chore(deps): update gotenberg/gotenberg docker tag to v8.31.0

2026-04-17 22:52:42 +00:00
19 changed files with 109 additions and 368 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.129.0@sha256:e4abd88d1d6326fe8a702b38c5ee76487d94b455ba4f305bd904521aba9f5a08
+    container: ghcr.io/renovatebot/renovate:43.128.0@sha256:a0d5786f0506546c9e4bf7a851ddfb37ba7ac6dc6aacefc08cc688a0d8d9be0f
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/external-secrets/Chart.yaml
+++ b/clusters/cl01tl/helm/external-secrets/Chart.yaml
@@ -18,4 +18,4 @@ dependencies:
    repository: https://charts.external-secrets.io
 icon: https://raw.githubusercontent.com/external-secrets/external-secrets/refs/heads/main/assets/eso-logo-large.png
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v2.3.0
+appVersion: vv2.3.0
--- a/clusters/cl01tl/helm/external-secrets/templates/cluster-role-binding.yaml
+++ b/clusters/cl01tl/helm/external-secrets/templates/cluster-role-binding.yaml
@@ -1,17 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: external-secrets
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:auth-delegator
-subjects:
-  - kind: ServiceAccount
-    name: external-secrets
-    namespace: {{ .Release.Namespace }}
--- a/clusters/cl01tl/helm/external-secrets/templates/cluster-secret-store.yaml
+++ b/clusters/cl01tl/helm/external-secrets/templates/cluster-secret-store.yaml
@@ -17,29 +17,3 @@ spec:
          namespace: vault
          name: vault-token
          key: token
-
---
-apiVersion: external-secrets.io/v1
-kind: ClusterSecretStore
-metadata:
-  name: openbao
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: openbao
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  provider:
-    vault:
-      server: http://openbao-internal.openbao:8200
-      path: secret
-      version: v2
-      auth:
-        kubernetes:
-          mountPath: kubernetes
-          role: external-secrets
-          serviceAccountRef:
-            name: external-secrets
-            namespace: {{ .Release.Name }}
-            audiences:
-              - openbao
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -29,4 +29,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: datasource=github-releases depName=CyferShepard/Jellystat
-appVersion: 1.1.10
+appVersion: 1.1.9
--- a/clusters/cl01tl/helm/jellystat/values.yaml
+++ b/clusters/cl01tl/helm/jellystat/values.yaml
@@ -8,7 +8,7 @@ jellystat:
        main:
          image:
            repository: ghcr.io/cyfershepard/jellystat
-            tag: 1.1.10@sha256:bb7ebe42424dedeff52d8da4130232d67e3fdd6dc2dd4a66091e32ddd835ea42
+            tag: 1.1.9@sha256:f7f56aabad139faa996b8bb21a36dd3e65f7c87e10408921815b95a28a4efbaf
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.21.0
+appVersion: 0.20.7
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -21,7 +21,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.21.0@sha256:d3d553bdfbcc7f55dd5ddf42c4cbe3a927aa9bb1802710d35e94656ca5aea02b
+            tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -55,7 +55,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.21.0@sha256:d3d553bdfbcc7f55dd5ddf42c4cbe3a927aa9bb1802710d35e94656ca5aea02b
+            tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -89,7 +89,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.21.0@sha256:d3d553bdfbcc7f55dd5ddf42c4cbe3a927aa9bb1802710d35e94656ca5aea02b
+            tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -208,7 +208,7 @@ qbittorrent:
        qui:
          image:
            repository: ghcr.io/autobrr/qui
-            tag: v1.17.0@sha256:fb3832e68f66b056e1b049d16c40732661e7b73999bc642d4b11469a3ebbabd3
+            tag: v1.16.1@sha256:07b6ea9572e52e8b5f70f8fb15a7c688d8d754a7616242d3ad0b21dbd5c05836
          env:
            - name: QUI__METRICS_ENABLED
              value: true
--- a/clusters/cl01tl/helm/rclone/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/rclone/templates/external-secret.yaml
@@ -14,23 +14,38 @@ spec:
  data:
    - secretKey: ACCESS_KEY_ID
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
        property: ACCESS_KEY_ID
    - secretKey: ACCESS_REGION
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
        property: ACCESS_REGION
    - secretKey: ACCESS_SECRET_KEY
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
        property: ACCESS_SECRET_KEY
    - secretKey: SRC_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/local
+        metadataPolicy: None
        property: ENDPOINT
    - secretKey: DEST_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/remote
+        metadataPolicy: None
        property: ENDPOINT

 ---
@@ -50,23 +65,38 @@ spec:
  data:
    - secretKey: ACCESS_KEY_ID
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
        property: ACCESS_KEY_ID
    - secretKey: ACCESS_REGION
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
        property: ACCESS_REGION
    - secretKey: ACCESS_SECRET_KEY
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
        property: ACCESS_SECRET_KEY
    - secretKey: SRC_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/local
+        metadataPolicy: None
        property: ENDPOINT
    - secretKey: DEST_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/remote
+        metadataPolicy: None
        property: ENDPOINT

 ---
@@ -86,23 +116,38 @@ spec:
  data:
    - secretKey: ACCESS_KEY_ID
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/talos-backups
+        metadataPolicy: None
        property: ACCESS_KEY_ID
    - secretKey: ACCESS_REGION
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/talos-backups
+        metadataPolicy: None
        property: ACCESS_REGION
    - secretKey: ACCESS_SECRET_KEY
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/talos-backups
+        metadataPolicy: None
        property: ACCESS_SECRET_KEY
    - secretKey: SRC_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/local
+        metadataPolicy: None
        property: ENDPOINT
    - secretKey: DEST_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/remote
+        metadataPolicy: None
        property: ENDPOINT

 ---
@@ -122,23 +167,38 @@ spec:
  data:
    - secretKey: ACCESS_KEY_ID
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/web-assets
+        metadataPolicy: None
        property: ACCESS_KEY_ID
    - secretKey: ACCESS_REGION
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/web-assets
+        metadataPolicy: None
        property: ACCESS_REGION
    - secretKey: ACCESS_SECRET_KEY
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/web-assets
+        metadataPolicy: None
        property: ACCESS_SECRET_KEY
    - secretKey: SRC_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/local
+        metadataPolicy: None
        property: ENDPOINT
    - secretKey: DEST_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/remote
+        metadataPolicy: None
        property: ENDPOINT

 ---
@@ -158,23 +218,38 @@ spec:
  data:
    - secretKey: ACCESS_KEY_ID
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
        property: ACCESS_KEY_ID
    - secretKey: ACCESS_REGION
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
        property: ACCESS_REGION
    - secretKey: ACCESS_SECRET_KEY
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/postgres-backups
+        metadataPolicy: None
        property: ACCESS_SECRET_KEY
    - secretKey: SRC_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/local
+        metadataPolicy: None
        property: ENDPOINT
    - secretKey: DEST_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/remote
+        metadataPolicy: None
        property: ENDPOINT

 ---
@@ -194,89 +269,36 @@ spec:
  data:
    - secretKey: ACCESS_KEY_ID
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/ntfy-attachments
+        metadataPolicy: None
        property: ACCESS_KEY_ID
    - secretKey: ACCESS_REGION
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/ntfy-attachments
+        metadataPolicy: None
        property: ACCESS_REGION
    - secretKey: ACCESS_SECRET_KEY
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/home-infra/ntfy-attachments
+        metadataPolicy: None
        property: ACCESS_SECRET_KEY
    - secretKey: SRC_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/local
+        metadataPolicy: None
        property: ENDPOINT
    - secretKey: DEST_ENDPOINT
      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
        key: /garage/config/remote
-        property: ENDPOINT
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: garage-openbao-backups-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: garage-openbao-backups-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        key: /garage/home-infra/openbao-backups
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        key: /garage/home-infra/openbao-backups
-        property: ACCESS_REGION
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        key: /garage/home-infra/openbao-backups
-        property: ACCESS_SECRET_KEY
-    - secretKey: ENDPOINT_LOCAL
-      remoteRef:
-        key: /garage/home-infra/openbao-backups
-        property: ENDPOINT_LOCAL
-    - secretKey: ENDPOINT_REMOTE
-      remoteRef:
-        key: /garage/home-infra/openbao-backups
-        property: ENDPOINT_REMOTE
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: external-openbao-backups-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: external-openbao-backups-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        key: /digital-ocean/home-infra/openbao-backups
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        key: /digital-ocean/home-infra/openbao-backups
-        property: ACCESS_REGION
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        key: /digital-ocean/home-infra/openbao-backups
-        property: ACCESS_SECRET_KEY
-    - secretKey: ENDPOINT
-      remoteRef:
-        key: /digital-ocean/home-infra/openbao-backups
+        metadataPolicy: None
        property: ENDPOINT
--- a/clusters/cl01tl/helm/rclone/values.yaml
+++ b/clusters/cl01tl/helm/rclone/values.yaml
@@ -554,241 +554,3 @@ rclone:
                  key: DEST_ENDPOINT
            - name: RCLONE_CONFIG_SRC_DEST_FORCE_PATH_STYLE
              value: true
-    openbao-backups-remote:
-      type: cronjob
-      cronjob:
-        suspend: false
-        timeZone: America/Chicago
-        schedule: 0 1 * * *
-        backoffLimit: 3
-        parallelism: 1
-      containers:
-        sync:
-          image:
-            repository: rclone/rclone
-            tag: 1.73.4@sha256:654f6517c7aaec7e377690b2caf7c272dbe5f3b8200afbc14a00df6b4a9aa6ef
-          args:
-            - sync
-            - src:openbao-backups
-            - dest:openbao-backups
-            - --s3-no-check-bucket
-            - --max-age
-            - 90d
-            - --verbose
-          env:
-            - name: RCLONE_S3_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_SRC_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_SRC_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_SRC_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_SRC_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_SRC_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ENDPOINT_LOCAL
-            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
-              value: true
-            - name: RCLONE_CONFIG_DEST_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_DEST_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_DEST_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_DEST_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_DEST_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ENDPOINT_REMOTE
-            - name: RCLONE_CONFIG_SRC_DEST_FORCE_PATH_STYLE
-              value: true
-        prune:
-          image:
-            repository: rclone/rclone
-            tag: 1.73.4@sha256:654f6517c7aaec7e377690b2caf7c272dbe5f3b8200afbc14a00df6b4a9aa6ef
-          args:
-            - delete
-            - dest:openbao-backups
-            - --min-age
-            - 90d
-            - --verbose
-          env:
-            - name: RCLONE_CONFIG_DEST_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_DEST_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_DEST_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_DEST_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_DEST_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ENDPOINT_REMOTE
-            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
-              value: true
-    openbao-backups-external:
-      type: cronjob
-      cronjob:
-        suspend: false
-        timeZone: America/Chicago
-        schedule: 10 1 * * *
-        backoffLimit: 3
-        parallelism: 1
-      containers:
-        sync:
-          image:
-            repository: rclone/rclone
-            tag: 1.73.4@sha256:654f6517c7aaec7e377690b2caf7c272dbe5f3b8200afbc14a00df6b4a9aa6ef
-          args:
-            - sync
-            - src:openbao-backups
-            - dest:openbao-backups-6e088aad5fad110b
-            - --s3-no-check-bucket
-            - --max-age
-            - 90d
-            - --verbose
-          env:
-            - name: RCLONE_S3_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_SRC_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_SRC_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_SRC_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_SRC_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_SRC_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: garage-openbao-backups-secret
-                  key: ENDPOINT_LOCAL
-            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
-              value: true
-            - name: RCLONE_CONFIG_DEST_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_DEST_PROVIDER
-              value: DigitalOcean
-            - name: RCLONE_CONFIG_DEST_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: external-openbao-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: external-openbao-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_DEST_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: external-openbao-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_DEST_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: external-openbao-backups-secret
-                  key: ENDPOINT
-            - name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE
-              value: true
-        prune:
-          image:
-            repository: rclone/rclone
-            tag: 1.73.4@sha256:654f6517c7aaec7e377690b2caf7c272dbe5f3b8200afbc14a00df6b4a9aa6ef
-          args:
-            - delete
-            - dest:openbao-backups-6e088aad5fad110b
-            - --min-age
-            - 90d
-            - --verbose
-          env:
-            - name: RCLONE_CONFIG_DEST_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_DEST_PROVIDER
-              value: DigitalOcean
-            - name: RCLONE_CONFIG_DEST_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: external-openbao-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: external-openbao-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_DEST_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: external-openbao-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_DEST_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: external-openbao-backups-secret
-                  key: ENDPOINT
-            - name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE
-              value: true
--- a/clusters/cl01tl/helm/sonarr-4k/Chart.yaml
+++ b/clusters/cl01tl/helm/sonarr-4k/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-sonarr
-appVersion: 4.0.17.2952-ls308
+appVersion: 4.0.17.2952-ls307
--- a/clusters/cl01tl/helm/sonarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/sonarr-4k/values.yaml
@@ -13,7 +13,7 @@ sonarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.17.2952-ls308@sha256:e6c9a091735fede0c2a205c69e7d4c2f0188eaf2bec7e42d8a26c017e5f2a910
+            tag: 4.0.17.2952-ls307@sha256:6854df9de20b8c82e1982604f39473d64dbb4c4584b1013f18f9ade1ee92af13
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/sonarr-anime/Chart.yaml
+++ b/clusters/cl01tl/helm/sonarr-anime/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-sonarr
-appVersion: 4.0.17.2952-ls308
+appVersion: 4.0.17.2952-ls307
--- a/clusters/cl01tl/helm/sonarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/sonarr-anime/values.yaml
@@ -13,7 +13,7 @@ sonarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.17.2952-ls308@sha256:e6c9a091735fede0c2a205c69e7d4c2f0188eaf2bec7e42d8a26c017e5f2a910
+            tag: 4.0.17.2952-ls307@sha256:6854df9de20b8c82e1982604f39473d64dbb4c4584b1013f18f9ade1ee92af13
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/sonarr/Chart.yaml
+++ b/clusters/cl01tl/helm/sonarr/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-sonarr
-appVersion: 4.0.17.2952-ls308
+appVersion: 4.0.17.2952-ls307
--- a/clusters/cl01tl/helm/sonarr/values.yaml
+++ b/clusters/cl01tl/helm/sonarr/values.yaml
@@ -12,7 +12,7 @@ sonarr:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.17.2952-ls308@sha256:e6c9a091735fede0c2a205c69e7d4c2f0188eaf2bec7e42d8a26c017e5f2a910
+            tag: 4.0.17.2952-ls307@sha256:6854df9de20b8c82e1982604f39473d64dbb4c4584b1013f18f9ade1ee92af13
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/sparkyfitness/values.yaml
+++ b/clusters/cl01tl/helm/sparkyfitness/values.yaml
@@ -20,7 +20,7 @@ sparkyfitness:
  server:
    image:
      repository: ghcr.io/codewithcj/sparkyfitness-server
-      tag: v0.16.5.8@sha256:55e5444a74dde388fa7e54121185c41b2130ffd9d12ad38e9e31765019a5c44b
+      tag: v0.16.5.7@sha256:7cdb8cb3ae7f90c7590dac3b92cea3a8e24d51b28eb836a1f6d5201cd45bc080
    resources:
      requests:
        cpu: 100m
@@ -45,7 +45,7 @@ sparkyfitness:
  frontend:
    image:
      repository: ghcr.io/codewithcj/sparkyfitness-frontend
-      tag: v0.16.5.8@sha256:aaf810547097007f6d0b3c90af65f8ce89d9b899a6e3035299caffef830736dc
+      tag: v0.16.5.7@sha256:c57a0a07b3470bd0c280d63d02b45adfe7360441b396e9bd445d7b0d22823356
    resources:
      requests:
        cpu: 10m
--- a/renovate.json
+++ b/renovate.json
@@ -89,10 +89,10 @@
    {
      "description": "Specific app grouping overrides",
      "matchPackageNames": [
-        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|sparkyfitness|tdarr|traefik)/",
+        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik)/",
        "/^rook(-ceph|/rook|/ceph)/"
      ],
-      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|sparkyfitness|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|sparkyfitness|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
+      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
      "groupSlug": "unified-{{{groupName}}}"
    },
    {