Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

See Config Migration PR: #34.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (8)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
pip_requirements	annotated-types	2024-05-20
pip_requirements	docker	2024-05-23
pip_requirements	h11	2025-04-24
pip_requirements	healthchecks_io	2025-04-16
pip_requirements	httpcore	2025-04-24
pip_requirements	python-dateutil	2024-03-01
pip_requirements	six	2024-12-04
pip_requirements	sniffio	2024-02-25

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency charset-normalizer to v3.4.7
• Update dependency httpcore to v1.0.9
• Update dependency typing-inspection to v0.4.2
• Update alpine Docker tag to v3.24
• Update dependency anyio to v4.14.1
• Update dependency certifi to v2025.11.12
• Update dependency pydantic to v2.13.4
• Update dependency pydantic_core to v2.47.0
• Update dependency typing_extensions to v4.16.0
• Update immich monorepo to v1.144.1 (ghcr.io/immich-app/immich-machine-learning, ghcr.io/immich-app/immich-server)
• Update neosmemo/memos Docker tag to v0.29.1
• Update restic/restic Docker tag to v0.19.1
• Update sissbruecker/linkding Docker tag to v1.45.0
• Update traefik Docker tag to v3.7.6
• Update actions/checkout action to v7
• Update dependency certifi to v2026
• Update dependency croniter to v6
• Update dependency packaging to v26
• Update dependency pytz to v2026
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/setup-buildx-action action to v4
• Update ghcr.io/immich-app/postgres Docker tag to v16
• Update googleapis/release-please-action action to v5
• Update hywax/mafl Docker tag to v1
• Update immich monorepo to v3 (ghcr.io/immich-app/immich-machine-learning, ghcr.io/immich-app/immich-server)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update googleapis/release-please-action digest to 5c625bf

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency filelock to v3.20.3 [SECURITY]
• Update dependency h11 to v0.16.0 [SECURITY]
• Update dependency idna to v3.15 [SECURITY]
• Update dependency requests to v2.33.0 [SECURITY]
• Update dependency urllib3 to v2.7.0 [SECURITY]
• Pin dependencies (actions/checkout, alpine, curlimages/curl, debian, dh1011/subscription-manager, docker/build-push-action, docker/login-action, docker/setup-buildx-action, ghcr.io/caddybuilds/caddy-cloudflare, ghcr.io/immich-app/immich-machine-learning, ghcr.io/immich-app/immich-server, ghcr.io/immich-app/postgres, ghcr.io/jonasvinther/medusa, ghcr.io/papra-hq/papra, ghcr.io/pocket-id/pocket-id, ghcr.io/seriousm4x/upsnap, ghcr.io/thomiceli/opengist, ghcr.io/tryrocket-cloud/home-ops, ghcr.io/tryrocket-cloud/tryrocket-cloud, hywax/mafl, kestra/kestra, lldap/lldap, portainer/portainer-ce, postgres, public.ecr.aws/aws-cli/aws-cli, quay.io/minio/minio, restic/restic, semaphoreui/semaphore, sissbruecker/linkding, tensorchord/pgvecto-rs, traefik)
• Update docker.io/valkey/valkey:8-bookworm Docker digest to fea8b3e
• Update dependency ClusterSecretStore to external-secrets.io/v1
• Update dependency ExternalSecret to external-secrets.io/v1
• Update dependency healthchecks_io to v0.4.4
• Update dependency httpx to v0.28.1
• Update ghcr.io/thomiceli/opengist Docker tag to v1.13.1
• Update semaphoreui/semaphore Docker tag to v2.18.16
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (9)

docker/caddy/docker-compose.yaml (1)

• ghcr.io/caddybuilds/caddy-cloudflare latest → [Updates: latest]

docker/immich/docker-compose.yaml (6)

• ghcr.io/immich-app/immich-machine-learning v1.138.0 → [Updates: v1.144.1, v3.0.1, v1.138.0]
• ghcr.io/immich-app/postgres 14-vectorchord0.3.0-pgvectors0.2.0 → [Updates: 16-vectorchord0.3.0-pgvectors0.2.0, 14-vectorchord0.3.0-pgvectors0.2.0]
• tensorchord/pgvecto-rs pg15-v0.2.0 → [Updates: pg15-v0.2.0]
• docker.io/valkey/valkey 8-bookworm@sha256:facc1d2c3462975c34e10fccb167bfa92b0e0dbd992fc282c29a61c3243afb11 → [Updates: 8-bookworm]
• ghcr.io/immich-app/immich-server v1.138.0 → [Updates: v1.144.1, v3.0.1, v1.138.0]
• traefik v3.5.0 → [Updates: v3.7.6, v3.5.0]

docker/kestra/docker-compose.yml (2)

• postgres unknown version → [Updates: undefined]
• kestra/kestra latest → [Updates: latest]

docker/mafl/docker-compose.yaml (1)

• hywax/mafl unknown version → [Updates: undefined]

docker/minio/docker-compose.yaml (1)

• quay.io/minio/minio RELEASE.2025-03-12T18-04-18Z → [Updates: RELEASE.2025-03-12T18-04-18Z]

docker/pocket-id/docker-compose.yaml (1)

• ghcr.io/pocket-id/pocket-id unknown version → [Updates: undefined]

docker/portainer/docker-compose.yaml (1)

• portainer/portainer-ce latest → [Updates: latest]

docker/semaphore/docker-compose.yaml (1)

• semaphoreui/semaphore v2.13.1 → [Updates: v2.18.16, v2.13.1]

docker/upsnap/docker-compose.yaml (1)

• ghcr.io/seriousm4x/upsnap 5 → [Updates: 5]

dockerfile (3)

backup/Dockerfile (1)

• debian trixie-slim → [Updates: trixie-slim]

immich/Dockerfile (1)

• debian trixie-slim → [Updates: trixie-slim]

toolkit/Dockerfile (1)

• debian bookworm-slim → [Updates: bookworm-slim]

github-actions (2)

.github/workflows/build-toolkit-docker-image.yaml (5)

• actions/checkout v4 → [Updates: v7, v4]
• docker/setup-buildx-action v2 → [Updates: v4, v2]
• docker/login-action v3 → [Updates: v4, v3]
• docker/build-push-action v6 → [Updates: v7, v6]
• docker/build-push-action v6 → [Updates: v7, v6]

.github/workflows/release-please.yml (1)

• googleapis/release-please-action v4@7987652d64b4581673a76e33ad5e98e3dd56832f → [Updates: v5, v4]

kubernetes (66)

k8s/argocd/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/external-secrets/base/vault-clustersecretstore.yaml (1)

• ClusterSecretStore external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/gitea/smtp-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/kubernetes-dashboard/sa.yaml (1)

• ClusterRoleBinding rbac.authorization.k8s.io/v1

k8s/linkding/base/deployment.yaml (2)

• sissbruecker/linkding latest → [Updates: latest]
• Deployment apps/v1

k8s/linkding/base/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/lldap/base/deployment.yaml (2)

• lldap/lldap stable-alpine → [Updates: stable-alpine]
• Deployment apps/v1

k8s/lldap/base/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/lldap/overlays/production/ldap-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/lldap/overlays/production/smtp-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/longhorn/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/longhorn/s3-longhorn-credential-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/mafl/base/deployment.yaml (2)

• hywax/mafl latest → [Updates: latest]
• Deployment apps/v1

k8s/mafl/base/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/memos/base/deployment.yaml (2)

• neosmemo/memos latest
• Deployment apps/v1

k8s/memos/base/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/opengist/base/deployment.yaml (2)

• ghcr.io/thomiceli/opengist latest → [Updates: latest]
• Deployment apps/v1

k8s/opengist/base/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/opengist/overlays/production/oidc-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/papra/base/deployment.yaml (2)

• ghcr.io/papra-hq/papra latest → [Updates: latest]
• Deployment apps/v1

k8s/papra/base/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/subscription-manager/base/deployment.yaml (2)

• dh1011/subscription-manager latest → [Updates: latest]
• Deployment apps/v1

k8s/subscription-manager/base/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/traefik/ingress.yaml (1)

• Ingress networking.k8s.io/v1

k8s/vault/export-and-backup/all-in-one/all-in-one-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/all-in-one/cronjob-all-in-one.yaml (2)

• ghcr.io/tryrocket-cloud/home-ops toolkit → [Updates: toolkit]
• CronJob batch/v1

k8s/vault/export-and-backup/base/cronjob.yaml (2)

• ghcr.io/jonasvinther/medusa latest → [Updates: latest]
• CronJob batch/v1

k8s/vault/export-and-backup/ionos.com-kopia-repository-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/ionos.com-restic-repository-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/ionos.com-s3-repository-external-secret.yaml (2)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]
• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/overlays/ionos.com/cronjob-patch.yaml (3)

• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• CronJob batch/v1

k8s/vault/export-and-backup/overlays/ionos.com/healthchecks-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/overlays/ionos.com/kopia-repository-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/overlays/ionos.com/restic-repository-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/overlays/ionos.com/s3-bucket-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/overlays/ionos.com/s3-credentials-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/overlays/truenas.tryrocket.cloud/cronjob-patch.yaml (2)

• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• CronJob batch/v1

k8s/vault/export-and-backup/overlays/truenas.tryrocket.cloud/healthchecks-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/overlays/truenas.tryrocket.cloud/s3-bucket-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/overlays/truenas.tryrocket.cloud/s3-credentials-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vault/export-and-backup/vault-export-and-backup-cronjob.yaml (4)

• ghcr.io/jonasvinther/medusa latest → [Updates: latest]
• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• CronJob batch/v1

k8s/vault/export-and-backup/vault-token-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/admin-token-ExternalSecret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup-2/all-in-one-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup-2/export-and-backup-cronjob-3.yaml (6)

• ghcr.io/tryrocket-cloud/home-ops toolkit-38dfa08a823162b91b8b4b579a025a471c475a33 → [Updates: toolkit-38dfa08a823162b91b8b4b579a025a471c475a33]
• ghcr.io/tryrocket-cloud/home-ops toolkit-ac3e21cade59942ed7c1ef4a8dc595b3a71d815a → [Updates: toolkit-ac3e21cade59942ed7c1ef4a8dc595b3a71d815a]
• ghcr.io/tryrocket-cloud/home-ops toolkit-ac3e21cade59942ed7c1ef4a8dc595b3a71d815a → [Updates: toolkit-ac3e21cade59942ed7c1ef4a8dc595b3a71d815a]
• ghcr.io/tryrocket-cloud/home-ops toolkit-ac3e21cade59942ed7c1ef4a8dc595b3a71d815a → [Updates: toolkit-ac3e21cade59942ed7c1ef4a8dc595b3a71d815a]
• ghcr.io/tryrocket-cloud/home-ops toolkit-ac3e21cade59942ed7c1ef4a8dc595b3a71d815a → [Updates: toolkit-ac3e21cade59942ed7c1ef4a8dc595b3a71d815a]
• CronJob batch/v1

k8s/vaultwarden/export-and-backup-2/export-and-backup-cronjob.yaml (10)

• curlimages/curl unknown version → [Updates: undefined]
• alpine 3.21 → [Updates: 3.24, 3.21]
• debian bookworm-slim → [Updates: bookworm-slim]
• alpine 3.21 → [Updates: 3.24, 3.21]
• public.ecr.aws/aws-cli/aws-cli latest → [Updates: latest]
• restic/restic 0.18.0 → [Updates: 0.19.1, 0.18.0]
• public.ecr.aws/aws-cli/aws-cli latest → [Updates: latest]
• curlimages/curl unknown version → [Updates: undefined]
• alpine unknown version → [Updates: undefined]
• CronJob batch/v1

k8s/vaultwarden/export-and-backup-2/healthckecksio-external-secret.yaml (2)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]
• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup-2/restic-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup-2/s3-admin-credentials-external-secrets.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup-2/s3-connection-external-secrets.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup-2/s3-restic-credentials.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/all-in-one-cronjob.yaml (2)

• ghcr.io/tryrocket-cloud/home-ops toolkit → [Updates: toolkit]
• CronJob batch/v1

k8s/vaultwarden/export-and-backup/all-in-one-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/cronjob.yaml (3)

• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• CronJob batch/v1

k8s/vaultwarden/export-and-backup/backup-config/ionos.com/cronjob-patch.yaml (2)

• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• CronJob batch/v1

k8s/vaultwarden/export-and-backup/backup-config/ionos.com/healthchecks-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/ionos.com/kopia-repository-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/ionos.com/restic-repository-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/ionos.com/s3-bucket-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/ionos.com/s3-credentials-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/overlays/truenas.tryrocket.cloud/cronjob-patch.yaml (2)

• ghcr.io/tryrocket-cloud/tryrocket-cloud backup → [Updates: backup]
• CronJob batch/v1

k8s/vaultwarden/export-and-backup/backup-config/overlays/truenas.tryrocket.cloud/healthchecks-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/overlays/truenas.tryrocket.cloud/s3-bucket-configuration-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/overlays/truenas.tryrocket.cloud/s3-credentials-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/export-and-backup/backup-config/vaultwarden-users-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

k8s/vaultwarden/smtp-external-secret.yaml (1)

• ExternalSecret external-secrets.io/v1beta1 → [Updates: external-secrets.io/v1]

kustomize (6)

k8s/linkding/overlays/production/kustomization.yaml (1)

• sissbruecker/linkding 1.39.1-alpine@sha256:c91e4f0f69bf9a9228ea5dcdccd0df02c3461a29ace4c45362e240ceaf2daad6 → [Updates: 1.45.0-alpine]

k8s/lldap/overlays/production/kustomization.yaml (1)

• lldap/lldap stable → [Updates: stable]

k8s/mafl/base/kustomization.yaml (1)

• hywax/mafl v0.15.4@sha256:2c89020be334b341da41a6b95830b1b52b1b9f43c9f16d09c0ab4e9dad3ea4ad → [Updates: v1.4.1]

k8s/memos/overlays/production/kustomization.yaml (1)

• neosmemo/memos 0.24.1@sha256:e0ce04f2bb6fa23cd259bcea93051711392daccc1b2e801aa4f2707a439bdc9e → [Updates: 0.29.1]

k8s/opengist/overlays/production/kustomization.yaml (1)

• ghcr.io/thomiceli/opengist 1.9.1@sha256:75fc200bde38459be4e3aed5e40ef2e3076fddcca5eb6bd08ebd0c7d7a939d85 → [Updates: 1.13.1]

k8s/papra/overlays/production/kustomization.yaml (1)

• ghcr.io/papra-hq/papra latest → [Updates: latest]

pip_requirements (1)

immich/requirements.txt (23)

• annotated-types ==0.7.0
• anyio ==4.9.0 → [Updates: ==4.14.1]
• certifi ==2025.1.31 → [Updates: ==2025.11.12, ==2026.6.17]
• charset-normalizer ==3.4.1 → [Updates: ==3.4.7]
• croniter ==2.0.7 → [Updates: ==6.2.3]
• docker ==7.1.0
• filelock ==3.18.0 → [Updates: ==3.20.3]
• h11 ==0.14.0 → [Updates: ==0.16.0]
• healthchecks_io ==0.4.3 → [Updates: ==0.4.4]
• httpcore ==1.0.8 → [Updates: ==1.0.9]
• httpx ==0.27.2 → [Updates: ==0.28.1]
• idna ==3.10 → [Updates: ==3.15]
• packaging ==24.2 → [Updates: ==26.2]
• pydantic ==2.11.3 → [Updates: ==2.13.4]
• pydantic_core ==2.33.1 → [Updates: ==2.47.0]
• python-dateutil ==2.9.0.post0
• pytz ==2024.2 → [Updates: ==2026.2]
• requests ==2.32.3 → [Updates: ==2.33.0]
• six ==1.17.0
• sniffio ==1.3.1
• typing-inspection ==0.4.0 → [Updates: ==0.4.2]
• typing_extensions ==4.13.2 → [Updates: ==4.16.0]
• urllib3 ==2.4.0 → [Updates: ==2.7.0]

---

• Check this box to trigger a request for Renovate to run again on this repository