build(deps): update all non-major dependencies

.github/workflows/build-main.yml

@@ -47,7 +47,7 @@ jobs:
       - name: Release
         id: release
         # yamllint disable-line rule:line-length
-        uses: cycjimmy/semantic-release-action@61680d0e9b02ff86f5648ade99e01be17f0260a4 # v4.0.0
+        uses: cycjimmy/semantic-release-action@cb425203a562475bca039ba4dbf90c7f9ac790f4 # v4.1.0
         env:
           GITHUB_TOKEN: ${{ secrets.SEMANTIC_RELEASE_GITHUB_TOKEN }}
           GIT_AUTHOR_NAME: aki-bot[bot]

.github/workflows/deploy.yml

@@ -38,7 +38,7 @@ concurrency:
 
 env:
   # renovate: datasource=pypi depName=ansible-core
-  ANSIBLE_CORE_VERSION: 2.16.3
+  ANSIBLE_CORE_VERSION: 2.16.5
 
   # renovate: datasource=pypi depName=netaddr
   NETADDR_VERSION: 0.10.1
@@ -58,10 +58,10 @@ jobs:
 
       - name: Set up Python
         # yamllint disable-line rule:line-length
-        uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
+        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
         with:
           # renovate: datasource=docker depName=python versioning=docker
-          python-version: 3.12.1
+          python-version: 3.12.2
 
       - name: Install ansible playbook packages
         run: >
@@ -71,7 +71,7 @@ jobs:
 
       - name: Run playbook
         # yamllint disable-line rule:line-length
-        uses: dawidd6/action-ansible-playbook@00765f79cffbf77b8bef397c00d492d8241502be # v2.7.0
+        uses: dawidd6/action-ansible-playbook@c97d71562fcba83cc1ea0602d5a77013427f7571 # v2.8.0
         with:
           directory: ansible
           playbook: apply-configuration.yml

.github/workflows/lint.yml

@@ -28,16 +28,16 @@ jobs:
         uses: extractions/setup-just@dd310ad5a97d8e7b41793f8ef055398d51ad4de6 # v2.0.0
         with:
           # renovate: datasource=crate depName=just
-          just-version: 1.23.0
+          just-version: 1.25.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install Python
         # yamllint disable-line rule:line-length
-        uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
+        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
         with:
           # renovate: datasource=docker depName=python versioning=docker
-          python-version: 3.12.1
+          python-version: 3.12.2
           cache: pip
 
       - name: Install dependencies

.github/workflows/test.yml

@@ -26,24 +26,24 @@ jobs:
         uses: extractions/setup-just@dd310ad5a97d8e7b41793f8ef055398d51ad4de6 # v2.0.0
         with:
           # renovate: datasource=crate depName=just
-          just-version: 1.23.0
+          just-version: 1.25.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install Python
         # yamllint disable-line rule:line-length
-        uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
+        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
         with:
           # renovate: datasource=docker depName=python versioning=docker
-          python-version: 3.12.1
+          python-version: 3.12.2
           cache: pip
 
       - name: Install dependencies
         run: just install-dependencies
 
       - name: Cache Vagrant boxes
         # yamllint disable-line rule:line-length
-        uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: ~/.vagrant.d/boxes
           key: "${{ runner.os }}-\

.github/workflows/update-dependencies.yml

@@ -31,9 +31,9 @@ jobs:
 
       - name: Update dependencies
         # yamllint disable-line rule:line-length
-        uses: renovatebot/github-action@42c1d3cb1d1ca891765626ba71cdff5e757258de # v40.0.2
+        uses: renovatebot/github-action@7d358366277001f3316d7fa54ff49a81c0158948 # v40.1.7
         with:
           # renovate: datasource=docker depName=ghcr.io/renovatebot/renovate
-          renovate-version: 37.168.2
+          renovate-version: 37.278
           configurationFile: renovate.json5
           token: x-access-token:${{ steps.get-token.outputs.token }}

.tool-versions

@@ -1 +1 @@
-python 3.12.1
+python 3.12.2

ansible/requirements.txt

@@ -1,4 +1,4 @@
-ansible-core==2.16.3
+ansible-core==2.16.5
 molecule==5.1.0
 molecule-plugins[vagrant]==23.5.0
 netaddr==0.10.1

ansible/requirements.yml

@@ -5,14 +5,9 @@ collections:
   - name: ansible.utils
     version: 3.1.0
   - name: community.general
-    version: 8.3.0
-  # We temporarily need to specify the bellow git commit hash
-  # due to a fix that was committed but not released yet.
-  # See: https://github.com/dev-sec/ansible-collection-hardening/pull/718
-  - name: devsec-hardening
-    type: git
-    source: https://github.com/dev-sec/ansible-collection-hardening
-    version: "a15159d0726d509baa066698021d9470c97a8768"
+    version: 8.5.0
+  - name: devsec.hardening
+    version: 9.0.1
 
 roles:
   - name: gantsign.antigen

ansible/roles/all/tasks/install-utilities.yml

@@ -267,7 +267,7 @@
           "https://github.com/ajeetdsouza/zoxide/releases/download/\
           {{ zoxide_version }}/\
           zoxide_\
-          {{ zoxide_version | regex_replace('v(.+)', '\\1') }}_\
+          {{ zoxide_version | regex_replace('v(.+)', '\\1') }}-1_\
           amd64.deb"
       register: result
       retries: 10

ansible/roles/all/vars/main.yml

@@ -15,7 +15,7 @@ curlie_architecture: >-
   {{ architecture_to_curlie_architecture[ansible_architecture] }}
 
 # renovate: datasource=github-releases depName=dandavison/delta
-delta_version: 0.16.5
+delta_version: 0.17.0
 architecture_to_delta_architecture:
   x86_64: amd64
   armv7l: armhf
@@ -60,23 +60,23 @@ lazydocker_architecture: >-
   {{ architecture_to_lazydocker_architecture[ansible_architecture] }}
 
 # renovate: datasource=github-releases depName=jesseduffield/lazygit
-lazygit_version: v0.40.2
+lazygit_version: v0.41.0
 architecture_to_lazygit_architecture:
   x86_64: x86_64
   armv7l: armv6
 lazygit_architecture: >-
   {{ architecture_to_lazygit_architecture[ansible_architecture] }}
 
 # renovate: datasource=github-releases depName=jdx/mise
-mise_version: v2024.2.4
+mise_version: v2024.3.11
 architecture_to_mise_architecture:
   x86_64: x64
   armv7l: armv7
 mise_architecture: >-
   {{ architecture_to_mise_architecture[ansible_architecture] }}
 
 # renovate: datasource=github-releases depName=ajeetdsouza/zoxide
-zoxide_version: v0.9.2
+zoxide_version: v0.9.4
 architecture_to_zoxide_architecture:
   x86_64: amd64
   armv7l: armv7

ansible/roles/servers/templates/server-nas/docker/apps/dashboard/compose.yml.j2

@@ -1,7 +1,7 @@
 ---
 services:
   heimdall:
-    image: lscr.io/linuxserver/heimdall:2.5.8@sha256:ddcff39e55141568466a5365485d441a910df281538312813b1539fa8b7c0940 # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/heimdall:2.6.1@sha256:162b62c2341b8892e7a5371f39e6de1c16aed4517d63f372c7524243ec14a1c7 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 

ansible/roles/servers/templates/server-nas/docker/apps/home/compose.yml.j2

@@ -1,7 +1,7 @@
 ---
 services:
   home-assistant:
-    image: lscr.io/linuxserver/homeassistant:2024.1.6@sha256:82cb911b6677af0ca4e2e85e6ef427d1bcc1e9e34865a8f29dfd6fa37e975eff # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/homeassistant:2024.3.3@sha256:e091ceb4f6056fc9a7643fee3707c6249bf690b591c2247c3ce6ac44d90c19eb # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -36,7 +36,7 @@ services:
     restart: always
 
   node-red:
-    image: nodered/node-red:3.1.3@sha256:75e48924159f6c6bf4221017069a8b496cab8d0b21d3d0b1fcaf058af8294865 # editorconfig-checker-disable-line
+    image: nodered/node-red:3.1.8@sha256:c2990ca2ed6ca3d36cc558f25c21e261ca966b3dc7194fc4df83352573cfb5f9 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
     volumes:

ansible/roles/servers/templates/server-nas/docker/apps/media/compose.yml.j2

@@ -1,7 +1,7 @@
 ---
 services:
   gluetun:
-    image: qmcgaw/gluetun:v3.37.0@sha256:ba9688ff9abaf73bbc0b257be547b51a097ca74324fedddeeb709732c2692eef # editorconfig-checker-disable-line
+    image: qmcgaw/gluetun:v3.38.0@sha256:5522794f5cce6d84bc7f06b1e3a3b836ede9100c64aec94543cb503bb2ecb72f # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -38,7 +38,7 @@ services:
     restart: always
 
   plex:
-    image: lscr.io/linuxserver/plex:1.32.8@sha256:e495036368c2540e84ce8015209b6ee2fe9dc88f66849c9ffcc1dffb182ac8d7 # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/plex:1.40.1@sha256:34780a5be3a38bc83458082e822f259b28608ad8c75d45654c86a3edeab768ea # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -63,7 +63,7 @@ services:
     restart: always
 
   prowlarr:
-    image: lscr.io/linuxserver/prowlarr:1.12.2@sha256:86c5ba0a90a08dc28930a2b26b199aa924cda987acf035a8d73e4a110e0c9b82 # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/prowlarr:1.15.0@sha256:575327a71a9f00284246623a237d5079f3dc53db05805373938dd7534987bf26 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -81,7 +81,7 @@ services:
     restart: always
 
   qbittorrent:
-    image: lscr.io/linuxserver/qbittorrent:4.6.3@sha256:5b3a3a3de1df989eac72fa5d7179233dde489a2c2140eb6a34cdf07441efd352 # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/qbittorrent:4.6.4@sha256:bd87153a3c9251a6bee08bea27a95d47758f9bde788bdd7109fd5b3a5d9a87b6 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -103,7 +103,7 @@ services:
     restart: always
 
   radarr:
-    image: lscr.io/linuxserver/radarr:5.2.6@sha256:16c446007ee5e34283073abf3642ae9ef3da4a2124a21d8459fff2828bc84c35 # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/radarr:5.3.6@sha256:6c10e1133bc42649de220fa9e04e4c7bbe5ba4161a275ac1494f2bfd45417507 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -124,7 +124,7 @@ services:
     restart: always
 
   sabnzbd:
-    image: lscr.io/linuxserver/sabnzbd:4.2.2@sha256:0048320fe830e5c6a06167ac57625b7777f7d1dff18c404181bd2bc2e6914e8f # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/sabnzbd:4.2.3@sha256:7f707fa297fa0151857d5899dbbda02130da7c85b26454f563caf1a3f7eccff2 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -145,7 +145,7 @@ services:
     restart: always
 
   sonarr:
-    image: lscr.io/linuxserver/sonarr:4.0.1@sha256:e097383307467ba9af18bd5694d52cde4fbba1ed14142e32cdfc6b330b0a0952 # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/sonarr:4.0.2@sha256:24b7f3f1c9ed065adc3ca7c5440944560b010a38e9bfcb7c1d8e9c965cbc8ea8 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 

ansible/roles/servers/templates/server-nas/docker/apps/monitoring/compose.yml.j2

@@ -1,7 +1,7 @@
 ---
 services:
   netdata:
-    image: netdata/netdata:v1.44.1@sha256:4363d046c878507036b977e9716828bffc26913b1b3f977e83015d370ffc154a # editorconfig-checker-disable-line
+    image: netdata/netdata:v1.45.1@sha256:fb23c1e6aac642f218f6cc69d01b9981553fb5b9278656bb49804f384f22b4c9 # editorconfig-checker-disable-line
     hostname: "netdata-{{ inventory_hostname }}"
     environment:
       TZ: "{{ timezone }}"
@@ -35,7 +35,7 @@ services:
     restart: always
 
   prometheus:
-    image: prom/prometheus:v2.49.1@sha256:beb5e30ffba08d9ae8a7961b9a2145fc8af6296ff2a4f463df7cd722fcbfc789 # editorconfig-checker-disable-line
+    image: prom/prometheus:v2.51.1@sha256:dec2018ae55885fed717f25c289b8c9cff0bf5fbb9e619fb49b6161ac493c016 # editorconfig-checker-disable-line
     user: "{{ ansible_admin_user_uid }}:{{ ansible_admin_user_gid }}"
     environment:
       TZ: "{{ timezone }}"
@@ -47,7 +47,7 @@ services:
     restart: always
 
   unpoller:
-    image: ghcr.io/unpoller/unpoller:v2.9.5@sha256:486a63339969fd5207697502e29e4875f4bf7d7ef5c558188b192f2f88fdd3d6 # editorconfig-checker-disable-line
+    image: ghcr.io/unpoller/unpoller:v2.10.0@sha256:c2ac3a1415efeec0ad2a191786e570348748570bbdd414d0a56ef663ee09dca4 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
     volumes:
@@ -57,7 +57,7 @@ services:
     restart: always
 
   grafana:
-    image: grafana/grafana-oss:10.3.1@sha256:7567a7c70a3c1d75aeeedc968d1304174a16651e55a60d1fb132a05e1e63a054 # editorconfig-checker-disable-line
+    image: grafana/grafana-oss:10.4.1@sha256:753bbb971071480d6630d3aa0d55345188c02f39456664f67c1ea443593638d0 # editorconfig-checker-disable-line
     user: "{{ ansible_admin_user_uid }}:{{ ansible_admin_user_gid }}"
     environment:
       TZ: "{{ timezone }}"
@@ -99,7 +99,7 @@ services:
     restart: always
 
   mongodb:
-    image: mongo:4.4.28@sha256:7a272834036ddc9c7379c2d646b6a6c23c985e28c280f1340b3f611c762f9d83 # editorconfig-checker-disable-line
+    image: mongo:4.4.29@sha256:ce3d0eade688a2299e9e20454efc561a6fc8de1cbde5abb0f50feadfe758037b # editorconfig-checker-disable-line
     user: "{{ ansible_admin_user_uid }}:{{ ansible_admin_user_gid }}"
     environment:
       TZ: "{{ timezone }}"

ansible/roles/servers/templates/server-nas/docker/apps/portainer/compose.yml.j2

@@ -1,7 +1,7 @@
 ---
 services:
   portainer:
-    image: portainer/portainer-ce:2.19.4@sha256:908d04d20e86f07a50b0f1a029a111b89aa3089b7fc7fdf68ec1c71b025f36cd # editorconfig-checker-disable-line
+    image: portainer/portainer-ce:2.20.0@sha256:c9dbbb653515675ad365b2d17ac85f8816840f7a3095e9db68fc807a348ea535 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
     volumes:

ansible/roles/servers/templates/server-pi/docker/apps/dns/compose.yml.j2

@@ -3,7 +3,7 @@ name: dns
 
 services:
   pihole:
-    image: pihole/pihole:2024.01.0@sha256:d095ec4982b6d9d6ccd95e7cf9c6c731d073d3ec4705de1d3cc1bfa4f3633e03 # editorconfig-checker-disable-line
+    image: pihole/pihole:2024.03.1@sha256:e3bb67ee283afee5fffd1d3ea8b95c4a2bf3aa445f955d4e5f3947d72904d580 # editorconfig-checker-disable-line
     hostname: dns-primary
     environment:
       TZ: "{{ timezone }}"

ansible/roles/servers/templates/server-pi/docker/apps/monitoring/compose.yml.j2

@@ -3,7 +3,7 @@ name: monitoring
 
 services:
   netdata:
-    image: netdata/netdata:v1.44.1@sha256:4363d046c878507036b977e9716828bffc26913b1b3f977e83015d370ffc154a # editorconfig-checker-disable-line
+    image: netdata/netdata:v1.45.1@sha256:fb23c1e6aac642f218f6cc69d01b9981553fb5b9278656bb49804f384f22b4c9 # editorconfig-checker-disable-line
     hostname: "netdata-{{ inventory_hostname }}"
     environment:
       TZ: "{{ timezone }}"

ansible/roles/servers/templates/server-pi/docker/apps/portainer/compose.yml.j2

@@ -3,7 +3,7 @@ name: portainer
 
 services:
   portainer:
-    image: portainer/portainer-ce:2.19.4@sha256:908d04d20e86f07a50b0f1a029a111b89aa3089b7fc7fdf68ec1c71b025f36cd # editorconfig-checker-disable-line
+    image: portainer/portainer-ce:2.20.0@sha256:c9dbbb653515675ad365b2d17ac85f8816840f7a3095e9db68fc807a348ea535 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
     volumes:

ansible/roles/workstations/vars/main.yml

@@ -1,6 +1,6 @@
 ---
 # renovate: datasource=github-releases depName=cli/cli
-github_cli_version: v2.43.1
+github_cli_version: v2.46.0
 architecture_to_github_cli_architecture:
   x86_64: amd64
   armv7l: armv6