Renovate (141b11a9, 2026-11-02 03:01Z) pinned a digest into
ImageRepository/lidarr spec.image. image-reflector rejects that
(ImageURLInvalid: "should not include a tag"), so Flux stopped scanning
lidarr and FluxImageAutomationNotReady fires.
Renovate touched it because dab7c10e moved the ImageRepository and the
workload refs from lscr.io to ghcr.io/linuxserver/lidarr, while the
renovate.json list of Flux-managed images kept lscr.io/linuxserver/lidarr.
- lidarr.yaml: spec.image back to ghcr.io/linuxserver/lidarr.
- renovate.json: the list names ghcr.io/linuxserver/lidarr instead of
lscr.io, so Renovate also leaves the workload refs in
apps/navidrome/lidarr.yaml to Flux.
- renovate.json: ignorePaths gains kubernetes/infrastructure/image-automation/**.
That directory holds only ImageRepository/ImagePolicy/ImageUpdateAutomation
objects; no image ref in it is a deployable pin, and an ImageRepository
spec.image must never carry a tag or digest. This is the second time
in a week (gitea-mcp, ffd24865) a list gap let Renovate pin one.
Closes#1551