Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
• Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.1
• Update dependency org.jacoco:jacoco-maven-plugin to v0.8.14
• Update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.8.3
• Update dependency org.apache.maven.plugins:maven-antrun-plugin to v3.2.0
• Update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
• Update dependency org.apache.maven.plugins:maven-clean-plugin to v3.5.0
• Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
• Update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
• Update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3
• Update dependency org.apache.maven.plugins:maven-resources-plugin to v3.5.0
• Update dependency org.apache.maven.plugins:maven-scm-plugin to v2.2.1
• Update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
• Update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.3
• Update dependency org.codehaus.mojo:javacc-maven-plugin to v3.2.0
• Update dependency org.dom4j:dom4j to v2.2.0
• Update dependency org.junit.jupiter:junit-jupiter-api to v5.14.4
• Update dependency org.testng:testng to v7.12.0
• Update actions/checkout action to v6
• Update actions/setup-java action to v5
• Update dependency com.puppycrawl.tools:checkstyle to v13
• Update dependency org.junit.jupiter:junit-jupiter-api to v6
• Update protobuf monorepo to v4 (com.google.protobuf:protobuf-java, com.google.protobuf:protoc)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency com.fasterxml.jackson.core:jackson-core to v2.18.6 [SECURITY]
• Update dependency org.apache.commons:commons-lang3 to v3.18.0 [SECURITY]
• Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6
• Update protobuf monorepo to v3.25.9 (com.google.protobuf:protobuf-java, com.google.protobuf:protoc)
• Update com.github.spotbugs.version to v4.9.8 (com.github.spotbugs:spotbugs-annotations, com.github.spotbugs:spotbugs)
• Update dependency com.puppycrawl.tools:checkstyle to v10.26.1
• Update dependency org.apache.commons:commons-text to v1.15.0
• Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
• Update dependency org.apache.maven.plugins:maven-pmd-plugin to v3.28.0
• Update dependency org.mockito:mockito-core to v5.23.0
• Update dependency org.sonatype.central:central-publishing-maven-plugin to v0.10.0
• Update jackson monorepo (com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider, com.fasterxml.jackson.jaxrs:jackson-jaxrs-base, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-annotations)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (2)

.github/workflows/publish-maven-package.yml (2)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]

.github/workflows/test.yml (2)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]

maven (1)

pom.xml (48)

• kr.motd.maven:os-maven-plugin 1.7.1
• org.apache.maven.plugins:maven-clean-plugin 3.4.0 → [Updates: 3.5.0]
• org.codehaus.mojo:exec-maven-plugin 3.5.0 → [Updates: 3.6.3]
• org.apache.maven.plugins:maven-dependency-plugin 3.8.1 → [Updates: 3.11.0]
• com.google.protobuf:protoc 3.25.5 → [Updates: 3.25.9, 4.35.0]
• org.apache.maven.plugins:maven-antrun-plugin 3.1.0 → [Updates: 3.2.0]
• org.codehaus.mojo:build-helper-maven-plugin 3.6.0 → [Updates: 3.6.1]
• org.antlr:antlr3-maven-plugin 3.5.3
• org.codehaus.mojo:javacc-maven-plugin 3.1.0 → [Updates: 3.2.0]
• org.apache.maven.plugins:maven-resources-plugin 3.3.1 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-assembly-plugin 3.7.1 → [Updates: 3.8.0]
• org.apache.maven.plugins:maven-scm-plugin 2.1.0 → [Updates: 2.2.1]
• com.googlecode.jslint4java:jslint4java-maven-plugin 2.0.5
• org.apache.maven.plugins:maven-enforcer-plugin 3.5.0 → [Updates: 3.6.3]
• com.github.spotbugs:spotbugs-maven-plugin 4.8.6.6 → [Updates: 4.9.8.3]
• com.github.spotbugs:spotbugs 4.8.6 → [Updates: 4.9.8]
• com.github.spotbugs:spotbugs-annotations 4.8.6 → [Updates: 4.9.8]
• org.dom4j:dom4j 2.1.4 → [Updates: 2.2.0]
• org.apache.maven.plugins:maven-pmd-plugin 3.21.2 → [Updates: 3.28.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.2 → [Updates: 3.5.6]
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 10.20.1 → [Updates: 10.26.1, 13.4.2]
• org.jacoco:jacoco-maven-plugin 0.8.12 → [Updates: 0.8.14]
• org.apache.maven.plugins:maven-compiler-plugin 3.13.0 → [Updates: 3.15.0]
• org.apache.maven.plugins:maven-source-plugin 3.3.1 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-source-plugin 3.3.1 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.11.1 → [Updates: 3.12.0]
• org.apache.maven.plugins:maven-gpg-plugin 3.2.7 → [Updates: 3.2.8]
• org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0
• org.sonatype.central:central-publishing-maven-plugin 0.6.0 → [Updates: 0.10.0]
• org.apache.maven.plugins:maven-source-plugin 3.3.1 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.11.1 → [Updates: 3.12.0]
• org.apache.maven.plugins:maven-gpg-plugin 3.2.7 → [Updates: 3.2.8]
• com.fasterxml.jackson.core:jackson-annotations 2.18.1 → [Updates: 2.21]
• com.fasterxml.jackson.core:jackson-core 2.18.1 → [Updates: 2.18.6]
• com.fasterxml.jackson.core:jackson-databind 2.18.1 → [Updates: 2.21.4]
• com.fasterxml.jackson.jaxrs:jackson-jaxrs-base 2.18.1 → [Updates: 2.21.4]
• com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider 2.18.1 → [Updates: 2.21.4]
• net.sourceforge.cssparser:cssparser 0.9.30
• com.google.protobuf:protobuf-java 3.25.5 → [Updates: 3.25.9, 4.35.0]
• com.yahoo.tagchowder:tagchowder.core 2.0.29
• com.google.code.findbugs:jsr305 3.0.2
• org.apache.commons:commons-lang3 3.17.0 → [Updates: 3.18.0]
• org.apache.commons:commons-text 1.12.0 → [Updates: 1.15.0]
• com.puppycrawl.tools:checkstyle 10.20.1 → [Updates: 10.26.1, 13.4.2]
• org.testng:testng 7.10.2 → [Updates: 7.12.0]
• org.junit.jupiter:junit-jupiter-api 5.11.3 → [Updates: 5.14.4, 6.1.0]
• org.mockito:mockito-core 5.14.2 → [Updates: 5.23.0]

---

• Check this box to trigger a request for Renovate to run again on this repository