Repository navigation
Dependency Dashboard #143
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Abandoned Dependencies
The following dependencies have not received updates for an extended period and may be unmaintained.
Note
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.
View abandoned dependencies (1)
| Datasource | Package | Last Updated |
|---|---|---|
| github-actions | amannn/action-semantic-pull-request | 2025-08-22 |
Pending Approval
The following branches are pending approval. To create them, click on a checkbox below.
- chore(deps): update actions/cache action to v6
- chore(deps): update actions/checkout action to v7
- chore(deps): update actions/setup-java action to v6
- chore(deps): update dependency com.configcat:configcat-java-client to v10
- chore(deps): update dependency com.flagsmith:flagsmith-java-client to v8
- chore(deps): update dependency com.puppycrawl.tools:checkstyle to v14
- chore(deps): update dependency com.squareup.okhttp3:mockwebserver to v5
- chore(deps): update dependency com.squareup.okhttp3:okhttp to v5
- chore(deps): update dependency com.statsig:serversdk to v3
- chore(deps): update dependency io.cucumber:cucumber-bom to v8
- chore(deps): update dependency io.getunleash:unleash-client-java to v12
- 🔐 Create all pending approval PRs at once 🔐
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- chore(deps): update dependency com.squareup.okhttp3:mockwebserver to v4.12.1
- chore(deps): update dependency com.squareup.okhttp3:okhttp to v4.12.1
- chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.1
- chore(deps): update grpc-java monorepo to v1.85.1 (
io.grpc:grpc-stub,io.grpc:grpc-protobuf,io.grpc:grpc-netty-shaded) - chore(deps): update jackson monorepo to v2.22.4 (
com.fasterxml.jackson.core:jackson-core,com.fasterxml.jackson.core:jackson-databind,com.fasterxml.jackson:jackson-bom,com.fasterxml.jackson.datatype:jackson-datatype-jsr310) - chore(deps): update actions/checkout action to v5.1.0
- chore(deps): update actions/setup-java action to v5.7.0
- chore(deps): update dependency com.google.code.gson:gson to v2.15.0
- chore(deps): update dependency io.rest-assured:rest-assured to v6.3.0
- chore(deps): update dependency org.picocontainer:picocontainer to v2.16
- chore(deps): update dependency providers/flagd/test-harness to v3.11.0
- chore(deps): update dependency tools/flagd-api-testkit/test-harness to v3.11.0
- 🔐 Create all rate-limited PRs at once 🔐
Pending Status Checks
The following updates await pending status checks. To force their creation now, click on a checkbox below.
- chore(deps): update dependency com.google.cloud:libraries-bom to v26.91.0
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- chore(deps): update actions/cache digest to 0057852
- chore(deps): update actions/checkout digest to fbc6f39
- chore(deps): update actions/setup-java digest to b6effb0
- chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
- chore(deps): update dependency org.projectlombok:lombok to v1.18.48
- chore(deps): update actions/cache action to v4.3.0
- chore(deps): update dependency com.github.spotbugs:spotbugs to v4.10.5
- chore(deps): update dependency com.statsig:serversdk to v1.36.5
- chore(deps): update dependency dev.openfeature.contrib.providers:flagd to v0.15.0
- chore(deps): update dependency io.flipt:flipt-java to v1.4.0
- Click on this checkbox to rebase all open PRs at once
PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
- chore(deps): update dependency com.networknt:json-schema-validator to v3
- chore(deps): update dependency org.semver4j:semver4j to v6
- chore(deps): update junit-framework monorepo to v6 (
org.junit:junit-bom,org.junit.jupiter:junit-jupiter)
Detected Dependencies
git-submodules (1)
.gitmodules (7)
providers/flagd/schemas 1daf5ff56b48d582187d59e35d48c6e191c23839→ [Updates:undefined]providers/flagd/test-harness v3.10.4@2f8f72176b99d85a31b23cd331a775a7c3015423→ [Updates:v3.11.0]providers/flagd/spec eefdf439c5a5b69ccde036c3c6959a4a6c17e08c→ [Updates:undefined]providers/go-feature-flag/wasm-releases 76bf27bab805b2fdc564a0f8557c03d1af414d70→ [Updates:undefined]tools/flagd-core/schemas 1daf5ff56b48d582187d59e35d48c6e191c23839→ [Updates:undefined]tools/flagd-api-testkit/test-harness v3.10.4@2f8f72176b99d85a31b23cd331a775a7c3015423→ [Updates:v3.11.0]tools/tck/spec specification/assets/provider-tck/v0.1.0@10b1a610ed0afe6bf0e38b441d7362f5a76cb47d
github-actions (4)
.github/workflows/ci.yml (6)
actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8→ [Updates:v5.1.0,v7.0.1,v5]actions/setup-java v5@dded0888837ed1f317902acf8a20df0ad188d165→ [Updates:v5.7.0,v6.1.0,v5]actions/cache v4@0400d5f644dc74513175e3cd8d07132dd4860809→ [Updates:v4.3.0,v6.1.0,v4]actions/checkout v5.1.0@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09→ [Updates:v7.0.1]actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961→ [Updates:v6.1.0]actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830→ [Updates:v6.1.0].github/workflows/component-owners.yml
.github/workflows/lint-pr.yml (1)
amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50.github/workflows/release-please.yml (4)
googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7actions/checkout v5.1.0@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09→ [Updates:v7.0.1]actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961→ [Updates:v6.1.0]actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830→ [Updates:v6.1.0]
maven (23)
hooks/codereadiness/pom.xml (1)
org.semver4j:semver4j 5.8.0→ [Updates:6.0.0]hooks/open-telemetry/pom.xml (2)
io.opentelemetry:opentelemetry-bom 1.67.0io.opentelemetry.semconv:opentelemetry-semconv-incubating 1.28.0-alphapom.xml (31)
org.junit:junit-bom 5.14.4→ [Updates:6.1.3]io.cucumber:cucumber-bom 7.34.9→ [Updates:8.0.4]org.mockito:mockito-bom 5.24.0dev.openfeature:sdk [1.21.0,1.99999)org.projectlombok:lombok 1.18.42→ [Updates:1.18.48]com.github.spotbugs:spotbugs 4.9.8→ [Updates:4.10.5]org.assertj:assertj-core 3.27.7org.junit-pioneer:junit-pioneer 2.3.0org.awaitility:awaitility 4.3.0org.apache.maven.plugins:maven-toolchains-plugin 3.3.0org.apache.maven.plugins:maven-compiler-plugin 3.16.0org.apache.maven.plugins:maven-jar-plugin 3.5.1org.apache.maven.plugins:maven-surefire-plugin 3.6.0→ [Updates:3.6.1]org.codehaus.mojo:flatten-maven-plugin 1.8.0org.apache.maven.plugins:maven-resources-plugin 3.5.0org.honton.chas:exists-maven-plugin 0.15.2org.apache.maven.plugins:maven-source-plugin 3.4.0org.apache.maven.plugins:maven-javadoc-plugin 3.12.0org.cyclonedx:cyclonedx-maven-plugin 2.9.3org.apache.maven.plugins:maven-gpg-plugin 3.2.8org.sonatype.central:central-publishing-maven-plugin 0.12.0org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0com.puppycrawl.tools:checkstyle 12.3.1→ [Updates:14.3.0]org.apache.maven.plugins:maven-pmd-plugin 3.28.0com.github.spotbugs:spotbugs-maven-plugin 4.10.5.0com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0com.github.spotbugs:spotbugs 4.9.8→ [Updates:4.10.5]com.diffplug.spotless:spotless-maven-plugin 3.10.4org.apache.maven.plugins:maven-toolchains-plugin 3.3.0org.apache.maven.plugins:maven-surefire-plugin 3.6.0→ [Updates:3.6.1]org.apache.maven.plugins:maven-compiler-plugin 3.16.0providers/configcat/pom.xml (3)
com.configcat:configcat-java-client 9.4.4→ [Updates:10.0.1]org.slf4j:slf4j-api 2.0.20org.apache.logging.log4j:log4j-slf4j2-impl 2.26.1providers/env-var/pom.xml (1)
org.apache.commons:commons-lang3 3.21.0providers/flagd/pom.xml (20)
dev.openfeature.contrib.tools:flagd-core [3.0.0,4.0.0)io.grpc:grpc-netty-shaded 1.85.0→ [Updates:1.85.1]io.grpc:grpc-protobuf 1.85.0→ [Updates:1.85.1]io.grpc:grpc-stub 1.85.0→ [Updates:1.85.1]org.apache.tomcat:annotations-api 6.0.53org.apache.commons:commons-collections4 4.6.0io.opentelemetry:opentelemetry-api 1.67.0org.junit.jupiter:junit-jupiter 5.14.4→ [Updates:6.1.3]org.testcontainers:testcontainers 2.0.5org.testcontainers:testcontainers-junit-jupiter 2.0.5io.rest-assured:rest-assured 6.2.0→ [Updates:6.3.0]commons-io:commons-io 2.22.0org.slf4j:slf4j-simple 2.0.20com.vmlens:api 1.2.28kr.motd.maven:os-maven-plugin 1.7.1org.codehaus.mojo:exec-maven-plugin 3.6.4org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1com.github.spotbugs:spotbugs-maven-plugin 4.10.5.0com.vmlens:vmlens-maven-plugin 1.2.28org.codehaus.mojo:exec-maven-plugin 3.6.4providers/flagsmith/pom.xml (3)
com.flagsmith:flagsmith-java-client 7.4.3→ [Updates:8.2.0]com.squareup.okhttp3:okhttp 4.12.0→ [Updates:4.12.1,5.5.1]com.squareup.okhttp3:mockwebserver 4.12.0→ [Updates:4.12.1,5.5.1]providers/flipt/pom.xml (7)
io.flipt:flipt-java 1.1.2→ [Updates:1.4.0]org.slf4j:slf4j-api 2.0.20com.fasterxml.jackson.core:jackson-databind 2.22.3→ [Updates:2.22.4]org.wiremock:wiremock 3.13.2com.fasterxml.jackson.core:jackson-core 2.22.3→ [Updates:2.22.4]com.fasterxml.jackson.core:jackson-annotations 2.22org.apache.logging.log4j:log4j-slf4j2-impl 2.26.1providers/gcp/pom.xml (6)
com.google.cloud:libraries-bom 26.90.0→ [Updates:26.91.0]com.fasterxml.jackson:jackson-bom 2.22.3→ [Updates:2.22.4]org.slf4j:slf4j-api 2.0.20org.apache.logging.log4j:log4j-slf4j2-impl 2.26.1com.vmlens:api 1.2.28com.vmlens:vmlens-maven-plugin 1.2.28providers/go-feature-flag/pom.xml (17)
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.22.3→ [Updates:2.22.4]com.fasterxml.jackson.core:jackson-core 2.22.3→ [Updates:2.22.4]com.fasterxml.jackson.core:jackson-databind 2.22.3→ [Updates:2.22.4]com.fasterxml.jackson.core:jackson-annotations 2.22org.slf4j:slf4j-api 2.0.20io.reactivex.rxjava3:rxjava 3.1.12org.apache.logging.log4j:log4j-slf4j2-impl 2.26.1com.dylibso.chicory:wasi 1.7.5com.squareup.okhttp3:mockwebserver 4.12.0→ [Updates:4.12.1,5.5.1]com.squareup.okhttp3:okhttp 4.12.0→ [Updates:4.12.1,5.5.1]com.squareup.okio:okio-jvm 3.18.2org.testcontainers:testcontainers 2.0.5org.testcontainers:testcontainers-junit-jupiter 2.0.5com.github.spotbugs:spotbugs-annotations 4.10.5dev.openfeature.contrib.providers:ofrep 0.0.2com.google.guava:guava 33.7.2-jrecom.dylibso.chicory:chicory-compiler-maven-plugin 1.7.5providers/jsonlogic-eval-provider/pom.xml (3)
io.github.gzsombor:json-logic-java 1.1.6org.json:json 20250517com.github.spotbugs:spotbugs-annotations 4.10.5providers/multiprovider/pom.xml (2)
org.json:json 20250517org.apache.logging.log4j:log4j-slf4j2-impl 2.26.1providers/ofrep/pom.xml (8)
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.22.3→ [Updates:2.22.4]com.fasterxml.jackson.core:jackson-core 2.22.3→ [Updates:2.22.4]com.fasterxml.jackson.core:jackson-databind 2.22.3→ [Updates:2.22.4]com.fasterxml.jackson.core:jackson-annotations 2.22org.slf4j:slf4j-api 2.0.20commons-validator:commons-validator 1.11.0com.google.guava:guava 33.7.2-jrecom.squareup.okhttp3:mockwebserver 4.12.0→ [Updates:4.12.1,5.5.1]providers/optimizely/pom.xml (4)
com.optimizely.ab:core-api 4.6.0com.optimizely.ab:core-httpclient-impl 4.6.0org.slf4j:slf4j-api 2.0.20org.apache.logging.log4j:log4j-slf4j2-impl 2.26.1providers/statsig/pom.xml (3)
com.statsig:serversdk 1.18.1→ [Updates:1.36.5,3.2.0]org.slf4j:slf4j-api 2.0.20org.apache.logging.log4j:log4j-slf4j2-impl 2.26.1providers/unleash/pom.xml (4)
io.getunleash:unleash-client-java 11.2.1→ [Updates:12.3.1]org.slf4j:slf4j-api 2.0.20org.wiremock:wiremock 3.13.2org.apache.logging.log4j:log4j-slf4j2-impl 2.26.1samples/gcp/pom.xml (4)
dev.openfeature.contrib.providers:gcp 0.0.2dev.openfeature:sdk 1.23.0org.slf4j:slf4j-simple 2.0.20org.codehaus.mojo:exec-maven-plugin 3.6.4tools/flagd-api-testkit/pom.xml (5)
dev.openfeature.contrib.tools:flagd-api [0.0.1,)org.assertj:assertj-core 3.27.7com.fasterxml.jackson.core:jackson-databind 2.22.3→ [Updates:2.22.4]org.codehaus.mojo:exec-maven-plugin 3.6.4org.apache.maven.plugins:maven-resources-plugin 3.5.0tools/flagd-api/pom.xml
tools/flagd-core/pom.xml (13)
dev.openfeature.contrib.tools:flagd-api [1.0.0,2.0.0)com.fasterxml.jackson.core:jackson-databind 2.22.3→ [Updates:2.22.4]io.github.gzsombor:json-logic-java 1.1.6com.google.code.gson:gson 2.14.0→ [Updates:2.15.0]com.networknt:json-schema-validator 1.5.9→ [Updates:3.0.8]org.apache.commons:commons-lang3 3.21.0org.semver4j:semver4j 5.8.0→ [Updates:6.0.0]commons-codec:commons-codec 1.23.0org.junit.jupiter:junit-jupiter 5.14.4→ [Updates:6.1.3]org.assertj:assertj-core 3.27.7dev.openfeature.contrib.tools:flagd-api-testkit [0.0.1,)org.codehaus.mojo:exec-maven-plugin 3.6.4org.apache.maven.plugins:maven-resources-plugin 3.5.0tools/flagd-http-connector/pom.xml (3)
dev.openfeature.contrib.providers:flagd 0.11.20→ [Updates:0.15.0]org.apache.commons:commons-lang3 3.21.0com.google.code.findbugs:annotations 3.0.1u2tools/junit-openfeature/pom.xml (2)
org.apache.commons:commons-lang3 3.21.0org.junit-pioneer:junit-pioneer 2.3.0tools/tck/pom.xml (10)
org.picocontainer:picocontainer 2.15.2→ [Updates:2.16]org.opentest4j:opentest4j 1.3.0org.assertj:assertj-core 3.27.7org.awaitility:awaitility 4.3.0org.testcontainers:testcontainers 2.0.5com.fasterxml.jackson.core:jackson-databind 2.22.3→ [Updates:2.22.4]org.slf4j:slf4j-api 2.0.20org.codehaus.mojo:exec-maven-plugin 3.6.3→ [Updates:3.6.4]org.apache.maven.plugins:maven-clean-plugin 3.5.0org.apache.maven.plugins:maven-resources-plugin 3.5.0
maven-wrapper (3)
.mvn/wrapper/maven-wrapper.properties (1)
maven 3.10.0mvnw (1)
maven-wrapper 3.3.4mvnw.cmd (1)
maven-wrapper 3.3.4
renovate-config (1)
renovate.json
- Check this box to trigger a request for Renovate to run again on this repository
Activity
chore: exclude component in git tag (open-feature#143)
fix(deps): Spot bug scope change (open-feature#173)