826739ab342bc9e1fa32587d15214dca2ecb5a87
2108 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
| 826739ab34 |
chore(deps): update unpoller/unpoller to v2.36.0 (#5010)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.35.0` → `v2.36.0` | | [unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.35.0` → `v2.36.0` | --- ### Release Notes <details> <summary>unpoller/unpoller (ghcr.io/unpoller/unpoller)</summary> ### [`v2.36.0`](https://github.com/unpoller/unpoller/releases/tag/v2.36.0) [Compare Source](https://github.com/unpoller/unpoller/compare/v2.35.0...v2.36.0) ##### Changelog - [`cedc52f`]( |
|||
| 50cba8b039 |
chore(deps): update dependency headlamp-k8s/headlamp to v0.41.0 (#5009)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [headlamp-k8s/headlamp](https://github.com/headlamp-k8s/headlamp) | minor | `v0.40.1` → `v0.41.0` | --- ### Release Notes <details> <summary>headlamp-k8s/headlamp (headlamp-k8s/headlamp)</summary> ### [`v0.41.0`](https://github.com/kubernetes-sigs/headlamp/releases/tag/v0.41.0): 0.41.0 [Compare Source](https://github.com/headlamp-k8s/headlamp/compare/headlamp-helm-0.40.1...v0.41.0) #### ✨ Enhancements - Implement rollback for Deployment, DaemonSet, StatefulSet. Including to specific revision and Revision history view. Thanks to [@​alokdangre](https://github.com/alokdangre) - Add multi-cluster user logout. Thanks to [@​alokdangre](https://github.com/alokdangre) - Enable cluster deletion in browser. Thanks to [@​alokdangre](https://github.com/alokdangre) - Display environment variables for containers in pod details views. Thanks to [@​gambtho](https://github.com/gambtho) - Added Toggle Switch to filter helm secrets. Thanks to [@​mudit06mah](https://github.com/mudit06mah) - Add session-ttl flag and logic. Thanks to [@​mudit06mah](https://github.com/mudit06mah) - Allow OIDC cookies when in-cluster is false via flag. Thanks to [@​beep-boopp](https://github.com/beep-boopp) - Add MCP server support for plugins including the ai-assistant. Thanks to [@​illume](https://github.com/illume) - Add support for traefik or any reverse proxy handling auth through middlewares. Thanks to [@​ageekymonk](https://github.com/ageekymonk) #### 🐞 Bug Fixes - Fix flaky PodDetailsView Storybook test. Thanks to [@​mahmoudmagdy1-1](https://github.com/mahmoudmagdy1-1) - Fix ARIA menu role in ClusterChooserPopup. Thanks to [@​mahmoudmagdy1-1](https://github.com/mahmoudmagdy1-1) - Correct aria attributes in ShowHideLabel component. Thanks to [@​greedy-wudpeckr](https://github.com/greedy-wudpeckr) - Fix PluginSettings heading hierarchy. Thanks to [@​greedy-wudpeckr](https://github.com/greedy-wudpeckr) - Fix a11y roles in ClusterChooserPopup for screen readers. Thanks to [@​mahmoudmagdy1-1](https://github.com/mahmoudmagdy1-1) - Fix alignment in narrow layouts for NameValueTable. Thanks to [@​mahmoudmagdy1-1](https://github.com/mahmoudmagdy1-1) - Fixed ignored k8cache error handling. Thanks to [@​greedy-wudpeckr](https://github.com/greedy-wudpeckr) - Add crossorigin to manifest link. Thanks to [@​zyzzmohit](https://github.com/zyzzmohit) - Fix age column sorting in ObjectEventList. Thanks to [@​greedy-wudpeckr](https://github.com/greedy-wudpeckr) - Auto-detect platform for Apple Silicon Macs. Thanks to [@​Mandalorian7773](https://github.com/Mandalorian7773) - Add translatable aria-label fallback to Loader for screen readers. Thanks to [@​mastermaxx03](https://github.com/mastermaxx03) - Ensure complementary landmark has valid label in Activity. Thanks to [@​mastermaxx03](https://github.com/mastermaxx03) - Fix new project heading a11y issue. Thanks to [@​vyncent-t](https://github.com/vyncent-t) - Default to init container if main container not yet running. Thanks to [@​mastermaxx03](https://github.com/mastermaxx03) - Add responsive width to ConfirmDialog. Thanks to [@​ChayanDass](https://github.com/ChayanDass) - Fix alignment name and button in clusterRename. Thanks to [@​ChayanDass](https://github.com/ChayanDass) - Remove inert property from Sidebar. Thanks to [@​sniok](https://github.com/sniok) - Populate empty DialogTitle in AuthTypeoidc story. Thanks to [@​CODEAbhinav-art](https://github.com/CODEAbhinav-art) - Wrap MenuItem in MenuList for RestartMultipleButton. Thanks to [@​Vaishnav-Dhaval](https://github.com/Vaishnav-Dhaval) - Add dialog title to HaveClusters story. Thanks to [@​CODEAbhinav-art](https://github.com/CODEAbhinav-art) - Add missing properties to HeadlampTables interface. Thanks to [@​pallava-joshi](https://github.com/pallava-joshi) - Correct broken cluster settings navigation. Thanks to [@​emmanuel-ferdman](https://github.com/emmanuel-ferdman) - Remove empty h1 from ClusterDialog. Thanks to [@​aravind4799](https://github.com/aravind4799) - Fix narration for Default Namespace in SettingsCluster. Thanks to [@​vyncent-t](https://github.com/vyncent-t) - Disable close on select in PureNamespaceAutocomplete. Thanks to [@​YotamKorah](https://github.com/YotamKorah) - Cascade delete Pods when deleting Jobs. Thanks to [@​beep-boopp](https://github.com/beep-boopp) - Fix cluster rename bug for clusters with special characters. Thanks to [@​StevenPG](https://github.com/StevenPG) - Avoid invalid field selector for pod metrics. Thanks to [@​wingerx](https://github.com/wingerx) - Persist rows-per-page selection to localStorage on change in Table. Thanks to [@​Trulsaa](https://github.com/Trulsaa) - Preserve original URL after OIDC authentication. Thanks to [@​justinas-wix](https://github.com/justinas-wix) - Fix scheme conversion and logging in multiplexer. Thanks to [@​illume](https://github.com/illume) - Stop watcher goroutines on server shutdown. Thanks to [@​zyzzmohit](https://github.com/zyzzmohit) - Fix picking the hash for chocolatey version bump. Thanks to [@​joaquimrocha](https://github.com/joaquimrocha) - Fix showing corrupt file on Mac. Thanks to [@​mastermaxx03](https://github.com/mastermaxx03) - Add make cluster list scrollable to improve usability for keyboard users. Thanks to [@​mahmoudmagdy1-1](https://github.com/mahmoudmagdy1-1) #### 💻 Development - Support apiGroup + kind for registerKindIcon. Thanks to [@​aadhil2k4](https://github.com/aadhil2k4) - Update app, backend, frontend, headlamp-plugin dependencies. Thanks to [@​skoeva](https://github.com/skoeva) - Move HeadlampConfig to headlampconfig package. Thanks to [@​krrish-sehgal](https://github.com/krrish-sehgal) - Add update and delete coverage to informer tests for k8cache. Thanks to [@​ChayanDass](https://github.com/ChayanDass) - Refactor ts: made customResourceDefinition optional in CRClassArgs. Thanks to [@​pallava-joshi](https://github.com/pallava-joshi) - Lift up tableSettings helpers and add localStorage to ClusterTable. Thanks to [@​StevenPG](https://github.com/StevenPG) - Fix translations by using fs-backend with frontend locales path. Thanks to [@​sniok](https://github.com/sniok) - Replace execSync with execFileSync in headlamp-plugin/scripts. Thanks to [@​skoeva](https://github.com/skoeva) - Fix delete error handling to show correct success/failure messages. Thanks to [@​gambtho](https://github.com/gambtho) - Bundle source with esbuild, upgrade to vitest. Thanks to [@​sniok](https://github.com/sniok) - Refactor NavigationTabs component so it doesn't require cloning. Thanks to [@​sniok](https://github.com/sniok) - Add .cmd shim for Windows to headlamp-plugin. Thanks to [@​skoeva](https://github.com/skoeva) - Add tests and stories for AuthToken Component. Thanks to [@​aravind4799](https://github.com/aravind4799) - Add test for terminal.tsx file. Thanks to [@​ChayanDass](https://github.com/ChayanDass) - Add Storybook stories for ResourceTableColumnChooser. Thanks to [@​mastermaxx03](https://github.com/mastermaxx03) - Add stories for SettingsClusters and SettingsCluster. Thanks to [@​greedy-wudpeckr](https://github.com/greedy-wudpeckr) - Add test for LogsButton.tsx file. Thanks to [@​aravind4799](https://github.com/aravind4799) - Provide automatic aria-labelledby for Dialog accessibility. Thanks to [@​mastermaxx03](https://github.com/mastermaxx03) - Update Terminal snapshots. Thanks to [@​mastermaxx03](https://github.com/mastermaxx03) - headlamp-plugin: Bump to 0.13.1 #### 📖 Documentation - Add documentation for Oracle K8s Engine support. Thanks to [@​jaiakash](https://github.com/jaiakash) - Add OpenUnison configuration guide. Thanks to [@​mlbiam](https://github.com/mlbiam) - Add many more plugin development tutorials including for List and Detail views. Thanks to [@​yolossn](https://github.com/yolossn) - Fix some typos in contributing guide. Thanks to [@​gmarav05](https://github.com/gmarav05) <!-- end-release-notes --> **Container image:** 🐳 [ghcr.io/headlamp-k8s/headlamp:v0.41.0](https://github.com/orgs/headlamp-k8s/packages/container/package/headlamp) **Desktop Apps:** 🐧 [Flatpak / Linux (AMD64)](https://flathub.org/apps/details/io.kinvolk.Headlamp) 🐧 Linux AppImage [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-linux-x64.AppImage), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-linux-arm64.AppImage), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-linux-armv7l.AppImage) 🐧 Linux Tarball [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-linux-x64.tar.gz), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-linux-arm64.tar.gz), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-linux-armv7l.tar.gz) 🐧 Debian / Linux [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/headlamp_0.41.0-1_amd64.deb) :green\_apple: [Mac (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-mac-x64.dmg) :green\_apple: [Mac (ARM/M1)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-mac-arm64.dmg) :blue\_square: [Windows (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.41.0/Headlamp-0.41.0-win-x64.exe) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #5009 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| 12b97455ca | chore(deps): update g33kphr33k/musicgrabber docker tag to v2.5.1 (#5013) | |||
| 7fb2eccf83 | chore(deps): update dependency av1155/houndarr to v1.6.2 (#5007) | |||
| e39220a499 | chore(deps): update caronc/apprise docker tag to v1.3.3 (#5006) | |||
| 3fa386520a |
chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.6.0 (#5001)
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [harbor.alexlebens.net/images/site-documentation](https://gitea.alexlebens.dev/alexlebens/site-documentation) | minor | `0.5.0` → `0.6.0` |
---
### Release Notes
<details>
<summary>alexlebens/site-documentation (harbor.alexlebens.net/images/site-documentation)</summary>
### [`v0.6.0`](https://gitea.alexlebens.dev/alexlebens/site-documentation/blob/HEAD/CHANGELOG.md#060-2026-03-23)
[Compare Source](https://gitea.alexlebens.dev/alexlebens/site-documentation/compare/0.5.0...0.6.0)
##### Features
- add more apps ([ce3d1a4](
|
|||
| 6f840f9380 |
tmp/refactor (#4999)
Reviewed-on: #4999 |
|||
| 153f341c5b |
tmp/refactor (#4997)
Reviewed-on: #4997 |
|||
| 2beff516d6 | feat: refactor authentik | |||
| e927906fa3 | feat: add reference | |||
| 29999cb82f | feat: refactor audiobookshelf | |||
| 6a7a96f167 |
chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.5.0 (#4989)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [harbor.alexlebens.net/images/site-documentation](https://gitea.alexlebens.dev/alexlebens/site-documentation) | minor | `0.3.0` → `0.5.0` | --- ### Release Notes <details> <summary>alexlebens/site-documentation (harbor.alexlebens.net/images/site-documentation)</summary> ### [`v0.5.0`](https://gitea.alexlebens.dev/alexlebens/site-documentation/releases/tag/0.5.0) [Compare Source](https://gitea.alexlebens.dev/alexlebens/site-documentation/compare/0.4.0...0.5.0) ### [0.5.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.4.0...0.5.0) (2026-03-23) ##### Features - add argo-cd ([36be56e]( |
|||
| 9189706ab1 |
chore(deps): update unpoller/unpoller to v2.35.0 (#4982)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.34.0` → `v2.35.0` | | [unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.34.0` → `v2.35.0` | --- ### Release Notes <details> <summary>unpoller/unpoller (ghcr.io/unpoller/unpoller)</summary> ### [`v2.35.0`](https://github.com/unpoller/unpoller/releases/tag/v2.35.0) [Compare Source](https://github.com/unpoller/unpoller/compare/v2.34.0...v2.35.0) ##### Changelog - [`873202a`]( |
|||
| ad89a09482 |
chore(deps): update haproxy docker tag to v3.3.6 (#4991)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | haproxy | minor | `3.0.19-alpine` → `3.3.6-alpine` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4991 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| 48a3afd121 |
Change to Alpine (#4993)
Reviewed-on: #4993 |
|||
| 3599b7a8a6 |
tmp/refactor (#4988)
Reviewed-on: #4988 |
|||
| 11b2efd332 |
tmp/refactor (#4986)
Reviewed-on: #4986 |
|||
| de8433f8d5 | chore(deps): update dependency av1155/houndarr to v1.6.1 (#4985) | |||
| f5611385ab |
Refactor Pass on Helm Charts (#4983)
Reviewed-on: #4983 |
|||
| bb02431114 |
tmp/folder (#4980)
Reviewed-on: #4980 |
|||
| 5e102d7b19 |
tmp/folder (#4978)
Reviewed-on: #4978 |
|||
| a6de6e60d6 |
chore(deps): update dawarich to v1.4.0 (#4976)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [Freika/dawarich](https://github.com/Freika/dawarich) | minor | `1.3.4` → `1.4.0` | | [freikin/dawarich](https://github.com/Freika/dawarich) | minor | `1.3.4` → `1.4.0` | --- ### Release Notes <details> <summary>Freika/dawarich (Freika/dawarich)</summary> ### [`v1.4.0`](https://github.com/Freika/dawarich/blob/HEAD/CHANGELOG.md#140--Unreleased) [Compare Source](https://github.com/Freika/dawarich/compare/1.3.4...1.4.0) ##### Added - Family page now contains a map with family members markers on it. - Visits page now have "Confirm all" and "Decline all" buttons to quickly confirm or decline all visit suggestions at once. ##### Changed - Updated look and feel - The point counting was changed to be more efficient on bigger accounts. - Redesigned raw data archival system for large instances (10M+ points). Archival now runs per-user via Sidekiq jobs instead of a single sequential process, uses PK cursor-based queries instead of full table scans, and processes in 50K-point chunks with 5K-batch flag updates to minimize DB lock contention. Inline verification removed in favor of daily spot-checks. FK constraint changed from `ON DELETE nullify` to `ON DELETE RESTRICT` to prevent cascading updates on large tables. ##### Fixed - Fix Lite plan archival warnings sending all three notifications (11-month, 11.5-month, and 12-month) simultaneously when a user's oldest data already exceeds all thresholds. Now only the most severe warning is sent, and lower thresholds are marked as already notified. - Fix intermittent 502/504 errors caused by `User.reset_counters(:points)` running synchronously during OwnTracks, Overland, and API point creation. The full `COUNT(*)` query blocked web workers for 60–500+ seconds on large accounts, starving all other requests. Counter reset now runs as a background job. - Misconfigured Prometheus settings will no longer litter logs with error messages, it will make multiple attempts to connect instead and then stop. - One of previous versions removed a database index making points upload very slow. The index is now added back to fix the issue. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4976 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| 702ed26cd5 |
tmp/houndarr (#4972)
Reviewed-on: #4972 |
|||
| bef2ff5c44 |
feat: give plex an lb (#4969)
Reviewed-on: #4969 |
|||
| 0811d84ef1 |
feat: remove trivy dashboards (#4966)
Reviewed-on: #4966 |
|||
| 50b7e8e647 |
chore(deps): update g33kphr33k/musicgrabber docker tag to v2.5.0 (#4964)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | g33kphr33k/musicgrabber | minor | `2.4.6` → `2.5.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4964 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| f570ecc606 |
chore(deps): update av1155/houndarr to v1.6.0 (#4962)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.5.0` → `v1.6.0` | | [ghcr.io/av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.5.0` → `v1.6.0` | --- ### Release Notes <details> <summary>av1155/houndarr (av1155/houndarr)</summary> ### [`v1.6.0`](https://github.com/av1155/houndarr/releases/tag/v1.6.0) [Compare Source](https://github.com/av1155/houndarr/compare/v1.5.0...v1.6.0) ##### Added - Opt-in upgrade search pass that periodically re-searches library items which already have a file and meet the quality cutoff, giving each `*arr` instance a chance to find better releases; each instance has independent batch size, cooldown, and hourly cap controls ([#​266](https://github.com/av1155/houndarr/issues/266)). ##### Changed - A 3-second pause is now inserted between consecutive real searches within the same cycle to spread downstream indexer fan-out; the delay applies only to dispatched searches, not to skipped or errored items ([#​272](https://github.com/av1155/houndarr/issues/272)). ##### Fixed - Navigating to the settings help page via the "What do these settings mean?" link inside the instance modal no longer leaves the page scroll-locked until refresh ([#​268](https://github.com/av1155/houndarr/issues/268)). - Instance modal on mobile no longer briefly appears compact before expanding; the dialog now animates in fully populated ([#​268](https://github.com/av1155/houndarr/issues/268)). - Dashboard instance cards now enter with a smooth container-level fade that matches the shell animation instead of a per-card flash ([#​268](https://github.com/av1155/houndarr/issues/268)). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4962 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| f8b9af1027 | chore(deps): update calibrain/shelfmark to v1.2.1 (#4961) | |||
| 83d208974f | chore(deps): update frederikemmer/medialyze to v0.2.3 (#4959) | |||
| d910204db3 | chore(deps): update ghcr.io/linuxserver/plex:1.43.0 docker digest to a27f1ce (#4957) | |||
| c71e7ad05f |
chore(deps): update av1155/houndarr to v1.5.0 (#4955)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.4.0` → `v1.5.0` | | [ghcr.io/av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.4.0` → `v1.5.0` | --- ### Release Notes <details> <summary>av1155/houndarr (av1155/houndarr)</summary> ### [`v1.5.0`](https://github.com/av1155/houndarr/releases/tag/v1.5.0) [Compare Source](https://github.com/av1155/houndarr/compare/v1.4.0...v1.5.0) ##### Added - Non-root container startup is now supported via pod `securityContext` for clusters enforcing Pod Security Standards, as an alternative to the default `PUID`/`PGID` remapping mode ([#​258](https://github.com/av1155/houndarr/issues/258)). - Proxy authentication mode (`HOUNDARR_AUTH_MODE=proxy`) delegates login to an upstream identity-aware proxy via a configurable request header ([#​259](https://github.com/av1155/houndarr/issues/259)). - Official Helm chart published to `oci://ghcr.io/av1155/charts/houndarr`; Flux users can deploy with an `OCIRepository` + `HelmRelease` instead of raw manifests ([#​261](https://github.com/av1155/houndarr/issues/261)). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4955 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| d413d09577 |
chore(deps): update grimmory-tools/grimmory to v2.3.0 (#4953)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/grimmory-tools/grimmory](https://github.com/grimmory-tools/grimmory) | minor | `v2.2.6` → `v2.3.0` | | [grimmory-tools/grimmory](https://github.com/grimmory-tools/grimmory) | minor | `v2.2.6` → `v2.3.0` | --- ### Release Notes <details> <summary>grimmory-tools/grimmory (ghcr.io/grimmory-tools/grimmory)</summary> ### [`v2.3.0`](https://github.com/grimmory-tools/grimmory/releases/tag/v2.3.0) [Compare Source](https://github.com/grimmory-tools/grimmory/compare/v2.2.7...v2.3.0) ##### Features - **release:** document develop-based stable release previews ([930e526]( |
|||
| fa025b7f0c |
Swap to Grimmory (#4951)
Reviewed-on: #4951 |
|||
| 54843abce7 | chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.15.1 (#4949) | |||
| 1fe3acfd2b |
chore(deps): update av1155/houndarr to v1.4.0 (#4947)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.3.2` → `v1.4.0` | | [ghcr.io/av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.3.2` → `v1.4.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>av1155/houndarr (av1155/houndarr)</summary> ### [`v1.4.0`](https://github.com/av1155/houndarr/releases/tag/v1.4.0) [Compare Source](https://github.com/av1155/houndarr/compare/v1.3.2...v1.4.0) ##### Added - `HOUNDARR_TRUSTED_PROXIES` now accepts CIDR subnets (e.g. `172.18.0.0/16`) in addition to individual IP addresses ([#​245](https://github.com/av1155/houndarr/issues/245), [#​248](https://github.com/av1155/houndarr/issues/248)) - Kubernetes deployment guide with StatefulSet, headless Service, and Ingress examples ([#​255](https://github.com/av1155/houndarr/issues/255)) - FAQ entry explaining why Houndarr exists alongside built-in \*arr search ([#​253](https://github.com/av1155/houndarr/issues/253)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4947 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| 0c37784a5c | chore(deps): update ghcr.io/home-assistant/home-assistant docker tag to v2026.3.3 (#4945) | |||
| e0c9505772 | chore(deps): update dependency home-assistant/core to v2026.3.3 (#4944) | |||
| 85b5c73c32 |
tmp/hound (#4942)
Reviewed-on: #4942 |
|||
| 1da3a6837f |
tmp/lang (#4940)
Reviewed-on: #4940 |
|||
| 6b8c2826f5 |
tmp/lang (#4938)
Reviewed-on: #4938 |
|||
| ae3ac652de | chore(deps): update searxng/searxng:latest docker digest to b6db575 (#4936) | |||
| 71eddc44e3 |
chore(deps): update helm release external-secrets to v2.2.0 (#4927)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.1.0` → `2.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0) Image: `ghcr.io/external-secrets/external-secrets:v2.2.0` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> ##### What's Changed ##### General - chore: release charts v2.1.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6030](https://github.com/external-secrets/external-secrets/pull/6030) - chore: fix the stability doc by [@​Skarlso](https://github.com/Skarlso) in [#​6035](https://github.com/external-secrets/external-secrets/pull/6035) - fix(security): Fix vulnerabilities by [@​othomann](https://github.com/othomann) in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052) - fix(aws): sync tags and resource policy even when secret value unchanged by [@​evs-secops](https://github.com/evs-secops) in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025) - fix: publish now uses docker build v4 which required some changes by [@​Skarlso](https://github.com/Skarlso) in [#​6062](https://github.com/external-secrets/external-secrets/pull/6062) - feat(gcpsm): auto-detect projectID from GCP metadata server by [@​patjlm](https://github.com/patjlm) in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922) - chore(templating): Remove years in license and their checks by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​5955](https://github.com/external-secrets/external-secrets/pull/5955) - docs: Add Roche to official ADOPTERS by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6076](https://github.com/external-secrets/external-secrets/pull/6076) - feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068) - fix(onepassword): support native item IDs by [@​chadxz](https://github.com/chadxz) in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073) - feat: extract LGTM processor to external JS file with tests by [@​mateenali66](https://github.com/mateenali66) in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074) - feat: fail fast if LGTM label does not exist in repository by [@​mateenali66](https://github.com/mateenali66) in [#​6078](https://github.com/external-secrets/external-secrets/pull/6078) - feat(passbolt): add support for Passbolt V5 API by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919) - fix(infisical): dataFrom.find.path should filter by secret path not name by [@​johnvox](https://github.com/johnvox) in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086) - fix: disable the priority queue which misbehaves at scale by [@​Skarlso](https://github.com/Skarlso) in [#​6083](https://github.com/external-secrets/external-secrets/pull/6083) - chore: update go version to 1.26.1 by [@​Skarlso](https://github.com/Skarlso) in [#​6072](https://github.com/external-secrets/external-secrets/pull/6072) - docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@​Br1an67](https://github.com/Br1an67) in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056) - fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@​Br1an67](https://github.com/Br1an67) in [#​6036](https://github.com/external-secrets/external-secrets/pull/6036) - feat(templating): Add certSANs function to extract SANs from certificates by [@​mzdeb](https://github.com/mzdeb) in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058) - docs: document template.metadata labels/annotations behavior by [@​lucpas](https://github.com/lucpas) in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102) - fix: CODEOWNERS are seriously out of date by [@​Skarlso](https://github.com/Skarlso) in [#​6106](https://github.com/external-secrets/external-secrets/pull/6106) - feat(helm): add readinessProbe support for external-secrets deployment by [@​AlexOQ](https://github.com/AlexOQ) in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831) - fix: update grpc for CVE-2026-33186 by [@​Skarlso](https://github.com/Skarlso) in [#​6108](https://github.com/external-secrets/external-secrets/pull/6108) - feat(azurekv): add expiration time to azure kv secret by [@​muraliavarma](https://github.com/muraliavarma) in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935) - feat: add path to cloud.ru provider by [@​heavyandrew](https://github.com/heavyandrew) in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952) - fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@​riccardomc](https://github.com/riccardomc) in [#​6113](https://github.com/external-secrets/external-secrets/pull/6113) ##### Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6038](https://github.com/external-secrets/external-secrets/pull/6038) - chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6047](https://github.com/external-secrets/external-secrets/pull/6047) - chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6050](https://github.com/external-secrets/external-secrets/pull/6050) - chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6049](https://github.com/external-secrets/external-secrets/pull/6049) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6039](https://github.com/external-secrets/external-secrets/pull/6039) - chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6043](https://github.com/external-secrets/external-secrets/pull/6043) - chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6040](https://github.com/external-secrets/external-secrets/pull/6040) - chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6044](https://github.com/external-secrets/external-secrets/pull/6044) - chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6042](https://github.com/external-secrets/external-secrets/pull/6042) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6041](https://github.com/external-secrets/external-secrets/pull/6041) - chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6046](https://github.com/external-secrets/external-secrets/pull/6046) - chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6048](https://github.com/external-secrets/external-secrets/pull/6048) - chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6093](https://github.com/external-secrets/external-secrets/pull/6093) - chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6088](https://github.com/external-secrets/external-secrets/pull/6088) - chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6087](https://github.com/external-secrets/external-secrets/pull/6087) - chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6096](https://github.com/external-secrets/external-secrets/pull/6096) - chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6094](https://github.com/external-secrets/external-secrets/pull/6094) - chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6095](https://github.com/external-secrets/external-secrets/pull/6095) - chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6089](https://github.com/external-secrets/external-secrets/pull/6089) - chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6092](https://github.com/external-secrets/external-secrets/pull/6092) - chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6090](https://github.com/external-secrets/external-secrets/pull/6090) - chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6091](https://github.com/external-secrets/external-secrets/pull/6091) ##### New Contributors - [@​othomann](https://github.com/othomann) made their first contribution in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052) - [@​evs-secops](https://github.com/evs-secops) made their first contribution in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025) - [@​patjlm](https://github.com/patjlm) made their first contribution in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922) - [@​jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068) - [@​chadxz](https://github.com/chadxz) made their first contribution in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073) - [@​mateenali66](https://github.com/mateenali66) made their first contribution in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074) - [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919) - [@​johnvox](https://github.com/johnvox) made their first contribution in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086) - [@​Br1an67](https://github.com/Br1an67) made their first contribution in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056) - [@​mzdeb](https://github.com/mzdeb) made their first contribution in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058) - [@​lucpas](https://github.com/lucpas) made their first contribution in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102) - [@​AlexOQ](https://github.com/AlexOQ) made their first contribution in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831) - [@​muraliavarma](https://github.com/muraliavarma) made their first contribution in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935) - [@​heavyandrew](https://github.com/heavyandrew) made their first contribution in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=--> Reviewed-on: #4927 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| c1175d4cbd |
chore(deps): update gitroomhq/postiz-app to v2.21.0 (#4924)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/gitroomhq/postiz-app | minor | `v2.20.2` → `v2.21.0` | | [gitroomhq/postiz-app](https://github.com/gitroomhq/postiz-app) | minor | `v2.20.2` → `v2.21.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>gitroomhq/postiz-app (gitroomhq/postiz-app)</summary> ### [`v2.21.0`](https://github.com/gitroomhq/postiz-app/releases/tag/v2.21.0): MeWe Integration, Integration Fixes & PR Quality [Compare Source](https://github.com/gitroomhq/postiz-app/compare/v2.20.2...v2.21.0) #### What's Changed ##### New Integration - Added MeWe social media integration ##### Improvements - Added PR Quality workflow for pull request checks ##### Fixes - Fixed adding integrations flow - Fixed OAuth integration connection handling **Full Changelog**: <https://github.com/gitroomhq/postiz-app/compare/v2.20.2...v2.21.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4924 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| f4922e05ee |
chore(deps): update dependency external-secrets/external-secrets to v2.2.0 (#4923)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets/external-secrets](https://github.com/external-secrets/external-secrets) | minor | `v2.1.0` → `v2.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets/external-secrets)</summary> ### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0) Image: `ghcr.io/external-secrets/external-secrets:v2.2.0` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release charts v2.1.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6030](https://github.com/external-secrets/external-secrets/pull/6030) - chore: fix the stability doc by [@​Skarlso](https://github.com/Skarlso) in [#​6035](https://github.com/external-secrets/external-secrets/pull/6035) - fix(security): Fix vulnerabilities by [@​othomann](https://github.com/othomann) in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052) - fix(aws): sync tags and resource policy even when secret value unchanged by [@​evs-secops](https://github.com/evs-secops) in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025) - fix: publish now uses docker build v4 which required some changes by [@​Skarlso](https://github.com/Skarlso) in [#​6062](https://github.com/external-secrets/external-secrets/pull/6062) - feat(gcpsm): auto-detect projectID from GCP metadata server by [@​patjlm](https://github.com/patjlm) in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922) - chore(templating): Remove years in license and their checks by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​5955](https://github.com/external-secrets/external-secrets/pull/5955) - docs: Add Roche to official ADOPTERS by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6076](https://github.com/external-secrets/external-secrets/pull/6076) - feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068) - fix(onepassword): support native item IDs by [@​chadxz](https://github.com/chadxz) in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073) - feat: extract LGTM processor to external JS file with tests by [@​mateenali66](https://github.com/mateenali66) in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074) - feat: fail fast if LGTM label does not exist in repository by [@​mateenali66](https://github.com/mateenali66) in [#​6078](https://github.com/external-secrets/external-secrets/pull/6078) - feat(passbolt): add support for Passbolt V5 API by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919) - fix(infisical): dataFrom.find.path should filter by secret path not name by [@​johnvox](https://github.com/johnvox) in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086) - fix: disable the priority queue which misbehaves at scale by [@​Skarlso](https://github.com/Skarlso) in [#​6083](https://github.com/external-secrets/external-secrets/pull/6083) - chore: update go version to 1.26.1 by [@​Skarlso](https://github.com/Skarlso) in [#​6072](https://github.com/external-secrets/external-secrets/pull/6072) - docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@​Br1an67](https://github.com/Br1an67) in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056) - fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@​Br1an67](https://github.com/Br1an67) in [#​6036](https://github.com/external-secrets/external-secrets/pull/6036) - feat(templating): Add certSANs function to extract SANs from certificates by [@​mzdeb](https://github.com/mzdeb) in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058) - docs: document template.metadata labels/annotations behavior by [@​lucpas](https://github.com/lucpas) in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102) - fix: CODEOWNERS are seriously out of date by [@​Skarlso](https://github.com/Skarlso) in [#​6106](https://github.com/external-secrets/external-secrets/pull/6106) - feat(helm): add readinessProbe support for external-secrets deployment by [@​AlexOQ](https://github.com/AlexOQ) in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831) - fix: update grpc for CVE-2026-33186 by [@​Skarlso](https://github.com/Skarlso) in [#​6108](https://github.com/external-secrets/external-secrets/pull/6108) - feat(azurekv): add expiration time to azure kv secret by [@​muraliavarma](https://github.com/muraliavarma) in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935) - feat: add path to cloud.ru provider by [@​heavyandrew](https://github.com/heavyandrew) in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952) - fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@​riccardomc](https://github.com/riccardomc) in [#​6113](https://github.com/external-secrets/external-secrets/pull/6113) ##### Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6038](https://github.com/external-secrets/external-secrets/pull/6038) - chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6047](https://github.com/external-secrets/external-secrets/pull/6047) - chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6050](https://github.com/external-secrets/external-secrets/pull/6050) - chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6049](https://github.com/external-secrets/external-secrets/pull/6049) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6039](https://github.com/external-secrets/external-secrets/pull/6039) - chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6043](https://github.com/external-secrets/external-secrets/pull/6043) - chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6040](https://github.com/external-secrets/external-secrets/pull/6040) - chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6044](https://github.com/external-secrets/external-secrets/pull/6044) - chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6042](https://github.com/external-secrets/external-secrets/pull/6042) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6041](https://github.com/external-secrets/external-secrets/pull/6041) - chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6046](https://github.com/external-secrets/external-secrets/pull/6046) - chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6048](https://github.com/external-secrets/external-secrets/pull/6048) - chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6093](https://github.com/external-secrets/external-secrets/pull/6093) - chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6088](https://github.com/external-secrets/external-secrets/pull/6088) - chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6087](https://github.com/external-secrets/external-secrets/pull/6087) - chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6096](https://github.com/external-secrets/external-secrets/pull/6096) - chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6094](https://github.com/external-secrets/external-secrets/pull/6094) - chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6095](https://github.com/external-secrets/external-secrets/pull/6095) - chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6089](https://github.com/external-secrets/external-secrets/pull/6089) - chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6092](https://github.com/external-secrets/external-secrets/pull/6092) - chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6090](https://github.com/external-secrets/external-secrets/pull/6090) - chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6091](https://github.com/external-secrets/external-secrets/pull/6091) #### New Contributors - [@​othomann](https://github.com/othomann) made their first contribution in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052) - [@​evs-secops](https://github.com/evs-secops) made their first contribution in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025) - [@​patjlm](https://github.com/patjlm) made their first contribution in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922) - [@​jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068) - [@​chadxz](https://github.com/chadxz) made their first contribution in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073) - [@​mateenali66](https://github.com/mateenali66) made their first contribution in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074) - [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919) - [@​johnvox](https://github.com/johnvox) made their first contribution in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086) - [@​Br1an67](https://github.com/Br1an67) made their first contribution in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056) - [@​mzdeb](https://github.com/mzdeb) made their first contribution in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058) - [@​lucpas](https://github.com/lucpas) made their first contribution in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102) - [@​AlexOQ](https://github.com/AlexOQ) made their first contribution in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831) - [@​muraliavarma](https://github.com/muraliavarma) made their first contribution in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935) - [@​heavyandrew](https://github.com/heavyandrew) made their first contribution in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4923 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| d59fd7a0a6 | chore(deps): update helm release traefik to v39.0.6 (#4934) | |||
| b5fa28c44b | chore(deps): update helm release argo-workflows to v1.0.5 (#4932) | |||
| a25522fbf0 | chore(deps): update searxng/searxng:latest docker digest to b41b861 (#4930) | |||
| 96eae46b5e |
chore(deps): update kube-prometheus-stack docker tag to v82.13.0 (#4928)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | minor | `82.12.0` → `82.13.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary> ### [`v82.13.0`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-82.13.0) [Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-82.12.0...kube-prometheus-stack-82.13.0) kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator. #### What's Changed - \[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by [@​renovate](https://github.com/renovate)\[bot] in [#​6758](https://github.com/prometheus-community/helm-charts/pull/6758) **Full Changelog**: <https://github.com/prometheus-community/helm-charts/compare/prometheus-nginx-exporter-1.20.5...kube-prometheus-stack-82.13.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4928 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net> |
|||
| 2b58087e06 | chore(deps): update searxng/searxng:latest docker digest to aa1dca9 (#4925) | |||
| 4cfa054480 |
tmp/airvpn (#4921)
Reviewed-on: #4921 |
