Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: No releases satisfy vulnerabilityFixVersion
• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
regex	k8s.gcr.io/sig-storage/livenessprobe

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/cloudnative-pg/cloudnative-pg: no-result, Could not determine new digest for update (go package github.com/crunchydata/postgres-operator), Could not determine new digest for update (docker package ghcr.io/prymitive/karma).

Files affected: go.mod, k8s/magiclove/karma/list.cue

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update module github.com/cert-manager/cert-manager to v1.15.4 [security]
• fix(deps): update module github.com/cilium/cilium to v1.18.9 [security]
• fix(deps): update module k8s.io/kubernetes to v1.34.2 [security]
• fix(deps): update module github.com/envoyproxy/gateway to v1.7.4 [security]
• fix(deps): update module github.com/grafana/grafana-operator/v5 to v5.24.0 [security]
• fix(deps): update module github.com/prometheus/prometheus to v0.311.3 [security]
• chore(deps): pin dependencies (actions/checkout, actions/download-artifact, actions/github-script, actions/setup-node, actions/upload-artifact, cue-lang/setup-cue)
• chore(deps): replace k8s.gcr.io/sig-storage/livenessprobe docker tag with registry.k8s.io/sig-storage/livenessprobe
• chore(deps): update ghcr.io/immich-app/immich-server:main docker digest to acd10f7
• chore(deps): update github.com/openshift/api digest to d4bb0b4
• chore(deps): update k8s.io/kube-openapi digest to d427ff9
• chore(deps): update syncthing/syncthing:edge docker digest to dd75c08
• fix(deps): update github.com/jodevsa/wireguard-operator digest to bebdf36
• fix(deps): update github.com/rook/rook/pkg/apis digest to b9e4772
• chore(deps): update cue-lang/setup-cue action to v1.0.1
• chore(deps): update dependency blakeblackshear/frigate to v0.17.2
• chore(deps): update dependency cilium/hubble to v0.13.6
• chore(deps): update dependency jellyfin/jellyfin to v10.11.11
• chore(deps): update eclipse-mosquitto docker tag to v2.0.22
• chore(deps): update module github.com/libopenstorage/external-storage to v0.20.4-rc1
• chore(deps): update 1password/connect-api docker tag to v1.8.2
• chore(deps): update 1password/connect-sync docker tag to v1.8.2
• chore(deps): update alpine docker tag to v3.24.1
• chore(deps): update curlimages/curl docker tag to v8.21.0
• chore(deps): update dependency analogj/scrutiny to v0.9.3
• chore(deps): update dependency bazel to v8.7.0
• chore(deps): update dependency cilium/cilium to v1.20.0
• chore(deps): update dependency czerwonk/ping_exporter to v1.2.2
• chore(deps): update dependency fluent/fluent-bit to v3.2.10
• chore(deps): update dependency gazelle to v0.52.2
• chore(deps): update dependency grafana/grafana to v12.4.8
• chore(deps): update dependency home-assistant/core to v2025.12.5
• chore(deps): update dependency kubernetes-sigs/descheduler to v0.36.0
• chore(deps): update dependency kubernetes/kube-state-metrics to v2.19.1
• chore(deps): update dependency prymitive/karma to v0.132
• chore(deps): update dependency rules_go to v0.62.0
• chore(deps): update dependency spegel-org/spegel to v0.7.4
• chore(deps): update dependency victoriametrics/operator to v0.74.1
• chore(deps): update ghcr.io/immich-app/immich-machine-learning docker tag to v1.144.1
• chore(deps): update ghcr.io/pando85/kaniop docker tag to v0.11.2
• chore(deps): update ghcr.io/prymitive/karma docker tag to v0.132
• chore(deps): update k8s.gcr.io/sig-storage/livenessprobe docker tag to v2.19.0
• chore(deps): update koenkk/zigbee2mqtt docker tag to v2.13.0
• chore(deps): update mikefarah/yq docker tag to v4.53.3
• chore(deps): update module github.com/googleapis/gnostic to v0.7.1
• chore(deps): update nvcr.io/nvidia/k8s-device-plugin docker tag to v0.19.3
• chore(deps): update quay.io/brancz/kube-rbac-proxy docker tag to v0.22.1
• chore(deps): update quay.io/jetstack/cert-manager-csi-driver docker tag to v0.16.0
• chore(deps): update registry.k8s.io/metrics-server/metrics-server docker tag to v0.9.0
• chore(deps): update registry.k8s.io/sig-storage/csi-node-driver-registrar docker tag to v2.17.0
• chore(deps): update rhasspy/wyoming-piper docker tag to v1.6.3
• chore(deps): update rhasspy/wyoming-whisper docker tag to v2.5.0
• chore(deps): update sissbruecker/linkding docker tag to v1.46.1
• chore(deps): update terraform cloudflare to v4.52.8
• chore(deps): update terraform hashicorp/terraform to v1.15.8
• chore(deps): update victoriametrics/victoria-logs docker tag to v1.52.0
• fix(deps): update kubernetes monorepo to v0.36.3 (k8s.io/api, k8s.io/apiextensions-apiserver, k8s.io/apimachinery, k8s.io/apiserver, k8s.io/cli-runtime, k8s.io/client-go, k8s.io/cloud-provider, k8s.io/cluster-bootstrap, k8s.io/code-generator, k8s.io/component-base, k8s.io/component-helpers, k8s.io/controller-manager, k8s.io/cri-api, k8s.io/csi-translation-lib, k8s.io/dynamic-resource-allocation, k8s.io/kms, k8s.io/kube-aggregator, k8s.io/kube-controller-manager, k8s.io/kube-proxy, k8s.io/kube-scheduler, k8s.io/kubectl, k8s.io/kubelet, k8s.io/metrics, k8s.io/mount-utils, k8s.io/pod-security-admission, k8s.io/sample-apiserver, k8s.io/sample-cli-plugin, k8s.io/sample-controller)
• fix(deps): update module cuelang.org/go to v0.17.1
• fix(deps): update module github.com/1password/onepassword-operator to v1.12.0
• fix(deps): update module github.com/backube/volsync to v0.16.0
• fix(deps): update module github.com/kubernetes-csi/external-snapshotter/client/v8 to v8.6.0
• fix(deps): update module github.com/victoriametrics/operator/api to v0.74.1
• fix(deps): update module sigs.k8s.io/descheduler to v0.36.0
• fix(deps): update module sigs.k8s.io/external-dns to v0.21.0
• fix(deps): update module sigs.k8s.io/gateway-api to v1.6.1
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/github-script action to v9
• chore(deps): update actions/setup-node action to v7
• chore(deps): update dependency bazel to v9
• chore(deps): update dependency cilium/hubble to v1
• chore(deps): update dependency fluent/fluent-bit to v5
• chore(deps): update dependency grafana/grafana to v13
• chore(deps): update dependency home-assistant/core to v2026
• chore(deps): update ghcr.io/immich-app/immich-machine-learning docker tag to v3
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update rhasspy/wyoming-piper docker tag to v2
• chore(deps): update rhasspy/wyoming-whisper docker tag to v3
• chore(deps): update terraform cloudflare to v5
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update module github.com/libopenstorage/external-storage to v5

Detected Dependencies

bazel-module (1)

MODULE.bazel (2)

• rules_go 0.57.0 → [Updates: 0.62.0]
• gazelle 0.45.0 → [Updates: 0.52.2]

bazelisk (1)

.bazelversion (1)

• bazel 8.4.0 → [Updates: 8.7.0, 9.2.0]

github-actions (2)

.github/workflows/k8s-diff.yaml (10)

• actions/checkout v3 → [Updates: v7, v3]
• cue-lang/setup-cue v1.0.0 → [Updates: v1.0.1, v1.0.0]
• actions/upload-artifact v3 → [Updates: v7, v3]
• actions/checkout v3 → [Updates: v7, v3]
• cue-lang/setup-cue v1.0.0 → [Updates: v1.0.1, v1.0.0]
• actions/upload-artifact v3 → [Updates: v7, v3]
• actions/download-artifact v3 → [Updates: v8, v3]
• actions/setup-node v3 → [Updates: v7, v3]
• actions/github-script v6 → [Updates: v9, v6]
• node 16

.github/workflows/test.yaml (2)

• actions/checkout v3 → [Updates: v7, v3]
• cue-lang/setup-cue v1.0.0 → [Updates: v1.0.1, v1.0.0]

gomod (1)

go.mod (61)

• go 1.26.1
• cuelang.org/go v0.7.0 → [Updates: v0.17.1]
• github.com/1Password/onepassword-operator v1.8.0 → [Updates: v1.12.0]
• github.com/NVIDIA/gpu-operator v1.11.1
• github.com/VictoriaMetrics/operator/api v0.66.1 → [Updates: v0.74.1]
• github.com/backube/snapscheduler v1.2.0
• github.com/backube/volsync v0.8.0 → [Updates: v0.16.0]
• github.com/cert-manager/cert-manager v1.15.3 → [Updates: v1.15.4]
• github.com/cilium/cilium v1.18.1 → [Updates: v1.18.9]
• github.com/cloudnative-pg/cloudnative-pg v1.25.1
• github.com/envoyproxy/gateway v1.4.2 → [Updates: v1.7.4]
• github.com/external-secrets/external-secrets v0.9.11
• github.com/grafana/grafana-operator/v5 v5.22.2 → [Updates: v5.24.0]
• github.com/jodevsa/wireguard-operator v1.2.21-0.20240509203524-1d1bef4d0d82@1d1bef4d0d82 → [Updates: v1.2.21-0.20240509203524-1d1bef4d0d82]
• github.com/kubernetes-csi/external-snapshotter/client/v8 v8.2.0 → [Updates: v8.6.0]
• github.com/prometheus/prometheus v0.303.1 → [Updates: v0.311.3]
• github.com/rook/rook/pkg/apis v0.0.0-20250829210302-107bb8176eeb@107bb8176eeb → [Updates: v0.0.0-20260814182029-b9e4772d8417]
• k8s.io/api v0.35.2 → [Updates: v0.36.3]
• k8s.io/apiextensions-apiserver v0.35.2 → [Updates: v0.36.3]
• k8s.io/client-go v12.0.0+incompatible
• k8s.io/kube-aggregator v0.30.1 → [Updates: v0.36.3]
• k8s.io/kubernetes v1.34.0 → [Updates: v1.34.2]
• sigs.k8s.io/external-dns v0.14.2 → [Updates: v0.21.0]
• sigs.k8s.io/gateway-api v1.5.1 → [Updates: v1.6.1]
• sigs.k8s.io/descheduler v0.34.0 → [Updates: v0.36.0]
• k8s.io/api v0.34.0 → [Updates: v0.36.3]
• k8s.io/apiextensions-apiserver v0.34.0 → [Updates: v0.36.3]
• k8s.io/apimachinery v0.34.0 → [Updates: v0.36.3]
• k8s.io/apiserver v0.34.0 → [Updates: v0.36.3]
• k8s.io/cli-runtime v0.34.0 → [Updates: v0.36.3]
• k8s.io/client-go v0.34.0 → [Updates: v0.36.3]
• k8s.io/cloud-provider v0.34.0 → [Updates: v0.36.3]
• k8s.io/cluster-bootstrap v0.34.0 → [Updates: v0.36.3]
• k8s.io/code-generator v0.34.0 → [Updates: v0.36.3]
• k8s.io/component-base v0.34.0 → [Updates: v0.36.3]
• k8s.io/component-helpers v0.34.0 → [Updates: v0.36.3]
• k8s.io/controller-manager v0.34.0 → [Updates: v0.36.3]
• k8s.io/cri-api v0.34.0 → [Updates: v0.36.3]
• k8s.io/csi-translation-lib v0.34.0 → [Updates: v0.36.3]
• k8s.io/dynamic-resource-allocation v0.34.0 → [Updates: v0.36.3]
• k8s.io/kms v0.34.0 → [Updates: v0.36.3]
• k8s.io/kube-aggregator v0.34.0 → [Updates: v0.36.3]
• k8s.io/kube-controller-manager v0.34.0 → [Updates: v0.36.3]
• k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b@f3f2b991d03b → [Updates: v0.0.0-20260721132016-d427ff9ee9ad]
• k8s.io/kube-proxy v0.34.0 → [Updates: v0.36.3]
• k8s.io/kube-scheduler v0.34.0 → [Updates: v0.36.3]
• k8s.io/kubectl v0.34.0 → [Updates: v0.36.3]
• k8s.io/kubelet v0.34.0 → [Updates: v0.36.3]
• k8s.io/legacy-cloud-providers v0.34.0
• k8s.io/metrics v0.34.0 → [Updates: v0.36.3]
• k8s.io/mount-utils v0.34.0 → [Updates: v0.36.3]
• k8s.io/pod-security-admission v0.34.0 → [Updates: v0.36.3]
• k8s.io/sample-apiserver v0.34.0 → [Updates: v0.36.3]
• k8s.io/sample-cli-plugin v0.34.0 → [Updates: v0.36.3]
• k8s.io/sample-controller v0.34.0 → [Updates: v0.36.3]
• github.com/googleapis/gnostic v0.4.1 → [Updates: v0.7.1]
• github.com/libopenstorage/external-storage v0.20.4-openstorage-rc3 → [Updates: v0.20.4-rc1, v5.2.0+incompatible]
• github.com/rook/secrets v0.0.0-20240315053144-3195f6906937@3195f6906937
• github.com/portworx/sched-ops v0.20.4-openstorage-rc3
• github.com/crunchydata/postgres-operator v1.3.3-0.20230629151007-94ebcf2df74d@94ebcf2df74d
• github.com/openshift/api v0.0.0-20240401200911-ab1b479a063f@ab1b479a063f → [Updates: v0.0.0-20240401200911-ab1b479a063f]

regex (51)

k8s/magiclove/backup/breakfast/statefulset_list.cue (1)

• syncthing/syncthing edge@sha256:a200af1e5b2aee7c184c848c3af179d6fedca55e899c15a9c2851c35501f1943 → [Updates: edge]

k8s/magiclove/backup/deployment_list.cue

k8s/magiclove/backup/immich_unwind/statefulset_list.cue (1)

• syncthing/syncthing edge@sha256:a200af1e5b2aee7c184c848c3af179d6fedca55e899c15a9c2851c35501f1943 → [Updates: edge]

k8s/magiclove/backup/legacy/deployment_list.cue

k8s/magiclove/backup/legacy/statefulset_list.cue (1)

• syncthing/syncthing edge@sha256:a200af1e5b2aee7c184c848c3af179d6fedca55e899c15a9c2851c35501f1943 → [Updates: edge]

k8s/magiclove/backup/lola/statefulset_list.cue (1)

• syncthing/syncthing edge@sha256:a200af1e5b2aee7c184c848c3af179d6fedca55e899c15a9c2851c35501f1943 → [Updates: edge]

k8s/magiclove/backup/melonade/statefulset_list.cue (1)

• syncthing/syncthing edge@sha256:a200af1e5b2aee7c184c848c3af179d6fedca55e899c15a9c2851c35501f1943 → [Updates: edge]

k8s/magiclove/backup/synology/deployment_list.cue

k8s/magiclove/backup/synology/statefulset_list.cue (1)

• syncthing/syncthing edge@sha256:a200af1e5b2aee7c184c848c3af179d6fedca55e899c15a9c2851c35501f1943 → [Updates: edge]

k8s/magiclove/cert_manager_csi_driver/daemon_set_list.cue (3)

• registry.k8s.io/sig-storage/csi-node-driver-registrar v2.5.0 → [Updates: v2.17.0]
• k8s.gcr.io/sig-storage/livenessprobe v2.6.0 → [Updates: v2.19.0, v2.6.0]
• quay.io/jetstack/cert-manager-csi-driver v0.5.0 → [Updates: v0.16.0]

k8s/magiclove/cilium/hubble_relay/list.cue (1)

• cilium/cilium 1.19.2 → [Updates: 1.20.0]

k8s/magiclove/cilium/hubble_ui/list.cue (1)

• cilium/hubble 0.13.3 → [Updates: 0.13.6, 1.19.4]

k8s/magiclove/cilium/list.cue (1)

• cilium/cilium 1.19.2 → [Updates: 1.20.0]

k8s/magiclove/dcgm_exporter/daemon_set_list.cue (1)

• nvcr.io/nvidia/k8s/dcgm-exporter 4.1.1-4.0.4-ubuntu22.04

k8s/magiclove/descheduler/list.cue (1)

• kubernetes-sigs/descheduler 0.35.1 → [Updates: 0.36.0]

k8s/magiclove/envoy_gateway/config_map_list.cue

k8s/magiclove/external_dns/list.cue (1)

• kubernetes-sigs/external-dns 0.21.0

k8s/magiclove/fluent_bit/list.cue (1)

• fluent/fluent-bit 3.0.2 → [Updates: 3.2.10, 5.1.1]

k8s/magiclove/frigate/list.cue (1)

• blakeblackshear/frigate 0.17.1 → [Updates: 0.17.2]

k8s/magiclove/grafana/list.cue (1)

• grafana/grafana 12.1.0 → [Updates: 12.4.8, 13.1.3]

k8s/magiclove/home_assistant/list.cue (1)

• home-assistant/core 2025.1.2 → [Updates: 2025.12.5, 2026.8.2]

k8s/magiclove/home_assistant/piper/list.cue (1)

• rhasspy/wyoming-piper 1.5.0 → [Updates: 1.6.3, 2.4.2]

k8s/magiclove/home_assistant/whisper/list.cue (1)

• rhasspy/wyoming-whisper 2.4.0 → [Updates: 2.5.0, 3.6.0]

k8s/magiclove/immich/machine_learning/deployment_list.cue (1)

• ghcr.io/immich-app/immich-machine-learning v1.131.3 → [Updates: v1.144.1, v3.1.0]

k8s/magiclove/immich/server/deployment_list.cue (1)

• ghcr.io/immich-app/immich-server main@sha256:3ed2831bd7f5bb78fa82541985ddedcbe2cffdfc3a58e340fe735c7e370f242d → [Updates: main]

k8s/magiclove/kaniop/list.cue (1)

• ghcr.io/pando85/kaniop 0.5.9 → [Updates: 0.11.2]

k8s/magiclove/karma/list.cue (2)

• ghcr.io/prymitive/karma 0.129 → [Updates: 0.132]
• ghcr.io/prymitive/karma 0.129@sha256:e3982b38c6a178777aa2a49286a56bf04edc1850e7542cc3d9d55307738b8c64

k8s/magiclove/karma/list.cue (1)

• prymitive/karma 0.129 → [Updates: 0.132]

k8s/magiclove/kube_state_metrics/list.cue (1)

• kubernetes/kube-state-metrics 2.18.0 → [Updates: 2.19.1]

k8s/magiclove/linkding/list.cue (2)

• sissbruecker/linkding 1.36.0-plus → [Updates: 1.46.1-plus]
• sissbruecker/linkding 1.36.0-plus@sha256:d61ab1f293ddbc4a3d640b7801a9e6d175d07e1e065ed88ddac50fd54d40ad3c → [Updates: 1.46.1-plus]

k8s/magiclove/linkding/list.cue (1)

• sissbruecker/linkding 1.36.0

k8s/magiclove/media/jellyfin/list.cue (1)

• jellyfin/jellyfin 10.11.5 → [Updates: 10.11.11]

k8s/magiclove/media/recyclarr/cron_job_list.cue (2)

• alpine 3.17.2@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501 → [Updates: 3.24.1]
• mikefarah/yq 4.33.1@sha256:ddf60fa876a4f73414477fab551bcfb864a179cad6ce998b13ba4180e0f5702d → [Updates: 4.53.3]

k8s/magiclove/metrics_server/deployment_list.cue (1)

• registry.k8s.io/metrics-server/metrics-server v0.6.3 → [Updates: v0.9.0]

k8s/magiclove/minecraft/cf_atm9/stateful_set_list.cue (1)

• curlimages/curl 8.1.2 → [Updates: 8.21.0]

k8s/magiclove/mosquitto/list.cue (1)

• eclipse-mosquitto 2.0.20 → [Updates: 2.0.22]

k8s/magiclove/nvidia_device_plugin/list.cue (1)

• nvcr.io/nvidia/k8s-device-plugin 0.16.2 → [Updates: 0.19.3]

k8s/magiclove/onepassword_connect/deployment_list.cue (2)

• 1password/connect-api 1.7.2@sha256:6aa94cf713f99c0fa58c12ffdd1b160404b4c13a7f501a73a791aa84b608c5a1 → [Updates: 1.8.2]
• 1password/connect-sync 1.7.2@sha256:fe527ed9d81f193d8dfbba4140d61f9e8c8dceb0966b3009259087504e5ff79c → [Updates: 1.8.2]

k8s/magiclove/ping_exporter/list.cue (1)

• czerwonk/ping_exporter 1.1.0 → [Updates: v1.2.2]

k8s/magiclove/redlib/list.cue (1)

• ghcr.io/uhthomas/redlib 721e698415e551495f38f750d03b1b8ef6866668@sha256:9fc3bdd4d148b7aa9c53bb18f6651ea6ad25146ca299c1c1f247707389b27f7b

k8s/magiclove/redlib/list.cue (1)

• redlib-org/redlib 721e698415e551495f38f750d03b1b8ef6866668

k8s/magiclove/scrutiny/collector/list.cue (1)

• AnalogJ/scrutiny 0.8.6 → [Updates: 0.9.3]

k8s/magiclove/scrutiny/web/list.cue (1)

• AnalogJ/scrutiny 0.8.6 → [Updates: 0.9.3]

k8s/magiclove/smartctl_exporter/list.cue (1)

• prometheus-community/smartctl_exporter 0.14.0

k8s/magiclove/speedtest_exporter/list.cue (1)

• MiguelNdeCarvalho/speedtest-exporter 3.5.4

k8s/magiclove/spegel/list.cue (1)

• spegel-org/spegel 0.6.0 → [Updates: 0.7.4]

k8s/magiclove/victoria_logs/list.cue (1)

• victoriametrics/victoria-logs 1.34.0 → [Updates: 1.52.0]

k8s/magiclove/vm_operator/list.cue (1)

• VictoriaMetrics/operator 0.68.4 → [Updates: 0.74.1]

k8s/magiclove/volsync_system/deployment_list.cue (1)

• quay.io/brancz/kube-rbac-proxy v0.14.0 → [Updates: v0.22.1]

k8s/magiclove/zigbee2mqtt/list.cue (1)

• koenkk/zigbee2mqtt 2.1.1 → [Updates: 2.13.0]

k8s/magiclove/zigbee2mqtt/stateful_set_list.cue (1)

• alpine 3.17.2@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501 → [Updates: 3.24.1]

terraform (2)

tf/backend.tf (1)

• hashicorp/terraform 1.7.1 → [Updates: 1.15.8]

tf/main.tf (1)

• cloudflare 4.23.0 → [Updates: 4.52.8, 5.23.0]

---

• Check this box to trigger a request for Renovate to run again on this repository