feat(images): pin pihole, jackett and plex to the digests already running; Renovate follows them #94

Merged

jakman85 merged 1 commits from feat/pin-pihole-jackett-plex into main

2026-10-31 15:45:17 +00:00

Author	SHA1	Message	Date
jakman85andClaude Opus 5.5	183bca6897	feat(images): pin pihole, jackett and plex to the digests already running; Renovate follows them gate / gate (pull_request) Successful in 2m57s Details gate / conformance (pull_request) Has been skipped Details pihole/pihole (no tag) -> 2026.10.0 sha256:d3413471... lscr.io/linuxserver/jackett:latest -> v0.24.2865-ls7 sha256:4fcf3cc2... plexinc/pms-docker:latest -> 1.43.4.10903-e5521bd8c sha256:e0ab2739... Each tag was resolved against its registry and matched the pods' imageID, so the image is unchanged (the pod template string does change, so Flux rolls the three workloads). renovate.json5: regex versioning for jackett (-lsN) and plex (build-hex); jackett is looked up on ghcr.io via overridePackageName, because lscr.io is capped at dockerMaxPages=20 pages and jackett's 32k tags put the running one at #31,980 (dry run proposed nothing without it); jackett weekly (13 builds in 12 days); pihole deliberately unheld, year rollover = major. Stale "publishes only latest" prose fixed in renovate.json5 and three runbooks. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-31 10:38:07 -05:00

Author

SHA1

Message

Date

jakman85andClaude Opus 5.5

183bca6897

feat(images): pin pihole, jackett and plex to the digests already running; Renovate follows them

gate / gate (pull_request) Successful in 2m57s

Details

gate / conformance (pull_request) Has been skipped

Details

pihole/pihole (no tag)               -> 2026.10.0               sha256:d3413471...
lscr.io/linuxserver/jackett:latest   -> v0.24.2865-ls7          sha256:4fcf3cc2...
plexinc/pms-docker:latest            -> 1.43.4.10903-e5521bd8c  sha256:e0ab2739...

Each tag was resolved against its registry and matched the pods' imageID, so the image is
unchanged (the pod template string does change, so Flux rolls the three workloads).

renovate.json5: regex versioning for jackett (-lsN) and plex (build-hex); jackett is looked
up on ghcr.io via overridePackageName, because lscr.io is capped at dockerMaxPages=20 pages
and jackett's 32k tags put the running one at #31,980 (dry run proposed nothing without it);
jackett weekly (13 builds in 12 days); pihole deliberately unheld, year rollover = major.
Stale "publishes only latest" prose fixed in renovate.json5 and three runbooks.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-31 10:38:07 -05:00