Dependency Dashboard
Author: renovate[bot]Created Jul 7, 2023Updated Sep 22, 2026
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/vespa-engine/vespa). ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | gradle | [org.jruby:jruby-complete](https://redirect.github.com/jruby/jruby) |  | | gradle | [org.jruby:jruby-core](https://redirect.github.com/jruby/jruby) |  | ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (21) | Datasource | Package | Last Updated | |------------|------|-------------| | bundler | [base64](https://redirect.github.com/ruby/base64) | `2025-05-30` | | bundler | [jekyll](https://redirect.github.com/jekyll/jekyll) | `2025-01-29` | | bundler | [jekyll-feed](https://redirect.github.com/jekyll/jekyll-feed) | `2022-10-15` | | bundler | [jekyll-redirect-from](https://redirect.github.com/jekyll/jekyll-redirect-from) | `2020-01-26` | | bundler | [kramdown-parser-gfm](https://redirect.github.com/kramdown/parser-gfm) | `2019-05-29` | | bundler | [logger](https://redirect.github.com/ruby/logger) | `2025-03-27` | | bundler | [minima](https://redirect.github.com/jekyll/minima) | `2024-09-06` | | bundler | [minitar](https://redirect.github.com/halostatue/minitar) | `2025-09-08` | | gomod | [github.com/briandowns/spinner](https://redirect.github.com/briandowns/spinner) | `2025-01-20` | | gomod | [github.com/pkg/browser](https://redirect.github.com/pkg/browser) | `2024-01-02` | | gomod | [github.com/spf13/pflag](https://redirect.github.com/spf13/pflag) | `2025-09-02` | | gomod | [gopkg.in/yaml.v3](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` | | npm | [@emotion/react](https://redirect.github.com/emotion-js/emotion) | `2024-12-09` | | npm | [eslint-plugin-import](https://redirect.github.com/import-js/eslint-plugin-import) | `2025-06-20` | | npm | [eslint-plugin-react](https://redirect.github.com/jsx-eslint/eslint-plugin-react) | `2025-04-03` | | npm | [eslint-plugin-react-perf](https://redirect.github.com/cvazac/eslint-plugin-react-perf) | `2024-10-18` | | npm | [hasbin](https://redirect.github.com/springernature/hasbin) | `2016-05-27` | | npm | [husky](https://redirect.github.com/typicode/husky) | `2024-11-18` | | npm | [pretty-quick](https://redirect.github.com/prettier/pretty-quick) | `2025-06-03` | | npm | [use-context-selector](https://redirect.github.com/dai-shi/use-context-selector) | `2024-05-06` | | npm | [vscode-oniguruma](https://redirect.github.com/microsoft/vscode-oniguruma) | `2023-09-15` | ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] chore(deps): pin dependencies (`actions/checkout`, `actions/create-github-app-token`, `actions/setup-go`, `actions/setup-java`, `actions/setup-node`, `actions/upload-artifact`, `almalinux`, `docker/build-push-action`, `docker/login-action`, `docker/metadata-action`, `docker/setup-buildx-action`, `docker/setup-qemu-action`, `ruby`, `vespa-engine/gh-actions`) - [ ] chore(deps): pin dependencies (`@types/hasbin`, `@types/mocha`, `@types/node`, `@types/vscode`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `@vscode/test-electron`, `@vscode/vsce`, `docker/dockerfile`, `esbuild`, `eslint`, `typescript`, `vite`) - [ ] chore(deps): update nginx:1.31-alpine-slim docker digest to 80149a0 - [ ] chore(deps): update node.js to ebfe2f9 - [ ] chore(deps): update dependency prettier to v3.9.8 - [ ] fix(deps): update dependency org.apache.zookeeper:zookeeper to v3.9.6 - [ ] fix(deps): update dependency org.apache.zookeeper:zookeeper to v3.9.6 - [ ] fix(deps): update dependency org.jruby:jruby-core to v10.1.2.0 - [ ] fix(deps): update jackson monorepo to v2.22.3 (`com.fasterxml.jackson.dataformat:jackson-dataformat-cbor`, `com.fasterxml.jackson.core:jackson-core`, `com.fasterxml.jackson.core:jackson-databind`, `com.fasterxml.jackson.module:jackson-module-kotlin`, `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml`, `com.fasterxml.jackson.datatype:jackson-datatype-jdk8`, `com.fasterxml.jackson.datatype:jackson-datatype-jsr310`) - [ ] fix(deps): update jaxb-ri monorepo (`org.glassfish.jaxb:jaxb-runtime`, `com.sun.xml.bind:jaxb-impl`) - [ ] fix(deps): update kotlin monorepo (`org.jetbrains.kotlin:kotlin-stdlib-jdk8`, `org.jetbrains.kotlin:kotlin-stdlib-jdk7`, `org.jetbrains.kotlin:kotlin-stdlib`, `org.jetbrains.kotlin:kotlin-reflect`, `org.jetbrains.kotlin.jvm`) - [ ] fix(deps): update maven-resolver.vespa.version to v2.0.23 (`org.apache.maven.resolver:maven-resolver-util`, `org.apache.maven.resolver:maven-resolver-spi`, `org.apache.maven.resolver:maven-resolver-named-locks`, `org.apache.maven.resolver:maven-resolver-impl`, `org.apache.maven.resolver:maven-resolver-api`) - [ ] fix(deps): update module github.com/fxamacker/cbor/v2 to v2.9.4 - [ ] fix(deps): update protobuf monorepo to v4.36.2 (`com.google.protobuf:protobuf-java-util`, `com.google.protobuf:protobuf-java`) - [ ] chore(deps): update dependency @types/node to v25.9.8 - [ ] chore(deps): update dependency @types/vscode to v1.138.0 - [ ] chore(deps): update dependency com.google.j2objc:j2objc-annotations to v3.1 - [ ] chore(deps): update dependency eslint to v10.11.0 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-failsafe-plugin to v3.6.0 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-install-plugin to v3.2.0 - [ ] chore(deps): update dependency org.codehaus.mojo:versions-maven-plugin to v2.22.0 - [ ] chore(deps): update dependency vite to v8.3.0 - [ ] chore(deps): update plugin org.jetbrains.intellij.platform to v2.19.0 - [ ] chore(deps): update react monorepo to v19.3.0 (`react`, `react-dom`) - [ ] chore(deps): update typescript-eslint monorepo to v8.70.0 (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`) - [ ] fix(deps): update dependency com.google.api.grpc:proto-google-common-protos to v2.76.0 - [ ] fix(deps): update dependency io.opentelemetry:opentelemetry-bom to v1.66.0 - [ ] fix(deps): update dependency org.codehaus.plexus:plexus-io to v3.8.0 - [ ] fix(deps): update dependency org.codehaus.woodstox:stax2-api to v4.3.0 - [ ] fix(deps): update grpc-java monorepo to v1.84.0 (`io.grpc:protoc-gen-grpc-java`, `io.grpc:grpc-stub`, `io.grpc:grpc-protobuf`, `io.grpc:grpc-netty-shaded`, `io.grpc:grpc-util`, `io.grpc:grpc-context`, `io.grpc:grpc-protobuf-lite`, `io.grpc:grpc-bom`) - [ ] fix(deps): update maven-plugin-tools.vespa.version to v3.16.0 (`org.apache.maven.plugin-tools:maven-plugin-annotations`, `org.apache.maven.plugins:maven-plugin-plugin`) - [ ] fix(deps): update surefire.vespa.version to v3.6.0 (`org.apache.maven.surefire:surefire-providers`, `org.apache.maven.plugins:maven-surefire-report-plugin`, `org.apache.maven.plugins:maven-surefire-plugin`) - [ ] chore(deps): update dependency @vitejs/plugin-react to v6 - [ ] chore(deps): update dependency @vscode/test-electron to v3 - [ ] chore(deps): update dependency @vscode/vsce to v4 - [ ] chore(deps): update dependency eslint to v10 - [ ] chore(deps): update dependency eslint-plugin-react-hooks to v7 - [ ] chore(deps): update dependency io.github.ascopes:protobuf-maven-plugin to v5 - [ ] chore(deps): update dependency org.apache.felix:maven-bundle-plugin to v6 - [ ] chore(deps): update dependency org.apache.maven.reporting:maven-reporting-impl to v4 - [ ] chore(deps): update dependency org.openclover:clover-maven-plugin to v5 - [ ] chore(deps): update dependency org.openrewrite.maven:rewrite-maven-plugin to v6 - [ ] chore(deps): update dependency org.openrewrite.recipe:rewrite-testing-frameworks to v3 - [ ] chore(deps): update dependency typescript to v7 - [ ] chore(deps): update dependency vitest to v5 - [ ] chore(deps): update font awesome (major) (`@fortawesome/fontawesome-svg-core`, `@fortawesome/free-regular-svg-icons`, `@fortawesome/free-solid-svg-icons`, `@fortawesome/react-fontawesome`) - [ ] chore(deps): update github actions (major) (`actions/checkout`, `actions/download-artifact`, `actions/setup-go`, `actions/setup-java`, `actions/setup-node`, `actions/upload-artifact`, `almalinux`, `docker/build-push-action`, `docker/login-action`, `docker/metadata-action`, `docker/setup-buildx-action`, `docker/setup-qemu-action`, `java-jdk`, `node`, `ruby`) - [ ] chore(deps): update gradle to v9 - [ ] chore(deps): update mantine monorepo to v9 (`@mantine/core`, `@mantine/hooks`, `@mantine/notifications`) - [ ] fix(deps): update apache-lucene monorepo to v10 (`org.apache.lucene:lucene-analysis-common`, `org.apache.lucene:lucene-core`) - [ ] fix(deps): update dependency com.google.inject:guice to v7 - [ ] fix(deps): update dependency com.openai:openai-java to v4 - [ ] fix(deps): update dependency io.modelcontextprotocol.sdk:mcp to v2 - [ ] fix(deps): update dependency javax.servlet:javax.servlet-api to v4 - [ ] fix(deps): update dependency org.apache.datasketches:datasketches-java to v9 - [ ] fix(deps): update dependency org.apache.datasketches:datasketches-memory to v7 - [ ] fix(deps): update dependency org.eclipse.lsp4j:org.eclipse.lsp4j to v1 - [ ] fix(deps): update dependency org.jruby:jruby-complete to v10 - [ ] fix(deps): update dependency org.openrewrite.recipe:rewrite-recipe-bom to v3 - [ ] fix(deps): update dependency org.testcontainers:testcontainers to v2 - [ ] fix(deps): update dependency shiki to v4 - [ ] fix(deps): update dependency vscode-languageclient to v10 - [ ] fix(deps): update eclipse-collections.vespa.version to v13 (`org.eclipse.collections:eclipse-collections-api`, `org.eclipse.collections:eclipse-collections`) - [ ] fix(deps): update eclipse-sisu.vespa.version to v1 (`org.eclipse.sisu:sisu-maven-plugin`, `org.eclipse.sisu:org.eclipse.sisu.plexus`, `org.eclipse.sisu:org.eclipse.sisu.inject`) - [ ] fix(deps): update jaxb-ri monorepo to v4 (`com.sun.xml.bind:jaxb-impl`, `com.sun.xml.bind:jaxb-core`) - [ ] fix(deps): update junit-framework monorepo to v6 (`org.junit.platform:junit-platform-commons`, `org.junit.platform:junit-platform-engine`, `org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`, `org.junit.jupiter:junit-jupiter-params`, `org.junit.vintage:junit-vintage-engine`, `org.junit.platform:junit-platform-launcher`, `org.junit.jupiter:junit-jupiter`) - [ ] fix(deps): update kotlin monorepo to v2 (`org.jetbrains.kotlin:kotlin-stdlib-common`, `org.jetbrains.kotlin.jvm`) - [ ] fix(deps): update okhttp.vespa.version to v5 (`com.squareup.okhttp3:mockwebserver`, `com.squareup.okhttp3:okhttp`, `com.squareup.okhttp3:logging-interceptor`) - [ ] fix(deps): update slf4j monorepo to v2 (`org.slf4j:slf4j-simple`, `org.slf4j:slf4j-jdk14`, `org.slf4j:slf4j-api`, `org.slf4j:log4j-over-slf4j`, `org.slf4j:jcl-over-slf4j`) - [ ] chore(deps): lock file maintenance - [ ] **Create all pending approval PRs at once** ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [ ] [fix(deps): update guava monorepo](../pull/37054) (`com.google.guava:failureaccess`, `com.google.guava:guava`) --- > [!WARNING] > Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package vespa-engine/gh-actions)`. > > Files affected: `.github/workflows/attribution.yml` --- ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [fix(deps): update dependency ai.djl.huggingface:tokenizers to v0.38.0](../pull/36155) - [ ] [fix(deps): update junit-framework monorepo](../pull/37715) (`org.junit.platform:junit-platform-commons`, `org.junit.platform:junit-platform-engine`, `org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`, `org.junit.jupiter:junit-jupiter-params`, `org.junit.vintage:junit-vintage-engine`, `org.junit.platform:junit-platform-launcher`, `org.junit.jupiter:junit-jupiter`) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [chore(deps): update dependency eslint-plugin-prettier to v5.5.6](../pull/37087) - [ ] [fix(deps): update dependency jakarta.inject:jakarta.inject-api to v2.0.1.mr](../pull/37090) - [ ] [fix(deps): update dependency net.java.dev.jna:jna to v5.19.1](../pull/37442) - [ ] [fix(deps): update dependency org.eclipse.lemminx:org.eclipse.lemminx to v0.31.2](../pull/37155) - [ ] [fix(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.2](../pull/37459) - [ ] [fix(deps): update dependency org.vafer:jdependency to v2.16](../pull/37025) ## Vulnerabilities Renovate has not found any CVEs on [osv.dev](https://osv.dev). ## Detected Dependencies bundler (3)
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/vespa-engine/vespa). ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | gradle | [org.jruby:jruby-complete](https://redirect.github.com/jruby/jruby) |  | | gradle | [org.jruby:jruby-core](https://redirect.github.com/jruby/jruby) |  | ## Abandoned Dependencies The following dependencies have not received updates for an extended period and may be unmaintained. > [!NOTE] Packages are marked as abandoned when they exceed the [`abandonmentThreshold`](https://docs.renovatebot.com/configuration-options/#abandonmentthreshold) since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity. > View abandoned dependencies (21) | Datasource | Package | Last Updated | |------------|------|-------------| | bundler | [base64](https://redirect.github.com/ruby/base64) | `2025-05-30` | | bundler | [jekyll](https://redirect.github.com/jekyll/jekyll) | `2025-01-29` | | bundler | [jekyll-feed](https://redirect.github.com/jekyll/jekyll-feed) | `2022-10-15` | | bundler | [jekyll-redirect-from](https://redirect.github.com/jekyll/jekyll-redirect-from) | `2020-01-26` | | bundler | [kramdown-parser-gfm](https://redirect.github.com/kramdown/parser-gfm) | `2019-05-29` | | bundler | [logger](https://redirect.github.com/ruby/logger) | `2025-03-27` | | bundler | [minima](https://redirect.github.com/jekyll/minima) | `2024-09-06` | | bundler | [minitar](https://redirect.github.com/halostatue/minitar) | `2025-09-08` | | gomod | [github.com/briandowns/spinner](https://redirect.github.com/briandowns/spinner) | `2025-01-20` | | gomod | [github.com/pkg/browser](https://redirect.github.com/pkg/browser) | `2024-01-02` | | gomod | [github.com/spf13/pflag](https://redirect.github.com/spf13/pflag) | `2025-09-02` | | gomod | [gopkg.in/yaml.v3](https://redirect.github.com/go-yaml/yaml) | `2022-05-27` | | npm | [@emotion/react](https://redirect.github.com/emotion-js/emotion) | `2024-12-09` | | npm | [eslint-plugin-import](https://redirect.github.com/import-js/eslint-plugin-import) | `2025-06-20` | | npm | [eslint-plugin-react](https://redirect.github.com/jsx-eslint/eslint-plugin-react) | `2025-04-03` | | npm | [eslint-plugin-react-perf](https://redirect.github.com/cvazac/eslint-plugin-react-perf) | `2024-10-18` | | npm | [hasbin](https://redirect.github.com/springernature/hasbin) | `2016-05-27` | | npm | [husky](https://redirect.github.com/typicode/husky) | `2024-11-18` | | npm | [pretty-quick](https://redirect.github.com/prettier/pretty-quick) | `2025-06-03` | | npm | [use-context-selector](https://redirect.github.com/dai-shi/use-context-selector) | `2024-05-06` | | npm | [vscode-oniguruma](https://redirect.github.com/microsoft/vscode-oniguruma) | `2023-09-15` | ## Pending Approval The following branches are pending approval. To create them, click on a checkbox below. - [ ] chore(deps): pin dependencies (`actions/checkout`, `actions/create-github-app-token`, `actions/setup-go`, `actions/setup-java`, `actions/setup-node`, `actions/upload-artifact`, `almalinux`, `docker/build-push-action`, `docker/login-action`, `docker/metadata-action`, `docker/setup-buildx-action`, `docker/setup-qemu-action`, `ruby`, `vespa-engine/gh-actions`) - [ ] chore(deps): pin dependencies (`@types/hasbin`, `@types/mocha`, `@types/node`, `@types/vscode`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `@vscode/test-electron`, `@vscode/vsce`, `docker/dockerfile`, `esbuild`, `eslint`, `typescript`, `vite`) - [ ] chore(deps): update nginx:1.31-alpine-slim docker digest to 80149a0 - [ ] chore(deps): update node.js to ebfe2f9 - [ ] chore(deps): update dependency prettier to v3.9.8 - [ ] fix(deps): update dependency org.apache.zookeeper:zookeeper to v3.9.6 - [ ] fix(deps): update dependency org.apache.zookeeper:zookeeper to v3.9.6 - [ ] fix(deps): update dependency org.jruby:jruby-core to v10.1.2.0 - [ ] fix(deps): update jackson monorepo to v2.22.3 (`com.fasterxml.jackson.dataformat:jackson-dataformat-cbor`, `com.fasterxml.jackson.core:jackson-core`, `com.fasterxml.jackson.core:jackson-databind`, `com.fasterxml.jackson.module:jackson-module-kotlin`, `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml`, `com.fasterxml.jackson.datatype:jackson-datatype-jdk8`, `com.fasterxml.jackson.datatype:jackson-datatype-jsr310`) - [ ] fix(deps): update jaxb-ri monorepo (`org.glassfish.jaxb:jaxb-runtime`, `com.sun.xml.bind:jaxb-impl`) - [ ] fix(deps): update kotlin monorepo (`org.jetbrains.kotlin:kotlin-stdlib-jdk8`, `org.jetbrains.kotlin:kotlin-stdlib-jdk7`, `org.jetbrains.kotlin:kotlin-stdlib`, `org.jetbrains.kotlin:kotlin-reflect`, `org.jetbrains.kotlin.jvm`) - [ ] fix(deps): update maven-resolver.vespa.version to v2.0.23 (`org.apache.maven.resolver:maven-resolver-util`, `org.apache.maven.resolver:maven-resolver-spi`, `org.apache.maven.resolver:maven-resolver-named-locks`, `org.apache.maven.resolver:maven-resolver-impl`, `org.apache.maven.resolver:maven-resolver-api`) - [ ] fix(deps): update module github.com/fxamacker/cbor/v2 to v2.9.4 - [ ] fix(deps): update protobuf monorepo to v4.36.2 (`com.google.protobuf:protobuf-java-util`, `com.google.protobuf:protobuf-java`) - [ ] chore(deps): update dependency @types/node to v25.9.8 - [ ] chore(deps): update dependency @types/vscode to v1.138.0 - [ ] chore(deps): update dependency com.google.j2objc:j2objc-annotations to v3.1 - [ ] chore(deps): update dependency eslint to v10.11.0 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-failsafe-plugin to v3.6.0 - [ ] chore(deps): update dependency org.apache.maven.plugins:maven-install-plugin to v3.2.0 - [ ] chore(deps): update dependency org.codehaus.mojo:versions-maven-plugin to v2.22.0 - [ ] chore(deps): update dependency vite to v8.3.0 - [ ] chore(deps): update plugin org.jetbrains.intellij.platform to v2.19.0 - [ ] chore(deps): update react monorepo to v19.3.0 (`react`, `react-dom`) - [ ] chore(deps): update typescript-eslint monorepo to v8.70.0 (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`) - [ ] fix(deps): update dependency com.google.api.grpc:proto-google-common-protos to v2.76.0 - [ ] fix(deps): update dependency io.opentelemetry:opentelemetry-bom to v1.66.0 - [ ] fix(deps): update dependency org.codehaus.plexus:plexus-io to v3.8.0 - [ ] fix(deps): update dependency org.codehaus.woodstox:stax2-api to v4.3.0 - [ ] fix(deps): update grpc-java monorepo to v1.84.0 (`io.grpc:protoc-gen-grpc-java`, `io.grpc:grpc-stub`, `io.grpc:grpc-protobuf`, `io.grpc:grpc-netty-shaded`, `io.grpc:grpc-util`, `io.grpc:grpc-context`, `io.grpc:grpc-protobuf-lite`, `io.grpc:grpc-bom`) - [ ] fix(deps): update maven-plugin-tools.vespa.version to v3.16.0 (`org.apache.maven.plugin-tools:maven-plugin-annotations`, `org.apache.maven.plugins:maven-plugin-plugin`) - [ ] fix(deps): update surefire.vespa.version to v3.6.0 (`org.apache.maven.surefire:surefire-providers`, `org.apache.maven.plugins:maven-surefire-report-plugin`, `org.apache.maven.plugins:maven-surefire-plugin`) - [ ] chore(deps): update dependency @vitejs/plugin-react to v6 - [ ] chore(deps): update dependency @vscode/test-electron to v3 - [ ] chore(deps): update dependency @vscode/vsce to v4 - [ ] chore(deps): update dependency eslint to v10 - [ ] chore(deps): update dependency eslint-plugin-react-hooks to v7 - [ ] chore(deps): update dependency io.github.ascopes:protobuf-maven-plugin to v5 - [ ] chore(deps): update dependency org.apache.felix:maven-bundle-plugin to v6 - [ ] chore(deps): update dependency org.apache.maven.reporting:maven-reporting-impl to v4 - [ ] chore(deps): update dependency org.openclover:clover-maven-plugin to v5 - [ ] chore(deps): update dependency org.openrewrite.maven:rewrite-maven-plugin to v6 - [ ] chore(deps): update dependency org.openrewrite.recipe:rewrite-testing-frameworks to v3 - [ ] chore(deps): update dependency typescript to v7 - [ ] chore(deps): update dependency vitest to v5 - [ ] chore(deps): update font awesome (major) (`@fortawesome/fontawesome-svg-core`, `@fortawesome/free-regular-svg-icons`, `@fortawesome/free-solid-svg-icons`, `@fortawesome/react-fontawesome`) - [ ] chore(deps): update github actions (major) (`actions/checkout`, `actions/download-artifact`, `actions/setup-go`, `actions/setup-java`, `actions/setup-node`, `actions/upload-artifact`, `almalinux`, `docker/build-push-action`, `docker/login-action`, `docker/metadata-action`, `docker/setup-buildx-action`, `docker/setup-qemu-action`, `java-jdk`, `node`, `ruby`) - [ ] chore(deps): update gradle to v9 - [ ] chore(deps): update mantine monorepo to v9 (`@mantine/core`, `@mantine/hooks`, `@mantine/notifications`) - [ ] fix(deps): update apache-lucene monorepo to v10 (`org.apache.lucene:lucene-analysis-common`, `org.apache.lucene:lucene-core`) - [ ] fix(deps): update dependency com.google.inject:guice to v7 - [ ] fix(deps): update dependency com.openai:openai-java to v4 - [ ] fix(deps): update dependency io.modelcontextprotocol.sdk:mcp to v2 - [ ] fix(deps): update dependency javax.servlet:javax.servlet-api to v4 - [ ] fix(deps): update dependency org.apache.datasketches:datasketches-java to v9 - [ ] fix(deps): update dependency org.apache.datasketches:datasketches-memory to v7 - [ ] fix(deps): update dependency org.eclipse.lsp4j:org.eclipse.lsp4j to v1 - [ ] fix(deps): update dependency org.jruby:jruby-complete to v10 - [ ] fix(deps): update dependency org.openrewrite.recipe:rewrite-recipe-bom to v3 - [ ] fix(deps): update dependency org.testcontainers:testcontainers to v2 - [ ] fix(deps): update dependency shiki to v4 - [ ] fix(deps): update dependency vscode-languageclient to v10 - [ ] fix(deps): update eclipse-collections.vespa.version to v13 (`org.eclipse.collections:eclipse-collections-api`, `org.eclipse.collections:eclipse-collections`) - [ ] fix(deps): update eclipse-sisu.vespa.version to v1 (`org.eclipse.sisu:sisu-maven-plugin`, `org.eclipse.sisu:org.eclipse.sisu.plexus`, `org.eclipse.sisu:org.eclipse.sisu.inject`) - [ ] fix(deps): update jaxb-ri monorepo to v4 (`com.sun.xml.bind:jaxb-impl`, `com.sun.xml.bind:jaxb-core`) - [ ] fix(deps): update junit-framework monorepo to v6 (`org.junit.platform:junit-platform-commons`, `org.junit.platform:junit-platform-engine`, `org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`, `org.junit.jupiter:junit-jupiter-params`, `org.junit.vintage:junit-vintage-engine`, `org.junit.platform:junit-platform-launcher`, `org.junit.jupiter:junit-jupiter`) - [ ] fix(deps): update kotlin monorepo to v2 (`org.jetbrains.kotlin:kotlin-stdlib-common`, `org.jetbrains.kotlin.jvm`) - [ ] fix(deps): update okhttp.vespa.version to v5 (`com.squareup.okhttp3:mockwebserver`, `com.squareup.okhttp3:okhttp`, `com.squareup.okhttp3:logging-interceptor`) - [ ] fix(deps): update slf4j monorepo to v2 (`org.slf4j:slf4j-simple`, `org.slf4j:slf4j-jdk14`, `org.slf4j:slf4j-api`, `org.slf4j:log4j-over-slf4j`, `org.slf4j:jcl-over-slf4j`) - [ ] chore(deps): lock file maintenance - [ ] **Create all pending approval PRs at once** ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [ ] [fix(deps): update guava monorepo](../pull/37054) (`com.google.guava:failureaccess`, `com.google.guava:guava`) --- > [!WARNING] > Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package vespa-engine/gh-actions)`. > > Files affected: `.github/workflows/attribution.yml` --- ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [fix(deps): update dependency ai.djl.huggingface:tokenizers to v0.38.0](../pull/36155) - [ ] [fix(deps): update junit-framework monorepo](../pull/37715) (`org.junit.platform:junit-platform-commons`, `org.junit.platform:junit-platform-engine`, `org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`, `org.junit.jupiter:junit-jupiter-params`, `org.junit.vintage:junit-vintage-engine`, `org.junit.platform:junit-platform-launcher`, `org.junit.jupiter:junit-jupiter`) - [ ] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [chore(deps): update dependency eslint-plugin-prettier to v5.5.6](../pull/37087) - [ ] [fix(deps): update dependency jakarta.inject:jakarta.inject-api to v2.0.1.mr](../pull/37090) - [ ] [fix(deps): update dependency net.java.dev.jna:jna to v5.19.1](../pull/37442) - [ ] [fix(deps): update dependency org.eclipse.lemminx:org.eclipse.lemminx to v0.31.2](../pull/37155) - [ ] [fix(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.2](../pull/37459) - [ ] [fix(deps): update dependency org.vafer:jdependency to v2.16](../pull/37025) ## Vulnerabilities Renovate has not found any CVEs on [osv.dev](https://osv.dev). ## Detected Dependencies bundler (3)
Gemfile (13) - `ruby >=3.1` - `jekyll "~> 4.4.0"` - `minima "~> 2.0"` - `kramdown-parser-gfm lock file @ 1.1.0` - `webrick lock file @ 1.9.2` - `csv lock file @ 3.3.6` - `logger lock file @ 1.7.0` - `rake lock file @ 13.4.2` - `html-proofer lock file @ 5.2.2` - `jekyll-redirect-from lock file @ 0.16.0` - `jekyll-feed lock file @ 0.17.0` - `base64 "~> 0.3.0"` - `bigdecimal "~> 4.1"` integration/logstash-plugins/logstash-input-vespa/Gemfile (1) - `minitar '~> 1.0'` integration/logstash-plugins/logstash-output-vespa/Gemfiledockerfile (1)
client/js/app/Dockerfile (3) - `docker/dockerfile 1` → [Updates: `1`] - `node lts-alpine@sha256:7fddd9ddeae8196abf4a3ef2de34e11f7b1a722119f91f28ddf1e99dcafdf114` → [Updates: `lts-alpine`] - `nginx 1.31-alpine-slim@sha256:3b171d7224b669faa3cc2137fea0a65301791df1ec1f271ebd2a2b7461f7fade` → [Updates: `1.31-alpine-slim`]github-a
Source: vespa-engine/vespa