Merge pull request 'chore(deps): Update python Docker tag to v3.15.2' (#135 ) from renovate/python-3.x into main

Reviewed-on: #135
Merge pull request 'chore(deps): Update gitea/act_runner Docker tag to v0.6.1' (#127 ) from renovate/gitea-act_runner-0.x into main
2026-11-07 12:06:07 +00:00 · 2026-11-07 12:04:54 +00:00 · 2026-11-07 11:44:36 +00:00 · 2026-11-07 09:22:38 +00:00 · 2026-11-07 09:19:37 +00:00 · 2026-11-07 09:10:44 +00:00
37 changed files with 82 additions and 38 deletions
@@ -78,7 +78,7 @@ spec:
    spec:
      containers:
      - name: gitea
-        image: gitea/gitea:1.24.3
+        image: gitea/gitea:1.27.3
        ports:
        - containerPort: 3000
        env:
@@ -78,7 +78,7 @@ spec:
    spec:
      containers:
      - name: jackett
-        image: lscr.io/linuxserver/jackett:v0.24.2865-ls7
+        image: lscr.io/linuxserver/jackett:v0.24.3025-ls29
        ports:
        - containerPort: 9117
        volumeMounts:
@@ -62,7 +62,7 @@ spec:
    spec:
      containers:
      - name: pihole
-        image: pihole/pihole:2026.10.0
+        image: pihole/pihole:2026.10.1
        ports:
        - containerPort: 80
        env:
@@ -120,7 +120,7 @@ spec:
    spec:
      containers:
      - name: plex
-        image: plexinc/pms-docker:1.43.4.10903-e5521bd8c
+        image: plexinc/pms-docker:1.43.6.11085-d1e52e169
        ports:
        - containerPort: 32400
        env:
@@ -122,7 +122,7 @@ spec:
    spec:
      containers:
      - name: qbittorrent
-        image: lscr.io/linuxserver/qbittorrent:5.1.2
+        image: lscr.io/linuxserver/qbittorrent:5.3.0
        ports:
        - containerPort: 8080
        env:
@@ -167,7 +167,7 @@ spec:
      containers:
        # ---- act_runner: registers with Gitea, dispatches jobs to the DinD daemon ----
        - name: runner
-          image: gitea/act_runner:0.2.11
+          image: gitea/act_runner:0.6.1
          # No `command:` override. The image's own entrypoint (/sbin/tini -- /opt/act/run.sh)
          # registers from env on first boot and runs `act_runner daemon`. The two wait-loops
          # that used to live here are gone: kubelet now holds this container until the dind
@@ -122,7 +122,7 @@ spec:
    spec:
      containers:
      - name: radarr
-        image: lscr.io/linuxserver/radarr:5.21.1
+        image: lscr.io/linuxserver/radarr:5.28.0
        ports:
        - containerPort: 7878
        env:
@@ -78,7 +78,7 @@ spec:
    spec:
      containers:
      - name: semaphore
-        image: semaphoreui/semaphore:v2.19.10
+        image: semaphoreui/semaphore:v2.19.17
        ports:
        - containerPort: 3000
        env:
@@ -122,7 +122,7 @@ spec:
    spec:
      containers:
      - name: sonarr
-        image: lscr.io/linuxserver/sonarr:4.0.15
+        image: lscr.io/linuxserver/sonarr:4.0.20
        ports:
        - containerPort: 8989
        env:
@@ -75,7 +75,7 @@ spec:
    spec:
      containers:
      - name: seerr
-        image: ghcr.io/seerr-team/seerr:v3.4.1
+        image: ghcr.io/seerr-team/seerr:v3.5.1
        ports:
        - containerPort: 5055
        volumeMounts:
@@ -10,7 +10,7 @@
 name: gitea
 kind: container
 source:
-  image: gitea/gitea:1.24.3     # pinned recent stable tag (R-UPD-01); update.range governs advancement
+  image: gitea/gitea:1.27.3     # pinned recent stable tag (R-UPD-01); update.range governs advancement
 # Headless-install bootstrap (formerly apps/gitea-bootstrap-patch.yaml; now first-class via the
 # ServiceDefinition env/envFrom/lifecycle fields, schema >=1.2.0). Gitea must come up INSTALLED
 # without the interactive web wizard and with a FIXED, persistent SECRET_KEY, so all of this is
@@ -16,7 +16,7 @@
 name: jackett
 kind: container
 source:
-  image: lscr.io/linuxserver/jackett:v0.24.2865-ls7
+  image: lscr.io/linuxserver/jackett:v0.24.3025-ls29
 exposure: internal              # LAN-only web UI at jackett.${BASE_DOMAIN} (docs/13 row 4; R-DNS/R-NET)
 egress: vpn                     # indexer scraping via node PIA tunnel + kill-switch (docs/03; ADR-0015; R-NET-05/06)
 storage:
@@ -5,7 +5,7 @@
 name: pihole
 kind: container
 source:
-  image: pihole/pihole:2026.10.0
+  image: pihole/pihole:2026.10.1
 exposure: internal            # LAN-only admin UI (docs/13 row 6; R-DNS/R-NET)
 egress: internet              # normal WAN egress (docs/03; R-NET-05)
 storage:
@@ -12,7 +12,7 @@
 name: plex
 kind: container
 source:
-  image: plexinc/pms-docker:1.43.4.10903-e5521bd8c
+  image: plexinc/pms-docker:1.43.6.11085-d1e52e169
 # plexinc/pms-docker env. Rendered VERBATIM onto the app container by render.py (schema env list).
 env:
  # PLEX_UID/PLEX_GID: the image boots as root (s6 PID1), chowns /config to this uid/gid, then drops
@@ -30,7 +30,7 @@
 name: qbittorrent
 kind: container
 source:
-  image: lscr.io/linuxserver/qbittorrent:5.1.2   # pinned stable tag (R-UPD-01); update.range governs advancement
+  image: lscr.io/linuxserver/qbittorrent:5.3.0   # pinned stable tag (R-UPD-01); update.range governs advancement
 # LinuxServer images run their service as the user `abc`, whose uid/gid these two set. They are
 # LOAD-BEARING FOR THE BULK MOUNT, not cosmetic — exactly as on sonarr/radarr. Measured on prod
 # 2026-09-12 BEFORE this change: `id` inside the container reported the qbittorrent-nox process as
@@ -8,7 +8,7 @@
 name: radarr
 kind: container
 source:
-  image: lscr.io/linuxserver/radarr:5.21.1   # pinned stable v5 tag (R-UPD-01); update.range governs advancement
+  image: lscr.io/linuxserver/radarr:5.28.0   # pinned stable v5 tag (R-UPD-01); update.range governs advancement
 # LinuxServer images run their service as the user `abc`, whose uid/gid these two set. They are
 # LOAD-BEARING for the bulk mount, not cosmetic: see the storage note below. The default is 911,
 # which cannot write a 1000:3000-owned 0755 tree.
@@ -24,7 +24,7 @@
 name: seerr
 kind: container
 source:
-  image: ghcr.io/seerr-team/seerr:v3.4.1   # Seerr: maintained Overseerr/Jellyseerr successor, Plex-native request UI (docs/13 row 5); served on 5055
+  image: ghcr.io/seerr-team/seerr:v3.5.1   # Seerr: maintained Overseerr/Jellyseerr successor, Plex-native request UI (docs/13 row 5); served on 5055
 # The ghcr.io/seerr-team/seerr image runs as the non-root user `node:node` (UID 1000 / GID 1000 —
 # the standard node base-image user; confirmed from the image config's User field). On boot the app
 # creates /app/config/logs and writes its settings/DB under the mounted /app/config PVC. A fresh
@@ -22,7 +22,7 @@
 name: semaphore
 kind: container
 source:
-  image: semaphoreui/semaphore:v2.19.10   # pinned recent stable tag (R-UPD-01); update.range governs advancement
+  image: semaphoreui/semaphore:v2.19.17   # pinned recent stable tag (R-UPD-01); update.range governs advancement
 env:
  # --- PostgreSQL connection (the CNPG-DB pattern). DIALECT/HOST/PORT/DB/USER are literals; PASS is
  #     sourced from the in-namespace SOPS secret (the CNPG -app secret lives in ns semaphore-db,
@@ -8,7 +8,7 @@
 name: sonarr
 kind: container
 source:
-  image: lscr.io/linuxserver/sonarr:4.0.15   # pinned stable v4 tag (R-UPD-01); update.range governs advancement
+  image: lscr.io/linuxserver/sonarr:4.0.20   # pinned stable v4 tag (R-UPD-01); update.range governs advancement
 # LinuxServer images run their service as the user `abc`, whose uid/gid these two set. They are
 # LOAD-BEARING for the bulk mount, not cosmetic: see the storage note below. The default is 911,
 # which cannot write a 1000:3000-owned 0755 tree.
@@ -0,0 +1,41 @@
+---
+date: 2026-10-31
+branch: chore/pm-agent-digest-99
+title: Pin pm-agent dispatcher and worker to the agent-runner digest built from PR #99's merge
+---
+
+## What changed
+
+- `platform/pm-agent/deployment.yaml`: the dispatcher `image:` moves from
+  `agent-runner@sha256:df36d9b7…` (images run 383) to
+  `agent-runner@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2`.
+  `config-generation` goes from "4" to "5" so the pod rolls.
+- `platform/pm-agent/configmap.yaml`: `PM_WORKER_IMAGE` gets the same digest. A comment line
+  records where it came from. The `# renovate-digest:` marker still sits directly above both
+  values.
+- No other values changed. `PM_DRY_RUN` stays "false". `PM_DECISION_MAX_TURNS` is not set, so
+  it keeps its in-code default of 1. No `*.sops.yaml` was touched.
+
+## What I verified
+
+- PR #99's merge commit is `466f63ec3c3df968a1dab25a8811dcd41961efde` (origin/main HEAD at
+  branch time).
+- The Gitea Actions tasks API shows the `images` workflow (images.yaml) on that commit as
+  **run 394** (task 643), with event `push` and status `success`.
+- I resolved the digest read-only from the registry by HEADing the manifests with OCI and
+  Docker Accept headers. Both `agent-runner:sha-466f63ec3c3d` and `agent-runner:main` returned
+  `200`, an `application/vnd.oci.image.manifest.v1+json` content type, and
+  `docker-content-digest: sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2`.
+  The two are identical.
+- Toolbox gate: the rc and skipped stages are in the PR description.
+
+## What I did NOT verify
+
+- That the dispatcher actually rolls to the new digest after merge, and that Flux applies it.
+  Flux's `lastAppliedRevision` and the pod's image were not checked. That is post-merge work.
+- That the new image surfaces the triage failure's real cause. It will show only on the next
+  failing triage, in the dispatcher log.
+- That admission (rule 7, `imagePullSecrets`) admits worker Jobs from this digest. The
+  template comes from `infra/agent/` at PR #99's merge, which still carries the
+  `imagePullSecrets` entry, but no Job was created to prove it.
+- I did not run the image's own selftest against this digest.
@@ -60,7 +60,7 @@ spec:
          # Pinned by digest (the multi-arch index). The kubernetes manager in renovate.json5
          # tracks platform/**, so Renovate proposes bumps; the CI client (buildx, pinned in
          # versions.env) talks to any recent daemon.
-          image: docker.io/moby/buildkit:v0.34.1-rootless@sha256:f68752a5a94acfcdad2d07867b7075601a421638e17fc5f28efc1c814d0c4f89
+          image: docker.io/moby/buildkit:v0.34.2-rootless@sha256:c8252268760e1baba80780d63d738ef9f260fb7c7c0973c78494cb9ddd99eda1
          args:
            - --addr
            - unix:///run/user/1000/buildkit/buildkitd.sock   # local only: the probes below
@@ -28,7 +28,7 @@ spec:
      chart: cilium
      # [parity] Pinned to the exact version the Ansible bootstrap installs
      # (cilium_version in roles/cilium/defaults/main.yml). Renovate bumps both together.
-      version: "1.20.1"
+      version: "1.20.4"
      sourceRef:
        kind: HelmRepository
        name: cilium
@@ -61,7 +61,7 @@ spec:
        - name: crafty
          # registry.gitlab.com/crafty-controller/crafty-4 — official image. Pinned to the current
          # stable release (4.10.8, 2026-07-29; tags are bare semver, NO `v` prefix). Renovate maintains.
-          image: registry.gitlab.com/crafty-controller/crafty-4:4.10.8
+          image: registry.gitlab.com/crafty-controller/crafty-4:4.11.0
          imagePullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -51,4 +51,4 @@ images:
  # Controller image == CRD version. A version bump = re-vendor crds.yaml + snapshot-controller.yaml
  # at the new tag (see header) AND bump this newTag.
  - name: registry.k8s.io/sig-storage/snapshot-controller
-    newTag: v8.2.0
+    newTag: v8.7.0
@@ -194,7 +194,7 @@ spec:
      - args:
        - --v=5
        - --leader-election=true
-        image: registry.k8s.io/sig-storage/snapshot-controller:v8.0.1
+        image: registry.k8s.io/sig-storage/snapshot-controller:v8.7.0
        imagePullPolicy: IfNotPresent
        name: snapshot-controller
      serviceAccountName: snapshot-controller
@@ -51,7 +51,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: cloudflare-ddns
-          image: favonia/cloudflare-ddns:1.17.1
+          image: favonia/cloudflare-ddns:1.18.0
          imagePullPolicy: IfNotPresent
          env:
            - name: CLOUDFLARE_API_TOKEN
@@ -38,7 +38,7 @@ spec:
      containers:
        - name: homepage
          # Renovate maintains this pin (ghcr.io/gethomepage/homepage). Config lives in /app/config.
-          image: ghcr.io/gethomepage/homepage:v2.1.2
+          image: ghcr.io/gethomepage/homepage:v2.7.0
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
@@ -63,7 +63,7 @@ spec:
          valueFrom:
            fieldRef:
              fieldPath: status.hostIP
-        image: intel/intel-gpu-plugin:0.37.0
+        image: intel/intel-gpu-plugin:0.37.1
        imagePullPolicy: IfNotPresent
        name: intel-gpu-plugin
        resources:
@@ -96,4 +96,4 @@ images:
  - name: intel/intel-gpu-plugin
    newName: docker.io/intel/intel-gpu-plugin
    # renovate: datasource=github-releases depName=intel/intel-device-plugins-for-kubernetes
-    newTag: "0.37.0"
+    newTag: "0.37.1"
@@ -1224,7 +1224,7 @@ spec:
              # curlimages elsewhere in the repo. Renovate does not manage plain
              # `image:` tags (renovate.json disables image-tag updates so it never
              # fights Flux image-automation), so this is bumped by hand.
-              image: python:3.13.15-alpine3.23
+              image: python:3.15.2-alpine3.23
              imagePullPolicy: IfNotPresent
              command:
                - python3
@@ -3205,7 +3205,7 @@ spec:
              # sibling's pod on prod runs a different digest under this same tag.
              # Renovate's `kubernetes` manager covers platform/** (renovate.json5), so
              # it proposes tag and digest bumps for this line like any other image.
-              image: python:3.13.15-alpine3.23@sha256:6438599575cca0d1df94aeee0d2ae088d4d8846eab554b2ee7784a3a6df0d516
+              image: python:3.15.2-alpine3.23@sha256:8d77d813a53e534dec9e1e5182cbd5b651b70d63b27e4ea7c1f616b37cf9aad2
              imagePullPolicy: IfNotPresent
              command:
                - python3
@@ -33,6 +33,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  # renovate: datasource=github-releases depName=kubevirt/kubevirt
-  - https://github.com/kubevirt/kubevirt/releases/download/v1.9.0/kubevirt-operator.yaml
+  - https://github.com/kubevirt/kubevirt/releases/download/v1.9.1/kubevirt-operator.yaml
  # renovate: datasource=github-releases depName=kubevirt/containerized-data-importer
-  - https://github.com/kubevirt/containerized-data-importer/releases/download/v1.66.0/cdi-operator.yaml
+  - https://github.com/kubevirt/containerized-data-importer/releases/download/v1.66.1/cdi-operator.yaml
@@ -95,7 +95,7 @@ spec:
    # OIDC bootstrap hooks. (ci: flux-postbuild-substitution enforces it.)
    extraInitContainers:
      - name: wait-for-idp
-        image: docker.io/library/alpine:3.22
+        image: docker.io/library/alpine:3.24
        imagePullPolicy: IfNotPresent
        command: ["/bin/sh", "-c"]
        args:
@@ -63,8 +63,11 @@ data:
  # agent-runner:sha-ddd04d460ef6, pinned in PR #96) bakes a template that carries
  # `imagePullSecrets: pm-agent-registry`, which is what made turning PM_DRY_RUN off possible
  # (decisions/2026-10-31-pm-agent-runner-digest.md). A digest older than that would be DENIED.
+  # The digest below (14a42ba, images run 394, agent-runner:sha-466f63ec3c3d = PR #99's merge)
+  # adds the CLI failure envelope to triage errors and the PM_DECISION_MAX_TURNS knob
+  # (decisions/2026-10-31-pm-agent-digest-99.md).
  # renovate-digest: image=gitea.home.keithjackson.dev/home-network/agent-runner tag=main
-  PM_WORKER_IMAGE: "gitea.home.keithjackson.dev/home-network/agent-runner@sha256:df36d9b7fef56d141220a387f64fb864cede8e5af30513ebfeb3ab566d3f771d"
+  PM_WORKER_IMAGE: "gitea.home.keithjackson.dev/home-network/agent-runner@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2"

  # --- the model -------------------------------------------------------------
  # The PM only reads a thread and answers with one JSON object, so it holds no tools and
@@ -48,7 +48,7 @@ spec:
        # It is a hand-maintained marker rather than a computed hash because Flux's
        # Kustomization here does not run a configmap generator; bump it in the same commit
        # as a change to configmap.yaml.
-        pm-agent.homelab.keithjackson.dev/config-generation: "4"
+        pm-agent.homelab.keithjackson.dev/config-generation: "5"
    spec:
      serviceAccountName: pm-agent
      # The kubelet's credential for pulling this image. Not the agent's Gitea credential —
@@ -78,7 +78,7 @@ spec:
          # the registry's manifest endpoint on 2026-10-30 and pinned by hand once so the
          # dispatcher does not wait on Renovate's first run; every later bump is Renovate's.
          # renovate-digest: image=gitea.home.keithjackson.dev/home-network/agent-runner tag=main
-          image: gitea.home.keithjackson.dev/home-network/agent-runner@sha256:df36d9b7fef56d141220a387f64fb864cede8e5af30513ebfeb3ab566d3f771d
+          image: gitea.home.keithjackson.dev/home-network/agent-runner@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2
          imagePullPolicy: IfNotPresent
          command:
            - /usr/local/bin/pm-dispatch
@@ -88,7 +88,7 @@ spec:
    # rather than becoming a fifth per-environment knob. ---
    initContainers:
      - name: velero-plugin-for-aws
-        image: velero/velero-plugin-for-aws:v1.14.3-rc.2
+        image: velero/velero-plugin-for-aws:v1.14.4
        imagePullPolicy: IfNotPresent
        volumeMounts:
          - mountPath: /target
@@ -87,7 +87,7 @@ spec:
          # Renovate maintains this pin. nginx-unprivileged (not nginx) so the container can honour
          # runAsNonRoot: the stock nginx image's entrypoint needs root to drop privileges and to
          # bind :80. `stable-alpine` branch, pinned exactly.
-          image: nginxinc/nginx-unprivileged:1.30.4-alpine
+          image: nginxinc/nginx-unprivileged:1.31.7-alpine
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
Author	SHA1	Message	Date
jakman85	970d65d193	Merge pull request 'chore(deps): Update python Docker tag to v3.15.2' (#135 ) from renovate/python-3.x into main gate / gate (push) Canceled after 1m25s Details gate / conformance (push) Canceled after 0s Details Reviewed-on: #135	2026-11-07 12:06:07 +00:00
jakman85	6719082e5c	Merge pull request 'chore(deps): Update gitea/act_runner Docker tag to v0.6.1' (#127 ) from renovate/gitea-act_runner-0.x into main gate / gate (push) Canceled after 1m13s Details gate / conformance (push) Canceled after 0s Details Reviewed-on: #127	2026-11-07 12:04:54 +00:00
jakman85	428b77f08c	Merge pull request 'chore(deps): Update gitea/gitea Docker tag to v1.27.3' (#128 ) from renovate/gitea-gitea-1.x into main gate / gate (push) Successful in 2m59s Details gate / conformance (push) Skipped Details Reviewed-on: #128	2026-11-07 11:44:36 +00:00
renovate-bot	2ee7d5036a	Merge pull request 'chore(deps): Update registry.k8s.io/sig-storage/snapshot-controller Docker tag to v8.7.0' (#138 ) from renovate/registry.k8s.io-sig-storage-snapshot-controller-8.x into main gate / gate (push) Successful in 2m56s Details gate / conformance (push) Has been skipped Details	2026-11-07 09:22:38 +00:00
renovate-bot	5736f42e22	Merge pull request 'chore(deps): Update registry.gitlab.com/crafty-controller/crafty-4 Docker tag to v4.11.0' (#137 ) from renovate/registry.gitlab.com-crafty-controller-crafty-4-4.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 09:19:37 +00:00
renovate-bot	773254e3a1	Merge pull request 'chore(deps): Update nginxinc/nginx-unprivileged Docker tag to v1.31.7' (#134 ) from renovate/nginxinc-nginx-unprivileged-1.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 09:10:44 +00:00
renovate-bot	264cd7a46d	Merge pull request 'chore(deps): Update lscr.io/linuxserver/radarr Docker tag to v5.28.0' (#133 ) from renovate/lscr.io-linuxserver-radarr-5.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 09:07:45 +00:00
renovate-bot	979cc4b21d	Merge pull request 'chore(deps): Update lscr.io/linuxserver/qbittorrent Docker tag to v5.3.0' (#132 ) from renovate/lscr.io-linuxserver-qbittorrent-5.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 09:04:44 +00:00
renovate-bot	be6742c22b	Merge pull request 'chore(deps): Update ghcr.io/seerr-team/seerr Docker tag to v3.5.1' (#126 ) from renovate/ghcr.io-seerr-team-seerr-3.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 08:46:56 +00:00
renovate-bot	c8b915d8f2	Merge pull request 'chore(deps): Update ghcr.io/gethomepage/homepage Docker tag to v2.7.0' (#125 ) from renovate/ghcr.io-gethomepage-homepage-2.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 08:43:58 +00:00
renovate-bot	6cd3bd29a9	Merge pull request 'chore(deps): Update favonia/cloudflare-ddns Docker tag to v1.18.0' (#123 ) from renovate/favonia-cloudflare-ddns-1.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 08:37:58 +00:00
renovate-bot	2040d35222	Merge pull request 'chore(deps): Update docker.io/library/alpine Docker tag to v3.24' (#122 ) from renovate/docker.io-library-alpine-3.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 08:35:00 +00:00
renovate-bot	47fc27ff08	Merge pull request 'chore(deps): Update velero/velero-plugin-for-aws Docker tag to v1.14.4' (#120 ) from renovate/velero-velero-plugin-for-aws-1.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 08:29:02 +00:00
renovate-bot	5e8b080298	Merge pull request 'chore(deps): Update semaphoreui/semaphore Docker tag to v2.19.17' (#119 ) from renovate/semaphoreui-semaphore-2.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 08:26:05 +00:00
renovate-bot	24a0e1e4c5	Merge pull request 'chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3025-ls29' (#118 ) from renovate/lscr.io-linuxserver-jackett-0.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-07 08:23:06 +00:00
renovate-bot	c6ad6b559c	chore(deps): Update registry.k8s.io/sig-storage/snapshot-controller Docker tag to v8.7.0 gate / gate (pull_request) Successful in 2m59s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:19:01 +00:00
renovate-bot	6efc49d415	chore(deps): Update registry.gitlab.com/crafty-controller/crafty-4 Docker tag to v4.11.0 gate / gate (pull_request) Successful in 2m59s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:18:58 +00:00
renovate-bot	a6dc2d1adb	chore(deps): Update python Docker tag to v3.15.2 gate / gate (pull_request) Successful in 2m56s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:18:46 +00:00
renovate-bot	75a472cf67	chore(deps): Update nginxinc/nginx-unprivileged Docker tag to v1.31.7 gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:18:43 +00:00
renovate-bot	24b02f37df	chore(deps): Update lscr.io/linuxserver/radarr Docker tag to v5.28.0 gate / gate (pull_request) Successful in 3m0s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:18:02 +00:00
renovate-bot	be3ce4645b	chore(deps): Update lscr.io/linuxserver/qbittorrent Docker tag to v5.3.0 gate / gate (pull_request) Successful in 3m1s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:17:42 +00:00
renovate-bot	0e7d0204b3	chore(deps): Update gitea/gitea Docker tag to v1.27.3 gate / gate (pull_request) Successful in 3m1s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:17:22 +00:00
renovate-bot	b77572f843	chore(deps): Update gitea/act_runner Docker tag to v0.6.1 gate / gate (pull_request) Successful in 2m55s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:17:20 +00:00
renovate-bot	76b5d038fb	chore(deps): Update ghcr.io/seerr-team/seerr Docker tag to v3.5.1 gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:17:16 +00:00
renovate-bot	306f6f4fb0	chore(deps): Update ghcr.io/gethomepage/homepage Docker tag to v2.7.0 gate / gate (pull_request) Successful in 3m0s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:17:12 +00:00
renovate-bot	ae772e050d	chore(deps): Update favonia/cloudflare-ddns Docker tag to v1.18.0 gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:17:08 +00:00
renovate-bot	517dfc9030	chore(deps): Update docker.io/library/alpine Docker tag to v3.24 gate / gate (pull_request) Successful in 3m0s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:17:05 +00:00
renovate-bot	16de787557	chore(deps): Update velero/velero-plugin-for-aws Docker tag to v1.14.4 gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:16:58 +00:00
renovate-bot	b7cb70955c	chore(deps): Update semaphoreui/semaphore Docker tag to v2.19.17 gate / gate (pull_request) Successful in 2m58s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:16:49 +00:00
renovate-bot	9bcea04b1b	chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3025-ls29 gate / gate (pull_request) Successful in 2m59s Details gate / conformance (pull_request) Has been skipped Details	2026-11-07 08:15:48 +00:00
jakman85	5b484f6b78	Merge pull request 'chore(deps): Update Helm release cilium to v1.20.4' (#104 ) from renovate/cilium-1.x into main gate / gate (push) Successful in 2m48s Details gate / conformance (push) Has been skipped Details renovate / renovate (push) Successful in 4m59s Details Reviewed-on: #104	2026-11-07 03:07:19 +00:00
renovate-bot	640edb758d	Merge pull request 'chore(deps): Update plexinc/pms-docker Docker tag to v1.43.6.11085-d1e52e169' (#111 ) from renovate/plexinc-pms-docker-1.x into main gate / gate (push) Successful in 2m56s Details gate / conformance (push) Has been skipped Details renovate / renovate (push) Successful in 1m58s Details	2026-11-05 08:27:21 +00:00
renovate-bot	e6cd064f5c	Merge pull request 'chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3009-ls26' (#110 ) from renovate/lscr.io-linuxserver-jackett-0.x into main gate / gate (push) Has been cancelled Details gate / conformance (push) Has been cancelled Details	2026-11-05 08:24:23 +00:00
renovate-bot	dd9d8da86a	chore(deps): Update plexinc/pms-docker Docker tag to v1.43.6.11085-d1e52e169 gate / gate (pull_request) Successful in 2m59s Details gate / conformance (pull_request) Has been skipped Details	2026-11-05 08:17:16 +00:00
renovate-bot	c3ce4db767	chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3009-ls26 gate / gate (pull_request) Successful in 2m59s Details gate / conformance (pull_request) Has been skipped Details	2026-11-05 08:16:08 +00:00
renovate-bot	38076f1cff	chore(deps): Update Helm release cilium to v1.20.4 gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details	2026-11-05 08:15:53 +00:00
renovate-bot	552330398b	Merge pull request 'chore(deps): Update pihole/pihole Docker tag to v2026.10.1' (#109 ) from renovate/pihole-pihole-2026.x into main gate / gate (push) Successful in 2m56s Details gate / conformance (push) Has been skipped Details renovate / renovate (push) Successful in 3m19s Details	2026-11-04 08:22:16 +00:00
renovate-bot	e49aebc803	Merge pull request 'chore(deps): Update docker.io/moby/buildkit Docker tag to v0.34.2' (#108 ) from renovate/docker.io-moby-buildkit-0.x into main gate / conformance (push) Has been cancelled Details gate / gate (push) Has been cancelled Details	2026-11-04 08:19:20 +00:00
renovate-bot	9c0292001e	chore(deps): Update pihole/pihole Docker tag to v2026.10.1 gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details	2026-11-04 08:16:12 +00:00
renovate-bot	db9416d3b5	chore(deps): Update docker.io/moby/buildkit Docker tag to v0.34.2 gate / gate (pull_request) Successful in 2m59s Details gate / conformance (pull_request) Has been skipped Details	2026-11-04 08:15:52 +00:00
renovate-bot	cb4a1bf2de	Merge pull request 'chore(deps): Update lscr.io/linuxserver/sonarr Docker tag to v4.0.20' (#107 ) from renovate/lscr.io-linuxserver-sonarr-4.x into main gate / gate (push) Successful in 3m3s Details gate / conformance (push) Has been skipped Details renovate / renovate (push) Successful in 1m12s Details	2026-11-03 08:22:33 +00:00
renovate-bot	028f5229f0	Merge pull request 'chore(deps): Update kubevirt-cdi' (#106 ) from renovate/kubevirt-cdi into main gate / conformance (push) Has been cancelled Details gate / gate (push) Has been cancelled Details	2026-11-03 08:19:36 +00:00
renovate-bot	44e2cd3c64	chore(deps): Update lscr.io/linuxserver/sonarr Docker tag to v4.0.20 gate / gate (pull_request) Successful in 2m56s Details gate / conformance (pull_request) Has been skipped Details	2026-11-03 08:16:12 +00:00
renovate-bot	b30b7e6f67	chore(deps): Update kubevirt-cdi gate / gate (pull_request) Successful in 2m59s Details gate / conformance (pull_request) Has been skipped Details	2026-11-03 08:16:06 +00:00
renovate-bot	5a3a5f8df2	Merge pull request 'chore(deps): Update intel/intel-gpu-plugin Docker tag to v0.37.1' (#105 ) from renovate/intel-intel-gpu-plugin-0.x into main gate / gate (push) Successful in 2m57s Details gate / conformance (push) Has been skipped Details renovate / renovate (push) Successful in 1m31s Details	2026-11-02 08:22:07 +00:00
renovate-bot	f698bc82a0	chore(deps): Update intel/intel-gpu-plugin Docker tag to v0.37.1 gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details	2026-11-02 08:16:06 +00:00
renovate-bot	6bc10fb60d	Merge pull request 'chore(deps): Update dependency intel/intel-device-plugins-for-kubernetes to v0.37.1' (#102 ) from renovate/intel-intel-device-plugins-for-kubernetes-0.x into main gate / gate (push) Successful in 2m58s Details gate / conformance (push) Has been skipped Details renovate / renovate (push) Successful in 1m4s Details	2026-11-01 08:18:56 +00:00
renovate-bot	d8c330fb8c	chore(deps): Update dependency intel/intel-device-plugins-for-kubernetes to v0.37.1 gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details	2026-11-01 08:15:52 +00:00
jakman85	a1d89f4a5f	Merge pull request 'chore(pm-agent): pin agent-runner to the run-394 digest (`466f63e`, PR #99 ), bump config-generation' (#100 ) from chore/pm-agent-digest-99 into main gate / gate (push) Successful in 2m56s Details gate / conformance (push) Has been skipped Details renovate / renovate (push) Successful in 51s Details Reviewed-on: #100 Reviewed-by: Keith Jackson <[email protected]>	2026-10-31 17:23:18 +00:00
jakman85andClaude Opus 5.5	19097e4d4f	chore(pm-agent): pin agent-runner to the run-394 digest (`466f63e`, PR #99 ), bump config-generation gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details Dispatcher image and PM_WORKER_IMAGE both move to sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2, the digest the registry returns for agent-runner:sha-466f63ec3c3d and :main. config-generation 4 -> 5. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-31 12:17:00 -05:00