Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.108.1
• chore(deps): update ghcr.io/0xerr0r/blocky docker tag to v0.34.0
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to d23441a
• chore(deps): update actions/setup-node digest to 2499707
• chore(deps): update disko digest to ff8702b
• chore(deps): update github/codeql-action digest to f205ea1
• chore(deps): update nixpkgs digest to e6bd652
• chore(deps): update dependency kyverno/kyverno to v1.18.2
• chore(deps): update ghcr.io/unpoller/unpoller docker tag to v3.3.4
• chore(deps): update helm release authentik to v2026.5.6
• chore(deps): update helm release kyverno-policies to v3.8.2
• chore(deps): update pre-commit hook codespell-project/codespell to v2.4.3
• chore(deps): update tailscale/tailscale docker tag to v1.98.10
• chore(deps): update terraform proxmox to v0.111.1
• chore(deps): update xpkg.crossplane.io/crossplane-contrib/function-patch-and-transform docker tag to v0.10.8
• chore(deps): update dependency kubernetes-sigs/gateway-api to v1.6.1
• chore(deps): update dependency kubernetes/kubernetes to v1.36.3
• chore(deps): update dependency siderolabs/talos to v1.13.7
• chore(deps): update helm charts (argo-cd, cert-manager, cilium, crossplane, csi-driver-nfs, external-secrets, kyverno)
• chore(deps): update helm release alloy to v1.11.0
• chore(deps): update helm release kube-prometheus-stack to v87.21.0
• chore(deps): update helm release loki to v7.2.0
• chore(deps): update terraform providers (aws, cloudflare, helm, http, kubernetes, oci, random, tls, unifi)
• chore(deps): update terraform talos to v0.11.0
• chore(deps): update xpkg.upbound.io/crossplane-contrib/provider-sql docker tag to v0.16.0
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/setup-node action to v7
• chore(deps): update jason5ng32/myip docker tag to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

argocd (17)

apps/alloy.yaml

apps/argocd.yaml

apps/authentik.yaml

apps/cnpg.yaml

apps/crossplane.yaml (1)

• crossplane 2.2.0 → [Updates: 2.3.4]

apps/dns.yaml

apps/gateway-external-routes.yaml

apps/gatus.yaml

apps/it-tools.yaml

apps/kube-prometheus-stack.yaml

apps/kyverno-operator.yaml (1)

• kyverno 3.8.0 → [Updates: 3.8.2]

apps/kyverno.yaml

apps/local-path-provisioner.yaml (1)

• ghcr.io/rancher/local-path-provisioner/charts/local-path-provisioner 0.0.36

apps/loki.yaml

apps/namespaces.yaml

apps/tailscale.yaml

apps/tetragon.yaml

docker-compose (1)

minerva/docker-compose.yml (1)

• tailscale/tailscale v1.98.8 → [Updates: v1.98.10]

github-actions (11)

.github/actions/tf-aws-setup/action.yaml (2)

• hashicorp/setup-terraform v4@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc

.github/workflows/_terraform-layer.yaml (6)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc
• tailscale/github-action v4@306e68a486fd2350f2bfc3b19fcd143891a4a2d8
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v7, v6]
• borchero/terraform-plan-comment v3.1.0@2d41e908725447b1677913001dfb92fa7010c025
• node 24

.github/workflows/charts-validate.yaml (7)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/cloud-edge-deploy.yaml (10)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• dorny/paths-filter v4@7b450fff21473bca461d4b92ce414b9d0420d706
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc
• borchero/terraform-plan-comment v3.1.0@2d41e908725447b1677913001dfb92fa7010c025
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc

.github/workflows/docs-diagrams.yaml (1)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]

.github/workflows/minerva-deploy.yaml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc

.github/workflows/repo-lint.yaml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd

.github/workflows/security-trivy.yaml (6)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@8aad20d150bbac5944a9f9d289da16a4b0d87c1e → [Updates: v4]

.github/workflows/terraform-lint.yaml (4)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• hashicorp/setup-terraform v4@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• terraform-linters/setup-tflint v6.3.0@6e1e0642c0289bd619021bf6b34e3c08ed1e005a

.github/workflows/vault-deploy.yaml (1)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]

.github/workflows/vieta-deploy.yaml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• dorny/paths-filter v4@7b450fff21473bca461d4b92ce414b9d0420d706

helm-values (3)

charts/gateway-external-routes/values.yaml (1)

• nginxinc/nginx-unprivileged 1.31-alpine

charts/it-tools/values.yaml (1)

• ghcr.io/corentinth/it-tools 2024.10.22-7ca5933

charts/kube-prometheus-stack/values.yaml (2)

• prompve/prometheus-pve-exporter 3.9.0
• ghcr.io/unpoller/unpoller v3.3.1 → [Updates: v3.3.4]

helmv3 (9)

charts/alloy/Chart.yaml (2)

• alloy 1.10.1 → [Updates: 1.11.0]
• alloy 1.10.1 → [Updates: 1.11.0]

charts/authentik/Chart.yaml (1)

• authentik 2026.5.3 → [Updates: 2026.5.6]

charts/cnpg/Chart.yaml (1)

• cloudnative-pg 0.29.0

charts/gatus/Chart.yaml (1)

• gatus 1.5.0

charts/kube-prometheus-stack/Chart.yaml (1)

• kube-prometheus-stack 87.4.0 → [Updates: 87.21.0]

charts/kyverno/Chart.yaml (1)

• kyverno-policies 3.8.0 → [Updates: 3.8.2]

charts/loki/Chart.yaml (1)

• loki 7.0.0 → [Updates: 7.2.0]

charts/tailscale/Chart.yaml (1)

• tailscale-operator 1.98.9

charts/tetragon/Chart.yaml (1)

• tetragon 1.7.0

kubernetes (13)

charts/argocd/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/argocd/notifications-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/authentik/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/cnpg/templates/crossplane-aggregate-rbac.yaml (1)

• ClusterRole rbac.authorization.k8s.io/v1

charts/cnpg/templates/crossplane-provider.yaml (1)

• Provider pkg.crossplane.io/v1

charts/cnpg/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/dns/templates/deployment.yaml (5)

• alpine 3.24
• ghcr.io/0xerr0r/blocky v0.33.0 → [Updates: v0.34.0]
• madnuttah/unbound 1.25.1-1
• cyb3rjak3/unbound-exporter 0.6.0
• Deployment apps/v1

charts/gatus/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/kube-prometheus-stack/templates/alertmanager-secrets.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/kube-prometheus-stack/templates/grafana-secrets.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/kube-prometheus-stack/templates/proxmox-exporter.yaml (1)

• Deployment apps/v1

charts/kube-prometheus-stack/templates/unifi-exporter.yaml (1)

• Deployment apps/v1

charts/tailscale/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

nix (1)

cloud-edge/nixos/flake.nix (2)

• disko 5ad85c82cc52264f4beddc934ba57f3789f28347 → [Updates: undefined]
• nixpkgs f37d14db4e7f801872506a2dee5cce5da36ea512 → [Updates: undefined]

pre-commit (1)

.pre-commit-config.yaml (6)

• antonbabenko/pre-commit-terraform v1.108.0 → [Updates: v1.108.1]
• gitleaks/gitleaks v8.30.1
• rhysd/actionlint v1.7.12
• shellcheck-py/shellcheck-py v0.11.0.1
• codespell-project/codespell v2.4.2 → [Updates: v2.4.3]
• pre-commit/pre-commit-hooks v6.0.0

regex (10)

.github/workflows/charts-validate.yaml (2)

• yannh/kubeconform v0.8.0
• kyverno/kyverno v1.18.1 → [Updates: v1.18.2]

.github/workflows/docs-diagrams.yaml (1)

• terrastruct/d2 v0.7.1

.github/workflows/terraform-lint.yaml (1)

• terraform-linters/tflint v0.64.0

02-infrastructure/variables.tf (2)

• siderolabs/talos v1.12.1 → [Updates: v1.13.7]
• kubernetes/kubernetes 1.35.0 → [Updates: 1.36.3]

03-services/variables.tf (1)

• kubernetes-sigs/gateway-api v1.4.1 → [Updates: v1.6.1]

charts/cnpg/templates/crossplane-function-patch-and-transform.yaml (1)

• xpkg.crossplane.io/crossplane-contrib/function-patch-and-transform v0.10.3 → [Updates: v0.10.8]

charts/cnpg/templates/crossplane-provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-sql v0.14.0 → [Updates: v0.16.0]

charts/it-tools/values.yaml (1)

• ghcr.io/corentinth/it-tools 2024.10.22-7ca5933

charts/kube-prometheus-stack/values.yaml (2)

• prompve/prometheus-pve-exporter 3.9.0
• ghcr.io/unpoller/unpoller v3.3.1 → [Updates: v3.3.4]

cloud-edge/nixos/hosts/oracle-edge/myip.nix (1)

• jason5ng32/myip v6.6.0@sha256:2408cdd2ea5b1fa8f5a016e2b0cd03c805f222054a3a3a6be9532c4e843a162c → [Updates: v7.2.1]

terraform (12)

00-global/providers.tf (2)

• aws ~> 6.0 → [Updates: ~> 6.0]
• hashicorp/terraform >= 1.9.0

01-network/providers.tf (3)

• cloudflare 5.18.0 → [Updates: 5.22.0]
• unifi 1.0.0 → [Updates: 1.1.0]
• hashicorp/terraform >= 1.9.0

02-infrastructure/providers.tf (3)

• proxmox 0.111.0 → [Updates: 0.111.1]
• talos 0.10.1 → [Updates: 0.11.0]
• hashicorp/terraform >= 1.9.0

02-infrastructure/proxmox.tf

03-services/argocd.tf (1)

• argo-cd 10.1.0 → [Updates: 10.2.1]

03-services/cert-manager.tf (1)

• cert-manager v1.20.1 → [Updates: v1.21.1]

03-services/cilium.tf (1)

• cilium 1.19.2 → [Updates: 1.20.0]

03-services/external-secrets.tf (1)

• external-secrets 2.2.0 → [Updates: 2.8.0]

03-services/providers.tf (8)

• cloudflare 5.18.0 → [Updates: 5.22.0]
• helm 3.1.1 → [Updates: 3.2.0]
• http 3.5.0 → [Updates: 3.6.0]
• kubectl 1.19.0
• kubernetes 3.0.1 → [Updates: 3.2.1]
• random 3.8.1 → [Updates: 3.9.0]
• tls 4.1.0 → [Updates: 4.3.0]
• hashicorp/terraform >= 1.9.0

03-services/storage.tf (1)

• csi-driver-nfs 4.13.1 → [Updates: 4.13.4]

cloud-edge/providers.tf (3)

• cloudflare 5.18.0 → [Updates: 5.22.0]
• oci 8.8.0 → [Updates: 8.25.0]
• hashicorp/terraform >= 1.9.0

vault/providers.tf (2)

• vault 5.10.1
• hashicorp/terraform >= 1.10.0

tflint-plugin (1)

.tflint.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository