Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/ASSERT-KTH/flacoco).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update actions/setup-java action to v4.9.1
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
- [ ] fix(deps): update dependency org.apache.logging.log4j:log4j-jcl to v2.26.1
- [ ] fix(deps): update dependency org.apache.maven.surefire:maven-surefire-common to v3.6.0
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update actions/setup-java action to v6
- [ ] chore(deps): update codecov/codecov-action action to v7
- [ ] fix(deps): update junit-framework monorepo to v6 (`org.junit.jupiter:junit-jupiter-params`, `org.junit.platform:junit-platform-engine`, `org.junit.platform:junit-platform-launcher`, `org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update dependency org.apache.logging.log4j:log4j-core to v2.25.4 [security]](../pull/332)
- [ ] [chore(deps): update dependency org.apache.maven.surefire:surefire-junit47 to v3.5.6](../pull/330)
- [ ] [chore(deps): update dependency org.jacoco:jacoco-maven-plugin to v0.8.15](../pull/333)
- [ ] [chore(deps): update actions/checkout action to v4.4.0](../pull/331)
- [ ] [chore(deps): update codecov/codecov-action action to v5.5.5](../pull/326)
- [ ] [chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0](../pull/325)
- [ ] [chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0](../pull/329)
- [ ] [fix(deps): update dependency com.google.code.gson:gson to v2.14.0](../pull/328)
- [ ] [fix(deps): update junit-framework monorepo](../pull/321) (`org.junit.jupiter:junit-jupiter-params`, `org.junit.platform:junit-platform-engine`, `org.junit.platform:junit-platform-launcher`, `org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] [chore(deps): update dependency org.mockito:mockito-core to v5](../pull/221)
- [ ] [fix(deps): update dependency fr.inria.gforge.spoon:spoon-core to v11](../pull/266)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [fix(deps): update dependency fr.inria.gforge.spoon:spoon-core to v9.2.0-beta-8](../pull/216)

## Detected Dependencies

github-actions (2)

.github/workflows/deploy-snapshot.yml (2)

- `actions/checkout v4.3.0` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-java v4` → [Updates: `v6`]

.github/workflows/tests.yml (3)

- `actions/checkout v4.3.0` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-java v4.7.1` → [Updates: `v4.9.1`, `v6.0.1`]
- `codecov/codecov-action v5.4.3` → [Updates: `v5.5.5`, `v7.0.0`]

maven (1)

pom.xml (25)

- `junit:junit 4.13.2`
- `org.junit.jupiter:junit-jupiter-api 5.3.2` → [Updates: `5.14.4`, `6.1.3`]
- `org.junit.jupiter:junit-jupiter-engine 5.3.2` → [Updates: `5.14.4`, `6.1.3`]
- `org.junit.platform:junit-platform-launcher 1.3.2` → [Updates: `1.14.4`, `6.1.3`]
- `org.junit.platform:junit-platform-engine 1.3.2` → [Updates: `1.14.4`, `6.1.3`]
- `org.junit.jupiter:junit-jupiter-params 5.13.2` → [Updates: `5.14.4`, `6.1.3`]
- `eu.stamp-project:test-runner 4.15`
- `fr.inria.gforge.spoon:spoon-core 9.2.0-beta-1` → [Updates: `9.2.0-beta-8`, `11.5.0`]
- `org.apache.logging.log4j:log4j-core 2.25.1` → [Updates: `2.25.4`]
- `org.apache.logging.log4j:log4j-jcl 2.25.1` → [Updates: `2.26.1`]
- `info.picocli:picocli 4.7.7`
- `com.google.code.gson:gson 2.13.1` → [Updates: `2.14.0`]
- `net.sf.supercsv:super-csv 2.4.0`
- `com.github.stefanbirkner:system-lambda 1.2.1`
- `org.mockito:mockito-core 4.11.0` → [Updates: `5.23.0`]
- `org.apache.maven.surefire:maven-surefire-common 3.5.3` → [Updates: `3.6.0`]
- `org.jacoco:jacoco-maven-plugin 0.8.13` → [Updates: `0.8.15`]
- `org.apache.maven.plugins:maven-surefire-plugin 3.5.3` → [Updates: `3.6.0`]
- `org.apache.maven.surefire:surefire-junit47 3.5.3` → [Updates: `3.5.6`]
- `org.apache.maven.plugins:maven-surefire-plugin 3.5.3` → [Updates: `3.6.0`]
- `org.apache.maven.surefire:surefire-junit47 3.5.3` → [Updates: `3.5.6`]
- `org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0`
- `org.apache.maven.plugins:maven-source-plugin 3.3.1` → [Updates: `3.4.0`]
- `org.apache.maven.plugins:maven-javadoc-plugin 3.11.2` → [Updates: `3.12.0`]
- `org.apache.maven.plugins:maven-gpg-plugin 3.2.8`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Dependency Dashboard instructions, then review .github/workflows/deploy-snapshot.yml, .github/workflows/tests.yml, and pom.xml alongside the linked update PRs. Done means the intended dependency updates are handled without breaking the repository checks; this dashboard already has multiple PRs open.

Written by the indexing model from the issue text.