Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	apollo-server
npm	apollo-server-lambda

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency @apollo/gateway to v2 [security]
• chore(deps): update ghcr.io/apollographql/router docker tag to v1.61.12
• chore(deps): update openzipkin/zipkin docker tag to v3.5.1
• chore(deps): update otel/opentelemetry-collector docker tag to v0.144.0
• fix(deps): update dependency graphql to v16.12.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update dependency serverless to v4
• chore(deps): update dependency serverless-offline to v14
• chore(deps): update docker/build-push-action action to v6
• chore(deps): update docker/login-action action to v3
• chore(deps): update docker/setup-buildx-action action to v3
• chore(deps): update docker/setup-qemu-action action to v3
• chore(deps): update peter-evans/create-or-update-comment action to v5
• chore(deps): update peter-evans/create-pull-request action to v8
• chore(deps): update peter-evans/enable-pull-request-automerge action to v3
• chore(deps): update prom/prometheus docker tag to v3
• fix(deps): update apollo graphql packages to v2 (major) (@apollo/subgraph, ghcr.io/apollographql/router)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

circleci (1)

.circleci/config.yml (1)

• secops 2.0.7

docker-compose (7)

docker-compose.managed.yml

docker-compose.otel-collector.yml (3)

• otel/opentelemetry-collector 0.119.0 → [Updates: 0.144.0]
• openzipkin/zipkin 3.4.4 → [Updates: 3.5.1]
• prom/prometheus v2.55.1 → [Updates: v3.9.1]

docker-compose.otel-zipkin.yml (1)

• openzipkin/zipkin 3.4.4 → [Updates: 3.5.1]

docker-compose.router-otel.yml (4)

• ghcr.io/apollographql/router v1.59.2 → [Updates: v1.61.12, v2.11.0]
• otel/opentelemetry-collector 0.119.0 → [Updates: 0.144.0]
• openzipkin/zipkin 3.4.4 → [Updates: 3.5.1]
• prom/prometheus v2.55.1 → [Updates: v3.9.1]

docker-compose.router.yml (1)

• ghcr.io/apollographql/router v1.59.2 → [Updates: v1.61.12, v2.11.0]

docker-compose.serverless.yml

docker-compose.yml

dockerfile (6)

gateway/Dockerfile

serverless/Dockerfile

subgraphs/inventory/Dockerfile

subgraphs/pandas/Dockerfile

subgraphs/products/Dockerfile

subgraphs/users/Dockerfile

github-actions (8)

.github/workflows/main-router.yml (1)

• actions/checkout v3 → [Updates: v6]

.github/workflows/main-serverless.yml (1)

• actions/checkout v3 → [Updates: v6]

.github/workflows/main.yml (1)

• actions/checkout v3 → [Updates: v6]

.github/workflows/managed.yml (1)

• actions/checkout v3 → [Updates: v6]

.github/workflows/rebase.yml (5)

• peter-evans/create-or-update-comment v2 → [Updates: v5]
• actions/checkout v3 → [Updates: v6]
• cirrus-actions/rebase 1.8
• peter-evans/create-or-update-comment v2 → [Updates: v5]
• peter-evans/create-or-update-comment v2 → [Updates: v5]

.github/workflows/release.yml (15)

• actions/checkout v3 → [Updates: v6]
• actions/checkout v3 → [Updates: v6]
• actions/checkout v3 → [Updates: v6]
• actions/checkout v3 → [Updates: v6]
• docker/setup-qemu-action v2 → [Updates: v3]
• docker/setup-buildx-action v1 → [Updates: v3]
• docker/login-action v2 → [Updates: v3]
• docker/build-push-action v2 → [Updates: v6]
• actions/checkout v3 → [Updates: v6]
• actions/checkout v3 → [Updates: v6]
• peter-evans/create-pull-request v4 → [Updates: v8]
• peter-evans/enable-pull-request-automerge v2 → [Updates: v3]
• actions/checkout v3 → [Updates: v6]
• peter-evans/create-pull-request v4 → [Updates: v8]
• peter-evans/enable-pull-request-automerge v2 → [Updates: v3]

.github/workflows/subgraph-check.yml (1)

• actions/checkout v3 → [Updates: v6]

.github/workflows/subgraph-deploy-publish.yml (1)

• actions/checkout v3 → [Updates: v6]

kustomize (2)

k8s/router/dev/kustomization.yaml (1)

• prasek/supergraph-router 1.1.45

k8s/subgraphs/dev/kustomization.yaml (5)

• prasek/subgraph-inventory 1.1.49
• prasek/subgraph-pandas 1.1.38
• prasek/subgraph-products 1.1.45
• prasek/subgraph-users 1.1.47
• prasek/supergraph-serverless 1.0.29

npm (6)

gateway/package.json (4)

• @apollo/gateway 0.54.1 → [Updates: 2.10.1]
• apollo-server 3.13.0
• supergraph-demo-opentelemetry 0.2.4
• graphql 16.10.0 → [Updates: 16.12.0]

serverless/package.json (6)

• @apollo/gateway 0.54.1 → [Updates: 2.10.1]
• apollo-server-lambda 3.13.0
• @apollo/subgraph 0.6.1 → [Updates: 2.13.0]
• graphql 16.10.0 → [Updates: 16.12.0]
• serverless 3.40.0 → [Updates: 4.31.2]
• serverless-offline 8.8.1 → [Updates: 14.4.0]

subgraphs/inventory/package.json (4)

• @apollo/subgraph 0.6.1 → [Updates: 2.13.0]
• apollo-server 3.13.0
• supergraph-demo-opentelemetry 0.2.4
• graphql 16.10.0 → [Updates: 16.12.0]

subgraphs/pandas/package.json (2)

• apollo-server 3.13.0
• graphql 16.10.0 → [Updates: 16.12.0]

subgraphs/products/package.json (4)

• @apollo/subgraph 0.6.1 → [Updates: 2.13.0]
• apollo-server 3.13.0
• supergraph-demo-opentelemetry 0.2.4
• graphql 16.10.0 → [Updates: 16.12.0]

subgraphs/users/package.json (4)

• @apollo/subgraph 0.6.1 → [Updates: 2.13.0]
• apollo-server 3.13.0
• supergraph-demo-opentelemetry 0.2.4
• graphql 16.10.0 → [Updates: 16.12.0]

---

• Check this box to trigger a request for Renovate to run again on this repository