chore(deps): update av1155/houndarr to v1.6.0

clusters/cl01tl/helm/argocd/values.yaml

@@ -55,7 +55,14 @@ argo-cd:
   server:
     replicas: 2
     extensions:
-      enabled: false
+      enabled: true
+      extensionList:
+        - name: extension-trivy
+          env:
+            - name: EXTENSION_URL
+              value: https://github.com/mziyabo/argocd-trivy-extension/releases/download/v0.2.0/extension-trivy.tar
+            - name: EXTENSION_CHECKSUM_URL
+              value: https://github.com/mziyabo/argocd-trivy-extension/releases/download/v0.2.0/extension-trivy_checksums.txt
     metrics:
       enabled: true
       serviceMonitor:

clusters/cl01tl/helm/eraser/values.yaml

@@ -34,7 +34,27 @@ eraser:
         request:
           cpu: 100m
           memory: 128Mi
-        config: ""
+        config: "" # |
+          # cacheDir: /var/lib/trivy
+          # dbRepo: ghcr.io/aquasecurity/trivy-db
+          # deleteFailedImages: true
+          # deleteEOLImages: true
+          # vulnerabilities:
+          #   ignoreUnfixed: true
+          #   types:
+          #     - os
+          #     - library
+          #   securityChecks:
+          #     - vuln
+          #   severities:
+          #     - CRITICAL
+          #     - HIGH
+          #     - MEDIUM
+          #     - LOW
+          #   ignoredStatuses:
+          # timeout:
+          #   total: 23h
+          #   perImage: 1h
       remover:
         request:
           cpu: 10m

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -377,6 +377,25 @@ spec:
   resyncPeriod: 1h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/tdarr.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-trivy
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-trivy
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 1h
+  folderUID: grafana-folder-service
+  resyncPeriod: 1h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/trivy.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/headlamp/values.yaml

@@ -25,6 +25,9 @@ headlamp:
         - name: cert-manager
           source: https://artifacthub.io/packages/headlamp/headlamp-plugins/headlamp_cert-manager
           version: 0.1.0
+        - name: trivy
+          source: https://artifacthub.io/packages/headlamp/headlamp-trivy/headlamp_trivy
+          version: 0.3.1
         - name: external-secrets-operator
           source: https://artifacthub.io/packages/headlamp/external-secrets-operator-headlamp-plugin/external-secrets-operator
           version: 0.1.0-beta7

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -9,7 +9,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.5.0
+            tag: 2.4.6
             pullPolicy: IfNotPresent
           env:
             - name: MUSIC_DIR

clusters/cl01tl/helm/shelfmark/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp
 # renovate: datasource=github-releases depName=calibrain/shelfmark
-appVersion: v1.2.1
+appVersion: v1.2.0

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -9,7 +9,7 @@ shelfmark:
         main:
           image:
             repository: ghcr.io/calibrain/shelfmark
-            tag: v1.2.1
+            tag: v1.2.0
             pullPolicy: IfNotPresent
           env:
             - name: FLASK_PORT

renovate.json

@@ -5,14 +5,6 @@
     "mergeConfidence:all-badges",
     ":rebaseStalePrs"
   ],
-  "timezone": "US/Central",
-  "labels": [],
-  "prHourlyLimit": 0,
-  "prConcurrentLimit": 0,
-  "pinDigests": true,
-  "baseBranchPatterns": [
-    "main"
-  ],
   "customManagers": [
     {
       "description": "Update appVersion in Chart.yaml",
@@ -61,14 +53,14 @@
       "versioningTemplate": "semver"
     }
   ],
-  "packageRules": [
-    {
-      "description": "Disable updates to digests",
-      "matchUpdateTypes": [
-        "digest"
+  "timezone": "US/Central",
+  "labels": [],
+  "prHourlyLimit": 0,
+  "prConcurrentLimit": 0,
+  "baseBranchPatterns": [
+    "main"
   ],
-      "enabled": false
-    },
+  "packageRules": [
     {
       "description": "Label charts",
       "matchDatasources": [
@@ -109,6 +101,19 @@
       "automerge": true,
       "automergeType": "branch"
     },
+    {
+      "description": "Label images, helm",
+      "matchManagers": [
+        "custom.regex",
+        "helm-values"
+      ],
+      "groupName": "{{#if packageName}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' packageName)}}}{{else}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' depName)}}}{{/if}}",
+      "groupSlug": "unified-{{{groupName}}}",
+      "addLabels": [
+        "image"
+      ],
+      "automerge": false
+    },
     {
       "description": "Label images, docker",
       "matchDatasources": [
@@ -120,13 +125,17 @@
       "automerge": false
     },
     {
-      "description": "Automerge image patches, docker",
+      "description": "Automerge image patches, helm",
       "matchUpdateTypes": [
-        "patch"
+        "patch",
+        "digest"
       ],
-      "matchDatasources": [
-        "docker"
+      "matchManagers": [
+        "custom.regex",
+        "helm-values"
       ],
+      "groupName": "{{#if packageName}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' packageName)}}}{{else}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' depName)}}}{{/if}}",
+      "groupSlug": "unified-{{{groupName}}}",
       "addLabels": [
         "image",
         "automerge"
@@ -135,44 +144,14 @@
       "minimumReleaseAge": "1 days"
     },
     {
-      "description": "Allow digest updates for specific packages",
+      "description": "Automerge image patches, docker",
       "matchUpdateTypes": [
+        "patch",
         "digest"
       ],
       "matchDatasources": [
         "docker"
       ],
-      "matchPackageNames": [
-        "searxng/searxng"
-      ],
-      "enabled": true,
-      "automerge": true,
-      "minimumReleaseAge": "1 days"
-    },
-    {
-      "description": "Label charts and docker, merged",
-      "matchManagers": [
-        "custom.regex",
-        "helm-values"
-      ],
-      "groupName": "{{#if packageName}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' packageName)}}}{{else}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' depName)}}}{{/if}}",
-      "groupSlug": "unified-{{{groupName}}}",
-      "addLabels": [
-        "image"
-      ],
-      "automerge": false
-    },
-    {
-      "description": "Automerge charts and docker, merged",
-      "matchUpdateTypes": [
-        "patch"
-      ],
-      "matchManagers": [
-        "custom.regex",
-        "helm-values"
-      ],
-      "groupName": "{{#if packageName}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' packageName)}}}{{else}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' depName)}}}{{/if}}",
-      "groupSlug": "unified-{{{groupName}}}",
       "addLabels": [
         "image",
         "automerge"