Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
maven	io.camunda:zeebe-bom

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): replace dependency io.camunda:zeebe-bom with io.camunda:camunda-bom (main)
• chore(deps): update dependency maven to v3.9.14 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.5 (main)
• fix(deps): update dependency com.auth0:java-jwt to v4.5.1 (main)
• fix(deps): update spring boot to v3.5.11 (main) (org.springframework.boot:spring-boot-dependencies, org.springframework.boot:spring-boot-maven-plugin)
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.10.0 (main)
• fix(deps): update dependency com.google.api.grpc:proto-google-common-protos to v2.66.0 (main)
• fix(deps): update dependency com.google.errorprone:error_prone_annotations to v2.48.0 (main)
• fix(deps): update dependency com.squareup.okio:okio to v3.17.0 (main)
• fix(deps): update dependency io.github.resilience4j:resilience4j-retry to v2.4.0 (main)
• fix(deps): update dependency io.grpc:grpc-bom to v1.79.0 (main)
• fix(deps): update dependency org.camunda.feel:feel-engine to v1.21.0 (main)
• fix(deps): update dependency org.checkerframework:checker-qual to v3.54.0 (main)
• fix(deps): update dependency org.jetbrains:annotations to v26.1.0 (main)
• chore(deps): update actions/cache action to v5 (main)
• fix(deps): update dependency org.scala-lang:scala-library to v3 (main)
• fix(deps): replace dependency io.camunda:zeebe-bom with io.camunda:camunda-bom (release/8.5)
• chore(deps): update dependency maven to v3.9.14 (release/8.5)
• chore(deps): update actions/cache action to v5 (release/8.5)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency com.fasterxml.jackson.core:jackson-core to v2.21.1 [security] (main)
• fix(deps): update jackson monorepo (main) (com.fasterxml.jackson.core:jackson-annotations, com.fasterxml.jackson.core:jackson-databind)
• fix(deps): update zeebe.version to v8.8.16 (main) (io.camunda:zeebe-process-test-engine, io.camunda:zeebe-process-test-api, io.camunda:zeebe-process-test-filters, io.camunda:zeebe-process-test-assertions, io.camunda:zeebe-process-test-extension-testcontainer, io.camunda:zeebe-process-test-extension, io.camunda:zeebe-bpmn-model, io.camunda:zeebe-bom)
• chore(deps): update actions/checkout action to v6 (main)
• chore(deps): update actions/setup-java action to v5 (main)
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3 (main)
• fix(deps): update dependency com.google.protobuf:protobuf-bom to v4 (main)
• fix(deps): update dependency org.agrona:agrona to v2 (main)
• fix(deps): update spring boot to v4 (main) (major) (org.springframework.boot:spring-boot-dependencies, org.springframework.boot:spring-boot-maven-plugin)
• chore(deps): update actions/checkout action to v6 (release/8.5)
• chore(deps): update actions/setup-java action to v5 (release/8.5)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

Branch main

github-actions (2)

.github/workflows/mvn-build.yml (3)

• actions/checkout v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• actions/setup-java v4 → [Updates: v5]

.github/workflows/mvn-release.yml (5)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• camunda-community-hub/community-action-maven-release v2
• actions/upload-release-asset v1
• ubuntu 24.04

maven (13)

camunda-sdk-java/java-client-operate/pom.xml

camunda-sdk-java/java-common/pom.xml

camunda-sdk-java/pom.xml

example/pom.xml

legacy/pom.xml

legacy/spring-zeebe-starter/pom.xml

legacy/spring-zeebe-test-testcontainer/pom.xml

legacy/spring-zeebe-test/pom.xml

legacy/spring-zeebe/pom.xml

pom.xml (44)

• org.springframework.boot:spring-boot-maven-plugin 3.5.8 → [Updates: 3.5.11, 4.0.3]
• org.camunda.community:community-hub-release-parent 2.1.0
• org.springframework.boot:spring-boot-dependencies 3.5.8 → [Updates: 3.5.11, 4.0.3]
• io.camunda:zeebe-bom 8.5.7 → [Updates: 8.8.16, 8.10.0-SNAPSHOT]
• com.google.protobuf:protobuf-bom 3.25.8 → [Updates: 4.34.0]
• io.grpc:grpc-bom 1.77.0 → [Updates: 1.79.0]
• io.camunda:zeebe-bpmn-model 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-extension 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-extension-testcontainer 8.5.7 → [Updates: 8.8.16]
• io.camunda:identity-sdk 8.8.1
• io.camunda:identity-spring-boot-starter 8.8.1
• io.camunda:identity-spring-boot-autoconfigure 8.8.1
• com.fasterxml.jackson.core:jackson-core 2.19.2 → [Updates: 2.21.1]
• com.fasterxml.jackson.core:jackson-databind 2.19.2 → [Updates: 2.21.1]
• com.fasterxml.jackson.core:jackson-annotations 2.19.2 → [Updates: 2.21]
• org.awaitility:awaitility 4.3.0
• commons-beanutils:commons-beanutils 1.11.0
• io.github.resilience4j:resilience4j-retry 2.3.0 → [Updates: 2.4.0]
• org.apache.commons:commons-lang3 3.20.0
• com.google.guava:guava 33.5.0-jre
• com.google.errorprone:error_prone_annotations 2.44.0 → [Updates: 2.48.0]
• com.squareup.okio:okio 3.16.4 → [Updates: 3.17.0]
• com.auth0:java-jwt 4.5.0 → [Updates: 4.5.1]
• org.camunda.bpm.model:camunda-xml-model 7.24.0
• org.camunda.bpm.model:camunda-dmn-model 7.24.0
• org.jetbrains:annotations 26.0.2-1 → [Updates: 26.1.0]
• org.agrona:agrona 1.23.1 → [Updates: 2.4.0]
• com.google.api.grpc:proto-google-common-protos 2.63.1 → [Updates: 2.66.0]
• org.camunda.feel:feel-engine 1.20.0 → [Updates: 1.21.0]
• org.scala-lang:scala-library 2.13.18 → [Updates: 3.8.2]
• org.wiremock:wiremock-standalone 3.13.2
• com.google.code.findbugs:jsr305 3.0.2
• org.checkerframework:checker-qual 3.52.0 → [Updates: 3.54.0]
• io.camunda:zeebe-process-test-assertions 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-filters 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-api 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-engine 8.5.7 → [Updates: 8.8.16]
• org.apache.maven.plugins:maven-dependency-plugin 3.9.0 → [Updates: 3.10.0]
• org.apache.maven.plugins:maven-site-plugin 3.21.0
• org.apache.maven.plugins:maven-compiler-plugin 3.14.1 → [Updates: 3.15.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4 → [Updates: 3.5.5]
• org.apache.maven.plugins:maven-enforcer-plugin 3.6.2
• org.jacoco:jacoco-maven-plugin 0.8.14
• com.diffplug.spotless:spotless-maven-plugin 2.46.1 → [Updates: 3.3.0]

spring-boot-starter-camunda/pom.xml

spring-client-annotations/pom.xml

spring-client-zeebe/pom.xml

maven-wrapper (1)

.mvn/wrapper/maven-wrapper.properties (1)

• maven 3.9.11 → [Updates: 3.9.14]

Branch release/8.5

github-actions (2)

.github/workflows/mvn-build.yml (3)

• actions/checkout v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• actions/setup-java v4 → [Updates: v5]

.github/workflows/mvn-release.yml (5)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• camunda-community-hub/community-action-maven-release v2
• actions/upload-release-asset v1
• ubuntu 24.04

maven (13)

camunda-sdk-java/java-client-operate/pom.xml

camunda-sdk-java/java-common/pom.xml

camunda-sdk-java/pom.xml

example/pom.xml

legacy/pom.xml

legacy/spring-zeebe-starter/pom.xml

legacy/spring-zeebe-test-testcontainer/pom.xml

legacy/spring-zeebe-test/pom.xml

legacy/spring-zeebe/pom.xml

pom.xml (44)

• org.springframework.boot:spring-boot-maven-plugin 3.2.5 → [Updates: 3.5.11, 4.0.3]
• org.camunda.community:community-hub-release-parent 2.0.3 → [Updates: 2.1.0]
• org.springframework.boot:spring-boot-dependencies 3.2.5 → [Updates: 3.5.11, 4.0.3]
• io.camunda:zeebe-bom 8.5.7 → [Updates: 8.8.16, 8.10.0-SNAPSHOT]
• com.google.protobuf:protobuf-bom 3.25.8 → [Updates: 4.34.0]
• io.grpc:grpc-bom 1.65.1 → [Updates: 1.79.0]
• io.camunda:zeebe-bpmn-model 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-extension 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-extension-testcontainer 8.5.7 → [Updates: 8.8.16]
• io.camunda:identity-sdk 8.6.18
• io.camunda:identity-spring-boot-starter 8.6.18
• io.camunda:identity-spring-boot-autoconfigure 8.6.18
• com.fasterxml.jackson.core:jackson-core 2.16.1 → [Updates: 2.21.1]
• com.fasterxml.jackson.core:jackson-databind 2.16.1 → [Updates: 2.21.1]
• com.fasterxml.jackson.core:jackson-annotations 2.16.1 → [Updates: 2.21]
• org.awaitility:awaitility 4.2.2 → [Updates: 4.3.0]
• commons-beanutils:commons-beanutils 1.9.4 → [Updates: 1.11.0]
• io.github.resilience4j:resilience4j-retry 2.2.0 → [Updates: 2.4.0]
• org.apache.commons:commons-lang3 3.14.0 → [Updates: 3.20.0]
• com.google.guava:guava 33.2.1-jre → [Updates: 33.5.0-jre]
• com.google.errorprone:error_prone_annotations 2.26.1 → [Updates: 2.48.0]
• com.squareup.okio:okio 3.6.0 → [Updates: 3.17.0]
• com.auth0:java-jwt 4.4.0 → [Updates: 4.5.1]
• org.camunda.bpm.model:camunda-xml-model 7.21.0 → [Updates: 7.24.0]
• org.camunda.bpm.model:camunda-dmn-model 7.21.0 → [Updates: 7.24.0]
• org.jetbrains:annotations 24.1.0 → [Updates: 26.1.0]
• org.agrona:agrona 1.21.2 → [Updates: 1.23.1, 2.4.0]
• com.google.api.grpc:proto-google-common-protos 2.41.0 → [Updates: 2.66.0]
• org.camunda.feel:feel-engine 1.17.7 → [Updates: 1.21.0]
• org.scala-lang:scala-library 2.13.18 → [Updates: 3.8.2]
• org.wiremock:wiremock-standalone 3.8.0 → [Updates: 3.13.2]
• com.google.code.findbugs:jsr305 3.0.2
• org.checkerframework:checker-qual 3.45.0 → [Updates: 3.54.0]
• io.camunda:zeebe-process-test-assertions 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-filters 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-api 8.5.7 → [Updates: 8.8.16]
• io.camunda:zeebe-process-test-engine 8.5.7 → [Updates: 8.8.16]
• org.apache.maven.plugins:maven-dependency-plugin 3.7.1 → [Updates: 3.10.0]
• org.apache.maven.plugins:maven-site-plugin 3.12.1 → [Updates: 3.21.0]
• org.apache.maven.plugins:maven-compiler-plugin 3.13.0 → [Updates: 3.15.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.3.1 → [Updates: 3.5.5]
• org.apache.maven.plugins:maven-enforcer-plugin 3.4.1 → [Updates: 3.6.2]
• org.jacoco:jacoco-maven-plugin 0.8.14
• com.diffplug.spotless:spotless-maven-plugin 2.43.0 → [Updates: 2.46.1, 3.3.0]

spring-boot-starter-camunda/pom.xml

spring-client-annotations/pom.xml

spring-client-zeebe/pom.xml

maven-wrapper (1)

.mvn/wrapper/maven-wrapper.properties (1)

• maven 3.9.11 → [Updates: 3.9.14]

---

• Check this box to trigger a request for Renovate to run again on this repository