fix(container-image): update ghcr.io/valkey-io/valkey ( 9.0.2 → 9.0.3 )

[robottoms-up]

This PR contains the following updates:

Package	Update	Change
ghcr.io/valkey-io/valkey	patch	9.0.2 → 9.0.3

---

Release Notes

valkey-io/valkey (ghcr.io/valkey-io/valkey)

v9.0.3

Compare Source

Valkey 9.0.3

Upgrade urgency SECURITY: This release includes security fixes we recommend you
apply as soon as possible.

Security fixes

• (CVE-2025-67733) RESP Protocol Injection via Lua error_reply
• (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
• (CVE-2026-27623) Reset request type after handling empty requests

Bug fixes

• Avoids crash during MODULE UNLOAD when ACL rules reference a module command and subcommand (#​3160)
• Fix server assert on ACL LOAD when current user loses permission to channels (#​3182)
• Fix bug causing no response flush sometimes when IO threads are busy (#​3205)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[robottoms-up]

--- kubernetes/homelab/apps/storage/rook-ceph/operator Kustomization: storage/rook-ceph-operator OCIRepository: storage/rook-ceph

+++ kubernetes/homelab/apps/storage/rook-ceph/operator Kustomization: storage/rook-ceph-operator OCIRepository: storage/rook-ceph

@@ -11,9 +11,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: v1.19.2
+    tag: v1.19.1
   url: oci://ghcr.io/rook/rook-ceph
 

[robottoms-up]

--- HelmRelease: storage/rook-ceph-operator ConfigMap: storage/rook-ceph-operator-config

+++ HelmRelease: storage/rook-ceph-operator ConfigMap: storage/rook-ceph-operator-config

@@ -35,13 +35,13 @@

   CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
   CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
   CSI_RBD_FSGROUPPOLICY: File
   CSI_CEPHFS_FSGROUPPOLICY: File
   CSI_NFS_FSGROUPPOLICY: File
   CSI_CEPHFS_KERNEL_MOUNT_OPTIONS: ms_mode=prefer-crc
-  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.1
+  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.0
   ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.0
   ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v6.0.0
   ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0
   ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.10.0
   ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v2.0.0
   ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
--- HelmRelease: storage/rook-ceph-operator ClusterRole: storage/rook-ceph-global

+++ HelmRelease: storage/rook-ceph-operator ClusterRole: storage/rook-ceph-global

@@ -39,20 +39,12 @@

   - list
   - watch
   - patch
   - create
   - update
   - delete
-- apiGroups:
-  - events.k8s.io
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
 - apiGroups:
   - storage.k8s.io
   resources:
   - storageclasses
   verbs:
   - get
--- HelmRelease: storage/rook-ceph-operator ClusterRole: storage/rook-ceph-mgr-cluster

+++ HelmRelease: storage/rook-ceph-operator ClusterRole: storage/rook-ceph-mgr-cluster

@@ -30,20 +30,12 @@

   - create
   - patch
   - list
   - get
   - watch
 - apiGroups:
-  - events.k8s.io
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
-- apiGroups:
   - storage.k8s.io
   resources:
   - storageclasses
   verbs:
   - get
   - list
--- HelmRelease: storage/rook-ceph-operator ClusterRole: storage/cephfs-external-provisioner-runner

+++ HelmRelease: storage/rook-ceph-operator ClusterRole: storage/cephfs-external-provisioner-runner

@@ -78,20 +78,12 @@

   verbs:
   - list
   - watch
   - create
   - update
   - patch
-- apiGroups:
-  - events.k8s.io
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
 - apiGroups:
   - storage.k8s.io
   resources:
   - volumeattachments
   verbs:
   - get
--- HelmRelease: storage/rook-ceph-operator ClusterRole: storage/rbd-external-provisioner-runner

+++ HelmRelease: storage/rook-ceph-operator ClusterRole: storage/rbd-external-provisioner-runner

@@ -57,20 +57,12 @@

   - list
   - watch
   - create
   - update
   - patch
 - apiGroups:
-  - events.k8s.io
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
-- apiGroups:
   - storage.k8s.io
   resources:
   - volumeattachments
   verbs:
   - get
   - list
--- HelmRelease: storage/rook-ceph-operator ClusterRole: storage/objectstorage-provisioner-role

+++ HelmRelease: storage/rook-ceph-operator ClusterRole: storage/objectstorage-provisioner-role

@@ -44,15 +44,7 @@

   - events
   verbs:
   - get
   - delete
   - update
   - create
-- apiGroups:
-  - events.k8s.io
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
 
--- HelmRelease: storage/rook-ceph-operator Deployment: storage/rook-ceph-operator

+++ HelmRelease: storage/rook-ceph-operator Deployment: storage/rook-ceph-operator

@@ -28,13 +28,13 @@

       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       containers:
       - name: rook-ceph-operator
-        image: docker.io/rook/ceph:v1.19.2
+        image: docker.io/rook/ceph:v1.19.1
         imagePullPolicy: IfNotPresent
         args:
         - ceph
         - operator
         securityContext:
           capabilities: