chore(deps): update ghcr.io/goharbor/harbor-portal docker tag to v2.15.1

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.168.5@sha256:38aac6e29e09288bc3fb3b95ba9445962508a1081013144d5b6ec5a6735707b9
+    container: ghcr.io/renovatebot/renovate:43.165.1@sha256:b1e44b4b22ded56a2ccd5f41edb764b8ef62dd537b3b32e60d676b0424e7bc06
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/descheduler/values.yaml

@@ -10,7 +10,7 @@ descheduler:
     requests:
       cpu: 10m
       memory: 50Mi
-  deschedulingInterval: 2m
+  deschedulingInterval: 5m
   replicas: 3
   leaderElection:
     enabled: true
@@ -51,13 +51,13 @@ descheduler:
           - name: LowNodeUtilization
             args:
               thresholds:
-                cpu: 30
-                memory: 30
-                pods: 30
+                cpu: 20
+                memory: 20
+                pods: 20
               targetThresholds:
-                cpu: 45
-                memory: 45
-                pods: 45
+                cpu: 50
+                memory: 50
+                pods: 60
         plugins:
           balance:
             enabled:

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.4.0
-digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
-generated: "2026-05-06T19:10:32.416627028Z"
+  version: 3.3.2
+digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
+generated: "2026-04-01T21:30:02.975920565Z"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.4.0
+    version: 3.3.2
     repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.4.0
+appVersion: v3.3.2

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -8,7 +8,7 @@ excalidraw:
         main:
           image:
             repository: excalidraw/excalidraw
-            tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
+            tag: latest@sha256:b6cd04431d88f2756a7c3095cf7970884e8fd6b2800c9445b5a60a5c715bbf0c
           env:
             - name: NODE_ENV
               value: production

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -56,4 +56,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.26.1
+appVersion: 1.26.0

clusters/cl01tl/helm/gitea/values.yaml

@@ -9,7 +9,7 @@ gitea:
       maxUnavailable: 1
   image:
     repository: gitea/gitea
-    tag: 1.26.1
+    tag: 1.25.5
   service:
     http:
       type: ClusterIP

clusters/cl01tl/helm/harbor/values.yaml

@@ -42,7 +42,7 @@ harbor:
   core:
     image:
       repository: ghcr.io/goharbor/harbor-core
-      tag: v2.15.1@sha256:887a85b8ea98b76bfc9f715f1a0785bb99f9a1034241513902dd6e95be922a83
+      tag: v2.15.0@sha256:32a13f6693a278261e9c9cb7eb606c5e2aa021308ae44fdc73225755048500a8
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -50,7 +50,7 @@ harbor:
   jobservice:
     image:
       repository: ghcr.io/goharbor/harbor-jobservice
-      tag: v2.15.1@sha256:0de4fd2ce3a02d3e6591b439e4674ea085885ddf43652b44004cc67eb19dba12
+      tag: v2.15.0@sha256:a22c7cccba4673b26ffb96f5c37971d85d879dd837bc82448e01c0170b68cf28
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,7 +63,7 @@ harbor:
     controller:
       image:
         repository: ghcr.io/goharbor/harbor-registryctl
-        tag: v2.15.1@sha256:554147a956989175f63f8d41573d716c6ddf6052acd1749c88c0f99ce6ee2bff
+        tag: v2.15.0@sha256:463172f71d3a1e8d4f9e3b4e687a447f41fbc3126316d8c150dba04a903bbc47
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -74,7 +74,7 @@ harbor:
     enabled: true
     image:
       repository: ghcr.io/goharbor/trivy-adapter-photon
-      tag: v2.15.1@sha256:f0c52bed36c083ec4fded26cefab01e4cd58c9354c261cb3156c69f57bb50131
+      tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
   database:
     type: external
     external:
@@ -90,7 +90,7 @@ harbor:
   exporter:
     image:
       repository: ghcr.io/goharbor/harbor-exporter
-      tag: v2.15.1@sha256:372275b6b6abeb571fa7bd5de458e3d75f1a1636503b3c0abe02938f2b285d75
+      tag: v2.15.0@sha256:ad065e4e1a0ee900a0bb1a03d57028ed4b51dc04933f5c1cb5c4aee301a72ddb
     replicas: 2
 postgres-18-cluster:
   mode: recovery

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.10.2@sha256:2ecf2cd277b7f54e0771d8f87fe0f0e10afe5a0c31832d9ba7c6e6f4b7100319
+            tag: 0.10.1@sha256:4139a6ea9839cb0ff8a1883568d8ae1833ec62eea34a19f777c7e0ac84ff6848
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/rybbit/values.yaml

@@ -112,7 +112,7 @@ rybbit:
         main:
           image:
             repository: clickhouse/clickhouse-server
-            tag: 26.4.1@sha256:1688b8976802967d4754307b408d00ee57fe0396b40c6ffc195be228699e4fc2
+            tag: 26.3.9@sha256:537014a67ce8bf1f5c79c2e2b26fb30b8285a86ffff03875bb14ed17ea35db62
           env:
             - name: CLICKHOUSE_DB
               value: analytics

clusters/cl01tl/helm/searxng/values.yaml

@@ -10,7 +10,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
+            tag: latest@sha256:885f1cd1bb86d759aa4724a1986a61c000292823ff8eeb17d34de1a8acb74477
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
+            tag: latest@sha256:885f1cd1bb86d759aa4724a1986a61c000292823ff8eeb17d34de1a8acb74477
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/talos/values.yaml

@@ -405,7 +405,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
           args:
             - etcd
             - defrag
@@ -435,7 +435,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
           args:
             - etcd
             - defrag
@@ -465,7 +465,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
           args:
             - etcd
             - defrag

clusters/cl01tl/helm/traefik/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 39.0.9
 - name: traefik-crds
   repository: https://traefik.github.io/charts
-  version: 1.18.0
-digest: sha256:6f0f9f0bf3dddf0cf0227c8a64b4fa3c92b79539e620115e176029aaf4cee6a5
-generated: "2026-05-06T15:06:01.237318116Z"
+  version: 1.17.0
+digest: sha256:07d8c441e598f82718a4755dde9732afa68137b87abcffb738309eb23f57e75e
+generated: "2026-05-06T03:06:41.336775281Z"

clusters/cl01tl/helm/traefik/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
     version: 39.0.9
     repository: https://traefik.github.io/charts
   - name: traefik-crds
-    version: 1.18.0
+    version: 1.17.0
     repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/traefik.png
 # renovate: datasource=github-releases depName=traefik/traefik

clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml

@@ -8,7 +8,7 @@ metadata:
     {{- include "custom.labels" . | nindent 4 }}
 spec:
   # renovate: datasource=docker depName=elasticsearch
-  version: 9.4.0
+  version: 9.3.4
   auth:
     fileRealm:
       - secretName: tubearchivist-elasticsearch-config

hosts/ps10rp/gitea/compose.yaml

@@ -33,7 +33,7 @@ services:
             - postgresql18:/var/lib/postgresql
 
     gitea:
-        image: gitea/gitea:1.26.1@sha256:d8667667b4ccbd1f67b86a376bffcc0a17b16cf71309ed04e3918231776d47dd
+        image: gitea/gitea:1.26.0@sha256:af07b88edbb2173d20932f9c75ebcf4e61d7d5c2d6a7ab5cc6b97cba28aea352
         container_name: gitea
         depends_on:
             - postgresql

renovate.json

@@ -166,12 +166,9 @@
       ],
       "matchPackageNames": [
         "/(^|/|-)(actual)/",
-        "/(^|/|-)(clickhouse)/",
-        "/(^|/|-)(home-assistant)/",
         "/(^|/|-)(kube-prometheus-stack)/",
-        "/(^|/|-)(libation|Libation)/",
+        "/(^|/|-)(libation)/",
         "/(^|/|-)(lidarr)/",
-        "/(^|/|-)(loki)/",
         "/(^|/|-)(medialyze|MediaLyze)/",
         "/(^|/|-)(musicgrabber)/",
         "/(^|/|-)(ollama)/",