chore(deps): update lockfiles

2026-08-22 14:53:58 +00:00 · 2026-07-26 11:59:13 +00:00
8 changed files with 72 additions and 62 deletions
--- a/.gitea/workflows/changelog.yml
+++ b/.gitea/workflows/changelog.yml
@ -8,12 +8,12 @@ on:
 jobs:
  changelog:
    runs-on: ubuntu-latest
-    container: docker.io/thegeeklab/git-sv:3.0.2
+    container: docker.io/thegeeklab/git-sv:2.1.3
    steps:
      - name: install tools
        run: |
          apk add -q --update --no-cache nodejs curl jq sed
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - name: Generate upcoming changelog
--- a/.gitea/workflows/commitlint.yml
+++ b/.gitea/workflows/commitlint.yml
@ -11,9 +11,9 @@ on:
 jobs:
  check-and-test:
    runs-on: ubuntu-latest
-    container: commitlint/commitlint:21.2.2
+    container: commitlint/commitlint:21.2.1
    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@v7
      - name: check PR title
        run: |
          echo "${{ gitea.event.pull_request.title }}" | commitlint --config .commitlintrc.json
--- a/.gitea/workflows/release-version.yml
+++ b/.gitea/workflows/release-version.yml
@ -7,20 +7,20 @@ on:

 env:
  # renovate: datasource=docker depName=alpine/helm
-  HELM_VERSION: "4.2.4"
+  HELM_VERSION: "4.2.3"

 jobs:
  generate-chart-publish:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@v7

      - name: install Docker CLI
-        uses: https://github.com/docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 # Gitea
+        uses: https://github.com/docker/setup-buildx-action@v4 # Gitea
        #uses: docker/setup-buildx-action@v4 # Github / Act

      - name: install Helm
-        uses: https://github.com/Azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5 # Gitea
+        uses: https://github.com/Azure/setup-helm@v5 # Gitea
        #uses: Azure/setup-helm@v5 # Github / Act
        with:
          version: "${{ env.HELM_VERSION }}"
@ -33,7 +33,7 @@ jobs:

      - name: import GPG key
        id: import_gpg
-        uses: https://github.com/crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7 # Gitea
+        uses: https://github.com/crazy-max/ghaction-import-gpg@v7 # Gitea
        #uses: crazy-max/ghaction-import-gpg@v7 # Github / Act
        with:
          gpg_private_key: ${{ secrets.GPGSIGN_KEY }}
@ -41,15 +41,12 @@ jobs:
          fingerprint: CC64B1DB67ABBEECAB24B6455FC346329753F4B0

      - name: log into Docker Hub
-        uses: https://github.com/docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 # Gitea
+        uses: https://github.com/docker/login-action@v4 # Gitea
        #uses: docker/login-action@v4 # Github / Act
        with:
          username: ${{ secrets.DOCKER_CHARTS_USERNAME }}
          password: ${{ secrets.DOCKER_CHARTS_PASSWORD }}

-      - name: Add Artifacthub.io annotations
-        uses: volker-raschek/ah-annotations@7959e52208294befed11210aef0c8e9299cc6a23 # v0.2.2
-
      # Using helm gpg plugin as 'helm package --sign' has issues with gpg2: https://github.com/helm/helm/issues/2843
      - name: package chart
        run: |
@ -70,6 +67,19 @@ jobs:
        env:
          TAR_OPTIONS: "--wildcards"

+      - name: aws credential configure
+        uses: https://github.com/aws-actions/configure-aws-credentials@v6 # Gitea
+        #uses: aws-actions/configure-aws-credentials@v6 # Github / Act
+        with:
+          aws-access-key-id: ${{ secrets.AWS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.AWS_REGION }}
+
+      - name: copy files to S3 and clear cache
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          aws s3 sync actions/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/
+
      - name: Copy files to Cloudflare R2
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.CLOUDFLARE_R2_ACCESS_KEY_ID }}
--- a/.gitea/workflows/shellcheck.yml
+++ b/.gitea/workflows/shellcheck.yml
@ -9,6 +9,6 @@ jobs:
  shellcheck:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@v7
      - run: apt update --yes && apt install --yes shellcheck
      - run: find . -type f -name "*.sh" -exec shellcheck -a {} \;
--- a/.gitea/workflows/test-pr.yml
+++ b/.gitea/workflows/test-pr.yml
@ -11,22 +11,22 @@ name: check-and-test

 env:
  # renovate: datasource=github-releases depName=helm-unittest/helm-unittest
-  HELM_UNITTEST_VERSION: "v1.1.2"
+  HELM_UNITTEST_VERSION: "v1.1.1"

 jobs:
  check-and-test:
    runs-on: ubuntu-latest
-    container: alpine/helm:4.2.4
+    container: alpine/helm:4.2.3
    steps:
      - name: install tools
        run: |
          apk update
          apk add --update bash make nodejs npm yamllint ncurses
      - name: Install pnpm
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+        uses: pnpm/action-setup@v6
        with:
          version: 11
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@v7
      - name: install chart dependencies
        run: helm dependency build
      - name: lint
@ -49,4 +49,4 @@ jobs:
          git diff --exit-code --name-only README.md
      - name: yaml lint
        # uses: ibiqlik/action-yamllint@v3 # Github / Act
-        uses: https://github.com/ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c # v3 # Gitea
+        uses: https://github.com/ibiqlik/action-yamllint@v3 # Gitea
--- a/README.md
+++ b/README.md
@ -87,7 +87,7 @@ For resource limit examples (runner vs DinD), see [docs/resources.md](./docs/res
 | `statefulset.persistence.size`         | Size for persistence to store Gitea Runner data                                                                                                        | `1Gi`                          |
 | `statefulset.runner.registry`          | image registry, e.g. gcr.io,docker.io                                                                                                                  | `docker.gitea.com`             |
 | `statefulset.runner.repository`        | The Gitea Runner image                                                                                                                                 | `runner`                       |
-| `statefulset.runner.tag`               | The Gitea Runner tag                                                                                                                                   | `3.0.2`                        |
+| `statefulset.runner.tag`               | The Gitea Runner tag                                                                                                                                   | `2.0.1`                        |
 | `statefulset.runner.digest`            | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`                                             | `""`                           |
 | `statefulset.runner.pullPolicy`        | The Gitea Runner pullPolicy                                                                                                                            | `IfNotPresent`                 |
 | `statefulset.runner.fullOverride`      | Completely overrides the image registry, path/image, tag and digest.                                                                                   | `""`                           |
@ -100,7 +100,7 @@ For resource limit examples (runner vs DinD), see [docs/resources.md](./docs/res
 | `statefulset.dind.uid`                 | a field to set the running user id for the rootless dind container, so it knows where to look for the socket                                           | `""`                           |
 | `statefulset.dind.registry`            | image registry, e.g. gcr.io,docker.io                                                                                                                  | `docker.io`                    |
 | `statefulset.dind.repository`          | The Docker-in-Docker image                                                                                                                             | `docker`                       |
-| `statefulset.dind.tag`                 | The Docker-in-Docker image tag                                                                                                                         | `29.7.1-dind`                  |
+| `statefulset.dind.tag`                 | The Docker-in-Docker image tag                                                                                                                         | `29.5.2-dind`                  |
 | `statefulset.dind.digest`              | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`                                             | `""`                           |
 | `statefulset.dind.fullOverride`        | Completely overrides the image registry, path/image, tag and digest.                                                                                   | `""`                           |
 | `statefulset.dind.pullPolicy`          | The Docker-in-Docker pullPolicy                                                                                                                        | `IfNotPresent`                 |
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@ -33,8 +33,8 @@ packages:
  '@types/unist@2.0.11':
    resolution: {integrity: sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==}

-  ansi-regex@6.3.0:
-    resolution: {integrity: sha512-WpDfL7NO6j7tH88IDBNVdUJxDh9nmCteAVW9dsep846XdwF4naCBK+/tGLX3KJgcpgMRXCFlTM2hKGoK9FsdrQ==}
+  ansi-regex@6.2.2:
+    resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
    engines: {node: '>=12'}

  argparse@2.0.1:
@ -47,11 +47,11 @@ packages:
    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
    engines: {node: 18 || 20 || >=22}

-  brace-expansion@1.1.18:
-    resolution: {integrity: sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==}
+  brace-expansion@1.1.16:
+    resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==}

-  brace-expansion@5.0.9:
-    resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
+  brace-expansion@5.0.8:
+    resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
    engines: {node: 20 || >=22}

  character-entities-legacy@3.0.0:
@ -133,8 +133,8 @@ packages:
    resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me

-  ignore@7.0.8:
-    resolution: {integrity: sha512-YYNsSlXBjMk92SKnkwvB5LOVSa6OznlFUGcsvrFgNJbJCd0M1XKeFVRc8ZByeCqz32FivYNHJVooLmdqrmvp/Q==}
+  ignore@7.0.6:
+    resolution: {integrity: sha512-BAg6QkE8W+TuQLrrw0Ugr7HegXduRuuj8/ti2kSOc+jz1dmx8/WNcjr6XGnq5YpDWxFwwaavqD0+jIUOKelTsw==}
    engines: {node: '>= 4'}

  inflight@1.0.6:
@ -160,8 +160,8 @@ packages:
  is-hexadecimal@2.0.1:
    resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==}

-  js-yaml@5.2.3:
-    resolution: {integrity: sha512-n+mUVyUX5bVv7G/G2zyIHOhdxfuU1dY2NOFzTQUWiMUbFss8b57NFlgCCaggU78wSw5KVS9cllzeLyzyR+n5nw==}
+  js-yaml@5.2.2:
+    resolution: {integrity: sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==}
    hasBin: true

  jsonc-parser@3.3.1:
@ -181,8 +181,8 @@ packages:
  lodash@4.18.1:
    resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}

-  markdown-it@14.3.1:
-    resolution: {integrity: sha512-4Ej49aYTDFIQ+uBkfX8GBvJGccoARxxPep+7aWTs55ozbjQJpW9M26Fe53vnGgvLeVzva/amzjQQaQu9w0vMhA==}
+  markdown-it@14.3.0:
+    resolution: {integrity: sha512-RCEsPjR+sr0x+AuYp601tKTkgFG4YEPLCzHST3cQ/fhlJkqAkz1L2/Qbp1j9qw5SBwQHFBoW8+hoN5xssOF0Tw==}
    hasBin: true

  markdown-table@2.0.0:
@ -275,8 +275,8 @@ packages:
  micromark@4.0.2:
    resolution: {integrity: sha512-zpe98Q6kvavpCr1NPVSCMebCKfD7CA2NqZ+rykeNhONIJBpc1tFKt9hucLGwha3jNTNI8lHpctWJWoimVF4PfA==}

-  minimatch@10.2.6:
-    resolution: {integrity: sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==}
+  minimatch@10.2.5:
+    resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==}
    engines: {node: 18 || 20 || >=22}

  minimatch@3.1.5:
@ -298,8 +298,8 @@ packages:
    resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
    engines: {node: '>=0.10.0'}

-  picomatch@4.0.7:
-    resolution: {integrity: sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==}
+  picomatch@4.0.5:
+    resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==}
    engines: {node: '>=12'}

  punycode.js@2.3.1:
@ -314,8 +314,8 @@ packages:
    resolution: {integrity: sha512-Lb7OKM9aaykzyoNiHGhSVCjZsvbyy6qDMp2vDXL+MoCfz3GfNJtHYH7uYsU3QNMyInBk++xx+EZ8xZ8Sxs5fNQ==}
    hasBin: true

-  smol-toml@1.7.2:
-    resolution: {integrity: sha512-pXFZ9B2WinEPzxWkMmlYE/oYx2BP+qLrE95wP8tCuK901uLSMGdCb6QSr82z+wnhXkG4+cO+OMLbZB2Cn+97zw==}
+  smol-toml@1.7.0:
+    resolution: {integrity: sha512-aqVvWoyO21L23mb+drl4RmMXbf6N7FdHjAhTRA9ZBL7apWBgfWC16KjrASI+1p9GAroljyMHj6fK67i0UiTNvQ==}
    engines: {node: '>= 18'}

  string-width@8.2.1:
@ -365,7 +365,7 @@ snapshots:

  '@types/unist@2.0.11': {}

-  ansi-regex@6.3.0: {}
+  ansi-regex@6.2.2: {}

  argparse@2.0.1: {}

@ -373,12 +373,12 @@ snapshots:

  balanced-match@4.0.4: {}

-  brace-expansion@1.1.18:
+  brace-expansion@1.1.16:
    dependencies:
      balanced-match: 1.0.2
      concat-map: 0.0.1

-  brace-expansion@5.0.9:
+  brace-expansion@5.0.8:
    dependencies:
      balanced-match: 4.0.4

@ -421,9 +421,9 @@ snapshots:

  entities@4.5.0: {}

-  fdir@6.5.0(picomatch@4.0.7):
+  fdir@6.5.0(picomatch@4.0.5):
    optionalDependencies:
-      picomatch: 4.0.7
+      picomatch: 4.0.5

  fs.realpath@1.0.0: {}

@ -438,7 +438,7 @@ snapshots:
      once: 1.4.0
      path-is-absolute: 1.0.1

-  ignore@7.0.8: {}
+  ignore@7.0.6: {}

  inflight@1.0.6:
    dependencies:
@ -460,7 +460,7 @@ snapshots:

  is-hexadecimal@2.0.1: {}

-  js-yaml@5.2.3:
+  js-yaml@5.2.2:
    dependencies:
      argparse: 2.0.1

@ -478,7 +478,7 @@ snapshots:

  lodash@4.18.1: {}

-  markdown-it@14.3.1:
+  markdown-it@14.3.0:
    dependencies:
      argparse: 2.0.1
      entities: 4.5.0
@ -495,15 +495,15 @@ snapshots:
    dependencies:
      commander: 15.0.0
      deep-extend: 0.6.0
-      ignore: 7.0.8
-      js-yaml: 5.2.3
+      ignore: 7.0.6
+      js-yaml: 5.2.2
      jsonc-parser: 3.3.1
      jsonpointer: 5.0.1
-      markdown-it: 14.3.1
+      markdown-it: 14.3.0
      markdownlint: 0.41.1
-      minimatch: 10.2.6
+      minimatch: 10.2.5
      run-con: 1.3.3
-      smol-toml: 1.7.2
+      smol-toml: 1.7.0
      tinyglobby: 0.2.17
    transitivePeerDependencies:
      - supports-color
@ -696,13 +696,13 @@ snapshots:
    transitivePeerDependencies:
      - supports-color

-  minimatch@10.2.6:
+  minimatch@10.2.5:
    dependencies:
-      brace-expansion: 5.0.9
+      brace-expansion: 5.0.8

  minimatch@3.1.5:
    dependencies:
-      brace-expansion: 1.1.18
+      brace-expansion: 1.1.16

  minimist@1.2.8: {}

@ -724,7 +724,7 @@ snapshots:

  path-is-absolute@1.0.1: {}

-  picomatch@4.0.7: {}
+  picomatch@4.0.5: {}

  punycode.js@2.3.1: {}

@ -737,7 +737,7 @@ snapshots:
      minimist: 1.2.8
      strip-json-comments: 3.1.1

-  smol-toml@1.7.2: {}
+  smol-toml@1.7.0: {}

  string-width@8.2.1:
    dependencies:
@ -746,14 +746,14 @@ snapshots:

  strip-ansi@7.2.0:
    dependencies:
-      ansi-regex: 6.3.0
+      ansi-regex: 6.2.2

  strip-json-comments@3.1.1: {}

  tinyglobby@0.2.17:
    dependencies:
-      fdir: 6.5.0(picomatch@4.0.7)
-      picomatch: 4.0.7
+      fdir: 6.5.0(picomatch@4.0.5)
+      picomatch: 4.0.5

  uc.micro@2.1.0: {}

--- a/values.yaml
+++ b/values.yaml
@ -76,7 +76,7 @@ statefulset:
  runner:
    registry: "docker.gitea.com"
    repository: runner
-    tag: 3.0.2
+    tag: 2.0.1
    digest: ""
    pullPolicy: IfNotPresent
    fullOverride: ""
@ -106,7 +106,7 @@ statefulset:
    uid: ""
    registry: "docker.io"
    repository: docker
-    tag: 29.7.1-dind
+    tag: 29.5.2-dind
    digest: ""
    pullPolicy: IfNotPresent
    fullOverride: ""