Update actions/checkout action to v5

Update searxng/searxng:latest Docker digest to e479206 (#1935 )
Update ghcr.io/immich-app/immich-server Docker tag to v2.2.2 (#1934 )
2025-11-03 22:02:33 +00:00 · 2025-11-03 22:01:29 +00:00 · 2025-11-03 16:01:56 +00:00 · 2025-11-03 16:01:47 +00:00 · 2025-11-03 14:01:47 +00:00 · 2025-11-03 03:13:32 +00:00
49 changed files with 89 additions and 89 deletions
--- a/.gitea/workflows/lint-test-docker.yaml
+++ b/.gitea/workflows/lint-test-docker.yaml
@@ -20,7 +20,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
        with:
          fetch-depth: 0

--- a/.gitea/workflows/lint-test-helm.yaml
+++ b/.gitea/workflows/lint-test-helm.yaml
@@ -20,7 +20,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
        with:
          fetch-depth: 0

--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -16,7 +16,7 @@ jobs:
    container: ghcr.io/renovatebot/renovate:41
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5

      - name: Renovate
        run: renovate
--- a/clusters/cl01tl/applications/directus/values.yaml
+++ b/clusters/cl01tl/applications/directus/values.yaml
@@ -179,7 +179,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/directus/directus-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/directus/directus-postgresql-17-cluster
@@ -187,7 +187,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: directus-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/directus/directus-postgresql-17-cluster
--- a/clusters/cl01tl/applications/freshrss/values.yaml
+++ b/clusters/cl01tl/applications/freshrss/values.yaml
@@ -216,7 +216,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/freshrss/freshrss-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/freshrss/freshrss-postgresql-17-cluster
@@ -224,7 +224,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: freshrss-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/freshrss/freshrss-postgresql-17-cluster
--- a/clusters/cl01tl/applications/immich/values.yaml
+++ b/clusters/cl01tl/applications/immich/values.yaml
@@ -9,7 +9,7 @@ immich:
        main:
          image:
            repository: ghcr.io/immich-app/immich-server
-            tag: v2.2.1
+            tag: v2.2.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -99,7 +99,7 @@ immich:
        main:
          image:
            repository: ghcr.io/immich-app/immich-machine-learning
-            tag: v2.2.1
+            tag: v2.2.2
            pullPolicy: IfNotPresent
          env:
            - name: TRANSFORMERS_CACHE
@@ -225,7 +225,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/immich/immich-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/immich/immich-postgresql-17-cluster
@@ -233,7 +233,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: immich-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/immich/immich-postgresql-17-cluster
--- a/clusters/cl01tl/applications/jellyfin/values.yaml
+++ b/clusters/cl01tl/applications/jellyfin/values.yaml
@@ -9,7 +9,7 @@ jellyfin:
        main:
          image:
            repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.1
+            tag: 10.11.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/jellystat/values.yaml
+++ b/clusters/cl01tl/applications/jellystat/values.yaml
@@ -101,7 +101,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/jellystat/jellystat-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/jellystat/jellystat-postgresql-17-cluster
@@ -109,7 +109,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: jellystat-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/jellystat/jellystat-postgresql-17-cluster
--- a/clusters/cl01tl/applications/libation/values.yaml
+++ b/clusters/cl01tl/applications/libation/values.yaml
@@ -16,7 +16,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 12.5.6
+            tag: 12.5.7
            pullPolicy: IfNotPresent
          env:
            - name: SLEEP_TIME
--- a/clusters/cl01tl/applications/lidarr/values.yaml
+++ b/clusters/cl01tl/applications/lidarr/values.yaml
@@ -116,7 +116,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/lidarr2/lidarr2-postgresql-17-cluster
        index: 1
        endpointCredentials: lidarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/lidarr/lidarr2-postgresql-17-cluster
@@ -124,7 +124,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: lidarr-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/lidarr/lidarr2-postgresql-17-cluster
--- a/clusters/cl01tl/applications/outline/values.yaml
+++ b/clusters/cl01tl/applications/outline/values.yaml
@@ -168,7 +168,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster
@@ -176,7 +176,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: outline-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster
--- a/clusters/cl01tl/applications/photoview/values.yaml
+++ b/clusters/cl01tl/applications/photoview/values.yaml
@@ -95,7 +95,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/photoview/photoview-postgresql-17-cluster
@@ -103,7 +103,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: photoview-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/photoview/photoview-postgresql-17-cluster
--- a/clusters/cl01tl/applications/postiz/values.yaml
+++ b/clusters/cl01tl/applications/postiz/values.yaml
@@ -128,7 +128,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/postiz/postiz-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/postiz/postiz-postgresql-17-cluster
@@ -136,7 +136,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: postiz-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/postiz/postiz-postgresql-17-cluster
--- a/clusters/cl01tl/applications/radarr-4k/values.yaml
+++ b/clusters/cl01tl/applications/radarr-4k/values.yaml
@@ -116,7 +116,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster
        index: 1
        endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/radarr-4k/radarr5-4k-postgresql-17-cluster
@@ -124,7 +124,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/radarr-4k/radarr5-4k-postgresql-17-cluster
--- a/clusters/cl01tl/applications/radarr-anime/values.yaml
+++ b/clusters/cl01tl/applications/radarr-anime/values.yaml
@@ -110,7 +110,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster
        index: 1
        endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/radarr-anime/radarr5-anime-postgresql-17-cluster
@@ -118,7 +118,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/radarr-anime/radarr5-anime-postgresql-17-cluster
--- a/clusters/cl01tl/applications/radarr-standup/values.yaml
+++ b/clusters/cl01tl/applications/radarr-standup/values.yaml
@@ -110,7 +110,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster
        index: 1
        endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/radarr-standup/radarr5-standup-postgresql-17-cluster
@@ -118,7 +118,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/radarr-standup/radarr5-standup-postgresql-17-cluster
--- a/clusters/cl01tl/applications/radarr/values.yaml
+++ b/clusters/cl01tl/applications/radarr/values.yaml
@@ -116,7 +116,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster
        index: 2
        endpointCredentials: radarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/radarr/radarr5-postgresql-17-cluster
@@ -124,7 +124,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: radarr-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/radarr/radarr5-postgresql-17-cluster
--- a/clusters/cl01tl/applications/roundcube/values.yaml
+++ b/clusters/cl01tl/applications/roundcube/values.yaml
@@ -228,7 +228,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/roundcube/roundcube-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/roundcube/roundcube-postgresql-17-cluster
@@ -236,7 +236,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: roundcube-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/roundcube/roundcube-postgresql-17-cluster
--- a/clusters/cl01tl/applications/searxng/values.yaml
+++ b/clusters/cl01tl/applications/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:70d60ffb95eaf99e23203ada5f3f0c634dfb7177e176a9b9f79c328bba42243e
+            tag: latest@sha256:e479206b72bc16054000c06d04574bc93f4abe1adbaa6432037bd806c0acabed
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:70d60ffb95eaf99e23203ada5f3f0c634dfb7177e176a9b9f79c328bba42243e
+            tag: latest@sha256:e479206b72bc16054000c06d04574bc93f4abe1adbaa6432037bd806c0acabed
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/applications/sonarr-4k/values.yaml
+++ b/clusters/cl01tl/applications/sonarr-4k/values.yaml
@@ -113,7 +113,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-4k/sonarr4-4k-postgresql-17-cluster
        index: 1
        endpointCredentials: sonarr-4k-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/sonarr-4k/sonarr4-4k-postgresql-17-cluster
@@ -121,7 +121,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: sonarr-4k-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/sonarr-4k/sonarr4-4k-postgresql-17-cluster
--- a/clusters/cl01tl/applications/sonarr-anime/values.yaml
+++ b/clusters/cl01tl/applications/sonarr-anime/values.yaml
@@ -113,7 +113,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-anime/sonarr4-anime-postgresql-17-cluster
        index: 1
        endpointCredentials: sonarr-anime-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/sonarr-anime/sonarr4-anime-postgresql-17-cluster
@@ -121,7 +121,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: sonarr-anime-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
    #   - name: garage-remote
