9221 Commits

Author	SHA1	Message	Date
Renovate Bot	b9082fee3a	chore(deps): update dock.mau.dev/mautrix/whatsapp docker tag to v0.2603.0	2026-03-23 02:52:28 +00:00
Alex Lebens	153f341c5b	tmp/refactor (#4997) ... Reviewed-on: #4997	2026-03-23 02:51:10 +00:00
Alex Lebens	2beff516d6	feat: refactor authentik	2026-03-23 02:34:59 +00:00
Alex Lebens	e927906fa3	feat: add reference	2026-03-23 02:34:59 +00:00
Alex Lebens	29999cb82f	feat: refactor audiobookshelf	2026-03-23 02:34:59 +00:00
Renovate Bot	6a7a96f167	chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.5.0 (#4989) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [harbor.alexlebens.net/images/site-documentation](https://gitea.alexlebens.dev/alexlebens/site-documentation) | minor | `0.3.0` → `0.5.0` | --- ### Release Notes <details> <summary>alexlebens/site-documentation (harbor.alexlebens.net/images/site-documentation)</summary> ### [`v0.5.0`](https://gitea.alexlebens.dev/alexlebens/site-documentation/releases/tag/0.5.0) [Compare Source](https://gitea.alexlebens.dev/alexlebens/site-documentation/compare/0.4.0...0.5.0) ### [0.5.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.4.0...0.5.0) (2026-03-23) ##### Features - add argo-cd ([36be56e](36be56e450)) ### [`v0.4.0`](https://gitea.alexlebens.dev/alexlebens/site-documentation/releases/tag/0.4.0) [Compare Source](https://gitea.alexlebens.dev/alexlebens/site-documentation/compare/0.3.0...0.4.0) ### [0.4.0](http://gitea-http.gitea:3000/alexlebens/site-documentation/compare/0.3.0...0.4.0) (2026-03-23) ##### Bug Fixes - remove react deps ([5e97a52](5e97a524ba)) ##### Features - add and update pre-commit ([95805dc](95805dcd07)) - add applications, actual ([e21d142](e21d1426d2)) - add argo-workflows ([abde3db](abde3db3c7)) - merge ([a3e6e65](a3e6e65c79)) - remove splash template ([3fecb72](3fecb72e89)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4989 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-23 01:34:27 +00:00
Renovate Bot	9189706ab1	chore(deps): update unpoller/unpoller to v2.35.0 (#4982) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.34.0` → `v2.35.0` | | [unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.34.0` → `v2.35.0` | --- ### Release Notes <details> <summary>unpoller/unpoller (ghcr.io/unpoller/unpoller)</summary> ### [`v2.35.0`](https://github.com/unpoller/unpoller/releases/tag/v2.35.0) [Compare Source](https://github.com/unpoller/unpoller/compare/v2.34.0...v2.35.0) ##### Changelog - [`873202a`](873202ab5b) fix(inputunifi): recover from GetActiveDHCPLeasesWithAssociations panic ([#&#8203;969](https://github.com/unpoller/unpoller/issues/969)) - [`38c74f1`](38c74f19c4) build(deps): bump the all group with 2 updates ([#&#8203;967](https://github.com/unpoller/unpoller/issues/967)) - [`54bb3bf`](54bb3bfe8e) feat(devices): add UDB (UniFi Device Bridge) support ([#&#8203;968](https://github.com/unpoller/unpoller/issues/968)) - [`4248d2e`](4248d2e304) build(deps): bump the all group with 4 updates ([#&#8203;964](https://github.com/unpoller/unpoller/issues/964)) - [`f94d10d`](f94d10d223) build(deps): bump the all group with 3 updates ([#&#8203;960](https://github.com/unpoller/unpoller/issues/960)) - [`a70e521`](a70e52180d) build(deps): bump goreleaser/goreleaser-action in the all group ([#&#8203;961](https://github.com/unpoller/unpoller/issues/961)) - [`074595c`](074595c0a9) Fix remote API (Fabric/API key): 429 handling, NVR filter, updateWeb nil panic ([#&#8203;958](https://github.com/unpoller/unpoller/issues/958)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4982 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-23 01:33:54 +00:00
Renovate Bot	ad89a09482	chore(deps): update haproxy docker tag to v3.3.6 (#4991) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | haproxy | minor | `3.0.19-alpine` → `3.3.6-alpine` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4991 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-23 01:21:10 +00:00
Alex Lebens	48a3afd121	Change to Alpine (#4993) ... Reviewed-on: #4993	2026-03-23 01:19:46 +00:00
Alex Lebens	3599b7a8a6	tmp/refactor (#4988) ... Reviewed-on: #4988	2026-03-23 01:04:56 +00:00
Alex Lebens	11b2efd332	tmp/refactor (#4986) ... Reviewed-on: #4986	2026-03-22 23:43:56 +00:00
Renovate Bot	de8433f8d5	chore(deps): update dependency av1155/houndarr to v1.6.1 (#4985)	2026-03-22 23:02:19 +00:00
Alex Lebens	f5611385ab	Refactor Pass on Helm Charts (#4983) ... Reviewed-on: #4983	2026-03-22 22:06:55 +00:00
Alex Lebens	bb02431114	tmp/folder (#4980) ... Reviewed-on: #4980	2026-03-22 17:55:11 +00:00
Alex Lebens	5e102d7b19	tmp/folder (#4978) ... Reviewed-on: #4978	2026-03-22 17:49:42 +00:00
Renovate Bot	a6de6e60d6	chore(deps): update dawarich to v1.4.0 (#4976) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [Freika/dawarich](https://github.com/Freika/dawarich) | minor | `1.3.4` → `1.4.0` | | [freikin/dawarich](https://github.com/Freika/dawarich) | minor | `1.3.4` → `1.4.0` | --- ### Release Notes <details> <summary>Freika/dawarich (Freika/dawarich)</summary> ### [`v1.4.0`](https://github.com/Freika/dawarich/blob/HEAD/CHANGELOG.md#140--Unreleased) [Compare Source](https://github.com/Freika/dawarich/compare/1.3.4...1.4.0) ##### Added - Family page now contains a map with family members markers on it. - Visits page now have "Confirm all" and "Decline all" buttons to quickly confirm or decline all visit suggestions at once. ##### Changed - Updated look and feel - The point counting was changed to be more efficient on bigger accounts. - Redesigned raw data archival system for large instances (10M+ points). Archival now runs per-user via Sidekiq jobs instead of a single sequential process, uses PK cursor-based queries instead of full table scans, and processes in 50K-point chunks with 5K-batch flag updates to minimize DB lock contention. Inline verification removed in favor of daily spot-checks. FK constraint changed from `ON DELETE nullify` to `ON DELETE RESTRICT` to prevent cascading updates on large tables. ##### Fixed - Fix Lite plan archival warnings sending all three notifications (11-month, 11.5-month, and 12-month) simultaneously when a user's oldest data already exceeds all thresholds. Now only the most severe warning is sent, and lower thresholds are marked as already notified. - Fix intermittent 502/504 errors caused by `User.reset_counters(:points)` running synchronously during OwnTracks, Overland, and API point creation. The full `COUNT(*)` query blocked web workers for 60–500+ seconds on large accounts, starving all other requests. Counter reset now runs as a background job. - Misconfigured Prometheus settings will no longer litter logs with error messages, it will make multiple attempts to connect instead and then stop. - One of previous versions removed a database index making points upload very slow. The index is now added back to fix the issue. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4976 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-22 17:28:11 +00:00
Alex Lebens	702ed26cd5	tmp/houndarr (#4972) ... Reviewed-on: #4972	2026-03-22 03:34:00 +00:00
Alex Lebens	bef2ff5c44	feat: give plex an lb (#4969) ... Reviewed-on: #4969	2026-03-22 03:23:36 +00:00
Alex Lebens	0811d84ef1	feat: remove trivy dashboards (#4966) ... Reviewed-on: #4966	2026-03-21 23:21:07 +00:00
Renovate Bot	50b7e8e647	chore(deps): update g33kphr33k/musicgrabber docker tag to v2.5.0 (#4964) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | g33kphr33k/musicgrabber | minor | `2.4.6` → `2.5.0` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4964 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-21 19:18:08 +00:00
Renovate Bot	f570ecc606	chore(deps): update av1155/houndarr to v1.6.0 (#4962) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.5.0` → `v1.6.0` | | [ghcr.io/av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.5.0` → `v1.6.0` | --- ### Release Notes <details> <summary>av1155/houndarr (av1155/houndarr)</summary> ### [`v1.6.0`](https://github.com/av1155/houndarr/releases/tag/v1.6.0) [Compare Source](https://github.com/av1155/houndarr/compare/v1.5.0...v1.6.0) ##### Added - Opt-in upgrade search pass that periodically re-searches library items which already have a file and meet the quality cutoff, giving each `*arr` instance a chance to find better releases; each instance has independent batch size, cooldown, and hourly cap controls ([#&#8203;266](https://github.com/av1155/houndarr/issues/266)). ##### Changed - A 3-second pause is now inserted between consecutive real searches within the same cycle to spread downstream indexer fan-out; the delay applies only to dispatched searches, not to skipped or errored items ([#&#8203;272](https://github.com/av1155/houndarr/issues/272)). ##### Fixed - Navigating to the settings help page via the "What do these settings mean?" link inside the instance modal no longer leaves the page scroll-locked until refresh ([#&#8203;268](https://github.com/av1155/houndarr/issues/268)). - Instance modal on mobile no longer briefly appears compact before expanding; the dialog now animates in fully populated ([#&#8203;268](https://github.com/av1155/houndarr/issues/268)). - Dashboard instance cards now enter with a smooth container-level fade that matches the shell animation instead of a per-card flash ([#&#8203;268](https://github.com/av1155/houndarr/issues/268)). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4962 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-21 19:17:16 +00:00
Renovate Bot	f8b9af1027	chore(deps): update calibrain/shelfmark to v1.2.1 (#4961)	2026-03-21 17:02:27 +00:00
Renovate Bot	83d208974f	chore(deps): update frederikemmer/medialyze to v0.2.3 (#4959)	2026-03-21 16:02:46 +00:00
Renovate Bot	d910204db3	chore(deps): update ghcr.io/linuxserver/plex:1.43.0 docker digest to a27f1ce (#4957)	2026-03-21 14:54:08 +00:00
Renovate Bot	c71e7ad05f	chore(deps): update av1155/houndarr to v1.5.0 (#4955) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.4.0` → `v1.5.0` | | [ghcr.io/av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.4.0` → `v1.5.0` | --- ### Release Notes <details> <summary>av1155/houndarr (av1155/houndarr)</summary> ### [`v1.5.0`](https://github.com/av1155/houndarr/releases/tag/v1.5.0) [Compare Source](https://github.com/av1155/houndarr/compare/v1.4.0...v1.5.0) ##### Added - Non-root container startup is now supported via pod `securityContext` for clusters enforcing Pod Security Standards, as an alternative to the default `PUID`/`PGID` remapping mode ([#&#8203;258](https://github.com/av1155/houndarr/issues/258)). - Proxy authentication mode (`HOUNDARR_AUTH_MODE=proxy`) delegates login to an upstream identity-aware proxy via a configurable request header ([#&#8203;259](https://github.com/av1155/houndarr/issues/259)). - Official Helm chart published to `oci://ghcr.io/av1155/charts/houndarr`; Flux users can deploy with an `OCIRepository` + `HelmRelease` instead of raw manifests ([#&#8203;261](https://github.com/av1155/houndarr/issues/261)). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4955 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-21 14:50:59 +00:00
Renovate Bot	d413d09577	chore(deps): update grimmory-tools/grimmory to v2.3.0 (#4953) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/grimmory-tools/grimmory](https://github.com/grimmory-tools/grimmory) | minor | `v2.2.6` → `v2.3.0` | | [grimmory-tools/grimmory](https://github.com/grimmory-tools/grimmory) | minor | `v2.2.6` → `v2.3.0` | --- ### Release Notes <details> <summary>grimmory-tools/grimmory (ghcr.io/grimmory-tools/grimmory)</summary> ### [`v2.3.0`](https://github.com/grimmory-tools/grimmory/releases/tag/v2.3.0) [Compare Source](https://github.com/grimmory-tools/grimmory/compare/v2.2.7...v2.3.0) ##### Features - **release:** document develop-based stable release previews ([930e526](930e526228)) ##### Bug Fixes - **api:** fix potential memory leaks in file processing ([031e8ae](031e8ae257)) - **ci:** correct artifact download action pin ([37ca101](37ca101dd4)) - **ci:** publish PR test results from workflow\_run ([11a76bf](11a76bffe1)) - **ci:** repair release preview and test result publishing ([afa5b81](afa5b818eb)) - drop telemetry from app ([#&#8203;52](https://github.com/grimmory-tools/grimmory/issues/52)) ([4d82cb7](4d82cb7188)) - **ui:** repair frontend compile after rebrand ([fea1ec6](fea1ec6930)) ##### Refactors - **build:** rename frontend dist output to grimmory ([ecf388f](ecf388f7a2)) - **i18n:** rename booklore translation keys to grimmory ([eb94afa](eb94afa7ad)) - **metadata:** move default parser from Amazon to Goodreads ([e252122](e252122bc5)) - pull kepubify & ffprobe during build ([#&#8203;50](https://github.com/grimmory-tools/grimmory/issues/50)) ([1c15629](1c15629a10)) - **ui:** rebrand frontend surfaces to grimmory ([d786dd8](d786dd8ccb)) ##### Chores - **api:** remove the custom startup banner ([98c9b1a](98c9b1ae65)) - **deps:** bump flatted from 3.4.1 to 3.4.2 in /booklore-ui ([#&#8203;73](https://github.com/grimmory-tools/grimmory/issues/73)) ([c4bd0c7](c4bd0c779a)) - **funding:** point support links at opencollective ([55c0ac0](55c0ac0899)) - **release:** 2.2.7 \[skip ci] ([0b5e24c](0b5e24c238)) - remove old verbose PR template, replace with temporary more low-key one. ([#&#8203;84](https://github.com/grimmory-tools/grimmory/issues/84)) ([b868526](b8685268a9)) - **ui:** drop financial support dialog ([#&#8203;21](https://github.com/grimmory-tools/grimmory/issues/21)) ([62be6b1](62be6b152c)) ##### Documentation - updated supported file formats in README.md ([#&#8203;68](https://github.com/grimmory-tools/grimmory/issues/68)) ([f912e80](f912e802f9)) ##### Style - **i18n:** normalize translation json formatting ([#&#8203;89](https://github.com/grimmory-tools/grimmory/issues/89)) ([857290d](857290d215)) - **ui:** simplify the topbar logo branding ([0416d48](0416d48a6c)) ### [`v2.2.7`](https://github.com/grimmory-tools/grimmory/releases/tag/v2.2.7) [Compare Source](https://github.com/grimmory-tools/grimmory/compare/v2.2.6...v2.2.7) ##### Bug Fixes - **api:** fix potential memory leaks in file processing ([031e8ae](031e8ae257)) - **ci:** correct artifact download action pin ([37ca101](37ca101dd4)) - **ci:** publish PR test results from workflow\_run ([11a76bf](11a76bffe1)) - drop telemetry from app ([#&#8203;52](https://github.com/grimmory-tools/grimmory/issues/52)) ([4d82cb7](4d82cb7188)) - **ui:** repair frontend compile after rebrand ([fea1ec6](fea1ec6930)) ##### Refactors - **build:** rename frontend dist output to grimmory ([ecf388f](ecf388f7a2)) - **i18n:** rename booklore translation keys to grimmory ([eb94afa](eb94afa7ad)) - **metadata:** move default parser from Amazon to Goodreads ([e252122](e252122bc5)) - pull kepubify & ffprobe during build ([#&#8203;50](https://github.com/grimmory-tools/grimmory/issues/50)) ([1c15629](1c15629a10)) - **ui:** rebrand frontend surfaces to grimmory ([d786dd8](d786dd8ccb)) ##### Chores - **api:** remove the custom startup banner ([98c9b1a](98c9b1ae65)) - **deps:** bump flatted from 3.4.1 to 3.4.2 in /booklore-ui ([#&#8203;73](https://github.com/grimmory-tools/grimmory/issues/73)) ([c4bd0c7](c4bd0c779a)) - **funding:** point support links at opencollective ([55c0ac0](55c0ac0899)) - remove old verbose PR template, replace with temporary more low-key one. ([#&#8203;84](https://github.com/grimmory-tools/grimmory/issues/84)) ([b868526](b8685268a9)) - **ui:** drop financial support dialog ([#&#8203;21](https://github.com/grimmory-tools/grimmory/issues/21)) ([62be6b1](62be6b152c)) ##### Documentation - updated supported file formats in README.md ([#&#8203;68](https://github.com/grimmory-tools/grimmory/issues/68)) ([f912e80](f912e802f9)) ##### Style - **i18n:** normalize translation json formatting ([#&#8203;89](https://github.com/grimmory-tools/grimmory/issues/89)) ([857290d](857290d215)) - **ui:** simplify the topbar logo branding ([0416d48](0416d48a6c)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4953 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-21 03:12:18 +00:00
Alex Lebens	fa025b7f0c	Swap to Grimmory (#4951) ... Reviewed-on: #4951	2026-03-21 01:23:53 +00:00
Renovate Bot	54843abce7	chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.15.1 (#4949)	2026-03-21 00:47:15 +00:00
Renovate Bot	1fe3acfd2b	chore(deps): update av1155/houndarr to v1.4.0 (#4947) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.3.2` → `v1.4.0` | | [ghcr.io/av1155/houndarr](https://github.com/av1155/houndarr) | minor | `v1.3.2` → `v1.4.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>av1155/houndarr (av1155/houndarr)</summary> ### [`v1.4.0`](https://github.com/av1155/houndarr/releases/tag/v1.4.0) [Compare Source](https://github.com/av1155/houndarr/compare/v1.3.2...v1.4.0) ##### Added - `HOUNDARR_TRUSTED_PROXIES` now accepts CIDR subnets (e.g. `172.18.0.0/16`) in addition to individual IP addresses ([#&#8203;245](https://github.com/av1155/houndarr/issues/245), [#&#8203;248](https://github.com/av1155/houndarr/issues/248)) - Kubernetes deployment guide with StatefulSet, headless Service, and Ingress examples ([#&#8203;255](https://github.com/av1155/houndarr/issues/255)) - FAQ entry explaining why Houndarr exists alongside built-in \*arr search ([#&#8203;253](https://github.com/av1155/houndarr/issues/253)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4947 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-21 00:45:11 +00:00
Renovate Bot	0c37784a5c	chore(deps): update ghcr.io/home-assistant/home-assistant docker tag to v2026.3.3 (#4945)	2026-03-21 00:41:44 +00:00
Renovate Bot	e0c9505772	chore(deps): update dependency home-assistant/core to v2026.3.3 (#4944)	2026-03-21 00:39:39 +00:00
Alex Lebens	85b5c73c32	tmp/hound (#4942) ... Reviewed-on: #4942	2026-03-21 00:37:28 +00:00
Alex Lebens	1da3a6837f	tmp/lang (#4940) ... Reviewed-on: #4940	2026-03-20 23:26:11 +00:00
Alex Lebens	6b8c2826f5	tmp/lang (#4938) ... Reviewed-on: #4938	2026-03-20 22:54:46 +00:00
Renovate Bot	ae3ac652de	chore(deps): update searxng/searxng:latest docker digest to b6db575 (#4936)	2026-03-20 21:54:00 +00:00
Renovate Bot	71eddc44e3	chore(deps): update helm release external-secrets to v2.2.0 (#4927) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.1.0` → `2.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0) Image: `ghcr.io/external-secrets/external-secrets:v2.2.0` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> ##### What's Changed ##### General - chore: release charts v2.1.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6030](https://github.com/external-secrets/external-secrets/pull/6030) - chore: fix the stability doc by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6035](https://github.com/external-secrets/external-secrets/pull/6035) - fix(security): Fix vulnerabilities by [@&#8203;othomann](https://github.com/othomann) in [#&#8203;6052](https://github.com/external-secrets/external-secrets/pull/6052) - fix(aws): sync tags and resource policy even when secret value unchanged by [@&#8203;evs-secops](https://github.com/evs-secops) in [#&#8203;6025](https://github.com/external-secrets/external-secrets/pull/6025) - fix: publish now uses docker build v4 which required some changes by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6062](https://github.com/external-secrets/external-secrets/pull/6062) - feat(gcpsm): auto-detect projectID from GCP metadata server by [@&#8203;patjlm](https://github.com/patjlm) in [#&#8203;5922](https://github.com/external-secrets/external-secrets/pull/5922) - chore(templating): Remove years in license and their checks by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;5955](https://github.com/external-secrets/external-secrets/pull/5955) - docs: Add Roche to official ADOPTERS by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6076](https://github.com/external-secrets/external-secrets/pull/6076) - feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@&#8203;jaruwat-panturat](https://github.com/jaruwat-panturat) in [#&#8203;6068](https://github.com/external-secrets/external-secrets/pull/6068) - fix(onepassword): support native item IDs by [@&#8203;chadxz](https://github.com/chadxz) in [#&#8203;6073](https://github.com/external-secrets/external-secrets/pull/6073) - feat: extract LGTM processor to external JS file with tests by [@&#8203;mateenali66](https://github.com/mateenali66) in [#&#8203;6074](https://github.com/external-secrets/external-secrets/pull/6074) - feat: fail fast if LGTM label does not exist in repository by [@&#8203;mateenali66](https://github.com/mateenali66) in [#&#8203;6078](https://github.com/external-secrets/external-secrets/pull/6078) - feat(passbolt): add support for Passbolt V5 API by [@&#8203;cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#&#8203;5919](https://github.com/external-secrets/external-secrets/pull/5919) - fix(infisical): dataFrom.find.path should filter by secret path not name by [@&#8203;johnvox](https://github.com/johnvox) in [#&#8203;6086](https://github.com/external-secrets/external-secrets/pull/6086) - fix: disable the priority queue which misbehaves at scale by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6083](https://github.com/external-secrets/external-secrets/pull/6083) - chore: update go version to 1.26.1 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6072](https://github.com/external-secrets/external-secrets/pull/6072) - docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@&#8203;Br1an67](https://github.com/Br1an67) in [#&#8203;6056](https://github.com/external-secrets/external-secrets/pull/6056) - fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@&#8203;Br1an67](https://github.com/Br1an67) in [#&#8203;6036](https://github.com/external-secrets/external-secrets/pull/6036) - feat(templating): Add certSANs function to extract SANs from certificates by [@&#8203;mzdeb](https://github.com/mzdeb) in [#&#8203;6058](https://github.com/external-secrets/external-secrets/pull/6058) - docs: document template.metadata labels/annotations behavior by [@&#8203;lucpas](https://github.com/lucpas) in [#&#8203;6102](https://github.com/external-secrets/external-secrets/pull/6102) - fix: CODEOWNERS are seriously out of date by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6106](https://github.com/external-secrets/external-secrets/pull/6106) - feat(helm): add readinessProbe support for external-secrets deployment by [@&#8203;AlexOQ](https://github.com/AlexOQ) in [#&#8203;5831](https://github.com/external-secrets/external-secrets/pull/5831) - fix: update grpc for CVE-2026-33186 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6108](https://github.com/external-secrets/external-secrets/pull/6108) - feat(azurekv): add expiration time to azure kv secret by [@&#8203;muraliavarma](https://github.com/muraliavarma) in [#&#8203;5935](https://github.com/external-secrets/external-secrets/pull/5935) - feat: add path to cloud.ru provider by [@&#8203;heavyandrew](https://github.com/heavyandrew) in [#&#8203;5952](https://github.com/external-secrets/external-secrets/pull/5952) - fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@&#8203;riccardomc](https://github.com/riccardomc) in [#&#8203;6113](https://github.com/external-secrets/external-secrets/pull/6113) ##### Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6038](https://github.com/external-secrets/external-secrets/pull/6038) - chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6047](https://github.com/external-secrets/external-secrets/pull/6047) - chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6050](https://github.com/external-secrets/external-secrets/pull/6050) - chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6049](https://github.com/external-secrets/external-secrets/pull/6049) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6039](https://github.com/external-secrets/external-secrets/pull/6039) - chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6043](https://github.com/external-secrets/external-secrets/pull/6043) - chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6040](https://github.com/external-secrets/external-secrets/pull/6040) - chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6044](https://github.com/external-secrets/external-secrets/pull/6044) - chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6042](https://github.com/external-secrets/external-secrets/pull/6042) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6041](https://github.com/external-secrets/external-secrets/pull/6041) - chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6046](https://github.com/external-secrets/external-secrets/pull/6046) - chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6048](https://github.com/external-secrets/external-secrets/pull/6048) - chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6093](https://github.com/external-secrets/external-secrets/pull/6093) - chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6088](https://github.com/external-secrets/external-secrets/pull/6088) - chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6087](https://github.com/external-secrets/external-secrets/pull/6087) - chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6096](https://github.com/external-secrets/external-secrets/pull/6096) - chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6094](https://github.com/external-secrets/external-secrets/pull/6094) - chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6095](https://github.com/external-secrets/external-secrets/pull/6095) - chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6089](https://github.com/external-secrets/external-secrets/pull/6089) - chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6092](https://github.com/external-secrets/external-secrets/pull/6092) - chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6090](https://github.com/external-secrets/external-secrets/pull/6090) - chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6091](https://github.com/external-secrets/external-secrets/pull/6091) ##### New Contributors - [@&#8203;othomann](https://github.com/othomann) made their first contribution in [#&#8203;6052](https://github.com/external-secrets/external-secrets/pull/6052) - [@&#8203;evs-secops](https://github.com/evs-secops) made their first contribution in [#&#8203;6025](https://github.com/external-secrets/external-secrets/pull/6025) - [@&#8203;patjlm](https://github.com/patjlm) made their first contribution in [#&#8203;5922](https://github.com/external-secrets/external-secrets/pull/5922) - [@&#8203;jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#&#8203;6068](https://github.com/external-secrets/external-secrets/pull/6068) - [@&#8203;chadxz](https://github.com/chadxz) made their first contribution in [#&#8203;6073](https://github.com/external-secrets/external-secrets/pull/6073) - [@&#8203;mateenali66](https://github.com/mateenali66) made their first contribution in [#&#8203;6074](https://github.com/external-secrets/external-secrets/pull/6074) - [@&#8203;cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#&#8203;5919](https://github.com/external-secrets/external-secrets/pull/5919) - [@&#8203;johnvox](https://github.com/johnvox) made their first contribution in [#&#8203;6086](https://github.com/external-secrets/external-secrets/pull/6086) - [@&#8203;Br1an67](https://github.com/Br1an67) made their first contribution in [#&#8203;6056](https://github.com/external-secrets/external-secrets/pull/6056) - [@&#8203;mzdeb](https://github.com/mzdeb) made their first contribution in [#&#8203;6058](https://github.com/external-secrets/external-secrets/pull/6058) - [@&#8203;lucpas](https://github.com/lucpas) made their first contribution in [#&#8203;6102](https://github.com/external-secrets/external-secrets/pull/6102) - [@&#8203;AlexOQ](https://github.com/AlexOQ) made their first contribution in [#&#8203;5831](https://github.com/external-secrets/external-secrets/pull/5831) - [@&#8203;muraliavarma](https://github.com/muraliavarma) made their first contribution in [#&#8203;5935](https://github.com/external-secrets/external-secrets/pull/5935) - [@&#8203;heavyandrew](https://github.com/heavyandrew) made their first contribution in [#&#8203;5952](https://github.com/external-secrets/external-secrets/pull/5952) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=--> Reviewed-on: #4927 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-20 21:52:11 +00:00
Renovate Bot	c1175d4cbd	chore(deps): update gitroomhq/postiz-app to v2.21.0 (#4924) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/gitroomhq/postiz-app | minor | `v2.20.2` → `v2.21.0` | | [gitroomhq/postiz-app](https://github.com/gitroomhq/postiz-app) | minor | `v2.20.2` → `v2.21.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>gitroomhq/postiz-app (gitroomhq/postiz-app)</summary> ### [`v2.21.0`](https://github.com/gitroomhq/postiz-app/releases/tag/v2.21.0): MeWe Integration, Integration Fixes &amp; PR Quality [Compare Source](https://github.com/gitroomhq/postiz-app/compare/v2.20.2...v2.21.0) #### What's Changed ##### New Integration - Added MeWe social media integration ##### Improvements - Added PR Quality workflow for pull request checks ##### Fixes - Fixed adding integrations flow - Fixed OAuth integration connection handling **Full Changelog**: <https://github.com/gitroomhq/postiz-app/compare/v2.20.2...v2.21.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4924 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-20 21:51:00 +00:00
Renovate Bot	f4922e05ee	chore(deps): update dependency external-secrets/external-secrets to v2.2.0 (#4923) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets/external-secrets](https://github.com/external-secrets/external-secrets) | minor | `v2.1.0` → `v2.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets/external-secrets)</summary> ### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0) Image: `ghcr.io/external-secrets/external-secrets:v2.2.0` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release charts v2.1.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6030](https://github.com/external-secrets/external-secrets/pull/6030) - chore: fix the stability doc by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6035](https://github.com/external-secrets/external-secrets/pull/6035) - fix(security): Fix vulnerabilities by [@&#8203;othomann](https://github.com/othomann) in [#&#8203;6052](https://github.com/external-secrets/external-secrets/pull/6052) - fix(aws): sync tags and resource policy even when secret value unchanged by [@&#8203;evs-secops](https://github.com/evs-secops) in [#&#8203;6025](https://github.com/external-secrets/external-secrets/pull/6025) - fix: publish now uses docker build v4 which required some changes by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6062](https://github.com/external-secrets/external-secrets/pull/6062) - feat(gcpsm): auto-detect projectID from GCP metadata server by [@&#8203;patjlm](https://github.com/patjlm) in [#&#8203;5922](https://github.com/external-secrets/external-secrets/pull/5922) - chore(templating): Remove years in license and their checks by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;5955](https://github.com/external-secrets/external-secrets/pull/5955) - docs: Add Roche to official ADOPTERS by [@&#8203;evrardj-roche](https://github.com/evrardj-roche) in [#&#8203;6076](https://github.com/external-secrets/external-secrets/pull/6076) - feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@&#8203;jaruwat-panturat](https://github.com/jaruwat-panturat) in [#&#8203;6068](https://github.com/external-secrets/external-secrets/pull/6068) - fix(onepassword): support native item IDs by [@&#8203;chadxz](https://github.com/chadxz) in [#&#8203;6073](https://github.com/external-secrets/external-secrets/pull/6073) - feat: extract LGTM processor to external JS file with tests by [@&#8203;mateenali66](https://github.com/mateenali66) in [#&#8203;6074](https://github.com/external-secrets/external-secrets/pull/6074) - feat: fail fast if LGTM label does not exist in repository by [@&#8203;mateenali66](https://github.com/mateenali66) in [#&#8203;6078](https://github.com/external-secrets/external-secrets/pull/6078) - feat(passbolt): add support for Passbolt V5 API by [@&#8203;cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#&#8203;5919](https://github.com/external-secrets/external-secrets/pull/5919) - fix(infisical): dataFrom.find.path should filter by secret path not name by [@&#8203;johnvox](https://github.com/johnvox) in [#&#8203;6086](https://github.com/external-secrets/external-secrets/pull/6086) - fix: disable the priority queue which misbehaves at scale by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6083](https://github.com/external-secrets/external-secrets/pull/6083) - chore: update go version to 1.26.1 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6072](https://github.com/external-secrets/external-secrets/pull/6072) - docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@&#8203;Br1an67](https://github.com/Br1an67) in [#&#8203;6056](https://github.com/external-secrets/external-secrets/pull/6056) - fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@&#8203;Br1an67](https://github.com/Br1an67) in [#&#8203;6036](https://github.com/external-secrets/external-secrets/pull/6036) - feat(templating): Add certSANs function to extract SANs from certificates by [@&#8203;mzdeb](https://github.com/mzdeb) in [#&#8203;6058](https://github.com/external-secrets/external-secrets/pull/6058) - docs: document template.metadata labels/annotations behavior by [@&#8203;lucpas](https://github.com/lucpas) in [#&#8203;6102](https://github.com/external-secrets/external-secrets/pull/6102) - fix: CODEOWNERS are seriously out of date by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6106](https://github.com/external-secrets/external-secrets/pull/6106) - feat(helm): add readinessProbe support for external-secrets deployment by [@&#8203;AlexOQ](https://github.com/AlexOQ) in [#&#8203;5831](https://github.com/external-secrets/external-secrets/pull/5831) - fix: update grpc for CVE-2026-33186 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6108](https://github.com/external-secrets/external-secrets/pull/6108) - feat(azurekv): add expiration time to azure kv secret by [@&#8203;muraliavarma](https://github.com/muraliavarma) in [#&#8203;5935](https://github.com/external-secrets/external-secrets/pull/5935) - feat: add path to cloud.ru provider by [@&#8203;heavyandrew](https://github.com/heavyandrew) in [#&#8203;5952](https://github.com/external-secrets/external-secrets/pull/5952) - fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@&#8203;riccardomc](https://github.com/riccardomc) in [#&#8203;6113](https://github.com/external-secrets/external-secrets/pull/6113) ##### Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6038](https://github.com/external-secrets/external-secrets/pull/6038) - chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6047](https://github.com/external-secrets/external-secrets/pull/6047) - chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6050](https://github.com/external-secrets/external-secrets/pull/6050) - chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6049](https://github.com/external-secrets/external-secrets/pull/6049) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6039](https://github.com/external-secrets/external-secrets/pull/6039) - chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6043](https://github.com/external-secrets/external-secrets/pull/6043) - chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6040](https://github.com/external-secrets/external-secrets/pull/6040) - chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6044](https://github.com/external-secrets/external-secrets/pull/6044) - chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6042](https://github.com/external-secrets/external-secrets/pull/6042) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6041](https://github.com/external-secrets/external-secrets/pull/6041) - chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6046](https://github.com/external-secrets/external-secrets/pull/6046) - chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6048](https://github.com/external-secrets/external-secrets/pull/6048) - chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6093](https://github.com/external-secrets/external-secrets/pull/6093) - chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6088](https://github.com/external-secrets/external-secrets/pull/6088) - chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6087](https://github.com/external-secrets/external-secrets/pull/6087) - chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6096](https://github.com/external-secrets/external-secrets/pull/6096) - chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6094](https://github.com/external-secrets/external-secrets/pull/6094) - chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6095](https://github.com/external-secrets/external-secrets/pull/6095) - chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6089](https://github.com/external-secrets/external-secrets/pull/6089) - chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6092](https://github.com/external-secrets/external-secrets/pull/6092) - chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6090](https://github.com/external-secrets/external-secrets/pull/6090) - chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6091](https://github.com/external-secrets/external-secrets/pull/6091) #### New Contributors - [@&#8203;othomann](https://github.com/othomann) made their first contribution in [#&#8203;6052](https://github.com/external-secrets/external-secrets/pull/6052) - [@&#8203;evs-secops](https://github.com/evs-secops) made their first contribution in [#&#8203;6025](https://github.com/external-secrets/external-secrets/pull/6025) - [@&#8203;patjlm](https://github.com/patjlm) made their first contribution in [#&#8203;5922](https://github.com/external-secrets/external-secrets/pull/5922) - [@&#8203;jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#&#8203;6068](https://github.com/external-secrets/external-secrets/pull/6068) - [@&#8203;chadxz](https://github.com/chadxz) made their first contribution in [#&#8203;6073](https://github.com/external-secrets/external-secrets/pull/6073) - [@&#8203;mateenali66](https://github.com/mateenali66) made their first contribution in [#&#8203;6074](https://github.com/external-secrets/external-secrets/pull/6074) - [@&#8203;cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#&#8203;5919](https://github.com/external-secrets/external-secrets/pull/5919) - [@&#8203;johnvox](https://github.com/johnvox) made their first contribution in [#&#8203;6086](https://github.com/external-secrets/external-secrets/pull/6086) - [@&#8203;Br1an67](https://github.com/Br1an67) made their first contribution in [#&#8203;6056](https://github.com/external-secrets/external-secrets/pull/6056) - [@&#8203;mzdeb](https://github.com/mzdeb) made their first contribution in [#&#8203;6058](https://github.com/external-secrets/external-secrets/pull/6058) - [@&#8203;lucpas](https://github.com/lucpas) made their first contribution in [#&#8203;6102](https://github.com/external-secrets/external-secrets/pull/6102) - [@&#8203;AlexOQ](https://github.com/AlexOQ) made their first contribution in [#&#8203;5831](https://github.com/external-secrets/external-secrets/pull/5831) - [@&#8203;muraliavarma](https://github.com/muraliavarma) made their first contribution in [#&#8203;5935](https://github.com/external-secrets/external-secrets/pull/5935) - [@&#8203;heavyandrew](https://github.com/heavyandrew) made their first contribution in [#&#8203;5952](https://github.com/external-secrets/external-secrets/pull/5952) **Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4923 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-20 21:50:45 +00:00
Renovate Bot	d59fd7a0a6	chore(deps): update helm release traefik to v39.0.6 (#4934)	2026-03-20 20:51:00 +00:00
Renovate Bot	b5fa28c44b	chore(deps): update helm release argo-workflows to v1.0.5 (#4932)	2026-03-20 20:48:54 +00:00
Renovate Bot	a25522fbf0	chore(deps): update searxng/searxng:latest docker digest to b41b861 (#4930)	2026-03-20 20:46:54 +00:00
Renovate Bot	96eae46b5e	chore(deps): update kube-prometheus-stack docker tag to v82.13.0 (#4928) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | minor | `82.12.0` → `82.13.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary> ### [`v82.13.0`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-82.13.0) [Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-82.12.0...kube-prometheus-stack-82.13.0) kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator. #### What's Changed - \[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;6758](https://github.com/prometheus-community/helm-charts/pull/6758) **Full Changelog**: <https://github.com/prometheus-community/helm-charts/compare/prometheus-nginx-exporter-1.20.5...kube-prometheus-stack-82.13.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4928 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-20 20:44:59 +00:00
Renovate Bot	2b58087e06	chore(deps): update searxng/searxng:latest docker digest to aa1dca9 (#4925)	2026-03-20 16:03:03 +00:00
Alex Lebens	4cfa054480	tmp/airvpn (#4921) ... Reviewed-on: #4921	2026-03-20 04:44:40 +00:00
Alex Lebens	655428bb46	tmp/airvpn (#4919) ... Reviewed-on: #4919	2026-03-20 04:33:42 +00:00
Alex Lebens	dfa99bbc33	tmp/airvpn (#4917) ... Reviewed-on: #4917	2026-03-20 04:25:46 +00:00
Alex Lebens	7efd7758c6	tmp/airvpn (#4915) ... Reviewed-on: #4915	2026-03-20 04:19:50 +00:00
Alex Lebens	854f3646ce	feat: switch to airvpn (#4912) ... Reviewed-on: #4912	2026-03-20 04:08:30 +00:00
Renovate Bot	bfa0c7b555	chore(deps): update dependency goharbor/harbor to v2.15.0 (#4913) ... This PR contains the following updates: | Package | Update | Change | |---|---|---| | [goharbor/harbor](https://github.com/goharbor/harbor) | minor | `v2.14.3` → `v2.15.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>goharbor/harbor (goharbor/harbor)</summary> ### [`v2.15.0`](https://github.com/goharbor/harbor/releases/tag/v2.15.0) [Compare Source](https://github.com/goharbor/harbor/compare/v2.14.3...v2.15.0-rc2) {"buildNo":"rc4"} </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4913 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-20 04:04:10 +00:00
Renovate Bot	5dfda3e9e0	chore(deps): update helm release generic-device-plugin to v0.20.24 (#4909)	2026-03-20 01:18:56 +00:00