Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/setup-java digest to c1e3236
• chore(deps): update github/codeql-action action to v4
• chore(deps): update stefanzweifel/git-auto-commit-action action to v7
• fix(deps): update dependency com.graphql-java:graphql-java to v25
• fix(deps): update dependency com.newrelic.agent.java:newrelic-api to v9
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to 34e1148
• chore(deps): update actions/create-github-app-token digest to 29824e6
• fix(deps): update all dependencies (actions/checkout, codecov/codecov-action, github/codeql-action, gradle, gradle/actions, lint-staged, yarn, org.mockito:mockito-junit-jupiter, org.assertj:assertj-core, com.google.guava:guava, org.junit.jupiter:junit-jupiter, net.sourceforge.plantuml:plantuml, com.google.code.gson:gson, com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-annotations, com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core, io.netty:netty-codec-http, commons-io:commons-io, io.netty:netty-codec, org.apache.commons:commons-lang3, org.apache.commons:commons-text, com.squareup.okio:okio, io.netty:netty-handler, io.netty:netty-handler-proxy, com.github.javaparser:javaparser-core, io.netty:netty-codec-socks, com.datadoghq:datadog-api-client, io.projectreactor.netty:reactor-netty-core, com.newrelic.agent.java:newrelic-api, io.opentelemetry:opentelemetry-api, com.datadoghq:java-dogstatsd-client, org.apache.httpcomponents.client5:httpclient5, io.projectreactor.netty:reactor-netty-http, com.netflix.dgs.codegen, org.jetbrains.kotlin.jvm)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-java action to v5
• chore(deps): update gradle to v9
• chore(deps): update gradle/actions action to v5
• fix(deps): update dependency com.squareup.okhttp3:okhttp to v5
• fix(deps): update dependency org.junit.jupiter:junit-jupiter to v6
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency org.asynchttpclient:async-http-client to v3

Detected Dependencies

github-actions (8)

.github/workflows/benchmark.yml (3)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]

.github/workflows/ci.yml (17)

• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e → [Updates: v2]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• codecov/codecov-action v5.4.3@18283e04ce6e62d37312384ff67231eb8fd56d24 → [Updates: v5.5.2]
• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e → [Updates: v2]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e → [Updates: v2]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]

.github/workflows/codeql.yml (5)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• github/codeql-action v3.29.1@39edc492dbe16b1465b0cafca41432d857bdb31a → [Updates: v3.31.10, v4.31.10]
• github/codeql-action v3.29.1@39edc492dbe16b1465b0cafca41432d857bdb31a → [Updates: v3.31.10, v4.31.10]
• github/codeql-action v3.29.1@39edc492dbe16b1465b0cafca41432d857bdb31a → [Updates: v3.31.10, v4.31.10]

.github/workflows/create-pr.yml (5)

• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e → [Updates: v2]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db

.github/workflows/docs.yml (7)

• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e → [Updates: v2]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]

.github/workflows/release-snapshot.yml (5)

• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e → [Updates: v2]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c

.github/workflows/release.yml (14)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e → [Updates: v2]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96 → [Updates: v4.4.4, v5.0.0]
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]
• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e → [Updates: v2]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0 → [Updates: v7.1.0]

.github/workflows/semgrep.yml (2)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.3.1, v6.0.2]
• github/codeql-action v3.29.1@39edc492dbe16b1465b0cafca41432d857bdb31a → [Updates: v3.31.10, v4.31.10]

gradle (36)

build.gradle (6)

• io.github.gradle-nexus.publish-plugin 2.0.0
• me.champeau.jmh 0.7.3
• net.sourceforge.plantuml:plantuml 1.2025.4 → [Updates: 1.2026.1]
• com.commercetools.build.taglets:commercetools-taglets 3.6.3
• com.google.guava:guava 33.4.8-jre → [Updates: 33.5.0-jre]
• org.jdrupes.taglets:plantuml-taglet 3.1.0

commercetools/commercetools-apachehttp-client/build.gradle (1)

• org.apache.httpcomponents.client5:httpclient5 5.5 → [Updates: 5.6]

commercetools/commercetools-async-http-client/build.gradle (6)

• org.asynchttpclient:async-http-client 2.12.4 → [Updates: 3.0.6]
• io.netty:netty-codec 4.2.2.Final → [Updates: 4.2.9.Final]
• io.netty:netty-codec-http 4.2.2.Final → [Updates: 4.2.9.Final]
• io.netty:netty-codec-socks 4.2.2.Final → [Updates: 4.2.9.Final]
• io.netty:netty-handler-proxy 4.2.2.Final → [Updates: 4.2.9.Final]
• io.netty:netty-handler 4.2.2.Final → [Updates: 4.2.9.Final]

commercetools/commercetools-graphql-api/build.gradle (2)

• com.netflix.dgs.codegen 8.1.0 → [Updates: 8.3.0]
• com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core 8.1.0 → [Updates: 8.3.0]

commercetools/commercetools-http-client/build.gradle

commercetools/commercetools-importapi-utils/build.gradle

commercetools/commercetools-javanet-client/build.gradle

commercetools/commercetools-money/build.gradle (2)

• javax.money:money-api 1.1
• org.javamoney.moneta:moneta-core 1.4.5

commercetools/commercetools-monitoring-datadog/build.gradle (2)

• com.datadoghq:java-dogstatsd-client 4.4.4 → [Updates: 4.4.5]
• com.datadoghq:datadog-api-client 2.38.0 → [Updates: 2.50.0]

commercetools/commercetools-monitoring-newrelic/build.gradle (1)

• com.newrelic.agent.java:newrelic-api 8.21.0 → [Updates: 8.25.1, 9.0.0]

commercetools/commercetools-monitoring-opentelemetry/build.gradle (1)

• io.opentelemetry:opentelemetry-api 1.51.0 → [Updates: 1.58.0]

commercetools/commercetools-okhttp-client3/build.gradle (2)

• com.squareup.okio:okio 3.14.0 → [Updates: 3.16.4]
• com.squareup.okhttp3:okhttp 3.14.9 → [Updates: 5.3.2]

commercetools/commercetools-okhttp-client4/build.gradle (2)

• com.squareup.okhttp3:okhttp 4.12.0 → [Updates: 5.3.2]
• com.squareup.okio:okio 3.14.0 → [Updates: 3.16.4]

commercetools/commercetools-okhttp-client5/build.gradle (2)

• com.squareup.okhttp3:okhttp 5.3.2
• com.squareup.okio:okio 3.16.2 → [Updates: 3.16.4]

commercetools/commercetools-reactornetty-client/build.gradle (2)

• io.projectreactor.netty:reactor-netty-http 1.2.8 → [Updates: 1.3.2]
• io.projectreactor.netty:reactor-netty-core 1.2.8 → [Updates: 1.3.2]

commercetools/commercetools-sdk-compat-v1/build.gradle (2)

• io.netty:netty-codec 4.2.2.Final → [Updates: 4.2.9.Final]
• io.netty:netty-codec-http 4.2.2.Final → [Updates: 4.2.9.Final]

commercetools/commercetools-sdk-java-api/build.gradle

commercetools/commercetools-sdk-java-checkout/build.gradle

commercetools/commercetools-sdk-java-history/build.gradle

commercetools/commercetools-sdk-java-importapi/build.gradle

commercetools/internal-docs/build.gradle (2)

• org.junit.jupiter:junit-jupiter 5.x.x → [Updates: 5.14.2, 6.0.2]
• com.commercetools.sdk.jvm.core:commercetools-models 2.16.0

common-plugins/build.gradle (4)

• org.jetbrains.kotlin.jvm 2.2.0 → [Updates: 2.3.0]
• com.google.code.gson:gson 2.13.1 → [Updates: 2.13.2]
• com.squareup:javapoet 1.13.0
• com.google.guava:guava 33.4.8-jre → [Updates: 33.5.0-jre]

common-plugins/javaparser/build.gradle (2)

• com.github.johnrengelman.shadow 8.1.1
• com.github.javaparser:javaparser-core 3.27.0 → [Updates: 3.28.0]

common-plugins/settings.gradle

gradle-scripts/extensions.gradle (23)

• com.commercetools.sdk.jvm.core:commercetools-java-client 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-models 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-convenience 2.16.0
• org.apache.commons:commons-text 1.13.1 → [Updates: 1.15.0]
• org.apache.commons:commons-lang3 3.18.0 → [Updates: 3.20.0]
• commons-io:commons-io 2.19.0 → [Updates: 2.21.0]
• org.slf4j:slf4j-api 2.0.17
• com.fasterxml.jackson.core:jackson-annotations 2.19.1 → [Updates: 2.21]
• com.fasterxml.jackson.core:jackson-databind 2.19.1 → [Updates: 2.21.0]
• com.fasterxml.jackson.core:jackson-core 2.19.1 → [Updates: 2.21.0]
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.1 → [Updates: 2.21.0]
• com.google.code.findbugs:jsr305 3.0.2
• com.google.code.gson:gson 2.13.1 → [Updates: 2.13.2]
• com.graphql-java:graphql-java 19.11 → [Updates: 25.0]
• org.awaitility:awaitility 4.3.0
• jakarta.validation:jakarta.validation-api 3.1.1
• org.junit.jupiter:junit-jupiter 5.13.2 → [Updates: 5.14.2, 6.0.2]
• org.skyscreamer:jsonassert 1.5.3
• org.assertj:assertj-core 3.27.3 → [Updates: 3.27.6]
• org.mockito:mockito-inline 5.2.0
• org.mockito:mockito-junit-jupiter 5.18.0 → [Updates: 5.21.0]
• dev.failsafe:failsafe 3.3.2
• com.spotify:completable-futures 0.3.6

gradle-scripts/jacoco.gradle

gradle-scripts/publishing.gradle

gradle-scripts/repositories.gradle

gradle-scripts/spotless.gradle

gradle-scripts/subproject-config.gradle

gradle-scripts/subproject-dependencies.gradle (1)

• com.vdurmont:semver4j 3.1.0

gradle-scripts/subproject-plugins.gradle

gradle-scripts/subproject-srcinfo-plugin.gradle

gradle.properties

rmf/rmf-java-base/build.gradle (1)

• org.reflections:reflections 0.10.2

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.2 → [Updates: 8.14.3, 9.3.0]

npm (1)

package.json (5)

• husky 9.1.7
• lint-staged 16.1.2 → [Updates: 16.2.7]
• node >=14.15
• npm >=5
• yarn 4.9.2 → [Updates: 4.12.0]

---

• Check this box to trigger a request for Renovate to run again on this repository