Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
github-actions	google-github-actions/release-please-action
gradle	com.github.vladimir-bukhtoyarov:bucket4j-core

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): replace google-github-actions/release-please-action action with googleapis/release-please-action v4
• chore(deps): update eclipse-temurin docker tag to v21.0.10_7-jre-alpine
• fix(deps): update logback monorepo to v1.5.32 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• chore(deps): update plugin com.github.ben-manes.versions to v0.53.0
• chore(deps): update plugin org.sonarqube to v6.3.1.5724
• fix(deps): update dependency com.jayway.jsonpath:json-path to v2.10.0
• fix(deps): update dependency io.projectreactor.kotlin:reactor-kotlin-extensions to v1.3.0
• fix(deps): update jjwtversion to v0.13.0 (io.jsonwebtoken:jjwt-jackson, io.jsonwebtoken:jjwt-impl, io.jsonwebtoken:jjwt-api)
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-java action to v5
• chore(deps): update actions/upload-artifact action to v6
• chore(deps): update eclipse-temurin docker tag to v25
• chore(deps): update gradle to v9
• chore(deps): update gradle/actions action to v5
• chore(deps): update peter-evans/create-pull-request action to v8
• chore(deps): update plugin org.jlleitschuh.gradle.ktlint to v14
• chore(deps): update plugin org.sonarqube to v7
• fix(deps): update dependency org.mockito.kotlin:mockito-kotlin to v6
• fix(deps): update dependency org.testcontainers:testcontainers-bom to v2
• fix(deps): update kubernetesclientversion to v25 (major) (io.kubernetes:client-java-spring-integration, io.kubernetes:client-java-api, io.kubernetes:client-java)
• fix(deps): update spring boot to v4 (major) (org.springframework.boot, org.springframework.boot:spring-boot-dependencies)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update gradle to v8.14.4
• fix(deps): update dependency com.github.ben-manes.caffeine:caffeine to v3.2.3
• fix(deps): update dependency org.testcontainers:testcontainers-bom to v1.21.4
• fix(deps): update spring boot to v3.5.11 (org.springframework.boot, org.springframework.boot:spring-boot-dependencies)
• fix(deps): update tomcatversion to v11.0.18 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-core)
• chore(deps): update plugin org.jlleitschuh.gradle.ktlint to v13.1.0
• fix(deps): update aws-java-sdk-v2 monorepo to v2.41.32 (software.amazon.awssdk:sts, software.amazon.awssdk:autoscaling, software.amazon.awssdk:ec2, software.amazon.awssdk:bom)
• fix(deps): update dependency com.vanniktech:gradle-maven-publish-plugin to v0.36.0
• fix(deps): update kotlin monorepo to v2.3.10 (org.jetbrains.kotlin:kotlin-allopen, org.jetbrains.kotlin:kotlin-gradle-plugin, org.jetbrains.kotlin:kotlin-test-junit5, org.jetbrains.kotlin:kotlin-test, org.jetbrains.kotlin:kotlin-stdlib, org.jetbrains.kotlin:kotlin-reflect)
• fix(deps): update micrometer to v1.16.3 (io.micrometer:micrometer-registry-prometheus, io.micrometer:micrometer-core)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (2)

• gradle 8.14-jdk17 → [Updates: 9.3-jdk17]
• eclipse-temurin 21.0.7_6-jre-alpine → [Updates: 21.0.10_7-jre-alpine, 25.0.2_10-jre-alpine]

github-actions (3)

.github/workflows/ci.yml (19)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v4 → [Updates: v5]
• actions/upload-artifact v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v4 → [Updates: v5]
• actions/upload-artifact v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v4 → [Updates: v5]
• actions/upload-artifact v4 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• actions/cache v4 → [Updates: v5]
• actions/cache v4 → [Updates: v5]
• actions/cache v4 → [Updates: v5]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v4 → [Updates: v5]

.github/workflows/release-please.yml (2)

• actions/create-github-app-token v2
• google-github-actions/release-please-action v4 → [Updates: v4]

.github/workflows/release.yml (14)

• actions/checkout v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• actions/cache v4 → [Updates: v5]
• actions/cache v4 → [Updates: v5]
• actions/cache v4 → [Updates: v5]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v4 → [Updates: v5]
• actions/create-github-app-token v2
• peter-evans/create-pull-request v7 → [Updates: v8]
• actions/checkout v4 → [Updates: v6]
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6

gradle (24)

build.gradle.kts (5)

• org.springframework.boot 3.5.0 → [Updates: 3.5.11, 4.0.2]
• io.spring.dependency-management 1.1.7
• org.jlleitschuh.gradle.ktlint 13.0.0-rc.1 → [Updates: 13.1.0, 14.0.1]
• com.github.ben-manes.versions 0.52.0 → [Updates: 0.53.0]
• org.sonarqube 6.2.0.5505 → [Updates: 6.3.1.5724, 7.2.2.6593]

buildSrc/build.gradle.kts (3)

• com.vanniktech:gradle-maven-publish-plugin 0.32.0 → [Updates: 0.36.0]
• org.jetbrains.kotlin:kotlin-gradle-plugin 2.1.21 → [Updates: 2.3.10]
• org.jetbrains.kotlin:kotlin-allopen 2.1.21 → [Updates: 2.3.10]

buildSrc/src/main/kotlin/PublishingConfig.kt

gradle.properties (32)

• org.springframework.boot:spring-boot-dependencies 3.5.0 → [Updates: 3.5.11, 4.0.2]
• software.amazon.awssdk:bom 2.31.61 → [Updates: 2.41.32]
• org.testcontainers:testcontainers-bom 1.21.1 → [Updates: 1.21.4, 2.0.3]
• org.jetbrains.kotlin:kotlin-reflect 2.1.21 → [Updates: 2.3.10]
• org.jetbrains.kotlin:kotlin-stdlib 2.1.21 → [Updates: 2.3.10]
• org.jetbrains.kotlin:kotlin-test 2.1.21 → [Updates: 2.3.10]
• org.jetbrains.kotlin:kotlin-test-junit5 2.1.21 → [Updates: 2.3.10]
• org.jetbrains.kotlinx:kotlinx-coroutines-core 1.10.2
• org.jetbrains.kotlinx:kotlinx-coroutines-reactor 1.10.2
• io.projectreactor.kotlin:reactor-kotlin-extensions 1.2.3 → [Updates: 1.3.0]
• org.mockito.kotlin:mockito-kotlin 5.4.0 → [Updates: 6.2.3]
• javax.servlet:javax.servlet-api 4.0.1
• software.amazon.awssdk:ec2 2.31.61 → [Updates: 2.41.32]
• software.amazon.awssdk:autoscaling 2.31.61 → [Updates: 2.41.32]
• software.amazon.awssdk:sts 2.31.61 → [Updates: 2.41.32]
• io.kubernetes:client-java 24.0.0 → [Updates: 25.0.0]
• io.kubernetes:client-java-api 24.0.0 → [Updates: 25.0.0]
• io.kubernetes:client-java-spring-integration 24.0.0 → [Updates: 25.0.0]
• io.jsonwebtoken:jjwt-api 0.12.6 → [Updates: 0.13.0]
• io.jsonwebtoken:jjwt-impl 0.12.6 → [Updates: 0.13.0]
• io.jsonwebtoken:jjwt-jackson 0.12.6 → [Updates: 0.13.0]
• com.github.vladimir-bukhtoyarov:bucket4j-core 8.0.1 → [Updates: 8.0.1]
• com.jayway.jsonpath:json-path 2.9.0 → [Updates: 2.10.0]
• org.zeromq:jeromq 0.6.0
• com.github.ben-manes.caffeine:caffeine 3.2.1 → [Updates: 3.2.3]
• io.micrometer:micrometer-core 1.15.1 → [Updates: 1.16.3]
• io.micrometer:micrometer-registry-prometheus 1.15.1 → [Updates: 1.16.3]
• ch.qos.logback:logback-classic 1.5.18 → [Updates: 1.5.32]
• ch.qos.logback:logback-core 1.5.18 → [Updates: 1.5.32]
• org.apache.tomcat.embed:tomcat-embed-core 11.0.8 → [Updates: 11.0.18]
• org.apache.tomcat.embed:tomcat-embed-el 11.0.8 → [Updates: 11.0.18]
• org.apache.tomcat.embed:tomcat-embed-websocket 11.0.8 → [Updates: 11.0.18]

pushpin-api/build.gradle.kts

pushpin-client/build.gradle.kts

pushpin-discovery-aws/build.gradle.kts

pushpin-discovery-kubernetes/build.gradle.kts

pushpin-discovery/build.gradle.kts

pushpin-metrics-core/build.gradle.kts

pushpin-security-audit/build.gradle.kts

pushpin-security-core/build.gradle.kts

pushpin-security-encryption/build.gradle.kts

pushpin-security-hmac/build.gradle.kts

pushpin-security-jwt/build.gradle.kts

pushpin-security-ratelimit/build.gradle.kts

pushpin-security-remote/build.gradle.kts

pushpin-security-starter/build.gradle.kts

pushpin-testcontainers/build.gradle.kts

pushpin-transport-core/build.gradle.kts

pushpin-transport-http/build.gradle.kts

pushpin-transport-zmq/build.gradle.kts

server/build.gradle.kts

settings.gradle.kts (1)

• org.gradle.toolchains.foojay-resolver-convention 1.0.0

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.2 → [Updates: 8.14.4, 9.3.1]

---

• Check this box to trigger a request for Renovate to run again on this repository