Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update helm release argo-cd to v10
• chore(deps): update helm release traefik to v41
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update linuxserver/qbittorrent docker tag to v14

Detected Dependencies

ansible-galaxy (1)

Ansible/requirements.yaml

devcontainer (1)

.devcontainer/devcontainer.json (3)

• ghcr.io/devcontainers/features/terraform 1
• ghcr.io/devcontainers-extra/features/actionlint 1
• ghcr.io/devcontainers-extra/features/tailscale 1

docker-compose (1)

compose.proxy.yaml

dockerfile (1)

.devcontainer/Dockerfile

github-actions (6)

.github/workflows/ansible-lint.yaml (3)

• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v8.2.0
• actions/cache v5 → [Updates: v6]

.github/workflows/ansible.yaml (7)

• actions/checkout v6 → [Updates: v7]
• bitwarden/sm-action v3.0.0
• tailscale/github-action v4
• webfactory/ssh-agent v0.10.0
• astral-sh/setup-uv v8.2.0
• actions/cache v5 → [Updates: v6]
• tj-actions/changed-files v47

.github/workflows/kubernetes-lint.yaml (2)

• actions/checkout v6 → [Updates: v7]
• actions/setup-go v6

.github/workflows/terraform-apps.yaml (14)

• actions/checkout v6 → [Updates: v7]
• bitwarden/sm-action v3.0.0
• tailscale/github-action v4
• azure/setup-kubectl v5
• hashicorp/setup-terraform v4
• actions/cache v5 → [Updates: v6]
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• bitwarden/sm-action v3.0.0
• tailscale/github-action v4
• azure/setup-kubectl v5
• hashicorp/setup-terraform v4
• actions/cache v5 → [Updates: v6]
• actions/download-artifact v8

.github/workflows/terraform-destroy.yaml (12)

• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v8.2.0
• actions/cache v5 → [Updates: v6]
• hashicorp/setup-terraform v4
• tailscale/github-action v4
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• astral-sh/setup-uv v8.2.0
• actions/cache v5 → [Updates: v6]
• hashicorp/setup-terraform v4
• tailscale/github-action v4
• actions/download-artifact v8

.github/workflows/terraform.yaml (14)

• actions/checkout v6 → [Updates: v7]
• bitwarden/sm-action v3.0.0
• actions/create-github-app-token v3
• tailscale/github-action v4
• hashicorp/setup-terraform v4
• actions/cache v5 → [Updates: v6]
• actions/upload-artifact v7
• actions/checkout v6 → [Updates: v7]
• bitwarden/sm-action v3.0.0
• actions/create-github-app-token v3
• tailscale/github-action v4
• hashicorp/setup-terraform v4
• actions/cache v5 → [Updates: v6]
• actions/download-artifact v8

kubernetes (55)

Kubernetes/apps/adguard/deployment.yaml (2)

• adguard/adguardhome v0.107.77
• Deployment apps/v1

Kubernetes/apps/bazarr/deployment.yaml (2)

• linuxserver/bazarr 1.5.6
• Deployment apps/v1

Kubernetes/apps/borgbackup/cronjob.yaml (4)

• postgres 18-alpine
• postgres 18-alpine
• alpine 3.24
• CronJob batch/v1

Kubernetes/apps/borgbackup/externalsecret-authentik.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/apps/borgbackup/externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/apps/byparr/deployment.yaml (2)

• ghcr.io/thephaseless/byparr 2.1.0
• Deployment apps/v1

Kubernetes/apps/byparr/externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/apps/common/externalsecrets.yaml (2)

• ExternalSecret external-secrets.io/v1
• ExternalSecret external-secrets.io/v1

Kubernetes/apps/common/rbac.yaml (2)

• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

Kubernetes/apps/copyparty/deployment.yaml (2)

• ghcr.io/9001/copyparty-ac 1.20.16
• Deployment apps/v1

Kubernetes/apps/decluttarr/deployment.yaml (2)

• ghcr.io/manimatter/decluttarr v2.1.0
• Deployment apps/v1

Kubernetes/apps/descheduler/cronjob.yaml (2)

• registry.k8s.io/descheduler/descheduler v0.36.0
• CronJob batch/v1

Kubernetes/apps/descheduler/rbac.yaml (4)

• ClusterRole rbac.authorization.k8s.io/v1
• Role rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

Kubernetes/apps/home-backup/cronjob.yaml (2)

• alpine 3.24
• CronJob batch/v1

Kubernetes/apps/home-backup/externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/apps/home-backup/rbac.yaml (2)

• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

Kubernetes/apps/homepage/deployment.yaml (2)

• nginx 1.31-alpine
• Deployment apps/v1

Kubernetes/apps/immich/deployment.yaml (5)

• busybox 1.38
• ghcr.io/immich-app/immich-server v2.7.5
• redis 8-alpine
• Deployment apps/v1
• ExternalSecret external-secrets.io/v1

Kubernetes/apps/immich/externalsecret-oauth.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/apps/immich/ml-deployment.yaml (2)

• ghcr.io/immich-app/immich-machine-learning v2.7.5-openvino
• Deployment apps/v1

Kubernetes/apps/jellyfin/deployment.yaml (2)

• jellyfin/jellyfin 10.11.11
• Deployment apps/v1

Kubernetes/apps/mcpjungle/deployment.yaml (2)

• mcpjungle/mcpjungle 0.4.5
• Deployment apps/v1

Kubernetes/apps/media-backup/cronjob.yaml (2)

• alpine 3.24
• CronJob batch/v1

Kubernetes/apps/media-backup/externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/apps/media-backup/rbac.yaml (2)

• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

Kubernetes/apps/postfix/deployment.yaml (2)

• boky/postfix 5.1.0
• Deployment apps/v1

Kubernetes/apps/postfix/externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/apps/prowlarr/deployment.yaml (4)

• busybox 1.38
• linuxserver/prowlarr 2.4.0
• ghcr.io/onedr0p/exportarr v2.3.0
• Deployment apps/v1

Kubernetes/apps/qbittorrent/deployment.yaml (3)

• linuxserver/qbittorrent 5.1.4 → [Updates: 14.3.9]
• linuxserver/qbittorrent 5.1.4 → [Updates: 14.3.9]
• Deployment apps/v1

Kubernetes/apps/radarr/deployment.yaml (4)

• busybox 1.38
• linuxserver/radarr 6.2.1
• ghcr.io/onedr0p/exportarr v2.3.0
• Deployment apps/v1

Kubernetes/apps/recyclarr/cronjob.yaml (2)

• ghcr.io/recyclarr/recyclarr 8.6.0
• CronJob batch/v1

Kubernetes/apps/seerr/deployment.yaml (3)

• busybox 1.38
• ghcr.io/seerr-team/seerr v3.3.0
• Deployment apps/v1

Kubernetes/apps/sonarr/deployment.yaml (4)

• busybox 1.38
• linuxserver/sonarr 4.0.19
• ghcr.io/onedr0p/exportarr v2.3.0
• Deployment apps/v1

Kubernetes/apps/whoami/deployment.yaml (2)

• traefik/whoami v1.11.0
• Deployment apps/v1

Kubernetes/bootstrap/argocd/externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/bootstrap/authentik/externalsecret.yaml (2)

• ExternalSecret external-secrets.io/v1
• ExternalSecret external-secrets.io/v1

Kubernetes/bootstrap/crowdsec/externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/bootstrap/crowdsec/lapi.yaml (2)

• crowdsecurity/crowdsec v1.7.8
• Deployment apps/v1

Kubernetes/bootstrap/external-secrets/bitwarden-store-generated.yaml (1)

• ClusterSecretStore external-secrets.io/v1

Kubernetes/bootstrap/external-secrets/bitwarden-store.yaml (1)

• ClusterSecretStore external-secrets.io/v1

Kubernetes/bootstrap/intel-gpu-operator/gpu-plugin.yaml (3)

• busybox 1.38
• intel/intel-gpu-plugin 0.36.0
• DaemonSet apps/v1

Kubernetes/bootstrap/longhorn/storageclass.yaml (2)

• StorageClass storage.k8s.io/v1
• StorageClass storage.k8s.io/v1

Kubernetes/bootstrap/observability/alloy.yaml (4)

• grafana/alloy v1.17.0
• DaemonSet apps/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

Kubernetes/bootstrap/observability/backup-cronjob.yaml (2)

• alpine 3.24
• CronJob batch/v1

Kubernetes/bootstrap/observability/backup-externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/bootstrap/observability/externalsecret.yaml (2)

• ExternalSecret external-secrets.io/v1
• ExternalSecret external-secrets.io/v1

Kubernetes/bootstrap/observability/grafana.yaml (2)

• grafana/grafana 13.1.0
• Deployment apps/v1

Kubernetes/bootstrap/observability/kube-state-metrics.yaml (4)

• registry.k8s.io/kube-state-metrics/kube-state-metrics v2.19.1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

Kubernetes/bootstrap/observability/loki.yaml (2)

• grafana/loki 3.7.3
• StatefulSet apps/v1

Kubernetes/bootstrap/observability/mimir.yaml (2)

• grafana/mimir 3.1.2
• StatefulSet apps/v1

Kubernetes/bootstrap/observability/promtail.yaml (5)

• busybox 1.38
• grafana/promtail 3.6.11
• DaemonSet apps/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

Kubernetes/bootstrap/observability/talos-dmesg-shipper.yaml (2)

• alpine 3.24
• DaemonSet apps/v1

Kubernetes/bootstrap/tailscale-operator/externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/bootstrap/traefik/crowdsec-externalsecret.yaml (1)

• ExternalSecret external-secrets.io/v1

Kubernetes/bootstrap/traefik/kustomization.yaml

kustomize (10)

Kubernetes/bootstrap/argocd/kustomization.yaml (1)

• argo-cd 9.7.1 → [Updates: 10.0.1]

Kubernetes/bootstrap/authentik/kustomization.yaml (1)

• authentik 2026.5.3

Kubernetes/bootstrap/external-secrets/kustomization.yaml (1)

• external-secrets 2.7.0

Kubernetes/bootstrap/intel-gpu-operator/kustomization.yaml (1)

• node-feature-discovery 0.18.3

Kubernetes/bootstrap/longhorn/kustomization.yaml (1)

• longhorn 1.12.0

Kubernetes/bootstrap/metallb/kustomization.yaml (1)

• metallb 0.16.1

Kubernetes/bootstrap/metrics-server/kustomization.yaml (1)

• metrics-server 3.13.1

Kubernetes/bootstrap/reloader/kustomization.yaml (1)

• reloader 2.2.12

Kubernetes/bootstrap/tailscale-operator/kustomization.yaml (1)

• tailscale-operator 1.98.4

Kubernetes/bootstrap/traefik/kustomization.yaml (1)

• traefik 40.3.0 → [Updates: 41.0.1]

mise (1)

.mise.toml (12)

• python 3.14.6
• uv 0.11.25
• terraform 1.15.7
• kubectl 1.36.2
• helm 4.2.2
• kube-linter 0.8.3
• tflint 0.63.1
• talosctl 1.13.5
• bitwarden-secrets-manager 2.1.0
• jq 1.8.2
• ripgrep 15.1.0
• yq 4.53.3

pep621 (1)

pyproject.toml (5)

• python ==3.14.*
• ansible-dev-tools >=25.5.2
• oci-cli >=3.63.0
• pre-commit >=4.5.1
• requests >=2.32.5

pre-commit (1)

.pre-commit-config.yaml (3)

• astral-sh/ruff-pre-commit v0.15.20
• antonbabenko/pre-commit-terraform v1.108.0
• pre-commit/pre-commit-hooks v6.0.0

pyenv (1)

.python-version (1)

• python 3.14

regex (1)

Terraform/variables.tf

terraform (13)

Terraform/apps/bitwarden.tf

Terraform/apps/providers.tf

Terraform/apps/versions.tf (9)

• adguard >= 1.3.0
• authentik >= 2025.12.0
• bitwarden-secrets 1.0.0
• jellyfin = 0.1.0
• kubernetes >= 2.0.0
• prowlarr >= 3.2.0
• radarr >= 2.3.5
• sonarr >= 3.4.2
• hashicorp/terraform >= 1.15.1

Terraform/backend.tf (13)

• bitwarden-secrets 1.0.0
• cloudflare >= 5.0.0
• github >= 6.0.0
• hcloud >= 1.49.0
• kubernetes >= 2.36.0
• local >= 2.0.0
• oci >= 8.0.0
• proxmox >= 0.70.0
• random >= 3.7.0
• tailscale >= 0.18.0
• talos >= 0.10.0
• tls >= 4.0.0
• hashicorp/terraform >= 1.15.1

Terraform/bitwarden.tf

Terraform/cloudflare.tf

Terraform/github.tf

Terraform/hetzner.tf

Terraform/kubernetes.tf

Terraform/oracle.tf

Terraform/proxmox.tf

Terraform/tailscale.tf

Terraform/talos.tf

tflint-plugin (1)

Terraform/.tflint.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository