Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update zgosalvez/github-actions-ensure-sha-pinned-actions digest to 3db98c0
• fix(deps): update dependency @dotenvx/dotenvx to v2
• fix(deps): update dependency undici to v8
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update non-major dependencies (@algolia/autocomplete-core, @algolia/autocomplete-plugin-tags, @algolia/autocomplete-preset-algolia, @datadog/browser-rum, @dotenvx/dotenvx, @github/clipboard-copy-element, @kong/kongponents, @kong/spec-renderer, @tailwindcss/typography, actions/cache, algoliasearch, apache/kafka, autoprefixer, axios, confluentinc/cp-schema-registry, docker/build-push-action, docker/login-action, docker/setup-buildx-action, dockerode, instantsearch.css, js-yaml, liquid-c, mermaid, node, playwright, postcss, rubocop, ruby, semver, shiki, uuid, vite, vue, vue-instantsearch, yarn)

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package ruby/setup-ruby), Could not determine new digest for update (github-tags package tj-actions/changed-files).

Files affected: .github/reusable-steps/install-deps/action.yaml, .github/workflows/linting.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/cache digest to caa2961
• chore(deps): update ctrf-io/github-test-reporter digest to e500b99
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/checkout action to v7
• chore(deps): update dependency rouge to v5
• chore(deps): update dependency ruby to v4
• chore(deps): update dependency tailwindcss to v4
• fix(deps): update dependency js-yaml to v5
• fix(deps): update dependency snowflake-sdk to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bundler (1)

Gemfile (18)

• activesupport lock file @ 8.1.3
• csv lock file @ 3.3.5
• jekyll-include-cache lock file @ 0.2.1
• jekyll-vite lock file @ 3.0.4
• vite_ruby '~> 3.10'
• kramdown-parser-gfm lock file @ 1.1.0
• liquid-c lock file @ 4.0.1 → [Updates: undefined]
• nodo lock file @ 1.8.2
• nokogiri lock file @ 1.19.4
• nokolexbor lock file @ 0.7.0
• rouge '~> 4.3' → [Updates: '~> 5.0']
• mini_portile2 '~> 2.8'
• byebug lock file @ 13.0.0
• foreman lock file @ 0.90.0
• pry lock file @ 0.16.0
• puma lock file @ 8.0.2
• rubocop lock file @ 1.87.0 → [Updates: undefined]
• jekyll-contentblocks lock file @ 1.2.0

docker-compose (3)

app/_includes/_files/event-gateway/docker-compose-mtls.yaml (3)

• apache/kafka 4.3.0 → [Updates: 4.3.1]
• apache/kafka 4.3.0 → [Updates: 4.3.1]
• apache/kafka 4.3.0 → [Updates: 4.3.1]

app/_includes/_files/event-gateway/docker-compose-sasl.yaml (3)

• apache/kafka 4.3.0 → [Updates: 4.3.1]
• apache/kafka 4.3.0 → [Updates: 4.3.1]
• apache/kafka 4.3.0 → [Updates: 4.3.1]

app/_includes/_files/event-gateway/docker-compose.yaml (4)

• apache/kafka 4.3.0 → [Updates: 4.3.1]
• apache/kafka 4.3.0 → [Updates: 4.3.1]
• apache/kafka 4.3.0 → [Updates: 4.3.1]
• confluentinc/cp-schema-registry 8.2.1 → [Updates: 8.3.0]

dockerfile (1)

tools/automated-tests/docker/Dockerfile

github-actions (24)

.github/reusable-steps/install-deps/action.yaml (4)

• ruby/setup-ruby v1@84684c07c1965536eb4802c8daf1a77968df0cb1
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24

.github/reusable-steps/notify-slack/action.yaml (1)

• slackapi/slack-github-action v3.0.3@45a88b9581bfab2566dc881e2cd66d334e621e2c

.github/reusable-steps/publish-test-report/action.yaml (1)

• ctrf-io/github-test-reporter v1@0f299074936c32ccaab5be5230511f6b2b9080aa → [Updates: v1]

.github/workflows/automated-tests.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• Kong/kong-license master

.github/workflows/build-automated-tests-image.yaml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• docker/setup-buildx-action v4.1.0@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 → [Updates: v4.2.0]
• docker/login-action v4.2.0@650006c6eb7dba73a995cc03b0b2d7f5ca915bee → [Updates: v4.4.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• docker/build-push-action v7.2.0@f9f3042f7e2789586610d6e8b85c8f03e5195baf → [Updates: v7.3.0]

.github/workflows/check-links-scheduled.yml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]

.github/workflows/check-links.yml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• fountainhead/action-wait-for-check v1.2.0@5a908a24814494009c4bb27c242ea38c93c593be
• jakepartusch/wait-for-netlify-action v1.4@f1e137043864b9ab9034ae3a5adc1c108e3f1a48

.github/workflows/event-gateway-tests.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• Kong/kong-license master

.github/workflows/gateway-tests.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• Kong/kong-license master

.github/workflows/generate-gateway-plugins-changelogs.yml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• node 24

.github/workflows/generate-inso-cli-docs.yaml (5)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/generate-kong-conf-json.yml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• node 24

.github/workflows/label-issues.yml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/linting.yml (7)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• tj-actions/changed-files 47@24d32ffd492484c1d75e0c0b894501ddb9d30d62
• errata-ai/vale-action 2.1.2@85f9f7f2c5f449ac0ae5b66662961bae3f77ca6a
• errata-ai/vale-action 2.1.2@85f9f7f2c5f449ac0ae5b66662961bae3f77ca6a

.github/workflows/missing-redirects.yaml (6)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• fountainhead/action-wait-for-check v1.2.0@5a908a24814494009c4bb27c242ea38c93c593be
• jakepartusch/wait-for-netlify-action v1.4@f1e137043864b9ab9034ae3a5adc1c108e3f1a48

.github/workflows/security.yaml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• zgosalvez/github-actions-ensure-sha-pinned-actions v5@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 → [Updates: v5]

.github/workflows/sync-ai-marketplace-submodule.yml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• mheap/submodule-sync-action v1@a06903a4e38f042f6f52cc88d184ec1c930ee12d

.github/workflows/sync-deck.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• Kong/setup-deck v1
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sync-kongctl.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• kong/setup-kongctl v1@659d5c2b0f4db2e25d63797035358a22907421db
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sync-konnect-oas-data.yml (3)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sync-kuma-submodule.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sync-preview-branch.yaml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]

.github/workflows/validate-frontmatters.yml (2)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]

.github/workflows/validate-plugin-examples.yml (4)

• step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
• node 24

npm (16)

package.json (31)

• @algolia/autocomplete-core ^1.18.1 → [Updates: ^1.18.1]
• @algolia/autocomplete-plugin-tags ^1.18.1 → [Updates: ^1.18.1]
• @algolia/autocomplete-preset-algolia ^1.18.1 → [Updates: ^1.18.1]
• @datadog/browser-rum ^7.0.0 → [Updates: ^7.0.0]
• @github/clipboard-copy-element ^1.3.0 → [Updates: ^1.3.0]
• @kong/kongponents ^9.14.24 → [Updates: ^9.14.24]
• @kong/sdk-portal-js ^2.15.2
• @kong/spec-renderer ^1.95.8 → [Updates: ^1.95.8]
• @tailwindcss/forms ^0.5.10
• @vitejs/plugin-vue ^6.0.0
• algoliasearch ^5.20.0 → [Updates: ^5.20.0]
• axios ^1.16.1 → [Updates: ^1.16.1]
• instantsearch.css ^8.5.1 → [Updates: ^8.5.1]
• mermaid ^11.6.0 → [Updates: ^11.6.0]
• node-fetch ^3.3.2
• shiki ^4.0.2 → [Updates: ^4.0.2]
• snowflake-sdk 2.4.3 → [Updates: 3.0.0]
• uuid ^14.0.0 → [Updates: ^14.0.0]
• vue ^3.4.38 → [Updates: ^3.4.38]
• vue-instantsearch ^4.20.4 → [Updates: ^4.20.4]
• @tailwindcss/typography ^0.5.15 → [Updates: ^0.5.15]
• autoprefixer ^10.4.19 → [Updates: ^10.4.19]
• netlify-cli 26.1.0
• postcss ^8.4.38 → [Updates: ^8.4.38]
• tailwindcss ^3.4.3 → [Updates: ^4.0.0]
• vite ^8.0.0 → [Updates: ^8.0.0]
• vite-plugin-ruby ^5.0.0
• vite-svg-loader ^5.1.0
• wait-on ^9.0.0
• axios ^1.16.1 → [Updates: ^1.16.1]
• yarn 4.16.0 → [Updates: 4.17.0]

tools/automated-tests/package.json (13)

• @dotenvx/dotenvx ^1.51.1 → [Updates: ^1.51.1, ^2.0.0]
• debug ^4.4.0
• dockerode ^5.0.0 → [Updates: ^5.0.0]
• tinyglobby ^0.2.12
• fetch-cookie ^3.1.0
• formdata-node ^6.0.3
• gray-matter ^4.0.3
• js-yaml ^4.1.0 → [Updates: ^4.1.0, ^5.0.0]
• minimist ^1.2.8
• node-fetch ^3.3.2
• playwright ^1.54.2 → [Updates: ^1.54.2]
• tough-cookie ^6.0.0
• undici ^7.18.2 → [Updates: ^8.0.0]

tools/broken-link-checker/package.json (5)

• @actions/github ^9.0.0
• @octokit/rest ^22.0.0
• broken-link-checker ^0.7.8
• tinyglobby ^0.2.12
• minimist ^1.2.8

tools/changelog-generator/package.json (4)

• tinyglobby ^0.2.12
• js-yaml ^4.1.0 → [Updates: ^4.1.0, ^5.0.0]
• lodash.mergewith ^4.6.2
• minimist ^1.2.8

tools/deck-versions/package.json (1)

• node-fetch ^3.3.2

tools/frontmatter-validator/package.json (5)

• ajv ^8.17.1
• ajv-formats ^3.0.1
• tinyglobby ^0.2.12
• gray-matter ^4.0.3
• yaml ^2.6.0

tools/kong-conf-to-json/package.json (2)

• tinyglobby ^0.2.12
• minimist ^1.2.8

tools/kongctl-versions/package.json

tools/konnect-oas-data-generator/package.json (3)

• @kong/sdk-portal-js ^2.14.0
• axios ^1.0.0 → [Updates: ^1.0.0]
• minimist ^1.2.8

tools/missing-redirects/package.json (3)

• gray-matter ^4.0.3
• js-yaml ^4.1.0 → [Updates: ^4.1.0, ^5.0.0]
• minimist ^1.2.8

tools/plugin-examples-validator/package.json (4)

• ajv ^8.17.1
• ajv-formats ^3.0.1
• tinyglobby ^0.2.12
• yaml ^2.6.0

tools/plugins-changelog-generator/package.json (5)

• tinyglobby ^0.2.12
• gray-matter ^4.0.3
• js-yaml ^4.1.1 → [Updates: ^4.1.1, ^5.0.0]
• minimist ^1.2.8
• semver ^7.7.2 → [Updates: ^7.7.2]

tools/plugins-post-processor/package.json (1)

• minimist ^1.2.8

tools/scaffold-plugin/package.json (1)

• minimist ^1.2.8

tools/track-docs-changes/package.json (3)

• @octokit/rest ^22.0.0
• simple-git ^3.27.0
• yaml ^2.5.1

tools/vale-frontmatter/package.json (2)

• tinyglobby ^0.2.12
• gray-matter ^4.0.3

nvm (1)

.nvmrc (1)

• node 24.16.0 → [Updates: 24.18.0]

ruby-version (1)

.ruby-version (1)

• ruby 3.4.4 → [Updates: 3.4.10, 4.0.5]

---

• Check this box to trigger a request for Renovate to run again on this repository