chore(deps): update g33kphr33k/musicgrabber docker tag to v2.8.10

2026-05-17 02:00:14 +00:00
21 changed files with 188 additions and 193 deletions
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.182.1@sha256:64690503f0e4935e6e667b323bdcdc1996a2ad59b9bfa44d7ce6319758bc6ff8
+    container: ghcr.io/renovatebot/renovate:43.181.2@sha256:0bdf309ffcd873506b2357513eaa5d772b170f4acc5e2ee280a2207203cbdc91
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
@@ -1,7 +1,7 @@
 dependencies:
 - name: gitea
  repository: https://dl.gitea.com/charts/
-  version: 12.6.0
+  version: 12.5.3
 - name: actions
  repository: https://dl.gitea.com/charts/
  version: 0.1.0
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 2.0.0
-digest: sha256:0ed2df9ddb849bf5b0734e346e8a0e2f96c50fdf3409266ec075db051de4881d
-generated: "2026-05-17T18:11:08.598465161Z"
+digest: sha256:d4f3ba631c0a2e0b6b57bda23544f32a25dee0e0b4b8a7be2dc7f648704b6d92
+generated: "2026-05-14T14:05:30.803843042Z"
@@ -26,7 +26,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: gitea
-    version: 12.6.0
+    version: 12.5.3
    repository: https://dl.gitea.com/charts/
  - name: actions
    alias: gitea-actions
@@ -56,4 +56,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.26.1
+appVersion: 1.26.0
@@ -9,7 +9,7 @@ gitea:
      maxUnavailable: 1
  image:
    repository: gitea/gitea
-    tag: 1.26.1
+    tag: 1.25.5
  service:
    http:
      type: ClusterIP
@@ -1,7 +1,7 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 85.1.3
+  version: 85.1.2
 - name: prometheus-operator-crds
  repository: oci://ghcr.io/prometheus-community/charts
  version: 29.0.0
@@ -11,5 +11,5 @@ dependencies:
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:67a7c994af3e36ed3668123a1c5add5144e5460149dce40e7686e71c79c5123a
-generated: "2026-05-17T15:05:47.249164073Z"
+digest: sha256:7c7504aaf6283c681f6ce8d044d4a2d61669f3237c33f434f955ad96b072fe9a
+generated: "2026-05-16T19:05:00.763646788Z"
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 85.1.3
+    version: 85.1.2
    repository: oci://ghcr.io/prometheus-community/charts
  - name: prometheus-operator-crds
    version: 29.0.0
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
  repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 16.0.0
+  version: 15.0.1
 - name: alloy
  repository: https://grafana.github.io/helm-charts
  version: 1.8.1
-digest: sha256:d193d6954e39080db717baf7f48ff1dd08ab9a544d6e39fe54dea146f1e2057c
-generated: "2026-05-17T14:10:38.197763019Z"
+digest: sha256:d8bda38ea731e2af5c1e852912b4eac93f54b5b9c1ffd711fe8b894968112e46
+generated: "2026-05-16T21:10:44.465940261Z"
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 16.0.0
+    version: 15.0.1
    repository: oci://ghcr.io/grafana-community/helm-charts
  - name: alloy
    version: 1.8.1
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.8
+appVersion: 2.8.10
@@ -12,7 +12,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.8.8@sha256:72dd1056fab07c873276c854bea08b8ef07bb54b8fbe0413047d8701d2abc146
+            tag: 2.8.10@sha256:e4376f29dadadd1abf8e3d7340972dc059761f8cbb4ece619c1fda09ec16292e
          env:
            - name: MUSIC_DIR
              value: /mnt/store/Music Grabber/
@@ -32,62 +32,6 @@ qbittorrent:
            - |
              sysctl -w net.ipv4.ip_forward=1;
              sysctl -w net.ipv6.conf.all.disable_ipv6=1
-        gluetun:
-          restartPolicy: Always
-          image:
-            repository: ghcr.io/qdm12/gluetun
-            tag: latest@sha256:725d3e51091dde4ca43e3e3f26e2e6d3d0ccc66821e92d505c3da04958f7d472
-          lifecycle:
-            postStart:
-              exec:
-                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
-          env:
-            - name: VPN_SERVICE_PROVIDER
-              value: protonvpn
-            - name: VPN_TYPE
-              value: wireguard
-            - name: WIREGUARD_PRIVATE_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: protonvpn-wireguard-conf
-                  key: private-key
-            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 127.0.0.0/8,192.168.1.0/24,10.244.0.0/16,10.96.0.0/12
-            - name: FIREWALL_INPUT_PORTS
-              value: 8080,9022
-            - name: VPN_PORT_FORWARDING
-              value: "on"
-            - name: VPN_PORT_FORWARDING_UP_COMMAND
-              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORT}}" }}"'
-            - name: PORT_FORWARD_ONLY
-              value: "on"
-            - name: BLOCK_MALICIOUS
-              value: "off"
-          securityContext:
-            privileged: True
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_MODULE
-          probes:
-            readiness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                    - /gluetun-entrypoint
-                    - healthcheck
-                failureThreshold: 5
-                initialDelaySeconds: 30
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 15
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              devic.es/tun: "1"
      containers:
        qbittorrent:
          image:
@@ -108,6 +52,65 @@ qbittorrent:
            requests:
              cpu: 500m
              memory: 1Gi
+        gluetun:
+          image:
+            repository: ghcr.io/qdm12/gluetun
+            tag: latest@sha256:725d3e51091dde4ca43e3e3f26e2e6d3d0ccc66821e92d505c3da04958f7d472
+          lifecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
+          env:
+            - name: VPN_SERVICE_PROVIDER
+              value: protonvpn
+            - name: VPN_TYPE
+              value: wireguard
+            - name: WIREGUARD_PRIVATE_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: protonvpn-wireguard-conf
+                  key: private-key
+            - name: FIREWALL_OUTBOUND_SUBNETS
+              value: 192.168.1.0/24,10.244.0.0/16,10.96.0.0/16
+            - name: FIREWALL_INPUT_PORTS
+              value: 8080,9022
+            - name: VPN_PORT_FORWARDING
+              value: "on"
+            - name: VPN_PORT_FORWARDING_UP_COMMAND
+              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORTS}}" }}"'
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: dot
+            - name: BLOCK_MALICIOUS
+              value: "off"
+            - name: HTTPPROXY
+              value: "off"
+            - name: SHADOWSOCKS
+              value: "off"
+          securityContext:
+            privileged: True
+            capabilities:
+              add:
+                - NET_ADMIN
+                - SYS_MODULE
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                    - /gluetun-entrypoint
+                    - healthcheck
+                failureThreshold: 5
+                initialDelaySeconds: 30
+                periodSeconds: 30
+                successThreshold: 1
+                timeoutSeconds: 15
+          resources:
+            limits:
+              devic.es/tun: "1"
+            requests:
+              devic.es/tun: "1"
        exporter:
          image:
            repository: esanchezm/prometheus-qbittorrent-exporter
@@ -14,7 +14,7 @@ radarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls303@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
          env:
            - name: TZ
              value: America/Chicago
@@ -14,7 +14,7 @@ radarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls303@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
          env:
            - name: TZ
              value: America/Chicago
@@ -14,7 +14,7 @@ radarr-standup:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls303@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
          env:
            - name: TZ
              value: America/Chicago
@@ -14,7 +14,7 @@ radarr:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls303@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
          env:
            - name: TZ
              value: America/Chicago
@@ -10,7 +10,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:25ff3c045548971d12726e54bea4564b8ec3bedb3d6951aecdefd01caf840974
+            tag: latest@sha256:654eff5a61e7a768b233b89da64ba71904d06c67c2f43fb31ab5ce20b6f1e44c
          env:
            - name: SEARXNG_BASE_URL
              value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:25ff3c045548971d12726e54bea4564b8ec3bedb3d6951aecdefd01caf840974
+            tag: latest@sha256:654eff5a61e7a768b233b89da64ba71904d06c67c2f43fb31ab5ce20b6f1e44c
          env:
            - name: SEARXNG_BASE_URL
              value: https://searxng.alexlebens.net/
@@ -33,56 +33,6 @@ slskd:
            - |
              sysctl -w net.ipv4.ip_forward=1;
              sysctl -w net.ipv6.conf.all.disable_ipv6=1
-        gluetun:
-          restartPolicy: Always
-          image:
-            repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
-          lifecycle:
-            postStart:
-              exec:
-                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
-          env:
-            - name: VPN_SERVICE_PROVIDER
-              value: protonvpn
-            - name: VPN_TYPE
-              value: wireguard
-            - name: WIREGUARD_PRIVATE_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: protonvpn-wireguard-conf
-                  key: private-key
-            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 127.0.0.0/8,192.168.1.0/24,10.244.0.0/16,10.96.0.0/12
-            - name: FIREWALL_INPUT_PORTS
-              value: 5030
-            - name: BLOCK_MALICIOUS
-              value: "off"
-          securityContext:
-            privileged: true
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_MODULE
-          probes:
-            readiness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                    - /gluetun-entrypoint
-                    - healthcheck
-                failureThreshold: 5
-                initialDelaySeconds: 30
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 15
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              devic.es/tun: "1"
      containers:
        main:
          image:
@@ -103,6 +53,61 @@ slskd:
            requests:
              cpu: 100m
              memory: 330Mi
+        gluetun:
+          image:
+            repository: ghcr.io/qdm12/gluetun
+            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
+          lifecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
+          env:
+            - name: VPN_SERVICE_PROVIDER
+              value: protonvpn
+            - name: VPN_TYPE
+              value: wireguard
+            - name: WIREGUARD_PRIVATE_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: protonvpn-wireguard-conf
+                  key: private-key
+            - name: FIREWALL_OUTBOUND_SUBNETS
+              value: 192.168.1.0/24,10.0.0.0/8
+            - name: FIREWALL_INPUT_PORTS
+              value: 5030,50300
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: dot
+            - name: BLOCK_MALICIOUS
+              value: "off"
+            - name: HTTPPROXY
+              value: "off"
+            - name: SHADOWSOCKS
+              value: "off"
+          securityContext:
+            privileged: true
+            capabilities:
+              add:
+                - NET_ADMIN
+                - SYS_MODULE
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                    - /gluetun-entrypoint
+                    - healthcheck
+                failureThreshold: 5
+                initialDelaySeconds: 30
+                periodSeconds: 30
+                successThreshold: 1
+                timeoutSeconds: 15
+          resources:
+            limits:
+              devic.es/tun: "1"
+            requests:
+              devic.es/tun: "1"
  service:
    main:
      controller: main
@@ -20,7 +20,7 @@ sparkyfitness:
  server:
    image:
      repository: ghcr.io/codewithcj/sparkyfitness-server
-      tag: v0.16.6.2@sha256:c9fa57d68dc4bc5fae14075dc59ec2aea67d72710dd6ed289824960d4ecd22ad
+      tag: v0.16.6.1@sha256:5710eba08e2fcbd1718f74dfcf72273a8d7e7dab3fe49c87bbab23e9d2b08c6f
    resources:
      requests:
        cpu: 100m
@@ -45,7 +45,7 @@ sparkyfitness:
  frontend:
    image:
      repository: ghcr.io/codewithcj/sparkyfitness-frontend
-      tag: v0.16.6.2@sha256:03c27a5e81d666996043f867c2140fbb35e38e07994592fb527ab86a6c808f48
+      tag: v0.16.6.1@sha256:9a52fc95e96375d86990a036aa8ffebd9de8866c8601e3f2d27a483f8e102166
    resources:
      requests:
        cpu: 10m
@@ -9,9 +9,42 @@ tubearchivist:
        securityContext:
          fsGroup: 1000
          fsGroupChangePolicy: OnRootMismatch
-      initContainers:
+      containers:
+        main:
+          image:
+            repository: bbilly1/tubearchivist
+            tag: v0.5.10@sha256:dfe723cf008520e1758ecc3e59e6ea8761dd10d5bb099cd87289e80f5bd66567
+          env:
+            - name: TZ
+              value: America/Chicago
+            - name: HOST_UID
+              value: 1000
+            - name: HOST_GID
+              value: 1000
+            - name: ES_URL
+              value: https://elasticsearch-tubearchivist-es-http.tubearchivist:9200
+            - name: ES_DISABLE_VERIFY_SSL
+              value: true
+            - name: REDIS_CON
+              value: redis://tubearchivist-valkey.tubearchivist:6379
+            - name: TA_HOST
+              value: https://tubearchivist.alexlebens.net http://tubearchivist.tubearchivist:80/
+            - name: TA_PORT
+              value: 24000
+            - name: TA_USERNAME
+              value: admin
+          envFrom:
+            - secretRef:
+                name: tubearchivist-config
+          resources:
+            requests:
+              cpu: 10m
+              memory: 1Gi
+        bgutil:
+          image:
+            repository: brainicism/bgutil-ytdlp-pot-provider
+            tag: 1.3.1@sha256:1aaa43a0ca72dfca6a6d2129a0fb4a23465c25adb1b043f8aff829a20825646b
        gluetun:
-          restartPolicy: Always
          image:
            repository: ghcr.io/qdm12/gluetun
            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
@@ -30,19 +63,23 @@ tubearchivist:
                  name: protonvpn-wireguard-conf
                  key: private-key
            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 127.0.0.0/8,192.168.1.0/24,10.244.0.0/16,10.96.0.0/12
+              value: 192.168.1.0/24,10.0.0.0/8
            - name: FIREWALL_INPUT_PORTS
-              value: "24000"
-            - name: DNS_CACHING
+              value: 80,8000,24000
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: dot
+            - name: HTTPPROXY
+              value: "off"
+            - name: SHADOWSOCKS
              value: "off"
          securityContext:
-            privileged: true
+            privileged: True
            capabilities:
              add:
                - NET_ADMIN
                - SYS_MODULE
          probes:
-            readiness:
+            liveness:
              enabled: true
              custom: true
              spec:
@@ -51,65 +88,15 @@ tubearchivist:
                    - /gluetun-entrypoint
                    - healthcheck
                failureThreshold: 5
-                initialDelaySeconds: 15
-                periodSeconds: 10
-                successThreshold: 1
-                timeoutSeconds: 5
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              devic.es/tun: "1"
-      containers:
-        main:
-          image:
-            repository: bbilly1/tubearchivist
-            tag: v0.5.10@sha256:dfe723cf008520e1758ecc3e59e6ea8761dd10d5bb099cd87289e80f5bd66567
-          env:
-            - name: TZ
-              value: America/Chicago
-            - name: HOST_UID
-              value: 1000
-            - name: HOST_GID
-              value: 1000
-            - name: ES_URL
-              value: https://elasticsearch-tubearchivist-es-http.tubearchivist:9200
-            - name: ES_DISABLE_VERIFY_SSL
-              value: true
-            - name: REDIS_CON
-              value: redis://tubearchivist-valkey.tubearchivist.svc.cluster.local:6379
-            - name: TA_HOST
-              value: https://tubearchivist.alexlebens.net http://tubearchivist.tubearchivist:80/
-            - name: TA_PORT
-              value: 24000
-            - name: TA_USERNAME
-              value: admin
-          envFrom:
-            - secretRef:
-                name: tubearchivist-config
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                    - curl
-                    - -f
-                    - http://localhost:24000/api/health/
-                failureThreshold: 5
                initialDelaySeconds: 30
                periodSeconds: 30
                successThreshold: 1
                timeoutSeconds: 15
          resources:
+            limits:
+              devic.es/tun: "1"
            requests:
-              cpu: 10m
-              memory: 1Gi
-        bgutil:
-          image:
-            repository: brainicism/bgutil-ytdlp-pot-provider
-            tag: 1.3.1@sha256:1aaa43a0ca72dfca6a6d2129a0fb4a23465c25adb1b043f8aff829a20825646b
+              devic.es/tun: "1"
    metrics:
      type: deployment
      replicas: 1
@@ -14,7 +14,7 @@ yubal:
        main:
          image:
            repository: ghcr.io/guillevc/yubal
-            tag: 0.8.1@sha256:406a5cdd02dcb3497d8e99d2b7d361d3a2b283ff273f992e9078d912e3a0c968
+            tag: 0.8.0@sha256:f3872ab590e74472e56c3aaaef497879f77191cd96306eeb8d3576a814c8a147
          env:
            - name: YUBAL_TZ
              value: America/Chicago
@@ -33,7 +33,7 @@ services:
            - postgresql18:/var/lib/postgresql

    gitea:
-        image: gitea/gitea:1.26.1@sha256:d8667667b4ccbd1f67b86a376bffcc0a17b16cf71309ed04e3918231776d47dd
+        image: gitea/gitea:1.26.0@sha256:af07b88edbb2173d20932f9c75ebcf4e61d7d5c2d6a7ab5cc6b97cba28aea352
        container_name: gitea
        depends_on:
            - postgresql