1024 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jakman85andClaude Opus 5.5	9537ca2ddb	feat(ci): run the merge gate inside the CI-built toolbox image, pinned by digest ... The gate job now runs in gitea.home.keithjackson.dev/home-network/toolbox@sha256:83a3501e... (the image images.yaml publishes from infra/devcontainer/Containerfile) instead of catthehacker/ubuntu:act-22.04 plus a per-run download of yamllint, check-jsonschema, kyverno, promtool and chainsaw. Local (dev.sh) and CI now gate on the identical toolchain. - actions/checkout (Node) replaced by a plain-git step with fetch-depth-0 semantics; the toolbox has no Node. The job token is not persisted into .git/config. - The install step is replaced by a check that every ci/versions.env pin equals the image's /etc/dev-toolchain-versions, so the pins stay enforced. - Renovate follows the digest through a `# renovate-digest:` marker; github-actions manager disabled for own images. - install-tools.sh kept (merge-gate.yaml blueprint + alert-rules-unit-tested check use it). Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-08 00:12:03 -06:00
jakman85	e8d26669a4	Merge pull request 'chore(deps): Update dependency keycloak/keycloak-k8s-resources to v26.8.2' (#121) from renovate/keycloak-operator into main ... Reviewed-on: #121	2026-11-08 05:53:29 +00:00
jakman85	048254bfaf	Merge pull request 'feat(gitea): upgrade 1.27.3 -> 28.3.0' (#142) from feat/gitea-28 into main ... Reviewed-on: #142	2026-11-08 05:41:34 +00:00
jakman85	dd94101647	Merge pull request 'feat(devcontainer): bake velero CLI into the toolbox, pinned to prod server v1.18.2' (#143) from feat/devcontainer-velero-cli into main ... Reviewed-on: #143	2026-11-08 05:30:28 +00:00
jakman85andClaude Opus 5.5	60e3a24652	feat(devcontainer): bake velero CLI into the toolbox, pinned to prod server v1.18.2 ... The velero CLI and server are version-coupled, so VELERO_VERSION follows the server running on prod (docker.io/velero/velero:v1.18.2, chart 12.2.3, verified 2026-11-07). It has no renovate marker on purpose: bump it together with the chart's appVersion. The verify stage asserts that `velero version --client-only` reports the pin. The build arg reaches CI through build-image.sh --print-build-args, so no .gitea/ or ci/ change is needed. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-07 23:18:21 -06:00
jakman85andClaude Opus 5.5	8a9baa92bc	feat(gitea): upgrade 1.27.3 -> 28.3.0 ... Gitea dropped the "1." prefix; 28.x is the successor of 1.27. - image 28.3.0, update.range >=28.0.0 <29.0.0, Renovate ceiling <29.0.0 - drop GITEA__server__DOMAIN (no longer read in 28, ROOT_URL is the source) - declare RUN_RETENTION_DAYS=400, EGRESS_MODE=lax (no allow list: the OIDC login source is not gated by the egress policy in 28.3.0), and DISABLE_REGISTRATION=true (28's new default) - document autoRollbackOnFailedHealth as inert (no ImagePolicy is rendered); rollback is a PVC restore because the DB migration is one-way Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-07 22:55:06 -06:00
jakman85	2d32b9bd7d	Merge pull request 'chore(deps): Update actions/upload-artifact action to v7' (#113) from renovate/major-github-artifact-actions into main ... Reviewed-on: #113 Reviewed-by: Keith Jackson <[email protected]>	2026-11-08 04:52:04 +00:00
jakman85	9f82b2accf	Merge pull request 'chore(deps): Update actions/checkout action to v7' (#112) from renovate/actions-checkout-7.x into main ... Reviewed-on: #112 Reviewed-by: Keith Jackson <[email protected]>	2026-11-08 04:48:40 +00:00
jakman85	990b309cbb	Merge pull request 'chore(deps): Update docker Docker tag to v29' (#114) from renovate/docker-29.x into main ... Reviewed-on: #114	2026-11-08 04:39:04 +00:00
jakman85	cedcb01975	Merge pull request 'chore(deps): Update ghcr.io/cloudnative-pg/postgresql Docker tag to v16.15' (#124) from renovate/ghcr.io-cloudnative-pg-postgresql-16.x into main ... Reviewed-on: #124	2026-11-08 04:28:19 +00:00
jakman85	2b279d4f21	Merge pull request 'chore(deps): Update Helm release headlamp to <0.47.0' (#130) from renovate/headlamp-0.x into main ... Reviewed-on: #130	2026-11-08 04:28:01 +00:00
jakman85	12c28adf4d	Merge pull request 'feat(conformance): L0 guard — external-dns annotationPrefix must match the tree (stacked on #140)' (#141) from feat/l0-externaldns-annotation-prefix into main ... Reviewed-on: #141	2026-11-08 00:08:29 +00:00
jakman85	b0230ba736	Merge pull request 'fix(dns): pin external-dns annotationPrefix — v0.23 ignored every alpha annotation' (#140) from fix/public-dns-wan-a-record into main ... Reviewed-on: #140	2026-11-08 00:01:06 +00:00
jakman85andClaude Opus 5.5	9c51f60a35	feat(conformance): L0 guard that the external-dns annotationPrefix matches the tree ... Add assertion (8) to internal-services-publish-no-public-dns. The external-dns HelmRelease must declare annotationPrefix explicitly, and every external-dns annotation in apps/, platform/, runbooks/ and catalog/render.py must use that prefix. The v0.23.0 default-prefix change on 2026-11-07 ignored the controller: none, target and hostname annotations while assertions (1)-(3) stayed green. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-07 17:56:12 -06:00
jakman85andClaude Opus 5.5	267446c68f	fix(dns): pin external-dns annotationPrefix to the alpha prefix ... external-dns v0.22 changed its default annotation prefix to external-dns.kubernetes.io/ with no fallback. Renovate #129 moved the chart to 1.23.0 (app v0.23.0), and at 12:13Z it ignored every alpha-prefixed annotation in this repo: the Gateway target (public names went to A 192.168.2.20), controller: none (jackett, pihole and semaphore got published), and the L4 Service hostnames (unifi and crafty-mc were deleted). Set annotationPrefix: external-dns.alpha.kubernetes.io/ to restore the v0.21 reading. Floor the chart at 1.23.0, because the flag needs app >= 0.22. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-07 17:50:13 -06:00
jakman85	d1994b16e8	Merge pull request 'chore(deps): Update Helm release external-dns to <1.24.0' (#129) from renovate/external-dns-1.x into main ... Reviewed-on: #129	2026-11-07 12:12:00 +00:00
jakman85	d7317606e7	Merge pull request 'feat: PM-Agent also need to look at PR comments' (#117) from feat/pm-agent-pr-mentions into main ... Reviewed-on: #117	2026-11-07 12:07:34 +00:00
jakman85	970d65d193	Merge pull request 'chore(deps): Update python Docker tag to v3.15.2' (#135) from renovate/python-3.x into main ... Reviewed-on: #135	2026-11-07 12:06:07 +00:00
jakman85	6719082e5c	Merge pull request 'chore(deps): Update gitea/act_runner Docker tag to v0.6.1' (#127) from renovate/gitea-act_runner-0.x into main ... Reviewed-on: #127	2026-11-07 12:04:54 +00:00
jakman85	428b77f08c	Merge pull request 'chore(deps): Update gitea/gitea Docker tag to v1.27.3' (#128) from renovate/gitea-gitea-1.x into main ... Reviewed-on: #128	2026-11-07 11:44:36 +00:00
renovate-bot	2ee7d5036a	Merge pull request 'chore(deps): Update registry.k8s.io/sig-storage/snapshot-controller Docker tag to v8.7.0' (#138) from renovate/registry.k8s.io-sig-storage-snapshot-controller-8.x into main	2026-11-07 09:22:38 +00:00
renovate-bot	5736f42e22	Merge pull request 'chore(deps): Update registry.gitlab.com/crafty-controller/crafty-4 Docker tag to v4.11.0' (#137) from renovate/registry.gitlab.com-crafty-controller-crafty-4-4.x into main	2026-11-07 09:19:37 +00:00
renovate-bot	773254e3a1	Merge pull request 'chore(deps): Update nginxinc/nginx-unprivileged Docker tag to v1.31.7' (#134) from renovate/nginxinc-nginx-unprivileged-1.x into main	2026-11-07 09:10:44 +00:00
renovate-bot	264cd7a46d	Merge pull request 'chore(deps): Update lscr.io/linuxserver/radarr Docker tag to v5.28.0' (#133) from renovate/lscr.io-linuxserver-radarr-5.x into main	2026-11-07 09:07:45 +00:00
renovate-bot	979cc4b21d	Merge pull request 'chore(deps): Update lscr.io/linuxserver/qbittorrent Docker tag to v5.3.0' (#132) from renovate/lscr.io-linuxserver-qbittorrent-5.x into main	2026-11-07 09:04:44 +00:00
renovate-bot	be6742c22b	Merge pull request 'chore(deps): Update ghcr.io/seerr-team/seerr Docker tag to v3.5.1' (#126) from renovate/ghcr.io-seerr-team-seerr-3.x into main	2026-11-07 08:46:56 +00:00
renovate-bot	c8b915d8f2	Merge pull request 'chore(deps): Update ghcr.io/gethomepage/homepage Docker tag to v2.7.0' (#125) from renovate/ghcr.io-gethomepage-homepage-2.x into main	2026-11-07 08:43:58 +00:00
renovate-bot	6cd3bd29a9	Merge pull request 'chore(deps): Update favonia/cloudflare-ddns Docker tag to v1.18.0' (#123) from renovate/favonia-cloudflare-ddns-1.x into main	2026-11-07 08:37:58 +00:00
renovate-bot	2040d35222	Merge pull request 'chore(deps): Update docker.io/library/alpine Docker tag to v3.24' (#122) from renovate/docker.io-library-alpine-3.x into main	2026-11-07 08:35:00 +00:00
renovate-bot	47fc27ff08	Merge pull request 'chore(deps): Update velero/velero-plugin-for-aws Docker tag to v1.14.4' (#120) from renovate/velero-velero-plugin-for-aws-1.x into main	2026-11-07 08:29:02 +00:00
renovate-bot	5e8b080298	Merge pull request 'chore(deps): Update semaphoreui/semaphore Docker tag to v2.19.17' (#119) from renovate/semaphoreui-semaphore-2.x into main	2026-11-07 08:26:05 +00:00
renovate-bot	24a0e1e4c5	Merge pull request 'chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3025-ls29' (#118) from renovate/lscr.io-linuxserver-jackett-0.x into main	2026-11-07 08:23:06 +00:00
renovate-bot	3aec6886d8	chore(deps): Update docker Docker tag to v29	2026-11-07 08:19:08 +00:00
renovate-bot	1b2ec82a9d	chore(deps): Update actions/upload-artifact action to v7	2026-11-07 08:19:06 +00:00
renovate-bot	3724d3068b	chore(deps): Update actions/checkout action to v7	2026-11-07 08:19:03 +00:00
renovate-bot	c6ad6b559c	chore(deps): Update registry.k8s.io/sig-storage/snapshot-controller Docker tag to v8.7.0	2026-11-07 08:19:01 +00:00
renovate-bot	6efc49d415	chore(deps): Update registry.gitlab.com/crafty-controller/crafty-4 Docker tag to v4.11.0	2026-11-07 08:18:58 +00:00
renovate-bot	a6dc2d1adb	chore(deps): Update python Docker tag to v3.15.2	2026-11-07 08:18:46 +00:00
renovate-bot	75a472cf67	chore(deps): Update nginxinc/nginx-unprivileged Docker tag to v1.31.7	2026-11-07 08:18:43 +00:00
renovate-bot	24b02f37df	chore(deps): Update lscr.io/linuxserver/radarr Docker tag to v5.28.0	2026-11-07 08:18:02 +00:00
renovate-bot	be3ce4645b	chore(deps): Update lscr.io/linuxserver/qbittorrent Docker tag to v5.3.0	2026-11-07 08:17:42 +00:00
renovate-bot	b7a77a7d1e	chore(deps): Update Helm release headlamp to <0.47.0	2026-11-07 08:17:34 +00:00
renovate-bot	1a94b0535c	chore(deps): Update Helm release external-dns to <1.24.0	2026-11-07 08:17:30 +00:00
renovate-bot	0e7d0204b3	chore(deps): Update gitea/gitea Docker tag to v1.27.3	2026-11-07 08:17:22 +00:00
renovate-bot	b77572f843	chore(deps): Update gitea/act_runner Docker tag to v0.6.1	2026-11-07 08:17:20 +00:00
renovate-bot	76b5d038fb	chore(deps): Update ghcr.io/seerr-team/seerr Docker tag to v3.5.1	2026-11-07 08:17:16 +00:00
renovate-bot	306f6f4fb0	chore(deps): Update ghcr.io/gethomepage/homepage Docker tag to v2.7.0	2026-11-07 08:17:12 +00:00
renovate-bot	3ceaad15e0	chore(deps): Update ghcr.io/cloudnative-pg/postgresql Docker tag to v16.15	2026-11-07 08:17:11 +00:00
renovate-bot	ae772e050d	chore(deps): Update favonia/cloudflare-ddns Docker tag to v1.18.0	2026-11-07 08:17:08 +00:00
renovate-bot	517dfc9030	chore(deps): Update docker.io/library/alpine Docker tag to v3.24	2026-11-07 08:17:05 +00:00