Merge pull request 'Update Helm release woodpecker to v3.7.3' (#414 ) from renovate/woodpecker-3.x into fresh-start

Update Helm release woodpecker to v3.7.3
Merge pull request 'Update Helm release open-webui to v16.1.0' (#411 ) from renovate/open-webui-16.x into fresh-start
2026-08-31 02:01:31 +00:00 · 2026-08-31 02:01:27 +00:00 · 2026-08-29 23:02:37 +00:00 · 2026-08-28 02:01:57 +00:00 · 2026-08-28 02:01:48 +00:00 · 2026-08-26 02:01:44 +00:00
26 changed files with 78 additions and 74 deletions
@@ -7,7 +7,7 @@ when:

 steps:
  - name: Get registry creds from OpenBao
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.2
    environment:
      VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
      ROLE_ID:
@@ -57,7 +57,7 @@ steps:
    depends_on: ["Get registry creds from OpenBao"]

  - name: Invalidate OpenBao token
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.2
    environment:
      VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
    commands:
@@ -6,7 +6,7 @@ skip_clone: true

 steps:
  - name: Get kubernetes access from OpenBao
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.2
    environment:
      VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
      ROLE_ID:
@@ -35,13 +35,13 @@ steps:
          --namespace flux-system
      - kubectl config use-context cluster
  - name: Reconcile git source
-    image: ghcr.io/fluxcd/flux-cli:v2.9.2
+    image: ghcr.io/fluxcd/flux-cli:v2.9.4
    environment:
      KUBECONFIG: /woodpecker/kubeconfig
    commands:
      - flux reconcile source git flux-system
  - name: Invalidate OpenBao token
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.2
    environment:
      VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
    commands:
@@ -6,7 +6,7 @@ skip_clone: true

 steps:
  - name: Get renovate token from OpenBao
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.2
    environment:
      VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
      ROLE_ID:
@@ -21,7 +21,7 @@ steps:
      - bao kv get -mount secret -field RENOVATE_TOKEN renovate > /woodpecker/renovate_token
      - bao kv get -mount secret -field GITHUB_COM_TOKEN renovate > /woodpecker/github_com_token
  - name: Run Renovate
-    image: renovate/renovate:43
+    image: renovate/renovate:44
    pull: true
    environment:
      RENOVATE_AUTODISCOVER: "true"
@@ -35,7 +35,7 @@ steps:
      - export GITHUB_COM_TOKEN=$(cat /woodpecker/github_com_token)
      - /usr/local/sbin/renovate-entrypoint.sh renovate
  - name: Invalidate OpenBao token
-    image: quay.io/openbao/openbao:2.5.5
+    image: quay.io/openbao/openbao:2.6.2
    environment:
      VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
    commands:
@@ -18,7 +18,7 @@ spec:
  chart:
    spec:
      chart: authentik
-      version: 2026.5.5
+      version: 2026.8.0
      sourceRef:
        kind: HelmRepository
        name: authentik
@@ -17,13 +17,15 @@ spec:
  chart:
    spec:
      chart: gitea
-      version: 12.6.0
+      version: 12.7.0
      sourceRef:
        kind: HelmRepository
        name: gitea-charts
        namespace: gitea
      interval: 12h
  values:
+    image:
+      tag: 1.27.2 # REMOVE ME after new helm chart version includes this update
    postgresql-ha:
      enabled: false

@@ -7,7 +7,7 @@ metadata:
  name: gitea-valkey-primary-lvmhdd-0
  namespace: openebs
 spec:
-  capacity: 1Gi
+  capacity: "4294967296"
  ownerNodeID: anapistula-delrosalae
  shared: "yes"
  thinProvision: "no"
@@ -20,7 +20,7 @@ metadata:
  name: gitea-valkey-primary-lvmhdd-0
 spec:
  capacity:
-    storage: 1Gi
+    storage: 4Gi
  accessModes:
    - ReadWriteOnce
  persistentVolumeReclaimPolicy: Retain
@@ -41,6 +41,6 @@ spec:
    - ReadWriteOnce
  resources:
    requests:
-      storage: 1Gi
+      storage: 4Gi
  storageClassName: hdd-lvmpv
  volumeName: gitea-valkey-primary-lvmhdd-0
@@ -18,7 +18,7 @@ spec:
  chart:
    spec:
      chart: valkey
-      version: 0.10.0
+      version: 0.11.0
      sourceRef:
        kind: HelmRepository
        name: valkey
@@ -18,7 +18,7 @@ spec:
  chart:
    spec:
      chart: immich
-      version: 2.0.2
+      version: 2.0.3
      sourceRef:
        kind: HelmRepository
        name: secustor
@@ -8,7 +8,7 @@ spec:
  interval: 24h
  url: https://github.com/usekaneo/kaneo.git
  ref:
-    tag: v2.9.8
+    tag: v2.22.0
  ignore: |
    # exclude all
    /*
@@ -53,8 +53,6 @@ spec:
      enabled: false
    
    kaneo:
-      image:
-        tag: "2.9.8"  # renovate: depName=ghcr.io/usekaneo/kaneo registryUrl=https://ghcr.io
      env:
        clientUrl: "https://kaneo.lumpiasty.xyz"
        disablePasswordRegistration: true
@@ -18,7 +18,7 @@ spec:
    spec:
      containers:
        - name: supervisord
-          image: gitea.lumpiasty.xyz/lumpiasty/supervisord:latest@sha256:c7adeeac86ee39b1ce9cd68ff2487c586c4f469569d1aa08cdddae693248751c
+          image: gitea.lumpiasty.xyz/lumpiasty/supervisord:latest@sha256:2676d13df2a0833b27ab8ec441da78c6c43d3f7bf75837d35723eefb40a82ce1
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8080
@@ -21,7 +21,7 @@ spec:
          # OpenAI-compatible Kokoro-FastAPI TTS server, CPU PyTorch backend.
          # Models baked into the image (no PVC needed).
          # v0.3.0 includes fix for per-request voice tensor memory leak (#459).
-          image: ghcr.io/remsky/kokoro-fastapi-cpu:v0.5.0
+          image: ghcr.io/remsky/kokoro-fastapi-cpu:v0.8.1
          ports:
            - containerPort: 8880
              name: http
@@ -18,7 +18,7 @@ spec:
  chart:
    spec:
      chart: open-webui
-      version: 15.2.0
+      version: 16.1.0
      sourceRef:
        kind: HelmRepository
        name: open-webui
@@ -18,7 +18,7 @@ spec:
  chart:
    spec:
      chart: woodpecker
-      version: 3.6.5
+      version: 3.7.3
      sourceRef:
        kind: HelmRepository
        name: woodpecker
@@ -1,6 +1,6 @@
 ---
 # This manifest was generated by flux. DO NOT EDIT.
-# Flux Version: v2.9.2
+# Flux Version: v2.9.4
 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
 apiVersion: v1
 kind: Namespace
@@ -8,7 +8,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    pod-security.kubernetes.io/warn: restricted
    pod-security.kubernetes.io/warn-version: latest
  name: flux-system
@@ -19,7 +19,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: allow-egress
  namespace: flux-system
 spec:
@@ -39,7 +39,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: allow-scraping
  namespace: flux-system
 spec:
@@ -59,13 +59,16 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: allow-webhooks
  namespace: flux-system
 spec:
  ingress:
  - from:
    - namespaceSelector: {}
+    ports:
+    - port: 9292
+      protocol: TCP
  podSelector:
    matchLabels:
      app: notification-controller
@@ -78,7 +81,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: critical-pods-flux-system
  namespace: flux-system
 spec:
@@ -98,7 +101,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -204,7 +207,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
  name: flux-edit-flux-system
@@ -231,7 +234,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-view: "true"
@@ -257,7 +260,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: cluster-reconciler-flux-system
 roleRef:
  apiGroup: rbac.authorization.k8s.io
@@ -277,7 +280,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: crd-controller-flux-system
 roleRef:
  apiGroup: rbac.authorization.k8s.io
@@ -316,7 +319,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: buckets.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -708,7 +711,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: externalartifacts.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -911,7 +914,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: gitrepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -1406,7 +1409,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: helmcharts.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -1770,7 +1773,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: helmrepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -2101,7 +2104,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: ocirepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -2532,7 +2535,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: source-controller
  namespace: flux-system
 ---
@@ -2543,7 +2546,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    control-plane: controller
  name: source-controller
  namespace: flux-system
@@ -2564,7 +2567,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    control-plane: controller
  name: source-controller
  namespace: flux-system
@@ -2585,7 +2588,7 @@ spec:
        app.kubernetes.io/component: source-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.9.2
+        app.kubernetes.io/version: v2.9.4
    spec:
      containers:
      - args:
@@ -2608,7 +2611,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/source-controller:v1.9.3
+        image: ghcr.io/fluxcd/source-controller:v1.9.4
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -2673,7 +2676,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
  group: kustomize.toolkit.fluxcd.io
@@ -3485,7 +3488,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: kustomize-controller
  namespace: flux-system
 ---
@@ -3496,7 +3499,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    control-plane: controller
  name: kustomize-controller
  namespace: flux-system
@@ -3515,7 +3518,7 @@ spec:
        app.kubernetes.io/component: kustomize-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.9.2
+        app.kubernetes.io/version: v2.9.4
    spec:
      containers:
      - args:
@@ -3534,7 +3537,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/kustomize-controller:v1.9.3
+        image: ghcr.io/fluxcd/kustomize-controller:v1.9.4
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -3592,7 +3595,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: helmreleases.helm.toolkit.fluxcd.io
 spec:
  group: helm.toolkit.fluxcd.io
@@ -5081,7 +5084,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: helm-controller
  namespace: flux-system
 ---
@@ -5092,7 +5095,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    control-plane: controller
  name: helm-controller
  namespace: flux-system
@@ -5111,7 +5114,7 @@ spec:
        app.kubernetes.io/component: helm-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.9.2
+        app.kubernetes.io/version: v2.9.4
    spec:
      containers:
      - args:
@@ -5130,7 +5133,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/helm-controller:v1.6.2
+        image: ghcr.io/fluxcd/helm-controller:v1.6.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -5188,7 +5191,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: alerts.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -5360,7 +5363,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: providers.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -5571,7 +5574,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: receivers.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -5945,7 +5948,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
  name: notification-controller
  namespace: flux-system
 ---
@@ -5956,7 +5959,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    control-plane: controller
  name: notification-controller
  namespace: flux-system
@@ -5977,7 +5980,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    control-plane: controller
  name: webhook-receiver
  namespace: flux-system
@@ -5998,7 +6001,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.9.2
+    app.kubernetes.io/version: v2.9.4
    control-plane: controller
  name: notification-controller
  namespace: flux-system
@@ -6017,7 +6020,7 @@ spec:
        app.kubernetes.io/component: notification-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.9.2
+        app.kubernetes.io/version: v2.9.4
    spec:
      containers:
      - args:
@@ -6035,7 +6038,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/notification-controller:v1.9.2
+        image: ghcr.io/fluxcd/notification-controller:v1.9.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -1,5 +1,5 @@
 # Stage 1: build CoreDNS with minimal plugin set
-FROM golang:1.26-alpine AS build
+FROM golang:1.27-alpine AS build

 RUN apk add --no-cache git make bash

@@ -1,4 +1,4 @@
-FROM debian:13.5
+FROM debian:13.6

 ENV DEBIAN_FRONTEND=noninteractive

@@ -18,7 +18,7 @@ spec:
  chart:
    spec:
      chart: cert-manager-webhook-ovh
-      version: 0.9.14
+      version: 0.9.16
      sourceRef:
        kind: HelmRepository
        name: cert-manager-webhook-ovh
@@ -23,7 +23,7 @@ spec:
  chart:
    spec:
      chart: cert-manager
-      version: v1.20.3
+      version: v1.21.1
      sourceRef:
        kind: HelmRepository
        name: cert-manager
@@ -23,7 +23,7 @@ spec:
  chart:
    spec:
      chart: cilium
-      version: 1.19.6
+      version: 1.20.1
      sourceRef:
        kind: HelmRepository
        name: cilium
@@ -110,7 +110,7 @@ spec:
        kubernetes.io/os: linux
      containers:
        - name: coredns
-          image: registry.k8s.io/coredns/coredns:v1.14.6
+          image: registry.k8s.io/coredns/coredns:v1.14.7
          imagePullPolicy: IfNotPresent
          args: ["-conf", "/etc/coredns/Corefile"]
          ports:
@@ -97,7 +97,7 @@ spec:
          env:
            - name: GOMEMLIMIT
              value: 161MiB
-          image: registry.k8s.io/coredns/coredns:v1.14.6
+          image: registry.k8s.io/coredns/coredns:v1.14.7
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 5
@@ -23,7 +23,7 @@ spec:
  chart:
    spec:
      chart: k8up
-      version: 4.9.0
+      version: 4.10.0
      sourceRef:
        kind: HelmRepository
        name: k8up-io
@@ -23,7 +23,7 @@ spec:
  chart:
    spec:
      chart: openbao
-      version: 0.28.5
+      version: 0.29.3
      sourceRef:
        kind: HelmRepository
        name: openbao
@@ -23,7 +23,7 @@ spec:
  chart:
    spec:
      chart: vault-secrets-operator
-      version: 1.4.1
+      version: 1.5.1
      sourceRef:
        kind: HelmRepository
        name: hashicorp
@@ -37,7 +37,7 @@
      "platformAutomerge": true
    },
    {
-      "matchUpdateTypes": ["patch"],
+      "matchUpdateTypes": ["patch", "digest"],
      "automerge": true,
      "automergeType": "pr",
      "platformAutomerge": true
@@ -28,3 +28,4 @@ machine:
    # arrives too late. Work around using kernel args:
    extraKernelArgs:
      - amdgpu.runpm=1
+      - amdgpu.lockup_timeout=0,120000,0,0
Author	SHA1	Message	Date
Renovate	9ce13dc207	Merge pull request 'Update Helm release woodpecker to v3.7.3' (#414 ) from renovate/woodpecker-3.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-08-31 02:01:31 +00:00
Renovate	9985851e82	Update Helm release woodpecker to v3.7.3	2026-08-31 02:01:27 +00:00
Lumpiasty	598330097f	Merge pull request 'Update Helm release open-webui to v16.1.0' (#411 ) from renovate/open-webui-16.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details Reviewed-on: #411	2026-08-29 23:02:37 +00:00
Renovate	d4293e4e29	Merge pull request 'Update Helm release openbao to v0.29.3' (#413 ) from renovate/openbao-0.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-08-28 02:01:57 +00:00
Renovate	a800b218c4	Update Helm release openbao to v0.29.3	2026-08-28 02:01:48 +00:00
Renovate	056d762dc9	Update Helm release open-webui to v16.1.0	2026-08-26 02:01:44 +00:00
Renovate	e3dfba7170	Merge pull request 'Update Helm release woodpecker to v3.7.2' (#410 ) from renovate/woodpecker-3.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-08-25 02:01:46 +00:00
Renovate	928f3d1005	Merge pull request 'Update ghcr.io/remsky/kokoro-fastapi-cpu Docker tag to v0.8.1' (#409 ) from renovate/ghcr.io-remsky-kokoro-fastapi-cpu-0.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline is running Details	2026-08-25 02:01:41 +00:00
Renovate	0d81ee473f	Update Helm release woodpecker to v3.7.2	2026-08-25 02:01:40 +00:00
Renovate	4fb53636f1	Update ghcr.io/remsky/kokoro-fastapi-cpu Docker tag to v0.8.1	2026-08-25 02:01:36 +00:00
Lumpiasty	6241b81f02	Merge pull request 'Update dependency kaneo to v2.22.0' (#408 ) from renovate/kaneo into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details Reviewed-on: #408	2026-08-22 22:30:33 +00:00
Renovate	5b8833325d	Update dependency kaneo to v2.22.0	2026-08-22 22:26:23 +00:00
Lumpiasty	ed3da857d5	Merge pull request 'Update dependency kaneo to v2.20.0' (#397 ) from renovate/kaneo into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details Reviewed-on: #397	2026-08-22 22:14:52 +00:00
Lumpiasty	f3cc1f3688	Merge pull request 'Update Helm release cilium to v1.20.1' (#390 ) from renovate/cilium-1.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #390	2026-08-22 21:58:57 +00:00
Lumpiasty	de8bb69cdc	Merge pull request 'Update Helm release woodpecker to v3.7.1' (#396 ) from renovate/woodpecker-3.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #396	2026-08-22 21:39:10 +00:00
Lumpiasty	ea29623106	Merge pull request 'Update Helm release authentik to v2026.8.0' (#405 ) from renovate/authentik-2026.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #405	2026-08-22 21:38:58 +00:00
Lumpiasty	b0cbe885a5	Merge pull request 'Update Helm release openbao to v0.29.2' (#401 ) from renovate/openbao-0.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline is running Details Reviewed-on: #401	2026-08-22 21:38:46 +00:00
Lumpiasty	2ade45b3dc	Merge pull request 'Update golang Docker tag to v1.27' (#407 ) from renovate/golang-1.x into fresh-start ci/woodpecker/push/build-images Pipeline is running Details ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #407	2026-08-22 21:38:33 +00:00
Lumpiasty	4af96d3c5d	Merge pull request 'Update ghcr.io/remsky/kokoro-fastapi-cpu Docker tag to v0.8.0' (#395 ) from renovate/ghcr.io-remsky-kokoro-fastapi-cpu-0.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #395	2026-08-22 21:38:23 +00:00
Lumpiasty	0f557f8c09	Security hotfix gitea 1.27.2 ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-08-22 17:21:56 +02:00
Renovate	6ff0796946	Update golang Docker tag to v1.27 ci/woodpecker/push/build-images Pipeline is running Details	2026-08-20 02:01:33 +00:00
Renovate	851a2096e3	Update dependency kaneo to v2.20.0 ci/woodpecker/push/build-images Pipeline is running Details	2026-08-20 02:01:26 +00:00
Renovate	e1ef81db71	Merge pull request 'Update registry.k8s.io/coredns/coredns Docker tag to v1.14.7' (#406 ) from renovate/registry.k8s.io-coredns-coredns-1.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline failed Details	2026-08-20 02:01:25 +00:00
Renovate	c64e6e73f9	Update registry.k8s.io/coredns/coredns Docker tag to v1.14.7	2026-08-20 02:01:23 +00:00
Renovate	cf021a776d	Update Helm release openbao to v0.29.2	2026-08-19 02:02:40 +00:00
Renovate	29d9cfbcbf	Update Helm release cilium to v1.20.1	2026-08-19 02:02:25 +00:00
Renovate	255b29fb6c	Update Helm release authentik to v2026.8.0	2026-08-19 02:02:19 +00:00
Renovate	7d0ece3fb1	Merge pull request 'Update quay.io/openbao/openbao Docker tag to v2.6.2' (#404 ) from renovate/quay.io-openbao-openbao-2.x into fresh-start ci/woodpecker/push/build-images Pipeline failed Details ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-08-19 02:02:14 +00:00
Renovate	bb391b641f	Update quay.io/openbao/openbao Docker tag to v2.6.2 ci/woodpecker/push/build-images Pipeline failed Details	2026-08-19 02:02:08 +00:00
Renovate	0990af576e	Update Helm release woodpecker to v3.7.1	2026-08-18 02:02:21 +00:00
Renovate	7d3d036912	Merge pull request 'Update Helm release cert-manager-webhook-ovh to v0.9.16' (#403 ) from renovate/cert-manager-webhook-ovh-0.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-08-18 02:02:00 +00:00
Renovate	d31e792530	Update Helm release cert-manager-webhook-ovh to v0.9.16	2026-08-18 02:01:53 +00:00
Renovate	96ef9a9925	Update ghcr.io/remsky/kokoro-fastapi-cpu Docker tag to v0.8.0	2026-08-16 20:13:24 +00:00
Lumpiasty	1b6b8eee16	Increase valkey storage ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-08-16 21:20:18 +02:00
Renovate	aa7842a5d5	Merge pull request 'Update Helm release vault-secrets-operator to v1.5.1' (#402 ) from renovate/vault-secrets-operator-1.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline failed Details	2026-08-13 02:01:01 +00:00
Renovate	7d6158af20	Update Helm release vault-secrets-operator to v1.5.1	2026-08-13 02:00:56 +00:00
Renovate	fd2afb45f5	Merge pull request 'Update Helm release cert-manager-webhook-ovh to v0.9.15' (#400 ) from renovate/cert-manager-webhook-ovh-0.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-08-09 02:01:26 +00:00
Renovate	1073ee27e1	Update Helm release cert-manager-webhook-ovh to v0.9.15	2026-08-09 02:01:21 +00:00
Renovate	29f1f31bd0	Merge pull request 'Update ghcr.io/fluxcd/flux-cli Docker tag to v2.9.4' (#399 ) from renovate/ghcr.io-fluxcd-flux-cli-2.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-08-07 20:54:39 +00:00
Renovate	304235ccd6	Merge pull request 'Update dependency fluxcd/flux2 to v2.9.4' (#398 ) from renovate/fluxcd-flux2-2.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-08-07 20:54:38 +00:00
Renovate	9705084504	Update ghcr.io/fluxcd/flux-cli Docker tag to v2.9.4	2026-08-07 20:54:37 +00:00
Renovate	2c3db3c0a2	Update dependency fluxcd/flux2 to v2.9.4	2026-08-07 20:54:26 +00:00
Lumpiasty	fe391afe1a	increase gitea valkey storage ci/woodpecker/cron/renovate Pipeline was successful Details	2026-08-06 18:29:18 +02:00
Lumpiasty	e69f3ce4ae	Merge pull request 'Update kaneo to v2.12.1' (#393 ) from renovate/kaneo into fresh-start ci/woodpecker/cron/renovate Pipeline failed Details ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #393	2026-07-31 23:41:47 +00:00
Lumpiasty	39cb9626fe	remove kaneo image tag pin	2026-08-01 01:41:06 +02:00
Lumpiasty	c1eadb29d1	Merge pull request 'Update Helm release open-webui to v16' (#394 ) from renovate/open-webui-16.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #394	2026-07-31 23:37:35 +00:00
Lumpiasty	9d8cda8228	remove image tag pin	2026-08-01 01:37:11 +02:00
Renovate	ba90001ec8	Update Helm release open-webui to v16	2026-08-01 01:37:08 +02:00
Renovate	ece05f6119	Update kaneo to v2.12.1	2026-07-31 02:01:37 +00:00
Renovate	129279192a	Merge pull request 'Update Helm release open-webui to v15.2.1' (#392 ) from renovate/open-webui-15.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-07-31 02:01:22 +00:00
Renovate	a703b8ef4c	Update Helm release open-webui to v15.2.1	2026-07-31 02:01:16 +00:00
Lumpiasty	33d30a1f6a	Merge pull request 'Update renovate/renovate Docker tag to v44' (#391 ) from renovate/renovate-renovate-44.x into fresh-start ci/woodpecker/cron/renovate Pipeline was successful Details ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #391	2026-07-29 21:36:23 +00:00
Lumpiasty	d3e794233b	Merge pull request 'Update gitea.lumpiasty.xyz/lumpiasty/supervisord:latest Docker digest to 2676d13' (#386 ) from renovate/gitea.lumpiasty.xyz-lumpiasty-supervisord-latest into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #386	2026-07-29 21:34:38 +00:00
Renovate	3f2e7bff23	Update renovate/renovate Docker tag to v44	2026-07-29 21:17:26 +00:00
Renovate	1f6e7f6d06	Merge pull request 'Update Helm release immich to v2.0.3' (#389 ) from renovate/immich-2.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-07-29 21:17:11 +00:00
Renovate	27a07fb5d9	Merge pull request 'Update Helm release cert-manager to v1.21.1' (#388 ) from renovate/cert-manager-1.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-07-29 21:17:07 +00:00
Renovate	0790de0fdf	Update Helm release immich to v2.0.3	2026-07-29 21:17:07 +00:00
Renovate	0261f900d7	Update Helm release cert-manager to v1.21.1	2026-07-29 21:16:59 +00:00
Renovate	b3135998f6	Update gitea.lumpiasty.xyz/lumpiasty/supervisord:latest Docker digest to 2676d13	2026-07-29 21:16:57 +00:00
Lumpiasty	aff867b774	automatically merge digest updates ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-07-29 23:15:57 +02:00
Renovate	4c31107f8c	Merge pull request 'Update kaneo to v2.9.10' (#387 ) from renovate/kaneo into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-07-29 02:01:12 +00:00
Renovate	6b15082274	Update kaneo to v2.9.10	2026-07-29 02:01:08 +00:00
Lumpiasty	94d7817a07	bump openwebui image tag ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-07-28 18:54:37 +02:00
Lumpiasty	63e502735c	Merge pull request 'Update Helm release cert-manager to v1.21.0' (#358 ) from renovate/cert-manager-1.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #358	2026-07-28 15:52:55 +00:00
Lumpiasty	2b687712cb	Merge pull request 'Update ghcr.io/remsky/kokoro-fastapi-cpu Docker tag to v0.6.0' (#360 ) from renovate/ghcr.io-remsky-kokoro-fastapi-cpu-0.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #360	2026-07-28 15:52:15 +00:00
Lumpiasty	c7ceb45ba1	Merge pull request 'Update quay.io/openbao/openbao Docker tag to v2.6.1' (#366 ) from renovate/quay.io-openbao-openbao-2.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline failed Details ci/woodpecker/push/build-images Pipeline was successful Details Reviewed-on: #366	2026-07-28 15:52:02 +00:00
Lumpiasty	bd33268bc0	Merge pull request 'Update Helm release k8up to v4.10.0' (#374 ) from renovate/k8up-4.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #374	2026-07-28 15:51:52 +00:00
Lumpiasty	c4143d95fc	Merge pull request 'Update Helm release gitea to v12.7.0' (#377 ) from renovate/gitea-12.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #377	2026-07-28 15:50:24 +00:00
Lumpiasty	146a251669	Merge pull request 'Update gitea.lumpiasty.xyz/lumpiasty/supervisord:latest Docker digest to 86e4837' (#378 ) from renovate/gitea.lumpiasty.xyz-lumpiasty-supervisord-latest into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #378	2026-07-28 15:50:11 +00:00
Lumpiasty	3400bcc421	Merge pull request 'Update Helm release valkey to v0.11.0' (#383 ) from renovate/valkey-0.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #383	2026-07-28 15:50:02 +00:00
Lumpiasty	45365dd01f	Merge pull request 'Update Helm release vault-secrets-operator to v1.5.0' (#384 ) from renovate/vault-secrets-operator-1.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details Reviewed-on: #384	2026-07-28 15:49:47 +00:00
Renovate	8e84550bfb	Merge pull request 'Update kaneo to v2.9.9' (#385 ) from renovate/kaneo into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details	2026-07-27 17:31:30 +00:00
Renovate	ed4e59dac1	Update kaneo to v2.9.9	2026-07-27 17:31:17 +00:00
Renovate	2aca37a14c	Update Helm release vault-secrets-operator to v1.5.0	2026-07-25 02:02:21 +00:00
Renovate	d86ad8e56a	Update Helm release valkey to v0.11.0	2026-07-25 02:02:17 +00:00
Renovate	81518b132a	Update gitea.lumpiasty.xyz/lumpiasty/supervisord:latest Docker digest to 86e4837	2026-07-25 02:01:58 +00:00
Renovate	0ba8aa2889	Update quay.io/openbao/openbao Docker tag to v2.6.1 ci/woodpecker/push/build-images Pipeline was successful Details	2026-07-24 02:02:53 +00:00
Renovate	c2cde1836c	Merge pull request 'Update Helm release openbao to v0.28.6' (#382 ) from renovate/openbao-0.x into fresh-start ci/woodpecker/cron/renovate Pipeline was successful Details ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-07-24 02:02:06 +00:00
Renovate	3b957ca449	Merge pull request 'Update Helm release authentik to v2026.5.6' (#381 ) from renovate/authentik-2026.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-07-24 02:02:01 +00:00
Renovate	c748950996	Update Helm release openbao to v0.28.6	2026-07-24 02:02:01 +00:00
Renovate	7fecb4e456	Merge pull request 'Update ghcr.io/fluxcd/flux-cli Docker tag to v2.9.3' (#380 ) from renovate/ghcr.io-fluxcd-flux-cli-2.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-07-24 02:01:56 +00:00
Renovate	c0729a67bd	Update Helm release authentik to v2026.5.6	2026-07-24 02:01:56 +00:00
Renovate	b423498c41	Merge pull request 'Update dependency fluxcd/flux2 to v2.9.3' (#379 ) from renovate/fluxcd-flux2-2.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details	2026-07-24 02:01:53 +00:00
Renovate	26585e64ae	Update ghcr.io/fluxcd/flux-cli Docker tag to v2.9.3	2026-07-24 02:01:53 +00:00
Renovate	41147dc02f	Update dependency fluxcd/flux2 to v2.9.3	2026-07-24 02:01:48 +00:00
Lumpiasty	d4931833f0	Merge pull request 'Update debian Docker tag to v13.6' (#365 ) from renovate/debian-13.x into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline was successful Details ci/woodpecker/push/build-images Pipeline was successful Details ci/woodpecker/cron/renovate Pipeline was successful Details Reviewed-on: #365	2026-07-23 17:07:07 +00:00
Lumpiasty	6524a14745	increase amdgpu timeout ci/woodpecker/push/flux-reconcile-source Pipeline failed Details ci/woodpecker/cron/renovate Pipeline failed Details	2026-07-23 00:12:10 +02:00
Lumpiasty	858e121c55	Merge pull request 'Update gitea.lumpiasty.xyz/lumpiasty/supervisord:latest Docker digest to c7adeea' (#367 ) from renovate/gitea.lumpiasty.xyz-lumpiasty-supervisord-latest into fresh-start ci/woodpecker/push/flux-reconcile-source Pipeline is pending Details ci/woodpecker/cron/renovate Pipeline was successful Details Reviewed-on: #367	2026-07-21 15:44:09 +00:00
Renovate	ef3b8a271e	Update Helm release gitea to v12.7.0	2026-07-20 02:02:01 +00:00
Renovate	d6747ca3d5	Update Helm release k8up to v4.10.0	2026-07-18 14:22:11 +00:00
Renovate	e32beb1002	Update debian Docker tag to v13.6 ci/woodpecker/push/build-images Pipeline is running Details	2026-07-15 02:01:37 +00:00
Renovate	5fe2bb7e06	Update ghcr.io/remsky/kokoro-fastapi-cpu Docker tag to v0.6.0	2026-07-12 20:49:16 +00:00
Renovate	4b702f5323	Update Helm release cert-manager to v1.21.0	2026-07-09 02:01:17 +00:00