Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update aws-java-sdk-v2 monorepo to v2.33.4 (software.amazon.awssdk:ssm, software.amazon.awssdk:sts)
• Update dependency @babel/eslint-parser to v7.28.4
• Update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.4.2
• Update dependency go to v1.25.1
• Update dependency org.projectlombok:lombok to v1.18.40
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.13
• Update jeroenwillemsen/wrongsecrets Docker tag to v1.12.7
• Update dependency eslint to v9.35.0
• Update dependency io.netty:netty-bom to v4.2.5.Final
• Update docker/dockerfile Docker tag to v1.18
• Update go (cloud.google.com/go, cloud.google.com/go/compute, github.com/zclconf/go-cty, golang.org/x/oauth2, golang.org/x/sync, golang.org/x/sys, golang.org/x/time)
• Update pre-commit (eslint/eslint, renovatebot/pre-commit-hooks)
• Update Terraform azurerm to v4.43.0
• Update GitHub Actions (major) (actions/github-script, actions/setup-node, actions/setup-python)
• Update module github.com/apparentlymart/go-textseg/v15 to v16

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update Terraform terraform-aws-modules/eks/aws to v20.37.2
• Update terraform-aws (major) (aws, terraform-aws-modules/eks/aws, terraform-aws-modules/iam/aws, terraform-aws-modules/vpc/aws)
• Update terraform-gcp to v7 (major) (google, google-beta)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

• bellsoft/liberica-openjre-debian 23.0.2-9-cds
• eclipse-temurin 23.0.2_7-jre-alpine-3.21

Dockerfile_webdesktop

• lscr.io/linuxserver/webtop 4.16-r0-ls95

Dockerfile_webdesktopk8s

• lscr.io/linuxserver/webtop 4.16-r0-ls95

Dockerfile.web

• jeroenwillemsen/wrongsecrets 1.12.6-no-vault

k8s/challenge53/Dockerfile

• ubuntu plucky-20250730

k8s/challenge53/Dockerfile.debug

• ubuntu plucky-20250730

src/main/resources/challenges/challenge-51/Dockerfile_challenge51

• docker/dockerfile 1.17

github-actions

.github/workflows/challenge13.yml

• actions/checkout v5

.github/workflows/codeclimate_standalone.yml

• actions/checkout v5
• erzz/codeclimate-standalone v0.0.5
• actions/upload-artifact v4

.github/workflows/codeql-analysis.yml

• actions/checkout v5
• github/codeql-action v3
• actions/setup-java v5
• github/codeql-action v3

.github/workflows/container_test.yml

• actions/checkout v5
• actions/setup-java v5
• actions/upload-artifact v4
• actions/checkout v5

.github/workflows/container-alts-test.yml

• actions/checkout v5

.github/workflows/dast-zap-test.yml

• actions/checkout v5
• actions/setup-java v5
• zaproxy/action-baseline v0.14.0

.github/workflows/desktop-container-publish.yml

• actions/checkout v5
• actions/setup-java v5
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6

.github/workflows/github-pages-preview.yml

• actions/checkout v5
• actions/setup-java v5
• actions/configure-pages v5
• actions/upload-pages-artifact v4
• actions/deploy-pages v4
• actions/github-script v7
• actions/checkout v5
• actions/configure-pages v5
• actions/upload-pages-artifact v4
• actions/deploy-pages v4
• actions/github-script v7

.github/workflows/heroku_tests.yml

• actions/checkout v5
• actions/upload-artifact v4

.github/workflows/java_swagger_doc.yml

• actions/checkout v5
• actions/setup-java v5
• actions/upload-artifact v4
• actions/upload-artifact v4

.github/workflows/link_checker.yml

• actions/checkout v5
• lycheeverse/lychee-action v2.6.1

.github/workflows/main.yml

• actions/checkout v5
• actions/setup-java v5
• actions/checkout v5
• actions/setup-java v5
• actions/checkout v5
• actions/setup-java v5
• actions/upload-artifact v4

.github/workflows/master-container-publish.yml

• actions/checkout v5
• actions/setup-java v5
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6

.github/workflows/minikube-k8s-test.yml

• actions/checkout v5

.github/workflows/minikube-vault-test.yml

• actions/checkout v5
• eLco/setup-vault v1.0.3
• azure/setup-helm v4
• actions/checkout v5
• eLco/setup-vault v1.0.3
• azure/setup-helm v4
• actions/upload-artifact v4

.github/workflows/pr-preview.yml

• actions/checkout v5
• actions/setup-java v5
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6
• actions/upload-artifact v4
• actions/github-script v7
• actions/checkout v5
• actions/checkout v5
• actions/setup-java v5
• actions/setup-java v5
• actions/setup-node v4
• actions/upload-artifact v4
• actions/github-script v7
• node 24

.github/workflows/pre-commit.yml

• actions/checkout v5
• actions/setup-python v5
• actions/setup-node v4
• actions/setup-java v5
• actions/cache v4
• hashicorp/setup-terraform v3
• terraform-linters/setup-tflint v5
• pre-commit/action v3.0.1
• pre-commit-ci/lite-action v1.1.0
• python 3.13
• node 24

.github/workflows/project-management.yml

.github/workflows/scanner-comparison.yml

• actions/checkout v5
• actions/checkout v5
• actions/checkout v5
• actions/setup-python v5
• actions/checkout v5
• actions/checkout v5
• actions/setup-python v5
• actions/checkout v5
• actions/setup-python v5
• actions/checkout v5
• actions/setup-python v5
• python 3.13
• python 3.13
• python 3.13
• python 3.13

.github/workflows/scanners.yml

• actions/checkout v5

.github/workflows/terraform.yml

• actions/checkout v5
• hashicorp/setup-terraform v3

.github/workflows/version-sync-check.yml

• actions/checkout v5
• actions/setup-java v5
• actions/github-script v7

.github/workflows/visual-diff.yml

• actions/checkout v5
• actions/checkout v5
• actions/setup-java v5
• actions/setup-java v5
• actions/setup-node v4
• actions/upload-artifact v4
• actions/github-script v7
• node 24

gomod

aws/go.mod

• go 1.23.0
• go 1.25.0
• github.com/gruntwork-io/terratest v0.50.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.26.0
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.14.1
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.16.4
• golang.org/x/crypto v0.41.0
• golang.org/x/mod v0.27.0
• golang.org/x/net v0.43.0
• golang.org/x/sync v0.16.0
• golang.org/x/sys v0.35.0
• golang.org/x/text v0.28.0
• golang.org/x/tools v0.36.0
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

azure/go.mod

• go 1.24.0
• go 1.25.0
• github.com/gruntwork-io/terratest v0.50.0
• cel.dev/expr v0.24.0
• cloud.google.com/go v0.121.6
• cloud.google.com/go/auth v0.16.5
• cloud.google.com/go/auth/oauth2adapt v0.2.8
• cloud.google.com/go/compute v1.44.0
• cloud.google.com/go/compute/metadata v0.8.0
• cloud.google.com/go/iam v1.5.2
• cloud.google.com/go/monitoring v1.24.2
• cloud.google.com/go/storage v1.56.1
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.53.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.53.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v13 v13.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/aws/aws-sdk-go v1.55.8
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/census-instrumentation/opencensus-proto v0.4.1
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/cncf/xds/go v0.0.0-20250501225837-2ac532fd4443@2ac532fd4443
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/envoyproxy/go-control-plane v0.13.4
• github.com/envoyproxy/protoc-gen-validate v1.2.1
• github.com/felixge/httpsnoop v1.0.4
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/stdr v1.2.2
• github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8
• github.com/golang/protobuf v1.5.4
• github.com/google/go-cmp v0.7.0
• github.com/google/s2a-go v0.1.9
• github.com/google/uuid v1.6.0
• github.com/googleapis/enterprise-certificate-proxy v0.3.6
• github.com/googleapis/gax-go/v2 v2.15.0
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.26.0
• github.com/jinzhu/copier v0.4.0
• github.com/jmespath/go-jmespath v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/planetscale/vtprotobuf v0.6.1-0.20250313105119-ba97887b0a25@ba97887b0a25
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.16.4
• go.opencensus.io v0.24.0
• go.opentelemetry.io/contrib/detectors/gcp v1.38.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0
• go.opentelemetry.io/otel v1.38.0
• go.opentelemetry.io/otel/metric v1.38.0
• go.opentelemetry.io/otel/sdk v1.38.0
• go.opentelemetry.io/otel/sdk/metric v1.38.0
• go.opentelemetry.io/otel/trace v1.38.0
• golang.org/x/crypto v0.41.0
• golang.org/x/mod v0.27.0
• golang.org/x/net v0.43.0
• golang.org/x/oauth2 v0.30.0
• golang.org/x/sync v0.16.0
• golang.org/x/sys v0.35.0
• golang.org/x/text v0.28.0
• golang.org/x/time v0.12.0
• golang.org/x/tools v0.36.0
• golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da@7835f813f4da
• google.golang.org/api v0.248.0
• google.golang.org/appengine/v2 v2.0.6
• google.golang.org/genproto v0.0.0-20250826171959-ef028d996bc1@ef028d996bc1
• google.golang.org/genproto/googleapis/api v0.0.0-20250826171959-ef028d996bc1@ef028d996bc1
• google.golang.org/genproto/googleapis/rpc v0.0.0-20250826171959-ef028d996bc1@ef028d996bc1
• google.golang.org/grpc v1.75.0
• google.golang.org/grpc/stats/opentelemetry v0.0.0-20241028142157-ada6787961b3@ada6787961b3
• google.golang.org/protobuf v1.36.8
• gopkg.in/yaml.v3 v3.0.1

gcp/go.mod

• go 1.23.0
• go 1.25.0
• github.com/gruntwork-io/terratest v0.50.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.26.0
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.14.1
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.16.4
• golang.org/x/crypto v0.41.0
• golang.org/x/mod v0.27.0
• golang.org/x/net v0.43.0
• golang.org/x/sync v0.16.0
• golang.org/x/sys v0.35.0
• golang.org/x/text v0.28.0
• golang.org/x/tools v0.36.0
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

maven

pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.5
• org.springframework.cloud:spring-cloud-dependencies 2025.0.0
• com.google.cloud:spring-cloud-gcp-dependencies 7.3.0
• com.azure.spring:spring-cloud-azure-dependencies 5.23.0
• io.netty:netty-bom 4.1.118.Final
• org.projectlombok:lombok 1.18.38
• nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.4.0
• org.thymeleaf.extras:thymeleaf-extras-springsecurity6 3.1.3.RELEASE
• org.testcontainers:testcontainers 1.21.3
• software.amazon.awssdk:sts 2.33.0
• software.amazon.awssdk:ssm 2.33.0
• org.linguafranca.pwdb:KeePassJava2 2.2.4
• org.asciidoctor:asciidoctorj-api 3.0.0
• org.asciidoctor:asciidoctorj 3.0.0
• org.jruby:jruby-complete 10.0.2.0
• org.jruby:jruby 10.0.2.0
• org.jruby:jruby-stdlib 10.0.2.0
• org.jruby:jruby-base 10.0.2.0
• org.webjars:bootstrap 5.3.8
• org.webjars.npm:github-buttons 2.14.1
• org.webjars:datatables 2.3.2
• org.webjars:jquery 3.7.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.12
• uk.org.webcompere:system-stubs-jupiter 2.1.8
• io.gatling.highcharts:gatling-charts-highcharts 3.14.3
• org.cyclonedx:cyclonedx-core-java 10.2.1
• org.owasp:dependency-check-maven 12.1.3
• com.tngtech.archunit:archunit-junit5 1.4.1
• com.github.spotbugs:spotbugs-annotations 4.9.4
• io.github.wimdeblauwe:testcontainers-cypress 1.9.1
• org.springframework.vault:spring-vault-core 3.2.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 11.0.1
• com.github.spotbugs:spotbugs-maven-plugin 4.9.4.0
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
• com.github.spotbugs:spotbugs 4.9.4
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.asciidoctor:asciidoctor-maven-plugin 3.2.0
• org.cyclonedx:cyclonedx-maven-plugin 2.9.1
• org.owasp:dependency-check-maven 12.1.3
• com.github.eirslett:frontend-maven-plugin 1.15.1
• org.springdoc:springdoc-openapi-maven-plugin 1.5
• org.codehaus.mojo:exec-maven-plugin 3.5.1
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0
• org.codehaus.mojo:tidy-maven-plugin 1.4.0
• com.diffplug.spotless:spotless-maven-plugin 2.46.1
• io.gatling:gatling-maven-plugin 4.20.2
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.11

npm

js/package.json

• minimatch >=10.0.1
• minimatch >=10.0.1
• javascript-obfuscator ^4.1.1
• node >=20.0.0

package.json

• @babel/eslint-parser ^7.25.9
• @babel/preset-env ^7.26.0
• @commitlint/config-conventional ^19.5.0
• @eslint/eslintrc ^3.1.0
• eslint ^9.11.1
• eslint-plugin-chai-friendly ^1.0.1
• eslint-plugin-cypress ^5.0.0
• eslint-plugin-mocha ^11.0.0
• globals ^16.0.0
• node >=20.0.0

pre-commit

.pre-commit-config.yaml

• renovatebot/pre-commit-hooks 41.92.1
• eslint/eslint v9.34.0
• pre-commit/pre-commit-hooks v6.0.0
• antonbabenko/pre-commit-terraform v1.100.0
• alessandrojcm/commitlint-pre-commit-hook v9.22.0
• ejba/pre-commit-maven v0.3.4
• psf/black 25.1.0

regex

.github/scripts/docker-create.sh

• OWASP/wrongsecrets-binaries 0.2.1

.github/workflows/codeql-analysis.yml

• node 23

.github/workflows/container_test.yml

• node 23

.github/workflows/dast-zap-test.yml

• node 23

.github/workflows/desktop-container-publish.yml

• node 23

.github/workflows/github-pages-preview.yml

• node 23

.github/workflows/java_swagger_doc.yml

• node 23

.github/workflows/main.yml

• node 23
• node 23
• node 23

.github/workflows/master-container-publish.yml

• node 23

.github/workflows/pr-preview.yml

• node 24
• node 23
• node 23
• node 23

.github/workflows/pre-commit.yml

• node 24
• node 23

.github/workflows/scanner-comparison.yml

.github/workflows/version-sync-check.yml

• node 23

.github/workflows/visual-diff.yml

• node 24
• node 23
• node 23

aws/k8s-aws-alb-script.sh

• kubernetes-sigs/aws-alb-ingress-controller v2.13.4

Dockerfile

• bellsoft/liberica-openjre-debian 23.0.2-9-cds
• eclipse-temurin 23.0.2_7-jre-alpine-3.21

terraform

aws/irsa.tf

• terraform-aws-modules/iam/aws ~> 5.5

aws/main.tf

• terraform-aws-modules/eks/aws 20.37.1
• terraform-aws-modules/vpc/aws ~> 5.21.0

aws/shared-state/main.tf

• aws ~> 5.0
• hashicorp/terraform ~> 1.1

aws/versions.tf

• aws ~> 5.100.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.1

azure/main.tf

azure/providers.tf

azure/shared-state/main.tf

• azurerm ~> 4.3
• random ~> 3.0
• hashicorp/terraform ~> 1.1

azure/versions.tf

• azurerm ~> 4.42.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.1

gcp/main.tf

gcp/shared-state/main.tf

• google ~> 6.5
• random ~> 3.0
• hashicorp/terraform ~> 1.1

gcp/versions.tf

• google ~> 6.49.0
• google-beta ~> 6.49.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.1

---

• Check this box to trigger a request for Renovate to run again on this repository