This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [volsync-target](https://github.com/backube/volsync) | minor | `0.5.0` -> `0.6.0` |
---
### Release Notes
<details>
<summary>backube/volsync (volsync-target)</summary>
### [`v0.6.0`](https://github.com/backube/volsync/blob/HEAD/CHANGELOG.md#060)
[Compare Source](https://github.com/backube/volsync/compare/v0.5.0...v0.6.0)
##### Added
- restic - allow passing in GOOGLE\_APPLICATION\_CREDENTIALS as a file
##### Changed
- ⚠️ Breaking change ⚠️ - Helm chart now manages VolSync CRDs
directly.\
Upgrading the VolSync Helm chart from an earlier version will produce the
following error:
```
Error: UPGRADE FAILED: rendered manifests contain a resource that already exists. Unable to continue with update: CustomResourceDefinition "replicationdestinations.volsync.backube" in namespace "" exists and cannot be imported into the current release: invalid ownership metadata; label validation error: missing key "app.kubernetes.io/managed-by": must be set to "Helm"; annotation validation error: missing key "meta.helm.sh/release-name": must be set to "volsync"; annotation validation error: missing key "meta.helm.sh/release-namespace": must be set to "volsync-system"
```
To fix, apply the missing labels and annotations as mentioned in the error
message (your values may differ), then retry the upgrade:
```console
$ kubectl label crd/replicationdestinations.volsync.backube app.kubernetes.io/managed-by=Helm
customresourcedefinition.apiextensions.k8s.io/replicationdestinations.volsync.backube labeled
$ kubectl label crd/replicationsources.volsync.backube app.kubernetes.io/managed-by=Helm
customresourcedefinition.apiextensions.k8s.io/replicationsources.volsync.backube labeled
$ kubectl annotate crd/replicationdestinations.volsync.backube meta.helm.sh/release-name=volsync
customresourcedefinition.apiextensions.k8s.io/replicationdestinations.volsync.backube annotated
$ kubectl annotate crd/replicationsources.volsync.backube meta.helm.sh/release-name=volsync
customresourcedefinition.apiextensions.k8s.io/replicationsources.volsync.backube annotated
$ kubectl annotate crd/replicationdestinations.volsync.backube meta.helm.sh/release-namespace=volsync-system
customresourcedefinition.apiextensions.k8s.io/replicationdestinations.volsync.backube annotated
$ kubectl annotate crd/replicationsources.volsync.backube meta.helm.sh/release-namespace=volsync-system
customresourcedefinition.apiextensions.k8s.io/replicationsources.volsync.backube annotated
```
- VolSync privileged mover SCC installed at startup on OpenShift
- Syncthing upgraded to 1.22.1
- Updates to build with golang 1.19
##### Fixed
- ReplicationSource fixes for rsync, rclone and restic to enable mounting
ROX source PVCs as read-only
##### Security
- rclone mover updated to run with reduced privileges by default
- restic mover updated to run with reduced privileges by default
- syncthing mover updated to run with reduced privileges by default
- kube-rbac-proxy upgraded to 0.13.1
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->
Reviewed-on: #2695
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [tailscale-operator](https://github.com/tailscale/tailscale) | minor | `1.90.9` -> `1.92.3` |
---
### Release Notes
<details>
<summary>tailscale/tailscale (tailscale-operator)</summary>
### [`v1.92.3`](https://github.com/tailscale/tailscale/releases/tag/v1.92.3)
[Compare Source](https://github.com/tailscale/tailscale/compare/v1.90.9...v1.92.3)
Please refer to the changelog available at <https://tailscale.com/changelog>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->
Reviewed-on: #2670
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/karakeep-app/karakeep](https://github.com/karakeep-app/karakeep) | patch | `0.29.1` -> `0.29.3` |
---
### Release Notes
<details>
<summary>karakeep-app/karakeep (ghcr.io/karakeep-app/karakeep)</summary>
### [`v0.29.3`](https://github.com/karakeep-app/karakeep/releases/tag/v0.29.3): 0.29.3
[Compare Source](https://github.com/karakeep-app/karakeep/compare/v0.29.2...v0.29.3)
Well. Upgrading Nextjs one more time to patch CVE-2025-67779.
### [`v0.29.2`](https://github.com/karakeep-app/karakeep/releases/tag/v0.29.2): 0.29.2
[Compare Source](https://github.com/karakeep-app/karakeep/compare/v0.29.1...v0.29.2)
Upgrading Nextjs to patch two new vulnerabilities in react CVE-2025-55184 & CVE-2025-55183. This is on top of the critical vulnerability (CVE-2025-66478) that was patched in 0.29.1.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=-->
Reviewed-on: #2642
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/tailscale/tailscale](https://tailscale.com/kb/1282/docker) ([source](https://github.com/tailscale/tailscale)) | minor | `v1.90.9` -> `v1.92.3` |
---
### Release Notes
<details>
<summary>tailscale/tailscale (ghcr.io/tailscale/tailscale)</summary>
### [`v1.92.3`](https://github.com/tailscale/tailscale/releases/tag/v1.92.3)
[Compare Source](https://github.com/tailscale/tailscale/compare/v1.90.9...v1.92.3)
Please refer to the changelog available at <https://tailscale.com/changelog>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->
Reviewed-on: #2667
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| dock.mau.dev/mautrix/whatsapp | minor | `v0.2511.0` -> `v0.2512.0` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->
Reviewed-on: #2660
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [volsync-target](https://github.com/backube/volsync) | minor | `0.3.0` -> `0.5.0` |
---
### Release Notes
<details>
<summary>backube/volsync (volsync-target)</summary>
### [`v0.5.0`](https://github.com/backube/volsync/blob/HEAD/CHANGELOG.md#050)
[Compare Source](https://github.com/backube/volsync/compare/v0.4.0...v0.5.0)
##### Added
- New data mover based on Syncthing for live data synchronization.
- Users can manually label destination Snapshot objects with
`volsync.backube/do-not-delete` to prevent VolSync from deleting them. This
provides a way for users to avoid having a Snapshot deleted while they are
trying to use it. Users are then responsible for deleting the Snapshot.
- Publish Kubernetes Events to help troubleshooting
##### Changed
- Operator-SDK upgraded to 1.22.0
- Rclone upgraded to 1.59.0
- Restic upgraded to 0.13.1
- Syncthing upgraded to 1.20.1
##### Fixed
- Fix to RoleBinding created by VolSync for OCP namespace labeler.
- Fix to helm charts to remove hardcoded overwriting of pod security settings.
- Fix for node affinity (when using ReplicationSource in Direct mode) to use NodeSelector.
- Fixed log timestamps to be more readable.
- CLI: Fixed bug where previously specified options couldn't be removed from
relationship file
- Fixed issue where a snapshot or clone created from a source PVC could
request an incorrect size if the PVC capacity did not match the
requested size.
##### Security
- kube-rbac-proxy upgraded to 0.13.0
##### Removed
- "Reconciled" condition removed from ReplicationSource and
ReplicationDestination `.status.conditions[]` in favor of returning errors via
the "Synchronizing" Condition.
### [`v0.4.0`](https://github.com/backube/volsync/blob/HEAD/CHANGELOG.md#040---2022-05-12)
[Compare Source](https://github.com/backube/volsync/compare/v0.3.0...v0.4.0)
##### Added
- Helm: Add ability to specify container images by SHA hash
- Started work on new CLI (kubectl plugin)
- Support FIPS mode on OpenShift
- Added additional field `LastSyncStartTime` to CRD status
##### Changed
- Rename CopyMethod `None` to `Direct` to make it more descriptive.
- Upgrade OperatorSDK to 1.15
- Move Rclone and Rsync movers to the Mover interface
- Switch snapshot API version from `snapshot.storage.k8s.io/v1beta1` to
`snapshot.storage.k8s.io/v1` so that VolSync remains compatible w/ Kubernetes
1.24+
- Minimum Kubernetes version is now 1.20 due to the switch to
`snapshot.storage.k8s.io/v1`
##### Fixed
- Resources weren't always removed after each sync iteration
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->
Reviewed-on: #2674
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
