Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update aws-java-sdk-v2 monorepo to v2.42.20 (software.amazon.awssdk:ssm, software.amazon.awssdk:sts)
• Update dependency @babel/preset-env to v7.29.2
• Update dependency eslint-plugin-chai-friendly to v1.1.1
• Update dependency io.gatling:gatling-maven-plugin to v4.21.5
• Update dependency io.netty:netty-bom to v4.2.11.Final
• Update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.4
• Update go (github.com/klauspost/compress, github.com/rogpeppe/go-internal, golang.org/x/crypto, golang.org/x/mod, golang.org/x/net, golang.org/x/sync, golang.org/x/sys, golang.org/x/text, golang.org/x/tools)
• Update jruby.version to v10.0.4.0 (org.jruby:jruby-base, org.jruby:jruby-stdlib, org.jruby:jruby, org.jruby:jruby-complete)
• Update dependency com.azure.spring:spring-cloud-azure-dependencies to v7.1.0
• Update dependency com.diffplug.spotless:spotless-maven-plugin to v3.4.0
• Update dependency com.google.cloud:libraries-bom to v26.78.0
• Update docker/dockerfile Docker tag to v1.22
• Update Terraform aws to v6.37.0
• Update Terraform azurerm to v4.65.0
• Update terraform-gcp to ~> 7.25.0 (google, google-beta)
• Update azure/setup-helm action to v5
• Update bellsoft/liberica-openjre-debian Docker tag to v26
• Update dependency javascript-obfuscator to v5
• Update dependency nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect to v4
• Update dependency org.webjars:jquery to v4
• Update Docker Actions (major) (docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
• Update eslint (major) (eslint, eslint-plugin-cypress)
• Update GitHub Actions (major) (actions/cache, actions/checkout, actions/upload-artifact)
• Update hashicorp/setup-terraform action to v4
• Update module github.com/apparentlymart/go-textseg/v15 to v16
• Update pre-commit (major) (eslint/eslint, psf/black, renovatebot/pre-commit-hooks)
• Update testcontainers-java monorepo to v2 (major) (org.testcontainers:testcontainers, org.testcontainers:testcontainers-bom)
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

dockerfile (7)

Dockerfile (2)

• bellsoft/liberica-openjre-debian 25-cds → [Updates: 26-cds]
• eclipse-temurin 25.0.2_10-jre-alpine

Dockerfile_webdesktop

Dockerfile_webdesktopk8s

Dockerfile.web (1)

• jeroenwillemsen/wrongsecrets 1.13.2-no-vault

k8s/challenge53/Dockerfile (1)

• ubuntu plucky-20251001

k8s/challenge53/Dockerfile.debug (1)

• ubuntu plucky-20251001

src/main/resources/challenges/challenge-51/Dockerfile_challenge51 (1)

• docker/dockerfile 1.21 → [Updates: 1.22]

github-actions (23)

.github/workflows/challenge13.yml (1)

• actions/checkout v5 → [Updates: v6]

.github/workflows/codeclimate_standalone.yml (3)

• actions/checkout v5 → [Updates: v6]
• erzz/codeclimate-standalone v0.0.5
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/codeql-analysis.yml (4)

• actions/checkout v5 → [Updates: v6]
• github/codeql-action v4
• actions/setup-java v5
• github/codeql-action v4

.github/workflows/container_test.yml (4)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/upload-artifact v4 → [Updates: v7]
• actions/checkout v5 → [Updates: v6]

.github/workflows/container-alts-test.yml (1)

• actions/checkout v5 → [Updates: v6]

.github/workflows/dast-zap-test.yml (3)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• zaproxy/action-baseline v0.15.0

.github/workflows/desktop-container-publish.yml (6)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/metadata-action v5 → [Updates: v6]
• docker/build-push-action v6 → [Updates: v7]

.github/workflows/github-pages-preview.yml (11)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/configure-pages v5
• actions/upload-pages-artifact v4
• actions/deploy-pages v4
• actions/github-script v8
• actions/checkout v5 → [Updates: v6]
• actions/configure-pages v5
• actions/upload-pages-artifact v4
• actions/deploy-pages v4
• actions/github-script v8

.github/workflows/heroku_tests.yml (2)

• actions/checkout v5 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/java_swagger_doc.yml (4)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/upload-artifact v4 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/link_checker.yml (2)

• actions/checkout v5 → [Updates: v6]
• lycheeverse/lychee-action v2.8.0

.github/workflows/main.yml (7)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/master-container-publish.yml (6)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/metadata-action v5 → [Updates: v6]
• docker/build-push-action v6 → [Updates: v7]

.github/workflows/minikube-k8s-test.yml (1)

• actions/checkout v5 → [Updates: v6]

.github/workflows/minikube-vault-test.yml (7)

• actions/checkout v5 → [Updates: v6]
• eLco/setup-vault v1.0.3
• azure/setup-helm v4 → [Updates: v5]
• actions/checkout v5 → [Updates: v6]
• eLco/setup-vault v1.0.3
• azure/setup-helm v4 → [Updates: v5]
• actions/upload-artifact v4 → [Updates: v7]

.github/workflows/pr-preview.yml (16)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]
• docker/metadata-action v5 → [Updates: v6]
• docker/build-push-action v6 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]
• actions/github-script v8
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/setup-java v5
• actions/setup-node v6
• actions/upload-artifact v4 → [Updates: v7]
• actions/github-script v8
• node 24

.github/workflows/pre-commit.yml (11)

• actions/checkout v5 → [Updates: v6]
• actions/setup-python v6
• actions/setup-node v6
• actions/setup-java v5
• actions/cache v4 → [Updates: v5]
• hashicorp/setup-terraform v3 → [Updates: v4]
• terraform-linters/setup-tflint v6
• pre-commit/action v3.0.1
• pre-commit-ci/lite-action v1.1.0
• python 3.14
• node 24

.github/workflows/project-management.yml

.github/workflows/scanner-comparison.yml (15)

• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/setup-python v6
• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/setup-python v6
• actions/checkout v5 → [Updates: v6]
• actions/setup-python v6
• actions/checkout v5 → [Updates: v6]
• actions/setup-python v6
• python 3.14
• python 3.14
• python 3.14
• python 3.14

.github/workflows/scanners.yml (1)

• actions/checkout v5 → [Updates: v6]

.github/workflows/terraform.yml (2)

• actions/checkout v5 → [Updates: v6]
• hashicorp/setup-terraform v3 → [Updates: v4]

.github/workflows/version-sync-check.yml (3)

• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/github-script v8

.github/workflows/visual-diff.yml (8)

• actions/checkout v5 → [Updates: v6]
• actions/checkout v5 → [Updates: v6]
• actions/setup-java v5
• actions/setup-java v5
• actions/setup-node v6
• actions/upload-artifact v4 → [Updates: v7]
• actions/github-script v8
• node 24

gomod (3)

aws/go.mod (37)

• go 1.26
• go 1.26.1
• github.com/gruntwork-io/terratest v0.56.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0 → [Updates: v16.0.0]
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.8.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.27.2
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.4 → [Updates: v1.18.5]
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.14.1
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.18.0
• golang.org/x/crypto v0.48.0 → [Updates: v0.49.0]
• golang.org/x/mod v0.33.0 → [Updates: v0.34.0]
• golang.org/x/net v0.51.0 → [Updates: v0.52.0]
• golang.org/x/sync v0.19.0 → [Updates: v0.20.0]
• golang.org/x/sys v0.41.0 → [Updates: v0.42.0]
• golang.org/x/text v0.34.0 → [Updates: v0.35.0]
• golang.org/x/tools v0.42.0 → [Updates: v0.43.0]
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

azure/go.mod (36)

• go 1.26
• go 1.26.1
• github.com/gruntwork-io/terratest v0.56.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0 → [Updates: v16.0.0]
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.8.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.27.2
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.4 → [Updates: v1.18.5]
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.13.1 → [Updates: v1.14.1]
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.18.0
• golang.org/x/crypto v0.48.0 → [Updates: v0.49.0]
• golang.org/x/mod v0.33.0 → [Updates: v0.34.0]
• golang.org/x/sync v0.19.0 → [Updates: v0.20.0]
• golang.org/x/sys v0.41.0 → [Updates: v0.42.0]
• golang.org/x/text v0.34.0 → [Updates: v0.35.0]
• golang.org/x/tools v0.42.0 → [Updates: v0.43.0]
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

gcp/go.mod (37)

• go 1.26
• go 1.26.1
• github.com/gruntwork-io/terratest v0.56.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0 → [Updates: v16.0.0]
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.8.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.27.2
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.4 → [Updates: v1.18.5]
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.14.1
• github.com/stretchr/testify v1.11.1
• github.com/tmccombs/hcl2json v0.6.8
• github.com/ulikunitz/xz v0.5.15
• github.com/zclconf/go-cty v1.18.0
• golang.org/x/crypto v0.48.0 → [Updates: v0.49.0]
• golang.org/x/mod v0.33.0 → [Updates: v0.34.0]
• golang.org/x/net v0.51.0 → [Updates: v0.52.0]
• golang.org/x/sync v0.19.0 → [Updates: v0.20.0]
• golang.org/x/sys v0.41.0 → [Updates: v0.42.0]
• golang.org/x/text v0.34.0 → [Updates: v0.35.0]
• golang.org/x/tools v0.42.0 → [Updates: v0.43.0]
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

maven (1)

pom.xml (53)

• org.springframework.boot:spring-boot-starter-parent 4.0.3 → [Updates: 4.0.4]
• org.springframework.cloud:spring-cloud-dependencies 2025.1.1
• org.testcontainers:testcontainers-bom 1.21.4 → [Updates: 2.0.4]
• com.google.cloud:libraries-bom 26.76.0 → [Updates: 26.78.0]
• com.azure.spring:spring-cloud-azure-dependencies 7.0.0 → [Updates: 7.1.0]
• io.netty:netty-bom 4.2.10.Final → [Updates: 4.2.11.Final]
• org.projectlombok:lombok 1.18.44
• nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.4.0 → [Updates: 4.0.1]
• org.thymeleaf.extras:thymeleaf-extras-springsecurity6 3.1.3.RELEASE
• org.springframework.security:spring-security-config 7.0.4
• org.springframework.security:spring-security-web 7.0.4
• org.springframework.security:spring-security-test 7.0.4
• org.testcontainers:testcontainers 1.21.4 → [Updates: 2.0.4]
• software.amazon.awssdk:sts 2.42.13 → [Updates: 2.42.20]
• software.amazon.awssdk:ssm 2.42.13 → [Updates: 2.42.20]
• org.linguafranca.pwdb:KeePassJava2 2.2.4
• org.asciidoctor:asciidoctorj-api 3.0.1
• org.asciidoctor:asciidoctorj 3.0.1
• org.jruby:jruby-complete 10.0.3.0 → [Updates: 10.0.4.0]
• org.jruby:jruby 10.0.3.0 → [Updates: 10.0.4.0]
• org.jruby:jruby-stdlib 10.0.3.0 → [Updates: 10.0.4.0]
• org.jruby:jruby-base 10.0.3.0 → [Updates: 10.0.4.0]
• org.webjars:bootstrap 5.3.8
• org.webjars.npm:github-buttons 2.14.1
• org.webjars:datatables 2.3.7
• org.webjars:jquery 3.7.1 → [Updates: 4.0.0]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 3.0.2
• uk.org.webcompere:system-stubs-jupiter 2.1.8
• io.gatling.highcharts:gatling-charts-highcharts 3.15.0
• org.cyclonedx:cyclonedx-core-java 12.1.0
• org.owasp:dependency-check-maven 12.2.0
• com.tngtech.archunit:archunit-junit5 1.4.1
• com.github.spotbugs:spotbugs-annotations 4.9.8
• io.github.wimdeblauwe:testcontainers-cypress 1.10.0
• org.springframework.vault:spring-vault-core 4.0.1
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 13.3.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
• com.github.spotbugs:spotbugs 4.9.8
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.asciidoctor:asciidoctor-maven-plugin 3.2.0
• org.cyclonedx:cyclonedx-maven-plugin 2.9.1
• org.owasp:dependency-check-maven 12.2.0
• com.github.eirslett:frontend-maven-plugin 2.0.0
• org.springdoc:springdoc-openapi-maven-plugin 1.5
• org.codehaus.mojo:exec-maven-plugin 3.6.3
• org.apache.maven.plugins:maven-compiler-plugin 3.15.0
• org.codehaus.mojo:tidy-maven-plugin 1.4.0
• com.diffplug.spotless:spotless-maven-plugin 3.2.1 → [Updates: 3.4.0]
• io.gatling:gatling-maven-plugin 4.21.3 → [Updates: 4.21.5]
• org.apache.maven.plugins:maven-dependency-plugin 3.10.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.5

maven-wrapper (3)

.mvn/wrapper/maven-wrapper.properties (1)

• maven 3.9.14

mvnw (1)

• maven-wrapper 3.3.4

mvnw.cmd (1)

• maven-wrapper 3.3.4

npm (2)

js/package.json (4)

• minimatch >=10.0.1
• minimatch >=10.0.1
• javascript-obfuscator ^4.1.1 → [Updates: ^5.0.0]
• node >=20.0.0

package.json (10)

• @babel/eslint-parser ^7.25.9
• @babel/preset-env ^7.26.0 → [Updates: ^7.26.0]
• @commitlint/config-conventional ^20.0.0
• @eslint/eslintrc ^3.1.0
• eslint ^9.11.1 → [Updates: ^10.0.0]
• eslint-plugin-chai-friendly ^1.0.1 → [Updates: ^1.0.1]
• eslint-plugin-cypress ^5.0.0 → [Updates: ^6.0.0]
• eslint-plugin-mocha ^11.0.0
• globals ^17.0.0
• node >=22.0.0

pre-commit (1)

.pre-commit-config.yaml (7)

• renovatebot/pre-commit-hooks 42.95.1 → [Updates: 43.90.0]
• eslint/eslint v9.39.4 → [Updates: v10.1.0]
• pre-commit/pre-commit-hooks v6.0.0
• antonbabenko/pre-commit-terraform v1.105.0
• alessandrojcm/commitlint-pre-commit-hook v9.24.0
• ejba/pre-commit-maven v0.3.4
• psf/black 25.12.0 → [Updates: 26.3.1]

regex (15)

.github/scripts/docker-create.sh (1)

• OWASP/wrongsecrets-binaries 0.2.1

.github/workflows/codeql-analysis.yml (1)

• node 25

.github/workflows/container_test.yml (1)

• node 25

.github/workflows/dast-zap-test.yml (1)

• node 25

.github/workflows/desktop-container-publish.yml (1)

• node 25

.github/workflows/github-pages-preview.yml (1)

• node 25

.github/workflows/java_swagger_doc.yml (1)

• node 25

.github/workflows/main.yml (3)

• node 25
• node 25
• node 25

.github/workflows/master-container-publish.yml (1)

• node 25

.github/workflows/pr-preview.yml (4)

• node 24
• node 25
• node 25
• node 25

.github/workflows/pre-commit.yml (2)

• node 24
• node 25

.github/workflows/scanner-comparison.yml

.github/workflows/version-sync-check.yml (1)

• node 25

.github/workflows/visual-diff.yml (3)

• node 24
• node 25
• node 25

Dockerfile (2)

• bellsoft/liberica-openjre-debian 25-cds → [Updates: 26-cds]
• eclipse-temurin 25.0.2_10-jre-alpine

terraform (11)

aws/irsa.tf (1)

• terraform-aws-modules/iam/aws ~> 6.0

aws/main.tf (2)

• terraform-aws-modules/eks/aws 21.15.1
• terraform-aws-modules/vpc/aws ~> 6.6.0

aws/shared-state/main.tf (2)

• aws ~> 6.0 → [Updates: ~> 6.0]
• hashicorp/terraform ~> 1.1

aws/versions.tf (4)

• aws ~> 6.34 → [Updates: ~> 6.34]
• http ~> 3.5.0
• random ~> 3.8.0
• hashicorp/terraform ~> 1.6, >= 1.6

azure/main.tf

azure/providers.tf

azure/shared-state/main.tf (3)

• azurerm ~> 4.3 → [Updates: ~> 4.3]
• random ~> 3.0
• hashicorp/terraform ~> 1.1

azure/versions.tf (4)

• azurerm ~> 4.62.0 → [Updates: ~> 4.65.0]
• http ~> 3.5.0
• random ~> 3.8.0
• hashicorp/terraform ~> 1.1

gcp/main.tf

gcp/shared-state/main.tf (3)

• google ~> 7.0 → [Updates: ~> 7.0]
• random ~> 3.0
• hashicorp/terraform ~> 1.1

gcp/versions.tf (5)

• google ~> 7.21.0 → [Updates: ~> 7.25.0]
• google-beta ~> 7.21.0 → [Updates: ~> 7.25.0]
• http ~> 3.5.0
• random ~> 3.8.0
• hashicorp/terraform ~> 1.1

---

• Check this box to trigger a request for Renovate to run again on this repository