Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency maven to v3.9.12
• chore(deps): update dependency com.spotify.fmt:fmt-maven-plugin to v2.29
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
• chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.10.0
• chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.2
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
• chore(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.0
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
• chore(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
• chore(deps): update dependency org.sonatype.central:central-publishing-maven-plugin to v0.10.0
• fix(deps): update dependency com.fasterxml.jackson:jackson-bom to v2.21.0
• fix(deps): update dependency com.github.javaparser:javaparser-core to v3.28.0
• fix(deps): update dependency com.google.code.gson:gson to v2.13.2
• fix(deps): update dependency com.google.errorprone:error_prone_annotations to v2.47.0
• fix(deps): update dependency com.google.truth:truth to v1.4.5
• fix(deps): update dependency org.checkerframework:checker-qual to v3.53.1
• chore(deps): update cimg/openjdk docker tag to v25
• fix(deps): update javahamcrest monorepo to v3 (major) (org.hamcrest:hamcrest-core, org.hamcrest:hamcrest-library, org.hamcrest:hamcrest)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency com.google.guava:guava to v32 [security]
• chore(deps): update dependency com.github.spotbugs:spotbugs to v4.9.8
• chore(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.8.2
• chore(deps): update dependency com.google.errorprone:error_prone_core to v2.47.0
• fix(deps): update dependency com.google.testing.compile:compile-testing to v0.23.0
• chore(deps): update dependency org.apache.maven.plugins:maven-release-plugin to v3
• chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3
• chore(deps): update dependency org.apache.maven.scm:maven-scm-api to v2
• chore(deps): update dependency org.apache.maven.scm:maven-scm-provider-gitexe to v2
• fix(deps): update dependency com.google.guava:guava to v33
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

circleci (1)

.circleci/config.yml (3)

• cimg/openjdk 17.0.17 → [Updates: 25.0.1]
• cimg/openjdk 17.0.17 → [Updates: 25.0.1]
• cimg/openjdk 17.0.17 → [Updates: 25.0.1]

maven (9)

annotation/pom.xml

bom/pom.xml

dependencies/pom.xml (15)

• junit:junit 4.13.2
• com.github.javaparser:javaparser-core 3.25.6 → [Updates: 3.28.0]
• com.squareup:javapoet 1.13.0
• com.google.code.gson:gson 2.10.1 → [Updates: 2.13.2]
• com.google.code.findbugs:jsr305 3.0.2
• com.google.guava:guava 31.1-jre → [Updates: 33.5.0-jre]
• com.google.truth:truth 1.1.5 → [Updates: 1.4.5]
• com.google.testing.compile:compile-testing 0.19 → [Updates: 0.23.0]
• com.google.auto:auto-common 1.2.2
• com.google.errorprone:error_prone_annotations 2.23.0 → [Updates: 2.47.0]
• org.checkerframework:checker-qual 3.40.0 → [Updates: 3.53.1]
• org.jspecify:jspecify 1.0.0
• org.hamcrest:hamcrest 2.2 → [Updates: 3.0]
• org.hamcrest:hamcrest-library 2.2 → [Updates: 3.0]
• org.hamcrest:hamcrest-core 2.2 → [Updates: 3.0]

example/pom.xml (11)

• org.apache.maven.plugins:maven-compiler-plugin 3.11.0 → [Updates: 3.15.0]
• com.google.errorprone:error_prone_core 2.23.0 → [Updates: 2.47.0]
• org.apache.maven.plugins:maven-compiler-plugin 3.11.0 → [Updates: 3.15.0]
• com.google.errorprone:error_prone_core 2.23.0 → [Updates: 2.47.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.6.2 → [Updates: 3.12.0]
• com.github.spotbugs:spotbugs-maven-plugin 4.8.1.0 → [Updates: 4.9.8.2]
• com.github.spotbugs:spotbugs 4.8.1 → [Updates: 4.9.8]
• com.fasterxml.jackson:jackson-bom 2.20.1 → [Updates: 2.21.0]
• com.google.code.gson:gson 2.10.1 → [Updates: 2.13.2]
• com.google.guava:guava 31.1-jre → [Updates: 32.0.0-android]
• com.google.code.findbugs:jsr305 3.0.2

gson/pom.xml

jackson/pom.xml

pom.xml (18)

• com.fasterxml.jackson:jackson-bom 2.20.1 → [Updates: 2.21.0]
• com.google.auto.service:auto-service 1.1.1
• com.google.auto.service:auto-service-annotations 1.1.1
• org.apache.maven.plugins:maven-dependency-plugin 3.6.1 → [Updates: 3.10.0]
• org.apache.maven.plugins:maven-jar-plugin 3.3.0 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-surefire-plugin 2.22.2 → [Updates: 3.5.4]
• com.spotify.fmt:fmt-maven-plugin 2.21.1 → [Updates: 2.29]
• org.apache.maven.plugins:maven-compiler-plugin 3.11.0 → [Updates: 3.15.0]
• org.sonatype.central:central-publishing-maven-plugin 0.9.0 → [Updates: 0.10.0]
• org.apache.maven.plugins:maven-release-plugin 2.5.3 → [Updates: 3.3.1]
• org.apache.maven.scm:maven-scm-provider-gitexe 1.13.0 → [Updates: 2.2.1]
• org.apache.maven.scm:maven-scm-api 1.13.0 → [Updates: 2.2.1]
• org.apache.maven.plugins:maven-enforcer-plugin 3.4.1 → [Updates: 3.6.2]
• org.apache.maven.plugins:maven-source-plugin 3.3.1 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.6.2 → [Updates: 3.12.0]
• org.apache.maven.plugins:maven-gpg-plugin 3.1.0 → [Updates: 3.2.8]
• org.jacoco:jacoco-maven-plugin 0.8.14
• com.google.auto.service:auto-service 1.1.1

processor/pom.xml

record-test/pom.xml

maven-wrapper (3)

.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.9.11 → [Updates: 3.9.12]
• maven-wrapper 3.3.4

mvnw (1)

• maven-wrapper 3.3.4

mvnw.cmd (1)

• maven-wrapper 3.3.4

---

• Check this box to trigger a request for Renovate to run again on this repository