Skip to content

chore(security): consolidate dependency and quality updates#394

Merged
a-klos merged 19 commits into
mainfrom
consolidate-security-quality-prs
Jun 3, 2026
Merged

chore(security): consolidate dependency and quality updates#394
a-klos merged 19 commits into
mainfrom
consolidate-security-quality-prs

Conversation

@a-klos

@a-klos a-klos commented Jun 3, 2026

Copy link
Copy Markdown
Member

This pull request primarily updates dependency versions across multiple infrastructure and library files to ensure compatibility, security, and access to new features. The changes affect Python libraries, Helm charts, and Terraform providers, with several key upgrades to core components and tools.

Infrastructure and Deployment Dependency Upgrades:

  • Upgraded Helm chart dependencies in infrastructure/rag/Chart.yaml, including langfuse (1.5.19 → 1.5.31), qdrant (1.16.3 → 1.18.0), and ollama (1.41.0 → 1.57.0). [1] [2]
  • Updated langfuse Docker image tags in infrastructure/rag/values.yaml for both web and worker components (3.152.0 → 3.175.0).
  • Upgraded cert-manager and ingress-nginx Helm chart versions in infrastructure/server-setup/base-setup/Chart.yaml.
  • Updated the required stackit Terraform provider version in infrastructure/terraform/main.tf (~>0.80.0 → ~>0.96.0).

Python Library and Tooling Upgrades:

  • Upgraded core Python dependencies such as fastapi, uvicorn, and python-multipart across multiple pyproject.toml files to their latest versions, improving performance and security. [1] [2] [3] [4] [5]
  • Updated code formatting and linting tools, notably black (25.1.0 → 26.0.0), in all affected Python projects. [1] [2] [3] [4] [5] [6]

Library and Package Version Bumps:

  • Upgraded several library dependencies to newer versions for added features and bug fixes, including pillow, fastembed, tabulate, lxml, docling, langsmith, and propcache. [1] [2] [3] [4] [5]
  • Updated internal and external libraries such as langgraph-checkpoint (>=3.0.0,<4.0.0 → >=4.0.0,<4.1.0) in libs/rag-core-lib/pyproject.toml.

Frontend and Dev Tooling:

  • Updated frontend build and lint tools in services/frontend/package.json, including esbuild and eslint-plugin-cypress.

These updates help keep the codebase up-to-date, secure, and compatible with the latest upstream changes.

renovate-bot and others added 19 commits May 24, 2026 03:33
@renovate-bot
chore(deps): update dependency black to v26 [security]
62da728
@renovate-bot
fix(deps): update dependency langgraph-checkpoint to v4 [security]
6875cbd
@renovate-bot
fix(deps): update dependency pillow to v12 [security]
eacd649
@renovate-bot
chore(deps): update dependency langchain-core to v1.2.11 [security]
5e2be66
@renovate-bot
chore(deps): update dependency langgraph to v1.0.10 [security]
aa09f4c
@renovate-bot
fix(deps): update all non-major dependencies
36876cb
@dependabot
chore: bump the python-security group across 8 directories with 13 up…
44e19bc 
…dates

Bumps the python-security group with 7 updates in the /services/mcp-server directory:

| Package | From | To |
| --- | --- | --- |
| [poetry](https://github.com/python-poetry/poetry) | `2.3.2` | `2.3.4` |
| [authlib](https://github.com/authlib/authlib) | `1.6.9` | `1.6.12` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.22` | `0.0.27` |
| [dulwich](https://github.com/dulwich/dulwich) | `1.0.0` | `1.2.5` |
| [idna](https://github.com/kjd/idna) | `3.11` | `3.15` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.1` | `1.2.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |

Bumps the python-security group with 1 update in the /libs directory: [idna](https://github.com/kjd/idna).
Bumps the python-security group with 10 updates in the /libs/extractor-api-lib directory:

| Package | From | To |
| --- | --- | --- |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.22` | `0.0.27` |
| [idna](https://github.com/kjd/idna) | `3.11` | `3.15` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.1` | `1.2.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.6.4` | `0.8.8` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.2.7` | `1.3.3` |
| [langchain-text-splitters](https://github.com/langchain-ai/langchain) | `1.1.0` | `1.1.2` |
| [lxml](https://github.com/lxml/lxml) | `5.4.0` | `6.1.0` |
| [nltk](https://github.com/nltk/nltk) | `3.9.2` | `3.9.4` |
| [pillow](https://github.com/python-pillow/Pillow) | `12.1.1` | `12.2.0` |

Bumps the python-security group with 4 updates in the /services/rag-backend directory: [idna](https://github.com/kjd/idna), [python-dotenv](https://github.com/theskumar/python-dotenv), [urllib3](https://github.com/urllib3/urllib3) and [langsmith](https://github.com/langchain-ai/langsmith-sdk).
Bumps the python-security group with 5 updates in the /services/admin-backend directory:

| Package | From | To |
| --- | --- | --- |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.15` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.3.45` | `0.8.8` |
| [nltk](https://github.com/nltk/nltk) | `3.9.2` | `3.9.4` |

Bumps the python-security group with 5 updates in the /libs/rag-core-lib directory:

| Package | From | To |
| --- | --- | --- |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.15` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.3.45` | `0.8.8` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.2.13` | `1.3.3` |

Bumps the python-security group with 5 updates in the /libs/rag-core-api directory:

| Package | From | To |
| --- | --- | --- |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.15` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.3.45` | `0.8.8` |
| [langchain-text-splitters](https://github.com/langchain-ai/langchain) | `1.1.0` | `1.1.2` |

Bumps the python-security group with 5 updates in the /libs/admin-api-lib directory:

| Package | From | To |
| --- | --- | --- |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.22` | `0.0.27` |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.15` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.3.45` | `0.8.8` |



Updates `poetry` from 2.3.2 to 2.3.4
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@2.3.2...2.3.4)

Updates `authlib` from 1.6.9 to 1.6.12
- [Release notes](https://github.com/authlib/authlib/releases)
- [Changelog](https://github.com/authlib/authlib/blob/1.6.12/docs/changelog.rst)
- [Commits](authlib/authlib@v1.6.9...1.6.12)

Updates `python-multipart` from 0.0.22 to 0.0.27
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.22...0.0.27)

Updates `dulwich` from 1.0.0 to 1.2.5
- [Release notes](https://github.com/dulwich/dulwich/releases)
- [Changelog](https://github.com/jelmer/dulwich/blob/main/NEWS)
- [Commits](jelmer/dulwich@dulwich-1.0.0...dulwich-1.2.5)

Updates `idna` from 3.11 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

Updates `python-dotenv` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `idna` from 3.11 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

Updates `python-multipart` from 0.0.22 to 0.0.27
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.22...0.0.27)

Updates `idna` from 3.11 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

Updates `python-dotenv` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `langsmith` from 0.6.4 to 0.8.8
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.6.4...v0.8.8)

Updates `langchain-core` from 1.2.7 to 1.3.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.3.3)

Updates `langchain-text-splitters` from 1.1.0 to 1.1.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.0...langchain-text-splitters==1.1.2)

Updates `lxml` from 5.4.0 to 6.1.0
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-5.4.0...lxml-6.1.0)

Updates `nltk` from 3.9.2 to 3.9.4
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](nltk/nltk@3.9.2...3.9.4)

Updates `pillow` from 12.1.1 to 12.2.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.1.1...12.2.0)

Updates `idna` from 3.10 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

Updates `python-dotenv` from 1.1.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `langsmith` from 0.6.3 to 0.8.8
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.6.4...v0.8.8)

Updates `langchain-core` from 1.2.11 to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.3.3)

Updates `langchain-text-splitters` from 1.0.0 to 1.1.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.0...langchain-text-splitters==1.1.2)

Updates `idna` from 3.10 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

Updates `python-dotenv` from 1.1.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `langsmith` from 0.3.45 to 0.8.8
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.6.4...v0.8.8)

Updates `langchain-core` from 1.2.6 to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.3.3)

Updates `langchain-text-splitters` from 1.0.0 to 1.1.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.0...langchain-text-splitters==1.1.2)

Updates `nltk` from 3.9.2 to 3.9.4
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](nltk/nltk@3.9.2...3.9.4)

Updates `idna` from 3.10 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

Updates `python-dotenv` from 1.1.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `langsmith` from 0.3.45 to 0.8.8
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.6.4...v0.8.8)

Updates `langchain-core` from 1.2.13 to 1.3.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.3.3)

Updates `langchain-text-splitters` from 1.0.0 to 1.1.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.0...langchain-text-splitters==1.1.2)

Updates `idna` from 3.10 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

Updates `python-dotenv` from 1.1.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `langsmith` from 0.3.45 to 0.8.8
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.6.4...v0.8.8)

Updates `langchain-core` from 1.2.11 to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.3.3)

Updates `langchain-text-splitters` from 1.1.0 to 1.1.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.0...langchain-text-splitters==1.1.2)

Updates `python-multipart` from 0.0.22 to 0.0.27
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.22...0.0.27)

Updates `idna` from 3.10 to 3.15
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

Updates `python-dotenv` from 1.1.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `langsmith` from 0.3.45 to 0.8.8
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.6.4...v0.8.8)

Updates `langchain-core` from 1.2.11 to 1.4.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.2.7...langchain-core==1.3.3)

Updates `langchain-text-splitters` from 1.0.0 to 1.1.2
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.0...langchain-text-splitters==1.1.2)

---
updated-dependencies:
- dependency-name: poetry
  dependency-version: 2.3.4
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: authlib
  dependency-version: 1.6.12
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: python-multipart
  dependency-version: 0.0.27
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: dulwich
  dependency-version: 1.2.5
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: python-multipart
  dependency-version: 0.0.27
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langsmith
  dependency-version: 0.8.8
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-core
  dependency-version: 1.3.3
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: lxml
  dependency-version: 6.1.0
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: nltk
  dependency-version: 3.9.4
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: pillow
  dependency-version: 12.2.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langsmith
  dependency-version: 0.8.8
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-core
  dependency-version: 1.4.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langsmith
  dependency-version: 0.8.8
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-core
  dependency-version: 1.4.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: nltk
  dependency-version: 3.9.4
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langsmith
  dependency-version: 0.8.8
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-core
  dependency-version: 1.3.3
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.1
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langsmith
  dependency-version: 0.8.8
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-core
  dependency-version: 1.4.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.2
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: python-multipart
  dependency-version: 0.0.27
  dependency-type: direct:production
  dependency-group: python-security
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langsmith
  dependency-version: 0.8.8
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-core
  dependency-version: 1.4.0
  dependency-type: indirect
  dependency-group: python-security
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.2
  dependency-type: indirect
  dependency-group: python-security
...

Signed-off-by: dependabot[bot] <support@github.com>
@a-klos
Merge remote-tracking branch 'origin/dependabot/pip/services/mcp-serv…
fdbae1b 
…er/python-security-27fec0cdc0' into consolidate-security-quality-prs
@a-klos
Merge remote-tracking branch 'origin/renovate/all-minor-patch' into c…
88785f0 
…onsolidate-security-quality-prs

# Conflicts:
#	libs/admin-api-lib/poetry.lock
#	libs/admin-api-lib/pyproject.toml
#	libs/extractor-api-lib/pyproject.toml
#	libs/rag-core-lib/poetry.lock
#	services/mcp-server/poetry.lock
#	services/mcp-server/pyproject.toml
@a-klos
Merge remote-tracking branch 'origin/renovate/pypi-langchain-core-vul…
63fc09c 
…nerability' into consolidate-security-quality-prs

# Conflicts:
#	libs/extractor-api-lib/poetry.lock
@a-klos
Merge remote-tracking branch 'origin/renovate/pypi-langgraph-vulnerab…
7860bf3 
…ility' into consolidate-security-quality-prs
@a-klos
Merge remote-tracking branch 'origin/renovate/pypi-langgraph-checkpoi…
912465f 
…nt-vulnerability' into consolidate-security-quality-prs
@a-klos
Merge remote-tracking branch 'origin/renovate/pypi-pillow-vulnerabili…
56fe254 
…ty' into consolidate-security-quality-prs
@a-klos
Merge remote-tracking branch 'origin/renovate/pypi-black-vulnerabilit…
a0e54a5 
…y' into consolidate-security-quality-prs

# Conflicts:
#	libs/admin-api-lib/poetry.lock
#	libs/extractor-api-lib/poetry.lock
#	libs/poetry.lock
#	libs/rag-core-lib/poetry.lock
@a-klos
chore(deps): refresh frontend lockfile
2d3c861
@a-klos
ci: fix lint and helm validation
afb5c8c
@a-klos
chore(deps): require patched black version
4fdb0f4
@a-klos
fix(llm): avoid langchain private provider import
3e9df5b
@a-klos
chore(ci): simplify helm repo addition in lint-and-test workflow
3e53174
@a-klos a-klos enabled auto-merge June 3, 2026 11:22
@a-klos a-klos added this pull request to the merge queue Jun 3, 2026
Merged via the queue into main with commit e58f7ad Jun 3, 2026
24 of 26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@robodev-r2d2 robodev-r2d2 robodev-r2d2 approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@a-klos @robodev-r2d2 @renovate-bot