Update python Docker tag to v3.14

admin-system/renovate.yaml

@@ -46,24 +46,10 @@ data:
       "dependencyDashboardTitle": "Renovate Dependency Dashboard",
       "prHourlyLimit": 16,
       "prConcurrentLimit": 16,
-      "enabledManagers": ["kubernetes", "helm-values", "custom.regex"],
+      "enabledManagers": ["kubernetes", "helm-values"],
       "kubernetes": {
         "managerFilePatterns": ["/.+\\.ya?ml$/"]
       },
-      "customManagers": [
-        {
-          "description": "termix uses a release-X.Y.Z prefixed tag that the kubernetes manager's docker-versioning pre-check rejects (so no PRs are ever created). This customManager extracts the image directly, redirects the version lookup to GitHub Releases at Termix-SSH/Termix (which exposes timestamps the 3-day stability gate needs), and uses extractVersion to strip the `release-` prefix so loose semver can parse it.",
-          "customType": "regex",
-          "managerFilePatterns": ["/termix-system/.+\\.ya?ml$/"],
-          "matchStrings": [
-            "image:\\s+(?<depName>ghcr\\.io/lukegus/termix):(?<currentValue>release-\\d+\\.\\d+\\.\\d+)"
-          ],
-          "datasourceTemplate": "github-releases",
-          "packageNameTemplate": "Termix-SSH/Termix",
-          "versioningTemplate": "loose",
-          "extractVersionTemplate": "^release-(?<version>.+)$"
-        }
-      ],
       "packageRules": [
         {
           "description": "All apps: 3-day stability gate before any PR opens",
@@ -108,12 +94,6 @@ data:
           "description": "wanderer: db + web update together in one PR",
           "matchPackageNames": ["flomp/wanderer-db", "flomp/wanderer-web"],
           "groupName": "wanderer"
-        },
-        {
-          "description": "termix: kubernetes manager would extract the image with versioning=docker and silently skip it (release-1.11.0 fails the docker pre-check). Disable that extraction; customManagers above does the real work via github-releases.",
-          "matchManagers": ["kubernetes"],
-          "matchPackageNames": ["ghcr.io/lukegus/termix"],
-          "enabled": false
         }
       ],
       "labels": ["renovate"]

glance-system/glance-helper.yaml

@@ -1384,7 +1384,7 @@ spec:
         # Calendar iCal URLs (JSON object: {"name": "url", ...})
         - name: CALENDAR_ICAL_URLS
           value: '{"Órák": "https://calendar.google.com/calendar/ical/b2884faf3db792ac082a6206057552c79080716efd5f966e169a41fc500e1c1c%40group.calendar.google.com/private-0998d8053909ba4449c2f0a6409ce3de/basic.ics", "Családi": "https://calendar.google.com/calendar/ical/nitq3l0if4gn54k438obat5ia0%40group.calendar.google.com/private-59afcf70fee1a798ec369b86d9883b46/basic.ics"}'
-        image: python:3.12-bookworm
+        image: python:3.14-bookworm
         imagePullPolicy: IfNotPresent
         name: glance-helper
         ports:

termix-system/termix.yaml

@@ -41,10 +41,7 @@ spec:
     spec:
       containers:
         - name: termix
-          # NOTE: termix uses a non-semver tag pattern (release-X.Y.Z).
+          # renovate: datasource=github-releases depName=Termix-SSH/Termix versioning=loose extractVersion=^release-(?<version>.+)$
-          # Renovate handles it via a customManagers regex defined in
-          # admin-system/renovate.yaml (the kubernetes manager doesn't
-          # process inline `# renovate:` comments).
           image: ghcr.io/lukegus/termix:release-1.11.0
           imagePullPolicy: IfNotPresent
           ports: