feat(helm/volsync): update 0.15.0 ➼ 0.16.0

[tinfoild]

This PR contains the following updates:

Package	Update	Change	OpenSSF
volsync (source)	minor	0.15.0 → 0.16.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

backube/volsync (volsync)

v0.16.0

Compare Source

Changed

• Restic updated to v0.18.1
• Rclone updated to v1.74.2
• controller-runtime updated to v0.23.2, migrated to events.EventRecorder
• Krew plugin now released for macOS
• Restic supports Azure workload identity env vars
• Dropped unnecessary perl package from container image, replaced with python3
• Removed unused Syncthing insecureAllowOldTLSVersions option

Fixed

• rsync-tls now properly munges/unmunges symlinks during sync
• Rclone getfacl no longer follows symlinks

Security

• rsync-tls enforces TLS 1.3 as minimum version
• rsync-tls Prevent stunnel DH param regeneration on every run
• rsync-tls sets ciphers per OpenShift TLS profile compliance
• Controller metrics endpoint checks central OpenShift TLS profile

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[cloudflare-workers-and-pages]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	afd4e2a
Status:	🚫  Build failed.

View logs

[tinfoild]

kube/kustomization/out00

--- kube/deploy/core/storage/volsync/app Kustomization: flux-system/1-core-storage-volsync-app HelmRelease: volsync/volsync

+++ kube/deploy/core/storage/volsync/app Kustomization: flux-system/1-core-storage-volsync-app HelmRelease: volsync/volsync

@@ -13,13 +13,13 @@

       chart: volsync
       interval: 5m
       sourceRef:
         kind: HelmRepository
         name: backube
         namespace: flux-system
-      version: 0.15.0
+      version: 0.16.0
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:

[tinfoild]

kube/helmrelease/out00

--- HelmRelease: volsync/volsync ClusterRole: volsync/volsync-manager

+++ HelmRelease: volsync/volsync ClusterRole: volsync/volsync-manager

@@ -158,12 +158,20 @@

   - events
   verbs:
   - create
   - patch
   - update
 - apiGroups:
+  - config.openshift.io
+  resources:
+  - apiservers
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
   - populator.storage.k8s.io
   resources:
   - volumepopulators
   verbs:
   - create
   - get
--- HelmRelease: volsync/volsync Deployment: volsync/volsync

+++ HelmRelease: volsync/volsync Deployment: volsync/volsync

@@ -36,22 +36,22 @@

       containers:
       - name: manager
         args:
         - --health-probe-bind-address=:8081
         - --metrics-bind-address=:8443
         - --leader-elect
-        - --rclone-container-image=quay.io/backube/volsync:0.15.0
-        - --restic-container-image=quay.io/backube/volsync:0.15.0
-        - --rsync-container-image=quay.io/backube/volsync:0.15.0
-        - --rsync-tls-container-image=quay.io/backube/volsync:0.15.0
-        - --syncthing-container-image=quay.io/backube/volsync:0.15.0
+        - --rclone-container-image=quay.io/backube/volsync:0.16.0
+        - --restic-container-image=quay.io/backube/volsync:0.16.0
+        - --rsync-container-image=quay.io/backube/volsync:0.16.0
+        - --rsync-tls-container-image=quay.io/backube/volsync:0.16.0
+        - --syncthing-container-image=quay.io/backube/volsync:0.16.0
         - --scc-name=volsync-privileged-mover
         - --metrics-require-rbac=false
         command:
         - /manager
-        image: quay.io/backube/volsync:0.15.0
+        image: quay.io/backube/volsync:0.16.0
         imagePullPolicy: IfNotPresent
         env:
         - name: VOLSYNC_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace

[ciel-shieru]

SECURITY VULNERABILITIES FOUND BY CIEL

📅 Scan date: 2026-07-23 21:27 UTC
🤖 Scanner: Ciel Security Scanner
🔗 PR: #6064 — feat(helm/volsync): update 0.15.0 ➼ 0.16.0
📦 Package: volsync
🔍 Sources: NVD, OSV.dev, GHSA, CISA KEV

---

Results

Package: volsync

Old version: 0.15.0

• Old version: 0.15.0 — No known vulnerabilities found

New version: 0.16.0

• New version: 0.16.0 — No known vulnerabilities found

---

Severity Summary

Severity	Count
Total findings	0

---

---

⚠️ This comment was posted by an automated security scanner (Ciel).

[ciel-shieru]

SECURITY VULNERABILITIES FOUND BY CIEL

📅 Scan date: 2026-07-24 01:08 UTC
🤖 Scanner: Ciel Security Scanner (fast mode: OSV.dev + NVD + GHSA)
🔗 PR: #6064 — feat(helm/volsync): update 0.15.0 ➼ 0.16.0
📦 Package: volsync (ecosystem: helm/github/none)
📊 Versions: old=? → new=0.16.0

---

Severity Summary

Severity	Count
CRITICAL	0
HIGH	0
MEDIUM / MODERATE	0
LOW	0
UNKNOWN / NEEDS VERIFICATION	0
Total	0

---

Results

Package: volsync

• Old version: unknown
• New version: 0.16.0
• Ecosystem: helm/github/none

Raw findings (truncated)

=== NEW: 0.16.0 ===
=== OSV.dev query for volsync@0.16.0 (ecosystem: any) ===
{
  "id": "CGA-c2qp-qchh-369w",
  "summary": null,
  "details": "",
  "severity": "",
  "aliases": [],
  "affected": [
    {
      "package": "actionlint",
      "ecosystem": "Chainguard",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0"
            }
          ]
        }
      ]
    },
    {
      "package": "actions-runner-controller",
      "ecosystem": "Chainguard",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.2-r5"
            }
          ]
        }

=== NVD query for 'volsync' (version filter: 0.16.0) ===
No CVEs found on NVD for keyword: volsync

=== GHSA query for volsync (ecosystem: all) ===

---

Recommendations

• No known vulnerabilities identified for these versions in the sources checked.
• This is a fast scan (3 sources). For comprehensive results, re-run the full 8-source scan.

---

⚠️ This comment was posted by an automated security scanner (Ciel, fast mode).
To re-scan, trigger the renovate-security-scanner skill.