Update ghcr.io/charlesthomas/bitwarden-cli Docker tag to v2026.10.0

ansible/requirements-dev.txt

@@ -1,2 +1,2 @@
 -r requirements-python.txt
-ansible-lint==26.10.1
+ansible-lint==26.9.0

apps/cronjobs/renovatebot.yaml

@@ -12,7 +12,7 @@ spec:
         spec:
           containers:
             - name: renovate
-              image: renovate/renovate:44.181.5
+              image: renovate/renovate:44.149.3
               args:
                 - ivanch/haven
               env:

apps/default/playwright.yaml

@@ -38,7 +38,7 @@ spec:
           env:
             - name: TZ
               value: America/Sao_Paulo
-          image: mcr.microsoft.com/playwright:v1.64.1-noble
+          image: mcr.microsoft.com/playwright:v1.64.0-noble
           name: playwright
           ports:
             - containerPort: 3000

apps/dns/adguard-sync.yaml

@@ -30,7 +30,7 @@ spec:
     spec:
       containers:
         - name: adguardsync
-          image: ghcr.io/bakito/adguardhome-sync:v0.9.5
+          image: ghcr.io/bakito/adguardhome-sync:v0.9.4
           ports:
             - containerPort: 8080
               protocol: TCP

apps/infra/beszel-agent.yaml

@@ -22,7 +22,7 @@ spec:
                 secretKeyRef:
                   name: beszel-key
                   key: SECRET-KEY
-          image: henrygd/beszel-agent:0.21.1
+          image: henrygd/beszel-agent:0.21.0
           name: beszel-agent
           ports:
             - containerPort: 45876

apps/infra/beszel.yaml

@@ -26,7 +26,7 @@ spec:
                       - amd64
       containers:
         - name: beszel
-          image: ghcr.io/henrygd/beszel/beszel:0.21.1
+          image: ghcr.io/henrygd/beszel/beszel:0.21.0
           ports:
             - containerPort: 8090
               name: beszel-port

apps/infra/bitwarden-cli.yaml

@@ -60,7 +60,7 @@ spec:
         kubernetes.io/arch: amd64
       containers:
         - name: bitwarden-cli
-          image: ghcr.io/charlesthomas/bitwarden-cli:2026.10.1  # 2026.9.0 requires Vaultwarden's unimplemented user-key-ID backfill API
+          image: ghcr.io/charlesthomas/bitwarden-cli:2026.10.0  # 2026.9.0 requires Vaultwarden's unimplemented user-key-ID backfill API
           imagePullPolicy: IfNotPresent
           # Override the baked entrypoint so --disable-origin-protection is
           # actually passed (it was commented out in the image's entrypoint.sh,

apps/infra/wg-easy.yaml

@@ -43,7 +43,7 @@ spec:
               weight: 100
       containers:
         - name: wg-easy
-          image: ghcr.io/wg-easy/wg-easy:15.5.0
+          image: ghcr.io/wg-easy/wg-easy:15.4.0
           ports:
             - containerPort: 51820
               protocol: UDP