Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Detected empty commit - aborting git push

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@opentelemetry/exporter-otlp-grpc

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update gcr.io/k8s-skaffold/skaffold docker tag to v2.14.1
• chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.119.0
• chore(deps): update angular-cli monorepo to v19 (major) (@angular-devkit/build-angular, @angular/cli)
• chore(deps): update dependency faker to v36
• chore(deps): update dependency npgsql to v9
• chore(deps): update dependency python-json-logger to v3
• chore(deps): update dependency xunit.runner.visualstudio to v3
• chore(deps): update node.js to v22
• chore(deps): update terraform terraform-google-modules/project-factory/google to v18
• fix(deps): update angular monorepo to v19 (major) (@angular/animations, @angular/common, @angular/compiler, @angular/compiler-cli, @angular/core, @angular/forms, @angular/platform-browser, @angular/platform-browser-dynamic, @angular/router)
• fix(deps): update dependency uuid to v11
• fix(deps): update protobuf monorepo to v4 (major) (com.google.protobuf:protoc, com.google.protobuf:protobuf-java)

Other Branches

These updates are pending. To force PRs open, click the checkbox below.

• chore(deps): update dependency requests to v2.32.2 [security]

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency jinja2 to v3.1.5 [security]
• fix(deps): update module golang.org/x/net to v0.33.0 [security]
• fix(deps): update nodejs (@angular-devkit/build-angular, @angular/cli, @google-cloud/profiler, @grpc/grpc-js, @opentelemetry/instrumentation-grpc, @opentelemetry/resources, @opentelemetry/sdk-node, @opentelemetry/sdk-trace-base, @opentelemetry/semantic-conventions, jasmine-core, pino, typescript, zone.js)
• chore(deps): update docker (alpine, eclipse-temurin, golang, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/runtime-deps, mcr.microsoft.com/dotnet/sdk, node, python)
• chore(deps): update dotnet (Grpc.AspNetCore, Grpc.HealthCheck, Grpc.Net.Client, Microsoft.AspNetCore.TestHost, Microsoft.Extensions.Caching.StackExchangeRedis, Microsoft.NET.Test.Sdk, Npgsql, xunit)
• fix(deps): update golang (cloud.google.com/go/alloydbconn, cloud.google.com/go/compute/metadata, cloud.google.com/go/profiler, cloud.google.com/go/secretmanager, github.com/go-playground/validator/v10, github.com/jackc/pgx/v5, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/sdk, google.golang.org/grpc, google.golang.org/protobuf)
• fix(deps): update java (gradle, googleJavaFormat, io.netty:netty-tcnative-boringssl-static, org.apache.logging.log4j:log4j-core, com.google.api.grpc:proto-google-common-protos, com.google.protobuf:protoc, com.google.protobuf:protobuf-java, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-core, io.grpc:protoc-gen-grpc-java, io.grpc:grpc-census, io.grpc:grpc-services, io.grpc:grpc-netty, io.grpc:grpc-stub, io.grpc:grpc-protobuf)
• chore(deps): update dependency langchain-google-genai to v2
• chore(deps): update dependency pillow to v11
• chore(deps): update dependency ubuntu to v24
• chore(deps): update dotnet monorepo to v9 (major) (Microsoft.AspNetCore.TestHost, Microsoft.Extensions.Caching.StackExchangeRedis, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/runtime-deps, mcr.microsoft.com/dotnet/sdk)
• chore(deps): update terraform google to v6
• chore(deps): refresh pip-compile outputs python (undefined, flask, google-api-core, google-cloud-secret-manager, google-cloud-trace, grpcio, grpcio-health-checking, langchain, langchain-google-alloydb-pg, locust, opentelemetry-exporter-otlp-proto-grpc, opentelemetry-instrumentation-grpc)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

cloudbuild

cloudbuild.yaml

• gcr.io/k8s-skaffold/skaffold v2.13.1

dockerfile

src/adservice/Dockerfile

• eclipse-temurin 21@sha256:d2233012784e0b35d893f7802e28d39e39e9422180b4c6f14ed2fb714b0952e5
• eclipse-temurin 21.0.4_7-jre-alpine@sha256:8cc1202a100e72f6e91bf05ab274b373a5def789ab6d9e3e293a61236662ac27

src/cartservice/src/Dockerfile

• mcr.microsoft.com/dotnet/sdk 8.0.401-noble@sha256:d37cbb248b78027e3f149ea422bc9dc3bbf5b8c47bd1150e14c9849462235e91
• mcr.microsoft.com/dotnet/runtime-deps 8.0.8-noble-chiseled@sha256:3cb2df1c71b529442df921684a4ab27699d986bfa1558caf336501e224c56ee5

src/cartservice/src/Dockerfile.debug

• mcr.microsoft.com/dotnet/sdk 8.0@sha256:c9966505b18c198b7b5000b07ec3c7102bc257de580be270ce39ec278d549ef8
• mcr.microsoft.com/dotnet/aspnet 8.0@sha256:11d6f2f1d19520b98ee8417c2420a467690e8a0a4b9a6951a124840286536f89

src/checkoutservice/Dockerfile

• golang 1.23.0-alpine@sha256:d0b31558e6b3e4cc59f6011d79905835108c919143ebecc58f35965bf79948f4

src/currencyservice/Dockerfile

• node 20.17.0-alpine@sha256:2d07db07a2df6830718ae2a47db6fedce6745f5bcd174c398f2acdda90a11c03
• alpine 3.20.2@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

src/emailservice/Dockerfile

• python 3.12.5-slim@sha256:c24c34b502635f1f7c4e99dc09a2cbd85d480b7dcfd077198c6b5af138906390

src/frontend/Dockerfile

• golang 1.23.0-alpine@sha256:d0b31558e6b3e4cc59f6011d79905835108c919143ebecc58f35965bf79948f4

src/loadgenerator/Dockerfile

• python 3.12.5-slim@sha256:c24c34b502635f1f7c4e99dc09a2cbd85d480b7dcfd077198c6b5af138906390

src/paymentservice/Dockerfile

• node 20.17.0-alpine@sha256:2d07db07a2df6830718ae2a47db6fedce6745f5bcd174c398f2acdda90a11c03
• alpine 3.20.2@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5

src/productcatalogservice/Dockerfile

• golang 1.23.0-alpine@sha256:d0b31558e6b3e4cc59f6011d79905835108c919143ebecc58f35965bf79948f4

src/recommendationservice/Dockerfile

• python 3.12.5-slim@sha256:c24c34b502635f1f7c4e99dc09a2cbd85d480b7dcfd077198c6b5af138906390

src/shippingservice/Dockerfile

• golang 1.23.0-alpine@sha256:d0b31558e6b3e4cc59f6011d79905835108c919143ebecc58f35965bf79948f4

src/shoppingassistantservice/Dockerfile

• python 3.12.5-slim@sha256:c24c34b502635f1f7c4e99dc09a2cbd85d480b7dcfd077198c6b5af138906390

github-actions

.github/workflows/ci-main.yaml

• actions/checkout v4
• actions/setup-dotnet v4
• actions/setup-go v5
• actions/checkout v4

.github/workflows/ci-pr.yaml

• actions/checkout v4
• actions/setup-dotnet v4
• actions/setup-go v5
• actions/checkout v4

.github/workflows/helm-chart-ci.yaml

• actions/checkout v4
• ubuntu 22.04

.github/workflows/jekyll-gh-pages.yml

• actions/checkout v4
• actions/configure-pages v5
• actions/jekyll-build-pages v1
• actions/upload-pages-artifact v3
• actions/deploy-pages v4

.github/workflows/kubevious-manifests-ci.yaml

• actions/checkout v4
• kubevious/cli v1.0.62
• kubevious/cli v1.0.62
• kubevious/cli v1.0.62
• ubuntu 22.04

.github/workflows/kustomize-build-ci.yaml

• actions/checkout v4
• ubuntu 22.04

.github/workflows/push-deploy.yaml

• actions/checkout v4

.github/workflows/terraform-validate-ci.yaml

• actions/checkout v4
• ubuntu 22.04

gomod

src/checkoutservice/go.mod

• go 1.23
• cloud.google.com/go/profiler v0.4.1
• github.com/google/uuid v1.6.0
• github.com/pkg/errors v0.9.1
• github.com/sirupsen/logrus v1.9.3
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0
• go.opentelemetry.io/otel v1.29.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.29.0
• go.opentelemetry.io/otel/sdk v1.29.0
• google.golang.org/grpc v1.66.0
• google.golang.org/protobuf v1.34.2

src/frontend/go.mod

• go 1.23
• cloud.google.com/go/compute/metadata v0.5.0
• cloud.google.com/go/profiler v0.4.1
• github.com/go-playground/validator/v10 v10.22.0
• github.com/google/uuid v1.6.0
• github.com/gorilla/mux v1.8.1
• github.com/pkg/errors v0.9.1
• github.com/sirupsen/logrus v1.9.3
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0
• go.opentelemetry.io/otel v1.29.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.29.0
• go.opentelemetry.io/otel/sdk v1.29.0
• google.golang.org/grpc v1.66.0
• google.golang.org/protobuf v1.34.2

src/productcatalogservice/go.mod

• go 1.23
• cloud.google.com/go/alloydbconn v1.12.0
• cloud.google.com/go/profiler v0.4.1
• cloud.google.com/go/secretmanager v1.14.0
• github.com/golang/protobuf v1.5.4
• github.com/jackc/pgx/v5 v5.6.0
• github.com/pkg/errors v0.9.1
• github.com/sirupsen/logrus v1.9.3
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0
• go.opentelemetry.io/otel v1.29.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.29.0
• go.opentelemetry.io/otel/sdk v1.29.0
• google.golang.org/grpc v1.66.0
• google.golang.org/protobuf v1.34.2

src/shippingservice/go.mod

• go 1.23
• cloud.google.com/go/profiler v0.4.1
• github.com/sirupsen/logrus v1.9.3
• golang.org/x/net v0.28.0
• google.golang.org/grpc v1.66.0
• google.golang.org/protobuf v1.34.2

gradle

src/adservice/settings.gradle

src/adservice/build.gradle

• com.google.protobuf 0.9.4
• com.github.sherter.google-java-format 0.9
• com.google.api.grpc:proto-google-common-protos 2.48.0
• javax.annotation:javax.annotation-api 1.3.2
• io.grpc:grpc-protobuf 1.68.1
• io.grpc:grpc-stub 1.68.1
• io.grpc:grpc-netty 1.68.1
• io.grpc:grpc-services 1.68.1
• io.grpc:grpc-census 1.68.1
• org.apache.logging.log4j:log4j-core 2.24.1
• com.google.protobuf:protobuf-java 3.25.5
• com.fasterxml.jackson.core:jackson-core 2.18.1
• com.fasterxml.jackson.core:jackson-databind 2.18.1
• io.netty:netty-tcnative-boringssl-static 2.0.69.Final
• com.google.protobuf:protoc 3.25.5
• io.grpc:protoc-gen-grpc-java 1.68.1
• googleJavaFormat 1.24.0

gradle-wrapper

src/adservice/gradle/wrapper/gradle-wrapper.properties

• gradle 8.10.2

kubernetes

.github/release-cluster/frontend-ingress.yaml

• Ingress networking.k8s.io/v1

helm-chart/templates/cartservice.yaml

• redis alpine@sha256:02419de7eddf55aa5bcf49efb74e88fa8d931b4d77c07eff8a6b2144472b6952

helm-chart/templates/common.yaml

• NetworkPolicy networking.k8s.io/v1

helm-chart/templates/loadgenerator.yaml

• busybox latest@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1

helm-chart/templates/opentelemetry-collector.yaml

• busybox latest@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
• otel/opentelemetry-collector-contrib 0.118.0@sha256:3f6274fe609da4f9964fbc2ef36b83d08d47964fbb11629251393590d3924072
• Deployment apps/v1
• NetworkPolicy networking.k8s.io/v1

kubernetes-manifests/adservice.yaml

• Deployment apps/v1

kubernetes-manifests/cartservice.yaml

• Deployment apps/v1
• Deployment apps/v1

kubernetes-manifests/checkoutservice.yaml

• Deployment apps/v1

kubernetes-manifests/currencyservice.yaml

• Deployment apps/v1

kubernetes-manifests/emailservice.yaml

• Deployment apps/v1

kubernetes-manifests/frontend.yaml

• Deployment apps/v1

kubernetes-manifests/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

kubernetes-manifests/loadgenerator.yaml

• Deployment apps/v1

kubernetes-manifests/paymentservice.yaml

• Deployment apps/v1

kubernetes-manifests/productcatalogservice.yaml

• Deployment apps/v1

kubernetes-manifests/recommendationservice.yaml

• Deployment apps/v1

kubernetes-manifests/shippingservice.yaml

• Deployment apps/v1

kustomize/components/google-cloud-operations/otel-collector.yaml

• busybox latest@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
• otel/opentelemetry-collector-contrib 0.118.0@sha256:3f6274fe609da4f9964fbc2ef36b83d08d47964fbb11629251393590d3924072
• Deployment apps/v1

kustomize/components/network-policies/network-policy-adservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-cartservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-checkoutservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-currencyservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-deny-all.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-emailservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-frontend.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-loadgenerator.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-paymentservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-productcatalogservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-recommendationservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-redis.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-shippingservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/shopping-assistant/shoppingassistantservice.yaml

• Deployment apps/v1

kustomize/components/without-loadgenerator/delete-loadgenerator.patch.yaml

• Deployment apps/v1

kustomize/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

kustomize/tests/memorystore-with-all-components/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

kustomize/tests/service-mesh-istio-with-all-components/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

kustomize/tests/spanner-with-all-components/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

skaffold.yaml

kustomize

kustomize/components/container-images-registry/kustomization.yaml

kustomize/components/container-images-tag/kustomization.yaml

npm

src/currencyservice/package.json

• @google-cloud/profiler 6.0.1
• @google-cloud/trace-agent 8.0.0
• @grpc/grpc-js 1.11.1
• @grpc/proto-loader 0.7.13
• async 3.2.6
• google-protobuf 3.21.4
• @opentelemetry/api 1.9.0
• @opentelemetry/exporter-otlp-grpc 0.26.0
• @opentelemetry/instrumentation-grpc 0.53.0
• @opentelemetry/resources 1.26.0
• @opentelemetry/semantic-conventions 1.27.0
• @opentelemetry/sdk-trace-base 1.26.0
• @opentelemetry/sdk-node 0.53.0
• pino 9.3.2
• xml2js 0.6.2

src/paymentservice/package.json

• @google-cloud/profiler 6.0.1
• @grpc/grpc-js 1.11.1
• @grpc/proto-loader 0.7.13
• @opentelemetry/api 1.9.0
• @opentelemetry/exporter-otlp-grpc 0.26.0
• @opentelemetry/instrumentation-grpc 0.53.0
• @opentelemetry/sdk-trace-base 1.26.0
• @opentelemetry/sdk-node 0.53.0
• @opentelemetry/resources 1.26.0
• @opentelemetry/semantic-conventions 1.27.0
• pino 9.3.2
• simple-card-validator ^1.1.0
• uuid ^10.0.0

y/package.json

• @angular/animations ^18.2.0
• @angular/common ^18.2.0
• @angular/compiler ^18.2.0
• @angular/core ^18.2.0
• @angular/forms ^18.2.0
• @angular/platform-browser ^18.2.0
• @angular/platform-browser-dynamic ^18.2.0
• @angular/router ^18.2.0
• rxjs ~7.8.0
• tslib ^2.3.0
• zone.js ~0.14.10
• @angular-devkit/build-angular ^18.2.12
• @angular/cli ^18.2.12
• @angular/compiler-cli ^18.2.0
• @types/jasmine ~5.1.0
• jasmine-core ~5.2.0
• karma ~6.4.0
• karma-chrome-launcher ~3.2.0
• karma-coverage ~2.2.0
• karma-jasmine ~5.1.0
• karma-jasmine-html-reporter ~2.1.0
• typescript ~5.5.2

nuget

src/cartservice/src/cartservice.csproj

• Google.Cloud.SecretManager.V1 2.5.0
• Npgsql 8.0.3
• Google.Cloud.Spanner.Data 4.6.0
• Microsoft.Extensions.Caching.StackExchangeRedis 8.0.8
• Grpc.HealthCheck 2.65.0
• Grpc.AspNetCore 2.65.0

src/cartservice/tests/cartservice.tests.csproj

• xunit.runner.visualstudio 2.8.2
• xunit 2.9.0
• Microsoft.NET.Test.Sdk 17.11.0
• Microsoft.AspNetCore.TestHost 8.0.8
• Grpc.Net.Client 2.65.0

pip-compile

src/shoppingassistantservice/requirements.in

• flask ==3.0.3
• langchain-google-genai ==1.0.10
• langchain ==0.3.7
• pillow ==10.4.0
• langchain-google-alloydb-pg ==0.8.0
• google-cloud-secret-manager ==2.21.0

src/recommendationservice/requirements.in

• google-api-core ==2.22.0
• google-cloud-profiler ==4.1.0
• grpcio-health-checking ==1.67.1
• python-json-logger ==2.0.7
• requests ==2.32.2
• rsa ==4.9
• opentelemetry-distro ==0.41b0
• opentelemetry-instrumentation-grpc ==0.48b0
• opentelemetry-exporter-otlp-proto-grpc ==1.27.0

src/loadgenerator/requirements.in

• locust ==2.32.1
• faker ==28.4.1

src/emailservice/requirements.in

• google-api-core ==2.22.0
• grpcio-health-checking ==1.67.1
• grpcio ==1.67.1
• jinja2 ==3.1.4
• python-json-logger ==2.0.7
• google-cloud-profiler ==4.1.0
• google-cloud-trace ==1.14.0
• requests ==2.32.2
• opentelemetry-distro ==0.41b0
• opentelemetry-instrumentation-grpc ==0.48b0
• opentelemetry-exporter-otlp-proto-grpc ==1.27.0

terraform

.github/terraform/main.tf

• terraform-google-modules/project-factory/google ~> 16.0

.github/terraform/versions.tf

• google ~> 5.4
• hashicorp/terraform >= 0.13

terraform/main.tf

• terraform-google-modules/project-factory/google ~> 16.0
• terraform-google-modules/gcloud/google ~> 3.0

terraform/providers.tf

• google 5.45.2

---

• Check this box to trigger a request for Renovate to run again on this repository