Deploy Fly.io Proxy / deploy (push) Successful in 1m30s

Details

Update tooling dependencies (Feb 2026 cycle) (#254 )

## Summary

Monthly tooling dependency update cycle:

- **Pre-commit hooks**: trufflehog v3.92.5→v3.93.4, ruff v0.14.13→v0.15.2, shellcheck v0.10.0.1→v0.11.0.1, prettier v3.8.0→v3.8.1, actionlint v1.7.10→v1.7.11
- **Fly.io Dockerfile**: pin nginx to 1.28.2-alpine (was unpinned), bump alloy v1.5.1→v1.13.1
- **Mise tasks**: normalize httpx lower bound to >=0.28.0 and typer to >=0.15.0 across all scripts
- **Forgejo workflows**: actions/checkout@v4 is current, no changes needed
- **New how-to doc**: [[update-tooling-dependencies]] documenting this monthly cycle

## No changes needed

- pre-commit-hooks v6.0.0, yamllint v1.38.0, shfmt v3.12.0-2, taplo v0.9.3, ansible-lint 26.1.1 — all already at latest

## Test plan

- [x] `uvx pre-commit run --all-files` — all 24 hooks pass
- [ ] Fly.io deploy (triggered automatically on merge to main via deploy-fly workflow)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/254

2026-02-23 13:08:41 -08:00

3.8 KiB

Raw Blame History

title

modified

How-To Guides

Task-oriented instructions for common BlumeOps operations. These guides assume you already understand the basic concepts - see tutorials if you're learning.

Deployment

Guide	Description
deploy-k8s-service	Deploy a new service to Kubernetes via ArgoCD
add-ansible-role	Add a new Ansible role for indri services
create-release-artifact-workflow	Build artifacts and publish to Forgejo packages
build-container-image	Build and release a custom container image via Dagger

Configuration

Guide	Description
update-tailscale-acls	Update Tailscale access control policies
gandi-operations	Manage DNS records and cycle the Gandi API token
use-pypi-proxy	Configure pip and publish packages to devpi
expose-service-publicly	Expose a service to the public internet via Fly.io + Tailscale
update-documentation	Publish docs via build-blumeops workflow
update-tooling-dependencies	Monthly update cycle for pre-commit, Fly, mise, and workflow deps

Knowledge Base

Guide	Description
review-documentation	Periodically review and maintain documentation
review-services	Periodically review services for version freshness
agent-change-process	C0/C1/C2 change classification and Mikado method for agents

Operations

Guide	Description
connect-to-postgres	Connect to PostgreSQL as a superuser via psql
restart-indri	Safely shut down and restart indri
manage-flyio-proxy	Deploy, shutoff, and troubleshoot the public proxy
restore-1password-backup	Recover 1Password credentials from borgmatic backup
troubleshooting	Diagnose and fix common issues

Plans

Migration and transition plans for upcoming infrastructure changes.

Plan	Description
plans	Index of all plans
completed	Completed plans archive
migrate-forgejo-from-brew	Transition Forgejo from Homebrew to source-built binary
add-unifi-pulumi-stack	Add Pulumi IaC for UniFi Express 7 (abandoned)
segment-home-network	Manual three-network segmentation for UniFi Express 7
adopt-dagger-ci	Adopt Dagger as CI/CD build engine
upstream-fork-strategy	Stacked-branch forking strategy for upstream projects
adopt-oidc-provider	Deploy OIDC identity provider for SSO across services
upgrade-grafana-helm-chart	Upgrade Grafana Helm chart from 8.8.2 to 11.x
operationalize-reolink-camera	Cloud-free NVR with Frigate and ring buffer recording

Ringtail

Guide	Description
manage-lockfile	Update or lock NixOS flake inputs via Dagger

Zot

Mikado chain for hardening the zot registry. Track progress with mise run docs-mikado harden-zot-registry.

Authentik

Mikado chain for deploying Authentik. Track progress with mise run docs-mikado deploy-authentik.

Forgejo Runner

Mikado chain for upgrading the k8s forgejo-runner daemon from v6.3.1 to v12.x. Track progress with mise run docs-mikado upgrade-k8s-runner.

3.8 KiB Raw Blame History