chore(deps): update all-minor-patch-updates

black-start/services/talos-discovery/docker-compose.yaml

@@ -2,7 +2,7 @@ version: "3.8"
 services:
   discovery:
     restart: unless-stopped
-    image: ghcr.io/siderolabs/discovery-service:v1.0.17
+    image: ghcr.io/siderolabs/discovery-service:v1.0.15
     ports:
       - 10.105.6.215:3000:3000
       - 10.105.6.215:3001:3001

black-start/services/vault/docker-compose.yaml

@@ -5,7 +5,7 @@ services:
     command: tunnel run weyma-vault
     env_file: ".env"
   vault:
-    image: hashicorp/vault:2.0
+    image: hashicorp/vault:1.21
     env_file: ".env.vault"
     environment:
       VAULT_ADDR: "https://weyma-vault.infra.dubyatp.xyz:8200"

omni/weyma-talos.yaml

@@ -1,9 +1,9 @@
 kind: Cluster
 name: weyma-talos
 kubernetes:
-  version: v1.35.4
+  version: v1.34.2
 talos:
-  version: v1.12.7
+  version: v1.11.5
 features:
   backupConfiguration:
     interval: 6h0m0s
@@ -332,7 +332,7 @@ kind: ControlPlane
 machines:
   - 20b4c826-e699-43b3-826d-73eb5173680b
   - 5fdea709-56ad-45f2-966d-5e344dbe4fdf
-  - 30303031-3030-3030-6335-303731636600
+  - 30303031-3030-3030-6335-303731636665
 ---
 kind: Workers
 machines:
@@ -427,9 +427,9 @@ patches:
               interface: br0
 ---
 kind: Machine
-name: 30303031-3030-3030-6335-303731636600
+name: 30303031-3030-3030-6335-303731636665
 patches:
-  - idOverride: 400-cm-30303031-3030-3030-6335-303731636600
+  - idOverride: 400-cm-30303031-3030-3030-6335-303731636665
     inline:
       machine:
         network:

system-apps/argocd/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: argo-cd
-  version: 9.5.17
+  version: 9.4.10
   repository: https://argoproj.github.io/argo-helm

system-apps/argocd/values.yaml

@@ -131,7 +131,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: admin.password
           remoteRef:
             key: argo-cd
@@ -139,7 +138,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: admin.passwordMtime
           remoteRef:
             key: argo-cd
@@ -147,7 +145,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: dex.authentik.clientSecret
           remoteRef:
             key: argo-cd
@@ -155,7 +152,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
     - apiVersion: external-secrets.io/v1
       kind: ExternalSecret
       metadata:
@@ -179,7 +175,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: type
           remoteRef:
             key: argo-cd-git
@@ -187,7 +182,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: url
           remoteRef:
             key: argo-cd-git
@@ -195,7 +189,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
     - apiVersion: external-secrets.io/v1
       kind: ExternalSecret
       metadata:
@@ -219,7 +212,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: type
           remoteRef:
             key: argo-cd-git
@@ -227,7 +219,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: url
           remoteRef:
             key: argo-cd-git
@@ -235,7 +226,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
     - apiVersion: external-secrets.io/v1
       kind: ExternalSecret
       metadata:
@@ -259,7 +249,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: type
           remoteRef:
             key: argo-cd-git
@@ -267,7 +256,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: url
           remoteRef:
             key: argo-cd-git
@@ -275,7 +263,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
     - apiVersion: external-secrets.io/v1
       kind: ExternalSecret
       metadata:
@@ -299,7 +286,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: type
           remoteRef:
             key: argo-cd-git
@@ -307,7 +293,6 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore
         - secretKey: url
           remoteRef:
             key: argo-cd-git
@@ -315,4 +300,3 @@ argo-cd:
             conversionStrategy: Default
             decodingStrategy: None
             metadataPolicy: None
-            nullBytePolicy: Ignore

system-apps/cert-manager/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: cert-manager
-  version: v1.20.2
+  version: v1.19.4
   repository: https://charts.jetstack.io

system-apps/external-secrets/chart/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: external-secrets
-  version: 2.5.0
+  version: 2.1.0
   repository: https://charts.external-secrets.io

system-apps/kite/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: kite
-  version: 0.12.2
+  version: 0.8.0
   repository: https://zxh326.github.io/kite

system-apps/metallb/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: metallb
-  version: 0.16.1
+  version: 0.15.3
   repository: https://metallb.github.io/metallb

system-apps/metallb/values.yaml

@@ -1,6 +1,4 @@
 metallb:
-  frrk8s:
-    enabled: false
   prometheus:
     rbacPrometheus: false
     podMonitor:

system-apps/monitoring/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: kube-prometheus-stack
-  version: 86.1.0
+  version: 82.10.3
   repository: https://prometheus-community.github.io/helm-charts

system-apps/monitoring/templates/discord-webhook-secret.yaml

@@ -17,6 +17,5 @@ spec:
       conversionStrategy: Default
       decodingStrategy: None
       metadataPolicy: None
-      nullBytePolicy: Ignore
       key: monitoring
       property: discord_webhook

system-apps/rook-ceph/operator/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: rook-ceph
-  version: v1.19.6
+  version: v1.19.2
   repository: https://charts.rook.io/release

system-apps/traefik/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: traefik
-  version: 40.2.0
+  version: 39.0.5
   repository: https://traefik.github.io/charts

system-apps/traefik/values.yaml

@@ -37,7 +37,7 @@ traefik:
     kind: DaemonSet
     additionalContainers:
     - name: cloudflared
-      image: cloudflare/cloudflared:2026.5.2
+      image: cloudflare/cloudflared:2026.3.0
       command:
         - cloudflared
         - tunnel

system-apps/velero/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: velero
-  version: 12.0.2
+  version: 11.4.0
   repository: https://vmware-tanzu.github.io/helm-charts

system-apps/velero/values.yaml

@@ -59,7 +59,7 @@ velero:
         insecureSkipTLSVerify: "true"
   initContainers:
   - name: velero-plugin-for-aws
-    image: velero/velero-plugin-for-aws:v1.14.1
+    image: velero/velero-plugin-for-aws:v1.14.0
     imagePullPolicy: IfNotPresent
     volumeMounts:
       - mountPath: /target