chore(deps): update helm release cilium to v1.19.0

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [element-hq/synapse](https://github.com/element-hq/synapse) | minor | `1.146.0` → `1.147.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (element-hq/synapse)</summary>

### [`v1.147.0`](https://github.com/element-hq/synapse/releases/tag/v1.147.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.146.0...v1.147.0)

### Synapse 1.147.0 (2026-02-10)

No significant changes since 1.147.0rc1.

### Synapse 1.147.0rc1 (2026-02-03)

#### Bugfixes

- Fix memory leak caused by not cleaning up stopped looping calls. Introduced in v1.140.0. ([#&#8203;19416](https://github.com/element-hq/synapse/issues/19416))
- Fix a typo that incorrectly made `setuptools_rust` a runtime dependency. ([#&#8203;19417](https://github.com/element-hq/synapse/issues/19417))

#### Internal Changes

- Prune stale entries from `sliding_sync_connection_required_state` table. ([#&#8203;19306](https://github.com/element-hq/synapse/issues/19306))
- Update "Event Send Time Quantiles" graph to only use dots for the event persistence rate (Grafana dashboard). ([#&#8203;19399](https://github.com/element-hq/synapse/issues/19399))
- Update and align Grafana dashboard to use regex matching for `job` selectors (`job=~"$job"`) so the "all" value works correctly across all panels. ([#&#8203;19400](https://github.com/element-hq/synapse/issues/19400))
- Don't retry joining partial state rooms all at once on startup. ([#&#8203;19402](https://github.com/element-hq/synapse/issues/19402))
- Disallow requests to the health endpoint from containing trailing path characters. ([#&#8203;19405](https://github.com/element-hq/synapse/issues/19405))
- Add notes that new experimental features should have associated tracking issues. ([#&#8203;19410](https://github.com/element-hq/synapse/issues/19410))
- Bump `pyo3` from 0.26.0 to 0.27.2 and `pythonize` from 0.26.0 to 0.27.0. Contributed by [@&#8203;razvp](https://github.com/razvp) @&#8203; ERCOM. ([#&#8203;19412](https://github.com/element-hq/synapse/issues/19412))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3877
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/argocd/values.yaml

@@ -4,6 +4,7 @@ argo-cd:
   configs:
     cm:
       admin.enabled: true
+      accounts.homepage: apiKey
       timeout.reconciliation: 100s
       timeout.reconciliation.jitter: 60s
       url: https://argocd.alexlebens.net
@@ -29,6 +30,7 @@ argo-cd:
     rbac:
       policy.csv: |
         g, ArgoCD Admins, role:admin
+        g, homepage, role:readonly
   controller:
     replicas: 1
     metrics:

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.0
+digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
+generated: "2026-02-10T18:36:56.659930659Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.19.0
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.9
+    tag: v1.12.10
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/homepage/templates/external-secret.yaml

@@ -12,6 +12,41 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: HOMEPAGE_VAR_GITEA_API_TOKEN
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/gitea/auth/homepage
+        metadataPolicy: None
+        property: token
+    - secretKey: HOMEPAGE_VAR_ARGOCD_API_TOKEN
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/argocd/credentials/homepage
+        metadataPolicy: None
+        property: token
+    - secretKey: HOMEPAGE_VAR_KOMODO_API_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/komodo/homepage
+        metadataPolicy: None
+        property: key
+    - secretKey: HOMEPAGE_VAR_KOMODO_API_SECRET
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/komodo/homepage
+        metadataPolicy: None
+        property: secret
+    - secretKey: HOMEPAGE_VAR_JELLYSTAT_API_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/jellystat/homepage
+        metadataPolicy: None
+        property: key
     - secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
       remoteRef:
         conversionStrategy: Default
@@ -26,20 +61,13 @@ spec:
         key: /synology/auth/cl01tl
         metadataPolicy: None
         property: password
-    - secretKey: HOMEPAGE_VAR_UNIFI_USER
+    - secretKey: HOMEPAGE_VAR_UNIFI_API_KEY
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /unifi/auth/cl01tl
         metadataPolicy: None
-        property: user
-    - secretKey: HOMEPAGE_VAR_UNIFI_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /unifi/auth/cl01tl
-        metadataPolicy: None
-        property: password
+        property: api-key
     - secretKey: HOMEPAGE_VAR_SONARR_KEY
       remoteRef:
         conversionStrategy: Default

clusters/cl01tl/helm/homepage/values.yaml

@@ -301,6 +301,16 @@ homepage:
                   href: https://gitea.alexlebens.dev
                   siteMonitor: https://gitea.alexlebens.dev
                   statusStyle: dot
+                  namespace: gitea
+                  app: gitea
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          gitea
+                      )
+                  widget:
+                      type: gitea
+                      url: http://gitea-http.gitea:3000
+                      key: {{ "{{HOMEPAGE_VAR_GITEA_API_TOKEN}}" }}
               - Code (Local):
                   icon: sh-gitea.webp
                   description: Gitea
@@ -325,19 +335,37 @@ homepage:
                   href: https://home-assistant-code-server.alexlebens.net
                   siteMonitor: http://home-assistant-code-server.home-assistant:8443
                   statusStyle: dot
+          - Automation:
               - Continuous Deployment:
                   icon: sh-argo-cd.webp
                   description: ArgoCD
                   href: https://argocd.alexlebens.net
                   siteMonitor: http://argocd-server.argocd:80
                   statusStyle: dot
+                  namespace: argocd
+                  app: argocd
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          argocd
+                      )
+                  widget:
+                      type: argocd
+                      url: http://argocd-server.argocd:80
+                      key: {{ "{{HOMEPAGE_VAR_ARGOCD_API_TOKEN}}" }}
+                      fields: ["outOfSync", "progressing", "suspended", "degraded"]
               - Docker Deployment:
                   icon: sh-komodo-light.webp
                   description: Komodo
                   href: https://komodo.alexlebens.net
                   siteMonitor: http://komodo-main.komodo:80
                   statusStyle: dot
-          - Automation:
+                  widget:
+                      type: komodo
+                      url: http://komodo-main.komodo:80
+                      key: {{ "{{HOMEPAGE_VAR_KOMODO_API_KEY}}" }}
+                      secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
+                      showStacks: true
+                      fields: ["running", "down", "unhealthy", "unknown"]
               - Deployment Workflows:
                   icon: sh-argo-cd.webp
                   description: Argo Workflows
@@ -363,24 +391,36 @@ homepage:
                   href: https://headlamp.alexlebens.net
                   siteMonitor: http://headlamp.headlamp:80
                   statusStyle: dot
-              - Network Monitoring:
-                  icon: sh-cilium.webp
-                  description: Hubble for Cilium
-                  href: https://hubble.alexlebens.net
-                  siteMonitor: http://hubble-ui.kube-system:80
-                  statusStyle: dot
               - Dashboard:
                   icon: sh-grafana.webp
                   description: Grafana
                   href: https://grafana.alexlebens.net
                   siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
                   statusStyle: dot
+              - Network Monitoring:
+                  icon: sh-cilium.webp
+                  description: Hubble for Cilium
+                  href: https://hubble.alexlebens.net
+                  siteMonitor: http://hubble-ui.kube-system:80
+                  statusStyle: dot
+                  namespace: kube-system
+                  app: cilium-operator
+                  podSelector: >-
+                      app.kubernetes.io/part-of in (
+                          cilium
+                      )
               - Metrics:
                   icon: sh-prometheus.webp
                   description: Prometheus
                   href: https://prometheus.alexlebens.net
                   siteMonitor: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
                   statusStyle: dot
+                  namespace: kube-prometheus-stack
+                  app: prometheus
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          kube-prometheus-stack
+                      )
                   widget:
                     type: prometheus
                     url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
@@ -454,6 +494,11 @@ homepage:
                   href: https://unifi.alexlebens.net
                   siteMonitor: https://unifi.alexlebens.net
                   statusStyle: dot
+                  widget:
+                      type: unifi
+                      url: https://unifi.alexlebens.net
+                      key: {{ "{{HOMEPAGE_VAR_UNIFI_API_KEY}}" }}
+                      fields: ["uptime", "wan", "lan_devices", "wlan_devices"]
               - Network Attached Storage:
                   icon: sh-synology-light.webp
                   description: Synology
@@ -526,6 +571,9 @@ homepage:
                   href: https://backrest.alexlebens.net
                   siteMonitor: http://backrest.backrest:80
                   statusStyle: dot
+                  widget:
+                      type: backrest
+                      url: http://backrest.backrest:80
           - Content:
               - qUI:
                   icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.5.0
+  version: 81.6.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
-generated: "2026-02-03T20:37:14.907439914Z"
+digest: sha256:5620c76f888c65e275d33ede933fca9dd5d0cf330cce7be884655fd9027c048b
+generated: "2026-02-10T18:34:27.265951045Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 81.5.0
+    version: 81.6.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -81,4 +81,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: 1.146.0
+appVersion: 1.147.0

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.16.0
+appVersion: 2.17.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.16.0
+            tag: v2.17.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/helm/roundcube/values.yaml

@@ -9,7 +9,7 @@ roundcube:
         main:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.12-fpm-alpine
+            tag: 1.6.13-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE
@@ -85,7 +85,7 @@ roundcube:
         backup:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.12-fpm-alpine
+            tag: 1.6.13-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.4.0
+            tag: 2.5.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/slskd/values.yaml

@@ -122,7 +122,7 @@ slskd:
         main:
           image:
             repository: mrusse08/soularr
-            tag: latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
+            tag: latest@sha256:c02aec4a14b5ee228af21aaf7c94c181f45db8298057f1919688faa9c56c4387
             pullPolicy: IfNotPresent
           env:
             - name: TZ