Merge branch 'main' into renovate/dawidd6-action-ansible-playbook-3.x

ansible/assets/docker-ext/compose.yml.j2

@@ -116,7 +116,7 @@ services:
       - "traefik.http.services.stalwart-http.loadbalancer.server.port=8080"
   linkding:
     container_name: "${LD_CONTAINER_NAME:-linkding}"
-    image: sissbruecker/linkding:1.36.0-plus
+    image: sissbruecker/linkding:1.39.1-plus
     ports:
       - "${LD_HOST_PORT:-9090}:9090"
     volumes:
@@ -179,7 +179,7 @@ services:
       timeout: 3s
   authentik-server:
     container_name: authentik-server
-    image: ghcr.io/goauthentik/server:2024.8.2
+    image: ghcr.io/goauthentik/server:2025.2.2
     restart: unless-stopped
     command: server
     environment:
@@ -213,7 +213,7 @@ services:
       - "traefik.http.routers.authentik.middlewares=crowdsec@docker"
   authentik-worker:
     container_name: authentik-worker
-    image: ghcr.io/goauthentik/server:2024.8.2
+    image: ghcr.io/goauthentik/server:2025.2.2
     restart: unless-stopped
     command: worker
     environment:
@@ -353,7 +353,7 @@ services:
     restart: unless-stopped
     # To use a pre-built image, remove the above "build" section
     # and uncomment the following line:
-    image: healthchecks/healthchecks:v3.8
+    image: healthchecks/healthchecks:v3.9
     env_file:
       - .healthchecks-env
     ports:

ansible/assets/docker-int/compose.yml.j2

@@ -105,7 +105,7 @@ services:
       - "traefik.http.routers.testweb.entrypoints=websecure"
       - "traefik.http.routers.testweb.tls.certresolver=myresolver"
   actual_server:
-    image: docker.io/actualbudget/actual-server:24.11.0
+    image: docker.io/actualbudget/actual-server:25.3.1
     ports:
       # This line makes Actual available at port 5006 of the device you run the server on,
       # i.e. http://localhost:5006. You can change the first number to change the port, if you want.