chore(security): consolidate dependency and quality updates

.github/workflows/lint-and-test.yml

@@ -234,6 +234,13 @@ jobs:
         run: |
           curl https://get.helm.sh/helm-v3.12.0-linux-amd64.tar.gz | tar xz
           sudo mv linux-amd64/helm /usr/local/bin/helm
+          helm repo add langfuse https://langfuse.github.io/langfuse-k8s
+          helm repo add qdrant https://qdrant.github.io/qdrant-helm
+          helm repo add bitnami https://charts.bitnami.com/bitnami
+          helm repo add enapter https://enapter.github.io/charts/
+          helm repo add ollama https://otwld.github.io/ollama-helm/
+          helm repo add jetstack https://charts.jetstack.io
+          helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
           find infrastructure -name Chart.yaml -print0 | while IFS= read -r -d '' chart; do
             chart_dir="$(dirname "$chart")"
             helm dependency build "$chart_dir"

infrastructure/rag/Chart.lock

@@ -1,10 +1,10 @@
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: 1.5.19
+  version: 1.5.31
 - name: qdrant
   repository: https://qdrant.github.io/qdrant-helm
-  version: 1.16.3
+  version: 1.18.0
 - name: minio
   repository: https://charts.bitnami.com/bitnami
   version: 15.0.7
@@ -13,6 +13,6 @@ dependencies:
   version: 0.48.0
 - name: ollama
   repository: https://otwld.github.io/ollama-helm/
-  version: 1.41.0
-digest: sha256:ad616850faec4252119350ba36eb3f642eaab7f469fde089bdece07f0a2a8af7
-generated: "2026-02-16T08:26:50.070731424Z"
+  version: 1.57.0
+digest: sha256:9406fa5588edf87df0a206590722cd2cde491ef4804f01535deace1982117ed2
+generated: "2026-05-31T03:44:56.57539524Z"

infrastructure/rag/Chart.yaml

@@ -10,10 +10,10 @@ appVersion: "v4.2.0"
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: "1.5.19"
+  version: "1.5.31"
   condition: features.langfuse.enabled
 - name: qdrant
-  version: 1.16.3
+  version: 1.18.0
   repository: "https://qdrant.github.io/qdrant-helm"
   condition: features.qdrant.enabled
 - name: minio
@@ -27,6 +27,6 @@ dependencies:
   condition: features.keydb.enabled
 - name: ollama
   alias: ollama
-  version: 1.41.0
+  version: 1.57.0
   repository: https://otwld.github.io/ollama-helm/
   condition: features.ollama.enabled

infrastructure/rag/values.yaml

@@ -569,14 +569,14 @@ langfuse:
     web:
       image:
         repository: langfuse/langfuse
-        tag: "3.152.0"
+        tag: "3.175.0"
         pullPolicy: Always
 
     # Worker deployment configuration
     worker:
       image:
         repository: langfuse/langfuse-worker
-        tag: "3.152.0"
+        tag: "3.175.0"
         pullPolicy: Always
       port: 3030
 

infrastructure/server-setup/base-setup/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.19.3
+  version: v1.20.2
 - name: ingress-nginx
   repository: https://kubernetes.github.io/ingress-nginx
-  version: 4.14.3
-digest: sha256:b2f7736d9f67a1df68709cf5001223d66ee10f9a314528321848145164926d05
-generated: "2026-02-16T08:27:01.265902996Z"
+  version: 4.15.1
+digest: sha256:47749211262aa6b425744396158b8f23f8de48be0813dc1027b30bd6a7f16266
+generated: "2026-05-31T03:45:07.330797418Z"

infrastructure/server-setup/base-setup/Chart.yaml

@@ -7,8 +7,8 @@ version: 0.0.1
 appVersion: "0.0.1"
 dependencies:
 - name: cert-manager
-  version: "v1.19.3"
+  version: "v1.20.2"
   repository: https://charts.jetstack.io
 - name: ingress-nginx
-  version: "4.14.3"
+  version: "4.15.1"
   repository: https://kubernetes.github.io/ingress-nginx

infrastructure/terraform/main.tf

@@ -3,7 +3,7 @@ terraform {
   required_providers {
     stackit = {
       source  = "stackitcloud/stackit"
-      version = "~> 0.80.0"
+      version = "~> 0.96.0"
     }
   }
 }

libs/admin-api-lib/pyproject.toml

@@ -105,7 +105,7 @@ flake8-simplify = "^0.30.0"
 flake8-wot = "^0.2.0"
 flake8-function-order = "^0.0.5"
 flake8-tidy-imports = "^4.10.0"
-black = "^25.1.0"
+black = "^26.3.1"
 flake8-logging-format = "^2024.24.12"
 flake8-docstrings = "^1.7.0"
 
@@ -115,8 +115,8 @@ debugpy = "^1.8.14"
 [tool.poetry.dependencies]
 rag-core-lib = "==4.2.0"
 python = "^3.13"
-uvicorn = "^0.40.0"
-fastapi = "^0.128.0"
+uvicorn = "^0.47.0"
+fastapi = "^0.136.0"
 dependency-injector = "^4.46.0"
 python-dateutil = "^2.9.0.post0"
 tenacity = "9.1.4"
@@ -125,7 +125,7 @@ tqdm = "^4.67.1"
 langfuse = "^3.10.1"
 redis = "^6.0.0"
 pyyaml = "^6.0.2"
-python-multipart = "^0.0.22"
+python-multipart = "^0.0.29"
 marshmallow = "^3.26.2"
 protobuf = ">=5.29.6,<6.0.0"
 langchain-experimental = "^0.4.0"

libs/admin-api-lib/src/admin_api_lib/dependency_container.py

@@ -14,7 +14,9 @@
 from admin_api_lib.extractor_api_client.openapi_client.configuration import (
     Configuration as ExtractorConfiguration,
 )
-from admin_api_lib.impl.api_endpoints.default_source_uploader import DefaultSourceUploader
+from admin_api_lib.impl.api_endpoints.default_source_uploader import (
+    DefaultSourceUploader,
+)
 from admin_api_lib.impl.api_endpoints.default_document_deleter import (
     DefaultDocumentDeleter,
 )
@@ -38,7 +40,9 @@
 from admin_api_lib.impl.mapper.informationpiece2document import (
     InformationPiece2Document,
 )
-from admin_api_lib.impl.settings.chunker_class_type_settings import ChunkerClassTypeSettings
+from admin_api_lib.impl.settings.chunker_class_type_settings import (
+    ChunkerClassTypeSettings,
+)
 from admin_api_lib.impl.settings.chunker_settings import ChunkerSettings
 from admin_api_lib.impl.settings.document_extractor_settings import (
     DocumentExtractorSettings,
@@ -166,7 +170,8 @@ class DependencyContainer(DeclarativeContainer):
     )
 
     summary_text_splitter = Singleton(RecursiveCharacterTextSplitter)(
-        chunk_size=summarizer_settings.maximum_input_size, chunk_overlap=chunker_settings.overlap
+        chunk_size=summarizer_settings.maximum_input_size,
+        chunk_overlap=chunker_settings.overlap,
     )
 
     langfuse = Singleton(
@@ -209,7 +214,10 @@ class DependencyContainer(DeclarativeContainer):
     )
 
     document_deleter = Singleton(
-        DefaultDocumentDeleter, rag_api=rag_api, file_service=file_service, key_value_store=key_value_store
+        DefaultDocumentDeleter,
+        rag_api=rag_api,
+        file_service=file_service,
+        key_value_store=key_value_store,
     )
     documents_status_retriever = Singleton(DefaultDocumentsStatusRetriever, key_value_store=key_value_store)
 

libs/admin-api-lib/src/admin_api_lib/extractor_api_client/openapi_client/__init__.py

@@ -13,26 +13,43 @@
 Do not edit the class manually.
 """  # noqa: E501
 
-
 __version__ = "1.0.0"
 
 # import apis into sdk package
-from admin_api_lib.extractor_api_client.openapi_client.api.extractor_api import ExtractorApi
+from admin_api_lib.extractor_api_client.openapi_client.api.extractor_api import (
+    ExtractorApi,
+)
 
 # import ApiClient
 from admin_api_lib.extractor_api_client.openapi_client.api_response import ApiResponse
 from admin_api_lib.extractor_api_client.openapi_client.api_client import ApiClient
-from admin_api_lib.extractor_api_client.openapi_client.configuration import Configuration
-from admin_api_lib.extractor_api_client.openapi_client.exceptions import OpenApiException
+from admin_api_lib.extractor_api_client.openapi_client.configuration import (
+    Configuration,
+)
+from admin_api_lib.extractor_api_client.openapi_client.exceptions import (
+    OpenApiException,
+)
 from admin_api_lib.extractor_api_client.openapi_client.exceptions import ApiTypeError
 from admin_api_lib.extractor_api_client.openapi_client.exceptions import ApiValueError
 from admin_api_lib.extractor_api_client.openapi_client.exceptions import ApiKeyError
-from admin_api_lib.extractor_api_client.openapi_client.exceptions import ApiAttributeError
+from admin_api_lib.extractor_api_client.openapi_client.exceptions import (
+    ApiAttributeError,
+)
 from admin_api_lib.extractor_api_client.openapi_client.exceptions import ApiException
 
 # import models into sdk package
-from admin_api_lib.extractor_api_client.openapi_client.models.content_type import ContentType
-from admin_api_lib.extractor_api_client.openapi_client.models.extraction_parameters import ExtractionParameters
-from admin_api_lib.extractor_api_client.openapi_client.models.extraction_request import ExtractionRequest
-from admin_api_lib.extractor_api_client.openapi_client.models.information_piece import InformationPiece
-from admin_api_lib.extractor_api_client.openapi_client.models.key_value_pair import KeyValuePair
+from admin_api_lib.extractor_api_client.openapi_client.models.content_type import (
+    ContentType,
+)
+from admin_api_lib.extractor_api_client.openapi_client.models.extraction_parameters import (
+    ExtractionParameters,
+)
+from admin_api_lib.extractor_api_client.openapi_client.models.extraction_request import (
+    ExtractionRequest,
+)
+from admin_api_lib.extractor_api_client.openapi_client.models.information_piece import (
+    InformationPiece,
+)
+from admin_api_lib.extractor_api_client.openapi_client.models.key_value_pair import (
+    KeyValuePair,
+)

libs/admin-api-lib/src/admin_api_lib/extractor_api_client/openapi_client/api/__init__.py

@@ -1,4 +1,6 @@
 # flake8: noqa
 
 # import apis into api package
-from admin_api_lib.extractor_api_client.openapi_client.api.extractor_api import ExtractorApi
+from admin_api_lib.extractor_api_client.openapi_client.api.extractor_api import (
+    ExtractorApi,
+)

libs/admin-api-lib/src/admin_api_lib/extractor_api_client/openapi_client/api/extractor_api.py

@@ -17,11 +17,20 @@
 from typing_extensions import Annotated
 
 from typing import List
-from admin_api_lib.extractor_api_client.openapi_client.models.extraction_parameters import ExtractionParameters
-from admin_api_lib.extractor_api_client.openapi_client.models.extraction_request import ExtractionRequest
-from admin_api_lib.extractor_api_client.openapi_client.models.information_piece import InformationPiece
-
-from admin_api_lib.extractor_api_client.openapi_client.api_client import ApiClient, RequestSerialized
+from admin_api_lib.extractor_api_client.openapi_client.models.extraction_parameters import (
+    ExtractionParameters,
+)
+from admin_api_lib.extractor_api_client.openapi_client.models.extraction_request import (
+    ExtractionRequest,
+)
+from admin_api_lib.extractor_api_client.openapi_client.models.information_piece import (
+    InformationPiece,
+)
+
+from admin_api_lib.extractor_api_client.openapi_client.api_client import (
+    ApiClient,
+    RequestSerialized,
+)
 from admin_api_lib.extractor_api_client.openapi_client.api_response import ApiResponse
 from admin_api_lib.extractor_api_client.openapi_client.rest import RESTResponseType
 

libs/admin-api-lib/src/admin_api_lib/extractor_api_client/openapi_client/api_client.py

@@ -11,7 +11,6 @@
 Do not edit the class manually.
 """  # noqa: E501
 
-
 import datetime
 from dateutil.parser import parse
 from enum import Enum
@@ -26,8 +25,13 @@
 from typing import Tuple, Optional, List, Dict, Union
 from pydantic import SecretStr
 
-from admin_api_lib.extractor_api_client.openapi_client.configuration import Configuration
-from admin_api_lib.extractor_api_client.openapi_client.api_response import ApiResponse, T as ApiResponseT
+from admin_api_lib.extractor_api_client.openapi_client.configuration import (
+    Configuration,
+)
+from admin_api_lib.extractor_api_client.openapi_client.api_response import (
+    ApiResponse,
+    T as ApiResponseT,
+)
 import admin_api_lib.extractor_api_client.openapi_client.models
 from admin_api_lib.extractor_api_client.openapi_client import rest
 from admin_api_lib.extractor_api_client.openapi_client.exceptions import (
@@ -198,7 +202,13 @@ def param_serialize(
 
         # auth setting
         self.update_params_for_auth(
-            header_params, query_params, auth_settings, resource_path, method, body, request_auth=_request_auth
+            header_params,
+            query_params,
+            auth_settings,
+            resource_path,
+            method,
+            body,
+            request_auth=_request_auth,
         )
 
         # body
@@ -221,7 +231,13 @@ def param_serialize(
         return method, url, header_params, body, post_params
 
     def call_api(
-        self, method, url, header_params=None, body=None, post_params=None, _request_timeout=None
+        self,
+        method,
+        url,
+        header_params=None,
+        body=None,
+        post_params=None,
+        _request_timeout=None,
     ) -> rest.RESTResponse:
         """Makes the HTTP request (synchronous)
         :param method: Method to call.
@@ -252,7 +268,9 @@ def call_api(
         return response_data
 
     def response_deserialize(
-        self, response_data: rest.RESTResponse, response_types_map: Optional[Dict[str, ApiResponseT]] = None
+        self,
+        response_data: rest.RESTResponse,
+        response_types_map: Optional[Dict[str, ApiResponseT]] = None,
     ) -> ApiResponse[ApiResponseT]:
         """Deserializes response into an object.
         :param response_data: RESTResponse object to be deserialized.
@@ -364,7 +382,11 @@ def deserialize(self, response_text: str, response_type: str, content_type: Opti
                 data = json.loads(response_text)
             except ValueError:
                 data = response_text
-        elif re.match(r"^application/(json|[\w!#$&.+-^_]+\+json)\s*(;|$)", content_type, re.IGNORECASE):
+        elif re.match(
+            r"^application/(json|[\w!#$&.+-^_]+\+json)\s*(;|$)",
+            content_type,
+            re.IGNORECASE,
+        ):
             if response_text == "":
                 data = ""
             else:
@@ -548,7 +570,14 @@ def select_header_content_type(self, content_types):
         return content_types[0]
 
     def update_params_for_auth(
-        self, headers, queries, auth_settings, resource_path, method, body, request_auth=None
+        self,
+        headers,
+        queries,
+        auth_settings,
+        resource_path,
+        method,
+        body,
+        request_auth=None,
     ) -> None:
         """Updates header and query params based on authentication setting.
 
@@ -670,7 +699,10 @@ def __deserialize_datetime(self, string):
         except ImportError:
             return string
         except ValueError:
-            raise rest.ApiException(status=0, reason=("Failed to parse `{0}` as datetime object".format(string)))
+            raise rest.ApiException(
+                status=0,
+                reason=("Failed to parse `{0}` as datetime object".format(string)),
+            )
 
     def __deserialize_enum(self, data, klass):
         """Deserializes primitive type to enum.

libs/admin-api-lib/src/admin_api_lib/extractor_api_client/openapi_client/configuration.py

@@ -11,7 +11,6 @@
 Do not edit the class manually.
 """  # noqa: E501
 
-
 import copy
 import logging
 from logging import FileHandler