[faust-renovate]

This PR contains the following updates:

Package	Update	Change
oci.trueforge.org/containerforge/calibre-web (source)	digest	081669c → a0b57bb

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[faust-renovate]

konflate · #1771 — fix(container): update image oci.trueforge.org/containerforge/calibre-web (081669c ➔ a0b57bb)

Tip

Routine: only container-image and chart-version changes; 2 resources across 2 apps

image	from	to	upstream
oci.trueforge.org/containerforge/calibre-web	0.6.27@sha256:081669…	0.6.27@sha256:a0b57b…	✅

_{konflate 0.6.6 · rendered 38e306c}

[faust-review]

Confidence Score: 5/5

[Low risk] The same-version digest update affects a single application's image and is low risk; the rendered diff confirms that only the two references to that image change.

Approved

Summary

Repoints calibre-web to a rebuilt 0.6.27 image digest

The tag stays 0.6.27 and only the sha256 moves, so this is a rebuild of the same upstream calibre-web release rather than an application upgrade. The &image anchor at helmrelease.yaml:25 feeds both the app container and the configure-trusted-proxies initContainer, so konflate shows the new digest in both places and nothing else in the rendered output changing; merging rolls the calibre-web pods onto the rebuilt image on the next Flux reconcile. The initContainer shell-out to /app/calibre-web/cps.py and its settings/config_reverse_proxy_trusted_ips query depend on paths that are unchanged while the application version is 0.6.27, so the migration still matches. One open question the repo cannot answer: oci.trueforge.org/containerforge/calibre-web republishes upstream under its own build, and its source (ghcr.io/trueforge-org/calibre-web) does not resolve, so what the rebuild changed — base image layers, Python dependencies — is not visible here; the PR body's own warning that some dependencies could not be looked up points at the same gap.

Review context · 2/7 commands

• Commands run: gh konflate

_{Reviews (1) · Last reviewed commit: "fix(container): update image oci.truefor..." · self-qwen3.8-flash-next/low}

[faust-review]

kritika: confidence 5/5 with low risk at 38e306c.