Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update quay.io/coreos/etcd Docker tag to v3.6.12
• Update Rust crate age to v0.11.3
• Update Rust crate chrono to v0.4.45
• Update Rust crate clap to v4.6.1
• Update Rust crate serde_json to v1.0.150
• Update Rust crate time to v0.3.49
• Update alpine Docker tag to v3.24
• Update docker.io/hetznercloud/hcloud-cloud-controller-manager Docker tag to v1.32.0
• Update docker.io/python Docker tag to v3.14
• Update docker.io/vaultwarden/server Docker tag to v1.36.0
• Update docker/build-push-action action to v6.19.2
• Update docker/metadata-action action to v5.10.0
• Update docker/setup-buildx-action action to v3.12.0
• Update ghcr.io/flant/shell-operator Docker tag to v1.19.5
• Update ghcr.io/prymitive/karma Docker tag to v0.131
• Update ghcr.io/tailscale/tailscale Docker tag to v1.98.4
• Update Helm release cilium to v1.19.4
• Update Helm release cluster-autoscaler to v9.57.0
• Update Helm release coredns to v1.46.0
• Update Helm release metrics-server to v3.13.1
• Update quay.io/brancz/kube-rbac-proxy Docker tag to v0.22.0
• Update registry.k8s.io/kas-network-proxy/proxy-agent Docker tag to v0.36.0
• Update registry.k8s.io/kas-network-proxy/proxy-server Docker tag to v0.36.0
• Update Rust crate der to 0.8
• Update Rust crate etcd-client to 0.19
• Update Rust crate json-patch to v4.2.0
• Update Rust crate k8s-openapi to 0.28
• Update Rust crate kube to 0.99
• Update Rust crate rand to 0.10
• Update Rust crate rcgen to 0.14
• Update Rust crate schemars to 0.9
• Update Rust crate tokio to v1.52.3
• Update Rust crate zeroize to v1.9.0
• Update Terraform b2 to v0.12.1
• Update Terraform github to v6.12.1
• Update actions/checkout action to v6
• Update cloudflare/cloudflared Docker tag to v2026
• Update docker Docker tag to v29
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/metadata-action action to v6
• Update docker/setup-buildx-action action to v4
• Update Rust crate kube to v3
• Update Rust crate schemars to v1
• Update Terraform kubernetes to v3
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (docker package docker.io/litestream/litestream).

Files affected: hub/cluster/conduit/instance.yaml, hub/cluster/headscale/helm-release.yaml, hub/cluster/vaultwarden/instance.yaml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency ImageUpdateAutomation to image.toolkit.fluxcd.io/v1
• Update docker.io/litestream/litestream Docker tag to v0.5.12
• Update Terraform cloudflare to v4.52.7
• Update cloudflare/cloudflared Docker tag to v2025.11.1
• Update docker.io/syncthing/syncthing Docker tag to v2.1.1
• Update docker/login-action action to v3.7.0
• Update Terraform hcloud to v1.65.0
• Update Terraform random to v3.9.0
• Update Terraform tailscale to v0.29.2
• Update Terraform cloudflare to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (3)

apps/etcdetcetc/Cargo.toml (16)

• anyhow 1
• chrono 0.4 → [Updates: 0.4]
• etcd-client 0.15 → [Updates: 0.19]
• futures 0.3
• json-patch 4 → [Updates: 4]
• k8s-openapi 0.24 → [Updates: 0.28]
• kube 0.99 → [Updates: 3.0]
• schemars 0.8 → [Updates: 0.9, 1.0]
• serde 1
• serde_json 1 → [Updates: 1]
• clap 4 → [Updates: 4]
• rand 0.8 → [Updates: 0.10]
• thiserror 2
• tokio 1 → [Updates: 1]
• tracing 0.1
• tracing-subscriber 0.3

apps/etcdetcetc/xtask/Cargo.toml (2)

• anyhow 1
• clap 4 → [Updates: 4]

credhelper/Cargo.toml (15)

• anyhow 1
• pem 3
• age 0.11 → [Updates: 0.11]
• aes-gcm 0.10
• base64ct 1
• der 0.7 → [Updates: 0.8]
• kube 0.97 → [Updates: 0.99, 3.0]
• k8s-openapi 0.23 → [Updates: 0.28]
• rcgen 0.13 → [Updates: 0.14]
• serde 1
• serde_json 1 → [Updates: 1]
• time 0.3 → [Updates: 0.3]
• tokio 1 → [Updates: 1]
• x509-cert 0.2
• zeroize 1 → [Updates: 1]

dockerfile (4)

apps/bootie/Dockerfile (2)

• alpine 3.22 → [Updates: 3.24]
• alpine 3.22 → [Updates: 3.24]

apps/etcdetcetc/Dockerfile (1)

• rust 1-alpine

apps/headscale-node-cleaner/Dockerfile (2)

• ghcr.io/juanfont/headscale v0.28.0
• ghcr.io/flant/shell-operator v1.4.16 → [Updates: v1.19.5]

apps/node-joiner/Dockerfile (1)

• alpine 3.22 → [Updates: 3.24]

flux (107)

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026052408
• ghcr.io/samcday/infra-bootie 2026052408

hub/cluster/cert-manager/cert-manager.yaml

hub/cluster/cert-manager/vpas.yaml

hub/cluster/cloud-cluster/cluster-autoscaler.yaml

hub/cluster/cloud-cluster/control-plane.yaml

hub/cluster/cloud-cluster/csi-driver.yaml

hub/cluster/cloud-cluster/descheduler.yaml

hub/cluster/cloud-cluster/edge/cluster/binarylane.yaml (1)

• cluster-autoscaler 9.56.0 → [Updates: 9.57.0]

hub/cluster/cloud-cluster/edge/cluster/child-addons.yaml (3)

• cilium 1.18.0 → [Updates: 1.19.4]
• coredns 1.39.2 → [Updates: 1.46.0]
• metrics-server 3.12.1 → [Updates: 3.13.1]

hub/cluster/cloud-cluster/edge/cluster/edge-au-east-control-plane.yaml

hub/cluster/cloud-cluster/edge/cluster/source.yaml

hub/cluster/cloud-cluster/edge/parent/edge-au-east-apiserver-proxy.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]

hub/cluster/cloud-cluster/edge/parent/edge-au-east-control-plane-inputs.yaml

hub/cluster/cloud-cluster/edge/parent/edge-au-east-control-plane-legacy.yaml

hub/cluster/cloud-cluster/edge/parent/edge-au-east-node-joiner.yaml (1)

• ghcr.io/flant/shell-operator v1.4.16 → [Updates: v1.19.5]

hub/cluster/cloud-cluster/edge/parent/edge-foundation-legacy.yaml

hub/cluster/cloud-cluster/etcdetcetc.yaml (1)

• ghcr.io/samcday/infra-etcdetcetc 2026052408

hub/cluster/cloud-cluster/external-dns.yaml

hub/cluster/cloud-cluster/flux-system/kustomizations-legacy.yaml

hub/cluster/cloud-cluster/flux-webhook.yaml

hub/cluster/cloud-cluster/flux.yaml

hub/cluster/cloud-cluster/hccm.yaml

hub/cluster/cloud-cluster/headscale-node-cleaner.yaml (1)

• ghcr.io/samcday/infra-headscale-node-cleaner 2026052408

hub/cluster/cloud-cluster/keda-vpas.yaml

hub/cluster/cloud-cluster/keda.yaml

hub/cluster/cloud-cluster/kube-system/alloy.yaml

hub/cluster/cloud-cluster/kube-system/cert-manager.yaml

hub/cluster/cloud-cluster/kube-system/cilium.yaml

hub/cluster/cloud-cluster/kube-system/coredns.yaml

hub/cluster/cloud-cluster/kube-system/external-dns-crds.yaml

hub/cluster/cloud-cluster/kube-system/kube-state-metrics.yaml

hub/cluster/cloud-cluster/kube-system/metrics-server.yaml

hub/cluster/cloud-cluster/kube-system/node-exporter.yaml

hub/cluster/cloud-cluster/kube-system/oidc-rbac.yaml

hub/cluster/cloud-cluster/kube-system/prometheus-operator-crds.yaml

hub/cluster/cloud-cluster/kube-system/vpa.yaml

hub/cluster/cloud-cluster/kube-system/vpas.yaml

hub/cluster/cloud-cluster/namespaces.yaml

hub/cluster/cloud-cluster/nginx-gateway-fabric.yaml

hub/cluster/cloud-cluster/nginx-gateway-shared.yaml

hub/cluster/cloud-cluster/reloader.yaml

hub/cluster/cloud-cluster/tenants/fastboop.yaml

hub/cluster/cloud-cluster/tenants/fastboopmos.yaml

hub/cluster/cloud-cluster/tenants/fastboopmos/fastboopmos-tofu-bucket-vars.yaml

hub/cluster/cloud-cluster/tenants/fastboopmos/fastboopmos-tofu.yaml

hub/cluster/cloud-cluster/tenants/gibblox.yaml

hub/cluster/cloud-cluster/tenants/rokkitpokkit.yaml

hub/cluster/cloud-cluster/tenants/rokkitpokkit/rokkitpokkit-tofu-bucket-vars.yaml

hub/cluster/cloud-cluster/tenants/rokkitpokkit/rokkitpokkit-tofu-cloudflare-vars.yaml

hub/cluster/cloud-cluster/tofu-controller.yaml

hub/cluster/cloud-cluster/vpas.yaml

hub/cluster/cloud-cluster/wasmcloud-demo.yaml (1)

• ghcr.io/wasmcloud/components/hello-world 0.1.0

hub/cluster/cloud-cluster/wasmcloud-monitoring.yaml

hub/cluster/cloud-cluster/wasmcloud-nats.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]

hub/cluster/cloud-cluster/wasmcloud-vpas.yaml

hub/cluster/cloud-cluster/wasmcloud.yaml

hub/cluster/conduit/instance.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/matrixconduit/matrix-conduit latest@sha256:4078e80577ccaaf05290a7bb08badc321a5c44a8c8f5f3dce0fb1ae5a0825e64
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]

hub/cluster/dex/dex.yaml

hub/cluster/etcdetcetc/etcdetcetc.yaml (1)

• ghcr.io/samcday/infra-etcdetcetc 2026052408

hub/cluster/external-dns/external-dns.yaml

hub/cluster/flux-system/git-repos.yaml

hub/cluster/flux-system/helm-repos.yaml

hub/cluster/flux-system/image-policies.yaml

hub/cluster/flux-system/image-repositories.yaml

hub/cluster/flux-system/kustomizations.yaml

hub/cluster/flux-system/namespaces.yaml

hub/cluster/flux-system/tofu-controller.yaml

hub/cluster/forgejo/forgejo.yaml

hub/cluster/headscale/helm-release.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• ghcr.io/juanfont/headscale v0.28.0
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]

hub/cluster/headscale/vpas.yaml

hub/cluster/heisenbridge/instance.yaml

hub/cluster/ilumbaclusta/cilium.yaml

hub/cluster/ilumbaclusta/control-plane.yaml

hub/cluster/ilumbaclusta/coredns.yaml

hub/cluster/ilumbaclusta/oidc-rbac.yaml

hub/cluster/ilumbaclusta/vpas.yaml

hub/cluster/kube-system/snapshot-controller.yaml

hub/cluster/kube-system/tailscale-node-controller.yaml

hub/cluster/kube-system/vpa.yaml

hub/cluster/kube-system/vpas.yaml

hub/cluster/monitoring/grafana.yaml

hub/cluster/monitoring/kube-prometheus-stack.yaml

hub/cluster/monitoring/vpas.yaml

hub/cluster/openebs/openebs.yaml

hub/cluster/prometheus-operator/prometheus-operator.yaml

hub/cluster/rook-ceph/cluster.yaml

hub/cluster/rook-ceph/operator.yaml

hub/cluster/simonet/cert-manager.yaml

hub/cluster/simonet/cilium.yaml

hub/cluster/simonet/cloudflare-token.yaml

hub/cluster/simonet/control-plane.yaml

hub/cluster/simonet/coredns.yaml

hub/cluster/simonet/external-dns.yaml

hub/cluster/simonet/ingress-nginx-internal.yaml

hub/cluster/simonet/ingress-nginx-public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.6.0]

hub/cluster/simonet/metrics-server.yaml

hub/cluster/simonet/namespaces.yaml

hub/cluster/simonet/oidc-rbac.yaml

hub/cluster/simonet/prometheus-operator-crds.yaml

hub/cluster/simonet/rook-ceph.yaml

hub/cluster/simonet/snapshot-controller.yaml

hub/cluster/simonet/subnet-router.yaml

hub/cluster/simonet/syncthing.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.1.1]

hub/cluster/simonet/tailscale-node-controller.yaml

hub/cluster/simonet/vpas.yaml

hub/cluster/syncthing/instance.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.1.1]

hub/cluster/vaultwarden/instance.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/vaultwarden/server 1.35.7-alpine@sha256:9a54dad95452412afb959664dc5d6c3c3ca7c4131116ca7667888b0376320b03 → [Updates: 1.36.0-alpine]
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]

github-actions (2)

.github/workflows/claude.yml (2)

• actions/checkout v4 → [Updates: v6]
• anthropics/claude-code-action v1

.github/workflows/images.yaml (5)

• actions/checkout v5 → [Updates: v6]
• docker/setup-buildx-action v3.11.1 → [Updates: v3.12.0, v4.1.0]
• docker/login-action v3.5.0 → [Updates: v3.7.0, v4.2.0]
• docker/metadata-action v5.8.0 → [Updates: v5.10.0, v6.1.0]
• docker/build-push-action v6.18.0 → [Updates: v6.19.2, v7.2.0]

helm-values (34)

charts/etcdetcetc/values.yaml

charts/hcloud-cloud-controller-manager/values.yaml (1)

• docker.io/hetznercloud/hcloud-cloud-controller-manager v1.23.0 → [Updates: v1.32.0]

charts/k8s-control-plane/values.yaml (2)

• registry.k8s.io/kas-network-proxy/proxy-agent v0.33.0 → [Updates: v0.36.0]
• registry.k8s.io/kas-network-proxy/proxy-server v0.33.0 → [Updates: v0.36.0]

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026052408
• ghcr.io/samcday/infra-bootie 2026052408

hub/cluster/cloud-cluster/control-plane-values.yaml (2)

• registry.k8s.io/kas-network-proxy/proxy-agent v0.32.0 → [Updates: v0.36.0]
• registry.k8s.io/kas-network-proxy/proxy-server v0.32.0 → [Updates: v0.36.0]

hub/cluster/cloud-cluster/edge/child/edge-au-east-bne.yaml

hub/cluster/cloud-cluster/edge/cluster/edge-au-east-control-plane-values.yaml (2)

• registry.k8s.io/kas-network-proxy/proxy-agent v0.34.0 → [Updates: v0.36.0]
• registry.k8s.io/kas-network-proxy/proxy-server v0.34.0 → [Updates: v0.36.0]

hub/cluster/cloud-cluster/edge/parent/edge-au-east-apiserver-proxy.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]

hub/cluster/cloud-cluster/edge/parent/edge-au-east-node-joiner.yaml (1)

• ghcr.io/flant/shell-operator v1.4.16 → [Updates: v1.19.5]

hub/cluster/cloud-cluster/etcd/statefulset.yaml (1)

• quay.io/coreos/etcd v3.6.10 → [Updates: v3.6.12]

hub/cluster/cloud-cluster/etcdetcetc.yaml (1)

• ghcr.io/samcday/infra-etcdetcetc 2026052408

hub/cluster/cloud-cluster/forgejo-runners/forgejo-runner-amd64.yaml (2)

• data.forgejo.org/forgejo/runner 12
• docker 27.5-dind → [Updates: 29.5-dind]

hub/cluster/cloud-cluster/forgejo-runners/forgejo-runner-arm64.yaml (2)

• data.forgejo.org/forgejo/runner 12
• docker 27.5-dind → [Updates: 29.5-dind]

hub/cluster/cloud-cluster/headscale-node-cleaner.yaml (1)

• ghcr.io/samcday/infra-headscale-node-cleaner 2026052408

hub/cluster/cloud-cluster/metrics-write-proxy.yaml (2)

• quay.io/brancz/kube-rbac-proxy v0.21.2 → [Updates: v0.22.0]
• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]

hub/cluster/cloud-cluster/ts-apiserver.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]

hub/cluster/cloud-cluster/wasmcloud-demo.yaml (1)

• ghcr.io/wasmcloud/components/hello-world 0.1.0

hub/cluster/cloud-cluster/wasmcloud-nats.yaml (1)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]

hub/cluster/conduit/instance.yaml (5)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/matrixconduit/matrix-conduit latest@sha256:4078e80577ccaaf05290a7bb08badc321a5c44a8c8f5f3dce0fb1ae5a0825e64
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/python 3.12-alpine → [Updates: 3.14-alpine]
• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]

hub/cluster/etcdetcetc/etcdetcetc.yaml (1)

• ghcr.io/samcday/infra-etcdetcetc 2026052408

hub/cluster/flux-system/image-repositories.yaml

hub/cluster/forgejo/runner-sync-cronjob.yaml (2)

• data.forgejo.org/forgejo/runner 12
• bitnami/kubectl 1.33

hub/cluster/headscale/helm-release.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• ghcr.io/juanfont/headscale v0.28.0
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]

hub/cluster/headscale/subnet-router.yaml (1)

• ghcr.io/tailscale/tailscale v1.84.3 → [Updates: v1.98.4]

hub/cluster/heisenbridge/instance.yaml

hub/cluster/ilumbaclusta/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026052408
• ghcr.io/samcday/infra-bootie 2026052408

hub/cluster/ingress-nginx/public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.6.0]

hub/cluster/kube-system/node-tailscale.yaml

hub/cluster/monitoring/karma.yaml (1)

• ghcr.io/prymitive/karma v0.122 → [Updates: v0.131]

hub/cluster/simonet/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026052408
• ghcr.io/samcday/infra-bootie 2026052408

hub/cluster/simonet/ingress-nginx-public.yaml (1)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.6.0]

hub/cluster/simonet/syncthing.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.1.1]

hub/cluster/syncthing/instance.yaml (1)

• docker.io/syncthing/syncthing 2.0.9 → [Updates: 2.1.1]

hub/cluster/vaultwarden/instance.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/vaultwarden/server 1.35.7-alpine@sha256:9a54dad95452412afb959664dc5d6c3c3ca7c4131116ca7667888b0376320b03 → [Updates: 1.36.0-alpine]
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]

kubernetes (132)

hub/cluster/bootie/bootie.yaml (2)

• ghcr.io/samcday/infra-bootie 2026052408
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/bootie/rbac.yaml (2)

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/cert-manager/cert-manager.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cert-manager/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/cluster-autoscaler.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/csi-driver.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/descheduler.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/edge/child/edge-au-east-bne.yaml

hub/cluster/cloud-cluster/edge/cluster/binarylane.yaml (3)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/edge/cluster/child-addons.yaml (3)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/edge/cluster/edge-au-east-control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/edge/cluster/edge-au-east-workers.yaml (1)

• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cloud-cluster/edge/cluster/source.yaml (6)

• GitRepository source.toolkit.fluxcd.io/v1
• GitRepository source.toolkit.fluxcd.io/v1
• HelmRepository source.toolkit.fluxcd.io/v1
• HelmRepository source.toolkit.fluxcd.io/v1
• HelmRepository source.toolkit.fluxcd.io/v1
• HelmRepository source.toolkit.fluxcd.io/v1

hub/cluster/cloud-cluster/edge/parent/edge-au-east-apiserver-proxy.yaml (2)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/edge/parent/edge-au-east-control-plane-inputs.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/edge/parent/edge-au-east-control-plane-legacy.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/edge/parent/edge-au-east-node-joiner.yaml (3)

• ghcr.io/samcday/infra-node-joiner 2026042921
• ghcr.io/flant/shell-operator v1.4.16 → [Updates: v1.19.5]
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/edge/parent/edge-foundation-legacy.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/etcd/pdb.yaml (1)

• PodDisruptionBudget policy/v1

hub/cluster/cloud-cluster/etcd/statefulset.yaml (2)

• quay.io/coreos/etcd v3.6.10 → [Updates: v3.6.12]
• StatefulSet apps/v1

hub/cluster/cloud-cluster/etcdetcetc.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/flux-system/kustomizations-legacy.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/flux-system/kustomizations.yaml (8)

• Kustomization kustomize.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

hub/cluster/cloud-cluster/flux-webhook.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/flux.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/forgejo-runners/forgejo-runner-amd64.yaml (2)

• data.forgejo.org/forgejo/runner 12
• docker 27.5-dind → [Updates: 29.5-dind]

hub/cluster/cloud-cluster/forgejo-runners/forgejo-runner-arm64.yaml (2)

• data.forgejo.org/forgejo/runner 12
• docker 27.5-dind → [Updates: 29.5-dind]

hub/cluster/cloud-cluster/hccm.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/headscale-node-cleaner.yaml (2)

• ghcr.io/samcday/infra-headscale-node-cleaner 2026052408
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/keda-vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/keda.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/alloy.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/cert-manager.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/cilium.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/external-dns-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/kube-state-metrics.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/metrics-server.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/node-exporter.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/oidc-rbac.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/prometheus-operator-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/vpa.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/kube-system/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/metrics-write-proxy.yaml (5)

• quay.io/brancz/kube-rbac-proxy v0.21.2 → [Updates: v0.22.0]
• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]
• Deployment apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/cloud-cluster/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/nginx-gateway-fabric.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/nginx-gateway-shared.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/reloader.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tenants/fastboop.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tenants/fastboopmos.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tenants/fastboopmos/fastboopmos-tofu-bucket-vars.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tenants/fastboopmos/fastboopmos-tofu.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tenants/gibblox.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tenants/rokkitpokkit.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tenants/rokkitpokkit/rokkitpokkit-tofu-bucket-vars.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tenants/rokkitpokkit/rokkitpokkit-tofu-cloudflare-vars.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/tofu-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/ts-apiserver.yaml (4)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]
• Deployment apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/cloud-cluster/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud-demo.yaml (2)

• ghcr.io/wasmcloud/components/hello-world 0.1.0
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud-monitoring.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud-nats.yaml (4)

• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud-vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/cloud-cluster/wasmcloud.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/conduit/instance.yaml (9)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/python 3.12-alpine → [Updates: 3.14-alpine]
• ghcr.io/tailscale/tailscale v1.86.5 → [Updates: v1.98.4]
• HelmRelease helm.toolkit.fluxcd.io/v2
• CronJob batch/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

hub/cluster/dex/dex.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/etcdetcetc/etcdetcetc.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/external-dns/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/git-repos.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/helm-repos.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-policies.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-repositories.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/image-update-automation.yaml (1)

• ImageUpdateAutomation image.toolkit.fluxcd.io/v1beta2 → [Updates: image.toolkit.fluxcd.io/v1]

hub/cluster/flux-system/kustomizations.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/tofu-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/flux-system/webhook.yaml (1)

• Receiver notification.toolkit.fluxcd.io/v1

hub/cluster/forgejo/forgejo.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/forgejo/runner-sync-cronjob.yaml (3)

• data.forgejo.org/forgejo/runner 12
• bitnami/kubectl 1.33
• CronJob batch/v1

hub/cluster/forgejo/runner-sync-rbac.yaml (2)

• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/headscale/helm-release.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/headscale/subnet-router.yaml (4)

• ghcr.io/tailscale/tailscale v1.84.3 → [Updates: v1.98.4]
• StatefulSet apps/v1
• Role rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1

hub/cluster/headscale/tofu.yaml (2)

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/headscale/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/heisenbridge/instance.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/bootie.yaml (3)

• ghcr.io/samcday/infra-bootie 2026052408
• ghcr.io/samcday/infra-bootie 2026052408
• Deployment apps/v1

hub/cluster/ilumbaclusta/cilium.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/oidc-rbac.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ilumbaclusta/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/ingress-nginx/public.yaml (2)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.6.0]
• Deployment apps/v1

hub/cluster/kube-system/cilium.yaml (1)

• HelmChart helm.cattle.io/v1

hub/cluster/kube-system/node-tailscale.yaml (1)

• DaemonSet apps/v1

hub/cluster/kube-system/reloader.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/snapshot-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/tailscale-node-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/tofu.yaml (1)

• ClusterRoleBinding rbac.authorization.k8s.io/v1

hub/cluster/kube-system/vpa.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/kube-system/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/grafana.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/karma.yaml (2)

• ghcr.io/prymitive/karma v0.122 → [Updates: v0.131]
• Deployment apps/v1

hub/cluster/monitoring/kube-prometheus-stack.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/monitoring/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/openebs/openebs.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/prometheus-operator/prometheus-operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/rook-ceph/cluster.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/rook-ceph/operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/bootie.yaml (3)

• ghcr.io/samcday/infra-bootie 2026052408
• ghcr.io/samcday/infra-bootie 2026052408
• Deployment apps/v1

hub/cluster/simonet/cert-manager.yaml (3)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/cilium.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/cloudflare-token.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/control-plane.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/coredns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/external-dns.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/ingress-nginx-internal.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/ingress-nginx-public.yaml (2)

• cloudflare/cloudflared 2025.8.1 → [Updates: 2025.11.1, 2026.6.0]
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/metrics-server.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/namespaces.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/oidc-rbac.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/prometheus-operator-crds.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/rook-ceph.yaml (3)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/snapshot-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/subnet-router.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/syncthing.yaml (2)

• HelmRelease helm.toolkit.fluxcd.io/v2
• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/tailscale-node-controller.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/simonet/vpas.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/syncthing/instance.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/tailscale/tailscale-operator.yaml (1)

• HelmRelease helm.toolkit.fluxcd.io/v2

hub/cluster/vaultwarden/instance.yaml (3)

• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• docker.io/litestream/litestream v0.5.8@sha256:9874588ddb04789179d0d93cc902ba9309bb0cac4c33eb5631599d4559c60106 → [Updates: 0.5.12]
• HelmRelease helm.toolkit.fluxcd.io/v2

terraform (4)

hub/cluster/cloud-cluster/main.tf (1)

• hcloud 1.52.0 → [Updates: 1.65.0]

hub/cluster/headscale/main.tf (2)

• headscale 0.5.1
• kubernetes 2.38.0 → [Updates: 3.2.0]

hub/cluster/simonet/main.tf (2)

• cloudflare 4.38.0 → [Updates: 4.52.7, 5.20.0]
• random 3.6.2 → [Updates: 3.9.0]

hub/tofu/main.tf (7)

• b2 0.10.0 → [Updates: 0.12.1]
• cloudflare 4.52.4 → [Updates: 4.52.7, 5.20.0]
• dmsnitch 0.1.5
• github 6.6.0 → [Updates: 6.12.1]
• kubernetes 2.38.0 → [Updates: 3.2.0]
• random 3.7.2 → [Updates: 3.9.0]
• tailscale 0.21.1 → [Updates: 0.29.2]

---

• Check this box to trigger a request for Renovate to run again on this repository