Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/GoogleCloudPlatform/getting-started-java).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| gradle | `jstl:jstl` |  |
| maven | [com.google.cloud.sql:mysql-socket-factory](https://redirect.github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory) |  |
| maven | `jstl:jstl` |  |
| maven | `mysql:mysql-connector-java` |  |

## Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

- [ ] fix(deps): update appengine packages (`com.google.appengine:appengine-api-1.0-sdk`, `com.google.appengine:appengine-tools-sdk`, `com.google.appengine:appengine-api-stubs`, `com.google.appengine:appengine-testing`, `com.google.appengine:appengine-java-sdk`)
- [ ] fix(deps): update dependency mysql:mysql-connector-java to v8.0.33
- [ ] fix(deps): update dependency org.slf4j:slf4j-api to v2.0.19
- [ ] chore(deps): update dependency com.google.cloud.tools:appengine-maven-plugin to v2.8.7
- [ ] chore(deps): update dependency com.google.cloud.tools:jib-maven-plugin to v3.5.2
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-install-plugin to v3.2.0
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-resources-plugin to v3.5.0
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
- [ ] chore(deps): update dependency org.apache.maven.plugins:maven-war-plugin to v3.5.1
- [ ] chore(deps): update dependency org.codehaus.mojo:versions-maven-plugin to v2.22.0
- [ ] chore(deps): update dependency org.mockito:mockito-core to v4.11.0
- [ ] chore(deps): update gradle to v8.14.5
- [ ] fix(deps): update dependency com.google.api-client:google-api-client-appengine to v2.9.1
- [ ] fix(deps): update dependency com.google.cloud:google-cloud-firestore to v3.47.0
- [ ] fix(deps): update dependency com.google.cloud:google-cloud-pubsub to v1.155.0
- [ ] fix(deps): update dependency com.google.cloud:google-cloud-storage to v2.73.0
- [ ] fix(deps): update dependency com.google.cloud:google-cloud-translate to v2.97.0
- [ ] fix(deps): update dependency com.google.cloud.sql:mysql-socket-factory to v1.13.1
- [ ] fix(deps): update dependency com.google.cloud.tools:appengine-gradle-plugin to v2.8.7
- [ ] fix(deps): update dependency com.google.truth:truth to v1.4.5
- [ ] fix(deps): update dependency joda-time:joda-time to v2.14.3
- [ ] fix(deps): update dependency org.seleniumhq.selenium:selenium-chrome-driver to v4.49.0
- [ ] fix(deps): update dependency org.springframework.boot:spring-boot-starter-web to v3.5.16
- [ ] fix(deps): update kotlin packages to v1.9.25 (`org.jetbrains.kotlin:kotlin-maven-plugin`, `org.jetbrains.kotlin:kotlin-stdlib`, `org.jetbrains.kotlin:kotlin-maven-allopen`, `org.jetbrains.kotlin:kotlin-reflect`, `org.jetbrains.kotlin:kotlin-stdlib-jdk8`)
- [ ] fix(deps): update appengine packages to v5 (`com.google.appengine:appengine-api-1.0-sdk`, `com.google.appengine:appengine-tools-sdk`, `com.google.appengine:appengine-api-stubs`, `com.google.appengine:appengine-testing`, `com.google.appengine:appengine-java-sdk`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update dependency commons-fileupload:commons-fileupload to v1.6.0 [security]](../pull/1261)
- [ ] [fix(deps): update dependency commons-io:commons-io to v2.14.0 [security]](../pull/1262)
- [ ] [fix(deps): replace dependency com.google.cloud.sql:mysql-socket-factory with com.google.cloud.sql:mysql-socket-factory-connector-j-8](../pull/1249)
- [ ] [fix(deps): replace dependency jstl:jstl with javax.servlet:jstl 1.1.2](../pull/1252)
- [ ] [fix(deps): replace dependency mysql:mysql-connector-java with com.mysql:mysql-connector-j](../pull/1250)
- [ ] [chore(deps): update dependency org.eclipse.jetty:jetty-maven-plugin to v9.4.58.v20250814](../pull/1247)
- [ ] [fix(deps): update dependency com.google.cloud.samples:shared-configuration to v1.2.2](../pull/1244)
- [ ] [chore(deps): update dependency org.apache.maven.plugins:maven-clean-plugin to v3.5.0](../pull/1242)
- [ ] [chore(deps): update dependency org.apache.maven.plugins:maven-site-plugin to v3.22.0](../pull/1243)
- [ ] [fix(deps): update dependency com.google.guava:guava to v33.7.1-jre](../pull/1239)
- [ ] [chore(deps): update dependency org.eclipse.jetty:jetty-maven-plugin to v11](../pull/1248)
- [ ] [chore(deps): update dependency org.mockito:mockito-core to v5](../pull/1264)
- [ ] [chore(deps): update gradle to v9](../pull/1255)
- [ ] [chore(deps): update java tool constraint to v25](../pull/1263)
- [ ] [fix(deps): update dependency org.springframework.boot:spring-boot-starter-web to v4](../pull/1256)
- [ ] [fix(deps): update kotlin packages to v2](../pull/1240) (`org.jetbrains.kotlin:kotlin-maven-plugin`, `org.jetbrains.kotlin:kotlin-stdlib`, `org.jetbrains.kotlin:kotlin-maven-allopen`, `org.jetbrains.kotlin:kotlin-reflect`, `org.jetbrains.kotlin:kotlin-stdlib-jdk8`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [fix(deps): update dependency javax.servlet:jsp-api to v2.0.public_draft](../pull/1155)

## Detected Dependencies

gradle (3)

appengine-standard-java8/helloworld-gae-javasdk-tools/build.gradle (6)

- `com.google.appengine:appengine-java-sdk 1.9.93` → [Updates: `1.9.98`, `5.1.0`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `junit:junit 4.13.2`
- `com.google.truth:truth 1.2.0` → [Updates: `1.4.5`]
- `org.mockito:mockito-all 1.10.19`

appengine-standard-java8/helloworld-gae-javasdk-tools/settings.gradle

helloworld-jsp/build.gradle (2)

- `com.google.cloud.tools:appengine-gradle-plugin 2.5.0` → [Updates: `2.8.7`]
- `javax.servlet:javax.servlet-api 4.0.1`

gradle-wrapper (2)

appengine-standard-java8/helloworld-gae-javasdk-tools/gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 8.0` → [Updates: `8.14.5`, `9.7.1`]

helloworld-jsp/gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 8.0` → [Updates: `8.14.5`, `9.7.1`]

maven (12)

appengine-standard-java8/helloworld-gae-javasdk-tools/pom.xml (21)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.appengine:appengine-api-1.0-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `com.google.appengine:appengine-testing 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `com.google.appengine:appengine-api-stubs 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `com.google.appengine:appengine-tools-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `com.google.truth:truth 1.2.0` → [Updates: `1.4.5`]
- `junit:junit 4.13.2`
- `org.mockito:mockito-core 4.5.0` → [Updates: `4.11.0`, `5.23.0`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.11.0` → [Updates: `3.16.0`]
- `org.codehaus.mojo:versions-maven-plugin 2.11.0` → [Updates: `2.22.0`]
- `org.apache.maven.plugins:maven-war-plugin 3.4.0` → [Updates: `3.5.1`]
- `org.apache.maven.plugins:maven-clean-plugin 3.3.2` → [Updates: `3.5.0`]
- `org.apache.maven.plugins:maven-install-plugin 3.1.1` → [Updates: `3.2.0`]
- `org.apache.maven.plugins:maven-surefire-plugin 3.1.2` → [Updates: `3.6.0`]
- `org.apache.maven.plugins:maven-site-plugin 3.12.1` → [Updates: `3.22.0`]
- `org.apache.maven.plugins:maven-resources-plugin 3.3.0` → [Updates: `3.5.0`]
- `org.apache.maven.plugins:maven-deploy-plugin 3.0.0` → [Updates: `3.2.0`]
- `org.apache.maven.plugins:maven-enforcer-plugin 3.1.0` → [Updates: `3.6.3`]

appengine-standard-java8/kotlin-appengine-standard/pom.xml (9)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.appengine:appengine-api-1.0-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `org.jetbrains.kotlin:kotlin-stdlib 1.6.0` → [Updates: `1.9.25`, `2.4.20`]
- `org.jetbrains.kotlin:kotlin-maven-plugin 1.5.31` → [Updates: `1.9.25`, `2.4.20`]
- `org.apache.maven.plugins:maven-war-plugin 3.3.2` → [Updates: `3.5.1`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.11.0` → [Updates: `3.16.0`]

