Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/dropwizard/dropwizard). ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [fix(deps): update jetty monorepo to v12.1.13](../pull/11281) (`org.eclipse.jetty.ee10:jetty-ee10-bom`, `org.eclipse.jetty:jetty-bom`) - [ ] [chore(deps): update dependency com.uber.nullaway:nullaway to v0.14.1](../pull/11293) - [ ] [chore(deps): update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.8.0.7211](../pull/11314) - [ ] [chore(deps): update github/codeql-action action to v4.38.1](../pull/11315) - [ ] [chore(deps): update maven plugins (minor)](../pull/11311) (`org.apache.maven.plugins:maven-deploy-plugin`, `org.apache.maven.plugins:maven-compiler-plugin`, `org.apache.maven.plugins:maven-surefire-plugin`, `org.apache.maven.plugins:maven-install-plugin`) - [ ] [fix(deps): update dependency com.h2database:h2 to v2.5.250](../pull/11313) - [ ] [fix(deps): update dependency io.dropwizard.logback:logback-throttling-appender to v1.6.0](../pull/11301) - [ ] [fix(deps): update dependency jakarta.servlet:jakarta.servlet-api to v6.1.0](../pull/11055) - [ ] [fix(deps): update dependency jakarta.validation:jakarta.validation-api to v3.1.1](../pull/11056) - [ ] [fix(deps): update dependency org.bouncycastle:bcprov-jdk18on to v1.86](../pull/11322) - [ ] [fix(deps): update dependency org.conscrypt:conscrypt-openjdk-uber to v2.7.0](../pull/11248) - [ ] [fix(deps): update dependency org.javassist:javassist to v3.33.0-ga](../pull/11296) - [ ] [fix(deps): update error-prone monorepo to v2.50.0](../pull/11190) (`com.google.errorprone:error_prone_core`, `com.google.errorprone:error_prone_annotations`) - [ ] [fix(deps): update guava monorepo to v33.7.1-jre](../pull/11290) (`com.google.guava:guava-testlib`, `com.google.guava:guava`) - [ ] [fix(deps): update hk2.version to v3.1.1](../pull/11060) (`org.glassfish.hk2.external:aopalliance-repackaged`, `org.glassfish.hk2:hk2-utils`, `org.glassfish.hk2:hk2-locator`, `org.glassfish.hk2:hk2-api`) - [ ] [fix(deps): update logback monorepo to v1.6.3](../pull/11273) (`ch.qos.logback:logback-classic`, `ch.qos.logback:logback-core`) - [ ] [chore(deps): update dependency sphinx to v9](../pull/11061) - [ ] [chore(deps): update github actions (major)](../pull/11298) (`actions/setup-java`, `java-jdk`) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [fix(deps): update dependency jakarta.persistence:jakarta.persistence-api to v3.2.0](../pull/11215) - [ ] [fix(deps): update dependency jakarta.annotation:jakarta.annotation-api to v3](../pull/11219) - [ ] [fix(deps): update dependency jakarta.el:jakarta.el-api to v6](../pull/11220) - [ ] [fix(deps): update dependency jakarta.ws.rs:jakarta.ws.rs-api to v4](../pull/11221) - [ ] [fix(deps): update dependency org.glassfish.expressly:expressly to v6](../pull/11216) - [ ] [fix(deps): update dependency org.glassfish.jersey:jersey-bom to v4](../pull/11066) - [ ] [fix(deps): update dependency org.hibernate.orm:hibernate-core to v7](../pull/11218) - [ ] [fix(deps): update dependency org.hibernate.validator:hibernate-validator to v9](../pull/11217) - [ ] [fix(deps): update dependency org.liquibase:liquibase-core to v5](../pull/11069) - [ ] [fix(deps): update hk2.version to v4](../pull/11112) (`org.glassfish.hk2.external:aopalliance-repackaged`, `org.glassfish.hk2:hk2-utils`, `org.glassfish.hk2:hk2-locator`, `org.glassfish.hk2:hk2-api`) - [ ] [fix(deps): update junit-framework monorepo to v6](../pull/11071) (`org.junit:junit-bom`, `org.junit.jupiter:junit-jupiter-params`, `org.junit.jupiter:junit-jupiter`) ## Detected Dependencies bundler (1)

docs/Gemfile (1) - `octokit lock file @ 10.0.0`

circleci (1)

.circleci/config.yml (1) - `cimg/openjdk 25.0.4@sha256:c2fae0b91d4c591f200f1d0221234a994a13436bc1f90dabb37902dd66504ee2`

devcontainer (1)

.devcontainer/devcontainer.json (4) - `mcr.microsoft.com/devcontainers/java 1-21-bullseye` - `ghcr.io/devcontainers/features/java 1` - `ghcr.io/devcontainers/features/docker-in-docker 4` - `ghcr.io/devcontainers/features/python 1`

github-actions (8)

.github/workflows/announce-release.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961` → [Updates: `v6.0.1`] - `jreleaser/release-action v2` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `java-jdk 11.0.32+101` → [Updates: `25.0.4+101.0.LTS`] .github/workflows/assign-milestone.yml (2) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961` → [Updates: `v6.0.1`] .github/workflows/close_stale.yml (1) - `actions/stale v11@4391f3da665fdf50b6810c1a66712fb9ba21aa93` .github/workflows/codeql-analysis.yml (4) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961` → [Updates: `v6.0.1`] - `github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938` → [Updates: `v4.38.1`] - `github/codeql-action v4.37.9@cdf488f595d80d6e07e03d4674febd5ab45fa938` → [Updates: `v4.38.1`] .github/workflows/docs.yml (2) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `ammaraskar/sphinx-action 8.2.3@54e52bfb642e9b60ea5b6bcb05fe3f74b40d290a` .github/workflows/maven.yml (7) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `frenck/action-yamllint v1.5.0@34b4bbcaeabedcfefad6adea8c5bbc42af0e2d47` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961` → [Updates: `v6.0.1`] - `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `scacap/action-surefire-report v1@c38a2d74b9840ae8950a4387ae02b637421d0f39` .github/workflows/release.yml (5) - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961` → [Updates: `v6.0.1`] - `jreleaser/release-action v2` - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` - `java-jdk 17.0.20+101` → [Updates: `25.0.4+101.0.LTS`] .github/workflows/trigger-release.yml (4) - `webfactory/ssh-agent v0.10.0@e83874834305fe9a4a2997156cb26c5de65a8555` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961` → [Updates: `v6.0.1`] - `java-jdk 17.0.20+101` → [Updates: `25.0.4+101.0.LTS`]

maven (37)

docs/pom.xml (1) - `kr.motd.maven:sphinx-maven-plugin 2.10.0` dropwizard-assets/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-auth/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-benchmarks/pom.xml (3) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` - `org.openjdk.jmh:jmh-core 1.37` - `org.openjdk.jmh:jmh-generator-annprocess 1.37` dropwizard-bom/pom.xml (29) - `io.dropwizard:dropwizard-assets 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-auth 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-client 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-configuration 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-core 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-db 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-forms 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-hibernate 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-jackson 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-jdbi3 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-jersey 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-jetty 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-lifecycle 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-logging 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-metrics 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-metrics-graphite 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-migrations 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-request-logging 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-json-logging 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-servlets 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-testing 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-util 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-validation 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-views 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-views-freemarker 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-views-mustache 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-http2 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-health 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-unix-socket 5.0.3-SNAPSHOT` dropwizard-client/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-configuration/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-core/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-db/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-dependencies/pom.xml (68) - `io.dropwizard:dropwizard-bom 5.0.3-SNAPSHOT` - `com.fasterxml.jackson:jackson-bom 2.22.2` - `org.apache.commons:commons-text 1.15.0` - `org.apache.commons:commons-lang3 3.20.0` - `com.google.guava:guava 33.6.0-jre` → [Updates: `33.7.1-jre`] - `com.google.guava:guava-testlib 33.6.0-jre` → [Updates: `33.7.1-jre`] - `com.github.ben-manes.caffeine:caffeine 3.2.4` - `com.google.errorprone:error_prone_annotations 2.42.0` → [Updates: `2.50.0`] - `org.jspecify:jspecify 1.0.1` - `net.sourceforge.argparse4j:argparse4j 0.9.0` - `org.conscrypt:conscrypt-openjdk-uber 2.5.2` → [Updates: `2.7.0`] - `org.hibernate.validator:hibernate-validator 8.0.5.Final` → [Updates: `9.1.3.Final`] - `org.glassfish.expressly:expressly 5.0.0` → [Updates: `6.0.0`] - `jakarta.el:jakarta.el-api 5.0.1` → [Updates: `6.0.1`] - `jakarta.activation:jakarta.activation-api 2.1.4` - `jakarta.annotation:jakarta.annotation-api 2.1.1` → [Updates: `3.0.0`] - `jakarta.inject:jakarta.inject-api 2.0.1.MR` - `jakarta.xml.bind:jakarta.xml.bind-api 4.0.5` - `jakarta.servlet:jakarta.servlet-api 6.0.0` → [Updates: `6.1.0`] - `jakarta.validation:jakarta.validation-api 3.0.2` → [Updates: `3.1.1`] - `jakarta.ws.rs:jakarta.ws.rs-api 3.1.0` → [Updates: `4.0.0`] - `jakarta.persistence:jakarta.persistence-api 3.1.0` → [Updates: `3.2.0`] - `org.apache.httpcomponents.client5:httpclient5 5.6.4` - `org.apache.httpcomponents.core5:httpcore5 5.4.3` - `commons-codec:commons-codec 1.22.1` - `org.apache.commons:commons-collections4 4.6.0` - `org.apache.tomcat:tomcat-jdbc 11.0.26` - `com.h2database:h2 2.4.240` → [Updates: `2.5.250`] - `org.jboss.logging:jboss-logging 3.6.3.Final` - `org.hibernate.orm:hibernate-core 6.6.57.Final` → [Updates: `7.4.9.Final`] - `org.javassist:javassist 3.32.0-GA` → [Updates: `3.33.0-GA`] - `com.fasterxml:classmate 1.7.3` - `net.bytebuddy:byte-buddy 1.18.14-jdk5` - `org.liquibase:liquibase-core 4.33.0` → [Updates: `5.0.4`] - `com.mattbertolini:liquibase-slf4j 5.1.0` - `com.github.spullara.mustache.java:compiler 0.9.14` - `org.freemarker:freemarker 2.3.35` - `org.jdbi:jdbi3-bom 3.54.0` - `org.eclipse.jetty:jetty-bom 12.1.11` → [Updates: `12.1.13`] - `org.eclipse.jetty.ee10:jetty-ee10-bom 12.1.11` → [Updates: `12.1.13`] - `org.eclipse.jetty.toolchain.setuid:jetty-setuid-jna 2.0.3` - `org.glassfish.hk2:hk2-api 3.0.6` → [Updates: `3.1.1`, `4.0.2`] - `org.glassfish.hk2:hk2-locator 3.0.6` → [Updates: `3.1.1`, `4.0.2`] - `org.glassfish.hk2:hk2-utils 3.0.6` → [Updates: `3.1.1`, `4.0.2`] - `org.glassfish.hk2.external:aopalliance-repackaged 3.0.6` → [Updates: `3.1.1`, `4.0.2`] - `org.glassfish.jersey:jersey-bom 3.1.12` → [Updates: `4.0.2`] - `io.dropwizard.metrics:metrics-bom 4.2.40` - `org.slf4j:slf4j-bom 2.0.19` - `ch.qos.logback:logback-core 1.5.38` → [Updates: `1.6.3`] - `ch.qos.logback:logback-classic 1.5.38` → [Updates: `1.6.3`] - `ch.qos.logback.access:logback-access-common 2.0.15` - `ch.qos.logback.access:logback-access-jetty12 2.0.15` - `io.dropwizard.logback:logback-throttling-appender 1.5.3` → [Updates: `1.6.0`] - `org.junit:junit-bom 5.14.4` → [Updates: `6.1.3`] - `org.mockito:mockito-bom 5.23.0` - `org.mockito:mockito-subclass 5.23.0` - `org.assertj:assertj-core 3.27.7` - `org.bouncycastle:bcprov-jdk18on 1.85.2` → [Updates: `1.86`] - `org.awaitility:awaitility 4.3.0` - `org.apache.maven.plugins:maven-compiler-plugin 3.15.0` → [Updates: `3.16.0`] - `org.apache.maven.plugins:maven-surefire-plugin 3.5.6` → [Updates: `3.6.0`] - `org.jacoco:jacoco-maven-plugin 0.8.15` - `org.simplify4u.plugins:pgpverify-maven-plugin 1.19.1` - `org.codehaus.mojo:exec-maven-plugin 3.6.4` - `com.h2database:h2 2.4.240` → [Updates: `2.5.250`] - `com.google.errorprone:error_prone_core 2.42.0` → [Updates: `2.50.0`] - `com.uber.nullaway:nullaway 0.13.8` → [Updates: `0.14.1`] - `net.bytebuddy:byte-buddy-agent 1.18.14-jdk5` dropwizard-e2e/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-example/pom.xml (18) - `io.dropwizard:dropwizard-dependencies 5.0.3-SNAPSHOT` - `org.testcontainers:testcontainers-bom 2.0.5` - `net.java.dev.jna:jna 5.19.1` - `org.junit.jupiter:junit-jupiter 5.14.4` → [Updates: `6.1.3`] - `org.junit.jupiter:junit-jupiter-params 5.14.4` → [Updates: `6.1.3`] - `com.mysql:mysql-connector-j 26.7.0` - `org.apache.maven.plugins:maven-clean-plugin 3.5.0` - `org.apache.maven.plugins:maven-install-plugin 3.1.4` → [Updates: `3.2.0`] - `org.apache.maven.plugins:maven-surefire-plugin 3.5.6` → [Updates: `3.6.0`] - `org.apache.maven.plugins:maven-resources-plugin 3.5.0` - `org.apache.maven.plugins:maven-enforcer-plugin 3.6.3` - `org.apache.maven.plugins:maven-compiler-plugin 3.15.0` → [Updates: `3.16.0`] - `org.apache.maven.plugins:maven-source-plugin 3.4.0` - `org.apache.maven.plugins:maven-jar-plugin 3.5.1` - `org.apache.maven.plugins:maven-shade-plugin 3.6.2` - `org.apache.maven.plugins:maven-deploy-plugin 3.1.4` → [Updates: `3.2.0`] - `org.apache.maven.plugins:maven-site-plugin 3.22.0` - `org.jacoco:jacoco-maven-plugin 0.8.15` dropwizard-forms/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-health/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-hibernate/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-http2/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-jackson/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-jdbi3/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-jersey/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-jetty/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-json-logging/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-lifecycle/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-logging/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-metrics-graphite/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-metrics/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-migrations/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-parent/pom.xml (4) - `io.dropwizard:dropwizard-dependencies 5.0.3-SNAPSHOT` - `io.dropwizard:dropwizard-dependencies 5.0.3-SNAPSHOT` - `jp.skypencil.errorprone.slf4j:errorprone-slf4j 0.1.29` - `org.simplify4u:pgp-keys-map 2026.01.20` dropwizard-request-logging/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-servlets/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-testing/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-unix-socket/pom.xml (1) - `io.dropwizard:dropwizard-parent 5.0.3-SNAPSHOT` dropwizard-util/pom.xml