Update all stable non-major dependencies

As the roles are used internally only anyway, we don't need to specify
compatbilities like this and don't properly use it anyway.

.vscode/settings.json

@@ -2,5 +2,7 @@
     "search.exclude": {
         "/playbooks/roles/": true,
         "/playbooks/resources/": true,
+        "/ansible_collections/": true,
+        "/galaxy-roles/": true,
     },
 }

inventories/chaosknoten/host_vars/netbox.yaml

@@ -1,5 +1,5 @@
 # renovate: datasource=github-releases depName=netbox packageName=netbox-community/netbox
-netbox__version: "v4.5.0"
+netbox__version: "v4.5.2"
 netbox__config: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/netbox/netbox/configuration.py.j2') }}"
 netbox__custom_pipeline_oidc_group_and_role_mapping: true
 

resources/chaosknoten/grafana/docker_compose/compose.yaml.j2

@@ -19,7 +19,7 @@ services:
       - prom_data:/prometheus
 
   alertmanager:
-    image: docker.io/prom/alertmanager:v0.30.1
+    image: docker.io/prom/alertmanager:v0.31.0
     container_name: alertmanager
     command:
       - '--config.file=/etc/alertmanager/alertmanager.yaml'
@@ -32,7 +32,7 @@ services:
       - alertmanager_data:/alertmanager
 
   grafana:
-    image: docker.io/grafana/grafana:12.3.1
+    image: docker.io/grafana/grafana:12.3.2
     container_name: grafana
     ports:
       - 3000:3000
@@ -59,7 +59,7 @@ services:
       - /dev/null:/etc/prometheus/pve.yml
 
   loki:
-    image: docker.io/grafana/loki:3.6.4
+    image: docker.io/grafana/loki:3.6.5
     container_name: loki
     ports:
       - 13100:3100

resources/chaosknoten/ntfy/docker_compose/compose.yaml.j2

@@ -1,7 +1,7 @@
 ---
 services:
   ntfy:
-    image: docker.io/binwiederhier/ntfy:v2.15.0
+    image: docker.io/binwiederhier/ntfy:v2.16.0
     container_name: ntfy
     command:
       - serve

resources/chaosknoten/pad/docker_compose/compose.yaml.j2

@@ -13,7 +13,7 @@ services:
     restart: unless-stopped
 
   app:
-    image: quay.io/hedgedoc/hedgedoc:1.10.5
+    image: quay.io/hedgedoc/hedgedoc:1.10.6
     environment:
       - "CMD_DB_URL=postgres://hedgedoc:{{ secret__hedgedoc_db_password }}@database:5432/hedgedoc"
       - "CMD_DOMAIN=pad.hamburg.ccc.de"

resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2

@@ -23,7 +23,7 @@ services:
       - pretalx_net
 
   static:
-    image: docker.io/library/nginx:1.29.4
+    image: docker.io/library/nginx:1.29.5
     restart: unless-stopped
     volumes:
       - public:/usr/share/nginx/html
@@ -33,7 +33,7 @@ services:
       - pretalx_net
 
   pretalx:
-    image: docker.io/pretalx/standalone:v2025.1.0
+    image: docker.io/pretalx/standalone:v2025.2.2
     entrypoint: gunicorn
     command:
       - "pretalx.wsgi"
@@ -78,7 +78,7 @@ services:
       - pretalx_net
 
   celery:
-    image: docker.io/pretalx/standalone:v2025.1.0
+    image: docker.io/pretalx/standalone:v2025.2.2
     command:
       - taskworker
     restart: unless-stopped

roles/certbot/meta/main.yaml

@@ -1,10 +0,0 @@
----
-dependencies:
-  - role: distribution_check
-    vars:
-      distribution_check__distribution_support_spec:
-        - name: Debian
-          major_versions:
-            - 11
-            - 12
-            - 13

roles/distribution_check/README.md

@@ -1,13 +0,0 @@
-# Role `distribution_check`
-
-This role checks if the distribution of the hosts is supported (part of the provided distribution support spec.) and fails if it's not.
-
-If a hosts distribution and either an accompanying distribution version, major version or release is supported, the role doesn't fail for the host in question.
-
-## Required Arguments
-
-For the required arguments look at the [`argument_specs.yaml`](./meta/argument_specs.yaml).
-
-## `hosts`
-
-The `hosts` for this role need to be the machines for which you want to make sure their distribution is supported.

roles/distribution_check/meta/argument_specs.yaml

@@ -1,28 +0,0 @@
-argument_specs:
-  main:
-    options:
-      distribution_check__distribution_support_spec:
-        description: A spec specifying the supported distribution.
-        type: list
-        elements: dict
-        required: true
-        options:
-          name:
-            description: The name of the supported distribution.
-            type: str
-            required: true
-          versions:
-            description: The supported versions of the supported distribution.
-            type: list
-            elements: str
-            required: false
-          major_versions:
-            description: The supported major versions of the supported distribution.
-            type: list
-            elements: str
-            required: false
-          releases:
-            description: The supported releases of the supported distribution.
-            type: list
-            elements: str
-            required: false

roles/distribution_check/tasks/main.yaml

@@ -1,53 +0,0 @@
-- name: set fact holding list of supported distribution names
-  ansible.builtin.set_fact:
-    distribution_check__supported_distribution_names: "{{ distribution_check__distribution_support_spec
-      | community.general.json_query('[].name') }}"
-
-- name: fail on unsupported distribution (name)
-  ansible.builtin.fail:
-    msg: The hosts distribution (name) isn't supported.
-  when: ansible_facts['distribution'] not in distribution_check__supported_distribution_names
-
-- name: set facts for holding lists of supported distribution versions, major versions and releases
-  block:
-    - name: set fact holding list of supported distribution versions
-      ansible.builtin.set_fact:
-        distribution_check__supported_distribution_versions: "{{ distribution_check__distribution_support_spec
-          | community.general.json_query(distribution_check__supported_distribution_versions_query) }}"
-      vars:
-        distribution_check__supported_distribution_versions_query: "[?name=='{{ ansible_facts['distribution'] }}'].versions | [].to_string(@)"
-
-    - name: set fact holding list of supported distribution major versions
-      ansible.builtin.set_fact:
-        distribution_check__supported_distribution_major_versions: "{{ distribution_check__distribution_support_spec
-          | community.general.json_query(distribution_check__supported_distribution_major_versions_query) }}"
-      vars:
-        distribution_check__supported_distribution_major_versions_query: "[?name=='{{ ansible_facts['distribution'] }}'].major_versions | [].to_string(@)"
-
-    - name: set fact holding list of supported distribution releases
-      ansible.builtin.set_fact:
-        distribution_check__supported_distribution_releases: "{{ distribution_check__distribution_support_spec
-          | community.general.json_query(distribution_check__supported_distribution_releases_query) }}"
-      vars:
-        distribution_check__supported_distribution_releases_query: "[?name=='{{ ansible_facts['distribution'] }}'].releases | [].to_string(@)"
-
-- name: check for distribution version, major version and release support
-  block:
-    - name: set fact on whether the distribution version is supported
-      ansible.builtin.set_fact:
-        distribution_check__distribution_version_supported: "{{ ansible_facts['distribution_version'] in distribution_check__supported_distribution_versions }}"
-
-    - name: set fact on whether the distribution major version is supported
-      ansible.builtin.set_fact:
-        distribution_check__distribution_major_version_supported: "{{ ansible_facts['distribution_major_version'] in distribution_check__supported_distribution_major_versions }}"  # noqa: yaml[line-length]
-
-    - name: set fact on whether the distribution release is supported
-      ansible.builtin.set_fact:
-        distribution_check__distribution_release_supported: "{{ ansible_facts['distribution_release'] in distribution_check__supported_distribution_releases }}"
-
-- name: fail, if neither the distributions version, major version or release is supported
-  ansible.builtin.fail:
-    msg: Neither the hosts distribution version, major version or release is supported.
-  when: not (distribution_check__distribution_version_supported
-             or distribution_check__distribution_major_version_supported
-             or distribution_check__distribution_release_supported)

roles/docker/meta/main.yaml

@@ -1,10 +0,0 @@
----
-dependencies:
-  - role: distribution_check
-    vars:
-      distribution_check__distribution_support_spec:
-        - name: Debian
-          major_versions:
-            - 11
-            - 12
-            - 13

roles/dokuwiki/meta/main.yml

@@ -1,10 +0,0 @@
----
-dependencies:
-  - role: distribution_check
-    vars:
-      distribution_check__distribution_support_spec:
-        - name: Debian
-          major_versions:
-            - 11
-            - 12
-            - 13

roles/nginx/meta/main.yaml

@@ -1,10 +0,0 @@
----
-dependencies:
-  - role: distribution_check
-    vars:
-      distribution_check__distribution_support_spec:
-        - name: Debian
-          major_versions:
-            - "11"
-            - "12"
-            - "13"