Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency go to v1.25.5
• chore(deps): update terraform-aws (aws, terraform-aws-modules/eks/aws, terraform-aws-modules/vpc/aws)
• chore(deps): update terraform-gcp to ~> 7.12.0 (google, google-beta)
• chore(deps): update zaproxy/action-baseline action to v0.15.0
• fix(deps): update aws-java-sdk-v2 monorepo to v2.40.0 (software.amazon.awssdk:ssm, software.amazon.awssdk:sts)
• fix(deps): update dependency com.google.cloud:spring-cloud-gcp-dependencies to v7.4.1
• fix(deps): update dependency io.netty:netty-bom to v4.2.7.final
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025.1.0
• fix(deps): update go (cel.dev/expr, cloud.google.com/go/compute, cloud.google.com/go/storage, github.com/cncf/xds/go, github.com/envoyproxy/go-control-plane, github.com/googleapis/enterprise-certificate-proxy, github.com/gruntwork-io/terratest, github.com/hashicorp/go-version, github.com/klauspost/compress, golang.org/x/mod, golang.org/x/oauth2, golang.org/x/tools, google.golang.org/api, google.golang.org/genproto, google.golang.org/genproto/googleapis/api, google.golang.org/genproto/googleapis/rpc, google.golang.org/grpc)
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v12
• chore(deps): update dependency org.testcontainers:testcontainers to v2
• chore(deps): update github actions (major) (actions/checkout, actions/upload-artifact)
• chore(deps): update module github.com/apparentlymart/go-textseg/v15 to v16
• chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v42
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v4
• fix(deps): update dependency org.springframework.vault:spring-vault-core to v4

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @eslint/eslintrc to v3.3.3
• chore(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.8.2
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.8
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3.1.0
• chore(deps): update dependency javascript-obfuscator to v4.2.0
• chore(deps): update dependency python to 3.14
• chore(deps): update lycheeverse/lychee-action action to v2.7.0
• chore(deps): update pre-commit (antonbabenko/pre-commit-terraform, eslint/eslint, psf/black, renovatebot/pre-commit-hooks)
• chore(deps): update terraform azurerm to v4.54.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

• bellsoft/liberica-openjre-debian 25-cds
• eclipse-temurin 25-jre-alpine

Dockerfile_webdesktop

Dockerfile_webdesktopk8s

Dockerfile.web

• jeroenwillemsen/wrongsecrets 1.12.9-no-vault

k8s/challenge53/Dockerfile

• ubuntu plucky-20251001

k8s/challenge53/Dockerfile.debug

• ubuntu plucky-20251001

src/main/resources/challenges/challenge-51/Dockerfile_challenge51

• docker/dockerfile 1.20

github-actions

.github/workflows/challenge13.yml

• actions/checkout v5

.github/workflows/codeclimate_standalone.yml

• actions/checkout v5
• erzz/codeclimate-standalone v0.0.5
• actions/upload-artifact v4

.github/workflows/codeql-analysis.yml

• actions/checkout v5
• github/codeql-action v4
• actions/setup-java v5
• github/codeql-action v4

.github/workflows/container_test.yml

• actions/checkout v5
• actions/setup-java v5
• actions/upload-artifact v4
• actions/checkout v5

.github/workflows/container-alts-test.yml

• actions/checkout v5

.github/workflows/dast-zap-test.yml

• actions/checkout v5
• actions/setup-java v5
• zaproxy/action-baseline v0.14.0

.github/workflows/desktop-container-publish.yml

• actions/checkout v5
• actions/setup-java v5
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6

.github/workflows/github-pages-preview.yml

• actions/checkout v5
• actions/setup-java v5
• actions/configure-pages v5
• actions/upload-pages-artifact v4
• actions/deploy-pages v4
• actions/github-script v8
• actions/checkout v5
• actions/configure-pages v5
• actions/upload-pages-artifact v4
• actions/deploy-pages v4
• actions/github-script v8

.github/workflows/heroku_tests.yml

• actions/checkout v5
• actions/upload-artifact v4

.github/workflows/java_swagger_doc.yml

• actions/checkout v5
• actions/setup-java v5
• actions/upload-artifact v4
• actions/upload-artifact v4

.github/workflows/link_checker.yml

• actions/checkout v5
• lycheeverse/lychee-action v2.6.1

.github/workflows/main.yml

• actions/checkout v5
• actions/setup-java v5
• actions/checkout v5
• actions/setup-java v5
• actions/checkout v5
• actions/setup-java v5
• actions/upload-artifact v4

.github/workflows/master-container-publish.yml

• actions/checkout v5
• actions/setup-java v5
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6

.github/workflows/minikube-k8s-test.yml

• actions/checkout v5

.github/workflows/minikube-vault-test.yml

• actions/checkout v5
• eLco/setup-vault v1.0.3
• azure/setup-helm v4
• actions/checkout v5
• eLco/setup-vault v1.0.3
• azure/setup-helm v4
• actions/upload-artifact v4

.github/workflows/pr-preview.yml

• actions/checkout v5
• actions/setup-java v5
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6
• actions/upload-artifact v4
• actions/github-script v8
• actions/checkout v5
• actions/checkout v5
• actions/setup-java v5
• actions/setup-java v5
• actions/setup-node v6
• actions/upload-artifact v4
• actions/github-script v8
• node 24

.github/workflows/pre-commit.yml

• actions/checkout v5
• actions/setup-python v6
• actions/setup-node v6
• actions/setup-java v5
• actions/cache v4
• hashicorp/setup-terraform v3
• terraform-linters/setup-tflint v6
• pre-commit/action v3.0.1
• pre-commit-ci/lite-action v1.1.0
• python 3.13
• node 24

.github/workflows/project-management.yml

.github/workflows/scanner-comparison.yml

• actions/checkout v5
• actions/checkout v5
• actions/checkout v5
• actions/setup-python v6
• actions/checkout v5
• actions/checkout v5
• actions/setup-python v6
• actions/checkout v5
• actions/setup-python v6
• actions/checkout v5
• actions/setup-python v6
• python 3.13
• python 3.13
• python 3.13
• python 3.13

.github/workflows/scanners.yml

• actions/checkout v5

.github/workflows/terraform.yml

• actions/checkout v5
• hashicorp/setup-terraform v3

.github/workflows/version-sync-check.yml

• actions/checkout v5
• actions/setup-java v5
• actions/github-script v8

.github/workflows/visual-diff.yml

• actions/checkout v5
• actions/checkout v5
• actions/setup-java v5
• actions/setup-java v5
• actions/setup-node v6
• actions/upload-artifact v4
• actions/github-script v8
• node 24

gomod

aws/go.mod

• go 1.24.0
• go 1.25.4
• github.com/gruntwork-io/terratest v0.51.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.27.2
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.14.1
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.17.0
• golang.org/x/crypto v0.45.0
• golang.org/x/mod v0.29.0
• golang.org/x/net v0.47.0
• golang.org/x/sync v0.18.0
• golang.org/x/sys v0.38.0
• golang.org/x/text v0.31.0
• golang.org/x/tools v0.38.0
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

