chore(deps): update ghcr.io/coder/code-server docker tag to v4.133.0

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/coder/code-server	minor	4.130.0 → 4.133.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[autonomous-bancey]

Plan Result (generate_ansible_inventory)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (prod_twingate)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 5 to add, 3 to change, 4 to destroy.

• Create
  • time_rotating.service_account_key_rotation
• Update
  • azurerm_key_vault_secret.service_account_key["AzureDevOps"]
  • azurerm_key_vault_secret.service_account_key["Pelican"]
  • azurerm_key_vault_secret.service_account_key["Pterodactyl"]
• Replace
  • time_static.service_account_key_rotation

Change Result (Click me)

  # azurerm_key_vault_secret.service_account_key["AzureDevOps"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-08-05T22:05:56Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-AzureDevOps-SA-Key/2b4864e6847c4383bf8319a1320be48a"
        name                    = "Twingate-AzureDevOps-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.service_account_key["Pelican"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-08-05T22:05:56Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-Pelican-SA-Key/cef606deb5fe4f9e84dcd39abc38e085"
        name                    = "Twingate-Pelican-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.service_account_key["Pterodactyl"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-08-05T22:05:56Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-Pterodactyl-SA-Key/560eb8c0f6334b1e9941ca9719a7110f"
        name                    = "Twingate-Pterodactyl-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # time_rotating.service_account_key_rotation will be created
  + resource "time_rotating" "service_account_key_rotation" {
      + day              = (known after apply)
      + hour             = (known after apply)
      + id               = (known after apply)
      + minute           = (known after apply)
      + month            = (known after apply)
      + rfc3339          = (known after apply)
      + rotation_days    = 7
      + rotation_rfc3339 = (known after apply)
      + second           = (known after apply)
      + unix             = (known after apply)
      + year             = (known after apply)
    }

  # time_static.service_account_key_rotation must be replaced
-/+ resource "time_static" "service_account_key_rotation" {
      ~ day     = 5 -> (known after apply)
      ~ hour    = 22 -> (known after apply)
      ~ id      = "2026-08-05T22:05:56Z" -> (known after apply)
      ~ minute  = 5 -> (known after apply)
      ~ month   = 8 -> (known after apply)
      ~ rfc3339 = "2026-08-05T22:05:56Z" -> (known after apply) # forces replacement
      ~ second  = 56 -> (known after apply)
      ~ unix    = 1785967556 -> (known after apply)
      ~ year    = 2026 -> (known after apply)
    }

  # twingate_service_account_key.this["AzureDevOps"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6dnlQYnd1UnFWc1Z5dEE0Um5tVkptcEFjNmZOamxHbGw1d1V4bDktWXVkMA==" -> (known after apply)
      ~ is_active          = true -> (known after apply)
        name               = "AzureDevOps Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

  # twingate_service_account_key.this["Pelican"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6SjhpdWxoeFFtUklwT2QwWHZYSVVOT0ZTWm9mTTZOSmpQczZ6TFA4ZHQ5bw==" -> (known after apply)
      ~ is_active          = true -> (known after apply)
        name               = "Pelican Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

  # twingate_service_account_key.this["Pterodactyl"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6d2Z1a3k5VzRYaDJ6X0I3a0xSdlNkQ1d0RHpjX01INUx6RUJBVG81UEFzRQ==" -> (known after apply)
      ~ is_active          = true -> (known after apply)
        name               = "Pterodactyl Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

Plan: 5 to add, 3 to change, 4 to destroy.

ℹ️ Objects have changed outside of Terraform

This feature was introduced from Terraform v0.15.4.

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # time_rotating.service_account_key_rotation has been deleted
  - resource "time_rotating" "service_account_key_rotation" {
        id               = "2026-08-05T22:05:56Z"
      - rfc3339          = "2026-08-05T22:05:56Z" -> null
        # (9 unchanged attributes hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the

[autonomous-bancey]

Plan Result (prod_dns)

Plan: 0 to add, 2 to change, 0 to destroy.

• Update
  • module.adguard_gamora.adguard_config.config
  • module.adguard_thanos.adguard_config.config

Change Result (Click me)

  # module.adguard_gamora.adguard_config.config will be updated in-place
  ~ resource "adguard_config" "config" {
      ~ dhcp                            = {
          ~ ipv4_settings = {
              ~ lease_duration = 86400 -> 0
                # (4 unchanged attributes hidden)
            }
            # (3 unchanged attributes hidden)
        }
        id                              = "1"
      ~ last_updated                    = "Friday, 14-Aug-26 15:26:52 UTC" -> (known after apply)
      ~ tls                             = {
          ~ dns_names          = [] -> (known after apply)
          ~ issuer             = null -> (known after apply)
          ~ key_type           = null -> (known after apply)
          ~ not_after          = null -> (known after apply)
          ~ not_before         = null -> (known after apply)
          ~ private_key_saved  = false -> (known after apply)
          ~ subject            = null -> (known after apply)
          ~ valid_cert         = false -> (known after apply)
          ~ valid_chain        = false -> (known after apply)
          ~ valid_key          = false -> (known after apply)
          ~ valid_pair         = false -> (known after apply)
          ~ warning_validation = null -> (known after apply)
            # (9 unchanged attributes hidden)
        }
        # (9 unchanged attributes hidden)
    }

  # module.adguard_thanos.adguard_config.config will be updated in-place
  ~ resource "adguard_config" "config" {
      ~ dhcp                            = {
          ~ ipv4_settings = {
              ~ lease_duration = 86400 -> 0
                # (4 unchanged attributes hidden)
            }
            # (3 unchanged attributes hidden)
        }
        id                              = "1"
      ~ last_updated                    = "Friday, 14-Aug-26 15:26:53 UTC" -> (known after apply)
      ~ tls                             = {
          ~ dns_names          = [] -> (known after apply)
          ~ issuer             = null -> (known after apply)
          ~ key_type           = null -> (known after apply)
          ~ not_after          = null -> (known after apply)
          ~ not_before         = null -> (known after apply)
          ~ private_key_saved  = false -> (known after apply)
          ~ subject            = null -> (known after apply)
          ~ valid_cert         = false -> (known after apply)
          ~ valid_chain        = false -> (known after apply)
          ~ valid_key          = false -> (known after apply)
          ~ valid_pair         = false -> (known after apply)
          ~ warning_validation = null -> (known after apply)
            # (9 unchanged attributes hidden)
        }
        # (9 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

[autonomous-bancey]

Plan Result (tiny_virtual_machines)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 3 to add, 0 to change, 3 to destroy.

• Replace
  • proxmox_virtual_environment_download_file.tiny_images["hela-noble-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["loki-noble-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["thor-noble-server-cloudimg-amd64.img"]

Change Result (Click me)

  # proxmox_virtual_environment_download_file.tiny_images["hela-noble-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/noble-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 624239616 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["loki-noble-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/noble-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 624239616 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["thor-noble-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/noble-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 624239616 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

Plan: 3 to add, 0 to change, 3 to destroy.