Dependency Dashboard #91

New Issue

Open

opened 2026-10-30 08:20:43 +00:00 by renovate-bot · 0 comments

renovate-bot commented 2026-10-30 08:20:43 +00:00

Collaborator

Copy link

Copy source

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): Update Helm release kube-prometheus-stack to v93

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): Update gitea.home.keithjackson.dev/home-network/toolbox:main Docker digest to 83a3501
• chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3030-ls30
• chore(deps): Update ghcr.io/renovatebot/renovate Docker tag to v44.222.4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): Update gitea.home.keithjackson.dev/home-network/agent-runner:main Docker digest to 89ce7ee
• chore(deps): Update gitea.home.keithjackson.dev/home-network/conformance-runner:main Docker digest to 63e1aa7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

flux (13)

platform/cert-manager/helmrelease.yaml (1)

• cert-manager >=1.21.0 <1.22.0 → [Updates: >=1.21.3 <1.22.0]

platform/cilium/helmrelease.yaml (1)

• cilium 1.20.4

platform/cnpg/helmrelease.yaml (1)

• cloudnative-pg >=0.22.0 <1.0.0 → [Updates: >=0.29.1 <1.0.0]

platform/externaldns/helmrelease.yaml (1)

• external-dns >=1.23.0 <1.24.0

platform/headlamp/helmrelease.yaml (1)

• headlamp >=0.46.0 <0.47.0

platform/kured/helmrelease.yaml (1)

• kured >=6.1.0 <6.2.0

platform/kyverno/admission/helmrelease.yaml (1)

• kyverno 3.9.x

platform/longhorn/helmrelease.yaml (1)

• longhorn <1.14.0

platform/monitoring/alloy.yaml (1)

• alloy >=1.0.0 <2.0.0 → [Updates: >=1.15.0 <2.0.0]

platform/monitoring/kube-prometheus-stack.yaml (1)

• kube-prometheus-stack >=88.0.0 <89.0.0 → [Updates: >=88.6.5 <89.0.0, >=93.1.0 <94.0.0]

platform/monitoring/loki.yaml (1)

• loki >=7.0.0 <8.0.0 → [Updates: >=7.5.0 <8.0.0]

platform/oauth2-proxy/helmrelease.yaml (1)

• oauth2-proxy >=10.0.0 <11.0.0 → [Updates: >=10.7.2 <11.0.0]

platform/velero/helmrelease.yaml (1)

• velero >=12.0.0 <13.0.0 → [Updates: >=12.2.3 <13.0.0]

github-actions (4)

.gitea/workflows/gate.yml

.gitea/workflows/images.yaml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.gitea/workflows/merge-gate.yaml (10)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7@cf430e030ddbb5b0abf93d22962f4752f3646cd9
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7@cf430e030ddbb5b0abf93d22962f4752f3646cd9
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.gitea/workflows/renovate.yaml (1)

• ghcr.io/renovatebot/renovate 44.167.0 → [Updates: 44.222.4]

kubernetes (67)

apps/vms/unifi/10-default-deny.yaml (1)

• NetworkPolicy networking.k8s.io/v1

apps/wave-0/gitea.yaml (3)

• gitea/gitea 28.3.0
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-0/jackett.yaml (4)

• lscr.io/linuxserver/jackett v0.24.3025-ls29 → [Updates: v0.24.3030-ls30]
• quay.io/oauth2-proxy/oauth2-proxy v7.15.6
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-0/nextcloud-db.yaml (2)

• ghcr.io/cloudnative-pg/postgresql 16.15
• CronJob batch/v1

apps/wave-0/pihole.yaml (5)

• pihole/pihole 2026.10.1
• quay.io/oauth2-proxy/oauth2-proxy v7.15.6
• NetworkPolicy networking.k8s.io/v1
• StatefulSet apps/v1
• PodDisruptionBudget policy/v1

apps/wave-0/plex.yaml (3)

• plexinc/pms-docker 1.43.6.11085-d1e52e169
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-0/qbittorrent.yaml (4)

• lscr.io/linuxserver/qbittorrent 5.3.0
• quay.io/oauth2-proxy/oauth2-proxy v7.15.6
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-0/vm-demo.yaml (1)

• NetworkPolicy networking.k8s.io/v1

apps/wave-1/gitea-actions.yaml (4)

• docker 29-dind
• gitea/act_runner 0.6.1
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-1/keycloak.yaml (2)

• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-1/nextcloud.yaml (3)

• nextcloud 31-apache
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-1/radarr.yaml (4)

• lscr.io/linuxserver/radarr 5.28.0
• quay.io/oauth2-proxy/oauth2-proxy v7.15.6
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-1/semaphore.yaml (3)

• semaphoreui/semaphore v2.19.17
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-1/sonarr.yaml (4)

• lscr.io/linuxserver/sonarr 4.0.20
• quay.io/oauth2-proxy/oauth2-proxy v7.15.6
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

apps/wave-2/seerr.yaml (3)

• ghcr.io/seerr-team/seerr v3.5.1
• NetworkPolicy networking.k8s.io/v1
• Deployment apps/v1

infra/agent/worker-job-template.yaml

platform/buildkit/deployment.yaml (2)

• docker.io/moby/buildkit v0.34.2-rootless@sha256:c8252268760e1baba80780d63d738ef9f260fb7c7c0973c78494cb9ddd99eda1
• Deployment apps/v1

platform/buildkit/networkpolicy.yaml (1)

• NetworkPolicy networking.k8s.io/v1

platform/cert-manager/helmrelease.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/cert-manager/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/cilium/helmrelease.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/cilium/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/cnpg/helmrelease.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/cnpg/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/coredns/hpa.yaml (1)

• HorizontalPodAutoscaler autoscaling/v2

platform/crafty/deployment.yaml (3)

• registry.gitlab.com/crafty-controller/crafty-4 4.11.0
• quay.io/oauth2-proxy/oauth2-proxy v7.15.6
• Deployment apps/v1

platform/crafty/networkpolicy.yaml (1)

• NetworkPolicy networking.k8s.io/v1

platform/external-snapshotter/crds.yaml (6)

• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1

platform/external-snapshotter/snapshot-controller.yaml (6)

• registry.k8s.io/sig-storage/snapshot-controller v8.7.0
• Role rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

platform/externaldns/ddns.yaml (2)

• favonia/cloudflare-ddns 1.18.0
• Deployment apps/v1

platform/externaldns/helmrelease.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/externaldns/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/headlamp/helmrelease.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/headlamp/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/headlamp/networkpolicy.yaml (1)

• NetworkPolicy networking.k8s.io/v1

platform/homepage/deployment.yaml (2)

• ghcr.io/gethomepage/homepage v2.7.0
• Deployment apps/v1

platform/homepage/networkpolicy.yaml (1)

• NetworkPolicy networking.k8s.io/v1

platform/image-automation/image-update-automation.yaml (1)

• ImageUpdateAutomation image.toolkit.fluxcd.io/v1

platform/intel-gpu-plugin/intel-gpu-plugin.yaml (2)

• intel/intel-gpu-plugin 0.37.1
• DaemonSet apps/v1

platform/keycloak/client-secret-reconciler.yaml (2)

• python 3.15.2-alpine3.23
• CronJob batch/v1

platform/keycloak/k8s-oidc-rbac.yaml (2)

• ClusterRoleBinding rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

platform/keycloak/passkey-reconciler.yaml (2)

• python 3.15.2-alpine3.23@sha256:8d77d813a53e534dec9e1e5182cbd5b651b70d63b27e4ea7c1f616b37cf9aad2
• CronJob batch/v1

platform/kured/helmrelease.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/kured/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/kured/networkpolicy.yaml (2)

• NetworkPolicy networking.k8s.io/v1
• NetworkPolicy networking.k8s.io/v1

platform/kyverno/admission/conformance-trigger-job-shape.yaml

platform/kyverno/admission/helmrelease.yaml (2)

• HelmRepository source.toolkit.fluxcd.io/v1
• HelmRelease helm.toolkit.fluxcd.io/v2

platform/kyverno/admission/pm-agent-job-shape.yaml

platform/longhorn/helmrelease.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/longhorn/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/longhorn/networkpolicy-metrics.yaml (1)

• NetworkPolicy networking.k8s.io/v1

platform/longhorn/storageclasses.yaml (4)

• StorageClass storage.k8s.io/v1
• StorageClass storage.k8s.io/v1
• StorageClass storage.k8s.io/v1
• StorageClass storage.k8s.io/v1

platform/monitoring/alloy.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/monitoring/helmrepositories.yaml (2)

• HelmRepository source.toolkit.fluxcd.io/v1
• HelmRepository source.toolkit.fluxcd.io/v1

platform/monitoring/kube-prometheus-stack.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/monitoring/loki.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

platform/oauth2-proxy/helmrelease.yaml (2)

• docker.io/library/alpine 3.24
• HelmRelease helm.toolkit.fluxcd.io/v2

platform/oauth2-proxy/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/pm-agent/deployment.yaml (1)

• Deployment apps/v1

platform/pm-agent/networkpolicy.yaml (1)

• NetworkPolicy networking.k8s.io/v1

platform/pm-agent/rbac.yaml (2)

• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

platform/velero/helmrelease.yaml (2)

• velero/velero-plugin-for-aws v1.14.4
• HelmRelease helm.toolkit.fluxcd.io/v2

platform/velero/helmrepository.yaml (1)

• HelmRepository source.toolkit.fluxcd.io/v1

platform/vpn-ingress/daemonset.yaml (3)

• lscr.io/linuxserver/wireguard 1.0.20260223-r0-ls124
• lscr.io/linuxserver/wireguard 1.0.20260223-r0-ls124
• DaemonSet apps/v1

platform/vpn-ingress/networkpolicy.yaml (1)

• NetworkPolicy networking.k8s.io/v1

runbooks/serving/deployment.yaml (2)

• nginxinc/nginx-unprivileged 1.31.7-alpine
• Deployment apps/v1

runbooks/serving/networkpolicy.yaml (1)

• NetworkPolicy networking.k8s.io/v1

kustomize (2)

platform/external-snapshotter/kustomization.yaml (1)

• registry.k8s.io/sig-storage/snapshot-controller v8.7.0

platform/intel-gpu-plugin/kustomization.yaml (1)

• docker.io/intel/intel-gpu-plugin 0.37.1

regex (23)

.gitea/workflows/gate.yml (1)

• gitea.home.keithjackson.dev/home-network/toolbox main@sha256:83a3501efe34fa0b039e3f0d360738686a0f59109866c49779768f5d5ed0ef81

apps/wave-0/nextcloud-db.yaml (1)

• ghcr.io/cloudnative-pg/postgresql 16.15

apps/wave-0/semaphore-db.yaml (1)

• ghcr.io/cloudnative-pg/postgresql 16.15

catalog/gitea.yaml (1)

• gitea/gitea 28.3.0

catalog/jackett.yaml (1)

• lscr.io/linuxserver/jackett v0.24.3025-ls29 → [Updates: v0.24.3030-ls30]

catalog/keycloak.yaml

catalog/nextcloud.yaml (1)

• nextcloud 31-apache

catalog/pihole.yaml (1)

• pihole/pihole 2026.10.1

catalog/plex.yaml (1)

• plexinc/pms-docker 1.43.6.11085-d1e52e169

catalog/qbittorrent.yaml (1)

• lscr.io/linuxserver/qbittorrent 5.3.0

catalog/radarr.yaml (1)

• lscr.io/linuxserver/radarr 5.28.0

catalog/render.py (1)

• quay.io/oauth2-proxy/oauth2-proxy v7.15.6

catalog/seerr.yaml (1)

• ghcr.io/seerr-team/seerr v3.5.1

catalog/semaphore.yaml (1)

• semaphoreui/semaphore v2.19.17

catalog/sonarr.yaml (1)

• lscr.io/linuxserver/sonarr 4.0.20

conformance/versions.env (1)

• gitea.home.keithjackson.dev/home-network/conformance-runner main@sha256:65cc7c1ab576fe8cdf45e7f68c7cf4eb5ce7e0db46e62191f6190c51610b20d9 → [Updates: main]

infra/agent/versions.env (1)

• gitea.home.keithjackson.dev/home-network/toolbox main@sha256:d435fabd6fc43bf5bb4de0c1ea8c4b19d8cea5c858679bd1675ccbed471b528a → [Updates: main]

platform/intel-gpu-plugin/kustomization.yaml (1)

• intel/intel-device-plugins-for-kubernetes 0.37.1

platform/keycloak/kustomization.yaml (5)

• keycloak/keycloak-k8s-resources 26.8.2
• keycloak/keycloak-k8s-resources 26.8.2
• keycloak/keycloak-k8s-resources 26.8.2
• keycloak/keycloak-k8s-resources 26.8.2
• keycloak/keycloak-k8s-resources 26.8.2

platform/keycloak/postgres-cluster.yaml (1)

• ghcr.io/cloudnative-pg/postgresql 16.15

platform/kubevirt/kustomization.yaml (2)

• kubevirt/kubevirt v1.9.1
• kubevirt/containerized-data-importer v1.66.1

platform/pm-agent/configmap.yaml (1)

• gitea.home.keithjackson.dev/home-network/agent-runner main@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2 → [Updates: main]

platform/pm-agent/deployment.yaml (1)

• gitea.home.keithjackson.dev/home-network/agent-runner main@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2 → [Updates: main]

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [x] <!-- approve-branch=renovate/kube-prometheus-stack-93.x -->chore(deps): Update Helm release kube-prometheus-stack to v93 ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [x] <!-- unlimit-branch=renovate/gitea.home.keithjackson.dev-home-network-toolbox-main -->chore(deps): Update gitea.home.keithjackson.dev/home-network/toolbox:main Docker digest to 83a3501 - [x] <!-- unlimit-branch=renovate/lscr.io-linuxserver-jackett-0.x -->chore(deps): Update lscr.io/linuxserver/jackett Docker tag to v0.24.3030-ls30 - [x] <!-- unlimit-branch=renovate/ghcr.io-renovatebot-renovate-44.x -->chore(deps): Update ghcr.io/renovatebot/renovate Docker tag to v44.222.4 - [x] <!-- create-all-rate-limited-prs -->🔐 **Create all rate-limited PRs at once** 🔐 ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [x] <!-- rebase-branch=renovate/gitea.home.keithjackson.dev-home-network-agent-runner-main -->[chore(deps): Update gitea.home.keithjackson.dev/home-network/agent-runner:main Docker digest to 89ce7ee](pulls/150) - [x] <!-- rebase-branch=renovate/gitea.home.keithjackson.dev-home-network-conformance-runner-main -->[chore(deps): Update gitea.home.keithjackson.dev/home-network/conformance-runner:main Docker digest to 63e1aa7](pulls/151) - [x] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>flux (13)</summary> <blockquote> <details><summary>platform/cert-manager/helmrelease.yaml (1)</summary> - `cert-manager >=1.21.0 <1.22.0` → [Updates: `>=1.21.3 <1.22.0`] </details> <details><summary>platform/cilium/helmrelease.yaml (1)</summary> - `cilium 1.20.4` </details> <details><summary>platform/cnpg/helmrelease.yaml (1)</summary> - `cloudnative-pg >=0.22.0 <1.0.0` → [Updates: `>=0.29.1 <1.0.0`] </details> <details><summary>platform/externaldns/helmrelease.yaml (1)</summary> - `external-dns >=1.23.0 <1.24.0` </details> <details><summary>platform/headlamp/helmrelease.yaml (1)</summary> - `headlamp >=0.46.0 <0.47.0` </details> <details><summary>platform/kured/helmrelease.yaml (1)</summary> - `kured >=6.1.0 <6.2.0` </details> <details><summary>platform/kyverno/admission/helmrelease.yaml (1)</summary> - `kyverno 3.9.x` </details> <details><summary>platform/longhorn/helmrelease.yaml (1)</summary> - `longhorn <1.14.0` </details> <details><summary>platform/monitoring/alloy.yaml (1)</summary> - `alloy >=1.0.0 <2.0.0` → [Updates: `>=1.15.0 <2.0.0`] </details> <details><summary>platform/monitoring/kube-prometheus-stack.yaml (1)</summary> - `kube-prometheus-stack >=88.0.0 <89.0.0` → [Updates: `>=88.6.5 <89.0.0`, `>=93.1.0 <94.0.0`] </details> <details><summary>platform/monitoring/loki.yaml (1)</summary> - `loki >=7.0.0 <8.0.0` → [Updates: `>=7.5.0 <8.0.0`] </details> <details><summary>platform/oauth2-proxy/helmrelease.yaml (1)</summary> - `oauth2-proxy >=10.0.0 <11.0.0` → [Updates: `>=10.7.2 <11.0.0`] </details> <details><summary>platform/velero/helmrelease.yaml (1)</summary> - `velero >=12.0.0 <13.0.0` → [Updates: `>=12.2.3 <13.0.0`] </details> </blockquote> </details> <details><summary>github-actions (4)</summary> <blockquote> <details><summary>.gitea/workflows/gate.yml</summary> </details> <details><summary>.gitea/workflows/images.yaml (1)</summary> - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.gitea/workflows/merge-gate.yaml (10)</summary> - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/upload-artifact v7@cf430e030ddbb5b0abf93d22962f4752f3646cd9` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/upload-artifact v7@cf430e030ddbb5b0abf93d22962f4752f3646cd9` - `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1` </details> <details><summary>.gitea/workflows/renovate.yaml (1)</summary> - `ghcr.io/renovatebot/renovate 44.167.0` → [Updates: `44.222.4`] </details> </blockquote> </details> <details><summary>kubernetes (67)</summary> <blockquote> <details><summary>apps/vms/unifi/10-default-deny.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/wave-0/gitea.yaml (3)</summary> - `gitea/gitea 28.3.0` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-0/jackett.yaml (4)</summary> - `lscr.io/linuxserver/jackett v0.24.3025-ls29` → [Updates: `v0.24.3030-ls30`] - `quay.io/oauth2-proxy/oauth2-proxy v7.15.6` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-0/nextcloud-db.yaml (2)</summary> - `ghcr.io/cloudnative-pg/postgresql 16.15` - `CronJob batch/v1` </details> <details><summary>apps/wave-0/pihole.yaml (5)</summary> - `pihole/pihole 2026.10.1` - `quay.io/oauth2-proxy/oauth2-proxy v7.15.6` - `NetworkPolicy networking.k8s.io/v1` - `StatefulSet apps/v1` - `PodDisruptionBudget policy/v1` </details> <details><summary>apps/wave-0/plex.yaml (3)</summary> - `plexinc/pms-docker 1.43.6.11085-d1e52e169` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-0/qbittorrent.yaml (4)</summary> - `lscr.io/linuxserver/qbittorrent 5.3.0` - `quay.io/oauth2-proxy/oauth2-proxy v7.15.6` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-0/vm-demo.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>apps/wave-1/gitea-actions.yaml (4)</summary> - `docker 29-dind` - `gitea/act_runner 0.6.1` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-1/keycloak.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-1/nextcloud.yaml (3)</summary> - `nextcloud 31-apache` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-1/radarr.yaml (4)</summary> - `lscr.io/linuxserver/radarr 5.28.0` - `quay.io/oauth2-proxy/oauth2-proxy v7.15.6` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-1/semaphore.yaml (3)</summary> - `semaphoreui/semaphore v2.19.17` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-1/sonarr.yaml (4)</summary> - `lscr.io/linuxserver/sonarr 4.0.20` - `quay.io/oauth2-proxy/oauth2-proxy v7.15.6` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>apps/wave-2/seerr.yaml (3)</summary> - `ghcr.io/seerr-team/seerr v3.5.1` - `NetworkPolicy networking.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>infra/agent/worker-job-template.yaml</summary> </details> <details><summary>platform/buildkit/deployment.yaml (2)</summary> - `docker.io/moby/buildkit v0.34.2-rootless@sha256:c8252268760e1baba80780d63d738ef9f260fb7c7c0973c78494cb9ddd99eda1` - `Deployment apps/v1` </details> <details><summary>platform/buildkit/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>platform/cert-manager/helmrelease.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/cert-manager/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/cilium/helmrelease.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/cilium/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/cnpg/helmrelease.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/cnpg/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/coredns/hpa.yaml (1)</summary> - `HorizontalPodAutoscaler autoscaling/v2` </details> <details><summary>platform/crafty/deployment.yaml (3)</summary> - `registry.gitlab.com/crafty-controller/crafty-4 4.11.0` - `quay.io/oauth2-proxy/oauth2-proxy v7.15.6` - `Deployment apps/v1` </details> <details><summary>platform/crafty/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>platform/external-snapshotter/crds.yaml (6)</summary> - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` - `CustomResourceDefinition apiextensions.k8s.io/v1` </details> <details><summary>platform/external-snapshotter/snapshot-controller.yaml (6)</summary> - `registry.k8s.io/sig-storage/snapshot-controller v8.7.0` - `Role rbac.authorization.k8s.io/v1` - `ClusterRole rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `Deployment apps/v1` </details> <details><summary>platform/externaldns/ddns.yaml (2)</summary> - `favonia/cloudflare-ddns 1.18.0` - `Deployment apps/v1` </details> <details><summary>platform/externaldns/helmrelease.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/externaldns/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/headlamp/helmrelease.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/headlamp/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/headlamp/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>platform/homepage/deployment.yaml (2)</summary> - `ghcr.io/gethomepage/homepage v2.7.0` - `Deployment apps/v1` </details> <details><summary>platform/homepage/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>platform/image-automation/image-update-automation.yaml (1)</summary> - `ImageUpdateAutomation image.toolkit.fluxcd.io/v1` </details> <details><summary>platform/intel-gpu-plugin/intel-gpu-plugin.yaml (2)</summary> - `intel/intel-gpu-plugin 0.37.1` - `DaemonSet apps/v1` </details> <details><summary>platform/keycloak/client-secret-reconciler.yaml (2)</summary> - `python 3.15.2-alpine3.23` - `CronJob batch/v1` </details> <details><summary>platform/keycloak/k8s-oidc-rbac.yaml (2)</summary> - `ClusterRoleBinding rbac.authorization.k8s.io/v1` - `ClusterRoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>platform/keycloak/passkey-reconciler.yaml (2)</summary> - `python 3.15.2-alpine3.23@sha256:8d77d813a53e534dec9e1e5182cbd5b651b70d63b27e4ea7c1f616b37cf9aad2` - `CronJob batch/v1` </details> <details><summary>platform/kured/helmrelease.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/kured/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/kured/networkpolicy.yaml (2)</summary> - `NetworkPolicy networking.k8s.io/v1` - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>platform/kyverno/admission/conformance-trigger-job-shape.yaml</summary> </details> <details><summary>platform/kyverno/admission/helmrelease.yaml (2)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/kyverno/admission/pm-agent-job-shape.yaml</summary> </details> <details><summary>platform/longhorn/helmrelease.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/longhorn/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/longhorn/networkpolicy-metrics.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>platform/longhorn/storageclasses.yaml (4)</summary> - `StorageClass storage.k8s.io/v1` - `StorageClass storage.k8s.io/v1` - `StorageClass storage.k8s.io/v1` - `StorageClass storage.k8s.io/v1` </details> <details><summary>platform/monitoring/alloy.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/monitoring/helmrepositories.yaml (2)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/monitoring/kube-prometheus-stack.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/monitoring/loki.yaml (1)</summary> - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/oauth2-proxy/helmrelease.yaml (2)</summary> - `docker.io/library/alpine 3.24` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/oauth2-proxy/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/pm-agent/deployment.yaml (1)</summary> - `Deployment apps/v1` </details> <details><summary>platform/pm-agent/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>platform/pm-agent/rbac.yaml (2)</summary> - `Role rbac.authorization.k8s.io/v1` - `RoleBinding rbac.authorization.k8s.io/v1` </details> <details><summary>platform/velero/helmrelease.yaml (2)</summary> - `velero/velero-plugin-for-aws v1.14.4` - `HelmRelease helm.toolkit.fluxcd.io/v2` </details> <details><summary>platform/velero/helmrepository.yaml (1)</summary> - `HelmRepository source.toolkit.fluxcd.io/v1` </details> <details><summary>platform/vpn-ingress/daemonset.yaml (3)</summary> - `lscr.io/linuxserver/wireguard 1.0.20260223-r0-ls124` - `lscr.io/linuxserver/wireguard 1.0.20260223-r0-ls124` - `DaemonSet apps/v1` </details> <details><summary>platform/vpn-ingress/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> <details><summary>runbooks/serving/deployment.yaml (2)</summary> - `nginxinc/nginx-unprivileged 1.31.7-alpine` - `Deployment apps/v1` </details> <details><summary>runbooks/serving/networkpolicy.yaml (1)</summary> - `NetworkPolicy networking.k8s.io/v1` </details> </blockquote> </details> <details><summary>kustomize (2)</summary> <blockquote> <details><summary>platform/external-snapshotter/kustomization.yaml (1)</summary> - `registry.k8s.io/sig-storage/snapshot-controller v8.7.0` </details> <details><summary>platform/intel-gpu-plugin/kustomization.yaml (1)</summary> - `docker.io/intel/intel-gpu-plugin 0.37.1` </details> </blockquote> </details> <details><summary>regex (23)</summary> <blockquote> <details><summary>.gitea/workflows/gate.yml (1)</summary> - `gitea.home.keithjackson.dev/home-network/toolbox main@sha256:83a3501efe34fa0b039e3f0d360738686a0f59109866c49779768f5d5ed0ef81` </details> <details><summary>apps/wave-0/nextcloud-db.yaml (1)</summary> - `ghcr.io/cloudnative-pg/postgresql 16.15` </details> <details><summary>apps/wave-0/semaphore-db.yaml (1)</summary> - `ghcr.io/cloudnative-pg/postgresql 16.15` </details> <details><summary>catalog/gitea.yaml (1)</summary> - `gitea/gitea 28.3.0` </details> <details><summary>catalog/jackett.yaml (1)</summary> - `lscr.io/linuxserver/jackett v0.24.3025-ls29` → [Updates: `v0.24.3030-ls30`] </details> <details><summary>catalog/keycloak.yaml</summary> </details> <details><summary>catalog/nextcloud.yaml (1)</summary> - `nextcloud 31-apache` </details> <details><summary>catalog/pihole.yaml (1)</summary> - `pihole/pihole 2026.10.1` </details> <details><summary>catalog/plex.yaml (1)</summary> - `plexinc/pms-docker 1.43.6.11085-d1e52e169` </details> <details><summary>catalog/qbittorrent.yaml (1)</summary> - `lscr.io/linuxserver/qbittorrent 5.3.0` </details> <details><summary>catalog/radarr.yaml (1)</summary> - `lscr.io/linuxserver/radarr 5.28.0` </details> <details><summary>catalog/render.py (1)</summary> - `quay.io/oauth2-proxy/oauth2-proxy v7.15.6` </details> <details><summary>catalog/seerr.yaml (1)</summary> - `ghcr.io/seerr-team/seerr v3.5.1` </details> <details><summary>catalog/semaphore.yaml (1)</summary> - `semaphoreui/semaphore v2.19.17` </details> <details><summary>catalog/sonarr.yaml (1)</summary> - `lscr.io/linuxserver/sonarr 4.0.20` </details> <details><summary>conformance/versions.env (1)</summary> - `gitea.home.keithjackson.dev/home-network/conformance-runner main@sha256:65cc7c1ab576fe8cdf45e7f68c7cf4eb5ce7e0db46e62191f6190c51610b20d9` → [Updates: `main`] </details> <details><summary>infra/agent/versions.env (1)</summary> - `gitea.home.keithjackson.dev/home-network/toolbox main@sha256:d435fabd6fc43bf5bb4de0c1ea8c4b19d8cea5c858679bd1675ccbed471b528a` → [Updates: `main`] </details> <details><summary>platform/intel-gpu-plugin/kustomization.yaml (1)</summary> - `intel/intel-device-plugins-for-kubernetes 0.37.1` </details> <details><summary>platform/keycloak/kustomization.yaml (5)</summary> - `keycloak/keycloak-k8s-resources 26.8.2` - `keycloak/keycloak-k8s-resources 26.8.2` - `keycloak/keycloak-k8s-resources 26.8.2` - `keycloak/keycloak-k8s-resources 26.8.2` - `keycloak/keycloak-k8s-resources 26.8.2` </details> <details><summary>platform/keycloak/postgres-cluster.yaml (1)</summary> - `ghcr.io/cloudnative-pg/postgresql 16.15` </details> <details><summary>platform/kubevirt/kustomization.yaml (2)</summary> - `kubevirt/kubevirt v1.9.1` - `kubevirt/containerized-data-importer v1.66.1` </details> <details><summary>platform/pm-agent/configmap.yaml (1)</summary> - `gitea.home.keithjackson.dev/home-network/agent-runner main@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2` → [Updates: `main`] </details> <details><summary>platform/pm-agent/deployment.yaml (1)</summary> - `gitea.home.keithjackson.dev/home-network/agent-runner main@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2` → [Updates: `main`] </details> </blockquote> </details>

gitea-admin referenced this issue 2026-10-31 16:26:11 +00:00

chore(pm-agent): pin agent-runner to the run-383 digest (ddd04d4), bump config-generation #96

gitea-admin referenced this issue from a commit 2026-10-31 16:26:12 +00:00

chore(pm-agent): pin agent-runner to the run-383 digest (ddd04d4), bump config-generation

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

feat/pihole-explicit-lan-names

feat/dns-via-cloudflare-tunnel

feature/cloudflare-tunnel-config

chore/rotate-cloudflared-tunnel

fix/cloudflared-creds-permission

feat/cloudflare-tunnel

feat/parallel-l0-checks

feat/gate-toolbox-container

fix/keycloak-servicemonitor-owner

feat/runner-capacity-2

chore/renovate-config-cleanup

fix/keycloak-operator-crds

feat/devcontainer-velero-cli

feat/gitea-28

feat/l0-externaldns-annotation-prefix

fix/public-dns-wan-a-record

feat/pm-agent-pr-mentions

docs/source-comment-audit

chore/pm-agent-digest-99

fix/pm-agent-triage-exit

chore/pm-agent-go-live

chore/pm-agent-runner-digest

feature/pm-agent-credentials

feat/pm-agent-registry-pull-secret

feat/pin-pihole-jackett-plex

fix/renovate-hold-auth-and-self

feat/renovate-track-keycloak-operator

fix/renovate-run-hygiene

fix/renovate-auth

fix/renovate-first-run

feat/keycloak-passkey-reconcile

fix/gitea-admit-buildkit

feat/image-pipeline

fix/renovate-config-filename

fix/vpn-ingress-l2-lease-collision

fix/renovate-cron-window

fix/renovate-invalid-config

fix/pihole-local-ttl

fix/unattended-upgrades-debian-sentinel

fix/ha-check-catastrophic-regex

feat/automated-upgrades

fix/coredns-ha

feat/keycloak-passkeys

fix/oauth2-proxy-oidc-startup-race

feat/graceful-cluster-shutdown

plex/volume-expamsion

fix/bulk-nfs-truenas

fix/peers-configmap-content-hash

vpn/add-keith-phone

fix/new-peer-ignores-template-comments

fix/vpn-ingress-ip-forward

feature/add-private-key-for-wireguard

fix/vpn-server-key-in-sops

docs/pm-agent-registry-pull-prereq

fix/vpn-runbook-ansible-command

feat/pm-agent-issue-to-pr

docs/agents-work-in-their-own-workspace

feat/vpn-remote-access-wireguard

feat/cilium-roll-out-on-config-change

docs/oauth2-sidecar-scrape-verified

fix/plex-resolver-independent-advertise

fix/plex-unblock-app-tier

feat/hubble-flow-export-plex

fix/oauth2-sidecar-metrics-scrape-netpol

feat/plex-vip-hostname-and-lan-networks

fix/plex-advertise-plexdirect

docs/pihole-ha-verified

feat/pihole-multi-replica

feat/pihole-declare-state

feat/plex-remote-access-l4

fix/cilium-cgroup-hostroot

fix/node-keycloak-hosts-pin

feat/public-dns-wan-target

fix/plex-quicksync-verification

sync-39-onto-main

fix/admin-approval-override

feat/quicksync-via-device-plugin

bugfix/arr-to-plex

feat/oauth2-proxy-api-route-per-app

feat/intel-gpu-device-plugin

feat/oauth2-proxy-auth-failure-visible

fix/render-selftest-runs-in-gate

feat/plex-quicksync

feat/sd-hardware-capability

fix/jackett-oauth2-proxy-session

feat/node-health-render-device

fix/oauth2-proxy-cookie-collision-fleet

fix/flux-deploy-notification-inhibited

feat/flux-deploy-notifications

feat/conformance-job-template

feat/conformance-trigger-kubeconfig

feat/conformance-runner-image

fix/crafty-oauth2-proxy-signin

chore/decisions-log-conflict-free

fix/crafty-bedrock-19132

fix/gitea-settings-comment-names-impossible-secret

feat/ci-is-the-approver

fix/kyverno-policy-was-never-applied

docs/handoff-2026-09-29

fix/secret-name-and-require-gitea-settings

feat/conformance-trigger-admission-boundary

fix/cluster-available-would-fake-a-green

feat/gitea-settings-drift-check

fix/gitea-admins-could-override-the-gate

docs/close-out-ci-hardening

docs/ci-reality-vs-phase-0

docs/runbooks-pr-flow

fix/dind-native-sidecar

fix/gate-push-trigger-matches-feat-prefix

feat/plex-claim-token-013124

fix/conformance-context-is-fail-open

docs/ci-delivery-flow-for-agents

feat/plex-claim-sops-secret

feat/prod-hardening

prod/deliver-fixes

docs/memattr-6-12-backport

migration/dns-apex-inversion

feat/prod-memattr-and-nodes

docs/node2-memory-refine

feat/prod-node-2

feat/r-state-03-proven

feat/ledger-section-parsing

feat/conformance-run-ledger

chore/cilium-split-merge2

feat/cilium-own-kustomization

docs/poststart-incident

fix/poststart-exit-status

fix/strict-postbuild-substitutions

docs/phase-7-open-prod-node-1

rescued/fix/act-runner-dind-readiness

rescued/fix/node-dns-resilient-upstream

docs/reconcile-with-reality

No results found.

Labels

Clear labels

agent

automated-update

blast-radius

breaking

ci-tooling

dependencies

needs-review

own-image

range-widen

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

gitea-admin jakman85 (Keith Jackson) pm-agent renovate-bot

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Home-Network/home-network-k3s-impl#91