Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• build(devcontainer): 📦 patch devcontainer to v1.0.9
• build(maven): 📦 minor maven (com.github.spotbugs:spotbugs, org.apache.maven.plugins:maven-pmd-plugin, org.apache.maven.plugins:maven-javadoc-plugin, org.apache.maven.plugins:maven-source-plugin, org.apache.maven.plugins:maven-release-plugin, org.sonatype.plugins:nexus-staging-maven-plugin, net.sourceforge.pmd:pmd-java, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-annotations, org.springframework.boot:spring-boot-starter-parent)
• build(devcontainer): 📦 major devcontainer (major) (ghcr.io/devcontainers/features/common-utils, ghcr.io/devcontainers/features/docker-in-docker)
• build(maven): 📦 major maven (major) (com.github.spotbugs:spotbugs-maven-plugin, org.apache.maven.plugins:maven-gpg-plugin, org.apache.maven.plugins:maven-javadoc-plugin, org.apache.maven.plugins:maven-source-plugin, org.springframework.boot:spring-boot-starter-parent)
• build(github-actions): 📦 pin dependencies (actions/checkout, actions/setup-java, delineaxpm/github-workflows)
• build(github-actions): 📦 major github-actions (major) (actions/checkout, actions/setup-java, whelk-io/maven-settings-xml-action)
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• security(maven): 🛡️ minor 🛡️ vulnerability [medium] (net.sourceforge.pmd:pmd-core, org.springframework:spring-web, com.fasterxml.jackson.core:jackson-core)
• security(maven): 🛡️ major 🛡️ vulnerability [high] to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (2)

• ghcr.io/devcontainers/features/common-utils 1 → [Updates: 2]
• ghcr.io/devcontainers/features/docker-in-docker 1.0.7 → [Updates: 1.0.9, 3.0.1]

dockerfile (1)

.devcontainer/Dockerfile

github-actions (5)

.github/workflows/assign.yml (1)

• delineaxpm/github-workflows main → [Updates: main]

.github/workflows/conventional-pr.yml (1)

• delineaxpm/github-workflows main → [Updates: main]

.github/workflows/deploy.yml (3)

• actions/checkout v2@ee0669bd1cc54295c223e0bb666b733df41de1c5 → [Updates: v2.7.0, v6]
• actions/setup-java v1@b6e674f4b717d7b0ae3baee0fbe79f498905dfde → [Updates: v1.4.4, v5]
• whelk-io/maven-settings-xml-action v4@4637f7c31534ec06928b10da807735657a921266 → [Updates: v22]

.github/workflows/lint.yml (1)

• delineaxpm/github-workflows main → [Updates: main]

.github/workflows/stale.yaml (1)

• delineaxpm/github-workflows main → [Updates: main]

maven (1)

pom.xml (16)

• org.springframework.boot:spring-boot-starter-parent 3.2.3 → [Updates: 3.5.14, 4.0.6]
• org.springframework:spring-web 6.0.23 → [Updates: 6.1.0]
• com.fasterxml.jackson.core:jackson-core 2.15.0 → [Updates: 2.18.6]
• com.fasterxml.jackson.core:jackson-annotations 2.15.0 → [Updates: 2.22]
• com.fasterxml.jackson.core:jackson-databind 2.15.0 → [Updates: 2.22.0]
• com.squareup.okhttp3:okhttp 3.14.9 → [Updates: 4.9.2]
• org.sonatype.plugins:nexus-staging-maven-plugin 1.6.7 → [Updates: 1.7.0]
• org.apache.maven.plugins:maven-release-plugin 3.0.0-M1 → [Updates: 3.3.1]
• org.apache.maven.plugins:maven-source-plugin 2.2.1 → [Updates: 2.4, 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 2.9.1 → [Updates: 2.10.4, 3.12.0]
• org.apache.maven.plugins:maven-gpg-plugin 1.6 → [Updates: 3.2.8]
• org.apache.maven.plugins:maven-pmd-plugin 3.20.0 → [Updates: 3.28.0]
• net.sourceforge.pmd:pmd-core 7.10.0 → [Updates: 7.22.0]
• net.sourceforge.pmd:pmd-java 7.10.0 → [Updates: 7.25.0]
• com.github.spotbugs:spotbugs-maven-plugin 3.1.12.2 → [Updates: 4.9.8.3]
• com.github.spotbugs:spotbugs 4.0.0-beta4 → [Updates: 4.9.8]

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository