Renovate Dashboard 🤖

[home-ops-runner-sbbh]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• ci(github-action): update action renovatebot/github-action ( v44.2.1 ➔ v44.2.2 )
• ci(github-action): update action ghcr.io/allenporter/flux-local ( v8.0.1 ➔ v8.1.0 )

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency npm:renovate ( 42.66.2 ➔ 42.66.12 )
• feat(container): update image ghcr.io/siderolabs/installer ( v1.11.5 ➔ v1.12.0 )
• feat(container): update kubernetes group ( v1.34.2 ➔ v1.35.0 ) (ghcr.io/siderolabs/kubelet, registry.k8s.io/kube-apiserver, registry.k8s.io/kube-controller-manager, registry.k8s.io/kube-proxy, registry.k8s.io/kube-scheduler)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (7)

.github/workflows/flux-local.yaml (9)

• bjw-s-labs/action-changed-files v0.4.1@1a5aeab1bfa64d0c4e786f501d5a3f1fad4a24da
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ghcr.io/allenporter/flux-local v8.0.1 → [Updates: v8.1.0]
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ghcr.io/allenporter/flux-local v8.0.1 → [Updates: v8.1.0]
• marocchino/sticky-pull-request-comment v2.9.4@773744901bac0e8cbb5a0dc842800d45e9b2b405

.github/workflows/image-pull.yaml (4)

• bjw-s-labs/action-changed-files v0.4.1@1a5aeab1bfa64d0c4e786f501d5a3f1fad4a24da
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ghcr.io/allenporter/flux-local v8.0.1 → [Updates: v8.1.0]

.github/workflows/label-sync.yaml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• EndBug/label-sync v2.3.3@52074158190acb45f3077f9099fea818aa43f97a

.github/workflows/labeler.yaml (2)

• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/labeler v6.0.1@634933edcd8ababfe52f92936142cc22ac488b1b

.github/workflows/renovate.yaml (3)

• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• renovatebot/github-action v44.2.1@f7fad228a053c69a98e24f8e4f6cf40db8f61e08 → [Updates: v44.2.2]

.github/workflows/schemas.yaml (8)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• azure/setup-kubectl v4.0.1@776406bce94f63e41d621b960d78ee25c8b76ede
• astral-sh/setup-uv v7.1.6@681c641aba71e4a1c380be3ab5e12ad51f415867
• actions/setup-python v6.1.0@83679a892e2d95755f2dac6acb0bfd1e9ac5d548
• actions/setup-node v6.1.0@395ad3262231945c25e8478fd5baf05154b1d79f
• cloudflare/wrangler-action v3.14.1@da0e0dfe58b7a431659754fdf3f186c529afbe65
• python 3.14.x
• node 24.x

.github/workflows/tag.yaml (3)

• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd

helmfile (2)

kubernetes/bootstrap/helmfile.d/00-crds.yaml (4)

• mirror.gcr.io/envoyproxy/gateway-helm v1.6.1
• ghcr.io/grafana/helm-charts/grafana-operator 5.21.3
• ghcr.io/home-operations/charts-mirror/keda 2.18.3
• ghcr.io/prometheus-community/charts/kube-prometheus-stack 80.8.0

kubernetes/bootstrap/helmfile.d/01-apps.yaml (7)

• ghcr.io/home-operations/charts-mirror/cilium 1.18.5
• ghcr.io/coredns/charts/coredns 1.45.0
• ghcr.io/spegel-org/helm-charts/spegel 0.6.0
• ghcr.io/external-secrets/charts/external-secrets 1.2.0
• quay.io/jetstack/charts/cert-manager v1.19.2
• ghcr.io/controlplaneio-fluxcd/charts/flux-operator 0.38.1
• ghcr.io/controlplaneio-fluxcd/charts/flux-instance 0.38.1

mise (1)

.mise.toml (18)

• python 3.14.2
• uv 0.9.18
• aqua:cli/cli 2.83.2
• aqua:jqlang/jq 1.8.1
• aqua:mikefarah/yq 4.50.1
• aqua:go-task/task 3.46.4
• aqua:hashicorp/vault 1.21.1
• npm:renovate 42.66.2 → [Updates: 42.66.12]
• aqua:cilium/cilium-cli 0.18.9
• aqua:cloudflare/cloudflared 2025.11.1
• aqua:fluxcd/flux2 2.7.5
• aqua:helm/helm 4.0.4
• aqua:helmfile/helmfile 1.2.3
• aqua:kubernetes-sigs/kustomize 5.7.1
• aqua:kubernetes/kubectl 1.34.0
• aqua:siderolabs/talos 1.12.0
• aqua:yannh/kubeconform 0.7.0
• aqua:kubernetes-sigs/krew 0.4.5

pip_requirements (1)

requirements.txt (7)

• ansible-core ==2.20.1
• ansible-lint ==25.12.2
• netaddr ==1.3.0
• xmltodict ==1.0.2
• bcrypt ==5.0.0
• lxml ==6.0.2
• httpx ==0.28.1

regex (10)

kubernetes/apps/cert-manager/cert-manager/app/grafanadashboard.yaml (1)

• 20842 3

kubernetes/apps/flux-system/flux-instance/app/helmrelease.yaml (1)

• ghcr.io/controlplaneio-fluxcd/flux-operator-manifests v0.38.1

kubernetes/apps/network/cloudflare-tunnel/app/grafanadashboard.yaml (1)

• 17457 6

kubernetes/apps/network/envoy-gateway/app/grafanadashboard.yaml (3)

• 24459 1
• 24457 1
• 24458 1

kubernetes/apps/observability/kube-prometheus-stack/app/grafanadashboard.yaml (9)

• 15761 20
• 15762 22
• 15757 43
• 15758 44
• 15759 40
• 15760 37
• 11454 14
• 1860 42
• 19105 8

kubernetes/apps/rook-ceph/rook-ceph/app/grafanadashboard.yaml (3)

• 2842 18
• 5336 9
• 5342 9

kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml (1)

• ghcr.io/siderolabs/kubelet v1.34.2 → [Updates: v1.35.0]

kubernetes/apps/system-upgrade/tuppr/upgrades/talosupgrade.yaml (1)

• ghcr.io/siderolabs/installer v1.11.5 → [Updates: v1.12.0]

kubernetes/apps/volsync-system/volsync/app/grafanadashboard.yaml (1)

• 21356 3

kubernetes/talos/machineconfig.yaml.j2 (6)

• ghcr.io/siderolabs/kubelet v1.34.2 → [Updates: v1.35.0]
• ghcr.io/siderolabs/installer v1.11.5 → [Updates: v1.12.0]
• registry.k8s.io/kube-apiserver v1.34.2 → [Updates: v1.35.0]
• registry.k8s.io/kube-controller-manager v1.34.2 → [Updates: v1.35.0]
• registry.k8s.io/kube-proxy v1.34.2 → [Updates: v1.35.0]
• registry.k8s.io/kube-scheduler v1.34.2 → [Updates: v1.35.0]

renovate-config-presets (1)

.renovaterc.json5

terraform (11)

terraform/aws/organization/main.tf

terraform/aws/organization/modules/admin-role/versions.tf (2)

• aws ~> 6.0
• hashicorp/terraform >= 1.13.5

terraform/aws/organization/modules/tfc-oidc/main.tf

terraform/aws/organization/providers.tf (4)

• aws ~> 6.0
• tfe ~> 0.72.0
• tls ~> 4.0
• hashicorp/terraform >= 1.13.5

terraform/aws/organization/scp.tf

terraform/aws/organization/tfe.tf

terraform/aws/prod-account/main.tf (4)

• aws ~> 6.0
• cloudflare ~> 5.0
• tfe ~> 0.72.0
• hashicorp/terraform >= 1.13.5

terraform/aws/security-account/main.tf (3)

• aws ~> 6.0
• tfe ~> 0.72.0
• hashicorp/terraform >= 1.13.5

terraform/cloudflare/modules/dns/main.tf (2)

• cloudflare >= 5
• hashicorp/terraform >= 1.13.5

terraform/cloudflare/providers.tf (4)

• cloudflare >= 5
• ovh ~> 2.10.0
• tfe ~> 0.72.0
• hashicorp/terraform >= 1.13.5

terraform/tfe-admin/main.tf (3)

• hashicorp/terraform ~> 1.14.0
• tfe ~> 0.72.0
• hashicorp/terraform >= 1.13.5