Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
gradle	org.hibernate:hibernate-core

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update dependency org.projectlombok:lombok to v1.18.42
• fix(deps): update dependency org.slf4j:slf4j-api to v2.0.17
• fix(deps): update dependency com.jayway.jsonpath:json-path to v2.10.0
• fix(deps): update dependency commons-codec:commons-codec to v1.20.0
• fix(deps): update dependency joda-time:joda-time to v2.14.0
• fix(deps): update dependency org.ehcache:ehcache to v3.11.1
• fix(deps): update dependency org.junit.vintage:junit-vintage-engine to v5.14.2
• fix(deps): update jackson monorepo (com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-annotations, com.fasterxml.jackson.core:jackson-databind)
• fix(deps): update uportalversion to v5.17.1 (org.jasig.portal:uPortal-spring, org.jasig.portal:uPortal-soffit-renderer)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-java action to v5
• chore(deps): update gradle to v9
• chore(deps): update gradle/actions action to v5
• fix(deps): update dependency org.junit.vintage:junit-vintage-engine to v6
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update dependency org.aspectj:aspectjweaver to v1.9.25.1
• fix(deps): update dependency net.minidev:json-smart to v2.6.0
• fix(deps): update dependency org.apache.commons:commons-lang3 to v3.20.0
• fix(deps): update dependency org.hsqldb:hsqldb to v2.7.4
• fix(deps): update springfox monorepo to v2.10.5 (io.springfox:springfox-swagger-ui, io.springfox:springfox-swagger2)
• fix(deps): update dependency com.google.guava:guava to v33
• fix(deps): update dependency org.hibernate:hibernate-core to v7
• fix(deps): update dependency org.springframework.boot:spring-boot-gradle-plugin to v4
• fix(deps): update spring core to v7 (major) (org.springframework:spring-tx, org.springframework:spring-orm, org.springframework:spring-jdbc)
• fix(deps): update springfox monorepo to v3 (major) (io.springfox:springfox-swagger-ui, io.springfox:springfox-swagger2)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (1)

.github/workflows/CI.yml (4)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v4 → [Updates: v5]
• gradle/actions v4 → [Updates: v5]

gradle (5)

build.gradle (3)

• net.researchgate.release 3.1.0
• junit:junit 4.13.2
• org.junit.vintage:junit-vintage-engine 5.11.4 → [Updates: 5.14.2, 6.0.2]

gradle.properties (40)

• org.apache.portals:portlet-api_2.1.0_spec 1.0
• com.fasterxml.jackson.core:jackson-annotations 2.18.2 → [Updates: 2.20]
• com.fasterxml.jackson.core:jackson-core 2.18.2 → [Updates: 2.20.1]
• com.fasterxml.jackson.core:jackson-databind 2.18.2 → [Updates: 2.20.1]
• commons-lang:commons-lang 2.6
• org.slf4j:slf4j-api 2.0.16 → [Updates: 2.0.17]
• javax.annotation:javax.annotation-api 1.3.2
• javax.xml.bind:jaxb-api 2.3.1
• org.projectlombok:lombok 1.18.36 → [Updates: 1.18.42]
• javax.servlet:servlet-api 2.5
• com.google.guava:guava 31.1-jre → [Updates: 33.5.0-jre]
• com.jayway.jsonpath:json-path 2.9.0 → [Updates: 2.10.0]
• net.minidev:json-smart 2.5.1 → [Updates: 2.6.0]
• commons-codec:commons-codec 1.17.2 → [Updates: 1.20.0]
• commons-dbcp:commons-dbcp 1.4
• io.springfox:springfox-swagger2 2.9.2 → [Updates: 2.10.5, 3.0.0]
• io.springfox:springfox-swagger-ui 2.9.2 → [Updates: 2.10.5, 3.0.0]
• javax.servlet:jstl 1.2
• joda-time:joda-time 2.13.1 → [Updates: 2.14.0]
• net.sf.dozer:dozer 5.5.1
• net.sf.dozer:dozer-spring 5.5.1
• org.ehcache:ehcache 3.10.8 → [Updates: 3.11.1]
• org.apache.commons:commons-lang3 3.16.0 → [Updates: 3.20.0]
• org.apache.httpcomponents:httpclient 4.5.14
• org.aspectj:aspectjweaver 1.9.22.1 → [Updates: 1.9.25.1]
• org.codehaus.janino:janino 3.1.12
• org.hibernate:hibernate-core 5.6.15.Final → [Updates: 7.2.0.Final]
• org.hibernate:hibernate-ehcache 5.6.15.Final
• org.hibernate:hibernate-entitymanager 5.6.15.Final
• org.jasig.resourceserver:resource-server-utils 1.5.0
• org.jasig.portal:uPortal-soffit-renderer 5.16.1 → [Updates: 5.17.1]
• org.jasig.portal:uPortal-spring 5.16.1 → [Updates: 5.17.1]
• org.jasypt:jasypt-spring31 1.9.3
• org.springframework:spring-jdbc 4.3.30.RELEASE → [Updates: 7.0.2]
• org.springframework:spring-orm 4.3.30.RELEASE → [Updates: 7.0.2]
• org.springframework:spring-tx 4.3.30.RELEASE → [Updates: 7.0.2]
• org.springframework:spring-webmvc-portlet 4.3.30.RELEASE
• org.springframework.security.oauth:spring-security-oauth2 2.5.2.RELEASE
• com.rometools:rome 2.1.0
• org.hsqldb:hsqldb 2.5.0 → [Updates: 2.7.4]

notification-portlet-api/build.gradle

notification-portlet-webapp/build.gradle (2)

• org.springframework.boot:spring-boot-gradle-plugin 1.5.22.RELEASE → [Updates: 4.0.1]
• com.github.node-gradle.node 7.1.0

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 6.9.4 → [Updates: 9.2.1]

npm (1)

notification-portlet-webapp/package.json (3)

• clean-css-cli ^5.0.0
• less ^4.0.0
• uglifyjs-folder ^3.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository