Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): pin dependencies #353

Merged
merged 1 commit into from
Nov 30, 2024
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 30, 2024

This PR contains the following updates:

Package Update Change
docker.io/cloudflare/cloudflared pinDigest -> 665dda6
ghcr.io/onedr0p/bazarr (source) pinDigest -> c0bf914
ghcr.io/qdm12/gluetun pinDigest -> 6a8058e
jellyfin/jellyfin (source) pinDigest -> 17c3a8d
rancher/k3s-upgrade pinDigest -> 70a238f
registry.k8s.io/kubectl pinDigest -> f5735da

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Nov 30, 2024

--- kubernetes/raspberry/media/bazarr/app Kustomization: flux-system/bazarr HelmRelease: media/bazarr

+++ kubernetes/raspberry/media/bazarr/app Kustomization: flux-system/bazarr HelmRelease: media/bazarr

@@ -35,13 +35,13 @@

         containers:
           app:
             env:
               TZ: Europe/Stockholm
             image:
               repository: ghcr.io/onedr0p/bazarr
-              tag: 1.4.5
+              tag: 1.4.5@sha256:c0bf91443c32f3978777b4ddd2732908f51b157bbe00cd3259b23f7716bb4af7
             probes:
               liveness:
                 enabled: true
               readiness:
                 enabled: true
               startup:
--- kubernetes/raspberry/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller

+++ kubernetes/raspberry/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller

@@ -38,13 +38,13 @@

                   fieldRef:
                     fieldPath: metadata.namespace
               SYSTEM_UPGRADE_CONTROLLER_THREADS: 2
               SYSTEM_UPGRADE_JOB_ACTIVE_DEADLINE_SECONDS: 900
               SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT: 99
               SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY: IfNotPresent
-              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.31.3
+              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.31.3@sha256:f5735dae787c62a225536142b5eb0fbfd5515f7a80fcf2b3a5035401b681d1db
               SYSTEM_UPGRADE_JOB_PRIVILEGED: true
               SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH: 900
               SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL: 1h
             image:
               repository: docker.io/rancher/system-upgrade-controller
               tag: v0.14.2@sha256:3cdbfdd90f814702cefb832fc4bdb09ea93865a4d06c6bafd019d1dc6a9f34c9
--- kubernetes/raspberry/media/qbittorrent/app Kustomization: flux-system/qbittorrent HelmRelease: media/qbittorrent

+++ kubernetes/raspberry/media/qbittorrent/app Kustomization: flux-system/qbittorrent HelmRelease: media/qbittorrent

@@ -72,13 +72,13 @@

               FIREWALL_OUTBOUND_SUBNETS: 10.69.0.0/16
             envFrom:
             - secretRef:
                 name: qbittorrent-secret
             image:
               repository: ghcr.io/qdm12/gluetun
-              tag: v3.39.1
+              tag: v3.39.1@sha256:6a8058e626763cbf735ac2f78c774dbb24fec2490bd9d9f7d67e22592cb4a991
             securityContext:
               capabilities:
                 add:
                 - NET_ADMIN
         pod:
           nodeSelector:
--- kubernetes/raspberry/system-upgrade/k3s/app Kustomization: flux-system/system-upgrade-k3s Plan: system-upgrade/controllers

+++ kubernetes/raspberry/system-upgrade/k3s/app Kustomization: flux-system/system-upgrade-k3s Plan: system-upgrade/controllers

@@ -30,9 +30,9 @@

   - effect: NoExecute
     key: node-role.kubernetes.io/etcd
     operator: Exists
   - key: CriticalAddonsOnly
     operator: Exists
   upgrade:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
   version: v1.31.2+k3s1
 
--- kubernetes/raspberry/system-upgrade/k3s/app Kustomization: flux-system/system-upgrade-k3s Plan: system-upgrade/workers

+++ kubernetes/raspberry/system-upgrade/k3s/app Kustomization: flux-system/system-upgrade-k3s Plan: system-upgrade/workers

@@ -18,12 +18,12 @@

     - key: node-role.kubernetes.io/control-plane
       operator: DoesNotExist
   prepare:
     args:
     - prepare
     - controllers
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
   serviceAccountName: system-upgrade
   upgrade:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
   version: v1.31.2+k3s1
 
--- kubernetes/raspberry/network/cloudflared/app Kustomization: flux-system/cloudflared HelmRelease: network/cloudflared

+++ kubernetes/raspberry/network/cloudflared/app Kustomization: flux-system/cloudflared HelmRelease: network/cloudflared

@@ -51,13 +51,13 @@

               TUNNEL_METRICS: 0.0.0.0:8080
               TUNNEL_ORIGIN_ENABLE_HTTP2: true
               TUNNEL_POST_QUANTUM: true
               TUNNEL_TRANSPORT_PROTOCOL: quic
             image:
               repository: docker.io/cloudflare/cloudflared
-              tag: 2024.11.1
+              tag: 2024.11.1@sha256:665dda65335e35a782ed9319aa63e8404f88b34d2644d30adf3e91253604ffa0
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3

Copy link

github-actions bot commented Nov 30, 2024

--- HelmRelease: media/jellyfin Deployment: media/jellyfin

+++ HelmRelease: media/jellyfin Deployment: media/jellyfin

@@ -47,13 +47,13 @@

         - name: JELLYFIN_FFmpeg__probesize
           value: 5e+07
         - name: JELLYFIN_PublishedServerUrl
           value: jellyfin...PLACEHOLDER_SECRET_DOMAIN..
         - name: TZ
           value: null
-        image: jellyfin/jellyfin:10.10.3
+        image: jellyfin/jellyfin:10.10.3@sha256:17c3a8d9dddb97789b5f37112840ebf96566442c14d4754193a6c2eb154bc221
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /health
             port: 8096
           initialDelaySeconds: 0
--- HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

+++ HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

@@ -72,13 +72,13 @@

           value: '900'
         - name: SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT
           value: '99'
         - name: SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY
           value: IfNotPresent
         - name: SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE
-          value: registry.k8s.io/kubectl:v1.31.3
+          value: registry.k8s.io/kubectl:v1.31.3@sha256:f5735dae787c62a225536142b5eb0fbfd5515f7a80fcf2b3a5035401b681d1db
         - name: SYSTEM_UPGRADE_JOB_PRIVILEGED
           value: 'true'
         - name: SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH
           value: '900'
         - name: SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL
           value: 1h

Copy link

github-actions bot commented Nov 30, 2024

--- HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

+++ HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

@@ -72,13 +72,13 @@

           value: '900'
         - name: SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT
           value: '99'
         - name: SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY
           value: IfNotPresent
         - name: SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE
-          value: registry.k8s.io/kubectl:v1.31.3
+          value: registry.k8s.io/kubectl:v1.31.3@sha256:f5735dae787c62a225536142b5eb0fbfd5515f7a80fcf2b3a5035401b681d1db
         - name: SYSTEM_UPGRADE_JOB_PRIVILEGED
           value: 'true'
         - name: SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH
           value: '900'
         - name: SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL
           value: 1h
--- HelmRelease: media/qbittorrent Deployment: media/qbittorrent

+++ HelmRelease: media/qbittorrent Deployment: media/qbittorrent

@@ -106,13 +106,13 @@

           value: '8080'
         - name: FIREWALL_OUTBOUND_SUBNETS
           value: 10.69.0.0/16
         envFrom:
         - secretRef:
             name: qbittorrent-secret
-        image: ghcr.io/qdm12/gluetun:v3.39.1
+        image: ghcr.io/qdm12/gluetun:v3.39.1@sha256:6a8058e626763cbf735ac2f78c774dbb24fec2490bd9d9f7d67e22592cb4a991
         name: gluetun
         securityContext:
           capabilities:
             add:
             - NET_ADMIN
       volumes:
--- HelmRelease: network/cloudflared Deployment: network/cloudflared

+++ HelmRelease: network/cloudflared Deployment: network/cloudflared

@@ -62,13 +62,13 @@

         - name: TUNNEL_ORIGIN_ENABLE_HTTP2
           value: 'true'
         - name: TUNNEL_POST_QUANTUM
           value: 'true'
         - name: TUNNEL_TRANSPORT_PROTOCOL
           value: quic
-        image: docker.io/cloudflare/cloudflared:2024.11.1
+        image: docker.io/cloudflare/cloudflared:2024.11.1@sha256:665dda65335e35a782ed9319aa63e8404f88b34d2644d30adf3e91253604ffa0
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /ready
             port: 8080
           initialDelaySeconds: 0
--- HelmRelease: media/bazarr Deployment: media/bazarr

+++ HelmRelease: media/bazarr Deployment: media/bazarr

@@ -43,13 +43,13 @@

       nodeSelector:
         disktype: ssd
       containers:
       - env:
         - name: TZ
           value: Europe/Stockholm
-        image: ghcr.io/onedr0p/bazarr:1.4.5
+        image: ghcr.io/onedr0p/bazarr:1.4.5@sha256:c0bf91443c32f3978777b4ddd2732908f51b157bbe00cd3259b23f7716bb4af7
         livenessProbe:
           failureThreshold: 3
           initialDelaySeconds: 0
           periodSeconds: 10
           tcpSocket:
             port: 6767

Copy link

--- kubernetes/turing/media/jellyfin/app Kustomization: flux-system/jellyfin HelmRelease: media/jellyfin

+++ kubernetes/turing/media/jellyfin/app Kustomization: flux-system/jellyfin HelmRelease: media/jellyfin

@@ -38,13 +38,13 @@

               JELLYFIN_FFmpeg__analyzeduration: 50000000
               JELLYFIN_FFmpeg__probesize: 50000000
               JELLYFIN_PublishedServerUrl: jellyfin...PLACEHOLDER_SECRET_DOMAIN..
               TZ: null
             image:
               repository: jellyfin/jellyfin
-              tag: 10.10.3
+              tag: 10.10.3@sha256:17c3a8d9dddb97789b5f37112840ebf96566442c14d4754193a6c2eb154bc221
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3
--- kubernetes/turing/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller

+++ kubernetes/turing/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller

@@ -38,13 +38,13 @@

                   fieldRef:
                     fieldPath: metadata.namespace
               SYSTEM_UPGRADE_CONTROLLER_THREADS: 2
               SYSTEM_UPGRADE_JOB_ACTIVE_DEADLINE_SECONDS: 900
               SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT: 99
               SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY: IfNotPresent
-              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.31.3
+              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.31.3@sha256:f5735dae787c62a225536142b5eb0fbfd5515f7a80fcf2b3a5035401b681d1db
               SYSTEM_UPGRADE_JOB_PRIVILEGED: true
               SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH: 900
               SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL: 1h
             image:
               repository: docker.io/rancher/system-upgrade-controller
               tag: v0.14.2@sha256:3cdbfdd90f814702cefb832fc4bdb09ea93865a4d06c6bafd019d1dc6a9f34c9
--- kubernetes/turing/system-upgrade/k3s/app Kustomization: flux-system/system-upgrade-k3s Plan: system-upgrade/controllers

+++ kubernetes/turing/system-upgrade/k3s/app Kustomization: flux-system/system-upgrade-k3s Plan: system-upgrade/controllers

@@ -30,9 +30,9 @@

   - effect: NoExecute
     key: node-role.kubernetes.io/etcd
     operator: Exists
   - key: CriticalAddonsOnly
     operator: Exists
   upgrade:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
   version: v1.31.2+k3s1
 
--- kubernetes/turing/system-upgrade/k3s/app Kustomization: flux-system/system-upgrade-k3s Plan: system-upgrade/workers

+++ kubernetes/turing/system-upgrade/k3s/app Kustomization: flux-system/system-upgrade-k3s Plan: system-upgrade/workers

@@ -18,12 +18,12 @@

     - key: node-role.kubernetes.io/control-plane
       operator: DoesNotExist
   prepare:
     args:
     - prepare
     - controllers
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
   serviceAccountName: system-upgrade
   upgrade:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
   version: v1.31.2+k3s1
 

@renovate renovate bot force-pushed the renovate/pin-dependencies branch from 54da11b to 640d994 Compare November 30, 2024 12:17
@renovate renovate bot force-pushed the renovate/pin-dependencies branch from 640d994 to 9e3073e Compare November 30, 2024 12:18
Copy link
Owner

@willianpaixao willianpaixao left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@willianpaixao willianpaixao merged commit 6fe81f5 into main Nov 30, 2024
7 checks passed
@willianpaixao willianpaixao deleted the renovate/pin-dependencies branch November 30, 2024 12:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant