63 Commits

Author SHA1 Message Date
f71ca5b8c7 chore(deps): update searxng/searxng:latest docker digest to 670bd10 (#3781)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Successful in 3m14s
2026-02-06 14:02:17 +00:00
11fa03c933 chore(deps): update searxng/searxng:latest docker digest to 52521b6 (#3779)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 29s
renovate / renovate (push) Successful in 2m22s
2026-02-06 12:02:01 +00:00
5d86ac411e chore(deps): update searxng/searxng:latest docker digest to a98ec93 (#3777)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 22s
renovate / renovate (push) Successful in 2m1s
2026-02-06 11:02:17 +00:00
60b73c4c75 feat: enable backup
All checks were successful
lint-test-helm / lint-helm (push) Successful in 14s
render-manifests-push / render-manifests-push (push) Successful in 33s
renovate / renovate (push) Successful in 2m16s
2026-02-05 22:57:19 -06:00
8933422e12 feat: store ferret secret, scale
All checks were successful
lint-test-helm / lint-helm (push) Successful in 58s
render-manifests-push / render-manifests-push (push) Successful in 1m47s
renovate / renovate (push) Successful in 2m23s
2026-02-05 22:55:30 -06:00
3eda30bae0 fix: add grant
All checks were successful
lint-test-helm / lint-helm (push) Successful in 17s
render-manifests-push / render-manifests-push (push) Successful in 1m20s
renovate / renovate (push) Successful in 2m35s
2026-02-05 22:42:12 -06:00
eae4f059ba fix: fix path
All checks were successful
lint-test-helm / lint-helm (push) Successful in 15s
renovate / renovate (push) Successful in 1m35s
render-manifests-push / render-manifests-push (push) Successful in 1m44s
2026-02-05 22:38:07 -06:00
008845d653 fix: ensure ferret user
Some checks failed
lint-test-helm / lint-helm (push) Successful in 23s
render-manifests-push / render-manifests-push (push) Successful in 1m4s
renovate / renovate (push) Has been cancelled
2026-02-05 22:35:53 -06:00
0a9643ec37 fix: user super user
All checks were successful
lint-test-helm / lint-helm (push) Successful in 20s
render-manifests-push / render-manifests-push (push) Successful in 54s
renovate / renovate (push) Successful in 2m20s
2026-02-05 22:25:45 -06:00
175e6cc9d8 chore(deps): update dependency ollama/ollama to v0.15.5 (#3768)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 1m31s
2026-02-06 04:22:15 +00:00
bd5ace752c feat: scale ferret
Some checks failed
render-manifests-push / render-manifests-push (push) Successful in 39s
lint-test-helm / lint-helm (push) Successful in 43s
renovate / renovate (push) Has been cancelled
2026-02-05 22:19:08 -06:00
c4faf51bea fix: add additional init 2026-02-05 22:18:53 -06:00
377f21fb35 fix: recovery
All checks were successful
lint-test-helm / lint-helm (push) Successful in 25s
render-manifests-push / render-manifests-push (push) Successful in 34s
renovate / renovate (push) Successful in 2m22s
2026-02-05 22:07:24 -06:00
ccea0dc542 fix: enable super
Some checks failed
lint-test-helm / lint-helm (push) Successful in 48s
render-manifests-push / render-manifests-push (push) Successful in 55s
renovate / renovate (push) Has been cancelled
2026-02-05 22:05:35 -06:00
183c74dd9d fix: use app
All checks were successful
lint-test-helm / lint-helm (push) Successful in 17s
render-manifests-push / render-manifests-push (push) Successful in 46s
renovate / renovate (push) Successful in 2m3s
2026-02-05 22:03:12 -06:00
d0fe1c6845 fix: suspend backup
Some checks failed
lint-test-helm / lint-helm (push) Successful in 13s
render-manifests-push / render-manifests-push (push) Successful in 35s
renovate / renovate (push) Has been cancelled
2026-02-05 22:02:05 -06:00
5d7ad35f72 feat: bootstrap
All checks were successful
lint-test-helm / lint-helm (push) Successful in 49s
render-manifests-push / render-manifests-push (push) Successful in 1m9s
renovate / renovate (push) Successful in 1m49s
2026-02-05 21:57:09 -06:00
0710a053e0 chore(deps): update helm release rook-ceph-cluster to v1.19.1 (#3765)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 22s
renovate / renovate (push) Successful in 2m45s
2026-02-06 03:40:25 +00:00
9946df8c2d feat: remove init
All checks were successful
lint-test-helm / lint-helm (push) Successful in 18s
render-manifests-push / render-manifests-push (push) Successful in 38s
renovate / renovate (push) Successful in 2m28s
2026-02-05 21:28:37 -06:00
29701a90bd chore(deps): update ollama/ollama docker tag to v0.15.5 (#3760)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 23s
renovate / renovate (push) Successful in 2m18s
2026-02-06 03:22:05 +00:00
b0ded3bcc1 chore(deps): update helm release rook-ceph to v1.19.1 (#3759)
Some checks failed
lint-test-helm / lint-helm (push) Has been cancelled
render-manifests-push / render-manifests-push (push) Has been skipped
renovate / renovate (push) Has been cancelled
2026-02-06 03:21:45 +00:00
a817f93059 chore(deps): update dependency rook/rook to v1.19.1 (#3758)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 47s
renovate / renovate (push) Has been cancelled
2026-02-06 03:20:56 +00:00
6d86a014c1 feat: scale down 2026-02-05 21:13:53 -06:00
c04c83ce03 chore(deps): update helm release alloy to v1.6.0 (#3756)
Some checks are pending
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 18s
renovate / renovate (push) Has started running
render-manifests-dispatch / render-manifests-dispatch (push) Successful in 23m45s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [alloy](https://github.com/grafana/helm-charts) | minor | `1.5.3` → `1.6.0` |

---

### Release Notes

<details>
<summary>grafana/helm-charts (alloy)</summary>

### [`v1.6.0`](https://github.com/grafana/helm-charts/releases/tag/alloy-1.6.0)

[Compare Source](https://github.com/grafana/helm-charts/compare/alloy-1.5.3...alloy-1.6.0)

Grafana Alloy

Source commit: [grafana/alloy@`44ddc69`](44ddc6937c)

Tag on source: <https://github.com/grafana/alloy/releases/tag/helm-chart/1.6.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3756
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 23:53:56 +00:00
2bf0d6f925 chore(deps): update directus/directus to v11.15.0 (#3752)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 1m52s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [directus/directus](https://github.com/directus/directus) | minor | `11.14.1` → `11.15.0` |

---

### Release Notes

<details>
<summary>directus/directus (directus/directus)</summary>

### [`v11.15.0`](https://github.com/directus/directus/releases/tag/v11.15.0)

[Compare Source](https://github.com/directus/directus/compare/v11.14.1...v11.15.0)

##### ⚠️ Potential Breaking Changes

**Attached prompts, content items, and visual editor elements to AI Assistant Context ([#&#8203;26512](https://github.com/directus/directus/pull/26512) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))**
To use this feature, update [@&#8203;directus/visual-editing](https://github.com/directus/visual-editing) to v1.2.0+ on your website.

#####  New Features & Improvements

- **[@&#8203;directus/app](https://github.com/directus/app)**
  - Added deployment module for triggering deployments from Directus with Vercel as first supported provider ([#&#8203;26473](https://github.com/directus/directus/pull/26473) by [@&#8203;gaetansenn](https://github.com/gaetansenn))
  - Added collaborative editing ([#&#8203;26172](https://github.com/directus/directus/pull/26172) by [@&#8203;Nitwel](https://github.com/Nitwel))
  - Attached prompts, content items, and visual editor elements to AI Assistant Context ([#&#8203;26512](https://github.com/directus/directus/pull/26512) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
  - Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new `@directus/ai` package. ([#&#8203;26481](https://github.com/directus/directus/pull/26481) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
  - Added toggle to allow comparing revision to previous revision ([#&#8203;26480](https://github.com/directus/directus/pull/26480) by [@&#8203;robluton](https://github.com/robluton))
  - Added relational field support on x-axis of bar chart ([#&#8203;26489](https://github.com/directus/directus/pull/26489) by [@&#8203;JamesW1](https://github.com/JamesW1))
  - Added visual editing support to the live preview split pane, including display options menu, full-width mode with drag-to-expand, and quick access to the Visual Editor module. ([#&#8203;26463](https://github.com/directus/directus/pull/26463) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
  - Changed permission-blocked fields from disabled to non-editable appearance ([#&#8203;26572](https://github.com/directus/directus/pull/26572) by [@&#8203;HZooly](https://github.com/HZooly))
- **[@&#8203;directus/api](https://github.com/directus/api)**
  - Added deployment module for triggering deployments from Directus with Vercel as first supported provider ([#&#8203;26473](https://github.com/directus/directus/pull/26473) by [@&#8203;gaetansenn](https://github.com/gaetansenn))
  - Added collaborative editing ([#&#8203;26172](https://github.com/directus/directus/pull/26172) by [@&#8203;Nitwel](https://github.com/Nitwel))
  - Attached prompts, content items, and visual editor elements to AI Assistant Context ([#&#8203;26512](https://github.com/directus/directus/pull/26512) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
  - Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new `@directus/ai` package. ([#&#8203;26481](https://github.com/directus/directus/pull/26481) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
- **[@&#8203;directus/sdk](https://github.com/directus/sdk)**
  - Fixed race condition and allow accessing the connected state ([#&#8203;26511](https://github.com/directus/directus/pull/26511) by [@&#8203;Nitwel](https://github.com/Nitwel))
  - Added deployment module for triggering deployments from Directus with Vercel as first supported provider ([#&#8203;26473](https://github.com/directus/directus/pull/26473) by [@&#8203;gaetansenn](https://github.com/gaetansenn))
- **[@&#8203;directus/system-data](https://github.com/directus/system-data)**
  - Added deployment module for triggering deployments from Directus with Vercel as first supported provider ([#&#8203;26473](https://github.com/directus/directus/pull/26473) by [@&#8203;gaetansenn](https://github.com/gaetansenn))
- **[@&#8203;directus/types](https://github.com/directus/types)**
  - Added deployment module for triggering deployments from Directus with Vercel as first supported provider ([#&#8203;26473](https://github.com/directus/directus/pull/26473) by [@&#8203;gaetansenn](https://github.com/gaetansenn))
  - Added collaborative editing ([#&#8203;26172](https://github.com/directus/directus/pull/26172) by [@&#8203;Nitwel](https://github.com/Nitwel))
  - Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new `@directus/ai` package. ([#&#8203;26481](https://github.com/directus/directus/pull/26481) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
- **[@&#8203;directus/errors](https://github.com/directus/errors)**
  - Added deployment module for triggering deployments from Directus with Vercel as first supported provider ([#&#8203;26473](https://github.com/directus/directus/pull/26473) by [@&#8203;gaetansenn](https://github.com/gaetansenn))
- **[@&#8203;directus/env](https://github.com/directus/env)**
  - Added deployment module for triggering deployments from Directus with Vercel as first supported provider ([#&#8203;26473](https://github.com/directus/directus/pull/26473) by [@&#8203;gaetansenn](https://github.com/gaetansenn))
  - Added collaborative editing ([#&#8203;26172](https://github.com/directus/directus/pull/26172) by [@&#8203;Nitwel](https://github.com/Nitwel))
- **[@&#8203;directus/utils](https://github.com/directus/utils)**
  - Added collaborative editing ([#&#8203;26172](https://github.com/directus/directus/pull/26172) by [@&#8203;Nitwel](https://github.com/Nitwel))
- **[@&#8203;directus/ai](https://github.com/directus/ai)**
  - Attached prompts, content items, and visual editor elements to AI Assistant Context ([#&#8203;26512](https://github.com/directus/directus/pull/26512) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
  - Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new `@directus/ai` package. ([#&#8203;26481](https://github.com/directus/directus/pull/26481) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
- **[@&#8203;directus/memory](https://github.com/directus/memory)**
  - Added distributed locking ([#&#8203;26172](https://github.com/directus/directus/pull/26172) by [@&#8203;Nitwel](https://github.com/Nitwel))

##### 🐛 Bug Fixes & Optimizations

- **[@&#8203;directus/app](https://github.com/directus/app)**
  - Replaced deprecated `ldapjs` with `ldapts` ([#&#8203;26363](https://github.com/directus/directus/pull/26363) by [@&#8203;dstockton](https://github.com/dstockton))
  - Fixed an issue where the caret would jump to the end of the input in `v-template-input` when typing or updating content. ([#&#8203;26520](https://github.com/directus/directus/pull/26520) by [@&#8203;mustafaazad03](https://github.com/mustafaazad03))
  - Fixed back button navigation on related items ([#&#8203;26553](https://github.com/directus/directus/pull/26553) by [@&#8203;robluton](https://github.com/robluton))
  - Fixed table options menu clipping in markdown editor ([#&#8203;26487](https://github.com/directus/directus/pull/26487) by [@&#8203;DamnItAzriel](https://github.com/DamnItAzriel))
  - Hide AI settings page when MCP and AI features are disabled through ENV ([#&#8203;26504](https://github.com/directus/directus/pull/26504) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
  - Updated dependency ([#&#8203;26518](https://github.com/directus/directus/pull/26518) by [@&#8203;rijkvanzanten](https://github.com/rijkvanzanten))
  - Fixed inconsistent disabled state across interfaces ([#&#8203;26470](https://github.com/directus/directus/pull/26470) by [@&#8203;formfcw](https://github.com/formfcw))
  - Fixed an issue where custom CSS classes applied to PrivateView were not rendered ([#&#8203;26523](https://github.com/directus/directus/pull/26523) by [@&#8203;u12206050](https://github.com/u12206050))
  - Fixed WYSIWYG interface not rendering when field is named "tooltip" ([#&#8203;26581](https://github.com/directus/directus/pull/26581) by [@&#8203;robluton](https://github.com/robluton))
  - Fixed issue preventing sidebar details from being fetched when navigating back ([#&#8203;26542](https://github.com/directus/directus/pull/26542) by [@&#8203;robluton](https://github.com/robluton))
  - Fixed Vue warning by passing required prop to interfaces ([#&#8203;26506](https://github.com/directus/directus/pull/26506) by [@&#8203;formfcw](https://github.com/formfcw))
  - Fixed hardcoded "Loading..." text in field tree by using translation key ([#&#8203;26526](https://github.com/directus/directus/pull/26526) by [@&#8203;sinan-yildiz-marsus](https://github.com/sinan-yildiz-marsus))
  - Renamed AI Chat to AI Assistant ([#&#8203;26517](https://github.com/directus/directus/pull/26517) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
- **[@&#8203;directus/api](https://github.com/directus/api)**
  - Improved error message for system field updates that are not schema.is\_indexed ([#&#8203;26548](https://github.com/directus/directus/pull/26548) by [@&#8203;JamesW1](https://github.com/JamesW1))
  - Replaced deprecated `ldapjs` with `ldapts` ([#&#8203;26363](https://github.com/directus/directus/pull/26363) by [@&#8203;dstockton](https://github.com/dstockton))
  - Changed users.last\_access display mode to absolute ([#&#8203;26548](https://github.com/directus/directus/pull/26548) by [@&#8203;JamesW1](https://github.com/JamesW1))
- **[@&#8203;directus/system-data](https://github.com/directus/system-data)**
  - Added collaborative editing ([#&#8203;26172](https://github.com/directus/directus/pull/26172) by [@&#8203;Nitwel](https://github.com/Nitwel))
  - Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new `@directus/ai` package. ([#&#8203;26481](https://github.com/directus/directus/pull/26481) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
  - Changed users.last\_access display mode to absolute ([#&#8203;26548](https://github.com/directus/directus/pull/26548) by [@&#8203;JamesW1](https://github.com/JamesW1))
  - Renamed AI Chat to AI Assistant ([#&#8203;26517](https://github.com/directus/directus/pull/26517) by [@&#8203;bryantgillespie](https://github.com/bryantgillespie))
- **[@&#8203;directus/env](https://github.com/directus/env)**
  - Fixed LDAP DN properties casted as arrays ([#&#8203;26579](https://github.com/directus/directus/pull/26579) by [@&#8203;ComfortablyCoding](https://github.com/ComfortablyCoding))
- **[@&#8203;directus/memory](https://github.com/directus/memory)**
  - Handled empty buffers to prevent errors during race conditions or disconnects ([#&#8203;26172](https://github.com/directus/directus/pull/26172) by [@&#8203;Nitwel](https://github.com/Nitwel))

##### 📦 Published Versions

- `@directus/app@15.1.0`
- `@directus/api@33.1.0`
- `@directus/ai@1.1.0`
- `@directus/composables@11.2.10`
- `create-directus-extension@11.0.26`
- `@directus/env@5.5.0`
- `@directus/errors@2.2.0`
- `@directus/extensions@3.0.17`
- `@directus/extensions-registry@3.0.17`
- `@directus/extensions-sdk@17.0.6`
- `@directus/memory@3.1.0`
- `@directus/pressure@3.0.15`
- `@directus/schema-builder@0.0.12`
- `@directus/storage-driver-azure@12.0.15`
- `@directus/storage-driver-cloudinary@12.0.15`
- `@directus/storage-driver-gcs@12.0.15`
- `@directus/storage-driver-s3@&#8203;12.1.1`
- `@directus/storage-driver-supabase@3.0.15`
- `@directus/system-data@4.1.0`
- `@directus/themes@1.2.2`
- `@directus/types@14.1.0`
- `@directus/utils@13.2.0`
- `@directus/validation@2.0.15`
- `@directus/sdk@21.1.0`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3752
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 20:54:39 +00:00
991ee8c13d chore(deps): update plexguide/huntarr to v9.2.1 (#3740)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 14s
renovate / renovate (push) Successful in 1m53s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/plexguide/huntarr | minor | `9.1.12` → `9.2.1` |
| [plexguide/huntarr](https://github.com/plexguide/huntarr) | minor | `9.1.12` → `9.2.1` |

---

### Release Notes

<details>
<summary>plexguide/huntarr (plexguide/huntarr)</summary>

### [`v9.2.1`](https://github.com/plexguide/Huntarr.io/releases/tag/9.2.1)

[Compare Source](https://github.com/plexguide/huntarr/compare/9.2.0...9.2.1)

### Patch Notes for 9.2.1

#### macOS app fix

**Issue:** Huntarr could fail to start on Mac — the app opened but the web interface never loaded (connection to 127.0.0.1:9705 failed).

**Cause:** The Mac app runs the server in a background thread for the menu bar. The app was registering shutdown signal handlers from that thread, which macOS only allows from the main thread, so it crashed during startup.

**Fix:** Signal handlers are now registered only when allowed. If the app is running in menu bar mode, it skips that step and logs it instead of crashing. The server starts normally and the menu bar icon and web UI work as expected.

***

#### Carousel arrows (Home & Requestarr)

**Issue:** On the Home and Requestarr discover sections (e.g. “Popular TV Shows”, “Popular Movies”, trending), it wasn’t obvious that the rows scroll sideways. Without a trackpad or touch screen, many users didn’t realize they could scroll.

**Fix:**

- **Right arrow** is always visible when there’s more content to the right, so it’s clear the row can scroll.
- **Left arrow** is hidden at the start. After you scroll right once, it appears and stays visible so you can scroll back.

This applies to all horizontal carousels: Home discover (Trending, Popular Movies, Popular TV) and Requestarr home (same three sections).

<img width="1791" height="808" alt="image" src="https://github.com/user-attachments/assets/32ff3270-97ea-4151-b609-24d01bbc8ba8" />

### [`v9.2.0`](https://github.com/plexguide/Huntarr.io/releases/tag/9.2.0)

[Compare Source](https://github.com/plexguide/huntarr/compare/9.1.12...9.2.0)

### Huntarr v9.2.0: Release Information

#### 1. The Core Architecture Shift: True Instance Independence

**The Change:**
We have fundamentally rewritten the background cycle management. In previous versions, instances were effectively tied to a single processing loop. This meant they didn't fully respect per-instance sleep times and often ran simply because the loop was cycling, or got stuck waiting for other instances.

**How it works now:**
Each App Instance is now scheduled on its own unique interval. The main system loop now only triggers an instance if its specific `next_cycle_time` has arrived. If no instances are due, the system sleeps until the soonest scheduled run.

**Why this matters (The "Big Change"):**

- **True Independence:** Your "4K Radarr" instance and your "Anime Sonarr" instance now run completely separately. One busy instance will no longer hold up the others.
- **Respects Configuration:** If you set an instance to sleep for 60 minutes, it will actually sleep for 60 minutes.
- **Upgrade Note:** When you upgrade, you may notice a change in rhythm. Instances will now execute strictly when *due*, rather than constantly cycling in a loop.

#### 2. Identity & Persistence (Instance IDs)

**The Problem:**
Previously, Huntarr identified instances by their display name. If you renamed an instance (e.g., changing "Sonarr" to "Sonarr 4K"), Huntarr treated it as a brand-new instance. This caused users to lose their processed items list, cycle history, and countdown timers.

**The Solution:**
We have introduced **Persistent Instance IDs**. Every instance is now assigned a stable, unique identifier in the database that never changes.

**The Benefit:**

- **Rename Freely:** You can now rename instances as often as you like without breaking anything.
- **Data Safety:** Your history, "processed" cache, and configuration stay intact regardless of name changes.
- **Docker Persistence:** We now save countdown timers to the database. If you restart your Huntarr Docker container, your timers won't reset to zero; they will pick up exactly where they left off.

#### 3. Granular Control: Tagging System

**The Change:**
We have removed the "Mass Toggle" for tagging and replaced it with three individual toggles.

**New Options:**
You can now independently enable/disable tags for:

1. **Missing**
2. **Upgrades**
3. **Shows Missing**

> **⚠️ Important for Upgraders:**
> By default, **all three toggles will be ON** after the update. If you previously had the mass toggle turned *off*, you must go into your instance settings and manually turn these off to match your previous preference.

#### 4. Swaparr Intelligence Upgrades

**Strike System Fix (Issue [#&#8203;687](https://github.com/plexguide/huntarr/issues/687)):**
Previously, Swaparr might strike a download for "No Progress" or "ETA Too Long" too early.

- **New Logic:** Strikes now *only* apply if the download has been running longer than the configured **Max Download Time**. This prevents false positives on large files that are just starting up.

**Manual Import Protection (Issue [#&#8203;706](https://github.com/plexguide/huntarr/issues/706)):**
We found that some downloads were hitting 100% completion but getting stuck in the queue because they needed manual import (e.g., due to a naming mismatch). Swaparr would incorrectly view these as "stalled" and remove them.

- **New Setting:** "Remove completed (100%) stalled" (Default: ON).
- **How to use:** Turn this **OFF** if you want Huntarr to ignore 100% completed downloads, allowing you time to manually import them without fear of deletion.

#### 5. Resource Management: Max Seed Queue

**The Feature:**
For users running Torrents, we have added a **Max Active Seeds** limit per instance.

**How it works:**
You can set a threshold (e.g., "50 active seeds"). Before running a cycle, Huntarr checks your client (qBittorrent or Transmission).

- **If Seeds >= Limit:** The cycle is skipped entirely.
- **If Seeds < Limit:** The cycle proceeds as normal.
- **Why?** This prevents Huntarr from adding more torrents to a client that is already overwhelmed or hitting tracker limits.

**HomePage**

<img width="1795" height="944" alt="image" src="https://github.com/user-attachments/assets/c4393c67-6da9-4afc-a374-6c31769c0ff1" />

**Instance Identifier** <img width="1792" height="918" alt="image" src="https://github.com/user-attachments/assets/54eee7b3-ab4f-44e7-ab3c-0eb863d19545" />

**Tags Rewritten** <img width="1796" height="884" alt="image" src="https://github.com/user-attachments/assets/11bd43cd-bae0-4aec-a6c2-2327be60acd6" />

**Max Seed Queue**

<img width="794" height="649" alt="image" src="https://github.com/user-attachments/assets/3b026e1f-5954-4463-8b38-cb5513c84bcf" />

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3740
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 20:52:37 +00:00
4477dba4c4 chore(deps): update helm release loki to v6.52.0 (#3738)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 24s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.51.0` → `6.52.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3738
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 20:50:50 +00:00
0b877a1a8a feat: change endpoint
All checks were successful
lint-test-helm / lint-helm (push) Successful in 26s
lint-test-docker / lint-docker-compose (push) Successful in 35s
render-manifests-push / render-manifests-push (push) Successful in 44s
renovate / renovate (push) Successful in 2m44s
2026-02-05 14:41:52 -06:00
50fc9b4c57 feat: disable l2 announcement
Some checks failed
lint-test-helm / lint-helm (push) Successful in 15s
render-manifests-push / render-manifests-push (push) Successful in 37s
renovate / renovate (push) Has been cancelled
2026-02-05 14:40:58 -06:00
d9c05c3407 Merge branch 'main' of https://gitea.alexlebens.net/alexlebens/infrastructure
All checks were successful
lint-test-helm / lint-helm (push) Successful in 14s
render-manifests-push / render-manifests-push (push) Successful in 30s
renovate / renovate (push) Successful in 1m52s
2026-02-05 14:08:40 -06:00
e79196db45 chore(deps): update helm release argo-cd to v9.4.1 (#3749)
Some checks failed
renovate / renovate (push) Has been cancelled
2026-02-05 20:07:29 +00:00
327fbe7d62 chore(deps): update helm release argo-cd to v9.4.1 (#3749)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Successful in 2m8s
2026-02-05 20:07:21 +00:00
6fe8cfc07f chore(deps): update ghcr.io/tailscale/tailscale docker tag to v1.94.1 (#3736)
Some checks failed
lint-test-docker / lint-docker-compose (push) Successful in 53s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/tailscale/tailscale](https://tailscale.com/kb/1282/docker) ([source](https://github.com/tailscale/tailscale)) | minor | `v1.92.5` → `v1.94.1` |

---

### Release Notes

<details>
<summary>tailscale/tailscale (ghcr.io/tailscale/tailscale)</summary>

### [`v1.94.1`](https://github.com/tailscale/tailscale/releases/tag/v1.94.1)

[Compare Source](https://github.com/tailscale/tailscale/compare/v1.92.5...v1.94.1)

Please refer to the changelog available at <https://tailscale.com/changelog>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3736
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 20:04:37 +00:00
fbc9f0d885 chore(deps): update helm release tailscale-operator to v1.94.1 (#3739)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 25s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [tailscale-operator](https://github.com/tailscale/tailscale) | minor | `1.92.5` → `1.94.1` |

---

### Release Notes

<details>
<summary>tailscale/tailscale (tailscale-operator)</summary>

### [`v1.94.1`](https://github.com/tailscale/tailscale/releases/tag/v1.94.1)

[Compare Source](https://github.com/tailscale/tailscale/compare/v1.92.5...v1.94.1)

Please refer to the changelog available at <https://tailscale.com/changelog>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3739
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 20:03:50 +00:00
149e5a0ae2 chore(deps): update helm release headlamp to v0.40.0 (#3737)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 18s
renovate / renovate (push) Successful in 1m10s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [headlamp](https://headlamp.dev/) ([source](https://github.com/kubernetes-sigs/headlamp)) | minor | `0.39.0` → `0.40.0` |

---

### Release Notes

<details>
<summary>kubernetes-sigs/headlamp (headlamp)</summary>

### [`v0.40.0`](https://github.com/kubernetes-sigs/headlamp/releases/tag/v0.40.0): 0.40.0

[Compare Source](https://github.com/kubernetes-sigs/headlamp/compare/v0.39.0...v0.40.0)

####  Enhancements:

- Add icon and color configuration to clusters. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)
- Allow saving selected namespaces per cluster. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Add configurable keyboard shortcuts Thanks to [@&#8203;alokdangre](https://github.com/alokdangre)
- Add HTTPRoute support for Gateway API via new values and template. Thanks to [@&#8203;hxrshxz](https://github.com/hxrshxz)
- Display a8r.io service metadata in service views. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Make in-cluster context name configurable. Thanks to [@&#8203;iamhalje](https://github.com/iamhalje)
- Minimize activities blocking the main content when needed Thanks to [@&#8203;joaquimrocha](https://github.com/joaquimrocha)
- Add extraContainers field to Helm chart. Thanks to [@&#8203;lszczepaniak-XM](https://github.com/lszczepaniak-XM)
- Add ability to specify topologySpreadConstraints in Helm chart. Thanks to [@&#8203;irasnyd](https://github.com/irasnyd)
- Add volume mounts on plugin helper sidecar. Thanks to [@&#8203;martinbfrey](https://github.com/martinbfrey)
- Add meUserInfoURL to secrets template. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Improve French translation. Thanks to [@&#8203;arthurphilippe](https://github.com/arthurphilippe)
- Allow configuring log level via command line arg and environment variable. Thanks to [@&#8203;aadhil2k4](https://github.com/aadhil2k4)
- Add vertical snap positions for activities. Thanks to [@&#8203;kahirokunn](https://github.com/kahirokunn)
- Add deeplink compatibility for viewing Pod logs. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Unauthenticated users can now follow deeplinks. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Add debugging ephemeral container support. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)

##### Appearance Configuration per cluster

<img width="517" height="384" alt="Icon for cluster" src="https://github.com/user-attachments/assets/2a3cd260-262f-4b32-aaa6-c7e4679d7e3c" />
<img width="353" height="291" alt="Appearance Configuration per cluster" src="https://github.com/user-attachments/assets/7b007ddb-ae5c-4b07-b3fe-7ba0b0f5933b" />

##### Add service info from a8r.io metadata
<img width="2416" height="1396" alt="Add service info from a8r.io metadata" src="https://github.com/user-attachments/assets/8db2b504-93f5-4f74-9df0-b530d4f944e5" />

#### 🧩 Shipped Plugins
- Update shipped plugin Prometheus
   - Settings: Added a test connection button
   - Add i18n support
   - Upgrade kinvolk/headlamp-plugin to 0.13.1

#### 🐞 Bug fixes

- Fix showing corrupt file on Mac. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Fix checking for existing project names. Thanks to [@&#8203;pallava-joshi](https://github.com/pallava-joshi)
- Fix focus trapping when resource drawer is open. Thanks to [@&#8203;pallava-joshi](https://github.com/pallava-joshi)
- Fix MaxListenersExceededWarning. Thanks to [@&#8203;greedy-wudpeckr](https://github.com/greedy-wudpeckr)
- Fix getMainAPIGroup undefined error. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Fix headlamp-plugin package failing on dist subdirectories. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Fix Deployment.yaml template. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Fix NameValueTable spacing issue. Thanks to [@&#8203;alokdangre](https://github.com/alokdangre)
- Fix ARIA labels for input fields. Thanks to [@&#8203;vyncent-t](https://github.com/vyncent-t)
- Fix warning label color contrast. Thanks to [@&#8203;vyncent-t](https://github.com/vyncent-t)
- Fix many a11y issues. Thanks to [@&#8203;illume](https://github.com/illume)
- Implement ad-hoc signing for macOS arm64 to fix damaged app error. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Quote OIDC\_USE\_PKCE value to ensure it's a string. Thanks to [@&#8203;dihmandrake](https://github.com/dihmandrake)
- Fix package pattern in Helm chart release workflow. Thanks to [@&#8203;onedr0p](https://github.com/onedr0p)
- Fix CI failures. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Hide empty top bar overflow menu on small screens. Thanks to [@&#8203;d1vyanshu-kumar](https://github.com/d1vyanshu-kumar)

#### 💻 Development

- Add AGENTS.md for AI-assisted development. Thanks to [@&#8203;illume](https://github.com/illume)
- Add AGENTS.md to created plugins and bundle examples. Thanks to [@&#8203;illume](https://github.com/illume)
- Add app/ development documentation and linting/formatting scripts. Thanks to [@&#8203;illume](https://github.com/illume)
- Move yolossn from headlamp-reviewers to headlamp-maintainers. Thanks to [@&#8203;yolossn](https://github.com/yolossn)
- Bump headlamp-plugin to 0.13.0 in example plugins. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Bump Storybook version in frontend plugins. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Bump tar to 7.5.7. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Update dependencies. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Add fast-check property tests for unit parsers. Thanks to [@&#8203;illume](https://github.com/illume)
- Pin GitHub Actions by hash in draft-release workflow. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Skip chart release if it already exists. Thanks to [@&#8203;sniok](https://github.com/sniok)
- Remove unused frontend code. Thanks to [@&#8203;skoeva](https://github.com/skoeva)

#### 📖 Documentation

- Add ingress basic auth guide for in-cluster deployments. Thanks to [@&#8203;aaryan359](https://github.com/aaryan359)
- Add Quick Start for Contributors section to README. Thanks to [@&#8203;TRIVENI206](https://github.com/TRIVENI206)
- Add Talos to supported platforms. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)
- Fix Dex OIDC block indentation in values.yaml snippet. Thanks to [@&#8203;archups](https://github.com/archups)

#### 🛡️ Security

- Add [@&#8203;illume](https://github.com/illume) and [@&#8203;yolossn](https://github.com/yolossn) to SECURITY\_CONTACTS. Thanks to [@&#8203;illume](https://github.com/illume)

**Full Changelog**: <https://github.com/kubernetes-sigs/headlamp/compare/v0.39.0...v0.40.0>

***

<!-- end-release-notes -->

**Container image:** 🐳  [ghcr.io/headlamp-k8s/headlamp:v0.40.0](https://github.com/orgs/headlamp-k8s/packages/container/package/headlamp)
**Desktop Apps:**

🐧  [Flatpak / Linux (AMD64)](https://flathub.org/apps/details/io.kinvolk.Headlamp)
🐧  Linux AppImage [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-x64.AppImage), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-arm64.AppImage),  [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-armv7l.AppImage)
🐧 Linux Tarball [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-x64.tar.gz), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-arm64.tar.gz), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-armv7l.tar.gz)
🐧 Debian / Linux [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/headlamp_0.40.0-1_amd64.deb)
:green\_apple:  [Mac (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-mac-x64.dmg)
:green\_apple: [Mac (ARM/M1)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-mac-arm64.dmg)
:blue\_square:  [Windows (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-win-x64.exe)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3737
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 19:52:13 +00:00
8d5bdba52b chore(deps): update dependency headlamp-k8s/headlamp to v0.40.0 (#3733)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 21s
renovate / renovate (push) Failing after 2m53s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [headlamp-k8s/headlamp](https://github.com/headlamp-k8s/headlamp) | minor | `v0.39.0` → `v0.40.0` |

---

### Release Notes

<details>
<summary>headlamp-k8s/headlamp (headlamp-k8s/headlamp)</summary>

### [`v0.40.0`](https://github.com/kubernetes-sigs/headlamp/releases/tag/v0.40.0): 0.40.0

[Compare Source](https://github.com/headlamp-k8s/headlamp/compare/headlamp-helm-0.39.0...v0.40.0)

####  Enhancements:

- Add icon and color configuration to clusters. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)
- Allow saving selected namespaces per cluster. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Add configurable keyboard shortcuts Thanks to [@&#8203;alokdangre](https://github.com/alokdangre)
- Add HTTPRoute support for Gateway API via new values and template. Thanks to [@&#8203;hxrshxz](https://github.com/hxrshxz)
- Display a8r.io service metadata in service views. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Make in-cluster context name configurable. Thanks to [@&#8203;iamhalje](https://github.com/iamhalje)
- Minimize activities blocking the main content when needed Thanks to [@&#8203;joaquimrocha](https://github.com/joaquimrocha)
- Add extraContainers field to Helm chart. Thanks to [@&#8203;lszczepaniak-XM](https://github.com/lszczepaniak-XM)
- Add ability to specify topologySpreadConstraints in Helm chart. Thanks to [@&#8203;irasnyd](https://github.com/irasnyd)
- Add volume mounts on plugin helper sidecar. Thanks to [@&#8203;martinbfrey](https://github.com/martinbfrey)
- Add meUserInfoURL to secrets template. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Improve French translation. Thanks to [@&#8203;arthurphilippe](https://github.com/arthurphilippe)
- Allow configuring log level via command line arg and environment variable. Thanks to [@&#8203;aadhil2k4](https://github.com/aadhil2k4)
- Add vertical snap positions for activities. Thanks to [@&#8203;kahirokunn](https://github.com/kahirokunn)
- Add deeplink compatibility for viewing Pod logs. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Unauthenticated users can now follow deeplinks. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Add debugging ephemeral container support. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)

##### Appearance Configuration per cluster

<img width="517" height="384" alt="Icon for cluster" src="https://github.com/user-attachments/assets/2a3cd260-262f-4b32-aaa6-c7e4679d7e3c" />
<img width="353" height="291" alt="Appearance Configuration per cluster" src="https://github.com/user-attachments/assets/7b007ddb-ae5c-4b07-b3fe-7ba0b0f5933b" />

##### Add service info from a8r.io metadata
<img width="2416" height="1396" alt="Add service info from a8r.io metadata" src="https://github.com/user-attachments/assets/8db2b504-93f5-4f74-9df0-b530d4f944e5" />

#### 🧩 Shipped Plugins
- Update shipped plugin Prometheus
   - Settings: Added a test connection button
   - Add i18n support
   - Upgrade kinvolk/headlamp-plugin to 0.13.1

#### 🐞 Bug fixes

- Fix showing corrupt file on Mac. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Fix checking for existing project names. Thanks to [@&#8203;pallava-joshi](https://github.com/pallava-joshi)
- Fix focus trapping when resource drawer is open. Thanks to [@&#8203;pallava-joshi](https://github.com/pallava-joshi)
- Fix MaxListenersExceededWarning. Thanks to [@&#8203;greedy-wudpeckr](https://github.com/greedy-wudpeckr)
- Fix getMainAPIGroup undefined error. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Fix headlamp-plugin package failing on dist subdirectories. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Fix Deployment.yaml template. Thanks to [@&#8203;mudit06mah](https://github.com/mudit06mah)
- Fix NameValueTable spacing issue. Thanks to [@&#8203;alokdangre](https://github.com/alokdangre)
- Fix ARIA labels for input fields. Thanks to [@&#8203;vyncent-t](https://github.com/vyncent-t)
- Fix warning label color contrast. Thanks to [@&#8203;vyncent-t](https://github.com/vyncent-t)
- Fix many a11y issues. Thanks to [@&#8203;illume](https://github.com/illume)
- Implement ad-hoc signing for macOS arm64 to fix damaged app error. Thanks to [@&#8203;mastermaxx03](https://github.com/mastermaxx03)
- Quote OIDC\_USE\_PKCE value to ensure it's a string. Thanks to [@&#8203;dihmandrake](https://github.com/dihmandrake)
- Fix package pattern in Helm chart release workflow. Thanks to [@&#8203;onedr0p](https://github.com/onedr0p)
- Fix CI failures. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Hide empty top bar overflow menu on small screens. Thanks to [@&#8203;d1vyanshu-kumar](https://github.com/d1vyanshu-kumar)

#### 💻 Development

- Add AGENTS.md for AI-assisted development. Thanks to [@&#8203;illume](https://github.com/illume)
- Add AGENTS.md to created plugins and bundle examples. Thanks to [@&#8203;illume](https://github.com/illume)
- Add app/ development documentation and linting/formatting scripts. Thanks to [@&#8203;illume](https://github.com/illume)
- Move yolossn from headlamp-reviewers to headlamp-maintainers. Thanks to [@&#8203;yolossn](https://github.com/yolossn)
- Bump headlamp-plugin to 0.13.0 in example plugins. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Bump Storybook version in frontend plugins. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Bump tar to 7.5.7. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Update dependencies. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Add fast-check property tests for unit parsers. Thanks to [@&#8203;illume](https://github.com/illume)
- Pin GitHub Actions by hash in draft-release workflow. Thanks to [@&#8203;skoeva](https://github.com/skoeva)
- Skip chart release if it already exists. Thanks to [@&#8203;sniok](https://github.com/sniok)
- Remove unused frontend code. Thanks to [@&#8203;skoeva](https://github.com/skoeva)

#### 📖 Documentation

- Add ingress basic auth guide for in-cluster deployments. Thanks to [@&#8203;aaryan359](https://github.com/aaryan359)
- Add Quick Start for Contributors section to README. Thanks to [@&#8203;TRIVENI206](https://github.com/TRIVENI206)
- Add Talos to supported platforms. Thanks to [@&#8203;alexmathieu22](https://github.com/alexmathieu22)
- Fix Dex OIDC block indentation in values.yaml snippet. Thanks to [@&#8203;archups](https://github.com/archups)

#### 🛡️ Security

- Add [@&#8203;illume](https://github.com/illume) and [@&#8203;yolossn](https://github.com/yolossn) to SECURITY\_CONTACTS. Thanks to [@&#8203;illume](https://github.com/illume)

**Full Changelog**: <https://github.com/kubernetes-sigs/headlamp/compare/v0.39.0...v0.40.0>

***

<!-- end-release-notes -->

**Container image:** 🐳  [ghcr.io/headlamp-k8s/headlamp:v0.40.0](https://github.com/orgs/headlamp-k8s/packages/container/package/headlamp)
**Desktop Apps:**

🐧  [Flatpak / Linux (AMD64)](https://flathub.org/apps/details/io.kinvolk.Headlamp)
🐧  Linux AppImage [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-x64.AppImage), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-arm64.AppImage),  [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-armv7l.AppImage)
🐧 Linux Tarball [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-x64.tar.gz), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-arm64.tar.gz), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-linux-armv7l.tar.gz)
🐧 Debian / Linux [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/headlamp_0.40.0-1_amd64.deb)
:green\_apple:  [Mac (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-mac-x64.dmg)
:green\_apple: [Mac (ARM/M1)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-mac-arm64.dmg)
:blue\_square:  [Windows (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.40.0/Headlamp-0.40.0-win-x64.exe)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3733
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 19:48:24 +00:00
4d1ccd1164 chore(deps): update helm release cloudnative-pg to v0.27.1 (#3746)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Failing after 1m29s
2026-02-05 19:36:46 +00:00
ad9f4e7ef2 chore(deps): update dependency cloudnative-pg/cloudnative-pg to v1.28.1 (#3745)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 23s
renovate / renovate (push) Has been cancelled
2026-02-05 19:34:58 +00:00
973f2f4be4 chore(deps): update ghcr.io/gethomepage/homepage docker tag to v1.10.1 (#3735)
Some checks failed
lint-test-docker / lint-docker-compose (push) Successful in 1m38s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/gethomepage/homepage](https://github.com/gethomepage/homepage) | minor | `v1.9.0` → `v1.10.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>gethomepage/homepage (ghcr.io/gethomepage/homepage)</summary>

### [`v1.10.1`](https://github.com/gethomepage/homepage/releases/tag/v1.10.1)

[Compare Source](https://github.com/gethomepage/homepage/compare/v1.10.0...v1.10.1)

##### What's Changed

- Chore: move to Zensical docs by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6279](https://github.com/gethomepage/homepage/pull/6279)
- Enhancement: better display of Arcane widget errors by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6281](https://github.com/gethomepage/homepage/pull/6281)

**Full Changelog**: <https://github.com/gethomepage/homepage/compare/v1.10.0...v1.10.1>

### [`v1.10.0`](https://github.com/gethomepage/homepage/releases/tag/v1.10.0)

[Compare Source](https://github.com/gethomepage/homepage/compare/v1.9.0...v1.10.0)

##### What's Changed

- Feature: dockhand service widget by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6229](https://github.com/gethomepage/homepage/pull/6229)
- Enhancement: handle Vikunja v1rc4 breaking changes by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6234](https://github.com/gethomepage/homepage/pull/6234)
- Enhancement: Add support for PWA icons and shortcuts by [@&#8203;kpau](https://github.com/kpau) in [#&#8203;6235](https://github.com/gethomepage/homepage/pull/6235)
- Feature: Dispatcharr widget by [@&#8203;muertocaloh](https://github.com/muertocaloh) in [#&#8203;6035](https://github.com/gethomepage/homepage/pull/6035)
- Enhancement: support jellyfin 10.12 breaking API changes by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6252](https://github.com/gethomepage/homepage/pull/6252)
- Fix: fix authentik widget login counts for v2 api by [@&#8203;jeliozver](https://github.com/jeliozver) in [#&#8203;6257](https://github.com/gethomepage/homepage/pull/6257)
- Chore(deps): Bump swr from 2.3.3 to 2.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6260](https://github.com/gethomepage/homepage/pull/6260)
- Chore(deps): Bump winston from 3.17.0 to 3.19.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6264](https://github.com/gethomepage/homepage/pull/6264)
- Chore(deps-dev): Bump next-js and eslint-config-next from 15.2.4 to 15.5.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6261](https://github.com/gethomepage/homepage/pull/6261)
- Chore(deps-dev): Bump tailwindcss from 4.0.9 to 4.1.18 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6262](https://github.com/gethomepage/homepage/pull/6262)
- Chore(deps): Bump i18next from 25.5.3 to 25.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6263](https://github.com/gethomepage/homepage/pull/6263)
- Chore: move to eslint by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6270](https://github.com/gethomepage/homepage/pull/6270)
- Enhancement: DNS fallback for Alpine/musl compatibility by [@&#8203;lexfrei](https://github.com/lexfrei) in [#&#8203;6265](https://github.com/gethomepage/homepage/pull/6265)
- Feature: arcane service widget by [@&#8203;kmendell](https://github.com/kmendell) in [#&#8203;6274](https://github.com/gethomepage/homepage/pull/6274)
- Chore: homepage tests by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6278](https://github.com/gethomepage/homepage/pull/6278)
- New Crowdin translations by GitHub Action by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;6220](https://github.com/gethomepage/homepage/pull/6220)

##### New Contributors

- [@&#8203;kpau](https://github.com/kpau) made their first contribution in [#&#8203;6235](https://github.com/gethomepage/homepage/pull/6235)
- [@&#8203;muertocaloh](https://github.com/muertocaloh) made their first contribution in [#&#8203;6035](https://github.com/gethomepage/homepage/pull/6035)
- [@&#8203;jeliozver](https://github.com/jeliozver) made their first contribution in [#&#8203;6257](https://github.com/gethomepage/homepage/pull/6257)
- [@&#8203;lexfrei](https://github.com/lexfrei) made their first contribution in [#&#8203;6265](https://github.com/gethomepage/homepage/pull/6265)
- [@&#8203;kmendell](https://github.com/kmendell) made their first contribution in [#&#8203;6274](https://github.com/gethomepage/homepage/pull/6274)

**Full Changelog**: <https://github.com/gethomepage/homepage/compare/v1.9.0...v1.10.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3735
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 19:32:55 +00:00
afe7463a65 chore(deps): update gethomepage/homepage to v1.10.1 (#3734)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 13s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [gethomepage/homepage](https://github.com/gethomepage/homepage) | minor | `v1.9.0` → `v1.10.1` |
| [ghcr.io/gethomepage/homepage](https://github.com/gethomepage/homepage) | minor | `v1.9.0` → `v1.10.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>gethomepage/homepage (gethomepage/homepage)</summary>

### [`v1.10.1`](https://github.com/gethomepage/homepage/releases/tag/v1.10.1)

[Compare Source](https://github.com/gethomepage/homepage/compare/v1.10.0...v1.10.1)

##### What's Changed

- Chore: move to Zensical docs by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6279](https://github.com/gethomepage/homepage/pull/6279)
- Enhancement: better display of Arcane widget errors by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6281](https://github.com/gethomepage/homepage/pull/6281)

**Full Changelog**: <https://github.com/gethomepage/homepage/compare/v1.10.0...v1.10.1>

### [`v1.10.0`](https://github.com/gethomepage/homepage/releases/tag/v1.10.0)

[Compare Source](https://github.com/gethomepage/homepage/compare/v1.9.0...v1.10.0)

##### What's Changed

- Feature: dockhand service widget by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6229](https://github.com/gethomepage/homepage/pull/6229)
- Enhancement: handle Vikunja v1rc4 breaking changes by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6234](https://github.com/gethomepage/homepage/pull/6234)
- Enhancement: Add support for PWA icons and shortcuts by [@&#8203;kpau](https://github.com/kpau) in [#&#8203;6235](https://github.com/gethomepage/homepage/pull/6235)
- Feature: Dispatcharr widget by [@&#8203;muertocaloh](https://github.com/muertocaloh) in [#&#8203;6035](https://github.com/gethomepage/homepage/pull/6035)
- Enhancement: support jellyfin 10.12 breaking API changes by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6252](https://github.com/gethomepage/homepage/pull/6252)
- Fix: fix authentik widget login counts for v2 api by [@&#8203;jeliozver](https://github.com/jeliozver) in [#&#8203;6257](https://github.com/gethomepage/homepage/pull/6257)
- Chore(deps): Bump swr from 2.3.3 to 2.4.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6260](https://github.com/gethomepage/homepage/pull/6260)
- Chore(deps): Bump winston from 3.17.0 to 3.19.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6264](https://github.com/gethomepage/homepage/pull/6264)
- Chore(deps-dev): Bump next-js and eslint-config-next from 15.2.4 to 15.5.11 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6261](https://github.com/gethomepage/homepage/pull/6261)
- Chore(deps-dev): Bump tailwindcss from 4.0.9 to 4.1.18 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6262](https://github.com/gethomepage/homepage/pull/6262)
- Chore(deps): Bump i18next from 25.5.3 to 25.8.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6263](https://github.com/gethomepage/homepage/pull/6263)
- Chore: move to eslint by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6270](https://github.com/gethomepage/homepage/pull/6270)
- Enhancement: DNS fallback for Alpine/musl compatibility by [@&#8203;lexfrei](https://github.com/lexfrei) in [#&#8203;6265](https://github.com/gethomepage/homepage/pull/6265)
- Feature: arcane service widget by [@&#8203;kmendell](https://github.com/kmendell) in [#&#8203;6274](https://github.com/gethomepage/homepage/pull/6274)
- Chore: homepage tests by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6278](https://github.com/gethomepage/homepage/pull/6278)
- New Crowdin translations by GitHub Action by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;6220](https://github.com/gethomepage/homepage/pull/6220)

##### New Contributors

- [@&#8203;kpau](https://github.com/kpau) made their first contribution in [#&#8203;6235](https://github.com/gethomepage/homepage/pull/6235)
- [@&#8203;muertocaloh](https://github.com/muertocaloh) made their first contribution in [#&#8203;6035](https://github.com/gethomepage/homepage/pull/6035)
- [@&#8203;jeliozver](https://github.com/jeliozver) made their first contribution in [#&#8203;6257](https://github.com/gethomepage/homepage/pull/6257)
- [@&#8203;lexfrei](https://github.com/lexfrei) made their first contribution in [#&#8203;6265](https://github.com/gethomepage/homepage/pull/6265)
- [@&#8203;kmendell](https://github.com/kmendell) made their first contribution in [#&#8203;6274](https://github.com/gethomepage/homepage/pull/6274)

**Full Changelog**: <https://github.com/gethomepage/homepage/compare/v1.9.0...v1.10.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3734
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 19:30:30 +00:00
4e78ecddaf feat: enable l2 announcement 2026-02-05 13:17:52 -06:00
95ae20b9b9 feat: increment backup
All checks were successful
renovate / renovate (push) Successful in 10m34s
lint-test-helm / lint-helm (push) Successful in 3m58s
render-manifests-push / render-manifests-push (push) Successful in 4m48s
2026-02-05 12:59:34 -06:00
1db96b6c1b fix: downgrade
Some checks failed
lint-test-helm / lint-helm (push) Successful in 17s
render-manifests-push / render-manifests-push (push) Successful in 38s
renovate / renovate (push) Failing after 4m41s
2026-02-05 12:24:58 -06:00
deff987341 fix: set legacy host routing
Some checks failed
lint-test-helm / lint-helm (push) Failing after 2s
render-manifests-push / render-manifests-push (push) Successful in 3m30s
renovate / renovate (push) Successful in 7m10s
2026-02-05 11:27:44 -06:00
d5f7531c05 feat: add l2 announcement
All checks were successful
lint-test-helm / lint-helm (push) Successful in 20s
render-manifests-push / render-manifests-push (push) Successful in 50s
renovate / renovate (push) Successful in 1m31s
2026-02-04 22:13:45 -06:00
890e02b3f5 feat: specify ip
All checks were successful
lint-test-helm / lint-helm (push) Successful in 21s
render-manifests-push / render-manifests-push (push) Successful in 39s
renovate / renovate (push) Successful in 1m46s
2026-02-04 22:10:19 -06:00
98f40236de chore(deps): update dependency cilium/cilium to v1.19.0 (#3715)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 1m17s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium/cilium](https://github.com/cilium/cilium) | minor | `1.18.6` → `1.19.0` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium/cilium)</summary>

### [`v1.19.0`](https://github.com/cilium/cilium/releases/tag/v1.19.0): 1.19.0

[Compare Source](https://github.com/cilium/cilium/compare/1.18.6...1.19.0)

🎉 **Release Announcement** 🎉: We are excited to announce the [Cilium 1.19.0](https://github.com/cilium/cilium/releases/tag/v1.19.0) release!

A total of **2934 new commits** have been contributed to this release by a growing community of over **1010 developers** and over **23,600 GitHub stars**! 🤩

⚠️ You may need to take action during upgrade to Cilium v1.19 if you use Network Policies, Cluster Mesh, LoadBalancer IPAM or BGP. See the [Upgrade Guide](https://docs.cilium.io/en/v1.19/operations/upgrade/#upgrade-notes) for more details.

The full changelog can be found [here](https://github.com/cilium/cilium/blob/v1.19/CHANGELOG.md).

Here are some of the highlights:

- 🛡️ **Network Policy**
  - 🃏 **Multi-Level DNS Matches**: DNS Policies match pattern now support a wildcard prefix(*`**.`*) to match multilevel subdomain as pattern prefix. ([cilium/cilium#43420](https://github.com/cilium/cilium/pull/43420), [@&#8203;fristonio](https://github.com/fristonio))
  - 📡 **Match New Protocols**: You can now match VRRP and IGMP protocols in host firewall rules. ([cilium/cilium#39872](https://github.com/cilium/cilium/pull/39872), [@&#8203;aditighag](https://github.com/aditighag); [cilium/cilium#41949](https://github.com/cilium/cilium/pull/41949), [@&#8203;kyounghunJang](https://github.com/kyounghunJang))
  -  **Actively Deny Connections**: When Network Policies deny a connection, Cilium can return ICMPv4 "Destination unreachable" messages for a friendlier deny. ([cilium/cilium#41406](https://github.com/cilium/cilium/pull/41406), [@&#8203;antonipp](https://github.com/antonipp))
  - 🌐 **Select Clusters Explicitly**: When network policy selectors don't explicitly define a cluster for communication to be allowed, they will now default to only allowing the local cluster. ([cilium/cilium#40609](https://github.com/cilium/cilium/pull/40609), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 🔧 **Unlock Future Work**: This release brings several internal improvements to the network policy engine in preparation for features planned in the next Cilium minor release ([cilium/cilium#39906](https://github.com/cilium/cilium/pull/39906), [@&#8203;vipul-21](https://github.com/vipul-21); [cilium/cilium#42784](https://github.com/cilium/cilium/pull/42784), [cilium/cilium#42896](https://github.com/cilium/cilium/pull/42896), [@&#8203;jrajahalme](https://github.com/jrajahalme))
  - ⚠️ **Deprecate underutilized features**: To focus on solving common problems Cilium users face, this release deprecates the Kafka protocol match fields (beta), as well as the `ToRequires` and `FromRequires` policy fields. ([cilium/cilium#43167](https://github.com/cilium/cilium/pull/43167), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#40967](https://github.com/cilium/cilium/pull/40967), [@&#8203;TheBeeZee](https://github.com/TheBeeZee))

- 🔒 **Encryption & Authentication**
  - 🔐 **Encryption Strict Modes**: Both IPsec and WireGuard transparent encryption modes now support a "strict mode" to require traffic to be encrypted between nodes. Unencrypted traffic will be dropped in this mode. ([cilium/cilium#39239](https://github.com/cilium/cilium/pull/39239), [cilium/cilium#42115](https://github.com/cilium/cilium/pull/42115), [@&#8203;rgo3](https://github.com/rgo3), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))
  - 🚇 **Ztunnel Beta**: You can enroll namespaces into Ztunnel, which enables TCP connections between workloads to be transparently encrypted and authenticated. ([cilium/cilium#42766](https://github.com/cilium/cilium/pull/42766), [cilium/cilium#42819](https://github.com/cilium/cilium/pull/42819), [cilium/cilium#43227](https://github.com/cilium/cilium/pull/43227) and others,  [@&#8203;ldelossa](https://github.com/ldelossa), [@&#8203;rgo3](https://github.com/rgo3), [@&#8203;nddq](https://github.com/nddq))
  - 👥 **Mutual Authentication**: The out-of-band [Mutual Authentication](https://docs.cilium.io/en/v1.19.0/network/servicemesh/mutual-authentication/mutual-authentication/) feature is now disabled by default, pending community feedback. If you have a requirement for mTLS, consider trying the new Ztunnel integration. ([cilium/cilium#42665](https://github.com/cilium/cilium/pull/42665), [@&#8203;christarazi](https://github.com/christarazi))
  - ↪️ **Accelerate IPsec**: The IPsec encryption mode now supports BPF Host Routing for faster route lookups ([cilium/cilium#41997](https://github.com/cilium/cilium/pull/41997), [@&#8203;pchaigno](https://github.com/pchaigno))

- 🚠 **Networking**
  - 🚀  **BIG TCP in Tunnels**: Leverage upcoming Linux support for BIG TCP when communicating over UDP-based tunnels such as VXLAN and Geneve. ([cilium/cilium#43416](https://github.com/cilium/cilium/pull/43416), [@&#8203;gentoo-root](https://github.com/gentoo-root))
  - 🥌 **Packetization-Layer Path MTU Discovery**: Detect maximum transmission unit (MTU) sizes for network paths using TCP. ([cilium/cilium#42012](https://github.com/cilium/cilium/pull/42012), [cilium/cilium#43710](https://github.com/cilium/cilium/pull/43710), [@&#8203;tommyp1ckles](https://github.com/tommyp1ckles))
  - 🚆 **IPv6 Underlay**: You can now choose IPv6 for the tunnel underlay address family on dual-stack clusters. ([cilium/cilium#40324](https://github.com/cilium/cilium/pull/40324), [@&#8203;pchaigno](https://github.com/pchaigno))
  - 🏷️ **Multi-Pool IPAM is ready for wider use**: Update the Multi-Pool IPAM feature to work with IPsec and direct routing modes, and promote it from Beta to Stable. ([cilium/cilium#40460](https://github.com/cilium/cilium/pull/40460), [cilium/cilium#42191](https://github.com/cilium/cilium/pull/42191), [@&#8203;pippolo84](https://github.com/pippolo84))
  - 🎭 **More Configurable Masquerade**: IP Masquerade configuration can now be customized for traffic sent to nodes in other IP subnets, and addresses in IPAM pools can be excluded from masquerade ([cilium/cilium#37568](https://github.com/cilium/cilium/pull/37568), [@&#8203;behzad-mir](https://github.com/behzad-mir); [cilium/cilium#43380](https://github.com/cilium/cilium/pull/43380), [@&#8203;alimehrabikoshki](https://github.com/alimehrabikoshki))

- 🕸️ **Services and Service Mesh**
  - 📣 **Layer-2 Announcements**: Add support for Neighbor Discovery Advertisements for IPv6 Layer-2 Announcements. ([cilium/cilium#39648](https://github.com/cilium/cilium/pull/39648), [@&#8203;msune](https://github.com/msune))
  - 🔁 **IPv6 Service Loopback**: Pods can now connect to themselves via a Kubernetes "loopback service" using IPv6. ([cilium/cilium#39594](https://github.com/cilium/cilium/pull/39594), [@&#8203;saiaunghlyanhtet](https://github.com/saiaunghlyanhtet))
  - ⛩️ **Gateway API Enhancements**: Cilium's GAMMA support now includes support for using GRPCRoute as well as HTTPRoute. ([cilium/cilium#41936](https://github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://github.com/youngnick))

- 🛣️ **Border Gateway Protocol (BGP)**
  - 🔌 **Advertise Addresses from Interfaces**: There's a new Interface BGP advertisement type that allows advertisement of IPs assigned on local interfaces. This can be useful for example in multi-homing setups, where a common node's loopback address can be advertised via multiple BGP sessions over different network interfaces. ([cilium/cilium#42469](https://github.com/cilium/cilium/pull/42469), [@&#8203;rastislavs](https://github.com/rastislavs))
  - ✉️ **Override Source IP addresses**: You can override the auto-generated BGP session source IP with the IP address applied on the configured `sourceInterface` to allow binding the BGP connection to the loopback address which is not tied to the specific physical interface's lifecycle ([cilium/cilium#42583](https://github.com/cilium/cilium/pull/42583), [@&#8203;rastislavs](https://github.com/rastislavs))
  - 🔁 **Withdraw Empty Routes**: Optionally withdraw BGP routes when a service has 0 endpoints, to allow balancing to a different DC/cluster with `externalTrafficPolicy=Cluster` ([cilium/cilium#40717](https://github.com/cilium/cilium/pull/40717), [@&#8203;oblazek](https://github.com/oblazek))
  - ⚠️ **Move to `cilium.io/v2` API**: The support for the older `CiliumBGPPeeringPolicy` v1 API is now removed and should be replaced with v2 APIs. ([cilium/cilium#42278](https://github.com/cilium/cilium/pull/42278), [@&#8203;rastislavs](https://github.com/rastislavs))

- 🛰️ **Observability**
  - 🔬 **Trace IP Options**: Configure Cilium and Hubble to trace specific packets through the cluster using IP Options. ([cilium/cilium#41306](https://github.com/cilium/cilium/pull/41306), [@&#8203;Bigdelle](https://github.com/Bigdelle))
  - 🚩 **Filter Encrypted Flows**: Filter flows when using the `hubble` command line to understand the encryption status of the traffic, either `--encrypted` or `--unencrypted`. ([cilium/cilium#43096](https://github.com/cilium/cilium/pull/43096), [@&#8203;SRodi](https://github.com/SRodi))
  - 🔖 **Tag Drops with Policy Names**: Hubble v1.Events drop messages now include which Network Policy caused the drop. ([cilium/cilium#41693](https://github.com/cilium/cilium/pull/41693), [@&#8203;41ks](https://github.com/41ks))

- 🌅 **Performance and Scale**
  -  **Faster Network Policy Computation**: Improve Cilium resource usage for handling selectors in network policies. ([cilium/cilium#42008](https://github.com/cilium/cilium/pull/42008), [@&#8203;jrajahalme](https://github.com/jrajahalme); [cilium/cilium#42580](https://github.com/cilium/cilium/pull/42580), [@&#8203;odinuge](https://github.com/odinuge))
  - 🔌 **More Efficient Connection Tracking**: Several improvements have been made to reduce the number of connections being tracked by Cilium, particularly when using Geneve, VXLAN or WireGuard. ([cilium/cilium#38782](https://github.com/cilium/cilium/pull/38782), [@&#8203;BenoitKnecht](https://github.com/BenoitKnecht); [cilium/cilium#41990](https://github.com/cilium/cilium/pull/41990), [@&#8203;bersoare](https://github.com/bersoare))
  - 💾 **Better Scale in AWS**: Reduce memory usage for cilium-operator in large AWS environments with many resources. ([cilium/cilium#42529](https://github.com/cilium/cilium/pull/42529), [@&#8203;liyihuang](https://github.com/liyihuang))

- ⚙️ **Operations**
  - 📦 **Access Helm charts via Registry**: Helm charts are also available under `quay.io/cilium/charts/cilium` ([cilium/cilium#43624](https://github.com/cilium/cilium/pull/43624), [@&#8203;aanm](https://github.com/aanm))
  - 📊 **Metrics Encryption**: Add TLS/mTLS support for Prometheus metrics exposed by the Cilium Operator. ([cilium/cilium#42077](https://github.com/cilium/cilium/pull/42077), [@&#8203;phuhung273](https://github.com/phuhung273))
  - 🤖 **Easier Multi-Cluster install**: There's now support for auto-installing the Custom Resource Definitions (CRDs) for Multi-Cluster  Services (MCS). ([cilium/cilium#40729](https://github.com/cilium/cilium/pull/40729), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 📜 **Simpler Certificate Management**: Streamline Cluster Mesh and Hubble certificate generation when using GitOps approaches. ([cilium/cilium#42298](https://github.com/cilium/cilium/pull/42298), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 🛠️ **Cilium dependencies** were updated to Kubernetes v1.35, Envoy v1.35, Gateway API v1.4, and GoBGP v3.37. ([cilium/cilium#43422](https://github.com/cilium/cilium/pull/43422), [@&#8203;aanm](https://github.com/aanm); [cilium/cilium#40569](https://github.com/cilium/cilium/pull/40569), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#41936](https://github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://github.com/youngnick); [cilium/cilium#42824](https://github.com/cilium/cilium/pull/42824), [@&#8203;rastislavs](https://github.com/rastislavs)).

- 🏠 **Community**
  - ❤️ **Production Case Studies**: Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
  - 📰 See studies with [Airbnb](https://youtu.be/7KHenRXNGAw?si=ldTS-X_W0svxo429\&t=546), [Cloudera](https://aws.amazon.com/blogs/migration-and-modernization/scaling-clouderas-development-environment-leveraging-amazon-eks-karpenter-bottlerocket-and-cilium-for-hybrid-cloud/),[ Cybozu](https://www.cncf.io/case-studies/cybozu/), [ESnet](https://www.cncf.io/case-studies/esnet/),[ Nutanix](https://www.cncf.io/case-studies/nutanix/), [OVHcloud](https://corporate.ovhcloud.com/en-gb/newsroom/news/ovhcloud-managed-kubernetes-service-standard-3az/), [TikTok](https://www.youtube.com/watch?v=y0qlhiKtDGo), [University of Wisconsin–Madison](https://www.cncf.io/case-studies/university-of-wisconsin-madison/).
  - 🇺🇸 **Atlanta Events**: The community gathered at [CiliumCon](https://www.youtube.com/playlist?list=PLDg_GiBbAx-mOnWuzd_NXoRfuW9HZAxeZ) and the [Cilium Developer Summit](https://github.com/cilium/dev-summits/blob/main/2025-NA/README.md) in Atlanta.
  - 🇳🇱 **Amsterdam Events**: Meet us at the upcoming [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/) and [Cilium Developer Summit](https://github.com/cilium/dev-summits/tree/main/2026-EU) in Amsterdam, March 23-27. [Read more](https://cilium.io/blog/2026/01/23/cilium-at-kubecon-eu-2026/) about where to find Cilium during the show.
  - 🔟 **Cilium is 10**: Read the [2025 Cilium Annual Report](https://www.cncf.io/wp-content/uploads/2025/12/cilium-annual-report-2025-final.pdf) to see the latest project milestones, a decade on from its first commit.

To keep up to date with all the latest Cilium releases, join #release 🎉

:birthday::heart::heart::heart:🎂
This is a very special release for Cilium, as it celebrates **10 years** since the first commit. We couldn’t be more proud of what this project has accomplished. All the GitHub issues, pull requests, reviews, stars, forks, Docker pulls, Helm installs, Kubernetes applies, CI runs, bug reports, design docs, discussions, meetings, Slack messages, YouTube streams, eCHO episodes, conference talks, blog posts, demos, and presentations have made the project the success it is today.
:birthday::heart::heart:❤️🎂

#### Docker Manifests

##### cilium

`quay.io/cilium/cilium:v1.19.0@&#8203;sha256:be9f8571c2e114b3e12e41f785f2356ade703b2eac936aa878805565f0468c60`

##### clustermesh-apiserver

`quay.io/cilium/clustermesh-apiserver:v1.19.0@&#8203;sha256:0e3b89fdb116eb0f5579fe8ee3fabb1a7c4d97987a1ae927491d9185785d4a49`

##### docker-plugin

`quay.io/cilium/docker-plugin:v1.19.0@&#8203;sha256:35727047384f3d7a2684885003b266bf7a7add8fc66ca564b222f71c16057f50`

##### hubble-relay

`quay.io/cilium/hubble-relay:v1.19.0@&#8203;sha256:7f17e5bb51a9f35bbc8e7a9ad5e347f03ff8003c2e5cc81171e8727a10bf03b4`

##### operator-alibabacloud

`quay.io/cilium/operator-alibabacloud:v1.19.0@&#8203;sha256:5cb3d6981c233616037f3e13b5bc0020d114ad8db1b7360618b224e4c0b02ef0`

##### operator-aws

`quay.io/cilium/operator-aws:v1.19.0@&#8203;sha256:7a236ae256a4fbd3f72d516921131eba5b43f401ba37cdee5cd0e8c26f9263e6`

##### operator-azure

`quay.io/cilium/operator-azure:v1.19.0@&#8203;sha256:6ae7e0d75c74836af3600b775201c89ea7fcc13d6e08fdb0c52927309f31cd2a`

##### operator-generic

`quay.io/cilium/operator-generic:v1.19.0@&#8203;sha256:5b04006015e5800307dc6314676edc4c0bb7ac2fc7848be2b94b43bb030ab648`

##### operator

`quay.io/cilium/operator:v1.19.0@&#8203;sha256:deca84f442752dca0745dd09b13e8004569414839019ad79ac58f9fcaa3b9d65`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjMiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3715
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 04:00:17 +00:00
5490094d1a chore(deps): update helm release cilium to v1.19.0 (#3699)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/) ([source](https://github.com/cilium/cilium)) | minor | `1.18.6` → `1.19.0` |

---

### Release Notes

<details>
<summary>cilium/cilium (cilium)</summary>

### [`v1.19.0`](https://github.com/cilium/cilium/releases/tag/v1.19.0): 1.19.0

[Compare Source](https://github.com/cilium/cilium/compare/1.18.6...1.19.0)

🎉 **Release Announcement** 🎉: We are excited to announce the [Cilium 1.19.0](https://github.com/cilium/cilium/releases/tag/v1.19.0) release!

A total of **2934 new commits** have been contributed to this release by a growing community of over **1010 developers** and over **23,600 GitHub stars**! 🤩

⚠️ You may need to take action during upgrade to Cilium v1.19 if you use Network Policies, Cluster Mesh, LoadBalancer IPAM or BGP. See the [Upgrade Guide](https://docs.cilium.io/en/v1.19/operations/upgrade/#upgrade-notes) for more details.

The full changelog can be found [here](https://github.com/cilium/cilium/blob/v1.19/CHANGELOG.md).

Here are some of the highlights:

- 🛡️ **Network Policy**
  - 🃏 **Multi-Level DNS Matches**: DNS Policies match pattern now support a wildcard prefix(*`**.`*) to match multilevel subdomain as pattern prefix. ([cilium/cilium#43420](https://github.com/cilium/cilium/pull/43420), [@&#8203;fristonio](https://github.com/fristonio))
  - 📡 **Match New Protocols**: You can now match VRRP and IGMP protocols in host firewall rules. ([cilium/cilium#39872](https://github.com/cilium/cilium/pull/39872), [@&#8203;aditighag](https://github.com/aditighag); [cilium/cilium#41949](https://github.com/cilium/cilium/pull/41949), [@&#8203;kyounghunJang](https://github.com/kyounghunJang))
  -  **Actively Deny Connections**: When Network Policies deny a connection, Cilium can return ICMPv4 "Destination unreachable" messages for a friendlier deny. ([cilium/cilium#41406](https://github.com/cilium/cilium/pull/41406), [@&#8203;antonipp](https://github.com/antonipp))
  - 🌐 **Select Clusters Explicitly**: When network policy selectors don't explicitly define a cluster for communication to be allowed, they will now default to only allowing the local cluster. ([cilium/cilium#40609](https://github.com/cilium/cilium/pull/40609), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 🔧 **Unlock Future Work**: This release brings several internal improvements to the network policy engine in preparation for features planned in the next Cilium minor release ([cilium/cilium#39906](https://github.com/cilium/cilium/pull/39906), [@&#8203;vipul-21](https://github.com/vipul-21); [cilium/cilium#42784](https://github.com/cilium/cilium/pull/42784), [cilium/cilium#42896](https://github.com/cilium/cilium/pull/42896), [@&#8203;jrajahalme](https://github.com/jrajahalme))
  - ⚠️ **Deprecate underutilized features**: To focus on solving common problems Cilium users face, this release deprecates the Kafka protocol match fields (beta), as well as the `ToRequires` and `FromRequires` policy fields. ([cilium/cilium#43167](https://github.com/cilium/cilium/pull/43167), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#40967](https://github.com/cilium/cilium/pull/40967), [@&#8203;TheBeeZee](https://github.com/TheBeeZee))

- 🔒 **Encryption & Authentication**
  - 🔐 **Encryption Strict Modes**: Both IPsec and WireGuard transparent encryption modes now support a "strict mode" to require traffic to be encrypted between nodes. Unencrypted traffic will be dropped in this mode. ([cilium/cilium#39239](https://github.com/cilium/cilium/pull/39239), [cilium/cilium#42115](https://github.com/cilium/cilium/pull/42115), [@&#8203;rgo3](https://github.com/rgo3), [@&#8203;julianwiedmann](https://github.com/julianwiedmann))
  - 🚇 **Ztunnel Beta**: You can enroll namespaces into Ztunnel, which enables TCP connections between workloads to be transparently encrypted and authenticated. ([cilium/cilium#42766](https://github.com/cilium/cilium/pull/42766), [cilium/cilium#42819](https://github.com/cilium/cilium/pull/42819), [cilium/cilium#43227](https://github.com/cilium/cilium/pull/43227) and others,  [@&#8203;ldelossa](https://github.com/ldelossa), [@&#8203;rgo3](https://github.com/rgo3), [@&#8203;nddq](https://github.com/nddq))
  - 👥 **Mutual Authentication**: The out-of-band [Mutual Authentication](https://docs.cilium.io/en/v1.19.0/network/servicemesh/mutual-authentication/mutual-authentication/) feature is now disabled by default, pending community feedback. If you have a requirement for mTLS, consider trying the new Ztunnel integration. ([cilium/cilium#42665](https://github.com/cilium/cilium/pull/42665), [@&#8203;christarazi](https://github.com/christarazi))
  - ↪️ **Accelerate IPsec**: The IPsec encryption mode now supports BPF Host Routing for faster route lookups ([cilium/cilium#41997](https://github.com/cilium/cilium/pull/41997), [@&#8203;pchaigno](https://github.com/pchaigno))

- 🚠 **Networking**
  - 🚀  **BIG TCP in Tunnels**: Leverage upcoming Linux support for BIG TCP when communicating over UDP-based tunnels such as VXLAN and Geneve. ([cilium/cilium#43416](https://github.com/cilium/cilium/pull/43416), [@&#8203;gentoo-root](https://github.com/gentoo-root))
  - 🥌 **Packetization-Layer Path MTU Discovery**: Detect maximum transmission unit (MTU) sizes for network paths using TCP. ([cilium/cilium#42012](https://github.com/cilium/cilium/pull/42012), [cilium/cilium#43710](https://github.com/cilium/cilium/pull/43710), [@&#8203;tommyp1ckles](https://github.com/tommyp1ckles))
  - 🚆 **IPv6 Underlay**: You can now choose IPv6 for the tunnel underlay address family on dual-stack clusters. ([cilium/cilium#40324](https://github.com/cilium/cilium/pull/40324), [@&#8203;pchaigno](https://github.com/pchaigno))
  - 🏷️ **Multi-Pool IPAM is ready for wider use**: Update the Multi-Pool IPAM feature to work with IPsec and direct routing modes, and promote it from Beta to Stable. ([cilium/cilium#40460](https://github.com/cilium/cilium/pull/40460), [cilium/cilium#42191](https://github.com/cilium/cilium/pull/42191), [@&#8203;pippolo84](https://github.com/pippolo84))
  - 🎭 **More Configurable Masquerade**: IP Masquerade configuration can now be customized for traffic sent to nodes in other IP subnets, and addresses in IPAM pools can be excluded from masquerade ([cilium/cilium#37568](https://github.com/cilium/cilium/pull/37568), [@&#8203;behzad-mir](https://github.com/behzad-mir); [cilium/cilium#43380](https://github.com/cilium/cilium/pull/43380), [@&#8203;alimehrabikoshki](https://github.com/alimehrabikoshki))

- 🕸️ **Services and Service Mesh**
  - 📣 **Layer-2 Announcements**: Add support for Neighbor Discovery Advertisements for IPv6 Layer-2 Announcements. ([cilium/cilium#39648](https://github.com/cilium/cilium/pull/39648), [@&#8203;msune](https://github.com/msune))
  - 🔁 **IPv6 Service Loopback**: Pods can now connect to themselves via a Kubernetes "loopback service" using IPv6. ([cilium/cilium#39594](https://github.com/cilium/cilium/pull/39594), [@&#8203;saiaunghlyanhtet](https://github.com/saiaunghlyanhtet))
  - ⛩️ **Gateway API Enhancements**: Cilium's GAMMA support now includes support for using GRPCRoute as well as HTTPRoute. ([cilium/cilium#41936](https://github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://github.com/youngnick))

- 🛣️ **Border Gateway Protocol (BGP)**
  - 🔌 **Advertise Addresses from Interfaces**: There's a new Interface BGP advertisement type that allows advertisement of IPs assigned on local interfaces. This can be useful for example in multi-homing setups, where a common node's loopback address can be advertised via multiple BGP sessions over different network interfaces. ([cilium/cilium#42469](https://github.com/cilium/cilium/pull/42469), [@&#8203;rastislavs](https://github.com/rastislavs))
  - ✉️ **Override Source IP addresses**: You can override the auto-generated BGP session source IP with the IP address applied on the configured `sourceInterface` to allow binding the BGP connection to the loopback address which is not tied to the specific physical interface's lifecycle ([cilium/cilium#42583](https://github.com/cilium/cilium/pull/42583), [@&#8203;rastislavs](https://github.com/rastislavs))
  - 🔁 **Withdraw Empty Routes**: Optionally withdraw BGP routes when a service has 0 endpoints, to allow balancing to a different DC/cluster with `externalTrafficPolicy=Cluster` ([cilium/cilium#40717](https://github.com/cilium/cilium/pull/40717), [@&#8203;oblazek](https://github.com/oblazek))
  - ⚠️ **Move to `cilium.io/v2` API**: The support for the older `CiliumBGPPeeringPolicy` v1 API is now removed and should be replaced with v2 APIs. ([cilium/cilium#42278](https://github.com/cilium/cilium/pull/42278), [@&#8203;rastislavs](https://github.com/rastislavs))

- 🛰️ **Observability**
  - 🔬 **Trace IP Options**: Configure Cilium and Hubble to trace specific packets through the cluster using IP Options. ([cilium/cilium#41306](https://github.com/cilium/cilium/pull/41306), [@&#8203;Bigdelle](https://github.com/Bigdelle))
  - 🚩 **Filter Encrypted Flows**: Filter flows when using the `hubble` command line to understand the encryption status of the traffic, either `--encrypted` or `--unencrypted`. ([cilium/cilium#43096](https://github.com/cilium/cilium/pull/43096), [@&#8203;SRodi](https://github.com/SRodi))
  - 🔖 **Tag Drops with Policy Names**: Hubble v1.Events drop messages now include which Network Policy caused the drop. ([cilium/cilium#41693](https://github.com/cilium/cilium/pull/41693), [@&#8203;41ks](https://github.com/41ks))

- 🌅 **Performance and Scale**
  -  **Faster Network Policy Computation**: Improve Cilium resource usage for handling selectors in network policies. ([cilium/cilium#42008](https://github.com/cilium/cilium/pull/42008), [@&#8203;jrajahalme](https://github.com/jrajahalme); [cilium/cilium#42580](https://github.com/cilium/cilium/pull/42580), [@&#8203;odinuge](https://github.com/odinuge))
  - 🔌 **More Efficient Connection Tracking**: Several improvements have been made to reduce the number of connections being tracked by Cilium, particularly when using Geneve, VXLAN or WireGuard. ([cilium/cilium#38782](https://github.com/cilium/cilium/pull/38782), [@&#8203;BenoitKnecht](https://github.com/BenoitKnecht); [cilium/cilium#41990](https://github.com/cilium/cilium/pull/41990), [@&#8203;bersoare](https://github.com/bersoare))
  - 💾 **Better Scale in AWS**: Reduce memory usage for cilium-operator in large AWS environments with many resources. ([cilium/cilium#42529](https://github.com/cilium/cilium/pull/42529), [@&#8203;liyihuang](https://github.com/liyihuang))

- ⚙️ **Operations**
  - 📦 **Access Helm charts via Registry**: Helm charts are also available under `quay.io/cilium/charts/cilium` ([cilium/cilium#43624](https://github.com/cilium/cilium/pull/43624), [@&#8203;aanm](https://github.com/aanm))
  - 📊 **Metrics Encryption**: Add TLS/mTLS support for Prometheus metrics exposed by the Cilium Operator. ([cilium/cilium#42077](https://github.com/cilium/cilium/pull/42077), [@&#8203;phuhung273](https://github.com/phuhung273))
  - 🤖 **Easier Multi-Cluster install**: There's now support for auto-installing the Custom Resource Definitions (CRDs) for Multi-Cluster  Services (MCS). ([cilium/cilium#40729](https://github.com/cilium/cilium/pull/40729), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 📜 **Simpler Certificate Management**: Streamline Cluster Mesh and Hubble certificate generation when using GitOps approaches. ([cilium/cilium#42298](https://github.com/cilium/cilium/pull/42298), [@&#8203;MrFreezeex](https://github.com/MrFreezeex))
  - 🛠️ **Cilium dependencies** were updated to Kubernetes v1.35, Envoy v1.35, Gateway API v1.4, and GoBGP v3.37. ([cilium/cilium#43422](https://github.com/cilium/cilium/pull/43422), [@&#8203;aanm](https://github.com/aanm); [cilium/cilium#40569](https://github.com/cilium/cilium/pull/40569), [@&#8203;sayboras](https://github.com/sayboras); [cilium/cilium#41936](https://github.com/cilium/cilium/pull/41936), [@&#8203;youngnick](https://github.com/youngnick); [cilium/cilium#42824](https://github.com/cilium/cilium/pull/42824), [@&#8203;rastislavs](https://github.com/rastislavs)).

- 🏠 **Community**
  - ❤️ **Production Case Studies**: Many end-users have stepped forward to tell their stories running Cilium in production. If your company wants to submit their case studies let us know. We would love to hear your feedback!
  - 📰 See studies with [Airbnb](https://youtu.be/7KHenRXNGAw?si=ldTS-X_W0svxo429\&t=546), [Cloudera](https://aws.amazon.com/blogs/migration-and-modernization/scaling-clouderas-development-environment-leveraging-amazon-eks-karpenter-bottlerocket-and-cilium-for-hybrid-cloud/),[ Cybozu](https://www.cncf.io/case-studies/cybozu/), [ESnet](https://www.cncf.io/case-studies/esnet/),[ Nutanix](https://www.cncf.io/case-studies/nutanix/), [OVHcloud](https://corporate.ovhcloud.com/en-gb/newsroom/news/ovhcloud-managed-kubernetes-service-standard-3az/), [TikTok](https://www.youtube.com/watch?v=y0qlhiKtDGo), [University of Wisconsin–Madison](https://www.cncf.io/case-studies/university-of-wisconsin-madison/).
  - 🇺🇸 **Atlanta Events**: The community gathered at [CiliumCon](https://www.youtube.com/playlist?list=PLDg_GiBbAx-mOnWuzd_NXoRfuW9HZAxeZ) and the [Cilium Developer Summit](https://github.com/cilium/dev-summits/blob/main/2025-NA/README.md) in Atlanta.
  - 🇳🇱 **Amsterdam Events**: Meet us at the upcoming [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/) and [Cilium Developer Summit](https://github.com/cilium/dev-summits/tree/main/2026-EU) in Amsterdam, March 23-27. [Read more](https://cilium.io/blog/2026/01/23/cilium-at-kubecon-eu-2026/) about where to find Cilium during the show.
  - 🔟 **Cilium is 10**: Read the [2025 Cilium Annual Report](https://www.cncf.io/wp-content/uploads/2025/12/cilium-annual-report-2025-final.pdf) to see the latest project milestones, a decade on from its first commit.

To keep up to date with all the latest Cilium releases, join #release 🎉

:birthday::heart::heart::heart:🎂
This is a very special release for Cilium, as it celebrates **10 years** since the first commit. We couldn’t be more proud of what this project has accomplished. All the GitHub issues, pull requests, reviews, stars, forks, Docker pulls, Helm installs, Kubernetes applies, CI runs, bug reports, design docs, discussions, meetings, Slack messages, YouTube streams, eCHO episodes, conference talks, blog posts, demos, and presentations have made the project the success it is today.
:birthday::heart::heart:❤️🎂

##### Docker Manifests

##### cilium

`quay.io/cilium/cilium:v1.19.0@&#8203;sha256:be9f8571c2e114b3e12e41f785f2356ade703b2eac936aa878805565f0468c60`

##### clustermesh-apiserver

`quay.io/cilium/clustermesh-apiserver:v1.19.0@&#8203;sha256:0e3b89fdb116eb0f5579fe8ee3fabb1a7c4d97987a1ae927491d9185785d4a49`

##### docker-plugin

`quay.io/cilium/docker-plugin:v1.19.0@&#8203;sha256:35727047384f3d7a2684885003b266bf7a7add8fc66ca564b222f71c16057f50`

##### hubble-relay

`quay.io/cilium/hubble-relay:v1.19.0@&#8203;sha256:7f17e5bb51a9f35bbc8e7a9ad5e347f03ff8003c2e5cc81171e8727a10bf03b4`

##### operator-alibabacloud

`quay.io/cilium/operator-alibabacloud:v1.19.0@&#8203;sha256:5cb3d6981c233616037f3e13b5bc0020d114ad8db1b7360618b224e4c0b02ef0`

##### operator-aws

`quay.io/cilium/operator-aws:v1.19.0@&#8203;sha256:7a236ae256a4fbd3f72d516921131eba5b43f401ba37cdee5cd0e8c26f9263e6`

##### operator-azure

`quay.io/cilium/operator-azure:v1.19.0@&#8203;sha256:6ae7e0d75c74836af3600b775201c89ea7fcc13d6e08fdb0c52927309f31cd2a`

##### operator-generic

`quay.io/cilium/operator-generic:v1.19.0@&#8203;sha256:5b04006015e5800307dc6314676edc4c0bb7ac2fc7848be2b94b43bb030ab648`

##### operator

`quay.io/cilium/operator:v1.19.0@&#8203;sha256:deca84f442752dca0745dd09b13e8004569414839019ad79ac58f9fcaa3b9d65`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3699
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-05 03:59:16 +00:00
19ffd3bb2f feat: switch gateway
All checks were successful
lint-test-helm / lint-helm (push) Successful in 16s
render-manifests-push / render-manifests-push (push) Successful in 50s
lint-test-docker / lint-docker-compose (push) Successful in 1m20s
renovate / renovate (push) Successful in 1m45s
2026-02-04 21:55:11 -06:00
b973102274 feat: change address
All checks were successful
lint-test-helm / lint-helm (push) Successful in 21s
render-manifests-push / render-manifests-push (push) Successful in 48s
renovate / renovate (push) Successful in 1m50s
2026-02-04 21:53:49 -06:00
c1860ad8fd feat: add address
All checks were successful
lint-test-helm / lint-helm (push) Successful in 18s
render-manifests-push / render-manifests-push (push) Successful in 30s
renovate / renovate (push) Successful in 1m44s
2026-02-04 21:45:55 -06:00
cc1bab42ae feat: enable gateway
All checks were successful
lint-test-helm / lint-helm (push) Successful in 16s
render-manifests-push / render-manifests-push (push) Successful in 31s
renovate / renovate (push) Successful in 1m33s
2026-02-04 21:34:23 -06:00
521184fa37 feat: upgrade crd before 1.19
Some checks failed
lint-test-helm / lint-helm (push) Successful in 14s
render-manifests-push / render-manifests-push (push) Successful in 48s
renovate / renovate (push) Has been cancelled
2026-02-04 21:33:03 -06:00
470520fb2f feat: use slim image
All checks were successful
lint-test-helm / lint-helm (push) Successful in 13s
render-manifests-push / render-manifests-push (push) Successful in 42s
renovate / renovate (push) Successful in 2m3s
2026-02-04 21:25:52 -06:00
5a91c1d870 chore(deps): update nginx docker tag to v1.29.5 (#3724)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 1m23s
render-manifests-dispatch / render-manifests-dispatch (push) Successful in 22m36s
2026-02-05 02:02:54 +00:00
95faf21426 chore(deps): update hashicorp/vault docker tag to v1.21.3 (#3723)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-02-05 02:02:44 +00:00
9983ab5ff6 feat: remove watchtower
Some checks failed
lint-test-docker / lint-docker-compose (push) Failing after 26s
renovate / renovate (push) Has been cancelled
2026-02-05 02:01:17 +00:00
c1e1199008 chore(deps): update plexguide/huntarr to v9.1.12 (#3721)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 15s
renovate / renovate (push) Successful in 2m11s
2026-02-04 21:02:34 +00:00
a34b97702c chore(deps): update ghcr.io/home-assistant/home-assistant docker tag to v2026.2.0 (#3720)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 18s
renovate / renovate (push) Successful in 2m10s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/home-assistant/home-assistant](https://www.home-assistant.io/) ([source](https://github.com/home-assistant/core)) | minor | `2026.1.3` → `2026.2.0` |

---

### Release Notes

<details>
<summary>home-assistant/core (ghcr.io/home-assistant/home-assistant)</summary>

### [`v2026.2.0`](https://github.com/home-assistant/core/releases/tag/2026.2.0)

[Compare Source](https://github.com/home-assistant/core/compare/2026.1.3...2026.2.0)

<https://www.home-assistant.io/blog/2026/02/04/release-20262/>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3720
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 20:12:33 +00:00
a0284d28f0 chore(deps): update dependency home-assistant/core to v2026.2.0 (#3719)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 22s
renovate / renovate (push) Successful in 2m6s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [home-assistant/core](https://github.com/home-assistant/core) | minor | `2026.1.3` → `2026.2.0` |

---

### Release Notes

<details>
<summary>home-assistant/core (home-assistant/core)</summary>

### [`v2026.2.0`](https://github.com/home-assistant/core/releases/tag/2026.2.0)

[Compare Source](https://github.com/home-assistant/core/compare/2026.1.3...2026.2.0)

<https://www.home-assistant.io/blog/2026/02/04/release-20262/>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3719
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 20:08:08 +00:00
be4bb8466d chore(deps): update dependency clidey/whodb to v0.91.0 (#3718)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clidey/whodb](https://github.com/clidey/whodb) | minor | `0.90.0` → `0.91.0` |

---

### Release Notes

<details>
<summary>clidey/whodb (clidey/whodb)</summary>

### [`v0.91.0`](https://github.com/clidey/whodb/releases/tag/0.91.0)

[Compare Source](https://github.com/clidey/whodb/compare/0.90.0...0.91.0)

- SSL Support - our biggest change of the year so far! We've added support for the various SSL modes that the databases generally support
- Ability to disable the credential form via env key WHODB\_DISABLE\_CREDENTIAL\_FORM=true and expose only pre-defined env proifles (thanks to [@&#8203;orangutangent](https://github.com/orangutangent)!)
- Health logic - now if your server or database goes down, WhoDB will let you know and let you connect to an alternative profile
- Mock data generation improvements - we now support foreign keys as well as more data types and more relevant data based on the types (thanks to [@&#8203;majiayu000](https://github.com/majiayu000)!)
- CLI improvements including prompt injection protection, HTTP streaming, safe mode, better descriptions, and more. Check it out <https://www.npmjs.com/package/@&#8203;clidey/whodb-cli>
- General bug fixes

Please report any issues you run into at <https://github.com/clidey/whodb/issues>

#### Installation

##### Mac App Store

[Download from the Apple Store](https://apps.apple.com/app/whodb/id6754566536)

##### Microsoft Store

[Download from the Microsoft Store](https://apps.microsoft.com/detail/9pftx5bv4ds6)

##### Snap Store

```bash
sudo snap install whodb
```

[View on Snapcraft](https://snapcraft.io/whodb)

##### Docker

```bash
docker pull clidey/whodb:0.91.0
docker pull clidey/whodb:latest
```

##### Direct Downloads

See assets below for platform-specific packages (DMG, MSIX, etc.).

#### Documentation

- [Documentation](https://docs.whodb.com)
- [Report Issues](https://github.com/clidey/whodb/issues)

#### Upgrade Notes

To upgrade from a previous version:

- **Docker**: Pull the latest image and restart your container
- **Snap**: Run `sudo snap refresh whodb`
- **Desktop Apps**: Download and install the new version

***

#### What's Changed

- Feature/588 disable credential form by [@&#8203;orangutangent](https://github.com/orangutangent) in [#&#8203;790](https://github.com/clidey/whodb/pull/790)
- Ssl by [@&#8203;modelorona](https://github.com/modelorona) in [#&#8203;777](https://github.com/clidey/whodb/pull/777)

#### New Contributors

- [@&#8203;orangutangent](https://github.com/orangutangent) made their first contribution in [#&#8203;790](https://github.com/clidey/whodb/pull/790)

**Full Changelog**: <https://github.com/clidey/whodb/compare/0.90.1...0.91.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3718
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 20:06:31 +00:00
b36c0a141e chore(deps): update dependency argoproj/argo-workflows to v4 (#3714)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Successful in 2m38s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [argoproj/argo-workflows](https://github.com/argoproj/argo-workflows) | major | `v3.7.9` → `v4.0.0` |

---

### Release Notes

<details>
<summary>argoproj/argo-workflows (argoproj/argo-workflows)</summary>

### [`v4.0.0`](https://github.com/argoproj/argo-workflows/blob/HEAD/CHANGELOG.md#v400-2026-02-04)

[Compare Source](https://github.com/argoproj/argo-workflows/compare/v3.7.9...v4.0.0)

Full Changelog: [v4.0.0-rc4...v4.0.0](https://github.com/argoproj/argo-workflows/compare/v4.0.0-rc4...v4.0.0)

##### Selected Changes

- [a8bff4a72](a8bff4a721) fix(security): update qs to 6.14.1 ([#&#8203;15427](https://github.com/argoproj/argo-workflows/issues/15427))

<details><summary><h3>Contributors</h3></summary>

- Alan Clucas

</details>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjMiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3714
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 19:28:56 +00:00
6e7a69e28f chore(deps): update helm release plugin-barman-cloud to v0.5.0 (#3716)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Failing after 3s
renovate / renovate (push) Successful in 1m51s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [plugin-barman-cloud](https://cloudnative-pg.io) ([source](https://github.com/cloudnative-pg/charts)) | minor | `0.4.0` → `0.5.0` |

---

### Release Notes

<details>
<summary>cloudnative-pg/charts (plugin-barman-cloud)</summary>

### [`v0.5.0`](https://github.com/cloudnative-pg/charts/releases/tag/plugin-barman-cloud-v0.5.0)

[Compare Source](https://github.com/cloudnative-pg/charts/compare/plugin-barman-cloud-v0.4.0...plugin-barman-cloud-v0.5.0)

Helm Chart for CloudNativePG's CNPG-I backup plugin using Barman Cloud

#### What's Changed

- docs: add security policy by [@&#8203;zied-jt](https://github.com/zied-jt) in [#&#8203;621](https://github.com/cloudnative-pg/charts/pull/621)
- fix(cloudnative-pg): queries identation in cnpg-default-monitoring by [@&#8203;ryan4yin](https://github.com/ryan4yin) in [#&#8203;650](https://github.com/cloudnative-pg/charts/pull/650)
- docs( cluster ): Improved Runbooks and monitoring by [@&#8203;philippemnoel](https://github.com/philippemnoel) in [#&#8203;774](https://github.com/cloudnative-pg/charts/pull/774)
- feat(plugin-barman-cloud): Add imagePullSecrets to deployment.yaml by [@&#8203;faymard](https://github.com/faymard) in [#&#8203;704](https://github.com/cloudnative-pg/charts/pull/704)
- feat([#&#8203;727](https://github.com/cloudnative-pg/charts/issues/727)): add container and pod security context configuration via values by [@&#8203;Fuochi](https://github.com/Fuochi) in [#&#8203;728](https://github.com/cloudnative-pg/charts/pull/728)
- chore(deps): update Grafana Helm Chart dependency version by [@&#8203;justsomescripts](https://github.com/justsomescripts) in [#&#8203;784](https://github.com/cloudnative-pg/charts/pull/784)
- feat( cluster ): Add support for console stateful set by [@&#8203;philippemnoel](https://github.com/philippemnoel) in [#&#8203;782](https://github.com/cloudnative-pg/charts/pull/782)
- Release plugin-barman-cloud-v0.5.0 by [@&#8203;cnpg-bot](https://github.com/cnpg-bot) in [#&#8203;803](https://github.com/cloudnative-pg/charts/pull/803)

#### New Contributors

- [@&#8203;zied-jt](https://github.com/zied-jt) made their first contribution in [#&#8203;621](https://github.com/cloudnative-pg/charts/pull/621)
- [@&#8203;ryan4yin](https://github.com/ryan4yin) made their first contribution in [#&#8203;650](https://github.com/cloudnative-pg/charts/pull/650)
- [@&#8203;faymard](https://github.com/faymard) made their first contribution in [#&#8203;704](https://github.com/cloudnative-pg/charts/pull/704)
- [@&#8203;Fuochi](https://github.com/Fuochi) made their first contribution in [#&#8203;728](https://github.com/cloudnative-pg/charts/pull/728)
- [@&#8203;justsomescripts](https://github.com/justsomescripts) made their first contribution in [#&#8203;784](https://github.com/cloudnative-pg/charts/pull/784)

**Full Changelog**: <https://github.com/cloudnative-pg/charts/compare/plugin-barman-cloud-v0.4.0...plugin-barman-cloud-v0.5.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4wLjIiLCJ1cGRhdGVkSW5WZXIiOiI0My4wLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3716
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-04 19:26:06 +00:00
52 changed files with 142 additions and 120 deletions

View File

@@ -29,4 +29,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
# renovate: datasource=github-releases depName=argoproj/argo-workflows # renovate: datasource=github-releases depName=argoproj/argo-workflows
appVersion: v3.7.9 appVersion: v4.0.0

View File

@@ -1,6 +1,6 @@
dependencies: dependencies:
- name: argo-cd - name: argo-cd
repository: https://argoproj.github.io/argo-helm repository: https://argoproj.github.io/argo-helm
version: 9.4.0 version: 9.4.1
digest: sha256:9313d45f1c8c22f25b445b10c3befde61bc7d6e3d9c7f49d857c0abf641b1636 digest: sha256:6686031538b67a4b79a89b90de06199758c4718a9b7e0a0e6863a5be8964ed9d
generated: "2026-02-02T23:52:13.741194572Z" generated: "2026-02-05T20:06:46.998124019Z"

View File

@@ -15,7 +15,7 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: argo-cd - name: argo-cd
version: 9.4.0 version: 9.4.1
repository: https://argoproj.github.io/argo-helm repository: https://argoproj.github.io/argo-helm
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
# renovate: datasource=github-releases depName=argoproj/argo-cd # renovate: datasource=github-releases depName=argoproj/argo-cd

View File

@@ -3,4 +3,4 @@ dependencies:
repository: https://helm.cilium.io/ repository: https://helm.cilium.io/
version: 1.18.6 version: 1.18.6
digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
generated: "2026-01-14T11:02:31.272963463Z" generated: "2026-02-05T12:00:20.15778-06:00"

View File

@@ -1,4 +1,4 @@
# apiVersion: cilium.io/v2alpha1 # apiVersion: cilium.io/v2
# kind: CiliumBGPAdvertisement # kind: CiliumBGPAdvertisement
# metadata: # metadata:
# name: cilium-bgp-advertisements # name: cilium-bgp-advertisements

View File

@@ -1,4 +1,4 @@
# apiVersion: cilium.io/v2alpha1 # apiVersion: cilium.io/v2
# kind: CiliumBGPClusterConfig # kind: CiliumBGPClusterConfig
# metadata: # metadata:
# name: cilium-bgp # name: cilium-bgp

View File

@@ -1,4 +1,4 @@
# apiVersion: cilium.io/v2alpha1 # apiVersion: cilium.io/v2
# kind: CiliumBGPPeerConfig # kind: CiliumBGPPeerConfig
# metadata: # metadata:
# name: cilium-peer # name: cilium-peer

View File

@@ -1,17 +1,16 @@
# apiVersion: "cilium.io/v2alpha1" # apiVersion: "cilium.io/v2alpha1"
# kind: CiliumL2AnnouncementPolicy # kind: CiliumL2AnnouncementPolicy
# metadata: # metadata:
# name: general-l2-policy # name: node-gateway-l2-policy
# namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
# labels: # labels:
# app.kubernetes.io/name: general-l2-policy # app.kubernetes.io/name: node-gateway-l2-policy
# app.kubernetes.io/instance: {{ .Release.Name }} # app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/part-of: {{ .Release.Name }} # app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: # spec:
# nodeSelector: # nodeSelector:
# matchExpressions: # matchLabels:
# - key: kubernetes.io/hostname # kubernetes.io/hostname: talos-ix7-xku
# operator: Exists
# interfaces: # interfaces:
# - end0 # - end0
# - enp6s0 # - enp6s0

View File

@@ -1,4 +1,4 @@
apiVersion: "cilium.io/v2alpha1" apiVersion: cilium.io/v2
kind: CiliumLoadBalancerIPPool kind: CiliumLoadBalancerIPPool
metadata: metadata:
name: default-ip-pool name: default-ip-pool
@@ -15,7 +15,7 @@ spec:
stop: "10.232.2.23" stop: "10.232.2.23"
--- ---
apiVersion: "cilium.io/v2alpha1" apiVersion: cilium.io/v2
kind: CiliumLoadBalancerIPPool kind: CiliumLoadBalancerIPPool
metadata: metadata:
name: bgp-ip-pool name: bgp-ip-pool

View File

@@ -4,25 +4,22 @@
# name: cilium-tls-gateway # name: cilium-tls-gateway
# namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
# labels: # labels:
# app.kubernetes.io/name: tls-gateway # app.kubernetes.io/name: cilium-tls-gateway
# app.kubernetes.io/instance: {{ .Release.Name }} # app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/part-of: {{ .Release.Name }} # app.kubernetes.io/part-of: {{ .Release.Name }}
# annotations: # annotations:
# cert-manager.io/cluster-issuer: letsencrypt-issuer # cert-manager.io/cluster-issuer: letsencrypt-issuer
# io.cilium/lb-ipam-ips: "10.232.1.23"
# spec: # spec:
# addresses:
# - type: IPAddress
# value: 10.232.1.23
# gatewayClassName: cilium # gatewayClassName: cilium
# listeners: # listeners:
# - allowedRoutes: # - allowedRoutes:
# namespaces: # namespaces:
# from: All # from: All
# hostname: '*.alexlebens.net' # hostname: '*.alexlebens.net'
# name: http
# port: 80
# protocol: HTTP
# - allowedRoutes:
# namespaces:
# from: All
# hostname: '*.alexlebens.net'
# name: https # name: https
# port: 443 # port: 443
# protocol: HTTPS # protocol: HTTPS
@@ -33,3 +30,17 @@
# name: https-gateway-cert # name: https-gateway-cert
# namespace: kube-system # namespace: kube-system
# mode: Terminate # mode: Terminate
# - allowedRoutes:
# namespaces:
# from: All
# hostname: 'alexlebens.net'
# name: https-domain
# port: 443
# protocol: HTTPS
# tls:
# certificateRefs:
# - group: ''
# kind: Secret
# name: https-gateway-cert
# namespace: kube-system
# mode: Terminate

View File

@@ -35,6 +35,8 @@ cilium:
enabled: true enabled: true
routerIDAllocation: routerIDAllocation:
mode: "default" mode: "default"
bpf:
hostLegacyRouting: true
devices: end0 enp6s0 devices: end0 enp6s0
enableK8sEndpointSlice: true enableK8sEndpointSlice: true
ciliumEndpointSlice: ciliumEndpointSlice:

View File

@@ -1,9 +1,9 @@
dependencies: dependencies:
- name: cloudnative-pg - name: cloudnative-pg
repository: https://cloudnative-pg.io/charts/ repository: https://cloudnative-pg.io/charts/
version: 0.27.0 version: 0.27.1
- name: plugin-barman-cloud - name: plugin-barman-cloud
repository: https://cloudnative-pg.io/charts/ repository: https://cloudnative-pg.io/charts/
version: 0.4.0 version: 0.5.0
digest: sha256:5e2a32fa5ed8b180ae5e556d65c67eeb3dcf38e2974b0d668eff4ee3c83258ce digest: sha256:e7089ffd089cae87529e28f0e71302b9fc4a869b389cbb6628f1c559644a3a10
generated: "2025-12-30T21:01:48.755246408Z" generated: "2026-02-05T19:36:19.473447121Z"

View File

@@ -16,11 +16,11 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: cloudnative-pg - name: cloudnative-pg
version: 0.27.0 version: 0.27.1
repository: https://cloudnative-pg.io/charts/ repository: https://cloudnative-pg.io/charts/
- name: plugin-barman-cloud - name: plugin-barman-cloud
version: 0.4.0 version: 0.5.0
repository: https://cloudnative-pg.io/charts/ repository: https://cloudnative-pg.io/charts/
icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4 icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
# renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
appVersion: 1.28.0 appVersion: 1.28.1

View File

@@ -33,4 +33,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
# renovate: datasource=github-releases depName=directus/directus # renovate: datasource=github-releases depName=directus/directus
appVersion: 11.14.1 appVersion: 11.15.0

View File

@@ -9,7 +9,7 @@ directus:
main: main:
image: image:
repository: directus/directus repository: directus/directus
tag: 11.14.1 tag: 11.15.0
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: PUBLIC_URL - name: PUBLIC_URL

View File

@@ -201,7 +201,7 @@ postgres-18-cluster:
backup: backup:
objectStore: objectStore:
- name: garage-local - name: garage-local
index: 1 index: 2
destinationBucket: postgres-backups destinationBucket: postgres-backups
externalSecretCredentialPath: /garage/home-infra/postgres-backups externalSecretCredentialPath: /garage/home-infra/postgres-backups
isWALArchiver: true isWALArchiver: true

View File

@@ -105,7 +105,7 @@ postgres-18-cluster:
backup: backup:
objectStore: objectStore:
- name: garage-local - name: garage-local
index: 1 index: 2
destinationBucket: postgres-backups destinationBucket: postgres-backups
externalSecretCredentialPath: /garage/home-infra/postgres-backups externalSecretCredentialPath: /garage/home-infra/postgres-backups
isWALArchiver: true isWALArchiver: true

View File

@@ -1,6 +1,6 @@
dependencies: dependencies:
- name: headlamp - name: headlamp
repository: https://kubernetes-sigs.github.io/headlamp/ repository: https://kubernetes-sigs.github.io/headlamp/
version: 0.39.0 version: 0.40.0
digest: sha256:870e456773199684c150585c12c2e18b3f0895ee8cc73481a53b23c8e94560b1 digest: sha256:b7f8f176f8c4902130e87660adb39211fd5ca454f89f5a7e9ed577cd4c3a2255
generated: "2025-12-20T00:03:40.10414707Z" generated: "2026-02-05T18:23:45.100522813Z"

View File

@@ -14,8 +14,8 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: headlamp - name: headlamp
version: 0.39.0 version: 0.40.0
repository: https://kubernetes-sigs.github.io/headlamp/ repository: https://kubernetes-sigs.github.io/headlamp/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
# renovate: datasource=github-releases depName=headlamp-k8s/headlamp # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
appVersion: v0.39.0 appVersion: v0.40.0

View File

@@ -25,4 +25,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
# renovate: datasource=github-releases depName=home-assistant/core # renovate: datasource=github-releases depName=home-assistant/core
appVersion: 2026.1.3 appVersion: 2026.2.0

View File

@@ -9,7 +9,7 @@ home-assistant:
main: main:
image: image:
repository: ghcr.io/home-assistant/home-assistant repository: ghcr.io/home-assistant/home-assistant
tag: 2026.1.3 tag: 2026.2.0
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: TZ - name: TZ

View File

@@ -24,4 +24,4 @@ dependencies:
version: 2.2.2 version: 2.2.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
# renovate: datasource=github-releases depName=gethomepage/homepage # renovate: datasource=github-releases depName=gethomepage/homepage
appVersion: v1.9.0 appVersion: v1.10.1

View File

@@ -11,7 +11,7 @@ homepage:
main: main:
image: image:
repository: ghcr.io/gethomepage/homepage repository: ghcr.io/gethomepage/homepage
tag: v1.9.0 tag: v1.10.1
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: HOMEPAGE_ALLOWED_HOSTS - name: HOMEPAGE_ALLOWED_HOSTS

View File

@@ -19,4 +19,4 @@ dependencies:
version: 4.6.2 version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
# renovate: datasource=github-releases depName=gethomepage/homepage # renovate: datasource=github-releases depName=gethomepage/homepage
appVersion: v1.9.0 appVersion: v1.10.1

View File

@@ -15,7 +15,7 @@ homepage:
main: main:
image: image:
repository: ghcr.io/gethomepage/homepage repository: ghcr.io/gethomepage/homepage
tag: v1.9.0 tag: v1.10.1
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: HOMEPAGE_ALLOWED_HOSTS - name: HOMEPAGE_ALLOWED_HOSTS

View File

@@ -23,4 +23,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
# renovate: datasource=github-releases depName=plexguide/huntarr # renovate: datasource=github-releases depName=plexguide/huntarr
appVersion: 9.1.9 appVersion: 9.2.1

View File

@@ -9,7 +9,7 @@ huntarr:
main: main:
image: image:
repository: ghcr.io/plexguide/huntarr repository: ghcr.io/plexguide/huntarr
tag: 9.1.9 tag: 9.2.1
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: TZ - name: TZ

View File

@@ -47,3 +47,33 @@ spec:
key: /authentik/oidc/komodo key: /authentik/oidc/komodo
metadataPolicy: None metadataPolicy: None
property: secret property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: komodo-postgresql-17-fdb-cluster-ferret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster-ferret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: uri
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/ferret
metadataPolicy: None
property: uri
- secretKey: password
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/ferret
metadataPolicy: None
property: password

View File

@@ -53,14 +53,11 @@ komodo:
- name: PERIPHERY_SSL_ENABLED - name: PERIPHERY_SSL_ENABLED
value: false value: false
- name: DB_USERNAME - name: DB_USERNAME
valueFrom: value: ferret
secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-app
key: user
- name: DB_PASSWORD - name: DB_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-app name: komodo-postgresql-17-fdb-cluster-ferret
key: password key: password
- name: KOMODO_DATABASE_URI - name: KOMODO_DATABASE_URI
value: mongodb://$(DB_USERNAME):$(DB_PASSWORD)@komodo-ferretdb-2.komodo:27017/komodo value: mongodb://$(DB_USERNAME):$(DB_PASSWORD)@komodo-ferretdb-2.komodo:27017/komodo
@@ -98,11 +95,15 @@ komodo:
tag: 2.7.0 tag: 2.7.0
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: FERRETDB_POSTGRESQL_URL - name: DB_USERNAME
value: ferret
- name: DB_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-app name: komodo-postgresql-17-fdb-cluster-ferret
key: uri key: password
- name: FERRETDB_POSTGRESQL_URL
value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
resources: resources:
requests: requests:
cpu: 10m cpu: 10m
@@ -198,9 +199,9 @@ postgresql-17-fdb-cluster:
database: ferretDB database: ferretDB
owner: ferret owner: ferret
postInitApplicationSQL: postInitApplicationSQL:
- create extension if not exists pg_cron; - CREATE EXTENSION IF NOT EXISTS pg_cron;
- create extension if not exists documentdb cascade; - CREATE EXTENSION IF NOT EXISTS documentdb CASCADE;
- grant documentdb_admin_role to ferret; - GRANT documentdb_admin_role TO ferret;
recovery: recovery:
method: objectStore method: objectStore
objectStore: objectStore:
@@ -208,7 +209,7 @@ postgresql-17-fdb-cluster:
backup: backup:
objectStore: objectStore:
- name: garage-local - name: garage-local
index: 1 index: 2
destinationBucket: postgres-backups destinationBucket: postgres-backups
externalSecretCredentialPath: /garage/home-infra/postgres-backups externalSecretCredentialPath: /garage/home-infra/postgres-backups
isWALArchiver: true isWALArchiver: true

View File

@@ -1,9 +1,9 @@
dependencies: dependencies:
- name: loki - name: loki
repository: https://grafana.github.io/helm-charts repository: https://grafana.github.io/helm-charts
version: 6.51.0 version: 6.52.0
- name: alloy - name: alloy
repository: https://grafana.github.io/helm-charts repository: https://grafana.github.io/helm-charts
version: 1.5.3 version: 1.6.0
digest: sha256:88c8067aa21d8dd0e994e9ab7ff39eed17bdd993eea853721fd42aedb4bec400 digest: sha256:097f893b362b3ba6a1498d6df00dc57030c4d1321cf3301268adb9e30d5043ed
generated: "2026-02-02T17:28:04.623156-06:00" generated: "2026-02-05T22:01:50.699662067Z"

View File

@@ -16,10 +16,10 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: loki - name: loki
version: 6.51.0 version: 6.52.0
repository: https://grafana.github.io/helm-charts repository: https://grafana.github.io/helm-charts
- name: alloy - name: alloy
version: 1.5.3 version: 1.6.0
repository: https://grafana.github.io/helm-charts repository: https://grafana.github.io/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
# renovate: datasource=github-releases depName=grafana/loki # renovate: datasource=github-releases depName=grafana/loki

View File

@@ -31,4 +31,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
# renovate: datasource=github-releases depName=ollama/ollama # renovate: datasource=github-releases depName=ollama/ollama
appVersion: 0.15.4 appVersion: 0.15.5

View File

@@ -22,7 +22,7 @@ ollama:
main: main:
image: image:
repository: ollama/ollama repository: ollama/ollama
tag: 0.15.4 tag: 0.15.5
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: OLLAMA_KEEP_ALIVE - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
main: main:
image: image:
repository: ollama/ollama repository: ollama/ollama
tag: 0.15.4 tag: 0.15.5
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: OLLAMA_KEEP_ALIVE - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
main: main:
image: image:
repository: ollama/ollama repository: ollama/ollama
tag: 0.15.4 tag: 0.15.5
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: OLLAMA_KEEP_ALIVE - name: OLLAMA_KEEP_ALIVE

View File

@@ -1,12 +1,12 @@
dependencies: dependencies:
- name: rook-ceph - name: rook-ceph
repository: https://charts.rook.io/release repository: https://charts.rook.io/release
version: v1.19.0 version: v1.19.1
- name: rook-ceph-cluster - name: rook-ceph-cluster
repository: https://charts.rook.io/release repository: https://charts.rook.io/release
version: v1.19.0 version: v1.19.1
- name: cloudflared - name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts repository: oci://harbor.alexlebens.net/helm-charts
version: 2.2.2 version: 2.2.2
digest: sha256:edc2a4064d509365e371418609b4068674429526c0198ca1793867124bb5dcdb digest: sha256:fbb82644c29122639312301d76b2f2300f2a86eeb17159e9f368b2d46e4e6a7c
generated: "2026-02-03T03:44:06.685680039Z" generated: "2026-02-06T03:39:57.898917443Z"

View File

@@ -16,10 +16,10 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: rook-ceph - name: rook-ceph
version: v1.19.0 version: v1.19.1
repository: https://charts.rook.io/release repository: https://charts.rook.io/release
- name: rook-ceph-cluster - name: rook-ceph-cluster
version: v1.19.0 version: v1.19.1
repository: https://charts.rook.io/release repository: https://charts.rook.io/release
- name: cloudflared - name: cloudflared
alias: cloudflared-rgw alias: cloudflared-rgw
@@ -27,4 +27,4 @@ dependencies:
version: 2.2.2 version: 2.2.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
# renovate: datasource=github-releases depName=rook/rook # renovate: datasource=github-releases depName=rook/rook
appVersion: v1.19.0 appVersion: v1.19.1

View File

@@ -58,7 +58,7 @@ roundcube:
nginx: nginx:
image: image:
repository: nginx repository: nginx
tag: 1.29.4-alpine tag: 1.29.5-alpine-slim
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: NGINX_HOST - name: NGINX_HOST

View File

@@ -9,7 +9,7 @@ searxng:
main: main:
image: image:
repository: searxng/searxng repository: searxng/searxng
tag: latest@sha256:8d77102a0d2c615e88c5184868dc2c32cd361413dbc104abc301f54079fd40a2 tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: SEARXNG_BASE_URL - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
main: main:
image: image:
repository: searxng/searxng repository: searxng/searxng
tag: latest@sha256:8d77102a0d2c615e88c5184868dc2c32cd361413dbc104abc301f54079fd40a2 tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: SEARXNG_BASE_URL - name: SEARXNG_BASE_URL

View File

@@ -1,6 +1,6 @@
dependencies: dependencies:
- name: tailscale-operator - name: tailscale-operator
repository: https://pkgs.tailscale.com/helmcharts repository: https://pkgs.tailscale.com/helmcharts
version: 1.92.5 version: 1.94.1
digest: sha256:75f2ca2d5932228c484b5f6b535d61786a0246c8c4d6947466d03a0c0a614ce0 digest: sha256:194c4f0a24b460064db0e2cda00226de0d85a764d9eaab26b1cbb337e7e9a750
generated: "2026-01-07T01:54:43.539104104Z" generated: "2026-02-05T19:56:58.797357494Z"

View File

@@ -17,7 +17,7 @@ maintainers:
- name: alexlebens - name: alexlebens
dependencies: dependencies:
- name: tailscale-operator - name: tailscale-operator
version: 1.92.5 version: 1.94.1
repository: https://pkgs.tailscale.com/helmcharts repository: https://pkgs.tailscale.com/helmcharts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
# renovate: datasource=github-releases depName=tailscale/tailscale # renovate: datasource=github-releases depName=tailscale/tailscale

View File

@@ -12,7 +12,7 @@ vault:
enabled: true enabled: true
image: image:
repository: hashicorp/vault repository: hashicorp/vault
tag: 1.21.2 tag: 1.21.3
updateStrategyType: "RollingUpdate" updateStrategyType: "RollingUpdate"
logLevel: debug logLevel: debug
logFormat: standard logFormat: standard
@@ -170,7 +170,7 @@ snapshot:
snapshot: snapshot:
image: image:
repository: hashicorp/vault repository: hashicorp/vault
tag: 1.21.2 tag: 1.21.3
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
command: command:
- /bin/ash - /bin/ash

View File

@@ -20,4 +20,4 @@ dependencies:
version: 4.6.2 version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/whodb.png icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/whodb.png
# renovate: datasource=github-releases depName=clidey/whodb # renovate: datasource=github-releases depName=clidey/whodb
appVersion: 0.90.0 appVersion: 0.91.0

View File

@@ -8,7 +8,7 @@ whodb:
main: main:
image: image:
repository: clidey/whodb repository: clidey/whodb
tag: 0.90.0 tag: 0.91.0
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
env: env:
- name: WHODB_OLLAMA_HOST - name: WHODB_OLLAMA_HOST

View File

@@ -1,7 +1,7 @@
--- ---
services: services:
tailscale-blocky: tailscale-blocky:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-blocky container_name: tailscale-blocky
cap_add: cap_add:
- net_admin - net_admin

View File

@@ -1,7 +1,7 @@
--- ---
services: services:
tailscale-blocky: tailscale-blocky:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-blocky container_name: tailscale-blocky
cap_add: cap_add:
- net_admin - net_admin

View File

@@ -1,7 +1,7 @@
--- ---
services: services:
tailscale-blocky: tailscale-blocky:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-blocky container_name: tailscale-blocky
cap_add: cap_add:
- net_admin - net_admin

View File

@@ -1,6 +1,6 @@
services: services:
tailscale-garage: tailscale-garage:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-garage container_name: tailscale-garage
cap_add: cap_add:
- net_admin - net_admin
@@ -20,7 +20,7 @@ services:
- /dev/net/tun:/dev/net/tun - /dev/net/tun:/dev/net/tun
tailscale-garage-ui: tailscale-garage-ui:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-garage-ui container_name: tailscale-garage-ui
cap_add: cap_add:
- net_admin - net_admin

View File

@@ -1,6 +1,6 @@
services: services:
tailscale-gitea: tailscale-gitea:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-gitea container_name: tailscale-gitea
cap_add: cap_add:
- net_admin - net_admin

View File

@@ -1,7 +1,7 @@
--- ---
services: services:
tailscale-homepage: tailscale-homepage:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-homepage container_name: tailscale-homepage
cap_add: cap_add:
- net_admin - net_admin
@@ -32,7 +32,7 @@ services:
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
homepage: homepage:
image: ghcr.io/gethomepage/homepage:v1.9.0 image: ghcr.io/gethomepage/homepage:v1.10.1
container_name: homepage container_name: homepage
labels: labels:
traefik.enable: true traefik.enable: true

View File

@@ -12,8 +12,6 @@ services:
- TS_HOSTNAME=komodo-periphery-ps10rp - TS_HOSTNAME=komodo-periphery-ps10rp
env_file: env_file:
- .ts-env - .ts-env
labels:
- "com.centurylinklabs.watchtower.scope=komodo"
network_mode: service:komodo-periphery network_mode: service:komodo-periphery
restart: always restart: always
volumes: volumes:
@@ -21,23 +19,6 @@ services:
devices: devices:
- /dev/net/tun:/dev/net/tun - /dev/net/tun:/dev/net/tun
watchtower:
image: ghcr.io/containrrr/watchtower:latest
container_name: komodo-periphery-watchtower
command: --scope komodo
environment:
- TZ=America/Chicago
- WATCHTOWER_HTTP_API_METRICS=true
- WATCHTOWER_HTTP_API_TOKEN=token
- WATCHTOWER_CLEANUP=true
- WATCHTOWER_POLL_INTERVAL=3600
labels:
- "com.centurylinklabs.watchtower.scope=komodo"
network_mode: service:komodo-periphery
restart: always
volumes:
- /var/run/docker.sock:/var/run/docker.sock
komodo-periphery: komodo-periphery:
image: ghcr.io/moghtech/komodo-periphery:latest image: ghcr.io/moghtech/komodo-periphery:latest
container_name: komodo-periphery container_name: komodo-periphery
@@ -45,8 +26,6 @@ services:
- .env - .env
environment: environment:
- TZ=America/Chicago - TZ=America/Chicago
labels:
- "com.centurylinklabs.watchtower.scope=komodo"
restart: always restart: always
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock

View File

@@ -1,7 +1,7 @@
--- ---
services: services:
tailscale-node-exporter: tailscale-node-exporter:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-node-exporter container_name: tailscale-node-exporter
cap_add: cap_add:
- net_admin - net_admin

View File

@@ -1,7 +1,7 @@
--- ---
services: services:
tailscale: tailscale:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-subnet container_name: tailscale-subnet
cap_add: cap_add:
- net_admin - net_admin

View File

@@ -1,7 +1,7 @@
--- ---
services: services:
tailscale-traefik: tailscale-traefik:
image: ghcr.io/tailscale/tailscale:v1.92.5 image: ghcr.io/tailscale/tailscale:v1.94.1
container_name: tailscale-traefik container_name: tailscale-traefik
cap_add: cap_add:
- net_admin - net_admin