chore(deps): update helm release cilium to v1.19.1

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/autobrr/qui](https://github.com/autobrr/qui) | patch | `v1.14.0` → `v1.14.1` |

---

### Release Notes

<details>
<summary>autobrr/qui (ghcr.io/autobrr/qui)</summary>

### [`v1.14.1`](https://github.com/autobrr/qui/releases/tag/v1.14.1)

[Compare Source](https://github.com/autobrr/qui/compare/v1.14.0...v1.14.1)

#### Changelog

##### Bug Fixes

- [`6f3171c`](6f3171c07d): fix(auth): avoid chromium basic auth resets on expired qui sessions ([#&#8203;1495](https://github.com/autobrr/qui/issues/1495)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`d5acab7`](d5acab7e24): fix(automations): make managed full tag sync idempotent ([#&#8203;1494](https://github.com/autobrr/qui/issues/1494)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`9fdc949`](9fdc949adc): fix(crossseed): avoid webhook notification spam on pending matches ([#&#8203;1496](https://github.com/autobrr/qui/issues/1496)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`350edb3`](350edb3ea4): fix(notifications): improve torrent and automation event samples ([#&#8203;1501](https://github.com/autobrr/qui/issues/1501)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`e2c032c`](e2c032c924): fix(qbittorrent): ignore pseudo tracker labels in domain parsing ([#&#8203;1489](https://github.com/autobrr/qui/issues/1489)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`e00c70d`](e00c70df49): fix(qbittorrent): repair unified torrent sorting ([#&#8203;1490](https://github.com/autobrr/qui/issues/1490)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`4d95325`](4d95325805): fix(themes): clarify crypto donation discount flow ([#&#8203;1503](https://github.com/autobrr/qui/issues/1503)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`579ea8d`](579ea8d34c): fix(themes): clarify premium checkout and crypto flow ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`ece956a`](ece956a237): fix(torrents): scope instance column to unified cross-instance data ([#&#8203;1502](https://github.com/autobrr/qui/issues/1502)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`27cf6d2`](27cf6d2767): fix(ui): hide unified entry when one instance is active ([#&#8203;1493](https://github.com/autobrr/qui/issues/1493)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`80d911f`](80d911ff53): fix(ui): remove single-instance indent in header menu ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`6ae7625`](6ae76256f1): fix(ui): restore instances header in menu ([@&#8203;s0up4200](https://github.com/s0up4200))

##### Other Changes

- [`336dc9a`](336dc9af3b): docs: update payment info ([#&#8203;1424](https://github.com/autobrr/qui/issues/1424)) ([@&#8203;s0up4200](https://github.com/s0up4200))

**Full Changelog**: <https://github.com/autobrr/qui/compare/v1.14.0...v1.14.1>

#### Docker images

- `docker pull ghcr.io/autobrr/qui:v1.14.1`
- `docker pull ghcr.io/autobrr/qui:latest`

#### What to do next?

- Join our [Discord server](https://discord.autobrr.com/qui)

Thank you for using qui!

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNS43IiwidXBkYXRlZEluVmVyIjoiNDMuMjUuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4187
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.1
+digest: sha256:bf5e8b3233c18bdb9409bb98c9a7ea4114e0e04e8489a49fdb2d29ded0cfa429
+generated: "2026-02-24T04:14:30.806539182Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.19.1
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium

clusters/cl01tl/helm/decluttarr/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:548ae1f8699100a2f6bac11a4a3137402b3eea340c7a3db4d9f1813ad6a11dca
+generated: "2026-02-23T22:08:42.516245-06:00"

clusters/cl01tl/helm/decluttarr/Chart.yaml

@@ -0,0 +1,20 @@
+apiVersion: v2
+name: decluttarr
+version: 1.0.0
+description: decluttarr
+keywords:
+  - decluttarr
+  - servarr
+home: https://wiki.alexlebens.dev/s/
+sources:
+  - https://github.com/ManiMatter/decluttarr
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: decluttarr
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+# renovate: datasource=github-releases depName=ManiMatter/decluttarr
+appVersion: v2.0.0

clusters/cl01tl/helm/decluttarr/templates/external-secret.yaml

@@ -0,0 +1,21 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: decluttarr-config-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: decluttarr-config-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: config.yaml
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/decluttarr/config
+        metadataPolicy: None
+        property: config.yaml

clusters/cl01tl/helm/decluttarr/values.yaml

@@ -0,0 +1,32 @@
+decluttarr:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/manimatter/decluttarr
+            tag: v2.0.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: America/Chicago
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  persistence:
+    config:
+      enabled: true
+      type: secret
+      name: decluttarr-config-secret
+      advancedMounts:
+        main:
+          main:
+            - path: /app/config/config.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: config.yaml

clusters/cl01tl/helm/loki/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
-appVersion: 3.6.6
+appVersion: 3.6.7

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -9,7 +9,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.1.1
+            tag: 2.1.2
             pullPolicy: IfNotPresent
           env:
             - name: MUSIC_DIR

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:c5e5aedb70ec4b7ff5b1e8f8ea69253dceb85a98b8757360c1b65fe8652d6066
+            tag: latest@sha256:edf110a2816d8963949d03879c72a7e19c221b5f7bfb7952a33ae073f96ccb18
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:c5e5aedb70ec4b7ff5b1e8f8ea69253dceb85a98b8757360c1b65fe8652d6066
+            tag: latest@sha256:edf110a2816d8963949d03879c72a7e19c221b5f7bfb7952a33ae073f96ccb18
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/seerr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: seerr-chart
   repository: oci://ghcr.io/seerr-team/seerr
-  version: 3.1.0
+  version: 3.2.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:db6c3b46e534d77e6992c20bec376b88761eae63339ae17b59c811b264b57b55
-generated: "2026-02-16T22:06:27.640526736Z"
+digest: sha256:c603e70725cdee68a9cd618847f95ae40e969c1e48ae6a8a6665d9f734753f24
+generated: "2026-02-23T22:11:46.69471-06:00"

clusters/cl01tl/helm/seerr/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
 dependencies:
   - name: seerr-chart
     repository: oci://ghcr.io/seerr-team/seerr
-    version: 3.1.0
+    version: 3.2.0
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/seerr/templates/http-route.yaml

@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: seerr
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: seerr
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - seerr.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: seerr-seerr-chart
-          port: 80
-          weight: 100

clusters/cl01tl/helm/seerr/values.yaml

@@ -24,6 +24,22 @@ seerr-chart:
       storageClass: ceph-block
   ingress:
     enabled: false
+  route:
+    main:
+      enabled: true
+      apiVersion: gateway.networking.k8s.io/v1
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - seerr.alexlebens.net
+      matches:
+        - path:
+            type: PathPrefix
+            value: /
   resources:
     requests:
       cpu: 10m

clusters/cl01tl/helm/shelfmark/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp
 # renovate: datasource=github-releases depName=calibrain/shelfmark
-appVersion: v1.1.1
+appVersion: v1.1.2

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -9,7 +9,7 @@ shelfmark:
         main:
           image:
             repository: ghcr.io/calibrain/shelfmark
-            tag: v1.1.1
+            tag: v1.1.2
             pullPolicy: IfNotPresent
           env:
             - name: FLASK_PORT

clusters/cl01tl/helm/traefik/Chart.yaml

@@ -22,4 +22,4 @@ dependencies:
     repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/traefik.webp
 # renovate: datasource=github-releases depName=traefik/traefik
-appVersion: v3.6.8
+appVersion: v3.6.9

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -35,4 +35,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 # renovate: datasource=github-releases depName=dani-garcia/vaultwarden
-appVersion: 1.35.3
+appVersion: 1.35.4

clusters/cl01tl/helm/vaultwarden/values.yaml

@@ -9,7 +9,7 @@ vaultwarden:
         main:
           image:
             repository: vaultwarden/server
-            tag: 1.35.3
+            tag: 1.35.4
             pullPolicy: IfNotPresent
           env:
             - name: DOMAIN

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.8
+        image: ghcr.io/traefik/traefik:v3.6.9
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.8
+        image: ghcr.io/traefik/traefik:v3.6.9
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.8
+        image: ghcr.io/traefik/traefik:v3.6.9
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"