Update siderolabs/talos to v1.8.3

2024-11-13 16:04:03 +00:00
37 changed files with 76 additions and 88 deletions
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@ -5,8 +5,7 @@
      "**/ansible/**/*.yaml": "ansible",
      "**/ansible/**/*.sops.yaml": "yaml",
      "**/ansible/**/inventory/**/*.yaml": "yaml",
-    "**/kubernetes/**/*.sops.toml": "plaintext",
-    "*.hujson": "jsonc"
+      "**/kubernetes/**/*.sops.toml": "plaintext"
  },
  "material-icon-theme.folders.associations": {
      ".taskfiles": "utils",
@ -21,21 +20,13 @@
      "kube-system": "kubernetes",
      "monitoring": "event",
      "networking": "connection",
-    "rook-ceph": "dump"
+      "rook-ceph": "dump",
  },
  "yaml.schemaStore.enable": true,
  "yaml.schemas": {
    "ansible": "ansible/**/*.yaml",
    "kubernetes": "kubernetes/**/*.yaml"
  },
-  "json.schemas": [
-    {
-      "fileMatch": ["*.hujson"],
-      "schema": {
-        "allowTrailingCommas": true
-      }
-    }
-  ],
  "editor.fontFamily": "FiraCode Nerd Font",
  "editor.fontLigatures": true,
  "editor.bracketPairColorization.enabled": true,
@ -44,7 +35,9 @@
  "editor.guides.highlightActiveBracketPair": true,
  "editor.hover.delay": 1500,
  "editor.stickyScroll.enabled": false,
-  "editor.rulers": [100],
+  "editor.rulers": [
+    100
+  ],
  "explorer.autoReveal": false,
  "files.trimTrailingWhitespace": true,
  "ansible.python.interpreterPath": "/usr/bin/python3",
@ -53,5 +46,5 @@
  "prettier.quoteProps": "preserve",
  "[jsonc]": {
    "editor.defaultFormatter": "esbenp.prettier-vscode"
-  }
+  },
 }
--- a/kubernetes/apps/ai/ollama/app/helmrelease.yaml
+++ b/kubernetes/apps/ai/ollama/app/helmrelease.yaml
@ -35,7 +35,7 @@ spec:
          app:
            image:
              repository: docker.io/ollama/ollama
-              tag: 0.4.2
+              tag: 0.4.1
            env:
              - name: OLLAMA_HOST
                value: 0.0.0.0
--- a/kubernetes/apps/ai/open-webui/app/helmrelease.yaml
+++ b/kubernetes/apps/ai/open-webui/app/helmrelease.yaml
@ -33,7 +33,7 @@ spec:
          app:
            image:
              repository: ghcr.io/open-webui/open-webui
-              tag: v0.4.0
+              tag: 0.3.35
            env:
              - name: OLLAMA_BASE_URL
                value: http://ollama.ai.svc.cluster.local:11434
--- a/kubernetes/apps/anime/jellyfin/app/helmrelease.yaml
+++ b/kubernetes/apps/anime/jellyfin/app/helmrelease.yaml
@ -40,7 +40,7 @@ spec:
          app:
            image:
              repository: ghcr.io/jellyfin/jellyfin
-              tag: 10.10.3@sha256:17c3a8d9dddb97789b5f37112840ebf96566442c14d4754193a6c2eb154bc221
+              tag: 10.10.1@sha256:12b7aa2c8086e5566badc35370fab41b8cc8774dc3a80b07a1d6eb14f282b816
            env:
              DOTNET_SYSTEM_IO_DISABLEFILELOCKING: "true"
              JELLYFIN_FFmpeg__probesize: 50000000
--- a/kubernetes/apps/anime/jellyseerr/app/helmrelease.yaml
+++ b/kubernetes/apps/anime/jellyseerr/app/helmrelease.yaml
@ -36,7 +36,7 @@ spec:
          app:
            image:
              repository: fallenbagel/jellyseerr
-              tag: 2.1.0
+              tag: 2.0.1
            env:
              TZ: America/Chicago
              LOG_LEVEL: "info"
--- a/kubernetes/apps/anime/radarr/app/helmrelease.yaml
+++ b/kubernetes/apps/anime/radarr/app/helmrelease.yaml
@ -31,7 +31,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/radarr-develop
-              tag: 5.15.1.9463
+              tag: 5.15.0.9412
            env:
              RADARR__APP__INSTANCENAME: Radarr-Anime
              RADARR__APP__THEME: dark
--- a/kubernetes/apps/anime/sonarr/app/helmrelease.yaml
+++ b/kubernetes/apps/anime/sonarr/app/helmrelease.yaml
@ -31,7 +31,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/sonarr-develop
-              tag: 4.0.10.2656
+              tag: 4.0.10.2624
            env:
              SONARR__APP__INSTANCENAME: Sonarr-Anime
              SONARR__APP__THEME: dark
--- a/kubernetes/apps/ci-runners/forgejo/app/helmrelease.yaml
+++ b/kubernetes/apps/ci-runners/forgejo/app/helmrelease.yaml
@ -30,7 +30,7 @@ spec:
          runner-register:
            image:
              repository: code.forgejo.org/forgejo/runner
-              tag: 5.0.0
+              tag: 4.0.1
            command:
              - "forgejo-runner"
              - "register"
@ -72,7 +72,7 @@ spec:
          app:
            image:
              repository: code.forgejo.org/forgejo/runner
-              tag: 5.0.0
+              tag: 4.0.1
            command:
              - "sh"
              - "-c"
--- a/kubernetes/apps/database/dragonfly/app/helmrelease.yaml
+++ b/kubernetes/apps/database/dragonfly/app/helmrelease.yaml
@ -30,7 +30,7 @@ spec:
          app:
            image:
              repository: ghcr.io/dragonflydb/operator
-              tag: v1.1.8
+              tag: v1.1.7
            command: ["/manager"]
            args:
              - --health-probe-bind-address=:8081
--- a/kubernetes/apps/database/dragonfly/app/kustomization.yaml
+++ b/kubernetes/apps/database/dragonfly/app/kustomization.yaml
@ -4,6 +4,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  # renovate: datasource=github-releases depName=dragonflydb/dragonfly-operator
-  - https://raw.githubusercontent.com/dragonflydb/dragonfly-operator/v1.1.8/manifests/crd.yaml
+  - https://raw.githubusercontent.com/dragonflydb/dragonfly-operator/v1.1.7/manifests/crd.yaml
  - ./helmrelease.yaml
  - ./rbac.yaml
--- a/kubernetes/apps/database/dragonfly/cluster/dragonfly.yaml
+++ b/kubernetes/apps/database/dragonfly/cluster/dragonfly.yaml
@ -5,7 +5,7 @@ kind: Dragonfly
 metadata:
  name: dragonfly
 spec:
-  image: ghcr.io/dragonflydb/dragonfly:v1.25.1
+  image: ghcr.io/dragonflydb/dragonfly:v1.24.0
  replicas: 3
  env:
    - name: MAX_MEMORY
--- a/kubernetes/apps/database/emqx/cluster/cluster.yaml
+++ b/kubernetes/apps/database/emqx/cluster/cluster.yaml
@ -5,7 +5,7 @@ kind: EMQX
 metadata:
  name: emqx
 spec:
-  image: public.ecr.aws/emqx/emqx:5.8.2
+  image: public.ecr.aws/emqx/emqx:5.8.1
  config:
    mode: Merge
  coreTemplate:
--- a/kubernetes/apps/default/autobrr/app/helmrelease.yaml
+++ b/kubernetes/apps/default/autobrr/app/helmrelease.yaml
@ -31,7 +31,7 @@ spec:
          app:
            image:
              repository: ghcr.io/autobrr/autobrr
-              tag: v1.50.0@sha256:6a6f23570ab6b418318ab12bf2558712714e2f243cf18b139afa414f8417e97d
+              tag: v1.49.0@sha256:dc2195ccabf8438a8f8eb0581c5e6d2a40c061754e57552bc4f67f1b20a71970
            env:
              AUTOBRR__CHECK_FOR_UPDATES: "false"
              AUTOBRR__HOST: 0.0.0.0
--- a/kubernetes/apps/default/home-assistant/app/helmrelease.yaml
+++ b/kubernetes/apps/default/home-assistant/app/helmrelease.yaml
@ -36,7 +36,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/home-assistant
-              tag: 2024.11.2@sha256:58df3d1169fb02ef2fb6f6cb2f2423abeb2142f89f3c0fd447cc983d63825c56
+              tag: 2024.11.1@sha256:a3dd7577c28771702b21f817ad86600056467c2c7f45d261a1e7241910ddc2e2
            env:
              TZ: America/Chicago
            envFrom:
@ -54,7 +54,7 @@ spec:
          code-server:
            image:
              repository: ghcr.io/coder/code-server
-              tag: 4.95.3@sha256:6d74583d68179cbb6ddadc2518b450d2ac3eaec2d342474fe1941e03371cd2cf
+              tag: 4.95.1@sha256:d9bc7797d997e1b199e333676732e075bac4bae276dc0fe1baece2e313edfa09
            args: [
              "--auth", "none",
              "--user-data-dir", "/config/.vscode",
--- a/kubernetes/apps/default/linkwarden/app/helmrelease.yaml
+++ b/kubernetes/apps/default/linkwarden/app/helmrelease.yaml
@ -31,7 +31,7 @@ spec:
          app:
            image:
              repository: ghcr.io/linkwarden/linkwarden
-              tag: v2.8.3@sha256:7f80a03d688c3e5d9ec6b34f5b65cd861ff8c9eb08d12932dc8fc7482991f238
+              tag: v2.7.1@sha256:bbd22798ee726184d4571ea4f4d831d57475c86c4965c2bb1c3c2d3de88c728a
            env:
              TIMEZONE: "America/Chicago"
              NEXTAUTH_URL: "https://{{ .Release.Name }}.jahanson.tech/api/v1/auth"
--- a/kubernetes/apps/default/plex/app/helmrelease.yaml
+++ b/kubernetes/apps/default/plex/app/helmrelease.yaml
@ -38,7 +38,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/plex
-              tag: 1.41.2.9200-c6bbc1b53@sha256:47c6f3d85f4e739210860934a0bb24126170fa2f6a602fb909467f17a035c311
+              tag: 1.41.1.9057-af5eaea7a@sha256:5926b77196bb7c9f75b52f431d0483abea0fef1f576b7201592b385449201456
            env:
              TZ: America/Chicago
              PLEX_ADVERTISE_URL: https://plex.hsn.dev:443,http://10.1.1.39:32400
--- a/kubernetes/apps/default/plex/trakt-sync/helmrelease.yaml
+++ b/kubernetes/apps/default/plex/trakt-sync/helmrelease.yaml
@ -33,7 +33,7 @@ spec:
          app:
            image:
              repository: ghcr.io/taxel/plextraktsync
-              tag: 0.32.2
+              tag: 0.32.1
            args:
              - sync
            env:
--- a/kubernetes/apps/default/prowlarr/app/helmrelease.yaml
+++ b/kubernetes/apps/default/prowlarr/app/helmrelease.yaml
@ -31,7 +31,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/prowlarr-develop
-              tag: 1.26.1.4844@sha256:dd6ab1a0c8f2d780b990f1034f2da6ffb0b4d3e3ca6042b656f691f06d4c9397
+              tag: 1.26.0.4833@sha256:face4aa669a4eb68b041dcf73ed4848cfe8f673826ef3032398a5e267eb1eac0
            env:
              # Ref: https://github.com/Radarr/Radarr/issues/7030#issuecomment-1039689518
              # Ref: https://github.com/dotnet/runtime/issues/9336
--- a/kubernetes/apps/default/radarr/app/helmrelease.yaml
+++ b/kubernetes/apps/default/radarr/app/helmrelease.yaml
@ -31,7 +31,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/radarr-develop
-              tag: 5.15.1.9463
+              tag: 5.15.0.9412
            env:
              RADARR__APP__INSTANCENAME: Radarr
              RADARR__APP__THEME: dark
--- a/kubernetes/apps/default/recyclarr/app/helmrelease.yaml
+++ b/kubernetes/apps/default/recyclarr/app/helmrelease.yaml
@ -34,7 +34,7 @@ spec:
          app:
            image:
              repository: ghcr.io/recyclarr/recyclarr
-              tag: 7.4.0@sha256:619c3b8920a179f2c578acd0f54e9a068f57c049aff840469eed66e93a4be2cf
+              tag: 7.3.0@sha256:2aaa0205a93171b93a159e4665004ccee1a5aacd60359fb8d7683db0ae7e774b
            env:
              # Ref: https://github.com/Radarr/Radarr/issues/7030#issuecomment-1039689518
              # Ref: https://github.com/dotnet/runtime/issues/9336
--- a/kubernetes/apps/default/redlib/app/helmrelease.yaml
+++ b/kubernetes/apps/default/redlib/app/helmrelease.yaml
@ -38,7 +38,7 @@ spec:
          app:
            image:
              repository: quay.io/redlib/redlib
-              tag: latest@sha256:7ee73f84c5678eb2039ff73e458df46dd4ff307f7ba086b6e666af62ce771c29
+              tag: latest@sha256:42db7afd24d3e55ceccb38f6e91ecfd44d78f381a04848bb4de67dae1836a3e4
            env:
              REDLIB_DEFAULT_SHOW_NSFW: on
              REDLIB_DEFAULT_WIDE: on
--- a/kubernetes/apps/default/scrypted/app/helmrelease.yaml
+++ b/kubernetes/apps/default/scrypted/app/helmrelease.yaml
@ -32,7 +32,7 @@ spec:
          app:
            image:
              repository: ghcr.io/koush/scrypted
-              tag: v0.123.31-jammy-nvidia
+              tag: v0.123.1-jammy-nvidia
            probes:
              liveness:
                enabled: true
--- a/kubernetes/apps/default/sonarr/app/helmrelease.yaml
+++ b/kubernetes/apps/default/sonarr/app/helmrelease.yaml
@ -31,7 +31,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/sonarr-develop
-              tag: 4.0.10.2656
+              tag: 4.0.10.2624
            env:
              SONARR__APP__INSTANCENAME: Sonarr
              SONARR__APP__THEME: dark
--- a/kubernetes/apps/default/stirling-pdf/app/helmrelease.yaml
+++ b/kubernetes/apps/default/stirling-pdf/app/helmrelease.yaml
@ -31,7 +31,7 @@ spec:
          app:
            image:
              repository: ghcr.io/stirling-tools/s-pdf
-              tag: 0.33.1@sha256:d30bf0b2826f0e71cf6fe1b806d918db6d90121ac70b3384569e3b49edf51b3f
+              tag: 0.31.1@sha256:fefbcbdc851bfdb29e172df03d8ac280efdd3eada92b16c46b0fc15932152c6c
              pullPolicy: IfNotPresent
            env:
              TZ: America/Chicago
--- a/kubernetes/apps/default/zwave/app/helmrelease.yaml
+++ b/kubernetes/apps/default/zwave/app/helmrelease.yaml
@ -36,7 +36,7 @@ spec:
          app:
            image:
              repository: ghcr.io/zwave-js/zwave-js-ui
-              tag: 9.27.2@sha256:ac7e66f98c39fe56b6ddb5d2e9cfced8246f74658278b82f6f60bee15206ae73
+              tag: 9.26.0@sha256:dd945bf63aca8c31763d90addf36db1f0d809c232b806d193173c329c03a183f
            env:
              TZ: America/Chicago
              PORT: &port 80
--- a/kubernetes/apps/kube-system/fstrim.yaml
+++ b/kubernetes/apps/kube-system/fstrim.yaml
@ -7,7 +7,7 @@ spec:
  #  nodeName: nenya
  containers:
    - name: fstrim
-      image: ghcr.io/onedr0p/kubanetics:2024.11.0
+      image: ghcr.io/onedr0p/kubanetics:2024.10.7
      securityContext:
        privileged: true
      command: ["/bin/bash", "-c", "while true; do sleep 10; done"]
--- a/kubernetes/apps/kube-system/fstrim/app/helmrelease.yaml
+++ b/kubernetes/apps/kube-system/fstrim/app/helmrelease.yaml
@ -33,7 +33,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/kubanetics
-              tag: 2024.11.0@sha256:12ef95790aeaad654e50d3174fab7250fb4bc60513220c0e53bc71ea4aba99e4
+              tag: 2024.10.7@sha256:f1abb7d38bb45b2eeace4eba1c44763134d6e88c377deb9928f93c5d042ea9af
            env:
              SCRIPT_NAME: fstrim.sh
            probes:
--- a/kubernetes/apps/network/cloudflared/app/helmrelease.yaml
+++ b/kubernetes/apps/network/cloudflared/app/helmrelease.yaml
@ -36,7 +36,7 @@ spec:
          app:
            image:
              repository: docker.io/cloudflare/cloudflared
-              tag: 2024.11.1@sha256:665dda65335e35a782ed9319aa63e8404f88b34d2644d30adf3e91253604ffa0
+              tag: 2024.11.0@sha256:2c78df02e1f23ab19d4c636921f05b9ebec163b887e946f98e22e56254a5540f
            env:
              NO_AUTOUPDATE: "true"
              TUNNEL_CRED_FILE: /etc/cloudflared/creds/credentials.json
--- a/kubernetes/apps/observability/alertmanager/silencer/helmrelease.yaml
+++ b/kubernetes/apps/observability/alertmanager/silencer/helmrelease.yaml
@ -35,7 +35,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/kubanetics
-              tag: 2024.11.0
+              tag: 2024.10.7
            env:
              SCRIPT_NAME: alertmanager-silencer.sh
              ALERTMANAGER_URL: http://alertmanager.observability.svc.cluster.local:9093
--- a/kubernetes/apps/observability/grafana/app/helmrelease.yaml
+++ b/kubernetes/apps/observability/grafana/app/helmrelease.yaml
@ -252,7 +252,7 @@ spec:
        victoria-alert:
          # renovate: depName="VictoriaMetrics - vmalert"
          gnetId: 14950
-          revision: 13
+          revision: 12
          datasource: Prometheus
        victoria-operator:
          # renovate: depName="VictoriaMetrics - operator"
--- a/kubernetes/apps/qbittorrent/cross-seed/app/externalsecret.yaml
+++ b/kubernetes/apps/qbittorrent/cross-seed/app/externalsecret.yaml
@ -35,8 +35,8 @@ spec:
            skipRecheck: true,
            sonarr: ["http://sonarr.default.svc.cluster.local/?apikey={{ .SONARR_API_KEY }}"],
            torrentDir: "/qbittorrent/qBittorrent/BT_backup",
-            torznab: []
-            /* torznab: [
+            // torznab: []
+            torznab: [
                  6,  // ANT
                  8,  // BLU
                  9,  // TL
@ -44,7 +44,6 @@ spec:
                  12, // FNP
                  14, // TD
            ].map(i => `http://prowlarr.default.svc.cluster.local/$${i}/api?apikey={{ .PROWLARR_API_KEY }}`),
-            */
          };
  dataFrom:
    - extract:
--- a/kubernetes/apps/qbittorrent/flood/app/helmrelease.yaml
+++ b/kubernetes/apps/qbittorrent/flood/app/helmrelease.yaml
@ -43,7 +43,7 @@ spec:
          app:
            image:
              repository: jesec/flood
-              tag: master@sha256:7b0f2b863434946260621b037d293130acb9f5d9248071408c641b858ffacccf
+              tag: master@sha256:8a18a3509a6c1557b769873a1ef85dcd5fa4cbce1a939be2c6c87f97eb79de45
            envFrom:
              - secretRef:
                  name: flood-secret
--- a/kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml
+++ b/kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml
@ -34,7 +34,7 @@ spec:
            nameOverride: qbittorrent
            image:
              repository: ghcr.io/onedr0p/qbittorrent-beta
-              tag: 5.0.2@sha256:adfd625f9cc7226eabad8aa117a551d42d5818c914850ef7fa3be60111383107
+              tag: 5.0.1@sha256:684422cab9fe3cba04812cf4207398bb72aa0f0283c92fddecd833648ac3f7bf
            env:
              UMASK: "022"
              QBT_WEBUI_PORT: &port 80
--- a/kubernetes/apps/qbittorrent/qbittorrent/tools/helmrelease.yaml
+++ b/kubernetes/apps/qbittorrent/qbittorrent/tools/helmrelease.yaml
@ -39,7 +39,7 @@ spec:
          tagging: &container
            image:
              repository: ghcr.io/buroa/qbtools
-              tag: v0.19.8@sha256:6d24270a3b4e31bfa8bcfc21ace625a27c9c71f789ef49d8454dacddbf87e123
+              tag: v0.19.7@sha256:ceb38f6794b10a8f1147dbc8a4df24857e0dae72341eaf2d435796937d77ba3a
            env:
              TZ: *timeZone
              POD_NAMESPACE:
--- a/kubernetes/flux/repositories/oci/grafana.yaml
+++ b/kubernetes/flux/repositories/oci/grafana.yaml
@ -12,4 +12,4 @@ spec:
    operation: copy
  url: oci://ghcr.io/grafana/helm-charts/grafana
  ref:
-    tag: 8.6.0
+    tag: 8.5.12
--- a/renovate.json5
+++ b/renovate.json5
@ -23,9 +23,8 @@
      "(^|/)\\.taskfiles/.+\\.ya?ml(?:\\.j2)?$"
    ]
  },
-  "customManagers": [
+  "regexManagers": [
    {
-      "customType": "regex",
      "description": [
        "Process CRD dependencies - Chart and Github Release are the same version"
      ],
@ -36,17 +35,15 @@
      "datasourceTemplate": "helm"
    },
    {
-      "customType": "regex",
      "description": ["Generic Docker image Regex manager"],
      "fileMatch": ["infrastructure/.+\\.ya?ml$", "infrastructure/.+\\.tf$"],
      "matchStrings": [
-        "# renovate: docker-image( versioning=(?<versioning>.*=?))?\\\n .*[:|=] \"?(?<depName>.*?):(?<currentValue>[^\"\\n]*=?)\"?"
