2026.10.0

What's Changed

• docs: clarify new-app pre-merge verification boundary in AGENTS.md by @Aviator-Coding in #1531
• fix(deps): update aqua:siderolabs/talos ( 1.13.2 ➔ 1.13.9 ) by @mortyops[bot] in #1529
• fix(container): update image ghcr.io/siderolabs/talosctl ( v1.13.8 ➔ v1.13.9 ) by @mortyops[bot] in #1528
• feat(ai): rename metered Anthropic models for Claude Code pass-through by @Aviator-Coding in #1532
• docs(system): reject system-controller/system-upgrade consolidation by @Aviator-Coding in #1533
• docs(kopiur): record fleet restore proof for all 30 claims by @Aviator-Coding in #1535
• docs(media): record tdarr 4k guard, canary, gpu drift and rebuild runbook by @Aviator-Coding in #1534
• ci(github-action): cover docs/tdarr in validate trigger paths by @Aviator-Coding in #1537
• feat(kopiur): retire volsync from four stage 5 pilot volumes by @Aviator-Coding in #1538
• fix(container): update image ghcr.io/home-operations/charts/kopiur ( 0.10.5 ➔ 0.10.6 ) by @mortyops[bot] in #1536
• feat(apps): document shapes, add scaffold, align searxng and dragonfly by @Aviator-Coding in #1539
• docs: relocate AGENTS.md notes depth into jit-loaded skills by @Aviator-Coding in #1541
• docs(system): record CREATE-only admission webhook drift class by @Aviator-Coding in #1542
• docs(system-controller): record declined k8tz imageVolume evaluation by @Aviator-Coding in #1540
• fix(hermes): size kopiur cache for r2 restore and prove the path by @Aviator-Coding in #1543
• fix(kopiur): close restore populator drift and raise tdarr/radarr caches by @Aviator-Coding in #1544
• fix(container): update image ghcr.io/home-operations/charts/kopiur ( 0.10.6 ➔ 0.10.7 ) by @mortyops[bot] in #1545
• docs(kopiur): record wave-two re-proof and populator closure by @Aviator-Coding in #1546
• feat(kopiur): retire volsync from four stage 5 wave-two claims by @Aviator-Coding in #1547
• chore(downloads): remove the autobrr app by @Aviator-Coding in #1548
• fix(kopiur): close ceph index-blob compaction with 4h epoch minDuration by @Aviator-Coding in #1550
• fix(container): update talos group by @mortyops[bot] in #1551
• feat(deps): update siderolabs/talos ( v1.13.9 ➔ v1.14.0 ) by @mortyops[bot] in #1549
• feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 88.5.3 ➔ 89.2.0 ) by @mortyops[bot] in #1552
• feat: retire VolSync from the final 19 eligible claims (Stage 5) by @Aviator-Coding in #1553
• feat(falkordb): deploy FalkorDB with kopiur backups and auth by @Aviator-Coding in #1554
• feat(ai): LAN SMB share on shared CephFS for hermes by @Aviator-Coding in #1555
• feat(falkordb): LAN LoadBalancer and Authentik-gated browser UI by @Aviator-Coding in #1556
• chore(container): update image python ( b0aed0e ➔ 8edbf9e ) by @mortyops[bot] in #1558
• ci(github-action): update action renovatebot/github-action ( v46.2.2 ➔ v46.2.5 ) by @mortyops[bot] in #1560
• fix(container): update flux operator group by @mortyops[bot] in #1561
• ci(github-action): update action github/codeql-action ( v4.37.8 ➔ v4.37.9 ) by @mortyops[bot] in #1559
• fix(container): update image docker.io/nousresearch/hermes-agent ( v2026.8.18 ➔ v2026.8.31 ) by @mortyops[bot] in #1563
• fix(container): update image docker.io/cloudflare/cloudflared ( 2026.8.2 ➔ 2026.8.3 ) by @mortyops[bot] in #1562
• fix(container): update image ghcr.io/dragonflydb/dragonfly ( v1.40.1 ➔ v1.40.2 ) by @mortyops[bot] in #1566
• fix(container): update image ghcr.io/calibrain/calibre-web-automated-book-downloader-extbp ( v1.3.9 ➔ v1.3.15 ) by @mortyops[bot] in #1564
• fix(container): update image ghcr.io/coder/chart/coder ( 2.36.0 ➔ 2.36.4 ) by @mortyops[bot] in #1565
• fix(container): update image ghcr.io/home-operations/charts/litellm-operator ( 0.0.15 ➔ 0.0.19 ) by @mortyops[bot] in #1568
• fix(container): update image ghcr.io/home-operations/home-assistant ( 2026.8.2 ➔ 2026.8.3 ) by @mortyops[bot] in #1570
• fix(container): update image ghcr.io/home-operations/prowlarr ( 2.6.1.5509 ➔ 2.6.3.5592 ) by @mortyops[bot] in #1571
• fix(container): update image ghcr.io/stacklok/toolhive/toolhive-operator ( 0.42.0 ➔ 0.42.1 ) by @mortyops[bot] in #1578
• fix(container): update image ghcr.io/siderolabs/kubelet ( v1.36.3 ➔ v1.36.4 ) by @mortyops[bot] in #1577
• fix(container): update image registry.k8s.io/kube-apiserver ( v1.36.3 ➔ v1.36.4 ) by @mortyops[bot] in #1582
• fix(container): update image ghcr.io/stacklok/toolhive/toolhive-operator-crds ( 0.42.0 ➔ 0.42.1 ) by @mortyops[bot] in #1579
• ci(github-action): update action docker/setup-qemu-action ( v4.2.0 ➔ v4.3.0 ) by @mortyops[bot] in #1594
• fix(deps): update aqua:mikefarah/yq ( 4.53.4 ➔ 4.53.6 ) by @mortyops[bot] in #1590
• ci(github-action): update action jdx/mise-action ( v4.2.5 ➔ v4.3.0 ) by @mortyops[bot] in #1595
• fix(github-release): update release ubi:home-operations/flate ( 0.6.1 ➔ 0.6.5 ) by @mortyops[bot] in #1592
• fix(container): update image ghcr.io/linkwarden/linkwarden ( v2.16.1 ➔ v2.16.2 ) by @mortyops[bot] in #1574
• fix(github-release): update release uv ( 0.12.5 ➔ 0.12.9 ) by @mortyops[bot] in #1593
• feat(container): update image docker.io/binwiederhier/ntfy ( v2.27.0 ➔ v2.28.0 ) by @mortyops[bot] in #1597
• feat(container): update image docker.io/grafana/mcp-grafana ( 1.2.0 ➔ 1.3.0 ) by @mortyops[bot] in #1598
• fix(container): update image ghcr.io/home-operations/radarr ( 6.4.1.10545 ➔ 6.4.3.10645 ) by @mortyops[bot] in #1572
• fix(container): update image ghcr.io/recyclarr/recyclarr ( 8.7.1 ➔ 8.7.2 ) by @mortyops[bot] in #1576
• fix(container): update image ghcr.io/grafana-community/helm-charts/loki ( 18.11.0 ➔ 18.11.7 ) by @mortyops[bot] in #1567
• fix(container): update image mirror.gcr.io/envoyproxy/envoy ( v1.39.0 ➔ v1.39.1 ) by @mortyops[bot] in #1580
• fix(container): update image ghcr.io/n8n-io/n8n ( 2.34.4 ➔ 2.34.6 ) by @mortyops[bot] in #1575
• feat(container): update image alpine/k8s ( 1.36.2 ➔ 1.37.0 ) by @mortyops[bot] in #1596
• fix(container): update image registry.k8s.io/kube-controller-manager ( v1.36.3 ➔ v1.36.4 ) by @mortyops[bot] in #1583
• fix(deps): update aqua:helmfile/helmfile ( 1.7.3 ➔ 1.7.4 ) by @mortyops[bot] in #1589
• fix(container): update image registry.k8s.io/kube-scheduler ( v1.36.3 ➔ v1.36.4 ) by @mortyops[bot] in #1585
• fix(container): update image registry.k8s.io/kube-proxy ( v1.36.3 ➔ v1.36.4 ) by @mortyops[bot] in #1584
• fix(container): update image ghcr.io/home-operations/gatus-sidecar ( 0.4.0 ➔ 0.4.1 ) by @mortyops[bot] in #1569
• feat(helm): update chart nack ( 0.34.0 ➔ 0.35.0 ) by @mortyops[bot] in #1603
• fix(container): update image ghcr.io/home-operations/sabnzbd ( 5.1.0 ➔ 5.1.2 ) by @mortyops[bot] in #1573
• fix(deps): update aqua:fluxcd/flux2 ( 2.9.4 ➔ 2.9.5 ) by @mortyops[bot] in #1588
• fix(container): update rook-ceph group ( v1.20.6 ➔ v1.20.7 ) by @mortyops[bot] in #1586
• fix(deps): update aqua:cloudflare/cloudflared ( 2026.8.2 ➔ 2026.8.3 ) by @mortyops[bot] in #1587
• fix(container): update image mirror.gcr.io/envoyproxy/gateway-helm ( v1.9.0 ➔ v1.9.1 ) by @mortyops[bot] in #1581
• fix(github-release): update release home-operations/flate ( v0.6.1 ➔ v0.6.5 ) by @mortyops[bot] in #1591
• feat(deps): update aqua:cilium/cilium-cli ( 0.19.7 ➔ 0.20.0 ) by @mortyops[bot] in #1599
• feat(deps): update aqua:go-task/task ( 3.52.0 ➔ 3.53.1 ) by @mortyops[bot] in #1600
• feat(deps): update aqua:prometheus/prometheus ( 3.2.1 ➔ 3.14.0 ) by @mortyops[bot] in #1601
• feat(deps): update kubectl ( 1.36.4 ➔ 1.37.0 ) by @mortyops[bot] in #1602
• ci: fix pin-shape gates, 1password-cli lookup, and inert branch automerge by @Aviator-Coding in #1605
• fix: harden k8tz QoS, readarr probes/resources, and cron start deadlines by @Aviator-Coding in #1607
• chore(container): update image ghcr.io/diygod/rsshub ( e51628e ➔ 82e05ea ) by @mortyops[bot] in #1611
• fix(container): update image ghcr.io/home-operations/charts/konflate ( 0.6.2 ➔ 0.6.3 ) by @mortyops[bot] in #1612
• fix(container): update image ghcr.io/home-operations/charts/tuppr ( 0.5.0 ➔ 0.5.4 ) by @mortyops[bot] in #1613
• fix(container): update image ghcr.io/home-operations/sonarr ( 4.0.19.3001 ➔ 4.0.19.3011 ) by @mortyops[bot] in #1614
• fix(container): update image ghcr.io/joryirving/opencode ( 1.18.23 ➔ 1.18.29 ) by @mortyops[bot] in #1615
• fix(container): update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 89.2.0 ➔ 89.2.4 ) by @mortyops[bot] in #1616
• fix(container): update image ghcr.io/prometheus-community/charts/kube-state-metrics ( 8.4.0 ➔ 8.4.2 ) by @mortyops[bot] in #1617
• fix(talos): revert machineconfig installer pin to v1.13.10 by @Aviator-Coding in #1619
• fix(backups): stop false VolSync stalls and split kopiur stale alerts by @Aviator-Coding in #1604
• fix(github-action): stop mise-action install_args from drifting off mise.toml by @Aviator-Coding in #1618
• fix(agentgateway): close AI gateway exposure and TLS refresh defects by @Aviator-Coding in #1608
• fix(fstrim): restore Ceph PVC discard path and disable unused nfs mgr by @Aviator-Coding in #1609
• fix(monitoring): make home-ops alerts able to fire and clear by @Aviator-Coding in #1610
• feat(deps): update aqua:siderolabs/talos ( 1.13.9 ➔ 1.14.0 ) by @mortyops[bot] in #1557
• chore(container): update image ghcr.io/diygod/rsshub ( 82e05ea ➔ 2eaffe0 ) by @mortyops[bot] in #1622
• fix(vllm): raise loaded B70 throughput with -ub 2048 and llama.cpp b10820 by @Aviator-Coding in #1621
• chore(container): update image ghcr.io/diygod/rsshub ( 2eaffe0 ➔ ebff848 ) by @mortyops[bot] in #1623
• chore(container): update image ghcr.io/diygod/rsshub ( ebff848 ➔ 4198799 ) by @mortyops[bot] in #1624
• chore(container): update image ghcr.io/diygod/rsshub ( 4198799 ➔ 2b4aadd ) by @mortyops[bot] in #1625
• fix(container): update image docker.io/syncthing/syncthing ( 2.1.3 ➔ 2.1.5 ) by @mortyops[bot] in #1627
• chore(container): update image ghcr.io/diygod/rsshub ( 2b4aadd ➔ ed45310 ) by @mortyops[bot] in #1626
• fix(container): update image ghcr.io/home-operations/sabnzbd ( 5.1.2 ➔ 5.1.3 ) by @mortyops[bot] in #1629
• chore(container): update image ghcr.io/diygod/rsshub ( ed45310 ➔ f577b5e ) by @mortyops[bot] in #1630
• fix(falkordb): raise app container memory limit and request by @Aviator-Coding in #1631
• fix(falkordb): raise memory ceiling and add crash-loop alerts for the outgrown 8Gi limit by @Aviator-Coding in #1633
• chore(container): update image ghcr.io/diygod/rsshub ( f577b5e ➔ ef15cd1 ) by @mortyops[bot] in #1634
• fix(container): update image ghcr.io/coredns/charts/coredns ( 1.47.0 ➔ 1.47.1 ) by @mortyops[bot] in #1635
• fix(container): update image ghcr.io/joryirving/opencode ( 1.18.29 ➔ 1.18.30 ) by @mortyops[bot] in #1636
• chore(container): update image ghcr.io/diygod/rsshub ( ef15cd1 ➔ b6d37f5 ) by @mortyops[bot] in #1637
• fix(container): update image ghcr.io/stakater/charts/reloader ( 2.2.16 ➔ 2.2.17 ) by @mortyops[bot] in #1638
• feat(ai): register gpt-6-astra and gpt-6-astra-pro LiteLLM models by @Aviator-Coding in #1640
• fix(container): update image ghcr.io/linkwarden/linkwarden ( v2.16.2 ➔ v2.16.3 ) by @mortyops[bot] in #1641
• chore(container): update image python ( 8edbf9e ➔ e06cc11 ) by @mortyops[bot] in #1642
• fix(container): update image ghcr.io/home-operations/sonarr ( 4.0.19.3011 ➔ 4.0.20.3012 ) by @mortyops[bot] in #1643
• fix(container): update image ghcr.io/coder/chart/coder ( 2.36.4 ➔ 2.36.5 ) by @mortyops[bot] in #1645
• fix(ai): raise litellm memory limits after unbounded /spend/logs OOM by @Aviator-Coding in #1646
• feat(container): update image docker.io/nousresearch/hermes-agent ( v2026.8.31 ➔ v2026.9.7 ) by @mortyops[bot] in #1647
• chore(container): update image ghcr.io/diygod/rsshub ( b6d37f5 ➔ 5d589d9 ) by @mortyops[bot] in #1648
• fix(container): update image quay.io/jetstack/charts/cert-manager ( v1.21.1 ➔ v1.21.2 ) by @mortyops[bot] in #1649
• chore(container): update image ghcr.io/huggingface/text-embeddings-inference ( cb570aa ➔ e0918e6 ) by @mortyops[bot] in #1651
• fix(rook-ceph): separate active CephFS MDS ranks across nodes by @Aviator-Coding in #1650
• fix(container): update image docker.io/nousresearch/hermes-agent ( v2026.9.7 ➔ v2026.9.11 ) by @mortyops[bot] in #1652
• chore(monitoring): remove dead Gatus alert, close automerge gap by @Aviator-Coding in #1655
• fix(container): update image ghcr.io/flaresolverr/flaresolverr ( v3.5.0 ➔ v3.5.2 ) by @mortyops[bot] in #1656
• fix(renovate): disable platform automerge to stop premature PR merges by @Aviator-Coding in #1657
• fix(monitoring): persist gatus history on a right-sized claim by @Aviator-Coding in #1658
• fix(plex): stop cluster pod network from reading Plex unauthenticated by @Aviator-Coding in #1659
• feat(kubernetes): label all namespaces with PodSecurity warn/audit=restricted by @Aviator-Coding in #1660
• feat(kopiur): onboard surrealdb and three comfyui volumes to backup coverage by @Aviator-Coding in #1661
• fix(monitoring): add fsGroup to gatus pod to fix sidecar PVC permission denial by @Aviator-Coding in #1662
• fix(monitoring): broaden Gatus paging after fixing false-red checks by @Aviator-Coding in #1663
• fix(rook-ceph): raise slow-op alert threshold, shorten HEALTH_WARN latch window by @Aviator-Coding in #1665
• feat(flux-system): gate headlamp dashboard behind Authentik SSO by @Aviator-Coding in #1667
• feat(cloudnative-pg): add suspended off-site R2 mirror of the postgres-17 archive by @Aviator-Coding in #1666
• feat(volsync): add retired-repository expiry policy and apply plan by @Aviator-Coding in #1668
• feat(litellm): adopt agent-swarm-captain and agent-swarm-paid virtual keys by @Aviator-Coding in #1669
• chore(container): update image ghcr.io/diygod/rsshub ( 5d589d9 ➔ e5b4bbb ) by @mortyops[bot] in #1664
• feat(litellm): declare agent-swarm-network-broker virtual key by @Aviator-Coding in #1671
• docs(backups): prove media/plex r2 restore at standing 10Gi cache by @Aviator-Coding in #1672
• fix(container): update image ghcr.io/home-operations/charts/konflate ( 0.6.3 ➔ 0.6.4 ) by @mortyops[bot] in #1670
• fix(container): update image ghcr.io/home-operations/prowlarr ( 2.6.3.5592 ➔ 2.6.4.5611 ) by @mortyops[bot] in #1673
• feat(container): update image docker.io/grafana/mcp-grafana ( 1.3.0 ➔ 1.4.0 ) by @mortyops[bot] in #1676
• feat(ai): expose the local CPU embedder through LiteLLM and the LLM gateway by @Aviator-Coding in #1678
• fix(container): update image docker.io/grafana/mcp-grafana ( 1.4.0 ➔ 1.4.1 ) by @mortyops[bot] in #1677
• fix: stop ai/vllm from being first evicted on talos-3 by @Aviator-Coding in #1680
• feat(ai): swap local embedder to Qwen3-Embedding-0.6B for full-context CPU embeddings by @Aviator-Coding in #1681
• fix(ai): drop vllm memory request to 39Gi so it schedules on talos-3 by @Aviator-Coding in #1683
• fix(deps): update mcp-server-kubernetes ( 4.1.6 ➔ 4.1.7 ) by @mortyops[bot] in #1679
• chore(container): update image ghcr.io/diygod/rsshub ( e5b4bbb ➔ 2580aab ) by @mortyops[bot] in #1675
• fix(deps): update random ( 3.9.0 ➔ 3.9.1 ) by @mortyops[bot] in #1653
• fix(ai): alert on vllm memory approaching its 48Gi limit by @Aviator-Coding in #1682
• fix(ai): correct embedding server memory sizing for float32 weights by @Aviator-Coding in #1685
• docs(monitoring): correct a dead-alert audit - 10 false positives, 25 unrepairable, 0 repaired by @Aviator-Coding in #1684
• chore(container): update image ghcr.io/huggingface/text-embeddings-inference ( e0918e6 ➔ b717eba ) by @mortyops[bot] in #1687
• chore(container): update image ghcr.io/diygod/rsshub ( 2580aab ➔ 628d21e ) by @mortyops[bot] in #1686
• feat(ai): remove comfyui and comfyui-mcp by @Aviator-Coding in #1692
• fix(container): update image docker.io/grafana/mcp-grafana ( 1.4.1 ➔ 1.4.2 ) by @mortyops[bot] in #1688
• fix(hermes): bound state.db growth via upstream sessions retention by @Aviator-Coding in #1693
• feat(ai): monitor hermes gateway health and state.db capacity by @Aviator-Coding in #1694
• fix(container): update image ghcr.io/joryirving/opencode ( 1.18.30 ➔ 1.18.31 ) by @mortyops[bot] in #1691
• fix(container): update image ghcr.io/home-operations/radarr ( 6.4.3.10645 ➔ 6.4.4.10684 ) by @mortyops[bot] in #1690
• fix(container): update image ghcr.io/home-operations/charts/kopiur ( 0.10.7 ➔ 0.10.8 ) by @mortyops[bot] in #1628
• fix(monitoring): route pushover alerts by severity and repair dead/latched rules by @Aviator-Coding in #1699
• chore(container): update image ghcr.io/diygod/rsshub ( 628d21e ➔ 6bba39d ) by @mortyops[bot] in #1696
• fix(hermes): bound the unclean-restart integrity-check outage by @Aviator-Coding in #1695
• feat(ai): serve embeddings from the B70 GPU instead of CPU by @Aviator-Coding in #1702
• docs(hardware): add pre-power-work shutdown runbook, record talos-3 upgrade outcome by @Aviator-Coding in #1703
• fix(home-automation): add real health monitoring for Home Assistant by @Aviator-Coding in #1704
• feat(monitoring): wire Watchdog to an external Healthchecks.io dead-man's switch by @Aviator-Coding in #1705
• chore(container): update image ghcr.io/diygod/rsshub ( 6bba39d ➔ 8c5d2ea ) by @mortyops[bot] in #1701
• fix(monitoring): repair dead selectors and probes across the fleet by @Aviator-Coding in #1698
• fix(ai): stop embedding-gpu OOMKills under sustained backfill load by @Aviator-Coding in #1708
• fix(ai): bound ai/embedding-gpu's host prompt cache instead of raising its memory ceiling by @Aviator-Coding in #1710
• fix(ai): assert embedding vector values in embedding-gpu health probes by @Aviator-Coding in #1711
• fix(container): update image ghcr.io/home-operations/radarr ( 6.4.4.10684 ➔ 6.4.4.10685 ) by @mortyops[bot] in #1713
• fix(container): update image ghcr.io/home-operations/prowlarr ( 2.6.4.5611 ➔ 2.6.5.5623 ) by @mortyops[bot] in #1712
• chore(container): update image ghcr.io/diygod/rsshub ( 8c5d2ea ➔ 6408290 ) by @mortyops[bot] in #1709
• fix(container): update image docker.io/falkordb/falkordb ( v4.20.4 ➔ v4.20.6 ) by @mortyops[bot] in #1706
• fix(container): update image ghcr.io/home-operations/charts/tuppr ( 0.5.4 ➔ 0.5.5 ) by @mortyops[bot] in #1700
• chore(container): update image ghcr.io/huggingface/text-embeddings-inference ( b717eba ➔ 2538ea1 ) by @mortyops[bot] in #1697
• fix(container): update image docker.io/nousresearch/hermes-agent ( v2026.9.11 ➔ v2026.9.14 ) by @mortyops[bot] in #1689
• chore(container): update image ghcr.io/diygod/rsshub ( 6408290 ➔ 074f342 ) by @mortyops[bot] in #1714
• fix(container): update image quay.io/prometheus/alertmanager ( v0.34.0 ➔ v0.34.1 ) by @mortyops[bot] in #1715
• chore(container): update image ghcr.io/huggingface/text-embeddings-inference ( 2538ea1 ➔ cc1f06b ) by @mortyops[bot] in #1716
• feat(samba): add general-purpose shared-files LAN share, mounted in hermes by @Aviator-Coding in #1720
• chore(container): update image ghcr.io/joryirving/opencode ( 69018c2 ➔ f1a80e3 ) by @mortyops[bot] in #1721
• chore(container): update image ghcr.io/diygod/rsshub ( 074f342 ➔ c7ad958 ) by @mortyops[bot] in #1719
• fix(container): update image ghcr.io/bjw-s-labs/helm/multus ( 1.3.3 ➔ 1.3.5 ) by @mortyops[bot] in #1717
• fix(container): update image ghcr.io/home-operations/charts/tuppr ( 0.5.5 ➔ 0.5.6 ) by @mortyops[bot] in #1718
• fix(deps): update aqua:siderolabs/talos ( 1.14.0 ➔ 1.14.1 ) by @mortyops[bot] in #1726
• fix(container): update image ghcr.io/coder/chart/coder ( 2.36.5 ➔ 2.36.6 ) by @mortyops[bot] in #1725
• chore(container): update image ghcr.io/joryirving/opencode ( f1a80e3 ➔ 7dce59b ) by @mortyops[bot] in #1724
• chore(container): update image ghcr.io/diygod/rsshub ( c7ad958 ➔ ec308df ) by @mortyops[bot] in #1723
• feat(container)!: Update image ghcr.io/mendhak/http-https-echo ( 41 ➔ 42 ) by @mortyops[bot] in #1722
• chore(container): update image ghcr.io/diygod/rsshub ( ec308df ➔ 03cb149 ) by @mortyops[bot] in #1727
• chore(container): update image ghcr.io/diygod/rsshub ( 03cb149 ➔ cfba9cd ) by @mortyops[bot] in #1728
• chore(container): update image python ( e06cc11 ➔ a2e9788 ) by @mortyops[bot] in #1730
• fix(ai): bound ai/vllm host prompt cache to stop OOM-bound memory leak by @Aviator-Coding in #1731
• chore(container): update image ghcr.io/diygod/rsshub ( cfba9cd ➔ 22845ad ) by @mortyops[bot] in #1732
• chore(container): update image python ( a2e9788 ➔ be8ccd0 ) by @mortyops[bot] in #1733
• fix(container): update image ghcr.io/home-operations/charts/kopiur ( 0.10.8 ➔ 0.10.9 ) by @mortyops[bot] in #1729
• feat(container)!: Update image ghcr.io/prometheus-community/charts/prometheus-operator-crds ( 31.0.1 ➔ 32.0.0 ) by @mortyops[bot] in #1644
• feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 89.2.4 ➔ 91.4.1 ) by @mortyops[bot] in #1674
• feat(container)!: Update image ghcr.io/grafana-community/helm-charts/tempo ( 2.2.4 ➔ 3.0.0 ) by @mortyops[bot] in #1654
• feat(container)!: Update image ghcr.io/dragonflydb/dragonfly ( v1.40.2 ➔ v2.0.0 ) by @mortyops[bot] in #1707
• feat(ai): grow hermes claim 25Gi -> 40Gi and raise kopiur restore cache to 48Gi by @Aviator-Coding in #1734
• fix(selfhosted): repair n8n health-check latch that hid a 4-day outage by @Aviator-Coding in #1735
• fix(rook-ceph): cut OSD memory request 14Gi -> 12Gi, limit unchanged by @Aviator-Coding in #1736
• feat(container): update image docker.io/grafana/mcp-grafana ( 1.4.2 ➔ 1.5.0 ) by @mortyops[bot] in #1737
• fix(kubernetes): right-size fleet memory requests from measured 14d peaks by @Aviator-Coding in #1738
• fix(kubernetes): right-size fleet CPU limits and requests from measured peaks by @Aviator-Coding in #1739
• feat(litellm): add mac-gnhf virtual key scoped to chat-local by @Aviator-Coding in #1743
• fix(litellm): raise mac-gnhf rate limits to the captain's measured values by @Aviator-Coding in #1744
• fix(container): update image docker.io/grafana/mcp-grafana ( 1.5.0 ➔ 1.5.1 ) by @mortyops[bot] in #1740
• fix(container): update image ghcr.io/home-operations/charts/tuppr ( 0.5.6 ➔ 0.5.7 ) by @mortyops[bot] in #1741
• feat(container): update image dpage/pgadmin4 ( 9.17 ➔ 9.18 ) by @mortyops[bot] in #1742
• fix(container): update image docker.io/nousresearch/hermes-agent ( v2026.9.14 ➔ v2026.9.21 ) by @mortyops[bot] in #1745
• chore(container): update image ghcr.io/diygod/rsshub ( 22845ad ➔ db078d1 ) by @mortyops[bot] in #1746
• fix(container): update image ghcr.io/joryirving/opencode ( 1.18.31 ➔ 1.18.32 ) by @mortyops[bot] in #1747
• fix(monitoring): drop tempo 3.0 idle backend-scheduler noise in promtail by @Aviator-Coding in #1750
• docs(docs): resync reference.md index and record embedder restart evidence by @Aviator-Coding in #1748
• docs(ai): correct comfyui retirement doc and record live orphan removal by @Aviator-Coding in #1749
• fix(rook-ceph): raise operator memory limit and CPU request to survive six-OSD reconcile by @Aviator-Coding in #1751
• fix(database): retire NATS JetStream and nack deployment by @Aviator-Coding in #1752
• fix(ai): disable vllm's oneDNN SDPA leak and alert on unbounded retained memory by @Aviator-Coding in #1754
• chore(container): update image ghcr.io/diygod/rsshub ( db078d1 ➔ cf6bb55 ) by @mortyops[bot] in #1753
• fix(ai): stop VLLMMemoryRetainedAboveBound from paging about terminated pods by @Aviator-Coding in #1756
• chore(container): update image docker.io/library/busybox ( dc2d74b ➔ fd7dc98 ) by @mortyops[bot] in #1755
• chore(container): update image ghcr.io/diygod/rsshub ( cf6bb55 ➔ 15bd3d6 ) by @mortyops[bot] in #1757
• chore(container): update image ghcr.io/huggingface/text-embeddings-inference ( cc1f06b ➔ 1bd34a7 ) by @mortyops[bot] in #1758
• fix(container): update image ghcr.io/cloudnative-pg/charts/cloudnative-pg ( 0.29.0 ➔ 0.29.1 ) by @mortyops[bot] in #1759
• chore(container): update image ghcr.io/diygod/rsshub ( 15bd3d6 ➔ 6244577 ) by @mortyops[bot] in #1765
• feat(deps): update alessandrojcm/commitlint-pre-commit-hook ( v9.26.0 ➔ v9.27.0 ) by @mortyops[bot] in #1764
• fix(container): update image docker.io/nousresearch/hermes-agent ( v2026.9.21 ➔ v2026.9.24 ) by @mortyops[bot] in #1768
• chore(litellm): bump proxy image to v1.102.1 and unblock Renovate minors by @Aviator-Coding in #1766
• docs(litellm): document the [1m] client fix for Claude Code's native-1M context window by @Aviator-Coding in #1767
• chore(container): update image ghcr.io/diygod/rsshub ( 6244577 ➔ 2afbabf ) by @mortyops[bot] in #1770
• fix(container): update image docker.io/falkordb/falkordb ( v4.20.6 ➔ v4.20.7 ) by @mortyops[bot] in #1771
• fix(container): update image ghcr.io/prometheus-community/charts/prometheus-operator-crds ( 32.0.0 ➔ 32.0.1 ) by @mortyops[bot] in #1773
• docs(home-automation): pin zigbee2mqtt network key from live config to 1Password by @Aviator-Coding in #1774
• feat(monitoring): alert on Flux objects suspended over 24h by @Aviator-Coding in #1778
• docs(rook-ceph): re-verify operator memory limit against an uncensored peak by @Aviator-Coding in #1777
• chore(container): update image ghcr.io/diygod/rsshub ( 2afbabf ➔ f237232 ) by @mortyops[bot] in #1775
• chore(container): update image ghcr.io/diygod/rsshub ( f237232 ➔ 84cf87e ) by @mortyops[bot] in #1779
• fix(container): update image ghcr.io/home-operations/charts/kopiur ( 0.10.9 ➔ 0.10.10 ) by @mortyops[bot] in #1776
• feat(container)!: Update image ghcr.io/joryirving/opencode ( 1.18.32 ➔ 2.0.18 ) by @mortyops[bot] in #1772
• chore(talos): bump Kubernetes v1.36.4 -> v1.36.5 across all components by @Aviator-Coding in #1780
• docs: confirm CNPG cordon-reactive switchover mechanism in hardware-incidents runbook by @Aviator-Coding in #1781
• fix(ai): convert hermes custom_providers to providers dict and stamp config version by @Aviator-Coding in #1782
• feat(monitoring): add alerts for postgres backup/WAL staleness, kopiur policy loss, and tdarr node health by @Aviator-Coding in #1783
• feat(monitoring): add Ceph/LiteLLM Grafana dashboards, retire dead TrueNAS boards, fix home 500 by @Aviator-Coding in #1784
• fix(talos): replace talos-3 hostname deny-list with a NoSchedule taint by @Aviator-Coding in #1785
• fix(talos): align tuppr TalosUpgrade version with installer bump to v1.14.1 by @Aviator-Coding in #1789
• fix(monitoring): rename gatus static Echo/Kromgo checks to avoid sidecar collision by @Aviator-Coding in #1787
• fix(ai): declare hermes approvals block for config durability by @Aviator-Coding in #1788
• fix(rook-ceph): honor talos-3 taint in every topologySpreadConstraint by @Aviator-Coding in #1793
• feat(renovate): group Kubernetes control-plane and kubelet images into one PR by @Aviator-Coding in #1790
• feat(authentik): upgrade server to 2026.8.3 by @Aviator-Coding in #1791
• docs(database): add optional CNPG hibernation step to hardware shutdown runbook by @Aviator-Coding in #1792
• feat(deps): update authentik ( 2026.5.1 ➔ 2026.8.0 ) by @mortyops[bot] in #1639
• fix(coredns): keep Talos DHCP search domain out of autopath by @Aviator-Coding in #1794
• chore(container): update image ghcr.io/diygod/rsshub ( 84cf87e ➔ 351f9a9 ) by @mortyops[bot] in #1786
• fix(talos): clear DHCP search domain via ResolverConfig by @Aviator-Coding in #1795
• fix(coredns): drop autopath and pods verified by @Aviator-Coding in #1796
• chore(container): update image ghcr.io/diygod/rsshub ( 351f9a9 ➔ 99c7612 ) by @mortyops[bot] in #1797
• fix(talos): switch talos-3 dedicated taint to PreferNoSchedule and spread CoreDNS by @Aviator-Coding in #1798
• fix(media): push plex token from cluster into 1Password by @Aviator-Coding in #1799
• fix(monitoring): disable unused loki gateway and allow coredns replies by @Aviator-Coding in #1800
• fix(monitoring): remove destination-port restriction on loki DNS ingress rule by @Aviator-Coding in #1803
• fix(kopiur): stop KopiurProjectedCredentialsLeaking from false-firing on leader change by @Aviator-Coding in #1802
• fix(renovate): add regex versioning rule so plexinc/pms-docker updates open PRs by @Aviator-Coding in #1804
• fix(network): admit kube-dns reply traffic on remaining restrictive-ingress policies by @Aviator-Coding in #1807
• fix(container): update image docker.io/plexinc/pms-docker ( 1.43.1.10611-1e34174b1 ➔ 1.43.4.10903-e5521bd8c ) by @mortyops[bot] in #1806
• fix(container): update image alpine/k8s ( 1.37.0 ➔ 1.37.1 ) by @mortyops[bot] in #1805
• chore(container): update image ghcr.io/diygod/rsshub ( 99c7612 ➔ b07c467 ) by @mortyops[bot] in #1801
• chore(container): update image ghcr.io/diygod/rsshub ( b07c467 ➔ 0d43178 ) by @mortyops[bot] in #1808
• docs(ai): document typesafe/jev-1.13 openrouter pass-through path by @Aviator-Coding in #1809
• feat(ai): enable hermes browser tools and bot desktop via -desktop image tag by @Aviator-Coding in #1811
• fix(litellm): lock down the built-in /openrouter pass-through to admin-only by @Aviator-Coding in #1812
• fix(renovate): throttle rsshub digest updates to weekly by @Aviator-Coding in #1813
• fix(litellm): close the /anthropic pass-through on the in-cluster Service DNS path by @Aviator-Coding in #1814
• feat(litellm): add Haiku and Fable Claude Code subscription pass-through by @Aviator-Coding in #1815
• fix(toolhive): unblock MCP sessions by reverting tool-index embedding model by @Aviator-Coding in #1819
• feat(litellm): grant every virtual key access to embedding-local by @Aviator-Coding in #1817
• feat(litellm): publish models and metadata to the AI Hub by @Aviator-Coding in #1818
• docs: relocate GPU/litellm findings to subsystem skills; fix CI script exec bits by @Aviator-Coding in #1820
• fix(embedding-gpu): bound request scheduling so bursts never hang chat by @Aviator-Coding in #1821
• feat(litellm-pgvector): add pgvector vector store for LiteLLM with OpenRouter embeddings by @Aviator-Coding in #1822
• fix(litellm-pgvector): keep libpq vars out of the postgres-init Secret by @Aviator-Coding in #1823
• fix(ci): remove trigger-level path filters blocking branch protection by @Aviator-Coding in #1824
• fix(litellm): use force: enabled so Flux recreates the db-init Jobs by @Aviator-Coding in #1825
• feat(container): update image docker.io/grafana/mcp-grafana ( 1.5.1 ➔ 1.6.0 ) by @mortyops[bot] in #1826
• fix(container): update image docker.io/grafana/mcp-grafana ( 1.6.0 ➔ 1.6.1 ) by @mortyops[bot] in #1827
• feat(litellm): add jev-decisions virtual key for Jev decisions pass-through by @Aviator-Coding in #1830
• fix(litellm-operator): drop wait: true to enable healthChecks by @Aviator-Coding in #1831
• docs: remove outdated pvc-health-checks guide by @Aviator-Coding in #1833
• fix(grafana): make gnetId dashboards visible to Renovate by @Aviator-Coding in #1832
• docs: move skills to .agents/skills and add docs guardrail gates by @Aviator-Coding in #1834
• chore(grafana-dashboards)!: Update dashboard Kube-State-Metrics (1 → 12) by @mortyops[bot] in #1835
• chore(grafana-dashboards)!: Update dashboard Kubernetes / System / API Server (19 → 21) by @mortyops[bot] in #1836
• chore(grafana-dashboards)!: Update dashboard Kubernetes / Views / Namespaces (43 → 46) by @mortyops[bot] in #1837
• chore(grafana-dashboards)!: Update dashboard VolSync Dashboard (2 → 3) by @mortyops[bot] in #1843
• chore(grafana-dashboards)!: Update dashboard Kubernetes / Views / Nodes (36 → 40) by @mortyops[bot] in #1838
• chore(grafana-dashboards)!: Update dashboard Kubernetes / Views / Pods (36 → 41) by @mortyops[bot] in #1839
• chore(grafana-dashboards)!: Update dashboard Node Exporter Full (40 → 45) by @mortyops[bot] in #1840
• chore(grafana-dashboards)!: Update dashboard Prometheus Stats (1 → 2) by @mortyops[bot] in #1841
• chore(grafana-dashboards)!: Update dashboard Tdarr (1 → 6) by @mortyops[bot] in #1842
• docs(litellm): move LiteLLM docs and comment overhead into litellm-proxy skill by @Aviator-Coding in #1845
• ci(github-action)!: Update action jdx/mise-action ( v4.3.0 ➔ v5.0.0 ) by @mortyops[bot] in #1829
• fix(container): update image mirror.gcr.io/envoyproxy/gateway-helm ( v1.9.1 ➔ v1.9.2 ) by @mortyops[bot] in #1828
• chore(container): update image ghcr.io/diygod/rsshub ( 0d43178 ➔ 90c5546 ) by @mortyops[bot] in #1810
• fix(kopiur): fail loudly on empty populator restores and add full-cluster R2 restore runbook by @Aviator-Coding in #1844
• docs(platform): condense platform docs and comments into specialist skills by @Aviator-Coding in #1846
• docs(apps): condense apps and observability docs into specialist skills by @Aviator-Coding in #1847
• ci(github-action)!: Update action jdx/mise-action ( v4.3.0 ➔ v5.0.0 ) by @mortyops[bot] in #1848
• docs(backups): condense backup docs and comments into kopiur, pvc-integrity and volsync skills by @Aviator-Coding in #1852
• docs(ai): replace AI stack reports and comment overhead with specialist skills by @Aviator-Coding in #1853
• docs(cluster): condense Ceph, Talos, scheduling and system docs into skills by @Aviator-Coding in #1849
• docs: slim AGENTS.md, delete dated reports, condense comment blocks by @Aviator-Coding in #1855
• docs(flux): fold remaining docs/ runbooks into skills by @Aviator-Coding in #1858
• fix(container): update image ghcr.io/joryirving/opencode ( 2.0.18 ➔ 2.0.19 ) by @mortyops[bot] in #1857
• docs(flux): sweep inline comments and move durable knowledge into skills by @Aviator-Coding in #1860
• docs(ai): sweep stale and noisy inline comments in the ai namespace by @Aviator-Coding in #1861
• docs(monitoring): sweep stale and noisy inline comments in monitoring and database by @Aviator-Coding in #1862
• docs(system): trim stale and noisy inline comments in system, kube-system, rook-ceph and actions-runner by @Aviator-Coding in #1863
• docs(flux): sweep inline comments in the remaining namespaces by @Aviator-Coding in #1864
• docs(scripts): trim stale inline comments in scripts, terraform and taskfiles by @Aviator-Coding in #1865
• docs(ai): trim catalog-provenance boilerplate from litellm model CR comments by @Aviator-Coding in #1866
• fix(container): update image docker.io/grafana/mcp-grafana ( 1.6.1 ➔ 1.6.2 ) by @mortyops[bot] in #1867
• docs(renovate): trim stale and noisy comments in renovate config by @Aviator-Coding in #1868
• docs(networking): move plex ingress policy rationale into the networking skill by @Aviator-Coding in #1869
• docs(github-action): trim noisy and stale comments inside workflow run blocks by @Aviator-Coding in #1870
• docs(kubernetes): collapse repeated kopiur pointer comments in overlays by @Aviator-Coding in #1871
• docs(flux): trim comments inside embedded scripts and payloads by @Aviator-Coding in #1872
• feat(ai): require a bearer token on the MCP gateway route by @Aviator-Coding in #1876
• chore(renovate): never automerge the CloudNativePG operator by @Aviator-Coding in #1877
• fix(envoy-gateway): spread gateway proxy replicas across nodes with a hard rule by @Aviator-Coding in #1878
• feat(flux): alert when a HelmRelease or Kustomization stays not Ready by @Aviator-Coding in #1880
• feat(networking): put Authentik SSO in front of hermes-code and hass-code terminals by @Aviator-Coding in #1881
• fix(toolhive): make flux MCP read-only and give the vmcp gateway 2Gi with a memory alert by @Aviator-Coding in #1879
• fix(toolhive): close the vmcp Service bypass and move consumers to the token route by @Aviator-Coding in #1882
• fix(toolhive): scrape vmcp metrics on the main port 4483 by @Aviator-Coding in #1884
• feat(container): update image ghcr.io/berriai/litellm-non_root ( v1.102.1 ➔ v1.103.1 ) by @mortyops[bot] in #1885
• fix(container): update image ghcr.io/joryirving/opencode ( 2.0.19 ➔ 2.0.20 ) by @mortyops[bot] in #1883
• fix(container): update rook-ceph group ( v1.20.7 ➔ v1.20.8 ) by @mortyops[bot] in #1873
• docs(ai): sweep comments from embedded payloads and move history to skills by @Aviator-Coding in #1886
• feat(downloads): add exportarr metrics for sonarr and radarr by @Aviator-Coding in #1887
• fix(grafana): revive blank dashboard panels and clean up landing page, plugins and noise dashboards by @Aviator-Coding in #1888
• fix(downloads): remove failing exportarr sidecars from sonarr and radarr by @Aviator-Coding in #1890
• fix(container): update image ghcr.io/stakater/charts/reloader ( 2.2.17 ➔ 2.2.18 ) by @mortyops[bot] in #1889
• fix(container): update image docker.io/grafana/mcp-grafana ( 1.6.2 ➔ 1.6.3 ) by @mortyops[bot] in #1898
• fix(toolhive): admit reply traffic to the vmcp pod under its ingress NetworkPolicy by @Aviator-Coding in #1891
• fix(litellm): retry transient 400s on the pgvector embedding model by @Aviator-Coding in #1897
• fix(fstrim): skip mounts that vanish after discovery by @Aviator-Coding in #1892
• fix(github-action): require renovate annotation to stay above its key line by @Aviator-Coding in #1896
• fix(grafana): fix ARC dashboard datasource and remove dashboards that can never show data by @Aviator-Coding in #1893
• docs(skills): restore Authentik token, 1Password item and CephFS probe procedures, correct wait tripwire by @Aviator-Coding in #1894
• fix(hermes): hydrate MCP gateway vars into the multiplexed profile scope by @Aviator-Coding in #1895
• fix(github-action): require filter job in Flate and Image Pull success gates by @Aviator-Coding in #1899
• fix(deps): update mcp-server-kubernetes ( 4.1.7 ➔ 4.1.8 ) by @mortyops[bot] in #1874
• feat(container)!: Update image docker.io/falkordb/falkordb ( v4.20.7 ➔ 6.0.0 ) by @mortyops[bot] in #1859
• docs(litellm-proxy): document vector store row deletion via psql by @Aviator-Coding in #1900
• feat(system): alert when the fstrim CronJob's latest run failed or is stale by @Aviator-Coding in #1901
• fix(falkordb): mount writable /tmp emptyDir for 6.0.0 startup by @Aviator-Coding in #1902
• feat(litellm): cap embedding-local by rate, in-flight requests and timeout by @Aviator-Coding in #1904

Full Changelog: 2026.8.1...2026.10.0