From 96bd84d155d80b43b789ca16620057c3f6ece590 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 28 Oct 2026 13:24:56 +0000
Subject: [PATCH] build(deps): bump the hub group with 6 updates

Bumps the hub group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| curlimages/curl | `8.22.0` | `8.23.0` |
| cloudflare/cloudflared | `2026.10.1` | `2026.10.3` |
| otel/opentelemetry-collector-contrib | `0.163.1` | `0.163.2-386` |
| grafana/loki | `3.7.8` | `3.7.9` |
| grafana/tempo | `3.1.0` | `3.1.1` |
| prom/prometheus | `v3.15.0` | `v3.15.1` |


Updates `curlimages/curl` from 8.22.0 to 8.23.0

Updates `cloudflare/cloudflared` from 2026.10.1 to 2026.10.3

Updates `otel/opentelemetry-collector-contrib` from 0.163.1 to 0.163.2-386

Updates `grafana/loki` from 3.7.8 to 3.7.9

Updates `grafana/tempo` from 3.1.0 to 3.1.1

Updates `prom/prometheus` from v3.15.0 to v3.15.1

---
updated-dependencies:
- dependency-name: curlimages/curl
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: hub
- dependency-name: cloudflare/cloudflared
  dependency-version: 2026.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hub
- dependency-name: otel/opentelemetry-collector-contrib
  dependency-version: 0.163.2-386
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hub
- dependency-name: grafana/loki
  dependency-version: 3.7.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hub
- dependency-name: grafana/tempo
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hub
- dependency-name: prom/prometheus
  dependency-version: v3.15.1
  dependency-type: direct:production
  dependency-group: hub
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 compose.demo.yml   | 2 +-
 compose.tunnel.yml | 2 +-
 compose.yml        | 8 ++++----
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/compose.demo.yml b/compose.demo.yml
index 390a020..704ac80 100644
--- a/compose.demo.yml
+++ b/compose.demo.yml
@@ -31,7 +31,7 @@ services:
     logging: *demo-logging
 
   demo-load:
-    image: curlimages/curl:8.22.0@sha256:58adaa4e8dca9c988bae2aba4ab3434a0bb2da16bbe3f92dec39ec7785166777
+    image: curlimages/curl:8.23.0@sha256:11e64e28c5f58c8d93ee95fcf22ac055f48b0bc440e0ce7d8013bbb5ad6aa8ac
     restart: on-failure
     depends_on: [demo-api]
     command:
diff --git a/compose.tunnel.yml b/compose.tunnel.yml
index b5e0553..55b5d38 100644
--- a/compose.tunnel.yml
+++ b/compose.tunnel.yml
@@ -6,7 +6,7 @@
 # `tofu output -raw tunnel_token` yields CLOUDFLARE_TUNNEL_TOKEN for .env.
 services:
   cloudflared:
-    image: cloudflare/cloudflared:2026.10.1@sha256:a15a3b50b8dabd57ac2090e9484c0247dba9dfa1f0df4d298d4317f9d69eb2d5
+    image: cloudflare/cloudflared:2026.10.3@sha256:faa8e0a1475f137c910be6025f43c8e4092fdd35461b31e19fd1390657a1ff39
     restart: unless-stopped
     depends_on: [grafana, otel-collector]
     # Token via env, not --token: argv is readable from the host and from any
diff --git a/compose.yml b/compose.yml
index c18622c..76c406c 100644
--- a/compose.yml
+++ b/compose.yml
@@ -58,7 +58,7 @@ services:
     logging: *default-logging
 
   otel-collector:
-    image: otel/opentelemetry-collector-contrib:0.163.1@sha256:1175b03003053962012f5a231f5567f66a3e8fdb960c7835c0e48f7aa1555806
+    image: otel/opentelemetry-collector-contrib:0.163.2-386@sha256:bd0aac7fc525d8016b7bba1e35287b1f3a43c1e2d52e2426e2496d8d45668784
     restart: unless-stopped
     depends_on:
       otel-queue-init:
@@ -87,7 +87,7 @@ services:
     networks: [default, backend]
 
   loki:
-    image: grafana/loki:3.7.8@sha256:1107dd5274e0ada47e42472b7a7e71f3b2a2fe878878108f3e2f9e51528f0193
+    image: grafana/loki:3.7.9@sha256:0db216b630ae1f348a1584c67f3cead8b4c1fc839169a39501db664744158e28
     restart: unless-stopped
     volumes:
       - ./config/loki.yaml:/etc/loki/loki.yaml:ro
@@ -99,7 +99,7 @@ services:
     networks: [backend]
 
   tempo:
-    image: grafana/tempo:3.1.0@sha256:3076b8dcdfb32fd6bc5ccef85e7b7313e6199b9cb84366257fc17ecb696db5fd
+    image: grafana/tempo:3.1.1@sha256:64e2fbd56d9c2b3412a4b430a58ea59e91a670b1e75f920a0c702213ad145044
     restart: unless-stopped
     volumes:
       - ./config/tempo.yaml:/etc/tempo/tempo.yaml:ro
@@ -111,7 +111,7 @@ services:
     networks: [backend]
 
   prometheus:
-    image: prom/prometheus:v3.15.0@sha256:efd719c99d83b060d9daefdcf00360461adf279f45ef5391f8d111892118753e
+    image: prom/prometheus:v3.15.1@sha256:fa3302279710be2f21a8301ec17a8b4f2301fd829bd113839b3b6b02b6f191a2
     restart: unless-stopped
     volumes:
       - ./config/prometheus.yaml:/etc/prometheus/prometheus.yaml:ro