Skip to content

Update all dependencies#140

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-dependencies
Open

Update all dependencies#140
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-dependencies

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
docker/login-action action minor v3.6.0v3.7.0 age confidence
docker/metadata-action action minor v5.8.0v5.10.0 age confidence
eclipse-temurin final patch 21.0.8_9-jre-alpine21.0.11_10-jre-alpine age confidence
gradle (source) patch 8.14.38.14.5 age confidence
madrapps/jacoco-report action minor v1.6v1.8 age confidence
dev.detekt:detekt-rules-ktlint-wrapper (source) dependencies patch 2.0.0-alpha.22.0.0-alpha.4 2.0.0-alpha.5 age confidence
io.netty:netty-resolver-dns-native-macos (source) dependencies patch 4.2.7.Final4.2.15.Final age confidence
com.expediagroup:graphql-kotlin-spring-client dependencies patch 10.0.0-alpha.210.0.0 10.0.1 age confidence
org.springframework.cloud:spring-cloud-starter-openfeign (source) dependencies patch 5.0.15.0.2 age confidence
org.springframework.cloud:spring-cloud-dependencies (source) dependencies patch 2025.1.12025.1.2 age confidence
org.jetbrains.kotlin.plugin.spring (source) plugin minor 2.3.02.4.0 age confidence
org.jetbrains.kotlin.jvm (source) plugin minor 2.3.02.4.0 age confidence
dev.detekt plugin patch 2.0.0-alpha.22.0.0-alpha.4 2.0.0-alpha.5 age confidence
com.expediagroup.graphql plugin patch 10.0.0-alpha.210.0.0 10.0.1 age confidence
org.springframework.boot plugin minor 4.0.54.1.0 age confidence

Release Notes

docker/login-action (docker/login-action)

v3.7.0

Compare Source

Full Changelog: docker/login-action@v3.6.0...v3.7.0

docker/metadata-action (docker/metadata-action)

v5.10.0

Compare Source

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Compare Source

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

gradle/gradle (gradle)

v8.14.5: 8.14.5

Compare Source

The Gradle team is excited to announce Gradle 8.14.5.

Here are the highlights of this release:

  • Java 24 support
  • GraalVM Native Image toolchain selection
  • Enhancements to test reporting
  • Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.5 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.4: 8.14.4

Compare Source

This is a patch release for 8.14. We recommend using 8.14.4 instead of 8.14.

This release addresses two security vulnerabilities:

It also fixes the following issues:

  • #​34365 [Backport] Gradle doesn't stop forked processes
  • #​35125 [Backport] Precompiled script plugin with @​file annotation loses package and breaks
  • #​35184 [Backport] Different fingerprints in the compile classpath for the same dependency
  • #​35228 [Backport] Fix dependency resolution issues
  • #​35288 [Backport] Include GradleDslBaseScriptModel in 8.x
  • #​36326 [Backport] Improve repository disabling logic
  • #​36396 [Backport] Add partial cgroups v2 support
  • #​36420 [Backport] Improve Java 25 support in Gradle 8.14

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 8.14.4 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.4 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

madrapps/jacoco-report (madrapps/jacoco-report)

v1.8.0

Compare Source

What's Changed

Full Changelog: Madrapps/jacoco-report@v1.7.2...v1.8.0

v1.8

Compare Source

v1.7.2

Compare Source

What's Changed

Full Changelog: Madrapps/jacoco-report@v1.7.1...v1.7.2

v1.7.1

Compare Source

What's Changed

New Contributors

Full Changelog: Madrapps/jacoco-report@v1.7.0...v1.7.1

v1.7.0

Compare Source

What's Changed

  • Nothing major has changed since v1.7.0-alpha , apart from documentation update and more lint checks

Full Changelog: Madrapps/jacoco-report@v1.7.0-alpha...v1.7.0

v1.7

Compare Source

detekt/detekt (dev.detekt:detekt-rules-ktlint-wrapper)

v2.0.0-alpha.4

2.0.0-alpha.4 - 2026-06-13

This is an alpha release of Detekt 2.0.0. Is built against Kotlin 2.4.0, Gradle 9.5.1, AGP 9.2.1 and is tested against JDK 25.

Notable Changes
  • Support Kotlin 2.4.0 - #​9218
  • Add new rule LeakingSessionBoundType - #​9242
  • Apply the indent_style configuration to all the ktlint wrapper rules (previsouly this was applied only to the Indentation rule) - #​9315
Breaking Changes
  • Expose Glob-to-Regex functions in psi-utils - #​9340
  • Make Detektion immutable - #​8583
Changelog
  • fix: prevent ArrayPrimitive crash on unresolved types - #​9364
  • Update ktlint documentation links - #​9354
  • Fix PrintStackTrace nested call detection - #​9352
  • Fix unused import false positive for companion object member extension properties - #​9349
  • Accept punctuation after a link - #​9341
  • Fixes UnnecessaryFullyQualifiedName false positive with explicit import shadowing - #​9329
  • docs: fix KMP type resolution task names - #​9316
  • Stop publishing ktlint-repackage - #​9314
  • Stop exposing ktlint's StandardRule to detekt-rules-ktlint-wrapper consumers - #​9313
  • Include ktlint-repackage in ktlint-wrapper JAR - #​9312
  • Declare DGP compatibility with Gradle's configuration cache - #​9311
  • Forward languageVersionSettings to KotlinAnalysisApiEngine.compile - #​9305
  • docs: add ForbiddenImport configuration example - #​9302
  • Fix UnnecessaryFullyQualifiedName clashes with kotlin package name - #​9289
  • Remove excludeImportStatements from Deprecation rule - #​9287
  • Improve repackaging of Analysis API dependencies - #​9285
  • MaxChainedCallsOnSameLine - Fix AA type leaks - #​9261
  • SuspendFunSwallowedCancellation - Fix AA type leaks - #​9256
  • feat: Add exhaustive option to OutdatedDocumentation rule, also improve error messages - #​9255
  • Excluding generated sources by default - #​9251
  • Move FileProcessListenerExtensions to :detekt-test - #​9212
  • Improve SuspendFunSwallowedCancellation - #​9208
  • Cli filters - #​9200
  • Allow single-argument Boolean generics in NonBooleanPropertyPrefixedWithIs - #​9173
  • Remove Config.parentPath - #​9036
Dependency Updates
Housekeeping & Refactorings
  • Update test to avoid typealias to compiler-required annotation - #​9361
  • Remove unnecessary compileOnly dependencies - #​9318
Contributors

We would like to thank the following contributors that made this release possible: @​3flex, @​BraisGabin, @​ChristophyBarth, @​FletchMcKee, @​Lucas-FManager, @​ShubhamWorks02, @​Will-thom, @​e5l, @​fru1tworld, @​jonapoul, @​luanpotter, @​matejdro, @​mirkoalicastro, @​nchen000, @​ninebolt6, @​paulkagiri, @​travisMiehm

v2.0.0-alpha.3

2.0.0-alpha.3 - 2026-04-24

This is an alpha release of Detekt 2.0.0. Is built against Kotlin 2.3.21, Gradle 9.3.1, AGP 9.1.1 and is tested against JDK 25.

As of this release, the workaround of disabling the new DSL and built-in Kotlin via gradle.properties for AGP 9.x projects is no longer required.

Notable Changes
  • Bump Kotlin to v2.3.21 - #​9272
  • Bump AGP to v9.1.1 - #​9244
  • Add support for AGP 9 built-in Kotlin - #​9100
  • Rule UnnecessaryFullyQualifiedName now requires full mode to run - #​9061
  • Add new rule: UnnecessaryRun - #​7428
Breaking Changes
  • Remove DetektProgressListener from our public API - #​9221
  • Remove InvalidConfigurationError from our public API - #​8994
Changelog
  • UseOrEmpty - Fix AA type leaks - #​9263
  • ForbiddenNamedParam - Fix AA type leaks - #​9262
  • UnusedVariable - Fix AA type leaks - #​9260
  • UnnecessaryNotNullOperator - Fix AA type leaks - #​9259
  • Deprecation - Fix AA type leaks - #​9258
  • NestedScopeFunctions - Fix AA type leaks - #​9257
  • Suggest similar property names for misspelled config properties - #​9250
  • MagicNumber DslGradleRunner test fix - #​9245
  • Don't forbid use of java.lang.annotation.Inherited annotation by default - #​9224
  • Fixes #​9017 - false positive with name collisions - #​9223
  • Optimize how we get project statistics - #​9217
  • Rename ProjectComplexityProcessor to ProjectCyclomaticComplexityProcessor - #​9213
  • Add ignoreClass config to MissingUseCall - #​9205
  • Remove LicenseHeaderLoaderExtension from the list of processors - #​9204
  • cli: Improve messages and exception types of --report - #​9203
  • Validate --classpath with JCommander - #​9202
  • System-dependent path separators - #​9199
  • Do not report IgnoredReturnValue on lambda invocation that returns Unit - #​9192
  • Point to valOrVarKeyword for reporting the issue - #​9191
  • Check Throwable class - #​9190
  • Do no report when parent has class - #​9189
  • Add support of indent_style in ktlint Indention rule - #​9180
  • Add severity to different md, html reports - #​9167
  • Check local class which can't be converted to interface - #​9166
  • Inline yaml config in the test - #​9154
  • Tests: Don't check compilation errors with compile-test-snippets=false - #​9153
  • YamlConfig.load returns YamlConfig instead of Config - #​9151
  • Generator: The --config flag value should be a directory or it shouldn't exist - #​9131
  • Fix broken test JvmSpec - #​9129
  • Performance improvement - consolidated KaLibraryModules - #​9127
  • Print cli arguments with debug = true - #​9126
  • MissingUseCall: Fix false negative for checkNotNull/requireNotNull - #​9123
  • Make functionalTest os dependent - #​9098
  • Fix false positive for ExplicitCollectionElementAccessMethod with lambdas - #​9096
  • Expose only LanguageVersionSettings instead of CompilerConfiguration - #​9092
  • Remove project from EnvironmentFacade - #​9089
  • Ensure that AA knows types of excluded files - #​9082
  • Updated to using Gradle's lazy APIs - #​9080
  • Simplify KotlinEnvironmentContainer - #​9077
  • Reduce calls to analyze in MapGetWithNotNullAssertionOperator - #​9067
  • Report MapGetWithNonNullAssertionOperator violations on MutableMaps - #​9065
  • Fix ExplicitCollectionElementAccessMethodSpec for unresolved types - #​9059
  • Allow external dependencies in analysis tests - #​9051
  • Improve exception handling on YamlConfig - #​9048
  • Remove YamlConfig.load(Path) - #​9047
  • Refine AbstractClassCanBeInterface treatment of open properties - #​9043
  • rename Claude.md to CLAUDE.md for cross-platform compatibility - #​9033
  • Clarify CommentOverPrivate... renames in detekt 2 - #​9025
  • Exclude generated sources from default sources - #​9019
  • fix(UnusedVariable): recognize destructured lambda parameters as used - #​9015
  • Replace Lifecycle.bindingProvider by a private function and rename it to validateClasspath - #​9003
  • Remove unnecessary interface - #​9002
  • Remove dependecy of :detekt-test with :detekt-core - #​8987
  • Move yamlConfig functions to :detekt-core - #​8976
  • Only print paths of reports when detektion fails - #​8560
Dependency Updates
  • Bump Kotlin 2.3.20 - #​8959
  • Bump AGP to v9.1.0 - #​9110
  • Add coroutinesCore Intellij to the classpath - #​9176
  • chore: update Kotlin 2.3.20-RC2 → 2.3.20 - #​9160
  • chore(deps): update plugin dev.drewhamilton.poko to v0.22.0 - #​9159
  • Make KotlinAnalysisApiEngine AutoCloseable - #​9144
  • fix(deps): update kotlin monorepo to v2.3.10 - #​9037
Housekeeping & Refactorings
  • Don't use paths to read files from resources/ - #​9175
  • Remove unnecessary test nesting - #​9150
Contributors

We would like to thank the following contributors that made this release possible: @​3flex, @​BraisGabin, @​FletchMcKee, @​TWiStErRob, @​UnguidedFreedom, @​atulgpt, @​cortinico, @​fru1tworld, @​jonapoul, @​matejdro, @​mirkoalicastro, @​picklebento, @​t-kameyama, @​travisMiehm

ExpediaGroup/graphql-kotlin (com.expediagroup:graphql-kotlin-spring-client)

v10.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: ExpediaGroup/graphql-kotlin@9.2.0...10.0.0

v10.0.0-alpha.4

Compare Source

What's Changed

New Contributors

Full Changelog: ExpediaGroup/graphql-kotlin@10.0.0-alpha.3...10.0.0-alpha.4

v10.0.0-alpha.3

Compare Source

What's Changed

New Contributors

Full Changelog: ExpediaGroup/graphql-kotlin@10.0.0-alpha.2...10.0.0-alpha.3

spring-cloud/spring-cloud-openfeign (org.springframework.cloud:spring-cloud-starter-openfeign)

v5.0.2: 5.0.2

📔 Documentation
  • Add documentation for FeignClientBuilder #​1361
  • Document potential resource exhaustion risk when Client is not singleton #​1356
  • Missing Encoder/Decoder bean in Spring Boot 4 #​1323
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​codingkiddo, @​dependabot[bot], @​ryanjbaxter, and @​yashdotdev13

spring-cloud/spring-cloud-release (org.springframework.cloud:spring-cloud-dependencies)

v2025.1.2

Compare Source

JetBrains/kotlin (org.jetbrains.kotlin.plugin.spring)

v2.4.0

v2.3.21

Backend. Wasm

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner November 1, 2025 01:07
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from f5e66ba to 0404cd6 Compare November 9, 2025 15:31
@renovate renovate Bot changed the title Update all dependencies to v2.2.21 Update all dependencies Nov 9, 2025
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from 0404cd6 to 1ffd4a4 Compare November 14, 2025 03:10
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 3 times, most recently from 17b0684 to 7d3a644 Compare December 2, 2025 15:49
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 5 times, most recently from ebaf52b to 49121cc Compare December 23, 2025 14:42
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 3 times, most recently from 6609dc9 to f985645 Compare January 28, 2026 18:26
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 3 times, most recently from 135257d to 2dfe6ec Compare February 3, 2026 18:35
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from dc66aa5 to 3276026 Compare February 11, 2026 03:49
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from 3276026 to c219723 Compare February 24, 2026 17:22
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from c219723 to a7b0671 Compare March 21, 2026 10:13
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 4 times, most recently from 294f820 to 8ab6131 Compare March 31, 2026 16:12
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from 8ab6131 to d1c8ca4 Compare April 6, 2026 22:40
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 7 times, most recently from 3db3b06 to aa2e390 Compare April 21, 2026 23:04
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from ac5c3b7 to cc64a33 Compare April 28, 2026 18:09
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from cc64a33 to 346c692 Compare May 5, 2026 12:31
@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown

LeanIX GitHub Agent Code Coverage

Overall Project 64.09% 🍏

There is no coverage information present for the Files changed

@renovate renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from baafea5 to ac6b144 Compare May 10, 2026 02:25
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from 3b9fb40 to 358b44a Compare May 24, 2026 01:57
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from 358b44a to 7049f78 Compare May 25, 2026 23:05
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 4 times, most recently from 564fcf5 to 09b9e32 Compare June 8, 2026 08:16
@renovate renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from d2e77b4 to d57748d Compare June 16, 2026 21:15
@renovate renovate Bot force-pushed the renovate/all-dependencies branch from d57748d to 1030c6e Compare June 18, 2026 20:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

0 participants