chore(deps): update ghcr.io/bjw-s/calibre-web:0.6.21 docker digest to 10f25a6

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/bjw-s/calibre-web (source)	digest	45c9e92 -> 10f25a6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- . Kustomization: flux-system/flux-system HelmRelease: media/calibre-web

+++ . Kustomization: flux-system/flux-system HelmRelease: media/calibre-web

@@ -15,13 +15,13 @@

         namespace: applications
       interval: 1h
   interval: 1h
   values:
     image:
       repository: ghcr.io/bjw-s/calibre-web
-      tag: 0.6.21@sha256:45c9e9287b36a3d5c7eee04690907811af51470351cd3a06878b078b5e378f13
+      tag: 0.6.21@sha256:10f25a6f7243be001fa320e24ae2445f3e924704b219a6cc7fd9ba27323e461f
     podSecurityContext:
       runAsUser: 568
       runAsGroup: 568
       fsGroup: 568
       fsGroupChangePolicy: OnRootMismatch
       supplementalGroups:

[github-actions]

--- . HelmRelease: immich/immich Service: immich/immich-redis-master

+++ . HelmRelease: immich/immich Service: immich/immich-redis-master

@@ -2,24 +2,24 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: immich-redis-master
   namespace: immich
   labels:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
     app.kubernetes.io/component: master
 spec:
   type: ClusterIP
   internalTrafficPolicy: Cluster
   sessionAffinity: None
   ports:
   - name: tcp-redis
     port: 6379
     targetPort: redis
     nodePort: null
   selector:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
-    app.kubernetes.io/name: redis
     app.kubernetes.io/component: master
 
--- . HelmRelease: immich/immich PersistentVolumeClaim: immich/immich-typesense-tsdata

+++ . HelmRelease: immich/immich PersistentVolumeClaim: immich/immich-typesense-tsdata

@@ -0,0 +1,17 @@

+---
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: immich-typesense-tsdata
+  labels:
+    app.kubernetes.io/instance: immich
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: typesense
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: zfs-iscsi
+
--- . HelmRelease: immich/immich ConfigMap: immich/immich-redis-configuration

+++ . HelmRelease: immich/immich ConfigMap: immich/immich-redis-configuration

@@ -2,15 +2,15 @@

 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: immich-redis-configuration
   namespace: immich
   labels:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
 data:
   redis.conf: |-
     # User-supplied common configuration:
     # Enable AOF https://redis.io/topics/persistence#append-only-file
     appendonly yes
     # Disable RDB persistence, AOF persistence already enabled.
--- . HelmRelease: immich/immich ConfigMap: immich/immich-redis-scripts

+++ . HelmRelease: immich/immich ConfigMap: immich/immich-redis-scripts

@@ -2,15 +2,15 @@

 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: immich-redis-scripts
   namespace: immich
   labels:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
 data:
   start-master.sh: |
     #!/bin/bash
 
     [[ -f $REDIS_PASSWORD_FILE ]] && export REDIS_PASSWORD="$(< "${REDIS_PASSWORD_FILE}")"
     if [[ -f /opt/bitnami/redis/mounted-etc/master.conf ]];then
--- . HelmRelease: immich/immich Deployment: immich/immich-microservices

+++ . HelmRelease: immich/immich Deployment: immich/immich-microservices

@@ -25,13 +25,13 @@

       serviceAccountName: default
       automountServiceAccountToken: true
       dnsPolicy: ClusterFirst
       enableServiceLinks: true
       containers:
       - name: immich-microservices
-        image: ghcr.io/immich-app/immich-server:v1.91.0
+        image: ghcr.io/immich-app/immich-server:v1.90.2
         imagePullPolicy: IfNotPresent
         command:
         - /bin/sh
         args:
         - ./start-microservices.sh
         env:
@@ -58,18 +58,30 @@

         - name: IMMICH_MACHINE_LEARNING_URL
           value: http://immich-machine-learning:3003
         - name: LOG_LEVEL
           value: verbose
         - name: REDIS_HOSTNAME
           value: immich-redis-master
+        - name: REVERSE_GEOCODING_DUMP_DIRECTORY
+          value: /geodata-cache
+        - name: TYPESENSE_API_KEY
+          value: typesense
+        - name: TYPESENSE_ENABLED
+          value: 'true'
+        - name: TYPESENSE_HOST
+          value: immich-typesense
         volumeMounts:
+        - name: geodata-cache
+          mountPath: /geodata-cache
         - name: library
           mountPath: /usr/src/app/upload
         resources:
           requests:
             cpu: 1500m
             memory: 2048M
       volumes:
+      - name: geodata-cache
+        emptyDir: {}
       - name: library
         persistentVolumeClaim:
           claimName: photo-library
 
--- . HelmRelease: immich/immich ConfigMap: immich/immich-redis-health

+++ . HelmRelease: immich/immich ConfigMap: immich/immich-redis-health

@@ -2,15 +2,15 @@

 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: immich-redis-health
   namespace: immich
   labels:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
 data:
   ping_readiness_local.sh: |-
     #!/bin/bash
 
     [[ -f $REDIS_PASSWORD_FILE ]] && export REDIS_PASSWORD="$(< "${REDIS_PASSWORD_FILE}")"
     [[ -n "$REDIS_PASSWORD" ]] && export REDISCLI_AUTH="$REDIS_PASSWORD"
--- . HelmRelease: immich/immich StatefulSet: immich/immich-redis-master

+++ . HelmRelease: immich/immich StatefulSet: immich/immich-redis-master

@@ -2,72 +2,63 @@

 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: immich-redis-master
   namespace: immich
   labels:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
     app.kubernetes.io/component: master
 spec:
   replicas: 1
   selector:
     matchLabels:
+      app.kubernetes.io/name: redis
       app.kubernetes.io/instance: immich
-      app.kubernetes.io/name: redis
       app.kubernetes.io/component: master
   serviceName: immich-redis-headless
   updateStrategy:
     type: RollingUpdate
   template:
     metadata:
       labels:
+        app.kubernetes.io/name: redis
         app.kubernetes.io/instance: immich
         app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: redis
         app.kubernetes.io/component: master
       annotations:
-        checksum/configmap: 86bcc953bb473748a3d3dc60b7c11f34e60c93519234d4c37f42e22ada559d47
-        checksum/health: aff24913d801436ea469d8d374b2ddb3ec4c43ee7ab24663d5f8ff1a1b6991a9
-        checksum/scripts: 43cdf68c28f3abe25ce017a82f74dbf2437d1900fd69df51a55a3edf6193d141
-        checksum/secret: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
+        checksum/configmap: 05d3cde1c40cd07646f299c2bf5fcd99eaf9794115083a162a57589c5994bd0e
+        checksum/health: d2cf58f2ea41a04ac050024731beaf3d74f6ec2f325611e2c16c93703739d089
+        checksum/scripts: 7e079c7b0d5627f17f509381d65a5eb3cc873d47577064e77f109728b704390b
+        checksum/secret: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
     spec:
       securityContext:
         fsGroup: 1001
       serviceAccountName: immich-redis
       automountServiceAccountToken: true
       affinity:
         podAffinity: null
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
           - podAffinityTerm:
               labelSelector:
                 matchLabels:
+                  app.kubernetes.io/name: redis
                   app.kubernetes.io/instance: immich
-                  app.kubernetes.io/name: redis
                   app.kubernetes.io/component: master
               topologyKey: kubernetes.io/hostname
             weight: 1
         nodeAffinity: null
-      enableServiceLinks: true
       terminationGracePeriodSeconds: 30
       containers:
       - name: redis
-        image: docker.io/bitnami/redis:7.2.3-debian-11-r1
+        image: docker.io/bitnami/redis:7.0.11-debian-11-r20
         imagePullPolicy: IfNotPresent
         securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          runAsGroup: 0
-          runAsNonRoot: true
           runAsUser: 1001
-          seccompProfile:
-            type: RuntimeDefault
         command:
         - /bin/bash
         args:
         - -c
         - /opt/bitnami/scripts/start-scripts/start-master.sh
         env:
@@ -136,19 +127,17 @@

           name: immich-redis-configuration
       - name: redis-tmp-conf
         emptyDir: {}
       - name: tmp
         emptyDir: {}
   volumeClaimTemplates:
-  - apiVersion: v1
-    kind: PersistentVolumeClaim
-    metadata:
+  - metadata:
       name: redis-data
       labels:
+        app.kubernetes.io/name: redis
         app.kubernetes.io/instance: immich
-        app.kubernetes.io/name: redis
         app.kubernetes.io/component: master
     spec:
       accessModes:
       - ReadWriteOnce
       resources:
         requests:
--- . HelmRelease: immich/immich ServiceAccount: immich/immich-redis

+++ . HelmRelease: immich/immich ServiceAccount: immich/immich-redis

@@ -3,10 +3,10 @@

 kind: ServiceAccount
 automountServiceAccountToken: true
 metadata:
   name: immich-redis
   namespace: immich
   labels:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
 
--- . HelmRelease: immich/immich Service: immich/immich-typesense

+++ . HelmRelease: immich/immich Service: immich/immich-typesense

@@ -0,0 +1,21 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: immich-typesense
+  labels:
+    app.kubernetes.io/service: immich-typesense
+    app.kubernetes.io/instance: immich
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: typesense
+spec:
+  type: ClusterIP
+  ports:
+  - port: 8108
+    targetPort: http
+    protocol: TCP
+    name: http
+  selector:
+    app.kubernetes.io/instance: immich
+    app.kubernetes.io/name: typesense
+
--- . HelmRelease: immich/immich Deployment: immich/immich-server

+++ . HelmRelease: immich/immich Deployment: immich/immich-server

@@ -25,13 +25,13 @@

       serviceAccountName: default
       automountServiceAccountToken: true
       dnsPolicy: ClusterFirst
       enableServiceLinks: true
       containers:
       - name: immich-server
-        image: ghcr.io/immich-app/immich-server:v1.91.0
+        image: ghcr.io/immich-app/immich-server:v1.90.2
         imagePullPolicy: IfNotPresent
         command:
         - /bin/sh
         args:
         - ./start-server.sh
         env:
@@ -58,12 +58,18 @@

         - name: IMMICH_MACHINE_LEARNING_URL
           value: http://immich-machine-learning:3003
         - name: LOG_LEVEL
           value: verbose
         - name: REDIS_HOSTNAME
           value: immich-redis-master
+        - name: TYPESENSE_API_KEY
+          value: typesense
+        - name: TYPESENSE_ENABLED
+          value: 'true'
+        - name: TYPESENSE_HOST
+          value: immich-typesense
         ports:
         - name: http
           containerPort: 3001
           protocol: TCP
         volumeMounts:
         - name: library
--- . HelmRelease: immich/immich Service: immich/immich-redis-headless

+++ . HelmRelease: immich/immich Service: immich/immich-redis-headless

@@ -2,20 +2,20 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: immich-redis-headless
   namespace: immich
   labels:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
 spec:
   type: ClusterIP
   clusterIP: None
   ports:
   - name: tcp-redis
     port: 6379
     targetPort: redis
   selector:
+    app.kubernetes.io/name: redis
     app.kubernetes.io/instance: immich
-    app.kubernetes.io/name: redis
 
--- . HelmRelease: immich/immich Deployment: immich/immich-typesense

+++ . HelmRelease: immich/immich Deployment: immich/immich-typesense

@@ -0,0 +1,99 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: immich-typesense
+  labels:
+    app.kubernetes.io/instance: immich
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: typesense
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: typesense
+      app.kubernetes.io/instance: immich
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: typesense
+        app.kubernetes.io/instance: immich
+    spec:
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      dnsPolicy: ClusterFirst
+      enableServiceLinks: true
+      containers:
+      - name: immich-typesense
+        image: docker.io/typesense/typesense:0.24.0
+        imagePullPolicy: IfNotPresent
+        env:
+        - name: DB_DATABASE_NAME
+          valueFrom:
+            secretKeyRef:
+              key: DATABASE_NAME
+              name: database-immich-user
+        - name: DB_HOSTNAME
+          valueFrom:
+            secretKeyRef:
+              key: HOST
+              name: database-immich-user
+        - name: DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              key: PASSWORD
+              name: database-immich-user
+        - name: DB_USERNAME
+          valueFrom:
+            secretKeyRef:
+              key: LOGIN
+              name: database-immich-user
+        - name: IMMICH_MACHINE_LEARNING_URL
+          value: http://immich-machine-learning:3003
+        - name: LOG_LEVEL
+          value: verbose
+        - name: REDIS_HOSTNAME
+          value: immich-redis-master
+        - name: TYPESENSE_API_KEY
+          value: typesense
+        - name: TYPESENSE_DATA_DIR
+          value: /tsdata
+        - name: TYPESENSE_ENABLED
+          value: 'true'
+        - name: TYPESENSE_HOST
+          value: immich-typesense
+        ports:
+        - name: http
+          containerPort: 8108
+          protocol: TCP
+        volumeMounts:
+        - name: tsdata
+          mountPath: /tsdata
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /health
+            port: http
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /health
+            port: http
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+        resources:
+          requests:
+            cpu: 15m
+            memory: 145M
+      volumes:
+      - name: tsdata
+        persistentVolumeClaim:
+          claimName: immich-typesense-tsdata
+
--- . HelmRelease: immich/immich Deployment: immich/immich-machine-learning

+++ . HelmRelease: immich/immich Deployment: immich/immich-machine-learning

@@ -25,13 +25,13 @@

       serviceAccountName: default
       automountServiceAccountToken: true
       dnsPolicy: ClusterFirst
       enableServiceLinks: true
       containers:
       - name: immich-machine-learning
-        image: ghcr.io/immich-app/immich-machine-learning:v1.91.0
+        image: ghcr.io/immich-app/immich-machine-learning:v1.90.2
         imagePullPolicy: IfNotPresent
         env:
         - name: DB_DATABASE_NAME
           valueFrom:
             secretKeyRef:
               key: DATABASE_NAME
@@ -56,12 +56,18 @@

         - name: LOG_LEVEL
           value: verbose
         - name: REDIS_HOSTNAME
           value: immich-redis-master
         - name: TRANSFORMERS_CACHE
           value: /cache
+        - name: TYPESENSE_API_KEY
+          value: typesense
+        - name: TYPESENSE_ENABLED
+          value: 'true'
+        - name: TYPESENSE_HOST
+          value: immich-typesense
         ports:
         - name: http
           containerPort: 3003
           protocol: TCP
         volumeMounts:
         - name: cache
--- . HelmRelease: media/calibre-web Deployment: media/calibre-web

+++ . HelmRelease: media/calibre-web Deployment: media/calibre-web

@@ -32,13 +32,13 @@

         supplementalGroups:
         - 65539
       dnsPolicy: ClusterFirst
       enableServiceLinks: false
       containers:
       - name: calibre-web
-        image: ghcr.io/bjw-s/calibre-web:0.6.21@sha256:45c9e9287b36a3d5c7eee04690907811af51470351cd3a06878b078b5e378f13
+        image: ghcr.io/bjw-s/calibre-web:0.6.21@sha256:10f25a6f7243be001fa320e24ae2445f3e924704b219a6cc7fd9ba27323e461f
         imagePullPolicy: null
         env:
         - name: CACHE_DIR
           value: /cache
         ports:
         - name: http