fix(container): update image revenz/fileflows (6d7ffdd ➔ 1f412e4)

[renovate]

This PR contains the following updates:

Package	Update	Change
revenz/fileflows	digest	6d7ffdd → 1f412e4

---

Configuration

📅 Schedule: (in timezone Europe/Brussels)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Review skipped — only excluded labels are configured. (2)

• type/patch
• type/digest

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: Tanguille/cluster/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: e15164e5-993a-4fe8-b045-9d456472aa19

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[tanguille-cluster]

@@ spec.template.spec.containers.app.image @@
# apps/v1/Deployment/media/fileflows
! ± value change
- revenz/fileflows:26.09@sha256:6d7ffdd05b67780ba8f9b5f3b96e41228634f3882448f937772973ffcaf79df5
+ revenz/fileflows:26.09@sha256:1f412e4e2b411a18d25538095629ef870185ea602f9840caab06088dec8231ae

[tanguille-cluster]

@@ spec.values.controllers.fileflows.containers.app.image.tag @@
# helm.toolkit.fluxcd.io/v2/HelmRelease/media/fileflows
! ± value change
- 26.09@sha256:6d7ffdd05b67780ba8f9b5f3b96e41228634f3882448f937772973ffcaf79df5
+ 26.09@sha256:1f412e4e2b411a18d25538095629ef870185ea602f9840caab06088dec8231ae

[github-actions]

AI Automated Review

Analysis engine: omniroute@http://litellm.ai.svc.cluster.local/v1 (openai)

Recommendation: Approve. Digest-only pin refresh of revenz/fileflows within the same 26.09 tag; no values, resources, routing, or persistence changes.

Change-by-change findings: The single hunk swaps the image digest (6d7ffdd → 1f412e4) on line 61. I read the full 112-line HelmRelease: security context (root entrypoint, PUID/PGID 568, supplemental groups for VAAPI), resource requests/limits (including the deliberate no-limit on ephemeral-storage documented in the comment), route, and persistence blocks are untouched. Git history shows this is a routine Renovate digest bump following the same pattern as the prior 26.09 digest updates.

Must-check items:

• Validate manifest against target cluster version — no schema or apiVersion change; the HelmRelease structure is unchanged and matches the app-template v2 schema reference in the file header.
• Resource quota / limit changes — none; requests and limits are byte-identical to the previous revision.
• File path sanitization — not applicable; no paths, mounts, or commands changed in this diff.
• Directory traversal vulnerabilities — not applicable; the change touches only the image tag line.

Unknowns or Needs Verification:

• The Image Digest Provenance analysis could not resolve the upstream revision or creation date for either digest (missing OCI labels), and no upstream changelog is available for a digest-only rebuild within the same tag. What changed between 6d7ffdd and 1f412e4 is therefore not verified from the corpus; risk is limited to a same-tag image rebuild, and the reloader annotation will roll the pod on reconcile.

[github-actions]

Inline findings from the automated review (summary in the sticky comment).

[github-actions]

Info: Digest-only bump within tag 26.09; upstream changelog for the rebuild could not be verified from the corpus.

Automated finding from AI PR review.