Update dependency k3s to v1.32.4+k3s1 #431

Closed
viceice-bot wants to merge 104 commits from renovate/k3s-1.32.x into main05b2648b1da25bade3803fe95e228d8a00d2abee
First-time contributor

This PR contains the following updates:

Package Update Change
k3s patch v1.32.3+k3s1 -> v1.32.4+k3s1

Release Notes

k3s-io/k3s (k3s)

v1.32.4+k3s1: v1.32.4+k3s1

Compare Source

This release updates Kubernetes to v1.32.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.32.3+k3s1:
  • Migrate to UrfaveCLI v2 (#​12031)
  • Improve readiness polling on node startup (#​12038)
  • Fix issue caused by default authorization-mode apiserver arg (#​12042)
  • Fix flakey etcd startup tests (#​12050)
  • Cleanup anonymous and named volumes for docker tests (#​12079)
  • Add support for secretbox encryption provider with the k3s secrets-encrypt command (#​12067)
    • Users can now configure secrets encryption to use secretbox provider by setting the secrets-encryption-provider flag.
  • Add error in certificate check (#​12098)
  • Backports for 2025-04 (#​12104)
  • Bump kine for nats-server/v2 CVE-2025-30215 (#​12141)
  • Drone Test Split and Reduction (#​12151)
  • More backports for 2025-04 (#​12167)
  • Fix handler panic when bootstrapper returns empty peer list (#​12178)
  • Bump traefik to v3.3.6 (#​12189)
  • Update to v1.32.4-k3s1 and Go 1.23.6 (#​12209)
Embedded Component Versions
Component Version
Kubernetes v1.32.4
Kine v0.13.14
SQLite 3.46.1
Etcd v3.5.21-k3s1
Containerd v2.0.4-k3s2
Runc v1.2.5
Flannel v0.26.7
Metrics-server v0.7.2
Traefik v3.3.6
CoreDNS v1.12.1
Helm-controller v0.16.10
Local-path-provisioner v0.0.31

As always, we welcome and appreciate feedback from our community of users. Please feel free to:


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [k3s](https://github.com/k3s-io/k3s) | patch | `v1.32.3+k3s1` -> `v1.32.4+k3s1` | --- ### Release Notes <details> <summary>k3s-io/k3s (k3s)</summary> ### [`v1.32.4+k3s1`](https://github.com/k3s-io/k3s/releases/tag/v1.32.4%2Bk3s1): v1.32.4+k3s1 [Compare Source](https://github.com/k3s-io/k3s/compare/v1.32.3+k3s1...v1.32.4+k3s1) <!-- v1.32.4+k3s1 --> This release updates Kubernetes to v1.32.4, and fixes a number of issues. For more details on what's new, see the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1323). ##### Changes since v1.32.3+k3s1: - Migrate to UrfaveCLI v2 [(#&#8203;12031)](https://github.com/k3s-io/k3s/pull/12031) - Improve readiness polling on node startup [(#&#8203;12038)](https://github.com/k3s-io/k3s/pull/12038) - Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12042)](https://github.com/k3s-io/k3s/pull/12042) - Fix flakey etcd startup tests [(#&#8203;12050)](https://github.com/k3s-io/k3s/pull/12050) - Cleanup anonymous and named volumes for docker tests [(#&#8203;12079)](https://github.com/k3s-io/k3s/pull/12079) - Add support for secretbox encryption provider with the `k3s secrets-encrypt` command [(#&#8203;12067)](https://github.com/k3s-io/k3s/pull/12067) - Users can now configure secrets encryption to use `secretbox` provider by setting the `secrets-encryption-provider` flag. - Add error in certificate check [(#&#8203;12098)](https://github.com/k3s-io/k3s/pull/12098) - Backports for 2025-04 [(#&#8203;12104)](https://github.com/k3s-io/k3s/pull/12104) - Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12141)](https://github.com/k3s-io/k3s/pull/12141) - Drone Test Split and Reduction [(#&#8203;12151)](https://github.com/k3s-io/k3s/pull/12151) - More backports for 2025-04 [(#&#8203;12167)](https://github.com/k3s-io/k3s/pull/12167) - Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12178)](https://github.com/k3s-io/k3s/pull/12178) - Bump traefik to v3.3.6 [(#&#8203;12189)](https://github.com/k3s-io/k3s/pull/12189) - Update to v1.32.4-k3s1 and Go 1.23.6 [(#&#8203;12209)](https://github.com/k3s-io/k3s/pull/12209) ##### Embedded Component Versions | Component | Version | |---|---| | Kubernetes | [v1.32.4](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1324) | | Kine | [v0.13.14](https://github.com/k3s-io/kine/releases/tag/v0.13.14) | | SQLite | [3.46.1](https://sqlite.org/releaselog/3\_46\_1.html) | | Etcd | [v3.5.21-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1) | | Containerd | [v2.0.4-k3s2](https://github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2) | | Runc | [v1.2.5](https://github.com/opencontainers/runc/releases/tag/v1.2.5) | | Flannel | [v0.26.7](https://github.com/flannel-io/flannel/releases/tag/v0.26.7) | | Metrics-server | [v0.7.2](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2) | | Traefik | [v3.3.6](https://github.com/traefik/traefik/releases/tag/v3.3.6) | | CoreDNS | [v1.12.1](https://github.com/coredns/coredns/releases/tag/v1.12.1) | | Helm-controller | [v0.16.10](https://github.com/k3s-io/helm-controller/releases/tag/v0.16.10) | | Local-path-provisioner | [v0.0.31](https://github.com/rancher/local-path-provisioner/releases/tag/v0.0.31) | ##### Helpful Links As always, we welcome and appreciate feedback from our community of users. Please feel free to: - [Open issues here](https://github.com/rancher/k3s/issues/new/choose) - [Join our Slack channel](https://slack.rancher.io/) - [Check out our documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how to get started or to dive deep into K3s. - [Read how you can contribute here](https://github.com/rancher/k3s/blob/master/CONTRIBUTING.md) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
viceice-bot added 104 commits 2025-05-29 20:24:52 +00:00
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [codeberg.org/forgejo/forgejo](https://forgejo.org) ([source](https://codeberg.org/forgejo/forgejo)) | patch | `11.0.0` -> `11.0.1` |

---

### Release Notes

<details>
<summary>forgejo/forgejo (codeberg.org/forgejo/forgejo)</summary>

### [`v11.0.1`](https://codeberg.org/forgejo/forgejo/releases/tag/v11.0.1)

[Compare Source](https://codeberg.org/forgejo/forgejo/compare/v11.0.0...v11.0.1)

See https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.1.md

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/474
Reviewed-by: earl-warren <earl-warren@noreply.invisible.forgejo.org>
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [forgejo](https://forgejo.org/) ([source](https://code.forgejo.org/forgejo-helm/forgejo-helm)) | patch | `12.3.0` -> `12.3.1` |

---

### Release Notes

<details>
<summary>forgejo-helm/forgejo-helm (forgejo)</summary>

### [`v12.3.1`](https://code.forgejo.org/forgejo-helm/forgejo-helm/releases/tag/v12.3.1): 12.3.1

[Compare Source](https://code.forgejo.org/forgejo-helm/forgejo-helm/compare/v12.3.0...v12.3.1)

##### Bug Fixes

-   **deps:** update forgejo docker tag to v11.0.1 (main) ([#&#8203;1212](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1212)) ([93f4144](93f4144e21))

##### Tests

-   enable ci test for redis ([#&#8203;1210](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1210)) ([0448dcf](0448dcfda6))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/476
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [forgejo](https://forgejo.org/) ([source](https://code.forgejo.org/forgejo-helm/forgejo-helm)) | patch | `12.3.0` -> `12.3.1` |

---

### Release Notes

<details>
<summary>forgejo-helm/forgejo-helm (forgejo)</summary>

### [`v12.3.1`](https://code.forgejo.org/forgejo-helm/forgejo-helm/releases/tag/v12.3.1): 12.3.1

[Compare Source](https://code.forgejo.org/forgejo-helm/forgejo-helm/compare/v12.3.0...v12.3.1)

##### Bug Fixes

-   **deps:** update forgejo docker tag to v11.0.1 (main) ([#&#8203;1212](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1212)) ([93f4144](93f4144e21))

##### Tests

-   enable ci test for redis ([#&#8203;1210](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1210)) ([0448dcf](0448dcfda6))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/477
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [forgejo](https://forgejo.org/) ([source](https://code.forgejo.org/forgejo-helm/forgejo-helm)) | patch | `7.1.10` -> `7.1.11` |

---

### Release Notes

<details>
<summary>forgejo-helm/forgejo-helm (forgejo)</summary>

### [`v7.1.11`](https://code.forgejo.org/forgejo-helm/forgejo-helm/releases/tag/v7.1.11): 7.1.11

[Compare Source](https://code.forgejo.org/forgejo-helm/forgejo-helm/compare/v7.1.10...v7.1.11)

##### Bug Fixes

-   **deps:** update forgejo docker tag to v7.0.15 (maint/v7) ([#&#8203;1213](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1213)) ([17a53aa](17a53aaad2))
-   **deps:** update helm release redis-cluster to v11.4.6 (maint/v7) ([#&#8203;1166](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1166)) ([5a26ec5](5a26ec5bb4))
-   **deps:** update helm release redis-cluster to v11.5.0 (maint/v7) ([#&#8203;1183](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1183)) ([d75036a](d75036af9d))
-   **deps:** update helm release redis-cluster to v11.5.1 (maint/v7) ([#&#8203;1193](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1193)) ([86e9f8a](86e9f8ae03))
-   **deps:** update helm release redis-cluster to v11.5.3 (maint/v7) ([#&#8203;1207](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1207)) ([01dc5f9](01dc5f94d1))

##### Tests

-   fix forgejo test tags ([fbd42eb](fbd42eb6e1))

##### Continuous Integration

-   **deps:** update actions/setup-node action to v4.4.0 (maint/v7) ([#&#8203;1185](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1185)) ([73006fd](73006fdbb1))
-   **deps:** update dependency helm to v3.17.3 (maint/v7) ([#&#8203;1179](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1179)) ([0af9579](0af9579be2))
-   **deps:** update dependency helm-unittest to v0.8.0 (maint/v7) ([#&#8203;1138](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1138)) ([3abd1d9](3abd1d98ce))
-   **deps:** update dependency kubectl to v1.32.4 (maint/v7) ([#&#8203;1197](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1197)) ([290d174](290d174cca))
-   **deps:** update dependency kubectl to v1.33.0 (maint/v7) ([#&#8203;1201](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1201)) ([bcb5924](bcb59240b0))
-   **deps:** update k3s (patch) (maint/v7) (patch) ([#&#8203;1172](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1172)) ([6c8ad25](6c8ad25662))

##### Miscellaneous Chores

-   **deps:** update dependency lint-staged to v15.5.1 (maint/v7) ([#&#8203;1181](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1181)) ([264aef1](264aef16ea))
-   **deps:** update node.js to v22.15.0 (maint/v7) ([#&#8203;1199](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1199)) ([57e1578](57e1578d55))
-   **deps:** update pnpm to v10.10.0 (maint/v7) ([#&#8203;1205](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1205)) ([58045d4](58045d4c75))
-   **deps:** update pnpm to v10.6.5 (maint/v7) ([#&#8203;1162](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1162)) ([d7ead5d](d7ead5dc99))
-   **deps:** update pnpm to v10.7.0 (maint/v7) ([#&#8203;1169](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1169)) ([fea6d0c](fea6d0cfc2))
-   **deps:** update pnpm to v10.7.1 (maint/v7) ([#&#8203;1175](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1175)) ([0d536de](0d536deb38))
-   **deps:** update pnpm to v10.8.0 (maint/v7) ([#&#8203;1177](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1177)) ([405b7e6](405b7e6736))
-   **deps:** update pnpm to v10.8.1 (maint/v7) ([#&#8203;1187](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1187)) ([14c87ae](14c87aeb34))
-   **deps:** update pnpm to v10.9.0 (maint/v7) ([#&#8203;1195](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1195)) ([109ae35](109ae359e6))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/478
Reviewed-by: earl-warren <earl-warren@noreply.invisible.forgejo.org>
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [forgejo](https://forgejo.org/) ([source](https://code.forgejo.org/forgejo-helm/forgejo-helm)) | patch | `12.3.0` -> `12.3.1` |

---

### Release Notes

<details>
<summary>forgejo-helm/forgejo-helm (forgejo)</summary>

### [`v12.3.1`](https://code.forgejo.org/forgejo-helm/forgejo-helm/releases/tag/v12.3.1): 12.3.1

[Compare Source](https://code.forgejo.org/forgejo-helm/forgejo-helm/compare/v12.3.0...v12.3.1)

##### Bug Fixes

-   **deps:** update forgejo docker tag to v11.0.1 (main) ([#&#8203;1212](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1212)) ([93f4144](93f4144e21))

##### Tests

-   enable ci test for redis ([#&#8203;1210](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1210)) ([0448dcf](0448dcfda6))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/479
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [forgejo](https://forgejo.org/) ([source](https://code.forgejo.org/forgejo-helm/forgejo-helm)) | patch | `12.3.0` -> `12.3.1` |

---

### Release Notes

<details>
<summary>forgejo-helm/forgejo-helm (forgejo)</summary>

### [`v12.3.1`](https://code.forgejo.org/forgejo-helm/forgejo-helm/releases/tag/v12.3.1): 12.3.1

[Compare Source](https://code.forgejo.org/forgejo-helm/forgejo-helm/compare/v12.3.0...v12.3.1)

##### Bug Fixes

-   **deps:** update forgejo docker tag to v11.0.1 (main) ([#&#8203;1212](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1212)) ([93f4144](93f4144e21))

##### Tests

-   enable ci test for redis ([#&#8203;1210](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1210)) ([0448dcf](0448dcfda6))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/480
Reviewed-by: earl-warren <earl-warren@noreply.invisible.forgejo.org>
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [forgejo](https://forgejo.org/) ([source](https://code.forgejo.org/forgejo-helm/forgejo-helm)) | patch | `12.3.0` -> `12.3.1` |

---

### Release Notes

<details>
<summary>forgejo-helm/forgejo-helm (forgejo)</summary>

### [`v12.3.1`](https://code.forgejo.org/forgejo-helm/forgejo-helm/releases/tag/v12.3.1): 12.3.1

[Compare Source](https://code.forgejo.org/forgejo-helm/forgejo-helm/compare/v12.3.0...v12.3.1)

##### Bug Fixes

-   **deps:** update forgejo docker tag to v11.0.1 (main) ([#&#8203;1212](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1212)) ([93f4144](93f4144e21))

##### Tests

-   enable ci test for redis ([#&#8203;1210](https://code.forgejo.org/forgejo-helm/forgejo-helm/issues/1210)) ([0448dcf](0448dcfda6))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjgiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/481
Reviewed-by: earl-warren <earl-warren@noreply.invisible.forgejo.org>
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
digest update
Some checks failed
build / lint (push) Has been cancelled
655c381802
Update dependency markdownlint to v0.38.0
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
17fa166b0e
fix: upgrade anubis next to v1.17.1 (#483)
Some checks failed
build / lint (push) Has been cancelled
dd4083de35
In the hope that https://github.com/TecharoHQ/anubis/pull/365 will help figure out why and when it activates.

https://anubis.techaro.lol/docs/CHANGELOG#v1171-asahi-sas-brutus-echo-1
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/483
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Earl Warren <contact@earl-warren.org>
Co-committed-by: Earl Warren <contact@earl-warren.org>
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/484
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
fix: only proxy GET requests to v10.next anubis (#487)
Some checks failed
build / lint (push) Has been cancelled
536d8aed24
```sh
earl-warren:~/software/k8s-cluster/flux/apps$ kustomize build --load-restrictor  LoadRestrictionsNone forgejo-next-v10 > /tmp/before.txt
earl-warren:~/software/k8s-cluster/flux/apps$ kustomize build --load-restrictor  LoadRestrictionsNone forgejo-next-v10 > /tmp/after.txt
earl-warren:~/software/k8s-cluster/flux/apps$ diff -u /tmp/before.txt /tmp/after.txt
```

```diff
--- /tmp/before.txt	2025-05-04 09:52:05.442106087 +0200
+++ /tmp/after.txt	2025-05-04 10:08:48.703862394 +0200
@@ -189,7 +189,7 @@
         paths:
         - path: /
           pathType: Prefix
-          port: anubis
+          port: http
       tls:
       - hosts:
         - v10.next.forgejo.org
@@ -219,6 +219,26 @@
     name: forgejo-next-posteo-mailer
 ---
 apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: traefik
+  name: anubis-v10
+  namespace: forgejo-next
+spec:
+  entryPoints:
+  - websecure
+  routes:
+  - kind: Rule
+    match: HostRegexp(`v10.next.forgejo.org`) && Method(`GET`)
+    priority: 1100
+    services:
+    - name: forgejo-v10-http
+      port: anubis
+  tls:
+    secretName: tls-forgejo-next-v10-ingress-http
+---
+apiVersion: traefik.io/v1alpha1
 kind: IngressRouteTCP
 metadata:
   annotations:
```

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/487
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Earl Warren <contact@earl-warren.org>
Co-committed-by: Earl Warren <contact@earl-warren.org>
fix: only proxy GET requests to code.forgejo anubis (#488)
Some checks failed
build / lint (push) Has been cancelled
1a8e2c5c6d
```sh
earl-warren:~/software/k8s-cluster/flux/apps$ kustomize build --load-restrictor  LoadRestrictionsNone forgejo-code > /tmp/before.txt
earl-warren:~/software/k8s-cluster/flux/apps$ kustomize build --load-restrictor  LoadRestrictionsNone forgejo-code > /tmp/after.txt
earl-warren:~/software/k8s-cluster/flux/apps$ diff -u /tmp/before.txt /tmp/after.txt
```

```diff
-- /tmp/before.txt	2025-05-04 12:03:43.408378869 +0200
+++ /tmp/after.txt	2025-05-04 12:29:46.696879731 +0200
@@ -437,7 +437,6 @@
         paths:
         - path: /
           pathType: Prefix
-          port: anubis
       - host: data.forgejo.org
         paths:
         - path: /api/
@@ -619,6 +618,26 @@
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: traefik
+  name: anubis-code-forgejo
+  namespace: forgejo-code
+spec:
+  entryPoints:
+  - websecure
+  routes:
+  - kind: Rule
+    match: Host(`code.forgejo.org`) && Method(`GET`)
+    priority: 1100
+    services:
+    - name: forgejo-code-http
+      port: anubis
+  tls:
+    secretName: tls-forgejo-code-ingress-http
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
 metadata:
   annotations:
     kubernetes.io/ingress.class: traefik
```

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/488
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Earl Warren <contact@earl-warren.org>
Co-committed-by: Earl Warren <contact@earl-warren.org>
In the hope that https://github.com/TecharoHQ/anubis/pull/365 will
help figure out why and when it activates.

Also configure the status code to be able to track what happens
in the logs.

- CHALLENGE - 202 - https://www.rfc-editor.org/rfc/rfc9110#name-202-accepted
- DENY - 406 - https://www.rfc-editor.org/rfc/rfc9110#name-406-not-acceptable

