Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Maven Central rate limiting detected despite Redis caching.
• ⚠️ WARN: Release interceptor failed for "maven"

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency ch.qos.logback:logback-classic to v1.5.32
• Update dependency com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin to v7.0.2
• Update dependency io.github.pixee:java-security-toolkit to v1.2.3
• Update actions/checkout action to v4.3.1
• Update dependency com.github.zafarkhaja:java-semver to v0.10.2
• Update dependency com.google.auto.value:auto-value-annotations to v1.11.1
• Update dependency com.google.code.gson:gson to v2.14.0
• Update dependency com.theokanning.openai-gpt3-java:service to v0.18.2
• Update dependency io.codemodder:codetf-java to v4.6.0
• Update dependency io.github.java-diff-utils:java-diff-utils to v4.17
• Update dependency me.tongfei:progressbar to v0.10.2
• Update dependency net.sourceforge.pmd:pmd-java to v7.24.0
• Update dependency org.apache.commons:commons-collections4 to v4.5.0
• Update dependency org.apache.commons:commons-jexl3 to v3.6.2
• Update dependency org.apache.commons:commons-lang3 to v3.20.0
• Update dependency org.apache.maven:maven-model to v3.9.16
• Update dependency org.assertj:assertj-core to v3.27.7
• Update dependency org.dom4j:dom4j to v2.2.0
• Update dependency org.eclipse.jgit:org.eclipse.jgit to v3.7.1.201504261725-r
• Update dependency org.immutables:value to v2.12.2
• Update dependency org.jetbrains:annotations to v23.1.0
• Update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v1.9.25
• Update dependency org.mockito:mockito-core to v4.11.0
• Update dependency org.testcontainers:testcontainers to v1.21.4
• Update dependency org.xmlunit:xmlunit-assertj3 to v2.11.0
• Update dependency org.xmlunit:xmlunit-core to v2.11.0
• Update dependency python to 3.14
• Update docker/build-push-action action to v5.4.0
• Update docker/login-action action to v3.7.0
• Update docker/setup-buildx-action action to v3.12.0
• Update Gradle to v8.14.5
• Update gradle/gradle-build-action action to v2.12.0
• Update jackson monorepo to v2.21.3 (com.fasterxml.jackson.dataformat:jackson-dataformat-yaml, com.fasterxml.jackson.core:jackson-core)
• Update junit-framework monorepo to v5.14.4 (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• Update plugin com.gradle.enterprise to v3.19.2
• Update spotless to v6.25.0 (com.diffplug.spotless, com.diffplug.spotless:spotless-plugin-gradle)
• Update actions/checkout action to v6
• Update actions/setup-java action to v5
• Update actions/setup-python action to v6
• Update dependency com.google.inject:guice to v7
• Update dependency com.google.inject:guice to v7
• Update dependency com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin to v8
• Update dependency com.netflix.nebula.maven-publish:com.netflix.nebula.maven-publish.gradle.plugin to v23
• Update dependency com.netflix.nebula.maven-scm:com.netflix.nebula.maven-scm.gradle.plugin to v23
• Update dependency jaxen:jaxen to v2
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Update dependency org.eclipse.jgit:org.eclipse.jgit to v7
• Update dependency org.jetbrains:annotations to v26
• Update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v2
• Update dependency org.mockito:mockito-core to v5
• Update dependency org.testcontainers:testcontainers to v2
• Update docker/build-push-action action to v7
• Update docker/login-action action to v4
• Update docker/setup-buildx-action action to v4
• Update github/codeql-action action to v4
• Update Gradle to v9
• Update gradle/actions action to v6
• Update gradle/gradle-build-action action to v3
• Update javahamcrest monorepo to v3 (org.hamcrest:hamcrest-library, org.hamcrest:hamcrest-core)
• Update junit-framework monorepo to v6 (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• Update pixee/upload-tool-results-action action to v2
• Update plugin nexus-publish to v2
• Update spotless to v8 (com.diffplug.spotless, com.diffplug.spotless:spotless-plugin-gradle)
• Update stefanzweifel/git-auto-commit-action action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency com.github.lalyos:jfiglet to v0.0.9
• Update dependency io.github.classgraph:classgraph to v4.8.184
• Update picocli to v4.7.7 (info.picocli:picocli-codegen, info.picocli:picocli)
• Update pixee/upload-tool-results-action action to v1.1.3
• Update slf4j monorepo to v2.0.18 (org.slf4j:slf4j-simple, org.slf4j:slf4j-api)
• Update actions/setup-java action to v3.14.1
• Update aws-java-sdk-v2 monorepo to v2.44.11 (software.amazon.awssdk:sso, software.amazon.awssdk:translate)
• Update dependency com.fasterxml.woodstox:woodstox-core to v7.2.0
• Update dependency com.github.albfernandez:juniversalchardet to v2.5.0
• Update javaparser.core to v3.28.1 (com.github.javaparser:javaparser-symbol-solver-core, com.github.javaparser:javaparser-core)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (6)

.github/workflows/checks.yml (8)

