chore(deps): pin dependencies (#9468)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[tccr.io/truecharts/cloudnative-pg](https://togithub.com/truecharts/containers)
| pinDigest | -> `b226152` |
| tccr.io/truecharts/kube-webhook-certgen | pinDigest |  -> `28c6de4` |
|
[tccr.io/truecharts/prometheus-config-reloader](https://togithub.com/truecharts/containers)
| pinDigest | -> `26d19ec` |
|
[tccr.io/truecharts/prometheus-operator](https://togithub.com/truecharts/containers)
| pinDigest | -> `4907d52` |
| [tccr.io/truecharts/socat](https://togithub.com/truecharts/containers)
| pinDigest | -> `4fbaf40` |
|
[tccr.io/truecharts/thanos](https://togithub.com/truecharts/containers)
| pinDigest | -> `d1f694c` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xMTQuMyIsInVwZGF0ZWRJblZlciI6IjM1LjExNC4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

---------

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

charts/operators/cloudnative-pg/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/cloudnative-pg
-  tag: "v1.20.0"
+  tag: "v1.20.0@sha256:b226152774c438d4826d29b63efb559a4d99f7a4890cae26a5e49e88f669c38c"
   pullPolicy:
 
 workload:

charts/operators/prometheus-operator/values.yaml

@@ -1,21 +1,21 @@
 image:
   repository: tccr.io/truecharts/prometheus-operator
-  tag: "v0.65.2"
+  tag: "v0.65.2@sha256:4907d522bd1ba4f28568a77affbb6df3f703a6fb35cc0188f0dc4c3b0be6c771"
   pullPolicy:
 
 configReloaderImage:
   repository: tccr.io/truecharts/prometheus-config-reloader
-  tag: "v0.65.2"
+  tag: "v0.65.2@sha256:26d19ec2e1ec4dafaeaf10a37488bdaf30b0177966413f4c26a369f2def6defe"
   pullPolicy:
 
 thanosImage:
   repository: tccr.io/truecharts/thanos
-  tag: "v0.31.0"
+  tag: "v0.31.0@sha256:d1f694ca4040aae878005e15baafdf16ca9e52ce836e5eb64158918f35acd34b"
   pullPolicy:
 
 patchImage:
   repository: tccr.io/truecharts/kube-webhook-certgen
-  tag: latest
+  tag: latest@sha256:28c6de4c7fe7527daafd761e2d33aafe1094004e77248fcc674cc6e092da1017
   pullPolicy:
 
 workload:

charts/stable/jellyfin/Chart.yaml

@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/jellyfin
   - https://github.com/jellyfin/jellyfin
 type: application
-version: 14.1.0
+version: 14.1.1
 annotations:
   truecharts.org/catagories: |
     - media

charts/stable/jellyfin/values.yaml

@@ -5,7 +5,7 @@ image:
 broadcastProxyImage:
   repository: tccr.io/truecharts/socat
   pullPolicy: IfNotPresent
-  tag: v1.7.4.4
+  tag: v1.7.4.4@sha256:4fbaf40c2764af4237f2a1d17c97ce9a8af525e8c4eee280bf4756b43ac544dd
 service:
   main:
     ports: