chore(deps): update azure/k8s-set-context action to v5 (#7)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [azure/k8s-set-context](https://github.com/azure/k8s-set-context) | action | major | `v4.0.2` → `v5.0.0` |

---

### Release Notes

<details>
<summary>azure/k8s-set-context (azure/k8s-set-context)</summary>

### [`v5.0.0`](https://github.com/Azure/k8s-set-context/releases/tag/v5.0.0)

[Compare Source](https://github.com/azure/k8s-set-context/compare/v4.0.2...v5.0.0)

##### Features

- [#&#8203;227](https://github.com/azure/k8s-set-context/issues/227) Migrate to ESM with esbuild, vitest

##### Runtime and platform

- [#&#8203;222](https://github.com/azure/k8s-set-context/issues/222) Update Node version from 20 to 24

##### Dependabot updates

- [#&#8203;231](https://github.com/azure/k8s-set-context/issues/231) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;230](https://github.com/azure/k8s-set-context/issues/230) Bump typescript in the actions group across 1 directory
- [#&#8203;228](https://github.com/azure/k8s-set-context/issues/228) Bump picomatch
- [#&#8203;226](https://github.com/azure/k8s-set-context/issues/226) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;223](https://github.com/azure/k8s-set-context/issues/223) Bump undici from 6.23.0 to 6.24.0
- [#&#8203;221](https://github.com/azure/k8s-set-context/issues/221) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;218](https://github.com/azure/k8s-set-context/issues/218) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;219](https://github.com/azure/k8s-set-context/issues/219) Bump minimatch
- [#&#8203;217](https://github.com/azure/k8s-set-context/issues/217) Bump undici and [@&#8203;actions/http-client](https://github.com/actions/http-client)
- [#&#8203;216](https://github.com/azure/k8s-set-context/issues/216) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;214](https://github.com/azure/k8s-set-context/issues/214) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;212](https://github.com/azure/k8s-set-context/issues/212) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;211](https://github.com/azure/k8s-set-context/issues/211) Bump the actions group with 3 updates
- [#&#8203;210](https://github.com/azure/k8s-set-context/issues/210) Bump the actions group with 2 updates
- [#&#8203;208](https://github.com/azure/k8s-set-context/issues/208) Bump [@&#8203;types/node](https://github.com/types/node) from 25.0.2 to 25.0.3 in the actions group
- [#&#8203;209](https://github.com/azure/k8s-set-context/issues/209) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;206](https://github.com/azure/k8s-set-context/issues/206) Bump the actions group with 3 updates
- [#&#8203;207](https://github.com/azure/k8s-set-context/issues/207) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;205](https://github.com/azure/k8s-set-context/issues/205) Bump the actions group in /.github/workflows with 4 updates
- [#&#8203;204](https://github.com/azure/k8s-set-context/issues/204) Bump the actions group with 2 updates
- [#&#8203;202](https://github.com/azure/k8s-set-context/issues/202) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;203](https://github.com/azure/k8s-set-context/issues/203) Bump prettier from 3.6.2 to 3.7.3 in the actions group
- [#&#8203;201](https://github.com/azure/k8s-set-context/issues/201) Bump glob from 10.4.5 to 10.5.0
- [#&#8203;200](https://github.com/azure/k8s-set-context/issues/200) Bump js-yaml from 3.14.1 to 3.14.2
- [#&#8203;198](https://github.com/azure/k8s-set-context/issues/198) Bump js-yaml from 4.1.0 to 4.1.1
- [#&#8203;199](https://github.com/azure/k8s-set-context/issues/199) Bump the actions group with 2 updates

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=-->

Reviewed-on: https://gitea.t000-n.de/t.behrendt/k_photoprism/pulls/7
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/deploy.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@c373c34c836716e663e2d6379e686997bfd7746c # 0.0.6
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@7993842765aaa808493ab79c5f3c21cf2d30f300 # 0.0.10
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -20,7 +20,7 @@ jobs:
       - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
         with:
           version: "3.15.0"
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -28,7 +28,7 @@ jobs:
         uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
         with:
           namespace: ${{ steps.namespace.outputs.namespace }}
-          secret-name: backupsidecar-secret
+          secret-name: backup-secret
           secret-type: generic
           data: |
             {

.gitea/workflows/run-backup.yaml

@@ -0,0 +1,20 @@
+name: Run Scan
+
+on:
+  workflow_dispatch:
+
+jobs:
+  run-renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@7993842765aaa808493ab79c5f3c21cf2d30f300 # 0.0.10
+        id: namespace
+        with:
+          repo: ${{ github.repository }}
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
+        with:
+          method: kubeconfig
+          kubeconfig: ${{ secrets.KUBECONFIG }}
+      - run: |
+          kubectl -n photoprism create job --from=cronjob/backup backup-photoprism-${{ github.run_id }}

.gitea/workflows/validate.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@c373c34c836716e663e2d6379e686997bfd7746c # 0.0.6
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@7993842765aaa808493ab79c5f3c21cf2d30f300 # 0.0.10
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -18,7 +18,7 @@ jobs:
       - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
         with:
           version: "3.15.0"
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}

k8s/21_deployment_photoprism.yaml

@@ -18,7 +18,7 @@ spec:
         kubernetes.io/hostname: k3sh0
       containers:
         - name: photoprism
-          image: photoprism/photoprism:latest
+          image: photoprism/photoprism:latest@sha256:5229f68bce0293320547f35c733de584d7c2d5725a0efbddb68d7a118a8fc21c
           imagePullPolicy: Always
           resources:
             limits:
@@ -91,7 +91,7 @@ spec:
             - mountPath: /photoprism/storage
               name: storage
         - name: redis
-          image: redis:6-alpine
+          image: redis:6-alpine@sha256:46884be93652d02a96a176ccf173d1040bef365c5706aa7b6a1931caec8bfeef
           resources:
             limits:
               cpu: "500m"

k8s/24_backup_photoprism.yaml

@@ -0,0 +1,63 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: backup
+spec:
+  schedule: "0 20 */14 * *"
+  concurrencyPolicy: Forbid
+  successfulJobsHistoryLimit: 5
+  failedJobsHistoryLimit: 3
+  jobTemplate:
+    metadata:
+      labels:
+        t00n.de/restic-backup: "true"
+    spec:
+      backoffLimit: 3
+      activeDeadlineSeconds: 300
+      template:
+        spec:
+          nodeSelector:
+            kubernetes.io/hostname: k3sh0
+          restartPolicy: OnFailure
+          containers:
+            - name: backup-photoprism
+              image: gitea.t000-n.de/t.behrendt/backupsidecar:6ff6e8759e827b9aa8ec7ecec4356cc04e4ca75a@sha256:f0841b9d74c6c9db8445d130b79c631a5526a2890ce34371859b3bb65f0ee5be
+              env:
+                - name: BACKUP_MODE
+                  value: "directory"
+                - name: RESTIC_REPOSITORY
+                  value: "rest:http://restserver.restic.svc.cluster.local:8000/photoprism"
+                - name: RESTIC_PASSWORD
+                  valueFrom:
+                    secretKeyRef:
+                      name: backup-secret
+                      key: restic_password
+                - name: RESTIC_REST_USERNAME
+                  valueFrom:
+                    secretKeyRef:
+                      name: backup-secret
+                      key: restic_rest_username
+                - name: RESTIC_REST_PASSWORD
+                  valueFrom:
+                    secretKeyRef:
+                      name: backup-secret
+                      key: restic_rest_password
+                - name: GOTIFYHOST
+                  value: "https://gotify.t000-n.de"
+                - name: GOTIFYTOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: backup-secret
+                      key: gotify_token
+                - name: GOTIFYTOPIC
+                  value: "Photoprism Backup"
+                - name: SOURCEDIR
+                  value: "/data"
+              volumeMounts:
+                - name: source-data
+                  mountPath: /data
+          volumes:
+            - name: source-data
+              hostPath:
+                path: /mnt/longhorn1/svc/photoprism/main
+                type: Directory