Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [ ] chore(deps): update github actions (actions/checkout, golang)
• [ ] chore(deps): update applications (ghcr.io/muhlba91/external-dns-provider-adguard, kube-image-keeper)
• [ ] chore(deps): update base infrastructure (cloudnative-pg, devsec.hardening, external-secrets, k3s-io/k3s, longhorn, node-problem-detector, prometheus.prometheus, topolvm, traefik)
• [ ] chore(deps): update base infrastructure (major) (devsec.hardening, topolvm, traefik)
• [ ] chore(deps): update ghcr.io/muhlba91/external-dns-provider-adguard docker tag to v8
• [ ] chore(deps): update peter-evans/create-pull-request action to v7
• [ ] Click on this checkbox to rebase all open PRs at once

Detected dependencies

ansible-galaxy

metal/roles/requirements.yml

- `devsec.hardening 9.0.0` - `prometheus.prometheus 0.6.0` - `oefenweb.locales v1.0.52` - `hifis.unattended_upgrades v3.2.1`

flux

apps/atuin/manifests/atuin-server/release.yaml

apps/datalake-logs/release.yaml

apps/datalake-metrics/release.yaml

apps/descheduler/release.yaml

apps/external-dns/release.yaml

apps/jellyfin/manifests/release.yaml

apps/kube-image-keeper/release.yaml

- `kube-image-keeper 1.10.0`

apps/minio/release.yaml

- `minio 5.3.0`

apps/opencost/release.yaml

apps/photos/release.yaml

- `immich 0.8.4`

apps/promtail/release.yaml

apps/scripts-mon/manifests/release.yaml

apps/system-kured/release.yaml

base/cnpg-system/release.yaml

- `cloudnative-pg 0.21.2`

base/external-secrets/release.yaml

- `external-secrets 0.9.11`

base/kube-system/manifests/cilium/release.yaml

base/longhorn-system/release.yaml

- `longhorn 1.7.1`

base/metallb-system/release.yaml

base/node-feature-discovery/release.yaml

base/node-problem-detector/release.yaml

- `node-problem-detector 2.3.12`

base/topolvm/release.yaml

- `topolvm 14.1.0`

base/traefik/private/release.yaml

- `traefik 32.0.0`

base/traefik/public/release.yaml

- `traefik 28.0.0`

github-actions

.github/workflows/kubeconform.yml

- `actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332` - `actions/setup-go v5` - `actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332` - `actions/setup-go v5`

.github/workflows/kubescape.yml

- `actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332`

.github/workflows/prometheusrule.yml

- `actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332` - `actions/setup-go v5` - `prymitive/pint-action v1`

.github/workflows/versions.yaml

- `actions/checkout v4@692973e3d937129bcbf40652eb9f2f61becf3332` - `actions/setup-go v5` - `juliangruber/read-file-action v1` - `peter-evans/create-pull-request v6`

helm-values

apps/datalake-metrics/values.yaml

- `quay.io/thanos/thanos v0.36.1`

apps/external-dns/values.yaml

- `ghcr.io/muhlba91/external-dns-provider-adguard v5.1.0`

jsonnet-bundler

apps/monitoring/jsonnet/jsonnetfile.json

apps/parca/jsonnet/jsonnetfile.json

apps/system-update/jsonnet/jsonnetfile.json

base/flux-system/jsonnet/jsonnetfile.json

lib/jsonnet/apps/jsonnetfile.json

regex

metal/group_vars/k3s.yml

- `k3s-io/k3s v1.30.5+k3s1`

.github/workflows/versions.yaml

- `google/jsonnet v0.20.0`

.github/workflows/kubeconform.yml

- `golang 1.22.4`

.github/workflows/prometheusrule.yml

- `golang 1.22.4`

.github/workflows/versions.yaml

- `golang 1.22.4`

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository