Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
maven	com.atlassian.commonmark:commonmark

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency maven-wrapper to v3.3.4
• Update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
• Update dependency org.junit:junit-bom to v5.14.4
• Update dependency org.mockito:mockito-core to v4.11.0
• Update dependency org.sonatype.central:central-publishing-maven-plugin to v0.11.0
• Update jmh.version to v1.37 (org.openjdk.jmh:jmh-generator-annprocess, org.openjdk.jmh:jmh-core)
• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/setup-java action to v6
• Update dependency com.google.guava:guava to v33
• Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3
• Update dependency org.junit:junit-bom to v6
• Update dependency org.mockito:mockito-core to v5
• Update dependency org.slf4j:slf4j-api to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency ch.qos.logback:logback-classic to v1.2.13 [SECURITY]
• Update dependency org.mozilla:rhino to v1.7.14.1 [SECURITY]
• Update dependency com.fasterxml.jackson.core:jackson-core to v2.18.8 [SECURITY]
• Update dependency com.fasterxml.jackson.core:jackson-databind to v2.18.9 [SECURITY]
• Update dependency commons-io:commons-io to v2.14.0 [SECURITY]
• Update dependency org.apache.commons:commons-lang3 to v3.18.0 [SECURITY]
• Update dependency org.xmlunit:xmlunit-core to v2.10.0 [SECURITY]
• Replace dependency com.atlassian.commonmark:commonmark with org.commonmark:commonmark
• Update dependency com.google.guava:guava to v32.1.3-jre
• Update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
• Update dependency org.freemarker:freemarker to v2.3.35
• Update dependency org.jacoco:jacoco-maven-plugin to v0.8.15
• Update dependency org.projectlombok:lombok to v1.18.48
• Update dependency org.slf4j:slf4j-api to v1.7.36
• Update dependency com.atlassian.commonmark:commonmark to v0.17.0
• Update dependency maven to v3.9.16
• Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (4)

.github/workflows/build.yml (3)

• actions/checkout v3 → [Updates: v7]
• actions/cache v3 → [Updates: v6]
• actions/setup-java v3 → [Updates: v6]

.github/workflows/cve-scanning.yml (2)

• actions/checkout v3 → [Updates: v7]
• actions/setup-java v3 → [Updates: v6]

.github/workflows/release.yml (3)

• actions/checkout v3 → [Updates: v7]
• actions/cache v3 → [Updates: v6]
• actions/setup-java v3 → [Updates: v6]

.github/workflows/semgrep.yml (1)

• actions/checkout v3 → [Updates: v7]

maven (1)

pom.xml (23)

• org.sonatype.central:central-publishing-maven-plugin 0.9.0 → [Updates: 0.11.0]
• org.junit:junit-bom 5.8.2 → [Updates: 5.14.4, 6.1.3]
• org.projectlombok:lombok 1.18.22 → [Updates: 1.18.48]
• com.github.java-json-tools:json-schema-validator 2.2.14
• org.mozilla:rhino 1.7.13 → [Updates: 1.7.14.1]
• com.google.guava:guava 32.1.2-jre → [Updates: 32.1.3-jre, 33.7.1-jre]
• com.fasterxml.jackson.core:jackson-core 2.15.2 → [Updates: 2.18.8]
• com.fasterxml.jackson.core:jackson-databind 2.15.2 → [Updates: 2.18.9]
• commons-io:commons-io 2.11.0 → [Updates: 2.14.0]
• org.apache.commons:commons-lang3 3.12.0 → [Updates: 3.18.0]
• org.freemarker:freemarker 2.3.34 → [Updates: 2.3.35]
• org.slf4j:slf4j-api 1.7.32 → [Updates: 1.7.36, 2.0.19]
• com.atlassian.commonmark:commonmark 0.15.2 → [Updates: 0.17.0]
• org.mockito:mockito-core 4.0.0 → [Updates: 4.11.0, 5.23.0]
• org.openjdk.jmh:jmh-core 1.33 → [Updates: 1.37]
• org.openjdk.jmh:jmh-generator-annprocess 1.33 → [Updates: 1.37]
• org.xmlunit:xmlunit-core 2.8.3 → [Updates: 2.10.0]
• ch.qos.logback:logback-classic 1.2.9 → [Updates: 1.2.13]
• org.jacoco:jacoco-maven-plugin 0.8.7 → [Updates: 0.8.15]
• org.apache.maven.plugins:maven-gpg-plugin 3.2.7 → [Updates: 3.2.8]
• org.apache.maven.plugins:maven-source-plugin 3.2.1 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.3.2 → [Updates: 3.12.0]
• org.apache.maven.plugins:maven-surefire-plugin 2.22.2 → [Updates: 3.6.0]

maven-wrapper (1)

.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.8.4 → [Updates: 3.9.16]
• maven-wrapper 3.1.0 → [Updates: 3.3.4]

---

• Check this box to trigger a request for Renovate to run again on this repository