chore(deps): update all non-major dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -28,14 +28,14 @@ jobs:
   build:
     needs: prepare_jobs
     name: dargstack rgen
-    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@2.6.7
+    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@2.6.8
     if: needs.prepare_jobs.outputs.pr_found == 'false' || github.event_name == 'pull_request'
     with:
       APT_PACKAGES: mkcert
   release-semantic:
     needs: build
     name: Semantic Release
-    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@2.6.7
+    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@2.6.8
     permissions:
       contents: write
     secrets:

.github/workflows/release-schedule.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   release-schedule:
     name: "Release: Scheduled"
-    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@2.6.7
+    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@2.6.8
     secrets:
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
     with:

package.json

@@ -6,15 +6,15 @@
     "@commitlint/config-conventional": "20.0.0",
     "conventional-changelog-conventionalcommits": "9.1.0",
     "dargstack": "2.5.1",
-    "dargstack_rgen": "0.9.73",
+    "dargstack_rgen": "0.9.74",
     "husky": "9.1.7"
   },
   "engines": {
     "node": "22"
   },
   "license": "GPL-3.0-only",
   "name": "@maevsi/stack",
-  "packageManager": "pnpm@10.18.3",
+  "packageManager": "pnpm@10.19.0",
   "private": true,
   "repository": "https://github.com/maevsi/stack.git",
   "scripts": {

pnpm-lock.yaml

@@ -187,7 +187,7 @@ services:
       GF_SECURITY_ADMIN_PASSWORD__FILE: /run/secrets/grafana_admin_password
       GF_SECURITY_ADMIN_USER__FILE: /run/secrets/grafana_admin_user
       GF_SERVER_ROOT_URL: https://grafana.${STACK_DOMAIN}/
-    image: grafana/grafana:12.2.0
+    image: grafana/grafana:12.2.1
     secrets:
       - grafana_admin_email
       - grafana_admin_password
@@ -314,7 +314,7 @@ services:
       POSTGRAPHILE_JWT_PUBLIC_KEY_FILE: /run/config/postgraphile_jwt-public-key
       POSTGRAPHILE_JWT_SECRET_KEY_FILE: /run/secrets/postgraphile_jwt-secret
       POSTGRAPHILE_OWNER_CONNECTION_FILE: /run/secrets/postgraphile_owner-connection
-    image: ghcr.io/maevsi/postgraphile:1.0.8
+    image: ghcr.io/maevsi/postgraphile:1.0.9
     secrets:
       - postgraphile_connection
       - postgraphile_jwt-secret
@@ -355,7 +355,7 @@ services:
         - traefik.http.routers.prometheus_secure.rule=Host(`prometheus.${STACK_DOMAIN}`)
         - traefik.http.routers.prometheus_secure.tls.options=mintls13@file #DARGSTACK-REMOVE
         - traefik.http.services.prometheus.loadbalancer.server.port=9090
-    image: prom/prometheus:v3.7.1
+    image: prom/prometheus:v3.7.2
     volumes:
       - ../production/configurations/prometheus/prometheus.yaml:/etc/prometheus/prometheus.yml:ro
       - prometheus_data:/prometheus

src/development/stack.yml

@@ -72,7 +72,7 @@ services:
         - (( append ))
         - traefik.http.routers.redpanda_secure.tls.certresolver=default
   sqitch:
-    image: ghcr.io/maevsi/sqitch:9.7.6
+    image: ghcr.io/maevsi/sqitch:9.7.7
     volumes: (( prune ))
   traefik:
     command: