Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency dapper.aot to 1.0.48
• chore(deps): update dependency mysql-replication to v1.0.14
• chore(deps): update dependency npgsql.opentelemetry to 8.0.8
• chore(deps): update dependency org.jacoco:jacoco-maven-plugin to v0.8.14
• chore(deps): update dependency psycopg2 to v2.9.11
• chore(deps): update dependency pymysql to v1.1.2
• chore(deps): update dotnet monorepo (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.OpenApi, Microsoft.Extensions.ApiDescription.Server, mcr.microsoft.com/dotnet/sdk)
• fix(deps): update module github.com/minio/minio-go/v7 to v7.0.98
• fix(deps): update module github.com/sixwaaaay/must to v0.1.1
• chore(deps): update alpine docker tag to v3.23
• chore(deps): update dependency certifi to v2024.12.14
• chore(deps): update dependency elasticsearch to v8.19.3
• chore(deps): update dependency fluentvalidation to 11.12.0
• chore(deps): update dependency go to 1.25
• chore(deps): update dependency maven-wrapper to v3.3.4
• chore(deps): update dependency microsoft.net.test.sdk to 17.14.1
• chore(deps): update dependency mysql-connector-python to v8.4.0
• chore(deps): update dependency packaging to v24.2
• chore(deps): update dependency qdrant.client to 1.16.1
• chore(deps): update dependency riok.mapperly to 4.3.1
• chore(deps): update dependency stackexchange.redis to 2.10.1
• chore(deps): update dependency urllib3 to v2.6.3
• chore(deps): update golang docker tag to v1.25
• chore(deps): update jaegertracing/all-in-one docker tag to v1.60
• chore(deps): update mysql docker tag to v8.4.8
• chore(deps): update opentelemetry-dotnet monorepo to 1.15.0 (OpenTelemetry.Exporter.OpenTelemetryProtocol, OpenTelemetry.Extensions.Hosting)
• chore(deps): update opentelemetry-dotnet-contrib monorepo to 1.15.0 (OpenTelemetry.Instrumentation.AspNetCore, OpenTelemetry.Instrumentation.Http)
• chore(deps): update opentelemetry-python monorepo to v1.39.1 (opentelemetry-api, opentelemetry-exporter-otlp-proto-http, opentelemetry-sdk)
• chore(deps): update postgres docker tag to v17.7
• chore(deps): update python docker tag to v3.14
• chore(deps): update sixwaaaay/graph docker tag to v0.7.0
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.15
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.10
• fix(deps): update jjwtversion to v0.13.0 (io.jsonwebtoken:jjwt-jackson, io.jsonwebtoken:jjwt-impl, io.jsonwebtoken:jjwt-api)
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.3.1
• fix(deps): update module github.com/google/uuid to v1.6.0
• fix(deps): update module github.com/google/wire to v0.7.0
• fix(deps): update module github.com/redis/go-redis/v9 to v9.17.3
• fix(deps): update module github.com/sony/sonyflake to v1.3.0
• fix(deps): update module github.com/stretchr/testify to v1.11.1
• fix(deps): update module go.uber.org/zap to v1.27.1
• fix(deps): update module golang.org/x/crypto to v0.47.0
• fix(deps): update module golang.org/x/oauth2 to v0.34.0
• fix(deps): update module google.golang.org/grpc to v1.78.0
• fix(deps): update module google.golang.org/protobuf to v1.36.11
• fix(deps): update module gorm.io/driver/mysql to v1.6.0
• fix(deps): update module gorm.io/gorm to v1.31.1
• fix(deps): update module gorm.io/plugin/dbresolver to v1.6.2
• fix(deps): update opentelemetry-go monorepo (go.opentelemetry.io/otel, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/sdk, go.opentelemetry.io/otel/sdk/metric)
• fix(deps): update opentelemetry-go-contrib monorepo to v0.64.0 (go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho, go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, go.opentelemetry.io/contrib/instrumentation/runtime)
• fix(deps): update resilience4j to v2.3.0 (io.github.resilience4j:resilience4j-all, io.github.resilience4j:resilience4j-circuitbreaker)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-dotnet action to v5
• chore(deps): update actions/setup-go action to v6
• chore(deps): update codecov/codecov-action action to v5
• chore(deps): update dependency certifi to v2026
• chore(deps): update dependency elastic-transport to v9
• chore(deps): update dependency elasticsearch to v9
• chore(deps): update dependency fluentvalidation to v12
• chore(deps): update dependency microsoft.net.test.sdk to v18
• chore(deps): update dependency mysql-connector-python to v9
• chore(deps): update dependency npgsql to v10
• chore(deps): update dependency npgsql.dependencyinjection to v10
• chore(deps): update dependency npgsql.opentelemetry to v10
• chore(deps): update dependency packaging to v26
• chore(deps): update dependency xunit.runner.visualstudio to v3
• chore(deps): update docker/build-push-action action to v6
• chore(deps): update dotnet monorepo to v10 (major) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.OpenApi, Microsoft.Extensions.ApiDescription.Server)
• chore(deps): update github/codeql-action action to v4
• chore(deps): update mysql docker tag to v9
• chore(deps): update postgres docker tag to v18
• chore(deps): update valkey/valkey docker tag to v8
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v4
• fix(deps): update module github.com/labstack/echo/v4 to v5
• fix(deps): update module github.com/sony/sonyflake to v2
• fix(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc to v1
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• fix(deps): update module github.com/labstack/gommon to v0.4.2
• fix(deps): update module github.com/labstack/echo/v4 to v4.15.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update github.com/sixwaaaay/token/rpc digest to 1aabe72
• chore(deps): update dependency coverlet.collector to 6.0.4
• chore(deps): update dependency dapper to 2.1.66
• chore(deps): update dependency maven to v3.9.12
• chore(deps): update dependency moq to 4.20.72
• chore(deps): update dependency npgsql to 8.0.8
• chore(deps): update dependency npgsql.dependencyinjection to 8.0.8
• chore(deps): update dependency elastic-transport to v8.17.1
• fix(deps): update module github.com/spf13/viper to v1.21.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (3)

.github/chore/compose.content.yaml (5)

• mysql 8.2.0 → [Updates: 8.4.8, 9.6.0]
• valkey/valkey 7.2.7-alpine3.20 → [Updates: 8.0.1-alpine3.20]
• sixwaaaay/graph v0.5.0 → [Updates: 0.7.0]
• postgres 17.0-bookworm → [Updates: 17.7-bookworm, 18.1-bookworm]
• jaegertracing/all-in-one 1.52 → [Updates: 1.60]

cmd/shauser/compose.yml (2)

• mysql 8.2.0 → [Updates: 8.4.8, 9.6.0]
• redis 7.2.3-alpine3.18

graal/compose.yaml (3)

• postgres 17.0-bookworm → [Updates: 17.7-bookworm, 18.1-bookworm]
• redis 7.2.3-alpine3.18
• jaegertracing/all-in-one 1.52 → [Updates: 1.60]

dockerfile (5)

cmd/shauser/Dockerfile (1)

• golang 1.21-alpine → [Updates: 1.25-alpine]

cron/popular/Dockerfile (2)

• python 3.11-alpine → [Updates: 3.14-alpine]
• python 3.11-alpine → [Updates: 3.14-alpine]

graal/Dockerfile

replica/essync/Dockerfile (1)

• python 3.11-alpine → [Updates: 3.14-alpine]

sharp/content/Dockerfile (2)

• alpine 3.20 → [Updates: 3.23]
• mcr.microsoft.com/dotnet/sdk 9.0.100-alpine3.20 → [Updates: 9.0.203-alpine3.20]

github-actions (7)

.github/workflows/codeql.yml (5)

• actions/checkout v4 → [Updates: v6]
• actions/setup-dotnet v4 → [Updates: v5]
• github/codeql-action v2 → [Updates: v4]
• github/codeql-action v2 → [Updates: v4]
• github/codeql-action v2 → [Updates: v4]

.github/workflows/comment.yaml (6)

• actions/checkout v4 → [Updates: v6]
• graalvm/setup-graalvm v1
• codecov/codecov-action v3 → [Updates: v5]
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v5 → [Updates: v6]

.github/workflows/content.yaml (6)

• actions/checkout v4 → [Updates: v6]
• actions/setup-dotnet v4 → [Updates: v5]
• codecov/codecov-action v3 → [Updates: v5]
• actions/checkout v4 → [Updates: v6]
• docker/login-action v3
• docker/build-push-action v5 → [Updates: v6]

.github/workflows/cronapp.yaml (3)

• actions/checkout v4 → [Updates: v6]
• docker/login-action v3
• docker/build-push-action v5 → [Updates: v6]

.github/workflows/essync.yaml (3)

• actions/checkout v4 → [Updates: v6]
• docker/login-action v3
• docker/build-push-action v5 → [Updates: v6]

.github/workflows/release.yaml (9)

• actions/checkout v4 → [Updates: v6]
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v5 → [Updates: v6]
• actions/checkout v4 → [Updates: v6]
• graalvm/setup-graalvm v1
• docker/metadata-action v5
• docker/login-action v3
• docker/build-push-action v5 → [Updates: v6]

.github/workflows/users.yaml (7)

• actions/checkout v4 → [Updates: v6]
• actions/setup-go v5 → [Updates: v6]
• codecov/codecov-action v3 → [Updates: v5]
• actions/checkout v4 → [Updates: v6]
• docker/login-action v3
• docker/build-push-action v5 → [Updates: v6]
• go 1.21 → [Updates: 1.25]

gomod (2)

cmd/blob/go.mod (7)

• go 1.21
• github.com/google/uuid v1.5.0 → [Updates: v1.6.0]
• github.com/labstack/echo/v4 v4.11.3 → [Updates: v4.15.0, v5.0.1]
• github.com/labstack/gommon v0.4.0 → [Updates: v0.4.2]
• github.com/minio/minio-go/v7 v7.0.66 → [Updates: v7.0.98]
• github.com/sixwaaaay/must v0.1.0 → [Updates: v0.1.1]
• github.com/spf13/viper v1.15.0 → [Updates: v1.21.0]

cmd/shauser/go.mod (30)

• go 1.21
• codeberg.org/sixwaaaay/sharing-pb v0.1.2
• github.com/golang-jwt/jwt/v5 v5.2.0 → [Updates: v5.3.1]
• github.com/google/wire v0.5.0 → [Updates: v0.7.0]
• github.com/labstack/echo/v4 v4.11.4 → [Updates: v4.15.0, v5.0.1]
• github.com/labstack/gommon v0.4.2
• github.com/redis/go-redis/v9 v9.3.1 → [Updates: v9.17.3]
• github.com/sixwaaaay/cq v0.2.1
• github.com/sixwaaaay/must v0.1.1
• github.com/sixwaaaay/token v0.1.1
• github.com/sixwaaaay/token/rpc v0.0.0-20231226141924-56a2e6246033@56a2e6246033 → [Updates: v0.0.0-20240515023932-1aabe722c14d]
• github.com/sony/sonyflake v1.2.0 → [Updates: v1.3.0, v2.2.0]
• github.com/spf13/viper v1.18.1 → [Updates: v1.21.0]
• github.com/stretchr/testify v1.8.4 → [Updates: v1.11.1]
• go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho v0.46.1 → [Updates: v0.64.0]
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 → [Updates: v0.64.0]
• go.opentelemetry.io/contrib/instrumentation/runtime v0.46.1 → [Updates: v0.64.0]
• go.opentelemetry.io/otel v1.21.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.44.0 → [Updates: v0.45.0, v1.39.0]
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/sdk v1.21.0 → [Updates: v1.39.0]
• go.opentelemetry.io/otel/sdk/metric v1.21.0 → [Updates: v1.39.0]
• go.uber.org/zap v1.26.0 → [Updates: v1.27.1]
• golang.org/x/crypto v0.17.0 → [Updates: v0.47.0]
• golang.org/x/oauth2 v0.15.0 → [Updates: v0.34.0]
• google.golang.org/grpc v1.60.1 → [Updates: v1.78.0]
• google.golang.org/protobuf v1.31.0 → [Updates: v1.36.11]
• gorm.io/driver/mysql v1.5.2 → [Updates: v1.6.0]
• gorm.io/gorm v1.25.5 → [Updates: v1.31.1]
• gorm.io/plugin/dbresolver v1.5.0 → [Updates: v1.6.2]

maven (1)

graal/pom.xml (8)

• org.springframework.boot:spring-boot-starter-parent 3.4.5 → [Updates: 3.5.10, 4.0.2]
• io.jsonwebtoken:jjwt-api 0.11.5 → [Updates: 0.13.0]
• io.jsonwebtoken:jjwt-impl 0.11.5 → [Updates: 0.13.0]
• io.jsonwebtoken:jjwt-jackson 0.11.5 → [Updates: 0.13.0]
• io.github.resilience4j:resilience4j-circuitbreaker 2.1.0 → [Updates: 2.3.0]
• io.github.resilience4j:resilience4j-all 2.1.0 → [Updates: 2.3.0]
• org.jacoco:jacoco-maven-plugin 0.8.13 → [Updates: 0.8.14]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.3.0 → [Updates: 2.8.15, 3.0.1]

maven-wrapper (3)

graal/.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.9.6 → [Updates: 3.9.12]
• maven-wrapper 3.2.0 → [Updates: 3.3.4]

graal/mvnw (1)

• maven-wrapper 3.2.0 → [Updates: 3.3.4]

graal/mvnw.cmd (1)

• maven-wrapper 3.2.0 → [Updates: 3.3.4]

nuget (2)

sharp/content.Tests/content.Tests.csproj (5)

• coverlet.collector 6.0.0 → [Updates: 6.0.4]
• xunit.runner.visualstudio 2.8.2 → [Updates: 3.1.5]
• xunit 2.9.2
• Moq 4.20.70 → [Updates: 4.20.72]
• Microsoft.NET.Test.Sdk 17.11.1 → [Updates: 17.14.1, 18.0.1]

sharp/content/content.csproj (17)

• StackExchange.Redis 2.8.24 → [Updates: 2.10.1]
• FluentValidation 11.10.0 → [Updates: 11.12.0, 12.1.1]
• Riok.Mapperly 4.1.0 → [Updates: 4.3.1]
• Qdrant.Client 1.13.0 → [Updates: 1.16.1]
• OpenTelemetry.Instrumentation.Http 1.9.0 → [Updates: 1.15.0]
• OpenTelemetry.Instrumentation.AspNetCore 1.9.0 → [Updates: 1.15.0]
• OpenTelemetry.Extensions.Hosting 1.10.0 → [Updates: 1.15.0]
• OpenTelemetry.Exporter.Prometheus.AspNetCore 1.10.0-beta.1
• OpenTelemetry.Exporter.OpenTelemetryProtocol 1.10.0 → [Updates: 1.15.0]
• Npgsql.OpenTelemetry 8.0.5 → [Updates: 8.0.8, 10.0.1]
• Npgsql.DependencyInjection 8.0.5 → [Updates: 8.0.8, 10.0.1]
• npgsql 8.0.5 → [Updates: 8.0.8, 10.0.1]
• Microsoft.Extensions.ApiDescription.Server 9.0.0 → [Updates: 9.0.12, 10.0.2]
• Microsoft.AspNetCore.OpenApi 9.0.0 → [Updates: 9.0.12, 10.0.2]
• Microsoft.AspNetCore.Authentication.JwtBearer 9.0.0 → [Updates: 9.0.12, 10.0.2]
• Dapper.AOT 1.0.45 → [Updates: 1.0.48]
• Dapper 2.1.24 → [Updates: 2.1.66]

pip_requirements (2)

cron/popular/requirements.txt (5)

• mysql-connector-python ==8.0.33 → [Updates: ==8.4.0, ==9.6.0]
• opentelemetry-api ==1.22.0 → [Updates: ==1.39.1]
• opentelemetry-exporter-otlp-proto-http ==1.22.0 → [Updates: ==1.39.1]
• opentelemetry-sdk ==1.22.0 → [Updates: ==1.39.1]
• psycopg2 ==2.9.9 → [Updates: ==2.9.11]

replica/essync/requirements.txt (7)

• certifi ==2024.8.30 → [Updates: ==2024.12.14, ==2026.1.4]
• elastic-transport ==8.15.0 → [Updates: ==8.17.1, ==9.2.1]
• elasticsearch ==8.15.1 → [Updates: ==8.19.3, ==9.2.1]
• mysql-replication ==1.0.9 → [Updates: ==1.0.14]
• packaging ==24.1 → [Updates: ==24.2, ==26.0]
• pymysql ==1.1.1 → [Updates: ==1.1.2]
• urllib3 ==2.2.3 → [Updates: ==2.6.3]

---

• Check this box to trigger a request for Renovate to run again on this repository