https://anubis.techaro.lol/docs/CHANGELOG#v1171-asahi-sas-brutus-echo-1

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/486
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Earl Warren <contact@earl-warren.org>
Co-committed-by: Earl Warren <contact@earl-warren.org>
fix: lower Anubis difficulty level to 1
Some checks failed
build / lint (push) Has been cancelled
0bc0429a69
The crawlers do not even try.
Update data.forgejo.org/renovate/renovate Docker tag to v39.264.0
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
856b01c3e6
Update data.forgejo.org/renovate/renovate Docker tag to v40 (#490)
Some checks failed
build / lint (push) Has been cancelled
2c7bcf2a46
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/490
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Migrate renovate config (#491)
Some checks failed
build / lint (push) Has been cancelled
006cdd3704
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/491
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Update dependency prettier-plugin-packagejson to v2.5.11
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
505b378d1a
digest update
Some checks failed
build / lint (push) Has been cancelled
f324f92877
Update dependency lint-staged to v15.5.2
Some checks failed
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
build / lint (push) Has been cancelled
40553d0237
chore: lint fix
Some checks failed
build / lint (push) Has been cancelled
f9e34db0ab
Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/498
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: limiting-factor <limiting-factor@posteo.com>
Co-committed-by: limiting-factor <limiting-factor@posteo.com>
feat: add go-gitea/gitea to git-mirror.forgejo.org (#497)
Some checks failed
build / lint (push) Has been cancelled
7886a1c949
Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/497
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: limiting-factor <limiting-factor@posteo.com>
Co-committed-by: limiting-factor <limiting-factor@posteo.com>
Update dependency prettier-plugin-packagejson to v2.5.12
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
3c9d252729
digest update
Some checks failed
build / lint (push) Has been cancelled
6cc255d0ba
Update dependency markdownlint-cli2 to v0.18.0
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
ebd2925aec
digest update
Some checks failed
build / lint (push) Has been cancelled
93b88655ec
Update data.forgejo.org/renovate/renovate Docker tag to v40.11.6
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
5653b67832
Lock file maintenance
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
9d9018c471
Update forgejo Helm chart (forgejo-next-v10) to v12.4.0 (#502)
Some checks failed
build / lint (push) Has been cancelled
f5c9cd7182
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/502
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/496
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/469
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/503
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/504
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/494
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Image is missing: `public.ecr.aws/bitnami/prometheus:3.3.1-debian-12-r1`

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/469
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Update dependency k3s to v1.32.4+k3s1 (#475)
Some checks failed
build / lint (push) Has been cancelled
ae5b7690d2
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/475
Co-authored-by: Renovate Bot <bot@kriese.eu>
Co-committed-by: Renovate Bot <bot@kriese.eu>
Update pnpm to v10.11.0
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
bb2ab2be92
digest update
Some checks failed
build / lint (push) Has been cancelled
e6cc89353b
Update dependency markdownlint-cli2 to v0.18.1
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
d995386a4e
Update dependency prettier-plugin-packagejson to v2.5.13
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
8d44c5d3ca
digest update
Some checks failed
build / lint (push) Has been cancelled
ca2fd6b754
Update data.forgejo.org/renovate/renovate Docker tag to v40.14.5
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
8571759384
Lock file maintenance
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
f141fa6155
Update data.forgejo.org/renovate/renovate Docker tag to v40.14.6
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
e0341e5146
digest update
Some checks failed
build / lint (push) Has been cancelled
228d8a3da0
Update dependency prettier-plugin-packagejson to v2.5.14
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
d3d81d0044
digest update
Some checks failed
build / lint (push) Has been cancelled
07a6b46dd9
fix: anubis must not OG_PASSTHROUGH (#521)
Some checks failed
build / lint (push) Has been cancelled
491aa51db3
OG_PASSTHROUGH is self defeating in the patterns used to crawl
forgejo because there is a very wide variety of URLs. It is only
effective when a lot of requests are made in a short (24h) period
of time.

Since Matrix and all user agents in need of OpenGraph announce
themselves with proper user agents, it is enough to only route
user agents matching Mozilla|Opera to anubis and let the rest go
directly to Forgejo.

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/521
Co-authored-by: Earl Warren <contact@earl-warren.org>
Co-committed-by: Earl Warren <contact@earl-warren.org>
Refs infrastructure/k8s-cluster#415

---

- [x] create PVC directory `../k3s-host/setup.sh setup_k8s_pvc moderation-draupnir 1000`
- [x] create namespace
    ```shell
    debian@hetzner06:~$ kubectl apply --server-side -f moderation/namespace.yaml
    namespace/moderation serverside-applied
    debian@hetzner06:~$ cat moderation/namespace.yaml
    apiVersion: v1
    kind: Namespace
    metadata:
      name: moderation
    ```
- [x] create secrets `debian@hetzner06:~/moderation$ kubectl apply --server-side -f moderation-draupnir.yaml` (using the token provided by @Beowulf )

---

`k8s-cluster/flux/apps$ kustomize build --load-restrictor  LoadRestrictionsNone moderation `

```yaml
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: draupnir
  namespace: moderation
spec:
  chart:
    spec:
      chart: draupnir
      interval: 5m
      sourceRef:
        kind: HelmRepository
        name: draupnir
        namespace: flux-system
      version: 0.1.0
  interval: 30m
  values:
    config:
      admin:
        enableMakeRoomAdminCommand: false
      autojoinOnlyIfManager: true
      automaticallyRedactForReasons:
      - spam
      - advertising
      backgroundDelayMS: 500
      commands:
        additionalPrefixes:
        - draupnir
        allowNoPrefix: true
        ban:
          defaultReasons:
          - spam
          - advertising
      dataPath: /data/storage
      disableServerACL: false
      displayReports: true
      experimentalRustCrypto: false
      health:
        healthz:
          address: 0.0.0.0
          enabled: true
          endpoint: /healthz
          healthyStatus: 200
          port: 8080
          unhealthyStatus: 418
      homeserverUrl: https://matrix-client.matrix.org
      logLevel: INFO
      managementRoom: '!QAufPzkBelflNHeFko:matrix.org'
      noop: false
      pantalaimon:
        use: false
      pollReports: false
      protectAllJoinedRooms: false
      protections:
        wordlist:
          minutesBeforeTrusting: 20
          words:
          - https://t.me/
      rawHomeserverUrl: https://matrix-client.matrix.org
      recordIgnoredInvites: false
      roomStateBackingStore:
        enabled: true
      verifyPermissionsOnStartup: true
      web:
        abuseReporting:
          enabled: false
        enabled: false
        synapseHTTPAntispam:
          enabled: false
    volumeMounts:
    - mountPath: /data/storage
      name: moderation-draupnir
    volumes:
    - name: moderation-draupnir
      persistentVolumeClaim:
        claimName: moderation-draupnir-pvc
  valuesFrom:
  - kind: Secret
    name: draupnir-token
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: moderation-draupnir-pvc
  namespace: moderation
spec:
  chart:
    spec:
      chart: ./flux/apps/charts/pvc
      interval: 12h
      sourceRef:
        kind: GitRepository
        name: flux-system
        namespace: flux-system
  driftDetection:
    mode: enabled
  interval: 30m
  values:
    capacity: 10Gi
    name: draupnir
```

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/522
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Earl Warren <contact@earl-warren.org>
Co-committed-by: Earl Warren <contact@earl-warren.org>
Refs infrastructure/k8s-cluster#415
Refs infrastructure/k8s-cluster#415
Refs infrastructure/k8s-cluster#415
Refs infrastructure/k8s-cluster#415
Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/523
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Beowulf <beowulf@beocode.eu>
Co-committed-by: Beowulf <beowulf@beocode.eu>
digest update
Some checks failed
build / lint (push) Has been cancelled
4d9c7ffca7
fix: RSS does not need to be gated by Anubis (#526)
Some checks failed
build / lint (push) Has been cancelled
cca742b68a
Refs https://codeberg.org/forgejo/discussions/issues/320#issuecomment-4814151

closes #525

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/526
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Earl Warren <contact@earl-warren.org>
Co-committed-by: Earl Warren <contact@earl-warren.org>
Update data.forgejo.org/renovate/renovate Docker tag to v40.31.0
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
81ef96eb41
Lock file maintenance
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
b233acf5a8
digest update
Some checks failed
build / lint (push) Has been cancelled
9a76179319
root/withobjects#1

takes 5 seconds to load and all operations are similarly slow which makes it more
difficult than needed for debugging and operations.

Reviewed-on: https://invisible.forgejo.org/infrastructure/k8s-cluster/pulls/530
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: limiting-factor <limiting-factor@posteo.com>
Co-committed-by: limiting-factor <limiting-factor@posteo.com>
Update dependency k3s to v1.32.5+k3s1
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled
855ce85a80
earl-warren reviewed 2025-05-29 20:24:52 +00:00
earl-warren left a comment
First-time contributor

added by F3

added by F3
viceice approved these changes 2025-05-29 20:24:52 +00:00
root closed this pull request 2025-05-29 20:24:53 +00:00
Some checks failed
build / lint (push) Has been cancelled
build / lint (pull_request) Has been cancelled
/ test (pull_request) Has been cancelled

Pull request closed

Sign in to join this conversation.
No description provided.