Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/cache digest to 0057852
• chore(deps): update googleapis/release-please-action digest to 16a9c90
• chore(deps): update providers/flagd/spec digest to 9c1fde2
• chore(deps): update providers/go-feature-flag/wasm-releases digest to c4a6a24
• chore(deps): update dependency com.configcat:configcat-java-client to v9.4.4
• chore(deps): update dependency com.dylibso.chicory:runtime to v1.5.3
• chore(deps): update dependency com.dylibso.chicory:wasi to v1.5.3
• chore(deps): update dependency com.fasterxml.jackson.datatype:jackson-datatype-jsr310 to v2.20.1
• chore(deps): update dependency com.github.spotbugs:spotbugs-annotations to v4.9.8
• chore(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.8.1
• chore(deps): update dependency com.google.code.gson:gson to v2.13.2
• chore(deps): update dependency com.networknt:json-schema-validator to v1.5.9
• chore(deps): update dependency dev.openfeature.contrib.providers:flagd to v0.11.17
• chore(deps): update dependency io.reactivex.rxjava3:rxjava to v3.1.12
• chore(deps): update dependency org.apache.logging.log4j:log4j-slf4j2-impl to v2.25.2
• chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.2
• chore(deps): update dependency org.projectlombok:lombok to v1.18.42
• chore(deps): update jackson monorepo to v2.20.1 (com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-core)
• chore(deps): update dependency com.google.guava:guava to v33.5.0-jre
• chore(deps): update dependency com.squareup.okio:okio-jvm to v3.16.2
• chore(deps): update dependency com.statsig:serversdk to v1.36.5
• chore(deps): update dependency commons-codec:commons-codec to v1.20.0
• chore(deps): update dependency io.cucumber:cucumber-bom to v7.31.0
• chore(deps): update dependency io.flipt:flipt-java to v1.4.0
• chore(deps): update dependency io.getunleash:unleash-client-java to v11.1.1
• chore(deps): update dependency org.apache.commons:commons-lang3 to v3.19.0
• chore(deps): update dependency org.apache.maven.plugins:maven-pmd-plugin to v3.28.0
• chore(deps): update dependency providers/flagd/test-harness to v2.14.0
• chore(deps): update junit-framework monorepo to v5.14.1 (org.junit.jupiter:junit-jupiter, org.junit:junit-bom)
• chore(deps): update netty monorepo to v4.2.7.final (io.netty:netty-codec-http2, io.netty:netty-transport-native-epoll)
• chore(deps): update opentelemetry-java monorepo to v1.56.0 (io.opentelemetry:opentelemetry-api, io.opentelemetry:opentelemetry-bom)
• chore(deps): update dependency com.networknt:json-schema-validator to v2
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v12
• chore(deps): update dependency com.statsig:serversdk to v3
• chore(deps): update dependency org.testcontainers:testcontainers to v2
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update providers/flagd/schemas digest to 58d7327
• chore(deps): update dependency com.github.spotbugs:spotbugs to v4.9.8
• chore(deps): update junit-framework monorepo to v6 (major) (org.junit.jupiter:junit-jupiter, org.junit:junit-bom)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency org.semver4j:semver4j to v6
• chore(deps): update okhttp monorepo to v5 (major) (com.squareup.okhttp3:okhttp, com.squareup.okhttp3:mockwebserver)

Detected dependencies

git-submodules

.gitmodules

• providers/flagd/schemas main@2852d7772e6b8674681a6ee6b88db10dbe3f6899
• providers/flagd/test-harness v2.13.0@b62f5dbe860ecf4f36ec757dfdc0b38f7b3dec6e
• providers/flagd/spec main@2d4b27b116eaf0a53ef627987bf1a569e44ea42a
• providers/go-feature-flag/wasm-releases main@a81f8c4bbac3bdc4dd2c69e9eb27a7fd9b262222

github-actions

.github/workflows/ci.yml

• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5@dded0888837ed1f317902acf8a20df0ad188d165
• actions/cache v4@0400d5f644dc74513175e3cd8d07132dd4860809

.github/workflows/component-owners.yml

• dyladan/component-owners 58bd86e9814d23f1525d0a970682cead459fa783

.github/workflows/lint-pr.yml

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/release-please.yml

• googleapis/release-please-action v4@c2a5a2bd6a758a0937f1ddb1e8950609867ed15c
• actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-java v5@dded0888837ed1f317902acf8a20df0ad188d165
• actions/cache v4@0400d5f644dc74513175e3cd8d07132dd4860809

maven

hooks/open-telemetry/pom.xml

• io.opentelemetry:opentelemetry-bom 1.54.1
• io.opentelemetry.semconv:opentelemetry-semconv-incubating 1.28.0-alpha

pom.xml

• org.junit:junit-bom 5.13.4
• io.cucumber:cucumber-bom 7.29.0
• org.mockito:mockito-bom 5.20.0
• dev.openfeature:sdk [1.16.0,1.99999)
• org.projectlombok:lombok 1.18.40
• com.github.spotbugs:spotbugs 4.8.6
• org.assertj:assertj-core 3.27.6
• org.junit-pioneer:junit-pioneer 2.3.0
• org.awaitility:awaitility 4.3.0
• org.apache.maven.plugins:maven-toolchains-plugin 3.2.0
• org.apache.maven.plugins:maven-compiler-plugin 3.14.1
• org.apache.maven.plugins:maven-jar-plugin 3.4.2
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4
• org.honton.chas:exists-maven-plugin 0.15.2
• org.apache.maven.plugins:maven-source-plugin 3.3.1
• org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
• org.cyclonedx:cyclonedx-maven-plugin 2.9.1
• org.apache.maven.plugins:maven-gpg-plugin 3.2.8
• org.sonatype.central:central-publishing-maven-plugin 0.9.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 11.1.0
• org.apache.maven.plugins:maven-pmd-plugin 3.27.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.4.1
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
• com.github.spotbugs:spotbugs 4.9.0
• com.diffplug.spotless:spotless-maven-plugin 3.0.0
• org.apache.maven.plugins:maven-toolchains-plugin 3.2.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4
• org.apache.maven.plugins:maven-compiler-plugin 3.14.1

providers/configcat/pom.xml

• com.configcat:configcat-java-client 9.4.3
• org.slf4j:slf4j-api 2.0.17
• org.apache.logging.log4j:log4j-slf4j2-impl 2.25.1

providers/env-var/pom.xml

• org.apache.commons:commons-lang3 3.18.0

providers/flagd/pom.xml

• io.grpc:grpc-netty 1.76.0
• io.grpc:grpc-protobuf 1.76.0
• io.grpc:grpc-stub 1.76.0
• io.netty:netty-transport-native-epoll 4.2.6.Final
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• io.github.jamsesso:json-logic-java 1.1.0
• com.google.code.gson:gson 2.13.1
• com.networknt:json-schema-validator 1.5.8
• org.apache.tomcat:annotations-api 6.0.53
• org.apache.commons:commons-collections4 4.5.0
• org.apache.commons:commons-lang3 3.18.0
• io.opentelemetry:opentelemetry-api 1.54.1
• org.semver4j:semver4j 5.8.0
• commons-codec:commons-codec 1.18.0
• org.junit.jupiter:junit-jupiter 5.13.4
• org.testcontainers:testcontainers 1.21.3
• org.testcontainers:junit-jupiter 1.21.3
• io.rest-assured:rest-assured 5.5.6
• org.slf4j:slf4j-simple 2.0.17
• io.netty:netty-codec-http2 4.1.125.Final
• kr.motd.maven:os-maven-plugin 1.7.1
• org.codehaus.mojo:exec-maven-plugin 3.6.0
• org.apache.maven.plugins:maven-resources-plugin 3.3.1
• org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1
• com.github.spotbugs:spotbugs-maven-plugin 4.9.4.1
• org.codehaus.mojo:exec-maven-plugin 3.6.0

providers/flagsmith/pom.xml

• com.flagsmith:flagsmith-java-client 7.4.3
• com.squareup.okhttp3:okhttp 4.12.0
• com.squareup.okhttp3:mockwebserver 4.12.0

providers/flipt/pom.xml

• io.flipt:flipt-java 1.1.2
• org.slf4j:slf4j-api 2.0.17
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• org.wiremock:wiremock 3.13.1
• com.fasterxml.jackson.core:jackson-core 2.20.0
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• com.fasterxml.jackson.core:jackson-annotations 2.20
• org.apache.logging.log4j:log4j-slf4j2-impl 2.25.1

providers/go-feature-flag/pom.xml

• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.20.0
• com.fasterxml.jackson.core:jackson-core 2.20.0
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• com.fasterxml.jackson.core:jackson-annotations 2.20
• org.slf4j:slf4j-api 2.0.17
• io.reactivex.rxjava3:rxjava 3.1.10
• org.apache.logging.log4j:log4j-slf4j2-impl 2.25.1
• com.dylibso.chicory:runtime 1.5.0
• com.dylibso.chicory:wasi 1.5.0
• com.squareup.okhttp3:mockwebserver 4.12.0
• com.squareup.okhttp3:okhttp 4.12.0
• com.squareup.okio:okio-jvm 3.15.0
• com.github.spotbugs:spotbugs-annotations 4.9.4

providers/jsonlogic-eval-provider/pom.xml

• io.github.jamsesso:json-logic-java 1.1.0
• org.json:json 20250517
• com.github.spotbugs:spotbugs-annotations 4.9.4

providers/multiprovider/pom.xml

• org.json:json 20250517
• org.apache.logging.log4j:log4j-slf4j2-impl 2.25.1

providers/ofrep/pom.xml

• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.20.0
• com.fasterxml.jackson.core:jackson-core 2.20.0
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• com.fasterxml.jackson.core:jackson-annotations 2.20
• org.slf4j:slf4j-api 2.0.17
• commons-validator:commons-validator 1.10.0
• com.google.guava:guava 33.4.8-jre
• com.squareup.okhttp3:mockwebserver 4.12.0

providers/optimizely/pom.xml

• com.optimizely.ab:core-api 4.2.2
• com.optimizely.ab:core-httpclient-impl 4.2.2
• org.slf4j:slf4j-api 2.0.17
• org.apache.logging.log4j:log4j-slf4j2-impl 2.25.0

providers/statsig/pom.xml

• com.statsig:serversdk 1.18.1
• org.slf4j:slf4j-api 2.0.17
• org.apache.logging.log4j:log4j-slf4j2-impl 2.25.1

providers/unleash/pom.xml

• io.getunleash:unleash-client-java 11.0.2
• org.slf4j:slf4j-api 2.0.17
• org.wiremock:wiremock 3.13.1
• org.apache.logging.log4j:log4j-slf4j2-impl 2.25.1

tools/flagd-http-connector/pom.xml

• dev.openfeature.contrib.providers:flagd 0.11.15
• org.apache.commons:commons-lang3 3.18.0
• com.google.code.findbugs:annotations 3.0.1u2

tools/junit-openfeature/pom.xml

• org.apache.commons:commons-lang3 3.18.0
• org.junit-pioneer:junit-pioneer 2.3.0

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.11

mvnw

• maven-wrapper 3.3.4

mvnw.cmd

• maven-wrapper 3.3.4

renovate-config-presets

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository