Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/Kong/developer.konghq.com).

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update non-major dependencies (`@datadog/browser-rum`, `@kong/kongponents`, `@kong/spec-renderer`, `@vitejs/plugin-vue`, `algoliasearch`, `autoprefixer`, `confluentinc/cp-schema-registry`, `docker/build-push-action`, `docker/setup-buildx-action`, `instantsearch.css`, `liquid-c`, `rubocop`, `ruby/setup-ruby`, `vite`, `vite-plugin-ruby`, `vite_ruby`, `vue`, `vue-instantsearch`, `yaml`)
- [ ] fix(deps): update dependency js-yaml to v5
- [ ] fix(deps): update dependency mermaid to v12
- [ ] fix(deps): update dependency undici to v8
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package tj-actions/changed-files)`.
>
> Files affected: `.github/workflows/linting.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency jekyll-contentblocks to v2](../pull/6530)
- [ ] [chore(deps): update dependency netlify-cli to v27](../pull/6532)
- [ ] [chore(deps): update dependency rouge to v5](../pull/5380)
- [ ] [chore(deps): update dependency ruby to v4](../pull/3804)
- [ ] [chore(deps): update dependency tailwindcss to v4](../pull/383)
- [ ] [chore(deps): update errata-ai/vale-action action to v3](../pull/6603)
- [ ] [fix(deps): update dependency @dotenvx/dotenvx to v2](../pull/7139)
- [ ] [fix(deps): update dependency snowflake-sdk to v3](../pull/5650)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

bundler (1)

Gemfile (20)

- `activesupport lock file @ 8.1.3.1`
- `csv lock file @ 3.3.6`
- `jekyll-include-cache lock file @ 0.2.2`
- `jekyll-vite lock file @ 3.0.4`
- `vite_ruby '~> 3.10'` → [Updates: `'~> 3.10'`]
- `kramdown-parser-gfm lock file @ 1.1.0`
- `liquid-c lock file @ 4.0.1` → [Updates: `undefined`]
- `nodo lock file @ 1.8.2`
- `nokogiri lock file @ 1.19.4`
- `nokolexbor lock file @ 0.8.0`
- `rouge '~> 4.3'` → [Updates: `'~> 5.0'`]
- `mini_portile2 '~> 2.8'`
- `byebug lock file @ 13.0.0`
- `foreman lock file @ 0.90.0`
- `pry lock file @ 0.16.0`
- `puma lock file @ 8.0.2`
- `rubocop lock file @ 1.90.0` → [Updates: `undefined`]
- `jekyll-contentblocks lock file @ 1.2.0` → [Updates: `undefined`]
- `rspec lock file @ 3.13.2`
- `capybara lock file @ 3.40.0`

docker-compose (3)

app/_includes/_files/event-gateway/docker-compose-mtls.yaml (3)

- `apache/kafka 4.3.1`
- `apache/kafka 4.3.1`
- `apache/kafka 4.3.1`

app/_includes/_files/event-gateway/docker-compose-sasl.yaml (3)

- `apache/kafka 4.3.1`
- `apache/kafka 4.3.1`
- `apache/kafka 4.3.1`

app/_includes/_files/event-gateway/docker-compose.yaml (4)

- `apache/kafka 4.3.1`
- `apache/kafka 4.3.1`
- `apache/kafka 4.3.1`
- `confluentinc/cp-schema-registry 8.3.1` → [Updates: `8.3.2`]

dockerfile (1)

tools/automated-tests/docker/Dockerfile

github-actions (28)

.github/reusable-steps/install-deps/action.yaml (4)

- `ruby/setup-ruby v1.321.0@95ef2b042f9d7a56d8268cba8559e2842e2ad01b` → [Updates: `v1.324.0`]
- `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020`
- `node 24`

.github/reusable-steps/notify-slack/action.yaml (1)

- `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d`

.github/reusable-steps/publish-test-report/action.yaml (1)

- `ctrf-io/github-test-reporter v1@7974087018bf4857cf5a9d78723e152038c3fa31`

.github/workflows/ai-gateway-automated-tests.yaml (3)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `Kong/kong-license master`

.github/workflows/automated-tests.yaml (3)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `Kong/kong-license master`

.github/workflows/build-automated-tests-image.yaml (6)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `docker/setup-buildx-action v4.3.0@37fe631027851001ddb9b187196cc803df7f5f0e` → [Updates: `v4.4.1`]
- `docker/login-action v4.6.0@dbcb813823bdd20940b903addbd779551569679f`
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `docker/build-push-action v7.3.0@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` → [Updates: `v7.4.0`]

.github/workflows/check-links-scheduled.yml (2)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/check-links.yml (6)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `fountainhead/action-wait-for-check v1.2.0@5a908a24814494009c4bb27c242ea38c93c593be`
- `jakepartusch/wait-for-netlify-action v1.4@f1e137043864b9ab9034ae3a5adc1c108e3f1a48`

.github/workflows/event-gateway-tests.yaml (3)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `Kong/kong-license master`

.github/workflows/gateway-tests.yaml (3)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `Kong/kong-license master`

.github/workflows/generate-aigw-changelog.yml (6)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`
- `node 24`

.github/workflows/generate-gateway-plugins-changelogs.yml (6)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`
- `node 24`

.github/workflows/generate-inso-cli-docs.yaml (5)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`

.github/workflows/generate-kong-conf-json.yml (6)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`
- `node 24`

.github/workflows/label-issues.yml (2)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`

.github/workflows/linting.yml (7)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `tj-actions/changed-files 47@24d32ffd492484c1d75e0c0b894501ddb9d30d62`
- `errata-ai/vale-action 2.1.2@85f9f7f2c5f449ac0ae5b66662961bae3f77ca6a` → [Updates: `v3.0.0`]
- `errata-ai/vale-action 2.1.2@85f9f7f2c5f449ac0ae5b66662961bae3f77ca6a` → [Updates: `v3.0.0`]

.github/workflows/missing-redirects.yaml (6)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3`
- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `fountainhead/action-wait-for-check v1.2.0@5a908a24814494009c4bb27c242ea38c93c593be`
- `jakepartusch/wait-for-netlify-action v1.4@f1e137043864b9ab9034ae3a5adc1c108e3f1a48`

.github/workflows/new-pages-changelog.yml (5)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`
- `node 24`

.github/workflows/rspec.yml (4)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `ruby/setup-ruby v1.321.0@95ef2b042f9d7a56d8268cba8559e2842e2ad01b` → [Updates: `v1.324.0`]
- `actions/cache v6@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`

.github/workflows/security.yaml (3)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `zgosalvez/github-actions-ensure-sha-pinned-actions v5@60e3a74c7b74a319e8e53e46bc455205f7173e1a`

.github/workflows/sync-ai-marketplace-submodule.yml (2)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `mheap/submodule-sync-action v1@a06903a4e38f042f6f52cc88d184ec1c930ee12d`

.github/workflows/sync-deck.yml (4)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `Kong/setup-deck v1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`

.github/workflows/sync-kongctl.yml (4)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `kong/setup-kongctl v1@659d5c2b0f4db2e25d63797035358a22907421db`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`

.github/workflows/sync-konnect-oas-data.yml (3)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`

.github/workflows/sync-kuma-submodule.yml (4)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `peter-evans/create-pull-request v8@5f6978faf089d4d20b00c7766989d076bb2fc7f1`

.github/workflows/sync-preview-branch.yaml (2)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/validate-frontmatters.yml (2)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/validate-plugin-examples.yml (4)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020`
- `node 24`

npm (20)

package.json (31)

- `@algolia/autocomplete-core ^1.18.1`
- `@algolia/autocomplete-plugin-tags ^1.18.1`
- `@algolia/autocomplete-preset-algolia ^1.18.1`
- `@datadog/browser-rum ^7.0.0` → [Updates: `^7.0.0`]
- `@github/clipboard-copy-element ^1.3.0`
- `@kong/kongponents ^9.14.24` → [Updates: `^9.14.24`]
- `@kong/sdk-portal-js ^2.15.2`
- `@kong/spec-renderer ^1.108.4` → [Updates: `^1.108.4`]
- `@tailwindcss/forms ^0.5.10`
- `@vitejs/plugin-vue ^6.0.0` → [Updates: `^6.0.0`]
- `algoliasearch ^5.20.0` → [Updates: `^5.20.0`]
- `axios ^1.16.1`
- `instantsearch.css ^8.5.1` → [Updates: `^8.5.1`]
- `mermaid ^11.6.0` → [Updates: `^12.0.0`]
- `node-fetch ^3.3.2`
- `shiki ^4.0.2`
- `snowflake-sdk 2.4.3` → [Updates: `3.3.0`]
- `uuid ^14.0.0`
- `vue ^3.4.38` → [Updates: `^3.4.38`]
- `vue-instantsearch ^4.20.4` → [Updates: `^4.20.4`]
- `@tailwindcss/typography ^0.5.15`
- `autoprefixer ^10.4.19` → [Updates: `^10.4.19`]
- `netlify-cli 26.2.0` → [Updates: `27.8.0`]
- `postcss ^8.4.38`
- `tailwindcss ^3.4.3` → [Updates: `^4.0.0`]
- `vite ^8.0.0` → [Updates: `^8.0.0`]
- `vite-plugin-ruby ^5.0.0` → [Updates: `^5.0.0`]
- `vite-svg-loader ^5.1.0`
- `wait-on ^9.0.0`
- `axios ^1.16.1`
- `yarn 4.18.0`

tools/aigw-policies-post-processor/package.json (1)

- `minimist ^1.2.8`

tools/aigw-policy-scopes/package.json

tools/automated-tests/package.json (13)

- `@dotenvx/dotenvx ^1.51.1` → [Updates: `^2.0.0`]
- `debug ^4.4.0`
- `dockerode ^5.0.0`
- `tinyglobby ^0.2.12`
- `fetch-cookie ^3.1.0`
- `formdata-node ^6.0.3`
- `gray-matter ^4.0.3`
- `js-yaml ^4.1.0` → [Updates: `^5.0.0`]
- `minimist ^1.2.8`
- `node-fetch ^3.3.2`
- `playwright ^1.54.2`
- `tough-cookie ^6.0.0`
- `undici ^7.18.2` → [Updates: `^8.0.0`]

tools/broken-link-checker/package.json (5)

- `@actions/github ^9.0.0`
- `@octokit/rest ^22.0.0`
- `broken-link-checker ^0.7.8`
- `tinyglobby ^0.2.12`
- `minimist ^1.2.8`

tools/changelog-generator/package.json (4)

- `tinyglobby ^0.2.12`
- `js-yaml ^4.1.0` → [Updates: `^5.0.0`]
- `lodash.mergewith ^4.6.2`
- `minimist ^1.2.8`

tools/deck-versions/package.json (1)

- `node-fetch ^3.3.2`

tools/frontmatter-validator/package.json (5)

- `ajv ^8.17.1`
- `ajv-formats ^3.0.1`
- `tinyglobby ^0.2.12`
- `gray-matter ^4.0.3`
- `yaml ^2.6.0` → [Updates: `^2.6.0`]

tools/kong-conf-to-json/package.json (2)

- `tinyglobby ^0.2.12`
- `minimist ^1.2.8`

tools/kongctl-versions/package.json

tools/konnect-oas-data-generator/package.json (3)

- `@kong/sdk-portal-js ^2.14.0`
- `axios ^1.0.0`
- `minimist ^1.2.8`

tools/mesh-policy-examples-validator/package.json (5)

- `ajv ^8.17.1`
- `ajv-formats ^3.0.1`
- `linkedom ^0.18.5`
- `tinyglobby ^0.2.12`
- `yaml ^2.6.0`

tools/missing-redirects/package.json (3)

- `gray-matter ^4.0.3`
- `js-yaml ^4.1.0` → [Updates: `^5.0.0`]
- `minimist ^1.2.8`

tools/new-pages-changelog/package.json (3)

- `gray-matter ^4.0.3`
- `tinyglobby ^0.2.12`
- `yaml ^2.6.0` → [Updates: `^2.6.0`]

tools/plugin-examples-validator/package.json (4)

- `ajv ^8.17.1`
- `ajv-formats ^3.0.1`
- `tinyglobby ^0.2.12`
- `yaml ^2.6.0` → [Updates: `^2.6.0`]

tools/plugins-changelog-generator/package.json (5)

- `tinyglobby ^0.2.12`
- `gray-matter ^4.0.3`
- `js-yaml ^4.1.1` → [Updates: `^5.0.0`]
- `minimist ^1.2.8`
- `semver ^7.7.2`

tools/plugins-post-processor/package.json (1)

- `minimist ^1.2.8`

tools/scaffold-plugin/package.json (1)

- `minimist ^1.2.8`

tools/track-docs-changes/package.json (3)

- `@octokit/rest ^22.0.0`
- `simple-git ^3.27.0`
- `yaml ^2.5.1` → [Updates: `^2.5.1`]

tools/vale-frontmatter/package.json (2)

- `tinyglobby ^0.2.12`
- `gray-matter ^4.0.3`

nvm (1)

.nvmrc (1)

- `node 24.21.0`

ruby-version (1)

.ruby-version (1)

- `ruby 3.4.10` → [Updates: `4.0.7`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the linked Renovate Dependency Dashboard documentation, then inspect the listed Gemfile, Docker Compose files, and .github/workflows/linting.yml entries. Define a specific dependency update before working; done means that update is applied, verified by the relevant checks, and its dashboard item or pull request is resolved.

Written by the indexing model from the issue text.