Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update docker.io/litestream/litestream docker tag to v0.5.11
• chore(deps): update rust crate clap to v4.6.1
• chore(deps): update alpine docker tag to v3.23
• chore(deps): update docker.io/hetznercloud/hcloud-cloud-controller-manager docker tag to v1.30.1
• chore(deps): update docker.io/python docker tag to v3.14
• chore(deps): update docker/build-push-action action to v6.19.2
• chore(deps): update docker/metadata-action action to v5.10.0
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• chore(deps): update ghcr.io/prymitive/karma docker tag to v0.129
• chore(deps): update ghcr.io/tailscale/tailscale docker tag to v1.96.5
• chore(deps): update registry.k8s.io/kas-network-proxy/proxy-agent docker tag to v0.34.0
• chore(deps): update registry.k8s.io/kas-network-proxy/proxy-server docker tag to v0.34.0
• chore(deps): update rust crate tokio to v1.52.1
• chore(deps): update terraform b2 to v0.12.1
• chore(deps): update terraform github to v6.11.1
• chore(deps): update terraform headscale to v0.5.1
• fix(deps): update rust crate der to 0.8
• fix(deps): update rust crate etcd-client to 0.18
• fix(deps): update rust crate k8s-openapi to 0.27
• fix(deps): update rust crate kube to 0.99
• fix(deps): update rust crate rand to 0.10
• fix(deps): update rust crate rcgen to 0.14
• fix(deps): update rust crate schemars to 0.9
• chore(deps): update actions/checkout action to v6
• chore(deps): update cloudflare/cloudflared docker tag to v2026
• chore(deps): update docker docker tag to v29
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update terraform kubernetes to v3
• fix(deps): update rust crate kube to v3
• fix(deps): update rust crate schemars to v1
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (docker package docker.io/litestream/litestream).

Files affected: hub/cluster/conduit/instance.yaml, hub/cluster/vaultwarden/instance.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency imageupdateautomation to image.toolkit.fluxcd.io/v1
• chore(deps): update docker.io/syncthing/syncthing docker tag to v2.0.16
• chore(deps): update terraform cloudflare to v4.52.7
• chore(deps): update cloudflare/cloudflared docker tag to v2025.11.1
• chore(deps): update docker/login-action action to v3.7.0
• chore(deps): update ghcr.io/juanfont/headscale docker tag to v0.28.0
• chore(deps): update terraform hcloud to v1.60.1
• chore(deps): update terraform random to v3.8.1
• chore(deps): update terraform tailscale to v0.28.0
• chore(deps): update terraform cloudflare to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (3)

apps/etcdetcetc/Cargo.toml (16)

• anyhow 1
• chrono 0.4
• etcd-client 0.15 → [Updates: 0.18]
• futures 0.3
• json-patch 4
• k8s-openapi 0.24 → [Updates: 0.27]
• kube 0.99 → [Updates: 3.0]
• schemars 0.8 → [Updates: 0.9, 1.0]
• serde 1
• serde_json 1
• clap 4 → [Updates: 4]
• rand 0.8 → [Updates: 0.10]
• thiserror 2
• tokio 1 → [Updates: 1]
• tracing 0.1
• tracing-subscriber 0.3

apps/etcdetcetc/xtask/Cargo.toml (2)

• anyhow 1
• clap 4 → [Updates: 4]

credhelper/Cargo.toml (15)

• anyhow 1
• pem 3
• age 0.11
• aes-gcm 0.10
• base64ct 1
• der 0.7 → [Updates: 0.8]
• kube 0.97 → [Updates: 0.99, 3.0]
• k8s-openapi 0.23 → [Updates: 0.27]
• rcgen 0.13 → [Updates: 0.14]
• serde 1
• serde_json 1
• time 0.3
• tokio 1 → [Updates: 1]
• x509-cert 0.2
• zeroize 1

dockerfile (2)

apps/bootie/Dockerfile (2)

• alpine 3.22 → [Updates: 3.23]
• alpine 3.22 → [Updates: 3.23]

apps/etcdetcetc/Dockerfile (1)

• rust 1-alpine

flux (106)

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026040806
• ghcr.io/samcday/infra-bootie 2026040806

hub/cluster/cert-manager/cert-manager.yaml

hub/cluster/cert-manager/vpas.yaml

hub/cluster/cloud-cluster/cluster-autoscaler.yaml

hub/cluster/cloud-cluster/control-plane.yaml

hub/cluster/cloud-cluster/csi-driver.yaml

hub/cluster/cloud-cluster/descheduler.yaml

hub/cluster/cloud-cluster/external-dns.yaml

hub/cluster/cloud-cluster/fastboop.yaml

hub/cluster/cloud-cluster/fastboopmos/fastboopmos-tofu-bucket-vars.yaml

hub/cluster/cloud-cluster/fastboopmos/fastboopmos-tofu.yaml

hub/cluster/cloud-cluster/fastboopmos/fastboopmos.yaml

hub/cluster/cloud-cluster/flux-webhook.yaml

hub/cluster/cloud-cluster/flux.yaml

hub/cluster/cloud-cluster/gibblox.yaml

hub/cluster/cloud-cluster/hccm.yaml

hub/cluster/cloud-cluster/keda-vpas.yaml

hub/cluster/cloud-cluster/keda.yaml

hub/cluster/cloud-cluster/kube-system/alloy.yaml

hub/cluster/cloud-cluster/kube-system/cert-manager.yaml

hub/cluster/cloud-cluster/kube-system/cilium.yaml

hub/cluster/cloud-cluster/kube-system/coredns.yaml

hub/cluster/cloud-cluster/kube-system/external-dns-crds.yaml

hub/cluster/cloud-cluster/kube-system/kube-state-metrics.yaml

hub/cluster/cloud-cluster/kube-system/metrics-server.yaml

hub/cluster/cloud-cluster/kube-system/node-exporter.yaml

hub/cluster/cloud-cluster/kube-system/oidc-rbac.yaml

hub/cluster/cloud-cluster/kube-system/prometheus-operator-crds.yaml

hub/cluster/cloud-cluster/kube-system/vpa.yaml

hub/cluster/cloud-cluster/kube-system/vpas.yaml

hub/cluster/cloud-cluster/kustomizations.yaml

hub/cluster/cloud-cluster/namespaces.yaml

hub/cluster/cloud-cluster/reloader.yaml

hub/cluster/cloud-cluster/rokkitpokkit/rokkitpokkit-tofu-bucket-vars.yaml

hub/cluster/cloud-cluster/rokkitpokkit/rokkitpokkit-tofu-cloudflare-vars.yaml

hub/cluster/cloud-cluster/rokkitpokkit/rokkitpokkit.yaml

hub/cluster/cloud-cluster/tofu-controller.yaml

hub/cluster/cloud-cluster/vpas.yaml

hub/cluster/cloud-cluster/wasmcloud-demo.yaml (1)

• ghcr.io/wasmcloud/components/hello-world 0.1.0

hub/cluster/cloud-cluster/wasmcloud-monitoring.yaml

hub/cluster/cloud-cluster/wasmcloud-vpas.yaml

hub/cluster/cloud-cluster/wasmcloud.yaml

hub/cluster/cnpg-system/cloudnative-pg-operator.yaml

hub/cluster/conduit/instance.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• docker.io/matrixconduit/matrix-conduit latest@sha256:4078e80577ccaaf05290a7bb08badc321a5c44a8c8f5f3dce0fb1ae5a0825e64
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]

hub/cluster/dex/dex.yaml

hub/cluster/edge/bl-controllers.yaml

hub/cluster/edge/bl-crds.yaml

hub/cluster/edge/cluster-autoscaler.yaml

hub/cluster/edge/control-plane.yaml

hub/cluster/edge/kube-system/cilium.yaml

hub/cluster/edge/kube-system/coredns.yaml

hub/cluster/edge/kube-system/metrics-server.yaml

hub/cluster/edge/kustomizations.yaml

hub/cluster/edge/namespaces.yaml

hub/cluster/edge/wasmcloud-demo.yaml (1)

• ghcr.io/wasmcloud/components/hello-world 0.1.0

hub/cluster/edge/wasmcloud-monitoring.yaml

hub/cluster/edge/wasmcloud.yaml

hub/cluster/etcdetcetc/etcdetcetc.yaml (1)

• ghcr.io/samcday/infra-etcdetcetc 2026040806

hub/cluster/external-dns/external-dns.yaml

hub/cluster/flux-system/git-repos.yaml

hub/cluster/flux-system/helm-repos.yaml

hub/cluster/flux-system/image-policies.yaml

hub/cluster/flux-system/image-repositories.yaml

hub/cluster/flux-system/kustomizations.yaml

hub/cluster/flux-system/namespaces.yaml

hub/cluster/flux-system/tofu-controller.yaml

hub/cluster/forgejo/forgejo.yaml

hub/cluster/headscale/helm-release.yaml (1)

• ghcr.io/juanfont/headscale v0.26.1 → [Updates: v0.28.0]

hub/cluster/headscale/vpas.yaml

hub/cluster/heisenbridge/instance.yaml

hub/cluster/ilumbaclusta/cilium.yaml

hub/cluster/ilumbaclusta/control-plane.yaml

hub/cluster/ilumbaclusta/coredns.yaml

hub/cluster/ilumbaclusta/oidc-rbac.yaml

hub/cluster/ilumbaclusta/vpas.yaml

hub/cluster/kube-system/snapshot-controller.yaml

hub/cluster/kube-system/tailscale-node-controller.yaml

hub/cluster/kube-system/vpa.yaml

hub/cluster/kube-system/vpas.yaml

hub/cluster/monitoring/grafana.yaml

hub/cluster/monitoring/kube-prometheus-stack.yaml

hub/cluster/monitoring/vpas.yaml

hub/cluster/openebs/openebs.yaml

hub/cluster/prometheus-operator/prometheus-operator.yaml

hub/cluster/rook-ceph/cluster.yaml

hub/cluster/rook-ceph/operator.yaml

hub/cluster/simonet/cert-manager.yaml

hub/cluster/simonet/cilium.yaml

hub/cluster/simonet/cloudflare-token.yaml

hub/cluster/simonet/control-plane.yaml

hub/cluster/simonet/coredns.yaml

hub/cluster/simonet/external-dns.yaml

hub/cluster/simonet/ingress-nginx-internal.yaml

hub/cluster/simonet/ingress-nginx-public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.3.0]

hub/cluster/simonet/metrics-server.yaml

hub/cluster/simonet/namespaces.yaml

hub/cluster/simonet/oidc-rbac.yaml

hub/cluster/simonet/prometheus-operator-crds.yaml

hub/cluster/simonet/rook-ceph.yaml

hub/cluster/simonet/snapshot-controller.yaml

hub/cluster/simonet/subnet-router.yaml

hub/cluster/simonet/syncthing.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.0.16]

hub/cluster/simonet/tailscale-node-controller.yaml

hub/cluster/simonet/vpas.yaml

hub/cluster/syncthing/instance.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.0.16]

hub/cluster/vaultwarden/instance.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• docker.io/vaultwarden/server 1.35.7-alpine@sha256:9a54dad95452412afb959664dc5d6c3c3ca7c4131116ca7667888b0376320b03
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]

github-actions (2)

.github/workflows/claude.yml (2)

• actions/checkout v4 → [Updates: v6]
• anthropics/claude-code-action v1

.github/workflows/images.yaml (5)

• actions/checkout v5 → [Updates: v6]
• docker/setup-buildx-action v3.11.1 → [Updates: v3.12.0, v4.0.0]
• docker/login-action v3.5.0 → [Updates: v3.7.0, v4.1.0]
• docker/metadata-action v5.8.0 → [Updates: v5.10.0, v6.0.0]
• docker/build-push-action v6.18.0 → [Updates: v6.19.2, v7.1.0]

helm-values (30)

charts/etcdetcetc/values.yaml

charts/hcloud-cloud-controller-manager/values.yaml (1)

• docker.io/hetznercloud/hcloud-cloud-controller-manager v1.23.0 → [Updates: v1.30.1]

charts/k8s-control-plane/values.yaml (2)

• registry.k8s.io/kas-network-proxy/proxy-agent v0.33.0 → [Updates: v0.34.0]
• registry.k8s.io/kas-network-proxy/proxy-server v0.33.0 → [Updates: v0.34.0]

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026040806
• ghcr.io/samcday/infra-bootie 2026040806

hub/cluster/cloud-cluster/control-plane-values.yaml (2)

• registry.k8s.io/kas-network-proxy/proxy-agent v0.32.0 → [Updates: v0.34.0]
• registry.k8s.io/kas-network-proxy/proxy-server v0.32.0 → [Updates: v0.34.0]

hub/cluster/cloud-cluster/forgejo-runners/forgejo-runner-amd64.yaml (2)

• data.forgejo.org/forgejo/runner 12
• docker 27.5-dind → [Updates: 29.4-dind]

hub/cluster/cloud-cluster/forgejo-runners/forgejo-runner-arm64.yaml (2)

• data.forgejo.org/forgejo/runner 12
• docker 27.5-dind → [Updates: 29.4-dind]

hub/cluster/cloud-cluster/metrics-write-proxy.yaml (2)

• quay.io/brancz/kube-rbac-proxy v0.21.2
• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.96.5]

hub/cluster/cloud-cluster/ts-apiserver.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.96.5]

hub/cluster/cloud-cluster/wasmcloud-demo.yaml (1)

• ghcr.io/wasmcloud/components/hello-world 0.1.0

hub/cluster/conduit/instance.yaml (5)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• docker.io/matrixconduit/matrix-conduit latest@sha256:4078e80577ccaaf05290a7bb08badc321a5c44a8c8f5f3dce0fb1ae5a0825e64
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• docker.io/python 3.12-alpine → [Updates: 3.14-alpine]
• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.96.5]

hub/cluster/edge/asg/autoscalinggroups.yaml

hub/cluster/edge/control-plane-values.yaml (2)

• registry.k8s.io/kas-network-proxy/proxy-agent v0.34.0
• registry.k8s.io/kas-network-proxy/proxy-server v0.34.0

hub/cluster/edge/ts-apiserver.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.96.5]

hub/cluster/edge/wasmcloud-demo.yaml (1)

• ghcr.io/wasmcloud/components/hello-world 0.1.0

hub/cluster/etcdetcetc/etcdetcetc.yaml (1)

• ghcr.io/samcday/infra-etcdetcetc 2026040806

hub/cluster/flux-system/image-repositories.yaml

hub/cluster/forgejo/runner-sync-cronjob.yaml (2)

• data.forgejo.org/forgejo/runner 12
• bitnami/kubectl 1.33

hub/cluster/headscale/helm-release.yaml (1)

• ghcr.io/juanfont/headscale v0.26.1 → [Updates: v0.28.0]

hub/cluster/headscale/subnet-router.yaml (1)

• ghcr.io/tailscale/tailscale v1.84.3 → [Updates: v1.96.5]

hub/cluster/heisenbridge/instance.yaml

hub/cluster/ilumbaclusta/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026040806
• ghcr.io/samcday/infra-bootie 2026040806

hub/cluster/ingress-nginx/public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.3.0]

hub/cluster/kube-system/node-tailscale.yaml

hub/cluster/monitoring/karma.yaml (1)

• ghcr.io/prymitive/karma v0.122 → [Updates: v0.129]

hub/cluster/simonet/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026040806
• ghcr.io/samcday/infra-bootie 2026040806

hub/cluster/simonet/ingress-nginx-public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.3.0]

hub/cluster/simonet/syncthing.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.0.16]

hub/cluster/syncthing/instance.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.0.16]

hub/cluster/vaultwarden/instance.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• docker.io/vaultwarden/server 1.35.7-alpine@sha256:9a54dad95452412afb959664dc5d6c3c3ca7c4131116ca7667888b0376320b03
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]

kubernetes (128)

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026040806
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/bootie/rbac.yaml (2)

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/cert-manager/cert-manager.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cert-manager/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/cluster-autoscaler.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/csi-driver.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/descheduler.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/fastboop.yaml (2)

• GitRepository source.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cloud-cluster/fastboopmos/fastboopmos-tofu-bucket-vars.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/fastboopmos/fastboopmos-tofu.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/fastboopmos/fastboopmos.yaml (2)

• GitRepository source.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cloud-cluster/flux-webhook.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/flux.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/forgejo-runners/forgejo-runner-amd64.yaml (2)

• data.forgejo.org/forgejo/runner 12
• docker 27.5-dind → [Updates: 29.4-dind]

hub/cluster/cloud-cluster/forgejo-runners/forgejo-runner-arm64.yaml (2)

• data.forgejo.org/forgejo/runner 12
• docker 27.5-dind → [Updates: 29.4-dind]

hub/cluster/cloud-cluster/gibblox.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/hccm.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/keda-vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/keda.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/alloy.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/cert-manager.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/cilium.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/external-dns-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/kube-state-metrics.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/metrics-server.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/node-exporter.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/oidc-rbac.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/prometheus-operator-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/vpa.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kustomizations.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/metrics-write-proxy.yaml (5)

• quay.io/brancz/kube-rbac-proxy v0.21.2
• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.96.5]
• Deployment apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/cloud-cluster/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/reloader.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/rokkitpokkit/rokkitpokkit-tofu-bucket-vars.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/rokkitpokkit/rokkitpokkit-tofu-cloudflare-vars.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/rokkitpokkit/rokkitpokkit.yaml (2)

• GitRepository source.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cloud-cluster/tofu-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/ts-apiserver.yaml (4)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.96.5]
• Deployment apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/cloud-cluster/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud-demo.yaml (2)

• ghcr.io/wasmcloud/components/hello-world 0.1.0
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud-monitoring.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud-vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cnpg-system/catalogs.yaml (1)

• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cnpg-system/cloudnative-pg-operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/conduit/instance.yaml (9)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• docker.io/python 3.12-alpine → [Updates: 3.14-alpine]
• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.96.5]
• HelmRelease helm.toolkit.fluxcd.io/v2
• CronJob batch/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

hub/cluster/dex/dex.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/asg/autoscalinggroups.yaml

hub/cluster/edge/bl-controllers.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/bl-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/cluster-autoscaler.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/kube-system/cilium.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/kube-system/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/kube-system/metrics-server.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/kustomizations.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/ts-apiserver.yaml (4)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.96.5]
• Deployment apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/edge/wasmcloud-demo.yaml (2)

• ghcr.io/wasmcloud/components/hello-world 0.1.0
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/wasmcloud-monitoring.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/edge/wasmcloud.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/etcdetcetc/etcdetcetc.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/external-dns/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/git-repos.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/helm-repos.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-policies.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-repositories.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-update-automation.yaml (1)

• ImageUpdateAutomation image.toolkit.fluxcd.io/v1beta2 → [Updates: image.toolkit.fluxcd.io/v1]

hub/cluster/flux-system/kustomizations.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/tofu-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/webhook.yaml (1)

• Receiver notification.toolkit.fluxcd.io/v1

hub/cluster/forgejo/forgejo.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/forgejo/runner-sync-cronjob.yaml (3)

• data.forgejo.org/forgejo/runner 12
• bitnami/kubectl 1.33
• CronJob batch/v1

hub/cluster/forgejo/runner-sync-rbac.yaml (2)

• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/headscale/helm-release.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/headscale/subnet-router.yaml (4)

• ghcr.io/tailscale/tailscale v1.84.3 → [Updates: v1.96.5]
• StatefulSet apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/headscale/tofu.yaml (2)

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/headscale/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/heisenbridge/instance.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/bootie.yaml (3)

• ghcr.io/samcday/infra-bootie 2026040806
• ghcr.io/samcday/infra-bootie 2026040806
• Deployment apps/v1

hub/cluster/ilumbaclusta/cilium.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/oidc-rbac.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ingress-nginx/public.yaml (2)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.3.0]
• Deployment apps/v1

hub/cluster/kube-system/node-tailscale.yaml (1)

• DaemonSet apps/v1

hub/cluster/kube-system/reloader.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/snapshot-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/tailscale-node-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/tofu.yaml (1)

• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/kube-system/vpa.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/grafana.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/karma.yaml (2)

• ghcr.io/prymitive/karma v0.122 → [Updates: v0.129]
• Deployment apps/v1

hub/cluster/monitoring/kube-prometheus-stack.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/openebs/openebs.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/prometheus-operator/prometheus-operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/rook-ceph/cluster.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/rook-ceph/operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/bootie.yaml (3)

• ghcr.io/samcday/infra-bootie 2026040806
• ghcr.io/samcday/infra-bootie 2026040806
• Deployment apps/v1

hub/cluster/simonet/cert-manager.yaml (3)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/cilium.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/cloudflare-token.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/ingress-nginx-internal.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/ingress-nginx-public.yaml (2)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.3.0]
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/metrics-server.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/oidc-rbac.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/prometheus-operator-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/rook-ceph.yaml (3)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/snapshot-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/subnet-router.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/syncthing.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/tailscale-node-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/syncthing/instance.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/tailscale/tailscale-operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/vaultwarden/instance.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.11]
• HelmRelease helm.toolkit.fluxcd.io/v2

terraform (4)

hub/cluster/cloud-cluster/main.tf (1)

• hcloud 1.52.0 → [Updates: 1.60.1]

hub/cluster/headscale/main.tf (2)

• headscale 0.4.2 → [Updates: 0.5.1]
• kubernetes 2.38.0 → [Updates: 3.1.0]

hub/cluster/simonet/main.tf (2)

• cloudflare 4.38.0 → [Updates: 4.52.7, 5.18.0]
• random 3.6.2 → [Updates: 3.8.1]

hub/tofu/main.tf (7)

• b2 0.10.0 → [Updates: 0.12.1]
• cloudflare 4.52.4 → [Updates: 4.52.7, 5.18.0]
• dmsnitch 0.1.5
• github 6.6.0 → [Updates: 6.11.1]
• kubernetes 2.38.0 → [Updates: 3.1.0]
• random 3.7.2 → [Updates: 3.8.1]
• tailscale 0.21.1 → [Updates: 0.28.0]

---

• Check this box to trigger a request for Renovate to run again on this repository