chore(deps): update ubuntu docker tag to resolute-20260312 (#4831 )

tmp/trivy (#4829 )
Reviewed-on: #4829
2026-03-18 08:03:58 +00:00 · 2026-03-18 03:45:47 +00:00 · 2026-03-18 03:27:09 +00:00 · 2026-03-18 03:04:52 +00:00 · 2026-03-18 03:02:04 +00:00 · 2026-03-18 02:02:48 +00:00
23 changed files with 193 additions and 24 deletions
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -135,6 +135,7 @@ blocky:
              komodo                          IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
              mail                            IN      CNAME   traefik-cl01tl
+              medialyze                       IN      CNAME   traefik-cl01tl
              movie-roulette                  IN      CNAME   traefik-cl01tl
              music-grabber                   IN      CNAME   traefik-cl01tl
              navidrome                       IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/garage/values.yaml
+++ b/clusters/cl01tl/helm/garage/values.yaml
@@ -34,7 +34,7 @@ garage:
        debug:
          image:
            repository: ubuntu
-            tag: resolute-20260108
+            tag: resolute-20260312
            pullPolicy: IfNotPresent
          command:
            - "sleep"
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -227,6 +227,9 @@ gatus:
      - name: jellystat
        url: https://jellystat.alexlebens.net
        <<: *defaults
+      - name: medialyze
+        url: https://medialyze.alexlebens.net
+        <<: *defaults
      - name: authentik
        url: https://authentik.alexlebens.net
        <<: *defaults
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -477,6 +477,12 @@ homepage:
                  href: https://jellystat.alexlebens.net
                  siteMonitor: http://jellystat.jellystat:80
                  statusStyle: dot
+              - MediaLyze:
+                  icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
+                  description: Jellyfin Media Monitoring
+                  href: https://medialyze.alexlebens.net
+                  siteMonitor: http://medialyze.medialyze:80
+                  statusStyle: dot
          - Services:
              - Auth (Public):
                  icon: sh-authentik.webp
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -35,7 +35,7 @@ libation:
        main:
          image:
            repository: ubuntu
-            tag: resolute-20260108
+            tag: resolute-20260312
            pullPolicy: IfNotPresent
          command:
            - "sleep"
--- a/clusters/cl01tl/helm/medialyze/Chart.lock
+++ b/clusters/cl01tl/helm/medialyze/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:17ac9bc0cc2eac395c630c22ab095e3e34e5d75a34523c3f39629ca1c56ecbc8
+generated: "2026-03-17T17:46:15.885193-05:00"
--- a/clusters/cl01tl/helm/medialyze/Chart.yaml
+++ b/clusters/cl01tl/helm/medialyze/Chart.yaml
@@ -0,0 +1,22 @@
+apiVersion: v2
+name: medialyze
+version: 1.0.0
+description: MediaLyze
+keywords:
+  - medialyze
+  - jellyfin
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/frederikemmer/MediaLyze
+  - https://github.com/frederikemmer/MediaLyze/pkgs/container/medialyze
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: medialyze
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
+# renovate: datasource=github-releases depName=frederikemmer/MediaLyze
+appVersion: 0.2.1
--- a/clusters/cl01tl/helm/medialyze/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/medialyze/templates/persistent-volume-claim.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: medialyze-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: medialyze-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: medialyze-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
--- a/clusters/cl01tl/helm/medialyze/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/medialyze/templates/persistent-volume.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: medialyze-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: medialyze-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
--- a/clusters/cl01tl/helm/medialyze/values.yaml
+++ b/clusters/cl01tl/helm/medialyze/values.yaml
@@ -0,0 +1,85 @@
+medialyze:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/frederikemmer/medialyze
+            tag: 0.2.1
+            pullPolicy: IfNotPresent
+          env:
+            - name: HOST_PORT
+              value: 8080
+            - name: SCAN_RUNTIME_WORKER_COUNT
+              value: 2
+            - name: TZ
+              value: America/Chicago
+            - name: MEDIA_HOST_DIR
+              value: /media
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 8080
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - medialyze.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: medialyze
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    data:
+      forceRename: medialyze-data
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /config
+              readOnly: false
+    media:
+      existingClaim: medialyze-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /media
+              readOnly: true
+volsync-target-data:
+  pvcTarget: medialyze-data
+  local:
+    enabled: true
+    schedule: 36 11 * * *
+  remote:
+    enabled: true
+    schedule: 36 12 * * *
+  external:
+    enabled: true
+    schedule: 36 14 * * *
--- a/clusters/cl01tl/helm/ntfy/Chart.yaml
+++ b/clusters/cl01tl/helm/ntfy/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.19.1
+appVersion: 2.19.2
--- a/clusters/cl01tl/helm/ntfy/values.yaml
+++ b/clusters/cl01tl/helm/ntfy/values.yaml
@@ -9,7 +9,7 @@ ntfy:
        main:
          image:
            repository: binwiederhier/ntfy
-            tag: v2.19.1
+            tag: v2.19.2
            pullPolicy: IfNotPresent
          args: ["serve"]
          env:
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.18.0
+appVersion: 0.18.1
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.18.0
+            tag: 0.18.1
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.18.0
+            tag: 0.18.1
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.18.0
+            tag: 0.18.1
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
--- a/clusters/cl01tl/helm/prometheus-operator-crds/Chart.lock
+++ b/clusters/cl01tl/helm/prometheus-operator-crds/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: prometheus-operator-crds
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 27.0.0
-digest: sha256:ab76a45fb53268d4afdad507277c244af11c50344e50a24799182bbd9757258d
-generated: "2026-02-06T14:05:22.069162277Z"
+  version: 27.0.1
+digest: sha256:c66f0099390741388fce480670ce5f40f0e8459f3471a9f49da6f3f217c028a0
+generated: "2026-03-17T20:57:34.001956235Z"
--- a/clusters/cl01tl/helm/prometheus-operator-crds/Chart.yaml
+++ b/clusters/cl01tl/helm/prometheus-operator-crds/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: prometheus-operator-crds
-    version: 27.0.0
+    version: 27.0.1
    repository: oci://ghcr.io/prometheus-community/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
--- a/clusters/cl01tl/helm/site-profile/values.yaml
+++ b/clusters/cl01tl/helm/site-profile/values.yaml
@@ -11,7 +11,7 @@ site-profile:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.13.0
+            tag: 3.14.0
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/helm/talos/values.yaml
+++ b/clusters/cl01tl/helm/talos/values.yaml
@@ -69,7 +69,7 @@ etcd-backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
--- a/clusters/cl01tl/helm/trivy/values.yaml
+++ b/clusters/cl01tl/helm/trivy/values.yaml
@@ -2,13 +2,13 @@ trivy-operator:
  targetWorkloads: "pod,replicaset,replicationcontroller,statefulset,daemonset,cronjob,job"
  operator:
    replicas: 1
-    scanJobsConcurrentLimit: 3
+    scanJobsConcurrentLimit: 1
    vulnerabilityScannerEnabled: true
-    sbomGenerationEnabled: true
-    clusterSbomCacheEnabled: true
+    sbomGenerationEnabled: false
+    clusterSbomCacheEnabled: false
    configAuditScannerEnabled: true
    rbacAssessmentScannerEnabled: true
-    infraAssessmentScannerEnabled: true
+    infraAssessmentScannerEnabled: false
    clusterComplianceEnabled: false
    vulnerabilityScannerScanOnlyCurrentRevisions: true
    accessGlobalSecretsAndServiceAccount: true
@@ -47,6 +47,10 @@ trivy-operator:
          memory: 512Mi
      replicas: 1
  nodeCollector:
+    tolerations:
+      - key: node-role.kubernetes.io/control-plane
+        operator: Exists
+        effect: NoSchedule
    volumeMounts:
      - name: var-lib-etcd
        mountPath: /var/lib/etcd
--- a/clusters/cl01tl/helm/vault/values.yaml
+++ b/clusters/cl01tl/helm/vault/values.yaml
@@ -187,7 +187,7 @@ snapshot:
        s3-backup-local:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
        s3-backup-remote:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
        s3-backup-external:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -110,6 +110,7 @@ customDNS:
    komodo                          IN      CNAME   traefik-cl01tl
    lidarr                          IN      CNAME   traefik-cl01tl
    mail                            IN      CNAME   traefik-cl01tl
+    medialyze                       IN      CNAME   traefik-cl01tl
    movie-roulette                  IN      CNAME   traefik-cl01tl
    music-grabber                   IN      CNAME   traefik-cl01tl
    navidrome                       IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -131,6 +131,7 @@ customDNS:
    komodo                          IN      CNAME   traefik-cl01tl
    lidarr                          IN      CNAME   traefik-cl01tl
    mail                            IN      CNAME   traefik-cl01tl
+    medialyze                       IN      CNAME   traefik-cl01tl
    movie-roulette                  IN      CNAME   traefik-cl01tl
    music-grabber                   IN      CNAME   traefik-cl01tl
    navidrome                       IN      CNAME   traefik-cl01tl
--- a/hosts/ps10rp/castsponsorskip/compose.yaml
+++ b/hosts/ps10rp/castsponsorskip/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    castsponsorskip:
-        image: ghcr.io/gabe565/castsponsorskip:0.8.2
+        image: ghcr.io/gabe565/castsponsorskip:0.8.3
        container_name: castsponsorskip
        environment:
            - TZ=America/Chicago
Author	SHA1	Message	Date
Renovate Bot	0c2f495fac	chore(deps): update ubuntu docker tag to resolute-20260312 (#4831 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 1m14s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m45s Details	2026-03-18 08:03:58 +00:00
Alex Lebens	aed71f8086	tmp/trivy (#4829 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 38s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m32s Details Reviewed-on: #4829	2026-03-18 03:45:47 +00:00
Alex Lebens	c27d7bdf9b	feat: disable sbom and infra scanner (#4827 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 37s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m19s Details Reviewed-on: #4827	2026-03-18 03:27:09 +00:00
Renovate Bot	6f97007dfb	chore(deps): update d3fk/s3cmd:latest docker digest to e3965f8 (#4825 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 1m57s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m56s Details	2026-03-18 03:04:52 +00:00
Alex Lebens	520e6f9763	Merge (#4823 ) Some checks failed lint-test-helm / lint-helm (push) Successful in 42s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Reviewed-on: #4823	2026-03-18 03:02:04 +00:00
Renovate Bot	e255e2b8ad	chore(deps): update ollama/ollama docker tag to v0.18.1 (#4821 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 1m24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m48s Details	2026-03-18 02:02:48 +00:00
Renovate Bot	a003ae1f45	chore(deps): update dependency ollama/ollama to v0.18.1 (#4819 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 1m47s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m10s Details	2026-03-18 01:05:28 +00:00
Renovate Bot	0d3a85fc10	chore(deps): update dependency binwiederhier/ntfy to v2.19.2 (#4818 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has started running Details renovate / renovate (push) Has been cancelled Details	2026-03-18 01:05:03 +00:00
Alex Lebens	0bed6ebbe0	Add medialyze (#4816 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 40s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-docker / lint-docker-compose (push) Successful in 1m18s Details renovate / renovate (push) Successful in 5m7s Details Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Reviewed-on: #4816	2026-03-17 22:57:09 +00:00
Renovate Bot	77c29e7db5	chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.14.0 (#4814 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 22s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m7s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [harbor.alexlebens.net/images/site-profile](https://gitea.alexlebens.dev/alexlebens/site-profile) \| minor \| `3.13.0` → `3.14.0` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes <details> <summary>alexlebens/site-profile (harbor.alexlebens.net/images/site-profile)</summary> ### [`v3.14.0`](https://gitea.alexlebens.dev/alexlebens/site-profile/releases/tag/3.14.0) [Compare Source](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.13.0...3.14.0) ##### Features - release for content ([abdb30b](`abdb30b0e3`)) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4814 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-17 21:20:56 +00:00
Renovate Bot	7ca2f81190	chore(deps): update prometheus-operator-crds docker tag to v27.0.1 (#4813 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 30s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m41s Details	2026-03-17 20:57:50 +00:00
Renovate Bot	d9fcb0c864	chore(deps): update ghcr.io/gabe565/castsponsorskip docker tag to v0.8.3 (#4812 ) Some checks failed lint-test-docker / lint-docker-compose (push) Successful in 19s Details renovate / renovate (push) Has been cancelled Details	2026-03-17 20:57:17 +00:00