feat(container): update image ghcr.io/home-operations/prowlarr (2.5.2.5491 ➔ 2.6.0.5494)

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/home-operations/prowlarr (source)	minor	2.5.2.5491 → 2.6.0.5494

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

Prowlarr/Prowlarr (ghcr.io/home-operations/prowlarr)

v2.6.0.5494: 2.6.0.5494

Compare Source

To receive further Pre-Release updates for a non-docker installation, please change the branch to develop. (Settings -> General (Show Advanced Settings) -> Updates -> Branch)

If you are using docker you will need to update the container image. Do not attempt to update Prowlarr within an existing docker container.

Changes:

• bc65f17 Fixed: HTTP Basic Auth credentials with non-ASCII characters (#​2749)
• 8be82bb Bump to 2.6.0
• 9344288 Prevent NullRef when categories are missing from the request body for download clients

This list of changes was auto generated.

---

Configuration

📅 Schedule: (in timezone Europe/Brussels)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 92ff3660-12bc-40d3-9d81-73354ddd482a

📥 Commits

Reviewing files that changed from the base of the PR and between fa8ce71 and 173a18e.

📒 Files selected for processing (1)

• kubernetes/apps/media/prowlarr/app/helmrelease.yaml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• Tanguille/LLMKube (auto-detected)

---

📝 Walkthrough

Walkthrough

The Prowlarr HelmRelease now deploys container image version 2.6.0.5494 with its updated SHA256 digest instead of 2.5.2.5491.

Changes

Prowlarr image update

Layer / File(s)	Summary
Update Prowlarr container image kubernetes/apps/media/prowlarr/app/helmrelease.yaml	The Prowlarr application container image tag and digest are updated to version 2.6.0.5494.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• Tanguille/cluster#4146: Updates a Kubernetes workload container image tag and digest.

Suggested reviewers: tanguille

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly states the main change: updating the Prowlarr container image version.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/ghcr.io-home-operations-prowlarr-2.x

---

_{Comment @coderabbitai help to get the list of available commands.}

[tanguille-cluster]

@@ spec.template.spec.containers.app.image @@
# apps/v1/Deployment/media/prowlarr
! ± value change
- ghcr.io/home-operations/prowlarr:2.5.2.5491@sha256:9dc56404214b8617d26af4af0a2df93ceb73fb4f2e1cb5383f5c2154f5fd98a2
+ ghcr.io/home-operations/prowlarr:2.6.0.5494@sha256:f2db7fc93c2c26476de74695b565bfced0f39255cdba30fedf6d1ec45789f818

[tanguille-cluster]

@@ spec.values.controllers.prowlarr.containers.app.image.tag @@
# helm.toolkit.fluxcd.io/v2/HelmRelease/media/prowlarr
! ± value change
- 2.5.2.5491@sha256:9dc56404214b8617d26af4af0a2df93ceb73fb4f2e1cb5383f5c2154f5fd98a2
+ 2.6.0.5494@sha256:f2db7fc93c2c26476de74695b565bfced0f39255cdba30fedf6d1ec45789f818

[github-actions]

AI Automated Review

Analysis engine: qwen-3.6-fast@http://litellm.ai.svc.cluster.local/v1 (openai)

Recommendation: Approve — minor, low-risk container image bump with no manifest or configuration changes.

Change Summary

• File changed: kubernetes/apps/media/prowlarr/app/helmrelease.yaml
• Change: Image tag updated from 2.5.2.5491 to 2.6.0.5494 for ghcr.io/home-operations/prowlarr. The SHA digest is also updated accordingly. No other values (resources, probes, env vars, persistence, security context) are modified.

Release Notes

Prowlarr v2.6.0.5494 includes:

• Fix for HTTP Basic Auth credentials with non-ASCII characters (UTF-8 encoding instead of ISO-8859-1).
• NullReferenceException prevention when categories are missing from download client request bodies.
• Version bump to 2.6.0.

No breaking changes are documented. This is a standard minor version update.

Source: Prowlarr/Prowlarr@v2.6.0.5494

Must-Check Items

1. Validate manifest against target cluster version — Verified. The HelmRelease uses apiVersion: helm.toolkit.fluxcd.io/v2, which is compatible with the Flux CD versions used in this repository. No new API features or CRD changes are introduced by this image bump.
2. Check for resource quota / limit changes — Verified. Resource requests (cpu: 10m, memory: 512Mi) and limits (cpu: 2, memory: 2Gi) remain unchanged.
3. Verify file path sanitization — Not applicable. This change only updates a container image tag; no file-serving paths, volume mounts, or user-controlled input handling are modified.
4. Check for directory traversal vulnerabilities — Not applicable. This is an image version bump with no code or configuration changes related to path handling.

Standards Compliance

• Follows repository conventions: uses the same app-template chart structure, YAML anchors, and security context patterns as peer apps.
• Conventional commit title is present (feat(container): ...).
• No secrets, SOPS files, or Talos configurations are touched.

Unknowns or Needs Verification

None identified. The image digest is pinned and the upstream release notes contain no breaking changes requiring migration steps.