bump matrix-bridge-meshtastic

containers/keycloak/Containerfile

@@ -1,4 +1,4 @@
-FROM quay.io/keycloak/keycloak:26.1.4 as builder
+FROM quay.io/keycloak/keycloak:26.2.0 as builder
 
 # Enable health and metrics support
 ENV KC_HEALTH_ENABLED=true
@@ -10,7 +10,7 @@ ENV KC_DB=postgres
 WORKDIR /opt/keycloak
 RUN /opt/keycloak/bin/kc.sh build
 
-FROM quay.io/keycloak/keycloak:26.1
+FROM quay.io/keycloak/keycloak:26.2
 COPY --from=builder /opt/keycloak/ /opt/keycloak/
 ADD themes/jankysolutions /opt/keycloak/themes/jankysolutions
 

helm/external-secrets/kustomization.yaml

@@ -7,5 +7,5 @@ helmCharts:
       enabled: false # default, bitwarden-sdk-server doesn't work with vaultwarden (https://github.com/external-secrets/bitwarden-sdk-server/issues/18)
   namespace: external-secrets
   releaseName: external-secrets
-  version: 0.15.1
+  version: 0.16.1
   repo: https://charts.external-secrets.io

helm/secrets-store-csi-driver/kustomization.yaml

@@ -10,5 +10,5 @@ helmCharts:
       registrar:
         logVerbosity: 1
   releaseName: secrets-store-csi-driver
-  version: 1.4.8
+  version: 1.5.0
   repo: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts

k8s/forgejo/statefulset.yaml

@@ -14,7 +14,7 @@ spec:
         app: forgejo
     spec:
       containers:
-      - image: codeberg.org/forgejo/forgejo:10.0.3
+      - image: codeberg.org/forgejo/forgejo:11.0.0
         imagePullPolicy: Always
         name: forgejo
         resources: {}

k8s/invoiceninja/database.yaml

@@ -30,7 +30,7 @@ spec:
     spec:
       containers:
       - name: mysql
-        image: library/mysql:8.4.4
+        image: library/mysql:8.4.5
         envFrom:
           - secretRef:
               name: mysql

k8s/keycloak/deployment.yaml

@@ -17,7 +17,7 @@ spec:
       containers:
         - name: keycloak
           # image: git.janky.solutions/jankysolutions/infra/keycloak:latest
-          image: quay.io/keycloak/keycloak:26.1.4
+          image: quay.io/keycloak/keycloak:26.2.0
           imagePullPolicy: Always
           args: ["start", "--cache-stack=kubernetes"]
           resources: {}

k8s/matrix/bridge-facebook.yaml

@@ -60,7 +60,7 @@ spec:
             - secretRef:
                 name: bridge-facebook
       containers:
-      - image: dock.mau.dev/mautrix/meta:v0.4.5
+      - image: dock.mau.dev/mautrix/meta:v0.4.6
         name: bridge-facebook
         resources: {}
         command: ["/usr/bin/mautrix-meta", "-c", "/data/config.yaml", "--no-update"]

k8s/matrix/bridge-signal.yaml

@@ -57,7 +57,7 @@ spec:
             - secretRef:
                 name: bridge-signal
       containers:
-        - image: dock.mau.dev/mautrix/signal:v0.8.1
+        - image: dock.mau.dev/mautrix/signal:v0.8.2
           name: bridge-signal
           resources: {}
           ports:

k8s/meshtastic/statefulset.yaml

@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: matrix-bridge-meshtastic
-          image: git.janky.solutions/finn/matrix-bridge-meshtastic:sha-408cb6b
+          image: git.janky.solutions/finn/matrix-bridge-meshtastic:sha-e9eb385
           securityContext:
             privileged: true
           env:

k8s/monitoring/matrix-alertmanager-receiver.yaml

@@ -31,7 +31,7 @@ spec:
                 name: matrix-alertmanager-receiver
       containers:
       - name: matrix-alertmanager-receiver
-        image: docker.io/metio/matrix-alertmanager-receiver:2025.3.26
+        image: docker.io/metio/matrix-alertmanager-receiver:2025.4.16
         args: ["--config-path", "/config/config.yaml"]
         resources:
           limits:

k8s/monitoring/thanos.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: thanos-querier
-        image: quay.io/thanos/thanos:v0.38.0
+        image: quay.io/thanos/thanos:v0.37.2
         args:
           - query
           - --http-address
@@ -123,7 +123,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: status.hostIP
-        image: quay.io/thanos/thanos:v0.38.0
+        image: quay.io/thanos/thanos:v0.37.2
         livenessProbe:
           failureThreshold: 8
           httpGet:
@@ -257,7 +257,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: status.hostIP
-        image: quay.io/thanos/thanos:v0.38.0
+        image: quay.io/thanos/thanos:v0.37.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 4

k8s/netbox/netbox.yaml

@@ -13,7 +13,7 @@ spec:
     spec:
       containers:
       - name: netbox
-        image: ghcr.io/netbox-community/netbox:v4.2.6
+        image: ghcr.io/netbox-community/netbox:v4.2.7
         envFrom:
           - secretRef:
               name: netbox

k8s/operators/secrets-store-csi-driver/bundle.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver
   namespace: secrets-store-csi-driver
 ---
@@ -24,8 +24,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver-keep-crds
   namespace: secrets-store-csi-driver
 ---
@@ -41,8 +41,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver-upgrade-crds
   namespace: secrets-store-csi-driver
 ---
@@ -55,8 +55,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
   name: secretproviderclasses-admin-role
@@ -82,8 +82,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secretproviderclasses-role
 rules:
 - apiGroups:
@@ -149,8 +149,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
     rbac.authorization.k8s.io/aggregate-to-view: "true"
   name: secretproviderclasses-viewer-role
 rules:
@@ -172,8 +172,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
     rbac.authorization.k8s.io/aggregate-to-view: "true"
   name: secretproviderclasspodstatuses-viewer-role
 rules:
@@ -194,8 +194,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secretprovidersyncing-role
 rules:
 - apiGroups:
@@ -223,8 +223,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver-keep-crds
 rules:
 - apiGroups:
@@ -247,8 +247,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver-upgrade-crds
 rules:
 - apiGroups:
@@ -269,8 +269,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secretproviderclasses-rolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -289,8 +289,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secretprovidersyncing-rolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -313,8 +313,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver-keep-crds
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -337,8 +337,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver-upgrade-crds
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -357,8 +357,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver
   namespace: secrets-store-csi-driver
 spec:
@@ -374,8 +374,8 @@ spec:
         app.kubernetes.io/instance: secrets-store-csi-driver
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: secrets-store-csi-driver
-        app.kubernetes.io/version: 1.4.8
-        helm.sh/chart: secrets-store-csi-driver-1.4.8
+        app.kubernetes.io/version: 1.5.0
+        helm.sh/chart: secrets-store-csi-driver-1.5.0
     spec:
       affinity:
         nodeAffinity:
@@ -422,7 +422,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: spec.nodeName
-        image: registry.k8s.io/csi-secrets-store/driver:v1.4.8
+        image: registry.k8s.io/csi-secrets-store/driver:v1.5.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 5
@@ -520,8 +520,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver-keep-crds
   namespace: secrets-store-csi-driver
 spec:
@@ -538,7 +538,7 @@ spec:
         - secretproviderclasspodstatuses.secrets-store.csi.x-k8s.io
         - -p
         - '{"metadata":{"annotations": {"helm.sh/resource-policy": "keep"}}}'
-        image: registry.k8s.io/csi-secrets-store/driver-crds:v1.4.8
+        image: registry.k8s.io/csi-secrets-store/driver-crds:v1.5.0
         imagePullPolicy: IfNotPresent
         name: crds-keep
       nodeSelector:
@@ -560,8 +560,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store-csi-driver-upgrade-crds
   namespace: secrets-store-csi-driver
 spec:
@@ -575,7 +575,7 @@ spec:
         - apply
         - -f
         - crds/
-        image: registry.k8s.io/csi-secrets-store/driver-crds:v1.4.8
+        image: registry.k8s.io/csi-secrets-store/driver-crds:v1.5.0
         imagePullPolicy: IfNotPresent
         name: crds-upgrade
       nodeSelector:
@@ -593,8 +593,8 @@ metadata:
     app.kubernetes.io/instance: secrets-store-csi-driver
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: secrets-store-csi-driver
-    app.kubernetes.io/version: 1.4.8
-    helm.sh/chart: secrets-store-csi-driver-1.4.8
+    app.kubernetes.io/version: 1.5.0
+    helm.sh/chart: secrets-store-csi-driver-1.5.0
   name: secrets-store.csi.k8s.io
 spec:
   attachRequired: false

k8s/wordpress/hannah.yaml

@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: wordpress
-        image: library/wordpress:6.7.2
+        image: library/wordpress:6.8.0
         env:
           - name: WORDPRESS_DB_HOST
             value: hannah-db

talos/k8s/monitoring/prom.yaml

@@ -46,7 +46,7 @@ spec:
             storage: 50Gi
   thanos:
     blockSize: 2h
-    image: quay.io/thanos/thanos:v0.38.0
+    image: quay.io/thanos/thanos:v0.37.2
     objectStorageConfig:
       key: thanos.yaml
       name: thanos-objstore