Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/cloud-code-samples).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/GoogleCloudPlatform/cloud-code-samples).

- ⚠️ WARN: Your pom.xml contains windows line endings. This is not supported and may result in parsing issues.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [eslint-plugin-node](https://redirect.github.com/mysticatea/eslint-plugin-node) |  |
| nuget | [Google.Cloud.Diagnostics.AspNetCore](https://redirect.github.com/googleapis/google-cloud-dotnet) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] fix(deps): update dependency com.google.cloud.functions:functions-framework-api to v1.1.4
- [ ] fix(deps): update dependency mongodb to v4.17.2
- [ ] chore(deps): update dependency @google-cloud/aiplatform to v3.35.0
- [ ] chore(deps): update dependency com.google.cloud.tools:jib-maven-plugin to v3.5.2
- [ ] chore(deps): update dependency eslint-plugin-promise to v6.6.0
- [ ] chore(deps): update dependency functions-framework to v3.10.2
- [ ] chore(deps): update dependency mocha to v10.8.2
- [ ] chore(deps): update dependency mongodb.driver to 2.30.0
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-checkstyle-plugin to v3.6.0
- [ ] chore(deps): update dependency python-dateutil to v2.9.0.post0
- [ ] chore(deps): update dependency winston to v3.19.0
- [ ] chore(deps): update golang docker tag to v1.27
- [ ] chore(deps): update python docker tag to v3.14
- [ ] fix(deps): update dependency @google/generative-ai to ^0.24.0
- [ ] fix(deps): update dependency com.google.code.gson:gson to v2.14.0
- [ ] fix(deps): update dependency eslint to v8.57.1
- [ ] fix(deps): update dependency moment to v2.30.1
- [ ] fix(deps): update dependency org.apache.beam:beam-sdks-java-bom to v2.76.0
- [ ] fix(deps): update junit-framework monorepo to v5.14.4 (`org.junit.jupiter:junit-jupiter-params`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] fix(deps): update module cloud.google.com/go to v0.123.0
- [ ] fix(deps): update module github.com/googlecloudplatform/functions-framework-go to v1.9.2
- [ ] chore(deps): update dependency eslint-config-prettier to v10
- [ ] chore(deps): update dependency eslint-plugin-prettier to v5
- [ ] chore(deps): update dependency eslint-plugin-promise to v7
- [ ] chore(deps): update dependency flask-pymongo to v3
- [ ] chore(deps): update dependency gaxios to v8
- [ ] chore(deps): update dependency microsoft.aspnet.webapi.client to v6
- [ ] chore(deps): update dependency mocha to v12
- [ ] chore(deps): update dependency mongodb.driver to v3
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3
- [ ] chore(deps): update dependency prettier to v3
- [ ] chore(deps): update dotnet monorepo to v11 (`mcr.microsoft.com/dotnet/aspnet`, `mcr.microsoft.com/dotnet/sdk`)
- [ ] chore(deps): update node.js to v24
- [ ] chore(deps): update plugin com.diffplug.spotless to v8
- [ ] fix(deps): update dependency @google-cloud/aiplatform to v7
- [ ] fix(deps): update dependency @google-cloud/functions-framework to v5
- [ ] fix(deps): update dependency com.google.cloud.functions:functions-framework-api to v2
- [ ] fix(deps): update dependency com.squareup.okhttp3:okhttp to v5
- [ ] fix(deps): update dependency eslint to v10
- [ ] fix(deps): update dependency mongodb to v7
- [ ] fix(deps): update dependency org.slf4j:slf4j-jdk14 to v2
- [ ] fix(deps): update junit-framework monorepo to v6 (`org.junit.jupiter:junit-jupiter-params`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0](../pull/1287)
- [ ] [chore(deps): update plugin com.diffplug.spotless to v6.25.0](../pull/1289)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency handlebars to v4.7.9 [security]](../pull/1488)
- [ ] [fix(deps): update dependency body-parser to v1.20.6 [security]](../pull/1454)
- [ ] [fix(deps): update dependency pug to v3.0.3 [security]](../pull/1455)
- [ ] [fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 [security]](../pull/1493)
- [ ] [chore(deps): update dependency requests to v2.33.0 [security]](../pull/1457)
- [ ] [fix(deps): update dependency axios to v1.18.0 [security]](../pull/1458)
- [ ] [fix(deps): update dependency express to v4.20.0 [security]](../pull/1459)
- [ ] [fix(deps): update dependency mongoose to v6.13.10 [security]](../pull/1460)
- [ ] [fix(deps): update module go.mongodb.org/mongo-driver to v1.17.7 [security]](../pull/1495)
- [ ] [chore(deps): update dependency bleach to v6 [security]](../pull/1490)
- [ ] [chore(deps): update dependency django to v5 [security]](../pull/1496) (`Django`, `django`)
- [ ] [chore(deps): update dependency flask to v3 [security]](../pull/1497)
- [ ] [chore(deps): replace dependency eslint-plugin-node with eslint-plugin-n 14.0.0](../pull/1443)
- [ ] [chore(deps): update dependency eslint-config-prettier to v8.10.2](../pull/1444)
- [ ] [chore(deps): update dependency eslint-plugin-prettier to v4.2.5](../pull/1445)
- [ ] [chore(deps): update dependency psycopg2-binary to v2.9.13](../pull/1446)
- [ ] [fix(deps): update dependency org.slf4j:slf4j-jdk14 to v1.7.36](../pull/1332)
- [ ] [fix(deps): update autovalueversion to v1.11.1](../pull/1263) (`com.google.auto.value:auto-value`, `com.google.auto.value:auto-value-annotations`)
- [ ] [fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v4](../pull/1182)
- [ ] [chore(deps): lock file maintenance](../pull/1330)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

cloudbuild (2)

dotnet/dotnet-guestbook/cloudbuild.yaml

python/cloudbuild.yaml

dockerfile (23)

dotnet/dotnet-cloud-run-hello-world/Dockerfile (2)

- `mcr.microsoft.com/dotnet/aspnet 7.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/sdk 7.0-alpine` → [Updates: `11.0-alpine`]

dotnet/dotnet-guestbook/src/backend/Dockerfile (2)

- `mcr.microsoft.com/dotnet/aspnet 7.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/sdk 7.0-alpine` → [Updates: `11.0-alpine`]

dotnet/dotnet-guestbook/src/frontend/Dockerfile (2)

- `mcr.microsoft.com/dotnet/aspnet 7.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/sdk 7.0-alpine` → [Updates: `11.0-alpine`]

dotnet/dotnet-hello-world/src/Dockerfile (2)

- `mcr.microsoft.com/dotnet/aspnet 7.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/sdk 7.0-alpine` → [Updates: `11.0-alpine`]

golang/go-cloud-run-hello-world/Dockerfile (1)

- `golang 1.21` → [Updates: `1.27`]

golang/go-guestbook/src/backend/Dockerfile (1)

- `golang 1.21` → [Updates: `1.27`]

golang/go-guestbook/src/frontend/Dockerfile (1)

- `golang 1.21` → [Updates: `1.27`]

golang/go-hello-world/Dockerfile (1)

- `golang 1.21` → [Updates: `1.27`]

java/java-cloud-run-hello-world/Dockerfile (2)

- `maven 3-jdk-11-slim`
- `openjdk 11.0.16-jre-slim`

java/java-guestbook/backend/Dockerfile (2)

- `maven 3-jdk-11-slim`
- `openjdk 11.0.16-jre-slim`

java/java-guestbook/frontend/Dockerfile (2)

- `maven 3-jdk-11-slim`
- `openjdk 11.0.16-jre-slim`

java/java-hello-world/Dockerfile (2)

- `maven 3-jdk-11-slim`
- `openjdk 11.0.16-jre-slim`

nodejs/nodejs-cloud-run-hello-world/Dockerfile

nodejs/nodejs-guestbook/src/backend/Dockerfile (1)

- `node 19.9.0-alpine` → [Updates: `24.21.0-alpine`]

nodejs/nodejs-guestbook/src/frontend/Dockerfile

nodejs/nodejs-hello-world/Dockerfile

python/cloud-run-django-hello-world/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/cloud-run-python-hello-world/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/django/python-guestbook/src/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/django/python-hello-world/src/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/python-guestbook/src/backend/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/python-guestbook/src/frontend/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

python/python-hello-world/src/Dockerfile (1)

- `python 3.12-alpine` → [Updates: `3.14-alpine`]

gomod (5)

golang/cloud-function-hello-world/go.mod (2)

- `go 1.16`
- `github.com/GoogleCloudPlatform/functions-framework-go v1.6.1` → [Updates: `v1.9.2`]

golang/go-cloud-run-hello-world/go.mod (3)

- `go 1.19`
- `cloud.google.com/go v0.109.0` → [Updates: `v0.123.0`]
- `github.com/hashicorp/go-retryablehttp v0.7.4` → [Updates: `v0.7.7`]

golang/go-guestbook/src/backend/go.mod (2)

- `go 1.19`
- `go.mongodb.org/mongo-driver v1.13.1` → [Updates: `v1.17.7`]

golang/go-guestbook/src/frontend/go.mod (1)

- `go 1.19`

golang/go-hello-world/go.mod (1)

- `go 1.19`

gradle (2)

java/java-dataflow-samples/read-pubsub-write-bigquery/build.gradle.kts (7)

- `com.diffplug.spotless 6.8.0` → [Updates: `6.25.0`, `8.10.2`]
- `org.apache.beam:beam-sdks-java-bom 2.45.0` → [Updates: `2.76.0`]
- `org.slf4j:slf4j-jdk14 1.7.32` → [Updates: `1.7.36`, `2.0.19`]
- `com.google.auto.value:auto-value-annotations 1.10` → [Updates: `1.11.1`]
- `com.google.auto.value:auto-value 1.10` → [Updates: `1.11.1`]
- `org.junit.jupiter:junit-jupiter-api 5.9.0` → [Updates: `5.14.4`, `6.1.3`]
- `org.junit.jupiter:junit-jupiter-params 5.9.0` → [Updates: `5.14.4`, `6.1.3`]

java/java-dataflow-samples/read-pubsub-write-bigquery/settings.gradle.kts

maven (6)

java/cloud-function-hello-world/pom.xml (2)

- `com.google.cloud.functions:functions-framework-api 1.1.0` → [Updates: `1.1.4`, `2.0.2`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.8.1` → [Updates: `3.16.0`]

java/java-cloud-run-hello-world/pom.xml (5)

- `org.springframework.boot:spring-boot-starter-parent 2.7.18` → [Updates: `4.1.1`]
- `org.springframework.cloud:spring-cloud-gcp-dependencies 1.2.8.RELEASE`
- `com.squareup.okhttp3:okhttp 4.12.0` → [Updates: `5.5.0`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1` → [Updates: `3.6.0`]

java/java-guestbook/backend/pom.xml (5)

- `org.springframework.boot:spring-boot-starter-parent 2.7.18` → [Updates: `4.1.1`]
- `com.google.code.gson:gson 2.10.1` → [Updates: `2.14.0`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-surefire-plugin 2.22.2` → [Updates: `3.6.0`]
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1` → [Updates: `3.6.0`]

java/java-guestbook/frontend/pom.xml (4)

- `org.springframework.boot:spring-boot-starter-parent 2.7.18` → [Updates: `4.1.1`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-surefire-plugin 2.22.2` → [Updates: `3.6.0`]
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1` → [Updates: `3.6.0`]

java/java-guestbook/pom.xml (1)

- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]

java/java-hello-world/pom.xml (4)

- `org.springframework.boot:spring-boot-starter-parent 2.7.18` → [Updates: `4.1.1`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1` → [Updates: `3.6.0`]
- `org.springframework.cloud:spring-cloud-gcp-dependencies 1.2.8.RELEASE`

npm (7)

nodejs/cloud-function-hello-world/package.json (1)

- `@google-cloud/functions-framework ^3.1.0` → [Updates: `^5.0.0`]

nodejs/gemini-api/package.json (2)

- `@google-cloud/aiplatform ^3.0.0` → [Updates: `^3.0.0`, `^7.0.0`]
- `@google/generative-ai ^0.1.0` → [Updates: `^0.24.0`]

nodejs/nodejs-cloud-run-hello-world/package.json (11)

- `express ^4.17.1` → [Updates: `^4.17.1`]
- `handlebars ^4.7.4` → [Updates: `^4.7.4`]
- `eslint 8.54.0` → [Updates: `8.57.1`, `10.10.0`]
- `eslint-config-prettier 8.10.0` → [Updates: `8.10.2`, `10.1.8`]
- `eslint-plugin-node 11.1.0` → [Updates: `14.0.0`]
- `eslint-plugin-prettier 4.2.1` → [Updates: `4.2.5`, `5.5.6`]
- `eslint-plugin-promise 6.1.1` → [Updates: `6.6.0`, `7.3.0`]
- `gaxios 5.1.3` → [Updates: `8.0.0`]
- `mocha 10.2.0` → [Updates: `10.8.2`, `12.0.0`]
- `prettier 2.8.8` → [Updates: `3.9.6`]
- `node >=11.14`

nodejs/nodejs-guestbook/package.json (1)

- `eslint 8.54.0` → [Updates: `8.57.1`, `10.10.0`]

nodejs/nodejs-guestbook/src/backend/package.json (4)

- `body-parser 1.20.2` → [Updates: `1.20.6`]
- `mongodb 4.17.1` → [Updates: `4.17.2`, `7.6.0`]
- `express 4.18.2` → [Updates: `4.20.0`]
- `mongoose 6.11.3` → [Updates: `6.13.10`]

nodejs/nodejs-guestbook/src/frontend/package.json (5)

- `axios 1.6.2` → [Updates: `1.18.0`]
- `body-parser 1.20.2` → [Updates: `1.20.6`]
- `express 4.18.2` → [Updates: `4.20.0`]
- `moment 2.29.4` → [Updates: `2.30.1`]
- `pug 3.0.2` → [Updates: `3.0.3`]

nodejs/nodejs-hello-world/package.json (5)

- `express ^4.16.4` → [Updates: `^4.16.4`]
- `handlebars ^4.7.4` → [Updates: `^4.7.4`]
- `eslint 8.54.0` → [Updates: `8.57.1`, `10.10.0`]
- `express-winston 4.2.0`
- `winston 3.11.0` → [Updates: `3.19.0`]

nuget (2)

dotnet/dotnet-guestbook/src/backend/backend.csproj (1)

- `MongoDB.Driver 2.22.0` → [Updates: `2.30.0`, `3.11.2`]

dotnet/dotnet-guestbook/src/frontend/frontend.csproj (2)

- `Microsoft.AspNet.WebApi.Client 5.2.9` → [Updates: `6.0.0`]
- `Google.Cloud.Diagnostics.AspNetCore 4.4.0`

pip_requirements (9)

python/cloud-function-hello-world/requirements.txt (1)

- `functions-framework ==3.5.0` → [Updates: `==3.10.2`]

python/cloud-run-django-hello-world/requirements.txt (2)

- `django ==4.2.10` → [Updates: `==5.2.16`]
- `requests ==2.31.0` → [Updates: `==2.33.0`]

python/cloud-run-python-hello-world/requirements.txt (2)

- `Flask ==2.3.3` → [Updates: `==3.1.3`]
- `requests ==2.31.0` → [Updates: `==2.33.0`]

python/django/python-guestbook/src/requirements.txt (3)

- `Django ==4.2.9` → [Updates: `==5.2.16`]
- `psycopg2-binary ==2.9.9` → [Updates: `==2.9.13`]
- `python-dateutil ==2.8.2` → [Updates: `==2.9.0.post0`]

python/django/python-hello-world/src/requirements.txt (3)

- `Django ==4.2.10` → [Updates: `==5.2.16`]
- `requests ==2.31.0` → [Updates: `==2.33.0`]
- `psycopg2-binary ==2.9.9` → [Updates: `==2.9.13`]

python/gemini-api/requirements.txt

python/python-guestbook/src/backend/requirements.txt (3)

- `Flask ==2.3.3` → [Updates: `==3.1.3`]
- `Flask-PyMongo ==2.3.0` → [Updates: `==3.0.1`]
- `bleach ==5.0.1` → [Updates: `==6.4.0`]

python/python-guestbook/src/frontend/requirements.txt (3)

- `Flask ==2.3.3` → [Updates: `==3.1.3`]
- `requests ==2.31.0` → [Updates: `==2.33.0`]
- `python-dateutil ==2.8.2` → [Updates: `==2.9.0.post0`]

python/python-hello-world/src/requirements.txt (1)

- `Flask ==2.3.3` → [Updates: `==3.1.3`]

terraform (4)

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/01.setup/provider.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/02.network/provider.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/03.io/infrastructure.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/03.io/infrastructure/provider.tf

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Bắt đầu với Dependency Dashboard cùng pom.xml và các Dockerfiles của repository; issue liệt kê nhiều bản cập nhật bị giới hạn tốc độ và các PR hiện có, bao gồm các đường dẫn như dotnet/dotnet-guestbook/src/backend/Dockerfile. Trước tiên, hãy xem xét các PR Renovate được liên kết và các vấn đề của repository; công việc được xem là hoàn tất khi có một bản cập nhật dependency với phạm vi được xác định rõ ràng, thay vì làm việc trên toàn bộ dashboard.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.