Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency ch.qos.logback:logback-classic to v1.5.23
• Update dependency com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin to v7.0.2
• Update actions/checkout action to v4.3.1
• Update dependency com.github.zafarkhaja:java-semver to v0.10.2
• Update dependency com.google.auto.value:auto-value-annotations to v1.11.1
• Update dependency com.google.code.gson:gson to v2.13.2
• Update dependency com.theokanning.openai-gpt3-java:service to v0.18.2
• Update dependency io.codemodder:codetf-java to v4.6.0
• Update dependency io.github.java-diff-utils:java-diff-utils to v4.16
• Update dependency me.tongfei:progressbar to v0.10.1
• Update dependency net.sourceforge.pmd:pmd-java to v7.20.0
• Update dependency org.apache.commons:commons-collections4 to v4.5.0
• Update dependency org.apache.commons:commons-jexl3 to v3.6.1
• Update dependency org.apache.commons:commons-lang3 to v3.20.0
• Update dependency org.apache.maven:maven-model to v3.9.12
• Update dependency org.assertj:assertj-core to v3.27.6
• Update dependency org.dom4j:dom4j to v2.2.0
• Update dependency org.eclipse.jgit:org.eclipse.jgit to v3.7.1.201504261725-r
• Update dependency org.immutables:value to v2.12.0
• Update dependency org.jetbrains:annotations to v23.1.0
• Update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v1.9.25
• Update dependency org.mockito:mockito-core to v4.11.0
• Update dependency org.testcontainers:testcontainers to v1.21.4
• Update dependency org.xmlunit:xmlunit-assertj3 to v2.11.0
• Update dependency org.xmlunit:xmlunit-core to v2.11.0
• Update dependency python to 3.14
• Update docker/build-push-action action to v5.4.0
• Update docker/login-action action to v3.6.0
• Update docker/setup-buildx-action action to v3.12.0
• Update Gradle to v8.14.3
• Update gradle/gradle-build-action action to v2.12.0
• Update jackson monorepo to v2.20.1 (com.fasterxml.jackson.dataformat:jackson-dataformat-yaml, com.fasterxml.jackson.core:jackson-core)
• Update junit-framework monorepo to v5.14.1 (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• Update plugin com.gradle.enterprise to v3.19.2
• Update spotless to v6.25.0 (com.diffplug.spotless, com.diffplug.spotless:spotless-plugin-gradle)
• Update actions/checkout action to v6
• Update actions/setup-java action to v5
• Update actions/setup-python action to v6
• Update dependency com.google.inject:guice to v7
• Update dependency com.google.inject:guice to v7
• Update dependency com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin to v8
• Update dependency com.netflix.nebula.maven-publish:com.netflix.nebula.maven-publish.gradle.plugin to v23
• Update dependency com.netflix.nebula.maven-scm:com.netflix.nebula.maven-scm.gradle.plugin to v23
• Update dependency jaxen:jaxen to v2
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Update dependency org.eclipse.jgit:org.eclipse.jgit to v7
• Update dependency org.jetbrains:annotations to v26
• Update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v2
• Update dependency org.mockito:mockito-core to v5
• Update dependency org.testcontainers:testcontainers to v2
• Update docker/build-push-action action to v6
• Update github/codeql-action action to v4
• Update Gradle to v9
• Update gradle/actions action to v5
• Update gradle/gradle-build-action action to v3
• Update javahamcrest monorepo to v3 (major) (org.hamcrest:hamcrest-library, org.hamcrest:hamcrest-core)
• Update junit-framework monorepo to v6 (major) (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• Update pixee/upload-tool-results-action action to v2
• Update plugin nexus-publish to v2
• Update spotless to v8 (major) (com.diffplug.spotless, com.diffplug.spotless:spotless-plugin-gradle)
• Update stefanzweifel/git-auto-commit-action action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency com.fasterxml.woodstox:woodstox-core to v7.1.1
• Update dependency com.github.lalyos:jfiglet to v0.0.9
• Update dependency io.github.classgraph:classgraph to v4.8.184
• Update picocli to v4.7.7 (info.picocli:picocli-codegen, info.picocli:picocli)
• Update pixee/upload-tool-results-action action to v1.1.3
• Update slf4j monorepo to v2.0.17 (org.slf4j:slf4j-simple, org.slf4j:slf4j-api)
• Update actions/setup-java action to v3.14.1
• Update aws-java-sdk-v2 monorepo to v2.40.17 (software.amazon.awssdk:sso, software.amazon.awssdk:translate)
• Update dependency com.github.albfernandez:juniversalchardet to v2.5.0
• Update javaparser.core to v3.27.1 (com.github.javaparser:javaparser-symbol-solver-core, com.github.javaparser:javaparser-core)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (6)

.github/workflows/checks.yml (8)

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.1]
• actions/setup-java v3.13.0@0ab4596768b603586c0de567f2430c30f5b0d2b0 → [Updates: v3.14.1, v5.1.0]
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a → [Updates: v2.12.0, v3.5.0]
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226 → [Updates: v3.12.0]
• docker/build-push-action v5.0.0@0565240e2d4ab88bba5387d719585280857ece09 → [Updates: v5.4.0, v6.18.0]
• actions/setup-python v4 → [Updates: v6]
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a → [Updates: v2.12.0, v3.5.0]
• python 3.11 → [Updates: 3.14]

.github/workflows/codeql.yml (4)

• actions/checkout v3 → [Updates: v6]
• github/codeql-action v2 → [Updates: v4]
• github/codeql-action v2 → [Updates: v4]
• github/codeql-action v2 → [Updates: v4]

.github/workflows/format_pixeebot_prs.yaml (4)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v3 → [Updates: v5]
• stefanzweifel/git-auto-commit-action v5 → [Updates: v7]

.github/workflows/release-integration-test-framework-images.yml (6)

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.1]
• actions/setup-java v3.13.0@0ab4596768b603586c0de567f2430c30f5b0d2b0 → [Updates: v3.14.1, v5.1.0]
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a → [Updates: v2.12.0, v3.5.0]
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d → [Updates: v3.6.0]
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226 → [Updates: v3.12.0]
• docker/build-push-action v5.0.0@0565240e2d4ab88bba5387d719585280857ece09 → [Updates: v5.4.0, v6.18.0]

.github/workflows/release.yml (7)

• actions/checkout v3 → [Updates: v6]
• actions/setup-python v4 → [Updates: v6]
• actions/setup-java v3 → [Updates: v5]
• gradle/gradle-build-action v2 → [Updates: v3]
• actions/create-release v1
• actions/upload-release-asset v1
• python 3.11 → [Updates: 3.14]

.github/workflows/sonar_pixee.yml (1)

• pixee/upload-tool-results-action v1.1.1 → [Updates: v1.1.3, v2.5.0]

gradle (35)

build.gradle.kts

community-codemods/build.gradle.kts

core-codemods/build.gradle.kts (1)

• org.testcontainers:testcontainers 1.19.0 → [Updates: 1.21.4, 2.0.3]

framework/codemodder-base/build.gradle.kts (3)

• io.codemodder:codetf-java 4.5.0 → [Updates: 4.6.0]
• com.azure:azure-ai-openai 1.0.0-beta.16
• io.github.classgraph:classgraph 4.8.160 → [Updates: 4.8.184]

framework/codemodder-testutils/build.gradle.kts

gradle.properties

gradle/build-plugins/build.gradle.kts

gradle/build-plugins/settings.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.base.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.core-codemods-docs.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java-library.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java-test-fixtures.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.maven-publish.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.openai.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.publishing-root.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.runner.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.spotless.gradle.kts

gradle/build-settings/build.gradle.kts

gradle/build-settings/settings.gradle.kts

gradle/build-settings/src/main/kotlin/io.codemodder.repositories.settings.gradle.kts

gradle/buildlibs.versions.toml (6)

• com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin 7.0.1 → [Updates: 7.0.2, 8.1.0]
• com.netflix.nebula.maven-scm:com.netflix.nebula.maven-scm.gradle.plugin 20.3.0 → [Updates: 23.0.0]
• com.netflix.nebula.maven-publish:com.netflix.nebula.maven-publish.gradle.plugin 20.3.0 → [Updates: 23.0.0]
• com.diffplug.spotless:spotless-plugin-gradle 6.20.0 → [Updates: 6.25.0, 8.1.0]
• io.github.gradle-nexus.publish-plugin 1.3.0 → [Updates: 2.0.0]
• com.diffplug.spotless 6.20.0 → [Updates: 6.25.0, 8.1.0]

gradle/libs.versions.toml (41)

• com.google.auto.value:auto-value-annotations 1.9 → [Updates: 1.11.1]
• io.codescan:sarif-java 1.0
• org.dom4j:dom4j 2.1.4 → [Updates: 2.2.0]
• org.apache.commons:commons-jexl3 3.2.1 → [Updates: 3.6.1]
• org.apache.commons:commons-lang3 3.12.0 → [Updates: 3.20.0]
• org.apache.commons:commons-collections4 4.4 → [Updates: 4.5.0]
• com.contrastsecurity:java-sarif 2.0
• com.google.code.gson:gson 2.9.0 → [Updates: 2.13.2]
• com.google.inject:guice 5.1.0 → [Updates: 7.0.0]
• org.immutables:value 2.9.0 → [Updates: 2.12.0]
• com.fasterxml.woodstox:woodstox-core 7.1.0 → [Updates: 7.1.1]
• com.fasterxml.jackson.core:jackson-core 2.19.0 → [Updates: 2.20.1]
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.19.0 → [Updates: 2.20.1]
• io.github.java-diff-utils:java-diff-utils 4.12 → [Updates: 4.16]
• com.github.javaparser:javaparser-core 3.26.2 → [Updates: 3.27.1]
• com.github.javaparser:javaparser-symbol-solver-core 3.26.2 → [Updates: 3.27.1]
• com.github.javaparser:javaparser-symbol-solver-model 3.15.15
• com.github.javaparser:javaparser-symbol-solver-logic 3.15.15
• io.github.pixee:java-security-toolkit 1.2.2
• io.github.pixee:java-security-toolkit-xstream 1.0.2
• javax.inject:javax.inject 1
• org.jetbrains:annotations 23.0.0 → [Updates: 23.1.0, 26.0.2-1]
• com.github.lalyos:jfiglet 0.0.8 → [Updates: 0.0.9]
• com.knuddels:jtokkit 1.1.0
• com.github.albfernandez:juniversalchardet 2.4.0 → [Updates: 2.5.0]
• ch.qos.logback:logback-classic 1.5.18 → [Updates: 1.5.23]
• net.logstash.logback:logstash-logback-encoder 7.4 → [Updates: 9.0]
• org.apache.maven:maven-model 3.8.7 → [Updates: 3.9.12]
• com.theokanning.openai-gpt3-java:service 0.14.0 → [Updates: 0.18.2]
• info.picocli:picocli 4.7.0 → [Updates: 4.7.7]
• info.picocli:picocli-codegen 4.7.0 → [Updates: 4.7.7]
• me.tongfei:progressbar 0.9.3 → [Updates: 0.10.1]
• org.slf4j:slf4j-api 2.0.6 → [Updates: 2.0.17]
• org.javatuples:javatuples 1.2
• org.jetbrains.kotlin:kotlin-stdlib-jdk8 1.7.10 → [Updates: 1.9.25, 2.3.0]
• jaxen:jaxen 1.2.0 → [Updates: 2.0.0]
• xerces:xercesImpl 2.12.2
• org.xmlunit:xmlunit-core 2.9.0 → [Updates: 2.11.0]
• com.github.zafarkhaja:java-semver 0.9.0 → [Updates: 0.10.2]
• fun.mike:diff-match-patch 0.0.2
• org.slf4j:slf4j-simple 2.0.6 → [Updates: 2.0.17]

gradle/testlibs.versions.toml (10)

• org.assertj:assertj-core 3.24.0 → [Updates: 3.27.6]
• org.hamcrest:hamcrest-core 2.2 → [Updates: 3.0]
• org.hamcrest:hamcrest-library 2.2 → [Updates: 3.0]
• org.hamcrest:hamcrest-all 1.3
• org.eclipse.jgit:org.eclipse.jgit 3.5.0.201409260305-r → [Updates: 3.7.1.201504261725-r, 7.5.0.202512021534-r]
• org.junit.jupiter:junit-jupiter-api 5.8.2 → [Updates: 5.14.1, 6.0.1]
• org.junit.jupiter:junit-jupiter-params 5.8.2 → [Updates: 5.14.1, 6.0.1]
• org.junit.jupiter:junit-jupiter-engine 5.8.2 → [Updates: 5.14.1, 6.0.1]
• org.mockito:mockito-core 4.3.1 → [Updates: 4.11.0, 5.21.0]
• org.xmlunit:xmlunit-assertj3 2.9.0 → [Updates: 2.11.0]

plugins/codemodder-plugin-appscan/build.gradle.kts

plugins/codemodder-plugin-aws/build.gradle.kts (3)

• com.google.inject:guice 5.1.0 → [Updates: 7.0.0]
• software.amazon.awssdk:translate 2.20.101 → [Updates: 2.40.17]
• software.amazon.awssdk:sso 2.20.101 → [Updates: 2.40.17]

plugins/codemodder-plugin-codeql/build.gradle.kts

plugins/codemodder-plugin-defectdojo/build.gradle.kts

plugins/codemodder-plugin-llm/build.gradle.kts (1)

• com.google.inject:guice 5.1.0 → [Updates: 7.0.0]

plugins/codemodder-plugin-maven/build.gradle.kts

plugins/codemodder-plugin-pmd/build.gradle.kts (1)

• net.sourceforge.pmd:pmd-java 7.14.0 → [Updates: 7.20.0]

plugins/codemodder-plugin-semgrep/build.gradle.kts

plugins/codemodder-plugin-sonar/build.gradle.kts

settings.gradle.kts (1)

• com.gradle.enterprise 3.14.1 → [Updates: 3.19.2]

sonar-api-model/build.gradle.kts

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.5 → [Updates: 8.14.3, 9.2.1]

---

• Check this box to trigger a request for Renovate to run again on this repository