Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/OWASP/wrongsecrets).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

 - [ ] fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.10
 - [ ] chore(deps): update dependency @babel/preset-env to v7.29.0
 - [ ] chore(deps): update dependency @commitlint/config-conventional to v20.4.0
 - [ ] chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3.2.1
 - [ ] chore(deps): update dependency io.gatling:gatling-maven-plugin to v4.21.0
 - [ ] chore(deps): update docker/dockerfile docker tag to v1.21
 - [ ] chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v42.95.1
 - [ ] chore(deps): update terraform azurerm to v4.58.0
 - [ ] chore(deps): update terraform random to ~> 3.8.0
 - [ ] chore(deps): update terraform random to v3.8.1
 - [ ] chore(deps): update terraform-aws (`aws`, `terraform-aws-modules/eks/aws`, `terraform-aws-modules/vpc/aws`)
 - [ ] chore(deps): update terraform-gcp to ~> 7.17.0 (`google`, `google-beta`)
 - [ ] fix(deps): update aws-java-sdk-v2 monorepo to v2.41.19 (`software.amazon.awssdk:ssm`, `software.amazon.awssdk:sts`)
 - [ ] fix(deps): update dependency com.azure.spring:spring-cloud-azure-dependencies to v6.1.0
 - [ ] fix(deps): update dependency io.netty:netty-bom to v4.2.9.final
 - [ ] fix(deps): update dependency org.owasp:dependency-check-maven to v12.2.0
 - [ ] fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025.1.1
 - [ ] fix(deps): update go (`cel.dev/expr`, `cloud.google.com/go/auth`, `cloud.google.com/go/compute`, `cloud.google.com/go/storage`, `github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`, `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric`, `github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping`, `github.com/cncf/xds/go`, `github.com/envoyproxy/go-control-plane`, `github.com/envoyproxy/protoc-gen-validate`, `github.com/googleapis/enterprise-certificate-proxy`, `github.com/googleapis/gax-go/v2`, `github.com/gruntwork-io/terratest`, `github.com/hashicorp/go-version`, `github.com/klauspost/compress`, `go.opentelemetry.io/contrib/detectors/gcp`, `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`, `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`, `go.opentelemetry.io/otel`, `go.opentelemetry.io/otel/metric`, `go.opentelemetry.io/otel/sdk`, `go.opentelemetry.io/otel/sdk/metric`, `go.opentelemetry.io/otel/trace`, `golang.org/x/crypto`, `golang.org/x/mod`, `golang.org/x/net`, `golang.org/x/oauth2`, `golang.org/x/sync`, `golang.org/x/sys`, `golang.org/x/text`, `golang.org/x/tools`, `google.golang.org/api`, `google.golang.org/genproto`, `google.golang.org/genproto/googleapis/api`, `google.golang.org/genproto/googleapis/rpc`, `google.golang.org/grpc`, `google.golang.org/protobuf`)
 - [ ] chore(deps): update dependency com.github.eirslett:frontend-maven-plugin to v2
 - [ ] chore(deps): update dependency com.puppycrawl.tools:checkstyle to v13
 - [ ] chore(deps): update dependency globals to v17
 - [ ] chore(deps): update dependency javascript-obfuscator to v5
 - [ ] chore(deps): update dependency org.testcontainers:testcontainers to v2
 - [ ] chore(deps): update github actions (major) (`actions/cache`, `actions/checkout`, `actions/upload-artifact`)
 - [ ] chore(deps): update module github.com/apparentlymart/go-textseg/v15 to v16
 - [ ] chore(deps): update pre-commit (major) (`psf/black`, `renovatebot/pre-commit-hooks`)
 - [ ] fix(deps): update dependency org.cyclonedx:cyclonedx-core-java to v12
 - [ ] fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
 - [ ] fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v4
 - [ ] fix(deps): update dependency org.springframework.vault:spring-vault-core to v4
 - [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

 - [ ] [chore(deps): update dependency go to v1.25.6](../pull/2378)
 - [ ] [fix(deps): update dependency com.google.cloud:spring-cloud-gcp-dependencies to v7.4.3](../pull/2379)
 - [ ] [fix(deps): update dependency org.webjars:datatables to v2.3.6](../pull/2347)
 - [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

<details><summary>dockerfile (7)</summary>
<blockquote>

<details><summary>Dockerfile (2)</summary>

 - `bellsoft/liberica-openjre-debian 25-cds`
 - `eclipse-temurin 25-jre-alpine`

</details>

<details><summary>Dockerfile_webdesktop</summary>


</details>

<details><summary>Dockerfile_webdesktopk8s</summary>


</details>

<details><summary>Dockerfile.web (1)</summary>

 - `jeroenwillemsen/wrongsecrets 1.12.10-no-vault`

</details>

<details><summary>k8s/challenge53/Dockerfile (1)</summary>

 - `ubuntu plucky-20251001`

</details>

<details><summary>k8s/challenge53/Dockerfile.debug (1)</summary>

 - `ubuntu plucky-20251001`

</details>

<details><summary>src/main/resources/challenges/challenge-51/Dockerfile_challenge51 (1)</summary>

 - `docker/dockerfile 1.20` → [Updates: `1.21`]

</details>

</blockquote>
</details>

<details><summary>github-actions (23)</summary>
<blockquote>

<details><summary>.github/workflows/challenge13.yml (1)</summary>

 - `actions/checkout v5` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/codeclimate_standalone.yml (3)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `erzz/codeclimate-standalone v0.0.5`
 - `actions/upload-artifact v4` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/codeql-analysis.yml (4)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `github/codeql-action v4`
 - `actions/setup-java v5`
 - `github/codeql-action v4`

</details>

<details><summary>.github/workflows/container_test.yml (4)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/upload-artifact v4` → [Updates: `v6`]
 - `actions/checkout v5` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/container-alts-test.yml (1)</summary>

 - `actions/checkout v5` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/dast-zap-test.yml (3)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `zaproxy/action-baseline v0.15.0`

</details>

<details><summary>.github/workflows/desktop-container-publish.yml (6)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `docker/setup-buildx-action v3`
 - `docker/login-action v3`
 - `docker/metadata-action v5`
 - `docker/build-push-action v6`

</details>

<details><summary>.github/workflows/github-pages-preview.yml (11)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/configure-pages v5`
 - `actions/upload-pages-artifact v4`
 - `actions/deploy-pages v4`
 - `actions/github-script v8`
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/configure-pages v5`
 - `actions/upload-pages-artifact v4`
 - `actions/deploy-pages v4`
 - `actions/github-script v8`

</details>

<details><summary>.github/workflows/heroku_tests.yml (2)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/upload-artifact v4` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/java_swagger_doc.yml (4)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/upload-artifact v4` → [Updates: `v6`]
 - `actions/upload-artifact v4` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/link_checker.yml (2)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `lycheeverse/lychee-action v2.7.0`

</details>

<details><summary>.github/workflows/main.yml (7)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/upload-artifact v4` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/master-container-publish.yml (6)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `docker/setup-buildx-action v3`
 - `docker/login-action v3`
 - `docker/metadata-action v5`
 - `docker/build-push-action v6`

</details>

<details><summary>.github/workflows/minikube-k8s-test.yml (1)</summary>

 - `actions/checkout v5` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/minikube-vault-test.yml (7)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `eLco/setup-vault v1.0.3`
 - `azure/setup-helm v4`
 - `actions/checkout v5` → [Updates: `v6`]
 - `eLco/setup-vault v1.0.3`
 - `azure/setup-helm v4`
 - `actions/upload-artifact v4` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/pr-preview.yml (16)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `docker/setup-buildx-action v3`
 - `docker/login-action v3`
 - `docker/metadata-action v5`
 - `docker/build-push-action v6`
 - `actions/upload-artifact v4` → [Updates: `v6`]
 - `actions/github-script v8`
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/setup-java v5`
 - `actions/setup-node v6`
 - `actions/upload-artifact v4` → [Updates: `v6`]
 - `actions/github-script v8`
 - `node 24`

</details>

<details><summary>.github/workflows/pre-commit.yml (11)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-python v6`
 - `actions/setup-node v6`
 - `actions/setup-java v5`
 - `actions/cache v4` → [Updates: `v5`]
 - `hashicorp/setup-terraform v3`
 - `terraform-linters/setup-tflint v6`
 - `pre-commit/action v3.0.1`
 - `pre-commit-ci/lite-action v1.1.0`
 - `python 3.14`
 - `node 24`

</details>

<details><summary>.github/workflows/project-management.yml</summary>


</details>

<details><summary>.github/workflows/scanner-comparison.yml (15)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-python v6`
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-python v6`
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-python v6`
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-python v6`
 - `python 3.14`
 - `python 3.14`
 - `python 3.14`
 - `python 3.14`

</details>

<details><summary>.github/workflows/scanners.yml (1)</summary>

 - `actions/checkout v5` → [Updates: `v6`]

</details>

<details><summary>.github/workflows/terraform.yml (2)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `hashicorp/setup-terraform v3`

</details>

<details><summary>.github/workflows/version-sync-check.yml (3)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/github-script v8`

</details>

<details><summary>.github/workflows/visual-diff.yml (8)</summary>

 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/checkout v5` → [Updates: `v6`]
 - `actions/setup-java v5`
 - `actions/setup-java v5`
 - `actions/setup-node v6`
 - `actions/upload-artifact v4` → [Updates: `v6`]
 - `actions/github-script v8`
 - `node 24`

</details>

</blockquote>
</details>

<details><summary>gomod (3)</summary>
<blockquote>

<details><summary>aws/go.mod (38)</summary>

 - `go 1.24.0`
 - `go 1.25.5` → [Updates: `1.25.6`]
 - `github.com/gruntwork-io/terratest v0.51.0` → [Updates: `v0.55.0`]
 - `github.com/agext/levenshtein v1.2.3`
 - `github.com/apparentlymart/go-textseg/v15 v15.0.0` → [Updates: `v16.0.0`]
 - `github.com/apparentlymart/go-textseg/v16 v16.0.0`
 - `github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d`
 - `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc`
 - `github.com/hashicorp/errwrap v1.1.0`
 - `github.com/hashicorp/go-cleanhttp v0.5.2`
 - `github.com/hashicorp/go-getter/v2 v2.2.3`
 - `github.com/hashicorp/go-multierror v1.1.1`
 - `github.com/hashicorp/go-safetemp v1.0.0`
 - `github.com/hashicorp/go-version v1.7.0` → [Updates: `v1.8.0`]
 - `github.com/hashicorp/hcl/v2 v2.24.0`
 - `github.com/hashicorp/terraform-json v0.27.2`
 - `github.com/jinzhu/copier v0.4.0`
 - `github.com/klauspost/compress v1.18.0` → [Updates: `v1.18.3`]
 - `github.com/kr/pretty v0.3.1`
 - `github.com/mattn/go-zglob v0.0.6`
 - `github.com/mitchellh/go-homedir v1.1.0`
 - `github.com/mitchellh/go-testing-interface v1.14.1`
 - `github.com/mitchellh/go-wordwrap v1.0.1`
 - `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2`
 - `github.com/rogpeppe/go-internal v1.14.1`
 - `github.com/stretchr/testify v1.11.1`
 - `github.com/tmccombs/hcl2json v0.6.8`
 - `github.com/ulikunitz/xz v0.5.15`
 - `github.com/zclconf/go-cty v1.17.0`
 - `golang.org/x/crypto v0.45.0` → [Updates: `v0.47.0`]
 - `golang.org/x/mod v0.29.0` → [Updates: `v0.32.0`]
 - `golang.org/x/net v0.47.0` → [Updates: `v0.49.0`]
 - `golang.org/x/sync v0.18.0` → [Updates: `v0.19.0`]
 - `golang.org/x/sys v0.38.0` → [Updates: `v0.40.0`]
 - `golang.org/x/text v0.31.0` → [Updates: `v0.33.0`]
 - `golang.org/x/tools v0.38.0` → [Updates: `v0.41.0`]
 - `gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c`
 - `gopkg.in/yaml.v3 v3.0.1`

</details>

<details><summary>azure/go.mod (86)</summary>

 - `go 1.24.0`
 - `go 1.25.5` → [Updates: `1.25.6`]
 - `github.com/gruntwork-io/terratest v0.51.0` → [Updates: `v0.55.0`]
 - `cel.dev/expr v0.24.0` → [Updates: `v0.25.1`]
 - `cloud.google.com/go v0.123.0`
 - `cloud.google.com/go/auth v0.17.0` → [Updates: `v0.18.1`]
 - `cloud.google.com/go/auth/oauth2adapt v0.2.8`
 - `cloud.google.com/go/compute v1.49.0` → [Updates: `v1.54.0`]
 - `cloud.google.com/go/compute/metadata v0.9.0`
 - `cloud.google.com/go/iam v1.5.3`
 - `cloud.google.com/go/monitoring v1.24.3`
 - `cloud.google.com/go/storage v1.57.0` → [Updates: `v1.59.2`]
 - `github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0` → [Updates: `v1.31.0`]
 - `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0` → [Updates: `v0.55.0`]
 - `github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.54.0` → [Updates: `v0.55.0`]
 - `github.com/agext/levenshtein v1.2.3`
 - `github.com/apparentlymart/go-textseg/v13 v13.0.0`
 - `github.com/apparentlymart/go-textseg/v15 v15.0.0` → [Updates: `v16.0.0`]
 - `github.com/apparentlymart/go-textseg/v16 v16.0.0`
 - `github.com/aws/aws-sdk-go v1.55.8`
 - `github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d`
 - `github.com/census-instrumentation/opencensus-proto v0.4.1`
 - `github.com/cespare/xxhash/v2 v2.3.0`
 - `github.com/cncf/xds/go v0.0.0-20251014123835-2ee22ca58382@2ee22ca58382` → [Updates: `v0.0.0-20260121142036-a486691bba94`]
 - `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc`
 - `github.com/envoyproxy/go-control-plane v0.13.4` → [Updates: `v0.14.0`]
 - `github.com/envoyproxy/protoc-gen-validate v1.2.1` → [Updates: `v1.3.0`]
 - `github.com/felixge/httpsnoop v1.0.4`
 - `github.com/go-logr/logr v1.4.3`
 - `github.com/go-logr/stdr v1.2.2`
 - `github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8`
 - `github.com/golang/protobuf v1.5.4`
 - `github.com/google/go-cmp v0.7.0`
 - `github.com/google/s2a-go v0.1.9`
 - `github.com/google/uuid v1.6.0`
 - `github.com/googleapis/enterprise-certificate-proxy v0.3.6` → [Updates: `v0.3.11`]
 - `github.com/googleapis/gax-go/v2 v2.15.0` → [Updates: `v2.16.0`]
 - `github.com/hashicorp/errwrap v1.1.0`
 - `github.com/hashicorp/go-cleanhttp v0.5.2`
 - `github.com/hashicorp/go-getter/v2 v2.2.3`
 - `github.com/hashicorp/go-multierror v1.1.1`
 - `github.com/hashicorp/go-safetemp v1.0.0`
 - `github.com/hashicorp/go-version v1.7.0` → [Updates: `v1.8.0`]
 - `github.com/hashicorp/hcl/v2 v2.24.0`
 - `github.com/hashicorp/terraform-json v0.27.2`
 - `github.com/jinzhu/copier v0.4.0`
 - `github.com/jmespath/go-jmespath v0.4.0`
 - `github.com/klauspost/compress v1.18.0` → [Updates: `v1.18.3`]
 - `github.com/mattn/go-zglob v0.0.6`
 - `github.com/mitchellh/go-homedir v1.1.0`
 - `github.com/mitchellh/go-testing-interface v1.14.1`
 - `github.com/mitchellh/go-wordwrap v1.0.1`
 - `github.com/planetscale/vtprotobuf v0.6.1-0.20250313105119-ba97887b0a25@ba97887b0a25`
 - `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2`
 - `github.com/stretchr/testify v1.11.1`
 - `github.com/tmccombs/hcl2json v0.6.8`
 - `github.com/ulikunitz/xz v0.5.15`
 - `github.com/zclconf/go-cty v1.17.0`
 - `go.opencensus.io v0.24.0`
 - `go.opentelemetry.io/contrib/detectors/gcp v1.38.0` → [Updates: `v1.39.0`]
 - `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0` → [Updates: `v0.64.0`]
 - `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0` → [Updates: `v0.64.0`]
 - `go.opentelemetry.io/otel v1.38.0` → [Updates: `v1.39.0`]
 - `go.opentelemetry.io/otel/metric v1.38.0` → [Updates: `v1.39.0`]
 - `go.opentelemetry.io/otel/sdk v1.38.0` → [Updates: `v1.39.0`]
 - `go.opentelemetry.io/otel/sdk/metric v1.38.0` → [Updates: `v1.39.0`]
 - `go.opentelemetry.io/otel/trace v1.38.0` → [Updates: `v1.39.0`]
 - `golang.org/x/crypto v0.45.0` → [Updates: `v0.47.0`]
 - `golang.org/x/mod v0.29.0` → [Updates: `v0.32.0`]
 - `golang.org/x/net v0.47.0` → [Updates: `v0.49.0`]
 - `golang.org/x/oauth2 v0.32.0` → [Updates: `v0.34.0`]
 - `golang.org/x/sync v0.18.0` → [Updates: `v0.19.0`]
 - `golang.org/x/sys v0.38.0` → [Updates: `v0.40.0`]
 - `golang.org/x/text v0.31.0` → [Updates: `v0.33.0`]
 - `golang.org/x/time v0.14.0`
 - `golang.org/x/tools v0.38.0` → [Updates: `v0.41.0`]
 - `golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da@7835f813f4da`
 - `google.golang.org/api v0.252.0` → [Updates: `v0.264.0`]
 - `google.golang.org/appengine/v2 v2.0.6`
 - `google.golang.org/genproto v0.0.0-20251014184007-4626949a642f@4626949a642f` → [Updates: `v0.0.0-20260128011058-8636f8732409`]
 - `google.golang.org/genproto/googleapis/api v0.0.0-20251014184007-4626949a642f@4626949a642f` → [Updates: `v0.0.0-20260128011058-8636f8732409`]
 - `google.golang.org/genproto/googleapis/rpc v0.0.0-20251014184007-4626949a642f@4626949a642f` → [Updates: `v0.0.0-20260128011058-8636f8732409`]
 - `google.golang.org/grpc v1.76.0` → [Updates: `v1.78.0`]
 - `google.golang.org/grpc/stats/opentelemetry v0.0.0-20241028142157-ada6787961b3@ada6787961b3`
 - `google.golang.org/protobuf v1.36.10` → [Updates: `v1.36.11`]
 - `gopkg.in/yaml.v3 v3.0.1`

</details>

<details><summary>gcp/go.mod (37)</summary>

 - `go 1.24.0`
 - `go 1.25.5` → [Updates: `1.25.6`]
 - `github.com/gruntwork-io/terratest v0.51.0` → [Updates: `v0.55.0`]
 - `github.com/agext/levenshtein v1.2.3`
 - `github.com/apparentlymart/go-textseg/v15 v15.0.0` → [Updates: `v16.0.0`]
 - `github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d`
 - `github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc`
 - `github.com/hashicorp/errwrap v1.1.0`
 - `github.com/hashicorp/go-cleanhttp v0.5.2`
 - `github.com/hashicorp/go-getter/v2 v2.2.3`
 - `github.com/hashicorp/go-multierror v1.1.1`
 - `github.com/hashicorp/go-safetemp v1.0.0`
 - `github.com/hashicorp/go-version v1.7.0` → [Updates: `v1.8.0`]
 - `github.com/hashicorp/hcl/v2 v2.24.0`
 - `github.com/hashicorp/terraform-json v0.27.2`
 - `github.com/jinzhu/copier v0.4.0`
 - `github.com/klauspost/compress v1.18.0` → [Updates: `v1.18.3`]
 - `github.com/kr/pretty v0.3.1`
 - `github.com/mattn/go-zglob v0.0.6`
 - `github.com/mitchellh/go-homedir v1.1.0`
 - `github.com/mitchellh/go-testing-interface v1.14.1`
 - `github.com/mitchellh/go-wordwrap v1.0.1`
 - `github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2`
 - `github.com/rogpeppe/go-internal v1.14.1`
 - `github.com/stretchr/testify v1.11.1`
 - `github.com/tmccombs/hcl2json v0.6.8`
 - `github.com/ulikunitz/xz v0.5.15`
 - `github.com/zclconf/go-cty v1.17.0`
 - `golang.org/x/crypto v0.45.0` → [Updates: `v0.47.0`]
 - `golang.org/x/mod v0.29.0` → [Updates: `v0.32.0`]
 - `golang.org/x/net v0.47.0` → [Updates: `v0.49.0`]
 - `golang.org/x/sync v0.18.0` → [Updates: `v0.19.0`]
 - `golang.org/x/sys v0.38.0` → [Updates: `v0.40.0`]
 - `golang.org/x/text v0.31.0` → [Updates: `v0.33.0`]
 - `golang.org/x/tools v0.38.0` → [Updates: `v0.41.0`]
 - `gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c`
 - `gopkg.in/yaml.v3 v3.0.1`

</details>

</blockquote>
</details>

<details><summary>maven (1)</summary>
<blockquote>

<details><summary>pom.xml (48)</summary>

 - `org.springframework.boot:spring-boot-starter-parent 3.5.9` → [Updates: `3.5.10`, `4.0.2`]
 - `org.springframework.cloud:spring-cloud-dependencies 2025.0.0` → [Updates: `2025.1.1`]
 - `com.google.cloud:spring-cloud-gcp-dependencies 7.4.2` → [Updates: `7.4.3`]
 - `com.azure.spring:spring-cloud-azure-dependencies 6.0.0` → [Updates: `6.1.0`]
 - `io.netty:netty-bom 4.1.118.Final` → [Updates: `4.2.9.Final`]
 - `org.projectlombok:lombok 1.18.42`
 - `nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.4.0`
 - `org.thymeleaf.extras:thymeleaf-extras-springsecurity6 3.1.3.RELEASE`
 - `org.testcontainers:testcontainers 1.21.4` → [Updates: `2.0.3`]
 - `software.amazon.awssdk:sts 2.40.9` → [Updates: `2.41.19`]
 - `software.amazon.awssdk:ssm 2.40.9` → [Updates: `2.41.19`]
 - `org.linguafranca.pwdb:KeePassJava2 2.2.4`
 - `org.asciidoctor:asciidoctorj-api 3.0.1`
 - `org.asciidoctor:asciidoctorj 3.0.1`
 - `org.jruby:jruby-complete 10.0.2.0`
 - `org.jruby:jruby 10.0.2.0`
 - `org.jruby:jruby-stdlib 10.0.2.0`
 - `org.jruby:jruby-base 10.0.2.0`
 - `org.webjars:bootstrap 5.3.8`
 - `org.webjars.npm:github-buttons 2.14.1`
 - `org.webjars:datatables 2.3.2` → [Updates: `2.3.6`]
 - `org.webjars:jquery 3.7.1`
 - `org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.15` → [Updates: `3.0.1`]
 - `uk.org.webcompere:system-stubs-jupiter 2.1.8`
 - `io.gatling.highcharts:gatling-charts-highcharts 3.14.9`
 - `org.cyclonedx:cyclonedx-core-java 11.0.1` → [Updates: `12.0.1`]
 - `org.owasp:dependency-check-maven 12.1.9` → [Updates: `12.2.0`]
 - `com.tngtech.archunit:archunit-junit5 1.4.1`
 - `com.github.spotbugs:spotbugs-annotations 4.9.8`
 - `io.github.wimdeblauwe:testcontainers-cypress 1.9.1`
 - `org.springframework.vault:spring-vault-core 3.2.0` → [Updates: `4.0.0`]
 - `org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0`
 - `com.puppycrawl.tools:checkstyle 11.1.0` → [Updates: `13.1.0`]
 - `com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2`
 - `com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0`
 - `com.github.spotbugs:spotbugs 4.9.8`
 - `org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0`
 - `org.asciidoctor:asciidoctor-maven-plugin 3.2.0`
 - `org.cyclonedx:cyclonedx-maven-plugin 2.9.1`
 - `org.owasp:dependency-check-maven 12.1.9` → [Updates: `12.2.0`]
 - `com.github.eirslett:frontend-maven-plugin 1.15.4` → [Updates: `2.0.0`]
 - `org.springdoc:springdoc-openapi-maven-plugin 1.5`
 - `org.codehaus.mojo:exec-maven-plugin 3.6.3`
 - `org.apache.maven.plugins:maven-compiler-plugin 3.14.1`
 - `org.codehaus.mojo:tidy-maven-plugin 1.4.0`
 - `com.diffplug.spotless:spotless-maven-plugin 3.1.0` → [Updates: `3.2.1`]
 - `io.gatling:gatling-maven-plugin 4.20.16` → [Updates: `4.21.0`]
 - `org.apache.maven.plugins:maven-surefire-plugin 3.5.4`

</details>

</blockquote>
</details>

<details><summary>maven-wrapper (3)</summary>
<blockquote>

<details><summary>.mvn/wrapper/maven-wrapper.properties (1)</summary>

 - `maven 3.9.12`

</details>

<details><summary>mvnw (1)</summary>

 - `maven-wrapper 3.3.4`

</details>

<details><summary>mvnw.cmd (1)</summary>

 - `maven-wrapper 3.3.4`

</details>

</blockquote>
</details>

<details><summary>npm (2)</summary>
<blockquote>

<details><summary>js/package.json (4)</summary>

 - `minimatch >=10.0.1`
 - `minimatch >=10.0.1`
 - `javascript-obfuscator ^4.1.1` → [Updates: `^5.0.0`]
 - `node >=20.0.0`

</details>

<details><summary>package.json (10)</summary>

 - `@babel/eslint-parser ^7.25.9`
 - `@babel/preset-env ^7.26.0` → [Updates: `^7.26.0`]
 - `@commitlint/config-conventional ^20.0.0` → [Updates: `^20.0.0`]
 - `@eslint/eslintrc ^3.1.0`
 - `eslint ^9.11.1`
 - `eslint-plugin-chai-friendly ^1.0.1`
 - `eslint-plugin-cypress ^5.0.0`
 - `eslint-plugin-mocha ^11.0.0`
 - `globals ^16.0.0` → [Updates: `^17.0.0`]
 - `node >=22.0.0`

</details>

</blockquote>
</details>

<details><summary>pre-commit (1)</summary>
<blockquote>

<details><summary>.pre-commit-config.yaml (7)</summary>

 - `renovatebot/pre-commit-hooks 42.84.0` → [Updates: `42.95.1`, `43.0.6`]
 - `eslint/eslint v9.39.2`
 - `pre-commit/pre-commit-hooks v6.0.0`
 - `antonbabenko/pre-commit-terraform v1.105.0`
 - `alessandrojcm/commitlint-pre-commit-hook v9.24.0`
 - `ejba/pre-commit-maven v0.3.4`
 - `psf/black 25.12.0` → [Updates: `26.1.0`]

</details>

</blockquote>
</details>

<details><summary>regex (15)</summary>
<blockquote>

<details><summary>.github/scripts/docker-create.sh (1)</summary>

 - `OWASP/wrongsecrets-binaries 0.2.1`

</details>

<details><summary>.github/workflows/codeql-analysis.yml (1)</summary>

 - `node 25`

</details>

<details><summary>.github/workflows/container_test.yml (1)</summary>

 - `node 25`

</details>

<details><summary>.github/workflows/dast-zap-test.yml (1)</summary>

 - `node 25`

</details>

<details><summary>.github/workflows/desktop-container-publish.yml (1)</summary>

 - `node 25`

</details>

<details><summary>.github/workflows/github-pages-preview.yml (1)</summary>

 - `node 25`

</details>

<details><summary>.github/workflows/java_swagger_doc.yml (1)</summary>

 - `node 25`

</details>

<details><summary>.github/workflows/main.yml (3)</summary>

 - `node 25`
 - `node 25`
 - `node 25`

</details>

<details><summary>.github/workflows/master-container-publish.yml (1)</summary>

 - `node 25`

</details>

<details><summary>.github/workflows/pr-preview.yml (4)</summary>

 - `node 24`
 - `node 25`
 - `node 25`
 - `node 25`

</details>

<details><summary>.github/workflows/pre-commit.yml (2)</summary>

 - `node 24`
 - `node 25`

</details>

<details><summary>.github/workflows/scanner-comparison.yml</summary>


</details>

<details><summary>.github/workflows/version-sync-check.yml (1)</summary>

 - `node 25`

</details>

<details><summary>.github/workflows/visual-diff.yml (3)</summary>

 - `node 24`
 - `node 25`
 - `node 25`

</details>

<details><summary>Dockerfile (2)</summary>

 - `bellsoft/liberica-openjre-debian 25-cds`
 - `eclipse-temurin 25-jre-alpine`

</details>

</blockquote>
</details>

<details><summary>terraform (11)</summary>
<blockquote>

<details><summary>aws/irsa.tf (1)</summary>

 - `terraform-aws-modules/iam/aws ~> 6.0`

</details>

<details><summary>aws/main.tf (2)</summary>

 - `terraform-aws-modules/eks/aws 21.10.1` → [Updates: `21.15.1`]
 - `terraform-aws-modules/vpc/aws ~> 6.5.0` → [Updates: `~> 6.6.0`]

</details>

<details><summary>aws/shared-state/main.tf (2)</summary>

 - `aws ~> 6.0` → [Updates: `~> 6.0`]
 - `hashicorp/terraform ~> 1.1`

</details>

<details><summary>aws/versions.tf (4)</summary>

 - `aws ~> 6.26.0` → [Updates: `~> 6.30.0`]
 - `http ~> 3.5.0`
 - `random ~> 3.7.0` → [Updates: `~> 3.8.0`]
 - `hashicorp/terraform ~> 1.6, >= 1.6`

</details>

<details><summary>azure/main.tf</summary>


</details>

<details><summary>azure/providers.tf</summary>


</details>

<details><summary>azure/shared-state/main.tf (3)</summary>

 - `azurerm ~> 4.3` → [Updates: `~> 4.3`]
 - `random ~> 3.0` → [Updates: `~> 3.0`]
 - `hashicorp/terraform ~> 1.1`

</details>

<details><summary>azure/versions.tf (4)</summary>

 - `azurerm ~> 4.56.0` → [Updates: `~> 4.58.0`]
 - `http ~> 3.5.0`
 - `random ~> 3.7.0` → [Updates: `~> 3.8.0`]
 - `hashicorp/terraform ~> 1.1`

</details>

<details><summary>gcp/main.tf</summary>


</details>

<details><summary>gcp/shared-state/main.tf (3)</summary>

 - `google ~> 7.0` → [Updates: `~> 7.0`]
 - `random ~> 3.0` → [Updates: `~> 3.0`]
 - `hashicorp/terraform ~> 1.1`

</details>

<details><summary>gcp/versions.tf (5)</summary>

 - `google ~> 7.13.0` → [Updates: `~> 7.17.0`]
 - `google-beta ~> 7.13.0` → [Updates: `~> 7.17.0`]
 - `http ~> 3.5.0`
 - `random ~> 3.7.0` → [Updates: `~> 3.8.0`]
 - `hashicorp/terraform ~> 1.1`

</details>

</blockquote>
</details>

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Dependency Dashboard #1715

Rate-Limited

Open

Detected Dependencies

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Uh oh!

Dependency Dashboard #1715

Description

Rate-Limited

Open

Detected Dependencies

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions