Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency info.picocli:picocli to v4.7.7
• chore(deps): update dependency io.projectreactor.tools:blockhound to v1.0.16.release
• chore(deps): update dependency org.antlr:antlr4 to v4.13.2
• chore(deps): update dependency org.apache.ivy:ivy to v2.5.3
• chore(deps): update dependency org.apache.tomcat:tomcat-dbcp to v10.1.54
• chore(deps): update dependency org.apache.tomcat:tomcat-jsp-api to v10.1.54
• chore(deps): update dependency org.apache.tomcat:tomcat-servlet-api to v10.1.54
• chore(deps): update dependency org.apache.tomcat.embed:tomcat-embed-jasper to v10.1.54
• chore(deps): update dependency org.codehaus.groovy:groovy-ant to v3.0.25
• chore(deps): update dependency org.jacoco:org.jacoco.agent to v0.8.14
• chore(deps): update dependency org.jacoco:org.jacoco.ant to v0.8.14
• chore(deps): update dependency org.jacoco:org.jacoco.cli to v0.8.14
• chore(deps): update dependency org.jacoco:org.jacoco.core to v0.8.14
• chore(deps): update dependency org.jacoco:org.jacoco.report to v0.8.14
• chore(deps): update dependency org.pitest:pitest-junit5-plugin to v1.2.3
• chore(deps): update dependency org.projectlombok:lombok to v1.18.46
• chore(deps): update dependency org.slf4j:slf4j-simple to v2.0.17
• chore(deps): update jetty monorepo (org.eclipse.jetty:apache-jsp, org.eclipse.jetty:jetty-annotations, org.eclipse.jetty:jetty-webapp, org.eclipse.jetty:jetty-servlet, org.eclipse.jetty:jetty-jmx)
• chore(deps): update dependency biz.aqute.bnd:biz.aqute.bndlib to v7.2.3
• chore(deps): update dependency com.github.javaparser:javaparser-core to v3.28.0
• chore(deps): update dependency com.github.javaparser:javaparser-symbol-solver-core to v3.28.0
• chore(deps): update dependency com.github.spotbugs:spotbugs-ant to v4.9.8
• chore(deps): update dependency com.google.errorprone:error_prone_core to v2.49.0
• chore(deps): update dependency com.google.googlejavaformat:google-java-format to v1.35.0
• chore(deps): update dependency com.google.guava:guava to v33.6.0-jre
• chore(deps): update dependency com.google.truth:truth to v1.4.5
• chore(deps): update dependency com.h3xstream.findsecbugs:findsecbugs-plugin to v1.14.0
• chore(deps): update dependency com.madgag:bfg to v1.15.0
• chore(deps): update dependency com.mebigfatguy.sb-contrib:sb-contrib to v7.7.4
• chore(deps): update dependency gr.spinellis.ckjm:ckjm_ext to v2.11
• chore(deps): update dependency io.lettuce:lettuce-core to v6.8.2.release
• chore(deps): update dependency jakarta.enterprise:jakarta.enterprise.cdi-api to v4.1.0
• chore(deps): update dependency net.bytebuddy:byte-buddy to v1.18.8-jdk5
• chore(deps): update dependency net.bytebuddy:byte-buddy-agent to v1.18.8-jdk5
• chore(deps): update dependency net.java.dev.jna:jna to v5.18.1
• chore(deps): update dependency net.sf.saxon:saxon-he to v12.9
• chore(deps): update dependency net.sourceforge.pmd:pmd-ant to v7.23.0
• chore(deps): update dependency net.sourceforge.pmd:pmd-cli to v7.23.0
• chore(deps): update dependency net.sourceforge.pmd:pmd-html to v7.23.0
• chore(deps): update dependency net.sourceforge.pmd:pmd-java to v7.23.0
• chore(deps): update dependency net.sourceforge.pmd:pmd-jsp to v7.23.0
• chore(deps): update dependency net.sourceforge.pmd:pmd-xml to v7.23.0
• chore(deps): update dependency org.apache.bcel:bcel to v6.12.0
• chore(deps): update dependency org.apache.commons:commons-text to v1.15.0
• chore(deps): update dependency org.apache.logging.log4j:log4j-api to v2.25.4
• chore(deps): update dependency org.checkerframework:checker to v3.55.1
• chore(deps): update dependency org.ow2.asm:asm to v9.9.1
• chore(deps): update dependency org.ow2.asm:asm-commons to v9.9.1
• chore(deps): update dependency org.ow2.asm:asm-util to v9.9.1
• chore(deps): update dependency org.pitest:pitest to v1.23.1
• chore(deps): update dependency org.pitest:pitest-ant to v1.23.1
• chore(deps): update dependency org.pitest:pitest-command-line to v1.23.1
• chore(deps): update dependency org.springframework:spring-core to v6.2.18
• chore(deps): update dependency org.springframework.boot:spring-boot to v3.5.13
• chore(deps): update dependency org.testng:testng to v7.12.0
• chore(deps): update junit-framework monorepo (org.junit.jupiter:junit-jupiter-engine, org.junit.platform:junit-platform-launcher, org.junit.jupiter:junit-jupiter-api)
• chore(deps): update actions/checkout action to v6
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v13
• chore(deps): update dependency io.jenetics:jenetics to v9
• chore(deps): update dependency io.lettuce:lettuce-core to v7
• chore(deps): update dependency org.apache.tomcat:tomcat-dbcp to v11
• chore(deps): update dependency org.apache.tomcat:tomcat-jsp-api to v11
• chore(deps): update dependency org.apache.tomcat:tomcat-servlet-api to v11
• chore(deps): update dependency org.apache.tomcat.embed:tomcat-embed-jasper to v11
• chore(deps): update dependency org.checkerframework:checker to v4
• chore(deps): update dependency org.eclipse.jetty:jetty-annotations to v12
• chore(deps): update dependency org.hamcrest:hamcrest to v3
• chore(deps): update dependency org.springframework:spring-core to v7
• chore(deps): update dependency org.springframework.boot:spring-boot to v4
• chore(deps): update junit-framework monorepo to v6 (major) (org.junit.jupiter:junit-jupiter-engine, org.junit.platform:junit-platform-launcher, org.junit.jupiter:junit-jupiter-api)
• chore(deps): update wagoid/commitlint-github-action action to v6
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package net.sourceforge.saxon:saxon: no-result.

Files affected: pom.xml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency com.thoughtworks.xstream:xstream to v1.4.21 [security]
• chore(deps): update dependency org.apache.tomcat.embed:tomcat-embed-core to v10.1.54 [security]
• chore(deps): update dependency org.eclipse.jetty:jetty-server to v12.0.32 [security]
• chore(deps): update dependency net.sourceforge.pmd:pmd-core to v7.22.0 [security]
• chore(deps): update dependency org.apache.logging.log4j:log4j-core to v2.25.4 [security]
• chore(deps): update dependency org.assertj:assertj-core to v3.27.7 [security]
• chore(deps): update dependency org.owasp.esapi:esapi to v2.6.0.0 [security]
• chore(deps): update dependency com.amazonaws:aws-java-sdk to v1.12.797
• chore(deps): update dependency com.github.spotbugs:spotbugs to v4.9.8
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.26.1
• chore(deps): update dependency org.xmlresolver:xmlresolver to v5.3.3
• chore(deps): update dependency org.xmlresolver:xmlresolver to v6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

circleci (1)

.circleci/config.yml

github-actions (1)

.github/workflows/commitlint.yml (2)

• actions/checkout v4 → [Updates: v6]
• wagoid/commitlint-github-action v5 → [Updates: v6]

maven (1)

pom.xml (108)

• ant-contrib:ant-contrib 1.0b3
• com.google.googlejavaformat:google-java-format 1.19.2 → [Updates: 1.35.0]
• com.puppycrawl.tools:checkstyle 10.12.7 → [Updates: 10.26.1, 13.4.0]
• net.sourceforge.pmd:pmd-core 7.0.0-rc4 → [Updates: 7.22.0]
• net.sourceforge.pmd:pmd-java 7.0.0-rc4 → [Updates: 7.23.0]
• net.sourceforge.pmd:pmd-jsp 7.0.0-rc4 → [Updates: 7.23.0]
• net.sourceforge.pmd:pmd-xml 7.0.0-rc4 → [Updates: 7.23.0]
• net.sourceforge.pmd:pmd-ant 7.0.0-rc4 → [Updates: 7.23.0]
• net.sourceforge.pmd:pmd-html 7.0.0-rc4 → [Updates: 7.23.0]
• net.sourceforge.pmd:pmd-cli 7.0.0-rc4 → [Updates: 7.23.0]
• net.sourceforge.saxon:saxon 9.1.0.8
• org.apache.logging.log4j:log4j-api 2.22.1 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-core 2.22.1 → [Updates: 2.25.4]
• com.github.sevntu-checkstyle:sevntu-checks 1.44.1
• org.jacorb:jacorb 3.9
• org.apache.derby:derby 10.17.1.0
• org.apache.derby:derbytools 10.17.1.0
• org.apache.derby:derbyshared 10.17.1.0
• org.apache.tomcat.embed:tomcat-embed-logging-juli 9.0.0.M6
• org.apache.tomcat.embed:tomcat-embed-logging-log4j 9.0.0.M6
• org.apache.tomcat.embed:tomcat-embed-core 10.1.18 → [Updates: 10.1.54]
• org.apache.tomcat:tomcat-dbcp 10.1.18 → [Updates: 10.1.54, 11.0.21]
• org.apache.tomcat.embed:tomcat-embed-jasper 10.1.18 → [Updates: 10.1.54, 11.0.21]
• org.apache.tomcat:tomcat-servlet-api 10.1.18 → [Updates: 10.1.54, 11.0.21]
• org.apache.tomcat:tomcat-jsp-api 10.1.18 → [Updates: 10.1.54, 11.0.21]
• org.eclipse.jdt.core.compiler:ecj 4.6.1
• org.junit.jupiter:junit-jupiter-api 5.10.1 → [Updates: 5.14.3, 6.0.3]
• org.junit.platform:junit-platform-launcher 1.10.1 → [Updates: 1.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.10.1 → [Updates: 5.14.3, 6.0.3]
• junit:junit 4.13.2
• org.eclipse.jetty:jetty-server 12.0.5 → [Updates: 12.0.32]
• org.eclipse.jetty:jetty-jmx 12.0.5 → [Updates: 12.1.8]
• org.eclipse.jetty:jetty-servlet 11.0.19 → [Updates: 11.0.26]
• org.eclipse.jetty:jetty-webapp 11.0.19 → [Updates: 11.0.25]
• org.eclipse.jetty:jetty-annotations 11.0.19 → [Updates: 11.0.26, 12.1.8]
• org.eclipse.jetty:apache-jsp 11.0.19 → [Updates: 11.0.26]
• org.eclipse.jetty:jetty-jsp 9.3.0.M1
• org.checkerframework:checker 3.42.0 → [Updates: 3.55.1, 4.0.0]
• com.beust:jcommander 1.82
• org.jdom:jdom2 2.0.6.1
• net.sf.saxon:Saxon-HE 12.4 → [Updates: 12.9]
• com.github.javaparser:javaparser-core 3.25.8 → [Updates: 3.28.0]
• com.github.javaparser:javaparser-symbol-solver-core 3.25.8 → [Updates: 3.28.0]
• com.github.javaparser:java-symbol-solver-core 0.6.3
• org.antlr:antlr4 4.13.1 → [Updates: 4.13.2]
• info.debatty:java-lsh 0.12
• info.debatty:java-string-similarity 2.0.0
• org.javatuples:javatuples 1.2
• com.google.truth:truth 1.3.0 → [Updates: 1.4.5]
• org.apache.commons:commons-text 1.11.0 → [Updates: 1.15.0]
• info.picocli:picocli 4.7.5 → [Updates: 4.7.7]
• org.jacoco:org.jacoco.core 0.8.11 → [Updates: 0.8.14]
• org.jacoco:org.jacoco.ant 0.8.11 → [Updates: 0.8.14]
• org.jacoco:org.jacoco.report 0.8.11 → [Updates: 0.8.14]
• org.jacoco:org.jacoco.cli 0.8.11 → [Updates: 0.8.14]
• org.jacoco:org.jacoco.agent 0.8.11 → [Updates: 0.8.14]
• org.pitest:pitest 1.15.6 → [Updates: 1.23.1]
• org.pitest:pitest-command-line 1.15.6 → [Updates: 1.23.1]
• org.pitest:pitest-ant 1.15.6 → [Updates: 1.23.1]
• org.pitest:pitest-junit5-plugin 1.2.1 → [Updates: 1.2.3]
• ant-contrib:ant-contrib 1.0b3
• org.assertj:assertj-core 3.25.1 → [Updates: 3.27.7]
• com.github.spotbugs:spotbugs 4.8.3 → [Updates: 4.9.8]
• com.github.spotbugs:spotbugs-ant 4.8.3 → [Updates: 4.9.8]
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.12.0 → [Updates: 1.14.0]
• com.mebigfatguy.sb-contrib:sb-contrib 7.6.4 → [Updates: 7.7.4]
• com.google.errorprone:error_prone_core 2.24.1 → [Updates: 2.49.0]
• gr.spinellis.ckjm:ckjm_ext 2.5 → [Updates: 2.11]
• org.codehaus.javancss:javancss 33.54
• org.apache.bcel:bcel 6.8.1 → [Updates: 6.12.0]
• net.java.dev.javacc:javacc 7.0.13
• net.sf.trove4j:trove4j 3.0.3
• org.springframework:spring-core 6.1.3 → [Updates: 6.2.18, 7.0.7]
• org.testng:testng 7.9.0 → [Updates: 7.12.0]
• commons-collections:commons-collections 20040616
• org.javolution:javolution-core-java 6.0.0
• com.google.guava:guava 33.0.0-jre → [Updates: 33.6.0-jre]
• org.hamcrest:hamcrest 2.2 → [Updates: 3.0]
• org.owasp.esapi:esapi 2.5.3.1 → [Updates: 2.6.0.0]
• org.projectlombok:lombok 1.18.30 → [Updates: 1.18.46]
• org.openjdk.jmh:jmh-core 1.37
• org.openjdk.jmh:jmh-generator-annprocess 1.37
• org.openjdk.jmh:jmh-generator-reflection 1.37
• org.openjdk.jmh:jmh-generator-bytecode 1.37
• org.openjdk.jmh:jmh-generator-asm 1.37
• org.openjdk.jmh:jmh-core-benchmarks 1.37
• org.codehaus.groovy:groovy-ant 3.0.20 → [Updates: 3.0.25]
• io.jenetics:jenetics 7.2.0 → [Updates: 9.0.0]
• net.java.dev.jna:jna 5.14.0 → [Updates: 5.18.1]
• com.thoughtworks.xstream:xstream 1.4.20 → [Updates: 1.4.21]
• org.ow2.asm:asm 9.6 → [Updates: 9.9.1]
• org.ow2.asm:asm-util 9.6 → [Updates: 9.9.1]
• org.ow2.asm:asm-commons 9.6 → [Updates: 9.9.1]
• net.bytebuddy:byte-buddy 1.14.11 → [Updates: 1.18.8-jdk5]
• net.bytebuddy:byte-buddy-agent 1.14.11 → [Updates: 1.18.8-jdk5]
• org.mongodb:mongo-java-driver 3.12.14
• com.github.javafaker:javafaker 1.0.2
• org.springframework.boot:spring-boot 3.2.2 → [Updates: 3.5.13, 4.0.5]
• com.amazonaws:aws-java-sdk 1.12.531 → [Updates: 1.12.797]
• com.madgag:bfg 1.14.0 → [Updates: 1.15.0]
• io.netty:netty-all 5.0.0.Alpha2
• org.xmlresolver:xmlresolver 5.2.2 → [Updates: 5.3.3, 6.0.21]
• org.slf4j:slf4j-simple 2.0.11 → [Updates: 2.0.17]
• org.apache.ivy:ivy 2.5.2 → [Updates: 2.5.3]
• io.lettuce:lettuce-core 6.3.1.RELEASE → [Updates: 6.8.2.RELEASE, 7.5.1.RELEASE]
• io.projectreactor.tools:blockhound 1.0.8.RELEASE → [Updates: 1.0.16.RELEASE]
• jakarta.enterprise:jakarta.enterprise.cdi-api 4.0.1 → [Updates: 4.1.0]
• biz.aQute.bnd:biz.aQute.bndlib 7.0.0 → [Updates: 7.2.3]

---

• Check this box to trigger a request for Renovate to run again on this repository