Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/gcs-analytics-core).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| maven | [org.slf4j:slf4j-log4j12](https://redirect.github.com/qos-ch/slf4j) |  |

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update all non-major dependencies](../pull/300) (`io.opentelemetry:opentelemetry-exporter-logging`, `io.opentelemetry:opentelemetry-sdk`, `io.opentelemetry:opentelemetry-api`, `org.apache.hadoop:hadoop-mapreduce-client-core`, `org.apache.hadoop:hadoop-common`)

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [Replace slf4j.version with org.slf4j:slf4j-reload4j](../pull/120)
- [ ] [Update dependency com.diffplug.spotless:spotless-maven-plugin to v3](../pull/193)
- [ ] [Update junit-framework monorepo to v6](../pull/263) (`org.junit.jupiter:junit-jupiter-params`, `org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] [Update slf4j monorepo to v2](../pull/122) (`org.slf4j:slf4j-log4j12`, `org.slf4j:slf4j-api`)

## Detected Dependencies

github-actions (5)

.github/workflows/codeql.yml (5)

- `step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411`
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10`
- `github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e`
- `actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654`
- `github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e`

.github/workflows/coverage.yml (4)

- `step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411`
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10`
- `actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654`
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f`

.github/workflows/presubmit.yml (11)

- `step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411`
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10`
- `actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654`
- `step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411`
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10`
- `actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294`
- `step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411`
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10`
- `actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654`
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `go 1.26`

.github/workflows/release-please.yml (1)

- `googleapis/release-please-action v5`

.github/workflows/scorecard.yml (5)

- `step-security/harden-runner v2.19.4@9af89fc71515a100421586dfdb3dc9c984fbf411`
- `actions/checkout v6.0.3@df4cb1c069e1874edd31b4311f1884172cec0e10`
- `ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `github/codeql-action v4.36.2@8aad20d150bbac5944a9f9d289da16a4b0d87c1e`

maven (6)

client/pom.xml

common/pom.xml

core/pom.xml

coverage/pom.xml

pom.xml (41)

- `com.google.errorprone:error_prone_core 2.16` → [Updates: `2.49.0`]
- `org.openjdk.jmh:jmh-generator-annprocess 1.37`
- `com.google.auto.value:auto-value 1.11.1`
- `org.apache.maven.plugins:maven-source-plugin 3.4.0`
- `com.google.auto.value:auto-value 1.11.1`
- `com.google.auto.value:auto-value-annotations 1.11.1`
- `com.google.cloud:google-cloud-storage-bom 2.69.0`
- `com.google.guava:guava 33.6.0-jre`
- `org.apache.commons:commons-lang3 3.20.0`
- `org.junit.jupiter:junit-jupiter-api 5.14.4` → [Updates: `6.1.0`]
- `io.opentelemetry:opentelemetry-api 1.62.0` → [Updates: `1.63.0`]
- `io.opentelemetry:opentelemetry-sdk 1.62.0` → [Updates: `1.63.0`]
- `io.opentelemetry:opentelemetry-exporter-logging 1.62.0` → [Updates: `1.63.0`]
- `org.junit.jupiter:junit-jupiter-engine 5.14.4` → [Updates: `6.1.0`]
- `com.google.truth:truth 1.4.5`
- `org.mockito:mockito-junit-jupiter 5.23.0`
- `com.google.cloud:libraries-bom 26.83.0`
- `com.github.ben-manes.caffeine:caffeine 3.2.4`
- `org.slf4j:slf4j-api 1.7.36` → [Updates: `2.0.18`]
- `org.slf4j:slf4j-log4j12 1.7.36` → [Updates: `2.0.18`]
- `org.apache.parquet:parquet-avro 1.17.1`
- `org.apache.parquet:parquet-column 1.17.1`
- `org.apache.parquet:parquet-hadoop 1.17.1`
- `org.apache.avro:avro 1.12.1`
- `org.apache.hadoop:hadoop-common 3.4.2` → [Updates: `3.5.0`]
- `org.apache.hadoop:hadoop-mapreduce-client-core 3.4.2` → [Updates: `3.5.0`]
- `org.junit.jupiter:junit-jupiter-params 5.14.4` → [Updates: `6.1.0`]
- `org.openjdk.jmh:jmh-core 1.37`
- `org.openjdk.jmh:jmh-generator-annprocess 1.37`
- `org.apache.maven.plugins:maven-surefire-plugin 3.5.6`
- `org.apache.maven.plugins:maven-compiler-plugin 3.15.0`
- `com.google.errorprone:error_prone_core 2.16` → [Updates: `2.49.0`]
- `com.google.auto.value:auto-value 1.11.1`
- `com.diffplug.spotless:spotless-maven-plugin 2.46.1` → [Updates: `3.6.0`]
- `org.jacoco:jacoco-maven-plugin 0.8.15`
- `org.apache.maven.plugins:maven-gpg-plugin 3.2.8`
- `org.apache.maven.plugins:maven-javadoc-plugin 3.12.0`
- `org.apache.maven.plugins:maven-source-plugin 3.4.0`
- `org.codehaus.mojo:build-helper-maven-plugin 3.6.1`
- `org.codehaus.mojo:exec-maven-plugin 3.6.3`
- `com.google.cloud.artifactregistry:artifactregistry-maven-wagon 2.2.5`

test-lib/pom.xml

maven-wrapper (3)

.mvn/wrapper/maven-wrapper.properties (1)

- `maven 3.9.16`

mvnw (1)

- `maven-wrapper 3.3.4`

mvnw.cmd (1)

- `maven-wrapper 3.3.4`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository