Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/setup-node digest to 2499707
• chore(deps): update cachix/install-nix-action digest to 13d8dd5
• chore(deps): update disko digest to ff8702b
• chore(deps): update dorny/paths-filter digest to ceb8a2b
• chore(deps): update github/codeql-action digest to ff2f1c6
• chore(deps): update nixpkgs digest to 5724187
• chore(deps): update dependency kyverno/kyverno to v1.18.2
• chore(deps): update ghcr.io/rancher/local-path-provisioner/charts/local-path-provisioner docker tag to v0.0.37
• chore(deps): update helm release kyverno-policies to v3.8.2
• chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.108.1
• chore(deps): update terraform proxmox to v0.111.1
• chore(deps): update dependency kubernetes/kubernetes to v1.36.3
• chore(deps): update dependency siderolabs/talos to v1.13.8
• chore(deps): update ghcr.io/0xerr0r/blocky docker tag to v0.34.0
• chore(deps): update helm release argo-cd to v10.4.0
• chore(deps): update helm release kube-prometheus-stack to v87.21.0
• chore(deps): update helm release tailscale-operator to v1.102.2
• chore(deps): update prompve/prometheus-pve-exporter docker tag to v3.10.0
• chore(deps): update terraform providers (aws, cloudflare, helm, http, kubernetes, oci, random, tls, unifi, vault)
• chore(deps): update terraform talos to v0.11.0
• chore(deps): update xpkg.upbound.io/crossplane-contrib/provider-sql docker tag to v0.16.1
• chore(deps): update actions/setup-node action to v7
• chore(deps): update helm release kube-prometheus-stack to v88
• chore(deps): update jason5ng32/myip docker tag to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

argocd (17)

apps/alloy.yaml

apps/argocd.yaml

apps/authentik.yaml

apps/cnpg.yaml

apps/crossplane.yaml (1)

• crossplane 2.3.4

apps/dns.yaml

apps/gateway-external-routes.yaml

apps/gatus.yaml

apps/it-tools.yaml

apps/kube-prometheus-stack.yaml

apps/kyverno-operator.yaml (1)

• kyverno 3.8.2

apps/kyverno.yaml

apps/local-path-provisioner.yaml (1)

• ghcr.io/rancher/local-path-provisioner/charts/local-path-provisioner 0.0.36 → [Updates: 0.0.37]

apps/loki.yaml

apps/namespaces.yaml

apps/tailscale.yaml

apps/tetragon.yaml

docker-compose (1)

minerva/docker-compose.yml (1)

• tailscale/tailscale v1.102.2

github-actions (14)

.github/actions/terraform-plan-comment/action.yaml (1)

• borchero/terraform-plan-comment v3.2.0@f585438eda2fa77c6f275994b92aeccd86ef3542

.github/actions/tf-aws-setup/action.yaml (2)

• hashicorp/setup-terraform v4@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc

.github/workflows/_terraform-layer.yaml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc
• tailscale/github-action v4@306e68a486fd2350f2bfc3b19fcd143891a4a2d8
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v7, v6]
• node 24

.github/workflows/charts-validate.yaml (7)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• azure/setup-helm v5.0.1@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/cloud-edge-deploy.yaml (9)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v4@7b450fff21473bca461d4b92ce414b9d0420d706 → [Updates: v4]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• cachix/install-nix-action v31@630ae543ea3a38a9a4166f03376c02c50f408342 → [Updates: v31]
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc

.github/workflows/docs-diagrams.yaml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/minerva-deploy.yaml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/repo-lint.yaml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• pre-commit/action v3.0.1@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd

.github/workflows/security-trivy.yaml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3 → [Updates: v4]

.github/workflows/ssh-cert-converge.yaml (5)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc
• tailscale/github-action v4@306e68a486fd2350f2bfc3b19fcd143891a4a2d8
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• hashicorp/vault-action v4.0.0@892a26828f195e65540a40b4768ae4571f51ebfc

.github/workflows/tailscale-deploy.yaml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/terraform-lint.yaml (4)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• hashicorp/setup-terraform v4@dfe3c3f87815947d99a8997f908cb6525fc44e9e
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• terraform-linters/setup-tflint v6.3.0@6e1e0642c0289bd619021bf6b34e3c08ed1e005a

.github/workflows/vault-deploy.yaml (1)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/vieta-deploy.yaml (2)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dorny/paths-filter v4@7b450fff21473bca461d4b92ce414b9d0420d706 → [Updates: v4]

helm-values (3)

charts/gateway-external-routes/values.yaml (1)

• nginxinc/nginx-unprivileged 1.31-alpine

charts/it-tools/values.yaml (1)

• ghcr.io/corentinth/it-tools 2024.10.22-7ca5933

charts/kube-prometheus-stack/values.yaml (2)

• prompve/prometheus-pve-exporter 3.9.0 → [Updates: 3.10.0]
• ghcr.io/unpoller/unpoller v3.4.1

helmv3 (9)

charts/alloy/Chart.yaml (2)

• alloy 1.11.1
• alloy 1.11.1

charts/authentik/Chart.yaml (1)

• authentik 2026.5.6

charts/cnpg/Chart.yaml (1)

• cloudnative-pg 0.29.0

charts/gatus/Chart.yaml (1)

• gatus 1.5.0

charts/kube-prometheus-stack/Chart.yaml (1)

• kube-prometheus-stack 87.4.0 → [Updates: 87.21.0, 88.3.0]

charts/kyverno/Chart.yaml (1)

• kyverno-policies 3.8.0 → [Updates: 3.8.2]

charts/loki/Chart.yaml (1)

• loki 7.3.0

charts/tailscale/Chart.yaml (1)

• tailscale-operator 1.98.9 → [Updates: 1.102.2]

charts/tetragon/Chart.yaml (1)

• tetragon 1.7.0

kubernetes (13)

charts/argocd/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/argocd/notifications-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/authentik/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/cnpg/templates/crossplane-aggregate-rbac.yaml (1)

• ClusterRole rbac.authorization.k8s.io/v1

charts/cnpg/templates/crossplane-provider.yaml (1)

• Provider pkg.crossplane.io/v1

charts/cnpg/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/dns/templates/deployment.yaml (4)

• ghcr.io/0xerr0r/blocky v0.33.0 → [Updates: v0.34.0]
• madnuttah/unbound 1.25.1-1
• cyb3rjak3/unbound-exporter 0.6.0
• Deployment apps/v1

charts/gatus/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/kube-prometheus-stack/templates/alertmanager-secrets.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/kube-prometheus-stack/templates/grafana-secrets.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/kube-prometheus-stack/templates/proxmox-exporter.yaml (1)

• Deployment apps/v1

charts/kube-prometheus-stack/templates/unifi-exporter.yaml (1)

• Deployment apps/v1

charts/tailscale/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

nix (1)

cloud-edge/nixos/flake.nix (2)

• disko 5ad85c82cc52264f4beddc934ba57f3789f28347 → [Updates: undefined]
• nixpkgs 49ad59a0ee896dd6c1465910de9d7ecc64db93a1 → [Updates: undefined]

pre-commit (1)

.pre-commit-config.yaml (6)

• antonbabenko/pre-commit-terraform v1.108.0 → [Updates: v1.108.1]
• gitleaks/gitleaks v8.30.1
• rhysd/actionlint v1.7.12
• shellcheck-py/shellcheck-py v0.11.0.1
• codespell-project/codespell v2.4.3
• pre-commit/pre-commit-hooks v6.0.0

regex (11)

.github/workflows/charts-validate.yaml (2)

• yannh/kubeconform v0.8.0
• kyverno/kyverno v1.18.1 → [Updates: v1.18.2]

.github/workflows/cloud-edge-deploy.yaml (1)

• nix-community/nixos-anywhere 1.13.0

.github/workflows/docs-diagrams.yaml (1)

• terrastruct/d2 v0.7.1

.github/workflows/terraform-lint.yaml (1)

• terraform-linters/tflint v0.64.0

02-infrastructure/variables.tf (2)

• siderolabs/talos v1.12.1 → [Updates: v1.13.8]
• kubernetes/kubernetes 1.35.0 → [Updates: 1.36.3]

03-services/variables.tf (1)

• kubernetes-sigs/gateway-api v1.6.1

charts/cnpg/templates/crossplane-function-patch-and-transform.yaml (1)

• xpkg.crossplane.io/crossplane-contrib/function-patch-and-transform v0.10.9

charts/cnpg/templates/crossplane-provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-sql v0.14.0 → [Updates: v0.16.1]

charts/it-tools/values.yaml (1)

• ghcr.io/corentinth/it-tools 2024.10.22-7ca5933

charts/kube-prometheus-stack/values.yaml (2)

• prompve/prometheus-pve-exporter 3.9.0 → [Updates: 3.10.0]
• ghcr.io/unpoller/unpoller v3.4.1

cloud-edge/nixos/hosts/oracle-edge/myip.nix (1)

• jason5ng32/myip v6.6.0@sha256:2408cdd2ea5b1fa8f5a016e2b0cd03c805f222054a3a3a6be9532c4e843a162c → [Updates: v7.3.0]

terraform (13)

00-global/providers.tf (2)

• aws ~> 6.0 → [Updates: ~> 6.0]
• hashicorp/terraform >= 1.9.0

01-network/providers.tf (3)

• cloudflare 5.18.0 → [Updates: 5.23.0]
• unifi 1.0.0 → [Updates: 1.1.0]
• hashicorp/terraform >= 1.9.0

02-infrastructure/providers.tf (3)

• proxmox 0.111.0 → [Updates: 0.111.1]
• talos 0.10.1 → [Updates: 0.11.0]
• hashicorp/terraform >= 1.9.0

02-infrastructure/proxmox.tf

03-services/argocd.tf (1)

• argo-cd 10.3.2 → [Updates: 10.4.0]

03-services/cert-manager.tf (1)

• cert-manager v1.21.1

03-services/cilium.tf (1)

• cilium 1.20.0

03-services/external-secrets.tf (1)

• external-secrets 2.9.0

03-services/providers.tf (8)

• cloudflare 5.18.0 → [Updates: 5.23.0]
• helm 3.1.1 → [Updates: 3.2.0]
• http 3.5.0 → [Updates: 3.6.1]
• kubectl 1.19.0
• kubernetes 3.0.1 → [Updates: 3.2.1]
• random 3.8.1 → [Updates: 3.9.0]
• tls 4.1.0 → [Updates: 4.3.0]
• hashicorp/terraform >= 1.9.0

03-services/storage.tf (1)

• csi-driver-nfs 4.13.4

cloud-edge/providers.tf (3)

• cloudflare 5.18.0 → [Updates: 5.23.0]
• oci 8.8.0 → [Updates: 8.27.0]
• hashicorp/terraform >= 1.9.0

tailscale/providers.tf (3)

• tailscale 0.29.2
• vault 5.10.1 → [Updates: 5.11.0]
• hashicorp/terraform >= 1.10.0

vault/providers.tf (2)

• vault 5.10.1 → [Updates: 5.11.0]
• hashicorp/terraform >= 1.10.0

tflint-plugin (1)

.tflint.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository