chore(helm): pin dependencies (#42168)

This PR contains the following updates: | Package | Update | Change | |---|---|---| | alpine | pinDigest | -> `4b7ce07` | | docker.io/biospheere/promcord | pinDigest | -> `16d4fd2` | | docker.io/cooleye72/xmrig | pinDigest | -> `f7e590b` | | docker.io/drpsychick/arkserver | pinDigest | -> `5336feb` | | docker.io/nicolargo/glances | pinDigest | -> `4519127` | | docker.io/onerahmet/openai-whisper-asr-webservice | pinDigest | -> `1132aa0` | | docker.io/onerahmet/openai-whisper-asr-webservice | pinDigest | -> `03b4023` | | docker.io/shaarli/shaarli | pinDigest | -> `12bc36e` | | [ghcr.io/cloudnative-pg/postgis](https://redirect.github.com/postgis/docker-postgis) | pinDigest | -> `bb5a859` | | [ghcr.io/cloudnative-pg/postgis](https://redirect.github.com/postgis/docker-postgis) | pinDigest | -> `4596b19` | | ghcr.io/cloudnative-pg/postgresql | pinDigest | -> `9f8ea5c` | | ghcr.io/cloudnative-pg/postgresql | pinDigest | -> `036436c` | | [ghcr.io/kanboard/kanboard](https://kanboard.org) ([source](https://redirect.github.com/kanboard/kanboard)) | pinDigest | -> `84703c9` | | [ghcr.io/postfinance/kubelet-csr-approver](https://images.chainguard.dev/directory/image/static/overview) ([source](https://redirect.github.com/chainguard-images/images/tree/HEAD/images/static)) | pinDigest | -> `08d0064` | | [ghcr.io/spegel-org/spegel](https://redirect.github.com/spegel-org/spegel) | pinDigest | -> `4454837` | | [ghcr.io/tensorchord/cloudnative-pgvecto.rs](https://redirect.github.com/tensorchord/cloudnative-pgvecto.rs) | pinDigest | -> `f1a19d4` | | [ghcr.io/tensorchord/cloudnative-pgvecto.rs](https://redirect.github.com/tensorchord/cloudnative-pgvecto.rs) | pinDigest | -> `dbdeddf` | | [ghcr.io/tensorchord/cloudnative-vectorchord](https://redirect.github.com/tensorchord/cloudnative-vectorchord) | pinDigest | -> `a0776b5` | | [ghcr.io/tensorchord/cloudnative-vectorchord](https://redirect.github.com/tensorchord/cloudnative-vectorchord) | pinDigest | -> `1978732` | | [ghcr.io/timshel/vaultwarden](https://redirect.github.com/timshel/vaultwarden) | pinDigest | -> `56e2790` | | hello-world | pinDigest | -> `f793160` | | [oci.trueforge.org/containerforge/adguardhome-sync](https://ghcr.io/trueforge-org/adguardhome-sync) ([source](https://redirect.github.com/bakito/adguardhome-sync)) | pinDigest | -> `5265617` | | [oci.trueforge.org/containerforge/airsonic-advanced](https://ghcr.io/trueforge-org/airsonic-advanced) ([source](https://redirect.github.com/kagemomiji/airsonic-advanced)) | pinDigest | -> `46c08c1` | | [oci.trueforge.org/containerforge/autoscan](https://ghcr.io/trueforge-org/autoscan) ([source](https://redirect.github.com/cloudbox/autoscan)) | pinDigest | -> `736ba3f` | | [oci.trueforge.org/containerforge/bazarr](https://ghcr.io/trueforge-org/bazarr) ([source](https://redirect.github.com/morpheus65535/bazarr)) | pinDigest | -> `1b4d675` | | [oci.trueforge.org/containerforge/calibre-web](https://ghcr.io/trueforge-org/calibre-web) ([source](https://redirect.github.com/janeczku/calibre-web)) | pinDigest | -> `c46f9b9` | | [oci.trueforge.org/containerforge/cloudflareddns](https://ghcr.io/trueforge-org/cloudflareddns) ([source](https://www.hotio.dev)) | pinDigest | -> `d8500f2` | | [oci.trueforge.org/containerforge/code-server](https://ghcr.io/trueforge-org/code-server) ([source](https://coder.com)) | pinDigest | -> `b7d6b37` | | [oci.trueforge.org/containerforge/doplarr](https://ghcr.io/trueforge-org/doplarr) ([source](https://redirect.github.com/kiranshila/doplarr)) | pinDigest | -> `7d5900d` | | [oci.trueforge.org/containerforge/duplicacy](https://ghcr.io/trueforge-org/duplicacy) ([source](https://duplicacy.com)) | pinDigest | -> `6d73957` | | [oci.trueforge.org/containerforge/duplicati](https://ghcr.io/trueforge-org/duplicati) ([source](https://www.duplicati.com/)) | pinDigest | -> `15ce9ee` | | [oci.trueforge.org/containerforge/emby](https://ghcr.io/trueforge-org/emby) ([source](https://redirect.github.com/MediaBrowser/Emby.Releases)) | pinDigest | -> `a90e03f` | | [oci.trueforge.org/containerforge/esphome](https://ghcr.io/trueforge-org/esphome) ([source](https://redirect.github.com/esphome/esphome)) | pinDigest | -> `c805a6a` | | [oci.trueforge.org/containerforge/flood](https://ghcr.io/trueforge-org/flood) ([source](https://redirect.github.com/thomst08/requestrr)) | pinDigest | -> `549bb90` | | [oci.trueforge.org/containerforge/foldingathome](https://ghcr.io/trueforge-org/foldingathome) ([source](https://foldingathome.org/)) | pinDigest | -> `f59c052` | | [oci.trueforge.org/containerforge/go-yq](https://ghcr.io/trueforge-org/go-yq) | pinDigest | -> `d2cbd92` | | [oci.trueforge.org/containerforge/home-assistant](https://ghcr.io/trueforge-org/home-assistant) ([source](https://redirect.github.com/home-assistant/core)) | pinDigest | -> `0002a9a` | | [oci.trueforge.org/containerforge/jackett](https://ghcr.io/trueforge-org/jackett) ([source](https://redirect.github.com/Jackett/Jackett)) | pinDigest | -> `a0486c5` | | [oci.trueforge.org/containerforge/kavita](https://ghcr.io/trueforge-org/kavita) ([source](https://redirect.github.com/Kareadita/Kavita)) | pinDigest | -> `e2608ab` | | [oci.trueforge.org/containerforge/kube-sa-proxy](https://ghcr.io/trueforge-org/kube-sa-proxy) ([source](https://redirect.github.com/Jackett/Jackett)) | pinDigest | -> `4c8faef` | | [oci.trueforge.org/containerforge/kubectl](https://ghcr.io/trueforge-org/kubectl) ([source](https://redirect.github.com/Jackett/Jackett)) | pinDigest | -> `94fea8d` | | [oci.trueforge.org/containerforge/lidarr](https://ghcr.io/trueforge-org/lidarr) ([source](https://redirect.github.com/Lidarr/Lidarr)) | pinDigest | -> `0d09646` | | [oci.trueforge.org/containerforge/mariadb-client](https://ghcr.io/trueforge-org/mariadb-client) ([source](https://truecharts.org)) | pinDigest | -> `340be12` | | [oci.trueforge.org/containerforge/mongosh](https://ghcr.io/trueforge-org/mongosh) ([source](https://truecharts.org)) | pinDigest | -> `e0d10eb` | | [oci.trueforge.org/containerforge/nextcloud-fpm](https://ghcr.io/trueforge-org/nextcloud-fpm) ([source](https://nextcloud.com)) | pinDigest | -> `4e8c007` | | [oci.trueforge.org/containerforge/nextcloud-imaginary](https://ghcr.io/trueforge-org/nextcloud-imaginary) ([source](https://nextcloud.com)) | pinDigest | -> `9b52488` | | [oci.trueforge.org/containerforge/nextcloud-notify-push](https://ghcr.io/trueforge-org/nextcloud-notify-push) ([source](https://redirect.github.com/nextcloud/notify_push)) | pinDigest | -> `4211461` | | [oci.trueforge.org/containerforge/nginx](https://ghcr.io/trueforge-org/nginx) ([source](https://hub.docker.com/_/nginx)) | pinDigest | -> `d965e44` | | [oci.trueforge.org/containerforge/nzbget](https://ghcr.io/trueforge-org/nzbget) ([source](https://redirect.github.com/nzbgetcom/nzbget)) | pinDigest | -> `bda633e` | | [oci.trueforge.org/containerforge/nzbhydra2](https://ghcr.io/trueforge-org/nzbhydra2) ([source](https://redirect.github.com/theotherp/nzbhydra2)) | pinDigest | -> `449f728` | | [oci.trueforge.org/containerforge/plex](https://ghcr.io/trueforge-org/plex) ([source](https://redirect.github.com/plexinc/pms-docker)) | pinDigest | -> `960488f` | | [oci.trueforge.org/containerforge/postgresql-client](https://ghcr.io/trueforge-org/postgresql-client) ([source](https://truecharts.org)) | pinDigest | -> `99c15c6` | | [oci.trueforge.org/containerforge/prowlarr](https://ghcr.io/trueforge-org/prowlarr) ([source](https://redirect.github.com/Prowlarr/Prowlarr)) | pinDigest | -> `d07d985` | | [oci.trueforge.org/containerforge/qbittorrent](https://ghcr.io/trueforge-org/qbittorrent) ([source](https://redirect.github.com/qbittorrent/qBittorrent)) | pinDigest | -> `d331077` | | [oci.trueforge.org/containerforge/radarr](https://ghcr.io/trueforge-org/radarr) ([source](https://redirect.github.com/Radarr/Radarr)) | pinDigest | -> `0e9d403` | | [oci.trueforge.org/containerforge/renovate](https://ghcr.io/trueforge-org/renovate) ([source](https://redirect.github.com/renovate/renovate)) | pinDigest | -> `7b0d007` | | [oci.trueforge.org/containerforge/sabnzbd](https://ghcr.io/trueforge-org/sabnzbd) ([source](https://redirect.github.com/sabnzbd/sabnzbd)) | pinDigest | -> `504b4b3` | | [oci.trueforge.org/containerforge/scratch](https://ghcr.io/trueforge-org/scratch) ([source](https://hub.docker.com/_/ubuntu)) | pinDigest | -> `b6f7b7d` | | [oci.trueforge.org/containerforge/seerr](https://ghcr.io/trueforge-org/seerr) ([source](https://redirect.github.com/seerr-team/seerr)) | pinDigest | -> `5a6cb82` | | [oci.trueforge.org/containerforge/sonarr](https://ghcr.io/trueforge-org/sonarr) ([source](https://redirect.github.com/Sonarr/Sonarr)) | pinDigest | -> `05a5af5` | | [oci.trueforge.org/containerforge/theme-park](https://ghcr.io/trueforge-org/theme-park) ([source](https://redirect.github.com/themepark-dev/theme.park)) | pinDigest | -> `5adab62` | | [oci.trueforge.org/containerforge/ubuntu](https://ghcr.io/trueforge-org/ubuntu) ([source](https://hub.docker.com/_/ubuntu)) | pinDigest | -> `435d3cf` | | [oci.trueforge.org/containerforge/valkey-tools](https://ghcr.io/trueforge-org/valkey-tools) ([source](https://truecharts.org)) | pinDigest | -> `272f59f` | | [oci.trueforge.org/tccr/alpine](https://redirect.github.com/trueforge-org/truecharts) | pinDigest | -> `6dc807a` | | registry.k8s.io/sig-storage/snapshot-controller | pinDigest | -> `b845f4b` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).
2025-11-27 16:05:24 +01:00
parent 41ae409e12
commit 52ef92f785
45 changed files with 69 additions and 69 deletions
@@ -22,7 +22,7 @@ workload:
          enabled: true
          type: init
          name: setup-postgres-dirs
-          image: alpine:3.22
+          image: alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
          command:
            - /bin/sh
            - -c
@@ -584,102 +584,102 @@ tailscaleImage:

 codeserverImage:
  repository: oci.trueforge.org/containerforge/code-server
-  tag: "4.105.1"
+  tag: "4.105.1@sha256:b7d6b37ac38e1108497520694b68abc9d2d4057e200c011522eeab14330e13af"
  pullPolicy: IfNotPresent

 alpineImage:
  repository: oci.trueforge.org/tccr/alpine
-  tag: v3.22.1
+  tag: v3.22.1@sha256:6dc807ae4f2867cb2d00d061f8f579f1966420ad792c179ac68072ab235109f8
  pullPolicy: IfNotPresent

 ubuntuImage:
  repository: oci.trueforge.org/containerforge/ubuntu
-  tag: "24.04"
+  tag: "24.04@sha256:435d3cfa071624ce5e12c531ede975f9ba55b0acd5b5d20c3f8e082a745b639e"
  pullPolicy: IfNotPresent

 scratchImage:
  repository: oci.trueforge.org/containerforge/scratch
-  tag: "1.0.0"
+  tag: "1.0.0@sha256:b6f7b7d519f32e7157d64c8df7b36b7dc8808283e6185a6cb6134fd326db9c13"
  pullPolicy: IfNotPresent

 kubectlImage:
  repository: oci.trueforge.org/containerforge/kubectl
-  tag: "1.31.1"
+  tag: "1.31.1@sha256:94fea8d7a48bc7cb028f1845aba1affb724c461182516bb54b214314ca5a571a"
  pullPolicy: IfNotPresent

 wgetImage:
  repository: oci.trueforge.org/containerforge/ubuntu
-  tag: "24.04"
+  tag: "24.04@sha256:435d3cfa071624ce5e12c531ede975f9ba55b0acd5b5d20c3f8e082a745b639e"
  pullPolicy: IfNotPresent

 yqImage:
  pullPolicy: IfNotPresent
  repository: oci.trueforge.org/containerforge/go-yq
-  tag: "4.48.2"
+  tag: "4.48.2@sha256:d2cbd9295159a43fe5e8873871768305810bb5d1e85ea61fad69d972c7d26ef4"

 postgresClientImage:
  repository: oci.trueforge.org/containerforge/postgresql-client
-  tag: "1.1.0"
+  tag: "1.1.0@sha256:99c15c699dd53fb62c0795a7313402557219ab4e29b84b6bedddf6c4c8373fba"
  pullPolicy: IfNotPresent

 mariadbClientImage:
  repository: oci.trueforge.org/containerforge/mariadb-client
-  tag: "1.1.0"
+  tag: "1.1.0@sha256:340be121addd297f79e95bec027dd0d567c8a98817d0354269011e2f7dbdd31b"
  pullPolicy: IfNotPresent

 redisClientImage:
  repository: oci.trueforge.org/containerforge/valkey-tools
-  tag: "1.1.0"
+  tag: "1.1.0@sha256:272f59fc2e77b1b918b8fe17aa121c3ee8d8472bd72d8525e69990a8480a03e2"
  pullPolicy: IfNotPresent

 valkeyClientImage:
  repository: oci.trueforge.org/containerforge/valkey-tools
-  tag: "1.1.0"
+  tag: "1.1.0@sha256:272f59fc2e77b1b918b8fe17aa121c3ee8d8472bd72d8525e69990a8480a03e2"
  pullPolicy: IfNotPresent

 mongodbClientImage:
  repository: oci.trueforge.org/containerforge/mongosh
-  tag: "1.2.0"
+  tag: "1.2.0@sha256:e0d10ebea7e3a8178e2e12269a9031e69d68fb427af4d3c8372da603b26f2bab"
  pullPolicy: IfNotPresent

 postgres15Image:
  repository: ghcr.io/cloudnative-pg/postgresql
-  tag: "15.15"
+  tag: "15.15@sha256:036436c682db5a72cb270de5396caf6e660f1b2c12249ca9ba2c891303f38a74"
  pullPolicy: IfNotPresent

 postgres16Image:
  repository: ghcr.io/cloudnative-pg/postgresql
-  tag: "16.11"
+  tag: "16.11@sha256:9f8ea5c7c1bd7bc1c02b7c848f50a4eba37b80469c6194c67c453dc59be74b26"
  pullPolicy: IfNotPresent

 postgresPostgis15Image:
  repository: ghcr.io/cloudnative-pg/postgis
-  tag: "15-3.4"
+  tag: "15-3.4@sha256:4596b193991cd2463a07d40e3d3d62c59f046a7dece8f163ad1aba15925a38e4"
  pullPolicy: IfNotPresent

 postgresPostgis16Image:
  repository: ghcr.io/cloudnative-pg/postgis
-  tag: "16-3.4"
+  tag: "16-3.4@sha256:bb5a8590a8c934767482e34e1d103253f412aec703b77bbc52ad9044bf6e56f9"
  pullPolicy: IfNotPresent

 postgresVectors15Image:
  repository: ghcr.io/tensorchord/cloudnative-pgvecto.rs
-  tag: "15.7-v0.2.1"
+  tag: "15.7-v0.2.1@sha256:dbdeddf0d635f76df41f745407816c87c7468df35e3b7b0665ca4e0500ff3048"
  pullPolicy: IfNotPresent

 postgresVectors16Image:
  repository: ghcr.io/tensorchord/cloudnative-pgvecto.rs
-  tag: "16.3-v0.2.1"
+  tag: "16.3-v0.2.1@sha256:f1a19d4fc4073b0671a72ad34ef012aa20d21b3ddf5b4b0c9077d54450db679a"
  pullPolicy: IfNotPresent

 postgresVectorchord15Image:
  repository: ghcr.io/tensorchord/cloudnative-vectorchord
-  tag: "15.14-0.5.3"
+  tag: "15.14-0.5.3@sha256:1978732dc1e7e9ef94b9e806a094fcb123afab1e50a7e878e2d29de8b849cf47"
  pullPolicy: IfNotPresent

 postgresVectorchord16Image:
  repository: ghcr.io/tensorchord/cloudnative-vectorchord
-  tag: "16.10-0.5.3"
+  tag: "16.10-0.5.3@sha256:a0776b514bb23858d8aa59b08587223f8b449bba1b278ffbcf85e097d6504eb0"
  pullPolicy: IfNotPresent

 # -- OpenVPN specific configuration
@@ -1,7 +1,7 @@
 image:
  pullPolicy: IfNotPresent
  repository: oci.trueforge.org/containerforge/adguardhome-sync
-  tag: "0.8.2"
+  tag: "0.8.2@sha256:526561770ed2b83594dbf9b2f012f74462e4dc8f20deab57042331dac5c421e8"

 service:
  main:
@@ -1,6 +1,6 @@
 image:
  repository: oci.trueforge.org/containerforge/airsonic-advanced
-  tag: "11.1.4"
+  tag: "11.1.4@sha256:46c08c18049330839def902dac6ab56efaef757c4247275cf8b62ae9bcf2e5ac"
  pullPolicy: IfNotPresent

 securityContext:
@@ -1,6 +1,6 @@
 image:
  repository: docker.io/drpsychick/arkserver
-  tag: latest
+  tag: latest@sha256:5336febbd30a52de52e3f1113d87e9f9e422b311e3e866d9d17fa8cbfdeb7f57
 securityContext:
  pod:
    fsGroup: 1001
@@ -1,7 +1,7 @@
 image:
  pullPolicy: IfNotPresent
  repository: oci.trueforge.org/containerforge/autoscan
-  tag: 1.4.0
+  tag: 1.4.0@sha256:736ba3fd7df20360ec2b92c6612e928255633a9801360b600dbb98c1ea13a1c4
 securityContext:
  container:
    readOnlyRootFilesystem: false
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/bazarr
  pullPolicy: IfNotPresent
-  tag: 1.5.3
+  tag: 1.5.3@sha256:1b4d675ff23b554abd28027afc0fda508da951594c03f89ff8ad6f79b15e4913
 exportarrImage:
  repository: ghcr.io/onedr0p/exportarr
  tag: v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/calibre-web
  pullPolicy: IfNotPresent
-  tag: "0.6.25"
+  tag: "0.6.25@sha256:c46f9b925492024c22acd7a095985a9c0b5c599aaed210f43b33031bbd63551d"
 securityContext:
  container:
    readOnlyRootFilesystem: false
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/cloudflareddns
  pullPolicy: IfNotPresent
-  tag: "3.0.0.4856"
+  tag: "3.0.0.4856@sha256:d8500f224f1f92977d2749cd44374a3c66542144fe50671f08db3007fa70abba"
 cloudflareddns:
  user: your.cf.email@example.com
  api_token: ""
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/code-server
  pullPolicy: IfNotPresent
-  tag: "4.105.1"
+  tag: "4.105.1@sha256:b7d6b37ac38e1108497520694b68abc9d2d4057e200c011522eeab14330e13af"
 securityContext:
  container:
    readOnlyRootFilesystem: false
@@ -1,6 +1,6 @@
 image:
  repository: oci.trueforge.org/containerforge/doplarr
-  tag: "3.6.3"
+  tag: "3.6.3@sha256:7d5900d365449abb4ab970271e1512ae52c2c2246fa37f2bcc226ee20abdfe78"
  pullPolicy: IfNotPresent
 service:
  main:
@@ -1,7 +1,7 @@
 image:
  pullPolicy: IfNotPresent
  repository: oci.trueforge.org/containerforge/duplicacy
-  tag: 1.8.0
+  tag: 1.8.0@sha256:6d7395757fc9cff92be23b16c01469ba20ed059b92946576938279ee8ff3210f
 securityContext:
  container:
    runAsGroup: 0
@@ -1,6 +1,6 @@
 image:
  repository: oci.trueforge.org/containerforge/duplicati
-  tag: 2.2.0
+  tag: 2.2.0@sha256:15ce9ee917faed14ddb8f17e4b4eba388ed6f4af34b582dcb271b29c6a710ee2
  pullPolicy: IfNotPresent
 service:
  main:
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/emby
  pullPolicy: IfNotPresent
-  tag: 4.9.2.6
+  tag: 4.9.2.6@sha256:a90e03ff332314938c417002e8f4c7375ee22cf3b1db30f40a5a688478542a68
 broadcastProxyImage:
  repository: docker.io/alpine/socat
  pullPolicy: IfNotPresent
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/esphome
  pullPolicy: IfNotPresent
-  tag: "2025.11.0"
+  tag: "2025.11.0@sha256:c805a6a8c78a77f5cb2af50e772e40f24534dac63106e9daa4a0cc62074a3a0b"
 securityContext:
  container:
    runAsNonRoot: false
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/flood
  pullPolicy: IfNotPresent
-  tag: "4.11.0"
+  tag: "4.11.0@sha256:549bb9039abf34fd30f8ac81e3c6eb2f7b6ab1189c99636ec9c7a045fdfbda56"
 workload:
  main:
    podSpec:
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/foldingathome
  pullPolicy: IfNotPresent
-  tag: "8.4.9"
+  tag: "8.4.9@sha256:f59c0529905964e06cebdf5acb395288e2631ce42a67b5f5637199beb6fa5693"
 securityContext:
  container:
    runAsNonRoot: false
@@ -1,7 +1,7 @@
 image:
  repository: docker.io/nicolargo/glances
  pullPolicy: IfNotPresent
-  tag: ubuntu-4.3.0.8-full
+  tag: ubuntu-4.3.0.8-full@sha256:4519127ae8fc511a46830b753fadfa16151023688bb7d80d568ec34ef57bd359
 workload:
  main:
    podSpec:
@@ -1,12 +1,12 @@
 image:
  repository: oci.trueforge.org/containerforge/home-assistant
  pullPolicy: IfNotPresent
-  tag: "2025.11.3"
+  tag: "2025.11.3@sha256:0002a9ac562aa7c538d86e32e9e1d1dbd0d1cbc5380c0e6fa471524c86e0d8dc"

 yqImage:
  pullPolicy: IfNotPresent
  repository: oci.trueforge.org/containerforge/go-yq
-  tag: "4.48.2"
+  tag: "4.48.2@sha256:d2cbd9295159a43fe5e8873871768305810bb5d1e85ea61fad69d972c7d26ef4"

 service:
  main:
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/jackett
  pullPolicy: IfNotPresent
-  tag: 0.24.348
+  tag: 0.24.348@sha256:a0486c5cf6d09364fe7094977d0730723361a32269722ba9aa6b29a847faedd0
 service:
  main:
    ports:
@@ -1,6 +1,6 @@
 image:
  repository: ghcr.io/kanboard/kanboard
-  tag: "v1.2.48"
+  tag: "v1.2.48@sha256:84703c948f1b403267c6cf426c1b66da320dd67c4aa280d36b2f21f8b7c2ab9a"
  pullPolicy: IfNotPresent
 service:
  main:
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/kavita
  pullPolicy: IfNotPresent
-  tag: "0.8.8.3"
+  tag: "0.8.8.3@sha256:e2608ab43a522cd17efaa1fda67721821e06c9dd3c9496ba0f3788b8a8525649"
 securityContext:
  container:
    readOnlyRootFilesystem: false
@@ -1,7 +1,7 @@
 image:
  repository: ghcr.io/postfinance/kubelet-csr-approver
  pullPolicy: IfNotPresent
-  tag: v1.2.12
+  tag: v1.2.12@sha256:08d00647e168187c1a57296b50cd79db7af59e3ecdfd12eb9fc221762b721e99

 service:
  main:
@@ -1,7 +1,7 @@
 image:
  pullPolicy: IfNotPresent
  repository: oci.trueforge.org/containerforge/kube-sa-proxy
-  tag: 1.30.2
+  tag: 1.30.2@sha256:4c8faef30faa88dab0a6631b3ca431f11c5a35298fa7224555003742f698c579

 webImage:
  repository: docker.io/kubernetesui/dashboard-web
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/lidarr
  pullPolicy: IfNotPresent
-  tag: 3.1.1.4881
+  tag: 3.1.1.4881@sha256:0d0964681266bd1d1df95bac7e2a0cd6257d6382002969e2cec11b377c3c5b41
 exportarrImage:
  repository: ghcr.io/onedr0p/exportarr
  pullPolicy: IfNotPresent
@@ -1,6 +1,6 @@
 image:
  repository: hello-world
-  tag: latest
+  tag: latest@sha256:f7931603f70e13dbd844253370742c4fc4202d290c80442b2e68706d8f33ce26
  pullPolicy: IfNotPresent
 manifestManager:
  enabled: false
@@ -1,19 +1,19 @@
 image:
  repository: oci.trueforge.org/containerforge/nextcloud-fpm
  pullPolicy: IfNotPresent
-  tag: "32.0.1"
+  tag: "32.0.1@sha256:4e8c007d740c73addb562f788d1fa10984922dd5862bd0fc79ff0273ad335a86"
 nginxImage:
  repository: oci.trueforge.org/containerforge/nginx
  pullPolicy: IfNotPresent
-  tag: "1.24.0"
+  tag: "1.24.0@sha256:d965e4482c4cc6d20f0122a38da523da102a81d01a57d0d912c1fb03b31086e0"
 imaginaryImage:
  repository: oci.trueforge.org/containerforge/nextcloud-imaginary
  pullPolicy: IfNotPresent
-  tag: "20230401"
+  tag: "20230401@sha256:9b524888c7d3e9940b74de532ff0b439c0d6f2a91577086bd73c2662e1d55c56"
 hpbImage:
  repository: oci.trueforge.org/containerforge/nextcloud-notify-push
  pullPolicy: IfNotPresent
-  tag: "1.2.1"
+  tag: "1.2.1@sha256:421146173c169af726b2e673258e90ec77afea0cd18a3b6a34819606bdbfa9f0"
 clamavImage:
  repository: docker.io/clamav/clamav
  pullPolicy: IfNotPresent
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/nzbget
  pullPolicy: IfNotPresent
-  tag: "25.4.0"
+  tag: "25.4.0@sha256:bda633e3d24cbdc31ebba78227e6d801fe73c3cf48c538cb6b6768d7212494b8"
 service:
  main:
    ports:
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/nzbhydra2
  pullPolicy: IfNotPresent
-  tag: 8.0.0
+  tag: 8.0.0@sha256:449f728a02f50cc3f0a9993ff211548ee555c5686fbf96ea33e8c2bc03a85923
 service:
  main:
    ports:
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/plex
  pullPolicy: IfNotPresent
-  tag: 1.42.2.10156
+  tag: 1.42.2.10156@sha256:960488ffe4013d00bc2833416974c6b774fe89a1b4b3824d5670397e2c4ad609
 service:
  main:
    ports:
@@ -1,6 +1,6 @@
 image:
  repository: docker.io/biospheere/promcord
-  tag: latest
+  tag: latest@sha256:16d4fd269e665890d92e8ab2bf64f6cdd6f8bd45f27e829d414c4bad447c4974
  pullPolicy: IfNotPresent
 service:
  main:
@@ -1,6 +1,6 @@
 image:
  repository: oci.trueforge.org/containerforge/prowlarr
-  tag: 2.3.0.5236
+  tag: 2.3.0.5236@sha256:d07d98584097508b10b57adc492cb69c0ff221b7ea71b7adda787fc1e9fafcf4
  pullPolicy: IfNotPresent
 exportarrImage:
  repository: ghcr.io/onedr0p/exportarr
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/qbittorrent
  pullPolicy: IfNotPresent
-  tag: 5.1.4
+  tag: 5.1.4@sha256:d331077447c7eb449d8044b4b6e749a6eb714bf2fbde84af903c5e612a20b5a6
 qbitportforwardImage:
  repository: docker.io/mjmeli/qbittorrent-port-forward-gluetun-server
  pullPolicy: IfNotPresent
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/radarr
  pullPolicy: IfNotPresent
-  tag: "6.0.4.10291"
+  tag: "6.0.4.10291@sha256:0e9d403a1b7e6985281a18f480a5e2f02962d0ef987873cf6c592010ab3b02c9"
 exportarrImage:
  repository: ghcr.io/onedr0p/exportarr
  pullPolicy: IfNotPresent
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/renovate
  pullPolicy: IfNotPresent
-  tag: 42.19.3
+  tag: 42.19.3@sha256:7b0d007dedbcf21195a0f78c3c2f0c5187106b0bf245dbf42a0dce659d354773

 workload:
  main:
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/sabnzbd
  pullPolicy: IfNotPresent
-  tag: 4.5.5
+  tag: 4.5.5@sha256:504b4b317c683fc4b1974e7dab6427af38aac2ad11372e734b5d19d1eb7c8e6a
 exportarrImage:
  repository: ghcr.io/onedr0p/exportarr
  pullPolicy: IfNotPresent
@@ -1,6 +1,6 @@
 image:
  repository: oci.trueforge.org/containerforge/seerr
-  tag: "2.7.3"
+  tag: "2.7.3@sha256:5a6cb827d01b3ff306123097e889d8c6977b54654ca875cbcd1e1967ca8d4baa"
  pullPolicy: IfNotPresent
 service:
  main:
@@ -1,7 +1,7 @@
 image:
  pullPolicy: IfNotPresent
  repository: docker.io/shaarli/shaarli
-  tag: v0.15.0
+  tag: v0.15.0@sha256:12bc36e54c8184140e61f6e4271af022e9b8b157b20b3c9096e1fac7f9a0a65a
 persistence:
  cache:
    enabled: true
@@ -1,7 +1,7 @@
 image:
  pullPolicy: IfNotPresent
  repository: registry.k8s.io/sig-storage/snapshot-controller
-  tag: v8.4.0
+  tag: v8.4.0@sha256:b845f4bbc34d70bd84e92f8021f47704df1de3dbabbd8289969651360b39d605
 service:
  main:
    enabled: true
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/sonarr
  pullPolicy: IfNotPresent
-  tag: "4.0.16.2943"
+  tag: "4.0.16.2943@sha256:05a5af5cce98a3a6b94fcd280af8b8a4e4c3c6c45fed7c906a170f31b67fba4c"
 exportarrImage:
  repository: ghcr.io/onedr0p/exportarr
  pullPolicy: IfNotPresent
@@ -1,7 +1,7 @@
 image:
  repository: ghcr.io/spegel-org/spegel
  pullPolicy: IfNotPresent
-  tag: v0.5.1
+  tag: v0.5.1@sha256:44548375366edbc8ffaa04e9f0087b939de45aaddad4493fb8b7216d3a8ad572

 securityContext:
  container:
@@ -1,7 +1,7 @@
 image:
  repository: oci.trueforge.org/containerforge/theme-park
  pullPolicy: IfNotPresent
-  tag: 1.21.3
+  tag: 1.21.3@sha256:5adab626b1a5cc4e8e8d03d596bda61c0ef12aed6e2487012150cc9efdfdb5bf
 service:
  main:
    ports:
@@ -6,7 +6,7 @@ image:
 betaImage:
  repository: ghcr.io/timshel/vaultwarden
  pullPolicy: IfNotPresent
-  tag: 1.30.5-9
+  tag: 1.30.5-9@sha256:56e279071fa5a173cae206fe64667cd9ee0e0e15bddfd11d38a8b95fe84dc741

 service:
  main:
@@ -1,11 +1,11 @@
 image:
  repository: docker.io/onerahmet/openai-whisper-asr-webservice
  pullPolicy: IfNotPresent
-  tag: "v1.9.1"
+  tag: "v1.9.1@sha256:03b402335881cdab2e4939b24620809df8d6ceec3bf2712217d41c8761a0f5d4"
 gpuImage:
  repository: docker.io/onerahmet/openai-whisper-asr-webservice
  pullPolicy: IfNotPresent
-  tag: "v1.9.1-gpu"
+  tag: "v1.9.1-gpu@sha256:1132aa08c6eb9b440408864e8c25733d22a197ffea7c6975d60a4f4b6fd7b08b"

 securityContext:
  container:
@@ -1,7 +1,7 @@
 image:
  pullPolicy: IfNotPresent
  repository: docker.io/cooleye72/xmrig
-  tag: "6.21"
+  tag: "6.21@sha256:f7e590b243f86ab7fe0b440b125814387fff1c3a6341a6c9db8e6a0528c4c183"
 persistence: {}

 securityContext: