chore(deps): update cilium to v1.19.2

Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 0a19108' (#5442 ) from renovate/unified-searxng into main
chore(deps): update searxng/searxng:latest docker digest to 0a19108
2026-04-03 08:05:38 +00:00 · 2026-04-03 08:02:42 +00:00 · 2026-04-03 08:02:21 +00:00 · 2026-04-03 03:09:12 +00:00 · 2026-04-03 03:09:12 +00:00 · 2026-04-03 03:08:38 +00:00
21 changed files with 97 additions and 155 deletions
--- a/clusters/cl01tl/helm/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.yaml
@@ -29,4 +29,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows
-appVersion: v4.0.3
+appVersion: v4.0.4
--- a/clusters/cl01tl/helm/cilium/Chart.lock
+++ b/clusters/cl01tl/helm/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
  repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.2
+digest: sha256:11f8eef4733b70c2b9a91ce39fe3c1ea1ad3fa3c46750efb015e03ff6ea3655b
+generated: "2026-04-03T08:05:31.250823709Z"
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cilium
-    version: 1.18.6
+    version: 1.19.2
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.19.2
--- a/clusters/cl01tl/helm/elastic-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/elastic-operator/Chart.yaml
@@ -18,4 +18,4 @@ dependencies:
    repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.1
+appVersion: v3.3.2
--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -145,11 +145,52 @@ gitea-actions:
  statefulset:
    replicas: 6
    timezone: America/Chicago
+    resources:
+      limits:
+        ephemeral-storage: 15Gi
+      requests:
+        ephemeral-storage: 2Gi
+    affinity:
+      podAntiAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+          - weight: 100
+            podAffinityTerm:
+              labelSelector:
+                matchExpressions:
+                  - key: app.kubernetes.io/name
+                    operator: In
+                    values:
+                    - gitea-actions-act-runner
+              topologyKey: "kubernetes.io/hostname"
+    extraVolumes:
+      - name: workspace-vol
+        ephemeral:
+          volumeClaimTemplate:
+            spec:
+              accessModes:
+                - ReadWriteOnce
+              storageClassName: ceph-block
+              resources:
+                requests:
+                  storage: 20Gi
+      - name: docker-vol
+        ephemeral:
+          volumeClaimTemplate:
+            spec:
+              accessModes:
+                - ReadWriteOnce
+              storageClassName: ceph-block
+              resources:
+                requests:
+                  storage: 50Gi
    actRunner:
      registry: docker.io
      repository: gitea/act_runner
      # renovate: datasource=docker depName=gitea/act_runner
      tag: 0.3.1@sha256:c2a169c5e99864c25e32527cef3d82203225e09558773022bf3dc164a2e6d762
+      extraVolumeMounts:
+        - name: workspace-vol
+          mountPath: /workspace
      config: |
        log:
          level: debug
@@ -166,6 +207,9 @@ gitea-actions:
      repository: docker
      # renovate: datasource=docker depName=docker
      tag: 29.3.1-dind@sha256:4d90f1f6c400315c2dba96d3ec93c01e64198395cbba04f79d12adce4f737029
+      extraVolumeMounts:
+        - name: docker-vol
+          mountPath: /var/lib/docker
    persistence:
      storageClass: ceph-block
      size: 10Gi
--- a/clusters/cl01tl/helm/houndarr/Chart.yaml
+++ b/clusters/cl01tl/helm/houndarr/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
 # renovate: datasource=github-releases depName=av1155/houndarr
-appVersion: v1.6.5
+appVersion: v1.6.6
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -29,4 +29,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: datasource=github-releases depName=CyferShepard/Jellystat
-appVersion: 1.1.7
+appVersion: 1.1.9
--- a/clusters/cl01tl/helm/kiwix/Chart.yaml
+++ b/clusters/cl01tl/helm/kiwix/Chart.yaml
@@ -5,7 +5,7 @@ description: Kiwix
 keywords:
  - kiwix
  - wikipedia
-home: https://wiki.alexlebens.dev/s/16eaaf92-3607-421f-bc66-cb3c39eeaea0
+home: https://docs.alexlebens.dev/applications/kiwix/
 sources:
  - https://github.com/kiwix
  - https://github.com/kiwix/kiwix-tools/pkgs/container/kiwix-serve
--- a/clusters/cl01tl/helm/kiwix/values.yaml
+++ b/clusters/cl01tl/helm/kiwix/values.yaml
@@ -4,13 +4,11 @@ kiwix:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: ghcr.io/kiwix/kiwix-serve
-            tag: 3.8.2
-            pullPolicy: IfNotPresent
+            tag: 3.8.2@sha256:acdab28186a66b51bfd4202210c6732931ea95cf41c711148a0c9770b9fcc9e1
          args:
            - '*.zim'
          env:
@@ -18,8 +16,8 @@ kiwix:
              value: 8080
          resources:
            requests:
-              cpu: 50m
-              memory: 512Mi
+              cpu: 1m
+              memory: 10Mi
  service:
    main:
      controller: main
@@ -27,7 +25,6 @@ kiwix:
        http:
          port: 80
          targetPort: 8080
-          protocol: HTTP
  route:
    main:
      kind: HTTPRoute
@@ -40,11 +37,8 @@ kiwix:
        - kiwix.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: kiwix
+            - name: kiwix
              port: 80
-              weight: 100
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/komodo/Chart.lock
+++ b/clusters/cl01tl/helm/komodo/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.10.0
+  version: 7.11.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:c1bbed66c94b64ba44ef1caadf74d46d9bce551e37b62b1cd0a3af9b81046251
-generated: "2026-03-24T14:00:56.813765-05:00"
+digest: sha256:9af0fa5ab5e1895e94d64ea5983b5ee58c8b4dd9c5c8ef8021c8c7f950fd54c4
+generated: "2026-04-02T20:28:17.818342-05:00"
--- a/clusters/cl01tl/helm/komodo/Chart.yaml
+++ b/clusters/cl01tl/helm/komodo/Chart.yaml
@@ -4,16 +4,16 @@ version: 1.0.0
 description: Komodo
 keywords:
  - komodo
-  - deployment
-  - dashboard
-  - docker-compose
-home: https://wiki.alexlebens.dev/s/bb7eb683-b5c7-4f50-9f2c-e8e57dc67c81
+  - docker-deployment
+home: https://docs.alexlebens.dev/applications/komodo/
 sources:
  - https://github.com/moghtech/komodo
-  - https://github.com/cloudnative-pg/cloudnative-pg
+  - https://github.com/FerretDB/FerretDB
  - https://github.com/moghtech/komodo/pkgs/container/komodo-core
+  - https://github.com/ferretdb/FerretDB/pkgs/container/ferretdb
  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
  - name: alexlebens
 dependencies:
@@ -23,7 +23,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgresql-17-fdb-cluster
-    version: 7.10.0
+    version: 7.11.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-keys
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.1.0
+appVersion: v2.1.1
--- a/clusters/cl01tl/helm/komodo/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/komodo/templates/external-secret.yaml
@@ -14,38 +14,23 @@ spec:
  data:
    - secretKey: passkey
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: passkey
    - secretKey: jwt
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: jwt
    - secretKey: webhook
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: webhook
    - secretKey: oidc-client-id
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/komodo
-        metadataPolicy: None
        property: client
    - secretKey: oidc-client-secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/komodo
-        metadataPolicy: None
        property: secret

 ---
@@ -65,15 +50,9 @@ spec:
  data:
    - secretKey: uri
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
        property: uri
    - secretKey: password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
        property: password
--- a/clusters/cl01tl/helm/komodo/values.yaml
+++ b/clusters/cl01tl/helm/komodo/values.yaml
@@ -4,13 +4,11 @@ komodo:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: ghcr.io/moghtech/komodo-core
            tag: 2.1.1@sha256:2bbbb1efd3534211dac35091e0818f10398d9bdd98fdbf0ddef09e9e0b5ec4ba
-            pullPolicy: IfNotPresent
          env:
            - name: COMPOSE_LOGGING_DRIVER
              value: local
@@ -45,7 +43,7 @@ komodo:
            - name: KOMODO_LOCAL_AUTH
              value: true
            - name: KOMODO_ENABLE_NEW_USERS
-              value: true
+              value: false
            - name: KOMODO_DISABLE_NON_ADMIN_CREATE
              value: true
            - name: KOMODO_TRANSPARENT_MODE
@@ -82,18 +80,16 @@ komodo:
          resources:
            requests:
              cpu: 10m
-              memory: 128Mi
+              memory: 80Mi
    ferretdb-2:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: ghcr.io/ferretdb/ferretdb
-            tag: 2.7.0
-            pullPolicy: IfNotPresent
+            tag: 2.7.0@sha256:5706414241eb84f0515512c37b46db0f1b1eac9e5ceb7e4c2523211c184b1985
          env:
            - name: DB_USERNAME
              value: ferret
@@ -106,8 +102,8 @@ komodo:
              value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
          resources:
            requests:
-              cpu: 10m
-              memory: 128Mi
+              cpu: 1m
+              memory: 20Mi
  service:
    main:
      controller: main
@@ -115,14 +111,12 @@ komodo:
        http:
          port: 80
          targetPort: 9120
-          protocol: HTTP
    ferretdb-2:
      controller: ferretdb-2
      ports:
        http:
          port: 27017
          targetPort: 27017
-          protocol: HTTP
  route:
    main:
      kind: HTTPRoute
@@ -135,11 +129,8 @@ komodo:
        - komodo.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: komodo-main
+            - name: komodo-main
              port: 80
-              weight: 100
          matches:
            - path:
                type: PathPrefix
@@ -150,7 +141,6 @@ komodo:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 1Gi
-      retain: true
      advancedMounts:
        main:
          main:
@@ -160,7 +150,6 @@ komodo:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 5Gi
-      retain: true
      advancedMounts:
        main:
          main:
@@ -170,7 +159,6 @@ komodo:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 5Gi
-      retain: true
      advancedMounts:
        main:
          main:
@@ -182,7 +170,7 @@ postgresql-17-fdb-cluster:
  cluster:
    image:
      repository: ghcr.io/ferretdb/postgres-documentdb
-      tag: "17-0.106.0-ferretdb-2.5.0"
+      tag: 17-0.107.0-ferretdb-2.7.0@sha256:2386795ec2aa7ae559304361979f1dc5708d383ee9020ae63dadc2940dfe58f7
    postgresUID: 999
    postgresGID: 999
    postgresql:
@@ -224,35 +212,12 @@ postgresql-17-fdb-cluster:
        destinationBucket: postgres-backups
        externalSecretCredentialPath: /garage/home-infra/postgres-backups
        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
    scheduledBackups:
      - name: live-backup
        suspend: false
        immediate: true
        schedule: "0 50 14 * * *"
        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
 volsync-target-keys:
  pvcTarget: komodo-keys
  local:
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.16.1
+  version: 82.16.2
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:ece31be37d2fa7c7c59058e2d47e8190bea3baa742b4f04fe793956cd2d52f7f
-generated: "2026-04-02T07:03:55.367235416Z"
+  version: 0.5.0
+digest: sha256:6f3598d0d38a17736419fe8d0e5e0899b774d91c38ef9a4f87743f81c729584c
+generated: "2026-04-02T20:00:01.560565-05:00"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -5,17 +5,15 @@ description: Kube Prometheus Stack
 keywords:
  - kube-prometheus-stack
  - prometheus
-  - alertmanager
-  - metrics
-  - alerts
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/cd9fc3a4-aa88-4285-8886-91a6c5aecf7d
+home: https://docs.alexlebens.dev/applications/kube-prometheus-stack/
 sources:
  - https://github.com/prometheus/prometheus
  - https://github.com/prometheus-operator/kube-prometheus
-  - https://github.com/alexbakker/alertmanager-ntfy
+  - https://git.xenrox.net/~xenrox/ntfy-alertmanager/
+  - https://hub.docker.com/r/xenrox/ntfy-alertmanager
  - https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack
  - https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
 maintainers:
  - name: alexlebens
 dependencies:
@@ -28,7 +26,7 @@ dependencies:
    version: 4.6.2
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.5.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
--- a/clusters/cl01tl/helm/kube-prometheus-stack/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/templates/external-secret.yaml
@@ -14,10 +14,7 @@ spec:
  data:
    - secretKey: ntfy_password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: ntfy_password

 ---
@@ -37,10 +34,7 @@ spec:
  data:
    - secretKey: token
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/token
-        metadataPolicy: None
        property: metric

 ---
@@ -60,15 +54,9 @@ spec:
  data:
    - secretKey: ntfy_password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: ntfy_password
    - secretKey: config
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: config
--- a/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
@@ -9,10 +9,8 @@ kube-prometheus-stack:
      kubeSchedulerRecording: false
  global:
    rbac:
-      create: true
      createAggregateClusterRoles: true
  alertmanager:
-    enabled: true
    config:
      route:
        group_by: ["namespace", "alertname"]
@@ -36,8 +34,6 @@ kube-prometheus-stack:
    route:
      main:
        enabled: true
-        apiVersion: gateway.networking.k8s.io/v1
-        kind: HTTPRoute
        hostnames:
          - alertmanager.alexlebens.net
        parentRefs:
@@ -45,14 +41,9 @@ kube-prometheus-stack:
            kind: Gateway
            name: traefik-gateway
            namespace: traefik
-        matches:
-          - path:
-              type: PathPrefix
-              value: /
    alertmanagerSpec:
      secrets:
        - alertmanager-config-secret
-      replicas: 1
  grafana:
    enabled: false
  kubeApiServer:
@@ -61,11 +52,13 @@ kube-prometheus-stack:
  kubeControllerManager:
    enabled: false
  kubeEtcd:
-    enabled: true
    service:
      selector:
        k8s-app: kube-controller-manager
    serviceMonitor:
+      metricRelabelings:
+        - action: labeldrop
+          regex: pod
      relabelings:
        - sourceLabels: [__meta_kubernetes_pod_node_name]
          separator: ;
@@ -73,22 +66,12 @@ kube-prometheus-stack:
          targetLabel: nodename
          replacement: $1
          action: replace
-      metricRelabelings:
-        - action: labeldrop
-          regex: pod
  kubeScheduler:
    enabled: false
  kubeProxy:
    enabled: false
-  kubeStateMetrics:
-    enabled: true
-  nodeExporter:
-    operatingSystems:
-      darwin:
-        enabled: false
  prometheusOperator:
    admissionWebhooks:
-      enabled: true
      annotations:
        argocd.argoproj.io/hook: PreSync
        argocd.argoproj.io/hook-delete-policy: HookSucceeded
@@ -106,8 +89,6 @@ kube-prometheus-stack:
    route:
      main:
        enabled: true
-        apiVersion: gateway.networking.k8s.io/v1
-        kind: HTTPRoute
        hostnames:
          - prometheus.alexlebens.net
        parentRefs:
@@ -115,13 +96,10 @@ kube-prometheus-stack:
            kind: Gateway
            name: traefik-gateway
            namespace: traefik
-        matches:
-          - path:
-              type: PathPrefix
-              value: /
    prometheusSpec:
      scrapeInterval: 30s
-      retention: 30d
+      retention: 45d
+      retentionSize: 240GiB
      externalUrl: https://prometheus.alexlebens.net
      ruleSelectorNilUsesHelmValues: false
      serviceMonitorSelectorNilUsesHelmValues: false
@@ -142,14 +120,11 @@ ntfy-alertmanager:
    main:
      type: deployment
      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: xenrox/ntfy-alertmanager
-            tag: 1.0.0
-            pullPolicy: IfNotPresent
+            tag: 1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
  service:
    main:
      controller: main
@@ -157,7 +132,6 @@ ntfy-alertmanager:
        http:
          port: 80
          targetPort: 8080
-          protocol: HTTP
  persistence:
    config:
      enabled: true
--- a/clusters/cl01tl/helm/movie-roulette/Chart.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    version: 4.6.2
 icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
 # renovate: datasource=github-releases depName=sahara101/Movie-Roulette
-appVersion: v5.4.1
+appVersion: v5.4.2
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.19.0
+appVersion: 0.20.0
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.19.0
+            tag: 0.20.0
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.19.0
+            tag: 0.20.0
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.19.0
+            tag: 0.20.0
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:dac0c447bdd3f20a43687c6bed8140547f493252fd7bad3ad8bef1faffe1002d
+            tag: latest@sha256:0a191084a26af34605d99ecb28c6efb126988d82e167b3f2149988f150f6c656
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:dac0c447bdd3f20a43687c6bed8140547f493252fd7bad3ad8bef1faffe1002d
+            tag: latest@sha256:0a191084a26af34605d99ecb28c6efb126988d82e167b3f2149988f150f6c656
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
Author	SHA1	Message	Date
Renovate Bot	57a0ba1187	chore(deps): update cilium to v1.19.2 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 23s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 25s Details	2026-04-03 08:05:38 +00:00
Renovate Bot	d5c208fe5b	Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 0a19108' (#5442 ) from renovate/unified-searxng into main All checks were successful lint-test-helm / lint-helm (push) Successful in 50s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m49s Details	2026-04-03 08:02:42 +00:00
Renovate Bot	8525f2cf74	chore(deps): update searxng/searxng:latest docker digest to 0a19108 All checks were successful render-manifests / render-manifests (pull_request) Successful in 4m31s Details lint-test-helm / lint-helm (pull_request) Successful in 5m44s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details	2026-04-03 08:02:21 +00:00
Alex Lebens	117e4142f9	Merge pull request 'chore(deps): update dependency av1155/houndarr to v1.6.6' (#5431 ) from renovate/unified-houndarr into main All checks were successful lint-test-helm / lint-helm (push) Successful in 3m22s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m31s Details Reviewed-on: #5431	2026-04-03 03:09:12 +00:00
Renovate Bot	d974944731	chore(deps): update dependency av1155/houndarr to v1.6.6	2026-04-03 03:09:12 +00:00
Alex Lebens	257d346376	Merge pull request 'chore(deps): update dependency moghtech/komodo to v2.1.1' (#5434 ) from renovate/unified-komodo into main Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5434	2026-04-03 03:08:38 +00:00
Renovate Bot	69edda9f97	chore(deps): update dependency moghtech/komodo to v2.1.1	2026-04-03 03:08:38 +00:00
Alex Lebens	bec4630f49	Merge pull request 'fix: wrong volume name' (#5440 ) from tmp/gitea-2 into main Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5440	2026-04-03 03:07:16 +00:00
Alex Lebens	fadfda4523	fix: wrong volume name All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 3m38s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 3m28s Details render-manifests / render-manifests (pull_request) Successful in 4m40s Details	2026-04-02 21:52:51 -05:00
Alex Lebens	2b272e59a5	Merge pull request 'feat: add storage and affinity' (#5438 ) from tmp/gitea into main All checks were successful lint-test-helm / lint-helm (push) Successful in 15s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 10m19s Details Reviewed-on: #5438	2026-04-03 02:39:23 +00:00
Alex Lebens	c62742756e	feat: add storage and affinity	2026-04-03 02:39:23 +00:00
Renovate Bot	fcf57eedd7	Merge pull request 'chore(deps): update dependency sahara101/movie-roulette to v5.4.2' (#5436 ) from renovate/unified-movie-roulette into main All checks were successful lint-test-helm / lint-helm (push) Successful in 41s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 8m6s Details	2026-04-03 02:14:04 +00:00
Renovate Bot	7d2119ca7c	chore(deps): update dependency sahara101/movie-roulette to v5.4.2	2026-04-03 02:14:04 +00:00
Renovate Bot	1412118f7e	Merge pull request 'chore(deps): update dependency elastic/cloud-on-k8s to v3.3.2' (#5433 ) from renovate/unified-cloud-on-k8s into main Some checks failed lint-test-helm / lint-helm (push) Has been cancelled Details lint-test-helm / validate-kubeconform (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-04-03 02:13:23 +00:00
Renovate Bot	69658420f2	chore(deps): update dependency elastic/cloud-on-k8s to v3.3.2	2026-04-03 02:13:23 +00:00
Renovate Bot	8de0f50b94	Merge pull request 'chore(deps): update dependency cyfershepard/jellystat to v1.1.9' (#5432 ) from renovate/unified-jellystat into main Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-04-03 02:12:59 +00:00
Renovate Bot	ac8aaa2706	chore(deps): update dependency cyfershepard/jellystat to v1.1.9	2026-04-03 02:12:59 +00:00
Renovate Bot	8efd7c4f2d	Merge pull request 'chore(deps): update dependency argoproj/argo-workflows to v4.0.4' (#5430 ) from renovate/unified-argo-workflows into main Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-04-03 02:12:15 +00:00
Renovate Bot	051edeedab	chore(deps): update dependency argoproj/argo-workflows to v4.0.4 Some checks failed renovate/stability-days Updates have not met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 1m8s Details lint-test-helm / validate-kubeconform (pull_request) Failing after 17s Details render-manifests / render-manifests (pull_request) Successful in 2m39s Details	2026-04-03 02:11:54 +00:00
Alex Lebens	70bdc0ff8e	feat: refactor apps (#5428 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 17s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 7m35s Details Reviewed-on: #5428	2026-04-03 01:35:03 +00:00
Renovate Bot	98e796a79f	chore(deps): update ollama to v0.20.0 (#5420 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 15s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m19s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ollama/ollama](https://github.com/ollama/ollama) \| minor \| `0.19.0` → `0.20.0` \| \| ollama/ollama \| minor \| `0.19.0` → `0.20.0` \| --- ### Release Notes <details> <summary>ollama/ollama (ollama/ollama)</summary> ### [`v0.20.0`](https://github.com/ollama/ollama/releases/tag/v0.20.0) [Compare Source](https://github.com/ollama/ollama/compare/v0.19.0...v0.20.0) <img width="3748" height="1290" alt="Gemma 4" src="https://github.com/user-attachments/assets/c4727579-47b1-4c7b-8aa2-28eda15b71f5" /> #### Gemma 4 Effective 2B (E2B) ``` ollama run gemma4:e2b ``` Effective 4B (E4B) ``` ollama run gemma4:e4b ``` 26B (Mixture of Experts model with 4B active parameters) ``` ollama run gemma4:26b ``` 31B (Dense) ``` ollama run gemma4:31b ``` #### What's Changed - docs: update pi docs by [@ParthSareen](https://github.com/ParthSareen) in [#15152](https://github.com/ollama/ollama/pull/15152) - mlx: respect tokenizer add\_bos\_token setting in pipeline by [@dhiltgen](https://github.com/dhiltgen) in [#15185](https://github.com/ollama/ollama/pull/15185) - tokenizer: add SentencePiece-style BPE support by [@dhiltgen](https://github.com/dhiltgen) in [#15162](https://github.com/ollama/ollama/pull/15162) Full Changelog: <https://github.com/ollama/ollama/compare/v0.19.0...v0.20.0-rc0> </details> --- ### Configuration 📅 Schedule: (in timezone America/Chicago) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwNC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkb2NrZXIiXX0=--> Reviewed-on: #5420 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-04-03 00:36:59 +00:00