azure/go.mod

• go 1.24.0
• go 1.25.4
• github.com/gruntwork-io/terratest v0.51.0
• cel.dev/expr v0.24.0
• cloud.google.com/go v0.123.0
• cloud.google.com/go/auth v0.17.0
• cloud.google.com/go/auth/oauth2adapt v0.2.8
• cloud.google.com/go/compute v1.49.0
• cloud.google.com/go/compute/metadata v0.9.0
• cloud.google.com/go/iam v1.5.3
• cloud.google.com/go/monitoring v1.24.3
• cloud.google.com/go/storage v1.57.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.54.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v13 v13.0.0
• github.com/apparentlymart/go-textseg/v15 v15.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/aws/aws-sdk-go v1.55.8
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/census-instrumentation/opencensus-proto v0.4.1
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/cncf/xds/go v0.0.0-20251014123835-2ee22ca58382@2ee22ca58382
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/envoyproxy/go-control-plane v0.13.4
• github.com/envoyproxy/protoc-gen-validate v1.2.1
• github.com/felixge/httpsnoop v1.0.4
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/stdr v1.2.2
• github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8
• github.com/golang/protobuf v1.5.4
• github.com/google/go-cmp v0.7.0
• github.com/google/s2a-go v0.1.9
• github.com/google/uuid v1.6.0
• github.com/googleapis/enterprise-certificate-proxy v0.3.6
• github.com/googleapis/gax-go/v2 v2.15.0
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.27.2
• github.com/jinzhu/copier v0.4.0
• github.com/jmespath/go-jmespath v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/planetscale/vtprotobuf v0.6.1-0.20250313105119-ba97887b0a25@ba97887b0a25
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.17.0
• go.opencensus.io v0.24.0
• go.opentelemetry.io/contrib/detectors/gcp v1.38.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0
• go.opentelemetry.io/otel v1.38.0
• go.opentelemetry.io/otel/metric v1.38.0
• go.opentelemetry.io/otel/sdk v1.38.0
• go.opentelemetry.io/otel/sdk/metric v1.38.0
• go.opentelemetry.io/otel/trace v1.38.0
• golang.org/x/crypto v0.45.0
• golang.org/x/mod v0.29.0
• golang.org/x/net v0.47.0
• golang.org/x/oauth2 v0.32.0
• golang.org/x/sync v0.18.0
• golang.org/x/sys v0.38.0
• golang.org/x/text v0.31.0
• golang.org/x/time v0.14.0
• golang.org/x/tools v0.38.0
• golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da@7835f813f4da
• google.golang.org/api v0.252.0
• google.golang.org/appengine/v2 v2.0.6
• google.golang.org/genproto v0.0.0-20251014184007-4626949a642f@4626949a642f
• google.golang.org/genproto/googleapis/api v0.0.0-20251014184007-4626949a642f@4626949a642f
• google.golang.org/genproto/googleapis/rpc v0.0.0-20251014184007-4626949a642f@4626949a642f
• google.golang.org/grpc v1.76.0
• google.golang.org/grpc/stats/opentelemetry v0.0.0-20241028142157-ada6787961b3@ada6787961b3
• google.golang.org/protobuf v1.36.10
• gopkg.in/yaml.v3 v3.0.1

gcp/go.mod

• go 1.24.0
• go 1.25.4
• github.com/gruntwork-io/terratest v0.51.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.27.2
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.14.1
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.17.0
• golang.org/x/crypto v0.45.0
• golang.org/x/mod v0.29.0
• golang.org/x/net v0.47.0
• golang.org/x/sync v0.18.0
• golang.org/x/sys v0.38.0
• golang.org/x/text v0.31.0
• golang.org/x/tools v0.38.0
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

maven

pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.7
• org.springframework.cloud:spring-cloud-dependencies 2025.0.0
• com.google.cloud:spring-cloud-gcp-dependencies 7.3.2
• com.azure.spring:spring-cloud-azure-dependencies 6.0.0
• io.netty:netty-bom 4.1.118.Final
• org.projectlombok:lombok 1.18.42
• nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.4.0
• org.thymeleaf.extras:thymeleaf-extras-springsecurity6 3.1.3.RELEASE
• org.testcontainers:testcontainers 1.21.3
• software.amazon.awssdk:sts 2.35.8
• software.amazon.awssdk:ssm 2.35.8
• org.linguafranca.pwdb:KeePassJava2 2.2.4
• org.asciidoctor:asciidoctorj-api 3.0.1
• org.asciidoctor:asciidoctorj 3.0.1
• org.jruby:jruby-complete 10.0.2.0
• org.jruby:jruby 10.0.2.0
• org.jruby:jruby-stdlib 10.0.2.0
• org.jruby:jruby-base 10.0.2.0
• org.webjars:bootstrap 5.3.8
• org.webjars.npm:github-buttons 2.14.1
• org.webjars:datatables 2.3.2
• org.webjars:jquery 3.7.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.14
• uk.org.webcompere:system-stubs-jupiter 2.1.8
• io.gatling.highcharts:gatling-charts-highcharts 3.14.9
• org.cyclonedx:cyclonedx-core-java 11.0.1
• org.owasp:dependency-check-maven 12.1.9
• com.tngtech.archunit:archunit-junit5 1.4.1
• com.github.spotbugs:spotbugs-annotations 4.9.8
• io.github.wimdeblauwe:testcontainers-cypress 1.9.1
• org.springframework.vault:spring-vault-core 3.2.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 11.1.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.1
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
• com.github.spotbugs:spotbugs 4.9.8
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.asciidoctor:asciidoctor-maven-plugin 3.2.0
• org.cyclonedx:cyclonedx-maven-plugin 2.9.1
• org.owasp:dependency-check-maven 12.1.9
• com.github.eirslett:frontend-maven-plugin 1.15.4
• org.springdoc:springdoc-openapi-maven-plugin 1.5
• org.codehaus.mojo:exec-maven-plugin 3.6.2
• org.apache.maven.plugins:maven-compiler-plugin 3.14.1
• org.codehaus.mojo:tidy-maven-plugin 1.4.0
• com.diffplug.spotless:spotless-maven-plugin 3.0.0
• io.gatling:gatling-maven-plugin 4.20.8
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.11

