feat(container)!: Update image ghcr.io/valkey-io/valkey ( 8.1.4 → 9.0.1 )

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/valkey-io/valkey	major	8.1.4 → 9.0.1

---

Release Notes

valkey-io/valkey (ghcr.io/valkey-io/valkey)

v9.0.1

Compare Source

Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent.

Bug fixes

• Authenticate slot migration client on source node to internal user (#​2785)
• Bug fix: reset io_last_written on c->buf resize to prevent stale pointers (#​2786)
• Sentinel: fix regression requiring "+failover" ACL in failover path (#​2780)
• Cluster: Avoid usage of light weight messages to nodes with not ready bidirectional links (#​2817)
• Send duplicate multi meet packet only for node which supports it in mixed clusters (#​2840)
• Fix: LTRIM should not call signalModifiedKey when no elements are removed (#​2787)
• Fix build on some 32-bit ARM by only using NEON on AArch64 (#​2873)
• Fix deadlock in IO-thread shutdown during panic (#​2898)
• Fix COMMANDLOG large-reply when using reply copy avoidance (#​2652)
• Fix CLUSTER SLOTS crash when called from module timer callback (#​2915)

Full Changelog: valkey-io/valkey@9.0.0...9.0.1

v9.0.0

Compare Source

Valkey 9.0.0 GA - October 21, 2025

Upgrade urgency LOW: This is the first release of Valkey 9.0 which
includes stability, bug fixes, and incremental improvements over the third release candidate.

Bug fixes

• HSETEX with FXX should not create an object if it does not exist (#​2716)
• Fix crash when aborting a slot migration while child snapshot is active (#​2721)
• Fix double MOVED reply on unblock at failover (#​2734)
• Fix memory leak with CLIENT LIST/KILL duplicate filters (#​2362)
• Fix incorrect accounting after completed atomic slot migration (#​2749)
• Fix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#​1826, #​2750)
• Fix invalid memory address caused by hashtable shrinking during safe iteration (#​2753)

For a high level overview of the release, you can checkout release blog
For the full set of changes for the releases, please review the previous release candidates rc1, rc2 and rc3.

v8.1.5

Compare Source

Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent.

Bug fixes

• Fix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#​1826)
• Fix invalid memory address caused by hashtable shrinking during safe iteration (#​2753)
• Cluster: Avoid usage of light weight messages to nodes with not ready bidirectional links (#​2817)
• Send duplicate multi meet packet only for node which supports it (#​2840)
• Fix loading AOF files from future Valkey versions (#​2899)

Full Changelog: valkey-io/valkey@8.1.4...8.1.5

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin HelmRelease: media/jellyfin

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin HelmRelease: media/jellyfin

@@ -1,125 +0,0 @@

----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin
-  namespace: media
-spec:
-  chartRef:
-    kind: OCIRepository
-    name: app-template
-  dependsOn:
-  - name: intel-device-plugin-gpu
-    namespace: kube-system
-  - name: rook-ceph-cluster
-    namespace: rook-ceph
-  - name: volsync
-    namespace: volsync-system
-  install:
-    createNamespace: true
-    remediation:
-      retries: 5
-  interval: 15m
-  upgrade:
-    remediation:
-      retries: 5
-  values:
-    controllers:
-      jellyfin:
-        containers:
-          main:
-            image:
-              repository: ghcr.io/jellyfin/jellyfin
-              tag: 10.11.3
-            probes:
-              liveness:
-                enabled: false
-              readiness:
-                enabled: false
-              startup:
-                enabled: false
-            resources:
-              limits:
-                gpu.intel.com/i915: 1
-                memory: 4Gi
-              requests:
-                cpu: 100m
-                gpu.intel.com/i915: 1
-                memory: 512Mi
-        pod:
-          affinity:
-            nodeAffinity:
-              preferredDuringSchedulingIgnoredDuringExecution:
-              - preference:
-                  matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                    - talos-03
-                weight: 100
-              requiredDuringSchedulingIgnoredDuringExecution:
-                nodeSelectorTerms:
-                - matchExpressions:
-                  - key: intel.feature.node.kubernetes.io/gpu
-                    operator: In
-                    values:
-                    - 'true'
-          nodeSelector:
-            intel.feature.node.kubernetes.io/gpu: 'true'
-          securityContext:
-            supplementalGroups:
-            - 44
-            - 109
-            - 122
-    defaultPodOptions:
-      automountServiceAccountToken: false
-      securityContext:
-        fsGroup: 3001
-        fsGroupChangePolicy: OnRootMismatch
-        runAsGroup: 3001
-        runAsUser: 3001
-    persistence:
-      cache:
-        enabled: true
-        globalMounts:
-        - path: /cache
-        type: emptyDir
-      config:
-        enabled: true
-        existingClaim: jellyfin
-        globalMounts:
-        - path: /config
-      media:
-        enabled: true
-        globalMounts:
-        - path: /media
-        path: /mnt/core/media
-        server: 10.0.2.3
-        type: nfs
-      transcode:
-        enabled: true
-        globalMounts:
-        - path: /transcode
-        type: emptyDir
-    route:
-      app:
-        hostnames:
-        - jf...PLACEHOLDER_SECRET_DOMAIN..
-        parentRefs:
-        - name: envoy-external
-          namespace: network
-          sectionName: https
-        rules:
-        - backendRefs:
-          - identifier: main
-            port: 8096
-    service:
-      main:
-        ports:
-          http:
-            port: 8096
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin PersistentVolumeClaim: media/jellyfin-transcode

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin PersistentVolumeClaim: media/jellyfin-transcode

@@ -1,18 +0,0 @@

----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin-transcode
-  namespace: media
-spec:
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 40Gi
-  storageClassName: ceph-block
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin PersistentVolumeClaim: media/jellyfin

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin PersistentVolumeClaim: media/jellyfin

@@ -1,22 +0,0 @@

----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin
-  namespace: media
-spec:
-  accessModes:
-  - ReadWriteOnce
-  dataSourceRef:
-    apiGroup: volsync.backube
-    kind: ReplicationDestination
-    name: jellyfin-dst
-  resources:
-    requests:
-      storage: 20Gi
-  storageClassName: ceph-block
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ExternalSecret: media/jellyfin-volsync

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ExternalSecret: media/jellyfin-volsync

@@ -1,33 +0,0 @@

----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin-volsync
-  namespace: media
-spec:
-  dataFrom:
-  - extract:
-      key: Minio
-  - extract:
-      key: Restic
-    rewrite:
-    - regexp:
-        source: (.*)
-        target: RESTIC_$1
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: jellyfin-volsync-secret
-    template:
-      data:
-        AWS_ACCESS_KEY_ID: '{{ .accessKey }}'
-        AWS_SECRET_ACCESS_KEY: '{{ .secretKey }}'
-        RESTIC_PASSWORD: '{{ .RESTIC_password }}'
-        RESTIC_REPOSITORY: '{{ .RESTIC_REPOSITORY_TEMPLATE }}/jellyfin'
-      engineVersion: v2
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ReplicationSource: media/jellyfin

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ReplicationSource: media/jellyfin

@@ -1,32 +0,0 @@

----
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin
-  namespace: media
-spec:
-  restic:
-    accessModes:
-    - ReadWriteOnce
-    cacheCapacity: 20Gi
-    copyMethod: Snapshot
-    moverSecurityContext:
-      fsGroup: 568
-      runAsGroup: 568
-      runAsUser: 568
-    pruneIntervalDays: 7
-    repository: jellyfin-volsync-secret
-    retain:
-      daily: 7
-      hourly: 24
-      weekly: 5
-    storageClassName: ceph-block
-    volumeSnapshotClassName: csi-ceph-blockpool
-  sourcePVC: jellyfin
-  trigger:
-    schedule: 0 0 * * *
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ReplicationDestination: media/jellyfin-dst

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ReplicationDestination: media/jellyfin-dst

@@ -1,27 +0,0 @@

----
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationDestination
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin-dst
-  namespace: media
-spec:
-  restic:
-    accessModes:
-    - ReadWriteOnce
-    cacheCapacity: 20Gi
-    capacity: 20Gi
-    copyMethod: Snapshot
-    moverSecurityContext:
-      fsGroup: 568
-      runAsGroup: 568
-      runAsUser: 568
-    repository: jellyfin-volsync-secret
-    storageClassName: ceph-block
-    volumeSnapshotClassName: csi-ceph-blockpool
-  trigger:
-    manual: restore-once
-
--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: media/jellyfin

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: media/jellyfin

@@ -1,40 +0,0 @@

----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  labels:
-    kustomize.toolkit.fluxcd.io/name: cluster-apps
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: jellyfin
-  namespace: media
-spec:
-  commonMetadata:
-    labels:
-      app.kubernetes.io/name: jellyfin
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  interval: 1h
-  path: ./kubernetes/apps/media/jellyfin/app
-  postBuild:
-    substitute:
-      APP: jellyfin
-      GATUS_SUBDOMAIN: jf
-      VOLSYNC_CACHE_CAPACITY: 20Gi
-      VOLSYNC_CAPACITY: 20Gi
-    substituteFrom:
-    - kind: Secret
-      name: cluster-secrets
-    - kind: ConfigMap
-      name: cluster-settings
-  prune: true
-  retryInterval: 2m
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-    namespace: flux-system
-  targetNamespace: media
-  timeout: 5m
-  wait: false
-
--- kubernetes/apps/default/paperless/app Kustomization: default/paperless HelmRelease: default/paperless

+++ kubernetes/apps/default/paperless/app Kustomization: default/paperless HelmRelease: default/paperless

@@ -62,13 +62,13 @@

         forceRename: paperless
       redis:
         containers:
           redis:
             image:
               repository: ghcr.io/valkey-io/valkey
-              tag: 8.1.4
+              tag: 9.0.1
             resources:
               limits:
                 memory: 128Mi
               requests:
                 cpu: 5m
                 memory: 32Mi

[github-actions]

--- HelmRelease: media/jellyfin Service: media/jellyfin

+++ HelmRelease: media/jellyfin Service: media/jellyfin

@@ -1,23 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: jellyfin
-  labels:
-    app.kubernetes.io/instance: jellyfin
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: jellyfin
-    app.kubernetes.io/service: jellyfin
-  namespace: media
-spec:
-  type: ClusterIP
-  ports:
-  - port: 8096
-    targetPort: 8096
-    protocol: TCP
-    name: http
-  selector:
-    app.kubernetes.io/controller: jellyfin
-    app.kubernetes.io/instance: jellyfin
-    app.kubernetes.io/name: jellyfin
-
--- HelmRelease: media/jellyfin Deployment: media/jellyfin

+++ HelmRelease: media/jellyfin Deployment: media/jellyfin

@@ -1,92 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: jellyfin
-  labels:
-    app.kubernetes.io/controller: jellyfin
-    app.kubernetes.io/instance: jellyfin
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: jellyfin
-  namespace: media
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: jellyfin
-      app.kubernetes.io/name: jellyfin
-      app.kubernetes.io/instance: jellyfin
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/controller: jellyfin
-        app.kubernetes.io/instance: jellyfin
-        app.kubernetes.io/name: jellyfin
-    spec:
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: false
-      securityContext:
-        supplementalGroups:
-        - 44
-        - 109
-        - 122
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      nodeSelector:
-        intel.feature.node.kubernetes.io/gpu: 'true'
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - preference:
-              matchExpressions:
-              - key: kubernetes.io/hostname
-                operator: In
-                values:
-                - talos-03
-            weight: 100
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: intel.feature.node.kubernetes.io/gpu
-                operator: In
-                values:
-                - 'true'
-      containers:
-      - image: ghcr.io/jellyfin/jellyfin:10.11.3
-        name: main
-        resources:
-          limits:
-            gpu.intel.com/i915: 1
-            memory: 4Gi
-          requests:
-            cpu: 100m
-            gpu.intel.com/i915: 1
-            memory: 512Mi
-        volumeMounts:
-        - mountPath: /cache
-          name: cache
-        - mountPath: /config
-          name: config
-        - mountPath: /media
-          name: media
-        - mountPath: /transcode
-          name: transcode
-      volumes:
-      - emptyDir: {}
-        name: cache
-      - name: config
-        persistentVolumeClaim:
-          claimName: jellyfin
-      - name: media
-        nfs:
-          path: /mnt/core/media
-          server: 10.0.2.3
-      - emptyDir: {}
-        name: transcode
-
--- HelmRelease: media/jellyfin HTTPRoute: media/jellyfin

+++ HelmRelease: media/jellyfin HTTPRoute: media/jellyfin

@@ -1,28 +0,0 @@

----
-apiVersion: gateway.networking.k8s.io/v1alpha2
-kind: HTTPRoute
-metadata:
-  name: jellyfin
-  labels:
-    app.kubernetes.io/instance: jellyfin
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: jellyfin
-  namespace: media
-spec:
-  parentRefs:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    name: envoy-external
-    namespace: network
-    sectionName: https
-  hostnames:
-  - jf...PLACEHOLDER_SECRET_DOMAIN..
-  rules:
-  - backendRefs:
-    - group: ''
-      kind: Service
-      name: jellyfin
-      namespace: media
-      port: 8096
-      weight: 1
-
--- HelmRelease: default/paperless Deployment: default/paperless-redis

+++ HelmRelease: default/paperless Deployment: default/paperless-redis

@@ -31,13 +31,13 @@

       automountServiceAccountToken: true
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
-      - image: ghcr.io/valkey-io/valkey:8.1.4
+      - image: ghcr.io/valkey-io/valkey:9.0.1
         name: redis
         resources:
           limits:
             memory: 128Mi
           requests:
             cpu: 5m