fix: unblock CI for minisatip, jackett, k8s-sidecar renovate bumps (#1824)

Three open renovate version bumps were red because upstream changed the
build/packaging contract between releases. This PR rolls the bumps in
together with the minimal per-app adjustments to make CI green. Grocy
4.6.0 and the three BREAKING major-version bumps (duplicacy v3, Lychee
v7, cops v4) are deliberately deferred — each needs its own dedicated
effort.

### Changes

- **`apps/minisatip` (2.0.71 → 2.0.79)** — upstream replaced autotools
with CMake. Swap `./configure && make DDCI=1` for `cmake -B build . &&
cmake --build build -j…`, add `cmake` to the build/purge set, and move
the produced binary to `/app/satip/minisatip` where `start.sh` expects
it. `DDCI` is now auto-enabled in `CMakeLists.txt` when DVBCA
(libssl-dev) is detected, so no explicit flag.

- **`apps/jackett` (v0.24.1167 → v0.24.1614)** — the app starts and
listens on :9117 fine, but `/` no longer returns 302, so the Docker
healthcheck times out. Drop the explicit `statusCode: 302` from
`container-test.yaml`; the healthcheck helper then accepts any 2xx/3xx.

- **`apps/k8s-sidecar` (2.5.2 → 2.6.0, also supersedes #1718)** —
upstream moved dependency metadata from `src/requirements.txt` to a
top-level `pyproject.toml`. Stage the whole project for `pip install`,
then copy `src/*` into `/app` so the existing `CMD [ "python", "-u",
"/app/sidecar.py" ]` keeps working:

  ```dockerfile
  tar -xzf /tmp/release.tar.gz -C /tmp/src_temp \
      k8s-sidecar-${VERSION}/pyproject.toml \
      k8s-sidecar-${VERSION}/src && \
/app/venv/bin/pip install --no-cache-dir
/tmp/src_temp/k8s-sidecar-${VERSION} && \
  cp -r /tmp/src_temp/k8s-sidecar-${VERSION}/src/* /app/
  ```

### Deferred (not in this PR)

- **#1609 grocy 4.6.0** — upstream `composer.json` now requires `php
8.5.*`; base image ships 8.3. Fixing requires switching to a PHP
8.5-capable base (e.g. `ondrej/php` PPA), which isn't a minimal change.
- **#1641 duplicacy v3**, **#1643 Lychee v7**, **#1644 cops v4** — all
BREAKING upstream rewrites (new distribution URLs, new PHP extension
requirements, new composer flow). Each belongs in its own PR.

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Crow-Control <7613738+Crow-Control@users.noreply.github.com>

Author: Copilot

apps/jackett/container-test.yaml

@@ -3,4 +3,3 @@
 http:
 - port: '9117'
   path: /
-  statusCode: 302

apps/jackett/docker-bake.hcl

@@ -6,7 +6,7 @@ variable "APP" {
 
 variable "VERSION" {
   // renovate: datasource=github-releases depName=Jackett/Jackett
-  default = "v0.24.1167"
+  default = "v0.24.1614"
 }
 
 variable "LICENSE" {

apps/k8s-sidecar/Dockerfile

@@ -14,17 +14,19 @@ RUN apt-get update && \
 # Create virtual environment and upgrade pip/setuptools
 RUN python -m venv /app/venv && /app/venv/bin/pip install --no-cache-dir -U pip setuptools
 
-# Download and extract only the src/ folder from the release
+# Download and extract the release. Upstream moved dependency metadata from
+# src/requirements.txt to a top-level pyproject.toml starting at 2.5.5, so we
+# stage the whole project for pip and copy the source files into /app for the
+# existing CMD to find.
 ENV RELEASE_URL="https://github.com/kiwigrid/k8s-sidecar/archive/refs/tags/${VERSION}.tar.gz"
-RUN curl -L https://github.com/kiwigrid/k8s-sidecar/archive/refs/tags/${VERSION}.tar.gz -o release.tar.gz && \
-    mkdir src_temp && \
-    tar -xzf release.tar.gz -C src_temp k8s-sidecar-${VERSION}/src && \
-    cp -r src_temp/k8s-sidecar-${VERSION}/src/* /app/ && \
-    rm -rf release.tar.gz src_temp
-
-# Install Python dependencies
-RUN /app/venv/bin/pip install --no-cache-dir -r requirements.txt && \
-    rm requirements.txt && \
+RUN curl -L https://github.com/kiwigrid/k8s-sidecar/archive/refs/tags/${VERSION}.tar.gz -o /tmp/release.tar.gz && \
+    mkdir -p /tmp/src_temp && \
+    tar -xzf /tmp/release.tar.gz -C /tmp/src_temp \
+        k8s-sidecar-${VERSION}/pyproject.toml \
+        k8s-sidecar-${VERSION}/src && \
+    /app/venv/bin/pip install --no-cache-dir /tmp/src_temp/k8s-sidecar-${VERSION} && \
+    cp -r /tmp/src_temp/k8s-sidecar-${VERSION}/src/* /app/ && \
+    rm -rf /tmp/release.tar.gz /tmp/src_temp && \
     # Remove tests and compiled Python files
     find /app/venv \( -type d -name test -o -name tests \) -o \( -type f -name '*.pyc' -o -name '*.pyo' \) -exec rm -rf '{}' +
 

apps/k8s-sidecar/docker-bake.hcl

@@ -6,7 +6,7 @@ variable "APP" {
 
 variable "VERSION" {
   // renovate: datasource=docker depName=ghcr.io/kiwigrid/k8s-sidecar
-  default = "2.5.2"
+  default = "2.6.0"
 }
 
 variable "LICENSE" {

apps/minisatip/Dockerfile

@@ -15,6 +15,7 @@ RUN \
   apt-get update && \
   apt-get install --no-install-recommends -y \
     build-essential \
+    cmake \
     git \
     libdvbcsa-dev \
     libssl-dev \
@@ -31,11 +32,14 @@ RUN \
     /tmp/satip.tar.gz -C \
     /app/satip --strip-components=1 && \
   cd /app/satip && \
-  ./configure && \
-  make DDCI=1 && \
+  cmake -B build . && \
+  cmake --build build -j"$(nproc)" && \
+  mv /app/satip/build/minisatip /app/satip/minisatip && \
+  rm -rf /app/satip/build && \
   echo "**** clean up ****" && \
   apt-get -y purge \
     build-essential \
+    cmake \
     git \
     libssl-dev \
     linux-headers-generic \

apps/minisatip/docker-bake.hcl

@@ -6,7 +6,7 @@ variable "APP" {
 
 variable "VERSION" {
   // renovate: datasource=github-releases depName=catalinii/minisatip
-  default = "2.0.71"
+  default = "2.0.79"
 }
 
 variable "LICENSE" {