Dependency Dashboard
Author: forking-renovate[bot]Created Feb 23, 2022Updated Sep 18, 2026
Labelstype: process
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/microservices-demo). ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | [@google-cloud/trace-agent](https://redirect.github.com/googleapis/cloud-trace-nodejs) |  | | npm | [@opentelemetry/exporter-otlp-grpc](https://redirect.github.com/open-telemetry/opentelemetry-js) |  | | nuget | [xunit](https://redirect.github.com/xunit/xunit) |  | ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] Update dotnet (`Microsoft.AspNetCore.TestHost`, `Microsoft.Extensions.Caching.StackExchangeRedis`, `Microsoft.NET.Test.Sdk`) - [ ] Update dependency xunit.runner.visualstudio to v4 - [ ] Update Terraform google to v8 - [ ] **Create all awaiting schedule PRs at once** ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] Update redis:alpine Docker digest to bd999b5 - [ ] Update docker (`alpine`, `eclipse-temurin`, `golang`, `mcr.microsoft.com/dotnet/aspnet`, `mcr.microsoft.com/dotnet/runtime-deps`, `mcr.microsoft.com/dotnet/sdk`, `node`, `python`) - [ ] Update golang (`cloud.google.com/go/compute/metadata`, `google.golang.org/grpc`) - [ ] Update java to v4.36.2 (`com.google.protobuf:protoc`, `com.google.protobuf:protobuf-java`) - [ ] Update gcr.io/k8s-skaffold/skaffold Docker tag to v2.25.0 - [ ] Update nodejs (`@google-cloud/profiler`, `@grpc/grpc-js`, `google-protobuf`) - [ ] Update otel/opentelemetry-collector-contrib Docker tag to v0.161.0 - [ ] Update dependency ubuntu to v24 - [ ] Update dotnet monorepo to v11 (`mcr.microsoft.com/dotnet/aspnet`, `mcr.microsoft.com/dotnet/sdk`) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [Update google-github-actions/setup-gcloud action to v3](../pull/3528) - [ ] [Update Gradle to v9](../pull/3529) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies cloudbuild (1)
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/microservices-demo). ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | [@google-cloud/trace-agent](https://redirect.github.com/googleapis/cloud-trace-nodejs) |  | | npm | [@opentelemetry/exporter-otlp-grpc](https://redirect.github.com/open-telemetry/opentelemetry-js) |  | | nuget | [xunit](https://redirect.github.com/xunit/xunit) |  | ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] Update dotnet (`Microsoft.AspNetCore.TestHost`, `Microsoft.Extensions.Caching.StackExchangeRedis`, `Microsoft.NET.Test.Sdk`) - [ ] Update dependency xunit.runner.visualstudio to v4 - [ ] Update Terraform google to v8 - [ ] **Create all awaiting schedule PRs at once** ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] Update redis:alpine Docker digest to bd999b5 - [ ] Update docker (`alpine`, `eclipse-temurin`, `golang`, `mcr.microsoft.com/dotnet/aspnet`, `mcr.microsoft.com/dotnet/runtime-deps`, `mcr.microsoft.com/dotnet/sdk`, `node`, `python`) - [ ] Update golang (`cloud.google.com/go/compute/metadata`, `google.golang.org/grpc`) - [ ] Update java to v4.36.2 (`com.google.protobuf:protoc`, `com.google.protobuf:protobuf-java`) - [ ] Update gcr.io/k8s-skaffold/skaffold Docker tag to v2.25.0 - [ ] Update nodejs (`@google-cloud/profiler`, `@grpc/grpc-js`, `google-protobuf`) - [ ] Update otel/opentelemetry-collector-contrib Docker tag to v0.161.0 - [ ] Update dependency ubuntu to v24 - [ ] Update dotnet monorepo to v11 (`mcr.microsoft.com/dotnet/aspnet`, `mcr.microsoft.com/dotnet/sdk`) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [Update google-github-actions/setup-gcloud action to v3](../pull/3528) - [ ] [Update Gradle to v9](../pull/3529) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies cloudbuild (1)
cloudbuild.yaml (1) - `gcr.io/k8s-skaffold/skaffold v2.16.1` → [Updates: `v2.25.0`]dockerfile (13)
src/adservice/Dockerfile (2) - `eclipse-temurin 25.0.4_7-jdk-noble@sha256:534968c051301957beae735e7ba1db54d99ddecf08746d3b9d4f318cc132dbc3` → [Updates: `25.0.4_7-jdk-noble`] - `eclipse-temurin 25.0.4_7-jre-alpine@sha256:3137541deb3cac6626b5d9a4a2187bc0d6a34312f858bd2c67dd01e732e6b682` → [Updates: `25.0.4_7-jre-alpine`] src/cartservice/src/Dockerfile (2) - `mcr.microsoft.com/dotnet/sdk 10.0.100-noble@sha256:c7445f141c04f1a6b454181bd098dcfa606c61ba0bd213d0a702489e5bd4cd71` → [Updates: `10.0.401-noble`] - `mcr.microsoft.com/dotnet/runtime-deps 10.0.0-noble-chiseled@sha256:b857c8cb8d929183cfe4c6dd9994abba92a2639dd2dbaf06005379f815991604` → [Updates: `10.0.12-noble-chiseled`] src/cartservice/src/Dockerfile.debug (2) - `mcr.microsoft.com/dotnet/sdk 10.0@sha256:ea8bde36c11b6e7eec2656d0e59101d4462f6bd630730f2c8201ed0572b295d5` → [Updates: `11.0`, `10.0`] - `mcr.microsoft.com/dotnet/aspnet 10.0@sha256:7644f992230d35cf230017189d4038c0ae0f7388b13f4f7ae1900a155bafb597` → [Updates: `11.0`, `10.0`] src/checkoutservice/Dockerfile (1) - `golang 1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc` → [Updates: `1.27.1-alpine`] src/currencyservice/Dockerfile (2) - `node 24.20.0-alpine@sha256:e67514e5d0f6c46656005e1b693b2ec9d52e80b641307de684d4a015ba7a4eaf` → [Updates: `24.21.0-alpine`] - `alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b` → [Updates: `3.24.2`] src/emailservice/Dockerfile (1) - `python 3.14.7-alpine@sha256:05b2b8b732ecd268fee8727a369f936f022d1321b59befd13c30ede22769dcdc` → [Updates: `3.14.7-alpine`] src/frontend/Dockerfile (1) - `golang 1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc` → [Updates: `1.27.1-alpine`] src/loadgenerator/Dockerfile (1) - `python 3.14.7-alpine@sha256:05b2b8b732ecd268fee8727a369f936f022d1321b59befd13c30ede22769dcdc` → [Updates: `3.14.7-alpine`] src/paymentservice/Dockerfile (2) - `node 24.20.0-alpine@sha256:e67514e5d0f6c46656005e1b693b2ec9d52e80b641307de684d4a015ba7a4eaf` → [Updates: `24.21.0-alpine`] - `alpine 3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b` → [Updates: `3.24.2`] src/productcatalogservice/Dockerfile (1) - `golang 1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc` → [Updates: `1.27.1-alpine`] src/recommendationservice/Dockerfile (1) - `python 3.14.7-alpine@sha256:05b2b8b732ecd268fee8727a369f936f022d1321b59befd13c30ede22769dcdc` → [Updates: `3.14.7-alpine`] src/shippingservice/Dockerfile (1) - `golang 1.27.0-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc` → [Updates: `1.27.1-alpine`] src/shoppingassistantservice/Dockerfile (1) - `python 3.14.7-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6`github-actions (9)
.github/workflows/ci-main.yaml (13) - `actions/checkout v7` - `actions/setup-dotnet v6` - `actions/setup-go v7` - `actions/checkout v7` - `google-github-actions/auth v3` - `google-github-actions/setup-gcloud v2` → [Updates: `v3`] - `docker/setup-qemu-action v4` - `docker/setup-buildx-action v4` - `actions/cache v6` - `ubuntu 24.04` - `dotnet-sdk 10.0` - `go 1.27` - `ubuntu 24.04` .github/workflows/ci-pr.yaml (7) - `actions/checkout v7` - `actions/setup-dotnet v6` - `actions/setup-go v7` - `actions/upload-artifact v7` - `ubuntu 24.04` - `dotnet-sdk 10.0` - `go 1.27` .github/workflows/cleanup.yaml (3) - `google-github-actions/auth v3` - `google-github-actions/setup-gcloud v2` → [Updates: `v3`] - `ubuntu 24.04` .github/workflows/deploy-pr.yaml (8) - `actions/checkout v7` - `actions/download-artifact v8` - `google-github-actions/auth v3` - `google-github-actions/setup-gcloud v2` → [Updates: `v3`] - `docker/setup-qemu-action v4` - `docker/setup-buildx-action v4` - `actions/cache v6` - `ubuntu 24.04` .github/workflows/helm-chart-ci.yaml (2) - `actions/checkout v7` - `ubuntu 24.04` .github/workflows/kubevious-manifests-ci.yaml (5) - `actions/checkout v7` - `kubevious/cli v1.0.64` - `kubevious/cli v1.0.64` - `kubevious/cli v1.0.64` - `ubuntu 24.04` .github/workflows/kustomize-build-ci.yaml (2) - `actions/checkout v7` - `ubuntu 24.04` .github/workflows/make-release.yaml (4) - `actions/checkout v7` - `google-github-actions/auth v3` - `google-github-actions/setup-gcloud v2` → [Updates: `v3`] - `ubuntu 22.04` → [Updates: `24.04`] .github/workflows/terraform-validate-ci.yaml (3) - `actions/checkout v7` - `hashicorp/setup-terraform v4` - `ubuntu 24.04`gomod (4)
src/checkoutservice/go.mod (12) - `go 1.25.0` - `go 1.27.1` - `cloud.google.com/go/profiler v0.6.0` - `github.com/google/uuid v1.6.0` - `github.com/pkg/errors v0.9.1` - `github.com/sirupsen/logrus v1.10.2` - `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.71.0` - `go.opentelemetry.io/otel v1.46.0` - `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0` - `go.opentelemetry.io/otel/sdk v1.46.0` - `google.golang.org/grpc v1.83.2` → [Updates: `v1.84.0`] - `google.golang.org/protobuf v1.36.12` src/frontend/go.mod (16) - `go 1.25.0` - `go 1.27.1` - `cloud.google.com/go/compute/metadata v0.9.0` → [Updates: `v0.9.1`] - `cloud.google.com/go/profiler v0.6.0` - `github.com/go-playground/validator/v10 v10.30.4` - `github.com/google/uuid v1.6.0` - `github.com/gorilla/mux v1.8.1` - `github.com/pkg/errors v0.9.1` - `github.com/sirupsen/logrus v1.10.2` - `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.71.0` - `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0` - `go.opentelemetry.io/otel v1.46.0` - `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0` - `go.opentelemetry.io/otel/sdk v1.46.0` - `google.golang.org/grpc v1.83.2` → [Updates: `v1.84.0`] - `google.golang.org/protobuf v1.36.12` src/productcatalogservice/go.mod (15) - `go 1.25.8` - `go 1.27.1` - `cloud.google.com/go/alloydbconn v1.19.1` - `cloud.google.com/go/profiler v0.6.0` - `cloud.google.com/go/secretmanager v1.21.0` - `github.com/golang/protobuf v1.5.4` - `github.com/jackc/pgx/v5 v5.11.0` - `github.com/pkg/errors v0.9.1` - `github.com/sirupsen/logrus v1.10.2` - `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.71.0` - `go.opentelemetry.io/otel v1.46.0` - `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0` - `go.opentelemetry.io/otel/sdk v1.46.0` - `google.golang.org/grpc v1.83.2` → [Updates: `v1.84.0`] - `google.golang.org/protobuf v1.36.12` src/shippingservice/go.mod (7) - `go 1.26.0` - `go 1.27.1` - `cloud.google.com/go/profiler v0.6.0` - `github.com/sirupsen/logrus v1.10.2` - `golang.org/x/net v0.59.0` - `google.golang.org/grpc v1.83.2` → [Updates: `v1.84.0`] - `google.golang.org/protobuf v1.36.12`gradle (2)
src/adservice/build.gradle (17) - `com.google.protobuf 0.10.0` - `com.github.sherter.google-java-format 0.9` - `com.google.api.grpc:proto-google-common-protos 2.76.0` - `javax.annotation:javax.annotation-api 1.3.2` - `io.grpc:grpc-protobuf 1.84.0` - `io.grpc:grpc-stub 1.84.0` - `io.grpc:grpc-netty 1.84.0` - `io.grpc:grpc-services 1.84.0` - `io.grpc:grpc-census 1.84.0` - `org.apache.logging.log4j:log4j-core 2.26.1` - `com.google.protobuf:protobuf-java 4.36.1` → [Updates: `4.36.2`] - `com.fasterxml.jackson.core:jackson-core 2.22.2` - `com.fasterxml.jackson.core:jackson-databind 2.22.2` - `io.netty:netty-tcnative-boringssl-static 2.0.84.Final` - `com.google.protobuf:protoc 4.36.1` → [Updates: `4.36.2`] - `io.grpc:protoc-gen-grpc-java 1.84.0` - `googleJavaFormat 1.36.1` src/adservice/settings.gradlegradle-wrapper (1)
src/adservice/gradle/wrapper/gradle-wrapper.properties (1) - `gradle 8.14.5` → [Updates: `9.7.1`]kubernetes (32)
.github/release-cluster/frontend-ingress.yaml (1) - `Ingress networking.k8s.io/v1` helm-chart/templates/cartservice.yaml (1) - `redis alpine@sha256:8096655e437712b07503796fb64d81359256cfcff0ab29d95a7da72863786efb` → [Updates: `alpine`] helm-chart/templates/loadgenerator.yaml (1) - `busybox 1.38.0@sha256:dc2d74b28e4cf8984fa52af1f39bc7c3d9c73760b41a74d629f5d11b1ab28616` helm-chart/templates/opentelemetry-collector.yaml (2) - `busybox 1.38.0@sha256:dc2d74b28e4cf8984fa52af1f39bc7c3d9c73760b41a74d629f5d11b1ab28616` - `otel/opentelemetry-collector-contrib 0.160.0@sha256:799dc6cf12c96192af37b5bdba804da8c10b3bc563b43cb90c3f3c58d9572ad6` → [Updates: `0.161.0`] kubernetes-manifests/adservice.yaml (1) - `Deployment apps/v1` kubernetes-manifests/cartservice.yaml (2) - `Deployment apps/v1` - `Deployment apps/v1` kubernetes-manifests/checkoutservice.yaml (1) - `Deployment apps/v1` kubernetes-manifests/currencyservice.yaml (1) - `Deployment apps/v1` kubernetes-manifests/emailservice.yaml (1) - `Deployment apps/v1` kubernetes-manifests/frontend.yaml (1) - `Deployment apps/v1` kubernetes-manifests/loadgenerator.yaml (2) - `busybox 1.38.0@sha256:dc2d74b28e4cf8984fa52af1f39bc7c3d9c73760b41a74d629f5d11b1ab28616` - `Deployment apps/v1` kubernetes-manifests/paymentservice.yaml (1) - `Deployment apps/v1` kubernetes-manifests/productcatalogservice.yaml (1) - `Deployment apps/v1` kubernetes-manifests/recommendationservice.yaml (1) - `Deployment apps/v1` kubernetes-manifests/shippingservice.yaml (1) - `Deployment apps/v1` kustomize/components/google-cloud-operations/otel-collector.yaml (3) - `busybox 1.38.0@sha256:dc2d74b28e4cf8984fa52af1f39bc7c3d9c73760b41a74d629f5d11b1ab28616` - `otel/opentelemetry-collector-contrib 0.160.0@sha256:799dc6cf12c96192af37b5bdba804da8c10b3bc563b43cb90c3f3c58d9572ad6` → [Updates: `0.161.0`] - `Deployment apps/v1` kustomize/components/network-policies/network-policy-adservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-cartservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-checkoutservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-currencyservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-deny-all.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-emailservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-frontend.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-loadgenerator.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-paymentservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-productcatalogservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-recommendationservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-redis.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/network-policies/network-policy-shippingservice.yaml (1) - `NetworkPolicy networking.k8s.io/v1` kustomize/components/shopping-assistant/shoppingassistantservice.yaml (1) - `Deployment apps/v1` kustomize/components/without-loadgenerator/delete-loadgenerator.patch.yaml (1) - `Deployment apps/v1` skaffold.yamlkustomize (2)
kustomize/components/container-images-registry/kustomization.yaml kustomize/components/container-images-tag/kustomization.yamlnpm (2)
src/currencyservice/package.json (15) - `@google-cloud/profiler 8.0.1` → [Updates: `8.1.0`] - `@google-cloud/trace-agent 8.0.0` - `@grpc/grpc-js 1.14.4` → [Updates: `1.14.5`] - `@grpc/proto-loader 0.8.1` - `async 3.2.6` - `google-protobuf 4.0.2` → [Updates: `4.0.3`] - `@opentelemetry/api 1.9.1` - `@opentelemetry/exporter-otlp-grpc 0.26.0` - `@opentelemetry/instrumentation-grpc 0.222.0` - `@opentelemetry/resources 2.11.0` - `@opentelemetry/semantic-conventions 1.43.0` - `@opentelemetry/sdk-trace-base 2.11.0` - `@opentelemetry/sdk-node 0.222.0` - `pino 10.3.1` - `xml2js 0.6.2` src/paymentservice/package.json (13) - `@google-cloud/profiler 8.0.1` → [Updates: `8.1.0`] - `@grpc/grpc-js 1.14.4` → [Updates: `1.14.5`] - `@grpc/proto-loader 0.8.1` - `@opentelemetry/api 1.9.1` - `@opentelemetry/exporter-otlp-grpc 0.26.0` - `@opentelemetry/instrumentation-grpc 0.222.0` - `@opentelemetry/sdk-trace-base 2.11.0` - `@opentelemetry/sdk-node 0.222.0` - `@opentelemetry/resources 2.11.0` - `@opentelemetry/semantic-conventions 1.43.0` - `pino 10.3.1` - `simple-card-validator ^1.1.0` - `uuid ^14.0.0`nuget (2)
src/cartservice/src/cartservice.csproj (6) - `Google.Cloud.SecretManager.V1 2.8.0` - `Npgsql 10.0.3` - `Google.Cloud.Spanner.Data 5.12.0` - `Microsoft.Extensions.Caching.StackExchangeRedis 10.0.11` → [Updates: `10.0.12`] - `Grpc.HealthCheck 2.83.0` - `Grpc.AspN
Source: GoogleCloudPlatform/microservices-demo