From 11da129140f928fe306e9f62bd24771a5fb6691d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 12 Sep 2026 23:20:07 +0000
Subject: [PATCH] =?UTF-8?q?feat(container):=20update=20image=20docker.io/a?=
 =?UTF-8?q?lpine/curl=20(=208.21.0=20=E2=86=92=208.22.0=20)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../apps/media/qbittorrent/private/app/helmrelease.yaml       | 4 ++--
 kubernetes/apps/media/qbittorrent/public/app/helmrelease.yaml | 2 +-
 kubernetes/apps/network/opnsense-backup/app/helmrelease.yaml  | 2 +-
 .../apps/observability/exporters/hetzner/app/helmrelease.yaml | 2 +-
 .../observability/exporters/opnsense/app/helmrelease.yaml     | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/kubernetes/apps/media/qbittorrent/private/app/helmrelease.yaml b/kubernetes/apps/media/qbittorrent/private/app/helmrelease.yaml
index 89705cd2e..b0cdfd195 100644
--- a/kubernetes/apps/media/qbittorrent/private/app/helmrelease.yaml
+++ b/kubernetes/apps/media/qbittorrent/private/app/helmrelease.yaml
@@ -209,7 +209,7 @@ spec:
               # docker.io/alpine/curl — same utility image used by the opnsense/
               # hetzner exporters. Ships curl + BusyBox sh (no jq needed here).
               repository: docker.io/alpine/curl
-              tag: 8.21.0@sha256:a1c44bab54d88e18ea9a6a4ecefab7f2d230b968567b78960fcaff8d51b7f067
+              tag: 8.22.0@sha256:d7720f8cffb47e7a80d01fb2c1b38562fab0e436948537e9b77dc312d29d12d6
             command:
               - /bin/sh
               - /scripts/port-watchdog.sh
@@ -245,7 +245,7 @@ spec:
           dyn-ip:
             image:
               repository: docker.io/alpine/curl
-              tag: 8.21.0@sha256:a1c44bab54d88e18ea9a6a4ecefab7f2d230b968567b78960fcaff8d51b7f067
+              tag: 8.22.0@sha256:d7720f8cffb47e7a80d01fb2c1b38562fab0e436948537e9b77dc312d29d12d6
             command:
               - /bin/sh
               - /scripts/dyn-ip.sh
diff --git a/kubernetes/apps/media/qbittorrent/public/app/helmrelease.yaml b/kubernetes/apps/media/qbittorrent/public/app/helmrelease.yaml
index bf5df6b30..70dc0172a 100644
--- a/kubernetes/apps/media/qbittorrent/public/app/helmrelease.yaml
+++ b/kubernetes/apps/media/qbittorrent/public/app/helmrelease.yaml
@@ -194,7 +194,7 @@ spec:
           port-watchdog:
             image:
               repository: docker.io/alpine/curl
-              tag: 8.21.0@sha256:a1c44bab54d88e18ea9a6a4ecefab7f2d230b968567b78960fcaff8d51b7f067
+              tag: 8.22.0@sha256:d7720f8cffb47e7a80d01fb2c1b38562fab0e436948537e9b77dc312d29d12d6
             command:
               - /bin/sh
               - /scripts/port-watchdog.sh
diff --git a/kubernetes/apps/network/opnsense-backup/app/helmrelease.yaml b/kubernetes/apps/network/opnsense-backup/app/helmrelease.yaml
index c5aec2970..1fb25b875 100644
--- a/kubernetes/apps/network/opnsense-backup/app/helmrelease.yaml
+++ b/kubernetes/apps/network/opnsense-backup/app/helmrelease.yaml
@@ -36,7 +36,7 @@ spec:
           app:
             image:
               repository: docker.io/alpine/curl
-              tag: 8.21.0@sha256:a1c44bab54d88e18ea9a6a4ecefab7f2d230b968567b78960fcaff8d51b7f067
+              tag: 8.22.0@sha256:d7720f8cffb47e7a80d01fb2c1b38562fab0e436948537e9b77dc312d29d12d6
             command:
               - /bin/sh
               - -c
diff --git a/kubernetes/apps/observability/exporters/hetzner/app/helmrelease.yaml b/kubernetes/apps/observability/exporters/hetzner/app/helmrelease.yaml
index 79b463045..bd55f6ccb 100644
--- a/kubernetes/apps/observability/exporters/hetzner/app/helmrelease.yaml
+++ b/kubernetes/apps/observability/exporters/hetzner/app/helmrelease.yaml
@@ -28,7 +28,7 @@ spec:
           app:
             image:
               repository: docker.io/alpine/curl
-              tag: 8.21.0
+              tag: 8.22.0
             # This image ships curl but not jq. We can't apk-add jq (non-root +
             # read-only rootfs), so we fetch jq's official static binary into
             # /tmp (the one writable path) and put it on PATH before exec'ing
diff --git a/kubernetes/apps/observability/exporters/opnsense/app/helmrelease.yaml b/kubernetes/apps/observability/exporters/opnsense/app/helmrelease.yaml
index dd24b4c0a..45525c2d9 100644
--- a/kubernetes/apps/observability/exporters/opnsense/app/helmrelease.yaml
+++ b/kubernetes/apps/observability/exporters/opnsense/app/helmrelease.yaml
@@ -66,7 +66,7 @@ spec:
           app:
             image:
               repository: docker.io/alpine/curl
-              tag: 8.21.0@sha256:a1c44bab54d88e18ea9a6a4ecefab7f2d230b968567b78960fcaff8d51b7f067
+              tag: 8.22.0@sha256:d7720f8cffb47e7a80d01fb2c1b38562fab0e436948537e9b77dc312d29d12d6
             command:
               - /bin/sh
               - -c