fix(deps): update all non-major dependencies

.github/workflows/renovate.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Self-hosted Renovate
-        uses: renovatebot/[email protected].5
+        uses: renovatebot/[email protected].8
         with:
           configurationFile: .github/renovate.json
           token: ${{ secrets.RENOVATE_TOKEN }}

.github/workflows/semantic-release.yml

@@ -31,7 +31,7 @@ jobs:
       - name: setup-node
         uses: actions/setup-node@v4
         with:
-          node-version: "22.17.1"
+          node-version: "22.18.0"
 
       - name: create-archives
         run: |

infrastructure/.github/workflows/semantic-release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "22.17.1"
+          node-version: "22.18.0"
       - name: Install dependencies
         run: npm clean-install
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies

infrastructure/rag/Chart.lock

@@ -1,10 +1,10 @@
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: 1.3.4
+  version: 1.5.0
 - name: qdrant
   repository: https://qdrant.github.io/qdrant-helm
-  version: 1.15.0
+  version: 1.15.3
 - name: minio
   repository: https://charts.bitnami.com/bitnami
   version: 15.0.7
@@ -13,6 +13,6 @@ dependencies:
   version: 0.48.0
 - name: ollama
   repository: https://otwld.github.io/ollama-helm/
-  version: 1.24.0
-digest: sha256:30cc964388864bd738eb0668367576dbad45eb9d6a885cdc48ef7c07c9692aa0
-generated: "2025-08-04T09:23:39.885193+02:00"
+  version: 1.27.0
+digest: sha256:401cd012b340a65f36009d7c4bc6c97f146cea5322674f18629495297a673597
+generated: "2025-08-31T01:26:30.566974561Z"

infrastructure/rag/Chart.yaml

@@ -10,10 +10,10 @@ appVersion: "1.0.0"
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: "1.3.4"
+  version: "1.5.0"
   condition: features.langfuse.enabled
 - name: qdrant
-  version: 1.15.0
+  version: 1.15.3
   repository: "https://qdrant.github.io/qdrant-helm"
   condition: features.qdrant.enabled
 - name: minio
@@ -27,6 +27,6 @@ dependencies:
   condition: features.keydb.enabled
 - name: ollama
   alias: ollama
-  version: 1.24.0
+  version: 1.27.0
   repository: https://otwld.github.io/ollama-helm/
   condition: features.ollama.enabled

infrastructure/rag/values.yaml

@@ -465,14 +465,14 @@ langfuse:
     web:
       image:
         repository: langfuse/langfuse
-        tag: "3.88.1"
+        tag: "3.102.0"
         pullPolicy: Always
 
     # Worker deployment configuration
     worker:
       image:
         repository: langfuse/langfuse-worker
-        tag: "3.88.1"
+        tag: "3.102.0"
         pullPolicy: Always
       port: 3030
 

infrastructure/terraform/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     stackit = {
       source  = "stackitcloud/stackit"
-      version = "~> 0.58.0"
+      version = "~> 0.61.0"
     }
   }
 }

libs/.github/workflows/semantic-release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "22.17.1"
+          node-version: "22.18.0"
       - name: Install dependencies
         run: npm install
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies

libs/admin-api-lib/pyproject.toml

@@ -104,7 +104,7 @@ python-dateutil = "^2.9.0.post0"
 tenacity = "9.1.2"
 boto3 = "^1.38.10"
 tqdm = "^4.67.1"
-langfuse = "3.2.1"
+langfuse = "3.3.0"
 redis = "^6.0.0"
 pyyaml = "^6.0.2"
 python-multipart = "^0.0.20"

libs/extractor-api-lib/pyproject.toml

@@ -92,12 +92,12 @@ partial = "^1.0"
 pyyaml = "^6.0.2"
 numpy = "^2.2.5"
 docx2txt = "^0.9"
-unstructured = {extras = ["docx", "pptx"], version = "0.18.11"}
+unstructured = {extras = ["docx", "pptx"], version = "0.18.13"}
 html5lib = "^1.1"
 langchain-community = "^0.3.23"
 atlassian-python-api = "^4.0.3"
 markdownify = "^1.1.0"
-langchain-core = "0.3.72"
+langchain-core = "0.3.74"
 camelot-py = {extras = ["cv"], version = "^1.0.0"}
 fake-useragent = "^2.2.0"
 pypdfium2 = "4.30.0"

libs/rag-core-api/.python-version

@@ -1 +1 @@
-3.13.5
+3.13.7

libs/rag-core-api/pyproject.toml

@@ -24,14 +24,14 @@ ragas = "^0.3.0"
 flashrank = "^0.2.10"
 pyyaml = "^6.0.2"
 openai = "^1.77.0"
-langgraph = "^0.5.0"
+langgraph = "^0.6.0"
 pillow = "^11.2.1"
 langchain-ollama = "^0.3.2"
 pytest-asyncio = "^0.26.0"
 langchain-community = "0.3.27"
 fastembed = "^0.7.0"
 langdetect = "^1.0.9"
-langfuse = "3.2.1"
+langfuse = "3.3.0"
 
 
 [tool.poetry.group.dev.dependencies]

libs/rag-core-lib/pyproject.toml

@@ -18,10 +18,10 @@ pydantic-settings = "^2.2.1"
 pydantic = "^2.11.4"
 oauthlib = "^3.2.2"
 requests-oauthlib = "^2.0.0"
-langfuse = "3.2.1"
+langfuse = "3.3.0"
 deprecated = "^1.2.18"
 openai = "^1.77.0"
-langchain-core = "0.3.72"
+langchain-core = "0.3.74"
 langchain-openai = "^0.3.27"