This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] <!-- approve-branch=renovate/actions-deploy-pages-5.x -->feat(github-action)!: Update actions/deploy-pages ( v4 → v5.0.0 ) ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] <!-- unlimit-branch=renovate/python-3.x -->fix(github-release): update python ( 3.14.4 → 3.14.5 ) - [ ] <!-- unlimit-branch=renovate/cilium-all -->fix(helm): update cilium ( 1.19.3 → 1.19.4 ) - [ ] <!-- unlimit-branch=renovate/grafana-4.x -->chore(deps): update terraform grafana to 4.36.0 - [ ] <!-- unlimit-branch=renovate/null-3.x-lockfile -->chore(deps): update terraform null to 3.3.0 - [ ] <!-- create-all-rate-limited-prs -->🔐 **Create all rate-limited PRs at once** 🔐 ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] <!-- approvePr-branch=renovate/coredns-all -->[fix(container): update ghcr.io/coredns/charts/coredns ( 1.45.0 → 1.45.2 )](../pull/1258) - [ ] <!-- approvePr-branch=renovate/ghcr.io-home-operations-charts-mirror-cilium-1.x -->[fix(container): update ghcr.io/home-operations/charts-mirror/cilium ( 1.18.3 → 1.18.6 )](../pull/1259) - [ ] <!-- approvePr-branch=renovate/patch-cert-manager -->[fix(container): update quay.io/jetstack/charts/cert-manager ( v1.19.1 → v1.19.5 )](../pull/1260) - [ ] <!-- approvePr-branch=renovate/ghcr.io-bjw-s-labs-helm-app-template-4.x -->[feat(container): update ghcr.io/bjw-s-labs/helm/app-template ( 4.4.0 → 4.6.2 )](../pull/1261) - [ ] <!-- approvePr-branch=renovate/flux-instance-all -->[feat(container): update ghcr.io/controlplaneio-fluxcd/charts/flux-instance ( 0.33.0 → 0.50.0 )](../pull/1262) - [ ] <!-- approvePr-branch=renovate/flux-operator-all -->[feat(container): update ghcr.io/controlplaneio-fluxcd/charts/flux-operator ( 0.33.0 → 0.50.0 )](../pull/1263) - [ ] <!-- approvePr-branch=renovate/ghcr.io-grafana-helm-charts-grafana-operator-5.x -->[feat(container): update ghcr.io/grafana/helm-charts/grafana-operator ( v5.20.0 → 5.22.2 )](../pull/1264) - [ ] <!-- approvePr-branch=renovate/ghcr.io-home-operations-charts-mirror-external-dns-1.x -->[feat(container): update ghcr.io/home-operations/charts-mirror/external-dns ( 1.19.0 → 1.21.1 )](../pull/1265) - [ ] <!-- approvePr-branch=renovate/mirror.gcr.io-envoyproxy-gateway-helm-1.x -->[feat(container): update mirror.gcr.io/envoyproxy/gateway-helm ( v1.5.4 → v1.8.0 )](../pull/1266) - [ ] <!-- approvePr-branch=renovate/cert-manager -->[feat(container): update quay.io/jetstack/charts/cert-manager ( v1.19.1 → v1.20.2 )](../pull/1267) - [ ] <!-- approvePr-branch=renovate/ghcr.io-bjw-s-labs-helm-app-template-5.x -->feat(container)!: Update ghcr.io/bjw-s-labs/helm/app-template ( 4.4.0 → 5.0.1 ) - [ ] <!-- approvePr-branch=renovate/major-external-secrets-all -->[feat(container)!: Update ghcr.io/external-secrets/charts/external-secrets ( 0.20.4 → 2.5.0 )](../pull/1268) - [ ] <!-- approvePr-branch=renovate/ghcr.io-prometheus-community-charts-kube-prometheus-stack-85.x -->feat(container)!: Update ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 78.5.0 → 85.2.0 ) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/dragonflydb-dragonfly-operator-1.x -->[feat(github-release): update dragonflydb/dragonfly-operator ( v1.3.1 → v1.5.0 )](../pull/1214) - [ ] <!-- rebase-branch=renovate/fluxcd-flux2-2.x -->[feat(github-release): update fluxcd/flux2 ( v2.7.5 → v2.8.7 )](../pull/1222) - [ ] <!-- rebase-branch=renovate/authentik-2026.x -->[chore(deps): update terraform authentik to 2026.2.0](../pull/1234) - [ ] <!-- rebase-branch=renovate/kubernetes-3.x-lockfile -->[chore(deps): update terraform kubernetes to 3.1.0](../pull/1235) - [ ] <!-- rebase-branch=renovate/onepassword-3.x -->[chore(deps): update terraform onepassword to 3.3.1](../pull/1236) - [ ] <!-- rebase-branch=renovate/restapi-3.x -->[chore(deps): update terraform restapi to 3.0.0](../pull/1237) - [ ] <!-- rebase-branch=renovate/node-24.x -->[feat(container)!: Update node](../pull/1238) - [ ] <!-- rebase-branch=renovate/ubuntu-26.x -->[feat(container)!: Update ubuntu ( 24.04 → resolute )](../pull/1239) - [ ] <!-- rebase-branch=renovate/actions-checkout-6.x -->[feat(github-action)!: Update actions/checkout ( v5 → v6.0.2 )](../pull/1240) - [ ] <!-- rebase-branch=renovate/actions-configure-pages-6.x -->[feat(github-action)!: Update actions/configure-pages ( v5 → v6.0.0 )](../pull/1241) - [ ] <!-- rebase-branch=renovate/actions-create-github-app-token-3.x -->[feat(github-action)!: Update actions/create-github-app-token ( v2 → v3.2.0 )](../pull/1242) - [ ] <!-- rebase-branch=renovate/actions-labeler-6.x -->[feat(github-action)!: Update actions/labeler ( v5 → v6.1.0 )](../pull/1244) - [ ] <!-- rebase-branch=renovate/actions-setup-go-6.x -->[feat(github-action)!: Update actions/setup-go ( v5 → v6.4.0 )](../pull/1245) - [ ] <!-- rebase-branch=renovate/actions-setup-python-6.x -->[feat(github-action)!: Update actions/setup-python ( v5 → v6.2.0 )](../pull/1246) - [ ] <!-- rebase-branch=renovate/actions-upload-pages-artifact-5.x -->[feat(github-action)!: Update actions/upload-pages-artifact ( v4 → v5.0.0 )](../pull/1247) - [ ] <!-- rebase-branch=renovate/azure-setup-helm-5.x -->[feat(github-action)!: Update azure/setup-helm ( v4 → v5.0.0 )](../pull/1248) - [ ] <!-- rebase-branch=renovate/docker-bake-action-7.x -->[feat(github-action)!: Update docker/bake-action ( v5 → v7.1.0 )](../pull/1249) - [ ] <!-- rebase-branch=renovate/docker-login-action-4.x -->[feat(github-action)!: Update docker/login-action ( v3 → v4.1.0 )](../pull/1250) - [ ] <!-- rebase-branch=renovate/docker-metadata-action-6.x -->[feat(github-action)!: Update docker/metadata-action ( v5 → v6.0.0 )](../pull/1251) - [ ] <!-- rebase-branch=renovate/docker-setup-buildx-action-4.x -->[feat(github-action)!: Update docker/setup-buildx-action ( v3 → v4.0.0 )](../pull/1252) - [ ] <!-- rebase-branch=renovate/major-github-artifact-actions -->[feat(github-action)!: Update GitHub Artifact Actions (major)](../pull/1253) (`actions/download-artifact`, `actions/upload-artifact`) - [ ] <!-- rebase-branch=renovate/mshick-add-pr-comment-3.x -->[feat(github-action)!: Update mshick/add-pr-comment ( v2 → v3.11.0 )](../pull/1254) - [ ] <!-- rebase-branch=renovate/renovatebot-github-action-46.x -->[feat(github-action)!: Update renovatebot/github-action ( v43.0.20 → v46.1.14 )](../pull/1255) - [ ] <!-- rebase-branch=renovate/tj-actions-changed-files-47.x -->[feat(github-action)!: Update tj-actions/changed-files to v47.0.6](../pull/1256) - [ ] <!-- rebase-branch=renovate/github.com-ory-dockertest-v3-4.x -->[fix(deps): update module github.com/ory/dockertest/v3 to v4.0.0](../pull/1257) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>dockerfile (3)</summary> <blockquote> <details><summary>containers/enigma-bbs/Dockerfile (2)</summary> - `node 22-bookworm-slim` → [Updates: `24-bookworm-slim`] - `node 22-bookworm-slim` → [Updates: `24-bookworm-slim`] </details> <details><summary>containers/mysticbbs/Dockerfile (2)</summary> - `ubuntu 24.04` → [Updates: `26.04`] - `ubuntu 24.04` → [Updates: `26.04`] </details> <details><summary>containers/text0wnz/Dockerfile (2)</summary> - `node 22-alpine` → [Updates: `24-alpine`] - `node 22-alpine` → [Updates: `24-alpine`] </details> </blockquote> </details> <details><summary>github-actions (6)</summary> <blockquote> <details><summary>.github/workflows/containers.yaml (22)</summary> - `actions/checkout v5` → [Updates: `v6`] - `tj-actions/changed-files v41` → [Updates: `v47`] - `actions/checkout v5` → [Updates: `v6`] - `actions/checkout v5` → [Updates: `v6`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `actions/checkout v5` → [Updates: `v6`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `docker/metadata-action v5` → [Updates: `v6`] - `docker/bake-action v5` → [Updates: `v7`] - `actions/upload-artifact v4` → [Updates: `v7`] - `actions/download-artifact v4` → [Updates: `v8`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `actions/checkout v5` → [Updates: `v6`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `actions/checkout v5` → [Updates: `v6`] - `docker/setup-buildx-action v3` → [Updates: `v4`] - `docker/login-action v3` → [Updates: `v4`] - `actions/checkout v5` → [Updates: `v6`] - `actions/setup-go v5` → [Updates: `v6`] - `go 1.26` </details> <details><summary>.github/workflows/docs.yaml (7)</summary> - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `actions/configure-pages v5` → [Updates: `v6`] - `ghcr.io/bjw-s/mdbook 0.4.44@sha256:82d38ed9bca2bbf0c3be62deef3ea1a27fdbffe3caf92fedf4a4b3c4c904ec48` - `actions/upload-pages-artifact v4` → [Updates: `v5`] - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/deploy-pages v4` → [Updates: `v5`] </details> <details><summary>.github/workflows/label-sync.yaml (2)</summary> - `actions/checkout v5` → [Updates: `v6`] - `EndBug/label-sync v2` </details> <details><summary>.github/workflows/labeler.yaml (1)</summary> - `actions/labeler v5` → [Updates: `v6`] </details> <details><summary>.github/workflows/renovate.yaml (3)</summary> - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `renovatebot/github-action v43.0.20` → [Updates: `v46.1.14`] </details> <details><summary>.github/workflows/validate.yaml (40)</summary> - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `tj-actions/changed-files v46` → [Updates: `v47`] - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `ibiqlik/action-yamllint v3` - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `actions/setup-go v5` → [Updates: `v6`] - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `trufflesecurity/trufflehog main` - `gitleaks/gitleaks-action v2` - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `fluxcd/pkg main` - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `actions/setup-go v5` → [Updates: `v6`] - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `actions/setup-python v5` → [Updates: `v6`] - `fluxcd/flux2 v2.7.5` → [Updates: `v2.8.7`] - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `actions/checkout v5` → [Updates: `v6`] - `actions/setup-python v5` → [Updates: `v6`] - `fluxcd/flux2 v2.7.5` → [Updates: `v2.8.7`] - `mshick/add-pr-comment v2` → [Updates: `v3`] - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `azure/setup-helm v4` → [Updates: `v5`] - `actions/create-github-app-token v2` → [Updates: `v3`] - `actions/checkout v5` → [Updates: `v6`] - `mikefarah/yq v4` - `fluxcd/pkg main` - `go 1.26.x` - `go 1.26.x` - `python 3.14` - `python 3.14` </details> </blockquote> </details> <details><summary>gomod (2)</summary> <blockquote> <details><summary>containers/enigma-bbs/go.mod (3)</summary> - `go 1.22` - `github.com/ory/dockertest/v3 v3.12.0` → [Updates: `v4.0.0`] - `github.com/stretchr/testify v1.11.1` </details> <details><summary>containers/mysticbbs/go.mod (3)</summary> - `go 1.22` - `github.com/ory/dockertest/v3 v3.12.0` → [Updates: `v4.0.0`] - `github.com/stretchr/testify v1.11.1` </details> </blockquote> </details> <details><summary>helmfile (3)</summary> <blockquote> <details><summary>bootstrap/helmfile.d/00-crds.yaml (5)</summary> - `ghcr.io/home-operations/charts-mirror/external-dns 1.19.0` → [Updates: `1.21.1`] - `ghcr.io/external-secrets/charts/external-secrets 0.20.4` → [Updates: `2.5.0`] - `mirror.gcr.io/envoyproxy/gateway-helm v1.5.4` → [Updates: `v1.8.0`] - `ghcr.io/grafana/helm-charts/grafana-operator v5.20.0` → [Updates: `5.22.2`] - `ghcr.io/prometheus-community/charts/kube-prometheus-stack 78.5.0` → [Updates: `85.2.0`] </details> <details><summary>bootstrap/helmfile.d/01-apps.yaml (5)</summary> - `ghcr.io/home-operations/charts-mirror/cilium 1.18.3` → [Updates: `1.18.6`] - `ghcr.io/coredns/charts/coredns 1.45.0` → [Updates: `1.45.2`] - `quay.io/jetstack/charts/cert-manager v1.19.1` → [Updates: `v1.19.5`, `v1.20.2`] - `ghcr.io/controlplaneio-fluxcd/charts/flux-operator 0.33.0` → [Updates: `0.50.0`] - `ghcr.io/controlplaneio-fluxcd/charts/flux-instance 0.33.0` → [Updates: `0.50.0`] </details> <details><summary>bootstrap/helmfile.yaml (7)</summary> - `cilium 1.19.3` → [Updates: `1.19.4`] - `ghcr.io/coredns/charts/coredns 1.45.0` → [Updates: `1.45.2`] - `quay.io/jetstack/charts/cert-manager v1.19.1` → [Updates: `v1.19.5`, `v1.20.2`] - `ghcr.io/bjw-s-labs/helm/app-template 4.4.0` → [Updates: `4.6.2`, `5.0.1`] - `ghcr.io/external-secrets/charts/external-secrets 0.20.4` → [Updates: `2.5.0`] - `ghcr.io/controlplaneio-fluxcd/charts/flux-operator 0.33.0` → [Updates: `0.50.0`] - `ghcr.io/controlplaneio-fluxcd/charts/flux-instance 0.33.0` → [Updates: `0.50.0`] </details> </blockquote> </details> <details><summary>kustomize (2)</summary> <blockquote> <details><summary>bootstrap/flux/kustomization.yaml (1)</summary> - `fluxcd/flux2 v2.7.5` → [Updates: `v2.8.7`] </details> <details><summary>kubernetes/apps/kube-system/k8s-digester/app/kustomization.yaml (1)</summary> - `google/k8s-digester v0.1.16` </details> </blockquote> </details> <details><summary>mise (1)</summary> <blockquote> <details><summary>.mise.toml (1)</summary> - `python 3.14.4` → [Updates: `3.14.5`] </details> </blockquote> </details> <details><summary>regex (4)</summary> <blockquote> <details><summary>kubernetes/apps/database/dragonfly/app/kustomization.yaml (1)</summary> - `dragonflydb/dragonfly-operator v1.3.1` → [Updates: `v1.5.0`] </details> <details><summary>kubernetes/apps/database/dragonfly/app/kustomization.yaml (1)</summary> - `dragonflydb/dragonfly-operator v1.3.1` → [Updates: `v1.5.0`] </details> <details><summary>kubernetes/apps/flux-system/flux-instance/app/helmrelease.yaml (1)</summary> - `fluxcd/flux2 2.7.5` → [Updates: `2.8.7`] </details> <details><summary>kubernetes/apps/flux-system/flux-instance/app/helmrelease.yaml (1)</summary> - `fluxcd/flux2 2.7.5` → [Updates: `2.8.7`] </details> </blockquote> </details> <details><summary>renovate-config (1)</summary> <blockquote> <details><summary>.github/renovate.json5</summary> </details> </blockquote> </details> <details><summary>terraform (19)</summary> <blockquote> <details><summary>terraform/alerting/grafana.tf</summary> </details> <details><summary>terraform/alerting/main.tf</summary> </details> <details><summary>terraform/alerting/modules/onepassword/main.tf (1)</summary> - `onepassword 2.2.1` → [Updates: `3.3.1`] </details> <details><summary>terraform/alerting/modules/sabnzbd/versions.tf (3)</summary> - `null ~> 3.2` - `restapi ~> 2.0` → [Updates: `~> 3.0`] - `hashicorp/terraform >= 1.0` </details> <details><summary>terraform/alerting/providers.tf (3)</summary> - `grafana 4.31.3` → [Updates: `4.36.0`] - `onepassword 2.2.1` → [Updates: `3.3.1`] - `hashicorp/terraform >= 1.5.0` </details> <details><summary>terraform/authentik/main.tf (1)</summary> - `authentik 2025.12.1` → [Updates: `2026.2.0`] </details> <details><summary>terraform/media/lidarr.tf</summary> </details> <details><summary>terraform/media/main.tf (7)</summary> - `lidarr 1.13.0` - `onepassword 2.2.1` → [Updates: `3.3.1`] - `prowlarr 3.2.1` - `radarr 2.3.5` - `readarr 2.1.0` - `restapi ~> 2.0` → [Updates: `~> 3.0`] - `sonarr 3.4.2` </details> <details><summary>terraform/media/modules/onepassword/main.tf (1)</summary> - `onepassword 2.2.1` → [Updates: `3.3.1`] </details> <details><summary>terraform/media/modules/sabnzbd/versions.tf (3)</summary> - `null ~> 3.2` → [Updates: `~> 3.2`] - `restapi ~> 2.0` → [Updates: `~> 3.0`] - `hashicorp/terraform >= 1.0` </details> <details><summary>terraform/media/prowlarr.tf</summary> </details> <details><summary>terraform/media/radarr.tf</summary> </details> <details><summary>terraform/media/readarr.tf</summary> </details> <details><summary>terraform/media/sabnzbd.tf</summary> </details> <details><summary>terraform/media/sonarr.tf</summary> </details> <details><summary>terraform/observability/grafana-secrets.tf</summary> </details> <details><summary>terraform/observability/main.tf</summary> </details> <details><summary>terraform/observability/modules/onepassword/main.tf (1)</summary> - `onepassword 2.2.1` → [Updates: `3.3.1`] </details> <details><summary>terraform/observability/providers.tf (3)</summary> - `grafana 4.31.3` → [Updates: `4.36.0`] - `kubernetes >= 2.0` → [Updates: `>= 2.0`] - `onepassword 2.2.1` → [Updates: `3.3.1`] </details> </blockquote> </details>
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
Pending Approval
The following branches are pending approval. To create them, click on a checkbox below.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
Pending Status Checks
The following updates await pending status checks. To force their creation now, click on a checkbox below.
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
actions/download-artifact,actions/upload-artifact)Detected Dependencies
dockerfile (3)
github-actions (6)
gomod (2)
helmfile (3)
kustomize (2)
mise (1)
regex (4)
renovate-config (1)
terraform (19)