Update actions/checkout action to v5

disable scanner
disable csi operator
2025-08-24 03:28:33 +00:00 · 2025-08-23 22:27:19 -05:00 · 2025-08-23 22:11:58 -05:00 · 2025-08-24 03:01:12 +00:00 · 2025-08-23 19:01:17 +00:00 · 2025-08-23 19:01:00 +00:00
23 changed files with 25 additions and 24 deletions
--- a/.gitea/workflows/lint-test-docker.yaml
+++ b/.gitea/workflows/lint-test-docker.yaml
@@ -20,7 +20,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
        with:
          fetch-depth: 0

--- a/.gitea/workflows/lint-test-helm.yaml
+++ b/.gitea/workflows/lint-test-helm.yaml
@@ -20,7 +20,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
        with:
          fetch-depth: 0

--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -16,7 +16,7 @@ jobs:
    container: ghcr.io/renovatebot/renovate:41
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5

      - name: Renovate
        run: renovate
--- a/clusters/cl01tl/applications/code-server/Chart.yaml
+++ b/clusters/cl01tl/applications/code-server/Chart.yaml
@@ -23,6 +23,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 appVersion: 4.100.2
--- a/clusters/cl01tl/applications/directus/Chart.yaml
+++ b/clusters/cl01tl/applications/directus/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-directus
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 5.1.0
--- a/clusters/cl01tl/applications/element-web/Chart.yaml
+++ b/clusters/cl01tl/applications/element-web/Chart.yaml
@@ -22,6 +22,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 appVersion: v1.11.100
--- a/clusters/cl01tl/applications/freshrss/Chart.yaml
+++ b/clusters/cl01tl/applications/freshrss/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 5.1.0
--- a/clusters/cl01tl/applications/homepage-dev/Chart.yaml
+++ b/clusters/cl01tl/applications/homepage-dev/Chart.yaml
@@ -22,6 +22,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0
--- a/clusters/cl01tl/applications/huntarr/values.yaml
+++ b/clusters/cl01tl/applications/huntarr/values.yaml
@@ -9,7 +9,7 @@ huntarr:
        main:
          image:
            repository: ghcr.io/plexguide/huntarr
-            tag: 8.2.7
+            tag: 8.2.8
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/karakeep/Chart.yaml
+++ b/clusters/cl01tl/applications/karakeep/Chart.yaml
@@ -27,6 +27,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 appVersion: 0.26.0
--- a/clusters/cl01tl/applications/outline/Chart.yaml
+++ b/clusters/cl01tl/applications/outline/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-outline
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 5.1.0
--- a/clusters/cl01tl/applications/postiz/Chart.yaml
+++ b/clusters/cl01tl/applications/postiz/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.2.0
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 5.1.0
--- a/clusters/cl01tl/applications/site-documentation/Chart.yaml
+++ b/clusters/cl01tl/applications/site-documentation/Chart.yaml
@@ -23,6 +23,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-site
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.8.1
--- a/clusters/cl01tl/applications/site-profile/Chart.yaml
+++ b/clusters/cl01tl/applications/site-profile/Chart.yaml
@@ -23,6 +23,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-site
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 2.0.1
--- a/clusters/cl01tl/applications/vaultwarden/Chart.yaml
+++ b/clusters/cl01tl/applications/vaultwarden/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 5.1.0
--- a/clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
@@ -19,7 +19,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 76.5.1
+    version: 77.0.0
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/monitoring/trivy/values.yaml
+++ b/clusters/cl01tl/monitoring/trivy/values.yaml
@@ -7,7 +7,7 @@ trivy-operator:
    clusterSbomCacheEnabled: false
    configAuditScannerEnabled: true
    rbacAssessmentScannerEnabled: true
-    infraAssessmentScannerEnabled: true
+    infraAssessmentScannerEnabled: false
    clusterComplianceEnabled: false
  serviceMonitor:
    enabled: true
--- a/clusters/cl01tl/platform/authentik/Chart.yaml
+++ b/clusters/cl01tl/platform/authentik/Chart.yaml
@@ -21,12 +21,12 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: authentik
-    version: 2025.8.0
+    version: 2025.8.1
    repository: https://charts.goauthentik.io/
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 5.1.0
--- a/clusters/cl01tl/platform/gitea/Chart.yaml
+++ b/clusters/cl01tl/platform/gitea/Chart.yaml
@@ -41,7 +41,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 5.1.0
--- a/clusters/cl01tl/platform/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/platform/matrix-synapse/Chart.yaml
@@ -45,11 +45,11 @@ dependencies:
  #   version: 4.0.1
  - name: cloudflared
    alias: cloudflared-synapse
-    version: 1.20.0
+    version: 1.20.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: cloudflared
    alias: cloudflared-hookshot
-    version: 1.20.0
+    version: 1.20.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/services/tailscale-operator/Chart.yaml
+++ b/clusters/cl01tl/services/tailscale-operator/Chart.yaml
@@ -17,7 +17,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: tailscale-operator
-    version: 1.86.2
+    version: 1.86.5
    repository: https://pkgs.tailscale.com/helmcharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
 appVersion: v1.82.5
--- a/clusters/cl01tl/storage/rook-ceph/Chart.yaml
+++ b/clusters/cl01tl/storage/rook-ceph/Chart.yaml
@@ -24,6 +24,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-rgw
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.20.0
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 appVersion: v1.17.1
--- a/clusters/cl01tl/storage/rook-ceph/values.yaml
+++ b/clusters/cl01tl/storage/rook-ceph/values.yaml
@@ -2,6 +2,7 @@ rook-ceph:
  crds:
    enabled: true
  csi:
+    rookUseCsiOperator: false
    enableMetadata: true
    cephFSKernelMountOptions: "ms_mode=secure"
    provisionerReplicas: 3
Author	SHA1	Message	Date
Renovate Bot	10a5bcf557	Update actions/checkout action to v5 Some checks failed lint-test-helm / helm-lint (pull_request) Failing after 2s Details	2025-08-24 03:28:33 +00:00
Alex Lebens	9a611ba15d	disable scanner All checks were successful lint-test-helm / helm-lint (push) Successful in 12s Details renovate / renovate (push) Successful in 1m21s Details	2025-08-23 22:27:19 -05:00
Alex Lebens	02790f9cc7	disable csi operator All checks were successful lint-test-helm / helm-lint (push) Successful in 18s Details renovate / renovate (push) Successful in 1m9s Details	2025-08-23 22:11:58 -05:00
Renovate Bot	7252469938	Update ghcr.io/plexguide/huntarr Docker tag to v8.2.8 All checks were successful lint-test-helm / helm-lint (pull_request) Successful in 14s Details lint-test-helm / helm-lint (push) Successful in 10s Details renovate / renovate (push) Successful in 2m1s Details	2025-08-24 03:01:12 +00:00
Renovate Bot	1b2569c8ca	Update Helm release tailscale-operator to v1.86.5 (#1299 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 11s Details renovate / renovate (push) Successful in 1m37s Details	2025-08-23 19:01:17 +00:00
Renovate Bot	98897ba0ba	Update kube-prometheus-stack Docker tag to v77 (#1298 ) Some checks failed lint-test-helm / helm-lint (push) Successful in 9s Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) \| major \| `76.5.1` -> `77.0.0` \| --- ### Release Notes <details> <summary>prometheus-community/helm-charts (kube-prometheus-stack)</summary> ### [`v77.0.0`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-77.0.0) [Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-76.5.1...kube-prometheus-stack-77.0.0) kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator. #### What's Changed - \[kube-prometheus-stack] bump to 0.85.0 by [@DrFaust92](https://github.com/DrFaust92) in https://github.com/prometheus-community/helm-charts/pull/6084 Full Changelog: https://github.com/prometheus-community/helm-charts/compare/prometheus-redis-exporter-6.16.0...kube-prometheus-stack-77.0.0 </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19--> Reviewed-on: #1298 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-08-23 19:01:00 +00:00
Renovate Bot	f357aaca79	Update Helm release authentik to v2025.8.1 (#1297 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 11s Details renovate / renovate (push) Successful in 1m34s Details	2025-08-23 16:01:18 +00:00
Renovate Bot	d069d3f1d0	Update cloudflared Docker tag to v1.20.1 (#1296 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 9s Details renovate / renovate (push) Successful in 1m26s Details	2025-08-23 04:02:42 +00:00
Renovate Bot	8eeac21525	Update Helm release rook-ceph-cluster to v1.18.0 (#1281 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 15s Details renovate / renovate (push) Successful in 3m0s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [rook-ceph-cluster](https://github.com/rook/rook) \| minor \| `v1.17.8` -> `v1.18.0` \| --- ### Release Notes <details> <summary>rook/rook (rook-ceph-cluster)</summary> ### [`v1.18.0`](https://github.com/rook/rook/releases/tag/v1.18.0) [Compare Source](https://github.com/rook/rook/compare/v1.17.8...v1.18.0) #### Upgrade Guide To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.18/Upgrade/rook-upgrade/). #### Breaking Changes - Kubernetes v1.29 is now the minimum version supported by Rook through the soon-to-be K8s release v1.34. - Helm versions 3.13 and newer are supported. Previously, only the latest version of helm was tested and the docs stated only version 3.x of helm as a prerequisite. Now rook supports the six most recent minor versions of helm along with their their patch updates. - Rook now validates node topology during CephCluster creation to prevent misconfigured CRUSH hierarchies for OSDs. If child labels like `topology.rook.io/rack` are duplicated across zones, cluster creation will fail. The check applies only to new clusters without OSDs. Clusters with existing OSDs will only log a warning and continue. If the checks are invalid in your topology, they can be suppressed by setting `ROOK_SKIP_OSD_TOPOLOGY_CHECK=true` in the `rook-ceph-operator-config` configmap. #### Features - The Ceph CSI operator is now the default and recommended component for configuring CSI drivers for RBD, CephFS, and NFS volumes. The CSI operator has been factored out of Rook to run independently to manage the Ceph-CSI driver. - During the upgrade and throughout the v1.18.x releases, Rook will automatically convert any Rook CSI settings to the new CSI operator CRs. This transition is expected to be completely transparent. In the future v1.19 release, Rook will relinquish direct control of these settings so advanced users can have more flexibility when configuring the CSI drivers. At that time, we will have a guide on configuring these new Ceph CSI operator CRs directly. - During install, as mentioned in the [Quickstart Guide](https://rook.io/docs/rook/latest-release/Getting-Started/quickstart/#deploy-the-rook-operator), there is a new manifest to be created: csi-operator.yaml - If installing with the helm chart, the Ceph CSI operator will automatically be installed by default with the new helm setting `csi.rookUseCsiOperator` in the rook-ceph chart. - If a blocking issue is found, the previous CSI driver can be re-enabled by setting `ROOK_USE_CSI_OPERATOR: false` in operator.yaml or by applying the helm setting `csi.rookUseCsiOperator: false`. - [Ceph CSI v3.15](https://github.com/ceph/ceph-csi/releases/tag/v3.15.0) has a range of features and improvements for the RBD, CephFS, and NFS drivers. This release is supported both by the Ceph CSI operator and Rook's direct mode of configuration. Starting in the next release (at the end of the year), the Ceph CSI operator will be required to configure the CSI driver. - [CephX key rotation](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx) is now available as an experimental feature for the CephX authentication keys used by Ceph daemons and clients. Users will begin to see new cephx status items on some Rook resources in newly-deployed Rook clusters. Users can also find `spec.security.cephx` settings that allow initiating CephX key rotation for various Ceph components. Full documentation for key rotation can be found [here](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx). - Ceph version v19.2.3+ is required for key rotation. - The Ceph admin and mon keys cannot yet be rotated. Implementation is still in progress while in experimental mode. - Add support for specifying the clusterID in the [CephBlockPoolRadosNamespace](https://rook.io/docs/rook/v1.18/CRDs/Block-Storage/ceph-block-pool-rados-namespace-crd/#creating-a-storage-class) and the [CephFilesystemSubVolumeGroup](https://rook.io/docs/rook/v1.18/CRDs/Shared-Filesystem/ceph-fs-subvolumegroup-crd/#create-a-storage-class-for-the-subvolume-group) CR. - When a mon is being [failed over](https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/ceph-mon-health/#failing-over-a-monitor), if the assigned node no longer exists, the mon is failed over immediately instead of waiting for a 20 minute timeout. - Support for Ceph Tentacle v20 will be available as soon as it is released. </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19--> Reviewed-on: #1281 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-08-23 02:49:24 +00:00