chore(deps): update all non-major dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ on:
 jobs:
   ci-optimization:
     name: CI optimization
-    uses: dargmuesli/github-actions/.github/workflows/ci-optimization.yml@661e39fe1c9e484d94c6a5a9d4c9946d57c41771 # 5.1.0
+    uses: dargmuesli/github-actions/.github/workflows/ci-optimization.yml@d8fbc998656a0a3476bfdb091c216c3cf78cdc94 # 5.1.1
     permissions:
       pull-requests: read
   build:
@@ -47,7 +47,7 @@ jobs:
   release-semantic:
     needs: build
     name: Semantic Release
-    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@661e39fe1c9e484d94c6a5a9d4c9946d57c41771 # 5.1.0
+    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@d8fbc998656a0a3476bfdb091c216c3cf78cdc94 # 5.1.1
     permissions:
       contents: write
       id-token: write

.github/workflows/release-schedule.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   release-schedule:
     name: "Release: Scheduled"
-    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@661e39fe1c9e484d94c6a5a9d4c9946d57c41771 # 5.1.0
+    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@d8fbc998656a0a3476bfdb091c216c3cf78cdc94 # 5.1.1
     permissions:
       contents: read
     secrets:

src/development/elasticsearch/compose.yaml

@@ -18,7 +18,7 @@ services:
       ES_JAVA_OPTS: -Xms1g -Xmx1g
       KEYSTORE_PASSWORD_FILE: /run/secrets/elasticsearch-keystore-password
       network.publish_host: elasticsearch
-    image: elasticsearch:8.19.12
+    image: elasticsearch:8.19.13
     secrets:
       - source: elasticsearch-keystore-password
         uid: "1000"

src/development/grafana/compose.yaml

@@ -34,7 +34,7 @@ services:
       GF_SECURITY_ADMIN_PASSWORD__FILE: /run/secrets/grafana-admin-password
       GF_SECURITY_ADMIN_USER__FILE: /run/secrets/grafana-admin-user
       GF_SERVER_ROOT_URL: https://grafana.${STACK_DOMAIN}/
-    image: grafana/grafana:12.4.1
+    image: grafana/grafana:12.4.2
     secrets:
       - grafana-admin-email
       - grafana-admin-password

src/development/portainer/compose.yaml

@@ -21,7 +21,7 @@ services:
         constraints:
           - node.role == manager
       replicas: 1
-    image: portainer/portainer-ce:2.39.0-alpine
+    image: portainer/portainer-ce:2.40.0-alpine
     secrets:
       - portainer-admin-password
     volumes:
@@ -35,7 +35,7 @@ services:
       placement:
         constraints:
           - node.platform.os == linux
-    image: portainer/agent:2.39.0
+    image: portainer/agent:2.40.0
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - /var/lib/docker/volumes:/var/lib/docker/volumes

src/development/prometheus/compose.yaml

@@ -12,7 +12,7 @@ services:
         - traefik.http.routers.prometheus-secure.rule=Host(`prometheus.${STACK_DOMAIN}`)
         - traefik.http.routers.prometheus-secure.tls.options=mintls13@file # dargstack:dev-only
         - traefik.http.services.prometheus.loadbalancer.server.port=9090
-    image: prom/prometheus:v3.10.0
+    image: prom/prometheus:v3.11.0
     volumes:
       - ./configurations/prometheus.yaml:/etc/prometheus/prometheus.yml:ro
       - prometheus-data:/prometheus

src/development/redis/compose.yaml

@@ -4,7 +4,7 @@ services:
     deploy:
       labels:
         - dargstack.profiles=zammad
-    image: redis:8.6.1-alpine
+    image: redis:8.6.2-alpine
     volumes:
       - redis-data:/data
 volumes:

src/development/redpanda/compose.yaml

@@ -18,7 +18,7 @@ services:
     #   timeout: 10s
     #   retries: 3
     #   start_period: 10s
-    image: redpandadata/redpanda:v25.3.10
+    image: redpandadata/redpanda:v25.3.13
     volumes:
       - redpanda-data:/var/lib/redpanda/data
   redpanda-console:
@@ -36,7 +36,7 @@ services:
         - traefik.http.services.redpanda.loadbalancer.server.port=8080
     environment:
       CONFIG_FILEPATH: /srv/app/redpanda-config.yaml
-    image: redpandadata/console:v3.5.3
+    image: redpandadata/console:v3.7.0
     volumes:
       - ./configurations/config.yaml:/srv/app/redpanda-config.yaml:ro
 volumes:

src/development/traefik/compose.yaml

@@ -30,7 +30,7 @@ services:
       placement:
         constraints:
           - node.role == manager
-    image: traefik:v3.6.10
+    image: traefik:v3.6.12
     ports: # dargstack:dev-only
       - mode: host # dargstack:dev-only
         protocol: tcp # dargstack:dev-only

src/development/tusd/compose.yaml

@@ -21,7 +21,7 @@ services:
         - traefik.http.services.tusd.loadbalancer.server.port=8080
     environment:
       AWS_REGION: ${TUSD_REGION}
-    image: tusproject/tusd:v2.9.1
+    image: tusproject/tusd:v2.9.2
     secrets:
       - source: tusd-aws
         target: /home/tusd/.aws/credentials