🔧 Renovate: Pin dependencies

2026-05-19 23:24:44 +00:00
5 changed files with 16 additions and 18 deletions
@@ -293,9 +293,8 @@ jobs:
        with:
          HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
          HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: approle
-          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
-          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
+          HC_VAULT_USERNAME: ${{ secrets.VAULT_GITEA_USER }}
+          HC_VAULT_PASSWORD: ${{ secrets.VAULT_GITEA_PASSWORD }}
          HC_VAULT_SECRETS_PATH: rikku-docker/env

      - name: Docker Compose Deployment
@@ -118,9 +118,8 @@ jobs:
        with:
          HC_VAULT_VERSION: ${{ env.HC_VAULT_VERSION }}
          HC_VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
-          HC_VAULT_AUTH: approle
-          HC_VAULT_ROLE_ID: ${{ secrets.VAULT_ROLE_ID }}
-          HC_VAULT_SECRET_ID: ${{ secrets.VAULT_SECRET_ID }}
+          HC_VAULT_AUTH: token
+          HC_VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
          HC_VAULT_SECRETS_PATH: rikku-docker/env

      - name: Docker Compose Deployment
@@ -2,7 +2,7 @@ name: Renovate

 on:
  schedule:
-    - cron: "0 */2 * * *"
+    - cron: "0/30 * * * *"
  workflow_dispatch:

 env:
@@ -4,7 +4,7 @@

 | Service | Image | Description |
 | --- | --- | --- |
-| adguard | adguard/adguardhome:v0.107.78 |  |
+| adguard | adguard/adguardhome:v0.107.75 |  |
 | beszel-agent | henrygd/beszel-agent:0.18.7 |  |
 | castsponsorskip | ghcr.io/gabe565/castsponsorskip:0.8.3 |  |
 | docker-socket-proxy | ghcr.io/tecnativa/docker-socket-proxy:latest |  |
@@ -16,7 +16,7 @@
 | patchmon-redis | redis:7-alpine |  |
 | patchmon-guacd | guacamole/guacd:1.6.0 |  |
 | portainer-agent | portainer/agent:latest |  |
-| renovate | renovate/renovate:43.260.3-full |  |
+| renovate | renovate/renovate:43.170.22-full |  |
 | renovate-valkey | docker.io/valkey/valkey:9-alpine |  |
 | signoz-logspout | pavanputhra/logspout-signoz:2025.07.19-887dfeb |  |
 | snapcast-server | docker.io/sweisgerber/snapcast:latest |  |
@@ -10,7 +10,7 @@ services:
    container_name: adguard
    environment:
      TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.78@sha256:1ea34eafe5dc691007946e8eaab7bf46b0de9412f39213d8c06e48b53bf9a6c5
+    image: adguard/adguardhome:v0.107.75@sha256:50ac5916778faa06ad4adcff606c7aaf806cb55dc1995160dbf50633c9bda94d
    network_mode: host
    privileged: true
    restart: unless-stopped
@@ -40,7 +40,7 @@ services:
    container_name: castsponsorskip
    image: ghcr.io/gabe565/castsponsorskip:0.8.3@sha256:f556d274aab94c3140058e9f192396bc75e04d8e075769223c1edfc8c4f4daa4
    environment:
-      TZ: America/New_York
+      TZ: ${TZ}
      # CSS_PAUSED_INTERVAL:
      # CSS_PLAYING_INTERVAL:
      # CSS_CATEGORIES:
@@ -160,7 +160,7 @@ services:
      - /dev/ttyS0:/dev/ttyS0
    environment:
      DISABLE_JEMALLOC: true
-    image: ghcr.io/home-assistant/home-assistant:stable@sha256:1476924357b46e80735c13e94232ba5c853cac052e9df4bb28d50fa56348097b
+    image: ghcr.io/home-assistant/home-assistant:stable@sha256:f0baa7922ecec7790c40c41baf08ab218b6ab8db5f96dc03b03a0ae33d987c3d
    labels:
      com.centurylinklabs.watchtower.monitor-only: true
    network_mode: host
@@ -201,7 +201,7 @@ services:
    restart: unless-stopped
  patchmon-pg-db:
    container_name: patchmon-pg-db
-    image: postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193
+    image: postgres:17-alpine@sha256:979c4379dd698aba0b890599a6104e082035f98ef31d9b9291ec22f2b13059ca
    restart: unless-stopped
    environment:
      POSTGRES_PASSWORD: ${PATCHMON_PG_PASSWORD}
@@ -266,7 +266,7 @@ services:
      start_period: 10s
  portainer-agent:
    container_name: portainer_agent
-    image: portainer/agent:latest@sha256:43c8bc9bafde891ddd0fc3dcc61ac6e1887e7e2027baa76ce402bc014037fba6
+    image: portainer/agent:latest@sha256:dc0e8285f8b4c105c3237f1cc0022f92dd265c53ced5f53b9ce7c9741144e879
    volumes:
      - /:/host
      - /var/lib/docker/volumes:/var/lib/docker/volumes
@@ -314,7 +314,7 @@ services:
      GHCR_USER: ${RENOVATE__GHCR_USER}
      GITEA_BOT_PASS: ${RENOVATE__GITEA_BOT_PASS}
      GITEA_BOT_USER: ${RENOVATE__GITEA_BOT_USER}
-    image: renovate/renovate:43.260.3-full@sha256:fcb7bb92f62cc363ac8a17a37a748ceb63b615ce82c5721d82e20327dfc5920f
+    image: renovate/renovate:43.170.22-full@sha256:934f64671c3f6535f5cce940b921a06aaaf47a347ce7de82b01b4028b223dcda
    restart: unless-stopped
    volumes:
      - ${RIKKU_DOCKER_DIR}/renovate/config.js:/etc/renovate/config.js
@@ -322,7 +322,7 @@ services:
    container_name: renovate-valkey
    healthcheck:
      test: redis-cli ping || exit 1
-    image: docker.io/valkey/valkey:9-alpine@sha256:c9b77919daeba2c02ad954d0c844cc4e7142069d177b89c5fd771f405daf9e02
+    image: docker.io/valkey/valkey:9-alpine@sha256:a35428eba9043cc0b79dbe54100f0c92784f2de00ad09b01182bfb1c5c83d1bd
    environment:
      ALLOW_EMPTY_PASSWORD: yes
      VALKEY_DATA_DIR: /data/valkey
@@ -343,7 +343,7 @@ services:
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
  snapcast-server:
-    image: docker.io/sweisgerber/snapcast:latest@sha256:5f7c1811565491b98e2db26736da8f91a3758d1a7a8646e147b4d7d2a373d3de
+    image: docker.io/sweisgerber/snapcast:latest@sha256:80d67d18ac21dad6c3c2ff0eca3d37a299113146aee14b49e221a3e242a3049c
    hostname: snapcast-server
    container_name: snapcast-server
    environment:
@@ -378,7 +378,7 @@ services:
    healthcheck:
      test: curl -fs "http://localhost:5000/api/health" || exit 1
      interval: 10s
-    image: ghcr.io/seriousm4x/upsnap:5@sha256:92ac19e946e2a4fffbd5049ff230485cbceacd002696a9ca8d4f5449f27d7c5d # images are also available on docker hub: seriousm4x/upsnap:5
+    image: ghcr.io/seriousm4x/upsnap:5@sha256:80884ae345acff00003bc64f379ccd3fbc8cccb8e87dd8987d6691c75437054b # images are also available on docker hub: seriousm4x/upsnap:5
    network_mode: host
    privileged: true
    restart: unless-stopped