Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
gradle	com.github.tomakehurst:wiremock
npm	@types/react-datepicker

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.15
• fix(deps): update dependency org.springframework.modulith:spring-modulith-bom to v1.4.6
• fix(deps): update dependency org.testcontainers:testcontainers-bom to v1.21.4
• fix(deps): update dependency react-oidc-context to v2.4.0
• fix(deps): update dependency typescript to v5.9.3
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/github-script action to v8
• chore(deps): update actions/setup-java action to v5
• chore(deps): update actions/setup-node action to v6
• chore(deps): update actions/setup-python action to v6
• chore(deps): update azul/zulu-openjdk docker tag to v25
• chore(deps): update codecov/codecov-action action to v5
• chore(deps): update dependency @semantic-release/exec to v7
• chore(deps): update dependency @types/react-datepicker to v7
• chore(deps): update dependency @vitejs/plugin-react to v5
• chore(deps): update dependency env-cmd to v11
• chore(deps): update dependency jsdom to v27
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update dependency vite to v7
• chore(deps): update dorny/test-reporter action to v2
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update gradle to v9
• chore(deps): update helm release kafka to v32
• chore(deps): update helm release keycloakx to v7
• chore(deps): update helm release postgresql to v18
• chore(deps): update plugin com.diffplug.spotless to v8
• chore(deps): update plugin com.github.jk1.dependency-license-report to v3
• chore(deps): update plugin io.freefair.lombok to v9
• chore(deps): update plugin org.flywaydb.flyway to v11
• chore(deps): update plugin org.jetbrains.kotlin.jvm to v2
• chore(deps): update plugin org.jetbrains.kotlin.plugin.spring to v2
• chore(deps): update plugin org.liquibase.gradle to v3
• chore(deps): update plugin org.springframework.boot to v4
• chore(deps): update quay.io/keycloak/keycloak docker tag to v26
• chore(deps): update softprops/action-gh-release action to v2
• chore(deps): update vitest monorepo to v4 (major) (@vitest/coverage-v8, vitest)
• fix(deps): update dependency @headlessui/react to v2
• fix(deps): update dependency @icons-pack/react-simple-icons to v13
• fix(deps): update dependency com.ninja-squad:springmockk to v5
• fix(deps): update dependency com.squareup.okhttp3:okhttp to v5
• fix(deps): update dependency date-fns to v4
• fix(deps): update dependency io.kubernetes:client-java-extended to v25
• fix(deps): update dependency net.lbruun.springboot:preliquibase-spring-boot-starter to v2
• fix(deps): update dependency org.apache.groovy:groovy-all to v5
• fix(deps): update dependency org.liquibase:liquibase-core to v5
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• fix(deps): update dependency org.springframework.modulith:spring-modulith-bom to v2
• fix(deps): update dependency org.testcontainers:testcontainers-bom to v2
• fix(deps): update dependency react-datepicker to v9
• fix(deps): update dependency react-oidc-context to v3
• fix(deps): update dependency react-router-dom to v7
• fix(deps): update dependency simple-icons to v16
• fix(deps): update dependency web-vitals to v5
• fix(deps): update react monorepo to v19 (major) (@types/react, @types/react-dom, react, react-dom)
• fix(deps): update versions.restassured to v6 (major) (io.rest-assured:xml-path, io.rest-assured:rest-assured, io.rest-assured:json-path)
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update dependency oidc-client-ts to v2.5.0
• fix(deps): update dependency react-router-dom to v6.30.2
• fix(deps): update dependency swr to v2.3.8

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency typescript to v5.9.3
• chore(deps): update plugin org.springframework.boot to v3.5.9
• fix(deps): update dependency @icons-pack/react-simple-icons to v9.7.0
• fix(deps): update dependency net.lbruun.springboot:preliquibase-spring-boot-starter to v1.6.1
• fix(deps): update dependency org.liquibase:liquibase-core to v4.33.0
• fix(deps): update dependency org.spockframework:spock-bom to v2.4-groovy-5.0
• fix(deps): update dependency oidc-client-ts to v3
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency @heroicons/react to v2

Detected Dependencies

docker-compose (6)

infrastructure/docker/docker-compose.yml (4)

• quay.io/keycloak/keycloak 21.1.2 → [Updates: 26.4.7]
• bitnami/postgresql 15
• bitnami/postgresql 15
• bitnami/postgresql 15

services/gateway/docker-compose.yml (4)

• quay.io/keycloak/keycloak 21.1.2 → [Updates: 26.4.7]
• bitnami/postgresql 15
• bitnami/postgresql 15
• bitnami/postgresql 15

services/habit/docker-compose.yml (1)

• bitnami/postgresql 15

services/report/docker-compose.yaml (2)

• rodolpheche/wiremock 2.31.0-alpine
• rodolpheche/wiremock 2.31.0-alpine

services/track/docker-compose.yml (1)

• bitnami/postgresql 15

test/lpt-locust/docker-compose.yml

dockerfile (6)

services/gateway/Dockerfile (1)

• azul/zulu-openjdk 21-jre-latest → [Updates: 25-jre-latest]

services/habit/Dockerfile (1)

• azul/zulu-openjdk 21-jre-latest → [Updates: 25-jre-latest]

services/report/Dockerfile (1)

• azul/zulu-openjdk 21-jre-latest → [Updates: 25-jre-latest]

services/track/Dockerfile (1)

• azul/zulu-openjdk 21-jre-latest → [Updates: 25-jre-latest]

services/ui/Dockerfile (1)

• nginx 1.29.4

test/lpt-locust/Dockerfile (1)

• locustio/locust 2.43.0

github-actions (8)

.github/workflows/build-docker.yaml (5)

• actions/checkout v4 → [Updates: v6]
• actions/download-artifact v4 → [Updates: v7]
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3

.github/workflows/build-java-service.yaml (7)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v5
• actions/upload-artifact v4 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v6]
• codecov/codecov-action v3 → [Updates: v5]

.github/workflows/lpt-locust.yaml (4)

• actions/checkout v4 → [Updates: v6]
• actions/setup-python v5 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v6]
• python 3.14

.github/workflows/parse-jest-results.yaml (1)

• dorny/test-reporter v1 → [Updates: v2]

.github/workflows/parse-junit-results.yaml (1)

• dorny/test-reporter v1 → [Updates: v2]

.github/workflows/prepare-release.yaml (2)

• actions/checkout v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]

.github/workflows/release.yaml (4)

• actions/checkout v4 → [Updates: v6]
• actions/download-artifact v4 → [Updates: v7]
• actions/github-script v7 → [Updates: v8]
• softprops/action-gh-release v1 → [Updates: v2]

.github/workflows/ui.yaml (6)

• actions/checkout v4 → [Updates: v6]
• actions/setup-node v4 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v6]
• codecov/codecov-action v3 → [Updates: v5]
• actions/upload-artifact v4 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v6]

gradle (16)

services/gateway/build.gradle (9)

• org.springframework.boot 3.1.8 → [Updates: 3.5.9, 4.0.1]
• com.diffplug.spotless 6.25.0 → [Updates: 8.1.0]
• io.freefair.lombok 8.14.3 → [Updates: 9.1.0]
• com.github.jk1.dependency-license-report 2.9 → [Updates: 3.0.1]
• lombok 1.18.42
• io.rest-assured:json-path 5.5.6 → [Updates: 6.0.0]
• io.rest-assured:rest-assured 5.5.6 → [Updates: 6.0.0]
• io.rest-assured:xml-path 5.5.6 → [Updates: 6.0.0]
• org.springframework.cloud:spring-cloud-dependencies 2022.0.5 → [Updates: 2025.1.0]

services/gateway/gradle/jacoco.gradle

services/gateway/settings.gradle

services/gradle/intTest.gradle

services/gradle/jacoco.gradle (1)

• jacoco 0.8.14

services/gradle/licenses.gradle

services/habit/build.gradle (17)

• org.springframework.boot 3.1.8 → [Updates: 3.5.9, 4.0.1]
• org.liquibase.gradle 2.2.2 → [Updates: 3.1.0]
• com.diffplug.spotless 6.25.0 → [Updates: 8.1.0]
• io.freefair.lombok 8.14.3 → [Updates: 9.1.0]
• com.github.jk1.dependency-license-report 2.9 → [Updates: 3.0.1]
• lombok 1.18.42
• org.springframework.modulith:spring-modulith-bom 1.2.5 → [Updates: 1.4.6, 2.0.1]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0 → [Updates: 2.8.15, 3.0.1]
• org.postgresql:postgresql 42.7.8
• org.liquibase:liquibase-core 4.29.2 → [Updates: 4.33.0, 5.0.1]
• de.codecentric:chaos-monkey-spring-boot 3.2.2
• net.lbruun.springboot:preliquibase-spring-boot-starter 1.5.1 → [Updates: 1.6.1, 2.0.0]
• au.com.dius.pact.provider:junit5spring 4.6.19
• io.rest-assured:json-path 5.5.6 → [Updates: 6.0.0]
• io.rest-assured:rest-assured 5.5.6 → [Updates: 6.0.0]
• io.rest-assured:xml-path 5.5.6 → [Updates: 6.0.0]
• org.testcontainers:testcontainers-bom 1.20.4 → [Updates: 1.21.4, 2.0.3]

services/habit/gradle/jacoco.gradle

services/habit/settings.gradle

services/report/build.gradle.kts (12)

• org.openapi.generator 7.18.0
• com.github.jk1.dependency-license-report 2.9 → [Updates: 3.0.1]
• org.springframework.boot 3.1.8 → [Updates: 3.5.9, 4.0.1]
• com.diffplug.spotless 6.25.0 → [Updates: 8.1.0]
• org.jetbrains.kotlin.jvm 1.9.25 → [Updates: 2.3.0]
• org.jetbrains.kotlin.plugin.spring 1.9.25 → [Updates: 2.3.0]
• io.swagger.core.v3:swagger-annotations 2.2.41
• com.squareup.moshi:moshi 1.15.2
• de.codecentric:chaos-monkey-spring-boot 3.2.2
• io.mockk:mockk 1.14.7
• com.ninja-squad:springmockk 4.0.2 → [Updates: 5.0.1]
• com.github.tomakehurst:wiremock 3.0.1 → [Updates: 3.0.1]

services/report/settings.gradle.kts

services/track/build.gradle (14)

• org.springframework.boot 3.1.8 → [Updates: 3.5.9, 4.0.1]
• org.flywaydb.flyway 10.22.0 → [Updates: 11.20.0]
• com.diffplug.spotless 6.25.0 → [Updates: 8.1.0]
• io.freefair.lombok 8.14.3 → [Updates: 9.1.0]
• com.github.jk1.dependency-license-report 2.9 → [Updates: 3.0.1]
• lombok 1.18.42
• org.springframework.modulith:spring-modulith-bom 1.2.5 → [Updates: 1.4.6, 2.0.1]
• org.postgresql:postgresql 42.7.8
• de.codecentric:chaos-monkey-spring-boot 3.2.2
• org.reflections:reflections 0.10.2
• io.rest-assured:json-path 5.5.6 → [Updates: 6.0.0]
• io.rest-assured:rest-assured 5.5.6 → [Updates: 6.0.0]
• io.rest-assured:xml-path 5.5.6 → [Updates: 6.0.0]
• org.testcontainers:testcontainers-bom 1.20.4 → [Updates: 1.21.4, 2.0.3]

services/track/gradle/jacoco.gradle

services/track/settings.gradle

test/infra-tests/build.gradle (4)

• org.apache.groovy:groovy-all 4.0.29 → [Updates: 5.0.3]
• org.spockframework:spock-bom 2.3-groovy-4.0 → [Updates: 2.4-groovy-5.0]
• com.squareup.okhttp3:okhttp 4.12.0 → [Updates: 5.3.2]
• io.kubernetes:client-java-extended 19.0.3 → [Updates: 25.0.0-legacy]

test/infra-tests/settings.gradle

gradle-wrapper (5)

services/gateway/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 9.2.1]

services/habit/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 9.2.1]

services/report/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 9.2.1]

services/track/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 9.2.1]

test/infra-tests/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 9.2.1]

helm-values (5)

services/gateway/helm/gateway/values.yaml

services/habit/helm/habit/values.yaml (1)

• docker.io/alpine 3.23

services/report/helm/report/values.yaml

services/track/helm/track/values.yaml (1)

• docker.io/alpine 3.23

services/ui/helm/ui/values.yaml

helmfile (10)

infrastructure/istio/helmfile.d/00-namespaces.yaml

infrastructure/istio/helmfile.d/05-istio-base.yaml (1)

• base 1.28.2

infrastructure/istio/helmfile.d/06-istio-cni.yaml (1)

• cni 1.28.2

infrastructure/istio/helmfile.d/10-istiod.yaml (1)

• istiod 1.28.2

infrastructure/istio/helmfile.d/11-istio-ingress.yaml (1)

• gateway 1.28.2

infrastructure/istio/helmfile.d/20-addons.yaml

infrastructure/kubernetes/helmfile.d/00-namespaces.yaml

infrastructure/kubernetes/helmfile.d/10-keycloak.yaml (2)

• postgresql 11.9.13 → [Updates: 18.2.0]
• keycloakx 1.7.0 → [Updates: 7.1.5]

infrastructure/kubernetes/helmfile.d/15-kafka.yaml (1)

• kafka 25.3.5 → [Updates: 32.4.3]

infrastructure/kubernetes/helmfile.d/20-habitcentric.yaml

helmv3 (2)

services/habit/helm/habit/Chart.yaml (1)

• postgresql 12.12.10 → [Updates: 18.2.0]

services/track/helm/track/Chart.yaml (1)

• postgresql 12.12.10 → [Updates: 18.2.0]

npm (2)

package.json (2)

• @semantic-release/exec 6.0.3 → [Updates: 7.1.0]
• semantic-release-plus 20.0.0

services/ui/package.json (40)

• @headlessui/react 1.7.19 → [Updates: 2.2.9]
• @heroicons/react 1.0.6 → [Updates: 2.2.0]
• @icons-pack/react-simple-icons 9.4.1 → [Updates: 9.7.0, 13.8.0]
• @popperjs/core 2.11.8
• @tailwindcss/forms 0.5.11
• @types/node 24.10.4
• @types/react 18.3.27 → [Updates: 19.2.7]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• date-fns 2.30.0 → [Updates: 4.1.0]
• oidc-client-ts 2.4.1 → [Updates: 2.5.0, 3.4.1]
• react 18.3.1 → [Updates: 19.2.3]
• react-datepicker 4.25.0 → [Updates: 9.1.0]
• react-dom 18.3.1 → [Updates: 19.2.3]
• react-oidc-context 2.3.1 → [Updates: 2.4.0, 3.3.0]
• react-popper 2.3.0
• react-router-dom 6.26.2 → [Updates: 6.30.2, 7.11.0]
• react-simple-icons 1.0.0-beta.5
• simple-icons 11.15.0 → [Updates: 16.3.0]
• swr 2.2.5 → [Updates: 2.3.8]
• typescript 5.6.3 → [Updates: 5.9.3]
• web-vitals 3.5.2 → [Updates: 5.1.0]
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.1
• @testing-library/user-event 14.6.1
• @types/react-datepicker 4.19.6 → [Updates: 7.0.0]
• @vitejs/plugin-react ^4.0.0 → [Updates: ^5.0.0]
• @vitest/coverage-v8 ^1.0.0 → [Updates: ^4.0.0]
• autoprefixer 10.4.23
• env-cmd 10.1.0 → [Updates: 11.0.0]
• jsdom ^23.0.0 → [Updates: ^27.0.0]
• license-checker-rseidelsohn 4.4.2
• msw 2.12.7
• postcss 8.5.6
• prettier 3.7.4
• prettier-plugin-tailwindcss 0.7.2
• tailwindcss 3.4.19 → [Updates: 4.1.18]
• vite ^5.0.0 → [Updates: ^7.0.0]
• vite-plugin-svgr ^4.2.0
• vitest ^1.0.0 → [Updates: ^4.0.0]
• typescript ^5 → [Updates: ^5]

nvm (1)

services/ui/.nvmrc (1)

• node 24.12.0

pip_requirements (1)

test/lpt-locust/src/requirements.txt

---

• Check this box to trigger a request for Renovate to run again on this repository