Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update alpine docker tag to v3.23
• chore(deps): update docker/metadata-action action to v5.10.0
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• chore(deps): update ghcr.io/tailscale/tailscale docker tag to v1.92.5
• chore(deps): update registry.k8s.io/kas-network-proxy/proxy-agent docker tag to v0.34.0
• chore(deps): update registry.k8s.io/kas-network-proxy/proxy-server docker tag to v0.34.0
• chore(deps): update terraform github to v6.9.1
• chore(deps): update actions/checkout action to v6
• chore(deps): update terraform kubernetes to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency imageupdateautomation to image.toolkit.fluxcd.io/v1
• chore(deps): update docker.io/syncthing/syncthing docker tag to v2.0.13
• chore(deps): update terraform cloudflare to v4.52.5
• chore(deps): update cloudflare/cloudflared docker tag to v2025.11.1
• chore(deps): update docker/login-action action to v3.6.0
• chore(deps): update ghcr.io/juanfont/headscale docker tag to v0.27.1
• chore(deps): update terraform hcloud to v1.58.0
• chore(deps): update terraform random to v3.7.2
• chore(deps): update terraform tailscale to v0.25.0
• chore(deps): update terraform cloudflare to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

images/bootie/Dockerfile (2)

• alpine 3.22 → [Updates: 3.23]
• alpine 3.22 → [Updates: 3.23]

flux (72)

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2025091700
• ghcr.io/samcday/infra-bootie 2025091700

hub/cluster/cert-manager/cert-manager.yaml

hub/cluster/cert-manager/vpas.yaml

hub/cluster/cloud-cluster/cluster-autoscaler.yaml

hub/cluster/cloud-cluster/control-plane.yaml

hub/cluster/cloud-cluster/csi-driver.yaml

hub/cluster/cloud-cluster/descheduler.yaml

hub/cluster/cloud-cluster/external-dns.yaml

hub/cluster/cloud-cluster/hccm.yaml

hub/cluster/cloud-cluster/kube-system/cilium.yaml

hub/cluster/cloud-cluster/kube-system/coredns.yaml

hub/cluster/cloud-cluster/kube-system/prometheus-operator-crds.yaml

hub/cluster/cloud-cluster/kustomizations.yaml

hub/cluster/cloud-cluster/vpas.yaml

hub/cluster/cnpg-system/cloudnative-pg-operator.yaml

hub/cluster/external-dns/external-dns.yaml

hub/cluster/fedora-mobility-ci/cluster-autoscaler.yaml

hub/cluster/fedora-mobility-ci/control-plane.yaml

hub/cluster/fedora-mobility-ci/csi-driver.yaml

hub/cluster/fedora-mobility-ci/descheduler.yaml

hub/cluster/fedora-mobility-ci/external-dns.yaml

hub/cluster/fedora-mobility-ci/hccm.yaml

hub/cluster/fedora-mobility-ci/infra-config.yaml

hub/cluster/fedora-mobility-ci/kube-system/cilium.yaml

hub/cluster/fedora-mobility-ci/kube-system/coredns.yaml

hub/cluster/fedora-mobility-ci/kube-system/prometheus-operator-crds.yaml

hub/cluster/fedora-mobility-ci/kustomizations.yaml

hub/cluster/fedora-mobility-ci/vpas.yaml

hub/cluster/flux-system/git-repos.yaml

hub/cluster/flux-system/helm-repos.yaml

hub/cluster/flux-system/image-policies.yaml

hub/cluster/flux-system/image-repositories.yaml

hub/cluster/flux-system/kustomizations.yaml

hub/cluster/flux-system/namespaces.yaml

hub/cluster/flux-system/tofu-controller.yaml

hub/cluster/headscale/helm-release.yaml (1)

• ghcr.io/juanfont/headscale v0.26.1 → [Updates: v0.27.1]

hub/cluster/headscale/vpas.yaml

hub/cluster/ilumbaclusta/cilium.yaml

hub/cluster/ilumbaclusta/control-plane.yaml

hub/cluster/ilumbaclusta/coredns.yaml

hub/cluster/ilumbaclusta/vpas.yaml

hub/cluster/ingress-nginx/internal.yaml

hub/cluster/ingress-nginx/public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1]

hub/cluster/kube-system/snapshot-controller.yaml

hub/cluster/kube-system/tailscale-node-controller.yaml

hub/cluster/kube-system/vpa.yaml

hub/cluster/kube-system/vpas.yaml

hub/cluster/monitoring/grafana.yaml

hub/cluster/monitoring/kube-prometheus-stack.yaml

hub/cluster/monitoring/vpas.yaml

hub/cluster/openebs/openebs.yaml

hub/cluster/prometheus-operator/prometheus-operator.yaml

hub/cluster/rook-ceph/cluster.yaml

hub/cluster/rook-ceph/operator.yaml

hub/cluster/simonet/cert-manager.yaml

hub/cluster/simonet/cilium.yaml

hub/cluster/simonet/cloudflare-token.yaml

hub/cluster/simonet/control-plane.yaml

hub/cluster/simonet/coredns.yaml

hub/cluster/simonet/external-dns.yaml

hub/cluster/simonet/ingress-nginx-internal.yaml

hub/cluster/simonet/ingress-nginx-public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1]

hub/cluster/simonet/metrics-server.yaml

hub/cluster/simonet/namespaces.yaml

hub/cluster/simonet/prometheus-operator-crds.yaml

hub/cluster/simonet/rook-ceph.yaml

hub/cluster/simonet/snapshot-controller.yaml

hub/cluster/simonet/subnet-router.yaml

hub/cluster/simonet/syncthing.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.0.13]

hub/cluster/simonet/tailscale-node-controller.yaml

hub/cluster/simonet/vpas.yaml

hub/cluster/syncthing/instance.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.0.13]

github-actions (1)

.github/workflows/images.yaml (5)

• actions/checkout v5 → [Updates: v6]
• docker/setup-buildx-action v3.11.1 → [Updates: v3.12.0]
• docker/login-action v3.5.0 → [Updates: v3.6.0]
• docker/metadata-action v5.8.0 → [Updates: v5.10.0]
• docker/build-push-action v6.18.0

helm-values (14)

charts/k8s-control-plane/values.yaml (2)

• registry.k8s.io/kas-network-proxy/proxy-agent v0.33.0 → [Updates: v0.34.0]
• registry.k8s.io/kas-network-proxy/proxy-server v0.33.0 → [Updates: v0.34.0]

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2025091700
• ghcr.io/samcday/infra-bootie 2025091700

hub/cluster/cloud-cluster/ts-apiserver.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.92.5]

hub/cluster/fedora-mobility-ci/ts-apiserver.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.92.5]

hub/cluster/flux-system/image-repositories.yaml

hub/cluster/headscale/helm-release.yaml (1)

• ghcr.io/juanfont/headscale v0.26.1 → [Updates: v0.27.1]

hub/cluster/headscale/subnet-router.yaml (1)

• ghcr.io/tailscale/tailscale v1.84.3 → [Updates: v1.92.5]

hub/cluster/ilumbaclusta/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2025091700
• ghcr.io/samcday/infra-bootie 2025091700

hub/cluster/ingress-nginx/public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1]

hub/cluster/kube-system/node-tailscale.yaml

hub/cluster/simonet/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2025091700
• ghcr.io/samcday/infra-bootie 2025091700

hub/cluster/simonet/ingress-nginx-public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1]

hub/cluster/simonet/syncthing.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.0.13]

hub/cluster/syncthing/instance.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.0.13]

kubernetes (97)

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2025091700
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/bootie/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/bootie/rbac.yaml (2)

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/cert-manager/cert-manager.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cert-manager/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/cert-manager/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/cluster-autoscaler.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/csi-driver.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/descheduler.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/hccm.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/cilium.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/prometheus-operator-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/cloud-cluster/kustomizations.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/ts-apiserver.yaml (4)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.92.5]
• Deployment apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/cloud-cluster/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cnpg-system/catalogs.yaml (1)

• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cnpg-system/catalogs/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/cnpg-system/cloudnative-pg-operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cnpg-system/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/external-dns/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/cluster-autoscaler.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/csi-driver.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/descheduler.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/hccm.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/infra-config.yaml (2)

• GitRepository source.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/fedora-mobility-ci/kube-system/cilium.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/kube-system/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/kube-system/prometheus-operator-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/fedora-mobility-ci/kustomizations.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/fedora-mobility-ci/ts-apiserver.yaml (4)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.92.5]
• Deployment apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/fedora-mobility-ci/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/git-repos.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/helm-repos.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-policies.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-repositories.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-update-automation.yaml (1)

• ImageUpdateAutomation image.toolkit.fluxcd.io/v1beta2 → [Updates: image.toolkit.fluxcd.io/v1]

hub/cluster/flux-system/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/flux-system/kustomizations.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/tofu-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/webhook.yaml (2)

• Ingress networking.k8s.io/v1
• Receiver notification.toolkit.fluxcd.io/v1

hub/cluster/headscale/helm-release.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/headscale/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/headscale/subnet-router.yaml (4)

• ghcr.io/tailscale/tailscale v1.84.3 → [Updates: v1.92.5]
• StatefulSet apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/headscale/tofu.yaml (2)

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/headscale/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/bootie.yaml (3)

• ghcr.io/samcday/infra-bootie 2025091700
• ghcr.io/samcday/infra-bootie 2025091700
• Deployment apps/v1

hub/cluster/ilumbaclusta/cilium.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/ilumbaclusta/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ingress-nginx/internal.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ingress-nginx/public.yaml (2)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1]
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/node-tailscale.yaml (1)

• DaemonSet apps/v1

hub/cluster/kube-system/reloader.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/snapshot-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/tailscale-node-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/tofu.yaml (1)

• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/kube-system/vpa.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/grafana.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/kube-prometheus-stack.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/monitoring/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/openebs/openebs.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/prometheus-operator/prometheus-operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/rook-ceph/cluster.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/rook-ceph/operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/bootie.yaml (3)

• ghcr.io/samcday/infra-bootie 2025091700
• ghcr.io/samcday/infra-bootie 2025091700
• Deployment apps/v1

hub/cluster/simonet/cert-manager.yaml (3)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/cilium.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/cloudflare-token.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/ingress-nginx-internal.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/ingress-nginx-public.yaml (2)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1]
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/kustomization.yaml (1)

• Kustomization kustomize.config.k8s.io/v1beta1

hub/cluster/simonet/metrics-server.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/prometheus-operator-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/rook-ceph.yaml (3)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/snapshot-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/subnet-router.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/syncthing.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/tailscale-node-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/syncthing/instance.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/tailscale/tailscale-operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

terraform (5)

hub/cluster/cloud-cluster/main.tf (3)

• cloudflare 4.52.4 → [Updates: 4.52.5, 5.15.0]
• hcloud 1.52.0 → [Updates: 1.58.0]
• random 3.7.2

hub/cluster/fedora-mobility-ci/main.tf (3)

• cloudflare 4.52.4 → [Updates: 4.52.5, 5.15.0]
• hcloud 1.52.0 → [Updates: 1.58.0]
• random 3.7.2

hub/cluster/headscale/main.tf (2)

• headscale 0.4.2
• kubernetes 2.38.0 → [Updates: 3.0.1]

hub/cluster/simonet/main.tf (2)

• cloudflare 4.38.0 → [Updates: 4.52.5, 5.15.0]
• random 3.6.2 → [Updates: 3.7.2]

hub/tofu/main.tf (6)

• cloudflare 4.52.4 → [Updates: 4.52.5, 5.15.0]
• dmsnitch 0.1.5
• github 6.6.0 → [Updates: 6.9.1]
• kubernetes 2.38.0 → [Updates: 3.0.1]
• random 3.7.2
• tailscale 0.21.1 → [Updates: 0.25.0]

---

• Check this box to trigger a request for Renovate to run again on this repository