Merge branch 'main' into feature/security-audit-hardening

roles/web-app-gitlab/meta/services.yml

@@ -76,7 +76,7 @@ gitlab:
   lifecycle: beta
 webservice:
   image: registry.gitlab.com/gitlab-org/build/cng/gitlab-webservice-ce
-  version: v19.5.0
+  version: v19.5.1
   name: gitlab-webservice
   healthcheck:
     test: ["CMD", "/scripts/healthcheck"]
@@ -95,7 +95,7 @@ sidekiq:
     flavor: tcp
     path: liveness
   image: registry.gitlab.com/gitlab-org/build/cng/gitlab-sidekiq-ce
-  version: v19.5.0
+  version: v19.5.1
   name: gitlab-sidekiq
   cpus: "1.0"
   mem_reservation: 2g
@@ -106,7 +106,7 @@ sidekiq:
       http: 3808
 workhorse:
   image: registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ce
-  version: v19.5.0
+  version: v19.5.1
   name: gitlab-workhorse
   healthcheck:
     test: ["CMD", "/scripts/healthcheck"]
@@ -118,7 +118,7 @@ gitaly:
   # nocheck: single-replica
   replicas: 1
   image: registry.gitlab.com/gitlab-org/build/cng/gitaly
-  version: v19.5.0
+  version: v19.5.1
   healthcheck:
     test: ["CMD", "/scripts/healthcheck"]
   name: gitlab-gitaly
@@ -131,7 +131,7 @@ gitaly:
   pids_limit: 1024
 shell:
   image: registry.gitlab.com/gitlab-org/build/cng/gitlab-shell
-  version: v19.5.0
+  version: v19.5.1
   name: gitlab-shell
   ports:
     internal:
@@ -144,7 +144,7 @@ migrations:
   # nocheck: single-replica
   replicas: 1
   image: registry.gitlab.com/gitlab-org/build/cng/gitlab-rails-ce
-  version: v19.5.0
+  version: v19.5.1
   name: gitlab-migrations
   cpus: "1.0"
   mem_reservation: 1g

roles/web-app-pixelfed/meta/services.yml

@@ -49,7 +49,7 @@ pixelfed:
   shared: true
   enabled: true # nocheck: dynamic-flag
   image: zknt/pixelfed
-  version: "20261020"
+  version: "20261021"
   name: pixelfed
   min_storage: 588MB
   backup: