bump versions

helmfile.d/01-infrastructure.lock

@@ -2,21 +2,21 @@ version: 1.2.3
 dependencies:
   - name: cert-manager
     repository: https://charts.jetstack.io
-    version: v1.20.0
+    version: v1.20.2
   - name: cert-manager-webhook-hetzner
     repository: https://charts.hetzner.cloud
-    version: 0.6.7
+    version: 0.7.0
   - name: rook-ceph
     repository: https://charts.rook.io/release
-    version: v1.19.2
+    version: v1.19.5
   - name: rook-ceph-cluster
     repository: https://charts.rook.io/release
-    version: v1.19.2
+    version: v1.19.5
   - name: tailscale-operator
     repository: https://pkgs.tailscale.com/helmcharts
-    version: 1.94.2
+    version: 1.96.5
   - name: traefik
     repository: https://traefik.github.io/charts
-    version: 39.0.6
-digest: sha256:ab4571859e9f203e981e51fddd6eb64e39e327d1f469aae0aebd5f53cf0ec025
-generated: "2026-03-21T15:54:30.181487309-06:00"
+    version: 39.0.8
+digest: sha256:331463f20fbe61ed710967ada172053dc52dda7efc4def7fe8f0c714dfc7a070
+generated: "2026-05-02T10:45:23.971292747-06:00"

helmfile.d/02-datastore.lock

@@ -2,15 +2,15 @@ version: 1.2.3
 dependencies:
   - name: k8up
     repository: https://k8up-io.github.io/k8up
-    version: 4.8.7
+    version: 4.9.0
   - name: mariadb
     repository: https://charts.bitnami.com/bitnami
-    version: 25.0.5
+    version: 25.0.10
   - name: pgo
     repository: git+https://github.com/grantdhunter/postgres-operator@helm?ref=main
     version: 5.8.1
   - name: postgrescluster
     repository: git+https://github.com/grantdhunter/postgres-operator@helm?ref=main
     version: 5.7.4
-digest: sha256:15aa54bcbc82cc0a0f2fde31f8a9999598a4ac8d8ae8ef4ea5d2cbc361443075
-generated: "2026-03-21T14:15:00.978030866-06:00"
+digest: sha256:916256c7bd616429ada39f49fa390c5a13b48ce65b9451eedf0ecbf60a42ef88
+generated: "2026-05-02T10:45:22.189650565-06:00"

helmfile.d/03-apps.lock

@@ -5,7 +5,7 @@ dependencies:
     version: 2.0.1
   - name: calibre-web
     repository: https://k8s-home-lab.github.io/helm-charts/
-    version: 9.1.0
+    version: 9.1.1
   - name: ghost
     repository: https://charts.bitnami.com/bitnami
     version: 25.0.4
@@ -14,10 +14,10 @@ dependencies:
     version: 25.0.4
   - name: gitea
     repository: https://dl.gitea.io/charts
-    version: 12.5.0
+    version: 12.5.3
   - name: immich
     repository: https://immich-app.github.io/immich-charts
-    version: 0.10.3
+    version: 0.11.1
   - name: k8up-backup
     repository: git+https://git.incngrnt.ca/grant/charts@charts?ref=main
     version: 0.0.3
@@ -35,9 +35,9 @@ dependencies:
     version: 0.1.0
   - name: matrix-synapse
     repository: https://ananace.gitlab.io/charts
-    version: 3.12.23
+    version: 3.12.26
   - name: static-site
     repository: git+https://github.com/cfpb/static-site@charts?ref=main
     version: 0.1.1
-digest: sha256:5fa6810fb7db97d0ff56fc5dcf272fd59202bad89b36c5b30ce212db7956edb9
-generated: "2026-03-21T15:54:36.111194061-06:00"
+digest: sha256:fd5d6ebb1020914d00dc9ead750aba9c9cc58428d2c550184d24f525cae2c366
+generated: "2026-05-02T10:45:26.89990081-06:00"

immich/values.yaml.gotmpl

@@ -3,7 +3,7 @@ controllers:
     containers:
       main:
         image:
-          tag: v2.5.6
+          tag: v2.7.5
 
         env:
           DB_HOSTNAME: {{ exec "kubectl" (list "-n" "immich" "get" "secrets" "postgres-pguser-immich" "-ogo-template='{{.data.host | base64decode }}'") }}