mvnw

• maven-wrapper 3.3.4

mvnw.cmd

• maven-wrapper 3.3.4

npm

js/package.json

• minimatch >=10.0.1
• minimatch >=10.0.1
• javascript-obfuscator ^4.1.1
• node >=20.0.0

package.json

• @babel/eslint-parser ^7.25.9
• @babel/preset-env ^7.26.0
• @commitlint/config-conventional ^20.0.0
• @eslint/eslintrc ^3.1.0
• eslint ^9.11.1
• eslint-plugin-chai-friendly ^1.0.1
• eslint-plugin-cypress ^5.0.0
• eslint-plugin-mocha ^11.0.0
• globals ^16.0.0
• node >=20.0.0

pre-commit

.pre-commit-config.yaml

• renovatebot/pre-commit-hooks 41.149.2
• eslint/eslint v9.37.0
• pre-commit/pre-commit-hooks v6.0.0
• antonbabenko/pre-commit-terraform v1.102.0
• alessandrojcm/commitlint-pre-commit-hook v9.23.0
• ejba/pre-commit-maven v0.3.4
• psf/black 25.9.0

regex

.github/scripts/docker-create.sh

• OWASP/wrongsecrets-binaries 0.2.1

.github/workflows/codeql-analysis.yml

• node 25

.github/workflows/container_test.yml

• node 25

.github/workflows/dast-zap-test.yml

• node 25

.github/workflows/desktop-container-publish.yml

• node 25

.github/workflows/github-pages-preview.yml

• node 25

.github/workflows/java_swagger_doc.yml

• node 25

.github/workflows/main.yml

• node 25
• node 25
• node 25

.github/workflows/master-container-publish.yml

• node 25

.github/workflows/pr-preview.yml

• node 24
• node 25
• node 25
• node 25

.github/workflows/pre-commit.yml

• node 24
• node 25

.github/workflows/scanner-comparison.yml

.github/workflows/version-sync-check.yml

• node 25

.github/workflows/visual-diff.yml

• node 24
• node 25
• node 25

Dockerfile

• bellsoft/liberica-openjre-debian 25-cds
• eclipse-temurin 25-jre-alpine

terraform

aws/irsa.tf

• terraform-aws-modules/iam/aws ~> 6.0

aws/main.tf

• terraform-aws-modules/eks/aws 21.4.0
• terraform-aws-modules/vpc/aws ~> 6.4.0

aws/shared-state/main.tf

• aws ~> 6.0
• hashicorp/terraform ~> 1.1

aws/versions.tf

• aws ~> 6.16.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.6, >= 1.6

azure/main.tf

azure/providers.tf

azure/shared-state/main.tf

• azurerm ~> 4.3
• random ~> 3.0
• hashicorp/terraform ~> 1.1

azure/versions.tf

• azurerm ~> 4.48.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.1

gcp/main.tf

gcp/shared-state/main.tf

• google ~> 7.0
• random ~> 3.0
• hashicorp/terraform ~> 1.1

gcp/versions.tf

• google ~> 7.7.0
• google-beta ~> 7.7.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.1

---

• Check this box to trigger a request for Renovate to run again on this repository