chore(deps): update growthbook/proxy docker tag to v1.4.0

[renovate]

This PR contains the following updates:

Package	Update	Change
growthbook/proxy	minor	v1.3.5 → v1.4.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[anitrend]

OpenCode Dependabot Risk Review

Schema: local-stack.dependabot-risk.v1

Decision: CHANGES_REQUESTED
Risk: MEDIUM
Automerge allowed: false
Update type: semver-minor
Ecosystem: docker

Summary

Renovate PR updates growthbook/proxy from v1.3.5 to v1.4.0 (minor). The source file and expected platform stack are updated, but infrastructure.yml and observability.yml are also listed as changed without any corresponding source Compose or fragment changes. This indicates potential stack drift or unintended regeneration artifacts. Growthbook is a stateful service requiring extra scrutiny, and no release notes are available to verify the absence of breaking changes.

Changed runtime artifacts

Image / dependency	From	To	Risk note
growthbook/proxy	v1.3.5	v1.4.0	minor update to stateful service (growthbook); stacks/infrastructure.yml and stacks/observability.yml changed without matching source changes

Runtime impact

Unexplained changes to infrastructure.yml and observability.yml stacks could affect unrelated services (redis, loki, prometheus, grafana, tempo, etc.) if the stack regeneration introduced drift. Growthbook proxy itself would undergo a rolling update.

Breaking change assessment

Unable to assess — no release notes available for growthbook/proxy v1.4.0. Minor version bump could include breaking config or API changes.

Required checks

• ./stackctl.sh sync
• ./stackctl.sh up --dry-run --no-logs
• git diff HEAD -- stacks/infrastructure.yml
• git diff HEAD -- stacks/observability.yml

Manual follow-up

• Verify that stacks/infrastructure.yml and stacks/observability.yml changes are limited to formatting/whitespace and do not alter service configs
• Review growthbook/proxy v1.4.0 release notes for breaking changes or migration steps
• Confirm growthbook proxy healthcheck and Traefik routing still work after update

Sources checked

• PR metadata (author, title, body, labels)
• PR changed files list
• Repository file contents (growthbook/proxy/docker-compose.yml, stacks/*.yml)

[anitrend]

OpenCode risk gate: neutral. Manual review required. Risk: medium. Reason: Renovate PR updates growthbook/proxy from v1.3.5 to v1.4.0 (semver minor). The source compose file and the generated stacks/platform.yml are both changed, which is expected when the stack is regenerated. GrowthBook is a stateful service requiring extra scrutiny. Release notes for v1.4.0 were not available in the provided context, so migration risk cannot be fully ruled out.

[anitrend]

OpenCode risk gate: changes requested. Risk: medium. Reason: Renovate PR updates growthbook/proxy from v1.3.5 to v1.4.0 (minor). The source file and expected platform stack are updated, but infrastructure.yml and observability.yml are also listed as changed without any corresponding source Compose or fragment changes. This indicates potential stack drift or unintended regeneration artifacts. Growthbook is a stateful service requiring extra scrutiny, and no release notes are available to verify the absence of breaking changes.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.