feat(helm): update chart emqx-operator to 2.3.0 (#1145)

renovate[bot] · web-flow · commit f5c0b6cc7526 · 2026-04-20T05:55:03.000Z
* fix(container): update image ghcr.io/kpetremann/mqtt-exporter to v1.11.2 (#1048) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image docker.io/gotenberg/gotenberg to v8.27.0 (#1039) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/maintainerr/maintainerr to v2.27.0 (#1040) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/mealie-recipes/mealie to v3.11.0 (#1035) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/paperless-ngx/paperless-ngx to v2.20.9 (#1051) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image docker.io/filebrowser/filebrowser to v2.61.1 (#1052) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr to v2.61.01 (#1053) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr_node to v2.61.01 (#1054) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * chore(container): update image ghcr.io/squat/generic-device-plugin to 7812762 (#1059) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image alangrainger/immich-public-proxy to v1.15.4 (#1060) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image docker.io/filebrowser/filebrowser to v2.61.2 (#1061) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/coder/code-server to v4.109.5 (#1062) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/paperless-ngx/paperless-ngx to v2.20.10 (#1063) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/koenkk/zigbee2mqtt to v2.9.1 (#1064) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/triliumnext/trilium to v0.102.1 (#1065) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * chore(container): update image ghcr.io/home-operations/bazarr to 79fc374 (#1067) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * chore(container): update image ghcr.io/home-operations/tautulli to 492b201 (#1068) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/mealie-recipes/mealie to v3.12.0 (#1069) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(github-release): update flux group to v2.8.2 (#1055) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * chore(container): update image ghcr.io/squat/generic-device-plugin to 5acdaa4 (#1071) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image docker.io/caronc/apprise to v1.3.2 (#1072) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(helm): update chart cert-manager to v1.20.0 (#1076) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(helm): update chart ingress-nginx to 4.15.0 (#1077) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/advplyr/audiobookshelf to v2.33.0 (#1074) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/coder/code-server to v4.111.0 (#1075) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/home-operations/prowlarr to v2.3.4.5307 (#1073) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(helm): update chart loki to 6.55.0 (#1078) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * chore(container): update image ghcr.io/squat/generic-device-plugin to 6a58b28 (#1079) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image docker.io/filebrowser/filebrowser to v2.62.1 (#1080) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr to v2.63.01 (#1081) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr_node to v2.63.01 (#1082) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/advplyr/audiobookshelf to v2.33.1 (#1086) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/home-operations/sonarr to v4.0.17.2950 (#1087) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/siderolabs/kubelet to v1.35.3 (#1088) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(github-release): update flux group to v2.8.3 (#1089) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(helm): update chart ingress-nginx to 4.15.1 (#1090) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image docker.io/gotenberg/gotenberg to v8.28.0 (#1091) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/coder/code-server to v4.112.0 (#1092) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/mealie-recipes/mealie to v3.13.1 (#1095) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr to v2.65.01 (#1093) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr_node to v2.65.01 (#1094) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * chore(container): update image ghcr.io/squat/generic-device-plugin to 5098c60 (#1096) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image alangrainger/immich-public-proxy to v1.15.5 (#1097) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image docker.io/caronc/apprise to v1.3.3 (#1098) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/paperless-ngx/paperless-ngx to v2.20.13 (#1099) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/unpoller/unpoller to v2.38.0 (#1100) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/home-operations/radarr to v6.1.2.10359 (#1102) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/home-operations/sonarr to v4.0.17.2953 (#1103) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(helm): update chart cert-manager to v1.20.1 (#1104) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(helm): update chart cilium to 1.19.2 (#1105) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image docker.io/apache/tika to v3.3.0.0 (#1106) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr to v2.67.01 (#1107) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr_node to v2.67.01 (#1108) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/linkwarden/linkwarden to v2.14.0 (#1109) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/mealie-recipes/mealie to v3.14.0 (#1110) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image docker.io/filebrowser/filebrowser to v2.62.2 (#1111) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/home-operations/tautulli to v2.17.0 (#1112) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/unpoller/unpoller to v2.39.0 (#1113) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image docker.io/gotenberg/gotenberg to v8.29.1 (#1114) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image docker.io/gristlabs/grist to v1.7.12 (#1115) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/koenkk/zigbee2mqtt to v2.9.2 (#1116) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * chore(container): update image ghcr.io/squat/generic-device-plugin to cc4b9b4 (#1117) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/home-operations/prowlarr to v2.3.5.5327 (#1118) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image docker.io/filebrowser/filebrowser to v2.63.1 (#1119) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/coder/code-server to v4.114.1 (#1120) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/triliumnext/trilium to v0.102.2 (#1121) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * chore(container): update image ghcr.io/squat/generic-device-plugin to c4e3a24 (#1123) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/home-operations/plex to v1.43.1.10611 (#1124) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(github-release): update flux group to v2.8.5 (#1125) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(helm): update chart kubelet-csr-approver to 1.2.14 (#1126) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image docker.io/gotenberg/gotenberg to v8.30.1 (#1127) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/coder/code-server to v4.115.0 (#1128) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr to v2.68.01 (#1129) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(container): update image ghcr.io/haveagitgat/tdarr_node to v2.68.01 (#1130) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image docker.io/filebrowser/filebrowser to v2.63.2 (#1131) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/dani-garcia/vaultwarden to v1.35.7 (#1132) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * fix(container): update image ghcr.io/home-operations/prowlarr to v2.3.6.5351 (#1133) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat(helm): update chart emqx-operator to 2.3.0 --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/bootstrap/templates/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml.j2 b/bootstrap/templates/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml.j2
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: v1.19.4
+      version: v1.20.1
       sourceRef:
         kind: HelmRepository
         name: jetstack
diff --git a/bootstrap/templates/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml.j2 b/bootstrap/templates/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml.j2
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: cilium
-      version: 1.19.1
+      version: 1.19.2
       sourceRef:
         kind: HelmRepository
         name: cilium
diff --git a/bootstrap/templates/kubernetes/apps/kube-system/kubelet-csr-approver/app/helmrelease.yaml.j2 b/bootstrap/templates/kubernetes/apps/kube-system/kubelet-csr-approver/app/helmrelease.yaml.j2
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: kubelet-csr-approver
-      version: 1.2.13
+      version: 1.2.14
       sourceRef:
         kind: HelmRepository
         name: postfinance
diff --git a/bootstrap/templates/kubernetes/bootstrap/flux/kustomization.yaml.j2 b/bootstrap/templates/kubernetes/bootstrap/flux/kustomization.yaml.j2
@@ -4,7 +4,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - github.com/fluxcd/flux2/manifests/install?ref=v2.7.5
+  - github.com/fluxcd/flux2/manifests/install?ref=v2.8.5
 patches:
   # Remove the default network policies
   - patch: |-
diff --git a/bootstrap/templates/kubernetes/bootstrap/helmfile.yaml.j2 b/bootstrap/templates/kubernetes/bootstrap/helmfile.yaml.j2
@@ -22,7 +22,7 @@ releases:
   - name: cilium
     namespace: kube-system
     chart: cilium/cilium
-    version: 1.19.1
+    version: 1.19.2
     values:
       - ../apps/kube-system/cilium/app/helm-values.yaml
     needs:
@@ -39,7 +39,7 @@ releases:
   - name: kubelet-csr-approver
     namespace: kube-system
     chart: postfinance/kubelet-csr-approver
-    version: 1.2.13
+    version: 1.2.14
     values:
       - ../apps/kube-system/kubelet-csr-approver/app/helm-values.yaml
     needs:
diff --git a/bootstrap/templates/kubernetes/bootstrap/talos/talconfig.yaml.j2 b/bootstrap/templates/kubernetes/bootstrap/talos/talconfig.yaml.j2
@@ -3,7 +3,7 @@
 # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
 talosVersion: v1.12.4
 # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-kubernetesVersion: v1.35.2
+kubernetesVersion: v1.35.3
 
 clusterName: "#{ bootstrap_cluster_name | default('home-kubernetes', true) }#"
 endpoint: https://#{ bootstrap_controller_vip }#:6443
diff --git a/bootstrap/templates/kubernetes/flux/config/flux.yaml.j2 b/bootstrap/templates/kubernetes/flux/config/flux.yaml.j2
@@ -8,7 +8,7 @@ spec:
   interval: 10m
   url: oci://ghcr.io/fluxcd/flux-manifests
   ref:
-    tag: v2.7.5
+    tag: v2.8.5
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
diff --git a/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml b/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: v1.19.4
+      version: v1.20.1
       sourceRef:
         kind: HelmRepository
         name: jetstack
diff --git a/kubernetes/apps/database/emqx/app/helmrelease.yaml b/kubernetes/apps/database/emqx/app/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: emqx-operator
-      version: 2.2.29
+      version: 2.3.0
       sourceRef:
         kind: HelmRepository
         name: emqx
diff --git a/kubernetes/apps/default/audiobookshelf/app/helmrelease.yaml b/kubernetes/apps/default/audiobookshelf/app/helmrelease.yaml
@@ -44,7 +44,7 @@ spec:
           app:
             image:
               repository: ghcr.io/advplyr/audiobookshelf
-              tag: 2.32.1@sha256:a52dc5db694a5bf041ce38f285dd6c6a660a4b1b21e37ad6b6746433263b2ae5
+              tag: 2.33.1@sha256:a4a5841bba093d81e5f4ad1eaedb4da3fda6dbb2528c552349da50ad1f7ae708
             env:
               TZ: ${TIMEZONE}
               AUDIOBOOKSHELF_UID: 1001
diff --git a/kubernetes/apps/default/bazarr/app/helmrelease.yaml b/kubernetes/apps/default/bazarr/app/helmrelease.yaml
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/home-operations/bazarr
-              tag: 1.5.6@sha256:281a0199110fc02f6a28f32f6b3b1e306126bd2cc9626f9be84b67766d958706
+              tag: 1.5.6@sha256:79fc37491f55c7e24427bcd669bce3df2d7415ca432a47ce9d53cc5988af8411
             env:
               TZ: ${TIMEZONE}
             envFrom:
diff --git a/kubernetes/apps/default/filebrowser/app/helmrelease.yaml b/kubernetes/apps/default/filebrowser/app/helmrelease.yaml
@@ -36,7 +36,7 @@ spec:
           app:
             image:
               repository: docker.io/filebrowser/filebrowser
-              tag: v2.60.0@sha256:a7b81cab28cf93de4c3ac97403d92f38d23191d7247e9c37611d4afa2d8d0c69
+              tag: v2.63.2@sha256:4dce87308b9f9cfbcf8d0a284fc9565d2b515530a6bae2d920b388161e093f26
             env:
               TZ: ${TIMEZONE}
               FB_DATABASE: /config/filebrowser.db
diff --git a/kubernetes/apps/default/grist/app/helmrelease.yaml b/kubernetes/apps/default/grist/app/helmrelease.yaml
@@ -31,7 +31,7 @@ spec:
           server:
             image:
               repository: docker.io/gristlabs/grist
-              tag: 1.7.11@sha256:dd35c503929bb1a954afbd6845d4367be49803cb795524ac3618fed24acb2419
+              tag: 1.7.12@sha256:e536e991fb1bd9a48db5262ca180bd978b8ffa2a34050fce80be9318ea3ad95c
             envFrom:
               - secretRef:
                   name: grist-secret
diff --git a/kubernetes/apps/default/home-assistant/app/helmrelease.yaml b/kubernetes/apps/default/home-assistant/app/helmrelease.yaml
@@ -57,7 +57,7 @@ spec:
             dependsOn: app
             image:
               repository: ghcr.io/coder/code-server
-              tag: 4.109.2@sha256:1b84cd817fe8eb1159323ae9d2f29b3c70c6ccd44958d651a94900cf7f0ff9c4
+              tag: 4.115.0@sha256:cbd5e05849367e521f774b760602cb9e0a8da1f159eaf89600490eec34129fe5
             args:
               [
                 "--auth",
@@ -81,7 +81,7 @@ spec:
             dependsOn: app
             image:
               repository: docker.io/filebrowser/filebrowser
-              tag: v2.60.0@sha256:a7b81cab28cf93de4c3ac97403d92f38d23191d7247e9c37611d4afa2d8d0c69
+              tag: v2.63.2@sha256:4dce87308b9f9cfbcf8d0a284fc9565d2b515530a6bae2d920b388161e093f26
             args:
               - --port
               - "8080"
diff --git a/kubernetes/apps/default/immich/app/proxy/helmrelease.yaml b/kubernetes/apps/default/immich/app/proxy/helmrelease.yaml
@@ -48,7 +48,7 @@ spec:
           app:
             image:
               repository: alangrainger/immich-public-proxy
-              tag: 1.15.3
+              tag: 1.15.5
 
             env:
               IMMICH_URL: http://immich-server.default.svc.cluster.local:2283
diff --git a/kubernetes/apps/default/linkwarden/app/helmrelease.yaml b/kubernetes/apps/default/linkwarden/app/helmrelease.yaml
@@ -34,7 +34,7 @@ spec:
           app:
             image:
               repository: ghcr.io/linkwarden/linkwarden
-              tag: v2.13.5
+              tag: v2.14.0
             resources:
               requests:
                 memory: 512Mi
diff --git a/kubernetes/apps/default/maintainerr/app/helmrelease.yaml b/kubernetes/apps/default/maintainerr/app/helmrelease.yaml
@@ -41,7 +41,7 @@ spec:
           app:
             image:
               repository: ghcr.io/maintainerr/maintainerr
-              tag: 2.26.1@sha256:35f5e04151298e828e804f54be0ef00104c35dbf9bfd8e03dacc42e525d2f336
+              tag: 2.27.0@sha256:4d07ffaf673f7703bcead8e67f2a9f4fbd5e6bb4d43e4c7c8f81bb45844c8e1b
             env:
               TZ: ${TIMEZONE}
             probes:
diff --git a/kubernetes/apps/default/mealie/app/helmrelease.yaml b/kubernetes/apps/default/mealie/app/helmrelease.yaml
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/mealie-recipes/mealie
-              tag: v3.10.2@sha256:58b54bca4c729fcc7f272cfac5086623866430956838de3f5d763fcaf9e64115
+              tag: v3.14.0@sha256:b9fac07e6daaabd8c29d0dc97965c2f500ce7d6b188b0c51f494627f23ad32f2
             env:
               TZ: ${TIMEZONE}
               ALLOW_SIGNUP: "false"
diff --git a/kubernetes/apps/default/paperless/app/helmrelease.yaml b/kubernetes/apps/default/paperless/app/helmrelease.yaml
@@ -39,7 +39,7 @@ spec:
           app:
             image:
               repository: ghcr.io/paperless-ngx/paperless-ngx
-              tag: 2.20.8
+              tag: 2.20.13
             dependsOn:
               - broker
               - gotenberg
@@ -128,14 +128,14 @@ spec:
           tika:
             image:
               repository: docker.io/apache/tika
-              tag: 3.2.3.0-full
+              tag: 3.3.0.0-full
               pullPolicy: IfNotPresent
             ports:
               - containerPort: 9998
           gotenberg:
             image:
               repository: docker.io/gotenberg/gotenberg
-              tag: 8.26.0
+              tag: 8.30.1
               pullPolicy: IfNotPresent
             ports:
               - containerPort: 3000
diff --git a/kubernetes/apps/default/plex/app/helmrelease.yaml b/kubernetes/apps/default/plex/app/helmrelease.yaml
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/home-operations/plex
-              tag: 1.43.0.10492@sha256:8cb062f2b0660bd7811387e6c799da0ce5f18112078fe21485c11adcc83a9c1c
+              tag: 1.43.1.10611@sha256:a9c3723cb31cc9621df27cf5801184c290293adf1df2bfaea4b8b6fc01dbfd96
             env:
               TZ: ${TIMEZONE}
               PLEX_ADVERTISE_URL: https://plex.${SECRET_DOMAIN}:443,http://192.168.0.128:32400
diff --git a/kubernetes/apps/default/prowlarr/app/helmrelease.yaml b/kubernetes/apps/default/prowlarr/app/helmrelease.yaml
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/home-operations/prowlarr
-              tag: 2.3.2.5245@sha256:e2459e199564ab852c6e677e951cef36c172a8e71a0e1c90665631b5a0c57438
+              tag: 2.3.6.5351@sha256:da6b1f914ad22778c347d554a59b6e40110f654b40528c8de516616382db5148
             env:
               PROWLARR__APP__INSTANCENAME: Prowlarr
               PROWLARR__APP__THEME: dark
diff --git a/kubernetes/apps/default/radarr/app/helmrelease.yaml b/kubernetes/apps/default/radarr/app/helmrelease.yaml
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/home-operations/radarr
-              tag: 6.1.1.10317@sha256:5e08c0eefd2770d1d29395c4f84fe5bf7dfc3a986598021306a5d8ac017a3989
+              tag: 6.1.2.10359@sha256:9967e56263a3c67eeaede5824103ee4c1c1f1511abd5965ac1e294bfd9b76dbb
             env:
               RADARR__APP__INSTANCENAME: Radarr
               RADARR__APP__THEME: dark
diff --git a/kubernetes/apps/default/sonarr/app/helmrelease.yaml b/kubernetes/apps/default/sonarr/app/helmrelease.yaml
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/home-operations/sonarr
-              tag: 4.0.16.2946@sha256:22651c750eedb091f6d76ade95dbecae0eeafe2b55432c3b8d8b042e8745f344
+              tag: 4.0.17.2953@sha256:83607d2b741ec9469db09489e88c473ae6fdf7d85f3b55d4fa809b43e25a2a6c
             env:
               SONARR__APP__INSTANCENAME: Sonarr
               SONARR__APP__THEME: dark
diff --git a/kubernetes/apps/default/tautulli/app/helmrelease.yaml b/kubernetes/apps/default/tautulli/app/helmrelease.yaml
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/home-operations/tautulli
-              tag: 2.16.1@sha256:6983eea603ee230b189f2d32e7d7fc0bb94917df735a71ba20460c4991877645
+              tag: 2.17.0@sha256:b90b30e15d1b6d12fc726fac1ef9778ad92f405ac8f8ccb30a34d7f6673c113d
             env:
               TZ: ${TIMEZONE}
               TAUTULLI_HTTP_BASE_URL: https://tautulli.${SECRET_DOMAIN}
diff --git a/kubernetes/apps/default/tdarr/app/helmrelease-node.yaml b/kubernetes/apps/default/tdarr/app/helmrelease-node.yaml
@@ -36,7 +36,7 @@ spec:
           app:
             image:
               repository: ghcr.io/haveagitgat/tdarr_node
-              tag: 2.58.02
+              tag: 2.68.01
             env:
               TZ: ${TIMEZONE}
               PUID: 1000
diff --git a/kubernetes/apps/default/tdarr/app/helmrelease.yaml b/kubernetes/apps/default/tdarr/app/helmrelease.yaml
@@ -35,7 +35,7 @@ spec:
           app:
             image:
               repository: ghcr.io/haveagitgat/tdarr
-              tag: 2.58.02
+              tag: 2.68.01
             env:
               TZ: ${TIMEZONE}
               PUID: 1000
diff --git a/kubernetes/apps/default/trilium/app/helmrelease.yaml b/kubernetes/apps/default/trilium/app/helmrelease.yaml
@@ -41,7 +41,7 @@ spec:
           app:
             image:
               repository: ghcr.io/triliumnext/trilium
-              tag: v0.101.3@sha256:f9c978d08f24af19e58c7e3230218a5a6a0ab889ac261e25edb847ebd3762ff4
+              tag: v0.102.2@sha256:f1a2fd88e7032d60f863231ce94348e906bcd6a5fa043801badd5896c20c064d
             env:
               TZ: ${TIMEZONE}
             resources:
diff --git a/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml b/kubernetes/apps/default/vaultwarden/app/helmrelease.yaml
@@ -36,7 +36,7 @@ spec:
           app:
             image:
               repository: ghcr.io/dani-garcia/vaultwarden
-              tag: 1.35.4-alpine@sha256:34b4e91ed4c2a4d2191245325608b2a84bedbeb9c9dd561e3c0924b98ef7126c
+              tag: 1.35.7-alpine@sha256:9a54dad95452412afb959664dc5d6c3c3ca7c4131116ca7667888b0376320b03
 
             env:
               TZ: ${TIMEZONE}
diff --git a/kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml b/kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml
@@ -34,7 +34,7 @@ spec:
           app:
             image:
               repository: ghcr.io/koenkk/zigbee2mqtt
-              tag: 2.8.0@sha256:89cf02f379aa743a68494388e3a26fba7b8c9101f8b452038cc07aeff3fc983c
+              tag: 2.9.2@sha256:2a21bbf7a664a149024bbe1f776e3151f28ed9db15948270dcbffb89544a41f0
             env:
               TZ: ${TIMEZONE}
               ZIGBEE2MQTT_DATA: /config
@@ -90,7 +90,7 @@ spec:
           code-server:
             image:
               repository: ghcr.io/coder/code-server
-              tag: 4.109.2@sha256:1b84cd817fe8eb1159323ae9d2f29b3c70c6ccd44958d651a94900cf7f0ff9c4
+              tag: 4.115.0@sha256:cbd5e05849367e521f774b760602cb9e0a8da1f159eaf89600490eec34129fe5
             args: [
               "--auth", "none",
               "--user-data-dir", "/config/.vscode",
diff --git a/kubernetes/apps/default/zigbee2mqtt/exporter/helmrelease.yaml b/kubernetes/apps/default/zigbee2mqtt/exporter/helmrelease.yaml
@@ -43,7 +43,7 @@ spec:
           zigbee2mqtt-exporter:
             image:
               repository: ghcr.io/kpetremann/mqtt-exporter
-              tag: 1.11.1
+              tag: 1.11.2
             env:
               LOG_LEVEL: INFO
               MQTT_IGNORED_TOPICS:
diff --git a/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml b/kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: cilium
-      version: 1.19.1
+      version: 1.19.2
       sourceRef:
         kind: HelmRepository
         name: cilium
diff --git a/kubernetes/apps/kube-system/generic-device-plugin/app/helmrelease.yaml b/kubernetes/apps/kube-system/generic-device-plugin/app/helmrelease.yaml
@@ -34,7 +34,7 @@ spec:
           app:
             image:
               repository: ghcr.io/squat/generic-device-plugin
-              tag: latest@sha256:8e0eb738862df4f59469d45935405e066001bc29597e7154ab64542f9565cae1
+              tag: latest@sha256:c4e3a24a5f20449e027b9de2c3cee790169ab42220818315f5f8ee9830788981
             args:
               - --log-level=info
               - --config=/config/config.yaml
diff --git a/kubernetes/apps/kube-system/kubelet-csr-approver/app/helmrelease.yaml b/kubernetes/apps/kube-system/kubelet-csr-approver/app/helmrelease.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: kubelet-csr-approver
-      version: 1.2.13
+      version: 1.2.14
       sourceRef:
         kind: HelmRepository
         name: postfinance
diff --git a/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: ingress-nginx
-      version: 4.14.3
+      version: 4.15.1
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
diff --git a/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: ingress-nginx
-      version: 4.14.3
+      version: 4.15.1
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx
diff --git a/kubernetes/apps/observability/apprise/app/helmrelease.yaml b/kubernetes/apps/observability/apprise/app/helmrelease.yaml
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: docker.io/caronc/apprise
-              tag: v1.3.1@sha256:6b112f8f174244f4a73b8e1254c9bde1fa562a6a428010aeaff1c18bc98d2713
+              tag: v1.3.3@sha256:4bfeac268ba87b8e08e308c9aa0182fe99e9501ec464027afc333d1634e65977
             env:
               TZ: ${TIMEZONE}
               PGID: 1000
diff --git a/kubernetes/apps/observability/loki/app/helmrelease.yaml b/kubernetes/apps/observability/loki/app/helmrelease.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: loki
-      version: 6.53.0
+      version: 6.55.0
       sourceRef:
         kind: HelmRepository
         name: grafana
diff --git a/kubernetes/apps/observability/unpoller/app/helmrelease.yaml b/kubernetes/apps/observability/unpoller/app/helmrelease.yaml
@@ -34,7 +34,7 @@ spec:
           app:
             image:
               repository: ghcr.io/unpoller/unpoller
-              tag: v2.34.0@sha256:73423ddfe304e866b2cda2d3ecf8e68c15317c93a22945ad7d941d3ca3a6d022
+              tag: v2.39.0@sha256:1cf63ad43121acc6995da1bd636063de9023b4bfc16599a4297951a6fb6b7fd2
             env:
               TZ: ${TIMEZONE}
               UP_UNIFI_DEFAULT_ROLE: home-ops
diff --git a/kubernetes/bootstrap/flux/kustomization.yaml b/kubernetes/bootstrap/flux/kustomization.yaml
@@ -4,7 +4,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - github.com/fluxcd/flux2/manifests/install?ref=v2.7.5
+  - github.com/fluxcd/flux2/manifests/install?ref=v2.8.5
 patches:
   # Remove the default network policies
   - patch: |-
diff --git a/kubernetes/bootstrap/helmfile.yaml b/kubernetes/bootstrap/helmfile.yaml
diff --git a/kubernetes/bootstrap/talos/talconfig.yaml b/kubernetes/bootstrap/talos/talconfig.yaml
diff --git a/kubernetes/flux/config/flux.yaml b/kubernetes/flux/config/flux.yaml
