chore(deps): update helm release openbao to v0.12.0

helm/external-secrets/kustomization.yaml

@@ -7,5 +7,5 @@ helmCharts:
       enabled: false # default, bitwarden-sdk-server doesn't work with vaultwarden (https://github.com/external-secrets/bitwarden-sdk-server/issues/18)
   namespace: external-secrets
   releaseName: external-secrets
-  version: 0.16.1
+  version: 0.16.0
   repo: https://charts.external-secrets.io

helm/openbao/kustomization.yaml

@@ -34,5 +34,5 @@ helmCharts:
           repository: jankysolutions/infra/openbao
           tag: latest
   releaseName: openbao
-  version: 0.7.0
+  version: 0.12.0
   repo: https://openbao.github.io/openbao-helm

k8s/forgejo/statefulset.yaml

@@ -14,7 +14,7 @@ spec:
         app: forgejo
     spec:
       containers:
-      - image: codeberg.org/forgejo/forgejo:11.0.0
+      - image: codeberg.org/forgejo/forgejo:10.0.3
         imagePullPolicy: Always
         name: forgejo
         resources: {}

k8s/matrix/bridge-facebook.yaml

@@ -60,7 +60,7 @@ spec:
             - secretRef:
                 name: bridge-facebook
       containers:
-      - image: dock.mau.dev/mautrix/meta:v0.4.6
+      - image: dock.mau.dev/mautrix/meta:v0.4.5
         name: bridge-facebook
         resources: {}
         command: ["/usr/bin/mautrix-meta", "-c", "/data/config.yaml", "--no-update"]

k8s/matrix/bridge-signal.yaml

@@ -57,7 +57,7 @@ spec:
             - secretRef:
                 name: bridge-signal
       containers:
-        - image: dock.mau.dev/mautrix/signal:v0.8.2
+        - image: dock.mau.dev/mautrix/signal:v0.8.1
           name: bridge-signal
           resources: {}
           ports:

k8s/monitoring/matrix-alertmanager-receiver.yaml

@@ -31,7 +31,7 @@ spec:
                 name: matrix-alertmanager-receiver
       containers:
       - name: matrix-alertmanager-receiver
-        image: docker.io/metio/matrix-alertmanager-receiver:2025.4.16
+        image: docker.io/metio/matrix-alertmanager-receiver:2025.3.26
         args: ["--config-path", "/config/config.yaml"]
         resources:
           limits:

k8s/operators/external-secrets/bundle.yaml

@@ -25642,8 +25642,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets
   namespace: external-secrets
 ---
@@ -25654,8 +25654,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-cert-controller
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-cert-controller
   namespace: external-secrets
 ---
@@ -25666,8 +25666,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-webhook
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-webhook
   namespace: external-secrets
 ---
@@ -25678,8 +25678,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-leaderelection
   namespace: external-secrets
 rules:
@@ -25716,8 +25716,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-cert-controller
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-cert-controller
 rules:
 - apiGroups:
@@ -25790,8 +25790,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-controller
 rules:
 - apiGroups:
@@ -25931,8 +25931,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
   name: external-secrets-edit
@@ -25980,8 +25980,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
     servicebinding.io/controller: "true"
   name: external-secrets-servicebindings
 rules:
@@ -26002,8 +26002,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
     rbac.authorization.k8s.io/aggregate-to-view: "true"
@@ -26048,8 +26048,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-leaderelection
   namespace: external-secrets
 roleRef:
@@ -26068,8 +26068,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-cert-controller
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-cert-controller
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -26087,8 +26087,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-controller
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -26106,9 +26106,9 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-webhook
-    app.kubernetes.io/version: v0.16.1
+    app.kubernetes.io/version: v0.16.0
     external-secrets.io/component: webhook
-    helm.sh/chart: external-secrets-0.16.1
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-webhook
   namespace: external-secrets
 ---
@@ -26119,9 +26119,9 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-webhook
-    app.kubernetes.io/version: v0.16.1
+    app.kubernetes.io/version: v0.16.0
     external-secrets.io/component: webhook
-    helm.sh/chart: external-secrets-0.16.1
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-webhook
   namespace: external-secrets
 spec:
@@ -26142,8 +26142,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets
   namespace: external-secrets
 spec:
@@ -26159,8 +26159,8 @@ spec:
         app.kubernetes.io/instance: external-secrets
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: external-secrets
-        app.kubernetes.io/version: v0.16.1
-        helm.sh/chart: external-secrets-0.16.1
+        app.kubernetes.io/version: v0.16.0
+        helm.sh/chart: external-secrets-0.16.0
     spec:
       automountServiceAccountToken: true
       containers:
@@ -26169,7 +26169,7 @@ spec:
         - --metrics-addr=:8080
         - --loglevel=info
         - --zap-time-encoding=epoch
-        image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.1
+        image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.0
         imagePullPolicy: IfNotPresent
         name: external-secrets
         ports:
@@ -26197,8 +26197,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-cert-controller
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-cert-controller
   namespace: external-secrets
 spec:
@@ -26214,8 +26214,8 @@ spec:
         app.kubernetes.io/instance: external-secrets
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: external-secrets-cert-controller
-        app.kubernetes.io/version: v0.16.1
-        helm.sh/chart: external-secrets-0.16.1
+        app.kubernetes.io/version: v0.16.0
+        helm.sh/chart: external-secrets-0.16.0
     spec:
       automountServiceAccountToken: true
       containers:
@@ -26231,7 +26231,7 @@ spec:
         - --loglevel=info
         - --zap-time-encoding=epoch
         - --enable-partial-cache=true
-        image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.1
+        image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.0
         imagePullPolicy: IfNotPresent
         name: cert-controller
         ports:
@@ -26264,8 +26264,8 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-webhook
-    app.kubernetes.io/version: v0.16.1
-    helm.sh/chart: external-secrets-0.16.1
+    app.kubernetes.io/version: v0.16.0
+    helm.sh/chart: external-secrets-0.16.0
   name: external-secrets-webhook
   namespace: external-secrets
 spec:
@@ -26281,8 +26281,8 @@ spec:
         app.kubernetes.io/instance: external-secrets
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: external-secrets-webhook
-        app.kubernetes.io/version: v0.16.1
-        helm.sh/chart: external-secrets-0.16.1
+        app.kubernetes.io/version: v0.16.0
+        helm.sh/chart: external-secrets-0.16.0
     spec:
       automountServiceAccountToken: true
       containers:
@@ -26296,7 +26296,7 @@ spec:
         - --healthz-addr=:8081
         - --loglevel=info
         - --zap-time-encoding=epoch
-        image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.1
+        image: oci.external-secrets.io/external-secrets/external-secrets:v0.16.0
         imagePullPolicy: IfNotPresent
         name: webhook
         ports:
@@ -26340,9 +26340,9 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-webhook
-    app.kubernetes.io/version: v0.16.1
+    app.kubernetes.io/version: v0.16.0
     external-secrets.io/component: webhook
-    helm.sh/chart: external-secrets-0.16.1
+    helm.sh/chart: external-secrets-0.16.0
   name: externalsecret-validate
 webhooks:
 - admissionReviewVersions:
@@ -26377,9 +26377,9 @@ metadata:
     app.kubernetes.io/instance: external-secrets
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: external-secrets-webhook
-    app.kubernetes.io/version: v0.16.1
+    app.kubernetes.io/version: v0.16.0
     external-secrets.io/component: webhook
-    helm.sh/chart: external-secrets-0.16.1
+    helm.sh/chart: external-secrets-0.16.0
   name: secretstore-validate
 webhooks:
 - admissionReviewVersions:

k8s/operators/openbao/bundle.yaml

@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao
   namespace: openbao
 ---
@@ -52,7 +52,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao-discovery-role
   namespace: openbao
 rules:
@@ -108,7 +108,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao-discovery-rolebinding
   namespace: openbao
 roleRef:
@@ -144,7 +144,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao-server-binding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -159,7 +159,6 @@ apiVersion: v1
 data:
   extraconfig-from-values.hcl: |2-
 
-    disable_mlock = true
     ui = true
 
     listener "tcp" {
@@ -183,7 +182,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao-config
   namespace: openbao
 ---
@@ -206,7 +205,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao-csi-provider
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao-csi-provider-agent-config
   namespace: openbao
 ---
@@ -217,7 +216,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao
   namespace: openbao
 spec:
@@ -241,7 +240,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
     openbao-active: "true"
   name: openbao-active
   namespace: openbao
@@ -267,7 +266,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
     openbao-internal: "true"
   name: openbao-internal
   namespace: openbao
@@ -293,7 +292,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao-standby
   namespace: openbao
 spec:
@@ -318,7 +317,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao-ui
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao-ui
   namespace: openbao
 spec:
@@ -358,7 +357,7 @@ spec:
         app.kubernetes.io/instance: openbao
         app.kubernetes.io/name: openbao
         component: server
-        helm.sh/chart: openbao-0.7.0
+        helm.sh/chart: openbao-0.12.0
     spec:
       affinity:
         podAntiAffinity:
@@ -486,7 +485,7 @@ metadata:
     app.kubernetes.io/instance: openbao
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: openbao
-    helm.sh/chart: openbao-0.7.0
+    helm.sh/chart: openbao-0.12.0
   name: openbao
   namespace: openbao
 spec:

k8s/wordpress/hannah.yaml

@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: wordpress
-        image: library/wordpress:6.8.0
+        image: library/wordpress:6.7.2
         env:
           - name: WORDPRESS_DB_HOST
             value: hannah-db