Renovate Dashboard 🚧

[mend-for-github-com]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Base branch does not exist - skipping

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.1 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.11.3 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6 (main)
• chore(deps): update dependency org.jacoco:jacoco-maven-plugin to v0.8.15 (main)
• chore(deps): update jjwt.version to v0.12.7 (main) (io.jsonwebtoken:jjwt-jackson, io.jsonwebtoken:jjwt-impl, io.jsonwebtoken:jjwt-api)
• chore(deps): update junit-framework monorepo (main) (patch)
• fix(deps): update jackson monorepo to v2.19.4 (main) (com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-databind)
• chore(deps): update dependency org.apache.maven.plugins:maven-antrun-plugin to v3.2.0 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.0 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0 (main)
• chore(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0 (main)
• chore(deps): update dependency org.sonatype.central:central-publishing-maven-plugin to v0.11.0 (main)
• chore(deps): update jjwt.version to v0.13.0 (main) (io.jsonwebtoken:jjwt-jackson, io.jsonwebtoken:jjwt-impl, io.jsonwebtoken:jjwt-api)
• chore(deps): update junit-framework monorepo (main) (minor)
• chore(deps): update mockito monorepo (main) (minor)
• chore(deps): update slackapi/slack-github-action action to v2.1.1 (main)
• fix(deps): update dependency commons-codec:commons-codec to v1.22.0 (main)
• fix(deps): update dependency org.apache.commons:commons-lang3 to v3.20.0 (main)
• fix(deps): update jackson monorepo to v2.22.0 (main) (com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-databind)
• chore(deps): update actions/checkout action to v5 (main)
• chore(deps): update actions/checkout action to v6 (main)
• chore(deps): update actions/checkout action to v7 (main)
• chore(deps): update actions/setup-java action to v5 (main)
• chore(deps): update codecov/codecov-action action to v6 (main)
• chore(deps): update codecov/codecov-action action to v7 (main)
• chore(deps): update slackapi/slack-github-action action to v3 (main)
• 🔐 Create all pending approval PRs at once 🔐

Vulnerabilities

Important

3/5 CVEs have possible Renovate fixes.
See osvVulnerabilityAlerts to allow Renovate to supply fixes.

maven

pom.xml

com.fasterxml.jackson.core:jackson-databind

• GHSA-5jmj-h7xm-6q6v
• GHSA-5jmj-h7xm-6q6v

Detected Dependencies

github-actions (4)

.github/workflows/build.yml (5)

• actions/checkout v4 → [Updates: v5, v6, v7]
• actions/setup-java v4 → [Updates: v5]
• actions/checkout v4 → [Updates: v5, v6, v7]
• actions/setup-java v4 → [Updates: v5]
• codecov/codecov-action v5 → [Updates: v6, v7]

.github/workflows/codeql.yml

.github/workflows/publish.yml (3)

• actions/checkout v4 → [Updates: v5, v6, v7]
• actions/setup-java v4 → [Updates: v5]
• slackapi/slack-github-action v2.0.0 → [Updates: v2.1.1, v3.0.3]

.github/workflows/scorecard.yml

maven (1)

pom.xml (22)

• com.vonage:jwt 2.0.1
• com.fasterxml.jackson.core:jackson-databind 2.19.0 → [Updates: 2.19.4, 2.22.0]
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.0 → [Updates: 2.19.4, 2.22.0]
• org.apache.httpcomponents:httpmime 4.5.14
• org.apache.commons:commons-lang3 3.19.0 → [Updates: 3.20.0]
• commons-codec:commons-codec 1.19.0 → [Updates: 1.22.0]
• org.junit.jupiter:junit-jupiter-engine 6.0.0 → [Updates: 6.0.3, 6.1.1]
• org.mockito:mockito-core 5.20.0 → [Updates: 5.23.0]
• io.jsonwebtoken:jjwt-api 0.12.6 → [Updates: 0.12.7, 0.13.0]
• io.jsonwebtoken:jjwt-impl 0.12.6 → [Updates: 0.12.7, 0.13.0]
• io.jsonwebtoken:jjwt-jackson 0.12.6 → [Updates: 0.12.7, 0.13.0]
• org.apache.maven.plugins:maven-enforcer-plugin 3.5.0 → [Updates: 3.6.3]
• org.apache.maven.plugins:maven-antrun-plugin 3.1.0 → [Updates: 3.2.0]
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0 → [Updates: 3.14.1, 3.15.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3 → [Updates: 3.5.6]
• org.jacoco:jacoco-maven-plugin 0.8.13 → [Updates: 0.8.15]
• org.apache.maven.plugins:maven-source-plugin 3.3.1 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.11.2 → [Updates: 3.11.3, 3.12.0]
• org.apache.maven.plugins:maven-jar-plugin 3.4.2 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-gpg-plugin 3.2.7 → [Updates: 3.2.8]
• org.sonatype.central:central-publishing-maven-plugin 0.7.0 → [Updates: 0.11.0]
• org.apache.maven.plugins:maven-assembly-plugin 3.7.1 → [Updates: 3.8.0]