chore(deps): update ghcr.io/goharbor/harbor-portal docker tag to v2.15.1

2026-05-06 09:04:09 +00:00
36 changed files with 85 additions and 92 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.168.5@sha256:38aac6e29e09288bc3fb3b95ba9445962508a1081013144d5b6ec5a6735707b9
+    container: ghcr.io/renovatebot/renovate:43.165.1@sha256:b1e44b4b22ded56a2ccd5f41edb764b8ef62dd537b3b32e60d676b0424e7bc06
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -17,4 +17,4 @@ dependencies:
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.4.1
+appVersion: v3.3.9
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.lock
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 0.6.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.5.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:756a06f08b0e8b888049195e02136115f3c3b09dabfb01c934934c9053cfb40b
-generated: "2026-05-07T01:19:41.214483969Z"
+  version: 0.5.0
+digest: sha256:5db4d27087f8a712e7825dc2aac1dc26b6b4e0f9eb11373805be67212bb38e12
+generated: "2026-05-02T01:21:57.977371366Z"
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
@@ -26,11 +26,11 @@ dependencies:
  - name: rclone-bucket
    alias: rclone-postgres-backups-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
  - name: rclone-bucket
    alias: rclone-postgres-backups-external
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.0
--- a/clusters/cl01tl/helm/descheduler/values.yaml
+++ b/clusters/cl01tl/helm/descheduler/values.yaml
@@ -10,7 +10,7 @@ descheduler:
    requests:
      cpu: 10m
      memory: 50Mi
-  deschedulingInterval: 2m
+  deschedulingInterval: 5m
  replicas: 3
  leaderElection:
    enabled: true
@@ -51,13 +51,13 @@ descheduler:
          - name: LowNodeUtilization
            args:
              thresholds:
-                cpu: 30
-                memory: 30
-                pods: 30
+                cpu: 20
+                memory: 20
+                pods: 20
              targetThresholds:
-                cpu: 45
-                memory: 45
-                pods: 45
+                cpu: 50
+                memory: 50
+                pods: 60
        plugins:
          balance:
            enabled:
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -10,6 +10,6 @@ dependencies:
  version: 0.7.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3dea680a7391a11ea84cb6b81a0fd336590e59b163c7c3f5a11efc57136d8bc2
-generated: "2026-05-07T01:19:59.656347343Z"
+  version: 0.5.0
+digest: sha256:0545b7862144935e861641090f24e1cfb43ba73da7bcbca5013fae6e002e2daa
+generated: "2026-05-02T01:46:52.095684422Z"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -31,7 +31,7 @@ dependencies:
  - name: rclone-bucket
    alias: rclone-directus-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4
--- a/clusters/cl01tl/helm/elastic-operator/Chart.lock
+++ b/clusters/cl01tl/helm/elastic-operator/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
  repository: https://helm.elastic.co
-  version: 3.4.0
-digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
-generated: "2026-05-06T19:10:32.416627028Z"
+  version: 3.3.2
+digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
+generated: "2026-04-01T21:30:02.975920565Z"
--- a/clusters/cl01tl/helm/elastic-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/elastic-operator/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: eck-operator
-    version: 3.4.0
+    version: 3.3.2
    repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.4.0
+appVersion: v3.3.2
--- a/clusters/cl01tl/helm/excalidraw/values.yaml
+++ b/clusters/cl01tl/helm/excalidraw/values.yaml
@@ -8,7 +8,7 @@ excalidraw:
        main:
          image:
            repository: excalidraw/excalidraw
-            tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
+            tag: latest@sha256:b6cd04431d88f2756a7c3095cf7970884e8fd6b2800c9445b5a60a5c715bbf0c
          env:
            - name: NODE_ENV
              value: production
--- a/clusters/cl01tl/helm/harbor/Chart.lock
+++ b/clusters/cl01tl/helm/harbor/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
  repository: https://helm.goharbor.io
-  version: 1.19.0
+  version: 1.18.3
 - name: postgres-cluster
  repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:d4582a89bf46e503bf83d266aca5effaeec2554808a9e84cd1460e47f895f3e0
-generated: "2026-05-07T00:54:42.114366405Z"
+digest: sha256:8ce1125e688aa0f2da0f9f11157b8bab9bbc11aa82d16ed8e7c5141dccb508fd
+generated: "2026-05-02T01:47:39.632625858Z"
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: harbor
-    version: 1.19.0
+    version: 1.18.3
    repository: https://helm.goharbor.io
  - name: postgres-cluster
    alias: postgres-18-cluster
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -42,7 +42,7 @@ harbor:
  core:
    image:
      repository: ghcr.io/goharbor/harbor-core
-      tag: v2.15.1@sha256:887a85b8ea98b76bfc9f715f1a0785bb99f9a1034241513902dd6e95be922a83
+      tag: v2.15.0@sha256:32a13f6693a278261e9c9cb7eb606c5e2aa021308ae44fdc73225755048500a8
    replicas: 2
    existingSecret: harbor-secret
    secretName: harbor-secret
@@ -50,7 +50,7 @@ harbor:
  jobservice:
    image:
      repository: ghcr.io/goharbor/harbor-jobservice
-      tag: v2.15.1@sha256:0de4fd2ce3a02d3e6591b439e4674ea085885ddf43652b44004cc67eb19dba12
+      tag: v2.15.0@sha256:a22c7cccba4673b26ffb96f5c37971d85d879dd837bc82448e01c0170b68cf28
    replicas: 2
    jobLoggers:
      - stdout
@@ -63,7 +63,7 @@ harbor:
    controller:
      image:
        repository: ghcr.io/goharbor/harbor-registryctl
-        tag: v2.15.1@sha256:554147a956989175f63f8d41573d716c6ddf6052acd1749c88c0f99ce6ee2bff
+        tag: v2.15.0@sha256:463172f71d3a1e8d4f9e3b4e687a447f41fbc3126316d8c150dba04a903bbc47
    existingSecret: harbor-secret
    relativeurls: true
    credentials:
@@ -74,7 +74,7 @@ harbor:
    enabled: true
    image:
      repository: ghcr.io/goharbor/trivy-adapter-photon
-      tag: v2.15.1@sha256:f0c52bed36c083ec4fded26cefab01e4cd58c9354c261cb3156c69f57bb50131
+      tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
  database:
    type: external
    external:
@@ -90,7 +90,7 @@ harbor:
  exporter:
    image:
      repository: ghcr.io/goharbor/harbor-exporter
-      tag: v2.15.1@sha256:372275b6b6abeb571fa7bd5de458e3d75f1a1636503b3c0abe02938f2b285d75
+      tag: v2.15.0@sha256:ad065e4e1a0ee900a0bb1a03d57028ed4b51dc04933f5c1cb5c4aee301a72ddb
    replicas: 2
 postgres-18-cluster:
  mode: recovery
--- a/clusters/cl01tl/helm/home-assistant/Chart.yaml
+++ b/clusters/cl01tl/helm/home-assistant/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.5.0
+appVersion: 2026.4.4
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -12,7 +12,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
+            tag: 2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
          env:
            - name: TZ
              value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
+            tag: 4.117.0-ls334@sha256:1f384394d473c43ab6a39b2227ba3aa9c95af648ce3a67e1b4da1969c16c7c0d
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/karakeep/Chart.lock
+++ b/clusters/cl01tl/helm/karakeep/Chart.lock
@@ -13,6 +13,6 @@ dependencies:
  version: 1.1.1
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:bb424fe9bed824b37aa26d0e72d123fea5f5c3fcae4eaa21a54e087f2b52421a
-generated: "2026-05-07T01:20:20.489019444Z"
+  version: 0.5.0
+digest: sha256:399d686a6186e665a804f98a3dca1132d028f6cb9fc458866ec94b09920dbb6f
+generated: "2026-05-02T01:23:08.040832303Z"
--- a/clusters/cl01tl/helm/karakeep/Chart.yaml
+++ b/clusters/cl01tl/helm/karakeep/Chart.yaml
@@ -36,7 +36,7 @@ dependencies:
  - name: rclone-bucket
    alias: rclone-karakeep-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0
--- a/clusters/cl01tl/helm/libation/Chart.yaml
+++ b/clusters/cl01tl/helm/libation/Chart.yaml
@@ -26,4 +26,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.4.1
+appVersion: 13.3.6
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -12,7 +12,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 13.4.1@sha256:41cf509a8a1592c01c37cb4dc0d5a2e0c84faab20ecd8927f6bb3d73b237981b
+            tag: 13.3.6@sha256:54695675b9e838b7448c99f7fa03f5c34e0e35c7d7c82c44663959888be9c1b6
          env:
            - name: SLEEP_TIME
              value: "-1"
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
  repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.6.1
+  version: 13.5.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
  version: 1.8.0
-digest: sha256:227bda1a772cf7bbddd8bbc92b5591685bce413aced347f73a6d8d3aac6afcc5
-generated: "2026-05-07T04:06:28.803801385Z"
+digest: sha256:bef475f5b6770e4b582b4499e38417789b2bb59ce0ee93c0390daef780e5728d
+generated: "2026-05-02T19:36:44.416322-05:00"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 13.6.1
+    version: 13.5.0
    repository: oci://ghcr.io/grafana-community/helm-charts
  - name: alloy
    version: 1.8.0
--- a/clusters/cl01tl/helm/medialyze/values.yaml
+++ b/clusters/cl01tl/helm/medialyze/values.yaml
@@ -12,7 +12,7 @@ medialyze:
        main:
          image:
            repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.10.2@sha256:2ecf2cd277b7f54e0771d8f87fe0f0e10afe5a0c31832d9ba7c6e6f4b7100319
+            tag: 0.10.1@sha256:4139a6ea9839cb0ff8a1883568d8ae1833ec62eea34a19f777c7e0ac84ff6848
          env:
            - name: HOST_PORT
              value: 8080
--- a/clusters/cl01tl/helm/ntfy/Chart.lock
+++ b/clusters/cl01tl/helm/ntfy/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.12.1
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:e770cdcc60422973c2d15f60180d711f4afbcbd2bf2447441ff8d8b11e6911bd
-generated: "2026-05-07T01:20:45.92882726Z"
+  version: 0.5.0
+digest: sha256:7defcecc03024b82d4f1e19b39f0fbe1725b1077e72e1664326ffa0e40e4f27f
+generated: "2026-05-02T01:23:52.599948616Z"
--- a/clusters/cl01tl/helm/ntfy/Chart.yaml
+++ b/clusters/cl01tl/helm/ntfy/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
  - name: rclone-bucket
    alias: rclone-ntfy-attachments-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
 appVersion: 2.22.0
--- a/clusters/cl01tl/helm/openbao/Chart.lock
+++ b/clusters/cl01tl/helm/openbao/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 4.6.2
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.5.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3ff32c3b9dc70492a0dbabbbe6f51d9b1ffa36b677fb3f8bb6a790b4f9f05b34
-generated: "2026-05-07T01:21:04.452421645Z"
+  version: 0.5.0
+digest: sha256:ba842213ae2aad9eb8311f9316f21597f8b595a86d0fb3f579d61dd400782a0d
+generated: "2026-05-02T01:24:36.047963846Z"
--- a/clusters/cl01tl/helm/openbao/Chart.yaml
+++ b/clusters/cl01tl/helm/openbao/Chart.yaml
@@ -29,11 +29,11 @@ dependencies:
  - name: rclone-bucket
    alias: rclone-openbao-backups-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
  - name: rclone-bucket
    alias: rclone-openbao-backups-external
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/openbao.png
 # renovate: datasource=github-releases depName=openbao/openbao
 appVersion: v2.5.3
--- a/clusters/cl01tl/helm/rclone/Chart.lock
+++ b/clusters/cl01tl/helm/rclone/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:870599db3a25d2be6c107fed1481aec87a97db4b1fb7ce9668098e89c2877327
-generated: "2026-05-07T01:21:28.932348257Z"
+  version: 0.5.0
+digest: sha256:3b046c434d4913304077d8b5f72552f604ea0c0704c1f267981798508a5ef497
+generated: "2026-05-02T01:25:18.948375366Z"
--- a/clusters/cl01tl/helm/rclone/Chart.yaml
+++ b/clusters/cl01tl/helm/rclone/Chart.yaml
@@ -16,7 +16,7 @@ dependencies:
  - name: rclone-bucket
    alias: rclone-web-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/rclone.png
 # renovate: datasource=github-releases depName=rclone/rclone
 appVersion: v1.74.0
--- a/clusters/cl01tl/helm/rybbit/values.yaml
+++ b/clusters/cl01tl/helm/rybbit/values.yaml
@@ -112,7 +112,7 @@ rybbit:
        main:
          image:
            repository: clickhouse/clickhouse-server
-            tag: 26.4.1@sha256:1688b8976802967d4754307b408d00ee57fe0396b40c6ffc195be228699e4fc2
+            tag: 26.3.9@sha256:537014a67ce8bf1f5c79c2e2b26fb30b8285a86ffff03875bb14ed17ea35db62
          env:
            - name: CLICKHOUSE_DB
              value: analytics
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -10,7 +10,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
+            tag: latest@sha256:885f1cd1bb86d759aa4724a1986a61c000292823ff8eeb17d34de1a8acb74477
          env:
            - name: SEARXNG_BASE_URL
              value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
+            tag: latest@sha256:885f1cd1bb86d759aa4724a1986a61c000292823ff8eeb17d34de1a8acb74477
          env:
            - name: SEARXNG_BASE_URL
              value: https://searxng.alexlebens.net/
--- a/clusters/cl01tl/helm/talos/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/talos/templates/external-secret.yaml
@@ -91,23 +91,23 @@ spec:
  data:
    - secretKey: AWS_ACCESS_KEY_ID
      remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
        property: AWS_ACCESS_KEY_ID
    - secretKey: AWS_SECRET_ACCESS_KEY
      remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
        property: AWS_SECRET_ACCESS_KEY
    - secretKey: AWS_REGION
      remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
        property: AWS_REGION
    - secretKey: BUCKET_NAME
      remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
        property: BUCKET
    - secretKey: BUCKET
      remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
        property: BUCKET_PATH
    - secretKey: AGE_X25519_PUBLIC_KEY
      remoteRef:
--- a/clusters/cl01tl/helm/talos/values.yaml
+++ b/clusters/cl01tl/helm/talos/values.yaml
@@ -21,7 +21,7 @@ etcd-backup:
        backup:
          image:
            repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
+            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
          command:
            - /talos-backup
          workingDir: /tmp
@@ -109,7 +109,7 @@ etcd-backup:
        backup:
          image:
            repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
+            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
          command:
            - /talos-backup
          workingDir: /tmp
@@ -197,7 +197,7 @@ etcd-backup:
        backup:
          image:
            repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
+            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
          command:
            - /talos-backup
          workingDir: /tmp
@@ -228,7 +228,7 @@ etcd-backup:
                  name: talos-etcd-backup-external-config
                  key: AWS_REGION
            - name: CUSTOM_S3_ENDPOINT
-              value: https://s3.us-east-005.backblazeb2.com
+              value: https://nyc3.digitaloceanspaces.com
            - name: BUCKET
              valueFrom:
                secretKeyRef:
@@ -405,7 +405,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
          args:
            - etcd
            - defrag
@@ -435,7 +435,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
          args:
            - etcd
            - defrag
@@ -465,7 +465,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
          args:
            - etcd
            - defrag
--- a/clusters/cl01tl/helm/traefik/Chart.lock
+++ b/clusters/cl01tl/helm/traefik/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
  repository: https://traefik.github.io/charts
-  version: 40.0.0
+  version: 39.0.9
 - name: traefik-crds
  repository: https://traefik.github.io/charts
-  version: 1.18.0
-digest: sha256:d887af2faf8b07488d6c4c3731337768492292d99edf69040498e24efe5b0a65
-generated: "2026-05-06T23:28:40.081576086Z"
+  version: 1.17.0
+digest: sha256:07d8c441e598f82718a4755dde9732afa68137b87abcffb738309eb23f57e75e
+generated: "2026-05-06T03:06:41.336775281Z"
--- a/clusters/cl01tl/helm/traefik/Chart.yaml
+++ b/clusters/cl01tl/helm/traefik/Chart.yaml
@@ -14,10 +14,10 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: traefik
-    version: 40.0.0
+    version: 39.0.9
    repository: https://traefik.github.io/charts
  - name: traefik-crds
-    version: 1.18.0
+    version: 1.17.0
    repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/traefik.png
 # renovate: datasource=github-releases depName=traefik/traefik
--- a/clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml
+++ b/clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml
@@ -8,7 +8,7 @@ metadata:
    {{- include "custom.labels" . | nindent 4 }}
 spec:
  # renovate: datasource=docker depName=elasticsearch
-  version: 9.4.0
+  version: 9.3.4
  auth:
    fileRealm:
      - secretName: tubearchivist-elasticsearch-config
--- a/renovate.json
+++ b/renovate.json
@@ -166,26 +166,19 @@
      ],
      "matchPackageNames": [
        "/(^|/|-)(actual)/",
-        "/(^|/|-)(alloy)/",
-        "/(^|/|-)(clickhouse)/",
-        "/(^|/|-)(code-server)/",
-        "/(^|/|-)(home-assistant)/",
        "/(^|/|-)(kube-prometheus-stack)/",
-        "/(^|/|-)(libation|Libation)/",
+        "/(^|/|-)(libation)/",
        "/(^|/|-)(lidarr)/",
-        "/(^|/|-)(loki)/",
        "/(^|/|-)(medialyze|MediaLyze)/",
        "/(^|/|-)(musicgrabber)/",
        "/(^|/|-)(ollama)/",
        "/(^|/|-)(outline)/",
-        "/(^|/|-)(prowlarr)/",
        "/(^|/|-)(qui)/",
        "/(^|/|-)(radarr)/",
        "/(^|/|-)(renovate)/",
        "/(^|/|-)(sonarr)/",
        "/(^|/|-)(tdarr)/",
        "/(^|/|-)(traefik)/",
-        "/(^|/|-)(valkey)/",
        "/(^|/|-)(yubal)/"
      ],
      "addLabels": [