Update all stable non-major dependencies

.forgejo/workflows/lint.yaml

@@ -24,7 +24,7 @@ jobs:
       # work in our environmnet.
       # Rather manually setup python (pip) before instead.
       - name: Run ansible-lint
-        uses: https://github.com/ansible/ansible-lint@v26.6.0
+        uses: https://github.com/ansible/ansible-lint@v26.9.0
         with:
           setup_python: "false"
           requirements_file: "requirements.yml"

inventories/chaosknoten/host_vars/cloud.yaml

@@ -1,7 +1,7 @@
 # renovate: datasource=docker depName=git.hamburg.ccc.de/ccchh/oci-images/nextcloud
 nextcloud__version: 34
 # renovate: datasource=docker depName=docker.io/library/postgres
-nextcloud__postgres_version: 15.18
+nextcloud__postgres_version: 15.19
 nextcloud__fqdn: cloud.hamburg.ccc.de
 nextcloud__data_dir: /data/nextcloud
 nextcloud__extra_configuration: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2') }}"

inventories/chaosknoten/host_vars/netbox.yaml

@@ -1,5 +1,5 @@
 # renovate: datasource=github-releases depName=netbox packageName=netbox-community/netbox
-netbox__version: "v4.6.4"
+netbox__version: "v4.7.2"
 netbox__config: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/netbox/netbox/configuration.py.j2') }}"
 netbox__custom_pipeline_oidc_group_and_role_mapping: true
 

inventories/chaosknoten/host_vars/pad.yaml

@@ -13,4 +13,4 @@ nginx__configurations:
     content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/pad/nginx/pad.hamburg.ccc.de.conf') }}"
 
 # renovate: datasource=docker depName=quay.io/hedgedoc/hedgedoc
-host_pad__docker_compose__hedgedoc_version: 1.11.1
+host_pad__docker_compose__hedgedoc_version: 1.12.0

inventories/chaosknoten/host_vars/tickets.sops.yaml

@@ -1,5 +1,6 @@
 secret__pretix_db_password: ENC[AES256_GCM,data:kAOUjT7gw0FDqO+xt8m3wAhOGuZTS6zEIQ==,iv:oPAxDzz4ellT5MxUqw8/iBYyiTMf1b/Lddj5E0iIhWE=,tag:r3OTmcSjNUETEmOzxsMhxQ==,type:str]
 ansible_pull__age_private_key: ENC[AES256_GCM,data:Bhtx7X1ae0pWpxNwHSUJhe2aTO6k27+cEePOs3BBMWdAPFYHtcKUJakq07BTF5tnlvY4Hex0YsO3/l45e+zEfzo5U7FezdYbUPY=,iv:7z8Iy+vdnpfc9TspkH3KMKNGGsHzbxSjERwRP9JQyeM=,tag:AWx4xVf2YmC9giLS/mD1Sw==,type:str]
+secret__pretix_mail_password: ENC[AES256_GCM,data:yfL9TPecle4w5JABIzGbNw==,iv:JTQwnEBk1YvEvHtIk/5PC2G9X/04ncQ379mE8PvHMu0=,tag:hzx1bTI9PT02ufiwh9+2AQ==,type:str]
 sops:
   age:
     - enc: |
@@ -31,8 +32,8 @@ sops:
         S6YZaINfBuh5/Y/CxmHGs97+KYo/WS//Uf06IK2M6/P2Q4eZ9mgthg==
         -----END AGE ENCRYPTED FILE-----
       recipient: age16znyzvquuy8467gg27mdwdt8k6kcu3fjrvfm6gnl4nmqp8tuvqaspqgcet
-  lastmodified: "2025-10-20T18:55:55Z"
+  lastmodified: "2026-10-04T13:04:29Z"
-  mac: ENC[AES256_GCM,data:8OYQB3sIlIStuKPIkDRkeOcIPNEsMYENgyQ44DvvQNkR3lU8lHzyR2zL6HiO/zXF4hXeLUZSqcyH2jU61mEKr1kNFpA49BlYsxuPSOADJURhG2P9oUrc9hi2JL6KtwdRtvTcQB16YRVmhXgt0MLAmyAFc8V3CI6O5wfuEKLkmM4=,iv:dpJCVGga5FnTkCQlouUh0de+6wSW9Dif5Ft/aCf2mCk=,tag:/9m3rCWIhd5jyXXpmIb4jA==,type:str]
+  mac: ENC[AES256_GCM,data:Iz18EJDX2C2I04JLasbpeele5M7XfmfalsNrz8NMQs2njdwFc0DoHtgUH2CgWcLLxmV3vLygzYYgJQKUXhInNf3H2NQn3vVee2LviayGM9GLOwoqAbK4qhGAmvOUPin1e55q+OmH37aE8AtMYUWAj5Fz1phWHvTbumNCgJ/hr78=,iv:FnkIsg+FgbrIHQD6xAvU0GisX5Q5+eznEyvPMDSoYpI=,tag:0cK3EJ0gVuXEarTHPXWejw==,type:str]
   pgp:
     - created_at: "2026-09-24T19:54:23Z"
       enc: |-
@@ -185,4 +186,4 @@ sops:
         -----END PGP MESSAGE-----
       fp: 41FFAF3D519CF5C039FBD8414BCC213729AF0E49
   unencrypted_suffix: _unencrypted
-  version: 3.11.0
+  version: 3.13.3

resources/chaosknoten/grafana/docker_compose/compose.yaml.j2

@@ -2,7 +2,7 @@
 services:
 
   prometheus:
-    image: docker.io/prom/prometheus:v3.13.1
+    image: docker.io/prom/prometheus:v3.15.0
     container_name: prometheus
     command:
       - '--config.file=/etc/prometheus/prometheus.yml'
@@ -19,7 +19,7 @@ services:
       - prom_data:/prometheus
 
   alertmanager:
-    image: docker.io/prom/alertmanager:v0.33.1
+    image: docker.io/prom/alertmanager:v0.34.1
     container_name: alertmanager
     command:
       - '--config.file=/etc/alertmanager/alertmanager.yaml'
@@ -32,7 +32,7 @@ services:
       - alertmanager_data:/alertmanager
 
   grafana:
-    image: docker.io/grafana/grafana:13.1.0
+    image: docker.io/grafana/grafana:13.2.3
     container_name: grafana
     ports:
       - 3000:3000
@@ -46,7 +46,7 @@ services:
       - graf_data:/var/lib/grafana
 
   pve-exporter:
-    image: docker.io/prompve/prometheus-pve-exporter:3.9.0
+    image: docker.io/prompve/prometheus-pve-exporter:3.10.1
     container_name: pve-exporter
     ports:
       - 9221:9221

resources/chaosknoten/ntfy/docker_compose/compose.yaml.j2

@@ -1,7 +1,7 @@
 ---
 services:
   ntfy:
-    image: docker.io/binwiederhier/ntfy:v2.26.0
+    image: docker.io/binwiederhier/ntfy:v2.28.0
     container_name: ntfy
     command:
       - serve

resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2

@@ -15,7 +15,7 @@ services:
       - pretalx_net
 
   redis:
-    image: docker.io/library/redis:8.8.0
+    image: docker.io/library/redis:8.10.2
     restart: unless-stopped
     volumes:
       - redis:/data

resources/chaosknoten/tickets/docker_compose/compose.yaml.j2

@@ -13,7 +13,7 @@ services:
     restart: unless-stopped
 
   redis:
-    image: docker.io/library/redis:8.8.0
+    image: docker.io/library/redis:8.10.2
     ports:
       - "6379:6379"
     volumes:

resources/chaosknoten/tickets/docker_compose/pretix.cfg.j2

@@ -15,7 +15,12 @@ host=database
 
 [mail]
 from=tickets@hamburg.ccc.de
-host=cow-intern.hamburg.ccc.de
+host=cow.hamburg.ccc.de
+port=587
+tls=on
+user=tickets@hamburg.ccc.de
+password={{ secret__pretix_mail_password }}
+
 
 [redis]
 location=redis://redis/0

resources/external/status/docker_compose/compose.yaml.j2

@@ -4,7 +4,7 @@
 
 services:
   database:
-    image: docker.io/library/postgres:18.4
+    image: docker.io/library/postgres:18.6
     restart: always
     volumes:
       - ./database:/var/lib/postgresql
@@ -16,7 +16,7 @@ services:
       - gatus
 
   gatus:
-    image: ghcr.io/twin/gatus:v5.36.0
+    image: ghcr.io/twin/gatus:v5.37.0
     restart: always
     ports:
       - "8080:8080"