    #     destinationPath: s3://postgres-backups/cl01tl/sonarr-anime/sonarr4-anime-postgresql-17-cluster
--- a/clusters/cl01tl/applications/sonarr/values.yaml
+++ b/clusters/cl01tl/applications/sonarr/values.yaml
@@ -114,7 +114,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4/sonarr4-postgresql-17-cluster
        index: 1
        endpointCredentials: sonarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/sonarr/sonarr4-postgresql-17-cluster
@@ -122,7 +122,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: sonarr-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/sonarr/sonarr4-postgresql-17-cluster
--- a/clusters/cl01tl/applications/vaultwarden/values.yaml
+++ b/clusters/cl01tl/applications/vaultwarden/values.yaml
@@ -72,7 +72,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
@@ -80,7 +80,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: vaultwarden-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
--- a/clusters/cl01tl/applications/yamtrack/values.yaml
+++ b/clusters/cl01tl/applications/yamtrack/values.yaml
@@ -92,7 +92,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/yamtrack/yamtrack-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/yamtrack/yamtrack-postgresql-17-cluster
@@ -100,7 +100,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: yamtrack-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/yamtrack/yamtrack-postgresql-17-cluster
--- a/clusters/cl01tl/management/argo-workflows/values.yaml
+++ b/clusters/cl01tl/management/argo-workflows/values.yaml
@@ -112,7 +112,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
@@ -120,7 +120,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: argo-workflows-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
--- a/clusters/cl01tl/management/headlamp/Chart.yaml
+++ b/clusters/cl01tl/management/headlamp/Chart.yaml
@@ -14,7 +14,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: headlamp
-    version: 0.36.0
+    version: 0.37.0
    repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 appVersion: 0.30.1
--- a/clusters/cl01tl/management/komodo/values.yaml
+++ b/clusters/cl01tl/management/komodo/values.yaml
@@ -201,7 +201,7 @@ postgresql-17-fdb-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/komodo/komodo-postgresql-17-fdb-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/komodo/komodo-postgresql-17-cluster
@@ -209,7 +209,7 @@ postgresql-17-fdb-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: komodo-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/komodo/komodo-postgresql-17-cluster
--- a/clusters/cl01tl/monitoring/gatus/values.yaml
+++ b/clusters/cl01tl/monitoring/gatus/values.yaml
@@ -394,7 +394,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/gatus/gatus-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/gatus/gatus-postgresql-17-cluster
@@ -402,7 +402,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: gatus-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/gatus/gatus-postgresql-17-cluster
--- a/clusters/cl01tl/monitoring/grafana-operator/values.yaml
+++ b/clusters/cl01tl/monitoring/grafana-operator/values.yaml
@@ -35,7 +35,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/grafana-operator/grafana-operator-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/grafana-operator/grafana-operator-postgresql-17-cluster
@@ -43,7 +43,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: grafana-operator-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/grafana-operator/grafana-operator-postgresql-17-cluster
--- a/clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
@@ -19,7 +19,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 79.0.1
+    version: 79.1.1
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/monitoring/loki/Chart.yaml
+++ b/clusters/cl01tl/monitoring/loki/Chart.yaml
@@ -16,10 +16,10 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 6.45.0
+    version: 6.44.0
    repository: https://grafana.github.io/helm-charts
  - name: promtail
-    version: 6.17.0
+    version: 6.17.1
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 appVersion: 3.4.2
--- a/clusters/cl01tl/platform/authentik/values.yaml
+++ b/clusters/cl01tl/platform/authentik/values.yaml
@@ -73,7 +73,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/authentik/authentik-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/authentik/authentik-postgresql-17-cluster
@@ -81,7 +81,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: authentik-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/authentik/authentik-postgresql-17-cluster
--- a/clusters/cl01tl/platform/gitea/values.yaml
+++ b/clusters/cl01tl/platform/gitea/values.yaml
@@ -343,7 +343,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/gitea/gitea-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/gitea/gitea-postgresql-17-cluster
@@ -351,7 +351,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: gitea-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/gitea/gitea-postgresql-17-cluster
--- a/clusters/cl01tl/platform/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/platform/matrix-synapse/values.yaml
@@ -320,7 +320,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
@@ -328,7 +328,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
--- a/clusters/cl01tl/platform/n8n/values.yaml
+++ b/clusters/cl01tl/platform/n8n/values.yaml
@@ -9,7 +9,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.118.1
+            tag: 1.119.0
            pullPolicy: IfNotPresent
          env:
            - name: GENERIC_TIMEZONE
@@ -93,7 +93,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.118.1
+            tag: 1.119.0
            pullPolicy: IfNotPresent
          command:
            - n8n
@@ -188,7 +188,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.118.1
+            tag: 1.119.0
            pullPolicy: IfNotPresent
          command:
            - n8n
@@ -336,7 +336,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/n8n/n8n-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/n8n/n8n-postgresql-17-cluster
@@ -344,7 +344,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: n8n-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/n8n/n8n-postgresql-17-cluster
--- a/clusters/cl01tl/platform/ollama/values.yaml
+++ b/clusters/cl01tl/platform/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.12.7
+            tag: 0.12.9
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.12.7
+            tag: 0.12.9
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.12.7
+            tag: 0.12.9
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -261,7 +261,7 @@ postgres-17-cluster:
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/ollama/ollama-web-postgresql-17-cluster
        index: 1
        endpointCredentials: ollama-web-postgresql-17-cluster-backup-secret
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/ollama/ollama-web-postgresql-17-cluster
@@ -269,7 +269,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: ollama-web-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/ollama/ollama-web-postgresql-17-cluster
--- a/clusters/cl01tl/platform/qbittorrent/values.yaml
+++ b/clusters/cl01tl/platform/qbittorrent/values.yaml
@@ -28,7 +28,7 @@ qbittorrent:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.2@sha256:098d4340c0709a9ddbc7010ca21900238388454e20182d52b9723b40a2a44293
+            tag: 5.1.2@sha256:3908cec5685242ab49b4842124df38c7ff09f82e543c17e0f81e883788f6a611
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/platform/stalwart/values.yaml
+++ b/clusters/cl01tl/platform/stalwart/values.yaml
@@ -77,7 +77,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/stalwart/stalwart-postgresql-17-cluster
        index: 1
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-17-cluster
@@ -85,7 +85,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: stalwart-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-17-cluster
--- a/clusters/cl01tl/services/harbor/values.yaml
+++ b/clusters/cl01tl/services/harbor/values.yaml
@@ -117,7 +117,7 @@ postgres-17-cluster:
      - name: external
        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/harbor/harbor-postgresql-17-cluster
        index: 2
-        retentionPolicy: "7d"
+        retentionPolicy: "30d"
        isWALArchiver: false
      - name: garage-local
        destinationPath: s3://postgres-backups/cl01tl/harbor/harbor-postgresql-17-cluster
@@ -125,7 +125,7 @@ postgres-17-cluster:
        endpointURL: http://garage-main.garage:3900
        endpointCredentials: harbor-postgresql-17-cluster-backup-secret-garage
        endpointCredentialsIncludeRegion: true
-        retentionPolicy: "7d"
+        retentionPolicy: "3d"
        isWALArchiver: true
      # - name: garage-remote
      #   destinationPath: s3://postgres-backups/cl01tl/harbor/harbor-postgresql-17-cluster
--- a/clusters/cl01tl/services/tailscale-operator/Chart.yaml
+++ b/clusters/cl01tl/services/tailscale-operator/Chart.yaml
@@ -17,7 +17,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: tailscale-operator
-    version: 1.90.5
+    version: 1.90.6
    repository: https://pkgs.tailscale.com/helmcharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
 appVersion: v1.82.5
--- a/hosts/ps08rp/blocky/compose.yaml
+++ b/hosts/ps08rp/blocky/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-blocky
        cap_add:
            - net_admin
--- a/hosts/ps09rp/blocky/compose.yaml
+++ b/hosts/ps09rp/blocky/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-blocky
        cap_add:
            - net_admin
--- a/hosts/ps10rp/blocky/compose.yaml
+++ b/hosts/ps10rp/blocky/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-blocky
        cap_add:
            - net_admin
--- a/hosts/ps10rp/garage/compose.yaml
+++ b/hosts/ps10rp/garage/compose.yaml
@@ -1,6 +1,6 @@
 services:
    tailscale-garage:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-garage
        cap_add:
            - net_admin
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    tailscale-garage-ui:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-garage-ui
        cap_add:
            - net_admin
--- a/hosts/ps10rp/gitea/compose.yaml
+++ b/hosts/ps10rp/gitea/compose.yaml
@@ -1,6 +1,6 @@
 services:
    tailscale-gitea:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-gitea
        cap_add:
            - net_admin
--- a/hosts/ps10rp/homepage/compose.yaml
+++ b/hosts/ps10rp/homepage/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-homepage:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-homepage
        cap_add:
            - net_admin
--- a/hosts/ps10rp/node-exporter/compose.yaml
+++ b/hosts/ps10rp/node-exporter/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-node-exporter:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-node-exporter
        cap_add:
            - net_admin
--- a/hosts/ps10rp/tailscale-subnet/compose.yaml
+++ b/hosts/ps10rp/tailscale-subnet/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-subnet
        cap_add:
            - net_admin
--- a/hosts/ps10rp/traefik/compose.yaml
+++ b/hosts/ps10rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-traefik:
-        image: ghcr.io/tailscale/tailscale:v1.90.5
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-traefik
        cap_add:
            - net_admin
Author	SHA1	Message	Date
Renovate Bot	1f049d95ff	Update actions/checkout action to v5 Some checks failed lint-test-helm / helm-lint (pull_request) Failing after 2s Details	2025-11-03 22:02:33 +00:00
Renovate Bot	b071c42ed3	Update searxng/searxng:latest Docker digest to e479206 (#1935 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 14s Details renovate / renovate (push) Successful in 1m34s Details	2025-11-03 22:01:29 +00:00
Renovate Bot	bd20cf1401	Update ghcr.io/immich-app/immich-server Docker tag to v2.2.2 (#1934 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 9s Details renovate / renovate (push) Successful in 1m4s Details	2025-11-03 16:01:56 +00:00
Renovate Bot	f3657abe7f	Update ghcr.io/immich-app/immich-machine-learning Docker tag to v2.2.2 (#1933 ) Some checks failed lint-test-helm / helm-lint (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2025-11-03 16:01:47 +00:00
Renovate Bot	5ea084ac90	Update ghcr.io/n8n-io/n8n Docker tag to v1.119.0 (#1932 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 10s Details renovate / renovate (push) Successful in 1m23s Details	2025-11-03 14:01:47 +00:00
Renovate Bot	dd3ae84859	Update ghcr.io/jellyfin/jellyfin Docker tag to v10.11.2 (#1931 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 10s Details renovate / renovate (push) Successful in 1m43s Details	2025-11-03 03:13:32 +00:00
Alex Lebens	cbf83e1e46	adjust retention Some checks failed lint-test-helm / helm-lint (push) Successful in 10s Details renovate / renovate (push) Has been cancelled Details	2025-11-02 21:12:02 -06:00
Alex Lebens	db54f4697e	downgrade All checks were successful lint-test-helm / helm-lint (push) Successful in 11s Details renovate / renovate (push) Successful in 56s Details	2025-11-02 20:36:26 -06:00
Renovate Bot	75448f609b	Update kube-prometheus-stack Docker tag to v79.1.1 (#1929 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 9s Details renovate / renovate (push) Successful in 1m4s Details	2025-11-02 21:01:28 +00:00
Renovate Bot	b95135e937	Update rmcrackan/libation Docker tag to v12.5.7 (#1928 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 12s Details renovate / renovate (push) Successful in 1m17s Details	2025-11-02 18:01:45 +00:00
Renovate Bot	14569ea6cf	Update ghcr.io/linuxserver/qbittorrent:5.1.2 Docker digest to 3908cec (#1927 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 9s Details renovate / renovate (push) Successful in 1m34s Details	2025-11-02 08:01:29 +00:00
Renovate Bot	e404f81d2f	Update ollama/ollama Docker tag to v0.12.9 (#1926 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 15s Details renovate / renovate (push) Successful in 1m20s Details	2025-11-02 06:01:39 +00:00
Renovate Bot	880036042a	Update Helm release loki to v6.45.2 (#1918 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 9s Details renovate / renovate (push) Successful in 1m21s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) \| minor \| `6.44.0` -> `6.45.2` \| --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTUuNSIsInVwZGF0ZWRJblZlciI6IjQxLjE1NS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaGFydCJdfQ==--> Reviewed-on: #1918 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-11-02 03:28:55 +00:00
Renovate Bot	ac4bc45543	Update Helm release headlamp to v0.37.0 (#1923 ) Some checks failed lint-test-helm / helm-lint (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [headlamp](https://headlamp.dev/) ([source](https://github.com/kubernetes-sigs/headlamp)) \| minor \| `0.36.0` -> `0.37.0` \| --- ### Release Notes <details> <summary>kubernetes-sigs/headlamp (headlamp)</summary> ### [`v0.37.0`](https://github.com/kubernetes-sigs/headlamp/releases/tag/v0.37.0): 0.37.0 [Compare Source](https://github.com/kubernetes-sigs/headlamp/compare/v0.36.0...v0.37.0) #### ✨ Enhancements: - Load time of Desktop app up to 60% faster - Add Default and Parameters columns to Ingress Class List. Thanks to [@jaehanbyun](https://github.com/jaehanbyun) - Add cluster links to project details status section - Add default indicator column to StorageClassesTable. Thanks to [@jaehanbyun](https://github.com/jaehanbyun) - Set namespace from search - Enabled Helm support in the backend via --enable-helm flag. Thanks to [@muraliinformal](https://github.com/muraliinformal) - Add Helm support to in-cluster Headlamp with vanilla Helm repos. Thanks to [@shahvrushali22](https://github.com/shahvrushali22) and [@muraliinformal](https://github.com/muraliinformal) from Oracle - Add an authenticated "service proxy" used by the new helm repo support. Thanks to [@shahvrushali22](https://github.com/shahvrushali22) and [@muraliinformal](https://github.com/muraliinformal) from Oracle - Add missing fields and subsection to Network Policy - Implement kebab menu for table row actions. There is now a consistent kebab menu (vertical dots) for all table row actions across the application, replacing the previous horizontal dots icon. Thanks to [@jaehanbyun](https://github.com/jaehanbyun) - Add Headlamp user agent and Headlamp version to Kubernetes API requests - Show user information in OIDC authenticated clusters users per cluster-scoped user info via endpoint - Add PKCE OIDC support to improve OIDC security. Off by default. To enable with helm add `config.oidc.usePKCE: true`. Or add `-oidc-use-pkce=true` to headlamp-server flags. ##### User information for OIDC Clusters Displayed The user that is logged in is displayed in the top bar for clusters configured with OIDC. ![Screenshot of username in the top bar of headlamp](https://github.com/user-attachments/assets/3cb09f59-3a40-41b3-8482-c70e471cdd90) ##### Network Policy now with all the missing fields Some of the fields were reported missing, and now they are shown. ![Screenshot of some fields in the Network Policy section of Headlamp](https://github.com/user-attachments/assets/bcf08c07-cc70-4dce-a479-3543cb6dd86d) ##### Setting the namespace from search In the global search there is a shortcut for setting up the current namespace. This is to avoid having to select the namespace from the dropdown. ![Screenshot of the search field with a namespace in it](https://github.com/user-attachments/assets/f700b15a-dfba-4fe2-8485-dd88bdf376ec) #### 🐞 Bug fixes - Fix Monaco Editor with custom base url. Thanks to [@DanielLeone](https://github.com/DanielLeone) - Include baseURL in Cookie Path. Thanks to [@appare45](https://github.com/appare45) - Fix baseURL handling in embedded spa handler - Fix Release Notes rendering in the app of img tags that github now uses - Fix isDrawerMode fetch when state not there - Align Actions column and disable sorting/filtering in Cluster Table. Thanks to [@jaehanbyun](https://github.com/jaehanbyun) - Fix status color for labels on Deployments List - Align PortForward table with Cluster Table pattern. Thanks to [@jaehanbyun](https://github.com/jaehanbyun) - Display valid dates on map view for events - Fix loadBalancerSourceRanges formatting in the headlamp helm chart. Thanks to [@caymard](https://github.com/caymard) - If there is an empty cluster list on the home view show the "Add Cluster" link #### 💻 Development - Add e2e-tests for react-hotkeys dependency. Thanks to [@adwait-godbole](https://github.com/adwait-godbole) - Extract RefreshAndCacheNewToken from headlamp.go and add tests - Improve app in development to start up to 8.3x faster - Add stories for NetworkPolicy - Add root npm build scripts as an alternative to Make to reduce requirements for developers - Fix on-hover display of documentation and types for some plugin APIs for plugin developers - Fix for container test check on github to cleanup disk space to avoid running out - Small fixes to projects and KubeMetadata types so plugins using them don't raise type errors - Add storybook stories for Layout component with various states. Thanks to [@hxrshxz](https://github.com/hxrshxz) - Add isScalable attribute for resources, if true ScaleButton will show for these resources #### 📖 Documentation - Add instructions for people who want to install headlamp plugins in the desktop app docs/installation/desktop/plugins-install-desktop.md - Add page showing people wanting to use plugins some of the plugins - Improve Plugin Manager related instructions to help with issues people were reporting ##### Plugins showcase To go along with the [new docs on installing plugins](https://headlamp.dev/docs/latest/installation/desktop/plugins-install-desktop), there is now a [page dedicated to showing off some of the plugins](https://headlamp.dev/plugins/). To give people a bit of an idea about what plugins are available. ![A screenshot of a page showing some plugins that are available](https://github.com/user-attachments/assets/01c2662d-cd6e-47d6-a6b6-035c21e4867f) ##### Learn section in docs A new section was added within Headlamp official docs, aimed to help users learn how to navigate Headlamp. Available at [Headlamp docs](https://headlamp.dev/docs/latest/learn/). The first section in there describes how to use the new "Projects" feature. More documentation on how to use different Headlamp features will go into the Learn section of the docs in the future. ![Screen shot of some documentation describing how to use the Projects feature](https://github.com/user-attachments/assets/2f21c29a-ee4b-413f-8376-5c808f1cc643) #### 🧩 Shipped Plugins - Update shipped plugin [plugin-catalog 0.4.2](https://github.com/headlamp-k8s/plugins/releases/tag/plugin-catalog-0.4.2) (desktop only) - Fixes for a number of display issues - Minor bug fixes found with new type checker config - Update shipped plugin [app-catalog 0.7.0](https://github.com/headlamp-k8s/plugins/releases/tag/app-catalog-0.7.0) (desktop only) - Support for Vanilla Helm repos along with Artifact Hub ones <!-- end-release-notes --> Full Changelog: <https://github.com/kubernetes-sigs/headlamp/compare/v0.36.0...v0.37.0> Container image: 🐳 [ghcr.io/headlamp-k8s/headlamp:v0.37.0](https://github.com/orgs/headlamp-k8s/packages/container/package/headlamp) Desktop Apps: 🐧 [Flatpak / Linux (AMD64)](https://flathub.org/apps/details/io.kinvolk.Headlamp) 🐧 Linux AppImage [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-linux-x64.AppImage), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-linux-arm64.AppImage), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-linux-armv7l.AppImage) 🐧 Linux Tarball [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-linux-x64.tar.gz), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-linux-arm64.tar.gz), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-linux-armv7l.tar.gz) 🐧 Debian / Linux [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/headlamp_0.37.0-1_amd64.deb) :green\_apple: [Mac (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-mac-x64.dmg) :green\_apple: [Mac (ARM/M1)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-mac-arm64.dmg) :blue\_square: [Windows (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.37.0/Headlamp-0.37.0-win-x64.exe) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTUuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1NS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaGFydCJdfQ==--> Reviewed-on: #1923 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-11-02 03:28:49 +00:00
Renovate Bot	63b9fd0f56	Update Helm release tailscale-operator to v1.90.6 (#1925 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 8s Details renovate / renovate (push) Successful in 1m6s Details	2025-11-01 23:01:34 +00:00
Renovate Bot	e4745bba64	Update Helm release promtail to v6.17.1 (#1924 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 10s Details renovate / renovate (push) Successful in 1m29s Details	2025-11-01 20:01:36 +00:00
Renovate Bot	7deb665b14	Update searxng/searxng:latest Docker digest to 50a94da (#1922 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 15s Details renovate / renovate (push) Successful in 1m27s Details	2025-11-01 09:01:58 +00:00
Renovate Bot	71f640f1f6	Update kube-prometheus-stack Docker tag to v79.1.0 (#1921 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 12s Details renovate / renovate (push) Successful in 1m50s Details	2025-11-01 08:01:54 +00:00
Renovate Bot	2a34b00051	Update ollama/ollama Docker tag to v0.12.8 (#1920 ) All checks were successful lint-test-helm / helm-lint (push) Successful in 14s Details renovate / renovate (push) Successful in 1m42s Details	2025-11-01 05:01:44 +00:00
Renovate Bot	99b1331342	Update ghcr.io/tailscale/tailscale Docker tag to v1.90.6 (#1919 ) All checks were successful lint-test-docker / docker-lint (push) Successful in 9s Details renovate / renovate (push) Successful in 1m33s Details	2025-10-31 23:01:44 +00:00