Update vaultwarden/server Docker tag to v1.37.4

ansible/requirements-python.txt

@@ -1,3 +1,3 @@
-ansible-core==2.21.5
+ansible-core==2.21.4
 proxmoxer==2.3.0
 requests==2.34.2

ansible/requirements.yml

@@ -1,6 +1,6 @@
 ---
 collections:
   - name: community.proxmox
-    version: "2.1.0"
+    version: "2.0.0"
   - name: community.general
-    version: "13.5.0"
+    version: "13.4.0"

apps/cronjobs/renovatebot.yaml

@@ -12,7 +12,7 @@ spec:
         spec:
           containers:
             - name: renovate
-              image: renovate/renovate:44.149.3
+              image: renovate/renovate:44.132.5
               args:
                 - ivanch/haven
               env:

apps/default/playwright.yaml

@@ -38,7 +38,7 @@ spec:
           env:
             - name: TZ
               value: America/Sao_Paulo
-          image: mcr.microsoft.com/playwright:v1.64.0-noble
+          image: mcr.microsoft.com/playwright:v1.63.0-noble
           name: playwright
           ports:
             - containerPort: 3000

apps/default/vaultwarden.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: vaultwarden
-          image: vaultwarden/server:1.37.3
+          image: vaultwarden/server:1.37.4
           env:
             - name: DOMAIN
               value: "https://vault.haven"

apps/dns/adguard-sync.yaml

@@ -30,7 +30,7 @@ spec:
     spec:
       containers:
         - name: adguardsync
-          image: ghcr.io/bakito/adguardhome-sync:v0.9.4
+          image: ghcr.io/bakito/adguardhome-sync:v0.9.3
           ports:
             - containerPort: 8080
               protocol: TCP

apps/infra/bitwarden-cli.yaml

@@ -60,7 +60,7 @@ spec:
         kubernetes.io/arch: amd64
       containers:
         - name: bitwarden-cli
-          image: ghcr.io/charlesthomas/bitwarden-cli:2026.10.0  # 2026.9.0 requires Vaultwarden's unimplemented user-key-ID backfill API
+          image: ghcr.io/charlesthomas/bitwarden-cli:2026.8.0  # 2026.9.0 requires Vaultwarden's unimplemented user-key-ID backfill API
           imagePullPolicy: IfNotPresent
           # Override the baked entrypoint so --disable-origin-protection is
           # actually passed (it was commented out in the image's entrypoint.sh,