Enabling plugin support for Navidrome.

Merge pull request '🔧 Renovate: Update (digest) ghost:latest Docker digest to e73df2d' (#2242 ) from renovate/ghost-latest into main
🔧 Renovate: Update (digest) ghost:latest Docker digest to e73df2d
2026-03-29 11:06:09 -04:00 · 2026-03-13 23:11:25 -04:00 · 2026-03-14 03:10:48 +00:00 · 2026-03-13 21:20:55 -04:00 · 2026-03-14 01:20:33 +00:00 · 2026-03-13 19:47:16 -04:00
4 changed files with 143 additions and 129 deletions
@@ -11,7 +11,7 @@ on:

 env:
  FLARECTL_VERSION: "0.116.0"
-  HC_VAULT_VERSION: "1.21.2"
+  HC_VAULT_VERSION: "1.21.4"
  TEA_VERSION: "0.10.1"

 jobs:
@@ -10,7 +10,7 @@ on:
      - "**/docker-compose.yml"

 env:
-  HC_VAULT_VERSION: "1.21.2"
+  HC_VAULT_VERSION: "1.21.4"
  VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
  VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}

@@ -6,7 +6,7 @@
 | --- | --- | --- |
 | 13ft | ghcr.io/wasi-master/13ft:latest | Web interface for blocking ads and paywalls |
 | actual_server | docker.io/actualbudget/actual-server:latest | Privacy-focused app for managing finances |
-| adguard | adguard/adguardhome:v0.107.71 | Ad-blocking/DNS |
+| adguard | adguard/adguardhome:v0.107.73 | Ad-blocking/DNS |
 | apcupsd-cgi | bnhf/apcupsd-cgi:latest | Web interface for apcupsd |
 | apprise-api | lscr.io/linuxserver/apprise-api:latest | Multi-channel notification API |
 | archivebox | archivebox/archivebox:latest | Open-source and self-hosted web archiving |
@@ -52,10 +52,10 @@
 | explo | ghcr.io/lumepart/explo:latest |  |
 | fastenhealth | ghcr.io/fastenhealth/fasten-onprem:main | Open-source, self-hosted, personal/family electronic medical record aggregator |
 | flaresolverr | ghcr.io/flaresolverr/flaresolverr:latest |  |
-| garage | dxflrs/garage:v2.1.0 |  |
+| garage | dxflrs/garage:v2.2.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.25.4 | Private Code Repo |
+| gitea | gitea/gitea:1.25.5 | Private Code Repo |
 | gitea-db | postgres:14 |  |
 | gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
@@ -95,7 +95,7 @@
 | lldap | lldap/lldap:stable | LDAP made easy |
 | loggifly | ghcr.io/clemcer/loggifly:latest |  |
 | maloja | krateng/maloja:latest | Simple self-hosted music scrobble database to create personal listening statistics |
-| manyfold | lscr.io/linuxserver/manyfold:0.131.0 | Self-hosted digital asset manager for 3D print files |
+| manyfold | lscr.io/linuxserver/manyfold:0.133.1 | Self-hosted digital asset manager for 3D print files |
 | manyfold-pg-db | postgres:18-alpine |  |
 | manyfold-valkey | docker.io/valkey/valkey:9-alpine |  |
 | mariadb | linuxserver/mariadb |  |
@@ -164,13 +164,13 @@
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
 | semaphore-ui | semaphoreui/semaphore:v2.16.51 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
-| signoz-app | signoz/signoz:v0.96.1 | Logs, metrics, and traces in a single pane |
+| signoz-app | signoz/signoz:v0.113.0 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-logspout | pavanputhra/logspout-signoz |  |
-| signoz-otel-collector | signoz/signoz-otel-collector:v0.129.13 |  |
-| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.129.13 |  |
-| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.129.13 |  |
+| signoz-otel-collector | signoz/signoz-otel-collector:v0.144.2 |  |
+| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.144.2 |  |
+| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.144.2 |  |
 | signoz-zookeeper-1 | signoz/zookeeper:3.7.1 |  |
 | sonarqube | mc1arke/sonarqube-with-community-branch-plugin:lts | Code/DevOps quality/security |
 | sonarqube-pg-db | postgres:17-alpine |  |
@@ -184,7 +184,7 @@
 | swag | lscr.io/linuxserver/swag:latest | SWAG Dashboard for proxies |
 | tandoor | vabene1111/recipes | Recipes, cookbooks, meal-planning, & grocery lists |
 | tandoor-pg | postgres:16-alpine |  |
-| tdarr | ghcr.io/haveagitgat/tdarr:2.58.02 | Distributed transcode automation |
+| tdarr | ghcr.io/haveagitgat/tdarr:2.59.03 | Distributed transcode automation |
 | unmanic | josh5/unmanic:latest | Library Optimizer |
 | uptimekuma | louislam/uptime-kuma:latest | HTTP Endpoint Monitoring |
 | vault | hashicorp/vault:latest | HashiCorp Vault for secrets, key/value stores, etc. |
@@ -5,7 +5,7 @@ networks:
  nextcloud-aio:
    external: true
 x-jitsi-admin: &jitsi_admin_app
-  image: h2invent/jitsi-admin-main:latest@sha256:0d442f65e8f68c84beda5a7b4c2240b9c0774fb244a31640cde5af57bb476f61
+  image: h2invent/jitsi-admin-main:latest@sha256:9f6b572b44fdd2045157e3b0e51fe1001d5ac171f7103c0a3c92e0a99a4a6430
  #build: .
  environment:
    APACHE_DOCUMENT_ROOT: "public/"
@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
  healthcheck:
    test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:68677f85c863830af7836ff07c4a13b7f085ebeff62f4dedb71499ca27d229f2
+  image: docker.io/valkey/valkey:9-alpine@sha256:ad4541b28b017bf4cd83ee057c51aafb21ea32e898e3f3b8b75e268650f2ac20
  environment:
    ALLOW_EMPTY_PASSWORD: yes
    VALKEY_DATA_DIR: /data/valkey
@@ -146,7 +146,7 @@ services:
      # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
      # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
      # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:c34346f87725b9cce5dca5af1a2a9b989127d592cc4c6af5cf4652d4a86def90
+    image: docker.io/actualbudget/actual-server:latest@sha256:eb8bc26f53025e07e464594c12d77c52c4b95840c8dadd9b95c4f0c4660f8ad2
    labels:
      swag: enable
      swag_port: 5006
@@ -177,7 +177,7 @@ services:
    container_name: adguard
    environment:
      TZ: ${TZ}
-    image: adguard/adguardhome:v0.107.71@sha256:92929135ced2554aaf94706f766a98ad348f211df61b0704e2db7e8498cc00b7
+    image: adguard/adguardhome:v0.107.73@sha256:7fbf01d73ecb7a32d2d9e6cef8bf88e64bd787889ca80a1e8bce30cd4c084442
    labels:
      swag: enable
      swag_proto: http
@@ -261,7 +261,7 @@ services:
      APPRISE_ATTACH_SIZE: 500
      APPRISE_CONFIG_DIR: /config
      APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:2a1875222471096c1ee76e583115d432aa47ae45bea4cbcf3519d270098f5e02
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:c812192b6be3fb982d0fcab05345bf85804cba9090349d20344f5d0efed06f74
    labels:
      swag: enable
      swag_proto: http
@@ -357,7 +357,7 @@ services:
      URL_HOST: asciinema.trez.wtf
      URL_PORT: 4000
      URL_SCHEME: https
-    image: ghcr.io/asciinema/asciinema-server:latest@sha256:db0f8dd4e41b386b0fd5fa4ab783a297b123f68c2b6bc64cc97e35edfc8305d1
+    image: ghcr.io/asciinema/asciinema-server:latest@sha256:d6d3bd5377dbe0773016ece1fdcc8326826d45395f1df7a6883ea30caf7140e8
    labels:
      homepage.group: Code/DevOps
      homepage.name: Asciinema
@@ -395,7 +395,7 @@ services:
      interval: 2s
      timeout: 5s
      retries: 10
-    image: postgres:14-alpine@sha256:99b1da76e9e628f519f2aff2a2595128d7abb377ee1d7cc991ee45257efb05f0
+    image: postgres:14-alpine@sha256:64ce25a0bb68e598edc3944f2f58f39d1e8641755baa4ba5f7ddfa142ed85c63
    profiles: ["rinoa-apps"]
    restart: unless-stopped
    volumes:
@@ -409,7 +409,7 @@ services:
      METADATA_PATH: /metadata
      TZ: America/New_York
    hostname: Rinoa
-    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:a52dc5db694a5bf041ce38f285dd6c6a660a4b1b21e37ad6b6746433263b2ae5
+    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:41047b9985f9c38c92ae8b4b34ffd1d77fca36efdfe49c6b962ff2fc8ccae1e9
    labels:
      homepage.group: Media Library
      homepage.name: Audiobookshelf
@@ -522,7 +522,7 @@ services:
      retries: 5
      start_period: 30s
      timeout: 10s
-    image: postgres:15-alpine@sha256:aa7b1ef595e165f0b780162e3a41edd0a7ed3ea672eb8a0f81615ba725e62bc5
+    image: postgres:15-alpine@sha256:fceb6f86328c36f2438fae3b851b0cc57c4a7e69a58c866d9ce24281f2cf0c9c
    profiles: ["rinoa-apps"]
    restart: unless-stopped
    volumes:
@@ -585,7 +585,7 @@ services:
    expose:
      - 9091
      - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:35bbd9e1f24593fc7b1377452fb3bf829d9bd490fef721fe2cd5f4cde5e7f11c
+    image: authelia/authelia:master@sha256:92e07086436051af73061a1fdc3f30555729e6a287da830e16c907df4c3a9abc
    labels:
      homepage.group: Privacy/Security
      homepage.name: Authelia
@@ -621,7 +621,7 @@ services:
      POSTGRES_DB: authelia
    expose:
      - 5432
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:20edbde7749f822887a1a022ad526fde0a47d6b2be9a8364433605cf65099416
    networks:
      default: null
    profiles: ["rinoa-apps"]
@@ -640,7 +640,7 @@ services:
  backrest:
    container_name: backrest
    hostname: backrest
-    image: garethgeorge/backrest:latest@sha256:1308397161321b3c5aeca8acc6bf26eccb990df385f2532d3ce0eaa8b483dedf
+    image: garethgeorge/backrest:latest@sha256:f4d34bd6fa985d13bdb6c01c5d8727e07708899afa9567d800808357d77b9fb0
    environment:
      BACKREST_DATA: /data # path for backrest data. restic binary and the database are placed here.
      BACKREST_CONFIG: /config/config.json # path for the backrest config file.
@@ -679,7 +679,7 @@ services:
      TZ: ${TZ}
      DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
    hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
+    image: lscr.io/linuxserver/bazarr:latest@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
    labels:
      homepage.group: Servarr Stack
      homepage.name: Bazarr
@@ -726,7 +726,7 @@ services:
    container_name: beszel
    extra_hosts:
      - host.docker.internal:host-gateway
-    image: henrygd/beszel:latest@sha256:d1326b5cd73838b1d1acc5f1764c4b993c9668aa26df149082695894cb2805ae
+    image: henrygd/beszel:latest@sha256:64bcaa60d1ed4149f0628c70cf68044b5d1ea90b3437de41e009e873f50e3f36
    labels:
      homepage.group: Infrastructure/App Performance Monitoring
      homepage.name: Beszel
@@ -767,7 +767,7 @@ services:
      KEY: "${BESZEL_RINOA_AGENT_KEY}"
    expose:
      - 45876
-    image: henrygd/beszel-agent:latest@sha256:67b51e7976da13b7ce15e0270869827d54aa3df8cf0978e240e4105f62395a46
+    image: henrygd/beszel-agent:latest@sha256:00829897142460910ed1de162b166d2494916c061ecdb092de3b0653818c02b9
    network_mode: host
    profiles: ["rinoa-apps"]
    restart: unless-stopped
@@ -790,7 +790,7 @@ services:
      TZ: America/New_York
      WEBSOCKET_ENABLED: "true"
    hostname: Rinoa
-    image: vaultwarden/server:latest@sha256:d89a6d21e361254670c24a4272b4b5f245e402c284f2f55de2c379fdbcfa1fa5
+    image: vaultwarden/server:latest@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
    labels:
      homepage.group: Privacy/Security
      homepage.name: Vaultwarden
@@ -889,7 +889,7 @@ services:
      - 3000
    extra_hosts:
      - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:75928b6ce72502be734f4dd9573917b06d28c30117e0eb260c52a53b47dc5e07
+    image: ghcr.io/browserless/chromium:latest@sha256:6ce6361efecb2c60632eb635ae3e987df2c18b498e0d7ca1deac7551a58f666b
    labels:
      swag: enable
      swag_proto: http
@@ -949,7 +949,7 @@ services:
      TZ: ${TZ}
      LC_ALL: en_US.UTF-8
      LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:e95931043d68da46e90498ce74ad317b392caade07186dc06bdfa1710901bf90
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:02a72f0e851e3cba08220f982fc589dbffa189b5fa626efee196d7d011e4c8c5
    labels:
      homepage.description: Page change monitoring with alerts
      homepage.group: System Administration
@@ -1048,7 +1048,7 @@ services:
      PUID: "1000"
      TZ: America/New_York
    hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:195c3d07afc76e6db7119bd902f0565342976b5f6537461a97e09229dde14a5b
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:fb95fce6d03c9ebba7582991f337da12ee9927c57f04bd9aa808ec3c3dbfe49b
    networks:
      default: null
    profiles: ["rinoa-apps"]
@@ -1158,7 +1158,7 @@ services:
    environment:
      MB_DB_FILE: /data/metabase.db
      MGID: ${GID-1000}
-    image: metabase/metabase@sha256:2284624757c442933115fce4d64b99ea1854edad60453fb468e650dd5f4566a3
+    image: metabase/metabase@sha256:0765dc61f61919be7035f3cebab9291feafb42a131399144e838f0117c11be57
    labels:
      homepage.group: Privacy/Security
      homepage.name: CrowdSec Dashboard
@@ -1190,7 +1190,7 @@ services:
      - crowdsec-db:/data/
  cyber-chef:
    container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:8649b9b36104de802cc33d17cc190aeef424ea89dff09f5416766290a152524b
+    image: mpepping/cyberchef:latest@sha256:5a8593452a5329b6388a541da2d4962a83273dad4edf44769a5d968001185540
    labels:
      homepage.description: Web app for encryption, encoding, compression, and data analysis
      homepage.group: Privacy/Security
@@ -1226,7 +1226,7 @@ services:
      WEB_AUTHENTICATION_USERNAME: ${CZKAWKA_WEB_AUTH_USERNAME}
      WEB_AUTHENTICATION_PASSWORD: ${CZKAWKA_WEB_AUTH_PASSWORD}
      CZKAWKA_GUI_KROKIET: 1
-    image: jlesage/czkawka@sha256:8acdc65b4fa28005404de995abeeaf517ea0d0b7f715d3f5d548982d83c99c6d
+    image: jlesage/czkawka@sha256:bcfba77e655c3ece1f3021b2382fc1fc97035cf757acdb644a8acdad3a89e89e
    labels:
      homepage.group: System Administration
      homepage.name: Czkawka
@@ -1274,7 +1274,7 @@ services:
      DAGU_AUTH_TOKEN: ${DAGU_AUTH_TOKEN}
      PUID: ${PUID}
      PGID: ${PGID}
-    image: ghcr.io/dagu-org/dagu:alpine@sha256:38305e41eba65f961531c9ccc4dc106a91d488ea72f8f7d8fd9a1f11f7880030
+    image: ghcr.io/dagu-org/dagu:alpine@sha256:d773ffa924e71c046d2a6184e4d283a03c3dbc5f3a40059617d4eb61059d4a64
    labels:
      homepage.group: Automation
      homepage.name: Dagu
@@ -1352,7 +1352,7 @@ services:
      retries: 30
      start_period: 30s
      timeout: 10s
-    image: freikin/dawarich:latest@sha256:69d9c81d08886c83c0259dbe03ab9b27330fceee25d890725dc1347382f304e0
+    image: freikin/dawarich:latest@sha256:82e82e459511612d9570e414005dc58635e39dfea7cdd2c7f7b5bafb2d2ccc53
    labels:
      homepage.group: Privacy/Security
      homepage.name: Dawarich
@@ -1392,7 +1392,7 @@ services:
      retries: 5
      start_period: 30s
      timeout: 10s
-    image: postgis/postgis:17-3.5-alpine@sha256:f439e384b4111f0bc21b4a49e223f8fd7f40516285fc3825d7a8af15e710d47c
+    image: postgis/postgis:17-3.5-alpine@sha256:f9ff26b39cfd5e1b0caabc5837c49d033707345749208fa6a1441341787941a6
    profiles: ["rinoa-apps"]
    restart: always
    shm_size: 1G
@@ -1443,7 +1443,7 @@ services:
      retries: 30
      start_period: 30s
      timeout: 10s
-    image: freikin/dawarich:latest@sha256:69d9c81d08886c83c0259dbe03ab9b27330fceee25d890725dc1347382f304e0
+    image: freikin/dawarich:latest@sha256:82e82e459511612d9570e414005dc58635e39dfea7cdd2c7f7b5bafb2d2ccc53
    profiles: ["rinoa-apps"]
    restart: on-failure
    stdin_open: true
@@ -1547,7 +1547,7 @@ services:
      timeout: 30s
      retries: 5
      start_period: 30s
-    image: alplat/dockflare:stable@sha256:d5d77c1caeb3a82467499371dd5e7c9ab7c2c03c527d4f1465062b755aa7c8ca # Or :unstable for the latest features
+    image: alplat/dockflare:stable@sha256:1f059fb634b0e149a83b82338c34130325232689adff6632888baedfea16002a # Or :unstable for the latest features
    labels:
      homepage.group: Privacy/Security
      homepage.name: DockFlare
@@ -1642,7 +1642,7 @@ services:
      PUID: ${PUID}
      TZ: ${TZ}
    hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:2dca60ef8a60909f2422595bd08cacdd8bfe03a223b8431d14a3cd0f6af327d8
+    image: lscr.io/linuxserver/duplicati:latest@sha256:dec55b0f26624ae3d27b18368cc0b26b02020e15b878e92a1412fff2b67fbc1c
    labels:
      swag: enable
      swag_port: 8200
@@ -1735,7 +1735,7 @@ services:
      - ${DOCKER_VOLUME_STORAGE}/Audio/Playlists:/playlists
  fastenhealth:
    container_name: fastenhealth
-    image: ghcr.io/fastenhealth/fasten-onprem:main@sha256:99d0a41ff9779a4d87b7c233724102ed2faac69df9c15c8bf720f61940512000
+    image: ghcr.io/fastenhealth/fasten-onprem:main@sha256:d208351137e8ba6a06aacede0d87f459a8bb9fc2ed705e62f4a9ca3f693bd7ca
    labels:
      homepage.group: Lifestyle
      homepage.name: Fasten Health
@@ -1802,7 +1802,7 @@ services:
        type: bind
  garage:
    container_name: garage
-    image: dxflrs/garage:v2.1.0@sha256:4c9b34c113e61358466e83fd6e7d66e6d18657ede14b776eb78a93ee8da7cf6a
+    image: dxflrs/garage:v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
    ports:
      - 3900:3900
      - 3901:3901
@@ -1858,7 +1858,7 @@ services:
      mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
      mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
      url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:b2262ff484e11aec57a5379ee85d0034275cf2b61321c26afd2127b534cd1694
+    image: ghost:latest@sha256:e73df2ddbe6c1b2ef209d7d3e979da9f8ab3320c3443e00fa9097ff57926c1e7
    labels:
      homepage.group: Lifestyle
      homepage.name: Ghost
@@ -1903,7 +1903,7 @@ services:
      GITEA__mailer__SMTP_PORT: 25
      GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
      GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-    image: gitea/gitea:1.25.4@sha256:17d18218be2dad1f8ed402a4f906989505c90ab8b66ee9befcecfb5d470133e7
+    image: gitea/gitea:1.25.5@sha256:f846d26a4fc389c5806a580a765e00bfdd1fd181e6f2060da98ea2669d914472
    labels:
      cloudflare.tunnel.enable: true
      cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1963,7 +1963,7 @@ services:
      interval: 10s
      start_period: 20s
      test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:44b2944d4beb460aa7582fc2ae9f37bfee4a75788b76f2bf25312094029e4680
+    image: postgres:14@sha256:980f2ff9f2d8e4eff5c7f53b54392ad5a43eb2d1193d37f91a1ff59a75b77ee3
    networks:
      default: null
    profiles: ["rinoa-infra"]
@@ -1983,7 +1983,7 @@ services:
      GITEA_INSTANCE_URL: http://gitea:3000
      GITEA_RUNNER_REGISTRATION_TOKEN: "${GITEA_RUNNER_REGISTRATION_TOKEN}"
      GITEA_RUNNER_NAME: "gitea-runner-1"
-    image: gitea/act_runner:nightly@sha256:ec2fa777af444b08d070e6b42627a1b8463c522ab0da1e5f5b587b9d3bf9e112
+    image: gitea/act_runner:nightly@sha256:b4b0c1cbeb47911ba66827c278bed8d4fc7e58e38740cc287a438de2502b2897
    ports:
      - 63604:63604
    profiles: ["rinoa-infra"]
@@ -2043,7 +2043,7 @@ services:
      VPN_SERVICE_PROVIDER: private internet access
    expose:
      - 8000
-    image: qmcgaw/gluetun:latest@sha256:1aa28a0db802279d852b08d2358867bd75e2e319431a5da53d3cbb9a6c19fdab
+    image: qmcgaw/gluetun:latest@sha256:73cbc52cfc260955c0898512ffbb4d64437c3cdf7886e643e3d3679b3fcb0e3b
    ports:
      - 3333:3333
      - 3334:3334
@@ -2076,7 +2076,7 @@ services:
      GOTIFY_UPLOADEDIMAGESDIR: data/images
      GOTIFY_PLUGINSDIR: data/plugins
      GOTIFY_REGISTRATION: false
-    image: gotify/server@sha256:4702c392ca723d5016fc938c8b22572c3509efca812bdc5221d25158ba0201e3
+    image: gotify/server@sha256:a3af47067ce6aad76aadf5ba32d6ddfecd1ae576a961359f039fd1831e8b7652
    labels:
      homepage.group: Infrastructure/App Performance Monitoring
      homepage.name: Gotify
@@ -2144,7 +2144,7 @@ services:
      HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
      PUID: ${PUID}
      PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:7fa7b07a26bd8d90a44bb975c6455b10d8dee467ce674b040750ffb4a0f486d6
+    image: ghcr.io/gethomepage/homepage:latest@sha256:0b596092c0b55fe4c65379a428a3fe90bd192f10d1b07d189a34fe5fabe7eedb
    labels:
      swag.uptime-kuma.enabled: true
      swag.uptime-kuma.monitor.parent: Rinoa
@@ -2219,7 +2219,7 @@ services:
      REDIS_DBINDEX: 0
    healthcheck:
      disable: false
-    image: ghcr.io/immich-app/immich-server:release@sha256:9b2e5525c411b7b2d0b74267e71321692c856b32db1429a1b40440184460b402
+    image: ghcr.io/immich-app/immich-server:release@sha256:aa163d2e1cc2b16a9515dd1fef901e6f5231befad7024f093d7be1f2da14341a
    labels:
      swag: enable
      swag_proto: http
@@ -2262,7 +2262,7 @@ services:
    container_name: immich-machine-learning
    healthcheck:
      disable: false
-    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:fa843f76cd34795ce8ca133d2c62ad67aa082b0f90b578ce7878210dcb5ad536
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:b213fa3c82d27a21a299c46ffbb38a091f18384db1ad67d409a3b34fe0fce556
    profiles: ["rinoa-apps"]
    restart: always
    volumes:
@@ -2312,7 +2312,7 @@ services:
      test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
      start_period: 10s
      timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:b27b14e301856ec1354acee365c42e233c558ceae2de5257d3af68544c442fa5
+    image: alangrainger/immich-public-proxy:latest@sha256:e8be2da895ab7e57bee99b79dca0288c1de5cf2dab07b1821569ecc778623df9
    labels:
      homepage.group: Lifestyle
      homepage.name: Immich Public Proxy
@@ -2343,7 +2343,7 @@ services:
      EXTERNAL_IMMICH_URL: https://pics.${MY_TLD}
      IMMICH_API_KEY: ${IMMICH_POWER_TOOLS_KEY}
      IMMICH_URL: http://immich-server:2283
-    image: ghcr.io/varun-raj/immich-power-tools:latest@sha256:2abdc8a73cd7438006e16f7a9b50f51ca6806332f8855404375e8bbdd5b024f7
+    image: ghcr.io/varun-raj/immich-power-tools:latest@sha256:8e7a25ed0e99c9c323012e306fde6c97a1004765742c8802ad03c95503679e77
    ports:
      - 54018:3000
    profiles: ["rinoa-apps"]
@@ -2397,7 +2397,7 @@ services:
      retries: 2
      test: wget -nv --tries=1 --spider http://127.0.0.1:3000/api/v1/trending || exit 1
      timeout: 5s
-    image: quay.io/invidious/invidious:latest@sha256:2836b5b8226a53a9cc2afdbd5f5fe6bccdd200f2e17cd92a828b4dc8d8b5cc06
+    image: quay.io/invidious/invidious:latest@sha256:9d972ea5930c2e170b3c4d49bdd9fa09bf03f077d555f58747342062dffc5876
    labels:
      swag: enable
      swag_proto: http
@@ -2433,7 +2433,7 @@ services:
    container_name: invidious-companion
    environment:
      SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:8f07706baf04785a59cc32547d54fa530ef0d0128e60b100d8971bb5991de6a0
+    image: quay.io/invidious/invidious-companion:latest@sha256:fb01ee2084848be6741a3e52f0941aa4300f8b29c3730c4d3327e74373a878fb
    logging:
      options:
        max-size: "1G"
@@ -2457,7 +2457,7 @@ services:
      test:
        - CMD-SHELL
        - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:44b2944d4beb460aa7582fc2ae9f37bfee4a75788b76f2bf25312094029e4680
+    image: docker.io/library/postgres:14@sha256:980f2ff9f2d8e4eff5c7f53b54392ad5a43eb2d1193d37f91a1ff59a75b77ee3
    networks:
      default: null
    profiles: ["rinoa-apps"]
@@ -3133,7 +3133,7 @@ services:
      POSTGRES_DB: ${JOPLIN_POSTGRES_DATABASE}
    expose:
      - 5432
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
    networks:
      default: null
    profiles: ["rinoa-apps"]
@@ -3189,7 +3189,7 @@ services:
    restart: unless-stopped
  karakeep:
    container_name: karakeep
-    image: ghcr.io/karakeep-app/karakeep:release@sha256:2724d4a9a6d13a7fa3babf53b9245767aae56c34f06042a8463ee983c6b41caf
+    image: ghcr.io/karakeep-app/karakeep:release@sha256:20754dbdafb11dfe288bbb1c2342a7855081b08ea069e86fcf2d4a2d945d3653
    environment:
      BROWSER_WEB_URL: http://chrome:9222
      DATA_DIR: /data
@@ -3233,7 +3233,7 @@ services:
      Java_Xmx: 1g
    expose:
      - 8010
-    image: elestio/languagetool:latest@sha256:f0c2e7a1dc3b9acc893f86959406500fe04764ff49372a5d2fb69d6206f09c65
+    image: elestio/languagetool:latest@sha256:178c8ecbf54c4adae2bd05ada87e8ff0b969b6ca0458fc87e64fd5b2c262971d
    profiles: ["rinoa-apps"]
    restart: unless-stopped
    volumes:
@@ -3244,7 +3244,7 @@ services:
      LT_UPDATE_MODELS: true
    healthcheck:
      test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:2dfed65a2680514729c01943f45d42346e9e6628c22f4de6d19c6c1c3ec8e5f1
+    image: libretranslate/libretranslate@sha256:6927f6bde0a801b32f2a7d99e1bf749b27661756789570e716fc4fd6b7550039
    labels:
      homepage.group: Personal Tools
      homepage.name: LibreTranslate
@@ -3278,7 +3278,7 @@ services:
      TZ: America/New_York
      DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
    hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:6fba990e5b460ea53a3f91ebac823a3471f2254669ea96036d9411fedf0f65be
+    image: lscr.io/linuxserver/lidarr:latest@sha256:dbffcf91da47d48e09e613857032c95a62755b928a71a7718688e3ab03fbbd26
    labels:
      homepage.group: Servarr Stack
      homepage.name: Lidarr
@@ -3329,7 +3329,7 @@ services:
      spotify_client_secret: ${YOUR_SPOTIFY_SECRET}
    expose:
      - 5000
-    image: thewicklowwolf/lidify:latest@sha256:958eaddeef8195470b974ee03512d9a5c31ad2af3167f7824448fb026fa9c94a
+    image: thewicklowwolf/lidify:latest@sha256:d9968f2eebe30e28448f94f8f7198b3bc9ee06e950434b659e10b4d46dfeaac3
    labels:
      homepage.group: Servarr Stack
      homepage.name: Lidify
@@ -3371,7 +3371,7 @@ services:
        type: bind
  linkstack:
    container_name: linkstack
-    image: linkstackorg/linkstack:latest@sha256:d9c4e1fd521e1ae78e796ac549b4d3e6371665775761d6c712aec8ac3bd9c5bc
+    image: linkstackorg/linkstack:latest@sha256:1c8b05399ee459ac601bac3eede7fbe765d1b6b7be725663b57f3220610958bf
    environment:
      TZ: ${TZ}
      SERVER_ADMIN: noreply@${MY_TLD}
@@ -3523,7 +3523,7 @@ services:
      SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
      SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
      SMTP_FROM_ADDRESS: noreply@${MY_TLD}
-    image: lscr.io/linuxserver/manyfold:0.131.0@sha256:e40699dac23fae4de09982fcb2e5d478917b5b9a60bd1fda43ec7a2f18a8c4d6
+    image: lscr.io/linuxserver/manyfold:0.133.1@sha256:1e27e90558d913a41b01a81d3e6f24d7faad60cc3478abe52ddd9fc104a39494
    labels:
      homepage.group: Lifestyle
      homepage.name: Manyfold
@@ -3560,7 +3560,7 @@ services:
      timeout: 30s
      interval: 10s
      retries: 5
-    image: postgres:18-alpine@sha256:aa6eb304ddb6dd26df23d05db4e5cb05af8951cda3e0dc57731b771e0ef4ab29
+    image: postgres:18-alpine@sha256:4da1a4828be12604092fa55311276f08f9224a74a62dcb4708bd7439e2a03911
    profiles: ["rinoa-apps"]
    restart: always
    volumes:
@@ -3587,7 +3587,7 @@ services:
      timeout: 10s
      retries: 5
    hostname: Rinoa
-    image: linuxserver/mariadb@sha256:d70694effbcb6158a5b9c7e81548aeaad24f11958329de517c5efb664aeb6219
+    image: linuxserver/mariadb@sha256:91de7f701bc7fc3a424b81beafca7a7c6c4c5b7c8be6afd2ae148698695c0b0c
    networks:
      default: null
    ports:
@@ -3641,7 +3641,7 @@ services:
      AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
    expose:
      - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:4f609e151426bdd85b3931e31e105014ece96876fd76d489698f7bacaec38619
+    image: lscr.io/linuxserver/mastodon:latest@sha256:05fd7600db27609b3fab0fb9a5382574254fa67027d5e5ba3f0a69cdd3540082
    labels:
      swag: enable
      swag_proto: http
@@ -3682,7 +3682,7 @@ services:
      timeout: 30s
      interval: 10s
      retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
    profiles: ["rinoa-apps"]
    restart: always
    volumes:
@@ -3704,7 +3704,7 @@ services:
    <<: *maxun-env
    expose:
      - 8080
-    image: getmaxun/maxun-backend:latest@sha256:e24677c32ddb38eb53bb5284ac99d723ceadd994d0d1063ea606d933933fef13
+    image: getmaxun/maxun-backend:latest@sha256:a435602843e93f05fdf9458cacf9a7a9b38036e323c0923d8b0f53bac255b842
    mem_limit: 2g # Set a 2GB memory limit
    ports:
      - 8369:8080
@@ -3720,7 +3720,7 @@ services:
    depends_on:
      - maxun-backend
    <<: *maxun-env
-    image: getmaxun/maxun-frontend:latest@sha256:b0b9bcb9e2082f9047fe3cfd01d9c72a4d8eef93cd6f509b00a87c23bf26bf57
+    image: getmaxun/maxun-frontend:latest@sha256:c2182a9f333421ace56755421cfdfc3de109cf72df2250a4a2fbabfcd4d9371f
    labels:
      swag: enable
      swag_proto: http
@@ -3748,7 +3748,7 @@ services:
    restart: unless-stopped
  maxun-pg-db:
    container_name: maxun-pg-db
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
    environment:
      POSTGRES_USER: maxun
      POSTGRES_PASSWORD: ${MAXUN_DB_PASSWORD}
@@ -3830,14 +3830,14 @@ services:
      interval: 10s
      timeout: 5s
      retries: 5
-    image: pgvector/pgvector:pg17@sha256:1a5ea285a159bed991c74a9c4751b6eadc536b3c3263f3f95ec3865885a62b69
+    image: pgvector/pgvector:pg17@sha256:494dff7e67e7bc2c826b94c331364978d145ebb86fd338154138b084223b7f67
    profiles: ["rinoa-apps"]
    restart: unless-stopped
    volumes:
      - ${DOCKER_VOLUME_CONFIG}/meme_search_pro/db-data/meme-search-db:/var/lib/postgresql/data
  mini-qr:
    container_name: mini-qr
-    image: ghcr.io/lyqht/mini-qr:latest@sha256:babe90594f88cb3e8463a7622b1aac46defff7ef5c8d991299c5df4ca8514f66
+    image: ghcr.io/lyqht/mini-qr:latest@sha256:1b028926cacbfcf3549d48a73c0180ae4291c9093287df9b2245d3954f68d580
    labels:
      swag: enable
      swag_auth: authelia
@@ -3907,7 +3907,7 @@ services:
          create_host_path: true
  mixpost:
    container_name: mixpost
-    image: inovector/mixpost:latest@sha256:9a118d60bf1514ff19f5adee0b9d7684f8c00ee520e2bf4bcc295665f048c557
+    image: inovector/mixpost:latest@sha256:60f730aa99953a2956a69bced9b67c547f063dd647eaa0dc8a82f00f1a6f7450
    depends_on:
      mariadb:
        condition: service_healthy
@@ -3984,7 +3984,7 @@ services:
    environment:
      MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:606f8e029603330411a7dd10b5ffd50eefc297fc80cee89f10a455e496a76ae7
+    image: mongo:7@sha256:adfc10cca964f99224ac4948e782c260c4c87e71958df334e8ca882ff85062ea
    ports:
      - 27017:27017
    profiles: ["rinoa-apps"]
@@ -4020,7 +4020,7 @@ services:
      LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
      SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
      SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-    image: foxxmd/multi-scrobbler@sha256:be2c16b169bec7ed2fdaef102e27969f3f9e8cae7d17cd7e5ab532f0b317c7a0
+    image: foxxmd/multi-scrobbler@sha256:9693b07fa8b333d2fd26aa04b5bc1fa53d827b117e4dd9a85b9aa8bdd0b79168
    labels:
      homepage.group: Media Library
      homepage.name: Multi-Scrobbler
@@ -4060,7 +4060,7 @@ services:
      NODE_ENV: production
      WEBHOOK_URL: https://n8n.${MY_TLD}/
      GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:a9beb0dcaa547f0742a322f497af72127338d6ab8f3697b3be44f8ab737726f2
+    image: docker.n8n.io/n8nio/n8n@sha256:cb5fc3fb9bf650035ec816260fc6a43513169322ac408deee4807220a8120380
    labels:
      swag: enable
      swag_proto: http
@@ -4101,13 +4101,17 @@ services:
      ND_LOGLEVEL: info
      ND_MUSICFOLDER: /music
      ND_PLAYLISTPATH: /playlists
+      ND_PLUGINS_ENABLED: true
+      ND_PLUGINS_AUTORELOAD: true
+      ND_AGENTS: audiomuseai,lastfm,spotify
+      ND_DEVARTISTINFOTIMETOLIVE: 1s
      ND_SCANNER_GROUPALBUMRELEASES: true
      ND_SCANSCHEDULE: "@every 6h"
      ND_SESSIONTIMEOUT: 24h
      ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
      ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
      ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:5d0f6ab343397c043c7063db14ae10e4e3980e54ae7388031cbce47e84af6657
+    image: deluan/navidrome:latest@sha256:a5dce8f33304714dd138e870cca0dcab3d937ca236be1a9f2b97da009d1a0048
    labels:
      homepage.group: Media Library
      homepage.name: Navidrome
@@ -4144,10 +4148,25 @@ services:
      - ${DOCKER_VOLUME_STORAGE}/backups/navidrome:/backups
  netalertx:
    container_name: netalertx
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETUID
+      - SETGID
+      - NET_RAW
+      - NET_ADMIN
+      - NET_BIND_SERVICE
    environment:
      TZ: ${TZ}
      PORT: 20211
-    image: jokobsk/netalertx:latest@sha256:e0c6ae73a28eee1d94f959d1d266d4b5229cb5e784f6dae48fea7368e246a1e1
+      PUID: ${NETALERTX_UID:-20211} # Runtime UID after priming (Synology/no-copy-up safe)
+      PGID: ${NETALERTX_GID:-20211} # Runtime GID after priming (Synology/no-copy-up safe)
+      LISTEN_ADDR: ${LISTEN_ADDR:-0.0.0.0} # Listen for connections on all interfaces
+      GRAPHQL_PORT: ${GRAPHQL_PORT:-20212} # GraphQL API port
+      ALWAYS_FRESH_INSTALL: ${ALWAYS_FRESH_INSTALL:-false} # Set to true to reset your config and database on each container start
+      NETALERTX_DEBUG: ${NETALERTX_DEBUG:-0} # 0=kill all services and restart if any dies. 1 keeps running dead services.
+    image: jokobsk/netalertx:latest@sha256:a44ecd183fc88f8bb2cb38487eb13891e5fa72e54ed51907f6fd8776ae790471
    labels:
      cloudflare.tunnel.enable: true
      cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4172,16 +4191,11 @@ services:
    network_mode: host
    profiles: ["rinoa-apps"]
    restart: unless-stopped
+    tmpfs:
+      - "/tmp:mode=1700,uid=0,gid=0,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
    volumes:
-      - ${DOCKER_VOLUME_CONFIG}/netalertx/config:/app/config
-      - ${DOCKER_VOLUME_CONFIG}/netalertx/db:/app/db
-      # (optional) useful for debugging if you have issues setting up the container
-      # - ${DOCKER_VOLUME_CONFIG}/netalertx/logs:/app/log
-      # (API: OPTION 1) use for performance
-      - type: tmpfs
-        target: /app/api
-      # (API: OPTION 2) use when debugging issues
-      # - ${DOCKER_VOLUME_CONFIG}/netalertx/api:/app/api
+      - ${DOCKER_VOLUME_CONFIG}/netalertx/config:/data
+      - /etc/localtime:/etc/localtime:ro
  nextcloud:
    container_name: nextcloud-aio-mastercontainer
    environment:
@@ -4191,7 +4205,7 @@ services:
      APACHE_PORT: 11000
    expose:
      - 11000
-    image: nextcloud/all-in-one:latest@sha256:74abbbdfcffff867f5e22f14da8446dbafffb4368e94287b4697ff0a460e85f9
+    image: nextcloud/all-in-one:latest@sha256:ab551b46dbb3fc07082773582dee9cd9729b4ac26e1a0fa98488f48318c00518
    labels:
      homepage.group: Privacy/Security
      homepage.name: NextCloud
@@ -4242,7 +4256,7 @@ services:
      NC_SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
      NC_SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
      NC_SMTP_FROM: noreply@${MY_TLD}
-    image: "nocodb/nocodb:latest@sha256:d3aba4f7e89bd18fc01d6853eea0fa82476b161a678f7f0ff52380f4c52bb87f"
+    image: "nocodb/nocodb:latest@sha256:c3d38b5563234d287710519ff7507d43dfa553241bc70b955f91d90698065340"
    labels:
      homepage.group: Code/DevOps
      homepage.name: NocoDB
@@ -4279,7 +4293,7 @@ services:
      retries: 10
      test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
      timeout: 2s
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:20edbde7749f822887a1a022ad526fde0a47d6b2be9a8364433605cf65099416
    profiles: ["rinoa-apps"]
    restart: unless-stopped
    volumes:
@@ -4296,7 +4310,7 @@ services:
      PUID: ${PUID}
      TZ: America/New_York
    hostname: Rinoa
-    image: lscr.io/linuxserver/ombi:latest@sha256:5c2d3a515b5c1d120cb70f3c701c3c760ce742edd352f3acaa430280d9b725eb
+    image: lscr.io/linuxserver/ombi:latest@sha256:dfd3a3380a042ea44b4936703836d8ae7ee46bcae551b3fa574c9c25632eb027
    labels:
      homepage.group: Media Library
      homepage.name: Ombi
@@ -4339,7 +4353,7 @@ services:
        type: bind
  omnitools:
    container_name: omnitools
-    image: iib0011/omni-tools:latest@sha256:4c89fb9492482b9cb9cbe65b5d2c67d4d281705c079ad0e53a23520526020aad
+    image: iib0011/omni-tools:latest@sha256:8f1284a57d4163b6786500876244aa5ba85c948c131cc1f77a2100d2a4177de1
    labels:
      homepage.group: Personal Tools
      homepage.name: OmniTools
@@ -4375,7 +4389,7 @@ services:
      OLLAMA_MODEL: smollm2:1.7b
      THEME: "pole"
      DISABLE_DICTIONARY: false
-    image: kweg/omnipoly:latest@sha256:fa133d5ac6534ee45e393fab85ad61098a0826351724996e0d29ba61033dde7d
+    image: kweg/omnipoly:latest@sha256:2c7524c4f0778aa2849d25889b192d383b944b060feaf9109d70b5e137c7d3c9
    labels:
      homepage.group: Personal Tools
      homepage.name: OmniPoly
@@ -4444,7 +4458,7 @@ services:
      WEBSOCKET_MANAGER: redis
      WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
      REDIS_KEY_PREFIX: open-webui
-    image: ghcr.io/open-webui/open-webui:main@sha256:000b87a6ae726aa7f6611a0064ba528ba1a6aff6ead5fb3b6c89fd4a5717eb8a
+    image: ghcr.io/open-webui/open-webui:main@sha256:b80a96e14bb15ea79aec96fbdad4aeab6b3ee7b61520d83b5dbc8c4f47d433a9
    labels:
      homepage.group: Personal Tools
      homepage.name: Open WebUI
@@ -4495,7 +4509,7 @@ services:
      PAPERLESS_URL: https://docs.${MY_TLD}
      USERMAP_GID: ${PGID}
      USERMAP_UID: ${PUID}
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:a28330462994b937938e02aaa5632a1effcc7f9acfba96c1bef9c50e1167a027
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:07a0b4ba01ce377c82a0636e16c0c3d931fde5b7e9304de6601986cc42d9b6e6
    labels:
      swag: enable
      swag_proto: http
@@ -4587,7 +4601,7 @@ services:
      interval: 5s
      timeout: 5s
      retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
    restart: unless-stopped
    volumes:
      - pgbackweb-data:/var/lib/postgresql/data
@@ -4662,7 +4676,7 @@ services:
      interval: 10s
      timeout: 5s
      retries: 5
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:20edbde7749f822887a1a022ad526fde0a47d6b2be9a8364433605cf65099416
    profiles: ["rinoa-apps"]
    restart: unless-stopped
    volumes:
@@ -4747,7 +4761,7 @@ services:
      - plant-it-valkey-data:/data/valkey
  plantuml-server:
    container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:0cac1e9b921ef783b49bd1f90243c830946ceb0edf175e66ca19b3991c55257e
+    image: plantuml/plantuml-server:jetty@sha256:cd3d67a3150ab9dbe3c77c2abce6796c7cbfb46819fa4c74c987b44ff2c10003
    labels:
      homepage.group: Personal Tools
      homepage.name: PlantUML
@@ -4776,7 +4790,7 @@ services:
    expose:
      - 9000
      - 9443
-    image: portainer/portainer-ce:alpine@sha256:a04e0ac3e99172e451055419e2ed46c67f24bff72209ab09235079d7642e87d8
+    image: portainer/portainer-ce:alpine@sha256:f56ef070ee60896039fcb219e639da6c1a0cdc726f0bf2eb5c124d33a1c78bf4
    labels:
      swag: enable
      swag_proto: http
@@ -4950,7 +4964,7 @@ services:
      TP_COMMUNITY_THEME: false
      TP_THEME: space-gray
    hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:9ef5d8bf832edcacb6082f9262cb36087854e78eb7b1c3e1d4375056055b2d82
    labels:
      homepage.group: Servarr Stack
      homepage.name: Prowlarr
@@ -5119,7 +5133,7 @@ services:
      tmdb_api_key: ${TMDB_API_KEY}
    expose:
      - 5000
-    image: thewicklowwolf/radarec:latest@sha256:df726f35e3a1ef2f0cd482a6cf993bac8782804efd38ee8004c8694f7e8f526e
+    image: thewicklowwolf/radarec:latest@sha256:705e26609e50ba9dce97570f0eafbadd19208052d39ac9e133477f9ad71dc06b
    labels:
      homepage.group: Servarr Stack
      homepage.name: RadaRec
@@ -5166,7 +5180,7 @@ services:
      PUID: ${PUID}
      TZ: ${TZ}
    hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
+    image: lscr.io/linuxserver/radarr:latest@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
    labels:
      homepage.group: Servarr Stack
      homepage.name: Radarr
@@ -5228,7 +5242,7 @@ services:
      STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
      STORAGE_USE_SSL: false
      TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:f26fd329f35b97bccdf5ee5a7b558df0ccf1e073a1d7a5787e433043e22b9296
+    image: amruthpillai/reactive-resume:latest@sha256:343deeeb05b3c844026bbd6f37fbcb41dac64e9185a0f0eecc199748ad724a4f
    labels:
      homepage.group: Professional Services
      homepage.name: Reactive Resume
@@ -5261,7 +5275,7 @@ services:
      POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
    expose:
      - 5432
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:20edbde7749f822887a1a022ad526fde0a47d6b2be9a8364433605cf65099416
    networks:
      default: null
    profiles: ["rinoa-apps"]
@@ -5613,7 +5627,7 @@ services:
      - "/dev/sdd:/dev/sdd:rwm"
      - "/dev/sde:/dev/sde:rwm"
      - "/dev/sdf:/dev/sdf:rwm"
-    image: ghcr.io/analogj/scrutiny:master-omnibus@sha256:8922d5aac20c5cbf7869e3fd47ab9900ad48acc18ffd72879ccb4c58dfe6bf41
+    image: ghcr.io/analogj/scrutiny:master-omnibus@sha256:18689773150d6b8b53c94a435f40f7b6e946fd4a6d40b44c64fa2154a5b38941
    labels:
      cloudflare.tunnel.enable: true
      cloudflare.tunnel.hostname: smartd.${MY_TLD}
@@ -5668,7 +5682,7 @@ services:
    container_name: searxng
    environment:
      SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:771d475fd7a6b9e254ad725220f977303cdb132fb2136401ea806553330214eb
+    image: searxng/searxng:latest@sha256:174f6a8498d88d2d98c265a952c2d552859bf315cd505746d1c0d4fbec37952f
    labels:
      homepage.group: Privacy/Security
      homepage.name: SearxNG
@@ -5785,7 +5799,7 @@ services:
      interval: 30s
      timeout: 5s
      retries: 3
-    image: signoz/signoz:v0.96.1@sha256:e2cded000c87adb0366c9ae4f292e034515458552d151879195071ba4f078b4e
+    image: signoz/signoz:v0.113.0@sha256:381d613fc4a186243a0ba28e55b957921e6d8663dd9111ef95c2cfdead1021c5
    labels:
      homepage.group: Infrastructure/App Performance Monitoring
      homepage.name: Signoz
@@ -5877,7 +5891,7 @@ services:
      NGINX_ERROR_LOG_FILE: /swag/log/nginx/error.log
      OTEL_RESOURCE_ATTRIBUTES: host.name=signoz-host,os.type=linux
      LOW_CARDINAL_EXCEPTION_GROUPING: false
-    image: signoz/signoz-otel-collector:v0.129.13@sha256:432feb1755922bcc9a41406fd953410d1848488bbd5215621605ee0dfcf37622
+    image: signoz/signoz-otel-collector:v0.144.2@sha256:cc3e1559f0968f10a27977323c20323ca072ea3858af2233263e82532d551516
    ports:
      # - "1777:1777"     # pprof extension
      - "4317:4317" # OTLP gRPC receiver
@@ -5890,7 +5904,7 @@ services:
      - ${DOCKER_VOLUME_CONFIG}/swag/log/nginx/error.log:/swag/log/nginx/error.log:ro
  signoz-schema-migrator-async:
    <<: *signoz-db-depend
-    image: signoz/signoz-schema-migrator:v0.129.13@sha256:562d193f00683d917bfb37d06c37cc8ce1f0885f13f399272e339b86a65498b7
+    image: signoz/signoz-schema-migrator:v0.144.2@sha256:ed1d4bd65bc4a4d9b22d3c41e127f1aedebfdfa343ab94b7e8c57072bbf3129f
    container_name: signoz-schema-migrator-async
    command:
      - async
@@ -5900,7 +5914,7 @@ services:
    restart: on-failure
  signoz-schema-migrator-sync:
    <<: *signoz-common
-    image: signoz/signoz-schema-migrator:v0.129.13@sha256:562d193f00683d917bfb37d06c37cc8ce1f0885f13f399272e339b86a65498b7
+    image: signoz/signoz-schema-migrator:v0.144.2@sha256:ed1d4bd65bc4a4d9b22d3c41e127f1aedebfdfa343ab94b7e8c57072bbf3129f
    container_name: signoz-schema-migrator-sync
    command:
      - sync
@@ -5984,7 +5998,7 @@ services:
      interval: 10s
      timeout: 5s
      retries: 5
-    image: postgres:17-alpine@sha256:dfb95bc50724a7398ee250d72a4318cd51ccf844c5956595722520d449408176
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
    profiles: ["rinoa-infra"]
    restart: unless-stopped
    volumes:
@@ -5998,7 +6012,7 @@ services:
      TZ: ${TZ}
      DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
    hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:02b4d538d351d6e35882a021c08e8600fe95d28860fb1dd724b597166e7221ca
+    image: lscr.io/linuxserver/sonarr:latest@sha256:21c1c3d52248589bb064f5adafec18cad45812d7a01d317472955eef051e619b
    labels:
      homepage.group: Servarr Stack
      homepage.name: Sonarr
@@ -6047,7 +6061,7 @@ services:
      tmdb_api_key: ${TMDB_API_KEY}
    expose:
      - 5000
-    image: thewicklowwolf/sonashow:latest@sha256:4b40df407bf31577668bfb3191e007ac78c349d81bfde7463ec8433d417ebd3d
+    image: thewicklowwolf/sonashow:latest@sha256:7f3be90f798feedb541e745094fdbde84125b19c48ac91ee4347ae24e9bfd582
    labels:
      homepage.group: Servarr Stack
      homepage.name: SonaShow
@@ -6102,7 +6116,7 @@ services:
      TZ: ${TZ}
      #Script interval in seconds
      SCRIPT_INTERVAL: 300
-    image: mrusse08/soularr:latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
+    image: mrusse08/soularr:latest@sha256:69bc29f2072d6256c30f94fb1a0bfe8034c197791a2103d87f15ef1761347ce9
    network_mode: service:gluetun
    profiles: ["rinoa-apps"]
    restart: unless-stopped
@@ -6121,7 +6135,7 @@ services:
      PUID: ${PUID}
      PGID: ${PGID}
      TZ: ${TZ}
-    image: ghcr.io/mrusse/soularr:main@sha256:84fead20dc2bcc00d6f0d2df53e56866b4fe634640e075820b420ae4ea146fd2
+    image: ghcr.io/mrusse/soularr:main@sha256:2148f2c7f405a31ce64082ce085c88bf6e486fbb705bec20ead6a170fd8def72
    labels:
      homepage.name: Soularr
      homepage.group: Downloaders
@@ -6156,7 +6170,7 @@ services:
        condition: service_started
        required: true
        restart: true
-    image: slskd/slskd@sha256:bcf9820dab68e21d2bba8ebb1ffd583d71fcba542a50a1e998119f69b7b498fe
+    image: slskd/slskd@sha256:17ef977563be206f3b5932080b1e23883b2cb39dc9010640f6f39b4eaec887e3
    labels:
      homepage.name: Soulseek
      homepage.group: Downloaders
@@ -6185,7 +6199,7 @@ services:
      - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
  speedtest-tracker:
    container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:dedc276c0899078f8c10788406592583a22b91d4d46cd11cbffe2b4577b59b79
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:46035d66e0515f0c79c56e5a13c9921c88f0fde93aee3c3f259e4ea822906c2c
    environment:
      PUID: ${PUID}
      PGID: ${PGID}
@@ -6225,7 +6239,7 @@ services:
      SECURITY_ENABLE_LOGIN: true
      SYSTEM_SHOW_UPDATE: false
      SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:515364d7c2005fe5dcfdf56b4750b165875bbb6a0a1dced1957c59c8cde61c07
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:7f0385362022ebddbecec0f00892074623ecd00e0ef93b180d8a4d65b3e8dd20
    labels:
      homepage.name: Stirling-PDF
      homepage.group: Professional Services
@@ -6277,7 +6291,7 @@ services:
      UPTIME_KUMA_URL: http://uptimekuma:3001
      UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
    hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:4c7b2d56f6d5e9097ff2821dd80c235576637738709ec6d73507a4c14cfcec2d
+    image: lscr.io/linuxserver/swag:latest@sha256:b9c953b35fbcf66e406a32e88ac0d096c8cfc6b3a8d033f3bc097add0c27f38a
    labels:
      swag: enable
      swag_proto: http
@@ -6333,7 +6347,7 @@ services:
      SECRET_KEY: ${TANDOOR_SECRET_KEY}
      TZ: ${TZ}
      UID: 1000
-    image: vabene1111/recipes@sha256:c1a1d494631955bdb6c200066ee5914adbc378805ac0e4df9aeb795fe25c87aa
+    image: vabene1111/recipes@sha256:7ce6534c9ab0e471fd0f08add67e871b9173fb580c2f86294c3ead025603a3d7
    labels:
      homepage.group: Lifestyle
      homepage.name: Tandoor Recipes
@@ -6379,7 +6393,7 @@ services:
      POSTGRES_USER: tandoor
    expose:
      - 5432
-    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
+    image: postgres:16-alpine@sha256:20edbde7749f822887a1a022ad526fde0a47d6b2be9a8364433605cf65099416
    networks:
      default: null
    profiles: ["rinoa-apps"]
@@ -6410,7 +6424,7 @@ services:
      cronPluginUpdate:
      NVIDIA_DRIVER_CAPABILITIES: all
      NVIDIA_VISIBLE_DEVICES: all
-    image: ghcr.io/haveagitgat/tdarr:2.58.02@sha256:20a5656c4af4854e1877046294f77113f949d27e35940a9a65f231423d063207
+    image: ghcr.io/haveagitgat/tdarr:2.59.03@sha256:261290353c745efcaf613aa750094c007b07a1d683d8c22954f95dfb8bbf6b84
    labels:
      homepage.group: Servarr Stack
      homepage.name: Tdarr
@@ -6448,7 +6462,7 @@ services:
      PUID: ${PUID}
      PGID: ${PGID}
      LOGS_TO_STDOUT: /config/.unmanic/logs/unmanic.log
-    image: josh5/unmanic:latest@sha256:d62bcfe8230260e5d5de47796c498867e81d4ee5c70799a302caed91b5870b73
+    image: josh5/unmanic:latest@sha256:c339725246b69425c663c7182e6703e3ba07cbd8340ea23f4c38946802c8c4de
    labels:
      homepage.group: Media Library
      homepage.name: Unmanic
@@ -6502,7 +6516,7 @@ services:
      UPTIME_KUMA_PASSWORD: ${UPTIME_KUMA_PASSWORD}
      DOCKER_HOST: tcp:/${DOCKER_VOLUME_CONFIG}proxy:2375
    hostname: Rinoa
-    image: louislam/uptime-kuma:latest@sha256:431fee3be822b04861cf0e35daf4beef6b7cb37391c5f26c3ad6e12ce280fe18
+    image: louislam/uptime-kuma:latest@sha256:3d632903e6af34139a37f18055c4f1bfd9b7205ae1138f1e5e8940ddc1d176f9
    labels:
      homepage.group: Infrastructure/App Performance Monitoring
      homepage.name: Uptime Kuma
@@ -6547,7 +6561,7 @@ services:
    environment:
      AWS_ACCESS_KEY_ID: ${VAULT_HASHICORP_AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${VAULT_HASHICORP_AWS_SECRET_ACCESS_KEY}
-    image: hashicorp/vault:latest@sha256:eb0ba6836e8d4699b7a1e8ca70d8433f7b87dcd067e6d82dff237d3ed2600ea0
+    image: hashicorp/vault:latest@sha256:4e33b126a59c0c333b76fb4e894722462659a6bec7c48c9ee8cea56fccfd2569
    labels:
      homepage.group: Code/DevOps
      homepage.name: HashiCorp Vault
@@ -6577,7 +6591,7 @@ services:
    container_name: wallos
    environment:
      TZ: ${TZ}
-    image: bellamy/wallos:latest@sha256:9f1bbd7f24e2afdac64ff0985ef801d48f63086540a0844fc05727642bb5360a
+    image: bellamy/wallos:latest@sha256:ff4f09d93b23ae7ec6aba61e6b4a9b02fdd4f572ef54f4017a890c2414892e2c
    labels:
      homepage.group: Lifestyle
      homepage.name: wallos
@@ -6633,7 +6647,7 @@ services:
    restart: unless-stopped
  whodb:
    container_name: whodb
-    image: clidey/whodb@sha256:86a72847c4410bc0bb4dc6a0156eef4eb0da0033fee9c149e3afadaca879847f
+    image: clidey/whodb@sha256:d7fcca566726bb9dd07dc950bc0c47ea2fffb5e371ada111c5d0609c49f659b4
    environment:
      WHODB_CLICKHOUSE_1: '{
        "host": "signoz-clickhouse"
@@ -6808,7 +6822,7 @@ services:
      PGID: ${PGID}
      DISABLE_BUILTIN_AUTH: true
      TZ: ${TZ}
-    image: ghcr.io/wizarrrr/wizarr@sha256:83fc0b50985d196226b7c28a27062a1c4e63124a5d6d2448710aee222637b79e
+    image: ghcr.io/wizarrrr/wizarr@sha256:855e2a9a98eb18ffee26f321aac5a58712bcb04a537f10c21b95d191f9407588
    labels:
      homepage.group: Servarr Stack
      homepage.name: Wizarr
@@ -6839,7 +6853,7 @@ services:
      YDL_CONFIG_PATH: /youtube-dl/config.yml
      YDL_DEBUG: "false"
    hostname: Rinoa
-    image: nbr23/youtube-dl-server:latest@sha256:a1ca58da9af2a6cf73f4915094384674712d45be4428d4326650fabf90093827
+    image: nbr23/youtube-dl-server:latest@sha256:4aec0f3c05be935330a3fd0c444832fcfc6fc3c1c9899cac5f0f975892b5a74f
    labels:
      homepage.group: Downloaders
      homepage.name: YoutubeDL