chore(deps): Update charts and images to latest versions

Charts:
- kube-prometheus-stack 91.8.2 -> 92.3.0
- traefik 41.6.0 -> 41.7.1
- loki 18.13.7 -> 18.15.1
- alloy 1.13.0 -> 1.13.1
- sealed-secrets 2.19.1 -> 2.20.0
- cert-manager v1.21.1 -> v1.21.2
- cloudnative-pg 0.29.0 -> 0.29.1
- garage-ui 0.12.1 -> 0.13.0

Images:
- argo-cd v3.5.2 -> v3.5.5
- jellyfin 12.0 -> 12.2
- qbittorrent 5.2.3_v2.0.15-ls478 -> 5.2.4_v2.0.15-ls480
- busybox (garage init) 1.37.0 -> 1.38.0

apps/qbit/deployment.yaml

@@ -27,7 +27,7 @@ spec:
               value: "8080"
             - name: TORRENTING_PORT
               value: "6881"
-          image: lscr.io/linuxserver/qbittorrent:5.2.3_v2.0.15-ls478
+          image: lscr.io/linuxserver/qbittorrent:5.2.4_v2.0.15-ls480
           livenessProbe:
             httpGet:
               path: /

argocd-apps/add-ons/alloy.yaml

@@ -124,7 +124,7 @@ spec:
                   path: /var/lib/alloy
                   type: DirectoryOrCreate
     repoURL: https://grafana.github.io/helm-charts
-    targetRevision: 1.13.0
+    targetRevision: 1.13.1
   syncPolicy:
     automated:
       prune: true

argocd-apps/add-ons/cert-manager.yaml

@@ -23,7 +23,7 @@ spec:
             featureGates:
               ExperimentalGatewayAPISupport: true
       repoURL: https://charts.jetstack.io
-      targetRevision: v1.21.1
+      targetRevision: v1.21.2
     - path: add-ons/cert-manager
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main

argocd-apps/add-ons/cnpg.yaml

@@ -19,7 +19,7 @@ spec:
         config:
           clusterWide: true
     repoURL: https://cloudnative-pg.github.io/charts
-    targetRevision: 0.29.0
+    targetRevision: 0.29.1
   syncPolicy:
     automated:
       prune: true

argocd-apps/add-ons/kube-prometheus-stack.yaml

@@ -182,7 +182,7 @@ spec:
             testFramework:
               enabled: false
       repoURL: https://prometheus-community.github.io/helm-charts
-      targetRevision: 91.8.2
+      targetRevision: 92.3.0
     - path: add-ons/kube-prometheus-stack
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main

argocd-apps/add-ons/loki.yaml

@@ -107,7 +107,7 @@ spec:
           write:
             replicas: 0
       repoURL: https://grafana-community.github.io/helm-charts
-      targetRevision: 18.13.7
+      targetRevision: 18.15.1
     - path: add-ons/loki
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main

argocd-apps/add-ons/sealed-secrets.yaml

@@ -14,7 +14,7 @@ spec:
   source:
     chart: sealed-secrets
     repoURL: https://bitnami.github.io/sealed-secrets
-    targetRevision: 2.19.1
+    targetRevision: 2.20.0
   syncPolicy:
     automated:
       prune: true

argocd-apps/add-ons/traefik.yaml

@@ -62,7 +62,7 @@ spec:
                     name: wildcard-whyredfire-dpdns-org
                     group: ""
       repoURL: https://traefik.github.io/charts
-      targetRevision: 41.6.0
+      targetRevision: 41.7.1
     - path: add-ons/traefik
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main

argocd-apps/apps/garage-ui.yaml

@@ -14,7 +14,7 @@ spec:
   sources:
     - chart: garage-ui
       repoURL: https://helm.noste.dev/
-      targetRevision: 0.12.1
+      targetRevision: 0.13.0
       helm:
         values: |
           config:

argocd-apps/apps/garage.yaml

@@ -49,7 +49,7 @@ spec:
           image:
             repository: dxflrs/garage
           initImage:
-            tag: "1.37.0"
+            tag: "1.38.0"
           persistence:
             meta:
               storageClass: local-path

argocd-apps/apps/jellyfin.yaml

@@ -16,7 +16,7 @@ spec:
       helm:
         values: |
           image:
-            tag: "12.0"
+            tag: "12.2"
           service:
             type: ClusterIP
             port: 8096

bootstrap/kustomization.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: argocd
 resources:
-  - https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.2/manifests/install.yaml
+  - https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.5/manifests/install.yaml
   - argocd-root-app
 patches:
   - target: