Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update actions/checkout action to v7
• Update actions/create-github-app-token action to v3
• Update actions/setup-java action to v5
• Update codecov/codecov-action action to v7
• Update dependency com.newrelic.agent.java:newrelic-api to v9
• Update dependency lint-staged to v17
• Update dependency org.asynchttpclient:async-http-client to v3
• Update github/codeql-action action to v4
• Update gradle/actions action to v6
• Update graphql.java to v26
• Update okhttp monorepo to v5
• Update stefanzweifel/git-auto-commit-action action to v7
• Lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/checkout digest to df4cb1c
• Update actions/create-github-app-token digest to fee1f7d
• Update actions/setup-java digest
• Update all dependencies (actions/checkout, codecov/codecov-action, github/codeql-action, yarn, net.sourceforge.plantuml:plantuml, tools.jackson.core:jackson-core, tools.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-annotations, io.netty:netty-codec-http, io.netty:netty-codec, io.netty:netty-handler, io.netty:netty-handler-proxy, com.github.javaparser:javaparser-core, io.netty:netty-codec-socks, com.squareup.okhttp3:okhttp, com.datadoghq:datadog-api-client, io.projectreactor.netty:reactor-netty-core, io.opentelemetry:opentelemetry-api, io.projectreactor.netty:reactor-netty-http, org.asynchttpclient:async-http-client, org.jetbrains.kotlin.jvm)
• Update Gradle to v9
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency com.squareup.okhttp3:okhttp to v4 [SECURITY]

Detected Dependencies

github-actions (9)

.github/workflows/benchmark.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5]

.github/workflows/ci.yml (18)

• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v5.5.5, v7.0.0]
• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]

.github/workflows/codeql.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• github/codeql-action v3.36.0@03e4368ac7daa2bd82b3e85262f3bf87ee112f57 → [Updates: v3.36.2, v4.36.2]
• github/codeql-action v3.36.0@03e4368ac7daa2bd82b3e85262f3bf87ee112f57 → [Updates: v3.36.2, v4.36.2]
• github/codeql-action v3.36.0@03e4368ac7daa2bd82b3e85262f3bf87ee112f57 → [Updates: v3.36.2, v4.36.2]

.github/workflows/create-pr.yml (5)

• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db

.github/workflows/docs.yml (7)

• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]

.github/workflows/release-fix.yml (10)

• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]

.github/workflows/release-snapshot.yml (5)

• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c

.github/workflows/release.yml (14)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• gradle/actions v5.0.2@0723195856401067f7a2779048b490ace7a47d7c → [Updates: v6.2.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• actions/create-github-app-token v2@29824e69f54612133e76f7eaac726eef6c875baf → [Updates: v3, v2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]

.github/workflows/semgrep.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• github/codeql-action v3.36.0@03e4368ac7daa2bd82b3e85262f3bf87ee112f57 → [Updates: v3.36.2, v4.36.2]

gradle (36)

build.gradle (6)

• io.github.gradle-nexus.publish-plugin 2.0.0
• me.champeau.jmh 0.7.3
• net.sourceforge.plantuml:plantuml 1.2026.5 → [Updates: 1.2026.6]
• com.commercetools.build.taglets:commercetools-taglets 3.6.3
• com.google.guava:guava 33.6.0-jre
• org.jdrupes.taglets:plantuml-taglet 3.1.0

commercetools/commercetools-apachehttp-client/build.gradle (1)

• org.apache.httpcomponents.client5:httpclient5 5.6.1

commercetools/commercetools-async-http-client/build.gradle (6)

• org.asynchttpclient:async-http-client 2.15.0 → [Updates: 2.16.0, 3.0.11]
• io.netty:netty-codec 4.2.14.Final → [Updates: 4.2.15.Final]
• io.netty:netty-codec-http 4.2.14.Final → [Updates: 4.2.15.Final]
• io.netty:netty-codec-socks 4.2.14.Final → [Updates: 4.2.15.Final]
• io.netty:netty-handler-proxy 4.2.14.Final → [Updates: 4.2.15.Final]
• io.netty:netty-handler 4.2.14.Final → [Updates: 4.2.15.Final]

commercetools/commercetools-graphql-api/build.gradle (2)

• com.netflix.dgs.codegen 8.5.0
• com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core 8.5.0

commercetools/commercetools-http-client/build.gradle

commercetools/commercetools-importapi-utils/build.gradle

commercetools/commercetools-javanet-client/build.gradle

commercetools/commercetools-money/build.gradle (2)

• javax.money:money-api 1.1
• org.javamoney.moneta:moneta-core 1.4.5

commercetools/commercetools-monitoring-datadog/build.gradle (2)

• com.datadoghq:java-dogstatsd-client 4.4.5
• com.datadoghq:datadog-api-client 2.55.0 → [Updates: 2.56.0]

commercetools/commercetools-monitoring-newrelic/build.gradle (1)

• com.newrelic.agent.java:newrelic-api 8.25.1 → [Updates: 9.3.0]

commercetools/commercetools-monitoring-opentelemetry/build.gradle (1)

• io.opentelemetry:opentelemetry-api 1.62.0 → [Updates: 1.63.0]

commercetools/commercetools-okhttp-client3/build.gradle (2)

• com.squareup.okio:okio 3.17.0
• com.squareup.okhttp3:okhttp 3.14.9 → [Updates: 4.9.2]

commercetools/commercetools-okhttp-client4/build.gradle (2)

• com.squareup.okhttp3:okhttp 4.12.0 → [Updates: 5.4.0]
• com.squareup.okio:okio 3.17.0

commercetools/commercetools-okhttp-client5/build.gradle (2)

• com.squareup.okhttp3:okhttp 5.3.2 → [Updates: 5.4.0]
• com.squareup.okio:okio 3.17.0

commercetools/commercetools-reactornetty-client/build.gradle (2)

• io.projectreactor.netty:reactor-netty-http 1.3.5 → [Updates: 1.3.6]
• io.projectreactor.netty:reactor-netty-core 1.3.5 → [Updates: 1.3.6]

commercetools/commercetools-sdk-compat-v1/build.gradle (2)

• io.netty:netty-codec 4.2.14.Final → [Updates: 4.2.15.Final]
• io.netty:netty-codec-http 4.2.14.Final → [Updates: 4.2.15.Final]

commercetools/commercetools-sdk-java-api/build.gradle

commercetools/commercetools-sdk-java-checkout/build.gradle

commercetools/commercetools-sdk-java-history/build.gradle

commercetools/commercetools-sdk-java-importapi/build.gradle

commercetools/internal-docs/build.gradle (3)

• org.junit.jupiter:junit-jupiter 6.1.0
• com.commercetools.sdk.jvm.core:commercetools-models 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-java-client 2.16.0

common-plugins/build.gradle (4)

• org.jetbrains.kotlin.jvm 2.3.21 → [Updates: 2.4.0]
• com.google.code.gson:gson 2.14.0
• com.squareup:javapoet 1.13.0
• com.google.guava:guava 33.6.0-jre

common-plugins/javaparser/build.gradle (2)

• com.github.johnrengelman.shadow 8.1.1
• com.github.javaparser:javaparser-core 3.28.1 → [Updates: 3.28.2]

common-plugins/settings.gradle

gradle-scripts/extensions.gradle (22)

• com.commercetools.sdk.jvm.core:commercetools-java-client 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-models 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-convenience 2.16.0
• org.apache.commons:commons-text 1.15.0
• org.apache.commons:commons-lang3 3.20.0
• commons-io:commons-io 2.22.0
• org.slf4j:slf4j-api 2.0.18
• com.fasterxml.jackson.core:jackson-annotations 2.21 → [Updates: 2.22]
• tools.jackson.core:jackson-databind 3.1.0 → [Updates: 3.2.0]
• tools.jackson.core:jackson-core 3.1.0 → [Updates: 3.1.1]
• com.google.code.findbugs:jsr305 3.0.2
• com.google.code.gson:gson 2.14.0
• com.graphql-java:graphql-java 19.11 → [Updates: 26.0]
• org.awaitility:awaitility 4.3.0
• jakarta.validation:jakarta.validation-api 3.1.1
• org.junit.jupiter:junit-jupiter 6.1.0
• org.skyscreamer:jsonassert 1.5.3
• org.assertj:assertj-core 3.27.7
• org.mockito:mockito-inline 5.2.0
• org.mockito:mockito-junit-jupiter 5.23.0
• dev.failsafe:failsafe 3.3.2
• com.spotify:completable-futures 0.3.6

gradle-scripts/jacoco.gradle

gradle-scripts/publishing.gradle

gradle-scripts/repositories.gradle

gradle-scripts/spotless.gradle

gradle-scripts/subproject-config.gradle

gradle-scripts/subproject-dependencies.gradle (1)

• com.vdurmont:semver4j 3.1.0

gradle-scripts/subproject-plugins.gradle

gradle-scripts/subproject-srcinfo-plugin.gradle

gradle.properties

rmf/rmf-java-base/build.gradle (1)

• org.reflections:reflections 0.10.2

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.5 → [Updates: 9.6.0]

npm (1)

package.json (5)

• husky 9.1.7
• lint-staged 16.4.0 → [Updates: 17.0.7]
• node >=14.15
• npm >=5
• yarn 4.15.0 → [Updates: 4.17.0]

---

• Check this box to trigger a request for Renovate to run again on this repository