[yama6a]

This PR contains the following updates:

Package	Update	Change
binwiederhier/ntfy (source)	minor	v2.32.0 → v2.33.1
longhorn-replica-affinity	patch	0.3.29 → 0.3.30
prometheus-blackbox-exporter (source)	patch	11.20.1 → 11.20.2
prometheus-operator-crds	patch	32.0.1 → 32.0.2
public.ecr.aws/aws-cli/aws-cli	patch	2.38.4 → 2.38.5
rabbitmq-cluster-operator (source)	patch	0.6.20 → 0.6.22

---

Release Notes

binwiederhier/ntfy

v2.33.1

Compare Source

This release builds ntfy with Go 1.27.3 (security fixes, including rejecting the compromised eMudhra intermediate CAs), and adds monitoring for the experimental cluster: each node's view of its peers, per-peer and database connection pool metrics.

The v2.33.0 release had an issue that made it crash on older CPU architectures. The v2.33.1 release fixes that (see #​2092).

Features:

• Show each cluster node's view of its peers with ntfy cluster status, /v1/cluster/status on the cluster listener, and per-peer metrics, so a link that only works in one direction is visible (experimental clustering, see cluster status)
• Export PostgreSQL connection pool metrics (ntfy_db_pool_*: connections in use, and queries that waited for a free connection, per pool), to size pool_max_conns (see PostgreSQL)

Security:

• Build with Go 1.27.3, which includes the security fixes of Go 1.27.2 (crypto/tls, net/http, html/template and others) and 1.27.3 (crypto/x509: certificate chains through the compromised eMudhra intermediate CAs are rejected)
• Reject phone number verification unless Twilio confirms the code as approved, instead of accepting any successful response
• Ignore duplicate topics in a subscription and limit a subscription to 150 topics, so a single request cannot replay the same topic's cache over and over

Bug fixes + maintenance:

• Count published messages from every cluster node: each node adds its own publishes to the stored total instead of the leader overwriting it with its own count (experimental clustering)
• Fix "Illegal instruction" crash of the amd64 binaries on CPUs without x86-64-v3 (AVX2/BMI2), by building releases on Ubuntu 24.04 again (#​2092, thanks to @​frank-bg for reporting)

v2.33.0

Compare Source

yama6a/longhorn-replica-affinity (longhorn-replica-affinity)

v0.3.30

Compare Source

Image: ghcr.io/yama6a/longhorn-replica-affinity:v0.3.30

What's Changed

• Update all non-major dependencies by @​yama6a in #​59

Full Changelog: yama6a/longhorn-replica-affinity@v0.3.29...v0.3.30

prometheus-community/helm-charts (prometheus-blackbox-exporter)

v11.20.2

Compare Source

Prometheus Blackbox Exporter

What's Changed

• [prometheus-blackbox-exporter] Update quay.io/prometheus-operator/prometheus-config-reloader Docker tag to v0.94.2 by @​renovate[bot] in #​7407

Full Changelog: prometheus-community/helm-charts@alertmanager-2.1.2...prometheus-blackbox-exporter-11.20.2

CloudPirates-io/helm-charts (rabbitmq-cluster-operator)

v0.6.22

Compare Source

🧰 Other work

• [ghcr.io/rabbitmq/cluster-operator] Update clusterOperator.image.repository to v2.23.1 (#​1820) (b5f25887) — @​renovate[bot]

v0.6.21

Compare Source

🧰 Other work

• [library/rabbitmq] Update rabbitmqImage.repository to 8f7cd1f (#​1855) (30830b8d) — @​renovate[bot]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.