Update Helm release vault to v0.32.0

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [snapshot-controller](https://github.com/piraeusdatastore/helm-charts) | major | `4.2.0` → `5.0.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>piraeusdatastore/helm-charts (snapshot-controller)</summary>

### [`v5.0.0`](https://github.com/piraeusdatastore/helm-charts/releases/tag/snapshot-controller-5.0.0)

[Compare Source](https://github.com/piraeusdatastore/helm-charts/compare/snapshot-controller-4.2.0...snapshot-controller-5.0.0)

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #3195
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.20.0
+  version: 0.21.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.6
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:36c3e2511a1163b6055af6ceeef65862df3de0426da8029145eb9274d34748ad
+digest: sha256:f38463ec7a583f7f47e76ae53d55d436657b834f70d34695f8347f640202ce46
-generated: "2026-01-08T23:02:52.334136773Z"
+generated: "2026-01-15T22:13:17.229320298Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,7 +32,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.20.0
+    version: 0.21.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/harbor/values.yaml

@@ -41,12 +41,12 @@ harbor:
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,11 +63,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.1
+        tag: v2.14.2
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.1
+        tag: v2.14.2
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -94,7 +94,7 @@ harbor:
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
 postgres-18-cluster:
   mode: recovery

clusters/cl01tl/helm/homepage/values.yaml

@@ -684,7 +684,7 @@ homepage:
                   icon: sh-shelfmark.webp
                   description: Books
                   href: https://shelfmark.alexlebens.net
-                  siteMonitor: http://shelfmark.ephemera:80
+                  siteMonitor: http://shelfmark.shelfmark:80
                   statusStyle: dot
               - Ephemera:
                   icon: sh-ephemera.webp

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.20.0
+  version: 0.21.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d9fcbbc6a95635c81ece57f7b1ab15a2505afed2bc52aef754431a9cedd06ae0
+digest: sha256:929d60a75b1b07ed87274e09b398e3289aa7f94f0166408198bfd60e87f072a0
-generated: "2026-01-07T16:08:05.338907704Z"
+generated: "2026-01-15T22:13:34.825853057Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.0
   - name: meilisearch
-    version: 0.20.0
+    version: 0.21.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.20.0
+  version: 0.21.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.6
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d8b5b42608537e20f34d109bc624c68e27879488f8ef78df2681a70808bfba87
+digest: sha256:f0d35f4808f349171a7092894fe5ccf9a5fd513a1ff84050c7ebaae893e5d506
-generated: "2026-01-08T23:03:25.51925384Z"
+generated: "2026-01-15T22:13:49.147677077Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.0
   - name: meilisearch
-    version: 0.20.0
+    version: 0.21.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/qbittorrent/templates/config-map.yaml

@@ -199,6 +199,8 @@ data:
       sonarr: /mnt/store/Torrent/FINISHED/SONARR
       sonarr-4k: /mnt/store/Torrent/FINISHED/SONARR4K
       sonarr-anime: /mnt/store/Torrent/FINISHED/SONARRANIME
+      shelfmark-books: /mnt/store/Torrent/FINISHED/SHELFMARKBOOKS
+      shelfmark-audiobooks: /mnt/store/Torrent/FINISHED/SHELFMARKAUDIOBOOKS
       -< ZIM: /mnt/store/Kiwix
       -< SAVE: /mnt/store/Torrent/FINISHED/SAVE
       -< IMPORT: /mnt/store/Torrent/FINISHED/IMPORT

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:35e3520e53621e22566330d876d2a36e4a556628b6567bf2706ceb211c6d9c07
+            tag: latest@sha256:bc805054d5801d18b9750852e075e599e543eddc2d7962918f0722244d40ea09
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:35e3520e53621e22566330d876d2a36e4a556628b6567bf2706ceb211c6d9c07
+            tag: latest@sha256:bc805054d5801d18b9750852e075e599e543eddc2d7962918f0722244d40ea09
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/shelfmark/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.1
+digest: sha256:76f1a29db101f92117e224898994af8fe4df1f7f61e1ab948eda43a1d39764b2
+generated: "2026-01-15T17:21:48.172915-06:00"

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -42,7 +42,7 @@ shelfmark:
     main:
       ports:
         http:
-          port: 8084
+          port: 80
           targetPort: 8084
           protocol: HTTP
   route:
@@ -60,7 +60,7 @@ shelfmark:
             - group: ''
               kind: Service
               name: shelfmark
-              port: 8084
+              port: 80
               weight: 100
           matches:
             - path:

clusters/cl01tl/helm/snapshot-controller/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: snapshot-controller
   repository: https://piraeus.io/helm-charts/
-  version: 4.2.0
+  version: 5.0.0
-digest: sha256:af3d6bc81cfe28b6e4ebfb5db0857843127e6d30d4f4d34881964f9e13cbc0c7
+digest: sha256:ee120d84037e7878c3ab62c57cd09b90090af340c1d55ea314618f19387cb0ca
-generated: "2025-12-01T20:27:28.798985-06:00"
+generated: "2026-01-15T23:19:03.949703166Z"

clusters/cl01tl/helm/snapshot-controller/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: snapshot-controller
-    version: 4.2.0
+    version: 5.0.0
     repository: https://piraeus.io/helm-charts/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=kubernetes-csi/external-snapshotter

clusters/cl01tl/helm/vault/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: vault
   repository: https://helm.releases.hashicorp.com
-  version: 0.31.0
+  version: 0.32.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.0
-digest: sha256:3d12a8b4593b46501dbf37f8c02dbb362d276c8a99ff5adf747e6ea9798c9274
+digest: sha256:a4f54f2590c11377d1ca5d804ef3acf2564c4f4ac8e20376583f2779a49cb0bc
-generated: "2026-01-07T16:21:06.305332889Z"
+generated: "2026-01-16T11:04:15.131818002Z"

clusters/cl01tl/helm/vault/Chart.yaml

@@ -19,7 +19,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: vault
-    version: 0.31.0
+    version: 0.32.0
     repository: https://helm.releases.hashicorp.com
   - name: app-template
     alias: snapshot

clusters/cl01tl/helm/whodb/values.yaml

@@ -8,7 +8,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.87.0
+            tag: 0.88.0
             pullPolicy: IfNotPresent
           env:
             - name: WHODB_OLLAMA_HOST

clusters/cl01tl/helm/yubal-playlist/templates/external-secret.yaml

@@ -19,6 +19,20 @@ spec:
         key: /cl01tl/lidarr2/key
         metadataPolicy: None
         property: key
+    - secretKey: subsonic-user
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/navidrome/admin
+        metadataPolicy: None
+        property: user
+    - secretKey: subsonic-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/navidrome/admin
+        metadataPolicy: None
+        property: password
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/helm/yubal-playlist/values.yaml

@@ -9,7 +9,7 @@ yubal-playlist:
         main:
           image:
             repository: harbor.alexlebens.net/images/yubal-playlist
-            tag: 0.0.7
+            tag: 0.1.2
             pullPolicy: IfNotPresent
           env:
             - name: YUBAL_TZ
@@ -29,6 +29,20 @@ yubal-playlist:
                 secretKeyRef:
                   name: yubal-playlist-config-secret
                   key: lidarr-key
+            - name: YUBAL_SUBSONIC_ENDPOINT
+              value: http://navidrome-main.navidrome
+            - name: YUBAL_SUBSONIC_PORT
+              value: 80
+            - name: YUBAL_SUBSONIC_USER
+              valueFrom:
+                secretKeyRef:
+                  name: yubal-playlist-config-secret
+                  key: subsonic-user
+            - name: YUBAL_SUBSONIC_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: yubal-playlist-config-secret
+                  key: subsonic-password
           resources:
             requests:
               cpu: 10m