feat(container): update image ghcr.io/donkie/spoolman (0.25.0 ➔ 0.26.0)

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/donkie/spoolman	minor	0.25.0 → 0.26.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

Donkie/Spoolman (ghcr.io/donkie/spoolman)

v0.26.0

Compare Source

Spoolman has a new web client. It's a rewrite from scratch, and from this release on it's what you get by default. It's faster, much better phone compatibility, and it brings a pile of things the old client couldn't do:

• New Library view, that combines the old manufacturer/filament/spool pages into a single unified view. Much better user experience, and no longer do you need to mess with wide column problems.
• Much better support for adding and maintaining large number of spools. The library collapses unused spools, the add spool form lets you add many spools in an easier way, etc.
• New unified spool adding flow, add both spool, filament and manufacturer info in one go.
• Custom label designs, a new editor lets you design the labels in much better detail.
• Free text search with color-similarity support.
• Locations page has been renamed to "Dashboard" instead, and it can now group spools by not only Location, but any spool-based extra field. So it can be used to organize by status, etc.
• Full mobile support, with proper button sizes and an UI that reshapes itself to fit any size of screen.
• And many more small quality of life improvements throughout the frontend.

The old React client still ships in every image. If the new one misbehaves on your setup, set SPOOLMAN_LEGACY_CLIENT=TRUE to go back to it. Both talk to the same API, so your data is untouched either way. Please open an issue if you have to do that, so it can be fixed.

The new frontend having been made from scratch does mean a lot of text needs to be translated again, but I've tried reusing old translations as much as possible.

Frontend

• Brand new web client, served by default. Both clients ship in the image, SPOOLMAN_LEGACY_CLIENT=TRUE switches back to the old one.

Backend

• New cross-entity search endpoint. Search now matches every whitespace-separated term, matches filaments by their vendor's name, and can also search by color similarity!
• Rename a field value, location, material, and so on, across every spool at once.
• The external filament library's display name is now configurable via EXTERNAL_DB_NAME.
• Performance: extra fields load in a single extra query instead of a join, color similarity search scales with the number of matches rather than the catalog size, and editing a filament no longer fans out one websocket message per spool.
• Security hardening: cross-origin writes and websockets are refused, CORS credentials are dropped under a wildcard origin, CSV export values are escaped against formula injection, extra-field sizes are bounded, and there's an opt-in host guard.
• Backup rotation no longer deletes your restore history.
• Fixed a 500 on /info when the external database name couldn't be resolved.
• Malformed sort parameters return 400 instead of 500.
• Extra field values can be cleared again.
• Builds now run on Node 24 and Vite 8.

Full Changelog: https://github.com/Donkie/Spoolman/compare/v0.25.0..https://github.com/Donkie/Spoolman/compare/v0.26.0

---

Configuration

📅 Schedule: (in timezone Europe/Brussels)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• Chores
  • Updated Spoolman to version 0.26.0 for the latest improvements and fixes.

[coderabbitai]

📝 Walkthrough

Walkthrough

The Spoolman Helm release updates the container image from version 0.25.0 to 0.26.0 and updates its pinned image digest.

Changes

Spoolman image update

Layer / File(s)	Summary
Update Spoolman image declaration kubernetes/apps/default/spoolman/app/helmrelease.yaml	The Helm release now references Spoolman version 0.26.0 and its pinned image digest.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• Tanguille/cluster#4244: Updates a pinned container image digest in another Kubernetes HelmRelease.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the Spoolman container image update from version 0.25.0 to 0.26.0.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/ghcr.io-donkie-spoolman-0.x

---

_{Comment @coderabbitai help to get the list of available commands.}

[tanguille-cluster]

@@ spec.template.spec.containers.app.image @@
# apps/v1/Deployment/default/spoolman
! ± value change
- ghcr.io/donkie/spoolman:0.25.0@sha256:1c4818a467d42946c3f24850aa45686ab67c06cb80e798470b46a33c2c218381
+ ghcr.io/donkie/spoolman:0.26.0@sha256:f17489666719c1a6e12bf0616e9865e3ee8609ef0ac2608d67c1528ceeb609e8

@@ spec.template.spec.containers.manager.image @@
# apps/v1/Deployment/system-upgrade/tuppr
! ± value change
- ghcr.io/home-operations/tuppr@sha256:e7824df6fc58be64eff76330327f0f3bb8273eb6428a19fab4fefa2d829ef1f5
+ ghcr.io/home-operations/tuppr@sha256:d50f298e00192c447f284cc3581beb45984d67e0235368c7aa3598dac2e4cde1

[tanguille-cluster]

@@ spec.values.controllers.spoolman.containers.app.image.tag @@
# helm.toolkit.fluxcd.io/v2/HelmRelease/default/spoolman
! ± value change
- 0.25.0@sha256:1c4818a467d42946c3f24850aa45686ab67c06cb80e798470b46a33c2c218381
+ 0.26.0@sha256:f17489666719c1a6e12bf0616e9865e3ee8609ef0ac2608d67c1528ceeb609e8

@@ spec.ref.tag @@
# source.toolkit.fluxcd.io/v1/OCIRepository/system-upgrade/tuppr
! ± value change
- 0.4.4
+ 0.4.3

[github-actions]

AI Automated Review

Analysis engine: qwen-3.6-fast@http://litellm.ai.svc.cluster.local/v1 (openai)

Recommendation: Approve

This is a straightforward minor version bump for Spoolman (0.25.0 → 0.26.0). The image digest is pinned, the manifest structure follows repository conventions, and no breaking changes affect the current Kubernetes configuration.

Release notes

Spoolman v0.26.0 introduces a completely rewritten Svelte-based web client that replaces the previous React frontend by default. Key user-visible changes include:

• New unified Library view combining manufacturer, filament, and spool pages
• Improved mobile support with responsive UI
• Custom label design editor
• Cross-entity search with color-similarity matching
• Renamed "Locations" page to "Dashboard" with flexible grouping
• Backend performance improvements and security hardening (CORS/websocket restrictions, CSV formula injection protection)
• A fallback environment variable SPOOLMAN_LEGACY_CLIENT=TRUE is available if the new client misbehaves; both clients share the same API and data

No database migrations or configuration changes are required for existing deployments.

Standards Compliance

• Manifest format: Follows the app-template HelmRelease schema used across the repository. Image tag includes SHA256 digest as per convention.
• Resource requests/limits: Unchanged (CPU 25m/100m, memory 128Mi/512Mi).
• Probes: Liveness, readiness, and startup probes remain configured.
• Secrets: Database credentials reference spoolman-secret via secretKeyRef; no secrets are committed.
• RollingUpdate strategy: Preserved.

Must-Check Items

1. Validate manifest against target cluster version: The manifest uses helm.toolkit.fluxcd.io/v2 and standard app-template values, which are compatible with the cluster's Flux and Kubernetes versions. No version-specific features are introduced.
2. Check for resource quota / limit changes: Resource requests and limits are unchanged from the previous version.

Unknowns or Needs Verification

• The release notes mention builds now run on Node 24 and Vite 8 internally. This does not affect the container image's runtime requirements in Kubernetes, but it is noted for context.