Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update zgosalvez/github-actions-ensure-sha-pinned-actions digest to c5fc58b
• fix(deps): update dependency @dotenvx/dotenvx to v2
• fix(deps): update dependency js-yaml to v5
• fix(deps): update dependency undici to v8
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package ruby/setup-ruby), Could not determine new digest for update (github-tags package tj-actions/changed-files).

Files affected: .github/reusable-steps/install-deps/action.yaml, .github/workflows/linting.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency mermaid to v11.16.1 [security]
• chore(deps): update non-major dependencies (@datadog/browser-rum, @kong/kongponents, @kong/spec-renderer, confluentinc/cp-schema-registry, instantsearch.css, liquid-c, node, postcss, rubocop, ruby, shiki, step-security/harden-runner, vite, vue, vue-instantsearch)
• chore(deps): update actions/cache action to v6
• chore(deps): update dependency jekyll-contentblocks to v2
• chore(deps): update dependency netlify-cli to v27
• chore(deps): update dependency rouge to v5
• chore(deps): update dependency ruby to v4
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update errata-ai/vale-action action to v3
• fix(deps): update dependency snowflake-sdk to v3
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update actions/cache digest to caa2961

Detected Dependencies

bundler (1)

Gemfile (18)

• activesupport lock file @ 8.1.3.1
• csv lock file @ 3.3.6
• jekyll-include-cache lock file @ 0.2.2
• jekyll-vite lock file @ 3.0.4
• vite_ruby '~> 3.10'
• kramdown-parser-gfm lock file @ 1.1.0
• liquid-c lock file @ 4.0.1 → [Updates: undefined]
• nodo lock file @ 1.8.2
• nokogiri lock file @ 1.19.4
• nokolexbor lock file @ 0.8.0
• rouge '~> 4.3' → [Updates: '~> 5.0']
• mini_portile2 '~> 2.8'
• byebug lock file @ 13.0.0
• foreman lock file @ 0.90.0
• pry lock file @ 0.16.0
• puma lock file @ 8.0.2
• rubocop lock file @ 1.88.2 → [Updates: undefined]
• jekyll-contentblocks lock file @ 1.2.0 → [Updates: undefined]

docker-compose (3)

app/_includes/_files/event-gateway/docker-compose-mtls.yaml (3)

• apache/kafka 4.3.1
• apache/kafka 4.3.1
• apache/kafka 4.3.1

app/_includes/_files/event-gateway/docker-compose-sasl.yaml (3)

• apache/kafka 4.3.1
• apache/kafka 4.3.1
• apache/kafka 4.3.1

app/_includes/_files/event-gateway/docker-compose.yaml (4)

• apache/kafka 4.3.1
• apache/kafka 4.3.1
• apache/kafka 4.3.1
• confluentinc/cp-schema-registry 8.3.0 → [Updates: 8.3.1]

dockerfile (1)

tools/automated-tests/docker/Dockerfile

github-actions (24)

.github/reusable-steps/install-deps/action.yaml (4)

• ruby/setup-ruby v1@84684c07c1965536eb4802c8daf1a77968df0cb1
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v6, v5]
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• node 24

.github/reusable-steps/notify-slack/action.yaml (1)

• slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d

.github/reusable-steps/publish-test-report/action.yaml (1)

• ctrf-io/github-test-reporter v1@e500b992f936420eb633c91644cf10d4d71df700

.github/workflows/automated-tests.yaml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• Kong/kong-license master

.github/workflows/build-automated-tests-image.yaml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• docker/setup-buildx-action v4.2.0@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
• docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f
• actions/cache v5.1.0@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6.1.0]
• docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a

.github/workflows/check-links-scheduled.yml (2)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/check-links.yml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• fountainhead/action-wait-for-check v1.2.0@5a908a24814494009c4bb27c242ea38c93c593be
• jakepartusch/wait-for-netlify-action v1.4@f1e137043864b9ab9034ae3a5adc1c108e3f1a48

.github/workflows/event-gateway-tests.yaml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• Kong/kong-license master

.github/workflows/gateway-tests.yaml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• Kong/kong-license master

.github/workflows/generate-gateway-plugins-changelogs.yml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• node 24

.github/workflows/generate-inso-cli-docs.yaml (5)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/generate-kong-conf-json.yml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1
• node 24

.github/workflows/label-issues.yml (2)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/linting.yml (7)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• tj-actions/changed-files 47@24d32ffd492484c1d75e0c0b894501ddb9d30d62
• errata-ai/vale-action 2.1.2@85f9f7f2c5f449ac0ae5b66662961bae3f77ca6a → [Updates: v3.0.0]
• errata-ai/vale-action 2.1.2@85f9f7f2c5f449ac0ae5b66662961bae3f77ca6a → [Updates: v3.0.0]

.github/workflows/missing-redirects.yaml (6)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• fountainhead/action-wait-for-check v1.2.0@5a908a24814494009c4bb27c242ea38c93c593be
• jakepartusch/wait-for-netlify-action v1.4@f1e137043864b9ab9034ae3a5adc1c108e3f1a48

.github/workflows/security.yaml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• zgosalvez/github-actions-ensure-sha-pinned-actions v5@46cfe808a5f1588656ef299eedd0ce2fd7ec0dcc → [Updates: v5]

.github/workflows/sync-ai-marketplace-submodule.yml (2)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• mheap/submodule-sync-action v1@a06903a4e38f042f6f52cc88d184ec1c930ee12d

.github/workflows/sync-deck.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• Kong/setup-deck v1
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sync-kongctl.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• kong/setup-kongctl v1@659d5c2b0f4db2e25d63797035358a22907421db
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sync-konnect-oas-data.yml (3)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sync-kuma-submodule.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/sync-preview-branch.yaml (2)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/validate-frontmatters.yml (2)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/validate-plugin-examples.yml (4)

• step-security/harden-runner v2.20.0@bf7454d06d71f1098171f2acdf0cd4708d7b5920 → [Updates: v2.20.1]
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• node 24

npm (16)

package.json (31)

• @algolia/autocomplete-core ^1.18.1
• @algolia/autocomplete-plugin-tags ^1.18.1
• @algolia/autocomplete-preset-algolia ^1.18.1
• @datadog/browser-rum ^7.0.0 → [Updates: ^7.0.0]
• @github/clipboard-copy-element ^1.3.0
• @kong/kongponents ^9.14.24 → [Updates: ^9.14.24]
• @kong/sdk-portal-js ^2.15.2
• @kong/spec-renderer ^1.108.4 → [Updates: ^1.108.4]
• @tailwindcss/forms ^0.5.10
• @vitejs/plugin-vue ^6.0.0
• algoliasearch ^5.20.0
• axios ^1.16.1
• instantsearch.css ^8.5.1 → [Updates: ^8.5.1]
• mermaid ^11.6.0 → [Updates: ^11.6.0]
• node-fetch ^3.3.2
• shiki ^4.0.2 → [Updates: ^4.0.2]
• snowflake-sdk 2.4.3 → [Updates: 3.1.0]
• uuid ^14.0.0
• vue ^3.4.38 → [Updates: ^3.4.38]
• vue-instantsearch ^4.20.4 → [Updates: ^4.20.4]
• @tailwindcss/typography ^0.5.15
• autoprefixer ^10.4.19
• netlify-cli 26.2.0 → [Updates: 27.1.1]
• postcss ^8.4.38 → [Updates: ^8.4.38]
• tailwindcss ^3.4.3 → [Updates: ^4.0.0]
• vite ^8.0.0 → [Updates: ^8.0.0]
• vite-plugin-ruby ^5.0.0
• vite-svg-loader ^5.1.0
• wait-on ^9.0.0
• axios ^1.16.1
• yarn 4.18.0

tools/automated-tests/package.json (13)

• @dotenvx/dotenvx ^1.51.1 → [Updates: ^2.0.0]
• debug ^4.4.0
• dockerode ^5.0.0
• tinyglobby ^0.2.12
• fetch-cookie ^3.1.0
• formdata-node ^6.0.3
• gray-matter ^4.0.3
• js-yaml ^4.1.0 → [Updates: ^5.0.0]
• minimist ^1.2.8
• node-fetch ^3.3.2
• playwright ^1.54.2
• tough-cookie ^6.0.0
• undici ^7.18.2 → [Updates: ^8.0.0]

tools/broken-link-checker/package.json (5)

• @actions/github ^9.0.0
• @octokit/rest ^22.0.0
• broken-link-checker ^0.7.8
• tinyglobby ^0.2.12
• minimist ^1.2.8

tools/changelog-generator/package.json (4)

• tinyglobby ^0.2.12
• js-yaml ^4.1.0 → [Updates: ^5.0.0]
• lodash.mergewith ^4.6.2
• minimist ^1.2.8

tools/deck-versions/package.json (1)

• node-fetch ^3.3.2

tools/frontmatter-validator/package.json (5)

• ajv ^8.17.1
• ajv-formats ^3.0.1
• tinyglobby ^0.2.12
• gray-matter ^4.0.3
• yaml ^2.6.0

tools/kong-conf-to-json/package.json (2)

• tinyglobby ^0.2.12
• minimist ^1.2.8

tools/kongctl-versions/package.json

tools/konnect-oas-data-generator/package.json (3)

• @kong/sdk-portal-js ^2.14.0
• axios ^1.0.0
• minimist ^1.2.8

tools/missing-redirects/package.json (3)

• gray-matter ^4.0.3
• js-yaml ^4.1.0 → [Updates: ^5.0.0]
• minimist ^1.2.8

tools/plugin-examples-validator/package.json (4)

• ajv ^8.17.1
• ajv-formats ^3.0.1
• tinyglobby ^0.2.12
• yaml ^2.6.0

tools/plugins-changelog-generator/package.json (5)

• tinyglobby ^0.2.12
• gray-matter ^4.0.3
• js-yaml ^4.1.1 → [Updates: ^5.0.0]
• minimist ^1.2.8
• semver ^7.7.2

tools/plugins-post-processor/package.json (1)

• minimist ^1.2.8

tools/scaffold-plugin/package.json (1)

• minimist ^1.2.8

tools/track-docs-changes/package.json (3)

• @octokit/rest ^22.0.0
• simple-git ^3.27.0
• yaml ^2.5.1

tools/vale-frontmatter/package.json (2)

• tinyglobby ^0.2.12
• gray-matter ^4.0.3

nvm (1)

.nvmrc (1)

• node 24.18.1 → [Updates: 24.19.0]

ruby-version (1)

.ruby-version (1)

• ruby 3.4.4 → [Updates: 3.4.10, 4.0.6]

---

• Check this box to trigger a request for Renovate to run again on this repository