Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (25)

Datasource	Name	Last Updated
bundler	bosh-template	2023-01-12
devbox	mysql	2023-02-24
devbox	temurin-bin-21	2024-10-13
github-actions	jannekem/run-python-script-action	2024-01-28
github-actions	orange-cloudfoundry/bosh-release-action	2024-04-25
gomod	github.com/cloud-gov/go-cfenv	2024-06-26
gomod	github.com/cloudfoundry-community/go-cfenv	2019-03-24
gomod	github.com/go-faster/errors	2023-12-13
gomod	github.com/go-faster/jx	2023-08-07
gomod	github.com/go-logr/zapr	2023-11-03
gomod	github.com/google/uuid	2024-01-23
gomod	github.com/gorilla/mux	2023-10-18
gomod	github.com/jmoiron/sqlx	2024-04-15
gomod	github.com/json-iterator/go	2021-09-11
gomod	github.com/mitchellh/mapstructure	2022-04-20
gomod	github.com/patrickmn/go-cache	2017-07-22
gomod	github.com/rubyist/circuitbreaker	2017-03-30
gomod	github.com/tedsuo/ifrit	2023-05-16
gomod	github.com/xeipuuv/gojsonschema	2019-10-15
gomod	go.uber.org/zap	2024-02-20

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update github/codeql-action digest to d198d2f
• chore(deps): update google.golang.org/genproto digest to 3a174f9
• chore(deps): update nixpkgs digest to 6a08e6b
• chore(deps): update dependency act to v0.2.82
• chore(deps): update dependency bosh-cli to v7.9.13
• chore(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.8.1
• chore(deps): update dependency credhub-cli to v2.9.50
• chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.4
• chore(deps): update dependency redocly to v1.34.4
• chore(deps): update dependency rspec to v3.13.2
• chore(deps): update dependency rspec-file_fixtures to v0.1.10
• chore(deps): update dependency ruby to v3.4.7
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.7
• fix(deps): update module code.cloudfoundry.org/brokerapi/v13 to v13.0.11
• fix(deps): update module github.com/cenkalti/backoff/v5 to v5.0.3
• fix(deps): update module github.com/go-chi/chi/v5 to v5.2.3
• fix(deps): update module github.com/go-logr/logr to v1.4.3
• fix(deps): update module github.com/go-sql-driver/mysql to v1.9.3
• fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.8
• chore(deps): update dependency cloudfoundry-cli to v8.16.0
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.26.1
• chore(deps): update dependency delve to v1.25.2
• chore(deps): update dependency direnv to v2.37.1
• chore(deps): update dependency fly to v7.14.2
• chore(deps): update dependency gh to v2.81.0
• chore(deps): update dependency ginkgo to v2.26.0
• chore(deps): update dependency golang to v1.25.3
• chore(deps): update dependency golangci-lint to v2.5.0
• chore(deps): update dependency google-java-format to v1.29.0
• chore(deps): update dependency gopls to v0.20.0
• chore(deps): update dependency gum to v0.17.0
• chore(deps): update dependency jq to v1.8.1
• chore(deps): update dependency markdownlint-cli2 to v0.18.1
• chore(deps): update dependency oha to v1.10.0
• chore(deps): update dependency openssl to v3.5.2
• chore(deps): update dependency python to v3.14.0
• chore(deps): update dependency shellcheck to v0.11.0
• chore(deps): update dependency standard to v1.51.1
• chore(deps): update dependency yq to v4.48.1
• chore(deps): update dependency yq-go to v4.48.1
• chore(deps): update jetify-com/devbox-install-action action to v0.14.0
• fix(deps): update dependency com.mysql:mysql-connector-j to v9.4.0
• fix(deps): update dependency org.apache.commons:commons-lang3 to v3.19.0
• fix(deps): update ginkgo to v2.27.1 (ginkgo, github.com/onsi/ginkgo/v2)
• fix(deps): update module code.cloudfoundry.org/cfhttp/v2 to v2.60.0
• fix(deps): update module code.cloudfoundry.org/clock to v1.52.0
• fix(deps): update module code.cloudfoundry.org/lager/v3 to v3.52.0
• fix(deps): update module code.cloudfoundry.org/tlsconfig to v0.37.0
• fix(deps): update module github.com/cloudfoundry/cf-test-helpers/v2 to v2.13.0
• fix(deps): update module github.com/fgrosse/zaptest to v1.3.0
• fix(deps): update module github.com/gin-gonic/gin to v1.11.0
• fix(deps): update module github.com/maxbrunsfeld/counterfeiter/v6 to v6.12.0
• fix(deps): update module github.com/onsi/gomega to v1.38.2
• fix(deps): update module github.com/prometheus/client_golang to v1.23.2
• fix(deps): update module github.com/prometheus/procfs to v0.19.1
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• fix(deps): update module golang.org/x/crypto to v0.43.0
• fix(deps): update module golang.org/x/net to v0.46.0
• fix(deps): update module golang.org/x/time to v0.14.0
• fix(deps): update module google.golang.org/grpc to v1.76.0
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v12
• chore(deps): update dependency redocly to v2
• chore(deps): update github/codeql-action action to v4
• chore(deps): update google-github-actions/auth action to v3
• chore(deps): update google-github-actions/setup-gcloud action to v3
• fix(deps): update dependency org.liquibase:liquibase-core to v5
• chore(deps): lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update code.cloudfoundry.org/loggregator-agent-release/src digest to 1648952
• fix(deps): update golang.org/x/exp digest to a4bb9ff
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

bundler

Gemfile

• bosh-template lock file @ 2.4.0
• rspec lock file @ 3.13.1
• rspec-its lock file @ 2.0.0
• standard lock file @ 1.51.1
• rspec-file_fixtures "0.1.9"

jobs/Gemfile

• bosh-template lock file @ 2.4.0
• rspec lock file @ 3.13.0
• rspec-its lock file @ 2.0.0
• standard lock file @ 1.40.0
• rspec-file_fixtures "0.1.9"

nix/packages/uaac/Gemfile

• cf-uaac lock file @ 4.28.0

spec/Gemfile

• bosh-template lock file @ 2.4.0
• rspec lock file @ 3.13.0
• rspec-its lock file @ 2.0.0
• standard lock file @ 1.40.0
• rspec-file_fixtures "0.1.9"

devbox

devbox.json

• act 0.2.80
• actionlint 1.7.7
• bundix 2.5.2
• cloudfoundry-cli 8.14.1
• coreutils latest
• credhub-cli 2.9.48
• delve 1.24.2
• direnv 2.36.0
• fly 7.13.2
• gh 2.73.0
• ginkgo 2.23.4
• gnumake 4.4.1
• gnused latest
• gnutar latest
• go-tools 2025.1
• golangci-lint 2.3.1
• google-java-format 1.27.0
• gopls 0.18.1
• gum 0.16.2
• jq latest
• markdownlint-cli2 0.17.2
• maven 3.9.11
• mysql 10.6.12
• oha 1.8.0
• openssl latest
• postgresql latest
• python 3.13.3
• redocly 1.34.2
• ripgrep 14.1.1
• ruby 3.4.4
• shellcheck 0.10.0
• temurin-bin-21 21.0.3
• which latest
• xq-xml 1.3.0
• yq-go 4.45.4
• apple-sdk latest

dockerfile

ci/dockerfiles/autoscaler-tools/Dockerfile

• ubuntu noble@sha256:66460d557b25769b102175144d538d88219c077c678a49af4afca6fbfc1b5252

github-actions

.github/actions/setup-environment/action.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/acceptance_tests_broker_close.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ghcr.io/cloudfoundry/app-autoscaler-release-tools main@sha256:5051e58cc3f83830238ed3185277f884f03a87c92c5e14f355038d9b2f9add8c

.github/workflows/acceptance_tests_mta_close.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ghcr.io/cloudfoundry/app-autoscaler-release-tools main@sha256:5051e58cc3f83830238ed3185277f884f03a87c92c5e14f355038d9b2f9add8c

.github/workflows/acceptance_tests_reusable.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1

.github/workflows/bosh-release-checks.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• orange-cloudfoundry/bosh-release-action v2.1.0@a124f0c7eda59d3070c66507bcda21196d7e0a90
• cloudfoundry/bosh-compile-action main
• ghcr.io/cloudfoundry/app-autoscaler-release-tools main@sha256:5051e58cc3f83830238ed3185277f884f03a87c92c5e14f355038d9b2f9add8c
• ghcr.io/cloudfoundry/app-autoscaler-release-tools main@sha256:5051e58cc3f83830238ed3185277f884f03a87c92c5e14f355038d9b2f9add8c

.github/workflows/bosh-templates.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1

.github/workflows/codeql-analysis.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• github/codeql-action v3@755f44910c12a3d7ca0d8c6e42c048b3362f7cec
• github/codeql-action v3@755f44910c12a3d7ca0d8c6e42c048b3362f7cec
• ghcr.io/cloudfoundry/app-autoscaler-release-tools main@sha256:5051e58cc3f83830238ed3185277f884f03a87c92c5e14f355038d9b2f9add8c

.github/workflows/dependency-updates-post-processing.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1

.github/workflows/image.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• docker/login-action v3@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/metadata-action v5@c1e51972afc2121e065aed6d45c65596fe445f3f
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1
• jannekem/run-python-script-action v1@bbfca66c612a28f3eeca0ae40e1f810265e2ea68
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/java-ci-lint.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1

.github/workflows/linters.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1
• reviewdog/action-shellcheck v1@4c07458293ac342d477251099501a718ae5ef86e
• reviewdog/action-actionlint v1@f00ad0691526c10be4021a91b2510f0a769b14d0
• reviewdog/action-alex v1@6083b8ca333981fa617c6828c5d8fb21b13d916b
• reviewdog/action-markdownlint v0@3667398db9118d7e78f7a63d10e26ce454ba5f58

.github/workflows/manifest.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ghcr.io/cloudfoundry/app-autoscaler-release-tools main@sha256:5051e58cc3f83830238ed3185277f884f03a87c92c5e14f355038d9b2f9add8c

.github/workflows/mysql.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1
• ubuntu noble@sha256:66460d557b25769b102175144d538d88219c077c678a49af4afca6fbfc1b5252

.github/workflows/openapi-specs-check.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1

.github/workflows/postgres.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1
• ubuntu noble@sha256:66460d557b25769b102175144d538d88219c077c678a49af4afca6fbfc1b5252

.github/workflows/renovate_config_validation.yaml

.github/workflows/resume-ci-vms.yml

• google-github-actions/auth v2@c200f3691d83b41bf9bbd8638997a462592937ed
• google-github-actions/setup-gcloud v2@e427ad8a34f8676edf47cf7d7925499adf3eb74f
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• jetify-com/devbox-install-action v0.13.0@22b0f5500b14df4ea357ce673fbd4ced940ed6a1
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/suspend-ci-vms.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• google-github-actions/auth v2@c200f3691d83b41bf9bbd8638997a462592937ed
• google-github-actions/setup-gcloud v2@e427ad8a34f8676edf47cf7d7925499adf3eb74f

.github/workflows/tidy-go-mod.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ghcr.io/cloudfoundry/app-autoscaler-release-tools main@sha256:5051e58cc3f83830238ed3185277f884f03a87c92c5e14f355038d9b2f9add8c

.github/workflows/update-all-golang-dependencies.yaml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ghcr.io/cloudfoundry/app-autoscaler-release-tools main@sha256:5051e58cc3f83830238ed3185277f884f03a87c92c5e14f355038d9b2f9add8c

gomod

ci/terragrunt/app-autoscaler/concourse/pipelines/api-tester/src/go.mod

src/acceptance/assets/app/go_app/go.mod

• github.com/cloudfoundry-community/go-cfenv v1.18.0
• github.com/fgrosse/zaptest v1.2.1
• github.com/gin-contrib/zap v1.1.5
• github.com/gin-gonic/gin v1.10.1
• github.com/go-faster/errors v0.7.1
• github.com/go-faster/jx v1.1.0
• github.com/go-logr/logr v1.4.2
• github.com/go-logr/zapr v1.3.0
• github.com/json-iterator/go v1.1.12
• github.com/maxbrunsfeld/counterfeiter/v6 v6.11.2
• github.com/mitchellh/mapstructure v1.5.0
• github.com/onsi/ginkgo/v2 v2.23.4
• github.com/onsi/gomega v1.37.0
• github.com/prometheus/procfs v0.16.1
• github.com/steinfletcher/apitest v1.6.0
• go.uber.org/zap v1.27.0

src/acceptance/go.mod

• github.com/cloudfoundry/cf-test-helpers/v2 v2.12.0
• github.com/onsi/ginkgo/v2 v2.23.4
• github.com/onsi/gomega v1.37.0

src/autoscaler/go.mod

• code.cloudfoundry.org/brokerapi/v13 v13.0.4
• code.cloudfoundry.org/cfhttp/v2 v2.45.0
• code.cloudfoundry.org/clock v1.38.0
• code.cloudfoundry.org/go-log-cache/v3 v3.1.1
• code.cloudfoundry.org/go-loggregator/v10 v10.2.0
• code.cloudfoundry.org/lager/v3 v3.37.0
• code.cloudfoundry.org/loggregator-agent-release/src v0.0.0-20250910195140-26c118c0f681@26c118c0f681
• code.cloudfoundry.org/tlsconfig v0.29.0
• github.com/cenkalti/backoff/v5 v5.0.2
• github.com/cloud-gov/go-cfenv v1.19.1
• github.com/go-chi/chi/v5 v5.2.2
• github.com/go-faster/errors v0.7.1
• github.com/go-faster/jx v1.1.0
• github.com/go-logr/logr v1.4.3
• github.com/go-sql-driver/mysql v1.9.2
• github.com/google/uuid v1.6.0
• github.com/gorilla/mux v1.8.1
• github.com/hashicorp/go-retryablehttp v0.7.7
• github.com/jackc/pgx/v5 v5.7.6
• github.com/jmoiron/sqlx v1.4.0
• github.com/maxbrunsfeld/counterfeiter/v6 v6.11.2
• github.com/onsi/ginkgo/v2 v2.23.4
• github.com/onsi/gomega v1.37.0
• github.com/patrickmn/go-cache v2.1.0+incompatible
• github.com/prometheus/client_golang v1.22.0
• github.com/rubyist/circuitbreaker v2.2.1+incompatible
• github.com/steinfletcher/apitest v1.6.0
• github.com/stretchr/testify v1.10.0
• github.com/tedsuo/ifrit v0.0.0-20230516164442-7862c310ad26@7862c310ad26
• github.com/xeipuuv/gojsonschema v1.2.0
• go.yaml.in/yaml/v4 v4.0.0-rc.2
• golang.org/x/crypto v0.42.0
• golang.org/x/exp v0.0.0-20250911091902-df9299821621@df9299821621
• golang.org/x/net v0.44.0
• golang.org/x/time v0.13.0
• google.golang.org/grpc v1.75.1
• google.golang.org/genproto v0.0.0-20251007200510-49b9836ed3ff@49b9836ed3ff

src/changeloglockcleaner/go.mod

• github.com/go-sql-driver/mysql v1.9.2
• github.com/jackc/pgx/v5 v5.7.6
• github.com/jmoiron/sqlx v1.4.0
• github.com/onsi/ginkgo/v2 v2.23.4
• github.com/onsi/gomega v1.37.0

maven

src/autoscaler/dbtasks/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.6
• org.liquibase:liquibase-core 4.33.0
• org.yaml:snakeyaml 2.5
• org.postgresql:postgresql 42.7.8
• com.mysql:mysql-connector-j 9.3.0
• org.apache.commons:commons-lang3 3.18.0
• org.apache.maven.plugins:maven-compiler-plugin 3.14.1

src/autoscaler/scheduler/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.6
• io.swagger:swagger-annotations 1.6.16
• org.postgresql:postgresql 42.7.8
• com.mysql:mysql-connector-j 9.3.0
• io.prometheus:simpleclient 0.16.0
• io.prometheus:simpleclient_hotspot 0.16.0
• io.prometheus:simpleclient_httpserver 0.16.0
• org.projectlombok:lombok 1.18.42
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 10.24.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.6.0
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
• org.apache.maven.plugins:maven-jxr-plugin 3.6.0

src/db/pom.xml

• org.liquibase:liquibase-core 4.33.0
• org.yaml:snakeyaml 2.5
• org.postgresql:postgresql 42.7.8
• com.mysql:mysql-connector-j 9.3.0

src/pom.xml

• org.apache.maven.plugins:maven-compiler-plugin 3.14.1
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3

nix

ci/terragrunt/flake.nix

• nixpkgs nixos-unstable@c23193b943c6c689d70ee98ce3128239ed9e32d1

nix/flake.nix

• nixpkgs nixos-unstable@cf3f5c4def3c7b5f1fc012b3d839575dbe552d43

regex

ci/dockerfiles/autoscaler-tools/Dockerfile

• golang 1.24.3
• bosh-cli 7.9.11
• bosh-bootloader v9.0.36
• credhub-cli 2.9.50
• jq jq-1.6
• yq v4.45.4
• org.apache.maven:maven-core 3.9.11
• ginkgo v2.23.4

terraform

ci/terragrunt/app-autoscaler/concourse/provider.tf

terragrunt

ci/terragrunt/app-autoscaler/github-arc-team-wg-ci/terragrunt.hcl

---

• Check this box to trigger a request for Renovate to run again on this repository

[silvestre]

Here's the link to the repo logs, as I'm always searching for it.