chore(deps): update kube-prometheus-stack docker tag to v85

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.176.6@sha256:bc8a17f1077955d36e808d098d7494c4c75c70caa7aac8ee77fb2024ad20229e
+    container: ghcr.io/renovatebot/renovate:43.173.0@sha256:e5486f0c69d2c5e019523e713fc66bd5371fdda7fd086fba61681396004ed069
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -17,4 +17,4 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.4.2
+appVersion: v3.4.1

clusters/cl01tl/helm/argocd/values.yaml

@@ -103,7 +103,7 @@ argo-cd:
       enabled: true
       image:
         repository: haproxy
-        tag: 3.3.10-alpine@sha256:3201152205e9d02557ab3c8ecfcf0d378126eec0a5d1b0950ea22af31ee10bf2
+        tag: 3.3.9-alpine@sha256:9d05c0d68ede409faf4855a8f40d7bfc54833a83bfd02d9344d09b5d27f79155
       resources:
         requests:
           cpu: 5m

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2026.2.3
+  version: 2026.2.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 3.2.2
@@ -11,5 +11,5 @@ dependencies:
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:f690cd3742371fda919b728b2b65071eb301d8bef6bbcf013e5eb3998d1e66b6
+digest: sha256:340c981f2958295a952b124bc2f14f6d655901dd3e32f90dc9cefe1685195cff
-generated: "2026-05-13T00:09:37.476993903Z"
+generated: "2026-05-08T22:56:30.727245582Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2026.2.3
+    version: 2026.2.2
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: cloudnative-pg
   repository: https://cloudnative-pg.io/charts/
-  version: 0.28.2
+  version: 0.28.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
   version: 0.6.0
@@ -11,5 +11,5 @@ dependencies:
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.11.3
-digest: sha256:a08719a82de76d62cddfec163dbc9feecfbea83ab406f3750d25d4deaf586f0c
+digest: sha256:3f9cc2b51d4f30e63162b06d886415b78e37945946f8e6db642b1e94f9a917a0
-generated: "2026-05-13T00:10:14.309341878Z"
+generated: "2026-05-09T02:54:37.702578041Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cloudnative-pg
-    version: 0.28.2
+    version: 0.28.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
     version: 0.6.0

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: ghcr.io/element-hq/element-web
-    tag: v1.12.18@sha256:c21772a1eabeededa19be591343f548995e458ec34ba8f27425ae923c10af82e
+    tag: v1.12.17@sha256:f4a81a24d49a9c5b97e02e77a3013ec799873e500e69041078a28be98e4f1280
   defaultServer:
     url: https://matrix.alexlebens.dev
     name: alexlebens.dev

clusters/cl01tl/helm/eraser/values.yaml

@@ -50,7 +50,7 @@ eraser-metrics:
         main:
           image:
             repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.152.0@sha256:f358f8028c6eb44f765444de1c8899b4f97d7ba54be5264a8753f2c182bc5757
+            tag: 0.151.0@sha256:49a12827519134ed72881a64247ea43fbf4bdac50cfa41ceb495fc1c684451e2
           command:
             - /otelcol
             - --config=/conf/otel-collector-config.yaml

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.21.3
+  version: 0.21.2
-digest: sha256:2122d1fdfa7e596323caae612325eebbdb0337f6d2a290c3a0ce8f4c3fbbbbd5
+digest: sha256:711b3c3b3433e0358609b98a2fedad17fea5ecb34d07c18a61393756b03f2cb5
-generated: "2026-05-13T00:11:06.857277817Z"
+generated: "2026-05-08T22:23:52.971515743Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.21.3
+    version: 0.21.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.13.1
+appVersion: v1.13.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -14,7 +14,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
+            tag: v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
               value: home.alexlebens.net
@@ -268,10 +268,10 @@ homepage:
                   siteMonitor: http://ollama-web.ollama:80
                   statusStyle: dot
               - AI Image:
-                  icon: sh-invoke-ai.webp
+                  icon: https://user-images.githubusercontent.com/36368048/196280761-1535f413-a91e-4b6a-af6a-b890f8ae204c.png
-                  description: Invoke AI
+                  description: Stable Diffusion
-                  href: https://invoke-ai-pd05wd.boreal-beaufort.ts.net/app
+                  href: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
-                  siteMonitor: https://invoke-ai-pd05wd.boreal-beaufort.ts.net
+                  siteMonitor: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
                   statusStyle: dot
               - Search:
                   icon: sh-searxng.webp

clusters/cl01tl/helm/karakeep/values.yaml

@@ -85,9 +85,9 @@ karakeep:
             - name: OLLAMA_KEEP_ALIVE
               value: 5m
             - name: INFERENCE_TEXT_MODEL
-              value: gemma4:e4b
+              value: gemma3:4b
             - name: INFERENCE_IMAGE_MODEL
-              value: gemma4:e4b
+              value: granite3.2-vision:2b
             - name: EMBEDDING_TEXT_MODEL
               value: mxbai-embed-large
             - name: INFERENCE_JOB_TIMEOUT_SEC

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 85.0.2
+  version: 85.0.1
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 29.0.0
+  version: 28.0.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 5.0.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:8ac7065eceeff40ab6da60d8abd939031cc3e4677c0cfa353cd11a3e1bac25b6
+digest: sha256:96424214e3b87f4cfaeaf2e93f0f3472d2bf24fe4c6725c80a662f607d3bde6c
-generated: "2026-05-12T18:05:16.45686921Z"
+generated: "2026-05-11T13:09:06.503993811Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,10 +20,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 85.0.2
+    version: 85.0.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: prometheus-operator-crds
-    version: 29.0.0
+    version: 28.0.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.7.0
+  version: 13.6.2
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 1.8.1
-digest: sha256:c49b85512c241272342cc2629d2ca612c89028db10a16f4ac84608e41226c282
+digest: sha256:a4e74753a5cc3122473b8bcc984ae5bd7d0d2c05da1e98c8c1d5bb96abb1ada1
-generated: "2026-05-13T02:04:04.472006106Z"
+generated: "2026-05-09T01:39:35.695293602Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 13.7.0
+    version: 13.6.2
     repository: oci://ghcr.io/grafana-community/helm-charts
   - name: alloy
     version: 1.8.1

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.11.0
+appVersion: 0.10.4

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.11.0@sha256:9c900b398ddab3e96729738186c7c50690567b38a119851570db59d606176043
+            tag: 0.10.4@sha256:d5d7b670a8d46a8093f897e2675f93f54c5229e003ca8a136a9fed67702d1c92
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.8
+appVersion: 2.8.7

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.8.8@sha256:72dd1056fab07c873276c854bea08b8ef07bb54b8fbe0413047d8701d2abc146
+            tag: 2.8.7@sha256:7c55042195e93dc66fc9c0335e2e4469b861c2558b82974b674b7f89c0d6e961
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/ollama/values.yaml

@@ -21,7 +21,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
+            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -55,7 +55,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
+            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -89,7 +89,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
+            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h

clusters/cl01tl/helm/plex/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.1.10611-1e34174b1-ls305
+appVersion: 1.43.1.10611-1e34174b1-ls304

clusters/cl01tl/helm/shelfmark/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/shelfmark.png
 # renovate: datasource=github-releases depName=calibrain/shelfmark
-appVersion: v1.3.0
+appVersion: v1.2.3

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -12,7 +12,7 @@ shelfmark:
         main:
           image:
             repository: ghcr.io/calibrain/shelfmark
-            tag: v1.3.0@sha256:e891eda444b261da48a839db652034bce4e20ac09c167f14adf939dedf96b572
+            tag: v1.2.3@sha256:bd6cb4bfa14a917e76945c22ed2c376d64cf7fdb74632435db713d42ca597b20
           env:
             - name: FLASK_PORT
               value: 8084

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -10,7 +10,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.31.0@sha256:9e819b8b2d18437080fed5bbe9a2b42e0abdd457dcdd0e894ff98a728e056062
+            tag: 0.29.0@sha256:5b1390542baa3367f7646dcec79b96ce2341f3fd16314017c44046e792121bfa
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/tailscale-operator/templates/service.yaml

@@ -116,18 +116,3 @@ metadata:
 spec:
   externalName: placeholder
   type: ExternalName
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: invoke-ai-pd05wd
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: invoke-ai-pd05wd
-    {{- include "custom.labels" . | nindent 4 }}
-  annotations:
-    tailscale.com/tailnet-fqdn: invoke-ai-pd05wd.boreal-beaufort.ts.net
-spec:
-  externalName: placeholder
-  type: ExternalName

clusters/cl01tl/helm/talos/values.yaml

@@ -401,7 +401,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
           args:
             - etcd
             - defrag
@@ -430,7 +430,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
           args:
             - etcd
             - defrag
@@ -459,7 +459,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
           args:
             - etcd
             - defrag

clusters/cl01tl/helm/traefik/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
   repository: https://traefik.github.io/charts
-  version: 40.1.0
+  version: 40.0.0
 - name: traefik-crds
   repository: https://traefik.github.io/charts
   version: 1.18.0
-digest: sha256:d4201b2f39c0e0f091b52c31a479642f1a7db52459b5e8d775df402ab0d301f0
+digest: sha256:d887af2faf8b07488d6c4c3731337768492292d99edf69040498e24efe5b0a65
-generated: "2026-05-12T08:08:33.996684287Z"
+generated: "2026-05-06T23:28:40.081576086Z"

clusters/cl01tl/helm/traefik/Chart.yaml

@@ -14,11 +14,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: traefik
-    version: 40.1.0
+    version: 40.0.0
     repository: https://traefik.github.io/charts
   - name: traefik-crds
     version: 1.18.0
     repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/traefik.png
 # renovate: datasource=github-releases depName=traefik/traefik
-appVersion: v3.7.1
+appVersion: v3.7.0

clusters/cl01tl/helm/traefik/values.yaml

@@ -2,7 +2,7 @@ traefik:
   image:
     registry: docker.io
     repository: traefik
-    tag: v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
+    tag: v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
   deployment:
     kind: DaemonSet
   ingressClass:

clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml

@@ -8,7 +8,7 @@ metadata:
     {{- include "custom.labels" . | nindent 4 }}
 spec:
   # renovate: datasource=docker depName=elasticsearch
-  version: 9.4.1
+  version: 9.4.0
   auth:
     fileRealm:
       - secretName: tubearchivist-elasticsearch-config

clusters/cl01tl/helm/unpoller/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/ubiquiti-unifi.png
 # renovate: datasource=github-releases depName=unpoller/unpoller
-appVersion: v3.2.0
+appVersion: v3.1.2

clusters/cl01tl/helm/unpoller/values.yaml

@@ -8,7 +8,7 @@ unpoller:
         main:
           image:
             repository: ghcr.io/unpoller/unpoller
-            tag: v3.2.0@sha256:bf7bdcc59fcdaa4699687007aa3ec24ddb3c9d9521f392d8c7aa2bea1bdb781a
+            tag: v3.1.2@sha256:d63bd939ea46cbf76f3a5d21c668426202a389ebaa89e200c4906712f9b8dd22
           env:
             - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS
               value: 'true'

hosts/pd05wd/ollama/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     ollama:
-        image: ollama/ollama:0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
+        image: ollama/ollama:0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
         container_name: ollama
         environment:
             - OLLAMA_KEEP_ALIVE=24h

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/homepage/compose.yaml

@@ -32,7 +32,7 @@ services:
             - /var/run/docker.sock:/var/run/docker.sock:ro
 
     homepage:
-        image: ghcr.io/gethomepage/homepage:v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
+        image: ghcr.io/gethomepage/homepage:v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
         container_name: homepage
         labels:
             traefik.enable: true

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"