2026.8.1

What's Changed

• feat(container): update image ghcr.io/haveagitgat/tdarr_node ( 2.81.01 ➔ 2.85.01 ) by @mortyops[bot] in #1246
• feat(container): update image ghcr.io/haveagitgat/tdarr ( 2.81.01 ➔ 2.85.01 ) by @mortyops[bot] in #1245
• feat(container): update image ghcr.io/home-operations/actions-runner ( 2.335.1 ➔ 2.336.0 ) by @mortyops[bot] in #1247
• feat(container): update image ghcr.io/home-operations/gatus-sidecar ( 0.3.6 ➔ 0.4.0 ) by @mortyops[bot] in #1249
• feat(container): update image ghcr.io/home-operations/charts/tuppr ( 0.3.2 ➔ 0.4.6 ) by @mortyops[bot] in #1248
• feat(container): update image ghcr.io/homeassistant-ai/ha-mcp ( 7.12.1 ➔ 7.14.2 ) by @mortyops[bot] in #1250
• feat(container): update image ghcr.io/open-webui/open-webui ( v0.10.2 ➔ v0.11.0 ) by @mortyops[bot] in #1251
• feat(container): update image ghcr.io/piraeusdatastore/helm-charts/snapshot-controller ( 5.1.1 ➔ 5.2.0 ) by @mortyops[bot] in #1252
• feat(container): update image ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack ( 0.86.2 ➔ 0.87.0 ) by @mortyops[bot] in #1253
• feat(deps): update aqua:cloudflare/cloudflared ( 2026.6.1 ➔ 2026.7.3 ) by @mortyops[bot] in #1254
• feat(helm): update chart k8tz ( 0.19.0 ➔ 0.20.0 ) by @mortyops[bot] in #1255
• feat(helm): update chart surrealdb ( 0.4.0 ➔ 0.5.0 ) by @mortyops[bot] in #1256
• chore(container): update image docker.io/library/busybox ( fd8d9aa ➔ dc2d74b ) by @mortyops[bot] in #1259
• ci(github-action): update action github/codeql-action ( v4.37.3 ➔ v4.37.4 ) by @mortyops[bot] in #1260
• fix(container): update image ghcr.io/calibrain/calibre-web-automated-book-downloader-extbp ( v1.3.4 ➔ v1.3.5 ) by @mortyops[bot] in #1262
• fix(container): update image ghcr.io/browserless/chromium ( v2.55.1 ➔ v2.55.3 ) by @mortyops[bot] in #1261
• ci(github-action): update action docker/login-action ( v4.5.1 ➔ v4.6.0 ) by @mortyops[bot] in #1271
• fix(container): update image ghcr.io/home-operations/charts-mirror/keda ( 2.20.1 ➔ 2.20.2 ) by @mortyops[bot] in #1263
• fix(container): update image ghcr.io/home-operations/esphome ( 2026.7.2 ➔ 2026.7.3 ) by @mortyops[bot] in #1264
• fix(container): update image ghcr.io/home-operations/radarr ( 6.4.0.10523 ➔ 6.4.1.10545 ) by @mortyops[bot] in #1265
• fix(container): update image ghcr.io/nesquena/hermes-webui ( 0.52.157 ➔ 0.52.158 ) by @mortyops[bot] in #1266
• fix(container): update image ghcr.io/qdm12/gluetun ( v3.41.1 ➔ v3.41.3 ) by @mortyops[bot] in #1267
• fix(container): update image quay.io/jetstack/charts/cert-manager ( v1.21.0 ➔ v1.21.1 ) by @mortyops[bot] in #1268
• fix(deps): update aqua:cilium/cilium-cli ( 0.19.6 ➔ 0.19.7 ) by @mortyops[bot] in #1270
• fix(container): update rook-ceph group ( v1.20.2 ➔ v1.20.3 ) by @mortyops[bot] in #1269
• ci(github-action): update action renovatebot/github-action ( v46.1.20 ➔ v46.2.1 ) by @mortyops[bot] in #1272
• feat(container): update image dpage/pgadmin4 ( 9.16 ➔ 9.17 ) by @mortyops[bot] in #1273
• feat(container): update image ghcr.io/coredns/charts/coredns ( 1.46.2 ➔ 1.47.0 ) by @mortyops[bot] in #1274
• feat(container): update image ghcr.io/headlamp-k8s/headlamp-plugin-flux ( v0.6.0 ➔ v0.7.0 ) by @mortyops[bot] in #1275
• feat(container): update image ghcr.io/koenkk/zigbee2mqtt ( 2.12.1 ➔ 2.13.0 ) by @mortyops[bot] in #1276
• feat(container): update image ghcr.io/linkwarden/linkwarden ( v2.15.1 ➔ v2.16.0 ) by @mortyops[bot] in #1277
• feat(container): update image ghcr.io/n8n-io/n8n ( 2.32.2 ➔ 2.34.4 ) by @mortyops[bot] in #1278
• feat(container): update image ghcr.io/remsky/kokoro-fastapi-cpu ( v0.6.0 ➔ v0.7.2 ) by @mortyops[bot] in #1279
• feat(container): update image ghcr.io/stacklok/toolhive/toolhive-operator ( 0.40.1 ➔ 0.42.0 ) by @mortyops[bot] in #1280
• feat(container): update image ghcr.io/stacklok/toolhive/toolhive-operator-crds ( 0.40.1 ➔ 0.42.0 ) by @mortyops[bot] in #1281
• feat(helm): update chart headlamp ( 0.43.0 ➔ 0.44.0 ) by @mortyops[bot] in #1282
• chore(container): update image ghcr.io/diygod/rsshub ( ddb0566 ➔ f325c8c ) by @mortyops[bot] in #1283
• ci(github-action): update action github/codeql-action ( v4.37.4 ➔ v4.37.6 ) by @mortyops[bot] in #1284
• fix(container): update image docker.io/syncthing/syncthing ( 2.1.2 ➔ 2.1.3 ) by @mortyops[bot] in #1285
• fix(container): update image ghcr.io/home-operations/charts/tuppr ( 0.4.6 ➔ 0.4.7 ) by @mortyops[bot] in #1286
• fix(container): update image ghcr.io/home-operations/esphome ( 2026.7.3 ➔ 2026.7.4 ) by @mortyops[bot] in #1287
• fix(container): update image ghcr.io/home-operations/prowlarr ( 2.6.0.5494 ➔ 2.6.1.5509 ) by @mortyops[bot] in #1288
• fix(container): update image ghcr.io/home-operations/sonarr ( 4.0.19.2995 ➔ 4.0.19.2997 ) by @mortyops[bot] in #1289
• fix(container): update image ghcr.io/recyclarr/recyclarr ( 8.7.0 ➔ 8.7.1 ) by @mortyops[bot] in #1290
• fix(container): update image ghcr.io/siderolabs/talosctl ( v1.13.7 ➔ v1.13.8 ) by @mortyops[bot] in #1291
• fix(container): update image ghcr.io/stakater/charts/reloader ( 2.2.14 ➔ 2.2.16 ) by @mortyops[bot] in #1292
• fix(container): update image quay.io/ceph/ceph ( v20.2.2 ➔ v20.2.3 ) by @mortyops[bot] in #1293
• fix(deps): update aqua:helmfile/helmfile ( 1.7.1 ➔ 1.7.3 ) by @mortyops[bot] in #1294
• fix(deps): update python ( 3.14.6 ➔ 3.14.7 ) by @mortyops[bot] in #1295
• feat(container): update flux operator group by @mortyops[bot] in #1296
• feat(container): update image docker.io/binwiederhier/ntfy ( v2.26.3 ➔ v2.27.0 ) by @mortyops[bot] in #1297
• feat(container): update image docker.io/nousresearch/hermes-agent ( v2026.7.20 ➔ v2026.8.3 ) by @mortyops[bot] in #1298
• feat(container): update image ghcr.io/dragonflydb/dragonfly ( v1.39.0 ➔ v1.40.1 ) by @mortyops[bot] in #1299
• feat(container): update image ghcr.io/unpoller/unpoller ( v3.3.4 ➔ v3.4.1 ) by @mortyops[bot] in #1303
• feat(container): update image ghcr.io/home-operations/home-assistant ( 2026.7.4 ➔ 2026.8.1 ) by @mortyops[bot] in #1302
• feat(container): update image ghcr.io/haveagitgat/tdarr ( 2.85.01 ➔ 2.86.01 ) by @mortyops[bot] in #1300
• feat(container): update image ghcr.io/haveagitgat/tdarr_node ( 2.85.01 ➔ 2.86.01 ) by @mortyops[bot] in #1301
• feat(container): update image qdrant/qdrant ( v1.18.3 ➔ v1.19.0 ) by @mortyops[bot] in #1304
• feat(deps): update aqua:cli/cli ( 2.96.0 ➔ 2.97.0 ) by @mortyops[bot] in #1305
• feat(helm): update chart coder ( 2.35.3 ➔ 2.36.0 ) by @mortyops[bot] in #1306
• chore(container): update image ghcr.io/diygod/rsshub ( f325c8c ➔ e51628e ) by @mortyops[bot] in #1308
• ci(github-action): update action renovatebot/github-action ( v46.2.1 ➔ v46.2.2 ) by @mortyops[bot] in #1309
• fix(container): update image docker.io/nousresearch/hermes-agent ( v2026.8.3 ➔ v2026.8.13 ) by @mortyops[bot] in #1310
• fix(container): update image ghcr.io/grafana-community/helm-charts/tempo ( 2.2.3 ➔ 2.2.4 ) by @mortyops[bot] in #1313
• fix(container): update image ghcr.io/browserless/chromium ( v2.55.3 ➔ v2.55.4 ) by @mortyops[bot] in #1311
• fix(container): update image ghcr.io/calibrain/calibre-web-automated-book-downloader-extbp ( v1.3.5 ➔ v1.3.9 ) by @mortyops[bot] in #1312
• fix(container): update image ghcr.io/home-operations/sonarr ( 4.0.19.2997 ➔ 4.0.19.3001 ) by @mortyops[bot] in #1314
• fix(container): update image ghcr.io/misospace/miso-gallery ( 0.1.18 ➔ 0.1.19 ) by @mortyops[bot] in #1315
• fix(container): update rook-ceph group ( v1.20.3 ➔ v1.20.4 ) by @mortyops[bot] in #1316
• fix(deps): update aqua:fluxcd/flux2 ( 2.9.3 ➔ 2.9.4 ) by @mortyops[bot] in #1317
• feat(container): update image ghcr.io/autobrr/autobrr ( v1.83.0 ➔ v1.84.0 ) by @mortyops[bot] in #1318
• feat(container): update image ghcr.io/cloudnative-pg/postgresql ( 18.4 ➔ 18.6 ) by @mortyops[bot] in #1319
• feat(container): update image ghcr.io/coder/code-server ( 4.131.0 ➔ 4.132.0 ) by @mortyops[bot] in #1320
• feat(container): update image ghcr.io/external-secrets/charts/external-secrets ( 2.8.0 ➔ 2.9.0 ) by @mortyops[bot] in #1321
• feat(container): update image ghcr.io/home-operations/charts/tuppr ( 0.4.7 ➔ 0.5.0 ) by @mortyops[bot] in #1322
• feat(container): update image ghcr.io/home-operations/sabnzbd ( 5.0.4 ➔ 5.1.0 ) by @mortyops[bot] in #1324
• feat(container): update image ghcr.io/home-operations/postgres-init ( 18.4 ➔ 18.6 ) by @mortyops[bot] in #1323
• feat(container): update image ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack ( 0.87.0 ➔ 0.91.0 ) by @mortyops[bot] in #1325
• feat(github-release): update release uv ( 0.11.32 ➔ 0.12.5 ) by @mortyops[bot] in #1326
• ci(github-action): update action github/codeql-action ( v4.37.6 ➔ v4.37.7 ) by @mortyops[bot] in #1327
• fix(container): update image docker.io/nousresearch/hermes-agent ( v2026.8.13 ➔ v2026.8.18 ) by @mortyops[bot] in #1328
• fix(container): update image ghcr.io/bjw-s-labs/helm/multus ( 1.3.2 ➔ 1.3.3 ) by @mortyops[bot] in #1329
• fix(container): update image ghcr.io/home-operations/home-assistant ( 2026.8.1 ➔ 2026.8.2 ) by @mortyops[bot] in #1330
• fix(container): update image ghcr.io/joryirving/agentmemory ( 0.9.28 ➔ 0.9.29 ) by @mortyops[bot] in #1331
• fix(container): update image ghcr.io/linkwarden/linkwarden ( v2.16.0 ➔ v2.16.1 ) by @mortyops[bot] in #1332
• fix(deps): update aqua:helm/helm ( 4.2.3 ➔ 4.2.4 ) by @mortyops[bot] in #1333
• feat(container): update image docker.io/cloudflare/cloudflared ( 2026.7.3 ➔ 2026.8.2 ) by @mortyops[bot] in #1334
• feat(container): update image ghcr.io/bjw-s-labs/helm/app-template ( 5.0.1 ➔ 5.1.0 ) by @mortyops[bot] in #1335
• fix(github-action): source TALOS_VERSION from .mise.toml in talosctl-busybox build by @Aviator-Coding in #1342
• feat(container): update image ghcr.io/coder/code-server ( 4.132.0 ➔ 4.133.0 ) by @mortyops[bot] in #1336
• fix(talos): tighten kubelet imageGC thresholds to 60/45 by @Aviator-Coding in #1345
• docs: reconcile README Talos upgrade section with justfile tooling by @Aviator-Coding in #1343
• docs(docs): close talos-1 ram rma and record 96gb per node by @Aviator-Coding in #1347
• ci: align commit-message convention with live history by @Aviator-Coding in #1348
• docs(rook-ceph): confirm v20.2.3 does not fix default csi subvolumegroup by @Aviator-Coding in #1349
• docs(ai): lift flash-attn/q8_0 KV prohibition on B70 after verification by @Aviator-Coding in #1352
• docs(docs): rewrite agentgateway docs against live manifests, retire kgateway tree by @Aviator-Coding in #1353
• docs: fix stale root and Talos documentation from docs audit by @Aviator-Coding in #1350
• fix(actions-runner-system): correct false-firing alert and align docs with live state by @Aviator-Coding in #1356
• fix(ai): retire stale kagent/kmcp docs and correct hermes/alertmanager config by @Aviator-Coding in #1357
• docs(network): rewrite BGP/Cilium docs as current-state, fix comfyui gatus check by @Aviator-Coding in #1354
• docs(ceph): rewrite storage recovery docs against live backup system and version baselines by @Aviator-Coding in #1355
• feat(container): update image ghcr.io/remsky/kokoro-fastapi-cpu ( v0.7.2 ➔ v0.8.0 ) by @mortyops[bot] in #1337
• feat(container): update image mirror.gcr.io/envoyproxy/gateway-helm ( v1.8.3 ➔ v1.9.0 ) by @mortyops[bot] in #1338
• feat(actions-runner): pre-bake buildx-verified runner image for home-ops scale set by @Aviator-Coding in #1351
• feat(deps): update aqua:cloudflare/cloudflared ( 2026.7.3 ➔ 2026.8.2 ) by @mortyops[bot] in #1340
• feat(container): update image quay.io/prometheus/alertmanager ( v0.33.1 ➔ v0.34.0 ) by @mortyops[bot] in #1339
• fix(deps): update mcp-server-kubernetes ( 3.9.1 ➔ 3.9.3 ) by @mortyops[bot] in #1064
• ci(github-action)!: Update action actions/labeler ( v6.2.0 ➔ v7.0.0 ) by @mortyops[bot] in #1208
• feat(container)!: Update image ghcr.io/unpoller/unpoller ( v3.4.1 ➔ v4.0.0 ) by @mortyops[bot] in #1341
• feat(container)!: Update image ghcr.io/homeassistant-ai/ha-mcp ( 7.14.2 ➔ 8.3.0 ) by @mortyops[bot] in #1258
• feat(container)!: Update image ghcr.io/paperless-ngx/paperless-ngx ( 2.20.15 ➔ 3.0.5 ) by @mortyops[bot] in #1209
• feat(container)!: Update image ghcr.io/grafana-community/helm-charts/loki ( 17.4.11 ➔ 18.11.0 ) by @mortyops[bot] in #1069
• feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 ➔ v2.1.2 ) by @mortyops[bot] in #1307
• feat(container)!: Update immich monorepo ( v2.7.5 ➔ v3.1.0 ) by @mortyops[bot] in #1117
• feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-state-metrics ( 7.8.1 ➔ 8.4.0 ) by @mortyops[bot] in #1207
• feat(container)!: Update image ghcr.io/prometheus-community/charts/prometheus-operator-crds ( 30.0.1 ➔ 31.0.1 ) by @mortyops[bot] in #1227
• feat(container)!: Update image ghcr.io/prometheus-community/charts/kube-prometheus-stack ( 87.14.0 ➔ 88.5.3 ) by @mortyops[bot] in #1257
• fix(ai): bump hermes VOLSYNC_CAPACITY to match actual PVC size by @Aviator-Coding in #1359
• docs(ai): record Qwen3.6→3.8 upgrade evaluation, stay on 3.6 by @Aviator-Coding in #1358
• docs(taskfiles): update stale 10.10.3.x IPs to current 10.10.10.x addressing by @Aviator-Coding in #1360
• feat(github-action): migrate cache-independent workflows to local ARC runner by @Aviator-Coding in #1361
• fix(container): roll back bazarr to 1.5.6 (1.6.0 hangs under Python 3.14) by @Aviator-Coding in #1368
• fix(radarr): deprioritize parse-risky releases, alert on stuck import queue by @Aviator-Coding in #1369
• feat(deps)!: Update mcp-server-kubernetes ( 3.9.3 ➔ 4.1.4 ) by @mortyops[bot] in #1147
• fix(hermes): remove crashlooping webui sidecar by @Aviator-Coding in #1370
• fix(flux): resolve postBuild.substitute collisions freezing 4 kustomizations by @Aviator-Coding in #1371
• fix(agentgateway): surface LLM/latency panels and fix cost/dashboard bugs by @Aviator-Coding in #1372
• fix(actions-runner-system): retire no-op actions-runner-buildx custom image by @Aviator-Coding in #1377
• fix(deps): hold container/helm minor auto-merges for 3 days by @Aviator-Coding in #1376
• fix(talos): close k8s version drift and renovate blind spot by @Aviator-Coding in #1375
• docs(flux): document the postBuild.substitute collision failure mode by @Aviator-Coding in #1378
• fix(ai): OOM-fix agentmemory and add pod-level health checks across the ai namespace by @Aviator-Coding in #1373
• feat(volsync): back up second volumes for syncthing, paperless-ngx, and perplexica by @Aviator-Coding in #1374
• docs: symlink CLAUDE.md to AGENTS.md, reconcile diverged content by @Aviator-Coding in #1379
• fix(ai): declare comfyui HelmRelease suspend in Git by @Aviator-Coding in #1380
• chore: split just/task boundary, remove dead taskfiles by @Aviator-Coding in #1381
• chore(ai): retire kokoro, perplexica, miso-gallery, open-webui and qdrant; drop open-notebook manifests by @Aviator-Coding in #1382
• fix(talos): close CLI pin gap and raise TalosUpgrade CR target to v1.13.9 by @Aviator-Coding in #1383
• fix(deps): update aqua:mikefarah/yq ( 4.53.3 ➔ 4.53.4 ) by @mortyops[bot] in #1363
• fix(rook-ceph): disable rook mgr module to stop crash storm by @Aviator-Coding in #1384
• fix(rook-ceph): match RECENT_MGR_MODULE_CRASH in CephCrashesDetected alert by @Aviator-Coding in #1388
• fix(github-action): stop diff comment failing on large PR diffs by @Aviator-Coding in #1389
• fix(talos): sync machineconfig installer pin to v1.13.9 by @Aviator-Coding in #1390
• ci(validate): add CI gates for talos, bootstrap, and renovate config by @Aviator-Coding in #1391
• ci(github-action): update action docker/setup-buildx-action ( v4.2.0 ➔ v4.3.0 ) by @mortyops[bot] in #1365
• fix(container): update image quay.io/ceph/ceph ( v20.2.3 -> v20.2.4 ) [security] by @Aviator-Coding in #1392
• fix(container): update rook-ceph group ( v1.20.4 -> v1.20.6 ) by @Aviator-Coding in #1397
• fix(actions-runner-system): reduce self-hosted runner privilege and add fork guards by @Aviator-Coding in #1395
• fix(rook-ceph): revert talos-1 RAM RMA workarounds and promote OSD to Guaranteed QoS by @Aviator-Coding in #1393
• fix(rook-ceph): remove Ceph mgr dashboard by @Aviator-Coding in #1394
• feat(rook-ceph): rotate daemon cephx keys onto aes256k by @Aviator-Coding in #1398
• fix(monitoring): genericize Talos1MemoryPressure alert off talos-1/48GB pin by @Aviator-Coding in #1399
• docs(rook-ceph): update CephX rotation changelog with PR #1398 and Rook v1.20.6 status by @Aviator-Coding in #1400
• fix(deps): update kubectl ( 1.36.3 ➔ 1.36.4 ) by @mortyops[bot] in #1364
• chore: remove 6 dead unreferenced app directories by @Aviator-Coding in #1410
• fix(rook-ceph): restore Ceph S3 writes broken by v20.2.4 SigV4 check by @Aviator-Coding in #1401
• chore: delete archive graveyards by @Aviator-Coding in #1402
• docs: fix stale VictoriaMetrics reference and mod.just quoting bug by @Aviator-Coding in #1403
• fix(database,security): grow pgadmin PVC and raise cert-controller memory by @Aviator-Coding in #1405
• docs: document main branch protection ruleset by @Aviator-Coding in #1408
• fix(actions-runner-system): stop deleting mid-registration runners and fix zeroed cleanup counters by @Aviator-Coding in #1409
• fix(selfhosted): remove obsolete linkwarden runtime chromium install by @Aviator-Coding in #1407
• fix(downloads): consolidate flaresolverr to network namespace by @Aviator-Coding in #1411
• chore(flux): remove dead HelmRepository and OCIRepository sources by @Aviator-Coding in #1404
• fix(rook-ceph): stop CephMonitorQuorumAtRisk firing critical on healthy clusters by @Aviator-Coding in #1406
• fix(rook): bump WipeDiskJob image to v20.2.4 to match cluster HelmRelease by @Aviator-Coding in #1412
• docs(hardware-incidents): correct talos-1 affinity-revert list by @Aviator-Coding in #1413
• feat(flux): migrate remaining HelmRepository sources to OCI charts by @Aviator-Coding in #1414
• feat(deps): update aqua:cli/cli ( 2.97.0 ➔ 2.98.0 ) by @mortyops[bot] in #1367
• fix(network): disable prune on self-referencing cloudflare Kustomizations by @Aviator-Coding in #1415
• feat(flux): add clusters/main entry-point skeleton alongside flux/cluster by @Aviator-Coding in #1416
• fix(network): point cloudflare Kustomizations at their app directory by @Aviator-Coding in #1420
• fix(network): re-enable prune on cloudflare Kustomizations by @Aviator-Coding in #1422
• feat(flux): flip FluxInstance sync.path to kubernetes/clusters/main by @Aviator-Coding in #1423
• refactor(downloads): move downloads namespace to base + main overlay by @Aviator-Coding in #1425
• fix(agentmemory): de-harmonise auto-forget timer and raise memory limit to 4Gi by @Aviator-Coding in #1421
• docs(volsync): add verified restore drill runbook and fix manual-restore docs by @Aviator-Coding in #1419
• feat(cilium): stage Ceph LAN isolation via audit-mode host firewall by @Aviator-Coding in #1417
• fix(talos): allow os:operator alongside os:admin in Talos API access by @Aviator-Coding in #1427
• refactor(network): migrate namespace to apps/base + apps/main overlay layout by @Aviator-Coding in #1426
• feat(flux): move default namespace into apps/main overlay (S4) by @Aviator-Coding in #1424
• refactor(flux): migrate security and system to apps/base + apps/main by @Aviator-Coding in #1430
• refactor(ai): move ai namespace to base + main overlay by @Aviator-Coding in #1428
• fix(cilium): make Ceph host policy select host endpoints by @Aviator-Coding in #1429
• fix(downloads): unstick bazarr crash loop with linuxserver image by @Aviator-Coding in #1418
• ci(github-action): update action github/codeql-action ( v4.37.7 ➔ v4.37.8 ) by @mortyops[bot] in #1362
• refactor(kubernetes): migrate coder, system-controller, and system-upgrade to apps/base + apps/main by @Aviator-Coding in #1433
• refactor(flux): migrate actions-runner-system and database to base/main overlay by @Aviator-Coding in #1432
• refactor(monitoring): migrate namespace to base/main overlay layout by @Aviator-Coding in #1431
• refactor(rook-ceph): migrate namespace to apps/base + apps/main layout by @Aviator-Coding in #1434
• refactor(selfhosted): migrate namespace to apps/base + apps/main overlay by @Aviator-Coding in #1435
• refactor(flux): migrate home-automation and media to apps/base + apps/main by @Aviator-Coding in #1436
• refactor(kubernetes): finish base/main split for system namespaces by @Aviator-Coding in #1438
• feat(renovate): deploy in-cluster dry-run CronJob alongside GitHub Actions by @Aviator-Coding in #1437
• refactor(flux): dissolve leftover kubernetes/flux entry tree by @Aviator-Coding in #1439
• feat(cilium): enforce Ceph LAN isolation host policy by @Aviator-Coding in #1440
• fix(deps): constrain quay.io/ceph/ceph to stable x.2.z by @Aviator-Coding in #1441
• feat(renovate): cut over live writes to the in-cluster CronJob by @Aviator-Coding in #1442
• fix: split B70 onto devic.es/b70 and force-probe a7a0 iGPUs by @Aviator-Coding in #1443
• fix(talos): restore siderolabs/i915 for a7a0 iGPU firmware by @Aviator-Coding in #1444
• feat(monitoring): alert on GPU loss and document B70 hardware incidents by @Aviator-Coding in #1445
• docs(ai): record GPU DRA stop-at-design finding by @Aviator-Coding in #1446
• fix(system): scope gpu.intel.com/xe to the iGPU only (0xa7a0) by @Aviator-Coding in #1447
• feat(ai): deploy grafana-mcp in-cluster via toolhive by @Aviator-Coding in #1448
• feat(ai): deploy LiteLLM as in-cluster governance-only virtual-key layer by @Aviator-Coding in #1449
• feat(monitoring): self-heal Grafana Viewer SA token for grafana-mcp by @Aviator-Coding in #1450
• feat(ai): add complexity-tier llm auto-router to litellm by @Aviator-Coding in #1451
• ci(github-action): update action ghcr.io/allenporter/flux-local ( v8.2.0 ➔ v8.4.0 ) by @mortyops[bot] in #1366
• docs(ai): correct litellm auto-router cold-start and verification runbook by @Aviator-Coding in #1452
• fix(monitoring): stop GrafanaSAProvisionerFailing permanent false alarm by @Aviator-Coding in #1453
• feat(ai): add Intel GPU node Grafana dashboard by @Aviator-Coding in #1454
• feat(ai): migrate litellm governance to home-operations litellm-operator CRDs by @Aviator-Coding in #1455
• docs(ai): record litellm key-alias trap and controller backoff gotcha by @Aviator-Coding in #1456
• feat(ai): add litellm fallback chains and internal gateway route by @Aviator-Coding in #1457
• feat(authentik): adopt live SSO config as an OpenTofu stack by @Aviator-Coding in #1458
• docs(ai): record post-merge litellm fallback verification by @Aviator-Coding in #1460
• feat(ai): add kubesearch MCP server to toolhive gateway by @Aviator-Coding in #1459
• feat(ai): add repo-wiki and opencode LiteLLM consumer apps by @Aviator-Coding in #1461
• feat(ai): add upstream repos to repo-wiki generator list by @Aviator-Coding in #1462
• feat(ai): add Dragonfly store to LiteLLM for cross-worker budgets and cache by @Aviator-Coding in #1463
• feat(ai): register indydevdan-model-stack models on LiteLLM proxy by @Aviator-Coding in #1466
• ci(github-action): add terraform-diff and terraform-publish workflows by @Aviator-Coding in #1464
• feat(container)!: Update image ghcr.io/unpoller/unpoller ( v4.0.0 ➔ v5.0.1 ) by @mortyops[bot] in #1465
• feat(ai): add Claude Code Max/Pro subscription pass-through to LiteLLM by @Aviator-Coding in #1467
• fix(ai): stop fake dollar spend on free local LiteLLM traffic by @Aviator-Coding in #1471
• feat(ai): capture full LiteLLM prompt/response spend logs by @Aviator-Coding in #1470
• docs(ai): correct which local LiteLLM aliases carry a governance price by @Aviator-Coding in #1472
• feat(ai): enable LiteLLM UI SSO through Authentik by @Aviator-Coding in #1473
• fix(authentik): declare grant_types on created LiteLLM provider by @Aviator-Coding in #1474
• fix(flux): target ai Deployments in healthChecks and retry apps root by @Aviator-Coding in #1478
• ci(github-action): harden workflow permissions and concurrency by @Aviator-Coding in #1477
• docs(reference): rebuild docs index to list every markdown file by @Aviator-Coding in #1476
• chore: remove dead sops and stale editor config by @Aviator-Coding in #1475
• fix(talos): drop siderolabs/thunderbolt from factory schematic by @Aviator-Coding in #1479
• ci(github-action): run scripts/ci python regression tests in validate by @Aviator-Coding in #1481
• fix(grafana): remove dead grafana-operator and re-deliver dashboards by @Aviator-Coding in #1484
• fix(flux): point kustomization healthChecks at real workloads by @Aviator-Coding in #1483
• chore: apply GitOps consistency hygiene across manifests and tooling by @Aviator-Coding in #1482
• docs(authentik): document RGW state-key drift diagnosis by @Aviator-Coding in #1480
• feat(flux-system): add read-only konflate PR-review UI by @Aviator-Coding in #1486
• ci(github-action): harden validate.yaml against runner-pool contention by @Aviator-Coding in #1485
• fix(talos): add pcie_port_pm=off for Arc B70 root-port race by @Aviator-Coding in #1487
• ci(github-action): migrate flux-local validation onto flate by @Aviator-Coding in #1488
• fix(agentmemory): raise memory limit to 8Gi as staircase measurement by @Aviator-Coding in #1489
• fix(tdarr): restore B70 VA-API transcoding via name-faithful device group by @Aviator-Coding in #1490
• fix(recyclarr): restore guide SQP-1 scores and match profiles by trash_id by @Aviator-Coding in #1491
• docs: forbid unbounded home directory searches in agent notes by @Aviator-Coding in #1492
• docs(media): document plex library scan triggers and regression check by @Aviator-Coding in #1493
• docs: document radarr backlog missing-movie search procedure by @Aviator-Coding in #1494
• feat(litellm): add advisory AI PR reviewer on in-cluster ARC by @Aviator-Coding in #1495
• docs(litellm): verify pr-reviewer objects and stale-proof section 7 by @Aviator-Coding in #1496
• feat(kopiur): install Stage 0 operator with ceph and r2 repositories by @Aviator-Coding in #1497
• feat(kopiur): add stage 1 backup component and autobrr pilot by @Aviator-Coding in #1498
• feat(kopiur): complete stage 2 dual-destination restore gate by @Aviator-Coding in #1499
• docs(downloads): record usenet-only decision and dead torrent cleanup by @Aviator-Coding in #1500
• feat: retire unused immich and jellyfin, drop orphaned rsshub claim by @Aviator-Coding in #1501
• fix: restore write access for autobrr and rsshub-playwright volumes by @Aviator-Coding in #1502
• feat(litellm): raise claude-code-subscription rate limits by @Aviator-Coding in #1503
• feat(system): add pvc-writable-check for unwritable app volumes by @Aviator-Coding in #1504
• fix(ai): sync claude-code-subscription key limits to 3000/750M by @Aviator-Coding in #1505
• feat(kopiur): switch to operator-minted per-run credential projection by @Aviator-Coding in #1506
• feat(litellm): add opus subscription pass-through and zero cache prices by @Aviator-Coding in #1507
• feat(kopiur): complete stage 3 dual-engine onboarding for remaining claims by @Aviator-Coding in #1508
• fix(kopiur): align cron timezone with VolSync to survive DST by @Aviator-Coding in #1509
• fix(ci): make litellm 1mo retention assertion date-independent by @Aviator-Coding in #1513
• fix(changedetection): align identity to 1000:1000 and onboard kopiur stage 4 by @Aviator-Coding in #1512
• feat(system): alert on stalled VolSync syncs and empty kopiur backups by @Aviator-Coding in #1514
• feat(kopiur): onboard matter-server with a root mover by @Aviator-Coding in #1510
• fix(litellm): close unused /anthropic pass-through on envoy-internal by @Aviator-Coding in #1511
• fix(deps): update mcp-server-kubernetes ( 4.1.4 ➔ 4.1.5 ) by @mortyops[bot] in #1515
• fix(sabnzbd): remove dead cross-seed integration by @Aviator-Coding in #1516
• docs(kopiur): prove recyclarr-config mover readability via snapshot probe by @Aviator-Coding in #1517
• fix(syncthing): right-size data claim and document live folder shares by @Aviator-Coding in #1519
• docs(backups): record corrupt claim recreation and empty-latestImage trap by @Aviator-Coding in #1518
• fix(selfhosted): pin obsidian-livesync VolSync mover and drop dead APP_UID/APP_GID by @Aviator-Coding in #1520
• fix(litellm): drop claude-code-subscription rate limits and watch phantom spend by @Aviator-Coding in #1522
• fix(kopiur): stop projected-secrets leak alert on stale census reads by @Aviator-Coding in #1521
• feat(system): add pvc-mover-readable-check for backup mover readability by @Aviator-Coding in #1524
• fix(renovate): close self-update automerge gap and retire docker hub condition by @Aviator-Coding in #1525
• fix(deps): update mcp-server-kubernetes ( 4.1.5 ➔ 4.1.6 ) by @mortyops[bot] in #1523
• fix(renovate): unfreeze Talos pin and block auto-merge by @Aviator-Coding in #1526
• feat(ai): retire agentmemory and switch hermes to holographic memory by @Aviator-Coding in #1527
• docs(media): record tdarr safe-transcode traps and recovery path by @Aviator-Coding in #1530

Full Changelog: 2026.8.0...2026.8.1