Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency ch.qos.logback:logback-classic to v1.5.20
• Update dependency com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin to v7.0.2
• Update actions/checkout action to v4.3.0
• Update dependency com.github.zafarkhaja:java-semver to v0.10.2
• Update dependency com.google.auto.value:auto-value-annotations to v1.11.0
• Update dependency com.google.code.gson:gson to v2.13.2
• Update dependency com.theokanning.openai-gpt3-java:service to v0.18.2
• Update dependency io.codemodder:codetf-java to v4.6.0
• Update dependency io.github.java-diff-utils:java-diff-utils to v4.16
• Update dependency me.tongfei:progressbar to v0.10.1
• Update dependency net.sourceforge.pmd:pmd-java to v7.18.0
• Update dependency org.apache.commons:commons-collections4 to v4.5.0
• Update dependency org.apache.commons:commons-jexl3 to v3.5.0
• Update dependency org.apache.commons:commons-lang3 to v3.19.0
• Update dependency org.apache.maven:maven-model to v3.9.11
• Update dependency org.assertj:assertj-core to v3.27.6
• Update dependency org.dom4j:dom4j to v2.2.0
• Update dependency org.eclipse.jgit:org.eclipse.jgit to v3.7.1.201504261725-r
• Update dependency org.immutables:value to v2.11.6
• Update dependency org.jetbrains:annotations to v23.1.0
• Update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v1.9.25
• Update dependency org.mockito:mockito-core to v4.11.0
• Update dependency org.testcontainers:testcontainers to v1.21.3
• Update dependency org.xmlunit:xmlunit-assertj3 to v2.11.0
• Update dependency org.xmlunit:xmlunit-core to v2.11.0
• Update dependency python to 3.14
• Update docker/build-push-action action to v5.4.0
• Update docker/login-action action to v3.6.0
• Update docker/setup-buildx-action action to v3.11.1
• Update Gradle to v8.14.3
• Update gradle/gradle-build-action action to v2.12.0
• Update jackson monorepo to v2.20.1 (com.fasterxml.jackson.dataformat:jackson-dataformat-yaml, com.fasterxml.jackson.core:jackson-core)
• Update junit-framework monorepo to v5.14.1 (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• Update plugin com.gradle.enterprise to v3.19.2
• Update spotless to v6.25.0 (com.diffplug.spotless, com.diffplug.spotless:spotless-plugin-gradle)
• Update actions/checkout action to v5
• Update actions/setup-java action to v5
• Update actions/setup-python action to v6
• Update dependency com.google.inject:guice to v7
• Update dependency com.google.inject:guice to v7
• Update dependency com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin to v8
• Update dependency com.netflix.nebula.maven-publish:com.netflix.nebula.maven-publish.gradle.plugin to v22
• Update dependency com.netflix.nebula.maven-scm:com.netflix.nebula.maven-scm.gradle.plugin to v22
• Update dependency jaxen:jaxen to v2
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Update dependency org.eclipse.jgit:org.eclipse.jgit to v7
• Update dependency org.jetbrains:annotations to v26
• Update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v2
• Update dependency org.mockito:mockito-core to v5
• Update dependency org.testcontainers:testcontainers to v2
• Update docker/build-push-action action to v6
• Update github/codeql-action action to v4
• Update Gradle to v9
• Update gradle/actions action to v5
• Update gradle/gradle-build-action action to v3
• Update javahamcrest monorepo to v3 (major) (org.hamcrest:hamcrest-library, org.hamcrest:hamcrest-core)
• Update junit-framework monorepo to v6 (major) (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• Update pixee/upload-tool-results-action action to v2
• Update plugin nexus-publish to v2
• Update spotless to v8 (major) (com.diffplug.spotless, com.diffplug.spotless:spotless-plugin-gradle)
• Update stefanzweifel/git-auto-commit-action action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency com.fasterxml.woodstox:woodstox-core to v7.1.1
• Update dependency com.github.lalyos:jfiglet to v0.0.9
• Update dependency io.github.classgraph:classgraph to v4.8.184
• Update picocli to v4.7.7 (info.picocli:picocli-codegen, info.picocli:picocli)
• Update pixee/upload-tool-results-action action to v1.1.3
• Update slf4j monorepo to v2.0.17 (org.slf4j:slf4j-simple, org.slf4j:slf4j-api)
• Update actions/setup-java action to v3.14.1
• Update aws-java-sdk-v2 monorepo to v2.38.2 (software.amazon.awssdk:sso, software.amazon.awssdk:translate)
• Update dependency com.github.albfernandez:juniversalchardet to v2.5.0
• Update javaparser.core to v3.27.1 (com.github.javaparser:javaparser-symbol-solver-core, com.github.javaparser:javaparser-core)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/workflows/checks.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-java v3.13.0@0ab4596768b603586c0de567f2430c30f5b0d2b0
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/build-push-action v5.0.0@0565240e2d4ab88bba5387d719585280857ece09
• actions/setup-python v4
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a
• python 3.11

.github/workflows/codeql.yml

• actions/checkout v3
• github/codeql-action v2
• github/codeql-action v2
• github/codeql-action v2

.github/workflows/format_pixeebot_prs.yaml

• actions/checkout v4
• actions/setup-java v4
• gradle/actions v3
• stefanzweifel/git-auto-commit-action v5

.github/workflows/release-integration-test-framework-images.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• actions/setup-java v3.13.0@0ab4596768b603586c0de567f2430c30f5b0d2b0
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226
• docker/build-push-action v5.0.0@0565240e2d4ab88bba5387d719585280857ece09

.github/workflows/release.yml

• actions/checkout v3
• actions/setup-python v4
• actions/setup-java v3
• gradle/gradle-build-action v2
• actions/create-release v1
• actions/upload-release-asset v1
• python 3.11

.github/workflows/sonar_pixee.yml

• pixee/upload-tool-results-action v1.1.1

gradle

build.gradle.kts

community-codemods/build.gradle.kts

core-codemods/build.gradle.kts

• org.testcontainers:testcontainers 1.19.0

framework/codemodder-base/build.gradle.kts

• io.codemodder:codetf-java 4.5.0
• com.azure:azure-ai-openai 1.0.0-beta.16
• io.github.classgraph:classgraph 4.8.160

framework/codemodder-testutils/build.gradle.kts

gradle.properties

gradle/build-plugins/build.gradle.kts

gradle/build-plugins/settings.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.base.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.core-codemods-docs.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java-library.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java-test-fixtures.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.maven-publish.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.openai.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.publishing-root.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.runner.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.spotless.gradle.kts

gradle/build-settings/build.gradle.kts

gradle/build-settings/settings.gradle.kts

gradle/build-settings/src/main/kotlin/io.codemodder.repositories.settings.gradle.kts

gradle/buildlibs.versions.toml

• com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin 7.0.1
• com.netflix.nebula.maven-scm:com.netflix.nebula.maven-scm.gradle.plugin 20.3.0
• com.netflix.nebula.maven-publish:com.netflix.nebula.maven-publish.gradle.plugin 20.3.0
• com.diffplug.spotless:spotless-plugin-gradle 6.20.0
• io.github.gradle-nexus.publish-plugin 1.3.0
• com.diffplug.spotless 6.20.0

gradle/libs.versions.toml

• com.google.auto.value:auto-value-annotations 1.9
• io.codescan:sarif-java 1.0
• org.dom4j:dom4j 2.1.4
• org.apache.commons:commons-jexl3 3.2.1
• org.apache.commons:commons-lang3 3.12.0
• org.apache.commons:commons-collections4 4.4
• com.contrastsecurity:java-sarif 2.0
• com.google.code.gson:gson 2.9.0
• com.google.inject:guice 5.1.0
• org.immutables:value 2.9.0
• com.fasterxml.woodstox:woodstox-core 7.1.0
• com.fasterxml.jackson.core:jackson-core 2.19.0
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.19.0
• io.github.java-diff-utils:java-diff-utils 4.12
• com.github.javaparser:javaparser-core 3.26.2
• com.github.javaparser:javaparser-symbol-solver-core 3.26.2
• com.github.javaparser:javaparser-symbol-solver-model 3.15.15
• com.github.javaparser:javaparser-symbol-solver-logic 3.15.15
• io.github.pixee:java-security-toolkit 1.2.2
• io.github.pixee:java-security-toolkit-xstream 1.0.2
• javax.inject:javax.inject 1
• org.jetbrains:annotations 23.0.0
• com.github.lalyos:jfiglet 0.0.8
• com.knuddels:jtokkit 1.1.0
• com.github.albfernandez:juniversalchardet 2.4.0
• ch.qos.logback:logback-classic 1.5.18
• net.logstash.logback:logstash-logback-encoder 7.4
• org.apache.maven:maven-model 3.8.7
• com.theokanning.openai-gpt3-java:service 0.14.0
• info.picocli:picocli 4.7.0
• info.picocli:picocli-codegen 4.7.0
• me.tongfei:progressbar 0.9.3
• org.slf4j:slf4j-api 2.0.6
• org.javatuples:javatuples 1.2
• org.jetbrains.kotlin:kotlin-stdlib-jdk8 1.7.10
• jaxen:jaxen 1.2.0
• xerces:xercesImpl 2.12.2
• org.xmlunit:xmlunit-core 2.9.0
• com.github.zafarkhaja:java-semver 0.9.0
• fun.mike:diff-match-patch 0.0.2
• org.slf4j:slf4j-simple 2.0.6

gradle/testlibs.versions.toml

• org.assertj:assertj-core 3.24.0
• org.hamcrest:hamcrest-core 2.2
• org.hamcrest:hamcrest-library 2.2
• org.hamcrest:hamcrest-all 1.3
• org.eclipse.jgit:org.eclipse.jgit 3.5.0.201409260305-r
• org.junit.jupiter:junit-jupiter-api 5.8.2
• org.junit.jupiter:junit-jupiter-params 5.8.2
• org.junit.jupiter:junit-jupiter-engine 5.8.2
• org.mockito:mockito-core 4.3.1
• org.xmlunit:xmlunit-assertj3 2.9.0

plugins/codemodder-plugin-appscan/build.gradle.kts

plugins/codemodder-plugin-aws/build.gradle.kts

• com.google.inject:guice 5.1.0
• software.amazon.awssdk:translate 2.20.101
• software.amazon.awssdk:sso 2.20.101

plugins/codemodder-plugin-codeql/build.gradle.kts

plugins/codemodder-plugin-defectdojo/build.gradle.kts

plugins/codemodder-plugin-llm/build.gradle.kts

• com.google.inject:guice 5.1.0

plugins/codemodder-plugin-maven/build.gradle.kts

plugins/codemodder-plugin-pmd/build.gradle.kts

• net.sourceforge.pmd:pmd-java 7.14.0

plugins/codemodder-plugin-semgrep/build.gradle.kts

plugins/codemodder-plugin-sonar/build.gradle.kts

settings.gradle.kts

• com.gradle.enterprise 3.14.1

sonar-api-model/build.gradle.kts

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.5

---

• Check this box to trigger a request for Renovate to run again on this repository