fix(deps): update all non-major dependencies

.github/workflows/semantic-release.yml

@@ -31,7 +31,7 @@ jobs:
       - name: setup-node
         uses: actions/setup-node@v4
         with:
-          node-version: "22.13.1"
+          node-version: "22.17.1"
 
       - name: create-archives
         run: |

infrastructure/.github/workflows/semantic-release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "22.13.1"
+          node-version: "22.17.1"
       - name: Install dependencies
         run: npm clean-install
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies

infrastructure/rag/Chart.lock

@@ -1,18 +1,18 @@
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: 0.12.1
+  version: 1.3.4
 - name: qdrant
   repository: https://qdrant.github.io/qdrant-helm
-  version: 1.12.6
+  version: 1.15.0
 - name: minio
   repository: https://charts.bitnami.com/bitnami
-  version: 15.0.3
+  version: 15.0.7
 - name: keydb
   repository: https://enapter.github.io/charts/
   version: 0.48.0
 - name: ollama
   repository: https://otwld.github.io/ollama-helm/
-  version: 1.1.0
-digest: sha256:9c99676d554fe68802c434b3daac2d50778e38d2793d10b84d1f4d6d78f99726
-generated: "2025-07-02T12:36:38.510315+02:00"
+  version: 1.24.0
+digest: sha256:30cc964388864bd738eb0668367576dbad45eb9d6a885cdc48ef7c07c9692aa0
+generated: "2025-08-04T09:23:39.885193+02:00"

infrastructure/rag/Chart.yaml

@@ -10,22 +10,23 @@ appVersion: "1.0.0"
 dependencies:
 - name: langfuse
   repository: https://langfuse.github.io/langfuse-k8s
-  version: "0.12.1"
+  version: "1.3.4"
   condition: features.langfuse.enabled
 - name: qdrant
-  version: 1.12.6
+  version: 1.15.0
   repository: "https://qdrant.github.io/qdrant-helm"
   condition: features.qdrant.enabled
 - name: minio
   repository: https://charts.bitnami.com/bitnami
-  version: "15.0.3"
+  version: "15.0.7"
   condition: features.minio.enabled
 - name: keydb
+  alias: keydb
   repository: https://enapter.github.io/charts/
   version: "0.48.0"
   condition: features.keydb.enabled
 - name: ollama
   alias: ollama
-  version: 1.1.0
+  version: 1.24.0
   repository: https://otwld.github.io/ollama-helm/
   condition: features.ollama.enabled

infrastructure/rag/values.yaml

@@ -445,25 +445,44 @@ shared:
 
 
 langfuse:
-  minio:
-    deploy: false
-  valkey:
-    deploy: false #<--- keydb is used instead of valkey
-  image:
-    repository: ghcr.io/langfuse/langfuse
-    pullPolicy: Always
-    tag: "3.27.2"
-  postgresql:
-    deploy: true
-    auth:
-      username: postgres
-      password: postgres
-      database: langfuse
+  # Core Langfuse Configuration
   langfuse:
+    # Used to hash API keys
+    salt:
+      value: "changeme"
+
+    # Authentication settings
+    features:
+      telemetryEnabled: true
+      signUpDisabled: false
+
+    # Image configuration
+    image:
+      tag: "3.88.1"
+      pullPolicy: Always
+
+    # Web deployment configuration
+    web:
+      image:
+        repository: langfuse/langfuse
+        tag: "3.88.1"
+        pullPolicy: Always
+
+    # Worker deployment configuration
+    worker:
+      image:
+        repository: langfuse/langfuse-worker
+        tag: "3.88.1"
+        pullPolicy: Always
+      port: 3030
+
+    # NextAuth configuration
     nextauth:
       url: http://localhost:3000
-      secret: changeme
-    salt: changeme
+      secret:
+        value: "changeme"
+
+    # Additional environment variables (only for init values)
     additionalEnv:
     - name: LANGFUSE_INIT_ORG_ID
       value: ""
@@ -479,33 +498,8 @@ langfuse:
       value: ""
     - name: LANGFUSE_INIT_USER_PASSWORD
       value: ""
-    # REDIS
-    - name: "REDIS_CONNECTION_STRING"
-      value: "redis://rag-keydb:6379"
-    # CLICKHOUSE
-    - name: "CLICKHOUSE_MIGRATION_URL"
-      value: "clickhouse://rag-clickhouse:9000"
-    - name: "CLICKHOUSE_URL"
-      value: "http://rag-clickhouse:8123"
-    - name: "CLICKHOUSE_USER"
-      value: "default"
-    - name: "CLICKHOUSE_PASSWORD"
-      value: "changeme"
-    # S3 / MinIO
-    - name: "LANGFUSE_S3_EVENT_UPLOAD_ENABLED"
-      value: "true"
-    - name: "LANGFUSE_S3_EVENT_UPLOAD_BUCKET"
-      value: "langfuse"
-    - name: "LANGFUSE_S3_EVENT_UPLOAD_REGION"
-      value: "auto"
-    - name: "LANGFUSE_S3_EVENT_UPLOAD_ACCESS_KEY_ID"
-      value: "admin"
-    - name: "LANGFUSE_S3_EVENT_UPLOAD_SECRET_ACCESS_KEY"
-      value: "adminpassword"
-    - name: "LANGFUSE_S3_EVENT_UPLOAD_ENDPOINT"
-      value: "http://rag-minio:9000"
-    - name: "LANGFUSE_S3_EVENT_UPLOAD_FORCE_PATH_STYLE"
-      value: "true"
+
+    # Additional init containers
     extraInitContainers:
     - name: wait-for-postgres
       image: busybox
@@ -520,6 +514,77 @@ langfuse:
       # Define a reasonable timeout in case PostgreSQL fails to come up
       timeoutSeconds: 300
 
+  # PostgreSQL Configuration (use external PostgreSQL)
+  postgresql:
+    deploy: true
+    host: "rag-postgresql"
+    port: 5432
+    auth:
+      username: postgres
+      password: postgres
+      database: langfuse
+
+  # Redis Configuration (external KeyDB)
+  redis:
+    deploy: false
+    host: "rag-keydb"
+    port: 6379
+    auth:
+      username: "default"
+      password: ""
+
+  # ClickHouse Configuration (external ClickHouse)
+  clickhouse:
+    deploy: true
+    host: "rag-clickhouse"
+    httpPort: 8123
+    nativePort: 9000
+    auth:
+      username: "default"
+      password: "changeme"
+    migration:
+      url: "clickhouse://rag-clickhouse:9000"
+      ssl: false
+      autoMigrate: true
+    resources:
+      limits:
+        cpu: "2"
+        memory: "8Gi"
+      requests:
+        cpu: "2"
+        memory: "4Gi"
+
+    zookeeper:
+      resources:
+        limits:
+          cpu: "2"
+          memory: "2Gi"
+        requests:
+          cpu: "1"
+          memory: "1Gi"
+
+  # S3/MinIO Configuration (external MinIO)
+  s3:
+    deploy: false
+    bucket: "langfuse"
+    region: "auto"
+    endpoint: "http://rag-minio:9000"
+    forcePathStyle: true
+    accessKeyId:
+      value: "admin"
+    secretAccessKey:
+      value: "adminpassword"
+    eventUpload:
+      enabled: true
+      bucket: "langfuse"
+      region: "auto"
+      endpoint: "http://rag-minio:9000"
+      forcePathStyle: true
+      accessKeyId:
+        value: "admin"
+      secretAccessKey:
+        value: "adminpassword"
+
 minio:
   auth:
     ## @param auth.rootUser MinIO&reg; root username
@@ -537,10 +602,6 @@ minio:
     enabled: false
   mode: standalone
 
-
-
-
-
 ollama:
   image:
     tag: 0.5.1
@@ -556,3 +617,8 @@ ollama:
 qdrant:
   image:
     tag: v1.14.1
+
+keydb:
+  multiMaster: "no"
+  activeReplicas: "no"
+  nodes: 1

infrastructure/server-setup/base-setup/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.12.3
+  version: v1.18.2
 - name: nginx-ingress-controller
   repository: https://charts.bitnami.com/bitnami
-  version: 11.4.1
-digest: sha256:50d1681804095d5d70589f1fd828181320e89b1666675ae0d12c803e792e6760
-generated: "2024-09-11T22:43:52.025580423+02:00"
+  version: 11.6.27
+digest: sha256:3197e71b2e91041da3bca61187bd413ea86ed7778a8cecf363182be1aaead1f0
+generated: "2025-07-31T08:32:45.824521293Z"

infrastructure/server-setup/base-setup/Chart.yaml

@@ -7,8 +7,8 @@ version: 0.0.1
 appVersion: "0.0.1"
 dependencies:
 - name: cert-manager
-  version: "v1.12.3"
+  version: "v1.18.2"
   repository: https://charts.jetstack.io
 - name: nginx-ingress-controller
-  version: "11.4.1"
+  version: "11.6.27"
   repository: https://charts.bitnami.com/bitnami

infrastructure/terraform/main.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     stackit = {
       source  = "stackitcloud/stackit"
-      version = "~> 0.50.0"
+      version = "~> 0.58.0"
     }
   }
 }

libs/.github/workflows/semantic-release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "22.13.1"
+          node-version: "22.17.1"
       - name: Install dependencies
         run: npm install
       - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies