🔧 Renovate: Update (digest) postgres:15-alpine Docker digest to 1d1095b

Reviewed-on: #1554

.gitea/workflows/pr-cloudflare-docker-deploy.yml

@@ -11,7 +11,7 @@ on:
 
 env:
   FLARECTL_VERSION: "0.116.0"
-  HC_VAULT_VERSION: "1.21.1"
+  HC_VAULT_VERSION: "1.21.2"
   TEA_VERSION: "0.10.1"
 
 jobs:
@@ -223,7 +223,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Dry Run
-        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
+        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:
@@ -427,7 +427,7 @@ jobs:
           compose_profile: "rinoa-apps"
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
+        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

.gitea/workflows/renovate-pr-deploy.yml

@@ -10,7 +10,7 @@ on:
       - "**/docker-compose.yml"
 
 env:
-  HC_VAULT_VERSION: "1.21.1"
+  HC_VAULT_VERSION: "1.21.2"
   VAULT_ADDR: ${{ secrets.TREZ_VAULT_ADDR }}
   VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
 
@@ -143,7 +143,7 @@ jobs:
           HC_VAULT_SECRETS_PATH: rinoa-docker/env
 
       - name: Docker Compose Deployment
-        uses: hoverkraft-tech/compose-action@248470ecc5ed40d8ed3d4480d8260d77179ef579 # v2.4.2
+        uses: hoverkraft-tech/compose-action@05da55b2bb8a5a759d1c4732095044bd9018c050 # v2.4.3
         env:
           DOCKER_HOST: tcp://dockerproxy:2375
         with:

README.md

@@ -25,7 +25,7 @@
 | beszel | henrygd/beszel:latest | Lightweight server monitoring hub |
 | beszel-agent | henrygd/beszel-agent:latest |  |
 | bitwarden | vaultwarden/server:latest | Credential/Information Vault |
-| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.158 |  |
+| bluesky-pds | code.modernleft.org/gravityfargo/bluesky-pds:v0.4.193 |  |
 | browserless | ghcr.io/browserless/chromium:latest |  |
 | bytestash | ghcr.io/jordan-dalby/bytestash:latest | Code Gists/Snippets |
 | changedetection | ghcr.io/dgtlmoon/changedetection.io | Page change monitoring with alerts |
@@ -55,9 +55,9 @@
 | garage | dxflrs/garage:v2.1.0 |  |
 | garage-webui | khairul169/garage-webui:latest | S3-compatible storage backend |
 | ghost | ghost:latest | Personal blog |
-| gitea | gitea/gitea:1.25.2 | Private Code Repo |
+| gitea | gitea/gitea:1.25.4 | Private Code Repo |
 | gitea-db | postgres:14 |  |
-| gitea-runner | gitea/act_runner:latest |  |
+| gitea-runner | gitea/act_runner:nightly |  |
 | gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |  |
 | gitignore-io | guog/gitignore.io:latest | .gitignore generator |
 | gluetun | qmcgaw/gluetun:latest |  |
@@ -95,7 +95,7 @@
 | lldap | lldap/lldap:stable | LDAP made easy |
 | loggifly | ghcr.io/clemcer/loggifly:latest |  |
 | maloja | krateng/maloja:latest | Simple self-hosted music scrobble database to create personal listening statistics |
-| manyfold | lscr.io/linuxserver/manyfold:0.130.1 | Self-hosted digital asset manager for 3D print files |
+| manyfold | lscr.io/linuxserver/manyfold:0.131.0 | Self-hosted digital asset manager for 3D print files |
 | manyfold-pg-db | postgres:18-alpine |  |
 | manyfold-valkey | docker.io/valkey/valkey:9-alpine |  |
 | mariadb | linuxserver/mariadb |  |
@@ -163,14 +163,14 @@
 | scrutiny | ghcr.io/analogj/scrutiny:master-omnibus | WebUI for smartd S.M.A.R.T monitoring |
 | searxng | searxng/searxng:latest | Anonymized Meta-Search Engine |
 | searxng-valkey | docker.io/valkey/valkey:9-alpine |  |
-| semaphore-ui | semaphoreui/semaphore:v2.16.47 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
+| semaphore-ui | semaphoreui/semaphore:v2.16.51 | Modern UI for Ansible, Terraform, OpenTofu, PowerShell and other DevOps tools |
 | signoz-app | signoz/signoz:v0.96.1 | Logs, metrics, and traces in a single pane |
 | signoz-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-init-clickhouse | clickhouse/clickhouse-server:25.5.6-alpine |  |
 | signoz-logspout | pavanputhra/logspout-signoz |  |
-| signoz-otel-collector | signoz/signoz-otel-collector:v0.129.12 |  |
-| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.129.12 |  |
-| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.129.12 |  |
+| signoz-otel-collector | signoz/signoz-otel-collector:v0.129.13 |  |
+| signoz-schema-migrator-async | signoz/signoz-schema-migrator:v0.129.13 |  |
+| signoz-schema-migrator-sync | signoz/signoz-schema-migrator:v0.129.13 |  |
 | signoz-zookeeper-1 | signoz/zookeeper:3.7.1 |  |
 | sonarqube | mc1arke/sonarqube-with-community-branch-plugin:lts | Code/DevOps quality/security |
 | sonarqube-pg-db | postgres:17-alpine |  |

docker-compose.yml

@@ -5,7 +5,7 @@ networks:
   nextcloud-aio:
     external: true
 x-jitsi-admin: &jitsi_admin_app
-  image: h2invent/jitsi-admin-main:latest@sha256:2e346b104ef1dc4450a045bb0aa633c0a0bf60c1bdf2bd34f2c0d0e3fe847013
+  image: h2invent/jitsi-admin-main:latest@sha256:0d442f65e8f68c84beda5a7b4c2240b9c0774fb244a31640cde5af57bb476f61
   #build: .
   environment:
     APACHE_DOCUMENT_ROOT: "public/"
@@ -102,7 +102,7 @@ x-signoz-db-depend: &signoz-db-depend
 x-valkey-params: &valkey-params
   healthcheck:
     test: redis-cli ping || exit 1
-  image: docker.io/valkey/valkey:9-alpine@sha256:c106a0c03bcb23cbdf9febe693114cb7800646b11ca8b303aee7409de005faa8
+  image: docker.io/valkey/valkey:9-alpine@sha256:68677f85c863830af7836ff07c4a13b7f085ebeff62f4dedb71499ca27d229f2
   environment:
     ALLOW_EMPTY_PASSWORD: yes
     VALKEY_DATA_DIR: /data/valkey
@@ -146,7 +146,7 @@ services:
       # - ACTUAL_UPLOAD_FILE_SIZE_LIMIT_MB=20
       # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
       # !! If you are not using any of these options, remove the 'environment:' tag entirely.
-    image: docker.io/actualbudget/actual-server:latest@sha256:7f38b450cc3b7523dd5377792895e58b9cf333769e5a27f89e643b6f5fc60565
+    image: docker.io/actualbudget/actual-server:latest@sha256:c34346f87725b9cce5dca5af1a2a9b989127d592cc4c6af5cf4652d4a86def90
     labels:
       swag: enable
       swag_port: 5006
@@ -261,7 +261,7 @@ services:
       APPRISE_ATTACH_SIZE: 500
       APPRISE_CONFIG_DIR: /config
       APPRISE_STATEFUL_MODE: simple
-    image: lscr.io/linuxserver/apprise-api:latest@sha256:8b607429101cb393764025dd459346c0fa167c6cd55627ee051d16f8a48d5a93
+    image: lscr.io/linuxserver/apprise-api:latest@sha256:2a1875222471096c1ee76e583115d432aa47ae45bea4cbcf3519d270098f5e02
     labels:
       swag: enable
       swag_proto: http
@@ -357,7 +357,7 @@ services:
       URL_HOST: asciinema.trez.wtf
       URL_PORT: 4000
       URL_SCHEME: https
-    image: ghcr.io/asciinema/asciinema-server:latest@sha256:ce1dcd55850219d2b4fa729e5f6c64efbb0af1b05d94bd150334770231762507
+    image: ghcr.io/asciinema/asciinema-server:latest@sha256:db0f8dd4e41b386b0fd5fa4ab783a297b123f68c2b6bc64cc97e35edfc8305d1
     labels:
       homepage.group: Code/DevOps
       homepage.name: Asciinema
@@ -395,7 +395,7 @@ services:
       interval: 2s
       timeout: 5s
       retries: 10
-    image: postgres:14-alpine@sha256:14f02666642586a64d6fae8ef42d479fd76456a77c73ae8a626b8fe323b76d22
+    image: postgres:14-alpine@sha256:99b1da76e9e628f519f2aff2a2595128d7abb377ee1d7cc991ee45257efb05f0
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -409,7 +409,7 @@ services:
       METADATA_PATH: /metadata
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:e23adb24848d99d19cd1e251aee4e1e12ed4f5effc8ccb21754b062b6a06cf66
+    image: ghcr.io/advplyr/audiobookshelf:latest@sha256:a52dc5db694a5bf041ce38f285dd6c6a660a4b1b21e37ad6b6746433263b2ae5
     labels:
       homepage.group: Media Library
       homepage.name: Audiobookshelf
@@ -522,7 +522,7 @@ services:
       retries: 5
       start_period: 30s
       timeout: 10s
-    image: postgres:15-alpine@sha256:aa7b1ef595e165f0b780162e3a41edd0a7ed3ea672eb8a0f81615ba725e62bc5
+    image: postgres:15-alpine@sha256:1d1095b0503145be79c79239372aefadfacf6b7c33c9245bbf99ce4b6b89c737
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -585,7 +585,7 @@ services:
     expose:
       - 9091
       - 9959 # Metrics port for Prometheus
-    image: authelia/authelia:master@sha256:eec279259a9b03d60290e58c6d6798cdd2fddcb3d706eef96c943d86305452ef
+    image: authelia/authelia:master@sha256:35bbd9e1f24593fc7b1377452fb3bf829d9bd490fef721fe2cd5f4cde5e7f11c
     labels:
       homepage.group: Privacy/Security
       homepage.name: Authelia
@@ -621,7 +621,7 @@ services:
       POSTGRES_DB: authelia
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -679,7 +679,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:bazarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/bazarr:latest@sha256:648f694532a3a53d8cf78bc888919ef538659bad41af4c680b0427ad1047d171
+    image: lscr.io/linuxserver/bazarr:latest@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
     labels:
       homepage.group: Servarr Stack
       homepage.name: Bazarr
@@ -726,7 +726,7 @@ services:
     container_name: beszel
     extra_hosts:
       - host.docker.internal:host-gateway
-    image: henrygd/beszel:latest@sha256:185142e6c91bd44c77fef6cd31784aee0f782eb1d7193c3ee34a9902a936621c
+    image: henrygd/beszel:latest@sha256:d1326b5cd73838b1d1acc5f1764c4b993c9668aa26df149082695894cb2805ae
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Beszel
@@ -767,7 +767,7 @@ services:
       KEY: "${BESZEL_RINOA_AGENT_KEY}"
     expose:
       - 45876
-    image: henrygd/beszel-agent:latest@sha256:730ac49d1a89d315b5a9424ad8cca2f586e981da7caf151c5ec2d599f474efad
+    image: henrygd/beszel-agent:latest@sha256:67b51e7976da13b7ce15e0270869827d54aa3df8cf0978e240e4105f62395a46
     network_mode: host
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -790,7 +790,7 @@ services:
       TZ: America/New_York
       WEBSOCKET_ENABLED: "true"
     hostname: Rinoa
-    image: vaultwarden/server:latest@sha256:84fd8a47f58d79a1ad824c27be0a9492750c0fa5216b35c749863093bfa3c3d7
+    image: vaultwarden/server:latest@sha256:d89a6d21e361254670c24a4272b4b5f245e402c284f2f55de2c379fdbcfa1fa5
     labels:
       homepage.group: Privacy/Security
       homepage.name: Vaultwarden
@@ -854,7 +854,7 @@ services:
       LOG_ENABLED: true
     expose:
       - 3000
-    image: code.modernleft.org/gravityfargo/bluesky-pds:v0.4.158@sha256:44810dc5cf9c78135d20dfd60e0999e2db0dfc5fd56dc7e45e8844d1b57c54bd
+    image: code.modernleft.org/gravityfargo/bluesky-pds:v0.4.193@sha256:54122ea4515d9021a4901aa849c6e57d2275e2194f6eda2cc9df217d12302f9e
     labels:
       swag: enable
       swag_port: 3000
@@ -889,7 +889,7 @@ services:
       - 3000
     extra_hosts:
       - "host.docker.internal:host-gateway"
-    image: ghcr.io/browserless/chromium:latest@sha256:e38a849a8e294a64a1e97cf664bc2b716da208dee8ab20a668cc06dc79b6f885
+    image: ghcr.io/browserless/chromium:latest@sha256:75928b6ce72502be734f4dd9573917b06d28c30117e0eb260c52a53b47dc5e07
     labels:
       swag: enable
       swag_proto: http
@@ -909,7 +909,7 @@ services:
       DEBUG: true
       DISABLE_ACCOUNTS: false
       DISABLE_INTERNAL_ACCOUNTS: false
-    image: ghcr.io/jordan-dalby/bytestash:latest@sha256:9c17b5510ca45c976fe23b0d4705ad416aa58d4bf756a70e03ef1f08cf7801fd
+    image: ghcr.io/jordan-dalby/bytestash:latest@sha256:f5ca5cc8c33d76eda8969757d5b6da653c39ca8d946b3f7bfbc86df1360bf525
     labels:
       homepage.description: Code Gists/Snippets
       homepage.group: Code/DevOps
@@ -949,7 +949,7 @@ services:
       TZ: ${TZ}
       LC_ALL: en_US.UTF-8
       LISTEN_HOST: 0.0.0.0
-    image: ghcr.io/dgtlmoon/changedetection.io@sha256:99cf11f04b5d1f1300b5b68f17dc22e76bdb5d6695d7e6590d2df92eca8fb339
+    image: ghcr.io/dgtlmoon/changedetection.io@sha256:e95931043d68da46e90498ce74ad317b392caade07186dc06bdfa1710901bf90
     labels:
       homepage.description: Page change monitoring with alerts
       homepage.group: System Administration
@@ -980,7 +980,7 @@ services:
     cap_add:
       - SYS_ADMIN
     container_name: changedetection-chrome
-    image: dgtlmoon/sockpuppetbrowser:latest@sha256:50619e56663d81c2b46a2219ea91220c05d2e403448df8bdff12dbe4b1ab910b
+    image: dgtlmoon/sockpuppetbrowser:latest@sha256:7116c61ef9cfce3d48a7efd9355d2fbe19f593ea3cfb52a5ded40ecbcb0a3f9d
     environment:
       SCREEN_WIDTH: 1920
       SCREEN_HEIGHT: 1024
@@ -1048,7 +1048,7 @@ services:
       PUID: "1000"
       TZ: America/New_York
     hostname: Rinoa
-    image: ghcr.io/hotio/cloudflareddns:latest@sha256:0d5da9f389a60f12f1154cfd0c3e062d5dbe997dd235280c017a5ca679230b7c
+    image: ghcr.io/hotio/cloudflareddns:latest@sha256:195c3d07afc76e6db7119bd902f0565342976b5f6537461a97e09229dde14a5b
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -1074,7 +1074,7 @@ services:
     container_name: convertx
     environment:
       JWT_SECRET: ${CONVERTX_JWT_SECRET}
-    image: ghcr.io/c4illin/convertx@sha256:1402221b314c794e918a219b7f7698a214e447304472ca406acccc91e9537e63
+    image: ghcr.io/c4illin/convertx@sha256:e1f85be04bbaf8a55ead9261194c3ae0fa0957d303ea537127154860b2552afd
     labels:
       homepage.group: System Administration
       homepage.name: ConvertX
@@ -1131,7 +1131,7 @@ services:
         timokoessler/mongodb
         timokoessler/uptime-kuma
         xs539/joplin-server
-    image: crowdsecurity/crowdsec:latest@sha256:4312a5109057f2a6b1237431abe638cd1026ecb3a9c2707c6ccc1ed09e4cb994
+    image: crowdsecurity/crowdsec:latest@sha256:63b595fef92de1778573b375897a45dd226637ee9a3d3db9f57ac7355c369493
     networks:
       default: null
     ports:
@@ -1158,7 +1158,7 @@ services:
     environment:
       MB_DB_FILE: /data/metabase.db
       MGID: ${GID-1000}
-    image: metabase/metabase@sha256:791299d1e7e382fb2426bcc3bbb4f29d51e9a63f96c5aa40d590f72285d02a53
+    image: metabase/metabase@sha256:2284624757c442933115fce4d64b99ea1854edad60453fb468e650dd5f4566a3
     labels:
       homepage.group: Privacy/Security
       homepage.name: CrowdSec Dashboard
@@ -1190,7 +1190,7 @@ services:
       - crowdsec-db:/data/
   cyber-chef:
     container_name: cyber-chef
-    image: mpepping/cyberchef:latest@sha256:1772a04fd261f971da89cf6212147afe55a37b4a93421db928a78e01de3d65ea
+    image: mpepping/cyberchef:latest@sha256:8649b9b36104de802cc33d17cc190aeef424ea89dff09f5416766290a152524b
     labels:
       homepage.description: Web app for encryption, encoding, compression, and data analysis
       homepage.group: Privacy/Security
@@ -1226,7 +1226,7 @@ services:
       WEB_AUTHENTICATION_USERNAME: ${CZKAWKA_WEB_AUTH_USERNAME}
       WEB_AUTHENTICATION_PASSWORD: ${CZKAWKA_WEB_AUTH_PASSWORD}
       CZKAWKA_GUI_KROKIET: 1
-    image: jlesage/czkawka@sha256:bd07aa45527db7bcca72eff9c6234a038013ca70501c00e8539eb5d4f0359389
+    image: jlesage/czkawka@sha256:8acdc65b4fa28005404de995abeeaf517ea0d0b7f715d3f5d548982d83c99c6d
     labels:
       homepage.group: System Administration
       homepage.name: Czkawka
@@ -1274,7 +1274,7 @@ services:
       DAGU_AUTH_TOKEN: ${DAGU_AUTH_TOKEN}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/dagu-org/dagu:alpine@sha256:27d105fad9661008aadd9060a6405619c7f30aaa747198c7c423aac37bfc3229
+    image: ghcr.io/dagu-org/dagu:alpine@sha256:38305e41eba65f961531c9ccc4dc106a91d488ea72f8f7d8fd9a1f11f7880030
     labels:
       homepage.group: Automation
       homepage.name: Dagu
@@ -1352,7 +1352,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:4f83ccbfcbc5166ba9f96ba7571ab0812c2596f99079ceffc7808a3f896bef0b
+    image: freikin/dawarich:latest@sha256:69d9c81d08886c83c0259dbe03ab9b27330fceee25d890725dc1347382f304e0
     labels:
       homepage.group: Privacy/Security
       homepage.name: Dawarich
@@ -1443,7 +1443,7 @@ services:
       retries: 30
       start_period: 30s
       timeout: 10s
-    image: freikin/dawarich:latest@sha256:4f83ccbfcbc5166ba9f96ba7571ab0812c2596f99079ceffc7808a3f896bef0b
+    image: freikin/dawarich:latest@sha256:69d9c81d08886c83c0259dbe03ab9b27330fceee25d890725dc1347382f304e0
     profiles: ["rinoa-apps"]
     restart: on-failure
     stdin_open: true
@@ -1642,7 +1642,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/duplicati:latest@sha256:0994aa6da740efe41d4070cc618d525b5b42a13645896344ca0eeafab5f3bd65
+    image: lscr.io/linuxserver/duplicati:latest@sha256:2dca60ef8a60909f2422595bd08cacdd8bfe03a223b8431d14a3cd0f6af327d8
     labels:
       swag: enable
       swag_port: 8200
@@ -1695,7 +1695,7 @@ services:
         type: bind
   excalidraw:
     container_name: excalidraw
-    image: "excalidraw/excalidraw:latest@sha256:95d528cb4f8d18e0fbdc42ae3d09b5c4a899bfbd6bb89eeaf94b904330d79714"
+    image: "excalidraw/excalidraw:latest@sha256:3c2513e830bb6e195147c05b34ecf8393d0ba2b1cc86e93b407a5777d6135c6c"
     labels:
       homepage.group: Personal Tools
       homepage.name: Excalidraw
@@ -1726,7 +1726,7 @@ services:
       WEEKLY_JAMS_FLAGS: --playlist=weekly-jams --download-mode=skip
       DAILY_JAMS_SCHEDULE: 30 2 * * *
       DAILY_JAMS_FLAGS: --playlist=daily-jams --download-mode=skip
-    image: ghcr.io/lumepart/explo:latest@sha256:d323d0e1e8aaced56907f0357cb4172d879b7ce5efcc88ffe3421cfb8d846b2d
+    image: ghcr.io/lumepart/explo:latest@sha256:e4659bd1f4349a6355c0a89a0f718092de27b32d64ee24c76e1609089b060701
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -1735,7 +1735,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/Audio/Playlists:/playlists
   fastenhealth:
     container_name: fastenhealth
-    image: ghcr.io/fastenhealth/fasten-onprem:main@sha256:9b8ad1e45695d43d8b469648518b5a9037a43cd80d7fdacbd49bbaf219b4c0fc
+    image: ghcr.io/fastenhealth/fasten-onprem:main@sha256:99d0a41ff9779a4d87b7c233724102ed2faac69df9c15c8bf720f61940512000
     labels:
       homepage.group: Lifestyle
       homepage.name: Fasten Health
@@ -1858,7 +1858,7 @@ services:
       mail__options__auth__pass: ${POSTAL_SMTP_AUTH_PASSWORD}
       mail__from: "'Ghost @ Rinoa' <noreply@${MY_TLD}>"
       url: https://blog.${MY_TLD}
-    image: ghost:latest@sha256:8984a1bea469dfb641be13a72280c2380420dd2c70ede708e5e18687805aa7e3
+    image: ghost:latest@sha256:b2262ff484e11aec57a5379ee85d0034275cf2b61321c26afd2127b534cd1694
     labels:
       homepage.group: Lifestyle
       homepage.name: Ghost
@@ -1903,7 +1903,7 @@ services:
       GITEA__mailer__SMTP_PORT: 25
       GITEA__mailer__USER: ${POSTAL_SMTP_AUTH_USER}
       GITEA__mailer__PASSWD: ${POSTAL_SMTP_AUTH_PASSWORD}
-    image: gitea/gitea:1.25.2@sha256:534428e78fc00d3ac8647f3467a3f91252acf23a46ea0c872f03191e3c878f7d
+    image: gitea/gitea:1.25.4@sha256:17d18218be2dad1f8ed402a4f906989505c90ab8b66ee9befcecfb5d470133e7
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: git-ssh.${MY_TLD}
@@ -1963,7 +1963,7 @@ services:
       interval: 10s
       start_period: 20s
       test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
-    image: postgres:14@sha256:da076311f78c56e4bf6548ef3668fa77fa2865c5efca3f79a6d6bb9b3710b477
+    image: postgres:14@sha256:44b2944d4beb460aa7582fc2ae9f37bfee4a75788b76f2bf25312094029e4680
     networks:
       default: null
     profiles: ["rinoa-infra"]
@@ -1983,7 +1983,7 @@ services:
       GITEA_INSTANCE_URL: http://gitea:3000
       GITEA_RUNNER_REGISTRATION_TOKEN: "${GITEA_RUNNER_REGISTRATION_TOKEN}"
       GITEA_RUNNER_NAME: "gitea-runner-1"
-    image: gitea/act_runner:latest@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944
+    image: gitea/act_runner:nightly@sha256:ec2fa777af444b08d070e6b42627a1b8463c522ab0da1e5f5b587b9d3bf9e112
     ports:
       - 63604:63604
     profiles: ["rinoa-infra"]
@@ -2043,7 +2043,7 @@ services:
       VPN_SERVICE_PROVIDER: private internet access
     expose:
       - 8000
-    image: qmcgaw/gluetun:latest@sha256:6a59b7901068b7c50ef52200152db3afd4b9cebc13e272b2169de4cdcad91006
+    image: qmcgaw/gluetun:latest@sha256:1aa28a0db802279d852b08d2358867bd75e2e319431a5da53d3cbb9a6c19fdab
     ports:
       - 3333:3333
       - 3334:3334
@@ -2076,7 +2076,7 @@ services:
       GOTIFY_UPLOADEDIMAGESDIR: data/images
       GOTIFY_PLUGINSDIR: data/plugins
       GOTIFY_REGISTRATION: false
-    image: gotify/server@sha256:2ae0e4e689f183137c8247884382fcb174d5a72253ce1897e7e5267090093fc8
+    image: gotify/server@sha256:4702c392ca723d5016fc938c8b22572c3509efca812bdc5221d25158ba0201e3
     labels:
       homepage.group: Infrastructure/App Performance Monitoring
       homepage.name: Gotify
@@ -2144,7 +2144,7 @@ services:
       HOMEPAGE_ALLOWED_HOSTS: ${MY_TLD}
       PUID: ${PUID}
       PGID: ${PGID}
-    image: ghcr.io/gethomepage/homepage:latest@sha256:7dc099d5c6ec7fc945d858218565925b01ff8a60bcbfda990fc680a8b5cd0b6e
+    image: ghcr.io/gethomepage/homepage:latest@sha256:7fa7b07a26bd8d90a44bb975c6455b10d8dee467ce674b040750ffb4a0f486d6
     labels:
       swag.uptime-kuma.enabled: true
       swag.uptime-kuma.monitor.parent: Rinoa
@@ -2165,7 +2165,7 @@ services:
   hugo:
     command: hugo server --baseURL "it-services.${MY_TLD}" --bind 0.0.0.0 --appendPort=false --source=/src/ --configDir=/src/config/ -e production --logLevel debug
     container_name: hugo
-    image: hugomods/hugo:exts@sha256:3e1c26aa57083565ff09db8d45fb58d9f42fd9d6d497dd5326afe6df77a3712f
+    image: hugomods/hugo:exts@sha256:dcbc5b53c4e53bb74a7c986caf58a3954395a1e9d8dc9bb492f2c610a7cf6eb0
     labels:
       swag: enable
       swag_proto: http
@@ -2219,7 +2219,7 @@ services:
       REDIS_DBINDEX: 0
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-server:release@sha256:7e2d0df478651551df3358072e68c235200b875eccd6eb4a5c5d8879a7095cf4
+    image: ghcr.io/immich-app/immich-server:release@sha256:9b2e5525c411b7b2d0b74267e71321692c856b32db1429a1b40440184460b402
     labels:
       swag: enable
       swag_proto: http
@@ -2262,7 +2262,7 @@ services:
     container_name: immich-machine-learning
     healthcheck:
       disable: false
-    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:b3deefd1826f113824e9d7bc30d905e7f823535887d03f869330946b6db3b44a
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:fa843f76cd34795ce8ca133d2c62ad67aa082b0f90b578ce7878210dcb5ad536
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -2312,7 +2312,7 @@ services:
       test: wget -q --spider http://localhost:3000/share/healthcheck || exit 1
       start_period: 10s
       timeout: 5s
-    image: alangrainger/immich-public-proxy:latest@sha256:ed5c7cc406bd26bb1cff327b8a3d8aad35210e45830b620d55f280773b528f3b
+    image: alangrainger/immich-public-proxy:latest@sha256:b27b14e301856ec1354acee365c42e233c558ceae2de5257d3af68544c442fa5
     labels:
       homepage.group: Lifestyle
       homepage.name: Immich Public Proxy
@@ -2362,7 +2362,7 @@ services:
       DOCKER_INFLUXDB_INIT_ADMIN_TOKEN: /run/secrets/influxdb2-admin-token
       DOCKER_INFLUXDB_INIT_ORG: rinoa
       DOCKER_INFLUXDB_INIT_BUCKET: rinoa
-    image: influxdb:2-alpine@sha256:fb537cf0d57937a57eac33efd079ae5b36a1d35437dc1eba1ecb8800a352b62a
+    image: influxdb:2-alpine@sha256:f15dfc604753f53b180364a331b46c2f4bc5c08a665d025982b301efa69bc2f7
     labels:
       swag: enable
       swag_proto: http
@@ -2433,7 +2433,7 @@ services:
     container_name: invidious-companion
     environment:
       SERVER_SECRET_KEY: ${INVID_COMPANION_KEY}
-    image: quay.io/invidious/invidious-companion:latest@sha256:07a1dd6893e6311e341067cf61ba5f920184e40339e4b4e195f5713f99311343
+    image: quay.io/invidious/invidious-companion:latest@sha256:8f07706baf04785a59cc32547d54fa530ef0d0128e60b100d8971bb5991de6a0
     logging:
       options:
         max-size: "1G"
@@ -2457,7 +2457,7 @@ services:
       test:
         - CMD-SHELL
         - pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB
-    image: docker.io/library/postgres:14@sha256:da076311f78c56e4bf6548ef3668fa77fa2865c5efca3f79a6d6bb9b3710b477
+    image: docker.io/library/postgres:14@sha256:44b2944d4beb460aa7582fc2ae9f37bfee4a75788b76f2bf25312094029e4680
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -2506,7 +2506,7 @@ services:
     container_name: jellyfin
     environment:
       JELLYFIN_PublishedServerUrl: https://jf.${MY_TLD}
-    image: jellyfin/jellyfin@sha256:6d819e9ab067efcf712993b23455cc100ee5585919bb297ea5a109ac00cb626e
+    image: jellyfin/jellyfin@sha256:333b647716631443a43c7fabac4b0c46b4e2f036bad19547e00958f10f721b85
     labels:
       homepage.group: Media Library
       homepage.name: Jellyfin
@@ -3189,7 +3189,7 @@ services:
     restart: unless-stopped
   karakeep:
     container_name: karakeep
-    image: ghcr.io/karakeep-app/karakeep:release@sha256:bbdc3274bbe510cac32551b2a8825019f61d23c261ddb8baa9bb4311caed31c4
+    image: ghcr.io/karakeep-app/karakeep:release@sha256:2724d4a9a6d13a7fa3babf53b9245767aae56c34f06042a8463ee983c6b41caf
     environment:
       BROWSER_WEB_URL: http://chrome:9222
       DATA_DIR: /data
@@ -3233,7 +3233,7 @@ services:
       Java_Xmx: 1g
     expose:
       - 8010
-    image: elestio/languagetool:latest@sha256:85a32bdef9e7d87125977a201bfe7aa4310e67cab8abfa370157a9fc67cda4cd
+    image: elestio/languagetool:latest@sha256:f0c2e7a1dc3b9acc893f86959406500fe04764ff49372a5d2fb69d6206f09c65
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -3244,7 +3244,7 @@ services:
       LT_UPDATE_MODELS: true
     healthcheck:
       test: ["CMD-SHELL", "./venv/bin/python scripts/healthcheck.py"]
-    image: libretranslate/libretranslate@sha256:e1d5512317e8ffb5f14d496da8ad3a1f320700fa58090cf51a6d3232a6357f4d
+    image: libretranslate/libretranslate@sha256:2dfed65a2680514729c01943f45d42346e9e6628c22f4de6d19c6c1c3ec8e5f1
     labels:
       homepage.group: Personal Tools
       homepage.name: LibreTranslate
@@ -3278,7 +3278,7 @@ services:
       TZ: America/New_York
       DOCKER_MODS: ghcr.io/gilbn/theme.park:lidarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/lidarr:latest@sha256:ede2bb17350cc97a0d3f24389aa91803f655eac29aa022c77a71f4a61cc621e4
+    image: lscr.io/linuxserver/lidarr:latest@sha256:6fba990e5b460ea53a3f91ebac823a3471f2254669ea96036d9411fedf0f65be
     labels:
       homepage.group: Servarr Stack
       homepage.name: Lidarr
@@ -3371,7 +3371,7 @@ services:
         type: bind
   linkstack:
     container_name: linkstack
-    image: linkstackorg/linkstack:latest@sha256:2b298302ab50184cf99294ef3ae6a3c49c13081162e9a1d067a872e9c75b3e55
+    image: linkstackorg/linkstack:latest@sha256:d9c4e1fd521e1ae78e796ac549b4d3e6371665775761d6c712aec8ac3bd9c5bc
     environment:
       TZ: ${TZ}
       SERVER_ADMIN: noreply@${MY_TLD}
@@ -3443,7 +3443,7 @@ services:
         bind:
           create_host_path: true
   loggifly:
-    image: ghcr.io/clemcer/loggifly:latest@sha256:6faa4d4964994a9213494f879b58085acc04cafa2927cadfde98657676dfd199
+    image: ghcr.io/clemcer/loggifly:latest@sha256:9f6a673cd11fb90ffd0cfdb9675d5d3b9b3dfac060800fab52ec8dfbd4cc0293
     container_name: loggifly
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -3523,7 +3523,7 @@ services:
       SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
       SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SMTP_FROM_ADDRESS: noreply@${MY_TLD}
-    image: lscr.io/linuxserver/manyfold:0.130.1@sha256:24bb24651c638dd3b9fbc14af3089be67ccd36b62150a8ea941b94e919447bbf
+    image: lscr.io/linuxserver/manyfold:0.131.0@sha256:e40699dac23fae4de09982fcb2e5d478917b5b9a60bd1fda43ec7a2f18a8c4d6
     labels:
       homepage.group: Lifestyle
       homepage.name: Manyfold
@@ -3560,7 +3560,7 @@ services:
       timeout: 30s
       interval: 10s
       retries: 5
-    image: postgres:18-alpine@sha256:b40d931bd0e7ce6eecc59a5a6ac3b3c04a01e559750e73e7086b6dbd7f8bf545
+    image: postgres:18-alpine@sha256:aa6eb304ddb6dd26df23d05db4e5cb05af8951cda3e0dc57731b771e0ef4ab29
     profiles: ["rinoa-apps"]
     restart: always
     volumes:
@@ -3587,7 +3587,7 @@ services:
       timeout: 10s
       retries: 5
     hostname: Rinoa
-    image: linuxserver/mariadb@sha256:1fa6fab7aed1a1acbe4a60d62bf89e9ba4d1e16b331c8a64f80b14e0117ebd88
+    image: linuxserver/mariadb@sha256:d70694effbcb6158a5b9c7e81548aeaad24f11958329de517c5efb664aeb6219
     networks:
       default: null
     ports:
@@ -3641,7 +3641,7 @@ services:
       AWS_SECRET_ACCESS_KEY: ${MASTODON_MINIO_SECRET_KEY}
     expose:
       - 3000
-    image: lscr.io/linuxserver/mastodon:latest@sha256:053797d91ed25f30004bce69434269b1f673c33b524ce3aadbdcf76cd556a210
+    image: lscr.io/linuxserver/mastodon:latest@sha256:4f609e151426bdd85b3931e31e105014ece96876fd76d489698f7bacaec38619
     labels:
       swag: enable
       swag_proto: http
@@ -3704,7 +3704,7 @@ services:
     <<: *maxun-env
     expose:
       - 8080
-    image: getmaxun/maxun-backend:latest@sha256:88561d729704988e6592198fd2ee4fbc60cd7fee7e8f9eaa6f7c4e919a01347a
+    image: getmaxun/maxun-backend:latest@sha256:e24677c32ddb38eb53bb5284ac99d723ceadd994d0d1063ea606d933933fef13
     mem_limit: 2g # Set a 2GB memory limit
     ports:
       - 8369:8080
@@ -3720,7 +3720,7 @@ services:
     depends_on:
       - maxun-backend
     <<: *maxun-env
-    image: getmaxun/maxun-frontend:latest@sha256:88822f950c81a17bfe760b31bea5979a5a93bf69a4813ae4b94a0d9f6c75577c
+    image: getmaxun/maxun-frontend:latest@sha256:b0b9bcb9e2082f9047fe3cfd01d9c72a4d8eef93cd6f509b00a87c23bf26bf57
     labels:
       swag: enable
       swag_proto: http
@@ -3801,7 +3801,7 @@ services:
     volumes:
       - ${DOCKER_VOLUME_CONFIG}/meme_search_pro/memes/:/rails/public/memes
   meme-search-pro-img2txt-gen:
-    image: ghcr.io/neonwatty/image_to_text_generator:latest@sha256:62d1dbbdab12e543f0ba13d3419ea9d234d61531bef95b910794a31a3c54db51
+    image: ghcr.io/neonwatty/image_to_text_generator:latest@sha256:81ffbc934de800f3f5206f742db534a78596ec894e348dc25548495a1e9ad78e
     container_name: meme-search-pro-img2txt-gen
     deploy:
       resources:
@@ -3984,7 +3984,7 @@ services:
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
-    image: mongo:7@sha256:32b5cbf6e1075ad0f5eb2b880ee61e985d5135519a7a34a7d81712af37f27913
+    image: mongo:7@sha256:606f8e029603330411a7dd10b5ffd50eefc297fc80cee89f10a455e496a76ae7
     ports:
       - 27017:27017
     profiles: ["rinoa-apps"]
@@ -4020,7 +4020,7 @@ services:
       LZ_TOKEN: ${MALOJA_LISTENBRAINZ_TOKEN}
       SPOTIFY_CLIENT_ID: ${YOUR_SPOTIFY_ID}
       SPOTIFY_CLIENT_SECRET: ${YOUR_SPOTIFY_SECRET}
-    image: foxxmd/multi-scrobbler@sha256:7e2709a4c06e2a8dc8ceeebb5f6d02cc43076b1a0b64bd68e8f868bebc989e19
+    image: foxxmd/multi-scrobbler@sha256:be2c16b169bec7ed2fdaef102e27969f3f9e8cae7d17cd7e5ab532f0b317c7a0
     labels:
       homepage.group: Media Library
       homepage.name: Multi-Scrobbler
@@ -4060,7 +4060,7 @@ services:
       NODE_ENV: production
       WEBHOOK_URL: https://n8n.${MY_TLD}/
       GENERIC_TIMEZONE: ${TZ}
-    image: docker.n8n.io/n8nio/n8n@sha256:0a65e6e5995c19e0cf7e83d6b08ffa6c1898e8a53ff1658e6e7b22e68576c673
+    image: docker.n8n.io/n8nio/n8n@sha256:a9beb0dcaa547f0742a322f497af72127338d6ab8f3697b3be44f8ab737726f2
     labels:
       swag: enable
       swag_proto: http
@@ -4107,7 +4107,7 @@ services:
       ND_SPOTIFY_ID: ${YOUR_SPOTIFY_ID}
       ND_SPOTIFY_SECRET: ${YOUR_SPOTIFY_SECRET}
       ND_SUBSONICARTISTPARTICIPATIONS: true
-    image: deluan/navidrome:latest@sha256:4edc8a1de3e042f30b78a478325839f4395177eb8201c27543dccc0eba674f23
+    image: deluan/navidrome:latest@sha256:5d0f6ab343397c043c7063db14ae10e4e3980e54ae7388031cbce47e84af6657
     labels:
       homepage.group: Media Library
       homepage.name: Navidrome
@@ -4147,7 +4147,7 @@ services:
     environment:
       TZ: ${TZ}
       PORT: 20211
-    image: jokobsk/netalertx:latest@sha256:fd1a4ca4bd4c0f38797b36b4ec5b0928d7add7b9add788d9cedb11fd25a42a65
+    image: jokobsk/netalertx:latest@sha256:e0c6ae73a28eee1d94f959d1d266d4b5229cb5e784f6dae48fea7368e246a1e1
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: net.${MY_TLD}
@@ -4191,7 +4191,7 @@ services:
       APACHE_PORT: 11000
     expose:
       - 11000
-    image: nextcloud/all-in-one:latest@sha256:33f46abc48b1a12aa6eef5dda9cdf39403f4b5f8537b3791e8f45ffcd7928992
+    image: nextcloud/all-in-one:latest@sha256:74abbbdfcffff867f5e22f14da8446dbafffb4368e94287b4697ff0a460e85f9
     labels:
       homepage.group: Privacy/Security
       homepage.name: NextCloud
@@ -4242,7 +4242,7 @@ services:
       NC_SMTP_USERNAME: ${POSTAL_SMTP_AUTH_USER}
       NC_SMTP_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       NC_SMTP_FROM: noreply@${MY_TLD}
-    image: "nocodb/nocodb:latest@sha256:8fd57018accf775fb5390392910e4b0ef6bb154f17c5732b478eb76c40ee8d1e"
+    image: "nocodb/nocodb:latest@sha256:d3aba4f7e89bd18fc01d6853eea0fa82476b161a678f7f0ff52380f4c52bb87f"
     labels:
       homepage.group: Code/DevOps
       homepage.name: NocoDB
@@ -4279,7 +4279,7 @@ services:
       retries: 10
       test: 'pg_isready -U "$$POSTGRES_USER" -d "$$POSTGRES_DB"'
       timeout: 2s
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4296,7 +4296,7 @@ services:
       PUID: ${PUID}
       TZ: America/New_York
     hostname: Rinoa
-    image: lscr.io/linuxserver/ombi:latest@sha256:acefcbde5f9fa09ea39451fc13fcc95aa6a877010b2d92f688a17361ddc14b3b
+    image: lscr.io/linuxserver/ombi:latest@sha256:5c2d3a515b5c1d120cb70f3c701c3c760ce742edd352f3acaa430280d9b725eb
     labels:
       homepage.group: Media Library
       homepage.name: Ombi
@@ -4444,7 +4444,7 @@ services:
       WEBSOCKET_MANAGER: redis
       WEBSOCKET_REDIS_URL: redis://open-webui-valkey:6379/0
       REDIS_KEY_PREFIX: open-webui
-    image: ghcr.io/open-webui/open-webui:main@sha256:c8e04b9319257448fa4e7ad140cb6596994217ec83d6e7656ccba649bf557318
+    image: ghcr.io/open-webui/open-webui:main@sha256:000b87a6ae726aa7f6611a0064ba528ba1a6aff6ead5fb3b6c89fd4a5717eb8a
     labels:
       homepage.group: Personal Tools
       homepage.name: Open WebUI
@@ -4495,7 +4495,7 @@ services:
       PAPERLESS_URL: https://docs.${MY_TLD}
       USERMAP_GID: ${PGID}
       USERMAP_UID: ${PUID}
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:8cbd8ce3ef1857bd144026a7e7192d0889188352b5271631e42ff069ccceeb74
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest@sha256:a28330462994b937938e02aaa5632a1effcc7f9acfba96c1bef9c50e1167a027
     labels:
       swag: enable
       swag_proto: http
@@ -4662,7 +4662,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
     profiles: ["rinoa-apps"]
     restart: unless-stopped
     volumes:
@@ -4747,7 +4747,7 @@ services:
       - plant-it-valkey-data:/data/valkey
   plantuml-server:
     container_name: plantuml-server
-    image: plantuml/plantuml-server:jetty@sha256:ac656ab4215fd80554c59330fd365a3b29041e317f232563c7fc807680ec4ef0
+    image: plantuml/plantuml-server:jetty@sha256:0cac1e9b921ef783b49bd1f90243c830946ceb0edf175e66ca19b3991c55257e
     labels:
       homepage.group: Personal Tools
       homepage.name: PlantUML
@@ -4828,7 +4828,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:8bea203e8785541c0acac7860de9f70849b05806e0c6db1d83dfc1b8407a6077
+    image: ghcr.io/dsgnr/portcheckerio-web:latest@sha256:089b0e92e3071c3a586dbb3f6f021033a30777500167a5eb52fc727819d6458c
     labels:
       swag: enable
       swag_auth: authelia
@@ -4860,7 +4860,7 @@ services:
       timeout: 10s
       retries: 3
       start_period: 5s
-    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:7783796d791c3e10aedba9d5f7fc2b934bb0e7afa75bc89054b70b886ed39e5c
+    image: ghcr.io/dsgnr/portcheckerio-api:latest@sha256:e0c01460b689ac1fbb11ef0e93e08971fb2a4c907e7cabeaf53586680c3be77d
     ports:
       - 36102:8000
     profiles: ["rinoa-apps"]
@@ -4870,7 +4870,7 @@ services:
       - NET_BIND_SERVICE
     command: postal smtp-server
     container_name: postal-smtp
-    image: ghcr.io/postalserver/postal:latest@sha256:ff9a42deeda9b236ac36df012dab843b14726da8f3c2464c18c371f23107d986
+    image: ghcr.io/postalserver/postal:latest@sha256:e8300c81deeee3123a732f5e70598719d613d26fc03ec350e623031aa75b2e2b
     networks:
       default: null
     ports:
@@ -4883,7 +4883,7 @@ services:
   postal-web:
     command: postal web-server
     container_name: postal-web
-    image: ghcr.io/postalserver/postal:latest@sha256:ff9a42deeda9b236ac36df012dab843b14726da8f3c2464c18c371f23107d986
+    image: ghcr.io/postalserver/postal:latest@sha256:e8300c81deeee3123a732f5e70598719d613d26fc03ec350e623031aa75b2e2b
     labels:
       swag: enable
       swag_proto: http
@@ -4919,7 +4919,7 @@ services:
     container_name: postal-worker
     environment:
       LOG_LEVEL: debug
-    image: ghcr.io/postalserver/postal:latest@sha256:ff9a42deeda9b236ac36df012dab843b14726da8f3c2464c18c371f23107d986
+    image: ghcr.io/postalserver/postal:latest@sha256:e8300c81deeee3123a732f5e70598719d613d26fc03ec350e623031aa75b2e2b
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -4950,7 +4950,7 @@ services:
       TP_COMMUNITY_THEME: false
       TP_THEME: space-gray
     hostname: Rinoa
-    image: lscr.io/linuxserver/prowlarr:latest@sha256:67a8aaedcfd6989f3030b937a6a07007310b1dfc7ee8df16d2cbfa48d1c1158c
+    image: lscr.io/linuxserver/prowlarr:latest@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
     labels:
       homepage.group: Servarr Stack
       homepage.name: Prowlarr
@@ -5166,7 +5166,7 @@ services:
       PUID: ${PUID}
       TZ: ${TZ}
     hostname: Rinoa
-    image: lscr.io/linuxserver/radarr:latest@sha256:6c0948b42c149e36bb3dbc0b64d36c77b2d3c9dccf1b424c4f72af1e57ba0c21
+    image: lscr.io/linuxserver/radarr:latest@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
     labels:
       homepage.group: Servarr Stack
       homepage.name: Radarr
@@ -5228,7 +5228,7 @@ services:
       STORAGE_URL: https://s3.${MY_TLD}/reactive-resume
       STORAGE_USE_SSL: false
       TZ: ${TZ}
-    image: amruthpillai/reactive-resume:latest@sha256:f1b27f567b2a1b57fb6b2a81f7b9cec0af577b6be945820c1599a0a8b6b91f8b
+    image: amruthpillai/reactive-resume:latest@sha256:f26fd329f35b97bccdf5ee5a7b558df0ccf1e073a1d7a5787e433043e22b9296
     labels:
       homepage.group: Professional Services
       homepage.name: Reactive Resume
@@ -5261,7 +5261,7 @@ services:
       POSTGRES_PASSWORD: ${REACTIVE_RESUME_PGSQL_PASSWORD}
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -5406,7 +5406,7 @@ services:
         condition: service_healthy
         required: true
         restart: true
-    image: rommapp/romm:latest@sha256:b909e95d1aab88db9817be700183fda8d24094b3e7c28355ddbd066e2659fc8f
+    image: rommapp/romm:latest@sha256:7f8b04e2e7652ae3121f19e712373bc021530b3c500e0c077c69a9cfe431395c
     environment:
       ROMM_DB_DRIVER: mariadb # mariadb | sqlite (default: sqlite)
       ROMM_HOST: https://localhost:3000 # [Optional] your host ip or domain name (including http(s)://, subdomain and port if needed). Being used only for webRcade feed for now.
@@ -5563,7 +5563,7 @@ services:
       STRATEGY_DYNAMIC_DEFAULT_THEME: hacker-terminal
       STRATEGY_DYNAMIC_DEFAULT_REFRESH_FREQUENCY: 5s
       STRATEGY_BLOCKING_DEFAULT_TIMEOUT: 1m
-    image: sablierapp/sablier:latest@sha256:4d4096b59a6e1496bd3106c1a90a7fdd161aafb73d58539b8c749c69380dedae
+    image: sablierapp/sablier:latest@sha256:000fab8e34adec9587b2424cc91e8526403ebea4b0636e9667f4123d450fe165
     ports:
       - 19311:10000
     profiles: ["rinoa-apps"]
@@ -5613,7 +5613,7 @@ services:
       - "/dev/sdd:/dev/sdd:rwm"
       - "/dev/sde:/dev/sde:rwm"
       - "/dev/sdf:/dev/sdf:rwm"
-    image: ghcr.io/analogj/scrutiny:master-omnibus@sha256:e5638d8580adba40f7c03464cde8420866188b9e48cddb9fc3866ec3243163d5
+    image: ghcr.io/analogj/scrutiny:master-omnibus@sha256:8922d5aac20c5cbf7869e3fd47ab9900ad48acc18ffd72879ccb4c58dfe6bf41
     labels:
       cloudflare.tunnel.enable: true
       cloudflare.tunnel.hostname: smartd.${MY_TLD}
@@ -5668,7 +5668,7 @@ services:
     container_name: searxng
     environment:
       SEARXNG_BASE_URL: https://search.${MY_TLD}
-    image: searxng/searxng:latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
+    image: searxng/searxng:latest@sha256:771d475fd7a6b9e254ad725220f977303cdb132fb2136401ea806553330214eb
     labels:
       homepage.group: Privacy/Security
       homepage.name: SearxNG
@@ -5726,7 +5726,7 @@ services:
       SEMAPHORE_EMAIL_PASSWORD: ${POSTAL_SMTP_AUTH_PASSWORD}
       SEMAPHORE_EMAIL_SECURE: false
       SEMAPHORE_USE_REMOTE_RUNNER: true
-    image: semaphoreui/semaphore:v2.16.47@sha256:71aabf9314d1051ab92025f26809daea72bd90cb78a6a2badfe15400acf11619
+    image: semaphoreui/semaphore:v2.16.51@sha256:316520f513e3c964d23cdd40709777a6a452e275020627aba406e9bd9c08adde
     labels:
       homepage.group: Code/DevOps
       homepage.name: Semaphore UI
@@ -5877,7 +5877,7 @@ services:
       NGINX_ERROR_LOG_FILE: /swag/log/nginx/error.log
       OTEL_RESOURCE_ATTRIBUTES: host.name=signoz-host,os.type=linux
       LOW_CARDINAL_EXCEPTION_GROUPING: false
-    image: signoz/signoz-otel-collector:v0.129.12@sha256:84df7d9786ce12ee5983fc8460225371a204bca6320c85717801bf110b84ed65
+    image: signoz/signoz-otel-collector:v0.129.13@sha256:432feb1755922bcc9a41406fd953410d1848488bbd5215621605ee0dfcf37622
     ports:
       # - "1777:1777"     # pprof extension
       - "4317:4317" # OTLP gRPC receiver
@@ -5890,7 +5890,7 @@ services:
       - ${DOCKER_VOLUME_CONFIG}/swag/log/nginx/error.log:/swag/log/nginx/error.log:ro
   signoz-schema-migrator-async:
     <<: *signoz-db-depend
-    image: signoz/signoz-schema-migrator:v0.129.12@sha256:43044b0666c60ad9c0e8c1240d478f846d0c2b7fccfea142fa043f327c8be279
+    image: signoz/signoz-schema-migrator:v0.129.13@sha256:562d193f00683d917bfb37d06c37cc8ce1f0885f13f399272e339b86a65498b7
     container_name: signoz-schema-migrator-async
     command:
       - async
@@ -5900,7 +5900,7 @@ services:
     restart: on-failure
   signoz-schema-migrator-sync:
     <<: *signoz-common
-    image: signoz/signoz-schema-migrator:v0.129.12@sha256:43044b0666c60ad9c0e8c1240d478f846d0c2b7fccfea142fa043f327c8be279
+    image: signoz/signoz-schema-migrator:v0.129.13@sha256:562d193f00683d917bfb37d06c37cc8ce1f0885f13f399272e339b86a65498b7
     container_name: signoz-schema-migrator-sync
     command:
       - sync
@@ -5998,7 +5998,7 @@ services:
       TZ: ${TZ}
       DOCKER_MODS: ghcr.io/gilbn/theme.park:sonarr
     hostname: Rinoa
-    image: lscr.io/linuxserver/sonarr:latest@sha256:8b9f2138ec50fc9e521960868f79d2ad0d529bc610aef19031ea8ff80b54c5e0
+    image: lscr.io/linuxserver/sonarr:latest@sha256:02b4d538d351d6e35882a021c08e8600fe95d28860fb1dd724b597166e7221ca
     labels:
       homepage.group: Servarr Stack
       homepage.name: Sonarr
@@ -6102,7 +6102,7 @@ services:
       TZ: ${TZ}
       #Script interval in seconds
       SCRIPT_INTERVAL: 300
-    image: mrusse08/soularr:latest@sha256:b41d4f8ec74e9eded55e0096ddb40ba155ff3288f87b50639d57e5ba4c980159
+    image: mrusse08/soularr:latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
     network_mode: service:gluetun
     profiles: ["rinoa-apps"]
     restart: unless-stopped
@@ -6121,7 +6121,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       TZ: ${TZ}
-    image: ghcr.io/mrusse/soularr:main@sha256:15bcdf0bcbce937f39c1c93ba8384fc1508e849bff943b56e4bc79a076af9ea2
+    image: ghcr.io/mrusse/soularr:main@sha256:84fead20dc2bcc00d6f0d2df53e56866b4fe634640e075820b420ae4ea146fd2
     labels:
       homepage.name: Soularr
       homepage.group: Downloaders
@@ -6156,7 +6156,7 @@ services:
         condition: service_started
         required: true
         restart: true
-    image: slskd/slskd@sha256:e3635858d9614a2fb811601afca706dbf97a6838b849905c27294cbce71be268
+    image: slskd/slskd@sha256:bcf9820dab68e21d2bba8ebb1ffd583d71fcba542a50a1e998119f69b7b498fe
     labels:
       homepage.name: Soulseek
       homepage.group: Downloaders
@@ -6185,7 +6185,7 @@ services:
       - ${DOCKER_VOLUME_STORAGE}/downloads/incomplete/slsk:/app/incomplete
   speedtest-tracker:
     container_name: speedtest-tracker
-    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:ce42fcb3c4fdcceb22e8c91ad93b8293ea0fe0873221f07fce36aed65b6a1f51
+    image: lscr.io/linuxserver/speedtest-tracker:latest@sha256:dedc276c0899078f8c10788406592583a22b91d4d46cd11cbffe2b4577b59b79
     environment:
       PUID: ${PUID}
       PGID: ${PGID}
@@ -6225,7 +6225,7 @@ services:
       SECURITY_ENABLE_LOGIN: true
       SYSTEM_SHOW_UPDATE: false
       SYSTEM_SHOW_UPDATE_ONLY_ADMIN: true
-    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:940c83732d373b08efd110de708d51d639705404de7dabc7230e5665819efb4a
+    image: docker.stirlingpdf.com/stirlingtools/stirling-pdf:latest@sha256:515364d7c2005fe5dcfdf56b4750b165875bbb6a0a1dced1957c59c8cde61c07
     labels:
       homepage.name: Stirling-PDF
       homepage.group: Professional Services
@@ -6277,7 +6277,7 @@ services:
       UPTIME_KUMA_URL: http://uptimekuma:3001
       UPTIME_KUMA_USERNAME: ${UPTIME_KUMA_USERNAME}
     hostname: Rinoa
-    image: lscr.io/linuxserver/swag:latest@sha256:c8afbd137c2f44a13c913cd24ba0cdf77ed03d1e6c500af11ae97b300d533e6d
+    image: lscr.io/linuxserver/swag:latest@sha256:4c7b2d56f6d5e9097ff2821dd80c235576637738709ec6d73507a4c14cfcec2d
     labels:
       swag: enable
       swag_proto: http
@@ -6333,7 +6333,7 @@ services:
       SECRET_KEY: ${TANDOOR_SECRET_KEY}
       TZ: ${TZ}
       UID: 1000
-    image: vabene1111/recipes@sha256:5cd01ba0473a48878db3ed9b2c6f2c5db12b68649e169ce9cfa43f052fb0aa95
+    image: vabene1111/recipes@sha256:c1a1d494631955bdb6c200066ee5914adbc378805ac0e4df9aeb795fe25c87aa
     labels:
       homepage.group: Lifestyle
       homepage.name: Tandoor Recipes
@@ -6379,7 +6379,7 @@ services:
       POSTGRES_USER: tandoor
     expose:
       - 5432
-    image: postgres:16-alpine@sha256:6a388fba16e2a94d6d92bc3c435cdc2e20145add88547615b3d8fa545d703afe
+    image: postgres:16-alpine@sha256:4327b9fd295502f326f44153a1045a7170ddbfffed1c3829798328556cfd09e2
     networks:
       default: null
     profiles: ["rinoa-apps"]
@@ -6448,7 +6448,7 @@ services:
       PUID: ${PUID}
       PGID: ${PGID}
       LOGS_TO_STDOUT: /config/.unmanic/logs/unmanic.log
-    image: josh5/unmanic:latest@sha256:f0cdf77d9e18f79f7c27e13e269c1bd74378c5dcc1d644540ba22795076f9eb8
+    image: josh5/unmanic:latest@sha256:d62bcfe8230260e5d5de47796c498867e81d4ee5c70799a302caed91b5870b73
     labels:
       homepage.group: Media Library
       homepage.name: Unmanic
@@ -6547,7 +6547,7 @@ services:
     environment:
       AWS_ACCESS_KEY_ID: ${VAULT_HASHICORP_AWS_ACCESS_KEY_ID}
       AWS_SECRET_ACCESS_KEY: ${VAULT_HASHICORP_AWS_SECRET_ACCESS_KEY}
-    image: hashicorp/vault:latest@sha256:f4e2687b72858a9e2160c344c9fa1ef74c07f21a89a8c00534ab64d3f187b927
+    image: hashicorp/vault:latest@sha256:eb0ba6836e8d4699b7a1e8ca70d8433f7b87dcd067e6d82dff237d3ed2600ea0
     labels:
       homepage.group: Code/DevOps
       homepage.name: HashiCorp Vault
@@ -6577,7 +6577,7 @@ services:
     container_name: wallos
     environment:
       TZ: ${TZ}
-    image: bellamy/wallos:latest@sha256:1277c83dc626853ac14658c1b0aaf003e1bced213c37370d149fdd9622b5747f
+    image: bellamy/wallos:latest@sha256:9f1bbd7f24e2afdac64ff0985ef801d48f63086540a0844fc05727642bb5360a
     labels:
       homepage.group: Lifestyle
       homepage.name: wallos
@@ -6607,7 +6607,7 @@ services:
       - wallos-logos:/var/www/html/images/uploads/logos
   web-check:
     container_name: web-check
-    image: lissy93/web-check@sha256:f2d1dc726958c1d79ac459cac84eb26eb4f203a4d27447f336695a8c1884f1e3
+    image: lissy93/web-check@sha256:2b4ee0a63f6e5cf12c96dd5b123fff488b40410b99f43f08a6e24bc8460531fa
     labels:
       homepage.group: Privacy/Security
       homepage.name: Web-Check
@@ -6633,7 +6633,7 @@ services:
     restart: unless-stopped
   whodb:
     container_name: whodb
-    image: clidey/whodb@sha256:55100f0904f7006ecd304c6b6c42d36e989f0815decdc1d54bd7ebfdaeea613e
+    image: clidey/whodb@sha256:86a72847c4410bc0bb4dc6a0156eef4eb0da0033fee9c149e3afadaca879847f
     environment:
       WHODB_CLICKHOUSE_1: '{
         "host": "signoz-clickhouse"
@@ -6839,7 +6839,7 @@ services:
       YDL_CONFIG_PATH: /youtube-dl/config.yml
       YDL_DEBUG: "false"
     hostname: Rinoa
-    image: nbr23/youtube-dl-server:latest@sha256:a44cb66c056775decd3ef153d20532b3a8d958a8ab196b6dbb0d4550f878c17c
+    image: nbr23/youtube-dl-server:latest@sha256:a1ca58da9af2a6cf73f4915094384674712d45be4428d4326650fabf90093827
     labels:
       homepage.group: Downloaders
       homepage.name: YoutubeDL