Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/immich-app/devtools).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/immich-app/devtools).

- ⚠️ WARN: Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information

## Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

> [!NOTE]
Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
>

View abandoned dependencies (1)

| Datasource | Package | Last Updated |
|------------|------|-------------|
| github-actions | [ytanikin/PRConventionalCommits](https://redirect.github.com/ytanikin/PRConventionalCommits) | `2024-09-28` |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): pin dependencies (`gha-runner-scale-set`, `gha-runner-scale-set-controller`)
- [ ] chore(deps): pin dependencies (`containerssh/containerssh-guest-image`, `ghcr.io/bo0tzz/podbump`, `ghcr.io/immich-app/actions-runner`, `grafana-operator`)
- [ ] chore(deps): pin dependencies (`flux-operator`, `flux2`, `fluxcd/flux2`, `ghcr.io/fluxcd/flux-cli`, `ghcr.io/fluxcd/flux-manifests`)
- [ ] chore(deps): update helm release cert-manager to v1.21.2
- [ ] chore(deps): update terraform random to v3.9.1
- [ ] chore(deps): update dependency usage to v6.9.0
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update docker docker tag to v29.8.1
- [ ] chore(deps): update github-actions (`docker/build-push-action`, `docker/setup-buildx-action`, `jdx/mise`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency @types/node to ^24.13.4](../pull/1949)
- [ ] [chore(deps): update typescript-projects](../pull/1938) (`@eslint/eslintrc`, `@immich/sdk`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `eslint`, `globals`, `pnpm`, `tsx`, `typescript-eslint`)
- [ ] [chore(deps): update dependency @vercel/ncc to ^0.45.0](../pull/1924)
- [ ] [chore(deps): update dependency eslint-plugin-unicorn to v74](../pull/1944)
- [ ] [chore(deps): update dependency typescript to v7](../pull/1835)
- [ ] [chore(deps): update pnpm to v12](../pull/1946)
- [ ] [chore(deps): update terraform cloudflare to v5](../pull/1836)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update helm release app-template to v3.7.3](../pull/448)
- [ ] [chore(deps): update helm release app-template to v5](../pull/1596)

## Detected Dependencies

dockerfile (2)

containers/actions-runner/Dockerfile (1)

- `ghcr.io/falcondev-oss/actions-runner 2.337.0@sha256:32a63e960641cde7df61ee56e18576d9781d3980f3e6461d379308b88ec5c036`

containers/mdq/Dockerfile (1)

- `yshavit/mdq 0.10.0@sha256:a7e958222b1bd3a4dcaebc8c9208460d7a5f738f1d123e8d425ceb08899a83d8`

flux (27)

kubernetes/apps/actions-runner/actions-cache/helmrelease.yaml (2)

- `app-template 2.6.0` → [Updates: `5.2.0`]
- `ghcr.io/falcondev-oss/github-actions-cache-server 9.8.0@sha256:58bc6ae6fc34606c3b139e259c3c12d9ff23c793a666e8a784f13f6bb9b1aa41`

kubernetes/apps/actions-runner/controller/helmrelease.yaml (1)

- `gha-runner-scale-set-controller 0.14.2` → [Updates: `0.14.2`]

kubernetes/apps/actions-runner/registry-cache/helmrelease.yaml (2)

- `app-template 2.6.0` → [Updates: `5.2.0`]
- `registry 3.1.1@sha256:1be55279f18a2fe1a74edf2664cac61c1bea305b7b4642dab412e7affdcb3e33`

kubernetes/apps/actions-runner/runners/helmrelease.yaml (4)

- `gha-runner-scale-set 0.14.2` → [Updates: `0.14.2`]
- `ghcr.io/immich-app/actions-runner main` → [Updates: `main`]
- `ghcr.io/immich-app/actions-runner main` → [Updates: `main`]
- `docker 29.8.0-dind@sha256:5efed980cba3fc126cf54e21a5a6ff8849d05b6e0623d6e7612f48e9cd6cd17e` → [Updates: `29.8.1-dind`]

kubernetes/apps/authentication/oauth2-proxy/app/helmrelease.yaml (2)

- `app-template 2.6.0` → [Updates: `5.2.0`]
- `quay.io/oauth2-proxy/oauth2-proxy v7.15.4@sha256:b1b2021fe8f4004573e8d690dec6c7bb29cc44364572cf8510a05bf3a0ae2ded`

kubernetes/apps/infrastructure/networking/cert-manager/cert-manager/app/helmrelease.yaml (1)

- `cert-manager v1.21.1` → [Updates: `v1.21.2`]

kubernetes/apps/infrastructure/networking/ingress-nginx/app/helmrelease.yaml (1)

- `ingress-nginx 4.15.1`

kubernetes/apps/infrastructure/operators/cloudnative-pg/app/helmrelease.yaml (1)

- `cloudnative-pg 0.29.0`

kubernetes/apps/infrastructure/operators/flux-operator/app/helmrelease.yaml (1)

- `flux-operator 0.60.0` → [Updates: `0.60.0`]

kubernetes/apps/infrastructure/operators/grafana-operator/app/helmrelease.yaml (1)

- `grafana-operator 5.25.0` → [Updates: `5.25.0`]

kubernetes/apps/infrastructure/operators/victoria-metrics/app/helmrelease.yaml (1)

- `victoria-metrics-operator 0.67.3`

kubernetes/apps/infrastructure/operators/victoria-metrics/crds/helmrelease.yaml (1)

- `victoria-metrics-operator-crds 0.14.0`

kubernetes/apps/infrastructure/secrets/external-secrets/app/helmrelease.yaml (1)

- `external-secrets 2.10.0`

kubernetes/apps/infrastructure/secrets/onepassword/app/helmrelease.yaml (1)

- `connect 2.4.1`

kubernetes/apps/infrastructure/storage/democratic-csi/app/helmrelease.yaml (1)

- `democratic-csi 0.15.1`

kubernetes/apps/infrastructure/storage/snapshot-controller/app/controller.yaml (1)

- `snapshot-controller 5.2.0`

kubernetes/apps/infrastructure/storage/volsync/app/helmrelease.yaml (1)

- `volsync 0.16.0`

kubernetes/apps/monitoring-dev/victoria-metrics/app/helmrelease.yaml (1)

- `victoria-metrics-k8s-stack 0.92.1`

kubernetes/apps/monitoring/grafana/app/renderer.yaml (2)

- `app-template 3.5.0` → [Updates: `3.7.3`, `5.2.0`]
- `docker.io/grafana/grafana-image-renderer v5.12.3@sha256:cf36a94431662540a72d2058a43e0cbf72638334475d8216a25a77526a627be7`

kubernetes/apps/monitoring/victoria-logs/app/helmrelease.yaml (1)

- `victoria-logs-single 0.13.9`

kubernetes/apps/monitoring/victoria-metrics/app/helmrelease.yaml (1)

- `victoria-metrics-k8s-stack 0.92.1`

kubernetes/apps/pipelines/data/victoria-metrics/app/helmrelease.yaml (1)

- `victoria-metrics-k8s-stack 0.92.1`

kubernetes/apps/tools/discord-bot/app/helmrelease.yaml (1)

- `app-template 2.6.0` → [Updates: `5.2.0`]

kubernetes/apps/tools/outline/app/helmrelease.yaml (3)

- `app-template 3.5.0` → [Updates: `3.7.3`, `5.2.0`]
- `docker.io/outlinewiki/outline 1.10.1@sha256:832051f039b446c87aa23929cf92c00980c66aaa2d744d118c48c016ec816ad8`
- `valkey/valkey 9.1.2@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d`

kubernetes/flux/config/cluster.yaml

kubernetes/flux/config/flux.yaml (1)

- `ghcr.io/fluxcd/flux-manifests sha256:860793215982d8703f2b7e31d9637531729081edd198b12c73a5182d7f0aa267` → [Updates: `undefined`]

kubernetes/flux/repositories/helm/immich-charts.yaml (1)

- `ghcr.io/immich-app/immich-charts/immich 0.13.2@sha256:bfdfdcc45864cb7fd0c41368b26e0127470c10ea41d981756210899c225266a6`

github-actions (17)

.github/workflows/build-actions-runner.yaml (5)

- `immich-app/devtools pre-job-action-v2.1.1@75493d49052d536863fc96100086782c5279b145`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302`
- `docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` → [Updates: `v7.4.0`]

.github/workflows/build-mdq.yml (5)

- `immich-app/devtools pre-job-action-v2.1.1@75493d49052d536863fc96100086782c5279b145`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302`
- `docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` → [Updates: `v7.4.0`]

.github/workflows/flux-diff.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `home-operations/flate v0.6.5@631b76b69c4e58c6f4d1cb01e23616fa61aebafa`
- `immich-app/devtools sticky-comment-action-v1.0.0@0135acd12ad9f3369b94a2aa3c0ae8c835a4e926`

.github/workflows/multi-runner-build.yml (7)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `immich-app/devtools image-build-action-v0.1.10@236702d8cb0c9dd1ff155b73f9be789b1b2cd620`
- `astral-sh/setup-uv v10.1.0@bec219d24cd3e171d82865faccec33120bb574f4`
- `actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c`
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e` → [Updates: `v4.4.1`]
- `docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302`

.github/workflows/org-pr-require-conventional-commit.yml

.github/workflows/org-zizmor.yml

.github/workflows/release-please.yml (2)

- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `googleapis/release-please-action v5.0.0@45996ed1f6d02564a971a2fa1b5860e934307cf7`

.github/workflows/scripts.yml (3)

- `immich-app/devtools pre-job-action-v2.1.1@75493d49052d536863fc96100086782c5279b145`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8`

.github/workflows/shared-pr-require-conventional-commit.yml (1)

- `ytanikin/PRConventionalCommits 1.3.0@b628c5a234cc32513014b7bfdd1e47b532124d98`

.github/workflows/shared-zizmor.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `immich-app/devtools create-workflow-token-action-v3.0.1@df46d635b905e618b88fc4c95baa920aeb30b309`
- `zizmorcore/zizmor-action v0.6.4@cc914d7f3750a2d13d75c7f184a1060aa0e9d482`

.github/workflows/test-sticky-comment.yml (4)

- `immich-app/devtools pre-job-action-v2.1.1@75493d49052d536863fc96100086782c5279b145`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `immich-app/devtools use-mise-action-v3.2.1@06a9ef925332c91be647d6256642b86b398592c8`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/test-use-mise.yml (3)

- `immich-app/devtools pre-job-action-v2.1.1@75493d49052d536863fc96100086782c5279b145`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `immich-app/devtools success-check-action-v0.0.6@81113db03f6d743efee81e0058c0b43f6cd6f36d`

actions/create-workflow-token/action.yml (1)

- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`

actions/image-build/action.yml (5)

- `docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e` → [Updates: `v4.4.1`]
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `docker/metadata-action v6.2.0@dc802804100637a589fabce1cb79ff13a1411302`
- `docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` → [Updates: `v7.4.0`]
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`

actions/pre-job/action.yml (5)

- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d`
- `dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d`
- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

actions/success-check/action.yml (1)

- `actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3`

actions/use-mise/action.yml (2)

- `jdx/mise-action v4.3.0@c2a87611a18de5b3828c5652fe268e992400cb5c`
- `jdx/mise 2026.9.5` → [Updates: `2026.9.10`]

helm-values (10)

kubernetes/apps/actions-runner/actions-cache/helmrelease.yaml (1)

- `ghcr.io/falcondev-oss/github-actions-cache-server 9.8.0@sha256:58bc6ae6fc34606c3b139e259c3c12d9ff23c793a666e8a784f13f6bb9b1aa41`

kubernetes/apps/actions-runner/registry-cache/helmrelease.yaml (1)

- `registry 3.1.1@sha256:1be55279f18a2fe1a74edf2664cac61c1bea305b7b4642dab412e7affdcb3e33`

kubernetes/apps/actions-runner/runners/helmrelease.yaml (3)

- `ghcr.io/immich-app/actions-runner main` → [Updates: `main`]
- `ghcr.io/immich-app/actions-runner main` → [Updates: `main`]
- `docker 29.8.0-dind@sha256:5efed980cba3fc126cf54e21a5a6ff8849d05b6e0623d6e7612f48e9cd6cd17e` → [Updates: `29.8.1-dind`]

kubernetes/apps/authentication/oauth2-proxy/app/helmrelease.yaml (1)

- `quay.io/oauth2-proxy/oauth2-proxy v7.15.4@sha256:b1b2021fe8f4004573e8d690dec6c7bb29cc44364572cf8510a05bf3a0ae2ded`

kubernetes/apps/monitoring/grafana/app/renderer.yaml (1)

- `docker.io/grafana/grafana-image-renderer v5.12.3@sha256:cf36a94431662540a72d2058a43e0cbf72638334475d8216a25a77526a627be7`

kubernetes/apps/preview/demo/controller/cronjob.yaml (1)

- `ghcr.io/fluxcd/flux-cli v2.9.3@sha256:148ad45c3bd6e2f051bda3d1e4572a1f4e546b3fc0b658bf1391ac1ec277a475` → [Updates: `v2.9.5`]

kubernetes/apps/tools/containerssh/app/deployment.yaml (1)

- `containerssh/containerssh v0.5.2@sha256:8abfc0468975df8d9114829486636424eba87dfd55f3f8da3ce5e74ce052cb75`

kubernetes/apps/tools/discord-bot/app/helmrelease.yaml

kubernetes/apps/tools/outline/app/helmrelease.yaml (2)

- `docker.io/outlinewiki/outline 1.10.1@sha256:832051f039b446c87aa23929cf92c00980c66aaa2d744d118c48c016ec816ad8`
- `valkey/valkey 9.1.2@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d`

kubernetes/apps/tools/podbump/app/deployment.yaml (1)

- `ghcr.io/bo0tzz/podbump v0.1.4` → [Updates: `v0.1.4`]

kubernetes (110)

kubernetes/apps/actions-runner/actions-cache/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/actions-runner/controller/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/actions-runner/ks.yaml (4)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/actions-runner/netpol.yaml (1)

- `NetworkPolicy networking.k8s.io/v1`

kubernetes/apps/actions-runner/registry-cache/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/actions-runner/runners/helmrelease.yaml (4)

- `ghcr.io/immich-app/actions-runner main` → [Updates: `main`]
- `ghcr.io/immich-app/actions-runner main` → [Updates: `main`]
- `docker 29.8.0-dind@sha256:5efed980cba3fc126cf54e21a5a6ff8849d05b6e0623d6e7612f48e9cd6cd17e` → [Updates: `29.8.1-dind`]
- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/authentication/oauth2-proxy/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/authentication/oauth2-proxy/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/authentication/oauth2-proxy/secrets/oauth.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/infrastructure/flux-system/addons/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/flux-system/addons/webhooks/github/ingress.yaml (1)

- `Ingress networking.k8s.io/v1`

kubernetes/apps/infrastructure/flux-system/addons/webhooks/github/receiver.yaml (1)

- `Receiver notification.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/flux-system/addons/webhooks/github/secret.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/infrastructure/networking/cert-manager/cert-manager/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/networking/cert-manager/cert-manager/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/networking/ingress-nginx/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/networking/ingress-nginx/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/operators/cloudnative-pg/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/operators/cloudnative-pg/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/operators/flux-operator/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/operators/flux-operator/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/operators/grafana-operator/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/operators/grafana-operator/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/operators/victoria-metrics/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/operators/victoria-metrics/crds/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/operators/victoria-metrics/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/secrets/external-secrets/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/secrets/external-secrets/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/secrets/external-secrets/stores/1p-kubernetes.yaml (1)

- `ClusterSecretStore external-secrets.io/v1`

kubernetes/apps/infrastructure/secrets/external-secrets/stores/1p-tf-dev.yaml (1)

- `ClusterSecretStore external-secrets.io/v1`

kubernetes/apps/infrastructure/secrets/external-secrets/stores/1p-tf-prod.yaml (1)

- `ClusterSecretStore external-secrets.io/v1`

kubernetes/apps/infrastructure/secrets/external-secrets/stores/1p-tf.yaml (1)

- `ClusterSecretStore external-secrets.io/v1`

kubernetes/apps/infrastructure/secrets/onepassword/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/secrets/onepassword/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/storage/democratic-csi/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/storage/democratic-csi/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/storage/snapshot-controller/app/controller.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/storage/snapshot-controller/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/storage/volsync/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/infrastructure/storage/volsync/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/infrastructure/terraform/state-storage/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/monitoring-dev/grafana/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/monitoring-dev/grafana/secrets/oauth.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring-dev/ingress/app/admin.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring-dev/ingress/app/read.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring-dev/ingress/app/write.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring-dev/ingress/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/monitoring-dev/victoria-metrics/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/monitoring-dev/victoria-metrics/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/monitoring/grafana/app/renderer.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/monitoring/grafana/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/monitoring/grafana/secrets/oauth.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring/ingress/app/admin.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring/ingress/app/logs-write.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring/ingress/app/read.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring/ingress/app/victoria-logs-ui.yaml (1)

- `Ingress networking.k8s.io/v1`

kubernetes/apps/monitoring/ingress/app/write.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/monitoring/ingress/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/monitoring/victoria-logs/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/monitoring/victoria-logs/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/monitoring/victoria-metrics/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/monitoring/victoria-metrics/ks.yaml (3)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/pipelines/data/grafana/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/pipelines/data/grafana/secrets/oauth.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/pipelines/data/victoria-metrics/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/pipelines/data/victoria-metrics/ks.yaml (4)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/preview/demo/controller/cronjob.yaml (2)

- `ghcr.io/fluxcd/flux-cli v2.9.3@sha256:148ad45c3bd6e2f051bda3d1e4572a1f4e546b3fc0b658bf1391ac1ec277a475` → [Updates: `v2.9.5`]
- `CronJob batch/v1`

kubernetes/apps/preview/demo/controller/rbac.yaml (2)

- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRoleBinding rbac.authorization.k8s.io/v1`

kubernetes/apps/preview/demo/deployment/hr.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/preview/demo/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/preview/github-previews/app/webhook.yaml (2)

- `ExternalSecret external-secrets.io/v1`
- `Receiver notification.toolkit.fluxcd.io/v1`

kubernetes/apps/preview/github-previews/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/preview/snapshot/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/tools/containerssh/app/config.yaml (1)

- `containerssh/containerssh-guest-image unknown version` → [Updates: `undefined`]

kubernetes/apps/tools/containerssh/app/deployment.yaml (2)

- `containerssh/containerssh v0.5.2@sha256:8abfc0468975df8d9114829486636424eba87dfd55f3f8da3ce5e74ce052cb75`
- `Deployment apps/v1`

kubernetes/apps/tools/containerssh/app/netpol.yaml (1)

- `NetworkPolicy networking.k8s.io/v1`

kubernetes/apps/tools/containerssh/app/rbac.yaml (2)

- `Role rbac.authorization.k8s.io/v1`
- `RoleBinding rbac.authorization.k8s.io/v1`

kubernetes/apps/tools/containerssh/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/tools/containerssh/secrets/oauth.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/tools/discord-bot/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/tools/discord-bot/app/secret.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/tools/discord-bot/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/tools/discord-bot/secrets/db-backup-bucket.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/tools/discord-bot/secrets/db-backup-secret.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/tools/outline/app/helmrelease.yaml (1)

- `HelmRelease helm.toolkit.fluxcd.io/v2`

kubernetes/apps/tools/outline/ks.yaml (2)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/apps/tools/outline/secrets/oauth.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/tools/outline/secrets/secret.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kubernetes/apps/tools/podbump/app/deployment.yaml (2)

- `ghcr.io/bo0tzz/podbump v0.1.4` → [Updates: `v0.1.4`]
- `Deployment apps/v1`

kubernetes/apps/tools/podbump/app/rbac.yaml (2)

- `ClusterRole rbac.authorization.k8s.io/v1`
- `ClusterRoleBinding rbac.authorization.k8s.io/v1`

kubernetes/apps/tools/podbump/ks.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/flux/apps.yaml (1)

- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/flux/config/cluster.yaml (2)

- `GitRepository source.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/flux/config/flux.yaml (2)

- `OCIRepository source.toolkit.fluxcd.io/v1`
- `Kustomization kustomize.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/1password.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/actions-runner-controller.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/backube.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/bjw-s.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/cnpg.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/controlplaneio.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/democratic-csi.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/dex.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/external-secrets.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/grafana-operator.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/immich-charts.yaml (1)

- `OCIRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/ingress-nginx.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/jetstack.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/piraeus.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

kubernetes/flux/repositories/helm/victoria-metrics.yaml (1)

- `HelmRepository source.toolkit.fluxcd.io/v1`

templates/kubernetes/volsync/replication/externalsecret.yaml (1)

- `ExternalSecret external-secrets.io/v1`

kustomize (1)

kubernetes/bootstrap/kustomization.yaml (1)

- `fluxcd/flux2 v2.9.2` → [Updates: `v2.9.5`]

mise (1)

.mise/config.toml (13)

- `deno 2.9.6` → [Updates: `2.9.7`]
- `flux2 2.9.2` → [Updates: `2.9.5`]
- `go 1.27.1`
- `go:github.com/cloudnative-pg/cloudnative-pg/cmd/kubectl-cnpg v1.30.0`
- `go:github.com/home-operations/flate/cmd/flate v0.6.5`
- `helm 4.3.0`
- `jq 1.8.2`
- `kubectl 1.37.0`
- `node 24.21.0`
- `pnpm 11.24.0` → [Updates: `11.26.0`, `12.4.1`]
- `usage 6.8.0` → [Updates: `6.9.0`]
- `uv 0.12.13` → [Updates: `0.12.15`]
- `yamlfmt 0.21.0`

npm (4)

actions/sticky-comment/package.json (5)

- `@actions/core ^3.0.1`
- `@actions/github ^9.1.1`
- `@types/node ^24.13.3` → [Updates: `^24.13.4`]
- `@vercel/ncc ^0.44.0` → [Updates: `^0.45.0`]
- `typescript ^6.0.3` → [Updates: `^7.0.0`]

package.json (1)

- `pnpm 11.24.0` → [Updates: `11.26.0`, `12.4.1`]

pnpm-workspace.yaml

scripts/package.json (18)

- `@eslint/eslintrc ^3.2.0` → [Updates: `^3.2.0`]
- `@eslint/js ^10.0.0`
- `@immich/sdk ^3.0.0` → [Updates: `^3.0.0`]
- `@types/luxon ^3.4.2`
- `@types/node ^24.13.3` → [Updates: `^24.13.4`]
- `@typescript-eslint/eslint-plugin ^8.24.0` → [Updates: `^8.24.0`]
- `@typescript-eslint/parser ^8.24.0` → [Updates: `^8.24.0`]
- `eslint ^10.0.0` → [Updates: `^10.0.0`]
- `eslint-config-prettier ^10.0.1`
- `eslint-plugin-prettier ^5.2.3`
- `eslint-plugin-unicorn ^73.0.0` → [Updates: `^74.0.0`]
- `luxon ^3.5.0`
- `prettier ^3.5.0` → [Updates: `^3.5.0`]
- `prettier-plugin-organize-imports ^4.1.0`
- `tsx ^4.19.4` → [Updates: `^4.19.4`]
- `typescript ^6.0.0` → [Updates: `^7.0.0`]
- `typescript-eslint ^8.24.0` → [Updates: `^8.24.0`]
- `globals ^17.1.0` → [Updates: `^17.1.0`]

renovate-config (1)

renovate.json

terraform (11)

tf/shared/modules/cloudflare-pages-project/config.tf (2)

- `cloudflare ~>4.46` → [Updates: `~> 5.0`]
- `hashicorp/terraform ~> 1.7`

tf/shared/modules/cloudflare-pages-project/project.tf

tf/shared/modules/cloudflare-pages-project/providers.tf

tf/shared/modules/cloudflare-pages/config.tf (2)

- `cloudflare ~>4.46` → [Updates: `~> 5.0`]
- `hashicorp/terraform ~> 1.7`

tf/shared/modules/cloudflare-pages/domain.tf

tf/shared/modules/cloudflare-pages/providers.tf

tf/shared/modules/cloudflare-r2-bucket/config.tf (3)

- `cloudflare ~> 4.46` → [Updates: `~> 5.0`]
- `onepassword ~> 3.0`
- `hashicorp/terraform ~> 1.7`

tf/shared/modules/grafana/config.tf (2)

- `grafana >= 3.22, < 5.0`
- `hashicorp/terraform ~> 1.7`

tf/shared/modules/secrets/generated/config.tf (2)

- `onepassword ~> 3.0`
- `random 3.9.0` → [Updates: `3.9.1`]

tf/shared/modules/secrets/github-app/config.tf (1)

- `onepassword ~> 3.0`

tf/shared/modules/secrets/manual/config.tf (1)

- `onepassword ~> 3.0`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Read the linked Renovate Dependency Dashboard documentation first, then inspect the listed Dockerfiles, Kubernetes manifests, Terraform updates, and GitHub Actions workflows. The dashboard includes many pending updates, existing pull requests, and blocked items; the issue does not define a single change or clear completion condition.

Written by the indexing model from the issue text.