eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Tier 1 version bumps #186

Merged
eblume merged 2 commits from feature/tier1-version-bumps into main 2026-02-13 17:16:38 -08:00
Conversation 0 Commits 2 Files changed 19 +26 -25
eblume commented 2026-02-13 17:13:02 -08:00
Owner
Copy link

Summary

Audit and upgrade of all deployed images, helm charts, and custom container Dockerfiles to latest stable versions. This PR covers Tier 1 (low-risk minor/patch bumps only).

Upstream images

Image Old New
kube-state-metrics v2.13.0 v2.18.0
prometheus v3.2.1 v3.9.1
loki 3.3.2 3.6.5
alloy v1.5.1 v1.13.1
tailscale (proxy + operator) v1.92.5 v1.94.1
navidrome :latest v0.60.3 (pinned)

Helm charts

Chart Old New
CloudNativePG v0.27.0 v0.27.1
1Password Connect 2.2.1 2.3.0

Custom containers (Dockerfiles updated, images not yet tagged)

Container Changes New tag
miniflux 2.2.16→2.2.17 (security), alpine 3.22 v1.1.0
kubectl v1.34.1→v1.34.4, alpine 3.22 v1.1.0
kiwix-serve alpine 3.22 v1.1.0
nettest alpine 3.22 v0.14.0
transmission alpine 3.22, pkg 4.0.6-r4 v1.1.0

All custom containers verified with local dagger call build.

Deferred to Tier 2 (separate PRs)

  • Forgejo runner 6→12 (major version scheme change)
  • Docker DinD 27→29
  • Grafana chart 8→11 (repo migration)
  • External Secrets 1→2 (breaking changes)
  • Python 3.12→3.13, Elixir 1.18→1.19, Node 22→24
  • Transmission 4.0.6→4.1.0 (not in Alpine yet)

Deployment

After merge:

  1. Tag custom containers: mise run container-tag-and-release <name> <version> for each
  2. Wait for CI builds to complete
  3. argocd app sync apps then sync individual apps, or let ArgoCD auto-detect
## Summary Audit and upgrade of all deployed images, helm charts, and custom container Dockerfiles to latest stable versions. This PR covers Tier 1 (low-risk minor/patch bumps only). ### Upstream images | Image | Old | New | |-------|-----|-----| | kube-state-metrics | v2.13.0 | v2.18.0 | | prometheus | v3.2.1 | v3.9.1 | | loki | 3.3.2 | 3.6.5 | | alloy | v1.5.1 | v1.13.1 | | tailscale (proxy + operator) | v1.92.5 | v1.94.1 | | navidrome | :latest | v0.60.3 (pinned) | ### Helm charts | Chart | Old | New | |-------|-----|-----| | CloudNativePG | v0.27.0 | v0.27.1 | | 1Password Connect | 2.2.1 | 2.3.0 | ### Custom containers (Dockerfiles updated, images not yet tagged) | Container | Changes | New tag | |-----------|---------|---------| | miniflux | 2.2.16→2.2.17 (security), alpine 3.22 | v1.1.0 | | kubectl | v1.34.1→v1.34.4, alpine 3.22 | v1.1.0 | | kiwix-serve | alpine 3.22 | v1.1.0 | | nettest | alpine 3.22 | v0.14.0 | | transmission | alpine 3.22, pkg 4.0.6-r4 | v1.1.0 | All custom containers verified with local `dagger call build`. ### Deferred to Tier 2 (separate PRs) - Forgejo runner 6→12 (major version scheme change) - Docker DinD 27→29 - Grafana chart 8→11 (repo migration) - External Secrets 1→2 (breaking changes) - Python 3.12→3.13, Elixir 1.18→1.19, Node 22→24 - Transmission 4.0.6→4.1.0 (not in Alpine yet) ## Deployment After merge: 1. Tag custom containers: `mise run container-tag-and-release <name> <version>` for each 2. Wait for CI builds to complete 3. `argocd app sync apps` then sync individual apps, or let ArgoCD auto-detect
Upstream images:
- kube-state-metrics v2.13.0 → v2.18.0
- prometheus v3.2.1 → v3.9.1
- loki 3.3.2 → 3.6.5
- alloy v1.5.1 → v1.13.1
- tailscale v1.92.5 → v1.94.1 (proxy + operator)
- navidrome :latest → v0.60.3 (pin version)

Helm charts:
- CloudNativePG v0.27.0 → v0.27.1
- 1Password Connect 2.2.1 → 2.3.0

Custom Dockerfiles:
- miniflux 2.2.16 → 2.2.17 (security fix), alpine 3.22
- kubectl v1.34.1 → v1.34.4, alpine 3.22
- kiwix-serve alpine 3.22
- nettest alpine 3.22
- transmission alpine 3.22, package 4.0.6-r4

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
eblume merged commit b3747f6c95 into main 2026-02-13 17:16:38 -08:00
eblume referenced this pull request from a commit 2026-02-13 17:16:38 -08:00
Tier 1 version bumps (#186)
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eblume/blumeops!186
No description provided.