From 22ae5d7d4b430d7dbdd132d04de85709bb9bdcc0 Mon Sep 17 00:00:00 2001
From: chemavx <chemavx@git.chemavx.xyz>
Date: Wed, 15 Apr 2026 08:11:22 +0000
Subject: [PATCH] chore: pin all floating image tags to exact running versions
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- vaultwarden/server:latest → 1.35.4
- redis:alpine → 8.6.2-alpine (authentik)
- homarr-labs/homarr:latest → 1.0.0
- gitea/gitea:latest → 1.25.5
- uptime-kuma:1 → 1.23.17

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 authentik/deployment-authentik-redis.yaml | 2 +-
 gitea/statefulset-gitea.yaml              | 2 +-
 homarr/deployment-homarr.yaml             | 2 +-
 monitoring/deployment-uptime-kuma.yaml    | 2 +-
 vaultwarden/deployment-vaultwarden.yaml   | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/authentik/deployment-authentik-redis.yaml b/authentik/deployment-authentik-redis.yaml
index 2a6d86a..99799e4 100644
--- a/authentik/deployment-authentik-redis.yaml
+++ b/authentik/deployment-authentik-redis.yaml
@@ -33,7 +33,7 @@ spec:
         - '1'
         - --loglevel
         - warning
-        image: redis:alpine
+        image: redis:8.6.2-alpine
         imagePullPolicy: IfNotPresent
         name: redis
         ports:
diff --git a/gitea/statefulset-gitea.yaml b/gitea/statefulset-gitea.yaml
index 7a7220d..2f1afd3 100644
--- a/gitea/statefulset-gitea.yaml
+++ b/gitea/statefulset-gitea.yaml
@@ -41,7 +41,7 @@ spec:
           value: '1000'
         - name: USER_GID
           value: '1000'
-        image: gitea/gitea:latest
+        image: gitea/gitea:1.25.5
         imagePullPolicy: Always
         name: gitea
         ports:
diff --git a/homarr/deployment-homarr.yaml b/homarr/deployment-homarr.yaml
index 5cb9419..b016378 100644
--- a/homarr/deployment-homarr.yaml
+++ b/homarr/deployment-homarr.yaml
@@ -45,7 +45,7 @@ spec:
           value: Authentik
         - name: AUTH_OIDC_AUTO_LOGIN
           value: 'true'
-        image: ghcr.io/homarr-labs/homarr:latest
+        image: ghcr.io/homarr-labs/homarr:1.0.0
         imagePullPolicy: Always
         name: homarr
         ports:
diff --git a/monitoring/deployment-uptime-kuma.yaml b/monitoring/deployment-uptime-kuma.yaml
index 5a0d0e2..e14baa2 100644
--- a/monitoring/deployment-uptime-kuma.yaml
+++ b/monitoring/deployment-uptime-kuma.yaml
@@ -28,7 +28,7 @@ spec:
         app: uptime-kuma
     spec:
       containers:
-      - image: louislam/uptime-kuma:1
+      - image: louislam/uptime-kuma:1.23.17
         imagePullPolicy: IfNotPresent
         name: uptime-kuma
         ports:
diff --git a/vaultwarden/deployment-vaultwarden.yaml b/vaultwarden/deployment-vaultwarden.yaml
index eb92d61..3adccad 100644
--- a/vaultwarden/deployment-vaultwarden.yaml
+++ b/vaultwarden/deployment-vaultwarden.yaml
@@ -34,7 +34,7 @@ spec:
         envFrom:
         - secretRef:
             name: vaultwarden-secret
-        image: vaultwarden/server:latest
+        image: vaultwarden/server:1.35.4
         imagePullPolicy: Always
         name: vaultwarden
         ports: