chore(deps): update cilium to v1.19.2

Merge pull request 'chore(deps): update ollama/ollama docker tag to v0.20.5' (#5844 ) from renovate/unified-ollama into main
chore(deps): update ollama/ollama docker tag to v0.20.5
2026-04-13 04:07:16 +00:00 · 2026-04-13 04:04:47 +00:00 · 2026-04-13 04:04:29 +00:00 · 2026-04-12 20:51:26 -05:00 · 2026-04-12 20:46:40 -05:00 · 2026-04-12 20:36:55 -05:00
11 changed files with 43 additions and 120 deletions
--- a/.gitea/workflows/lint-test-helm.yaml
+++ b/.gitea/workflows/lint-test-helm.yaml
@@ -511,7 +511,7 @@ jobs:
            done

            echo ""
-            echo ">> Templates in outpute folder: ${OUTPUT_FOLDER}"
+            echo ">> Templates in output folder: ${OUTPUT_FOLDER}"
            ls ${OUTPUT_FOLDER}
          done

@@ -524,21 +524,18 @@ jobs:
          ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
          CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
        run: |
-          # argo diff outputs 1 on any diff, but this is expected, only error on output 2+
-          set +e
-          OVERALL_EXIT_CODE=0
          FAILED_CHARTS=""
          DIFF_FOUND="false"

          for APP_NAME in ${CHANGED_CHARTS}; do
            echo ">> Running argocd app diff for ${APP_NAME} ..."
-
            argocd app diff "${APP_NAME}" \
              --server "${ARGOCD_SERVER}" \
              --revision ${{ gitea.sha }} \
-              --grpc-web > diff_output_${APP_NAME}.txt
-
-            EXIT_CODE=$?
+              --diff-exit-code 0 \
+              --local "clusters/${CLUSTER}/manifests/${APP_NAME}" \
+              --local-repo-root "." \
+              --grpc-web > "diff_output_${APP_NAME}.txt"

            if [ -s "diff_output_${APP_NAME}.txt" ]; then
              echo ">> Argo diff:"
@@ -553,20 +550,6 @@ jobs:
              rm "diff_output_${APP_NAME}.txt"

            fi
-
-            if [ $EXIT_CODE -eq 2 ]; then
-              echo ">> ArgoCD diff failed for ${APP_NAME} due to a manifest error"
-
-              OVERALL_EXIT_CODE=1
-
-              if [ -z "${FAILED_CHARTS}" ]; then
-                FAILED_CHARTS="${APP_NAME}"
-
-              else
-                FAILED_CHARTS="${FAILED_CHARTS}, ${APP_NAME}"
-
-              fi
-            fi
          done

          echo "----"
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.110.14@sha256:f3ba59186f17171bf2eaacc35014192d4862bf1b2af3116fb694ba9c17f04f70
+    container: ghcr.io/renovatebot/renovate:43.111.0@sha256:b70f50fc874a6443809ede68809a9169d8f308418eb2c5cd67ff88edda036f1c
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/cilium/Chart.lock
+++ b/clusters/cl01tl/helm/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
  repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.2
+digest: sha256:11f8eef4733b70c2b9a91ce39fe3c1ea1ad3fa3c46750efb015e03ff6ea3655b
+generated: "2026-04-13T04:07:09.696496523Z"
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cilium
-    version: 1.18.6
+    version: 1.19.2
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.19.2
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.7.2
+appVersion: v2.7.3
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.20.4
+appVersion: 0.20.5
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -21,7 +21,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
+            tag: 0.20.5@sha256:662109db8037f17257cfc6e816289c0d4c9ae8a2a4ff760b653d8d410e234ba0
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -55,7 +55,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
+            tag: 0.20.5@sha256:662109db8037f17257cfc6e816289c0d4c9ae8a2a4ff760b653d8d410e234ba0
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -89,7 +89,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
+            tag: 0.20.5@sha256:662109db8037f17257cfc6e816289c0d4c9ae8a2a4ff760b653d8d410e234ba0
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
--- a/clusters/cl01tl/helm/site-profile/values.yaml
+++ b/clusters/cl01tl/helm/site-profile/values.yaml
@@ -10,7 +10,7 @@ site-profile:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.17.0@sha256:22c5bebe1148c019cdd50c2da06d9e8679e1b2653762cb3f3febf1aba75c309f
+            tag: 3.18.0@sha256:1219a291faaaef87761e9f8b0857270165c505d95c0a30325fe4e2be422ba377
          resources:
            requests:
              cpu: 10m
--- a/clusters/cl01tl/helm/vault/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/vault/templates/external-secret.yaml
@@ -138,40 +138,20 @@ spec:
  data:
    - secretKey: ENVIRONMENT
      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
+        key: /cl01tl/vault/unseal
        property: ENVIRONMENT
-    - secretKey: CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: CHECK_INTERVAL
-    - secretKey: MAX_CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: MAX_CHECK_INTERVAL
    - secretKey: NODES
      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
+        key: /cl01tl/vault/unseal
        property: NODES
-    - secretKey: TLS_SKIP_VERIFY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: TLS_SKIP_VERIFY
    - secretKey: TOKENS
      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: TOKENS
-    - secretKey: EMAIL_ENABLED
+        key: /cl01tl/vault/unseal
+        property: TOKENS_1
+    - secretKey: NOTIFY_QUEUE_URLS
      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: EMAIL_ENABLED
-    - secretKey: NOTIFY_MAX_ELAPSED
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: NOTIFY_MAX_ELAPSED
-    - secretKey: NOTIFY_QUEUE_DELAY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-1
-        property: NOTIFY_QUEUE_DELAY
+        key: /cl01tl/vault/unseal
+        property: NOTIFY_QUEUE_URLS

 ---
 apiVersion: external-secrets.io/v1
@@ -190,40 +170,20 @@ spec:
  data:
    - secretKey: ENVIRONMENT
      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
+        key: /cl01tl/vault/unseal
        property: ENVIRONMENT
-    - secretKey: CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: CHECK_INTERVAL
-    - secretKey: MAX_CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: MAX_CHECK_INTERVAL
    - secretKey: NODES
      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
+        key: /cl01tl/vault/unseal
        property: NODES
-    - secretKey: TLS_SKIP_VERIFY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: TLS_SKIP_VERIFY
    - secretKey: TOKENS
      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: TOKENS
-    - secretKey: EMAIL_ENABLED
+        key: /cl01tl/vault/unseal
+        property: TOKENS_2
+    - secretKey: NOTIFY_QUEUE_URLS
      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: EMAIL_ENABLED
-    - secretKey: NOTIFY_MAX_ELAPSED
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: NOTIFY_MAX_ELAPSED
-    - secretKey: NOTIFY_QUEUE_DELAY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-2
-        property: NOTIFY_QUEUE_DELAY
+        key: /cl01tl/vault/unseal
+        property: NOTIFY_QUEUE_URLS

 ---
 apiVersion: external-secrets.io/v1
@@ -242,40 +202,20 @@ spec:
  data:
    - secretKey: ENVIRONMENT
      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
+        key: /cl01tl/vault/unseal
        property: ENVIRONMENT
-    - secretKey: CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: CHECK_INTERVAL
-    - secretKey: MAX_CHECK_INTERVAL
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: MAX_CHECK_INTERVAL
    - secretKey: NODES
      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
+        key: /cl01tl/vault/unseal
        property: NODES
-    - secretKey: TLS_SKIP_VERIFY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: TLS_SKIP_VERIFY
    - secretKey: TOKENS
      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: TOKENS
-    - secretKey: EMAIL_ENABLED
+        key: /cl01tl/vault/unseal
+        property: TOKENS_3
+    - secretKey: NOTIFY_QUEUE_URLS
      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: EMAIL_ENABLED
-    - secretKey: NOTIFY_MAX_ELAPSED
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: NOTIFY_MAX_ELAPSED
-    - secretKey: NOTIFY_QUEUE_DELAY
-      remoteRef:
-        key: /cl01tl/vault/unseal/config-3
-        property: NOTIFY_QUEUE_DELAY
+        key: /cl01tl/vault/unseal
+        property: NOTIFY_QUEUE_URLS

 ---
 apiVersion: external-secrets.io/v1
--- a/clusters/cl01tl/helm/vault/values.yaml
+++ b/clusters/cl01tl/helm/vault/values.yaml
@@ -272,7 +272,7 @@ unseal:
        main:
          image:
            repository: ghcr.io/lrstanley/vault-unseal
-            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
+            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
          envFrom:
            - secretRef:
                name: vault-unseal-config-1
@@ -288,7 +288,7 @@ unseal:
        main:
          image:
            repository: ghcr.io/lrstanley/vault-unseal
-            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
+            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
          envFrom:
            - secretRef:
                name: vault-unseal-config-2
@@ -304,7 +304,7 @@ unseal:
        main:
          image:
            repository: ghcr.io/lrstanley/vault-unseal
-            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
+            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
          envFrom:
            - secretRef:
                name: vault-unseal-config-3
--- a/renovate.json
+++ b/renovate.json
@@ -89,10 +89,10 @@
    {
      "description": "Specific app grouping overrides",
      "matchPackageNames": [
-        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik)/",
+        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik)/",
        "/^rook(-ceph|/rook|/ceph)/"
      ],
-      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
+      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
      "groupSlug": "unified-{{{groupName}}}"
    },
    {
Author	SHA1	Message	Date
Renovate Bot	9b407bbb75	chore(deps): update cilium to v1.19.2 Some checks failed lint-test-helm / lint-helm (pull_request) Successful in 30s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 41s Details lint-test-helm / argo-diff (pull_request) Failing after 48s Details	2026-04-13 04:07:16 +00:00
Renovate Bot	30e21162d9	Merge pull request 'chore(deps): update ollama/ollama docker tag to v0.20.5' (#5844 ) from renovate/unified-ollama into main All checks were successful lint-test-helm / lint-helm (push) Successful in 22s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-helm / argo-diff (push) Has been skipped Details renovate / renovate (push) Successful in 3m5s Details	2026-04-13 04:04:47 +00:00
Renovate Bot	7e676a5c4e	chore(deps): update ollama/ollama docker tag to v0.20.5 Some checks failed renovate/stability-days Updates have met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 41s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 25s Details render-manifests / render-manifests (pull_request) Successful in 58s Details lint-test-helm / argo-diff (pull_request) Failing after 37s Details	2026-04-13 04:04:29 +00:00
Alex Lebens	89009fd048	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 4m46s Details	2026-04-12 20:51:26 -05:00
Alex Lebens	6e5d2433e9	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 2m21s Details	2026-04-12 20:46:40 -05:00
Alex Lebens	b544493a70	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 3m46s Details	2026-04-12 20:36:55 -05:00
Alex Lebens	c4503f4ecb	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 3m6s Details	2026-04-12 20:24:34 -05:00
Alex Lebens	8765741597	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 3m19s Details	2026-04-12 20:17:07 -05:00
Alex Lebens	142f6be558	ci: change root All checks were successful renovate / renovate (push) Successful in 3m13s Details	2026-04-12 20:06:31 -05:00
Alex Lebens	b89e24c8d1	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 2m14s Details	2026-04-12 20:01:52 -05:00
Alex Lebens	ad100879b5	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 1m37s Details	2026-04-12 19:45:51 -05:00
Alex Lebens	54e2cd4c43	Merge pull request 'feat: update unseal' (#5842 ) from tmp/vault into main Some checks failed lint-test-helm / lint-helm (push) Successful in 25s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-helm / argo-diff (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5842	2026-04-13 00:44:31 +00:00
Alex Lebens	5c0f3d5b4e	feat: update unseal All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 37s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 40s Details lint-test-helm / argo-diff (pull_request) Successful in 44s Details render-manifests / render-manifests (pull_request) Successful in 1m4s Details	2026-04-12 19:35:20 -05:00
Renovate Bot	8ab2c2ff87	Merge pull request 'chore(deps): update dependency ollama/ollama to v0.20.5' (#5841 ) from renovate/unified-ollama into main All checks were successful lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-helm / argo-diff (push) Has been skipped Details renovate / renovate (push) Successful in 3m18s Details	2026-04-12 19:02:15 +00:00
Renovate Bot	9897e85408	chore(deps): update dependency ollama/ollama to v0.20.5 All checks were successful renovate/stability-days Updates have met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 27s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 20s Details lint-test-helm / argo-diff (pull_request) Successful in 25s Details render-manifests / render-manifests (pull_request) Successful in 52s Details	2026-04-12 18:17:28 +00:00
Renovate Bot	83fd3796b0	Merge pull request 'chore(deps): update dependency immich-app/immich to v2.7.3' (#5840 ) from renovate/unified-immich into main All checks were successful lint-test-helm / lint-helm (push) Successful in 42s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-helm / argo-diff (push) Has been skipped Details renovate / renovate (push) Successful in 4m38s Details	2026-04-12 18:13:15 +00:00
Renovate Bot	667ed97498	chore(deps): update dependency immich-app/immich to v2.7.3 All checks were successful renovate/stability-days Updates have met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 27s Details render-manifests / render-manifests (pull_request) Successful in 53s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 44s Details lint-test-helm / argo-diff (pull_request) Successful in 51s Details	2026-04-12 18:12:57 +00:00
Renovate Bot	0bfef47841	Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.111.0' (#5839 ) from renovate/unified-renovate into main Some checks failed renovate / renovate (push) Has been cancelled Details	2026-04-12 18:09:57 +00:00
Renovate Bot	5ffe958c30	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.111.0 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details	2026-04-12 18:09:28 +00:00
Alex Lebens	7131c4debd	ci: reconfigure Some checks failed renovate / renovate (push) Has been cancelled Details	2026-04-12 13:06:34 -05:00
Alex Lebens	edb122e2e4	Merge pull request 'chore(deps): update medialyze to v0.6.0' (#5835 ) from renovate/unified-medialyze into main All checks were successful lint-test-helm / lint-helm (push) Successful in 57s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-helm / argo-diff (push) Has been skipped Details renovate / renovate (push) Successful in 2m46s Details Reviewed-on: #5835	2026-04-12 15:18:19 +00:00
Renovate Bot	03d82ed180	chore(deps): update medialyze to v0.6.0	2026-04-12 15:18:19 +00:00
Alex Lebens	a23dc349c5	Merge pull request 'chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.18.0' (#5828 ) from renovate/unified-site-profile into main Some checks failed lint-test-helm / lint-helm (push) Successful in 1m13s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-helm / argo-diff (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5828	2026-04-12 15:16:06 +00:00
Renovate Bot	9c18fe23c6	chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.18.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 1m21s Details lint-test-helm / argo-diff (pull_request) Successful in 40s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 1m5s Details render-manifests / render-manifests (pull_request) Successful in 2m4s Details	2026-04-12 14:05:52 +00:00