Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update log4j2 monorepo to v2.25.4 (org.apache.logging.log4j:log4j-slf4j2-impl, org.apache.logging.log4j:log4j-jul, org.apache.logging.log4j:log4j-core, org.apache.logging.log4j:log4j-api)
• Update com.palantir.conjure.java:* to v8.77.0 (com.palantir.conjure.java:conjure-undertow-lib, com.palantir.conjure.java:conjure-lib, com.palantir.conjure.java:conjure-java-undertow-runtime)
• Update dependency com.google.guava:guava to v33.6.0-jre
• Update dependency com.markelliot.barista.tracing:barista-tracing to v0.133.0
• Update dependency com.markelliot.result:result to v0.135.0
• Update dependency com.palantir.javapoet:javapoet to v0.14.0
• Update plugin com.diffplug.spotless to v8.4.0
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency org.eclipse.jgit:org.eclipse.jgit to v5.13.5.202508271544-r
• Update dependency com.google.googlejavaformat:google-java-format to v1.35.0
• Update dependency java to v25
• Update dependency org.eclipse.jgit:org.eclipse.jgit to v7
• Update Gradle to v9

Detected Dependencies

github-actions (3)

.github/workflows/autorelease.yml (2)

• actions/create-github-app-token v3
• markelliot/autorelease v2

.github/workflows/pr.yml (2)

• actions/checkout v6
• actions/setup-java v5

.github/workflows/publish.yml (2)

• actions/checkout v6
• actions/setup-java v5

gradle (14)

barista-annotations/build.gradle.kts

barista-conjure/build.gradle.kts

barista-lifecycle/build.gradle.kts

barista-processor/build.gradle.kts

barista-prometheus/build.gradle.kts

barista/build.gradle.kts

build.gradle.kts (7)

• org.eclipse.jgit:org.eclipse.jgit 5.13.0.202109080827-r → [Updates: 5.13.5.202508271544-r, 7.6.0.202603022253-r]
• com.diffplug.spotless 8.0.0 → [Updates: 8.4.0]
• com.google.cloud.tools.jib 3.5.3
• com.palantir.consistent-versions 3.15.0
• net.ltgt.errorprone 5.1.0
• org.inferred.processors 3.7.0
• org.jreleaser 1.23.0

buildSrc/build.gradle.kts

buildSrc/settings.gradle.kts

buildSrc/src/main/kotlin/barista.java-conventions.gradle.kts

gradle.properties

settings.gradle.kts (1)

• org.gradle.toolchains.foojay-resolver-convention 1.0.0

versions.lock

versions.props (40)

• com.auth0:java-jwt 4.5.1
• com.fasterxml.jackson.core:jackson-annotations 2.21
• com.github.ben-manes.caffeine:caffeine 3.2.3
• com.google.auto.service:auto-service 1.1.1
• com.google.googlejavaformat:google-java-format 1.28.0 → [Updates: 1.35.0]
• com.google.guava:guava 33.5.0-jre → [Updates: 33.6.0-jre]
• com.markelliot.barista.tracing:barista-tracing 0.132.0 → [Updates: 0.133.0]
• com.markelliot.result:result 0.134.0 → [Updates: 0.135.0]
• com.palantir.javapoet:javapoet 0.12.0 → [Updates: 0.14.0]
• io.undertow:undertow-core 2.3.24.Final
• org.assertj:assertj-core 3.27.7
• org.junit.jupiter:junit-jupiter 6.0.3
• org.slf4j:slf4j-api 2.0.17
• org.apache.logging.log4j:log4j-api 2.25.3 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-core 2.25.3 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-jul 2.25.3 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-slf4j2-impl 2.25.3 → [Updates: 2.25.4]
• io.prometheus:prometheus-metrics-config 1.5.1
• io.prometheus:prometheus-metrics-core 1.5.1
• io.prometheus:prometheus-metrics-exporter-common 1.5.1
• io.prometheus:prometheus-metrics-exposition-formats 1.5.1
• io.prometheus:prometheus-metrics-exposition-textformats 1.5.1
• io.prometheus:prometheus-metrics-model 1.5.1
• io.prometheus:prometheus-metrics-tracer-common 1.5.1
• io.prometheus:prometheus-metrics-tracer-initializer 1.5.1
• io.prometheus:prometheus-metrics-tracer-otel 1.5.1
• io.prometheus:prometheus-metrics-tracer-otel-agent 1.5.1
• com.palantir.conjure.java:conjure-java-undertow-runtime 8.74.0 → [Updates: 8.77.0]
• com.palantir.conjure.java:conjure-lib 8.74.0 → [Updates: 8.77.0]
• com.palantir.conjure.java:conjure-undertow-lib 8.74.0 → [Updates: 8.77.0]
• com.jakewharton.nopen:nopen-annotations 1.0.1
• com.fasterxml.jackson.core:jackson-core 2.21.2
• com.fasterxml.jackson.core:jackson-databind 2.21.2
• com.fasterxml.jackson.dataformat:jackson-dataformat-cbor 2.21.2
• com.fasterxml.jackson.dataformat:jackson-dataformat-smile 2.21.2
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.21.2
• com.fasterxml.jackson.datatype:jackson-datatype-guava 2.21.2
• com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.21.2
• com.fasterxml.jackson.datatype:jackson-datatype-joda 2.21.2
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.21.2

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 9.4.1]

mise (1)

mise.toml (1)

• java 17.0.18+8 → [Updates: 25.0.2+10.0.LTS]

---

• Check this box to trigger a request for Renovate to run again on this repository