fix(deps): update all non-major dependencies

Author: renovate-bot

.github/workflows/renovate.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
       - name: Self-hosted Renovate
-        uses: renovatebot/[email protected].5
+        uses: renovatebot/[email protected].12
         with:
           configurationFile: .github/renovate.json
           token: ${{ secrets.RENOVATE_TOKEN }}

.github/workflows/semantic-release.yml

@@ -31,7 +31,7 @@ jobs:
       - name: setup-node
         uses: actions/setup-node@v4
         with:
-          node-version: "22.17.1"
+          node-version: "22.19.0"
 
       - name: create-archives
         run: |

infrastructure/.github/workflows/semantic-release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "22.17.1"
+          node-version: "22.19.0"
       - name: Install dependencies
         run: npm clean-install
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies

infrastructure/rag/Chart.lock

@@ -1,10 +1,10 @@
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: 1.3.4
+  version: 1.5.3
 - name: qdrant
   repository: https://qdrant.github.io/qdrant-helm
-  version: 1.15.0
+  version: 1.15.4
 - name: minio
   repository: https://charts.bitnami.com/bitnami
   version: 15.0.7
@@ -13,6 +13,6 @@ dependencies:
   version: 0.48.0
 - name: ollama
   repository: https://otwld.github.io/ollama-helm/
-  version: 1.24.0
-digest: sha256:30cc964388864bd738eb0668367576dbad45eb9d6a885cdc48ef7c07c9692aa0
-generated: "2025-08-04T09:23:39.885193+02:00"
+  version: 1.29.0
+digest: sha256:1e60efd0d280ddd56391d9e8a73234b336255b60cefd8e5c7f44ef8fcc8bd3c5
+generated: "2025-09-28T01:28:02.888269662Z"

infrastructure/rag/Chart.yaml

@@ -10,10 +10,10 @@ appVersion: "1.0.0"
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: "1.3.4"
+  version: "1.5.3"
   condition: features.langfuse.enabled
 - name: qdrant
-  version: 1.15.0
+  version: 1.15.4
   repository: "https://qdrant.github.io/qdrant-helm"
   condition: features.qdrant.enabled
 - name: minio
@@ -27,6 +27,6 @@ dependencies:
   condition: features.keydb.enabled
 - name: ollama
   alias: ollama
-  version: 1.24.0
+  version: 1.29.0
   repository: https://otwld.github.io/ollama-helm/
   condition: features.ollama.enabled

infrastructure/rag/values.yaml

@@ -465,14 +465,14 @@ langfuse:
     web:
       image:
         repository: langfuse/langfuse
-        tag: "3.88.1"
+        tag: "3.112.0"
         pullPolicy: Always
 
     # Worker deployment configuration
     worker:
       image:
         repository: langfuse/langfuse-worker
-        tag: "3.88.1"
+        tag: "3.112.0"
         pullPolicy: Always
       port: 3030
 

infrastructure/terraform/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     stackit = {
       source  = "stackitcloud/stackit"
-      version = "~> 0.58.0"
+      version = "~> 0.66.0"
     }
   }
 }

libs/.github/workflows/semantic-release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "22.17.1"
+          node-version: "22.19.0"
       - name: Install dependencies
         run: npm install
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies

libs/admin-api-lib/poetry.lock

@@ -97,14 +97,14 @@ pytest-asyncio = "^1.0.0"
 [tool.poetry.dependencies]
 rag-core-lib = {path = "../rag-core-lib"}
 python = "^3.13"
-uvicorn = "^0.35.0"
-fastapi = "^0.116.0"
+uvicorn = "^0.36.0"
+fastapi = "^0.117.0"
 dependency-injector = "^4.46.0"
 python-dateutil = "^2.9.0.post0"
 tenacity = "9.1.2"
 boto3 = "^1.38.10"
 tqdm = "^4.67.1"
-langfuse = "3.2.1"
+langfuse = "3.5.0"
 redis = "^6.0.0"
 pyyaml = "^6.0.2"
 python-multipart = "^0.0.20"