chore(deps): clear the dependency dashboard #36

Merged

hutao merged 2 commits from chore/updates into main

2026-09-29 19:17:22 +00:00

hutao commented

2026-09-29 19:10:32 +00:00

Owner

Clears the Dependency Dashboard (#31), except the cloudflare provider bump.

Changes

Lock file maintenance: nixpkgs nixos-26.05 c508844 → 7fc6f2c, sops-nix 2bd00bd → 5efb5a6, deploy-rs e760371 → cf64c8c. The kernel goes 6.18.52 → 6.18.54.

Container updates:

image	from	to
redis `8-alpine`	digest `ba6e394`	digest `3811787`
amir20/dozzle	v11.1.1	v11.1.2
cloudflare/cloudflared	2026.9.1	2026.9.3
deluan/navidrome	0.64.1	0.64.2
grafana/grafana	13.2.2	13.2.3

The four tag bumps are now also pinned by digest, like forgejo and redis. Each digest is the multi-arch index, it matches what the registry returns for the tag, and its linux/amd64 manifest resolves. The regex manager's optional currentDigest group means Renovate keeps updating tag and digest together.

Left out

terraform cloudflare to v5.26.0. It plans 23 DNS record writes (+ include_shadow_metadata = false) that fail upstream. The lock stays on 5.25.0, and tofu plan is No changes. See #35.

Deployed

This branch is already live: deploy .#vps confirmed, and the box was rebooted onto 6.18.54. systemctl is-system-running reports running with no failed units. The five restarted containers are active with 0 restarts. git, music and status all answer.

Clears the Dependency Dashboard (#31), except the cloudflare provider bump. ## Changes - **Lock file maintenance:** nixpkgs `nixos-26.05` `c508844` → `7fc6f2c`, sops-nix `2bd00bd` → `5efb5a6`, deploy-rs `e760371` → `cf64c8c`. The kernel goes 6.18.52 → 6.18.54. - **Container updates:** | image | from | to | | --- | --- | --- | | redis `8-alpine` | digest `ba6e394` | digest `3811787` | | amir20/dozzle | v11.1.1 | v11.1.2 | | cloudflare/cloudflared | 2026.9.1 | 2026.9.3 | | deluan/navidrome | 0.64.1 | 0.64.2 | | grafana/grafana | 13.2.2 | 13.2.3 | The four tag bumps are now also pinned by digest, like forgejo and redis. Each digest is the multi-arch index, it matches what the registry returns for the tag, and its `linux/amd64` manifest resolves. The regex manager's optional `currentDigest` group means Renovate keeps updating tag and digest together. ## Left out `terraform cloudflare to v5.26.0`. It plans 23 DNS record writes (`+ include_shadow_metadata = false`) that fail upstream. The lock stays on 5.25.0, and `tofu plan` is `No changes`. See #35. ## Deployed This branch is already live: `deploy .#vps` confirmed, and the box was rebooted onto 6.18.54. `systemctl is-system-running` reports `running` with no failed units. The five restarted containers are active with 0 restarts. git, music and status all answer.

hutao added 2 commits

2026-09-29 19:10:32 +00:00

chore(flake): update nixpkgs, sops-nix and deploy-rs ed4b84f9e4

chore(deps): take the container updates from the dependency dashboard

CI / Format, lint and evaluate (pull_request) Successful in 3m12s

Details

62eb9497d5

Five of the seven pending items on #31:

  redis:8-alpine   digest ba6e394 -> 3811787 (upstream rebuild, 2026-09-24)
  amir20/dozzle    v11.1.1 -> v11.1.2
  cloudflared      2026.9.1 -> 2026.9.3
  navidrome        0.64.1 -> 0.64.2
  grafana          13.2.2 -> 13.2.3

The four tag bumps are now pinned by digest too, like forgejo and redis
already are, so a tag that is pushed again cannot change what is pulled.
Each digest is the multi-arch index digest. It matches what the registry
itself returns for the tag, and its linux/amd64 manifest resolves. The
regex manager's optional currentDigest group means Renovate keeps
updating tag and digest together.

Lock file maintenance is the commit before this one. The cloudflare
provider bump to 5.26.0 is left out: it plans 23 DNS record writes that
fail upstream, so the lock stays on 5.25.0 and the plan stays 0/0/0.
See #35.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

hutao merged commit e0119c2648 into main

2026-09-29 19:17:22 +00:00

hutao deleted branch chore/updates

2026-09-29 19:17:22 +00:00

hutao referenced this pull request from a commit

2026-09-29 19:17:24 +00:00

Merge pull request 'chore(deps): clear the dependency dashboard' (#36) from chore/updates into main