Update mysql Docker tag to v9

2026-06-06 08:34:11 +00:00
20 changed files with 21 additions and 42 deletions
@@ -109,20 +109,6 @@ data:
          "matchPackageNames": ["flomp/wanderer-db", "flomp/wanderer-web"],
          "groupName": "wanderer"
        },
-        {
-          "description": "meilisearch: every version bump can require an index format migration via dump/restore (see https://www.meilisearch.com/docs/learn/update_and_migration/updating). PR #32 (v1.11.3 -> v1.45.2) on 2026-06-06 broke wanderer with `Your database version (1.11.3) is incompatible with your current engine version (1.45.2)`. Hold ALL meilisearch updates behind dashboard approval so the migration is planned before the PR even opens.",
-          "matchPackageNames": ["getmeili/meilisearch"],
-          "dependencyDashboardApproval": true
-        },
-        {
-          "description": "Postgres-family images: a major bump (e.g. 16 -> 17) requires pg_upgrade or dump/restore — the new server binary refuses to open the old data directory (`database files are incompatible with server`). PR #76 (immich-app/postgres 16 -> 17) on 2026-06-06 crashlooped immich-postgres and immich-server. Renovate's docker versioning treats these custom tag formats inconsistently, so don't trust the major/minor classification: hold ALL updates for these images behind explicit dashboard approval. Includes vanilla postgres, postgis/postgis (where the tag prefix IS the pg major), and ghcr.io/immich-app/postgres (custom `N-vectorchordX.Y.Z` form).",
-          "matchPackageNames": [
-            "postgres",
-            "postgis/postgis",
-            "ghcr.io/immich-app/postgres"
-          ],
-          "dependencyDashboardApproval": true
-        },
        {
          "description": "termix: kubernetes manager would extract the image with versioning=docker and silently skip it (release-1.11.0 fails the docker pre-check). Disable that extraction; customManagers above does the real work via github-releases.",
          "matchManagers": ["kubernetes"],
@@ -56,7 +56,7 @@ spec:
    spec:
      containers:
        - name: redis
-          image: redis:8.8-alpine
+          image: redis:7.4-alpine
          ports:
            - containerPort: 6379
              name: redis
@@ -77,7 +77,7 @@ spec:
    spec:
      containers:
        - name: redis
-          image: redis:8-alpine
+          image: redis:7-alpine
          imagePullPolicy: IfNotPresent
          args:
            - redis-server
@@ -50,7 +50,7 @@ spec:
        fsGroup: 1000
      containers:
        - name: code-server
-          image: codercom/code-server:4.123.0
+          image: codercom/code-server:4.122.1
          args:
            - --bind-addr=0.0.0.0:8080
            - --auth=none
@@ -169,7 +169,7 @@ spec:
          type: RuntimeDefault
      containers:
      - name: reloader
-        image: ghcr.io/stakater/reloader:v1.4.17
+        image: ghcr.io/stakater/reloader:v1.4.12
        imagePullPolicy: IfNotPresent
        env:
        - name: GOMAXPROCS
@@ -57,7 +57,7 @@ replicaCount: 1
 # Image configuration (optional - use defaults)
 image:
  repository: ghcr.io/cloudnative-pg/cloudnative-pg
-  tag: 1.29.1
+  tag: 1.28.1

 # Service configuration
 service:
@@ -258,7 +258,7 @@ spec:
      automountServiceAccountToken: true
      containers:
        - name: headlamp
-          image: ghcr.io/headlamp-k8s/headlamp:v0.42.0
+          image: ghcr.io/headlamp-k8s/headlamp:v0.40.0
          imagePullPolicy: IfNotPresent
          args:
            - "-in-cluster"
@@ -42,5 +42,5 @@ rbac:
 # Image configuration
 image:
  repository: registry.k8s.io/external-dns/external-dns
-  tag: v0.21.0
+  tag: v0.19.0
  pullPolicy: IfNotPresent
@@ -1,11 +1,4 @@
 ---
-# Image tag override: bumps pihole/pihole to 2026.05.0 without changing
-# the chart version. The 2026.05.0 release bundles FTL v6.6.2 which
-# imports 6 upstream dnsmasq CVE fixes (covering the dnsmasq 2.92/2.93
-# disclosures). No FTL-side config or API changes per the release notes.
-# https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.05.0
-image:
-  tag: "2026.05.0"
 DNS1: "1.1.1.1"   # Cloudflare
 DNS2: "8.8.8.8"   # Google
 DNS3: "9.9.9.9"   #Quad9
@@ -372,7 +372,7 @@ spec:
      enableServiceLinks: true
      containers:
        - name: homepage
-          image: ghcr.io/gethomepage/homepage:v1.13.1
+          image: ghcr.io/gethomepage/homepage:v1.10.1
          imagePullPolicy: IfNotPresent
          env:
            # Required for external access
@@ -535,7 +535,7 @@ spec:
      enableServiceLinks: true
      containers:
        - name: homepage
-          image: ghcr.io/gethomepage/homepage:v1.13.1
+          image: ghcr.io/gethomepage/homepage:v1.10.1
          imagePullPolicy: IfNotPresent
          env:
            # Required for external access
@@ -241,7 +241,7 @@ spec:
              value: immich-valkey
            - name: TRANSFORMERS_CACHE
              value: /cache
-          image: ghcr.io/immich-app/immich-machine-learning:v2.7.5
+          image: ghcr.io/immich-app/immich-machine-learning:v2.5.5
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
@@ -336,7 +336,7 @@ spec:
              value: http://immich-machine-learning:3003
            - name: REDIS_HOSTNAME
              value: immich-valkey
-          image: ghcr.io/immich-app/immich-server:v2.7.5
+          image: ghcr.io/immich-app/immich-server:v2.5.5
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
@@ -185,7 +185,7 @@ spec:
    spec:
      containers:
        - name: redis
-          image: redis:8-alpine
+          image: redis:7-alpine
          imagePullPolicy: IfNotPresent
          args:
            - redis-server
@@ -529,7 +529,7 @@ spec:
        runAsGroup: 472
      containers:
        - name: grafana
-          image: grafana/grafana:13.0.2
+          image: grafana/grafana:12.4.4
          ports:
            - containerPort: 3000
              name: http
@@ -395,7 +395,7 @@ spec:
    spec:
      containers:
        - name: nextcloud
-          image: docker.io/library/nextcloud:33.0.5-apache
+          image: docker.io/library/nextcloud:33.0.4-apache
          imagePullPolicy: IfNotPresent
          env:
            - name: SMTP_HOST
@@ -198,7 +198,7 @@ spec:
    spec:
      containers:
        - name: redis
-          image: redis:8-alpine
+          image: redis:7-alpine
          imagePullPolicy: IfNotPresent
          command:
            - redis-server
@@ -71,7 +71,7 @@ spec:
    spec:
      containers:
        - name: redis
-          image: redis:8-alpine
+          image: redis:7-alpine
          imagePullPolicy: IfNotPresent
          ports:
            - name: redis
@@ -158,7 +158,7 @@ spec:
      enableServiceLinks: false
      containers:
        - name: paperless
-          image: ghcr.io/paperless-ngx/paperless-ngx:2.20.15
+          image: ghcr.io/paperless-ngx/paperless-ngx:2.20.6
          imagePullPolicy: IfNotPresent
          env:
            # Database - using shared PostgreSQL in database-system namespace
@@ -43,7 +43,7 @@ spec:
    spec:
      containers:
        - name: mysql
-          image: mysql:8.4
+          image: mysql:9.7
          env:
            - name: MYSQL_ROOT_PASSWORD
              valueFrom:
@@ -121,7 +121,7 @@ spec:
    spec:
      containers:
        - name: redis
-          image: redis:8.8.0
+          image: redis:7.4.9
          ports:
            - containerPort: 6379
              name: redis
@@ -45,7 +45,7 @@ spec:
          # Renovate handles it via a customManagers regex defined in
          # admin-system/renovate.yaml (the kubernetes manager doesn't
          # process inline `# renovate:` comments).
-          image: ghcr.io/lukegus/termix:release-2.3.2
+          image: ghcr.io/lukegus/termix:release-1.11.0
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
@@ -57,7 +57,7 @@ spec:
    spec:
      containers:
        - name: meilisearch
-          image: getmeili/meilisearch:v1.11.3
+          image: getmeili/meilisearch:v1.45.2
          env:
            - name: MEILI_MASTER_KEY
              valueFrom: