chore(deps): update actions/checkout action to v7

commit 00efdd8cd2
Author: gitea_admin <admin@forteapps.net>
Date:   Tue Sep 29 07:00:47 2026 +0000

    chore(deps): update dependency github-cli to v2 (#47)

    This PR contains the following updates:

    | Package | Update | Change |
    |---|---|---|
    | [github-cli](https://cli.github.com/) | major | `0.12.0` → `2.23.0` |

    ---

    ### Configuration

    📅 **Schedule**: (in timezone Europe/Oslo)

    - Branch creation
      - At any time (no schedule defined)
    - Automerge
      - At any time (no schedule defined)

    🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

    ---

     - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

    ---

    This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTIuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjExMi4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->

    ---------

    Co-authored-by: Renovate Bot <renovate@forteapps.net>
    Reviewed-on: #47
    Reviewed-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com>
    Co-authored-by: gitea_admin <admin@forteapps.net>

commit d480daccc8
Author: gitea_admin <admin@forteapps.net>
Date:   Tue Sep 29 07:00:03 2026 +0000

    chore(deps): update dependency argocd to v3 (#43)

    This PR contains the following updates:

    | Package | Update | Change |
    |---|---|---|
    | [argocd](https://argo-cd.readthedocs.io/en/stable/) | major | `2.14.11` → `3.4.6` |

    ---

    ### Configuration

    📅 **Schedule**: (in timezone Europe/Oslo)

    - Branch creation
      - At any time (no schedule defined)
    - Automerge
      - At any time (no schedule defined)

    🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

    ---

     - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

    ---

    This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTIuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjExMi4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->

    ---------

    Co-authored-by: Renovate Bot <renovate@forteapps.net>
    Reviewed-on: #43
    Reviewed-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com>
    Co-authored-by: gitea_admin <admin@forteapps.net>

commit 66f1dce46f
Author: gitea_admin <admin@forteapps.net>
Date:   Tue Sep 29 06:59:17 2026 +0000

    chore(deps): update dependency dotnet-sdk to v8 (#46)

    This PR contains the following updates:

    | Package | Update | Change |
    |---|---|---|
    | [dotnet-sdk](https://dotnet.github.io/) | major | `2.1.810` → `8.0.424` |

    ---

    ### Configuration

    📅 **Schedule**: (in timezone Europe/Oslo)

    - Branch creation
      - At any time (no schedule defined)
    - Automerge
      - At any time (no schedule defined)

    🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

    ---

     - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

    ---

    This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTIuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjExMi4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->

    ---------

    Co-authored-by: Renovate Bot <renovate@forteapps.net>
    Reviewed-on: #46
    Reviewed-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com>
    Co-authored-by: gitea_admin <admin@forteapps.net>

.gitea/workflows/ai-review.yaml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
       with:
         submodules: true
         fetch-depth: 0
@@ -40,11 +40,11 @@ jobs:
       run: git submodule update --remote --merge
 
     - name: Run inline review
-      uses: docker://nikitafilonov/ai-review:v0.64.0
+      uses: docker://nikitafilonov/ai-review:v0.77.0
       with:
         args: ai-review run-inline
 
     - name: Run summary review
-      uses: docker://nikitafilonov/ai-review:v0.64.0
+      uses: docker://nikitafilonov/ai-review:v0.77.0
       with:
         args: ai-review run-summary

.gitea/workflows/scan.yaml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
       with:
         fetch-depth: 0
     - name: Install TruffleHog

cluster-resources/gitea-backup-cronjob.yaml

@@ -29,7 +29,7 @@ spec:
                   topologyKey: kubernetes.io/hostname
           initContainers:
             - name: gitea-dump
-              image: gitea/gitea:1.25.4
+              image: gitea/gitea:1.27.3
               command:
                 - sh
                 - -c

devbox.json

@@ -1,27 +1,27 @@
 {
   "$schema": "https://raw.githubusercontent.com/jetify-com/devbox/0.16.0/.schema/devbox.schema.json",
   "packages": [
-    "kubectl@1.33.2",
+    "kubectl@1.36.3",
-    "kubernetes-helm@3.18.4",
+    "kubernetes-helm@3.20.2",
     "k9s@0.51.0",
-    "kubeseal@0.30.0",
+    "kubeseal@0.38.4",
-    "argocd@2.14.11",
+    "argocd@3.4.6",
-    "kubecm@0.33.1",
+    "kubecm@0.35.1",
     "kubectl-tree@0.6.0",
-    "kind@0.29.0",
+    "kind@0.32.0",
-    "kustomize@5.7.0",
+    "kustomize@5.8.1",
-    "kyverno@1.14.3",
+    "kyverno@1.19.0",
-    "syft@1.29.0",
+    "syft@1.51.0",
     "grype@0.118.0",
-    "traefik@3.6.7",
+    "traefik@3.7.10",
-    "claude-code@0.2.122",
+    "claude-code@2.1.245",
     "go@latest",
-    "dotnet-sdk@2.1.810",
+    "dotnet-sdk@8.0.424",
-    "opentofu@1.11.6",
+    "opentofu@1.12.5",
-    "_1password@1.12.2",
+    "_1password@2.30.0",
-    "github-cli@latest",
+    "github-cli@2.23.0",
-    "upcloud-cli@3.29.0",
+    "upcloud-cli@3.36.0",
-    "awscli2@2.34.24"
+    "awscli2@2.35.11"
   ],
   "shell": {
     "init_hook": [

infra/base/cert-manager-application/cert-manager-application.yaml

@@ -17,7 +17,7 @@ spec:
   source:
     repoURL: https://charts.jetstack.io
     chart: cert-manager
-    targetRevision: "v1.14.0"
+    targetRevision: "v1.21.2"
 
     helm:
       values: |

infra/base/gitea-actions/gitea-actions.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://dl.gitea.com/charts
     chart: actions
-    targetRevision: "0.0.5"
+    targetRevision: "0.1.2"
     helm:
       releaseName: gitea-actions
       valueFiles:

infra/base/gitea/gitea.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://dl.gitea.com/charts
     chart: gitea
-    targetRevision: "12.6.0"
+    targetRevision: "12.7.0"
     helm:
       releaseName: gitea
       valueFiles:

infra/base/grafana/grafana.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://grafana.github.io/helm-charts
     chart: grafana
-    targetRevision: "8.0.0"
+    targetRevision: "8.15.0"
     helm:
       releaseName: grafana
       valueFiles:

infra/base/loki/loki.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://grafana.github.io/helm-charts
     chart: loki
-    targetRevision: "7.0.0"
+    targetRevision: "7.3.0"
     helm:
       releaseName: loki
       valueFiles:

infra/base/opencost/opencost.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://opencost.github.io/opencost-helm-chart
     chart: opencost
-    targetRevision: "1.42.0"
+    targetRevision: "1.43.2"
     helm:
       releaseName: opencost
       valueFiles:

infra/base/prometheus/prometheus.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://prometheus-community.github.io/helm-charts
     chart: prometheus
-    targetRevision: "28.9.0"
+    targetRevision: "28.16.0"
     helm:
       releaseName: prometheus
       valueFiles:

infra/base/traefik-application/traefik-application.yaml

@@ -24,7 +24,7 @@ spec:
   sources:
   - repoURL: https://traefik.github.io/charts
     chart: traefik
-    targetRevision: "28.0.0"
+    targetRevision: "28.3.0"
     helm:
       releaseName: traefik
       valueFiles:

infra/overlays/upc-dev/vaultwarden/vaultwarden.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://guerzon.github.io/vaultwarden
     chart: vaultwarden
-    targetRevision: "0.36.4"
+    targetRevision: "0.46.2"
     helm:
       releaseName: vaultwarden
       valueFiles: