chore(deps): renovate 2025-01-26

chore(deps): update helm release argo-cd to v7.7.17

chore(deps): update keycloak docker tag to v24.4.6

chore(deps): update helm release node-feature-discovery to v0.17.1

chore(deps): update sealed-secrets docker tag to v2.5.4

chore(deps): update proxmox-csi-plugin docker tag to v0.3.4

chore(deps): update dependency cert-manager/cert-manager to v1.16.3

chore(deps): update dependency siderolabs/talos to v1.9.2

chore(deps): update netbird

chore(deps): update netbirdio/relay docker tag to v0.36.3

chore(deps): update cilium to v1.16.6

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.56

chore(deps): update media containers

chore(deps): update terraform talos to v0.7.1

chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.10.1

chore(deps): update terraform proxmox to v0.70.0

k8s/apps/media/arr/prowlarr/deployment.yaml

@@ -30,7 +30,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: prowlarr
-          image: ghcr.io/onedr0p/prowlarr:1.29.2 # renovate: docker=ghcr.io/onedr0p/prowlarr
+          image: ghcr.io/onedr0p/prowlarr:1.30.2 # renovate: docker=ghcr.io/onedr0p/prowlarr
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/apps/media/jellyfin/deployment.yaml

@@ -25,7 +25,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jellyfin
-          image: ghcr.io/jellyfin/jellyfin:10.10.3 # renovate: docker=ghcr.io/jellyfin/jellyfin
+          image: ghcr.io/jellyfin/jellyfin:10.10.5 # renovate: docker=ghcr.io/jellyfin/jellyfin
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/infra/auth/keycloak/kustomization.yaml

@@ -15,5 +15,5 @@ helmCharts:
     repo: oci://registry-1.docker.io/bitnamicharts
     releaseName: keycloak
     namespace: keycloak
-    version: 24.4.0
+    version: 24.4.6
     valuesFile: values.yaml

k8s/infra/controllers/argocd/kustomization.yaml

@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: argo-cd
     repo: https://argoproj.github.io/argo-helm
-    version: 7.7.15
+    version: 7.7.17
     releaseName: "argocd"
     namespace: argocd
     valuesFile: values.yaml

k8s/infra/controllers/cert-manager/kustomization.yaml

@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: cert-manager
     repo: https://charts.jetstack.io
-    version: v1.16.2 # renovate: github-releases=cert-manager/cert-manager
+    version: v1.16.3 # renovate: github-releases=cert-manager/cert-manager
     releaseName: cert-manager
     namespace: cert-manager
     valuesFile: values.yaml

k8s/infra/controllers/node-feature-discovery/kustomization.yaml

@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: node-feature-discovery
     repo: https://kubernetes-sigs.github.io/node-feature-discovery/charts
-    version: 0.17.0
+    version: 0.17.1
     releaseName: nfd
     includeCRDs: true
     namespace: node-feature-discovery

k8s/infra/controllers/sealed-secrets/kustomization.yaml

@@ -4,7 +4,7 @@ kind: Kustomization
 helmCharts:
   - name: sealed-secrets
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 2.5.0
+    version: 2.5.4
     releaseName: sealed-secrets-controller
     namespace: sealed-secrets
     includeCRDs: true

k8s/infra/crossplane-crds/providers/keycloak.yaml

@@ -3,4 +3,4 @@ kind: Provider
 metadata:
   name: provider-keycloak
 spec:
-  package: xpkg.upbound.io/crossplane-contrib/provider-keycloak:v1.9.2 # renovate: github-releases=crossplane-contrib/provider-keycloak
+  package: xpkg.upbound.io/crossplane-contrib/provider-keycloak:v1.10.1 # renovate: github-releases=crossplane-contrib/provider-keycloak

k8s/infra/network/cilium/kustomization.yaml

@@ -8,7 +8,7 @@ resources:
 helmCharts:
   - name: cilium
     repo: https://helm.cilium.io
-    version: 1.16.5 # renovate: github-releases=cilium/cilium
+    version: 1.16.6 # renovate: github-releases=cilium/cilium
     releaseName: "cilium"
     includeCRDs: true
     namespace: kube-system

k8s/infra/network/dns/adguard/deployment.yaml

@@ -49,7 +49,7 @@ spec:
               mountPath: /opt/adguardhome/conf
       containers:
         - name: adguard
-          image: docker.io/adguard/adguardhome:v0.107.55 # renovate: docker=docker.io/adguard/adguardhome
+          image: docker.io/adguard/adguardhome:v0.107.56 # renovate: docker=docker.io/adguard/adguardhome
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/infra/storage/proxmox-csi/kustomization.yaml

@@ -4,7 +4,7 @@ kind: Kustomization
 helmCharts:
   - name: proxmox-csi-plugin
     repo: oci://ghcr.io/sergelogvinov/charts
-    version: 0.3.1
+    version: 0.3.4
     releaseName: proxmox-csi-plugin
     includeCRDs: true
     namespace: csi-proxmox

k8s/infra/vpn/netbird/agent/daemon-set.yaml

@@ -22,7 +22,7 @@ spec:
             value: "1"
       containers:
         - name: agent
-          image: docker.io/netbirdio/netbird:0.35.2 # renovate: docker=docker.io/netbirdio/netbird
+          image: docker.io/netbirdio/netbird:0.36.3 # renovate: docker=docker.io/netbirdio/netbird
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false

k8s/infra/vpn/netbird/dashboard/deployment.yaml

@@ -17,7 +17,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: dashboard
-          image: docker.io/netbirdio/dashboard:v2.8.2 # renovate: docker=docker.io/netbirdio/dashboard
+          image: docker.io/netbirdio/dashboard:v2.9.0 # renovate: docker=docker.io/netbirdio/dashboard
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false

k8s/infra/vpn/netbird/management/deployment.yaml

@@ -58,7 +58,7 @@ spec:
               mountPath: /tmp/netbird
       containers:
         - name: management
-          image: docker.io/netbirdio/management:0.35.2 # renovate: docker=docker.io/netbirdio/management
+          image: docker.io/netbirdio/management:0.36.3 # renovate: docker=docker.io/netbirdio/management
           args: [ --dns-domain, $(DNS_DOMAIN), --log-level, $(LOG_LEVEL), --log-file, console, --idp-sign-key-refresh-enabled ]
           securityContext:
             allowPrivilegeEscalation: false

k8s/infra/vpn/netbird/relay/deployment.yaml

@@ -16,7 +16,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: docker.io/netbirdio/relay:0.35.2 # renovate: docker=netbirdio/relay
+        - image: docker.io/netbirdio/relay:0.36.3 # renovate: docker=netbirdio/relay
           imagePullPolicy: IfNotPresent
           name: relay
           securityContext:

k8s/infra/vpn/netbird/signal/deployment.yaml

@@ -21,7 +21,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: signal
-          image: docker.io/netbirdio/signal:0.35.2 # renovate: docker=docker.io/netbirdio/signal
+          image: docker.io/netbirdio/signal:0.36.3 # renovate: docker=docker.io/netbirdio/signal
           args: [ --port, $(PORT), --log-level, $(LOG_LEVEL), --log-file, console ]
           securityContext:
             allowPrivilegeEscalation: false

tofu/home-assistant/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     proxmox = {
       source  = "bpg/proxmox"
-      version = "0.69.1"
+      version = "0.70.0"
     }
   }
 }

tofu/kubernetes/main.tf

@@ -7,7 +7,7 @@ module "talos" {
 
   image = {
     version = "v1.8.1"
-    update_version = "v1.9.1" # renovate: github-releases=siderolabs/talos
+    update_version = "v1.9.2" # renovate: github-releases=siderolabs/talos
     schematic = file("${path.module}/talos/image/schematic.yaml")
   }
 

tofu/kubernetes/providers.tf

@@ -6,11 +6,11 @@ terraform {
     }
     proxmox = {
       source  = "bpg/proxmox"
-      version = "0.69.1"
+      version = "0.70.0"
     }
     talos = {
       source  = "siderolabs/talos"
-      version = "0.7.0"
+      version = "0.7.1"
     }
     restapi = {
       source  = "Mastercard/restapi"

tofu/kubernetes/talos/inline-manifests/cilium-install.yaml

@@ -75,7 +75,7 @@ spec:
         command:
           - cilium
           - install
-          - --version=v1.16.5 # renovate: github-releases=cilium/cilium
+          - --version=v1.16.6 # renovate: github-releases=cilium/cilium
           - --set
           - kubeProxyReplacement=true
           - --values