Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
gradle	org.slf4j:slf4j-log4j12

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update gradle/wrapper-validation-action digest to f9c9c57
• Update ruby/setup-ruby digest to 5dd816a
• Update dependency io.swagger:swagger-annotations to v1.6.16
• Update dependency org.freemarker:freemarker to v2.3.34
• Update dependency org.glassfish.jersey:jersey-bom to v3.1.11
• Update dependency org.openapitools:jackson-databind-nullable to v0.2.8
• Update plugin org.owasp.dependencycheck to v12.1.9
• Update projectVersion to v3.3.2 (org.finos.symphony.bdk.ext:symphony-group-extension, org.finos.symphony.bdk:symphony-bdk-template-handlebars, org.finos.symphony.bdk:symphony-bdk-template-freemarker, org.finos.symphony.bdk:symphony-bdk-template-api, org.finos.symphony.bdk:symphony-bdk-app-spring-boot-starter, org.finos.symphony.bdk:symphony-bdk-core-spring-boot-starter, org.finos.symphony.bdk:symphony-bdk-http-webclient, org.finos.symphony.bdk:symphony-bdk-http-jersey2, org.finos.symphony.bdk:symphony-bdk-http-api, org.finos.symphony.bdk:symphony-bdk-extension-api, org.finos.symphony.bdk:symphony-bdk-config, org.finos.symphony.bdk:symphony-bdk-core)
• Update slf4j monorepo to v2.0.17 (org.slf4j:slf4j-log4j12, org.slf4j:slf4j-api)
• Update spring boot to v3.5.9 (org.springframework.boot:spring-boot-dependencies, org.springframework.boot)
• Update dependency com.fasterxml.jackson:jackson-bom to v2.20.1
• Update dependency com.github.ben-manes:gradle-versions-plugin to v0.53.0
• Update dependency com.github.jknack:handlebars to v4.5.0
• Update dependency com.hazelcast:hazelcast to v5.6.0
• Update dependency com.tngtech.archunit:archunit-junit5 to v1.4.1
• Update dependency commons-codec:commons-codec to v1.20.0
• Update dependency commons-io:commons-io to v2.21.0
• Update dependency de.undercouch:gradle-download-task to v5.6.0
• Update dependency io.jsonwebtoken:jjwt to v0.13.0
• Update dependency jakarta.validation:jakarta.validation-api to v3.1.1
• Update dependency jekyll to "~> 4.4.0"
• Update dependency just-the-docs to v0.11.1
• Update dependency net.bytebuddy:byte-buddy to v1.18.3
• Update dependency org.apache.commons:commons-lang3 to v3.20.0
• Update dependency org.apache.commons:commons-text to v1.15.0
• Update dependency org.apache.logging.log4j:log4j-bom to v2.25.3
• Update dependency org.assertj:assertj-core to v3.27.6
• Update dependency org.bouncycastle:bcpkix-jdk18on to v1.83
• Update dependency ruby to v3.4.8
• Update Gradle to v8.14.3
• Update gradle/gradle-build-action action to v2.12.0
• Update mapstruct monorepo to v1.6.3 (org.mapstruct:mapstruct-processor, org.mapstruct:mapstruct)
• Update actions/checkout action to v6
• Update actions/configure-pages action to v5
• Update actions/deploy-pages action to v4
• Update actions/setup-java action to v5
• Update actions/upload-pages-artifact action to v4
• Update dependency com.google.guava:guava to v33
• Update dependency jakarta.ws.rs:jakarta.ws.rs-api to v4
• Update dependency org.glassfish.jersey:jersey-bom to v4
• Update dependency org.openapitools:openapi-generator-gradle-plugin to v7
• Update dependency ruby to v4
• Update dependency ubuntu to v24
• Update Gradle to v9
• Update gradle/actions action to v5
• Update gradle/gradle-build-action action to v3
• Update plugin io.github.gradle-nexus.publish-plugin to v2
• Update spring boot to v4 (major) (org.springframework.boot:spring-boot-dependencies, org.springframework.boot)
• 🔐 Create all pending approval PRs at once 🔐

Detected Dependencies

bundler (1)

docs/Gemfile (2)

• jekyll "~> 4.3.2" → [Updates: "~> 4.4.0"]
• just-the-docs "0.5.2" → [Updates: "0.11.1"]

docker-compose (2)

symphony-bdk-examples/bdk-core-examples/src/main/resources/proxy/withBasicAuthentication/docker-compose.yaml

symphony-bdk-examples/bdk-core-examples/src/main/resources/proxy/withoutAuthentication/docker-compose.yaml

dockerfile (1)

symphony-bdk-examples/bdk-core-examples/src/main/resources/proxy/withBasicAuthentication/Dockerfile

github-actions (6)

.github/workflows/build.yml (3)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v3 → [Updates: v5]
• gradle/gradle-build-action v2.4.2 → [Updates: v2.12.0, v3.5.0]

.github/workflows/cve-scanning-gradle.yml (3)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v3 → [Updates: v5]

.github/workflows/docs.yml (6)

• actions/checkout v4 → [Updates: v6]
• ruby/setup-ruby ec02537da5712d66d4d50a0f33b7eb52773b5ed1 → [Updates: undefined]
• actions/configure-pages v4 → [Updates: v5]
• actions/upload-pages-artifact v3 → [Updates: v4]
• actions/deploy-pages v2 → [Updates: v4]
• ruby 3.1 → [Updates: 3.4.8, 4.0.0]

.github/workflows/gradle-wrapper-validation.yml (2)

• actions/checkout v4 → [Updates: v6]
• gradle/wrapper-validation-action 56b90f209b02bf6d1deae490e9ef18b21a389cd4 → [Updates: undefined]

.github/workflows/release.yml (2)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v3 → [Updates: v5]

.github/workflows/semgrep.yml (2)

• actions/checkout v4 → [Updates: v6]
• ubuntu 20.04 → [Updates: 24.04]

gradle (32)

build.gradle (14)

• io.github.gradle-nexus.publish-plugin 1.3.0 → [Updates: 2.0.0]
• org.owasp.dependencycheck 12.1.3 → [Updates: 12.1.9]
• org.finos.symphony.bdk:symphony-bdk-core 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-config 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-extension-api 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-http-api 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-http-jersey2 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-http-webclient 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-core-spring-boot-starter 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-app-spring-boot-starter 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-template-api 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-template-freemarker 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk:symphony-bdk-template-handlebars 3.3.0-SNAPSHOT → [Updates: 3.3.2]
• org.finos.symphony.bdk.ext:symphony-group-extension 3.3.0-SNAPSHOT → [Updates: 3.3.2]

buildSrc/build.gradle (3)

• org.openapitools:openapi-generator-gradle-plugin 5.4.0 → [Updates: 7.18.0]
• de.undercouch:gradle-download-task 5.0.2 → [Updates: 5.6.0]
• com.github.ben-manes:gradle-versions-plugin 0.42.0 → [Updates: 0.53.0]

buildSrc/src/main/groovy/bdk.java-codegen-conventions.gradle (1)

• javax.annotation:jsr250-api 1.0

buildSrc/src/main/groovy/bdk.java-common-conventions.gradle

buildSrc/src/main/groovy/bdk.java-library-conventions.gradle

buildSrc/src/main/groovy/bdk.java-publish-conventions.gradle

settings.gradle

symphony-bdk-bom/build.gradle (29)

• org.springframework.boot:spring-boot-dependencies 3.5.8 → [Updates: 3.5.9, 4.0.1]
• com.fasterxml.jackson:jackson-bom 2.18.2 → [Updates: 2.20.1]
• org.glassfish.jersey:jersey-bom 3.1.9 → [Updates: 3.1.11, 4.0.0]
• org.apache.logging.log4j:log4j-bom 2.24.2 → [Updates: 2.25.3]
• org.apiguardian:apiguardian-api 1.1.2
• org.slf4j:slf4j-api 2.0.9 → [Updates: 2.0.17]
• org.slf4j:slf4j-log4j12 2.0.9 → [Updates: 2.0.17]
• commons-io:commons-io 2.20.0 → [Updates: 2.21.0]
• commons-codec:commons-codec 1.19.0 → [Updates: 1.20.0]
• commons-beanutils:commons-beanutils 1.11.0
• org.apache.commons:commons-lang3 3.18.0 → [Updates: 3.20.0]
• org.apache.commons:commons-text 1.14.0 → [Updates: 1.15.0]
• commons-logging:commons-logging 1.3.5
• com.brsanthu:migbase64 2.2
• io.jsonwebtoken:jjwt 0.9.1 → [Updates: 0.13.0]
• org.bouncycastle:bcpkix-jdk18on 1.79 → [Updates: 1.83]
• com.google.code.findbugs:jsr305 3.0.2
• io.github.resilience4j:resilience4j-retry 2.3.0
• io.swagger:swagger-annotations 1.6.14 → [Updates: 1.6.16]
• org.openapitools:jackson-databind-nullable 0.2.6 → [Updates: 0.2.8]
• org.projectreactor:reactor-spring 1.0.1.RELEASE
• org.freemarker:freemarker 2.3.33 → [Updates: 2.3.34]
• com.github.jknack:handlebars 4.3.1 → [Updates: 4.5.0]
• org.reflections:reflections 0.10.2
• com.tngtech.archunit:archunit-junit5 1.2.1 → [Updates: 1.4.1]
• org.mock-server:mockserver-netty 5.15.0
• org.assertj:assertj-core 3.24.2 → [Updates: 3.27.6]
• jakarta.ws.rs:jakarta.ws.rs-api 3.1.0 → [Updates: 4.0.0]
• jakarta.validation:jakarta.validation-api 3.0.2 → [Updates: 3.1.1]

symphony-bdk-config/build.gradle

symphony-bdk-core/build.gradle (5)

• org.mapstruct:mapstruct 1.4.2.Final → [Updates: 1.6.3]
• net.bytebuddy:byte-buddy 1.12.19 → [Updates: 1.18.3]
• org.mapstruct:mapstruct-processor 1.4.2.Final → [Updates: 1.6.3]
• javax.annotation:jsr250-api 1.0
• javax.xml.bind:jaxb-api 2.3.1

symphony-bdk-examples/bdk-app-spring-boot-example/build.gradle (1)

• org.springframework.boot 3.2.2 → [Updates: 3.5.9, 4.0.1]

symphony-bdk-examples/bdk-core-examples/build.gradle

symphony-bdk-examples/bdk-group-example/build.gradle

symphony-bdk-examples/bdk-multi-instances-example/build.gradle (1)

• com.hazelcast:hazelcast 5.3.6 → [Updates: 5.6.0]

symphony-bdk-examples/bdk-spring-boot-example/build.gradle (1)

• org.springframework.boot 3.5.4 → [Updates: 3.5.9, 4.0.1]

symphony-bdk-extension-api/build.gradle

symphony-bdk-extensions/build.gradle

symphony-bdk-extensions/symphony-group-extension/build.gradle

symphony-bdk-http/build.gradle

symphony-bdk-http/symphony-bdk-http-api/build.gradle

symphony-bdk-http/symphony-bdk-http-jersey2/build.gradle (1)

• com.google.guava:guava 31.1-jre → [Updates: 33.5.0-jre]

symphony-bdk-http/symphony-bdk-http-webclient/build.gradle (1)

• com.google.guava:guava 31.1-jre → [Updates: 33.5.0-jre]

symphony-bdk-spring/build.gradle

symphony-bdk-spring/symphony-bdk-app-spring-boot-starter/build.gradle (1)

• jakarta.validation:jakarta.validation-api 3.0.2 → [Updates: 3.1.1]

symphony-bdk-spring/symphony-bdk-core-spring-boot-starter/build.gradle

symphony-bdk-template/build.gradle

symphony-bdk-template/symphony-bdk-template-api/build.gradle

symphony-bdk-template/symphony-bdk-template-freemarker/build.gradle

symphony-bdk-template/symphony-bdk-template-handlebars/build.gradle

symphony-bdk-test/build.gradle

symphony-bdk-test/symphony-bdk-test-jupiter/build.gradle

symphony-bdk-test/symphony-bdk-test-spring-boot/build.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.5 → [Updates: 8.14.3, 9.2.1]

---

• Check this box to trigger a request for Renovate to run again on this repository