feat(helm/app-template): update 4.4.0 ➼ 4.6.2 by tinfoild[bot] · Pull Request #3968 · JJGadgets/Biohazard

tinfoild · 2025-12-04T17:10:12Z

This PR contains the following updates:

Package	Update	Change	OpenSSF
app-template	minor	`4.4.0` → `4.6.2`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

bjw-s-labs/helm-charts (app-template)

`v4.6.2`

Compare Source

Changelog:

Changed

Upgraded the common library to v4.6.2
- Upgrade notes
- Detailed release notes

`v4.6.1`

Compare Source

Changelog:

Changed

Upgraded the common library to v4.6.1
- Upgrade notes
- Detailed release notes

`v4.6.0`

Compare Source

Changelog:

Changed

Upgraded the common library to v4.6.0
- Upgrade notes
- Detailed release notes

`v4.5.0`

Compare Source

Changelog:

Changed

Upgraded the common library to v4.5.0
- Upgrade notes
- Detailed release notes

Configuration

📅 Schedule: (in timezone Asia/Singapore)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

cloudflare-workers-and-pages · 2025-12-04T17:10:13Z

Deploying jjgadgets-biohazard with Cloudflare Pages

Latest commit:	`88cedf8`
Status:	🚫 Build failed.

View logs

tinfoild · 2025-12-04T17:11:52Z

kube/helmrelease/out00

--- HelmRelease: paperless-ngx/paperless-ngx HTTPRoute: paperless-ngx/paperless-ngx

+++ HelmRelease: paperless-ngx/paperless-ngx HTTPRoute: paperless-ngx/paperless-ngx

@@ -20,13 +20,13 @@

   rules:
   - backendRefs:
     - group: ''
       kind: Service
       name: paperless-ngx-app
       namespace: paperless-ngx
-      port: http
+      port: 80
       weight: 1
     matches:
     - path:
         type: PathPrefix
         value: /

ciel-shieru · 2026-07-24T00:49:31Z

SECURITY VULNERABILITIES FOUND BY CIEL

📅 Scan date: 2026-07-24 02:23 UTC
🤖 Scanner: Ciel Security Scanner
🔗 PR: #3968 — feat(helm/app-template): update 4.4.0 ➼ 4.6.2
📦 Packages checked: 1
🔍 Sources: NVD, OSV.dev, GHSA, GHSL, CISA KEV, FortiGuard, CVE.org, Changelog
⚠️ Vulnerabilities found: 0

Severity Summary

Severity	Count
CRITICAL	0
HIGH	0
MEDIUM / MODERATE	0
LOW	0
UNKNOWN / NEEDS VERIFICATION	0
Total	0

Results

Package: app-template

Ecosystem: Helm
Old version: 4.4.0 — CLEAN
New version: 4.6.2 — CLEAN

Vulnerabilities in version 4.4.0

No known vulnerabilities found.

Vulnerabilities in version 4.6.2

No known vulnerabilities found.

Source scan summary

Source	Status	Notes
OSV.dev	✅ Scanned	No results for this package (Helm ecosystem)
NVD	✅ Scanned	No CVEs found
GHSA	✅ Scanned	No advisories for this package
GHSL	✅ Scanned	No publications found
CISA KEV	✅ Scanned	No entries for this product
FortiGuard	✅ Scanned	No advisories found
CVE.org	✅ Scanned	No CVEs found for this package
Changelog	✅ Scanned	Bug fixes and feature additions only — no security patches

Recommendations

MERGE PRIORITY: LOW — No security vulnerabilities found in either version. Merge at own discretion.

⚠️ This comment was posted by an automated security scanner (Ciel).
To re-scan, trigger the renovate-security-scanner skill.

tinfoild · 2026-08-05T02:26:46Z

kube/kustomization/out00

--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: media/jellyfin-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: media/jellyfin-app

@@ -254,13 +254,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/media/jellyfin/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       CHART_NAME: jellyfin
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: media/plex-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: media/plex-app

@@ -254,13 +254,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/media/plex/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       CHART_NAME: plex
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: media/navidrome-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: media/navidrome-app

@@ -255,13 +255,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/media/navidrome/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       AUTH_ROUTE: navidrome-app
       CHART_NAME: navidrome
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: media/kavita-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: media/kavita-app

@@ -254,13 +254,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/media/kavita/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       CHART_NAME: kavita
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: firefly/firefly-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: firefly/firefly-app

@@ -255,13 +255,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/firefly/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       AUTH_ROUTE: firefly-app
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: paperless-ngx/paperless-ngx-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: paperless-ngx/paperless-ngx-app

@@ -254,13 +254,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/paperless-ngx/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
     - kind: Secret
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: radicale/radicale-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: radicale/radicale-app

@@ -255,13 +255,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/radicale/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       AUTH_HEADER: X-Remote-User
       AUTH_ROUTE: radicale-app
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: cryptpad/cryptpad-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: cryptpad/cryptpad-app

@@ -254,13 +254,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/cryptpad/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
     - kind: Secret
--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: flatnotes/flatnotes-app

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: flatnotes/flatnotes-app

@@ -254,13 +254,13 @@

       kind: HelmRelease
       labelSelector: nginx.ingress.home.arpa/type in (auth-external-only)
       version: v2
   path: ./kube/deploy/apps/flatnotes/app
   postBuild:
     substitute:
-      APP_TEMPLATE: 4.4.0
+      APP_TEMPLATE: 4.6.2
       CLUSTER_NAME: biohazard
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
     - kind: Secret
--- kube/deploy/core/_networking/multus/app Kustomization: flux-system/1-core-1-networking-multus-app HelmRelease: multus/multus

+++ kube/deploy/core/_networking/multus/app Kustomization: flux-system/1-core-1-networking-multus-app HelmRelease: multus/multus

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.4.0
+      version: 4.6.2
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:
--- kube/deploy/apps/go2rtc/app Kustomization: flux-system/go2rtc-app HelmRelease: go2rtc/go2rtc

+++ kube/deploy/apps/go2rtc/app Kustomization: flux-system/go2rtc-app HelmRelease: go2rtc/go2rtc

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.4.0
+      version: 4.6.2
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:
--- kube/deploy/apps/kiwix/app Kustomization: flux-system/kiwix-app HelmRelease: kiwix/kiwix

+++ kube/deploy/apps/kiwix/app Kustomization: flux-system/kiwix-app HelmRelease: kiwix/kiwix

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.4.0
+      version: 4.6.2
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:
--- kube/deploy/core/monitoring/vector/app Kustomization: flux-system/vector-app HelmRelease: vector/vector

+++ kube/deploy/core/monitoring/vector/app Kustomization: flux-system/vector-app HelmRelease: vector/vector

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.4.0
+      version: 4.6.2
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:
--- kube/deploy/apps/firefly/app Kustomization: firefly/firefly-app OCIRepository: firefly/app-template

+++ kube/deploy/apps/firefly/app Kustomization: firefly/firefly-app OCIRepository: firefly/app-template

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/flatnotes/app Kustomization: flatnotes/flatnotes-app OCIRepository: flatnotes/app-template

+++ kube/deploy/apps/flatnotes/app Kustomization: flatnotes/flatnotes-app OCIRepository: flatnotes/app-template

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/cryptpad/app Kustomization: cryptpad/cryptpad-app OCIRepository: cryptpad/app-template

+++ kube/deploy/apps/cryptpad/app Kustomization: cryptpad/cryptpad-app OCIRepository: cryptpad/app-template

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/media/kavita/app Kustomization: media/kavita-app OCIRepository: media/kavita

+++ kube/deploy/apps/media/kavita/app Kustomization: media/kavita-app OCIRepository: media/kavita

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/media/jellyfin/app Kustomization: media/jellyfin-app OCIRepository: media/jellyfin

+++ kube/deploy/apps/media/jellyfin/app Kustomization: media/jellyfin-app OCIRepository: media/jellyfin

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/media/navidrome/app Kustomization: media/navidrome-app OCIRepository: media/navidrome

+++ kube/deploy/apps/media/navidrome/app Kustomization: media/navidrome-app OCIRepository: media/navidrome

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/media/plex/app Kustomization: media/plex-app OCIRepository: media/plex

+++ kube/deploy/apps/media/plex/app Kustomization: media/plex-app OCIRepository: media/plex

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/radicale/app Kustomization: radicale/radicale-app OCIRepository: radicale/app-template

+++ kube/deploy/apps/radicale/app Kustomization: radicale/radicale-app OCIRepository: radicale/app-template

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/paperless-ngx/app Kustomization: paperless-ngx/paperless-ngx-app OCIRepository: paperless-ngx/app-template

+++ kube/deploy/apps/paperless-ngx/app Kustomization: paperless-ngx/paperless-ngx-app OCIRepository: paperless-ngx/app-template

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.4.0
+    tag: 4.6.2
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kube/deploy/apps/miniflux/app Kustomization: flux-system/miniflux-app HelmRelease: miniflux/miniflux

+++ kube/deploy/apps/miniflux/app Kustomization: flux-system/miniflux-app HelmRelease: miniflux/miniflux

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.4.0
+      version: 4.6.2
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:

tinfoild Bot added kube/deploy/test renovate/datasource/helm renovate/type/minor labels Dec 4, 2025

tinfoild Bot force-pushed the renovate/4.4.0-to-app-template-minor branch 2 times, most recently from f6207df to ccf2a4c Compare December 17, 2025 13:56

tinfoild Bot force-pushed the renovate/4.4.0-to-app-template-minor branch 6 times, most recently from 8f618f1 to c99ed05 Compare January 3, 2026 14:07

tinfoild Bot changed the title ~~feat(helm/app-template): update 4.4.0 ➼ 4.5.0~~ feat(helm/app-template): update 4.4.0 ➼ 4.6.0 Jan 7, 2026

tinfoild Bot force-pushed the renovate/4.4.0-to-app-template-minor branch 4 times, most recently from e2fa70e to a5953bb Compare January 10, 2026 19:07

tinfoild Bot added kube/deploy/core and removed kube/deploy/test labels Jan 10, 2026

tinfoild Bot changed the title ~~feat(helm/app-template): update 4.4.0 ➼ 4.6.0~~ feat(helm/app-template): update 4.4.0 ➼ 4.6.1 Jan 16, 2026

tinfoild Bot force-pushed the renovate/4.4.0-to-app-template-minor branch from a5953bb to 8e94bae Compare January 16, 2026 02:45

tinfoild Bot changed the title ~~feat(helm/app-template): update 4.4.0 ➼ 4.6.1~~ feat(helm/app-template): update 4.4.0 ➼ 4.6.2 Jan 16, 2026

tinfoild Bot force-pushed the renovate/4.4.0-to-app-template-minor branch from 8e94bae to de2b642 Compare January 16, 2026 11:08

tinfoild Bot force-pushed the renovate/4.4.0-to-app-template-minor branch 4 times, most recently from a53d875 to 6f8bd4b Compare January 27, 2026 02:56

tinfoild Bot added the kube/deploy/apps label Feb 8, 2026

tinfoild Bot force-pushed the renovate/4.4.0-to-app-template-minor branch from 6f8bd4b to 24386b4 Compare February 8, 2026 08:43

tinfoild Bot force-pushed the renovate/4.4.0-to-app-template-minor branch 27 times, most recently from ca025f1 to a89c692 Compare February 11, 2026 23:17

feat(helm/app-template): update 4.4.0 ➼ 4.6.2

88cedf8

Navigation Menu

Repository navigation

feat(helm/app-template): update 4.4.0 ➼ 4.6.2 - #3968

feat(helm/app-template): update 4.4.0 ➼ 4.6.2#3968
tinfoild[bot] wants to merge 1 commit into
mainfrom
renovate/4.4.0-to-app-template-minor

tinfoild Bot commented Dec 4, 2025 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Dec 4, 2025 •

edited

Loading

Uh oh!

tinfoild Bot commented Dec 4, 2025 •

edited

Loading

Uh oh!

ciel-shieru commented Jul 24, 2026 •

edited

Loading

Uh oh!

tinfoild Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

tinfoild Bot commented Dec 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.6.2

Changelog:

Changed

v4.6.1

Changelog:

Changed

v4.6.0

Changelog:

Changed

v4.5.0

Changelog:

Changed

Configuration

Uh oh!

cloudflare-workers-and-pages Bot commented Dec 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying jjgadgets-biohazard with Cloudflare Pages

Uh oh!

tinfoild Bot commented Dec 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

kube/helmrelease/out00

Uh oh!

ciel-shieru commented Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Severity Summary

Results

Package: app-template

Vulnerabilities in version 4.4.0

Vulnerabilities in version 4.6.2

Source scan summary

Recommendations

Uh oh!

tinfoild Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

kube/kustomization/out00

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

tinfoild Bot commented Dec 4, 2025 •

edited

Loading

`v4.6.2`

`v4.6.1`

`v4.6.0`

`v4.5.0`

cloudflare-workers-and-pages Bot commented Dec 4, 2025 •

edited

Loading

tinfoild Bot commented Dec 4, 2025 •

edited

Loading

ciel-shieru commented Jul 24, 2026 •

edited

Loading

tinfoild Bot commented Aug 5, 2026 •

edited

Loading