From 9a28f4fefcd365b74ec01e7be2615bc29fda38f7 Mon Sep 17 00:00:00 2001
From: 0xFEEDC0DE64 <daniel@brunner.ninja>
Date: Wed, 14 Oct 2026 20:19:23 +0200
Subject: [PATCH] Strip sha256 hash

---
 .gitea/workflows/deploy.yml | 4 ----
 jellyfin.yaml               | 4 ++--
 migration-job.yaml          | 2 +-
 test.sh                     | 4 ++--
 4 files changed, 5 insertions(+), 9 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 9bdb97c..93a98bb 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -32,10 +32,6 @@ jobs:
           curl --fail --silent --show-error --location \
             --output "${RUNNER_TEMP}/kubectl" \
             "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
-          curl --fail --silent --show-error --location \
-            --output "${RUNNER_TEMP}/kubectl.sha256" \
-            "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256"
-          printf '%s  %s\n' "$(cat "${RUNNER_TEMP}/kubectl.sha256")" "${RUNNER_TEMP}/kubectl" | sha256sum --check
           chmod 0700 "${RUNNER_TEMP}/kubectl"
       - name: Configure Kubernetes access
         env:
diff --git a/jellyfin.yaml b/jellyfin.yaml
index 734a7b1..41ccd05 100644
--- a/jellyfin.yaml
+++ b/jellyfin.yaml
@@ -79,7 +79,7 @@ spec:
           type: RuntimeDefault
       initContainers:
         - name: prepare
-          image: docker.io/library/alpine@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
+          image: docker.io/library/alpine:3.24.1
           imagePullPolicy: IfNotPresent
           command:
             - /tools/prepare.sh
@@ -106,7 +106,7 @@ spec:
               readOnly: true
       containers:
         - name: jellyfin
-          image: docker.io/jellyfin/jellyfin@sha256:0b901391a662862eddb5dc55d244d7883cbb6236ef5b9a6ea82abc78a89819f0
+          image: docker.io/jellyfin/jellyfin:10.11.11
           imagePullPolicy: IfNotPresent
           env:
             - name: TZ
diff --git a/migration-job.yaml b/migration-job.yaml
index 2aa8fb7..dc8c42e 100644
--- a/migration-job.yaml
+++ b/migration-job.yaml
@@ -23,7 +23,7 @@ spec:
           effect: NoSchedule
       containers:
         - name: copy
-          image: docker.io/library/alpine@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
+          image: docker.io/library/alpine:3.24.1
           imagePullPolicy: IfNotPresent
           command:
             - /bin/sh
diff --git a/test.sh b/test.sh
index 8613e79..a10412e 100755
--- a/test.sh
+++ b/test.sh
@@ -11,10 +11,10 @@ bash -n "${project_dir}/create-ci-kubeconfig.sh"
 if command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1; then
   for manifest in namespace.yaml jellyfin.yaml migration-job.yaml; do
     docker run --rm --interactive \
-      ghcr.io/yannh/kubeconform:v0.7.0@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c \
+      ghcr.io/yannh/kubeconform:v0.7.0 \
       -strict -ignore-missing-schemas -summary < "${project_dir}/${manifest}"
   done
   docker run --rm --interactive \
-    ghcr.io/yannh/kubeconform:v0.7.0@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c \
+    ghcr.io/yannh/kubeconform:v0.7.0 \
     -strict -summary < "${project_dir}/ci-deployer.yaml"
 fi