feat(container): update image memcached to v6.14.0

[renovate]

This PR contains the following updates:

Package	Update	Change
memcached (source)	minor	6.6.7 -> 6.14.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

bitnami/charts (memcached)

v6.14.0

• [bitnami/memcached] feat: ✨ 🔒 Add readOnlyRootFilesystem support (#​23786) (40588f7), closes #​23786

v6.13.0

• [bitnami/memcached] feat: ✨ 🔒 Add automatic adaptation for Openshift restricted-v2 SCC (45edf5f), closes #​24118

v6.12.2

• [bitnami/memcached] Release 6.12.2 updating components versions (#​23956) (c3a8c75), closes #​23956

v6.12.1

• [bitnami/memcached] Release 6.12.1 updating components versions (#​23726) (631ffe3), closes #​23726

v6.10.1

• [bitnami/memcached] Release 6.10.1 updating components versions (#​23106) (38a5396), closes #​23106

v6.9.3

• [bitnami/memcached] Release 6.9.3 updating components versions (#​22937) (5eba6aa), closes #​22937

v6.9.2

• [bitnami/*] Move documentation sections from docs.bitnami.com back to the README (#​22203) (7564f36), closes #​22203
• CHANGE remove replicas in statefulset if autoscaling + HA #​22743 (#​22744) (bc59339), closes #​22743 #​22744

v6.9.0

• [bitnami/memcached] fix: 🔒 Move service-account token auto-mount to pod declaration (#​22431) (6609782), closes #​22431

v6.8.1

• [bitnami/memcached] Release 6.8.1 updating components versions (#​22304) (a043e7c), closes #​22304

v6.8.0

• [bitnami/memcached] fix: 🔒 Improve podSecurityContext and containerSecurityContext with essenti (a2737d0), closes #​22153

v6.7.4

• [bitnami/*] Fix ref links (in comments) (#​21822) (e4fa296), closes #​21822
• [bitnami/memcached] fix: 🔒 Do not use the default service account (#​22020) (2b8fcf0), closes #​22020

v6.7.3

• [bitnami/*] Fix docs.bitnami.com broken links (#​21901) (f35506d), closes #​21901
• [bitnami/*] Update copyright: Year and company (#​21815) (6c4bf75), closes #​21815
• [bitnami/memcached] Release 6.7.3 updating components versions (#​21960) (cc5df56), closes #​21960

v6.7.2

• [bitnami/memcached] Release 6.7.2 updating components versions (#​21804) (2cb3a25), closes #​21804

v6.7.1

• [bitnami/*] Remove relative links to non-README sections, add verification for that and update TL;DR (1103633), closes #​20967
• [bitnami/*] Rename solutions to "Bitnami package for ..." (#​21038) (b82f979), closes #​21038
• [bitnami/memcached] Release 6.7.1 updating components versions (#​21139) (a26ddc4), closes #​21139

v6.7.0

• [bitnami/memcached] feat: ✨ Add support for PSA restricted policy (#​20796) (fb22e8d), closes #​20796

v6.6.8

• [bitnami/*] Rename VMware Application Catalog (#​20361) (3acc734), closes #​20361
• [bitnami/*] Skip image's tag in the README files of the Bitnami Charts (#​19841) (bb9a01b), closes #​19841
• [bitnami/*] Standardize documentation (#​19835) (af5f753), closes #​19835
• [bitnami/memcached] Release 6.6.8 updating components versions (#​20744) (cfd9c2f), closes #​20744

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/storage/seafile/memcached Kustomization: flux-system/cluster-apps-storage-seafile-memcached HelmRelease: seafile/seafile-memcached

+++ kubernetes/apps/storage/seafile/memcached Kustomization: flux-system/cluster-apps-storage-seafile-memcached HelmRelease: seafile/seafile-memcached

@@ -13,13 +13,13 @@

       chart: memcached
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: bitnami
         namespace: flux-system
-      version: 6.6.7
+      version: 6.14.0
   install:
     remediation:
       retries: 3
   interval: 15m
   maxHistory: 2
   uninstall:

[github-actions]

--- HelmRelease: seafile/seafile-memcached Deployment: seafile/seafile-memcached

+++ HelmRelease: seafile/seafile-memcached Deployment: seafile/seafile-memcached

@@ -22,12 +22,13 @@

       labels:
         app.kubernetes.io/instance: seafile-memcached
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: memcached
       annotations: null
     spec:
+      automountServiceAccountToken: false
       affinity:
         podAffinity: null
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
           - podAffinityTerm:
               labelSelector:
@@ -36,20 +37,33 @@

                   app.kubernetes.io/name: memcached
               topologyKey: kubernetes.io/hostname
             weight: 1
         nodeAffinity: null
       securityContext:
         fsGroup: 1001
-      serviceAccountName: default
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      serviceAccountName: seafile-memcached
       containers:
       - name: memcached
-        image: docker.io/bitnami/memcached:1.6.22-debian-11-r0
+        image: docker.io/bitnami/memcached:1.6.24-debian-12-r0
         imagePullPolicy: IfNotPresent
         securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          privileged: false
+          readOnlyRootFilesystem: false
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
+          seLinuxOptions: null
+          seccompProfile:
+            type: RuntimeDefault
         env:
         - name: BITNAMI_DEBUG
           value: 'false'
         - name: MEMCACHED_PORT_NUMBER
           value: '11211'
         ports:
@@ -68,18 +82,17 @@

           initialDelaySeconds: 5
           periodSeconds: 5
           successThreshold: 1
           timeoutSeconds: 3
           tcpSocket:
             port: memcache
-        resources:
-          limits: {}
-          requests:
-            cpu: 250m
-            memory: 256Mi
         volumeMounts:
-        - name: tmp
+        - name: empty-dir
+          mountPath: /opt/bitnami/memcached/conf
+          subPath: app-conf-dir
+        - name: empty-dir
           mountPath: /tmp
+          subPath: tmp-dir
       volumes:
-      - name: tmp
+      - name: empty-dir
         emptyDir: {}
 
--- HelmRelease: seafile/seafile-memcached NetworkPolicy: seafile/seafile-memcached

+++ HelmRelease: seafile/seafile-memcached NetworkPolicy: seafile/seafile-memcached

@@ -0,0 +1,27 @@

+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: seafile-memcached
+  namespace: seafile
+  labels:
+    app.kubernetes.io/instance: seafile-memcached
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: memcached
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: seafile-memcached
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: memcached
+      app.kubernetes.io/version: 1.6.24
+      helm.sh/chart: memcached-6.14.0
+  policyTypes:
+  - Ingress
+  - Egress
+  egress:
+  - {}
+  ingress:
+  - ports:
+    - port: 11211
+
--- HelmRelease: seafile/seafile-memcached ServiceAccount: seafile/seafile-memcached

+++ HelmRelease: seafile/seafile-memcached ServiceAccount: seafile/seafile-memcached

@@ -0,0 +1,12 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+automountServiceAccountToken: false
+metadata:
+  name: seafile-memcached
+  namespace: seafile
+  labels:
+    app.kubernetes.io/instance: seafile-memcached
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: memcached
+