Update Container images

docker/ai/litellm/litellm.yaml

@@ -9,7 +9,7 @@
 name: litellm
 services:
   litellm:
-    image: ghcr.io/berriai/litellm:v1.99.1
+    image: ghcr.io/berriai/litellm:v1.100.0
     command:
       - --config=/app/config.yaml
       - --telemetry=false

docker/ai/ollama/ollama-amdgpu.yaml

@@ -12,7 +12,7 @@
 name: ollama
 services:
   ollama:
-    image: ollama/ollama:0.33.2
+    image: ollama/ollama:0.33.3
     devices:
       - /dev/dri/renderD128:/dev/dri/renderD128
     environment:

docker/ai/ollama/ollama.yaml

@@ -8,7 +8,7 @@ name: ollama
 services:
   ollama:
     # GPU acceleration: set GPU_COMPOSE_SUFFIX=amdgpu in host .env to load ollama-amdgpu.yaml (ROCm/AMD)
-    image: ollama/ollama:0.33.2
+    image: ollama/ollama:0.33.3
     container_name: ollama
     restart: unless-stopped
     # https://docs.docker.com/config/containers/resource_constraints/#configure-the-default-cfs-scheduler

docker/ai/qdrant/qdrant.yaml

@@ -11,7 +11,7 @@
 name: qdrant
 services:
   qdrant:
-    image: qdrant/qdrant:v1.19.0
+    image: qdrant/qdrant:v1.19.1
     container_name: qdrant
     restart: unless-stopped
     healthcheck:

docker/automation/homeassistant/homeassistant.yaml

@@ -17,7 +17,7 @@
 name: homeassistant
 services:
   homeassistant:
-    image: lscr.io/linuxserver/homeassistant:2026.8.3
+    image: lscr.io/linuxserver/homeassistant:2026.9.1
     container_name: homeassistant
     restart: unless-stopped
     network_mode: host

docker/automation/n8n/n8n.yaml

@@ -44,7 +44,7 @@ services:
       - ${DOCKER_VOLUMES}/n8n:/home/node/.n8n
 
   n8n:
-    image: docker.n8n.io/n8nio/n8n:2.38.2
+    image: docker.n8n.io/n8nio/n8n:2.38.3
     container_name: n8n
     restart: unless-stopped
     environment:

docker/dev/supabase/supabase.yaml

@@ -220,7 +220,7 @@ services:
   realtime:
     # This container name looks inconsistent but is correct because realtime constructs tenant id by parsing the subdomain
     container_name: realtime-dev.supabase-realtime
-    image: supabase/realtime:v2.133.0
+    image: supabase/realtime:v2.134.6
     restart: unless-stopped
     depends_on:
       db:
@@ -266,7 +266,7 @@ services:
 
   storage:
     container_name: supabase-storage
-    image: supabase/storage-api:v1.72.4
+    image: supabase/storage-api:v1.73.0
     restart: unless-stopped
     volumes:
       - ${DOCKER_VOLUMES}/supabase/storage:/var/lib/storage
@@ -357,7 +357,7 @@ services:
 
   functions:
     container_name: supabase-edge-functions
-    image: supabase/edge-runtime:v1.76.1
+    image: supabase/edge-runtime:v1.76.2
     restart: unless-stopped
     volumes:
       - ./config/functions:/home/deno/functions:Z
@@ -383,7 +383,7 @@ services:
 
   analytics:
     container_name: supabase-analytics
-    image: supabase/logflare:1.50.7
+    image: supabase/logflare:1.50.9
     restart: unless-stopped
     # Uncomment to use Big Query backend for analytics
     # volumes:
@@ -440,7 +440,7 @@ services:
 
   db:
     container_name: supabase-db
-    image: supabase/postgres:15.14.1.167
+    image: supabase/postgres:15.14.1.168
     restart: unless-stopped
     volumes:
       - ./config/db/realtime.sql:/docker-entrypoint-initdb.d/migrations/99-realtime.sql:Z

docker/security/authelia/authelia.yaml

@@ -23,7 +23,7 @@ services:
 
   authelia:
     container_name: authelia
-    image: authelia/authelia:4.39.20
+    image: authelia/authelia:4.39.22
     restart: unless-stopped
     environment:
       TZ: ${TIMEZONE}

docker/security/crowdsec/crowdsec.yaml

@@ -19,7 +19,7 @@
 name: crowdsec
 services:
   crowdsec:
-    image: crowdsecurity/crowdsec:v1.8.0
+    image: crowdsecurity/crowdsec:v1.8.1
     container_name: crowdsec
     restart: unless-stopped
     ports:

docker/security/traefik/Dockerfile

@@ -14,6 +14,6 @@ RUN apk add --no-cache git \
 
 # Traefik binds privileged ports and accesses the root-owned Docker socket.
 # kics-scan ignore-line
-FROM traefik:v3.7.12
+FROM traefik:v3.7.13
 
 COPY --from=crowdsec_plugin /plugin /plugins-local/src/github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin