Merge branch 'main' into renovate/kubernetes-monorepo

.gitea/workflows/ai-review.yaml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v7
+      uses: actions/checkout@v4
       with:
         submodules: true
         fetch-depth: 0
@@ -40,11 +40,11 @@ jobs:
       run: git submodule update --remote --merge
 
     - name: Run inline review
-      uses: docker://nikitafilonov/ai-review:v0.77.0
+      uses: docker://nikitafilonov/ai-review:v0.64.0
       with:
         args: ai-review run-inline
 
     - name: Run summary review
-      uses: docker://nikitafilonov/ai-review:v0.77.0
+      uses: docker://nikitafilonov/ai-review:v0.64.0
       with:
         args: ai-review run-summary

.gitea/workflows/scan.yaml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
-      uses: actions/checkout@v7
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
     - name: Install TruffleHog

cluster-resources/gitea-backup-cronjob.yaml

@@ -29,7 +29,7 @@ spec:
                   topologyKey: kubernetes.io/hostname
           initContainers:
             - name: gitea-dump
-              image: gitea/gitea:1.27.3
+              image: gitea/gitea:1.25.4
               command:
                 - sh
                 - -c

devbox.json

@@ -2,26 +2,26 @@
   "$schema": "https://raw.githubusercontent.com/jetify-com/devbox/0.16.0/.schema/devbox.schema.json",
   "packages": [
     "kubectl@1.36.3",
-    "kubernetes-helm@4.2.4",
+    "kubernetes-helm@3.18.4",
-    "k9s@0.51.0",
+    "k9s@0.50.7",
-    "kubeseal@0.38.4",
+    "kubeseal@0.30.0",
-    "argocd@3.4.6",
+    "argocd@2.14.11",
-    "kubecm@0.35.1",
+    "kubecm@0.33.1",
     "kubectl-tree@0.6.0",
-    "kind@0.32.0",
+    "kind@0.29.0",
-    "kustomize@5.8.1",
+    "kustomize@5.7.0",
-    "kyverno@1.19.0",
+    "kyverno@1.14.3",
-    "syft@1.51.0",
+    "syft@1.29.0",
-    "grype@0.118.0",
+    "grype@0.92.2",
-    "traefik@3.7.10",
+    "traefik@3.6.7",
-    "claude-code@2.1.245",
+    "claude-code@0.2.122",
     "go@latest",
-    "dotnet-sdk@8.0.424",
+    "dotnet-sdk@2.1.810",
-    "opentofu@1.12.5",
+    "opentofu@1.11.6",
-    "_1password@2.30.0",
+    "_1password@1.12.2",
-    "github-cli@2.23.0",
+    "github-cli@latest",
-    "upcloud-cli@3.36.0",
+    "upcloud-cli@3.29.0",
-    "awscli2@2.35.11"
+    "awscli2@2.34.24"
   ],
   "shell": {
     "init_hook": [

infra/base/cert-manager-application/cert-manager-application.yaml

@@ -17,7 +17,7 @@ spec:
   source:
     repoURL: https://charts.jetstack.io
     chart: cert-manager
-    targetRevision: "v1.21.2"
+    targetRevision: "v1.14.0"
 
     helm:
       values: |

infra/base/gitea-actions/gitea-actions.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://dl.gitea.com/charts
     chart: actions
-    targetRevision: "0.1.2"
+    targetRevision: "0.0.5"
     helm:
       releaseName: gitea-actions
       valueFiles:

infra/base/gitea/gitea.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://dl.gitea.com/charts
     chart: gitea
-    targetRevision: "12.7.0"
+    targetRevision: "12.6.0"
     helm:
       releaseName: gitea
       valueFiles:

infra/base/grafana/grafana.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://grafana.github.io/helm-charts
     chart: grafana
-    targetRevision: "10.5.15"
+    targetRevision: "8.0.0"
     helm:
       releaseName: grafana
       valueFiles:

infra/base/loki/loki.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://grafana.github.io/helm-charts
     chart: loki
-    targetRevision: "7.3.0"
+    targetRevision: "7.0.0"
     helm:
       releaseName: loki
       valueFiles:

infra/base/opencost/opencost.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://opencost.github.io/opencost-helm-chart
     chart: opencost
-    targetRevision: "1.43.2"
+    targetRevision: "1.42.0"
     helm:
       releaseName: opencost
       valueFiles:

infra/base/prometheus/prometheus.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://prometheus-community.github.io/helm-charts
     chart: prometheus
-    targetRevision: "28.16.0"
+    targetRevision: "28.9.0"
     helm:
       releaseName: prometheus
       valueFiles:

infra/base/traefik-application/traefik-application.yaml

@@ -24,7 +24,7 @@ spec:
   sources:
   - repoURL: https://traefik.github.io/charts
     chart: traefik
-    targetRevision: "28.3.0"
+    targetRevision: "28.0.0"
     helm:
       releaseName: traefik
       valueFiles:

infra/overlays/upc-dev/vaultwarden/vaultwarden.yaml

@@ -17,7 +17,7 @@ spec:
   sources:
   - repoURL: https://guerzon.github.io/vaultwarden
     chart: vaultwarden
-    targetRevision: "0.46.2"
+    targetRevision: "0.36.4"
     helm:
       releaseName: vaultwarden
       valueFiles: