Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update aws-java-sdk-v2 monorepo to v2.32.7 (software.amazon.awssdk:ssm, software.amazon.awssdk:sts)
• Update dependency maven to v3.9.11
• Update go (cloud.google.com/go, cloud.google.com/go/auth, cloud.google.com/go/compute, google.golang.org/api, google.golang.org/genproto, google.golang.org/genproto/googleapis/api, google.golang.org/genproto/googleapis/rpc, google.golang.org/grpc)
• Update jruby.version to v10.0.1.0 (org.jruby:jruby-base, org.jruby:jruby-stdlib, org.jruby:jruby, org.jruby:jruby-complete)
• Update Terraform terraform-aws-modules/eks/aws to v20.37.2
• Update ubuntu Docker tag to plucky-20250714
• Update dependency com.google.cloud:spring-cloud-gcp-dependencies to v6.3.0
• Update dependency io.gatling:gatling-maven-plugin to v4.20.0
• Update dependency io.netty:netty-bom to v4.2.3.Final
• Update pre-commit hook renovatebot/pre-commit-hooks to v41.43.0
• Update terraform-gcp to ~> 6.45.0 (google, google-beta)
• Update dependency com.google.cloud:spring-cloud-gcp-dependencies to v7
• Update module github.com/apparentlymart/go-textseg/v15 to v16
• Update terraform-aws (major) (aws, terraform-aws-modules/eks/aws, terraform-aws-modules/vpc/aws)

Detected dependencies

dockerfile

Dockerfile

• bellsoft/liberica-openjre-debian 23.0.2-9-cds
• eclipse-temurin 23.0.2_7-jre-alpine-3.21

Dockerfile_webdesktop

• lscr.io/linuxserver/webtop 4.16-r0-ls95

Dockerfile_webdesktopk8s

• lscr.io/linuxserver/webtop 4.16-r0-ls95

Dockerfile.web

• jeroenwillemsen/wrongsecrets 1.12.2A-no-vault

k8s/challenge53/Dockerfile

• ubuntu plucky-20250619

k8s/challenge53/Dockerfile.debug

• ubuntu plucky-20250619

src/main/resources/challenges/challenge-51/Dockerfile_challenge51

• docker/dockerfile 1.17

github-actions

.github/workflows/challenge13.yml

• actions/checkout v4

.github/workflows/codeclimate_standalone.yml

• actions/checkout v4
• erzz/codeclimate-standalone v0.0.5
• actions/upload-artifact v4

.github/workflows/codeql-analysis.yml

• actions/checkout v4
• github/codeql-action v3
• actions/setup-java v4
• github/codeql-action v3

.github/workflows/container_test.yml

• actions/checkout v4
• actions/setup-java v4
• actions/upload-artifact v4
• actions/checkout v4

.github/workflows/container-alts-test.yml

• actions/checkout v4

.github/workflows/dast-zap-test.yml

• actions/checkout v4
• actions/setup-java v4
• zaproxy/action-baseline v0.14.0

.github/workflows/heroku_tests.yml

• actions/checkout v4
• actions/upload-artifact v4

.github/workflows/java_swagger_doc.yml

• actions/checkout v4
• actions/setup-java v4
• actions/upload-artifact v4
• actions/upload-artifact v4

.github/workflows/link_checker.yml

• actions/checkout v4
• lycheeverse/lychee-action v2.4.1

.github/workflows/main.yml

• actions/checkout v4
• actions/setup-java v4
• actions/checkout v4
• actions/setup-java v4
• actions/checkout v4
• actions/setup-java v4
• actions/upload-artifact v4

.github/workflows/minikube-k8s-test.yml

• actions/checkout v4

.github/workflows/minikube-vault-test.yml

• actions/checkout v4
• eLco/setup-vault v1.0.3
• azure/setup-helm v4
• actions/checkout v4
• eLco/setup-vault v1.0.3
• azure/setup-helm v4
• actions/upload-artifact v4

.github/workflows/pre-commit.yml

• actions/checkout v4
• actions/setup-python v5
• actions/setup-node v4
• actions/setup-java v4
• actions/cache v4
• hashicorp/setup-terraform v3
• terraform-linters/setup-tflint v4
• pre-commit/action v3.0.1
• pre-commit-ci/lite-action v1.1.0
• python 3.13

.github/workflows/project-management.yml

.github/workflows/scanners.yml

• actions/checkout v4

.github/workflows/terraform.yml

• actions/checkout v4
• hashicorp/setup-terraform v3

gomod

aws/go.mod

• go 1.23.0
• go 1.24.5
• github.com/gruntwork-io/terratest v0.50.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.25.0
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.14.1
• github.com/stretchr/testify v1.10.0
• github.com/tmccombs/hcl2json v0.6.7
• github.com/ulikunitz/xz v0.5.12
• github.com/zclconf/go-cty v1.16.3
• golang.org/x/crypto v0.40.0
• golang.org/x/mod v0.26.0
• golang.org/x/net v0.42.0
• golang.org/x/sync v0.16.0
• golang.org/x/sys v0.34.0
• golang.org/x/text v0.27.0
• golang.org/x/tools v0.35.0
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

azure/go.mod

• go 1.23.8
• go 1.24.5
• github.com/gruntwork-io/terratest v0.50.0
• cel.dev/expr v0.24.0
• cloud.google.com/go v0.121.3
• cloud.google.com/go/auth v0.16.2
• cloud.google.com/go/auth/oauth2adapt v0.2.8
• cloud.google.com/go/compute v1.40.0
• cloud.google.com/go/compute/metadata v0.7.0
• cloud.google.com/go/iam v1.5.2
• cloud.google.com/go/monitoring v1.24.2
• cloud.google.com/go/storage v1.55.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.53.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.53.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v13 v13.0.0
• github.com/apparentlymart/go-textseg/v15 v15.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/aws/aws-sdk-go v1.55.7
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/census-instrumentation/opencensus-proto v0.4.1
• github.com/cespare/xxhash/v2 v2.3.0
• github.com/cncf/xds/go v0.0.0-20250501225837-2ac532fd4443@2ac532fd4443
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/envoyproxy/go-control-plane v0.13.4
• github.com/envoyproxy/protoc-gen-validate v1.2.1
• github.com/felixge/httpsnoop v1.0.4
• github.com/go-logr/logr v1.4.3
• github.com/go-logr/stdr v1.2.2
• github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8
• github.com/golang/protobuf v1.5.4
• github.com/google/go-cmp v0.7.0
• github.com/google/s2a-go v0.1.9
• github.com/google/uuid v1.6.0
• github.com/googleapis/enterprise-certificate-proxy v0.3.6
• github.com/googleapis/gax-go/v2 v2.15.0
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.25.0
• github.com/jinzhu/copier v0.4.0
• github.com/jmespath/go-jmespath v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/planetscale/vtprotobuf v0.6.1-0.20250313105119-ba97887b0a25@ba97887b0a25
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/stretchr/testify v1.10.0
• github.com/tmccombs/hcl2json v0.6.7
• github.com/ulikunitz/xz v0.5.12
• github.com/zclconf/go-cty v1.16.3
• go.opencensus.io v0.24.0
• go.opentelemetry.io/contrib/detectors/gcp v1.37.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.62.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.62.0
• go.opentelemetry.io/otel v1.37.0
• go.opentelemetry.io/otel/metric v1.37.0
• go.opentelemetry.io/otel/sdk v1.37.0
• go.opentelemetry.io/otel/sdk/metric v1.37.0
• go.opentelemetry.io/otel/trace v1.37.0
• golang.org/x/crypto v0.40.0
• golang.org/x/mod v0.26.0
• golang.org/x/net v0.42.0
• golang.org/x/oauth2 v0.30.0
• golang.org/x/sync v0.16.0
• golang.org/x/sys v0.34.0
• golang.org/x/text v0.27.0
• golang.org/x/time v0.12.0
• golang.org/x/tools v0.35.0
• golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da@7835f813f4da
• google.golang.org/api v0.241.0
• google.golang.org/appengine/v2 v2.0.6
• google.golang.org/genproto v0.0.0-20250707201910-8d1bb00bc6a7@8d1bb00bc6a7
• google.golang.org/genproto/googleapis/api v0.0.0-20250707201910-8d1bb00bc6a7@8d1bb00bc6a7
• google.golang.org/genproto/googleapis/rpc v0.0.0-20250707201910-8d1bb00bc6a7@8d1bb00bc6a7
• google.golang.org/grpc v1.73.0
• google.golang.org/grpc/stats/opentelemetry v0.0.0-20241028142157-ada6787961b3@ada6787961b3
• google.golang.org/protobuf v1.36.6
• gopkg.in/yaml.v3 v3.0.1

gcp/go.mod

• go 1.23.0
• go 1.24.5
• github.com/gruntwork-io/terratest v0.50.0
• github.com/agext/levenshtein v1.2.3
• github.com/apparentlymart/go-textseg/v15 v15.0.0
• github.com/apparentlymart/go-textseg/v16 v16.0.0
• github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
• github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
• github.com/hashicorp/errwrap v1.1.0
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-getter/v2 v2.2.3
• github.com/hashicorp/go-multierror v1.1.1
• github.com/hashicorp/go-safetemp v1.0.0
• github.com/hashicorp/go-version v1.7.0
• github.com/hashicorp/hcl/v2 v2.24.0
• github.com/hashicorp/terraform-json v0.25.0
• github.com/jinzhu/copier v0.4.0
• github.com/klauspost/compress v1.18.0
• github.com/kr/pretty v0.3.1
• github.com/mattn/go-zglob v0.0.6
• github.com/mitchellh/go-homedir v1.1.0
• github.com/mitchellh/go-testing-interface v1.14.1
• github.com/mitchellh/go-wordwrap v1.0.1
• github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
• github.com/rogpeppe/go-internal v1.14.1
• github.com/stretchr/testify v1.10.0
• github.com/tmccombs/hcl2json v0.6.7
• github.com/ulikunitz/xz v0.5.12
• github.com/zclconf/go-cty v1.16.3
• golang.org/x/crypto v0.40.0
• golang.org/x/mod v0.26.0
• golang.org/x/net v0.42.0
• golang.org/x/sync v0.16.0
• golang.org/x/sys v0.34.0
• golang.org/x/text v0.27.0
• golang.org/x/tools v0.35.0
• gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
• gopkg.in/yaml.v3 v3.0.1

maven

pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.3
• org.springframework.cloud:spring-cloud-dependencies 2025.0.0
• com.google.cloud:spring-cloud-gcp-dependencies 6.2.3
• com.azure.spring:spring-cloud-azure-dependencies 5.22.0
• io.netty:netty-bom 4.1.118.Final
• org.projectlombok:lombok 1.18.38
• nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.4.0
• org.thymeleaf.extras:thymeleaf-extras-springsecurity6 3.1.3.RELEASE
• org.testcontainers:testcontainers 1.21.3
• software.amazon.awssdk:sts 2.32.5
• software.amazon.awssdk:ssm 2.32.5
• org.linguafranca.pwdb:KeePassJava2 2.2.4
• org.asciidoctor:asciidoctorj-api 3.0.0
• org.asciidoctor:asciidoctorj 3.0.0
• org.jruby:jruby-complete 10.0.0.1
• org.jruby:jruby 10.0.0.1
• org.jruby:jruby-stdlib 10.0.0.1
• org.jruby:jruby-base 10.0.0.1
• org.webjars:bootstrap 5.3.7
• org.webjars.npm:github-buttons 2.14.1
• org.webjars:datatables 2.3.0
• org.webjars:jquery 3.7.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.9
• uk.org.webcompere:system-stubs-jupiter 2.1.8
• io.gatling.highcharts:gatling-charts-highcharts 3.14.3
• org.cyclonedx:cyclonedx-core-java 10.2.1
• org.owasp:dependency-check-maven 12.1.3
• com.tngtech.archunit:archunit-junit5 1.4.1
• com.github.spotbugs:spotbugs-annotations 4.9.3
• io.github.wimdeblauwe:testcontainers-cypress 1.9.1
• org.springframework.vault:spring-vault-core 3.2.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 10.26.1
• com.github.spotbugs:spotbugs-maven-plugin 4.9.3.2
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
• com.github.spotbugs:spotbugs 4.9.3
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.asciidoctor:asciidoctor-maven-plugin 3.2.0
• org.cyclonedx:cyclonedx-maven-plugin 2.9.1
• org.owasp:dependency-check-maven 12.1.3
• com.github.eirslett:frontend-maven-plugin 1.15.1
• org.springdoc:springdoc-openapi-maven-plugin 1.5
• org.codehaus.mojo:exec-maven-plugin 3.5.1
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0
• org.codehaus.mojo:tidy-maven-plugin 1.4.0
• com.diffplug.spotless:spotless-maven-plugin 2.46.1
• io.gatling:gatling-maven-plugin 4.19.2
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.10
• maven-wrapper 3.3.2

npm

js/package.json

• minimatch >=10.0.1
• minimatch >=10.0.1
• javascript-obfuscator ^4.1.1

package.json

• @babel/eslint-parser ^7.25.9
• @babel/preset-env ^7.26.0
• @commitlint/config-conventional ^19.5.0
• @eslint/eslintrc ^3.1.0
• eslint ^9.11.1
• eslint-plugin-chai-friendly ^1.0.1
• eslint-plugin-cypress ^5.0.0
• eslint-plugin-mocha ^11.0.0
• globals ^16.0.0

pre-commit

.pre-commit-config.yaml

• renovatebot/pre-commit-hooks 41.42.2
• eslint/eslint v9.31.0
• pre-commit/pre-commit-hooks v5.0.0
• antonbabenko/pre-commit-terraform v1.99.5
• alessandrojcm/commitlint-pre-commit-hook v9.22.0
• ejba/pre-commit-maven v0.3.4
• psf/black 25.1.0

regex

.github/scripts/docker-create.sh

• OWASP/wrongsecrets-binaries 0.2.0

aws/k8s-aws-alb-script.sh

• kubernetes-sigs/aws-alb-ingress-controller v2.13.3

terraform

aws/irsa.tf

• terraform-aws-modules/iam/aws ~> 5.5

aws/main.tf

• terraform-aws-modules/eks/aws 20.37.1
• terraform-aws-modules/vpc/aws ~> 5.21.0

aws/shared-state/main.tf

• aws ~> 5.0
• hashicorp/terraform ~> 1.1

aws/versions.tf

• aws ~> 5.100.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.1

azure/main.tf

azure/providers.tf

azure/shared-state/main.tf

• azurerm ~> 4.3
• random ~> 3.0
• hashicorp/terraform ~> 1.1

azure/versions.tf

• azurerm ~> 4.37.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.1

gcp/main.tf

gcp/shared-state/main.tf

• google ~> 6.5
• random ~> 3.0
• hashicorp/terraform ~> 1.1

gcp/versions.tf

• google ~> 6.44.0
• google-beta ~> 6.44.0
• http ~> 3.5.0
• random ~> 3.7.0
• hashicorp/terraform ~> 1.1

---

• Check this box to trigger a request for Renovate to run again on this repository