chore(deps): update agent

[NickGhignatti]

This PR contains the following updates:

Package	Update	Change
cgr.dev/chainguard/minio	digest	22bf0ad → 6a1d0b4
docker.io/clickhouse/clickhouse-server	minor	26.8.9 → 26.9.4
docker.io/langfuse/langfuse	minor	4.38.0 → 4.46.0
docker.io/langfuse/langfuse-worker	minor	4.38.0 → 4.46.0
redis (source)	patch	8.10.1-alpine → 8.10.2-alpine

---

Release Notes

langfuse/langfuse (docker.io/langfuse/langfuse)

v4.46.0

Compare Source

What's Changed

Features

• feat(experiments): streamline side-by-side comparison by @​marliessophie in #​17929
• feat(web): Add formatted json to the dataset item by @​nmtrang29 in #​17932
• feat(skills): basic skill management by @​tobi12345 in #​17803
• feat(web): add 100-row page size option to tracing tables by @​nkabardin in #​17919
  #​17926

Fixes

• fix(web): header metrics as plain text on trace, observation and session headers by @​nmtrang29 in #​17757
• fix(billing): accept string event-bus timestamps on the CHB webhook by @​Steffen911 in
• fix(web): session header drops the per-detail hide controls by @​nmtrang29 in #​17764
• fix(web): remove the pulsing dot on the trace panel toggle by @​nmtrang29 in #​17930
• fix(assistant): Respect data-retention settings by @​bezbac in #​17850
• fix(web): hovered and selected items keep the text colour by @​nmtrang29 in #​17936
• fix(web): tooltips open after 300ms by @​nmtrang29 in #​17946
• fix(web): Chart improvements by @​bezbac in #​17900
• fix(web): remove the trace playback feature by @​nmtrang29 in #​17927
• fix(web): breadcrumbs use thin muted slashes and smaller dropdown chevrons by @​nmtrang29 in #​17934

Chores

• refactor(web): Migrate web callout settings table to design system by @​bezbac in #​17933
• refactor(web): Migrate gateway api keys table to design system by @​bezbac in #​17922
• perf(datasets): route v3 dataset-run-items reads to the read replica by @​niklassemmler in #​17923
• chore(deps): bump base64 from 0.22.1 to 0.23.1 in /ai-gateway in the rust-dependencies group by @​dependabot[bot] in #​17911

Full Changelog: langfuse/langfuse@v4.45.4...v4.46.0

v4.45.4

Compare Source

What's Changed

• chore(assistant): refresh embedded Langfuse skills by @​langfuse-bot in #​17916
• test(worker): skip Azure LLM connection tests until CI key is replaced by @​hassiebp in #​17924

Full Changelog: langfuse/langfuse@v4.45.3...v4.45.4

v4.45.1

Compare Source

What's Changed

• fix(charts): Make PieChart colors match other charts by @​bezbac in #​17875
• test(scores): give the updated score a strictly later event_ts by @​Steffen911 in #​17879
• feat(llm-connections): default and custom models for TypeSafe connections by @​hassiebp in #​17881

Full Changelog: langfuse/langfuse@v4.45.0...v4.45.1

v4.45.0

Compare Source

What's Changed

• fix(web): use tuple key for confusion matrix lookup to avoid delimiter collisions by @​marliessophie in #​17196
• refactor(web): Migrate exports settings table to design system by @​bezbac in #​17864
• feat(billing): send the organization name on ClickHouse Billing checkout by @​Steffen911 in #​17867
• refactor(web): Create design-system StackedBarChart by @​bezbac in #​17865
• refactor(web): Create design-system AreaChart by @​bezbac in #​17870
• docs(self-hosting): document Docker log retention by @​I3eka in #​16363
• feat(llm-connections): custom base URL and extra headers for TypeSafe connections by @​hassiebp in #​17866

New Contributors

• @​I3eka made their first contribution in #​16363

Full Changelog: langfuse/langfuse@v4.44.0...v4.45.0

v4.44.0

Compare Source

What's Changed

Features

• feat(llm-connections): send extra headers on Vertex AI Gemini requests by @​hassiebp in #​17831
• feat(worker): add isolated OTEL replay integration harness by @​sumerman in #​17741
• feat(evals): add conversation-signals decision-model gallery template by @​annabellscha in #​17845
• feat(trace-batching): enhance transcript assembly with timing metrics and token estimates by @​marliessophie in #​17839
• feat(ai-gateway): relay Anthropic Messages with usage telemetry by @​hassiebp in #​17781
• feat(ai-gateway): capture Anthropic Messages content in full mode by @​hassiebp in #​17854
• feat(billing): show only Total in invoice history for ClickHouse Billing orgs by @​Steffen911 in #​17851

Fixes

• fix(sessions): show tool rows with nested observations by @​bezbac in #​17826
• fix(worker): await in-flight ClickHouse writes during shutdown by @​sumerman in #​17836
• fix(dashboard,widgets): correct silent aggregation errors in score histogram and pivot averages (#​15208) by @​hassaanch23 in #​15209
• fix(billing): clear a pending ClickHouse Billing scheduled change before setting a new one by @​Steffen911 in #​17811

Chores

• refactor(web): Create design-system BarChart by @​bezbac in #​17829
• refactor(web): Migrate batch actions settings table to design system by @​bezbac in #​17832
• refactor(web): Create design-system HistogramChart by @​bezbac in #​17833
• refactor(web): Migrate audit log settings table to design system by @​bezbac in #​17822
• chore(worker): simplify Native codec parity writer setup by @​sumerman in #​17843
• chore: improve project deletion warning text by @​sumerman in #​17846
• chore(deps): bump pnpm to 12.6.0, Next.js to 16.3.6 and Turbo to 2.11.3 by @​nimarb in #​17847
• ci: Archive Storybook deployment uploads by @​bezbac in #​17849
• test(worker): decouple buffered-uploader part-copy test from Buffer.poolSize by @​Steffen911 in #​17812
• refactor(web): Create design-system HorizontalBarChart by @​bezbac in #​17848
• chore(redis): expire failed export jobs by age instead of count cap by @​niklassemmler in #​17827
• perf(scores): add selective-seek path for scores dedup reads by @​niklassemmler in #​17842
• refactor(web): Migrate sso settings table to design system by @​bezbac in #​17863

New Contributors

• @​hassaanch23 made their first contribution in #​15209

Full Changelog: langfuse/langfuse@v4.43.0...v4.44.0

v4.43.0

Compare Source

What's Changed

Features

• feat(members): filter project and organization members by role by @​hassiebp in #​17810
• feat(scores): Allow creating scores from annotation sidebar by @​bezbac in #​17815
• feat(feature-flags): introduce internal view mode and related components by @​marliessophie in #​17816
• feat(evals): route TypeSafe decision-model connections through OpenRouter or Vercel AI Gateway by @​hassiebp in #​17798

Fixes

• fix(scim): scope Users/{id} reads and mutations to the caller's org by @​Steffen911 in #​17828
• fix(web): Formatted / Raw toggle on the observation Attributes tab by @​nmtrang29 in #​17712
• fix(web): type scale carries line-height, whole-pixel sizes by @​nmtrang29 in #​17658
• fix(web): trace page title is the trace id by @​nmtrang29 in #​17710
• fix(web): no usage badge on observations without usage by @​nmtrang29 in #​17708
• fix(web): system message keeps one expand control by @​nmtrang29 in #​17623
• fix(web): tree metrics heatmap update by @​nmtrang29 in #​17619
• fix(web): one compact badge, primary and outline, sharper corners by @​nmtrang29 in #​17609
• fix(normalized-io): langfuse plugin rendering by @​marliessophie in #​17820
• fix(settings): Add small gap between nav items by @​bezbac in #​17814
• fix(settings): Use badge for project role in invites table by @​bezbac in #​17825
• perf(fts): decide the token prefilter at build time, not with an OR by @​niklassemmler in #​17724

Chores

• refactor(web): Migrate api key table to design-system components by @​bezbac in #​17791
• refactor(web): Replace some legacy dropdowns with DropdownMenu by @​bezbac in #​17790
• refactor(web): Migrate verified domains settings table to design system by @​bezbac in #​17823
• chore(assistant): switch to opus 5.5 by @​nimarb in #​17819

Full Changelog: langfuse/langfuse@v4.42.0...v4.43.0

v4.42.0

Compare Source

What's Changed

• refactor(web): reroute leftover feature deep imports through index.ts by @​nkabardin in #​17749
• fix(web): trace page panels fill the window width by @​nmtrang29 in #​17714
• refactor(web): reroute remaining feature deep imports through index.ts by @​nkabardin in #​17753
• feat: trace messages internal preview by @​marliessophie in #​17648
• fix(web): antialiased body text by @​nmtrang29 in #​17756
• refactor(web): reroute leftover feature deep imports through index.ts by @​nkabardin in #​17760
• fix(web): remove unused surveys.create tRPC route by @​Steffen911 in #​17768
• chore: bump clickhouse test version to 26.9 by @​Steffen911 in #​17769
• refactor(web): Migrate llm connections table to design-system components by @​bezbac in #​17732
• feat(ai-gateway): accept Anthropic connections in the resolution contract by @​hassiebp in #​17754
• chore(worker): extract OTEL event processing by @​sumerman in #​17736
• fix(ui): clarify selected controls and suspend inactive menus by @​nkabardin in #​17739
• refactor(web): reroute leftover long-tail feature deep imports through index.ts by @​nkabardin in #​17762
• refactor(web): reroute leftover dual-use feature deep imports through server doors by @​nkabardin in #​17770
• feat(trace): Simplify trace and observation actions by @​bezbac in #​17737
• feat(evals): decision-model evaluators with TypeSafe Jev (experimental) by @​hassiebp in #​17733
• fix(ui): keep nested dropdowns inside narrow viewports by @​nkabardin in #​17776
• fix(ai-gateway): update container bases to Debian Trixie by @​hassiebp in #​17773
• feat(annotations): unify score editing and review state by @​nkabardin in #​17740
• feat(comments): refresh conversations and stabilize overlay state by @​nkabardin in #​17744
• feat(normalize-io): use normalized parser in GA for single trace UI by @​marliessophie in #​17729
• feat(review): embed comments and annotation beside traces and sessions by @​nkabardin in #​17745
• feat(web): add regional demo redirect by @​annabellscha in #​15483
• feat(datasets): unify item editors and preserve batch selection by @​nkabardin in #​17747
• fix(evals): validate decision model batch mappings by @​hassiebp in #​17785
• chore(assistant): refresh embedded Langfuse skills by @​langfuse-bot in #​17766
• feat(evals): surface decision-model evaluators in the template gallery by @​hassiebp in #​17778
• refactor(web): Migrate score configs table to design-system components by @​bezbac in #​17789
• refactor(web): Create design-system LineChart by @​bezbac in #​17782
• fix(ui): polish embedded review controls by @​nkabardin in #​17794
• fix(experiments): read non-propagated experiment attribute from experiment root span by @​marliessophie in #​17473
• fix(evals): refine decision model evaluator UI by @​hassiebp in #​17795
• fix(ui): make trace navigation responsive by @​nkabardin in #​17796
• chore(evals): remove decisionModelEvaluators feature flag by @​hassiebp in #​17797
• chore(pricing): add Claude Opus 5.5 and GPT-6 Sol/Luna default pricing by @​langfuse-bot in #​17802
• feat(api): add prompt name prefix filtering by @​tobi12345 in #​17779
• fix(ui): polish trace review responsiveness by @​nkabardin in #​17801

Full Changelog: langfuse/langfuse@v4.41.0...v4.42.0

v4.41.0

Compare Source

What's Changed

Features

• feat: encode v4 native blocks and event bytes in Rust by @​sumerman in #​17563
• feat(automations): filter prompt events by tags by @​tobi12345 in #​17727

Fixes

• refactor(normalized-io): enhance additional input handling by @​marliessophie in #​17718
• fix(alerts): link score alerts to filtered scores by @​nkabardin in #​17715
• fix(dashboards): Avoid nested scrollbars for scores widget by @​bezbac in #​17713
• fix(web): group trace graph steps without recursive stack overflow by @​cursor[bot] in #​17566
• fix(shared): preserve small JSON siblings of oversized fields by @​nkabardin in #​17717
• fix(web): drop getter-only window.NEXT_DATA TypeError from Sentry by @​cursor[bot] in #​17514
• fix(web): stop IME composition from duplicating tracing search text by @​nkabardin in #​17706
• fix(web): wait for widget route params before project-scoped queries by @​cursor[bot] in #​17393
• fix(web): recover and group stale Next.js chunk load failures by @​cursor[bot] in #​17441
• fix(web): drop Safari password-manager addMore.click from Sentry by @​cursor[bot] in #​17263
• fix(web): stop dialogs hopping through document.body on open by @​cursor[bot] in #​17264

Chores

• refactor(web): Implement design-system PieChart by @​bezbac in #​17722
• refactor(web): thin remaining fat pages into feature Page components by @​nkabardin in #​17728
• refactor(web): reroute search-bar and filters deep imports through index.ts by @​nkabardin in #​17731
• chore(ci): pin plain CI ClickHouse leg to 26.4 by @​Steffen911 in #​17726
• chore: Disable storybook color-contrast checking by @​bezbac in #​17730
• refactor(tests): move feature flags into factory by @​nimarb in #​17735
• refactor(web): reroute rbac deep imports through index.ts by @​nkabardin in #​17734
• chore(deps): bump html-to-text to 10.0.1 by @​nimarb in #​17746
• refactor(web): reroute remaining feature deep imports through index.ts by @​nkabardin in #​17738

Full Changelog: langfuse/langfuse@v4.40.0...v4.41.0

v4.39.0

Compare Source

What's Changed

Features

• feat(web): publish event-loop delay for autoscaling by @​sumerman in #​17632
• feat(automations): filter prompt events by label by @​tobi12345 in #​17612
• feat(ai-gateway): add phase spans so request traces have no gaps by @​hassiebp in #​17640
• feat(ai-gateway): record Codex client metadata as agent metadata by @​hassiebp in #​17641
• feat(auth): authorize every ingestion event through the policy core by @​marksalpeter in #​16715
• feat(otel): simulate worker admission in shadow mode by @​sumerman in #​17437
• feat: return conversation history and current turn per thread by @​marliessophie in #​17613
• feat(langchain): add serialized generation result fixture for LangChain messages normalization by @​marliessophie in #​17589
• feat(in-app-agent): support Vertex AI for instance AI features by @​toyayuto in #​17390
• feat(api): route prompt public handlers through the auth seam by @​marksalpeter in #​17533
• feat(trace-batching): assemble streamed transcripts and measure token sizes by @​LysanderKie in #​17649
• feat(trace-batching): expose read insights on processing spans by @​LysanderKie in #​17654
• feat(trace-batching): measure pending trace size estimates by @​LysanderKie in #​17586
• feat(trace-batching): add capacity experiment telemetry by @​LysanderKie in #​17614

Fixes

• fix(web): link badges in the summary strip match the other badges by @​nmtrang29 in #​17601
• fix(web): observation type colours from one token set by @​nmtrang29 in #​17598
• fix(dashboards): Improve score selector by @​bezbac in #​17620
• fix(api): read snake-case tool call mappings by @​hassiebp in #​17631
• fix(ai-gateway): preserve completion when clients close streams by @​hassiebp in #​17633
• fix(web): selected table rows get a visible fill in light mode by @​nmtrang29 in #​17624
• fix(shared): unify jittered backoff across Redis reconnect strategies by @​Steffen911 in #​17618
• fix(ai-gateway)!: organize generation metadata namespaces by @​hassiebp in #​17645
• fix(widgets): Skip dashboard selector if no dashboard exists by @​bezbac in #​17646
• fix(web): Improve nav route active checking by @​bezbac in #​17647
• fix(web): trace-level scores render in the trace header by @​nmtrang29 in #​17642
• fix(otel): share worker shadow across server bundles by @​sumerman in #​17652
• fix(web): Widget table colors & improve createBadgeTableColumn api by @​bezbac in #​17653
• fix(otel): attach body reader before shadow work by @​sumerman in #​17657
• fix(web): update JSON viewer by @​nmtrang29 in #​17402
• fix(nuke): rust by @​nimarb in #​17663
• fix(table): clear stale rows when switching filter scope by @​nkabardin in #​17692
• fix(web): "+N" score chip opens a table of all scores by @​nmtrang29 in #​17644
• fix(web): trace tree cleanup: own metrics only, bare type icons, no token counts by @​nmtrang29 in #​17590
• fix(io-ui): don't show tool call "no response" text by @​marliessophie in #​17701
• fix(web): match versioned PostHog recorder paths in Sentry filter by @​cursor[bot] in #​17702
• fix(web): Missing header spacing on narrow screens by @​bezbac in #​17709

Chores

• docs: Add design-system component relationship chart by @​bezbac in #​17608
• docs(storybook): register foreground-secondary on the tokens page by @​nmtrang29 in #​17491
• chore(eslint): Fix no-abstracted-overlay-trigger rule by @​bezbac in #​17621
• chore(eslint): Enable no-nested-ternary by @​bezbac in #​17588
• refactor(web): Use design system buttons in design system components by @​bezbac in #​17622
• chore: run CI against latest ClickHouse version by @​Steffen911 in #​14066
• refactor(web): Migrate dashboard and widget tables to design-system by @​bezbac in #​17639
• refactor(web): move useFullTextSearch into features/search-bar by @​nkabardin in #​17418
• refactor(web): move score-configs table into features/score-configs by @​nkabardin in #​17423
• refactor(web): move models table into features/models by @​nkabardin in #​17419
• refactor(web): move scores table into features/scores and break peek cycle by @​nkabardin in #​17422
• refactor(web): move traces table into features/traces by @​nkabardin in #​17417
• refactor(web): extract UsersTable and thin sessions list page by @​nkabardin in #​17420
• chore(deps): bump hono to 4.13.7 by @​github-actions[bot] in #​17697
• chore(web): Incude design-system component directive in AGENTS.md by @​bezbac in #​17700
• chore: Remove linting from pre-commit hook by @​bezbac in #​17703
• ci: Improve release reminder workflow by @​bezbac in #​17704
• refactor(web): move observations table into features/tracing-tables by @​nkabardin in #​17421
• refactor(web): rename TraceSummaryStrip to TraceHeader by @​nmtrang29 in #​17705
• refactor(web): Make member and invite tables use design-system by @​bezbac in #​17684
• refactor(web): thin fat pages into feature Page components by @​nkabardin in #​17711

Full Changelog: langfuse/langfuse@v4.38.0...v4.39.0

redis/docker-library-redis (redis)

v8.10.2

Compare Source

---

Configuration

📅 Schedule: (in timezone Europe/Rome)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[NickGhignatti]

@copilot Can you fix the trivy insecurity on the Ci (agent docker image)?

[Copilot]

@copilot Can you fix the trivy insecurity on the Ci (agent docker image)?

Fixed in commit ea92e20.

I updated CI Docker builds so Python images run with no-cache, which forces the agent Dockerfile’s apt security-upgrade layer to execute instead of reusing a stale cached layer that Trivy flagged.