io/whodb)

##### Docker

```bash
docker pull clidey/whodb:0.91.0
docker pull clidey/whodb:latest
```

##### Direct Downloads

See assets below for platform-specific packages (DMG, MSIX, etc.).

#### Documentation

- [Documentation](https://docs.whodb.com)
- [Report Issues](https://github.com/clidey/whodb/issues)

#### Upgrade Notes

To upgrade from a previous version:

- **Docker**: Pull the latest image and restart your container
- **Snap**: Run `sudo snap refresh whodb`
- **Desktop Apps**: Download and install the new version

***

#### What's Changed

- Feature/588 disable credential form by [@&#8203;orangutangent](https://github.com/orangutangent) in [#&#8203;790](https://github.com/clidey/whodb/pull/790)
- Ssl by [@&#8203;modelorona](https://github.com/modelorona) in [#&#8203;777](https://github.com/clidey/whodb/pull/777)

#### New Contributors

- [@&#8203;orangutangent](https://github.com/orangutangent) made their first contribution in [#&#8203;790](https://github.com/clidey/whodb/pull/790)

**Full Changelog**: <https://github.com/clidey/whodb/compare/0.90.1...0.91.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3718
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 20:06:31 +00:00
b36c0a141e chore(deps): update dependency argoproj/argo-workflows to v4 (#3714)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Successful in 2m38s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [argoproj/argo-workflows](https://github.com/argoproj/argo-workflows) | major | `v3.7.9` → `v4.0.0` |

---

### Release Notes

<details>
<summary>argoproj/argo-workflows (argoproj/argo-workflows)</summary>

### [`v4.0.0`](https://github.com/argoproj/argo-workflows/blob/HEAD/CHANGELOG.md#v400-2026-02-04)

[Compare Source](https://github.com/argoproj/argo-workflows/compare/v3.7.9...v4.0.0)

Full Changelog: [v4.0.0-rc4...v4.0.0](https://github.com/argoproj/argo-workflows/compare/v4.0.0-rc4...v4.0.0)

##### Selected Changes

- [a8bff4a72](a8bff4a721) fix(security): update qs to 6.14.1 ([#&#8203;15427](https://github.com/argoproj/argo-workflows/issues/15427))

<details><summary><h3>Contributors</h3></summary>

- Alan Clucas

</details>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjMiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3714
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 19:28:56 +00:00
6e7a69e28f chore(deps): update helm release plugin-barman-cloud to v0.5.0 (#3716)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Failing after 3s
renovate / renovate (push) Successful in 1m51s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [plugin-barman-cloud](https://cloudnative-pg.io) ([source](https://github.com/cloudnative-pg/charts)) | minor | `0.4.0` → `0.5.0` |

---

### Release Notes

<details>
<summary>cloudnative-pg/charts (plugin-barman-cloud)</summary>

### [`v0.5.0`](https://github.com/cloudnative-pg/charts/releases/tag/plugin-barman-cloud-v0.5.0)

[Compare Source](https://github.com/cloudnative-pg/charts/compare/plugin-barman-cloud-v0.4.0...plugin-barman-cloud-v0.5.0)

Helm Chart for CloudNativePG's CNPG-I backup plugin using Barman Cloud

#### What's Changed

- docs: add security policy by [@&#8203;zied-jt](https://github.com/zied-jt) in [#&#8203;621](https://github.com/cloudnative-pg/charts/pull/621)
- fix(cloudnative-pg): queries identation in cnpg-default-monitoring by [@&#8203;ryan4yin](https://github.com/ryan4yin) in [#&#8203;650](https://github.com/cloudnative-pg/charts/pull/650)
- docs( cluster ): Improved Runbooks and monitoring by [@&#8203;philippemnoel](https://github.com/philippemnoel) in [#&#8203;774](https://github.com/cloudnative-pg/charts/pull/774)
- feat(plugin-barman-cloud): Add imagePullSecrets to deployment.yaml by [@&#8203;faymard](https://github.com/faymard) in [#&#8203;704](https://github.com/cloudnative-pg/charts/pull/704)
- feat([#&#8203;727](https://github.com/cloudnative-pg/charts/issues/727)): add container and pod security context configuration via values by [@&#8203;Fuochi](https://github.com/Fuochi) in [#&#8203;728](https://github.com/cloudnative-pg/charts/pull/728)
- chore(deps): update Grafana Helm Chart dependency version by [@&#8203;justsomescripts](https://github.com/justsomescripts) in [#&#8203;784](https://github.com/cloudnative-pg/charts/pull/784)
- feat( cluster ): Add support for console stateful set by [@&#8203;philippemnoel](https://github.com/philippemnoel) in [#&#8203;782](https://github.com/cloudnative-pg/charts/pull/782)
- Release plugin-barman-cloud-v0.5.0 by [@&#8203;cnpg-bot](https://github.com/cnpg-bot) in [#&#8203;803](https://github.com/cloudnative-pg/charts/pull/803)

#### New Contributors

- [@&#8203;zied-jt](https://github.com/zied-jt) made their first contribution in [#&#8203;621](https://github.com/cloudnative-pg/charts/pull/621)
- [@&#8203;ryan4yin](https://github.com/ryan4yin) made their first contribution in [#&#8203;650](https://github.com/cloudnative-pg/charts/pull/650)
- [@&#8203;faymard](https://github.com/faymard) made their first contribution in [#&#8203;704](https://github.com/cloudnative-pg/charts/pull/704)
- [@&#8203;Fuochi](https://github.com/Fuochi) made their first contribution in [#&#8203;728](https://github.com/cloudnative-pg/charts/pull/728)
- [@&#8203;justsomescripts](https://github.com/justsomescripts) made their first contribution in [#&#8203;784](https://github.com/cloudnative-pg/charts/pull/784)

**Full Changelog**: <https://github.com/cloudnative-pg/charts/compare/plugin-barman-cloud-v0.4.0...plugin-barman-cloud-v0.5.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3716
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 19:26:06 +00:00
f47d77790e chore(deps): update ghcr.io/linuxserver/prowlarr:2.3.0 docker digest to 5339e90 (#3712)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Successful in 2m22s
2026-02-04 06:02:05 +00:00
40cd735735 chore(deps): update ghcr.io/linuxserver/lidarr:3.1.2-nightly docker digest to adc776c (#3710)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 14s
renovate / renovate (push) Successful in 1m35s
2026-02-04 05:01:45 +00:00
29d15d5dcf chore(deps): update image
All checks were successful
lint-test-helm / lint-helm (push) Successful in 18s
render-manifests-push / render-manifests-push (push) Successful in 39s
renovate / renovate (push) Successful in 1m14s
2026-02-03 21:48:56 -06:00
fc1e943bbf chore(deps): update ghcr.io/immich-app/immich-server docker tag to v2.5.3 (#3705)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Successful in 2m7s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/immich-app/immich-server](https://github.com/immich-app/immich) | patch | `v2.5.2` → `v2.5.3` |

---

### Release Notes

<details>
<summary>immich-app/immich (ghcr.io/immich-app/immich-server)</summary>

### [`v2.5.3`](https://github.com/immich-app/immich/releases/tag/v2.5.3)

[Compare Source](https://github.com/immich-app/immich/compare/v2.5.2...v2.5.3)

#### What's Changed

##### 🐛 Bug fixes

- chore: remove random code snippet by [@&#8203;jrasm91](https://github.com/jrasm91) in [#&#8203;25677](https://github.com/immich-app/immich/pull/25677)
- fix: reset and unsaved change states in editor by [@&#8203;bwees](https://github.com/bwees) in [#&#8203;25588](https://github.com/immich-app/immich/pull/25588)
- fix: no notification if release check is disabled by [@&#8203;jrasm91](https://github.com/jrasm91) in [#&#8203;25688](https://github.com/immich-app/immich/pull/25688)
- fix(mobile): hide latest version if disabled by [@&#8203;uhthomas](https://github.com/uhthomas) in [#&#8203;25691](https://github.com/immich-app/immich/pull/25691)
- fix(web): enable asset viewer navigation across memory boundaries by [@&#8203;midzelis](https://github.com/midzelis) in [#&#8203;25741](https://github.com/immich-app/immich/pull/25741)
- fix: upload progress bar flickering by [@&#8203;alextran1502](https://github.com/alextran1502) in [#&#8203;25829](https://github.com/immich-app/immich/pull/25829)
- fix: prevent stale values in edit user form after save by [@&#8203;michelheusschen](https://github.com/michelheusschen) in [#&#8203;25859](https://github.com/immich-app/immich/pull/25859)
- fix: prevent album page get rebuilt when resuming app by [@&#8203;alextran1502](https://github.com/alextran1502) in [#&#8203;25862](https://github.com/immich-app/immich/pull/25862)
- fix: prevent backspace from accidentally triggering delete modals by [@&#8203;michelheusschen](https://github.com/michelheusschen) in [#&#8203;25858](https://github.com/immich-app/immich/pull/25858)
- fix: metadata extraction race condition by [@&#8203;danieldietzler](https://github.com/danieldietzler) in [#&#8203;25866](https://github.com/immich-app/immich/pull/25866)
- fix: reset zoom when navigating between assets by [@&#8203;michelheusschen](https://github.com/michelheusschen) in [#&#8203;25863](https://github.com/immich-app/immich/pull/25863)

##### 📚 Documentation

- docs(openapi): Add descriptions to OpenAPI specification by [@&#8203;timonrieger](https://github.com/timonrieger) in [#&#8203;25185](https://github.com/immich-app/immich/pull/25185)
- fix(docs): clarify supported vector version  by [@&#8203;mmomjian](https://github.com/mmomjian) in [#&#8203;25753](https://github.com/immich-app/immich/pull/25753)

**Full Changelog**: <https://github.com/immich-app/immich/compare/v2.5.2...v2.5.3>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsImltYWdlIl19-->

Reviewed-on: #3705
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 03:40:05 +00:00
6c33a15c27 chore(deps): update plexguide/huntarr to v9.1.9 (#3706)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 1m57s
2026-02-04 03:29:43 +00:00
36f8ba4f1f chore(deps): update dependency immich-app/immich to v2.5.3 (#3704)
Some checks failed
lint-test-helm / lint-helm (push) Has been cancelled
render-manifests-push / render-manifests-push (push) Has been skipped
renovate / renovate (push) Has been cancelled
2026-02-04 03:29:12 +00:00
7f81a6358b chore(deps): update unpoller/unpoller to v2.33.0 (#3701)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 15s
renovate / renovate (push) Successful in 1m49s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.32.0` → `v2.33.0` |
| [unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.32.0` → `v2.33.0` |

---

### Release Notes

<details>
<summary>unpoller/unpoller (ghcr.io/unpoller/unpoller)</summary>

### [`v2.33.0`](https://github.com/unpoller/unpoller/releases/tag/v2.33.0)

[Compare Source](https://github.com/unpoller/unpoller/compare/v2.32.0...v2.33.0)

##### Changelog

- [`b4fa16b`](b4fa16b2fd) fix(influxunifi): use CelsiusSafe() for temp fields to fix InfluxDB type conflict ([#&#8203;944](https://github.com/unpoller/unpoller/issues/944)) ([#&#8203;945](https://github.com/unpoller/unpoller/issues/945))
- [`6488fef`](6488feff06) Bump docker/login-action from 3.6.0 to 3.7.0 in the all group ([#&#8203;942](https://github.com/unpoller/unpoller/issues/942))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3701
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 03:23:39 +00:00
6aaad16ba3 chore(deps): update d3fk/s3cmd:latest docker digest to e78ca09 (#3700)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 27s
renovate / renovate (push) Successful in 2m22s
2026-02-04 03:02:42 +00:00
fb8852cd02 chore(deps): update ghcr.io/linuxserver/bazarr:1.5.5 docker digest to d40ee61 (#3696)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 2m27s
render-manifests-dispatch / render-manifests-dispatch (push) Successful in 18m51s
2026-02-03 22:02:25 +00:00
6c1bc41aee chore(deps): update helm release external-secrets to v1.3.2 (#3694)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 26s
renovate / renovate (push) Successful in 1m53s
2026-02-03 21:41:56 +00:00
156537aec3 chore(deps): update rmcrackan/libation to v13.1.8 (#3690)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 1m58s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [rmcrackan/Libation](https://github.com/rmcrackan/Libation) | patch | `13.1.7` → `13.1.8` |
| [rmcrackan/libation](https://github.com/rmcrackan/Libation) | patch | `13.1.7` → `13.1.8` |

---

### Release Notes

<details>
<summary>rmcrackan/Libation (rmcrackan/Libation)</summary>

### [`v13.1.8`](https://github.com/rmcrackan/Libation/releases/tag/v13.1.8): Libation 13.1.8

[Compare Source](https://github.com/rmcrackan/Libation/compare/v13.1.7...v13.1.8)

- Bug fix addressing [#&#8203;1586](https://github.com/rmcrackan/Libation/issues/1586) and [#&#8203;1576](https://github.com/rmcrackan/Libation/issues/1576)
- Update troubleshooting guide with Hangover app details
- Refactor Chardonnay startup to prevent loading library twice.

Thanks to [@&#8203;Mbucari](https://github.com/Mbucari)

[Libation](https://github.com/rmcrackan/Libation) is a free, open source audible library manager. Decrypt, backup, organize, and search your audible library

I intend to keep Libation free and open source, but if you want to [leave a tip](https://paypal.me/mcrackan?locale.x=en_us), who am I to argue?

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsImltYWdlIl19-->

Co-authored-by: Alex Lebens <alexanderlebens@gmail.com>
Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3690
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-03 21:36:22 +00:00
13a3644e78 chore(deps): update dependency external-secrets/external-secrets to v1.3.2 (#3692)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Successful in 1m21s
2026-02-03 21:30:21 +00:00
476cbab8dc chore(deps): update redis-replication docker tag to v1.0.4 (#3689)
Some checks are pending
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 22s
renovate / renovate (push) Has started running
2026-02-03 20:39:15 +00:00
945eee11ef chore(deps): update deluan/navidrome docker tag to v0.60.0 (#3687)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Successful in 1m21s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [deluan/navidrome](https://github.com/navidrome/navidrome) | minor | `0.59.0` → `0.60.0` |

---

### Release Notes

<details>
<summary>navidrome/navidrome (deluan/navidrome)</summary>

### [`v0.60.0`](https://github.com/navidrome/navidrome/releases/tag/v0.60.0)

[Compare Source](https://github.com/navidrome/navidrome/compare/v0.59.0...v0.60.0)

#### Plugins

This release introduces a major rewrite of the experimental **Plugin System**, now with multi-language PDK support, enabling developers to extend Navidrome's functionality using WebAssembly-based plugins written in Go, Rust, Python or JavaScript. Plugins run in a secure sandbox and can provide additional metadata sources, custom integrations, and server-side enhancements. Users can now easily configure plugins directly from the UI through a new JSONForms-based configuration interface.

A couple of working plugins are already available:

- [AudioMuse-AI integration](https://github.com/NeptuneHub/AudioMuse-AI-NV-plugin)
- [ListenBrainz Daily Playlist Importer](https://github.com/kgarner7/navidrome-listenbrainz-daily-playlist)
- [Discord Rich Presence](https://github.com/navidrome/discord-rich-presence-plugin)

For more plugins, keep an eye on the tag [navidrome-plugins](https://github.com/topics/navidrome-plugin) in GitHub.

More details and instructions on how to use and manage plugins can be found in our [documentation](https://www.navidrome.org/docs/usage/features/plugins/).
New documentation will soon be added with details on how to create new plugins.

#### Metadata Extraction

Additionally, this version includes a **pure-Go metadata extractor** built on top of the new `go-taglib` library. This is a significant step toward removing the C++ TagLib dependency, which will simplify cross-platform builds and packaging in future releases. The new extractor is activated by default, but in case of any issues you can revert to the previous implementation by setting `Scanner.Extractor="legacy-taglib"` configuration option.

#### Instant Mix

The Instant Mix feature generates a playlist of similar songs based on a selected track. By default, it retrieves similar songs from Last.fm (if configured with an API key) or falls back to Deezer. It can also be configured to use external plugins, like [AudioMuse-AI](https://github.com/NeptuneHub/AudioMuse-AI-NV-plugin) for sonic analysis-based similarity recommendations.

#### New and Changed Configuration Options

##### Plugin System Options

| Option               | Default   | Description                                                   |
| -------------------- | --------- | ------------------------------------------------------------- |
| `Plugins.Enabled`    | `true`    | Enable/disable the plugin system                              |
| `Plugins.Folder`     | `""`      | Path to the plugins directory. Default: `$DataFolder/Plugins` |
| `Plugins.CacheSize`  | `"200MB"` | Maximum cache size for storing compiled plugin WASM modules   |
| `Plugins.AutoReload` | `false`   | Automatically detect new/changed/removed plugins              |
| `Plugins.LogLevel`   | `""`      | Override log level for plugin-related messages                |

##### Subsonic API Options

| Option                         | Default | Description                                                                                                                    |
| ------------------------------ | ------- | ------------------------------------------------------------------------------------------------------------------------------ |
| `Subsonic.MinimalClients`      | `""`    | Comma-separated list of clients that receive reduced API responses (useful for resource-constrained devices like smartwatches) |
| `Subsonic.EnableAverageRating` | `true`  | Include average rating in API responses                                                                                        |

##### Metadata & Matching Options

| Option                       | Default | Description                                                                                        |
| ---------------------------- | ------- | -------------------------------------------------------------------------------------------------- |
| `SimilarSongsMatchThreshold` | `85`    | Minimum similarity score (0-100) for matching similar songs from external sources to local library |
| `LastFM.Language`            | `"en"`  | Now supports comma-separated list of languages (e.g., `"de,fr,en"`) for metadata fallback          |
| `Deezer.Language`            | `"en"`  | Now supports comma-separated list of languages for metadata fallback                               |

##### Renamed Options (Deprecation Notice)

The following options have been renamed. The old names still work but will be removed in a future release:

| Old Name                                      | New Name                   |
| --------------------------------------------- | -------------------------- |
| `HTTPSecurityHeaders.CustomFrameOptionsValue` | `HTTPHeaders.FrameOptions` |

#### Security

- Fix potential XSS vulnerability by sanitizing user-supplied data before rendering (GHSA-rh3r-8pxm-hg4w). ([d7ec735](https://github.com/navidrome/navidrome/commit/d7ec7355c) by [@&#8203;AlexGustafsson](https://github.com/AlexGustafsson))
- Fix potential DoS vulnerability in cover art upscaling by clamping requested square size to original dimensions (GHSA-hrr4-3wgr-68x3). ([77367548](https://github.com/navidrome/navidrome/commit/77367548f) by [@&#8203;deluan](https://github.com/deluan)). Thanks to [@&#8203;yunfachi](https://github.com/yunfachi)

#### Added

- Plugins:
  - Add new WebAssembly-based plugin system with multi-language PDK support (Go, Rust, Python). ([#&#8203;4833](https://github.com/navidrome/navidrome/pull/4833) by [@&#8203;deluan](https://github.com/deluan))
  - Add JSONForms-based plugin configuration UI. ([#&#8203;4911](https://github.com/navidrome/navidrome/pull/4911) by [@&#8203;deluan](https://github.com/deluan))
  - Add similar songs retrieval functions to plugins API. ([#&#8203;4933](https://github.com/navidrome/navidrome/pull/4933) by [@&#8203;deluan](https://github.com/deluan))

- Server:
  - Add pure-Go metadata extractor (`go-taglib`) as alternative to FFmpeg-based extraction. ([#&#8203;4902](https://github.com/navidrome/navidrome/pull/4902) by [@&#8203;deluan](https://github.com/deluan))
  - Add support for reading embedded images using the new taglib extractor by default. ([66474fc](https://github.com/navidrome/navidrome/commit/66474fc9f) by [@&#8203;deluan](https://github.com/deluan))
  - Add Instant Mix (song-based Similar Songs) functionality with MBID, ISRC and Title/Artist fuzzy matching. ([#&#8203;4919](https://github.com/navidrome/navidrome/pull/4919), [#&#8203;4946](https://github.com/navidrome/navidrome/pull/4946) by [@&#8203;deluan](https://github.com/deluan))
  - Add support for multiple languages when fetching metadata from Last.fm and Deezer. ([#&#8203;4952](https://github.com/navidrome/navidrome/pull/4952) by [@&#8203;deluan](https://github.com/deluan))
  - Add `Subsonic.MinimalClients` configuration option for improved compatibility with minimal Subsonic clients. Default list is `"SubMusic"` ([#&#8203;4850](https://github.com/navidrome/navidrome/pull/4850) by [@&#8203;typhoon2099](https://github.com/typhoon2099))
  - Add support for public/private playlists in NSP import. ([c5447a6](https://github.com/navidrome/navidrome/commit/c5447a637) by [@&#8203;deluan](https://github.com/deluan))
  - Add RISCV64 builds. ([#&#8203;4949](https://github.com/navidrome/navidrome/pull/4949) by [@&#8203;MichaIng](https://github.com/MichaIng))

- UI Features:
  - Add composer field to table views. ([#&#8203;4857](https://github.com/navidrome/navidrome/pull/4857) by [@&#8203;AlexGustafsson](https://github.com/AlexGustafsson))
  - Add prompt before closing window if music is playing. ([#&#8203;4899](https://github.com/navidrome/navidrome/pull/4899) by [@&#8203;alannnna](https://github.com/alannnna))
  - Add Nautiline-like theme. ([#&#8203;4909](https://github.com/navidrome/navidrome/pull/4909) by [@&#8203;borisrorsvort](https://github.com/borisrorsvort))
  - Add multiline support and resizing for playlist comment input. ([6fce30c](https://github.com/navidrome/navidrome/commit/6fce30c13) by [@&#8203;deluan](https://github.com/deluan))

- Subsonic API:
  - Add `avgRating` field from Subsonic spec. ([#&#8203;4900](https://github.com/navidrome/navidrome/pull/4900) by [@&#8203;terry90](https://github.com/terry90))

- Insights:
  - Add insights collection for Scanner.Extractor configuration to measure go-taglib usage. ([63517e9](https://github.com/navidrome/navidrome/commit/63517e904) by [@&#8203;deluan](https://github.com/deluan))
  - Add file suffix counting to insights. ([0473c50](https://github.com/navidrome/navidrome/commit/0473c50b4) by [@&#8203;deluan](https://github.com/deluan))

#### Changed

- Optimize cross-library move detection for single-library setups. ([#&#8203;4888](https://github.com/navidrome/navidrome/pull/4888) by [@&#8203;deluan](https://github.com/deluan))
- Improve Deezer artist search ranking. ([a081569](https://github.com/navidrome/navidrome/commit/a081569ed) by [@&#8203;deluan](https://github.com/deluan))
- Rename `HTTPSecurityHeaders.CustomFrameOptionsValue` to `HTTPHeaders.FrameOptions`. ([7ccf44b](https://github.com/navidrome/navidrome/commit/7ccf44b8e) by [@&#8203;deluan](https://github.com/deluan))
- Update translations: Bulgarian, Catalan, German, Greek, Spanish, Finnish, French, Galician, Indonesian, Dutch, Polish, Russian, Slovenian, Swedish, Thai by [POEditor contributors](https://www.navidrome.org/docs/developers/translations/).
- Update Spanish translations. ([#&#8203;4904](https://github.com/navidrome/navidrome/pull/4904) by [@&#8203;abrugues](https://github.com/abrugues))
- Update Basque translation. ([#&#8203;4815](https://github.com/navidrome/navidrome/pull/4815) by [@&#8203;xabirequejo](https://github.com/xabirequejo))

#### Fixed

- Playlists:
  - Fix M3U playlist import failing for paths with different UTF/Unicode representations (NFC/NFD normalization). ([#&#8203;4890](https://github.com/navidrome/navidrome/pull/4890) by [@&#8203;deluan](https://github.com/deluan))
  - Fix playlist name sorting to be case-insensitive. ([#&#8203;4845](https://github.com/navidrome/navidrome/pull/4845) by [@&#8203;deluan](https://github.com/deluan))

- UI:
  - Fix various UI issues and improve styling coherence. ([#&#8203;4910](https://github.com/navidrome/navidrome/pull/4910) by [@&#8203;borisrorsvort](https://github.com/borisrorsvort))
  - Fix AMusic theme player buttons and delete button color. ([#&#8203;4797](https://github.com/navidrome/navidrome/pull/4797) by [@&#8203;dragonish](https://github.com/dragonish))
  - Fix export missing files showing only first 1000 results. ([017676c](https://github.com/navidrome/navidrome/commit/017676c45) by [@&#8203;deluan](https://github.com/deluan))

- Scanner:
  - Fix `FullScanInProgress` not reflecting current scan request during interrupted scans. ([8c80be5](https://github.com/navidrome/navidrome/commit/8c80be56d) by [@&#8203;deluan](https://github.com/deluan))
  - Fix "Expression tree is too large" error by executing GetFolderUpdateInfo in batches. ([cde5992](https://github.com/navidrome/navidrome/commit/cde5992c4) by [@&#8203;deluan](https://github.com/deluan))
  - Fix stale role associations when artist role changes. ([2d7b716](https://github.com/navidrome/navidrome/commit/2d7b71683) by [@&#8203;deluan](https://github.com/deluan))
  - Fix infinite recursion in PID configuration. ([1c4a7e8](https://github.com/navidrome/navidrome/commit/1c4a7e855) by [@&#8203;deluan](https://github.com/deluan))
  - Fix default PIDs not being set for Album and Track. In some circumstances it could lead to empty PIDs ([71f549a](https://github.com/navidrome/navidrome/commit/71f549afb) by [@&#8203;deluan](https://github.com/deluan))
  - Fix error when watcher detected too many folder changes, causing the scan to fail. ([9ed309a](https://github.com/navidrome/navidrome/commit/9ed309ac8) by [@&#8203;deluan](https://github.com/deluan))
  - Show scan errors in the UI more consistently. ([ebbc31f](https://github.com/navidrome/navidrome/commit/ebbc31f1a) by [@&#8203;deluan](https://github.com/deluan))

- Subsonic API:
  - Fix username parameter validation for `getUser` endpoint. ([6ed6524](https://github.com/navidrome/navidrome/commit/6ed652475) by [@&#8203;deluan](https://github.com/deluan))
  - Fix `getNowPlaying` endpoint to always be enabled regardless of configuration. ([603cccd](https://github.com/navidrome/navidrome/commit/603cccde1) by [@&#8203;deluan](https://github.com/deluan))

- Server:
  - Fix JWT-related errors being exposed on share page. ([#&#8203;4892](https://github.com/navidrome/navidrome/pull/4892) by [@&#8203;AlexGustafsson](https://github.com/AlexGustafsson))
  - Fix user context not preserved in async NowPlaying dispatch. ([396eee4](https://github.com/navidrome/navidrome/commit/396eee48c) by [@&#8203;deluan](https://github.com/deluan))
  - Fix environment variable configuration loading not being logged when no config file is found. ([51ca2de](https://github.com/navidrome/navidrome/commit/51ca2dee6) by [@&#8203;deluan](https://github.com/deluan))
  - Fix items with no annotation not being included for `starred=false` filter, handle `has_rating=false`. ([#&#8203;4921](https://github.com/navidrome/navidrome/pull/4921) by [@&#8203;kgarner7](https://github.com/kgarner7))
  - Last.fm's `scrobble` and `updateNowPlaying` methods should send parameters in request body. ([51026de](https://github.com/navidrome/navidrome/commit/51026de80) by [@&#8203;deluan](https://github.com/deluan))

#### New Contributors

- [@&#8203;alannnna](https://github.com/alannnna) made their first contribution in [#&#8203;4899](https://github.com/navidrome/navidrome/pull/4899)
- [@&#8203;abrugues](https://github.com/abrugues) made their first contribution in [#&#8203;4904](https://github.com/navidrome/navidrome/pull/4904)
- [@&#8203;AlexGustafsson](https://github.com/AlexGustafsson) made their first contribution in [#&#8203;4857](https://github.com/navidrome/navidrome/pull/4857)
- [@&#8203;borisrorsvort](https://github.com/borisrorsvort) made their first contribution in [#&#8203;4909](https://github.com/navidrome/navidrome/pull/4909)
- [@&#8203;dragonish](https://github.com/dragonish) made their first contribution in [#&#8203;4797](https://github.com/navidrome/navidrome/pull/4797)
- [@&#8203;MichaIng](https://github.com/MichaIng) made their first contribution in [#&#8203;4949](https://github.com/navidrome/navidrome/pull/4949)
- [@&#8203;terry90](https://github.com/terry90) made their first contribution in [#&#8203;4900](https://github.com/navidrome/navidrome/pull/4900)
- [@&#8203;typhoon2099](https://github.com/typhoon2099) made their first contribution in [#&#8203;4850](https://github.com/navidrome/navidrome/pull/4850)

**Full Changelog**: <https://github.com/navidrome/navidrome/compare/v0.59.0...v0.60.0>

#### Helping out

This release is only possible thanks to the support of some **awesome people**!

Want to be one of them?
You can [sponsor](https://github.com/sponsors/deluan), pay me a [Ko-fi](https://ko-fi.com/deluan),
or [contribute with code](https://www.navidrome.org/docs/developers/).

#### Where to go next?

- Read installation instructions on our [website](https://www.navidrome.org/docs/installation/).
- Host Navidrome on [PikaPods](https://www.pikapods.com/pods/navidrome) for a simple cloud solution.
- Reach out on [Discord](https://discord.gg/xh7j7yF), [Reddit](https://www.reddit.com/r/navidrome/)
  and [Twitter](https://twitter.com/navidrome)!

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3687
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-03 20:25:48 +00:00
6268030f92 chore(deps): update helm release meilisearch to v0.25.1 (#3681)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 21s
renovate / renovate (push) Successful in 1m41s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [meilisearch](https://github.com/meilisearch/meilisearch-kubernetes/tree/main/charts/meilisearch) ([source](https://github.com/meilisearch/meilisearch-kubernetes)) | minor | `0.24.2` → `0.25.1` |

---

### Release Notes

<details>
<summary>meilisearch/meilisearch-kubernetes (meilisearch)</summary>

### [`v0.25.1`](https://github.com/meilisearch/meilisearch-kubernetes/releases/tag/meilisearch-0.25.1)

[Compare Source](https://github.com/meilisearch/meilisearch-kubernetes/compare/meilisearch-0.25.0...meilisearch-0.25.1)

A Helm chart for the Meilisearch search engine

### [`v0.25.0`](https://github.com/meilisearch/meilisearch-kubernetes/releases/tag/meilisearch-0.25.0)

[Compare Source](https://github.com/meilisearch/meilisearch-kubernetes/compare/meilisearch-0.24.2...meilisearch-0.25.0)

A Helm chart for the Meilisearch search engine

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3681
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-03 20:17:13 +00:00
f31b764faa chore(deps): update dependency elastic/cloud-on-k8s to v3.3.0 (#3685)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 23s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [elastic/cloud-on-k8s](https://github.com/elastic/cloud-on-k8s) | minor | `v3.2.0` → `v3.3.0` |

---

### Release Notes

<details>
<summary>elastic/cloud-on-k8s (elastic/cloud-on-k8s)</summary>

### [`v3.3.0`](https://github.com/elastic/cloud-on-k8s/releases/tag/v3.3.0)

[Compare Source](https://github.com/elastic/cloud-on-k8s/compare/v3.2.0...v3.3.0)

### Elastic Cloud on Kubernetes 3.3.0

- [Quickstart guide](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s#eck-quickstart)

##### Release Highlights

##### AutoOps Integration (Enterprise feature)

ECK now supports integration with Elastic AutoOps through a new `AutoOpsAgentPolicy` custom resource. This allows you to instrument multiple Elasticsearch clusters at once for automated health monitoring and performance recommendations. The [AutoOps documentation](https://www.elastic.co/docs/deploy-manage/monitor/autoops) provides more details.

##### Elastic Package Registry Integration

ECK now supports deploying and managing Elastic Package Registry (EPR) through a new `PackageRegistry` custom resource. This is particularly useful for air-gapped environments, enabling Kibana to reference a self-hosted registry instead of the public one. The [package registry documentation](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s/package-registry) provides more details.

##### Multiple Stack Configuration Policies composition support (Enterprise feature)

ECK now includes support for multiple Stack Config Policies targeting the same Elasticsearch cluster or Kibana instance, using a weight-based priority system for deterministic policy composition. The [stack config policy documentation](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s/elastic-stack-configuration-policies) provides more details.

##### Features and enhancements

- AutoOpsAgentPolicy support [#&#8203;8941](https://github.com/elastic/cloud-on-k8s/pull/8941) (issue: [#&#8203;8789](https://github.com/elastic/cloud-on-k8s/issues/8789))
- ElasticPackageRegistry support [#&#8203;8800](https://github.com/elastic/cloud-on-k8s/pull/8800) (issue: [#&#8203;8925](https://github.com/elastic/cloud-on-k8s/issues/8925))
- Stack Config Policies composition support [#&#8203;8917](https://github.com/elastic/cloud-on-k8s/pull/8917)
- Use standard Kibana labels and Helm labels on the ECK Operator pod [#&#8203;8840](https://github.com/elastic/cloud-on-k8s/pull/8840) (issue: [#&#8203;8584](https://github.com/elastic/cloud-on-k8s/issues/8584))
- Add service customization support for Elasticsearch remote cluster server [#&#8203;8892](https://github.com/elastic/cloud-on-k8s/pull/8892)
- Removal of Elasticsearch 6.x support from codebase [#&#8203;8979](https://github.com/elastic/cloud-on-k8s/pull/8979)

##### Fixes

- Upgrade master StatefulSets last when performing a version upgrade of Elasticsearch [#&#8203;8871](https://github.com/elastic/cloud-on-k8s/pull/8871) (issue: [#&#8203;8429](https://github.com/elastic/cloud-on-k8s/issues/8429))
- Fix race condition for pre-existing Stack Config Policy [#&#8203;8928](https://github.com/elastic/cloud-on-k8s/pull/8928) (issue: [#&#8203;8912](https://github.com/elastic/cloud-on-k8s/issues/8912))
- Do not set Kibana server.name [#&#8203;8930](https://github.com/elastic/cloud-on-k8s/pull/8930) (issue: [#&#8203;8929](https://github.com/elastic/cloud-on-k8s/issues/8929))
- Do not write `elasticsearch.k8s.elastic.co/managed-remote-clusters` when not necessary [#&#8203;8932](https://github.com/elastic/cloud-on-k8s/pull/8932) (issue: [#&#8203;8781](https://github.com/elastic/cloud-on-k8s/issues/8781))
- Cleanup orphaned secret mounts when removed from StackConfigPolicy [#&#8203;8937](https://github.com/elastic/cloud-on-k8s/pull/8937) (issue: [#&#8203;8921](https://github.com/elastic/cloud-on-k8s/issues/8921))
- Avoid duplicate error logging for generate GET operations on a GVK [#&#8203;8957](https://github.com/elastic/cloud-on-k8s/pull/8957)
- Remove single master at a time upscale restriction [#&#8203;8940](https://github.com/elastic/cloud-on-k8s/pull/8940) (issue: [#&#8203;8939](https://github.com/elastic/cloud-on-k8s/issues/8939))
- AutoOps: Ignore deprecated ES clusters [#&#8203;9008](https://github.com/elastic/cloud-on-k8s/pull/9008) (issue: [#&#8203;9000](https://github.com/elastic/cloud-on-k8s/issues/9000))
- AutoOps: Require 9.2.1 for AutoOps agent [#&#8203;9007](https://github.com/elastic/cloud-on-k8s/pull/9007) (issue: [#&#8203;9000](https://github.com/elastic/cloud-on-k8s/issues/9000))
- Multi-SCP: Flip weight semantics - higher weight takes precedence [#&#8203;9046](https://github.com/elastic/cloud-on-k8s/pull/9046)

##### Documentation improvements

- Update Google Cloud LoadBalancer recipe for new requirements [#&#8203;8843](https://github.com/elastic/cloud-on-k8s/pull/8843)
- Fix minUnavailable typo in PDB documentation [#&#8203;8898](https://github.com/elastic/cloud-on-k8s/pull/8898)
- Use GKE ComputeClass instead of DaemonSet for GKE AutoPilot [#&#8203;8982](https://github.com/elastic/cloud-on-k8s/pull/8982)
- Adjust `vm.max_map_count` to [`1048576`](https://github.com/elastic/cloud-on-k8s/commit/1048576) in GKE AutoPilot recipes [#&#8203;8986](https://github.com/elastic/cloud-on-k8s/pull/8986)
- Remove support for Stack 7.17. [#&#8203;9038](https://github.com/elastic/cloud-on-k8s/pull/9038)

##### Dependency updates

- Go 1.25.2 => 1.25.6
- github.com/KimMachineGun/automemlimit v0.7.4 => v0.7.5
- github.com/elastic/go-ucfg v0.8.9-0.20250307075119-2a22403faaea => v0.8.9-0.20251017163010-3520930bed4f
- github.com/gkampitakis/go-snaps v0.5.15 => v0.5.19
- github.com/google/go-containerregistry v0.20.6 => v0.20.7
- github.com/googlecloudplatform/compute-class-api => v0.0.0-20251208134148-ae2e7936c1f8
- github.com/prometheus/common v0.67.1 => v0.67.5
- github.com/spf13/cobra v1.10.1 => v1.10.2
- go.elastic.co/apm/v2 v2.7.1 => v2.7.2
- go.uber.org/zap v1.27.0 => v1.27.1
- golang.org/x/crypto v0.40.0 => v0.46.0
- k8s.io/api v0.34.1 => v0.35.0
- k8s.io/apimachinery v0.34.1 => v0.35.0
- k8s.io/client-go v0.34.1 => v0.35.0
- k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 => v0.0.0-20251002143259-bc988d571ff4
- sigs.k8s.io/controller-runtime v0.22.2 => v0.22.4
- sigs.k8s.io/controller-tools v0.19.0 => v0.20.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjMiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3685
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-03 20:16:16 +00:00
d935a44b00 chore(deps): update helm release eck-operator to v3.3.0 (#3682)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [eck-operator](https://github.com/elastic/cloud-on-k8s) | minor | `3.2.0` → `3.3.0` |

---

### Release Notes

<details>
<summary>elastic/cloud-on-k8s (eck-operator)</summary>

### [`v3.3.0`](https://github.com/elastic/cloud-on-k8s/releases/tag/v3.3.0)

[Compare Source](https://github.com/elastic/cloud-on-k8s/compare/v3.2.0...v3.3.0)

##### Elastic Cloud on Kubernetes 3.3.0

- [Quickstart guide](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s#eck-quickstart)

##### Release Highlights

##### AutoOps Integration (Enterprise feature)

ECK now supports integration with Elastic AutoOps through a new `AutoOpsAgentPolicy` custom resource. This allows you to instrument multiple Elasticsearch clusters at once for automated health monitoring and performance recommendations. The [AutoOps documentation](https://www.elastic.co/docs/deploy-manage/monitor/autoops) provides more details.

##### Elastic Package Registry Integration

ECK now supports deploying and managing Elastic Package Registry (EPR) through a new `PackageRegistry` custom resource. This is particularly useful for air-gapped environments, enabling Kibana to reference a self-hosted registry instead of the public one. The [package registry documentation](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s/package-registry) provides more details.

##### Multiple Stack Configuration Policies composition support (Enterprise feature)

ECK now includes support for multiple Stack Config Policies targeting the same Elasticsearch cluster or Kibana instance, using a weight-based priority system for deterministic policy composition. The [stack config policy documentation](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s/elastic-stack-configuration-policies) provides more details.

##### Features and enhancements

- AutoOpsAgentPolicy support [#&#8203;8941](https://github.com/elastic/cloud-on-k8s/pull/8941) (issue: [#&#8203;8789](https://github.com/elastic/cloud-on-k8s/issues/8789))
- ElasticPackageRegistry support [#&#8203;8800](https://github.com/elastic/cloud-on-k8s/pull/8800) (issue: [#&#8203;8925](https://github.com/elastic/cloud-on-k8s/issues/8925))
- Stack Config Policies composition support [#&#8203;8917](https://github.com/elastic/cloud-on-k8s/pull/8917)
- Use standard Kibana labels and Helm labels on the ECK Operator pod [#&#8203;8840](https://github.com/elastic/cloud-on-k8s/pull/8840) (issue: [#&#8203;8584](https://github.com/elastic/cloud-on-k8s/issues/8584))
- Add service customization support for Elasticsearch remote cluster server [#&#8203;8892](https://github.com/elastic/cloud-on-k8s/pull/8892)
- Removal of Elasticsearch 6.x support from codebase [#&#8203;8979](https://github.com/elastic/cloud-on-k8s/pull/8979)

##### Fixes

- Upgrade master StatefulSets last when performing a version upgrade of Elasticsearch [#&#8203;8871](https://github.com/elastic/cloud-on-k8s/pull/8871) (issue: [#&#8203;8429](https://github.com/elastic/cloud-on-k8s/issues/8429))
- Fix race condition for pre-existing Stack Config Policy [#&#8203;8928](https://github.com/elastic/cloud-on-k8s/pull/8928) (issue: [#&#8203;8912](https://github.com/elastic/cloud-on-k8s/issues/8912))
- Do not set Kibana server.name [#&#8203;8930](https://github.com/elastic/cloud-on-k8s/pull/8930) (issue: [#&#8203;8929](https://github.com/elastic/cloud-on-k8s/issues/8929))
- Do not write `elasticsearch.k8s.elastic.co/managed-remote-clusters` when not necessary [#&#8203;8932](https://github.com/elastic/cloud-on-k8s/pull/8932) (issue: [#&#8203;8781](https://github.com/elastic/cloud-on-k8s/issues/8781))
- Cleanup orphaned secret mounts when removed from StackConfigPolicy [#&#8203;8937](https://github.com/elastic/cloud-on-k8s/pull/8937) (issue: [#&#8203;8921](https://github.com/elastic/cloud-on-k8s/issues/8921))
- Avoid duplicate error logging for generate GET operations on a GVK [#&#8203;8957](https://github.com/elastic/cloud-on-k8s/pull/8957)
- Remove single master at a time upscale restriction [#&#8203;8940](https://github.com/elastic/cloud-on-k8s/pull/8940) (issue: [#&#8203;8939](https://github.com/elastic/cloud-on-k8s/issues/8939))
- AutoOps: Ignore deprecated ES clusters [#&#8203;9008](https://github.com/elastic/cloud-on-k8s/pull/9008) (issue: [#&#8203;9000](https://github.com/elastic/cloud-on-k8s/issues/9000))
- AutoOps: Require 9.2.1 for AutoOps agent [#&#8203;9007](https://github.com/elastic/cloud-on-k8s/pull/9007) (issue: [#&#8203;9000](https://github.com/elastic/cloud-on-k8s/issues/9000))
- Multi-SCP: Flip weight semantics - higher weight takes precedence [#&#8203;9046](https://github.com/elastic/cloud-on-k8s/pull/9046)

##### Documentation improvements

- Update Google Cloud LoadBalancer recipe for new requirements [#&#8203;8843](https://github.com/elastic/cloud-on-k8s/pull/8843)
- Fix minUnavailable typo in PDB documentation [#&#8203;8898](https://github.com/elastic/cloud-on-k8s/pull/8898)
- Use GKE ComputeClass instead of DaemonSet for GKE AutoPilot [#&#8203;8982](https://github.com/elastic/cloud-on-k8s/pull/8982)
- Adjust `vm.max_map_count` to [`1048576`](https://github.com/elastic/cloud-on-k8s/commit/1048576) in GKE AutoPilot recipes [#&#8203;8986](https://github.com/elastic/cloud-on-k8s/pull/8986)
- Remove support for Stack 7.17. [#&#8203;9038](https://github.com/elastic/cloud-on-k8s/pull/9038)

##### Dependency updates

- Go 1.25.2 => 1.25.6
- github.com/KimMachineGun/automemlimit v0.7.4 => v0.7.5
- github.com/elastic/go-ucfg v0.8.9-0.20250307075119-2a22403faaea => v0.8.9-0.20251017163010-3520930bed4f
- github.com/gkampitakis/go-snaps v0.5.15 => v0.5.19
- github.com/google/go-containerregistry v0.20.6 => v0.20.7
- github.com/googlecloudplatform/compute-class-api => v0.0.0-20251208134148-ae2e7936c1f8
- github.com/prometheus/common v0.67.1 => v0.67.5
- github.com/spf13/cobra v1.10.1 => v1.10.2
- go.elastic.co/apm/v2 v2.7.1 => v2.7.2
- go.uber.org/zap v1.27.0 => v1.27.1
- golang.org/x/crypto v0.40.0 => v0.46.0
- k8s.io/api v0.34.1 => v0.35.0
- k8s.io/apimachinery v0.34.1 => v0.35.0
- k8s.io/client-go v0.34.1 => v0.35.0
- k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 => v0.0.0-20251002143259-bc988d571ff4
- sigs.k8s.io/controller-runtime v0.22.2 => v0.22.4
- sigs.k8s.io/controller-tools v0.19.0 => v0.20.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjMiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3682
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-03 20:15:20 +00:00
710eb4b9dd chore(deps): update kube-prometheus-stack docker tag to v81.5.0 (#3683)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 26s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | minor | `81.4.2` → `81.5.0` |

---

### Release Notes

<details>
<summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary>

### [`v81.5.0`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-81.5.0)

[Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-81.4.3...kube-prometheus-stack-81.5.0)

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

#### What's Changed

- \[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;6588](https://github.com/prometheus-community/helm-charts/pull/6588)

**Full Changelog**: <https://github.com/prometheus-community/helm-charts/compare/prometheus-node-exporter-4.51.1...kube-prometheus-stack-81.5.0>

### [`v81.4.3`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-81.4.3)

[Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-81.4.2...kube-prometheus-stack-81.4.3)

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

#### What's Changed

- \[kube-prometheus-stack] fix: GitOps drift due to inconsistency between failurePolicy in patch job and webhook by [@&#8203;kuzm1ch](https://github.com/kuzm1ch) in [#&#8203;6585](https://github.com/prometheus-community/helm-charts/pull/6585)

#### New Contributors

- [@&#8203;kuzm1ch](https://github.com/kuzm1ch) made their first contribution in [#&#8203;6585](https://github.com/prometheus-community/helm-charts/pull/6585)

**Full Changelog**: <https://github.com/prometheus-community/helm-charts/compare/prometheus-nginx-exporter-1.18.1...kube-prometheus-stack-81.4.3>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3683
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-03 20:14:23 +00:00
4da1884a61 chore(deps): update ghcr.io/linuxserver/qbittorrent:5.1.4 docker digest to 5b09709 (#3684)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 14s
renovate / renovate (push) Successful in 1m47s
2026-02-03 18:02:40 +00:00