chore(deps): update ghcr.io/fluxcd/kustomize-controller docker tag to v1.5.1

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/fluxcd/kustomize-controller	patch	v1.5.0 -> v1.5.1

---

Release Notes

fluxcd/kustomize-controller (ghcr.io/fluxcd/kustomize-controller)

v1.5.1

Compare Source

Changelog

v1.5.1 changelog

Container images

• docker.io/fluxcd/kustomize-controller:v1.5.1
• ghcr.io/fluxcd/kustomize-controller:v1.5.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- HelmRelease: home-assistant/zwave-js-ui StatefulSet: home-assistant/zwave-js-ui

+++ HelmRelease: home-assistant/zwave-js-ui StatefulSet: home-assistant/zwave-js-ui

@@ -40,13 +40,13 @@

       containers:
       - env:
         - name: LOGLEVEL
           value: info
         - name: TZ
           value: Etc/UTC
-        image: ghcr.io/zwave-js/zwave-js-ui:9.31.0
+        image: ghcr.io/zwave-js/zwave-js-ui:9.30.1
         name: main
         resources:
           requests:
             cpu: 15m
             memory: 150Mi
         securityContext:
--- HelmRelease: immich/immich Deployment: immich/immich-machine-learning

+++ HelmRelease: immich/immich Deployment: immich/immich-machine-learning

@@ -69,13 +69,13 @@

               key: REDIS_PASSWORD
               name: secrets-immich-redis
         - name: REDIS_PORT
           value: '6379'
         - name: TRANSFORMERS_CACHE
           value: /cache
-        image: ghcr.io/immich-app/immich-machine-learning:v1.128.0
+        image: ghcr.io/immich-app/immich-machine-learning:v1.126.1
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /ping
             port: 3003
           initialDelaySeconds: 0
--- HelmRelease: immich/immich Deployment: immich/immich-server

+++ HelmRelease: immich/immich Deployment: immich/immich-server

@@ -67,13 +67,13 @@

           valueFrom:
             secretKeyRef:
               key: REDIS_PASSWORD
               name: secrets-immich-redis
         - name: REDIS_PORT
           value: '6379'
-        image: ghcr.io/immich-app/immich-server:v1.128.0
+        image: ghcr.io/immich-app/immich-server:v1.126.1
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /api/server/ping
             port: 2283
           initialDelaySeconds: 0
--- HelmRelease: authentik/authentik Deployment: authentik/authentik-server

+++ HelmRelease: authentik/authentik Deployment: authentik/authentik-server

@@ -24,18 +24,18 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: server
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: 692f467c376d956163b73e6f42d97057b0e06f709f321e7d460ad90ddee58083
+        checksum/secret: 97d2452943258ae89a68430f13a27fe6c61b18aa48f706f78cd1059989684e76
     spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: server
-        image: ghcr.io/goauthentik/server:2025.2.1
+        image: ghcr.io/goauthentik/server:2025.2.0
         imagePullPolicy: IfNotPresent
         args:
         - server
         env:
         - name: AUTHENTIK_SECRET_KEY
           valueFrom:
--- HelmRelease: authentik/authentik Deployment: authentik/authentik-worker

+++ HelmRelease: authentik/authentik Deployment: authentik/authentik-worker

@@ -24,19 +24,19 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: worker
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: 692f467c376d956163b73e6f42d97057b0e06f709f321e7d460ad90ddee58083
+        checksum/secret: 97d2452943258ae89a68430f13a27fe6c61b18aa48f706f78cd1059989684e76
     spec:
       serviceAccountName: authentik
       terminationGracePeriodSeconds: 30
       containers:
       - name: worker
-        image: ghcr.io/goauthentik/server:2025.2.1
+        image: ghcr.io/goauthentik/server:2025.2.0
         imagePullPolicy: IfNotPresent
         args:
         - worker
         env:
         - name: AUTHENTIK_SECRET_KEY
           valueFrom: