Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/cloud-code-samples).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/GoogleCloudPlatform/cloud-code-samples).

- ⚠️ WARN: Your pom.xml contains windows line endings. This is not supported and may result in parsing issues.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [eslint-plugin-node](https://redirect.github.com/mysticatea/eslint-plugin-node) |  |
| nuget | [Google.Cloud.Diagnostics.AspNetCore](https://redirect.github.com/googleapis/google-cloud-dotnet) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] fix(deps): update dependency com.google.cloud.functions:functions-framework-api to v1.1.4
- [ ] fix(deps): update dependency mongodb to v4.17.2
- [ ] chore(deps): update dependency @google-cloud/aiplatform to v3.35.0
- [ ] chore(deps): update dependency com.google.cloud.tools:jib-maven-plugin to v3.5.2
- [ ] chore(deps): update dependency eslint-plugin-promise to v6.6.0
- [ ] chore(deps): update dependency functions-framework to v3.10.2
- [ ] chore(deps): update dependency mocha to v10.8.2
- [ ] chore(deps): update dependency mongodb.driver to 2.30.0
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-checkstyle-plugin to v3.6.0
- [ ] chore(deps): update dependency python-dateutil to v2.9.0.post0
- [ ] chore(deps): update dependency winston to v3.19.0
- [ ] chore(deps): update golang docker tag to v1.27
- [ ] chore(deps): update python docker tag to v3.14
- [ ] fix(deps): update dependency @google/generative-ai to ^0.24.0
- [ ] fix(deps): update dependency com.google.code.gson:gson to v2.14.0
- [ ] fix(deps): update dependency eslint to v8.57.1
- [ ] fix(deps): update dependency moment to v2.30.1
- [ ] fix(deps): update dependency org.apache.beam:beam-sdks-java-bom to v2.76.0
- [ ] fix(deps): update junit-framework monorepo to v5.14.4 (`org.junit.jupiter:junit-jupiter-params`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] fix(deps): update module cloud.google.com/go to v0.123.0
- [ ] fix(deps): update module github.com/googlecloudplatform/functions-framework-go to v1.9.2
- [ ] chore(deps): update dependency eslint-config-prettier to v10
- [ ] chore(deps): update dependency eslint-plugin-prettier to v5
- [ ] chore(deps): update dependency eslint-plugin-promise to v7
- [ ] chore(deps): update dependency flask-pymongo to v3
- [ ] chore(deps): update dependency gaxios to v8
- [ ] chore(deps): update dependency microsoft.aspnet.webapi.client to v6
- [ ] chore(deps): update dependency mocha to v12
- [ ] chore(deps): update dependency mongodb.driver to v3
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3
- [ ] chore(deps): update dependency prettier to v3
- [ ] chore(deps): update dotnet monorepo to v11 (`mcr.microsoft.com/dotnet/aspnet`, `mcr.microsoft.com/dotnet/sdk`)
- [ ] chore(deps): update node.js to v24
- [ ] chore(deps): update plugin com.diffplug.spotless to v8
- [ ] fix(deps): update dependency @google-cloud/aiplatform to v7
- [ ] fix(deps): update dependency @google-cloud/functions-framework to v5
- [ ] fix(deps): update dependency com.google.cloud.functions:functions-framework-api to v2
- [ ] fix(deps): update dependency com.squareup.okhttp3:okhttp to v5
- [ ] fix(deps): update dependency eslint to v10
- [ ] fix(deps): update dependency mongodb to v7
- [ ] fix(deps): update dependency org.slf4j:slf4j-jdk14 to v2
- [ ] fix(deps): update junit-framework monorepo to v6 (`org.junit.jupiter:junit-jupiter-params`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0](../pull/1287)
- [ ] [chore(deps): update plugin com.diffplug.spotless to v6.25.0](../pull/1289)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency handlebars to v4.7.9 [security]](../pull/1488)
- [ ] [fix(deps): update dependency body-parser to v1.20.6 [security]](../pull/1454)
- [ ] [fix(deps): update dependency pug to v3.0.3 [security]](../pull/1455)
- [ ] [fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 [security]](../pull/1493)
- [ ] [chore(deps): update dependency requests to v2.33.0 [security]](../pull/1457)
- [ ] [fix(deps): update dependency axios to v1.18.0 [security]](../pull/1458)
- [ ] [fix(deps): update dependency express to v4.20.0 [security]](../pull/1459)
- [ ] [fix(deps): update dependency mongoose to v6.13.10 [security]](../pull/1460)
- [ ] [fix(deps): update module go.mongodb.org/mongo-driver to v1.17.7 [security]](../pull/1495)
- [ ] [chore(deps): update dependency bleach to v6 [security]](../pull/1490)
- [ ] [chore(deps): update dependency django to v5 [security]](../pull/1496) (`Django`, `django`)
- [ ] [chore(deps): update dependency flask to v3 [security]](../pull/1497)
- [ ] [chore(deps): replace dependency eslint-plugin-node with eslint-plugin-n 14.0.0](../pull/1443)
- [ ] [chore(deps): update dependency eslint-config-prettier to v8.10.2](../pull/1444)
- [ ] [chore(deps): update dependency eslint-plugin-prettier to v4.2.5](../pull/1445)
- [ ] [chore(deps): update dependency psycopg2-binary to v2.9.13](../pull/1446)
- [ ] [fix(deps): update dependency org.slf4j:slf4j-jdk14 to v1.7.36](../pull/1332)
- [ ] [fix(deps): update autovalueversion to v1.11.1](../pull/1263) (`com.google.auto.value:auto-value`, `com.google.auto.value:auto-value-annotations`)
- [ ] [fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v4](../pull/1182)
- [ ] [chore(deps): lock file maintenance](../pull/1330)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

cloudbuild (2)

dotnet/dotnet-guestbook/cloudbuild.yaml

python/cloudbuild.yaml

dockerfile (23)

dotnet/dotnet-cloud-run-hello-world/Dockerfile (2)

- `mcr.microsoft.com/dotnet/aspnet 7.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/sdk 7.0-alpine` → [Updates: `11.0-alpine`]

dotnet/dotnet-guestbook/src/backend/Dockerfile (2)

- `mcr.microsoft.com/dotnet/aspnet 7.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/sdk 7.0-alpine` → [Updates: `11.0-alpine`]

dotnet/dotnet-guestbook/src/frontend/Dockerfile (2)

- `mcr.microsoft.com/dotnet/aspnet 7.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/sdk 7.0-alpine` → [Updates: `11.0-alpine`]

dotnet/dotnet-hello-world/src/Dockerfile (2)

- `mcr.microsoft.com/dotnet/aspnet 7.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/sdk 7.0-alpine` → [Updates: `11.0-alpine`]

golang/go-cloud-run-hello-world/Dockerfile (1)

- `golang 1.21` → [Updates: `1.27`]

golang/go-guestbook/src/backend/Dockerfile (1)

- `golang 1.21` → [Updates: `1.27`]

golang/go-guestbook/src/frontend/Dockerfile (1)

- `golang 1.21` → [Updates: `1.27`]

golang/go-hello-world/Dockerfile (1)

- `golang 1.21` → [Updates: `1.27`]

java/java-cloud-run-hello-world/Dockerfile (2)

- `maven 3-jdk-11-slim`
- `openjdk 11.0.16-jre-slim`

java/java-guestbook/backend/Dockerfile (2)

- `maven 3-jdk-11-slim`
- `openjdk 11.0.16-jre-slim`

java/java-guestbook/frontend/Dockerfile (2)

- `maven 3-jdk-11-slim`
- `openjdk 11.0.16-jre-slim`

java/java-hello-world/Dockerfile (2)

- `maven 3-jdk-11-slim`
- `openjdk 11.0.16-jre-slim`

nodejs/nodejs-cloud-run-hello-world/Dockerfile

nodejs/nodejs-guestbook/src/backend/Dockerfile (1)

- `node 19.9.0-alpine` → [Updates: `24.21.0-alpine`]

nodejs/nodejs-guestbook/src/frontend/Dockerfile

nodejs/nodejs-hello-world/Dockerfile

python/cloud-run-django-hello-world/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/cloud-run-python-hello-world/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/django/python-guestbook/src/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/django/python-hello-world/src/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/python-guestbook/src/backend/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/python-guestbook/src/frontend/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/python-hello-world/src/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

gomod (5)

golang/cloud-function-hello-world/go.mod (2)

- `go 1.16`
- `github.com/GoogleCloudPlatform/functions-framework-go v1.6.1` → [Updates: `v1.9.2`]

golang/go-cloud-run-hello-world/go.mod (3)

- `go 1.19`
- `cloud.google.com/go v0.109.0` → [Updates: `v0.123.0`]
- `github.com/hashicorp/go-retryablehttp v0.7.4` → [Updates: `v0.7.7`]

golang/go-guestbook/src/backend/go.mod (2)

- `go 1.19`
- `go.mongodb.org/mongo-driver v1.13.1` → [Updates: `v1.17.7`]

golang/go-guestbook/src/frontend/go.mod (1)

- `go 1.19`

golang/go-hello-world/go.mod (1)

- `go 1.19`

gradle (2)

java/java-dataflow-samples/read-pubsub-write-bigquery/build.gradle.kts (7)

- `com.diffplug.spotless 6.8.0` → [Updates: `6.25.0`, `8.10.2`]
- `org.apache.beam:beam-sdks-java-bom 2.45.0` → [Updates: `2.76.0`]
- `org.slf4j:slf4j-jdk14 1.7.32` → [Updates: `1.7.36`, `2.0.19`]
- `com.google.auto.value:auto-value-annotations 1.10` → [Updates: `1.11.1`]
- `com.google.auto.value:auto-value 1.10` → [Updates: `1.11.1`]
- `org.junit.jupiter:junit-jupiter-api 5.9.0` → [Updates: `5.14.4`, `6.1.3`]
- `org.junit.jupiter:junit-jupiter-params 5.9.0` → [Updates: `5.14.4`, `6.1.3`]

java/java-dataflow-samples/read-pubsub-write-bigquery/settings.gradle.kts

maven (6)

java/cloud-function-hello-world/pom.xml (2)

- `com.google.cloud.functions:functions-framework-api 1.1.0` → [Updates: `1.1.4`, `2.0.2`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.8.1` → [Updates: `3.16.0`]

java/java-cloud-run-hello-world/pom.xml (5)

- `org.springframework.boot:spring-boot-starter-parent 2.7.18` → [Updates: `4.1.1`]
- `org.springframework.cloud:spring-cloud-gcp-dependencies 1.2.8.RELEASE`
- `com.squareup.okhttp3:okhttp 4.12.0` → [Updates: `5.5.0`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1` → [Updates: `3.6.0`]

java/java-guestbook/backend/pom.xml (5)

- `org.springframework.boot:spring-boot-starter-parent 2.7.18` → [Updates: `4.1.1`]
- `com.google.code.gson:gson 2.10.1` → [Updates: `2.14.0`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-surefire-plugin 2.22.2` → [Updates: `3.6.0`]
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1` → [Updates: `3.6.0`]

java/java-guestbook/frontend/pom.xml (4)

- `org.springframework.boot:spring-boot-starter-parent 2.7.18` → [Updates: `4.1.1`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-surefire-plugin 2.22.2` → [Updates: `3.6.0`]
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1` → [Updates: `3.6.0`]

java/java-guestbook/pom.xml (1)

- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]

java/java-hello-world/pom.xml (4)

- `org.springframework.boot:spring-boot-starter-parent 2.7.18` → [Updates: `4.1.1`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1` → [Updates: `3.6.0`]
- `org.springframework.cloud:spring-cloud-gcp-dependencies 1.2.8.RELEASE`

npm (7)

nodejs/cloud-function-hello-world/package.json (1)

- `@google-cloud/functions-framework ^3.1.0` → [Updates: `^5.0.0`]

nodejs/gemini-api/package.json (2)

- `@google-cloud/aiplatform ^3.0.0` → [Updates: `^3.0.0`, `^7.0.0`]
- `@google/generative-ai ^0.1.0` → [Updates: `^0.24.0`]

nodejs/nodejs-cloud-run-hello-world/package.json (11)

- `express ^4.17.1` → [Updates: `^4.17.1`]
- `handlebars ^4.7.4` → [Updates: `^4.7.4`]
- `eslint 8.54.0` → [Updates: `8.57.1`, `10.10.0`]
- `eslint-config-prettier 8.10.0` → [Updates: `8.10.2`, `10.1.8`]
- `eslint-plugin-node 11.1.0` → [Updates: `14.0.0`]
- `eslint-plugin-prettier 4.2.1` → [Updates: `4.2.5`, `5.5.6`]
- `eslint-plugin-promise 6.1.1` → [Updates: `6.6.0`, `7.3.0`]
- `gaxios 5.1.3` → [Updates: `8.0.0`]
- `mocha 10.2.0` → [Updates: `10.8.2`, `12.0.0`]
- `prettier 2.8.8` → [Updates: `3.9.6`]
- `node >=11.14`

nodejs/nodejs-guestbook/package.json (1)

- `eslint 8.54.0` → [Updates: `8.57.1`, `10.10.0`]

nodejs/nodejs-guestbook/src/backend/package.json (4)

- `body-parser 1.20.2` → [Updates: `1.20.6`]
- `mongodb 4.17.1` → [Updates: `4.17.2`, `7.6.0`]
- `express 4.18.2` → [Updates: `4.20.0`]
- `mongoose 6.11.3` → [Updates: `6.13.10`]

nodejs/nodejs-guestbook/src/frontend/package.json (5)

- `axios 1.6.2` → [Updates: `1.18.0`]
- `body-parser 1.20.2` → [Updates: `1.20.6`]
- `express 4.18.2` → [Updates: `4.20.0`]
- `moment 2.29.4` → [Updates: `2.30.1`]
- `pug 3.0.2` → [Updates: `3.0.3`]

nodejs/nodejs-hello-world/package.json (5)

- `express ^4.16.4` → [Updates: `^4.16.4`]
- `handlebars ^4.7.4` → [Updates: `^4.7.4`]
- `eslint 8.54.0` → [Updates: `8.57.1`, `10.10.0`]
- `express-winston 4.2.0`
- `winston 3.11.0` → [Updates: `3.19.0`]

nuget (2)

dotnet/dotnet-guestbook/src/backend/backend.csproj (1)

- `MongoDB.Driver 2.22.0` → [Updates: `2.30.0`, `3.11.2`]

dotnet/dotnet-guestbook/src/frontend/frontend.csproj (2)

- `Microsoft.AspNet.WebApi.Client 5.2.9` → [Updates: `6.0.0`]
- `Google.Cloud.Diagnostics.AspNetCore 4.4.0`

pip_requirements (9)

python/cloud-function-hello-world/requirements.txt (1)

- `functions-framework ==3.5.0` → [Updates: `==3.10.2`]

python/cloud-run-django-hello-world/requirements.txt (2)

- `django ==4.2.10` → [Updates: `==5.2.16`]
- `requests ==2.31.0` → [Updates: `==2.33.0`]

python/cloud-run-python-hello-world/requirements.txt (2)

- `Flask ==2.3.3` → [Updates: `==3.1.3`]
- `requests ==2.31.0` → [Updates: `==2.33.0`]

python/django/python-guestbook/src/requirements.txt (3)

- `Django ==4.2.9` → [Updates: `==5.2.16`]
- `psycopg2-binary ==2.9.9` → [Updates: `==2.9.13`]
- `python-dateutil ==2.8.2` → [Updates: `==2.9.0.post0`]

python/django/python-hello-world/src/requirements.txt (3)

- `Django ==4.2.10` → [Updates: `==5.2.16`]
- `requests ==2.31.0` → [Updates: `==2.33.0`]
- `psycopg2-binary ==2.9.9` → [Updates: `==2.9.13`]

python/gemini-api/requirements.txt

python/python-guestbook/src/backend/requirements.txt (3)

- `Flask ==2.3.3` → [Updates: `==3.1.3`]
- `Flask-PyMongo ==2.3.0` → [Updates: `==3.0.1`]
- `bleach ==5.0.1` → [Updates: `==6.4.0`]

python/python-guestbook/src/frontend/requirements.txt (3)

- `Flask ==2.3.3` → [Updates: `==3.1.3`]
- `requests ==2.31.0` → [Updates: `==2.33.0`]
- `python-dateutil ==2.8.2` → [Updates: `==2.9.0.post0`]

python/python-hello-world/src/requirements.txt (1)

- `Flask ==2.3.3` → [Updates: `==3.1.3`]

terraform (4)

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/01.setup/provider.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/02.network/provider.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/03.io/infrastructure.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/03.io/infrastructure/provider.tf

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Commencez par le Dependency Dashboard ainsi que par le pom.xml et les Dockerfiles du dépôt ; l'issue répertorie de nombreuses mises à jour limitées par le débit ainsi que des PRs existantes, notamment des chemins tels que dotnet/dotnet-guestbook/src/backend/Dockerfile. Examinez d'abord les PRs Renovate liées et les problèmes du dépôt ; le travail serait considéré comme terminé avec une mise à jour de dépendance clairement délimitée, plutôt qu'en travaillant sur le dashboard dans son ensemble.

Rédigé par le modèle d'indexation à partir du texte de l'issue.