Update actions/checkout action to v5

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/siderolabs/talosctl](https://github.com/siderolabs/talos) | minor | `v1.10.4` -> `v1.11.1` |

---

### Release Notes

<details>
<summary>siderolabs/talos (ghcr.io/siderolabs/talosctl)</summary>

### [`v1.11.1`](https://github.com/siderolabs/talos/releases/tag/v1.11.1)

[Compare Source](https://github.com/siderolabs/talos/compare/v1.11.0...v1.11.1)

##### [Talos 1.11.1](https://github.com/siderolabs/talos/releases/tag/v1.11.1) (2025-09-08)

Welcome to the v1.11.1 release of Talos!

Please try out the release binaries and report any issues at
<https://github.com/siderolabs/talos/issues>.

##### Component Updates

Linux: 6.12.45
CoreDNS: 1.12.3

Talos is built with Go 1.24.6.

##### Contributors

- Andrey Smirnov
- Markus Freitag
- Olivier Doucet
- Sammy ETUR

##### Changes

<details><summary>7 commits</summary>
<p>

- [@&#8203;`8e85c83`](https://github.com/siderolabs/talos/commit/8e85c8362) release(v1.11.1): prepare release
- [@&#8203;`ff8644c`](https://github.com/siderolabs/talos/commit/ff8644cd2) fix: correctly handle status-code 204
- [@&#8203;`7d5fe2d`](https://github.com/siderolabs/talos/commit/7d5fe2d0f) feat: update Linux kernel (memcg\_v1, ublk)
- [@&#8203;`9e310a9`](https://github.com/siderolabs/talos/commit/9e310a9dd) fix: enable support for VMWare arm64
- [@&#8203;`f7620f0`](https://github.com/siderolabs/talos/commit/f7620f028) feat: update CoreDNS to 1.12.3
- [@&#8203;`01bf2f6`](https://github.com/siderolabs/talos/commit/01bf2f6f9) feat: add SOCKS5 proxy support to dynamic proxy dialer
- [@&#8203;`8a578bc`](https://github.com/siderolabs/talos/commit/8a578bc4a) feat: update Linux to 6.12.45

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>3 commits</summary>
<p>

- [siderolabs/pkgs@`1a25681`](https://github.com/siderolabs/pkgs/commit/1a25681) feat: enable ublk support
- [siderolabs/pkgs@`95f0be4`](https://github.com/siderolabs/pkgs/commit/95f0be4) fix: enable memcg v1
- [siderolabs/pkgs@`e1c333c`](https://github.com/siderolabs/pkgs/commit/e1c333c) feat: update Linux to 6.12.45

</p>
</details>

##### Dependency Changes

- **cloud.google.com/go/compute/metadata**           v0.7.0 -> v0.8.0
- **github.com/aws/aws-sdk-go-v2/config**            v1.29.17 -> v1.31.2
- **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**  v1.16.32 -> v1.18.4
- **github.com/aws/smithy-go**                       v1.22.4 -> v1.22.5
- **github.com/miekg/dns**                           v1.1.67 -> v1.1.68
- **github.com/siderolabs/pkgs**                     v1.11.0-15-g2ac857a -> v1.11.0-18-g1a25681
- **github.com/siderolabs/talos/pkg/machinery**      v1.11.0 -> v1.11.1
- **golang.org/x/net**                               v0.42.0 -> v0.43.0
- **golang.org/x/sys**                               v0.34.0 -> v0.35.0
- **golang.org/x/term**                              v0.33.0 -> v0.34.0
- **golang.org/x/text**                              v0.27.0 -> v0.28.0
- **google.golang.org/grpc**                         v1.73.0 -> v1.75.0
- **google.golang.org/protobuf**                     v1.36.6 -> v1.36.8

Previous release can be found at [v1.11.0](https://github.com/siderolabs/talos/releases/tag/v1.11.0)

##### Images

```
ghcr.io/siderolabs/flannel:v0.27.2
registry.k8s.io/coredns/coredns:v1.12.3
gcr.io/etcd-development/etcd:v3.6.4
registry.k8s.io/kube-apiserver:v1.34.0
registry.k8s.io/kube-controller-manager:v1.34.0
registry.k8s.io/kube-scheduler:v1.34.0
registry.k8s.io/kube-proxy:v1.34.0
ghcr.io/siderolabs/kubelet:v1.34.0
ghcr.io/siderolabs/installer:v1.11.1
registry.k8s.io/pause:3.10
```

### [`v1.11.0`](https://github.com/siderolabs/talos/blob/HEAD/CHANGELOG.md#Changes-since-v1110-alpha2)

[Compare Source](https://github.com/siderolabs/talos/compare/v1.10.7...v1.11.0)

<details><summary>1 commit</summary>
<p>

- [`777335f23`](777335f234) chore: improve cloud image uploader resilience

</p>
</details>

### [`v1.10.7`](https://github.com/siderolabs/talos/releases/tag/v1.10.7)

[Compare Source](https://github.com/siderolabs/talos/compare/v1.10.6...v1.10.7)

##### [Talos 1.10.7](https://github.com/siderolabs/talos/releases/tag/v1.10.7) (2025-08-26)

Welcome to the v1.10.7 release of Talos!

Please try out the release binaries and report any issues at
<https://github.com/siderolabs/talos/issues>.

##### Component Updates

Linux: 6.12.43
Kubernetes: 1.33.4

Talos is built with Go 1.24.6.

##### Contributors

- Andrey Smirnov

##### Changes

<details><summary>6 commits</summary>
<p>

- [@&#8203;`71de2e2`](https://github.com/siderolabs/talos/commit/71de2e23b) release(v1.10.7): prepare release
- [@&#8203;`d7936de`](https://github.com/siderolabs/talos/commit/d7936dec6) fix: image cache lockup on a missing volume
- [@&#8203;`f6541fa`](https://github.com/siderolabs/talos/commit/f6541fa71) fix: live reload of TLS client config for discovery client
- [@&#8203;`29cfd9f`](https://github.com/siderolabs/talos/commit/29cfd9fd0) fix: enforce minimum size on user volumes if not set explicitly
- [@&#8203;`83dcca3`](https://github.com/siderolabs/talos/commit/83dcca3c7) feat: add [`F71808E`](https://github.com/siderolabs/talos/commit/F71808E) watchdog driver
- [@&#8203;`3f05c39`](https://github.com/siderolabs/talos/commit/3f05c3922) feat: update Linux and Kubernetes

</p>
</details>

##### Changes from siderolabs/discovery-client
<details><summary>3 commits</summary>
<p>

- [siderolabs/discovery-client@`0bffa6f`](https://github.com/siderolabs/discovery-client/commit/0bffa6f) fix: allow TLS config to be passed as a function
- [siderolabs/discovery-client@`09c6687`](https://github.com/siderolabs/discovery-client/commit/09c6687) chore: fix project name in release.toml
- [siderolabs/discovery-client@`71b0c6d`](https://github.com/siderolabs/discovery-client/commit/71b0c6d) fix: add FIPS-140-3 strict compliance

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>5 commits</summary>
<p>

- [siderolabs/pkgs@`88700c7`](https://github.com/siderolabs/pkgs/commit/88700c7) feat: update Linux to 6.12.43
- [siderolabs/pkgs@`4cf5eeb`](https://github.com/siderolabs/pkgs/commit/4cf5eeb) fix: re-enable CPUSETS\_V1 cgroups controller
- [siderolabs/pkgs@`8a14125`](https://github.com/siderolabs/pkgs/commit/8a14125) feat: update backportable dependencies
- [siderolabs/pkgs@`69b9cdc`](https://github.com/siderolabs/pkgs/commit/69b9cdc) feat: enable [`F71808E`](https://github.com/siderolabs/talos/commit/F71808E) watchdog driver
- [siderolabs/pkgs@`7ffefa9`](https://github.com/siderolabs/pkgs/commit/7ffefa9) feat: update Go to 1.24.6

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>1 commit</summary>
<p>

- [siderolabs/tools@`306d9d9`](https://github.com/siderolabs/tools/commit/306d9d9) feat: update Go to 1.24.6

</p>
</details>

##### Dependency Changes

- **github.com/siderolabs/discovery-client**     v0.1.11 -> v0.1.13
- **github.com/siderolabs/pkgs**                 v1.10.0-29-g2e6dd0a -> v1.10.0-34-g88700c7
- **github.com/siderolabs/talos/pkg/machinery**  v1.10.6 -> v1.10.7
- **github.com/siderolabs/tools**                v1.10.0-5-g31fd099 -> v1.10.0-6-g306d9d9
- **google.golang.org/grpc**                     v1.71.3 -> v1.73.0
- **k8s.io/api**                                 v0.33.2 -> v0.33.4
- **k8s.io/apiserver**                           v0.33.2 -> v0.33.4
- **k8s.io/client-go**                           v0.33.2 -> v0.33.4
- **k8s.io/component-base**                      v0.33.2 -> v0.33.4
- **k8s.io/kube-scheduler**                      v0.33.2 -> v0.33.4
- **k8s.io/kubectl**                             v0.33.2 -> v0.33.4
- **k8s.io/kubelet**                             v0.33.2 -> v0.33.4
- **k8s.io/pod-security-admission**              v0.33.2 -> v0.33.4

Previous release can be found at [v1.10.6](https://github.com/siderolabs/talos/releases/tag/v1.10.6)

##### Images

```
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.4
registry.k8s.io/kube-controller-manager:v1.33.4
registry.k8s.io/kube-scheduler:v1.33.4
registry.k8s.io/kube-proxy:v1.33.4
ghcr.io/siderolabs/kubelet:v1.33.4
ghcr.io/siderolabs/installer:v1.10.7
registry.k8s.io/pause:3.10
```

### [`v1.10.6`](https://github.com/siderolabs/talos/releases/tag/v1.10.6)

[Compare Source](https://github.com/siderolabs/talos/compare/v1.10.5...v1.10.6)

##### [Talos 1.10.6](https://github.com/siderolabs/talos/releases/tag/v1.10.6) (2025-07-31)

Welcome to the v1.10.6 release of Talos!

Please try out the release binaries and report any issues at
<https://github.com/siderolabs/talos/issues>.

##### Component Updates

Linux: 6.12.40
Kubernetes: 1.33.3

Talos is built with Go 1.24.5.

##### Contributors

- Andrey Smirnov
- Andrew Longwill
- Mateusz Urbanek

##### Changes

<details><summary>8 commits</summary>
<p>

- [@&#8203;`cfa6c98`](https://github.com/siderolabs/talos/commit/cfa6c98ce) release(v1.10.6): prepare release
- [@&#8203;`7553089`](https://github.com/siderolabs/talos/commit/755308906) fix: issues with reading GPT
- [@&#8203;`bb1cdc8`](https://github.com/siderolabs/talos/commit/bb1cdc86b) fix: issue with volume remount on service restart
- [@&#8203;`e8bbe4a`](https://github.com/siderolabs/talos/commit/e8bbe4a51) chore: tag aws snapshots created via ci with the image name
- [@&#8203;`e595225`](https://github.com/siderolabs/talos/commit/e59522577) feat: include AMD encrypted mem modules into base
- [@&#8203;`68a4852`](https://github.com/siderolabs/talos/commit/68a485269) fix: add more bootloader probe logs on upgrade
- [@&#8203;`d76649d`](https://github.com/siderolabs/talos/commit/d76649dd5) fix: talos endpoint might not be created in Kubernetes
- [@&#8203;`e621759`](https://github.com/siderolabs/talos/commit/e62175948) feat: update Linux to 6.12.40

</p>
</details>

##### Changes from siderolabs/gen
<details><summary>1 commit</summary>
<p>

- [siderolabs/gen@`044d921`](https://github.com/siderolabs/gen/commit/044d921) feat: add xslices.Deduplicate

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>5 commits</summary>
<p>

- [siderolabs/pkgs@`2e6dd0a`](https://github.com/siderolabs/pkgs/commit/2e6dd0a) feat: update Linux to 6.12.40
- [siderolabs/pkgs@`3657b7d`](https://github.com/siderolabs/pkgs/commit/3657b7d) feat: update Linux to 6.12.38
- [siderolabs/pkgs@`a8e77ff`](https://github.com/siderolabs/pkgs/commit/a8e77ff) feat: enable AMD encrypted memory
- [siderolabs/pkgs@`8dd783f`](https://github.com/siderolabs/pkgs/commit/8dd783f) feat: update Linux to 6.12.36 and firmware
- [siderolabs/pkgs@`7e49fce`](https://github.com/siderolabs/pkgs/commit/7e49fce) feat: update tools and toolchain

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>1 commit</summary>
<p>

- [siderolabs/tools@`31fd099`](https://github.com/siderolabs/tools/commit/31fd099) feat: update Go to 1.24.5

</p>
</details>

##### Dependency Changes

- **github.com/siderolabs/gen**                  v0.8.4 -> v0.8.5
- **github.com/siderolabs/go-blockdevice/v2**    v2.0.16 -> v2.0.19
- **github.com/siderolabs/pkgs**                 v1.10.0-24-g28fa97d -> v1.10.0-29-g2e6dd0a
- **github.com/siderolabs/talos/pkg/machinery**  v1.10.5 -> v1.10.6
- **github.com/siderolabs/tools**                v1.10.0-4-g9d54ed4 -> v1.10.0-5-g31fd099
- **golang.org/x/sync**                          v0.15.0 -> v0.16.0
- **golang.org/x/sys**                           v0.33.0 -> v0.34.0
- **golang.org/x/text**                          v0.26.0 -> v0.27.0

Previous release can be found at [v1.10.5](https://github.com/siderolabs/talos/releases/tag/v1.10.5)

##### Images

```
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.3
registry.k8s.io/kube-controller-manager:v1.33.3
registry.k8s.io/kube-scheduler:v1.33.3
registry.k8s.io/kube-proxy:v1.33.3
ghcr.io/siderolabs/kubelet:v1.33.3
ghcr.io/siderolabs/installer:v1.10.6
registry.k8s.io/pause:3.10
```

### [`v1.10.5`](https://github.com/siderolabs/talos/releases/tag/v1.10.5)

[Compare Source](https://github.com/siderolabs/talos/compare/v1.10.4...v1.10.5)

##### [Talos 1.10.5](https://github.com/siderolabs/talos/releases/tag/v1.10.5) (2025-07-03)

Welcome to the v1.10.5 release of Talos!

Please try out the release binaries and report any issues at
<https://github.com/siderolabs/talos/issues>.

##### Azure

Talos on Azure now defaults to MTU of 1400 bytes for the `eth0` interface to avoid packet fragmentation issues.
The default MTU can be overriden with machine configuration.

##### Component Updates

Linux: 6.12.35
Kubernetes: 1.33.2

Talos is built with Go 1.24.4.

##### Contributors

- Andrey Smirnov
- Noel Georgi

##### Changes

<details><summary>9 commits</summary>
<p>

- [@&#8203;`55fc623`](https://github.com/siderolabs/talos/commit/55fc62331) release(v1.10.5): prepare release
- [@&#8203;`b84e150`](https://github.com/siderolabs/talos/commit/b84e15037) feat: update Kubernetes default to 1.33.2
- [@&#8203;`2017ec2`](https://github.com/siderolabs/talos/commit/2017ec228) fix: add limited retries for not found images
- [@&#8203;`b3e510a`](https://github.com/siderolabs/talos/commit/b3e510ac5) chore: improve cloud image uploader resilience
- [@&#8203;`4a40cdd`](https://github.com/siderolabs/talos/commit/4a40cddbb) fix: hold user volume mount point across kubelet restarts
- [@&#8203;`9e1f347`](https://github.com/siderolabs/talos/commit/9e1f347f5) fix: etcd recover with multiple advertised addresses
- [@&#8203;`f85ff5f`](https://github.com/siderolabs/talos/commit/f85ff5fa8) feat: update Linux to 6.12.35
- [@&#8203;`87ed1b5`](https://github.com/siderolabs/talos/commit/87ed1b589) fix: treat context canceled as expected error on image pull
- [@&#8203;`9a0644a`](https://github.com/siderolabs/talos/commit/9a0644a64) fix: set default MTU on Azure to 1400

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>2 commits</summary>
<p>

- [siderolabs/pkgs@`28fa97d`](https://github.com/siderolabs/pkgs/commit/28fa97d) fix: iptables url
- [siderolabs/pkgs@`6109fe6`](https://github.com/siderolabs/pkgs/commit/6109fe6) feat: update dependencies

</p>
</details>

##### Dependency Changes

- **github.com/siderolabs/pkgs**                 v1.10.0-22-g51e388c -> v1.10.0-24-g28fa97d
- **github.com/siderolabs/talos/pkg/machinery**  v1.10.4 -> v1.10.5
- **k8s.io/api**                                 v0.33.1 -> v0.33.2
- **k8s.io/apiserver**                           v0.33.1 -> v0.33.2
- **k8s.io/client-go**                           v0.33.1 -> v0.33.2
- **k8s.io/component-base**                      v0.33.1 -> v0.33.2
- **k8s.io/kube-scheduler**                      v0.33.1 -> v0.33.2
- **k8s.io/kubectl**                             v0.33.1 -> v0.33.2
- **k8s.io/kubelet**                             v0.33.1 -> v0.33.2
- **k8s.io/pod-security-admission**              v0.33.1 -> v0.33.2

Previous release can be found at [v1.10.4](https://github.com/siderolabs/talos/releases/tag/v1.10.4)

##### Images

```
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.2
registry.k8s.io/kube-controller-manager:v1.33.2
registry.k8s.io/kube-scheduler:v1.33.2
registry.k8s.io/kube-proxy:v1.33.2
ghcr.io/siderolabs/kubelet:v1.33.2
ghcr.io/siderolabs/installer:v1.10.5
registry.k8s.io/pause:3.10
```

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45OS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMTE2LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #1409
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/lint-test-docker.yaml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -37,9 +37,9 @@ jobs:
 
       - name: Set up Node.js
         if: steps.check-branch-exists.outputs.exists == 'true'
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
-          node-version: '22'
+          node-version: '24'
 
       - name: Lint Docker Compose
         if: steps.check-branch-exists.outputs.exists == 'true'

.gitea/workflows/lint-test-helm.yaml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.gitea/workflows/renovate.yaml

@@ -16,7 +16,7 @@ jobs:
     container: ghcr.io/renovatebot/renovate:41
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Renovate
         run: renovate

clusters/cl01tl/applications/actual/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 appVersion: v25.5.0

clusters/cl01tl/applications/audiobookshelf/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 appVersion: 2.21.0

clusters/cl01tl/applications/bazarr/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 appVersion: 1.5.2

clusters/cl01tl/applications/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.2@sha256:f9cb78eaec1d77017f5c3e5b7aa07106fe4433a77fd902d01e91213f7c991499
+            tag: 1.5.2@sha256:e1f05f60dada5f7bc83c52037e222a34c26ad04339c22ea685de680ddcd58487
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/calibre-web-automated/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: calibre-web-automated
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/calibre-web.png
 appVersion: V3.0.4

clusters/cl01tl/applications/calibre-web-automated/values.yaml

@@ -31,7 +31,7 @@ calibre-web-automated:
         main:
           image:
             repository: ghcr.io/calibrain/calibre-web-automated-book-downloader
-            tag: latest@sha256:cd528d4bda14c4c2774308376aa792948affd61097b239457f7ba99e158492f7
+            tag: latest@sha256:a709fc56f80e132c48360cbd042543d8ab8534af21c376a21c26d94917a4c918
             pullPolicy: IfNotPresent
           env:
             - name: FLASK_PORT
@@ -55,7 +55,7 @@ calibre-web-automated:
         bypass:
           image:
             repository: ghcr.io/sarperavci/cloudflarebypassforscraping
-            tag: latest@sha256:9ac4cd4d6d5dfc270a92502b92761d9039297abfb123f4a2a3abca5209d9eec5
+            tag: latest@sha256:08339ef0a9b1bc61cb2457073fce894ee0e46d011bf868f7e3a630c491d7e38b
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/applications/code-server/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
   - name: app-template
     alias: code-server
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.103.2@sha256:d85f12f63fbeb0b91d337f1b9fee0409b057d9fbb106b987305856112dc7873a
+            tag: 4.104.0@sha256:9b103f97d9599c2bbdb3e205414d58fbf213f2727cc37fbfe2b51ac6dcc4fc01
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/directus/Chart.yaml

@@ -20,14 +20,14 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     alias: cloudflared-directus
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 appVersion: 11.7.2

clusters/cl01tl/applications/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.11.0
+            tag: 11.12.0
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -176,4 +176,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/directus/directus-postgresql-17-cluster
     endpointCredentials: directus-postgresql-17-cluster-backup-secret
     backupIndex: 2
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/eigenfocus/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: eigenfocus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/eigenfocus.png
 appVersion: 1.1.0

clusters/cl01tl/applications/element-web/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.18
+    version: 1.4.19
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     alias: cloudflared

clusters/cl01tl/applications/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.11.110
+    tag: v1.11.112
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/applications/freshrss/Chart.yaml

@@ -20,14 +20,14 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 appVersion: 1.26.2

clusters/cl01tl/applications/freshrss/values.yaml

@@ -217,4 +217,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/freshrss/freshrss-postgresql-17-cluster
     endpointCredentials: freshrss-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/home-assistant/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 appVersion: 2025.5.2

clusters/cl01tl/applications/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.9.1
+            tag: 2025.9.3
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.103.2@sha256:d85f12f63fbeb0b91d337f1b9fee0409b057d9fbb106b987305856112dc7873a
+            tag: 4.104.0@sha256:9b103f97d9599c2bbdb3e205414d58fbf213f2727cc37fbfe2b51ac6dcc4fc01
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/homepage-dev/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/homepage/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0

clusters/cl01tl/applications/huntarr/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: huntarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 appVersion: 7.0.0

clusters/cl01tl/applications/huntarr/values.yaml

@@ -31,7 +31,7 @@ huntarr:
       forceRename: huntarr-config
       storageClass: ceph-block
       accessMode: ReadWriteOnce
-      size: 1Gi
+      size: 5Gi
       advancedMounts:
         main:
           main:

clusters/cl01tl/applications/immich/Chart.yaml

@@ -17,10 +17,10 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-16-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 appVersion: v1.132.3

clusters/cl01tl/applications/immich/values.yaml

@@ -228,4 +228,4 @@ postgres-16-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/immich/immich-postgresql-16-cluster
     endpointCredentials: immich-postgresql-16-cluster-backup-secret
     backupIndex: 2
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/jellyfin/Chart.yaml

@@ -20,6 +20,6 @@ dependencies:
   - name: app-template
     alias: jellyfin
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 appVersion: 10.10.7

clusters/cl01tl/applications/jellystat/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: jellystat
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 appVersion: 1.1.6

clusters/cl01tl/applications/karakeep/Chart.yaml

@@ -20,9 +20,9 @@ dependencies:
   - name: app-template
     alias: karakeep
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: meilisearch
-    version: 0.17.0
+    version: 0.17.1
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     alias: cloudflared

clusters/cl01tl/applications/karakeep/values.yaml

@@ -9,7 +9,7 @@ karakeep:
         main:
           image:
             repository: ghcr.io/karakeep-app/karakeep
-            tag: 0.27.0
+            tag: 0.27.1
             pullPolicy: IfNotPresent
           env:
             - name: DATA_DIR

clusters/cl01tl/applications/kiwix/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: kiwix
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 appVersion: 3.7.0

clusters/cl01tl/applications/libation/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: libation
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 appVersion: 12.4.3

clusters/cl01tl/applications/lidarr/Chart.yaml

@@ -21,10 +21,10 @@ dependencies:
   - name: app-template
     alias: lidarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 appVersion: 2.11.2

clusters/cl01tl/applications/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 2.13.3@sha256:186bc4d3f22bd6a71c235c1c7f57f90a8473f766278d9c929398fb5ce90eae7e
+            tag: 2.13.3@sha256:a6559012296a8d821e7fb397ac1c125f69b2cf4b1d3de996c1defda3287fdec6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/lidatube/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: lidatube
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidatube.png
 appVersion: 0.2.22

clusters/cl01tl/applications/omni-tools/Chart.yaml

@@ -15,6 +15,6 @@ dependencies:
   - name: app-template
     alias: omni-tools
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/omnitools.png
 appVersion: 0.4.0

clusters/cl01tl/applications/outline/Chart.yaml

@@ -21,14 +21,14 @@ dependencies:
   - name: app-template
     alias: outline
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     alias: cloudflared-outline
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 appVersion: 0.84.0

clusters/cl01tl/applications/outline/values.yaml

@@ -169,4 +169,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster
     endpointCredentials: outline-postgresql-17-cluster-backup-secret
     backupIndex: 2
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/overseerr/Chart.yaml

@@ -16,6 +16,6 @@ maintainers:
 dependencies:
   - name: app-template
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
 appVersion: 1.34.0

clusters/cl01tl/applications/photoview/Chart.yaml

@@ -17,10 +17,10 @@ dependencies:
   - name: app-template
     alias: photoview
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 appVersion: 2.4.0

clusters/cl01tl/applications/photoview/values.yaml

@@ -96,4 +96,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster
     endpointCredentials: photoview-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/plex/Chart.yaml

@@ -21,6 +21,6 @@ dependencies:
   - name: app-template
     alias: plex
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 appVersion: 1.41.6

clusters/cl01tl/applications/plex/values.yaml

@@ -9,7 +9,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.42.1@sha256:28f18c27b6822328df994154dbf7c0f511032d9f91bbd10881030b706afd8593
+            tag: 1.42.1@sha256:3380d8901bf62a9b2246e665d6b8d1f9e03847327b539fb95feef681a8a171ff
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/postiz/Chart.yaml

@@ -20,13 +20,13 @@ dependencies:
   - name: app-template
     alias: postiz
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 appVersion: v1.43.3

clusters/cl01tl/applications/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.5.4
+            tag: v2.6.0
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL
@@ -129,4 +129,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/postiz/postiz-postgresql-17-cluster
     endpointCredentials: postiz-postgresql-17-cluster-backup-secret
     backupIndex: 1
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/prowlarr/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: prowlarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prowlarr.png
 appVersion: 1.35.1

clusters/cl01tl/applications/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.0.5@sha256:4f2a6d597845b2f3e19284b1d982b3e0b4bd7c22472c2979c956aa198b83f472
+            tag: 2.0.5@sha256:856c93bab72a6a41a23ff60bab48554135c044a456f40909307011dea8ddeafb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr-4k/Chart.yaml

@@ -24,10 +24,10 @@ dependencies:
   - name: app-template
     alias: radarr-4k
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-4k/values.yaml

@@ -15,7 +15,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.27.5@sha256:3ebb31bce86870dbcc15a5db3fba8864e302310cb2adb70476b0b64c1b3dc6dc
+            tag: 5.27.5@sha256:19474a623b278f558c9696a19b84640ad4aff3b2959f08904a77ffbad73ed7bd
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -115,4 +115,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster
     endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/radarr-anime/Chart.yaml

@@ -24,10 +24,10 @@ dependencies:
   - name: app-template
     alias: radarr-anime
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-anime/values.yaml

@@ -13,7 +13,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.27.5@sha256:3ebb31bce86870dbcc15a5db3fba8864e302310cb2adb70476b0b64c1b3dc6dc
+            tag: 5.27.5@sha256:19474a623b278f558c9696a19b84640ad4aff3b2959f08904a77ffbad73ed7bd
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -113,4 +113,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster
     endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/radarr-standup/Chart.yaml

@@ -23,10 +23,10 @@ dependencies:
   - name: app-template
     alias: radarr-standup
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-standup/values.yaml

@@ -13,7 +13,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.27.5@sha256:3ebb31bce86870dbcc15a5db3fba8864e302310cb2adb70476b0b64c1b3dc6dc
+            tag: 5.27.5@sha256:19474a623b278f558c9696a19b84640ad4aff3b2959f08904a77ffbad73ed7bd
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -113,4 +113,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster
     endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/radarr/Chart.yaml

@@ -23,10 +23,10 @@ dependencies:
   - name: app-template
     alias: radarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr/values.yaml

@@ -15,7 +15,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.27.5@sha256:3ebb31bce86870dbcc15a5db3fba8864e302310cb2adb70476b0b64c1b3dc6dc
+            tag: 5.27.5@sha256:19474a623b278f558c9696a19b84640ad4aff3b2959f08904a77ffbad73ed7bd
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -112,11 +112,11 @@ postgres-17-cluster:
       endpointURL: https://nyc3.digitaloceanspaces.com
       destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster
       endpointCredentials: radarr-postgresql-17-cluster-backup-secret
-      recoveryIndex: 3
+      recoveryIndex: 5
   backup:
     enabled: true
     endpointURL: https://nyc3.digitaloceanspaces.com
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster
     endpointCredentials: radarr-postgresql-17-cluster-backup-secret
-    backupIndex: 3
-    retentionPolicy: "7d"
+    backupIndex: 5
+    retentionPolicy: "3d"

clusters/cl01tl/applications/roundcube/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: roundcube
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/roundcube.png
 appVersion: 1.6.10

clusters/cl01tl/applications/roundcube/values.yaml

@@ -229,4 +229,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/roundcube/roundcube-postgresql-17-cluster
     endpointCredentials: roundcube-postgresql-17-cluster-backup-secret
     backupIndex: 2
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/searxng/Chart.yaml

@@ -15,6 +15,6 @@ dependencies:
   - name: app-template
     alias: searxng
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/searxng.png
 appVersion: 1.0.0

clusters/cl01tl/applications/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:511fa3f34c1d119c47f88c9a1e7eda1340f346543e980c17e5f14b27dac6a1ed
+            tag: latest@sha256:9c071b8685d6586692072df2eaa48a0adb8e53d13e18cb53e21924837c5803d7
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:511fa3f34c1d119c47f88c9a1e7eda1340f346543e980c17e5f14b27dac6a1ed
+            tag: latest@sha256:9c071b8685d6586692072df2eaa48a0adb8e53d13e18cb53e21924837c5803d7
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/applications/site-documentation/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
   - name: app-template
     alias: site-documentation
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     alias: cloudflared-site
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/site-profile/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
   - name: app-template
     alias: site-profile
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     alias: cloudflared-site
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/slskd/Chart.yaml

@@ -20,6 +20,6 @@ dependencies:
   - name: app-template
     alias: slskd
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/slskd.png
 appVersion: 0.22.5

clusters/cl01tl/applications/slskd/values.yaml

@@ -76,9 +76,9 @@ slskd:
                 - SYS_MODULE
           resources:
             limits:
-              squat.ai/tun: "1"
+              devic.es/tun: "1"
             requests:
-              squat.ai/tun: "1"
+              devic.es/tun: "1"
               cpu: 10m
               memory: 128Mi
     soularr:

clusters/cl01tl/applications/sonarr-4k/Chart.yaml

@@ -24,10 +24,10 @@ dependencies:
   - name: app-template
     alias: sonarr-4k
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr-4k/values.yaml

@@ -104,4 +104,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-4k/sonarr4-4k-postgresql-17-cluster
     endpointCredentials: sonarr-4k-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/sonarr-anime/Chart.yaml

@@ -23,10 +23,10 @@ dependencies:
   - name: app-template
     alias: sonarr-anime
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr-anime/values.yaml

@@ -113,4 +113,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-anime/sonarr4-anime-postgresql-17-cluster
     endpointCredentials: sonarr-anime-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/sonarr/Chart.yaml

@@ -23,10 +23,10 @@ dependencies:
   - name: app-template
     alias: sonarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr/values.yaml

@@ -116,4 +116,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4/sonarr4-postgresql-17-cluster
     endpointCredentials: sonarr-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/tautulli/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: tautulli
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tautulli.png
 appVersion: v2.15.2

clusters/cl01tl/applications/tdarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: tdarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: tdarr-exporter
     version: 1.1.7
     repository: https://homeylab.github.io/helm-charts/

clusters/cl01tl/applications/tubearchivist/Chart.yaml

@@ -19,6 +19,6 @@ dependencies:
   - name: app-template
     alias: tubearchivist
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 appVersion: v0.5.2

clusters/cl01tl/applications/tubearchivist/values.yaml

@@ -74,9 +74,9 @@ tubearchivist:
                 - SYS_MODULE
           resources:
             limits:
-              squat.ai/tun: "1"
+              devic.es/tun: "1"
             requests:
-              squat.ai/tun: "1"
+              devic.es/tun: "1"
               cpu: 10m
               memory: 128Mi
   service:

clusters/cl01tl/applications/vaultwarden/Chart.yaml

@@ -21,14 +21,14 @@ dependencies:
   - name: app-template
     alias: vaultwarden
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 appVersion: 1.33.2

clusters/cl01tl/applications/vaultwarden/values.yaml

@@ -73,4 +73,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
     endpointCredentials: vaultwarden-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/applications/yamtrack/Chart.yaml

@@ -19,10 +19,10 @@ dependencies:
   - name: app-template
     alias: yamtrack
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png
 appVersion: 0.22.7

clusters/cl01tl/applications/yamtrack/values.yaml

@@ -93,4 +93,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/yamtrack/yamtrack-postgresql-17-cluster
     endpointCredentials: yamtrack-postgresql-17-cluster-backup-secret
     backupIndex: 1
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/deployment/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 8.3.5
+    version: 8.5.0
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: 3.0.0

clusters/cl01tl/deployment/stack/values.yaml

@@ -42,6 +42,12 @@ applicationSet:
         kind: Service
         jqPathExpressions:
           - .spec.externalName
+      - group: "apps"
+        kind: StatefulSet
+        jqPathExpressions:
+          - .spec.volumeClaimTemplates[]?.apiVersion
+          - .spec.volumeClaimTemplates[]?.kind
+          - .spec.volumeClaimTemplates[]?.metadata.creationTimestamp
     syncPolicy:
       automated:
         prune: true
@@ -58,6 +64,7 @@ applicationSet:
         jqPathExpressions:
           - .spec.volumeClaimTemplates[]?.apiVersion
           - .spec.volumeClaimTemplates[]?.kind
+          - .spec.volumeClaimTemplates[]?.metadata.creationTimestamp
     syncPolicy:
       automated:
         prune: true
@@ -86,6 +93,7 @@ applicationSet:
         jqPathExpressions:
           - .spec.volumeClaimTemplates[]?.apiVersion
           - .spec.volumeClaimTemplates[]?.kind
+          - .spec.volumeClaimTemplates[]?.metadata.creationTimestamp
     syncPolicy:
       automated:
         prune: true

clusters/cl01tl/management/argo-workflows/Chart.yaml

@@ -18,14 +18,14 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.45.23
+    version: 0.45.25
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
     version: 2.4.16
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: v3.6.7

clusters/cl01tl/management/argo-workflows/values.yaml

@@ -111,4 +111,4 @@ postgres-17-cluster:
     endpointURL: https://nyc3.digitaloceanspaces.com
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
     backupIndex: 4
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/management/komodo/Chart.yaml

@@ -20,10 +20,10 @@ dependencies:
   - name: app-template
     alias: komodo
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 appVersion: v1.17.5

clusters/cl01tl/management/komodo/values.yaml

@@ -154,4 +154,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/komodo/komodo-postgresql-17-cluster
     endpointCredentials: komodo-postgresql-17-cluster-backup-secret
     backupIndex: 2
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/monitoring/gatus/Chart.yaml

@@ -19,10 +19,10 @@ maintainers:
 dependencies:
   - name: gatus
     repository: https://twin.github.io/helm-charts
-    version: 1.4.0
+    version: 1.4.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 appVersion: v5.12.0

clusters/cl01tl/monitoring/gatus/values.yaml

@@ -7,7 +7,7 @@ gatus:
     enabled: true
   image:
     repository: ghcr.io/twin/gatus
-    tag: v5.23.2
+    tag: v5.24.0
   annotations:
     reloader.stakater.com/auto: "true"
   service:
@@ -383,4 +383,4 @@ postgres-17-cluster:
     endpointURL: https://nyc3.digitaloceanspaces.com
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/gatus/gatus-postgresql-17-cluster
     backupIndex: 1
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/monitoring/grafana-operator/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 appVersion: v5.18.0

clusters/cl01tl/monitoring/grafana-operator/values.yaml

@@ -36,4 +36,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/grafana-operator/grafana-operator-postgresql-17-cluster
     endpointCredentials: grafana-operator-postgresql-17-cluster-backup-secret
     backupIndex: 1
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml

@@ -19,11 +19,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 77.5.0
+    version: 77.9.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 appVersion: v0.82.0

clusters/cl01tl/monitoring/loki/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.39.0
+    version: 6.40.0
     repository: https://grafana.github.io/helm-charts
   - name: promtail
     version: 6.17.0

clusters/cl01tl/monitoring/s3-exporter/Chart.yaml

@@ -18,5 +18,5 @@ dependencies:
   - name: app-template
     alias: s3-exporter
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 appVersion: 1.0.2

clusters/cl01tl/monitoring/shelly-plug/Chart.yaml

@@ -16,5 +16,5 @@ dependencies:
   - name: app-template
     alias: shelly-plug
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 appVersion: 1.0.0

clusters/cl01tl/monitoring/unpoller/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: unpoller
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
 icon: https://camo.githubusercontent.com/c5d07a5b3acfeac8e1c25bf56f440ffe032b86e4e7f15de82357f022a43fc927/68747470733a2f2f756e706f6c6c65722e636f6d2f696d672f6c6f676f2e706e67
 appVersion: v2.15.3

clusters/cl01tl/platform/authentik/Chart.yaml

@@ -21,7 +21,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.8.1
+    version: 2025.8.3
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     alias: cloudflared
@@ -29,7 +29,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 appVersion: 2025.4.1

clusters/cl01tl/platform/authentik/values.yaml

@@ -74,4 +74,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/authentik/authentik-postgresql-17-cluster
     endpointCredentials: authentik-postgresql-17-cluster-backup-secret
     backupIndex: 2
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/platform/gitea/Chart.yaml

@@ -26,7 +26,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: gitea
-    version: 12.2.0
+    version: 12.3.0
     repository: https://dl.gitea.io/charts/
   - name: gitea-actions
     repository: oci://harbor.alexlebens.net/helm-charts
@@ -34,9 +34,9 @@ dependencies:
   - name: app-template
     alias: backup
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: meilisearch
-    version: 0.17.0
+    version: 0.17.1
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     alias: cloudflared
@@ -44,7 +44,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 appVersion: 1.23.7

clusters/cl01tl/platform/gitea/values.yaml

@@ -4,7 +4,7 @@ gitea:
   replicaCount: 3
   image:
     repository: gitea/gitea
-    tag: 1.24.5
+    tag: 1.24.6
   service:
     http:
       type: ClusterIP
@@ -155,6 +155,7 @@ gitea-actions:
         runner:
           labels:
             - "ubuntu-latest:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-latest"
+            - "ubuntu-24.04:docker://harbor.alexlebens.net/proxy-hub.docker/catthehacker/ubuntu:act-24.04"
             - "ubuntu-22.04:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-22.04"
             - "ubuntu-20.04:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-20.04"
     dind:
@@ -211,7 +212,7 @@ backup:
         s3-backup:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:eb0d4416fdb0dadbc29739b667c69914a1a53f29756f2fa3c05f549501d7b620
+            tag: latest@sha256:1bfc474932010f786286b08622dc4f4154ada2db5b080c86126740cb24c6bf4f
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -235,14 +236,14 @@ backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:eb0d4416fdb0dadbc29739b667c69914a1a53f29756f2fa3c05f549501d7b620
+            tag: latest@sha256:1bfc474932010f786286b08622dc4f4154ada2db5b080c86126740cb24c6bf4f
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
           args:
             - -ec
             - |
-              export DATE_RANGE=$(date -d @$(( $(date +%s) - 1209600 )) +%Y%m%d);
+              export DATE_RANGE=$(date -d @$(( $(date +%s) - 604800 )) +%Y%m%d);
               export FILE_MATCH="$BUCKET/cl01tl/gitea-backup-$DATE_RANGE-09-00.zip"
               echo ">> Running S3 prune for Gitea backup repository"
               echo ">> Backups prior to '$DATE_RANGE' will be removed"
@@ -339,4 +340,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/gitea/gitea-postgresql-17-cluster
     endpointCredentials: gitea-postgresql-17-cluster-backup-secret
     backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/platform/matrix-synapse/Chart.yaml

@@ -29,11 +29,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.7
+    version: 3.12.8
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
-    version: 4.2.0
+    version: 4.3.0
     repository: https://bjw-s-labs.github.io/helm-charts/
   # - name: app-template
   #   alias: mautrix-discord
@@ -53,7 +53,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 appVersion: 1.129.0

clusters/cl01tl/platform/matrix-synapse/values.yaml

@@ -252,7 +252,7 @@ mautrix-whatsapp:
         main:
           image:
             repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.12.4
+            tag: v0.12.5
             pullPolicy: IfNotPresent
           resources:
             requests:
@@ -321,4 +321,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
     endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret
     backupIndex: 1
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"

clusters/cl01tl/platform/n8n/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: n8n
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.2.0
+    version: 4.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/n8n.png
 appVersion: 1.93.0

clusters/cl01tl/platform/n8n/values.yaml

@@ -9,7 +9,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.111.0
+            tag: 1.112.1
             pullPolicy: IfNotPresent
           env:
             - name: GENERIC_TIMEZONE
@@ -93,7 +93,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.111.0
+            tag: 1.112.1
             pullPolicy: IfNotPresent
           command:
             - n8n
@@ -182,7 +182,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.111.0
+            tag: 1.112.1
             pullPolicy: IfNotPresent
           command:
             - n8n
@@ -331,4 +331,4 @@ postgres-17-cluster:
     destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/n8n/n8n-postgresql-17-cluster
     endpointCredentials: n8n-postgresql-17-cluster-backup-secret
     backupIndex: 1
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"