Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update terraform providers (aws, github, oci)
• chore(deps): update terraform proxmox to v0.102.0
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update nixpkgs digest to b7686ef
• chore(deps): update dependency kubernetes/kubernetes to v1.35.3
• chore(deps): update dependency siderolabs/talos to v1.12.6
• chore(deps): update helm release authentik to v2026.2.2
• chore(deps): update dependency kubernetes-sigs/gateway-api to v1.5.1
• chore(deps): update helm charts (argo-cd, cert-manager, external-secrets)
• chore(deps): update helm release cert-manager to v1.20.2
• chore(deps): update helm release kube-prometheus-stack to v83.4.2
• chore(deps): update helm release tailscale-operator to v1.96.5
• chore(deps): update tailscale/tailscale docker tag to v1.96.5
• chore(deps): update borchero/terraform-plan-comment action to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

argocd (14)

apps/alloy.yaml

apps/argocd.yaml

apps/authentik.yaml

apps/cnpg.yaml

apps/crossplane.yaml (1)

• crossplane 2.2.0

apps/dns.yaml

apps/gateway-external-routes.yaml

apps/gatus.yaml

apps/it-tools.yaml

apps/kube-prometheus-stack.yaml

apps/local-path-provisioner.yaml (1)

• ghcr.io/rancher/local-path-provisioner/charts/local-path-provisioner 0.0.35

apps/loki.yaml

apps/namespaces.yaml

apps/tailscale.yaml

docker-compose (1)

minerva/docker-compose.yml (1)

• tailscale/tailscale v1.94.2 → [Updates: v1.96.5]

github-actions (7)

.github/workflows/00-global.yaml (4)

• actions/checkout v6
• hashicorp/setup-terraform v4
• aws-actions/configure-aws-credentials v6
• borchero/terraform-plan-comment v2 → [Updates: v3]

.github/workflows/01-network.yaml (7)

• actions/checkout v6
• tailscale/github-action v4
• actions/setup-node v6
• hashicorp/setup-terraform v4
• aws-actions/configure-aws-credentials v6
• borchero/terraform-plan-comment v2 → [Updates: v3]
• node 24

.github/workflows/02-infrastructure.yaml (7)

• actions/checkout v6
• tailscale/github-action v4
• actions/setup-node v6
• hashicorp/setup-terraform v4
• aws-actions/configure-aws-credentials v6
• borchero/terraform-plan-comment v2 → [Updates: v3]
• node 24

.github/workflows/03-services.yaml (7)

• actions/checkout v6
• tailscale/github-action v4
• actions/setup-node v6
• hashicorp/setup-terraform v4
• aws-actions/configure-aws-credentials v6
• borchero/terraform-plan-comment v2 → [Updates: v3]
• node 24

.github/workflows/cloud-edge.yaml (16)

• actions/checkout v6
• dorny/paths-filter v4
• actions/checkout v6
• hashicorp/setup-terraform v4
• aws-actions/configure-aws-credentials v6
• borchero/terraform-plan-comment v2 → [Updates: v3]
• actions/checkout v6
• cachix/install-nix-action v31
• actions/checkout v6
• cachix/install-nix-action v31
• hashicorp/setup-terraform v4
• aws-actions/configure-aws-credentials v6
• actions/checkout v6
• tailscale/github-action v4
• hashicorp/setup-terraform v4
• aws-actions/configure-aws-credentials v6

.github/workflows/main-deploy.yaml (2)

• actions/checkout v6
• dorny/paths-filter v4

.github/workflows/minerva-deploy.yaml (1)

• actions/checkout v6

helm-values (3)

charts/gateway-external-routes/values.yaml (1)

• nginxinc/nginx-unprivileged 1.29-alpine

charts/it-tools/values.yaml (1)

• ghcr.io/corentinth/it-tools 2024.10.22-7ca5933

charts/kube-prometheus-stack/values.yaml (2)

• prompve/prometheus-pve-exporter 3.8.2
• ghcr.io/unpoller/unpoller v2.39.0

helmv3 (7)

charts/alloy/Chart.yaml (2)

• alloy 1.7.0
• alloy 1.7.0

charts/authentik/Chart.yaml (1)

• authentik 2026.2.1 → [Updates: 2026.2.2]

charts/cnpg/Chart.yaml (1)

• cloudnative-pg 0.28.0

charts/gatus/Chart.yaml (1)

• gatus 1.5.0

charts/kube-prometheus-stack/Chart.yaml (1)

• kube-prometheus-stack 83.0.0 → [Updates: 83.4.2]

charts/loki/Chart.yaml (1)

• loki 6.55.0

charts/tailscale/Chart.yaml (1)

• tailscale-operator 1.94.2 → [Updates: 1.96.5]

kubernetes (14)

charts/argocd/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/argocd/notifications-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/authentik/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/cnpg/templates/crossplane-aggregate-rbac.yaml (1)

• ClusterRole rbac.authorization.k8s.io/v1

charts/cnpg/templates/crossplane-provider.yaml (1)

• Provider pkg.crossplane.io/v1

charts/cnpg/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/dns/templates/deployment.yaml (5)

• alpine 3.23
• ghcr.io/0xerr0r/blocky v0.29.0
• madnuttah/unbound 1.24.2-1
• cyb3rjak3/unbound-exporter 0.5.0
• Deployment apps/v1

charts/gatus/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/it-tools/templates/deployment.yaml (1)

• Deployment apps/v1

charts/kube-prometheus-stack/templates/alertmanager-secrets.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/kube-prometheus-stack/templates/grafana-secrets.yaml (1)

• ExternalSecret external-secrets.io/v1

charts/kube-prometheus-stack/templates/proxmox-exporter.yaml (1)

• Deployment apps/v1

charts/kube-prometheus-stack/templates/unifi-exporter.yaml (1)

• Deployment apps/v1

charts/tailscale/templates/external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1

nix (1)

cloud-edge/nixos/flake.nix (2)

• disko 5ad85c82cc52264f4beddc934ba57f3789f28347
• nixpkgs f37d14db4e7f801872506a2dee5cce5da36ea512 → [Updates: undefined]

regex (8)

.github/workflows/cloud-edge.yaml (2)

• nix-community/nixos-anywhere 1.13.0
• nixpkgs master@f37d14db4e7f801872506a2dee5cce5da36ea512 → [Updates: master]

02-infrastructure/variables.tf (2)

• siderolabs/talos v1.12.1 → [Updates: v1.12.6]
• kubernetes/kubernetes 1.35.0 → [Updates: 1.35.3]

03-services/variables.tf (2)

• kubernetes-sigs/gateway-api v1.4.1 → [Updates: v1.5.1]
• xpkg.upbound.io/crossplane-contrib/provider-sql v0.14.0

charts/cnpg/templates/crossplane-function-patch-and-transform.yaml (1)

• xpkg.crossplane.io/crossplane-contrib/function-patch-and-transform v0.10.3

charts/cnpg/templates/crossplane-provider.yaml (1)

• xpkg.upbound.io/crossplane-contrib/provider-sql v0.14.0

charts/it-tools/values.yaml (1)

• ghcr.io/corentinth/it-tools 2024.10.22-7ca5933

charts/kube-prometheus-stack/values.yaml (2)

• prompve/prometheus-pve-exporter 3.8.2
• ghcr.io/unpoller/unpoller v2.39.0

cloud-edge/k3s-services/variables.tf (3)

• kubernetes-sigs/gateway-api v1.4.1 → [Updates: v1.5.1]
• cilium 1.19.2
• cert-manager v1.17.2 → [Updates: v1.20.2]

terraform (14)

00-global/providers.tf (2)

• aws ~> 6.0 → [Updates: ~> 6.0]
• hashicorp/terraform >= 1.9.0

01-network/providers.tf (2)

• cloudflare 5.18.0
• unifi 1.0.0

02-infrastructure/providers.tf (5)

• github 6.11 → [Updates: 6.11]
• local 2.8
• proxmox 0.100.0 → [Updates: 0.102.0]
• talos 0.10.1
• hashicorp/terraform >= 1.9.0

02-infrastructure/proxmox.tf

03-services/argocd.tf (1)

• argo-cd 9.4.17 → [Updates: 9.5.0]

03-services/cert-manager.tf (1)

• cert-manager v1.20.1 → [Updates: v1.20.2]

03-services/cilium.tf (1)

• cilium 1.19.2

03-services/external-secrets.tf (1)

• external-secrets 2.2.0 → [Updates: 2.3.0]

03-services/providers.tf (5)

• cloudflare 5.18.0
• helm 3.1.1
• kubectl 1.19.0
• kubernetes 3.0.1
• hashicorp/terraform >= 1.9.0

03-services/storage.tf (1)

• csi-driver-nfs 4.13.1

cloud-edge/k3s-services/cert-manager.tf

cloud-edge/k3s-services/cilium.tf

cloud-edge/k3s-services/providers.tf (5)

• helm 3.1.1
• http 3.5.0
• kubectl 1.19.0
• kubernetes 3.0.1
• hashicorp/terraform >= 1.9.0

cloud-edge/providers.tf (3)

• cloudflare 5.18.0
• oci 8.8.0 → [Updates: 8.9.0]
• hashicorp/terraform >= 1.9.0

---

• Check this box to trigger a request for Renovate to run again on this repository