Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update github/codeql-action digest to efffb48
• chore(deps): lock file maintenance

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update all dependencies (actions/checkout, github/codeql-action, gradle/actions, yarn, com.google.guava:guava, org.junit.jupiter:junit-jupiter, org.apache.httpcomponents.client5:httpclient5, org.javamoney.moneta:moneta-core)

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update plugin com.netflix.dgs.codegen to v7
• fix(deps): update dependency com.graphql-java:graphql-java to v230521
• fix(deps): update dependency com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core to v7
• fix(deps): update dependency com.squareup.okhttp3:okhttp to v4
• fix(deps): update dependency org.asynchttpclient:async-http-client to v3

Detected dependencies

github-actions

.github/workflows/benchmark.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• actions/setup-java v4@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12

.github/workflows/ci.yml

• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• actions/setup-java v4@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v5.1.0@e348103e9026cc0eee72ae06630dbe30c8bf7a79
• stefanzweifel/git-auto-commit-action v5.1.0@e348103e9026cc0eee72ae06630dbe30c8bf7a79
• stefanzweifel/git-auto-commit-action v5.1.0@e348103e9026cc0eee72ae06630dbe30c8bf7a79
• codecov/codecov-action v5.4.0@0565863a31f2c772f9f0395002a31e3f06189574
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• actions/setup-java v4@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b

.github/workflows/codeql.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• github/codeql-action v3.28.12@5f8171a638ada777af81d42b55959a643bb29017
• github/codeql-action v3.28.12@5f8171a638ada777af81d42b55959a643bb29017
• github/codeql-action v3.28.12@5f8171a638ada777af81d42b55959a643bb29017

.github/workflows/create-pr.yml

• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db

.github/workflows/docs.yml

• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v5.1.0@e348103e9026cc0eee72ae06630dbe30c8bf7a79

.github/workflows/release-snapshot.yml

• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• actions/setup-java v4@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c

.github/workflows/release.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• actions/setup-java v4@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4@06832c7b30a0129d7fb559bcc6e43d26f6374244
• stefanzweifel/git-auto-commit-action v5.1.0@e348103e9026cc0eee72ae06630dbe30c8bf7a79
• actions/create-github-app-token v1@d72941d797fd3113feb6b93fd0dec494b13a2547
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v5.1.0@e348103e9026cc0eee72ae06630dbe30c8bf7a79

.github/workflows/semgrep.yml

• actions/checkout v4.1.1@b4ffde65f46336ab88eb53be808477a3936bae11
• github/codeql-action 9f45e7498becbbc08084a122b4be9ab534ac6d88

gradle

gradle.properties

settings.gradle

build.gradle

• io.github.gradle-nexus.publish-plugin 2.0.0
• me.champeau.jmh 0.7.3
• net.sourceforge.plantuml:plantuml 1.2025.2
• com.commercetools.build.taglets:commercetools-taglets 3.6.3
• com.google.guava:guava 33.4.5-jre
• org.jdrupes.taglets:plantuml-taglet 3.1.0

commercetools/commercetools-apachehttp-client/build.gradle

• org.apache.httpcomponents.client5:httpclient5 5.4.2

commercetools/commercetools-async-http-client/build.gradle

• org.asynchttpclient:async-http-client 2.12.4
• io.netty:netty-codec 4.1.119.Final
• io.netty:netty-codec-http 4.1.119.Final
• io.netty:netty-codec-socks 4.1.119.Final
• io.netty:netty-handler-proxy 4.1.119.Final
• io.netty:netty-handler 4.1.119.Final

commercetools/commercetools-graphql-api/build.gradle

• com.netflix.dgs.codegen 6.3.0
• com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core 6.3.0

commercetools/commercetools-http-client/build.gradle

commercetools/commercetools-javanet-client/build.gradle

commercetools/commercetools-money/build.gradle

• javax.money:money-api 1.1
• org.javamoney.moneta:moneta-core 1.4.4

commercetools/commercetools-monitoring-datadog/build.gradle

• com.datadoghq:java-dogstatsd-client 4.4.3
• com.datadoghq:datadog-api-client 2.33.1

commercetools/commercetools-monitoring-newrelic/build.gradle

• com.newrelic.agent.java:newrelic-api 8.19.0

commercetools/commercetools-monitoring-opentelemetry/build.gradle

• io.opentelemetry:opentelemetry-api 1.48.0

commercetools/commercetools-okhttp-client3/build.gradle

• com.squareup.okio:okio 3.10.2
• com.squareup.okhttp3:okhttp 3.14.9

commercetools/commercetools-okhttp-client4/build.gradle

• com.squareup.okhttp3:okhttp 4.12.0
• com.squareup.okio:okio 3.10.2

commercetools/commercetools-reactornetty-client/build.gradle

• io.projectreactor.netty:reactor-netty-http 1.2.4
• io.projectreactor.netty:reactor-netty-core 1.2.4

commercetools/commercetools-sdk-compat-v1/build.gradle

• io.netty:netty-codec 4.1.119.Final
• io.netty:netty-codec-http 4.1.119.Final

commercetools/commercetools-sdk-java-api/build.gradle

commercetools/commercetools-sdk-java-history/build.gradle

commercetools/commercetools-sdk-java-importapi/build.gradle

commercetools/internal-docs/build.gradle

common-plugins/settings.gradle

common-plugins/build.gradle

• org.jetbrains.kotlin.jvm 2.1.20
• com.google.code.gson:gson 2.12.1
• com.squareup:javapoet 1.13.0
• com.google.guava:guava 33.4.5-jre

common-plugins/javaparser/build.gradle

• com.github.johnrengelman.shadow 8.1.1
• com.github.javaparser:javaparser-core 3.26.3

gradle-scripts/extensions.gradle

• com.commercetools.sdk.jvm.core:commercetools-java-client 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-models 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-convenience 2.16.0
• org.apache.commons:commons-text 1.13.0
• org.apache.commons:commons-lang3 3.17.0
• commons-io:commons-io 2.18.0
• org.slf4j:slf4j-api 2.0.17
• com.fasterxml.jackson.core:jackson-annotations 2.18.3
• com.fasterxml.jackson.core:jackson-databind 2.18.3
• com.fasterxml.jackson.core:jackson-core 2.18.3
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.3
• com.google.code.findbugs:jsr305 3.0.2
• com.google.code.gson:gson 2.12.1
• com.graphql-java:graphql-java 19.11
• org.awaitility:awaitility 4.3.0
• jakarta.validation:jakarta.validation-api 3.1.1
• org.junit.jupiter:junit-jupiter 5.11.4
• com.tngtech.junit.dataprovider:junit-jupiter-dataprovider 2.10
• org.skyscreamer:jsonassert 1.5.3
• org.assertj:assertj-core 3.27.3
• org.mockito:mockito-inline 5.2.0
• org.mockito:mockito-junit-jupiter 5.16.1
• dev.failsafe:failsafe 3.3.2
• com.spotify:completable-futures 0.3.6

gradle-scripts/jacoco.gradle

gradle-scripts/publishing.gradle

gradle-scripts/repositories.gradle

gradle-scripts/spotless.gradle

gradle-scripts/subproject-config.gradle

gradle-scripts/subproject-dependencies.gradle

gradle-scripts/subproject-plugins.gradle

gradle-scripts/subproject-srcinfo-plugin.gradle

rmf/rmf-java-base/build.gradle

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.13

npm

package.json

• husky 9.1.7
• lint-staged 15.5.0
• node >=14.15
• npm >=5
• yarn 4.7.0

---

• Check this box to trigger a request for Renovate to run again on this repository