Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update github/codeql-action action to v4
• chore(deps): update stefanzweifel/git-auto-commit-action action to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update actions/checkout digest to 34e1148
• chore(deps): update actions/create-github-app-token digest to 7e473ef
• fix(deps): update all dependencies (actions/checkout, codecov/codecov-action, github/codeql-action, gradle, gradle/actions, lint-staged, yarn, org.mockito:mockito-junit-jupiter, org.assertj:assertj-core, com.google.guava:guava, org.junit.jupiter:junit-jupiter, net.sourceforge.plantuml:plantuml, com.google.code.gson:gson, com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-annotations, com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core, io.netty:netty-codec-http, commons-io:commons-io, io.netty:netty-codec, org.apache.commons:commons-lang3, org.apache.commons:commons-text, com.squareup.okio:okio, io.netty:netty-handler, io.netty:netty-handler-proxy, com.github.javaparser:javaparser-core, io.netty:netty-codec-socks, com.datadoghq:datadog-api-client, io.projectreactor.netty:reactor-netty-core, com.newrelic.agent.java:newrelic-api, io.opentelemetry:opentelemetry-api, com.datadoghq:java-dogstatsd-client, org.apache.httpcomponents.client5:httpclient5, io.projectreactor.netty:reactor-netty-http, com.netflix.dgs.codegen, org.jetbrains.kotlin.jvm)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-java action to v5
• chore(deps): update gradle to v9
• chore(deps): update gradle/actions action to v5
• fix(deps): update dependency com.squareup.okhttp3:okhttp to v5
• fix(deps): update dependency org.junit.jupiter:junit-jupiter to v6
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency com.graphql-java:graphql-java to v230521
• fix(deps): update dependency org.asynchttpclient:async-http-client to v3

Detected dependencies

github-actions

.github/workflows/benchmark.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00

.github/workflows/ci.yml

• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0
• codecov/codecov-action v5.4.3@18283e04ce6e62d37312384ff67231eb8fd56d24
• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96

.github/workflows/codeql.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• github/codeql-action v3.29.1@39edc492dbe16b1465b0cafca41432d857bdb31a
• github/codeql-action v3.29.1@39edc492dbe16b1465b0cafca41432d857bdb31a
• github/codeql-action v3.29.1@39edc492dbe16b1465b0cafca41432d857bdb31a

.github/workflows/create-pr.yml

• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db
• jenschude/auto-create-pr-action v0.3.2@a5369414c74963e6ec065dab49066d3711b8c1db

.github/workflows/docs.yml

• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0

.github/workflows/release-snapshot.yml

• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c

.github/workflows/release.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.4.1@ac638b010cf58a27ee6c972d7336334ccaf61c96
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0
• actions/create-github-app-token v2@df432ceedc7162793a195dd1713ff69aefc7379e
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• ts-graphviz/setup-graphviz v2.0.2@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c
• stefanzweifel/git-auto-commit-action v6.0.1@778341af668090896ca464160c2def5d1d1a3eb0

.github/workflows/semgrep.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action v3.29.1@39edc492dbe16b1465b0cafca41432d857bdb31a

gradle

build.gradle

• io.github.gradle-nexus.publish-plugin 2.0.0
• me.champeau.jmh 0.7.3
• net.sourceforge.plantuml:plantuml 1.2025.4
• com.commercetools.build.taglets:commercetools-taglets 3.6.3
• com.google.guava:guava 33.4.8-jre
• org.jdrupes.taglets:plantuml-taglet 3.1.0

commercetools/commercetools-apachehttp-client/build.gradle

• org.apache.httpcomponents.client5:httpclient5 5.5

commercetools/commercetools-async-http-client/build.gradle

• org.asynchttpclient:async-http-client 2.12.4
• io.netty:netty-codec 4.2.2.Final
• io.netty:netty-codec-http 4.2.2.Final
• io.netty:netty-codec-socks 4.2.2.Final
• io.netty:netty-handler-proxy 4.2.2.Final
• io.netty:netty-handler 4.2.2.Final

commercetools/commercetools-graphql-api/build.gradle

• com.netflix.dgs.codegen 8.1.0
• com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core 8.1.0

commercetools/commercetools-http-client/build.gradle

commercetools/commercetools-importapi-utils/build.gradle

commercetools/commercetools-javanet-client/build.gradle

commercetools/commercetools-money/build.gradle

• javax.money:money-api 1.1
• org.javamoney.moneta:moneta-core 1.4.5

commercetools/commercetools-monitoring-datadog/build.gradle

• com.datadoghq:java-dogstatsd-client 4.4.4
• com.datadoghq:datadog-api-client 2.38.0

commercetools/commercetools-monitoring-newrelic/build.gradle

• com.newrelic.agent.java:newrelic-api 8.21.0

commercetools/commercetools-monitoring-opentelemetry/build.gradle

• io.opentelemetry:opentelemetry-api 1.51.0

commercetools/commercetools-okhttp-client3/build.gradle

• com.squareup.okio:okio 3.14.0
• com.squareup.okhttp3:okhttp 3.14.9

commercetools/commercetools-okhttp-client4/build.gradle

• com.squareup.okhttp3:okhttp 4.12.0
• com.squareup.okio:okio 3.14.0

commercetools/commercetools-reactornetty-client/build.gradle

• io.projectreactor.netty:reactor-netty-http 1.2.8
• io.projectreactor.netty:reactor-netty-core 1.2.8

commercetools/commercetools-sdk-compat-v1/build.gradle

• io.netty:netty-codec 4.2.2.Final
• io.netty:netty-codec-http 4.2.2.Final

commercetools/commercetools-sdk-java-api/build.gradle

commercetools/commercetools-sdk-java-checkout/build.gradle

commercetools/commercetools-sdk-java-history/build.gradle

commercetools/commercetools-sdk-java-importapi/build.gradle

commercetools/internal-docs/build.gradle

common-plugins/build.gradle

• org.jetbrains.kotlin.jvm 2.2.0
• com.google.code.gson:gson 2.13.1
• com.squareup:javapoet 1.13.0
• com.google.guava:guava 33.4.8-jre

common-plugins/javaparser/build.gradle

• com.github.johnrengelman.shadow 8.1.1
• com.github.javaparser:javaparser-core 3.27.0

common-plugins/settings.gradle

gradle-scripts/extensions.gradle

• com.commercetools.sdk.jvm.core:commercetools-java-client 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-models 2.16.0
• com.commercetools.sdk.jvm.core:commercetools-convenience 2.16.0
• org.apache.commons:commons-text 1.13.1
• org.apache.commons:commons-lang3 3.18.0
• commons-io:commons-io 2.19.0
• org.slf4j:slf4j-api 2.0.17
• com.fasterxml.jackson.core:jackson-annotations 2.19.1
• com.fasterxml.jackson.core:jackson-databind 2.19.1
• com.fasterxml.jackson.core:jackson-core 2.19.1
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.1
• com.google.code.findbugs:jsr305 3.0.2
• com.google.code.gson:gson 2.13.1
• com.graphql-java:graphql-java 19.11
• org.awaitility:awaitility 4.3.0
• jakarta.validation:jakarta.validation-api 3.1.1
• org.junit.jupiter:junit-jupiter 5.13.2
• org.skyscreamer:jsonassert 1.5.3
• org.assertj:assertj-core 3.27.3
• org.mockito:mockito-inline 5.2.0
• org.mockito:mockito-junit-jupiter 5.18.0
• dev.failsafe:failsafe 3.3.2
• com.spotify:completable-futures 0.3.6

gradle-scripts/jacoco.gradle

gradle-scripts/publishing.gradle

gradle-scripts/repositories.gradle

gradle-scripts/spotless.gradle

gradle-scripts/subproject-config.gradle

gradle-scripts/subproject-dependencies.gradle

• com.vdurmont:semver4j 3.1.0

gradle-scripts/subproject-plugins.gradle

gradle-scripts/subproject-srcinfo-plugin.gradle

gradle.properties

rmf/rmf-java-base/build.gradle

• org.reflections:reflections 0.10.2

settings.gradle

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.14.2

npm

package.json

• husky 9.1.7
• lint-staged 16.1.2
• node >=14.15
• npm >=5
• yarn 4.9.2

---

• Check this box to trigger a request for Renovate to run again on this repository