feat(container): update image ghcr.io/home-operations/tuppr (0.1.40 → 0.4.7)

[ixxel-bot]

This PR contains the following updates:

Package	Update	Change
ghcr.io/home-operations/tuppr	minor	0.1.40 → 0.4.7

---

Release Notes

home-operations/tuppr (ghcr.io/home-operations/tuppr)

v0.4.7

Compare Source

Features

• emit health check events on upgrade CRs (#​481) (3347d78)

Bug Fixes

• container: update image ghcr.io/siderolabs/installer (v1.13.7 → v1.13.8) (#​476) (6d851e0)
• talosupgrade: derive factory image from runtime metadata (#​480) (3605350)
• talosupgrade: fail off-target jobs before reboot timeout (#​477) (6c2f92b)

Documentation

• add AGENTS.md with Go conventions (#​468) (f5fb735)

Continuous Integration

• github-action: Update action docker/login-action (v4.5.2 → v4.6.0) (#​467) (6e9c356)
• github-action: Update action home-operations/.github/actions/workflow-lint (v1.0.2 → v1.0.3) (#​474) (64de4a7)
• update shared actions and use self-repository syntax (#​471) (0dc51af)
• wire govulncheck into mise and CI (#​473) (a6481f7)

Miscellaneous Chores

• mise: prune lockfile to used platforms (#​472) (d6813ca)
• mise: Update tool zizmor (1.28.0 → 1.29.0) (#​470) (481314b)

v0.4.6

Compare Source

Bug Fixes

• status: keep conditions and history truthful (#​466) (2f85931)

Miscellaneous Chores

• release-please: standardize the release pull request title pattern (#​464) (14e1955)

v0.4.5

Compare Source

Features

• prepull: fail stalled pulls fast, surface and back off failure streaks (#​462) (c15b955)

Miscellaneous Chores

• deps: lock file maintenance (pep621) (#​461) (097c160)

v0.4.4

Compare Source

Features

• go: update module google.golang.org/grpc (v1.82.1 → v1.83.0) (#​446) (f9419a6)
• support Talos 1.14 upgrades end to end (#​453) (087388d)

Bug Fixes

• ci: key the lint cache on the toolchain and drop the prefix fallback (#​448) (ef37fdb)
• go: update module github.com/google/go-containerregistry (v0.21.7 → v0.21.8) (#​454) (17ef959)

Continuous Integration

• e2e: adopt talosctl-cluster-action v0.1.6 (#​452) (7fd237f)
• github-action: Update action actions/stale (v10.4.0 → v11.0.0) (#​450) (70d3717)
• github-action: Update action docker/github-builder (v1.14.0 → v1.15.0) (#​447) (10b33dd)
• github-action: Update action docker/login-action (v4.5.1 → v4.5.2) (#​451) (fe223f7)

Miscellaneous Chores

• mise: Update tool aqua:astral-sh/uv (0.12.0 → 0.12.1) (#​456) (5c02a0d)

v0.4.3

Compare Source

Features

• pre-pull the Talos installer image before starting a run (#​445) (224074f)

Bug Fixes

• go: update module github.com/netresearch/go-cron (v0.15.0 → v0.15.1) (#​441) (dcb45da)

Continuous Integration

• build the e2e image once and hand it to every leg (#​442) (562e9ac)
• github-action: Update action jdx/mise-action (v4.2.2 → v4.2.3) (#​437) (0e13632)

Miscellaneous Chores

• mise: Update tool aqua:astral-sh/uv (0.11.32 → 0.12.0) (#​440) (caf8759)
• standardize release-please changelog sections (#​438) (0d719dd)

v0.4.1

Compare Source

Features

• talosupgrade: lease-based Alertmanager silence during upgrade runs (#​416) (00a8ffd)

Bug Fixes

• container: update image ghcr.io/siderolabs/kubelet (v1.36.2 → v1.36.3) (#​411) (1c2258f)
• deps: update kubernetes monorepo (v0.36.2 → v0.36.3) (#​408) (69a12e0)
• helm: stamp Chart.yaml version on release (#​414) (a769302)
• release: use the generic updater for Chart.yaml stamping (#​415) (a64bd11)
• talos: handle unreachable nodes without stack-trace log spam (#​413) (313dec8)

Miscellaneous Chores

• mise: Update tool kubectl (1.36.2 → 1.36.3) (#​407) (38a7513)

v0.4.0

Compare Source

⚠ BREAKING CHANGES

• notification: apprise-go backend + customizable templates (#​404)

Features

• notification: apprise-go backend + customizable templates (#​404) (171a7bf)

Documentation

• add MkDocs Material site and trim README (#​405) (a8fce64)

Miscellaneous Chores

• mise: Update tool aqua:astral-sh/uv (0.11.29 → 0.11.31) (#​406) (95e4955)
• mise: Update tool oxfmt (0.59.0 → 0.60.0) (#​403) (f171506)
• mise: Update tool zizmor (1.27.0 → 1.28.0) (#​401) (f333b5e)

v0.3.3

Compare Source

Features

• deps: update module github.com/prometheus/client_golang (v1.23.2 → v1.24.0) (#​391) (5e00779)

Bug Fixes

• container: update talos group (v1.13.6 → v1.13.7) (#​399) (ed62a17)
• deps: update module github.com/go-logr/logr (v1.4.3 → v1.4.4) (#​394) (9c2c9d9)

Styles

• match .github editorconfig and reflow markdown yaml to 2-space (#​393) (e067556)

Miscellaneous Chores

• mise: Update tool cosign (3.1.1 → 3.1.2) (#​388) (3a6a917)
• renovate: group Talos updates (#​398) (facac29)

v0.3.2

Compare Source

Bug Fixes

• deps: update module google.golang.org/grpc (v1.82.0 → v1.82.1) (#​384) (8830b15)
• talosupgrade: let schematic annotation override runtime schematic (#​386) (943234f)

v0.3.1

Compare Source

Bug Fixes

• container: update image ghcr.io/siderolabs/installer (v1.13.5 → v1.13.6) (#​377) (48bd359)
• deps: update k8s.io/utils digest (be93311 → cf1189d) (#​371) (15667e7)
• deps: update module github.com/google/cel-go (v0.29.1 → v0.29.2) (#​373) (953a456)
• deps: update module github.com/siderolabs/talos/pkg/machinery (v1.13.5 → v1.13.6) (#​378) (9b7f738)

Miscellaneous Chores

• mise: Update tool go (1.26.4 → 1.26.5) (#​375) (a3f45ce)
• mise: Update tool helm (4.2.2 → 4.2.3) (#​380) (bcd1f05)
• mise: Update tool lefthook (2.1.9 → 2.1.10) (#​374) (c5ac0fa)
• mise: Update tool opentofu (1.12.3 → 1.12.4) (#​381) (b6ef532)
• mise: Update tool oxfmt (0.57.0 → 0.58.0) (#​370) (dec826d)
• mise: Update tool oxfmt (0.58.0 → 0.59.0) (#​382) (94d3c0c)
• mise: Update tool talosctl (1.13.5 → 1.13.6) (#​376) (bceeead)
• mise: Update tool zizmor (1.26.1 → 1.27.0) (#​383) (fad0ccf)

v0.3.0

Compare Source

⚠ BREAKING CHANGES

• single always-on operational port; drop metrics disable/secure options (#​369)

Features

• deps: update module github.com/google/cel-go (v0.28.1 → v0.29.1) (#​367) (c7ae4bf)
• deps: update module google.golang.org/grpc (v1.81.1 → v1.82.0) (#​365) (565bfd1)
• single always-on operational port; drop metrics disable/secure options (#​369) (6b13df8)

Bug Fixes

• deps: update module github.com/cosi-project/runtime (v1.16.1 → v1.16.2) (#​366) (b642c57)

v0.2.9

Compare Source

Bug Fixes

• talos: gate --drain flag behind talosctl >= 1.13 (4d69b9f)

Miscellaneous Chores

• renovate: inherit shared toolchain + chart-docs presets (#​361) (35cb0dd)

v0.2.8

Compare Source

Features

• add waitForVolumeDetach policy to wait for CSI detach before reboot (#​360) (9b2e3cf)
• container: update image ghcr.io/siderolabs/installer (v1.11.0 → v1.13.4) (#​354) (0fc9cb8)
• container: update image ghcr.io/siderolabs/kubelet (v1.34.0 → v1.36.2) (#​355) (9118404)
• deps: update module github.com/onsi/ginkgo/v2 (v2.30.0 → v2.32.0) (#​337) (8269165)
• deps: update module github.com/onsi/gomega (v1.41.0 → v1.42.1) (#​338) (8fa0fc1)
• serve metrics and health on a single 8081 port (#​349) (29a2318)

Bug Fixes

• chart: honor serviceAccount.automount=false (#​348) (b81036f)
• container: update image ghcr.io/siderolabs/installer (v1.13.4 → v1.13.5) (#​357) (b3aa84b)
• deps: update k8s.io/utils digest (ff6756f → be93311) (#​344) (fd927e5)
• deps: update kubernetes monorepo (v0.36.1 → v0.36.2) (#​333) (85a94b2)
• deps: update module github.com/google/go-containerregistry (v0.21.6 → v0.21.7) (#​346) (bfffdfd)
• deps: update module github.com/siderolabs/talos/pkg/machinery (v1.13.3 → v1.13.5) (#​322) (a0d97ff)

Miscellaneous Chores

• add minimumGroupSize to Go toolchain configuration (528c432)
• mise: Update tool hcloud (1.65.0 → 1.66.0) (#​359) (bf64e9e)
• mise: update tool helm (4.2.0 → 4.2.2) (#​331) (bb0f62f)
• mise: Update tool jq (1.8.1 → 1.8.2) (#​351) (47e4780)
• mise: update tool opentofu (1.12.1 → 1.12.2) (#​332) (bf1e1ef)
• mise: Update tool opentofu (1.12.2 → 1.12.3) (#​350) (777c933)
• mise: update tool oxfmt (0.54.0 → 0.55.0) (#​341) (b300587)
• mise: Update tool oxfmt (0.55.0 → 0.56.0) (#​353) (b110e5a)
• mise: Update tool talosctl (1.13.4 → 1.13.5) (#​356) (2ec0f5d)
• mise: Update tool zizmor (1.25.2 → 1.26.1) (#​352) (26a5190)
• remove devcontainer (a8a9465)

v0.2.7

Compare Source

Bug Fixes

• controllers: surface reconcile errors in TalosUpgrade/Kubernetes Upgrade status (#​342) (02af953)

v0.2.6

Compare Source

Bug Fixes

• talos: default placement to hard, degrade to preferred on single-node (#​335) (5ab17c6)

v0.2.5

Compare Source

Features

• deps: update module github.com/onsi/ginkgo/v2 (v2.29.0 → v2.30.0) (#​328) (827a597)
• taint outdated nodes with PreferNoSchedule to reduce upgrade churn (578a6a2)

Miscellaneous Chores

• mise: update tool kubectl (1.36.1 → 1.36.2) (#​330) (565c1e5)

v0.2.4

Compare Source

Features

• github-release: update release helm-unittest/helm-unittest (v1.0.3 → v1.1.1) (#​316) (f98ea83)
• mise: update tool cosign (3.0.6 → 3.1.1) (#​324) (0d653c8)
• mise: update tool oxfmt (0.53.0 → 0.54.0) (#​319) (10f63b5)
• talos: Add NoDrain to talos policy (#​325) (f4cb065)

Bug Fixes

• deps: update module github.com/nicholas-fedor/shoutrrr (v0.16.0 → v0.16.1) (#​321) (be87ceb)

v0.2.3

Compare Source

Features

• chart: digest pinning, generated README + values schema, CI caching (#​312) (65545b9)

Bug Fixes

• mise: update go toolchain (1.26.2 → 1.26.4) (#​309) (2491500)

v0.2.2

Compare Source

Features

• make controller upgrade first (3b43bcf)

Miscellaneous Chores

• disable automerge for Go toolchain dependencies (76555e7)
• update release-please-config.json to simplify paths (6256955)

v0.2.1

Compare Source

Features

• mise: update tool hcloud (1.61.0 → 1.65.0) (aabeb88)
• mise: update tool helm (4.1.1 → 4.2.0) (3b12189)
• mise: update tool kubectl (1.35.1 → 1.36.1) (0785dd4)
• mise: update tool opentofu (1.11.4 → 1.12.1) (0558ecb)
• mise: update tool stern (1.33.1 → 1.34.0) (b0a9584)
• mise: update tool talosctl (1.12.4 → 1.13.3) (23d5fd8)

Bug Fixes

• talos: disable talosctl drain on single-node upgrades (#​310) (a82650e)
• use mise as the single source of truth for go versions (#​307) (f0ee83d)

v0.2.0

Compare Source

⚠ BREAKING CHANGES

• talos: replace drain kubectl-safety fields with explicit enabled toggle

Features

• deps: update module github.com/netresearch/go-cron (v0.14.0 → v0.15.0) (#​305) (e3cfcc4)
• deps: update module github.com/nicholas-fedor/shoutrrr (v0.14.3 → v0.15.1) (#​299) (8ec342a)
• deps: update module github.com/nicholas-fedor/shoutrrr (v0.15.1 → v0.16.0) (#​306) (23a9499)
• mise: update tool kind (0.31.0 → 0.32.0) (7de70c0)
• mise: update tool oxfmt (0.52.0 → 0.53.0) (cddeee2)
• talos: replace drain kubectl-safety fields with explicit enabled toggle (cfa6288)

Bug Fixes

• mise: update tool go (1.26.3 → 1.26.4) (3e57408)

Miscellaneous Chores

• move mise to mise folder (85719a6)
• update mise lockfile (7077075)

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[ixxel-bot]

--- main/tuppr_gitops_manifests_system-upgrade_genmachine_manifest_main.yaml	2026-08-10 19:25:40.442411088 +0000
+++ pr/tuppr_gitops_manifests_system-upgrade_genmachine_manifest_pr.yaml	2026-08-10 19:25:39.552217425 +0000
@@ -344,21 +344,21 @@
       containers:
         - name: manager
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:
               drop:
               - ALL
             readOnlyRootFilesystem: true
             runAsNonRoot: true
             runAsUser: 65532
-          image: ghcr.io/home-operations/tuppr:0.1.40
+          image: ghcr.io/home-operations/tuppr:0.4.7
           imagePullPolicy: IfNotPresent
           command:
             - /manager
           args:
             - --log-level=info
             - --leader-elect=true
             - --metrics-bind-address=:8080
             - --health-probe-bind-address=:8081
             - --talosconfig-secret=tuppr-talosconfig
             - --metrics-secure=false