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• actions/setup-java v3.13.0@0ab4596768b603586c0de567f2430c30f5b0d2b0 → [Updates: v3.14.1, v5.2.0]
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a → [Updates: v2.12.0, v3.5.0]
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226 → [Updates: v3.12.0, v4.1.0]
• docker/build-push-action v5.0.0@0565240e2d4ab88bba5387d719585280857ece09 → [Updates: v5.4.0, v7.2.0]
• actions/setup-python v4 → [Updates: v6]
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a → [Updates: v2.12.0, v3.5.0]
• python 3.11 → [Updates: 3.14]

.github/workflows/codeql.yml (4)

• actions/checkout v3 → [Updates: v6]
• github/codeql-action v2 → [Updates: v4]
• github/codeql-action v2 → [Updates: v4]
• github/codeql-action v2 → [Updates: v4]

.github/workflows/format_pixeebot_prs.yaml (4)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v3 → [Updates: v6]
• stefanzweifel/git-auto-commit-action v5 → [Updates: v7]

.github/workflows/release-integration-test-framework-images.yml (6)

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11 → [Updates: v4.3.1, v6.0.2]
• actions/setup-java v3.13.0@0ab4596768b603586c0de567f2430c30f5b0d2b0 → [Updates: v3.14.1, v5.2.0]
• gradle/gradle-build-action v2.9.0@842c587ad8aa4c68eeba24c396e15af4c2e9f30a → [Updates: v2.12.0, v3.5.0]
• docker/login-action v3.0.0@343f7c4344506bcbf9b4de18042ae17996df046d → [Updates: v3.7.0, v4.2.0]
• docker/setup-buildx-action v3.0.0@f95db51fddba0c2d1ec667646a06c2ce06100226 → [Updates: v3.12.0, v4.1.0]
• docker/build-push-action v5.0.0@0565240e2d4ab88bba5387d719585280857ece09 → [Updates: v5.4.0, v7.2.0]

.github/workflows/release.yml (7)

• actions/checkout v3 → [Updates: v6]
• actions/setup-python v4 → [Updates: v6]
• actions/setup-java v3 → [Updates: v5]
• gradle/gradle-build-action v2 → [Updates: v3]
• actions/create-release v1
• actions/upload-release-asset v1
• python 3.11 → [Updates: 3.14]

.github/workflows/sonar_pixee.yml (1)

• pixee/upload-tool-results-action v1.1.1 → [Updates: v1.1.3, v2.5.0]

gradle (35)

build.gradle.kts

community-codemods/build.gradle.kts

core-codemods/build.gradle.kts (1)

• org.testcontainers:testcontainers 1.19.0 → [Updates: 1.21.4, 2.0.5]

framework/codemodder-base/build.gradle.kts (3)

• io.codemodder:codetf-java 4.5.0 → [Updates: 4.6.0]
• com.azure:azure-ai-openai 1.0.0-beta.16
• io.github.classgraph:classgraph 4.8.160 → [Updates: 4.8.184]

framework/codemodder-testutils/build.gradle.kts

gradle.properties

gradle/build-plugins/build.gradle.kts

gradle/build-plugins/settings.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.base.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.core-codemods-docs.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java-library.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java-test-fixtures.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.java.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.maven-publish.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.openai.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.publishing-root.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.runner.gradle.kts

gradle/build-plugins/src/main/kotlin/io.codemodder.spotless.gradle.kts

gradle/build-settings/build.gradle.kts

gradle/build-settings/settings.gradle.kts

gradle/build-settings/src/main/kotlin/io.codemodder.repositories.settings.gradle.kts

gradle/buildlibs.versions.toml (6)

• com.netflix.nebula.contacts:com.netflix.nebula.contacts.gradle.plugin 7.0.1 → [Updates: 7.0.2, 8.1.0]
• com.netflix.nebula.maven-scm:com.netflix.nebula.maven-scm.gradle.plugin 20.3.0 → [Updates: 23.1.0]
• com.netflix.nebula.maven-publish:com.netflix.nebula.maven-publish.gradle.plugin 20.3.0 → [Updates: 23.1.0]
• com.diffplug.spotless:spotless-plugin-gradle 6.20.0 → [Updates: 6.25.0, 8.5.1]
• io.github.gradle-nexus.publish-plugin 1.3.0 → [Updates: 2.0.0]
• com.diffplug.spotless 6.20.0 → [Updates: 6.25.0, 8.5.1]

gradle/libs.versions.toml (41)

• com.google.auto.value:auto-value-annotations 1.9 → [Updates: 1.11.1]
• io.codescan:sarif-java 1.0
• org.dom4j:dom4j 2.1.4 → [Updates: 2.2.0]
• org.apache.commons:commons-jexl3 3.2.1 → [Updates: 3.6.2]
• org.apache.commons:commons-lang3 3.12.0 → [Updates: 3.20.0]
• org.apache.commons:commons-collections4 4.4 → [Updates: 4.5.0]
• com.contrastsecurity:java-sarif 2.0
• com.google.code.gson:gson 2.9.0 → [Updates: 2.14.0]
• com.google.inject:guice 5.1.0 → [Updates: 7.0.0]
• org.immutables:value 2.9.0 → [Updates: 2.12.2]
• com.fasterxml.woodstox:woodstox-core 7.1.0 → [Updates: 7.2.0]
• com.fasterxml.jackson.core:jackson-core 2.19.0 → [Updates: 2.21.3]
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.19.0 → [Updates: 2.21.3]
• io.github.java-diff-utils:java-diff-utils 4.12 → [Updates: 4.17]
• com.github.javaparser:javaparser-core 3.26.2 → [Updates: 3.28.1]
• com.github.javaparser:javaparser-symbol-solver-core 3.26.2 → [Updates: 3.28.1]
• com.github.javaparser:javaparser-symbol-solver-model 3.15.15
• com.github.javaparser:javaparser-symbol-solver-logic 3.15.15
• io.github.pixee:java-security-toolkit 1.2.2 → [Updates: 1.2.3]
• io.github.pixee:java-security-toolkit-xstream 1.0.2
• javax.inject:javax.inject 1
• org.jetbrains:annotations 23.0.0 → [Updates: 23.1.0, 26.1.0]
• com.github.lalyos:jfiglet 0.0.8 → [Updates: 0.0.9]
• com.knuddels:jtokkit 1.1.0
• com.github.albfernandez:juniversalchardet 2.4.0 → [Updates: 2.5.0]
• ch.qos.logback:logback-classic 1.5.18 → [Updates: 1.5.32]
• net.logstash.logback:logstash-logback-encoder 7.4 → [Updates: 9.0]
• org.apache.maven:maven-model 3.8.7 → [Updates: 3.9.16]
• com.theokanning.openai-gpt3-java:service 0.14.0 → [Updates: 0.18.2]
• info.picocli:picocli 4.7.0 → [Updates: 4.7.7]
• info.picocli:picocli-codegen 4.7.0 → [Updates: 4.7.7]
• me.tongfei:progressbar 0.9.3 → [Updates: 0.10.2]
• org.slf4j:slf4j-api 2.0.6 → [Updates: 2.0.18]
• org.javatuples:javatuples 1.2
• org.jetbrains.kotlin:kotlin-stdlib-jdk8 1.7.10 → [Updates: 1.9.25, 2.3.21]
• jaxen:jaxen 1.2.0 → [Updates: 2.0.3]
• xerces:xercesImpl 2.12.2
• org.xmlunit:xmlunit-core 2.9.0 → [Updates: 2.11.0]
• com.github.zafarkhaja:java-semver 0.9.0 → [Updates: 0.10.2]
• fun.mike:diff-match-patch 0.0.2
• org.slf4j:slf4j-simple 2.0.6 → [Updates: 2.0.18]

gradle/testlibs.versions.toml (10)

• org.assertj:assertj-core 3.24.0 → [Updates: 3.27.7]
• org.hamcrest:hamcrest-core 2.2 → [Updates: 3.0]
• org.hamcrest:hamcrest-library 2.2 → [Updates: 3.0]
• org.hamcrest:hamcrest-all 1.3
• org.eclipse.jgit:org.eclipse.jgit 3.5.0.201409260305-r → [Updates: 3.7.1.201504261725-r, 7.6.0.202603022253-r]
• org.junit.jupiter:junit-jupiter-api 5.8.2 → [Updates: 5.14.4, 6.1.0]
• org.junit.jupiter:junit-jupiter-params 5.8.2 → [Updates: 5.14.4, 6.1.0]
• org.junit.jupiter:junit-jupiter-engine 5.8.2 → [Updates: 5.14.4, 6.1.0]
• org.mockito:mockito-core 4.3.1 → [Updates: 4.11.0, 5.23.0]
• org.xmlunit:xmlunit-assertj3 2.9.0 → [Updates: 2.11.0]

plugins/codemodder-plugin-appscan/build.gradle.kts

plugins/codemodder-plugin-aws/build.gradle.kts (3)

• com.google.inject:guice 5.1.0 → [Updates: 7.0.0]
• software.amazon.awssdk:translate 2.20.101 → [Updates: 2.44.11]
• software.amazon.awssdk:sso 2.20.101 → [Updates: 2.44.11]

plugins/codemodder-plugin-codeql/build.gradle.kts

plugins/codemodder-plugin-defectdojo/build.gradle.kts

plugins/codemodder-plugin-llm/build.gradle.kts (1)

• com.google.inject:guice 5.1.0 → [Updates: 7.0.0]

plugins/codemodder-plugin-maven/build.gradle.kts

plugins/codemodder-plugin-pmd/build.gradle.kts (1)

• net.sourceforge.pmd:pmd-java 7.14.0 → [Updates: 7.24.0]

plugins/codemodder-plugin-semgrep/build.gradle.kts

plugins/codemodder-plugin-sonar/build.gradle.kts

settings.gradle.kts (1)

• com.gradle.enterprise 3.14.1 → [Updates: 3.19.2]

sonar-api-model/build.gradle.kts

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.5 → [Updates: 8.14.5, 9.5.1]

---

• Check this box to trigger a request for Renovate to run again on this repository