fix(deps): update all non-major dependencies

.github/workflows/renovate.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
       - name: Self-hosted Renovate
-        uses: renovatebot/[email protected].5
+        uses: renovatebot/[email protected].13
         with:
           configurationFile: .github/renovate.json
           token: ${{ secrets.RENOVATE_TOKEN }}

.github/workflows/semantic-release.yml

@@ -31,7 +31,7 @@ jobs:
       - name: setup-node
         uses: actions/setup-node@v5
         with:
-          node-version: "22.17.1"
+          node-version: "22.20.0"
 
       - name: create-archives
         run: |

infrastructure/.github/workflows/semantic-release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
-          node-version: "22.17.1"
+          node-version: "22.20.0"
       - name: Install dependencies
         run: npm clean-install
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies

infrastructure/rag/Chart.lock

@@ -1,10 +1,10 @@
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: 1.3.4
+  version: 1.5.4
 - name: qdrant
   repository: https://qdrant.github.io/qdrant-helm
-  version: 1.15.0
+  version: 1.15.4
 - name: minio
   repository: https://charts.bitnami.com/bitnami
   version: 15.0.7
@@ -13,6 +13,6 @@ dependencies:
   version: 0.48.0
 - name: ollama
   repository: https://otwld.github.io/ollama-helm/
-  version: 1.24.0
-digest: sha256:30cc964388864bd738eb0668367576dbad45eb9d6a885cdc48ef7c07c9692aa0
-generated: "2025-08-04T09:23:39.885193+02:00"
+  version: 1.30.0
+digest: sha256:590a34303a6d2beaf84e4ec0cb21010605dce64adf282b191d17497b9cd183bb
+generated: "2025-10-05T01:30:25.456642562Z"

infrastructure/rag/Chart.yaml

@@ -10,10 +10,10 @@ appVersion: "1.0.0"
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: "1.3.4"
+  version: "1.5.4"
   condition: features.langfuse.enabled
 - name: qdrant
-  version: 1.15.0
+  version: 1.15.4
   repository: "https://qdrant.github.io/qdrant-helm"
   condition: features.qdrant.enabled
 - name: minio
@@ -27,6 +27,6 @@ dependencies:
   condition: features.keydb.enabled
 - name: ollama
   alias: ollama
-  version: 1.24.0
+  version: 1.30.0
   repository: https://otwld.github.io/ollama-helm/
   condition: features.ollama.enabled

infrastructure/rag/values.yaml

@@ -465,14 +465,14 @@ langfuse:
     web:
       image:
         repository: langfuse/langfuse
-        tag: "3.88.1"
+        tag: "3.112.0"
         pullPolicy: Always
 
     # Worker deployment configuration
     worker:
       image:
         repository: langfuse/langfuse-worker
-        tag: "3.88.1"
+        tag: "3.112.0"
         pullPolicy: Always
       port: 3030
 

infrastructure/terraform/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     stackit = {
       source  = "stackitcloud/stackit"
-      version = "~> 0.58.0"
+      version = "~> 0.66.0"
     }
   }
 }

libs/.github/workflows/semantic-release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
-          node-version: "22.17.1"
+          node-version: "22.20.0"
       - name: Install dependencies
         run: npm install
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies

libs/admin-api-lib/pyproject.toml

@@ -70,7 +70,7 @@ debugpy = "^1.8.14"
 pytest = "^8.3.5"
 coverage = "^7.8.0"
 flake8 = "^7.2.0"
-flake8-black = "^0.3.6"
+flake8-black = "^0.4.0"
 flake8-pyproject = "^1.2.3"
 flake8-quotes = "^3.4.0"
 flake8-return = "^1.2.0"
@@ -97,14 +97,14 @@ pytest-asyncio = "^1.0.0"
 [tool.poetry.dependencies]
 rag-core-lib = {path = "../rag-core-lib"}
 python = "^3.13"
-uvicorn = "^0.35.0"
-fastapi = "^0.116.0"
+uvicorn = "^0.37.0"
+fastapi = "^0.117.0"
 dependency-injector = "^4.46.0"
 python-dateutil = "^2.9.0.post0"
 tenacity = "9.1.2"
 boto3 = "^1.38.10"
 tqdm = "^4.67.1"
-langfuse = "3.2.1"
+langfuse = "3.5.1"
 redis = "^6.0.0"
 pyyaml = "^6.0.2"
 python-multipart = "^0.0.20"

libs/extractor-api-lib/pyproject.toml

@@ -72,8 +72,8 @@ wheel = "^0.45.1"
 botocore = "^1.38.10"
 fasttext = {git = "https://github.com/cfculhane/fastText", rev = "4a4451337ae6b476b9c584b97776c8c3eb4b27c5"}
 pytesseract = "^0.3.10"
-fastapi = "^0.116.0"
-uvicorn = "^0.35.0"
+fastapi = "^0.117.0"
+uvicorn = "^0.37.0"
 dependency-injector = "^4.46.0"
 pydantic-settings = "^2.9.1"
 boto3 = "^1.38.10"
@@ -92,12 +92,12 @@ partial = "^1.0"
 pyyaml = "^6.0.2"
 numpy = "^2.2.5"
 docx2txt = "^0.9"
-unstructured = {extras = ["docx", "pptx"], version = "0.18.11"}
+unstructured = {extras = ["docx", "pptx"], version = "0.18.15"}
 html5lib = "^1.1"
 langchain-community = "^0.3.23"
 atlassian-python-api = "^4.0.3"
 markdownify = "^1.1.0"
-langchain-core = "0.3.72"
+langchain-core = "0.3.76"
 camelot-py = {extras = ["cv"], version = "^1.0.0"}
 fake-useragent = "^2.2.0"
 pypdfium2 = "4.30.0"
@@ -108,7 +108,7 @@ pytest = "^8.3.5"
 pytest-asyncio = "^0.26.0"
 coverage = "^7.8.0"
 flake8 = "^7.2.0"
-flake8-black = "^0.3.6"
+flake8-black = "^0.4.0"
 flake8-pyproject = "^1.2.3"
 flake8-quotes = "^3.4.0"
 flake8-return = "^1.2.0"

libs/pyproject.toml

@@ -57,7 +57,7 @@ build-backend = "poetry.core.masonry.api"
 [tool.poetry.dependencies]
 python = "^3.13"
 flake8 = "^7.2.0"
-flake8-black = "^0.3.6"
+flake8-black = "^0.4.0"
 flake8-pyproject = "^1.2.3"
 flake8-quotes = "^3.4.0"
 flake8-return = "^1.2.0"

libs/rag-core-api/.python-version

@@ -1 +1 @@
-3.13.5
+3.13.6