chore(deps): merge renovate PRs

chore(deps): update helm release node-feature-discovery to v0.16.4

chore(deps): update helm release argo-cd to v7.4.3

chore(deps): update keycloak docker tag to v22.1.1

chore(deps): update dependency umputun/remark42 to v1.13.1

chore(deps): update cloudflare/cloudflared docker tag to v2024.8.2

chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.9

chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.8

chore(deps): update ghcr.io/onedr0p/prowlarr docker tag to v1.21.2

fix(renovate): explicitly set versioning scheme for plex

chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.8.3

chore(deps): update dependency cilium/cilium to v1.16.1

chore(deps): update terraform kubernetes to v2.32.0

chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8854-f36c552fd

chore(deps): update helm release cilium to v1.16.1

k8s/apps/homepage/blog/remark42/deployment.yaml

@@ -30,7 +30,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: remark42
-          image: ghcr.io/umputun/remark42:v1.12.1 # renovate: github-releases=umputun/remark42
+          image: ghcr.io/umputun/remark42:v1.13.1 # renovate: github-releases=umputun/remark42
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/apps/media/arr/prowlarr/deployment.yaml

@@ -30,7 +30,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: prowlarr
-          image: ghcr.io/onedr0p/prowlarr:1.20.1 # renovate: docker=ghcr.io/onedr0p/prowlarr
+          image: ghcr.io/onedr0p/prowlarr:1.21.2 # renovate: docker=ghcr.io/onedr0p/prowlarr
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/apps/media/arr/radarr/deployment.yaml

@@ -30,7 +30,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: radarr
-          image: ghcr.io/onedr0p/radarr:5.7.0 # renovate: docker=ghcr.io/onedr0p/radarr
+          image: ghcr.io/onedr0p/radarr:5.8.3 # renovate: docker=ghcr.io/onedr0p/radarr
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/apps/media/arr/sonarr/deployment.yaml

@@ -30,7 +30,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sonarr
-          image: ghcr.io/onedr0p/sonarr:4.0.7 # renovate: docker=ghcr.io/onedr0p/sonarr
+          image: ghcr.io/onedr0p/sonarr:4.0.8 # renovate: docker=ghcr.io/onedr0p/sonarr
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/apps/media/jellyfin/deployment.yaml

@@ -25,7 +25,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jellyfin
-          image: ghcr.io/jellyfin/jellyfin:10.9.7 # renovate: docker=ghcr.io/jellyfin/jellyfin
+          image: ghcr.io/jellyfin/jellyfin:10.9.9 # renovate: docker=ghcr.io/jellyfin/jellyfin
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/apps/media/plex/deployment.yaml

@@ -28,7 +28,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: plex
-          image: ghcr.io/onedr0p/plex:1.40.4.8679-424562606 # renovate: docker=ghcr.io/onedr0p/plex
+          image: ghcr.io/onedr0p/plex:1.40.5.8854-f36c552fd # renovate: docker=ghcr.io/onedr0p/plex versioning=loose
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true

k8s/infra/auth/keycloak/kustomization.yaml

@@ -14,5 +14,5 @@ helmCharts:
     repo: oci://registry-1.docker.io/bitnamicharts
     releaseName: keycloak
     namespace: keycloak
-    version: 22.1.0
+    version: 22.1.1
     valuesFile: values.yaml

k8s/infra/controllers/argocd/kustomization.yaml

@@ -8,7 +8,7 @@ resources:
 helmCharts:
   - name: argo-cd
     repo: https://argoproj.github.io/argo-helm
-    version: 7.4.2
+    version: 7.4.3
     releaseName: "argocd"
     namespace: argocd
     valuesFile: values.yaml

k8s/infra/controllers/node-feature-discovery/kustomization.yaml

@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: node-feature-discovery
     repo: https://kubernetes-sigs.github.io/node-feature-discovery/charts
-    version: 0.16.3
+    version: 0.16.4
     releaseName: nfd
     includeCRDs: true
     namespace: node-feature-discovery

k8s/infra/network/cilium/kustomization.yaml

@@ -8,7 +8,7 @@ resources:
 helmCharts:
   - name: cilium
     repo: https://helm.cilium.io
-    version: 1.16.0
+    version: 1.16.1
     releaseName: "cilium"
     includeCRDs: true
     namespace: kube-system

k8s/infra/network/cloudflared/daemon-set.yaml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: cloudflared
-          image: cloudflare/cloudflared:2024.6.1 # renovate: docker=cloudflare/cloudflared
+          image: cloudflare/cloudflared:2024.8.2 # renovate: docker=cloudflare/cloudflared
           imagePullPolicy: IfNotPresent
           args:
             - tunnel

tofu/kubernetes/providers.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     kubernetes = {
       source  = "hashicorp/kubernetes"
-      version = "2.31.0"
+      version = "2.32.0"
     }
     proxmox = {
       source  = "bpg/proxmox"

tofu/kubernetes/talos/inline-manifests/cilium-install.yaml

@@ -75,7 +75,7 @@ spec:
         command:
           - cilium
           - install
-          - --version=v1.16.0 # renovate: github-releases=cilium/cilium
+          - --version=v1.16.1 # renovate: github-releases=cilium/cilium
           - --set
           - kubeProxyReplacement=true
           - --values