Skip to content

Update dependency promptfoo to ^0.124.0 - #556

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/promptfoo-0.x
Open

Update dependency promptfoo to ^0.124.0#556
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/promptfoo-0.x

Conversation

@renovate

@renovate renovate Bot commented Aug 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
promptfoo (source) ^0.121.0 → ^0.124.0 age confidence

Release Notes

promptfoo/promptfoo (promptfoo)

v0.124.0

Compare Source

⚠ BREAKING CHANGES
  • providers: remove hosted ChatKit provider (#​11434)
  • providers: make WatsonX SDKs opt-in (#​11359)
  • deps: make Langfuse SDK opt-in (#​11351)
  • deps: make Slack SDK opt-in (#​11349)
  • providers: make OpenAI Agents an explicit install (#​11177)
  • providers: make Codex Security SDK opt-in (#​11325)
  • providers: make browser SDKs explicit installs (#​11163)
  • deps: make local Transformers opt-in (#​11119)
Features
Bug Fixes
Performance Improvements
Miscellaneous Chores
Code Refactoring

v0.123.1

Compare Source

Features
Bug Fixes

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/London)

  • Branch creation
    • "before 10am on friday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Renovatebot and dependabot updates frontend javascript Pull requests that update javascript code labels Aug 7, 2026
@github-actions

github-actions Bot commented Aug 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Caution

[High Risk] Replacing the only API server target can leave the ALB with zero healthy backends

The api-207c90ee API server is a single-instance backend behind api-207c90ee-tg, and that only registered target is the EC2 instance i-0bf4039822e01f430. This change replaces that instance with a new AMI and different startup data while the target group continues to require HTTP health checks on /health over port 80.

If the replacement instance does not boot with the same web server and /health behavior, the ALB will have zero healthy targets and stop serving the API. This is a real outage risk because there is no second target in the group to absorb the replacement, and the surrounding Route53 health checks are already timing out today, so a failed cutover will surface immediately as failed health checks and service unavailability.
View reasoning tree here.

Caution

[High Risk] Single-target ALB and NLB backends will lose service during attachment and instance replacement

Both load balancers are pointed at target groups that currently have only one healthy backend each, and this change replaces those backend attachments at the same time the underlying EC2 instances are being replaced with new AMIs. The ALB target group api-207c90ee-tg currently serves only i-0bf4039822e01f430:80, and the internal NLB target group txn-feed-terraform-example currently serves only 10.0.101.34:9090 from i-0cff13d553da3fe3a.

When Terraform replaces the attachment resources, the old targets will be deregistered and the replacements will not serve traffic until AWS finishes registration and the new instances pass health checks. With only one target in each group, there is no spare capacity during that transition. Requests through api-207c90ee-alb can return 5xx responses, and traffic to the fraud ingest NLB can fail until the new instances finish bootstrapping and become healthy on the expected ports.
View reasoning tree here.

Signals

Routine → Multiple compute and monitoring resources are showing unusual infrequent updates, with many resources changing only 1 event/week for the last 5 months, 1 event/week for the last 2 months, or 3 events/week for the last 5 months, which is rare compared to typical patterns.

Additional Change Details: Items 74 Edges 167 model|risks_v6 ✨Encryption Key State Risk ✨KMS Key Creation

View in Overmind

@renovate
renovate Bot force-pushed the renovate/promptfoo-0.x branch from 7da1b00 to 3324969 Compare August 11, 2026 21:50
@renovate
renovate Bot force-pushed the renovate/promptfoo-0.x branch from 3324969 to 202a876 Compare October 3, 2026 23:26
@renovate renovate Bot changed the title Update dependency promptfoo to ^0.122.0 Update dependency promptfoo to ^0.123.0 Oct 3, 2026
@renovate
renovate Bot force-pushed the renovate/promptfoo-0.x branch 2 times, most recently from eb05b62 to fa3e92e Compare October 6, 2026 03:06
@renovate renovate Bot changed the title Update dependency promptfoo to ^0.123.0 Update dependency promptfoo to ^0.124.0 Oct 6, 2026
@renovate
renovate Bot force-pushed the renovate/promptfoo-0.x branch from fa3e92e to d0d3545 Compare October 8, 2026 14:55
@renovate
renovate Bot force-pushed the renovate/promptfoo-0.x branch from d0d3545 to 6e1865c Compare October 13, 2026 12:43

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Renovatebot and dependabot updates frontend javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants