Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Found renovate config warnings
• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
gradle	org.hibernate.orm:hibernate-jpamodelgen

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update devdependencies (@github/copilot, java, node, prettier, prettier-plugin-java, prettier-plugin-properties, python)

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update actions/setup-node action to v6.2.0
• chore(deps): update actions/setup-python action to v6.2.0
• chore(deps): update peter-evans/create-pull-request action to v8.1.0
• chore(deps): update plugin com.gradle.develocity to v4.3.2
• fix(deps): update dependency net.ltgt.gradle:gradle-errorprone-plugin to v5
• fix(deps): update dependency org.springframework.boot:spring-boot-dependencies to v4
• fix(deps): update dependency org.springframework.modulith:spring-modulith-bom to v2
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package AGPL-3.0-or-later:Universal-FOSS-exception-1.0, Failed to look up maven package com.xenoterracide:tools.

Files affected: buildSrc/src/main/kotlin/our.convention.gradle.kts, gradle/libs.versions.toml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update gradle/actions action to v5.0.1
• chore(deps): update actions/setup-java action to v5.2.0
• chore(deps): update plugin semver to 0.15.+
• fix(deps): update plugin.convention to 0.5.+ (com.xenoterracide.gradle.convention:spotbugs, com.xenoterracide.gradle.convention:publish, com.xenoterracide.gradle.convention:coverage, com.xenoterracide.gradle.convention:checkstyle)
• fix(deps): update dependency com.autonomousapps:dependency-analysis-gradle-plugin to v3
• fix(deps): update dependency jakarta.platform:jakarta.jakartaee-bom to v11
• fix(deps): update dependency nl.jqno.equalsverifier:equalsverifier to v4
• fix(deps): update dependency org.hibernate.orm:hibernate-jpamodelgen to v7
• fix(deps): update dependency org.jmolecules:jmolecules-bom to v2025
• fix(deps): update dependency org.junit:junit-bom to v6
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

asdf (1)

.tool-versions (4)

• java 25.0.1+8.0.LTS → [Updates: 25.0.2+10.0.LTS]
• node 24.11.1 → [Updates: 24.13.0]
• ktlint 1.8.0
• python 3.14.0 → [Updates: 3.14.3]

github-actions (5)

.github/workflows/build.yml (4)

• actions/checkout v6.0.2
• actions/setup-java v5.1.0 → [Updates: v5.2.0]
• gradle/actions v5.0.0 → [Updates: v5.0.1]
• gradle/actions v5.0.0 → [Updates: v5.0.1]

.github/workflows/full.yml (3)

• actions/checkout v6.0.2
• actions/setup-java v5.1.0 → [Updates: v5.2.0]
• gradle/actions v5.0.0 → [Updates: v5.0.1]

.github/workflows/gh-publish.yml (3)

• actions/checkout v6.0.2
• actions/setup-java v5.1.0 → [Updates: v5.2.0]
• gradle/actions v5.0.0 → [Updates: v5.0.1]

.github/workflows/pre-commit.yml (12)

• actions/checkout v6.0.2
• actions/setup-python v6.1.0 → [Updates: v6.2.0]
• actions/setup-node v6.1.0 → [Updates: v6.2.0]
• actions/setup-node v6.1.0 → [Updates: v6.2.0]
• actions/setup-java v5.1.0 → [Updates: v5.2.0]
• asdf-vm/actions v4.0.1
• ubuntu 24.04
• python 3
• ubuntu 24.04
• node 24
• node 24
• ubuntu 24.04

.github/workflows/update-java.yml (6)

• actions/checkout v6.0.2
• actions/setup-java v5.1.0 → [Updates: v5.2.0]
• gradle/actions v5.0.0 → [Updates: v5.0.1]
• actions/setup-python v6.1.0 → [Updates: v6.2.0]
• peter-evans/create-pull-request v8.0.0 → [Updates: v8.1.0]
• python 3

gradle (20)

build.gradle.kts

buildSrc/build.gradle.kts

buildSrc/settings.gradle.kts (1)

• com.xenoterracide.gradle.vc:version-catalog-spring-boot 3.5.0-rc.8

buildSrc/src/main/kotlin/our.bom.gradle.kts

buildSrc/src/main/kotlin/our.convention.gradle.kts (1)

• AGPL-3.0-or-later:Universal-FOSS-exception-1.0 CC-BY-NC-4.0

buildSrc/src/main/kotlin/our.javacompile.gradle.kts

buildSrc/src/main/kotlin/our.javalibrary.gradle.kts

buildSrc/src/main/kotlin/our.javatest.gradle.kts

buildSrc/src/main/kotlin/our.jpamodel.gradle.kts

gradle.properties

gradle/libs.versions.toml (28)

• com.tngtech.archunit:archunit 1.+
• com.tngtech.archunit:archunit-junit5-api 1.+
• org.assertj:assertj-core 3.+
• nl.jqno.equalsverifier:equalsverifier 3.+ → [Updates: 4.+]
• com.google.errorprone:error_prone_core 2.+
• com.uber.nullaway:nullaway 0.+
• org.hibernate.orm:hibernate-jpamodelgen 6.+ → [Updates: 7.+, 7.2.4.Final]
• org.immutables:bom 2.+
• jakarta.platform:jakarta.jakartaee-bom 10.+ → [Updates: 11.+]
• com.xenoterracide:tools 0.+
• org.jboss.logging:jboss-logging 3.+
• org.jmolecules.integrations:jmolecules-archunit 1.+
• org.jmolecules:jmolecules-bom 2023.+ → [Updates: 2025.+]
• org.jspecify:jspecify 1.+
• org.junit:junit-bom 5.+ → [Updates: 6.+]
• net.sourceforge.plantuml:plantuml 1.+
• com.xenoterracide.gradle.convention:checkstyle 0.3.+ → [Updates: 0.5.+]
• com.xenoterracide.gradle.convention:coverage 0.3.+ → [Updates: 0.5.+]
• com.xenoterracide.gradle.convention:publish 0.3.+ → [Updates: 0.5.+]
• com.xenoterracide.gradle.convention:spotbugs 0.3.+ → [Updates: 0.5.+]
• com.autonomousapps:dependency-analysis-gradle-plugin 2.+ → [Updates: 3.+]
• net.ltgt.gradle:gradle-errorprone-plugin 4.+ → [Updates: 5.+]
• com.github.spotbugs:spotbugs 4.+
• org.springframework.boot:spring-boot-dependencies 3.+ → [Updates: 4.+]
• org.springframework.modulith:spring-modulith-bom 1.+ → [Updates: 2.+]
• com.github.f4b6a3:uuid-creator 6.+
• com.xenoterracide.gradle.semver 0.14.+ → [Updates: 0.15.+]
• io.gitlab.plunts.plantuml 2.+

module/app-core/build.gradle.kts

module/authn-controller/build.gradle.kts

module/commons-jpa/build.gradle.kts

module/commons-model/build.gradle.kts

module/security-controller/build.gradle.kts

module/security-model/build.gradle.kts

module/test-app-core/build.gradle.kts

module/test-authorization-server/build.gradle.kts

settings.gradle.kts (2)

• com.gradle.develocity 4.2.2 → [Updates: 4.3.2]
• com.xenoterracide.gradle.vc:version-catalog-spring-boot 3.5.0-rc.8

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.3.1

npm (1)

package.json (10)

• @github/copilot ^0.0.400 → [Updates: ^0.0.406]
• @prettier/plugin-xml ^3.4.2
• git-conventional-commits ^2.8.0
• lint-staged ^16.2.1
• prettier ^3.6.2 → [Updates: ^3.6.2]
• prettier-plugin-java ^2.7.5 → [Updates: ^2.7.5]
• prettier-plugin-properties ^0.3.0 → [Updates: ^0.3.0]
• prettier-plugin-toml ^2.0.6
• rimraf ^6.1.2
• yarn 4.12.0

pip_requirements (1)

requirements.txt

poetry (1)

pyproject.toml (1)

• reuse >=6

---

• Check this box to trigger a request for Renovate to run again on this repository