Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.8.3
• chore(deps): update dependency io.takari.maven.plugins:takari-lifecycle-plugin to v2.3.3
• chore(deps): update dependency org.owasp:dependency-check-maven to v12.2.1
• fix(deps): update aws sdk v2 monorepo to v2.42.34 (software.amazon.awssdk:cognitoidentityprovider, software.amazon.awssdk:s3, software.amazon.awssdk:dynamodb, software.amazon.awssdk:bom)
• fix(deps): update quarkus platform updates to v3.34.3 (io.quarkus:quarkus-junit-component, io.quarkus:quarkus-junit, io.quarkus.platform:quarkus-bom)
• fix(deps): update dependency com.bucket4j:bucket4j_jdk17-core to v8.18.0
• chore(deps): update actions/cache action to v5
• 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

docker-compose (1)

compose.yml (2)

• jaegertracing/all-in-one 1.60
• postgres 18-alpine

github-actions (11)

.github/actions/secret-scan/action.yml (2)

• actions/checkout v6
• edplato/trufflehog-actions-scan master

.github/actions/tools/action.yml (1)

• actions/setup-java v5

.github/workflows/00-hygiene-check.yml (4)

• actions/checkout v6
• amannn/action-semantic-pull-request v6
• ibiqlik/action-yamllint v3
• DavidAnson/markdownlint-cli2-action v23

.github/workflows/01-build-test.yml (17)

• actions/checkout v6
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/checkout v6
• actions/download-artifact v8
• actions/download-artifact v8
• actions/upload-artifact v7
• actions/checkout v6
• actions/download-artifact v8
• actions/download-artifact v8
• actions/upload-artifact v7
• actions/checkout v6
• actions/download-artifact v8
• dorny/test-reporter v3
• actions/checkout v6
• actions/download-artifact v8
• dorny/test-reporter v3

.github/workflows/02-static-analysis.yml (2)

• actions/checkout v6
• actions/cache v4 → [Updates: v5]

.github/workflows/03-release-bump.yml (4)

• actions/checkout v6
• crazy-max/ghaction-import-gpg v7
• ad-m/github-push-action master
• peter-evans/repository-dispatch v4

.github/workflows/04-publish-packages.yml (1)

• actions/checkout v6

.github/workflows/100-owasp-db-cache.yml (2)

• actions/checkout v6
• actions/cache v4 → [Updates: v5]

.github/workflows/51-code-coverage.yml (3)

• actions/checkout v6
• actions/upload-artifact v7
• codecov/codecov-action v6

.github/workflows/98-janitor-renovate-cleanup.yml (1)

• Mattraks/delete-workflow-runs v2.1.0

.github/workflows/99-janitor-history-cleanup.yml (1)

• Mattraks/delete-workflow-runs v2.1.0

maven (12)

forge-api/forge-common-api/pom.xml

forge-api/forge-metrics-api/pom.xml

forge-api/forge-security-api/pom.xml

forge-api/forge-throttle-api/pom.xml

forge-api/pom.xml (2)

• io.quarkus.platform:quarkus-bom 3.34.1 → [Updates: 3.34.3]
• org.apache.commons:commons-lang3 3.20.0

forge-impl/forge-common/pom.xml

forge-impl/forge-health-aws/pom.xml

forge-impl/forge-metrics/pom.xml

forge-impl/forge-security/pom.xml

forge-impl/forge-throttle/pom.xml

forge-impl/pom.xml (12)

• io.quarkus.platform:quarkus-bom 3.34.1 → [Updates: 3.34.3]
• software.amazon.awssdk:bom 2.42.27 → [Updates: 2.42.34]
• org.apache.commons:commons-lang3 3.20.0
• org.apache.commons:commons-collections4 4.5.0
• io.quarkus:quarkus-junit 3.34.1 → [Updates: 3.34.3]
• io.quarkus:quarkus-junit-component 3.34.1 → [Updates: 3.34.3]
• org.mockito:mockito-core 5.23.0
• com.bucket4j:bucket4j_jdk17-core 8.17.0 → [Updates: 8.18.0]
• io.rest-assured:rest-assured 6.0.0
• software.amazon.awssdk:dynamodb 2.42.27 → [Updates: 2.42.34]
• software.amazon.awssdk:s3 2.42.27 → [Updates: 2.42.34]
• software.amazon.awssdk:cognitoidentityprovider 2.42.27 → [Updates: 2.42.34]

pom.xml (20)

• org.projectlombok:lombok 1.18.44
• org.projectlombok:lombok 1.18.44
• org.apache.maven.plugins:maven-compiler-plugin 3.15.0
• org.projectlombok:lombok 1.18.44
• io.takari.maven.plugins:takari-lifecycle-plugin 2.3.2 → [Updates: 2.3.3]
• org.apache.maven.plugins:maven-clean-plugin 3.5.0
• org.apache.maven.plugins:maven-dependency-plugin 3.10.0
• org.apache.maven.plugins:maven-deploy-plugin 3.1.4
• org.codehaus.mojo:versions-maven-plugin 2.21.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.5
• org.apache.maven.plugins:maven-failsafe-plugin 3.5.5
• org.openclover:clover-maven-plugin 4.5.2
• io.smallrye:jandex-maven-plugin 3.5.3
• org.apache.maven.plugins:maven-enforcer-plugin 3.6.2
• org.apache.maven.extensions:maven-build-cache-extension 1.2.2
• com.diffplug.spotless:spotless-maven-plugin 3.4.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.apache.maven.plugins:maven-pmd-plugin 3.28.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2 → [Updates: 4.9.8.3]
• org.owasp:dependency-check-maven 12.2.0 → [Updates: 12.2.1]

maven-wrapper (2)

.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.9.14
• maven-wrapper 3.3.5

mvnw (1)

• maven-wrapper 3.3.4

---

• Check this box to trigger a request for Renovate to run again on this repository