Update Helm release immich to v2.0.4

.woodpecker/flux-reconcile-source.yaml

@@ -20,7 +20,7 @@ steps:
       - export VAULT_TOKEN=$(cat /woodpecker/.vault_id)
       - bao write -format json -f /kubernetes/creds/flux-reconcile > /woodpecker/kube_credentials
   - name: Construct Kubeconfig
-    image: alpine/k8s:1.37.0
+    image: alpine/k8s:1.36.2
     environment:
       KUBECONFIG: /woodpecker/kubeconfig
     commands:

apps/authentik/release.yaml

@@ -18,7 +18,7 @@ spec:
   chart:
     spec:
       chart: authentik
-      version: 2026.8.3
+      version: 2026.8.2
       sourceRef:
         kind: HelmRepository
         name: authentik

apps/gitea/release.yaml

@@ -25,8 +25,7 @@ spec:
       interval: 12h
   values:
     image:
-      # REMOVE ME after new helm chart version includes updates
-      tag: 1.27.3 # renovate: depName=docker.gitea.com/gitea registryUrl=https://docker.gitea.com
+      tag: 1.27.2 # REMOVE ME after new helm chart version includes this update
     postgresql-ha:
       enabled: false
 

apps/gitea/valkey-volume.yaml

@@ -7,7 +7,7 @@ metadata:
   name: gitea-valkey-primary-lvmhdd-0
   namespace: openebs
 spec:
-  capacity: "6442450944"
+  capacity: "4294967296"
   ownerNodeID: anapistula-delrosalae
   shared: "yes"
   thinProvision: "no"
@@ -20,7 +20,7 @@ metadata:
   name: gitea-valkey-primary-lvmhdd-0
 spec:
   capacity:
-    storage: 6Gi
+    storage: 4Gi
   accessModes:
     - ReadWriteOnce
   persistentVolumeReclaimPolicy: Retain
@@ -41,6 +41,6 @@ spec:
     - ReadWriteOnce
   resources:
     requests:
-      storage: 6Gi
+      storage: 4Gi
   storageClassName: hdd-lvmpv
   volumeName: gitea-valkey-primary-lvmhdd-0

apps/immich/redis.yaml

@@ -18,7 +18,7 @@ spec:
   chart:
     spec:
       chart: valkey
-      version: 0.12.0
+      version: 0.11.0
       sourceRef:
         kind: HelmRepository
         name: valkey

apps/immich/release.yaml

@@ -18,7 +18,7 @@ spec:
   chart:
     spec:
       chart: immich
-      version: 2.0.6
+      version: 2.0.4
       sourceRef:
         kind: HelmRepository
         name: secustor

apps/kaneo/release.yaml

@@ -8,7 +8,7 @@ spec:
   interval: 24h
   url: https://github.com/usekaneo/kaneo.git
   ref:
-    tag: v2.25.0
+    tag: v2.22.0
   ignore: |
     # exclude all
     /*

apps/llama/kokoro.yaml

@@ -21,7 +21,7 @@ spec:
           # OpenAI-compatible Kokoro-FastAPI TTS server, CPU PyTorch backend.
           # Models baked into the image (no PVC needed).
           # v0.3.0 includes fix for per-request voice tensor memory leak (#459).
-          image: ghcr.io/remsky/kokoro-fastapi-cpu:v0.9.0
+          image: ghcr.io/remsky/kokoro-fastapi-cpu:v0.8.2
           ports:
             - containerPort: 8880
               name: http

apps/nas/deployment.yaml

@@ -15,7 +15,7 @@ spec:
     spec:
       initContainers:
         - name: prepare-home
-          image: alpine:3.24.2
+          image: alpine:3.24.1
           imagePullPolicy: IfNotPresent
           command:
             - /bin/sh

docker/supervisord/Dockerfile

@@ -1,4 +1,4 @@
-FROM debian:13.7
+FROM debian:13.6
 
 ENV DEBIAN_FRONTEND=noninteractive
 

infra/controllers/cert-manager-webhook-ovh.yaml

@@ -18,7 +18,7 @@ spec:
   chart:
     spec:
       chart: cert-manager-webhook-ovh
-      version: 0.9.17
+      version: 0.9.16
       sourceRef:
         kind: HelmRepository
         name: cert-manager-webhook-ovh

infra/controllers/cilium.yaml

@@ -23,7 +23,7 @@ spec:
   chart:
     spec:
       chart: cilium
-      version: 1.20.2
+      version: 1.20.1
       sourceRef:
         kind: HelmRepository
         name: cilium

infra/controllers/openbao.yaml

@@ -23,7 +23,7 @@ spec:
   chart:
     spec:
       chart: openbao
-      version: 0.29.5
+      version: 0.29.4
       sourceRef:
         kind: HelmRepository
         name: openbao

infra/controllers/openebs.yaml

@@ -23,7 +23,7 @@ spec:
   chart:
     spec:
       chart: openebs
-      version: 4.6.1
+      version: 4.5.1
       sourceRef:
         kind: HelmRepository
         name: openebs