Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/INRIA/spoon).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/INRIA/spoon).

- ⚠️ WARN: Maven Central rate limiting detected despite Redis caching.

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] build(deps): lock file maintenance

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [build(deps): update plugin com.github.ben-manes.versions to v0.64.0](../pull/6907)
- [ ] [build(deps): update dependency java-jdk to v25](../pull/6906)
- [ ] [build(deps): update determinatesystems/flake-checker-action action to v14](../pull/6897)
- [ ] [build(deps): update determinatesystems/magic-nix-cache-action action to v15](../pull/6898)
- [ ] [build(deps): update determinatesystems/nix-installer-action action to v23](../pull/6899)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (1)

doc/jenkins/Dockerfile (1)

- `stackbrew/ubuntu 16.04@sha256:cd39646de5628c8188396c506fdc76dd94c7652a82439cc4318cfc05cc93fbb7`

github-actions (6)

.github/actions/setup-tests/action.yml (4)

- `DeterminateSystems/nix-installer-action v22@ef8a148080ab6020fd15196c2084a2eea5ff2d25` → [Updates: `v23`]
- `DeterminateSystems/magic-nix-cache-action v14@908b263ff629f4cc17666315b7fd3ec127c6244d` → [Updates: `v15`]
- `DeterminateSystems/flake-checker-action v13@de924abd783455e8429c858962b9e43062d19da1` → [Updates: `v14`]
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`

.github/workflows/jreleaser.yml (3)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/attest-build-provenance v4.2.2@4d101475d8b20a2381f78447822ac1eab6504dd8`
- `actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`

.github/workflows/qodana.yml (9)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `JetBrains/qodana-action v2026.2.1@10be11607eb323a180e2b76b26c9c5cdceac3e77`
- `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `JetBrains/qodana-action v2026.2.1@10be11607eb323a180e2b76b26c9c5cdceac3e77`
- `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `JetBrains/qodana-action v2026.2.1@10be11607eb323a180e2b76b26c9c5cdceac3e77`
- `github/codeql-action v4@b96794f015dfd88f77b49b1c93e0fa7110f94c63`

.github/workflows/sbom.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9`
- `slsa-framework/github-actions-demo v0.1@9474e92bbf825d5b4b46810fc9367dfc73429a2a`

.github/workflows/scorecards.yml (5)

- `step-security/harden-runner v2.21.1@e14015d583714f6e62063499dc959a02595150a1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63`

.github/workflows/tests.yml (10)

- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6@de7274f081f381c8f8158605e0321c36c376e2e6`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `java-jdk 17.0.20+101` → [Updates: `25.0.4+101.0.LTS`]

gradle (2)

spoon-dataflow/build.gradle (6)

- `se.patrikerdes.use-latest-versions 0.2.19`
- `com.github.ben-manes.versions 0.63.1` → [Updates: `0.64.0`]
- `com.github.johnrengelman.shadow 8.1.1`
- `commons-cli:commons-cli 1.11.0`
- `tools.aqua:z3-turnkey 4.14.1`
- `org.junit.jupiter:junit-jupiter 6.1.3`

spoon-dataflow/settings.gradle

gradle-wrapper (1)

spoon-dataflow/gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 9.7.1`

html (1)

doc/_includes/head.html (2)

- `jquery 4.0.0`
- `jquery-cookie 1.4.1`

maven (7)

pom.xml (20)

- `org.eclipse.jdt:org.eclipse.jdt.core 3.47.0`
- `com.martiansoftware:jsap 2.1`
- `org.slf4j:slf4j-api 2.0.19`
- `commons-io:commons-io 2.22.0`
- `org.apache.commons:commons-lang3 3.20.0`
- `org.tukaani:xz 1.12`
- `com.fasterxml.jackson.core:jackson-databind 2.22.2`
- `org.apache.commons:commons-compress 1.28.0`
- `org.jspecify:jspecify 1.0.1`
- `org.assertj:assertj-core 3.27.7`
- `com.google.guava:guava 33.7.1-jre`
- `ch.qos.logback:logback-classic 1.6.3`
- `com.mysema.querydsl:querydsl-core 3.7.4`
- `org.apache.maven.shared:maven-invoker 3.3.0`
- `javax.validation:validation-api 2.0.1.Final`
- `org.kohsuke.metainf-services:metainf-services 1.11`
- `javax.xml.bind:jaxb-api 2.3.1`
- `org.apache.maven.plugins:maven-enforcer-plugin 3.6.3`
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0`
- `com.diffplug.spotless:spotless-maven-plugin 3.10.2`

spoon-control-flow/pom.xml (3)

- `org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0`
- `fr.inria.gforge.spoon:spoon-core 11.5.0`
- `org.jgrapht:jgrapht-core 1.5.3`

spoon-decompiler/pom.xml (5)

- `fr.inria.gforge.spoon:spoon-core 11.5.0`
- `org.jboss.windup.decompiler.fernflower:fernflower 2.5.0.Final`
- `org.bitbucket.mstrobel:procyon-compilertools 0.6.0`
- `org.benf:cfr 0.152`
- `org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0`

spoon-javadoc/pom.xml (1)

- `org.assertj:assertj-core 3.27.7`

spoon-pom/pom.xml (35)

- `org.mockito:mockito-core 5.23.0`
- `org.junit.jupiter:junit-jupiter-engine 6.1.3`
- `org.junit.jupiter:junit-jupiter-params 6.1.3`
- `org.junit.platform:junit-platform-launcher 6.1.3`
- `org.mockito:mockito-junit-jupiter 5.23.0`
- `org.hamcrest:hamcrest 3.0`
- `org.assertj:assertj-core 3.27.7`
- `org.apache.maven.plugins:maven-jar-plugin 3.5.1`
- `org.kohsuke.metainf-services:metainf-services 1.11`
- `org.cyclonedx:cyclonedx-maven-plugin 2.9.3`
- `org.apache.maven.plugins:maven-antrun-plugin 3.2.0`
- `org.apache.maven.plugins:maven-assembly-plugin 3.8.0`
- `org.apache.maven.plugins:maven-clean-plugin 3.5.0`
- `org.apache.maven.plugins:maven-compiler-plugin 3.16.0`
- `org.apache.maven.plugins:maven-dependency-plugin 3.11.0`
- `org.apache.maven.plugins:maven-deploy-plugin 3.2.0`
- `org.apache.maven.plugins:maven-install-plugin 3.2.0`
- `org.apache.maven.plugins:maven-javadoc-plugin 3.12.0`
- `org.apache.maven.plugins:maven-project-info-reports-plugin 3.9.0`
- `org.apache.maven.plugins:maven-release-plugin 3.3.1`
- `org.apache.maven.plugins:maven-resources-plugin 3.5.0`
- `org.apache.maven.plugins:maven-site-plugin 3.22.0`
- `org.apache.maven.plugins:maven-surefire-plugin 3.6.0`
- `com.mycila:license-maven-plugin 5.1.2`
- `org.jacoco:jacoco-maven-plugin 0.8.15`
- `org.eluder.coveralls:coveralls-maven-plugin 4.3.0`
- `javax.xml.bind:jaxb-api 2.3.1`
- `org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0`
- `org.apache.maven.wagon:wagon-ssh 3.5.3`
- `org.apache.maven.plugins:maven-source-plugin 3.4.0`
- `org.apache.maven.plugins:maven-gpg-plugin 3.2.8`
- `org.apache.maven.plugins:maven-deploy-plugin 3.2.0`
- `org.apache.maven.plugins:maven-source-plugin 3.4.0`
- `org.apache.maven.plugins:maven-deploy-plugin 3.2.0`
- `org.jacoco:jacoco-maven-plugin 0.8.15`

spoon-smpl/pom.xml (3)

- `org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0`
- `fr.inria.gforge.spoon:spoon-core 11.5.0`
- `fr.inria.gforge.spoon:spoon-control-flow 0.0.2-SNAPSHOT`

spoon-visualisation/pom.xml (12)

- `org.apache.maven.plugins:maven-shade-plugin 3.6.2`
- `org.openjfx:javafx-maven-plugin 0.0.8`
- `io.github.interacto:interacto-javafx 4.3.1`
- `fr.inria.gforge.spoon:spoon-core 11.5.0`
- `org.openjfx:javafx-base 28-ea+7`
- `org.openjfx:javafx-graphics 28-ea+7`
- `org.openjfx:javafx-controls 28-ea+7`
- `org.openjfx:javafx-fxml 28-ea+7`
- `org.jetbrains:annotations 26.1.0`
- `org.junit.jupiter:junit-jupiter-engine 6.1.3`
- `org.testfx:testfx-junit5 4.0.18`
- `org.testfx:openjfx-monocle 21.0.2`

nix (1)

flake.nix (1)

- `nixpkgs nixos-unstable`

npm (1)

doc/_release/changelog_generator/package.json (2)

- `git-log-parser ^1.2.0`
- `through2 ^5.0.0`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository