Merge main into feature/store-i18n

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

roles/web-app-keycloak/meta/services.yml

@@ -51,7 +51,7 @@ keycloak:
   shared: true
   provides: sso
   image: quay.io/keycloak/keycloak
-  version: "26.8.1"
+  version: "26.8.2"
   name: keycloak
   min_storage: 468MB
   cpus: "2.0"

roles/web-app-prometheus/meta/services.yml

@@ -64,7 +64,7 @@ prometheus:
   provides:
     - prometheus
   image: prom/prometheus # nocheck: volumes-path-single-spot: the repository path of an image name, not a mount target
-  version: v3.15.1
+  version: v3.16.0
   name: prometheus
   cpus: "0.5"
   mem_reservation: 512m

roles/web-app-stalwart/meta/services.yml

@@ -43,7 +43,7 @@ stalwart:
   # nocheck: default-placement-manager  mail edge at a known IP: MX A-record, PTR and SPF bind to the stack host IP (a floating task's egress IP breaks deliverability); the mail store is NFS-hostile and IS the app — same rationale as web-app-mailu
   placement: manager
   image: stalwartlabs/stalwart
-  webui_version: "v2.0.4"
+  webui_version: "v2.0.5"
   version: "v1.0.3"
   update:
     - key: webui_version

roles/web-app-wazuh/meta/services.yml

@@ -75,7 +75,7 @@ certs_generator:
   pids_limit: 128
 manager:
   image: wazuh/wazuh-manager
-  version: "4.14.9"
+  version: "4.14.10"
   name: wazuh.manager
   # nocheck: min-storage-headroom  Reason: budgets room for wazuh-manager's own operational data (var-ossec logs, alerts, agent queue/state) to grow well beyond the base image over the service's lifetime, not just the image itself.
   min_storage: 10GB
@@ -105,7 +105,7 @@ indexer:
     # nocheck: healthcheck-timing-override  covers the indexer's real boot without waiting out the curl flavor's 10m default, which would otherwise stall manager/dashboard's startup order far longer than the indexer actually needs.
     start_period: 90s
   image: wazuh/wazuh-indexer
-  version: "4.14.9"
+  version: "4.14.10"
   name: wazuh.indexer
   # nocheck: min-storage-headroom  Reason: budgets room for the OpenSearch index data (security events/alerts Wazuh continuously ingests) to grow well beyond the base image over the service's lifetime, not just the image itself.
   min_storage: 20GB
@@ -123,7 +123,7 @@ indexer:
       http: 8102
 console:
   image: wazuh/wazuh-dashboard
-  version: "4.14.9"
+  version: "4.14.10"
   name: wazuh.dashboard
   # nocheck: min-storage-headroom  Reason: budgets room for the dashboard's own runtime state (OpenSearch Dashboards bundle/build cache rebuilt on first boot, plus exported reports and saved-object data) to grow beyond the base image, not just the image itself.
   min_storage: 2GB