+        "# renovate: docker-image( versioning=(?<versioning>.*=?))?\n .*[:|=] \"?(?<depName>.*?):(?<currentValue>[^\"\n]*=?)\"?"
      ],
      "datasourceTemplate": "docker",
      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}"
    },
    {
-      "customType": "regex",
      "description": ["Raw GitHub URL Regex manager"],
      "fileMatch": ["infrastructure/.+\\.ya?ml$", "kubernetes/.+\\.ya?ml$"],
      "matchStrings": [
@ -72,24 +69,24 @@
    {
      "description": "Flux Group",
      "groupName": "Flux",
+      "matchPackagePatterns": ["^flux", "^ghcr.io/fluxcd/"],
      "matchDatasources": ["docker", "github-tags"],
      "versioning": "semver",
      "group": {
        "commitMessageTopic": "{{{groupName}}} group"
      },
-      "separateMinorPatch": true,
-      "matchPackageNames": ["/^flux/", "/^ghcr.io/fluxcd//"]
+      "separateMinorPatch": true
    },
    {
      "description": "Mastodon images",
      "groupName": "Mastodon",
+      "matchPackagePatterns": ["mastodon", "^ghcr.io/mastodon/"],
      "matchDatasources": ["docker", "github-tags"],
      "versioning": "semver",
      "group": {
        "commitMessageTopic": "{{{groupName}}} group"
      },
-      "separateMinorPatch": true,
-      "matchPackageNames": ["/mastodon/", "/^ghcr.io/mastodon//"]
+      "separateMinorPatch": true
    },
    {
      "description": "1Password Connect images",
@ -107,12 +104,12 @@
    {
      "description": "Rook-Ceph image and chart",
      "groupName": "Rook Ceph",
+      "matchPackagePatterns": ["rook.ceph"],
      "matchDatasources": ["docker", "helm"],
      "group": {
        "commitMessageTopic": "{{{groupName}}} group"
      },
-      "separateMinorPatch": true,
-      "matchPackageNames": ["/rook.ceph/"]
+      "separateMinorPatch": true
    },
    {
      "description": "Cilium image and chart",
@ -131,7 +128,10 @@
    {
      "description": "External Snapshotter charts",
      "groupName": "External Snapshotter",
-      "matchPackageNames": ["snapshot-controller", "snapshot-validation-webhook"],
+      "matchPackageNames": [
+        "snapshot-controller",
+        "snapshot-validation-webhook"
+      ],
      "matchDatasources": ["helm"],
      "group": {
        "commitMessageTopic": "{{{groupName}}} group"
@ -141,22 +141,23 @@
    {
      "description": "Thanos image and chart - versions do not match",
      "groupName": "Thanos",
+      "matchPackagePatterns": ["quay.io/thanos/thanos", "thanos"],
      "matchDatasources": ["docker", "github-releases", "helm"],
      "matchUpdateTypes": ["minor", "patch"],
      "group": {
        "commitMessageTopic": "{{{groupName}}} group"
-      },
-      "matchPackageNames": ["/quay.io/thanos/thanos/", "/thanos/"]
+      }
    },
    {
      "description": "Vector image and chart - versions do not match",
      "groupName": "Vector",
+      "matchPackagePatterns": ["vector"],
      "matchDatasources": ["docker", "github-releases", "helm"],
      "matchUpdateTypes": ["minor", "patch"],
      "group": {
        "commitMessageTopic": "{{{groupName}}} group"
-      },
-      "matchPackageNames": ["/vector/"]
      }
+    }
+    // Version strategies
  ]
 }
--- a/shell.nix
+++ b/shell.nix
@ -3,11 +3,6 @@
 pkgs.mkShell {
  # Enable experimental features without having to specify the argument
  NIX_CONFIG = "experimental-features = nix-command flakes";
-  shellHook = ''
-    export TMP=$(mktemp -d "/tmp/nix-shell-XXXXXX")
-    export TEMP=$TMP
-    export TMPDIR=$TMP
-  '';

  nativeBuildInputs = with pkgs; [
    fluxcd