Dependency Dashboard

[mend-for-github-com]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Hidden Unicode characters have been discovered in file(s) in your repository. See your Renovate logs for more details. Please confirm that they are intended to be there, as they could be an attempt to "smuggle" text into your codebase, or used to confuse tools like Renovate or Large Language Models (LLMs)

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
maven	com.github.tomakehurst:wiremock

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• [NEUTRAL] Update dependency org.asciidoctor:asciidoctorj to v2.5.13
• [NEUTRAL] Update dependency org.owasp:dependency-check-maven to v6.5.3
• [NEUTRAL] Update dependency com.nulab-inc:zxcvbn to v1.9.0
• [NEUTRAL] Update dependency io.github.bonigarcia:webdrivermanager to v5.9.3
• [NEUTRAL] Update dependency io.jsonwebtoken:jjwt to v0.13.0
• [NEUTRAL] Update dependency maven to v3.9.16
• [NEUTRAL] Update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3
• [NEUTRAL] Update dependency org.jruby:jruby to v9.4.15.0
• [NEUTRAL] Update dependency org.ow2.asm:asm to v9.10.1
• [NEUTRAL] Update dependency org.webjars:bootstrap to v3.4.1
• [LOW] Update dependency com.github.tomakehurst:wiremock to v3
• [LOW] Update dependency org.asciidoctor:asciidoctorj to v3
• [LOW] Update dependency org.springframework.boot:spring-boot-starter-parent to v4
• [NEUTRAL] Update dependency cglib:cglib-nodep to v3
• [NEUTRAL] Update dependency com.diffplug.spotless:spotless-maven-plugin to v3
• [NEUTRAL] Update dependency io.github.bonigarcia:webdrivermanager to v6
• [NEUTRAL] Update dependency org.jruby:jruby to v10
• [NEUTRAL] Update dependency org.owasp:dependency-check-maven to v13
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update docker/login-action action to v2.2.0
• fix(deps): update mend: high confidence minor and patch dependency updates (com.diffplug.spotless:spotless-maven-plugin, org.apache.commons:commons-compress, org.apache.commons:commons-exec, com.thoughtworks.xstream:xstream, org.apache.maven.plugins:maven-surefire-plugin, org.jsoup:jsoup, org.webjars:jquery, org.bitbucket.b_c:jose4j, org.jacoco:jacoco-maven-plugin, com.google.guava:guava, org.apache.commons:commons-text, commons-io:commons-io, org.apache.maven.plugins:maven-checkstyle-plugin, cglib:cglib-nodep, org.springframework.boot:spring-boot-starter-parent)
• chore(deps): update actions/cache action to v6
• chore(deps): update actions/first-interaction action to v3
• chore(deps): update actions/setup-java action to v5
• chore(deps): update actions/setup-python action to v7
• chore(deps): update dependency maven-wrapper to v3
• chore(deps): update devops-infra/action-commit-push action to v1
• chore(deps): update devops-infra/action-pull-request action to v1
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update softprops/action-gh-release action to v3
• fix(deps): update dependency com.google.guava:guava to v33
• fix(deps): update dependency org.webjars:bootstrap to v5
• fix(deps): update dependency org.webjars:jquery to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): replace dependency com.github.tomakehurst:wiremock with org.wiremock:wiremock
• chore(deps): update actions/cache action to v3.5.0
• chore(deps): update actions/first-interaction action to v1.3.0
• chore(deps): update dependency python to 3.14
• chore(deps): update devops-infra/action-commit-push action to v0.11.4
• chore(deps): update devops-infra/action-pull-request action to v0.6.1
• chore(deps): update docker/build-push-action action to v4.2.1
• chore(deps): update docker/setup-qemu-action action to v2.2.0
• chore(deps): update joonvena/robotframework-reporter-action action to v2.5
• chore(deps): update actions/checkout action to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

Dockerfile (1)

• docker.io/eclipse-temurin 19-jre-focal

Dockerfile_desktop

github-actions (4)

.github/workflows/build.yml (7)

• actions/checkout v3 → [Updates: v7]
• actions/setup-java v3 → [Updates: v5]
• actions/cache v3.2.6 → [Updates: v3.5.0, v6.1.0]
• docker/setup-qemu-action v2.1.0 → [Updates: v2.2.0, v4.2.0]
• docker/setup-buildx-action v2 → [Updates: v4]
• docker/build-push-action v4.0.0 → [Updates: v4.2.1, v7.3.0]
• docker/build-push-action v4.0.0 → [Updates: v4.2.1, v7.3.0]

.github/workflows/release.yml (13)

• actions/checkout v3 → [Updates: v7]
• actions/setup-java v3 → [Updates: v5]
• actions/cache v3.2.6 → [Updates: v3.5.0, v6.1.0]
• softprops/action-gh-release v1 → [Updates: v3]
• docker/setup-qemu-action v2.1.0 → [Updates: v2.2.0, v4.2.0]
• docker/setup-buildx-action v2 → [Updates: v4]
• docker/login-action v2.1.0 → [Updates: v2.2.0, v4.6.0]
• docker/build-push-action v4.0.0 → [Updates: v4.2.1, v7.3.0]
• docker/build-push-action v4.0.0 → [Updates: v4.2.1, v7.3.0]
• actions/checkout v3 → [Updates: v7]
• actions/setup-java v3 → [Updates: v5]
• devops-infra/action-commit-push v0.9.2 → [Updates: v0.11.4, v1.5.0]
• devops-infra/action-pull-request v0.5.5 → [Updates: v0.6.1, v1.4.0]

.github/workflows/test.yml (8)

• actions/checkout v3 → [Updates: v7]
• actions/setup-python v4 → [Updates: v7]
• actions/setup-java v3 → [Updates: v5]
• actions/cache v3.2.6 → [Updates: v3.5.0, v6.1.0]
• BSFishy/pip-action v1
• ifaxity/wait-on-action v1
• joonvena/robotframework-reporter-action v2.1 → [Updates: v2.5]
• python 3.7 → [Updates: 3.14]

.github/workflows/welcome.yml (1)

• actions/first-interaction v1.1.1 → [Updates: v1.3.0, v3.1.0]

maven (1)

pom.xml (28)

• org.springframework.boot:spring-boot-starter-parent 2.7.1 → [Updates: 2.7.18, 4.1.0]
• org.ow2.asm:asm 9.1 → [Updates: 9.10.1]
• org.apache.commons:commons-exec 1.3 → [Updates: 1.6.0]
• org.asciidoctor:asciidoctorj 2.5.3 → [Updates: 2.5.13, 3.0.1]
• org.jsoup:jsoup 1.15.4 → [Updates: 1.23.1]
• com.nulab-inc:zxcvbn 1.5.2 → [Updates: 1.9.0]
• com.thoughtworks.xstream:xstream 1.4.5 → [Updates: 1.4.21]
• cglib:cglib-nodep 2.2 → [Updates: 2.2.2, 3.3.0]
• xml-resolver:xml-resolver 1.2
• io.jsonwebtoken:jjwt 0.9.1 → [Updates: 0.13.0]
• com.google.guava:guava 30.1-jre → [Updates: 30.1.1-jre, 33.6.0-jre]
• commons-io:commons-io 2.11.0 → [Updates: 2.22.0]
• org.apache.commons:commons-text 1.10.0 → [Updates: 1.15.0]
• org.bitbucket.b_c:jose4j 0.9.3 → [Updates: 0.9.6]
• org.webjars:bootstrap 3.3.7 → [Updates: 3.4.1, 5.3.8]
• org.webjars:jquery 3.5.1 → [Updates: 3.7.1, 4.0.0]
• com.github.tomakehurst:wiremock 2.27.2 → [Updates: 3.0.1]
• io.github.bonigarcia:webdrivermanager 5.3.2 → [Updates: 5.9.3, 6.3.4]
• org.apache.commons:commons-compress 1.22 → [Updates: 1.28.0]
• org.jruby:jruby 9.3.6.0 → [Updates: 9.4.15.0, 10.1.1.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.0.0-M9 → [Updates: 3.5.6]
• org.apache.maven.plugins:maven-checkstyle-plugin 3.1.2 → [Updates: 3.6.0]
• com.diffplug.spotless:spotless-maven-plugin 2.33.0 → [Updates: 2.46.1, 3.9.0]
• org.apache.maven.plugins:maven-enforcer-plugin 3.2.1 → [Updates: 3.6.3]
• com.bazaarvoice.maven.plugins:process-exec-maven-plugin 0.9
• org.owasp:dependency-check-maven 6.5.1 → [Updates: 6.5.3, 13.0.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.0.0-M9 → [Updates: 3.5.6]
• org.jacoco:jacoco-maven-plugin 0.8.8 → [Updates: 0.8.15]

maven-wrapper (1)

.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.8.1 → [Updates: 3.9.16]
• maven-wrapper 0.5.6 → [Updates: 3.3.4]