appengine-standard-java8/kotlin-sb-appengine-standard/pom.xml (13)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.appengine:appengine-api-1.0-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `org.springframework.boot:spring-boot-starter-web 3.1.1` → [Updates: `3.5.16`, `4.1.1`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `org.jetbrains.kotlin:kotlin-stdlib-jdk8 1.6.0` → [Updates: `1.9.25`, `2.4.20`]
- `org.jetbrains.kotlin:kotlin-reflect 1.6.0` → [Updates: `1.9.25`, `2.4.20`]
- `org.jetbrains.kotlin:kotlin-maven-allopen 1.6.0` → [Updates: `1.9.25`, `2.4.20`]
- `org.jetbrains.kotlin:kotlin-maven-plugin 1.6.0` → [Updates: `1.9.25`, `2.4.20`]
- `org.jetbrains.kotlin:kotlin-maven-allopen 1.6.0` → [Updates: `1.9.25`, `2.4.20`]
- `org.apache.maven.plugins:maven-war-plugin 3.3.2` → [Updates: `3.5.1`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.11.0` → [Updates: `3.16.0`]

appengine-standard-java8/kotlin-spark-appengine-standard/pom.xml (11)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.appengine:appengine-api-1.0-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `org.jetbrains.kotlin:kotlin-stdlib-jre8 1.2.71`
- `com.sparkjava:spark-kotlin 1.0.0-alpha`
- `org.slf4j:slf4j-api 2.0.11` → [Updates: `2.0.19`]
- `org.jetbrains.kotlin:kotlin-maven-plugin 1.5.31` → [Updates: `1.9.25`, `2.4.20`]
- `org.apache.maven.plugins:maven-war-plugin 3.3.2` → [Updates: `3.5.1`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.11.0` → [Updates: `3.16.0`]

background/pom.xml (13)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.cloud:google-cloud-firestore 3.13.2` → [Updates: `3.47.0`]
- `com.google.cloud:google-cloud-translate 2.20.0` → [Updates: `2.97.0`]
- `com.google.cloud:google-cloud-pubsub 1.123.17` → [Updates: `1.155.0`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `com.google.guava:guava 33.1.0-jre` → [Updates: `33.7.1-jre`]
- `io.opencensus:opencensus-contrib-http-util 0.31.1`
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `junit:junit 4.13.2`
- `org.seleniumhq.selenium:selenium-server 4.0.0-alpha-2`
- `org.seleniumhq.selenium:selenium-chrome-driver 4.10.0` → [Updates: `4.49.0`]
- `org.eclipse.jetty:jetty-maven-plugin 9.4.51.v20230217` → [Updates: `9.4.58.v20250814`, `11.0.26`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]

bookshelf-standard/2-structured-data/pom.xml (13)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.cloud.sql:mysql-socket-factory 1.6.1` → [Updates: `1.13.1`, `1.13.1-SNAPSHOT`]
- `mysql:mysql-connector-java 8.0.30` → [Updates: `8.0.33`]
- `com.google.api-client:google-api-client-appengine 2.0.0` → [Updates: `2.9.1`]
- `com.google.appengine:appengine-api-1.0-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `javax.servlet:jsp-api 2.0` → [Updates: `2.0.public_draft`]
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `taglibs:standard 1.1.2`
- `com.google.guava:guava 33.1.0-jre` → [Updates: `33.7.1-jre`]
- `joda-time:joda-time 2.12.6` → [Updates: `2.14.3`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.11.0` → [Updates: `3.16.0`]

bookshelf-standard/3-binary-data/pom.xml (15)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.cloud.sql:mysql-socket-factory 1.6.1` → [Updates: `1.13.1`, `1.13.1-SNAPSHOT`]
- `mysql:mysql-connector-java 8.0.30` → [Updates: `8.0.33`]
- `com.google.api-client:google-api-client-appengine 2.0.0` → [Updates: `2.9.1`]
- `com.google.appengine:appengine-api-1.0-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `javax.servlet:jsp-api 2.0` → [Updates: `2.0.public_draft`]
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `taglibs:standard 1.1.2`
- `com.google.cloud:google-cloud-storage 2.23.0` → [Updates: `2.73.0`]
- `com.google.guava:guava 33.1.0-jre` → [Updates: `33.7.1-jre`]
- `joda-time:joda-time 2.12.6` → [Updates: `2.14.3`]
- `commons-fileupload:commons-fileupload 1.5` → [Updates: `1.6.0`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.11.0` → [Updates: `3.16.0`]

bookshelf-standard/4-auth/pom.xml (15)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.cloud.sql:mysql-socket-factory 1.6.1` → [Updates: `1.13.1`, `1.13.1-SNAPSHOT`]
- `mysql:mysql-connector-java 8.0.30` → [Updates: `8.0.33`]
- `com.google.api-client:google-api-client-appengine 2.0.0` → [Updates: `2.9.1`]
- `com.google.appengine:appengine-api-1.0-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `javax.servlet:jsp-api 2.0` → [Updates: `2.0.public_draft`]
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `taglibs:standard 1.1.2`
- `com.google.cloud:google-cloud-storage 2.23.0` → [Updates: `2.73.0`]
- `com.google.guava:guava 33.1.0-jre` → [Updates: `33.7.1-jre`]
- `joda-time:joda-time 2.12.6` → [Updates: `2.14.3`]
- `commons-fileupload:commons-fileupload 1.5` → [Updates: `1.6.0`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.11.0` → [Updates: `3.16.0`]

bookshelf-standard/5-logging/pom.xml (15)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `com.google.cloud.sql:mysql-socket-factory 1.6.1` → [Updates: `1.13.1`, `1.13.1-SNAPSHOT`]
- `mysql:mysql-connector-java 8.0.30` → [Updates: `8.0.33`]
- `com.google.api-client:google-api-client-appengine 2.0.0` → [Updates: `2.9.1`]
- `com.google.appengine:appengine-api-1.0-sdk 2.0.15` → [Updates: `2.0.39`, `5.1.0`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `javax.servlet:jsp-api 2.0` → [Updates: `2.0.public_draft`]
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `taglibs:standard 1.1.2`
- `com.google.cloud:google-cloud-storage 2.23.0` → [Updates: `2.73.0`]
- `com.google.guava:guava 33.1.0-jre` → [Updates: `33.7.1-jre`]
- `joda-time:joda-time 2.12.6` → [Updates: `2.14.3`]
- `commons-fileupload:commons-fileupload 1.5` → [Updates: `1.6.0`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.11.0` → [Updates: `3.16.0`]

bookshelf/1-cloud-run/pom.xml (13)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `com.google.cloud:google-cloud-firestore 3.13.2` → [Updates: `3.47.0`]
- `joda-time:joda-time 2.12.6` → [Updates: `2.14.3`]
- `com.google.guava:guava 33.1.0-jre` → [Updates: `33.7.1-jre`]
- `io.opencensus:opencensus-contrib-http-util 0.31.1`
- `jstl:jstl 1.2` → [Updates: `1.1.2`]
- `com.google.cloud:google-cloud-storage 2.23.0` → [Updates: `2.73.0`]
- `commons-fileupload:commons-fileupload 1.5` → [Updates: `1.6.0`]
- `commons-io:commons-io 2.13.0` → [Updates: `2.14.0`]
- `org.eclipse.jetty:jetty-maven-plugin 9.4.51.v20230217` → [Updates: `9.4.58.v20250814`, `11.0.26`]
- `com.google.cloud.tools:jib-maven-plugin 3.4.0` → [Updates: `3.5.2`]
- `org.apache.maven.plugins:maven-war-plugin 3.3.2` → [Updates: `3.5.1`]

gce/pom.xml (9)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `javax.servlet:jsp-api 2.0` → [Updates: `2.0.public_draft`]
- `junit:junit 4.13.2`
- `com.google.guava:guava 33.1.0-jre` → [Updates: `33.7.1-jre`]
- `org.seleniumhq.selenium:selenium-server 4.0.0-alpha-2`
- `org.seleniumhq.selenium:selenium-chrome-driver 4.10.0` → [Updates: `4.49.0`]
- `org.eclipse.jetty:jetty-maven-plugin 9.4.47.v20220610` → [Updates: `9.4.58.v20250814`, `11.0.26`]
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]

helloworld-jsp/pom.xml (4)

- `com.google.cloud.samples:shared-configuration 1.2.0` → [Updates: `1.2.2`]
- `javax.servlet:javax.servlet-api 4.0.1`
- `com.google.cloud.tools:appengine-maven-plugin 2.4.4` → [Updates: `2.8.7`]
- `org.eclipse.jetty:jetty-maven-plugin 9.4.51.v20230217` → [Updates: `9.4.58.v20250814`, `11.0.26`]

renovate-config (1)

renovate.json (1)

- `java 1.8` → [Updates: `25.0.4+101.0.LTS`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository