chore(deps): update cilium to v1.19.2

Reviewed-on: #5842

.gitea/workflows/lint-test-helm.yaml

@@ -378,249 +378,232 @@ jobs:
           actions: '[{"action": "view", "label": "View Run", "url": "${{ vars.USER_URL }}/${{ github.repository }}/actions/runs/${{ github.run_id }}", "clear": true}]'
           image: true
 
-  argo-diff:
-    needs: lint-helm
-    runs-on: ubuntu-js
-    if: |
-      needs.lint-helm.result == 'success' &&
-      needs.lint-helm.outputs.changes-detected == 'true' &&
-      github.event_name == 'pull_request'
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-        with:
-          fetch-depth: 0
+  # argo-diff:
+  #   needs: lint-helm
+  #   runs-on: ubuntu-js
+  #   if: |
+  #     needs.lint-helm.result == 'success' &&
+  #     needs.lint-helm.outputs.changes-detected == 'true' &&
+  #     github.event_name == 'pull_request'
+  #   steps:
+  #     - name: Checkout
+  #       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+  #       with:
+  #         fetch-depth: 0
 
-      - name: Cache ArgoCD CLI
-        id: cache-argocd
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
-        with:
-          path: /usr/local/bin/argocd
-          key: ${{ runner.os }}-argocd-${{ env.ARGOCD_VERSION }}
-          restore-keys: |
-            ${{ runner.os }}-argocd-
+  #     - name: Cache ArgoCD CLI
+  #       id: cache-argocd
+  #       uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
+  #       with:
+  #         path: /usr/local/bin/argocd
+  #         key: ${{ runner.os }}-argocd-${{ env.ARGOCD_VERSION }}
+  #         restore-keys: |
+  #           ${{ runner.os }}-argocd-
 
-      - name: Install ArgoCD CLI
-        if: steps.cache-argocd.outputs.cache-hit != 'true'
-        run: |
-          echo ">> Downloading ArgoCD CLI, version: ${{ env.ARGOCD_VERSION }} ..."
-          curl -sSL -o argocd-linux-amd64 https://github.com/argoproj/argo-cd/releases/download/${{ env.ARGOCD_VERSION }}/argocd-linux-amd64
+  #     - name: Install ArgoCD CLI
+  #       if: steps.cache-argocd.outputs.cache-hit != 'true'
+  #       run: |
+  #         echo ">> Downloading ArgoCD CLI, version: ${{ env.ARGOCD_VERSION }} ..."
+  #         curl -sSL -o argocd-linux-amd64 https://github.com/argoproj/argo-cd/releases/download/${{ env.ARGOCD_VERSION }}/argocd-linux-amd64
 
-          echo ""
-          echo ">> Installing ArgoCD CLI ..."
-          sudo install -m 555 argocd-linux-amd64 /usr/local/bin/argocd
+  #         echo ""
+  #         echo ">> Installing ArgoCD CLI ..."
+  #         sudo install -m 555 argocd-linux-amd64 /usr/local/bin/argocd
 
-          echo ""
-          echo "----"
+  #         echo ""
+  #         echo "----"
 
-      - name: Verify installation
-        run: |
-          echo ""
-          echo ">> Verifying installation ..."
-          argocd version --client
+  #     - name: Verify installation
+  #       run: |
+  #         echo ""
+  #         echo ">> Verifying installation ..."
+  #         argocd version --client
 
-          echo ""
-          echo "----"
+  #         echo ""
+  #         echo "----"
 
-      - name: Set Up Helm
-        uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
-        with:
-          token: ${{ secrets.GITEA_TOKEN }}
-          # renovate: datasource=github-releases depName=helm/helm
-          version: v4.1.3
-          cache: true
+  #     - name: Set Up Helm
+  #       uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+  #       with:
+  #         token: ${{ secrets.GITEA_TOKEN }}
+  #         # renovate: datasource=github-releases depName=helm/helm
+  #         version: v4.1.3
+  #         cache: true
 
-      - name: Cache Helm Dependencies
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
-        with:
-          path: |
-            ~/.cache/helm
-            ~/.config/helm
-          key: helm-cache-${{ runner.os }}-${{ hashFiles('infrastructure/clusters/cl01tl/helm/**/Chart.yaml', 'infrastructure/clusters/cl01tl/helm/**/Chart.lock') }}
-          restore-keys: |
-            helm-cache-${{ runner.os }}-
+  #     - name: Cache Helm Dependencies
+  #       uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
+  #       with:
+  #         path: |
+  #           ~/.cache/helm
+  #           ~/.config/helm
+  #         key: helm-cache-${{ runner.os }}-${{ hashFiles('infrastructure/clusters/cl01tl/helm/**/Chart.yaml', 'infrastructure/clusters/cl01tl/helm/**/Chart.lock') }}
+  #         restore-keys: |
+  #           helm-cache-${{ runner.os }}-
 
-      - name: Add Repositories
-        env:
-          CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
-        run: |
-          echo ">> Adding repositories for chart dependencies ..."
-          echo ""
+  #     - name: Add Repositories
+  #       env:
+  #         CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
+  #       run: |
+  #         echo ">> Adding repositories for chart dependencies ..."
+  #         echo ""
 
-          for DIR in ${CHANGED_CHARTS}; do
-            helm dependency list --max-col-width 120 clusters/${CLUSTER}/helm/${DIR} 2> /dev/null \
-              | tail -n +2 \
-              | awk 'NF > 0 { print $1, $3 }' \
-              | while read -r REPO_NAME REPO_URL; do
-                if [[ "${REPO_URL}" == oci://* ]]; then
-                  echo ">> Ignoring OCI repo: ${REPO_URL}"
+  #         for DIR in ${CHANGED_CHARTS}; do
+  #           helm dependency list --max-col-width 120 clusters/${CLUSTER}/helm/${DIR} 2> /dev/null \
+  #             | tail -n +2 \
+  #             | awk 'NF > 0 { print $1, $3 }' \
+  #             | while read -r REPO_NAME REPO_URL; do
+  #               if [[ "${REPO_URL}" == oci://* ]]; then
+  #                 echo ">> Ignoring OCI repo: ${REPO_URL}"
 
-                elif [[ -n "${REPO_NAME}" && -n "${REPO_URL}" ]]; then
-                  helm repo add "${REPO_NAME}" "${REPO_URL}"
+  #               elif [[ -n "${REPO_NAME}" && -n "${REPO_URL}" ]]; then
+  #                 helm repo add "${REPO_NAME}" "${REPO_URL}"
 
-                fi
+  #               fi
 
-              done || true
-          done
+  #             done || true
+  #         done
 
-          if helm repo list > /dev/null 2>&1; then
-            echo ""
-            echo ">> Update repository cache ..."
-            helm repo update
+  #         if helm repo list > /dev/null 2>&1; then
+  #           echo ""
+  #           echo ">> Update repository cache ..."
+  #           helm repo update
 
-          fi
+  #         fi
 
-          echo ""
-          echo "----"
+  #         echo ""
+  #         echo "----"
 
-      - name: Render Templates
-        id: render
-        env:
-          CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
-        run: |
-          for APP_NAME in ${CHANGED_CHARTS}; do
-            echo ">> Render templates for ${APP_NAME} ..."
-            CHART_PATH="clusters/${CLUSTER}/helm/${APP_NAME}"
-            OUTPUT_FOLDER="clusters/${CLUSTER}/manifests/${APP_NAME}/"
+  #     - name: Render Templates
+  #       id: render
+  #       env:
+  #         CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
+  #       run: |
+  #         for APP_NAME in ${CHANGED_CHARTS}; do
+  #           echo ">> Render templates for ${APP_NAME} ..."
+  #           CHART_PATH="clusters/${CLUSTER}/helm/${APP_NAME}"
+  #           OUTPUT_FOLDER="clusters/${CLUSTER}/manifests/${APP_NAME}/"
 
-            helm dependency build "${CHART_PATH}" --skip-refresh
+  #           helm dependency build "${CHART_PATH}" --skip-refresh
 
-            NAMESPACE="${APP_NAME}"
-            case "${APP_NAME}" in
-              "stack")
-                NAMESPACE="argocd"
-                echo ">> Special Rendering into 'argocd' namespace ..."
-                ;;
-              "cilium" | "coredns" | "metrics-server")
-                NAMESPACE="kube-system"
-                echo ">> Special Rendering for ${APP_NAME} into 'kube-system' namespace ..."
-                ;;
-              *)
-                echo ">> Standard Rendering ..."
-            esac
+  #           NAMESPACE="${APP_NAME}"
+  #           case "${APP_NAME}" in
+  #             "stack")
+  #               NAMESPACE="argocd"
+  #               echo ">> Special Rendering into 'argocd' namespace ..."
+  #               ;;
+  #             "cilium" | "coredns" | "metrics-server")
+  #               NAMESPACE="kube-system"
+  #               echo ">> Special Rendering for ${APP_NAME} into 'kube-system' namespace ..."
+  #               ;;
+  #             *)
+  #               echo ">> Standard Rendering ..."
+  #           esac
 
-            TEMPLATE=$(helm template "${APP_NAME}" "${CHART_PATH}" --include-crds --namespace "${NAMESPACE}" --include-crds --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor")
+  #           TEMPLATE=$(helm template "${APP_NAME}" "${CHART_PATH}" --include-crds --namespace "${NAMESPACE}" --include-crds --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor")
 
-            # Format and split rendered template
-            echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'
+  #           # Format and split rendered template
+  #           echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'
 
-            # Strip comments again to ensure formatting correctness
-            for file in "$OUTPUT_FOLDER"/*; do
-              yq -i '... comments=""' $file
+  #           # Strip comments again to ensure formatting correctness
+  #           for file in "$OUTPUT_FOLDER"/*; do
+  #             yq -i '... comments=""' $file
 
-            done
+  #           done
 
-            echo ""
-            echo ">> Templates in outpute folder: ${OUTPUT_FOLDER}"
-            ls ${OUTPUT_FOLDER}
-          done
+  #           echo ""
+  #           echo ">> Templates in output folder: ${OUTPUT_FOLDER}"
+  #           ls ${OUTPUT_FOLDER}
+  #         done
 
-          echo "----"
+  #         echo "----"
 
-      - name: Run App Diff
-        id: diff
-        env:
-          ARGOCD_SERVER: ${{ secrets.ARGOCD_SERVER }}
-          ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
-          CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
-        run: |
-          # argo diff outputs 1 on any diff, but this is expected, only error on output 2+
-          set +e
-          OVERALL_EXIT_CODE=0
-          FAILED_CHARTS=""
-          DIFF_FOUND="false"
+  #     - name: Run App Diff
+  #       id: diff
+  #       env:
+  #         ARGOCD_SERVER: ${{ secrets.ARGOCD_SERVER }}
+  #         ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
+  #         CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
+  #       run: |
+  #         FAILED_CHARTS=""
+  #         DIFF_FOUND="false"
 
-          for APP_NAME in ${CHANGED_CHARTS}; do
-            echo ">> Running argocd app diff for ${APP_NAME} ..."
+  #         for APP_NAME in ${CHANGED_CHARTS}; do
+  #           echo ">> Running argocd app diff for ${APP_NAME} ..."
+  #           argocd app diff "${APP_NAME}" \
+  #             --server "${ARGOCD_SERVER}" \
+  #             --revision ${{ gitea.sha }} \
+  #             --diff-exit-code 0 \
+  #             --local "clusters/${CLUSTER}/manifests/${APP_NAME}" \
+  #             --local-repo-root "." \
+  #             --grpc-web > "diff_output_${APP_NAME}.txt"
 
-            argocd app diff "${APP_NAME}" \
-              --server "${ARGOCD_SERVER}" \
-              --revision ${{ gitea.sha }} \
-              --grpc-web > diff_output_${APP_NAME}.txt
+  #           if [ -s "diff_output_${APP_NAME}.txt" ]; then
+  #             echo ">> Argo diff:"
+  #             echo ""
+  #             cat diff_output_${APP_NAME}.txt
+  #             echo ""
 
-            EXIT_CODE=$?
+  #             DIFF_FOUND="true"
 
-            if [ -s "diff_output_${APP_NAME}.txt" ]; then
-              echo ">> Argo diff:"
-              echo ""
-              cat diff_output_${APP_NAME}.txt
-              echo ""
+  #           else
+  #             echo ">> No Argo diff found for ${APP_NAME}"
+  #             rm "diff_output_${APP_NAME}.txt"
 
-              DIFF_FOUND="true"
+  #           fi
+  #         done
 
-            else
-              echo ">> No Argo diff found for ${APP_NAME}"
-              rm "diff_output_${APP_NAME}.txt"
+  #         echo "----"
+  #         echo "diff-detected=${DIFF_FOUND}" >> "$GITHUB_OUTPUT"
+  #         echo "failed-charts=${FAILED_CHARTS}" >> "$GITHUB_OUTPUT"
 
-            fi
+  #         exit $OVERALL_EXIT_CODE
 
-            if [ $EXIT_CODE -eq 2 ]; then
-              echo ">> ArgoCD diff failed for ${APP_NAME} due to a manifest error"
+  #     - name: Post Diff
+  #       if: |
+  #         always() &&
+  #         steps.diff.outputs.diff-detected == 'true' &&
+  #         gitea.event.pull_request.number != null
+  #       env:
+  #         GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+  #       run: |
+  #         COMMENT_BODY="### ArgoCD Diff Results
+  #         "
 
-              OVERALL_EXIT_CODE=1
+  #         for f in diff_output_*.txt; do
+  #           APP_NAME=$(echo $f | sed 's/diff_output_//;s/.txt//')
+  #           DIFF_CONTENT=$(cat "$f")
 
-              if [ -z "${FAILED_CHARTS}" ]; then
-                FAILED_CHARTS="${APP_NAME}"
+  #           COMMENT_BODY="${COMMENT_BODY}
+  #         #### App: ${APP_NAME}
+  #         "
 
-              else
-                FAILED_CHARTS="${FAILED_CHARTS}, ${APP_NAME}"
+  #           if [ -z "$DIFF_CONTENT" ]; then
+  #             COMMENT_BODY="${COMMENT_BODY} No changes detected."
+  #           else
+  #             COMMENT_BODY="${COMMENT_BODY}
+  #         \`\`\`diff
+  #         ${DIFF_CONTENT}
+  #         \`\`\`"
+  #           fi
+  #         done
 
-              fi
-            fi
-          done
+  #         curl -X 'POST' \
+  #           "${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/issues/${{ gitea.event.pull_request.number }}/comments" \
+  #           -H "Authorization: token ${GITEA_TOKEN}" \
+  #           -H "Content-Type: application/json" \
+  #           -d "$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')"
 
-          echo "----"
-          echo "diff-detected=${DIFF_FOUND}" >> "$GITHUB_OUTPUT"
-          echo "failed-charts=${FAILED_CHARTS}" >> "$GITHUB_OUTPUT"
-
-          exit $OVERALL_EXIT_CODE
-
-      - name: Post Diff
-        if: |
-          always() &&
-          steps.diff.outputs.diff-detected == 'true' &&
-          gitea.event.pull_request.number != null
-        env:
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
-        run: |
-          COMMENT_BODY="### ArgoCD Diff Results
-          "
-
-          for f in diff_output_*.txt; do
-            APP_NAME=$(echo $f | sed 's/diff_output_//;s/.txt//')
-            DIFF_CONTENT=$(cat "$f")
-
-            COMMENT_BODY="${COMMENT_BODY}
-          #### App: ${APP_NAME}
-          "
-
-            if [ -z "$DIFF_CONTENT" ]; then
-              COMMENT_BODY="${COMMENT_BODY} No changes detected."
-            else
-              COMMENT_BODY="${COMMENT_BODY}
-          \`\`\`diff
-          ${DIFF_CONTENT}
-          \`\`\`"
-            fi
-          done
-
-          curl -X 'POST' \
-            "${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/issues/${{ gitea.event.pull_request.number }}/comments" \
-            -H "Authorization: token ${GITEA_TOKEN}" \
-            -H "Content-Type: application/json" \
-            -d "$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')"
-
-      - name: ntfy Failed
-        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
-        if: failure()
-        with:
-          url: '${{ secrets.NTFY_URL }}'
-          topic: '${{ secrets.NTFY_TOPIC }}'
-          title: 'ArgoCD Diff Failure'
-          priority: 3
-          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
-          tags: action,failed
-          details: "ArgoCD diff for cluster '${{ env.CLUSTER }}' failed on charts: ${{ steps.diff.outputs.failed-charts }}"
-          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
-          actions: '[{"action": "view", "label": "View Run", "url": "${{ vars.USER_URL }}/${{ github.repository }}/actions/runs/${{ github.run_id }}", "clear": true}]'
-          image: true
+  #     - name: ntfy Failed
+  #       uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+  #       if: failure()
+  #       with:
+  #         url: '${{ secrets.NTFY_URL }}'
+  #         topic: '${{ secrets.NTFY_TOPIC }}'
+  #         title: 'ArgoCD Diff Failure'
+  #         priority: 3
+  #         headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
+  #         tags: action,failed
+  #         details: "ArgoCD diff for cluster '${{ env.CLUSTER }}' failed on charts: ${{ steps.diff.outputs.failed-charts }}"
+  #         icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
+  #         actions: '[{"action": "view", "label": "View Run", "url": "${{ vars.USER_URL }}/${{ github.repository }}/actions/runs/${{ github.run_id }}", "clear": true}]'
+  #         image: true

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.110.14@sha256:f3ba59186f17171bf2eaacc35014192d4862bf1b2af3116fb694ba9c17f04f70
+    container: ghcr.io/renovatebot/renovate:43.111.0@sha256:b70f50fc874a6443809ede68809a9169d8f308418eb2c5cd67ff88edda036f1c
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.2
+digest: sha256:11f8eef4733b70c2b9a91ce39fe3c1ea1ad3fa3c46750efb015e03ff6ea3655b
+generated: "2026-04-13T10:07:15.017062733Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.19.2
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.19.2

clusters/cl01tl/helm/immich/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.7.2
+appVersion: v2.7.3

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.5.0
+appVersion: 0.6.0

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.5.0@sha256:41dc308bb303fcc7a17a2dac35fc1b3ef6a2d345c3e121f677eaf3c2be7564d6
+            tag: 0.6.0@sha256:7bf772454c7baeaf5c86ad59eee7fe59ef47b5366248e253647cfc79642a72bf
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.20.4
+appVersion: 0.20.5

clusters/cl01tl/helm/ollama/values.yaml

@@ -21,7 +21,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
+            tag: 0.20.5@sha256:662109db8037f17257cfc6e816289c0d4c9ae8a2a4ff760b653d8d410e234ba0
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -55,7 +55,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
+            tag: 0.20.5@sha256:662109db8037f17257cfc6e816289c0d4c9ae8a2a4ff760b653d8d410e234ba0
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -89,7 +89,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
+            tag: 0.20.5@sha256:662109db8037f17257cfc6e816289c0d4c9ae8a2a4ff760b653d8d410e234ba0
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h

clusters/cl01tl/helm/searxng/values.yaml

@@ -8,7 +8,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:e86a5bd7537b6eb01176a8bfd53f9b535fe14bcf193d04648b6c0892d7b59d2f
+            tag: latest@sha256:4c6b4f3e1fc10a907a40b7eaaf5b92d50f5b4097d6fb5b02041c0f9926233b36
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -36,7 +36,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:e86a5bd7537b6eb01176a8bfd53f9b535fe14bcf193d04648b6c0892d7b59d2f
+            tag: latest@sha256:4c6b4f3e1fc10a907a40b7eaaf5b92d50f5b4097d6fb5b02041c0f9926233b36
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/site-profile/values.yaml

@@ -10,7 +10,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.17.0@sha256:22c5bebe1148c019cdd50c2da06d9e8679e1b2653762cb3f3febf1aba75c309f
+            tag: 3.18.0@sha256:1219a291faaaef87761e9f8b0857270165c505d95c0a30325fe4e2be422ba377
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/vault/templates/external-secret.yaml

@@ -138,40 +138,20 @@ spec:
   data:
     - secretKey: ENVIRONMENT
       remoteRef:
-        key: /cl01tl/vault/unseal/config-1
+        key: /cl01tl/vault/unseal
         property: ENVIRONMENT
-    - secretKey: CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: CHECK_INTERVAL
-    - secretKey: MAX_CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: MAX_CHECK_INTERVAL
     - secretKey: NODES
       remoteRef:
-        key: /cl01tl/vault/unseal/config-1
+        key: /cl01tl/vault/unseal
         property: NODES
-    - secretKey: TLS_SKIP_VERIFY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: TLS_SKIP_VERIFY
     - secretKey: TOKENS
       remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: TOKENS
-    - secretKey: EMAIL_ENABLED
+        key: /cl01tl/vault/unseal
+        property: TOKENS_1
+    - secretKey: NOTIFY_QUEUE_URLS
       remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: EMAIL_ENABLED
-    - secretKey: NOTIFY_MAX_ELAPSED
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: NOTIFY_MAX_ELAPSED
-    - secretKey: NOTIFY_QUEUE_DELAY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: NOTIFY_QUEUE_DELAY
+        key: /cl01tl/vault/unseal
+        property: NOTIFY_QUEUE_URLS
 
 ---
 apiVersion: external-secrets.io/v1
@@ -190,40 +170,20 @@ spec:
   data:
     - secretKey: ENVIRONMENT
       remoteRef:
-        key: /cl01tl/vault/unseal/config-2
+        key: /cl01tl/vault/unseal
         property: ENVIRONMENT
-    - secretKey: CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: CHECK_INTERVAL
-    - secretKey: MAX_CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: MAX_CHECK_INTERVAL
     - secretKey: NODES
       remoteRef:
-        key: /cl01tl/vault/unseal/config-2
+        key: /cl01tl/vault/unseal
         property: NODES
-    - secretKey: TLS_SKIP_VERIFY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: TLS_SKIP_VERIFY
     - secretKey: TOKENS
       remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: TOKENS
-    - secretKey: EMAIL_ENABLED
+        key: /cl01tl/vault/unseal
+        property: TOKENS_2
+    - secretKey: NOTIFY_QUEUE_URLS
       remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: EMAIL_ENABLED
-    - secretKey: NOTIFY_MAX_ELAPSED
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: NOTIFY_MAX_ELAPSED
-    - secretKey: NOTIFY_QUEUE_DELAY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: NOTIFY_QUEUE_DELAY
+        key: /cl01tl/vault/unseal
+        property: NOTIFY_QUEUE_URLS
 
 ---
 apiVersion: external-secrets.io/v1
@@ -242,40 +202,20 @@ spec:
   data:
     - secretKey: ENVIRONMENT
       remoteRef:
-        key: /cl01tl/vault/unseal/config-3
+        key: /cl01tl/vault/unseal
         property: ENVIRONMENT
-    - secretKey: CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: CHECK_INTERVAL
-    - secretKey: MAX_CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: MAX_CHECK_INTERVAL
     - secretKey: NODES
       remoteRef:
-        key: /cl01tl/vault/unseal/config-3
+        key: /cl01tl/vault/unseal
         property: NODES
-    - secretKey: TLS_SKIP_VERIFY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: TLS_SKIP_VERIFY
     - secretKey: TOKENS
       remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: TOKENS
-    - secretKey: EMAIL_ENABLED
+        key: /cl01tl/vault/unseal
+        property: TOKENS_3
+    - secretKey: NOTIFY_QUEUE_URLS
       remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: EMAIL_ENABLED
-    - secretKey: NOTIFY_MAX_ELAPSED
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: NOTIFY_MAX_ELAPSED
-    - secretKey: NOTIFY_QUEUE_DELAY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: NOTIFY_QUEUE_DELAY
+        key: /cl01tl/vault/unseal
+        property: NOTIFY_QUEUE_URLS
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/helm/vault/values.yaml

@@ -272,7 +272,7 @@ unseal:
         main:
           image:
             repository: ghcr.io/lrstanley/vault-unseal
-            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
+            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
           envFrom:
             - secretRef:
                 name: vault-unseal-config-1
@@ -288,7 +288,7 @@ unseal:
         main:
           image:
             repository: ghcr.io/lrstanley/vault-unseal
-            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
+            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
           envFrom:
             - secretRef:
                 name: vault-unseal-config-2
@@ -304,7 +304,7 @@ unseal:
         main:
           image:
             repository: ghcr.io/lrstanley/vault-unseal
-            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
+            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
           envFrom:
             - secretRef:
                 name: vault-unseal-config-3

renovate.json

@@ -89,10 +89,10 @@
     {
       "description": "Specific app grouping overrides",
       "matchPackageNames": [
-        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik)/",
+        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik)/",
         "/^rook(-ceph|/rook|/ceph)/"
       ],
-      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
+      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
       "groupSlug": "unified-{{{groupName}}}"
     },
     {