Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update actions/checkout digest to 3d3c42e
• Update dependency org.asynchttpclient:async-http-client to v3
• Lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency io.netty:netty-codec-http to v4.2.16.Final [SECURITY]
• Update actions/setup-java digest to b6effb0
• Update all dependencies (actions/checkout, github/codeql-action, yarn, org.junit.jupiter:junit-jupiter, com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-core, tools.jackson.core:jackson-databind, io.netty:netty-codec, com.squareup.okio:okio, io.netty:netty-handler, io.netty:netty-handler-proxy, io.netty:netty-codec-socks, io.opentelemetry:opentelemetry-api, org.apache.httpcomponents.client5:httpclient5, org.jetbrains.kotlin.jvm, com.gradleup.shadow)
• Update dependency com.graphql-java:graphql-java to v26
• Update dependency com.newrelic.agent.java:newrelic-api to v9
• Update dependency com.squareup.okhttp3:okhttp to v5
• Update dependency lint-staged to v17
• Update github/codeql-action action to v4
• Update Gradle to v9
• Update gradle/actions action to v6
• Update stefanzweifel/git-auto-commit-action action to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (9)

.github/workflows/benchmark.yml (3)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]

.github/workflows/ci.yml (18)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.2.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.2.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.2.0]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]

.github/workflows/codeql.yml (5)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• github/codeql-action v3.36.3@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 → [Updates: v3.37.6, v4.37.6]
• github/codeql-action v3.36.3@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 → [Updates: v3.37.6, v4.37.6]
• github/codeql-action v3.36.3@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 → [Updates: v3.37.6, v4.37.6]

.github/workflows/create-pr.yml (5)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db

.github/workflows/docs.yml (7)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.2.0]

.github/workflows/release-fix.yml (10)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.2.0]
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.2.0]

.github/workflows/release-snapshot.yml (5)

• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c

.github/workflows/release.yml (14)

• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.3.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.2.0]
• actions/create-github-app-token v3@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/checkout v7@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7]
• actions/setup-java v5@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.2.0]

.github/workflows/semgrep.yml (2)

• actions/checkout v7.0.0@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 → [Updates: v7.0.1]
• github/codeql-action v3.36.3@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 → [Updates: v3.37.6, v4.37.6]

gradle (36)

build.gradle (6)

• io.github.gradle-nexus.publish-plugin 2.0.0
• me.champeau.jmh 0.7.3
• net.sourceforge.plantuml:plantuml 1.2026.6
• com.commercetools.build.taglets:commercetools-taglets 3.6.3
• com.google.guava:guava 33.6.0-jre
• org.jdrupes.taglets:plantuml-taglet 3.1.0

commercetools/commercetools-apachehttp-client/build.gradle (1)

• org.apache.httpcomponents.client5:httpclient5 5.6.2 → [Updates: 5.6.3]

commercetools/commercetools-async-http-client/build.gradle (6)

• org.asynchttpclient:async-http-client 2.16.0 → [Updates: 3.0.11]
• io.netty:netty-codec 4.2.16.Final → [Updates: 4.2.17.Final]
• io.netty:netty-codec-http 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-codec-socks 4.2.16.Final → [Updates: 4.2.17.Final]
• io.netty:netty-handler-proxy 4.2.16.Final → [Updates: 4.2.17.Final]
• io.netty:netty-handler 4.2.15.Final → [Updates: 4.2.17.Final]

commercetools/commercetools-graphql-api/build.gradle (4)

• com.netflix.dgs.codegen 8.6.0
• com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core 8.6.0
• com.fasterxml.jackson.core:jackson-core 2.21.5 → [Updates: 2.22.1]
• com.fasterxml.jackson.core:jackson-databind 2.21.5 → [Updates: 2.22.1]

commercetools/commercetools-http-client/build.gradle

commercetools/commercetools-importapi-utils/build.gradle

commercetools/commercetools-javanet-client/build.gradle

commercetools/commercetools-money/build.gradle (2)

• javax.money:money-api 1.1
• org.javamoney.moneta:moneta-core 1.4.5

commercetools/commercetools-monitoring-datadog/build.gradle (4)

• com.datadoghq:java-dogstatsd-client 4.4.5
• com.datadoghq:datadog-api-client 2.56.0
• com.fasterxml.jackson.core:jackson-core 2.21.5 → [Updates: 2.22.1]
• com.fasterxml.jackson.core:jackson-databind 2.21.5 → [Updates: 2.22.1]

commercetools/commercetools-monitoring-newrelic/build.gradle (1)

• com.newrelic.agent.java:newrelic-api 8.25.1 → [Updates: 9.4.0]

commercetools/commercetools-monitoring-opentelemetry/build.gradle (1)

• io.opentelemetry:opentelemetry-api 1.63.0 → [Updates: 1.64.0]

commercetools/commercetools-okhttp-client3/build.gradle (2)

• com.squareup.okio:okio 3.17.0 → [Updates: 3.18.1]
• com.squareup.okhttp3:okhttp 3.14.9 → [Updates: 5.4.0]

commercetools/commercetools-okhttp-client4/build.gradle (2)

• com.squareup.okhttp3:okhttp 4.12.0 → [Updates: 5.4.0]
• com.squareup.okio:okio 3.17.0 → [Updates: 3.18.1]

commercetools/commercetools-okhttp-client5/build.gradle (2)

• com.squareup.okhttp3:okhttp 5.4.0
• com.squareup.okio:okio 3.17.0 → [Updates: 3.18.1]

commercetools/commercetools-reactornetty-client/build.gradle (2)

• io.projectreactor.netty:reactor-netty-http 1.3.6
• io.projectreactor.netty:reactor-netty-core 1.3.6

commercetools/commercetools-sdk-compat-v1/build.gradle (2)

• io.netty:netty-codec 4.2.16.Final → [Updates: 4.2.17.Final]
• io.netty:netty-codec-http 4.2.15.Final → [Updates: 4.2.16.Final]

commercetools/commercetools-sdk-java-api/build.gradle

commercetools/commercetools-sdk-java-checkout/build.gradle

commercetools/commercetools-sdk-java-history/build.gradle

commercetools/commercetools-sdk-java-importapi/build.gradle

commercetools/internal-docs/build.gradle (7)

• org.junit.jupiter:junit-jupiter 6.1.1 → [Updates: 6.1.2]
• com.commercetools.sdk.jvm.core:commercetools-models 2.16.0
• com.fasterxml.jackson.core:jackson-core 2.21.5 → [Updates: 2.22.1]
• com.fasterxml.jackson.core:jackson-core 2.21.5 → [Updates: 2.22.1]
• com.fasterxml.jackson.core:jackson-databind 2.21.5 → [Updates: 2.22.1]
• com.fasterxml.jackson.core:jackson-core 2.21.5 → [Updates: 2.22.1]
• com.commercetools.sdk.jvm.core:commercetools-java-client 2.16.0

common-plugins/build.gradle (4)

• org.jetbrains.kotlin.jvm 2.3.21 → [Updates: 2.4.10]
• com.google.code.gson:gson 2.14.0
• com.squareup:javapoet 1.13.0
• com.google.guava:guava 33.6.0-jre

common-plugins/javaparser/build.gradle (3)

• com.gradleup.shadow 9.2.0 → [Updates: 9.6.1]
• com.github.javaparser:javaparser-core 3.28.2
• org.codehaus.plexus:plexus-utils 4.0.3

common-plugins/settings.gradle

gradle-scripts/extensions.gradle (22)

• com.commercetools.sdk.jvm.core:commercetools-java-client 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-models 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-convenience 2.16.0
• org.apache.commons:commons-text 1.15.0
• org.apache.commons:commons-lang3 3.20.0
• commons-io:commons-io 2.22.0
• org.slf4j:slf4j-api 2.0.18
• com.fasterxml.jackson.core:jackson-annotations 2.22
• tools.jackson.core:jackson-databind 3.1.4 → [Updates: 3.1.5]
• tools.jackson.core:jackson-core 3.1.1 → [Updates: 3.2.1]
• com.google.code.findbugs:jsr305 3.0.2
• com.google.code.gson:gson 2.14.0
• com.graphql-java:graphql-java 19.11 → [Updates: 26.0]
• org.awaitility:awaitility 4.3.0
• jakarta.validation:jakarta.validation-api 3.1.1
• org.junit.jupiter:junit-jupiter 6.1.1 → [Updates: 6.1.2]
• org.skyscreamer:jsonassert 1.5.3
• org.assertj:assertj-core 3.27.7
• org.mockito:mockito-inline 5.2.0
• org.mockito:mockito-junit-jupiter 5.23.0
• dev.failsafe:failsafe 3.3.2
• com.spotify:completable-futures 0.3.6

gradle-scripts/jacoco.gradle

gradle-scripts/publishing.gradle

gradle-scripts/repositories.gradle

gradle-scripts/spotless.gradle

gradle-scripts/subproject-config.gradle

gradle-scripts/subproject-dependencies.gradle (1)

• com.vdurmont:semver4j 3.1.0

gradle-scripts/subproject-plugins.gradle

gradle-scripts/subproject-srcinfo-plugin.gradle

gradle.properties

rmf/rmf-java-base/build.gradle (1)

• org.reflections:reflections 0.10.2

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.5 → [Updates: 9.6.1]

npm (1)

package.json (5)

• husky 9.1.7
• lint-staged 16.4.0 → [Updates: 17.3.0]
• node >=14.15
• npm >=5
• yarn 4.17.0 → [Updates: 4.18.0]

---

• Check this box to trigger a request for Renovate to run again on this repository