GiorgioAresu/home-ops

Watch

Fork 0

fix(container): update image public.ecr.aws/docker/library/redis (5c02d7c ➔ 97ec881) #2455

Merged

GiorgioAresu merged 1 commit from renovate/public.ecr.aws-docker-library-redis-8.10.2 into main

2026-10-23 10:03:57 +02:00

renovate-bot commented

2026-10-22 09:03:11 +02:00

Collaborator

This PR contains the following updates:

Package	Update	Change
public.ecr.aws/docker/library/redis (source)	digest	`5c02d7c` → `97ec881`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Configuration

📅 Schedule: (in timezone Europe/Rome)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [public.ecr.aws/docker/library/redis](https://hub.docker.com/_/redis) ([source](https://github.com/redis/docker-library-redis)) | digest | `5c02d7c` → `97ec881` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/6) for more information. --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added the

renovate/container

type/digest

labels

2026-10-22 09:03:11 +02:00

renovate-bot added 1 commit

2026-10-22 09:03:11 +02:00

fix(container): update image public.ecr.aws/docker/library/redis (5c02d7c ➔ 97ec881)

Labeler / Labeler (pull_request) Successful in 5s

Details

Lint / actionlint (pull_request) Successful in 16s

Details

Lint / yamllint (pull_request) Failing after 23s

Details

AI PR Review / AI PR Review (pull_request) Successful in 2m52s

Details

Konflate 2 resources changed

Details

4d2b0e5244

forgejo-actions added the

area/kubernetes

label

2026-10-22 09:03:15 +02:00

lab-assistant-bot commented

2026-10-22 09:03:16 +02:00

Collaborator

Routine: only container-image and chart-version changes; 2 resources across 2 apps

image	from	to	upstream
`public.ecr.aws/docker/library/redis`	`8.10.2@sha256:5c02d7…`	`8.10.2@sha256:97ec88…`	❔

_{konflate 0.6.6 · rendered 4d2b0e5 · full diff →}

**Routine**: only container-image and chart-version changes; 2 resources across 2 apps | image | from | to | upstream | |---|---|---|---| | `public.ecr.aws/docker/library/redis` | `8.10.2@sha256:5c02d7…` | `8.10.2@sha256:97ec88…` | ❔ | <sub>konflate 0.6.6 · rendered `4d2b0e5` · [full diff →](https://konflate.aresu.eu/#/pr/2455)</sub>

forgejo-actions commented

2026-10-22 09:06:03 +02:00

AI Automated Review

Analysis engine: minimax/MiniMax-M2-7-anthropic (anthropic) — primary route · pr-reviewer-action v3.4.1

Approve — routine digest-only refresh for the Redis sidecar container used by the immich Helm chart.

Changed file

kubernetes/apps/media/immich/app/helmrelease.yaml: single line change, the redis sidecar tag digest swapped from sha256:5c02d7c… → sha256:97ec881…, version 8.10.2 and repository public.ecr.aws/docker/library/redis are unchanged.

Claims to Falsify

Claim 1 (digest updated): held 1/1 — the tag field in the diff matches the claim exactly.
Claim 2 (repository unchanged): held 1/1 — repository: public.ecr.aws/docker/library/redis is untouched.
Claim 3 (version unchanged): held 1/1 — 8.10.2 version string is identical on both sides of the diff.

Required checks disposition

Check	Status	Rationale
validate manifest against target cluster version	not_applicable	No cluster API or version-gated fields changed
check for resource quota / limit changes	not_applicable	The redis container has no resource limits; the diff does not touch them
verify file path sanitization	not_applicable	No file-serving or path-based resources are modified
check for directory traversal vulnerabilities	not_applicable	Same — no file paths involved

Observations

Konflate render succeeded with no cautions or failures.
The old digest (5c02d7c) appears only in the previous commit for this same image/version, confirming this is a standard Renovate digest refresh following a rebuild of the official Redis 8.10.2 image.
The yamllint failure is a pre-existing condition unrelated to this PR.
Missing OCI revision/source labels for the ECR registry are a non-blocking caveat (per convention: same-tag digest refresh with consistent repository and version).

No blocking issues found.

# AI Automated Review _Analysis engine: minimax/MiniMax-M2-7-anthropic (anthropic) — primary route · pr-reviewer-action v3.4.1_ **Approve** — routine digest-only refresh for the Redis sidecar container used by the immich Helm chart. ## Changed file `kubernetes/apps/media/immich/app/helmrelease.yaml`: single line change, the redis sidecar `tag` digest swapped from `sha256:5c02d7c…` → `sha256:97ec881…`, version `8.10.2` and repository `public.ecr.aws/docker/library/redis` are unchanged. ## Claims to Falsify - **Claim 1** (digest updated): held 1/1 — the `tag` field in the diff matches the claim exactly. - **Claim 2** (repository unchanged): held 1/1 — `repository: public.ecr.aws/docker/library/redis` is untouched. - **Claim 3** (version unchanged): held 1/1 — `8.10.2` version string is identical on both sides of the diff. ## Required checks disposition | Check | Status | Rationale | |---|---|---| | validate manifest against target cluster version | not_applicable | No cluster API or version-gated fields changed | | check for resource quota / limit changes | not_applicable | The redis container has no resource limits; the diff does not touch them | | verify file path sanitization | not_applicable | No file-serving or path-based resources are modified | | check for directory traversal vulnerabilities | not_applicable | Same — no file paths involved | ## Observations - Konflate render succeeded with no cautions or failures. - The old digest (`5c02d7c`) appears only in the previous commit for this same image/version, confirming this is a standard Renovate digest refresh following a rebuild of the official Redis `8.10.2` image. - The yamllint failure is a pre-existing condition unrelated to this PR. - Missing OCI revision/source labels for the ECR registry are a non-blocking caveat (per convention: same-tag digest refresh with consistent repository and version). No blocking issues found.