MaibornWolff / MaibornWolff/codecharta

Dependency Dashboard

Open
#2,443 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
529
Forks
56
Avg merge
7h 17m
Merged PRs (30d)
34

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

  • ⚠️ WARN: Package lookup failures

Deprecations / Replacements

[!WARNING]
The following dependencies are either deprecated or have replacements available.

Datasource Package Replacement PR?
npm @angular/animations Unavailable
npm @angular/platform-browser-dynamic Unavailable

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

  • fix(deps): update dependency com.github.everit-org.json-schema:org.everit.json.schema to v1.14.6
  • fix(deps): update dependency com.github.maibornwolff:treesitterexcavationsite to v0.12.0
  • fix(deps): update dependency io.github.oshai:kotlin-logging-jvm to v8.0.4
  • fix(deps): update dependency io.mockk:mockk to v1.14.11
  • fix(deps): update dependency org.slf4j:slf4j-simple to v2.0.19
  • chore(deps): update actions/checkout action to v6.1.0
  • chore(deps): update dependency jest-preset-angular to v16.2.0
  • chore(deps): update dependency org.cyclonedx.bom to v3.4.1
  • chore(deps): update dependency org.jlleitschuh.gradle.ktlint to v14.2.0
  • chore(deps): update dependency org.sonarqube to v7.5.0.8588
  • chore(deps): update node.js to v24.21.0
  • fix(deps): update dependency com.google.code.gson:gson to v2.14.0
  • fix(deps): update dependency org.jetbrains.kotlinx:kotlinx-coroutines-core to v1.11.0
  • fix(deps): update dependency org.jetbrains.kotlinx:kotlinx-serialization-json to v1.11.0
  • fix(deps): update dependency typescript-json-schema to v0.68.0
  • fix(deps): update junit-framework monorepo to v6.1.3 (org.junit.platform:junit-platform-launcher, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
  • fix(deps): update kotlin monorepo to v2.4.20 (org.jetbrains.kotlin.jvm, org.jetbrains.kotlin:kotlin-reflect, org.jetbrains.kotlin:kotlin-test)
  • fix(deps): update kotter to v1.4.0 (com.varabyte.kotterx:kotter-test-support-jvm, com.varabyte.kotter:kotter-jvm)
  • chore(deps): update actions/cache action to v6
  • chore(deps): update actions/checkout action to v7
  • chore(deps): update actions/setup-java action to v6
  • chore(deps): update actions/setup-node action to v7
  • chore(deps): update angular-cli monorepo to v22 (@angular/build, @angular/cli)
  • chore(deps): update commitlint monorepo to v21 (@commitlint/cli, @commitlint/config-conventional)
  • chore(deps): update dependency @electron/get to v5
  • chore(deps): update dependency @electron/packager to v20
  • chore(deps): update dependency badge-maker to v6
  • chore(deps): update dependency bestzip to v4
  • chore(deps): update dependency dependency-cruiser to v18
  • chore(deps): update dependency jest-preset-angular to v17
  • chore(deps): update dependency lint-staged to v17
  • chore(deps): update dependency marked to v18
  • chore(deps): update dependency typescript to v7
  • chore(deps): update docker/build-push-action action to v7
  • fix(deps): update angular monorepo to v22 (@angular/animations, @angular/compiler-cli, @angular/forms, @angular/platform-browser, @angular/platform-browser-dynamic, @angular/router)
  • fix(deps): update dependency org.json:json to v2026
  • fix(deps): update dependency pako to v3
  • fix(deps): update ngrx monorepo to v22 (@ngrx/effects, @ngrx/store)
  • chore(deps): lock file maintenance
  • πŸ” Create all rate-limited PRs at once πŸ”

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

  • chore(deps): update dependency java to v25

[!WARNING]
Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package MaibornWolff/secobserve_actions_templates).

Files affected: .github/workflows/check-licenses.yml


Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

  • chore(deps): update dependency @angular/common to v21.2.20 [security]
  • chore(deps): update dependency @angular/compiler to v21.2.20 [security]
  • chore(deps): update dependency @angular/core to v21.2.20 [security]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Detected Dependencies

docker-compose (1)
docker-compose.yml (1)
  • sonarqube 10.7.0-community
dockerfile (2)
analysis/Dockerfile (1)
  • sapmachine 25.0.2-jre-ubuntu β†’ [Updates: 25.0.4-jre-ubuntu]
visualization/Dockerfile (1)
  • nginx 1.29.5-alpine β†’ [Updates: 1.31.6-alpine]
github-actions (13)
.github/workflows/check-licenses.yml (9)
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • MaibornWolff/secobserve_actions_templates 2025@eacb7af59653b127f4f926aff7e4d50de6089c10
  • MaibornWolff/purl-patrol v1.6.6@7d1eb703de44cd8961c4e4d321670567d523ae3c
  • actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 β†’ [Updates: v6.5.0, v7.0.0]
  • actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd β†’ [Updates: v6.1.0, v7.0.1]
  • MaibornWolff/secobserve_actions_templates 2025@eacb7af59653b127f4f926aff7e4d50de6089c10
  • MaibornWolff/purl-patrol v1.6.6@7d1eb703de44cd8961c4e4d321670567d523ae3c
  • node 24
.github/workflows/deploy-github-pages.yml (4)
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • JamesIves/github-pages-deploy-action v4.8.0 β†’ [Updates: v4.9.0]
  • node 24
.github/workflows/ghcr-analysis.yml (5)
  • docker/login-action v3 β†’ [Updates: v4]
  • docker/login-action v3 β†’ [Updates: v4]
  • actions/checkout v6 β†’ [Updates: v7]
  • docker/login-action v3 β†’ [Updates: v4]
  • docker/login-action v3 β†’ [Updates: v4]
.github/workflows/merge-gatekeeper.yml (1)
  • upsidr/merge-gatekeeper v1
.github/workflows/prepare-release.yml (3)
  • actions/checkout v6 β†’ [Updates: v7]
  • oven-sh/setup-bun v2
  • peter-evans/create-pull-request v8
.github/workflows/release-analysis.yml (12)
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/upload-artifact v7
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/download-artifact v8
  • oven-sh/setup-bun v2
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/download-artifact v8
  • docker/login-action v3 β†’ [Updates: v4]
  • node 24
  • node 24
.github/workflows/release-visualization.yml (16)
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/upload-artifact v7
  • actions/upload-artifact v7
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/download-artifact v8
  • oven-sh/setup-bun v2
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/download-artifact v8
  • docker/login-action v3 β†’ [Updates: v4]
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/download-artifact v8
  • JamesIves/github-pages-deploy-action v4.8.0 β†’ [Updates: v4.9.0]
  • node 24
  • node 24
.github/workflows/staging-analysis.yml (5)
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • docker/login-action v3 β†’ [Updates: v4]
  • docker/build-push-action v6 β†’ [Updates: v7]
  • node 24
.github/workflows/staging-visualization.yml (6)
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • docker/login-action v3 β†’ [Updates: v4]
  • docker/build-push-action v6 β†’ [Updates: v7]
  • JamesIves/github-pages-deploy-action v4.8.0 β†’ [Updates: v4.9.0]
  • node 24
.github/workflows/test_analysis.yml (4)
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/setup-java v5.2.0 β†’ [Updates: v5.7.0, v6.0.1]
  • node 24
.github/workflows/test_format.yml (4)
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/cache v5 β†’ [Updates: v6]
  • node 24
.github/workflows/test_visualization.yml (13)
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/cache v5 β†’ [Updates: v6]
  • actions/upload-artifact v7
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/cache v5 β†’ [Updates: v6]
  • actions/upload-artifact v7
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/download-artifact v8
  • SonarSource/sonarcloud-github-action v5.0.0
  • node 24
  • node 24
.github/workflows/unpublish-release.yml (4)
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/checkout v6 β†’ [Updates: v7]
  • actions/checkout v6 β†’ [Updates: v7]
  • node 24
gradle (27)
analysis/analysers/AnalyserInterface/build.gradle.kts
analysis/analysers/exporters/CSVExporter/build.gradle.kts
analysis/analysers/filters/EdgeFilter/build.gradle.kts
analysis/analysers/filters/MergeFilter/build.gradle.kts
analysis/analysers/filters/StructureModifier/build.gradle.kts
analysis/analysers/importers/CodeMaatImporter/build.gradle.kts
analysis/analysers/importers/CoverageImporter/build.gradle.kts
analysis/analysers/importers/CSVImporter/build.gradle.kts
analysis/analysers/importers/DependaChartaImporter/build.gradle.kts
analysis/analysers/importers/SonarImporter/build.gradle.kts
analysis/analysers/importers/SourceMonitorImporter/build.gradle.kts
analysis/analysers/importers/TokeiImporter/build.gradle.kts
analysis/analysers/parsers/DomainLanguageParser/build.gradle.kts
analysis/analysers/parsers/GitLogParser/build.gradle.kts
analysis/analysers/parsers/RawTextParser/build.gradle.kts
analysis/analysers/parsers/SVNLogParser/build.gradle.kts
analysis/analysers/parsers/UnifiedParser/build.gradle.kts
analysis/analysers/tools/ConvertTool/build.gradle.kts
analysis/analysers/tools/InspectionTool/build.gradle.kts
analysis/analysers/tools/ValidationTool/build.gradle.kts
analysis/build.gradle.kts
analysis/ccsh/build.gradle.kts
analysis/dialogProvider/build.gradle.kts
analysis/gradle.properties
analysis/gradle/libs.versions.toml (35)
  • io.github.oshai:kotlin-logging-jvm 8.0.01 β†’ [Updates: 8.0.4]
  • org.jetbrains.kotlinx:kotlinx-coroutines-core 1.10.2 β†’ [Updates: 1.11.0]
  • org.junit.jupiter:junit-jupiter-api 6.0.3 β†’ [Updates: 6.1.3]
  • org.junit.jupiter:junit-jupiter-engine 6.0.3 β†’ [Updates: 6.1.3]
  • org.junit.jupiter:junit-jupiter-params 6.0.3 β†’ [Updates: 6.1.3]
  • org.junit.platform:junit-platform-launcher 6.0.3 β†’ [Updates: 6.1.3]
  • io.fastjson:boon 0.34
  • org.slf4j:slf4j-simple 2.0.17 β†’ [Updates: 2.0.19]
  • info.picocli:picocli 4.7.7
  • com.univocity:univocity-parsers 2.9.1
  • com.varabyte.kotter:kotter-jvm 1.2.1 β†’ [Updates: 1.4.0]
  • com.varabyte.kotterx:kotter-test-support-jvm 1.2.1 β†’ [Updates: 1.4.0]
  • org.jetbrains.kotlin:kotlin-test 2.3.10 β†’ [Updates: 2.4.20]
  • org.jetbrains.kotlin:kotlin-reflect 2.3.10 β†’ [Updates: 2.4.20]
  • org.assertj:assertj-core 3.27.7
  • io.mockk:mockk 1.14.9 β†’ [Updates: 1.14.11]
  • org.skyscreamer:jsonassert 1.5.3
  • org.apache.commons:commons-lang3 3.20.0
  • com.googlecode.juniversalchardet:juniversalchardet 1.0.3
  • io.reactivex.rxjava2:rxjava 2.2.21
  • org.glassfish.jersey.core:jersey-client 4.0.2
  • com.google.code.gson:gson 2.13.2 β†’ [Updates: 2.14.0]
  • jakarta.ws.rs:jakarta.ws.rs-api 4.0.0
  • org.wiremock:wiremock 3.13.2
  • org.json:json 20251224 β†’ [Updates: 20260814]
  • org.apache.commons:commons-text 1.15.0
  • com.github.everit-org.json-schema:org.everit.json.schema 1.14.4 β†’ [Updates: 1.14.6]
  • com.appmattus.crypto:cryptohash 1.0.2
  • com.github.MaibornWolff:TreeSitterExcavationSite v0.12.0 β†’ [Updates: 0.12.0]
  • net.pearx.kasechange:kasechange 1.4.1
  • org.jetbrains.kotlinx:kotlinx-serialization-json 1.7.3 β†’ [Updates: 1.11.0]
  • org.sonarqube 7.2.2.6593 β†’ [Updates: 7.5.0.8588]
  • org.jlleitschuh.gradle.ktlint 14.0.1 β†’ [Updates: 14.2.0]
  • org.jetbrains.kotlin.jvm 2.3.10 β†’ [Updates: 2.4.20]
  • org.cyclonedx.bom 3.2.0 β†’ [Updates: 3.4.1]
analysis/model/build.gradle.kts
analysis/settings.gradle.kts (1)
  • org.gradle.toolchains.foojay-resolver-convention 1.0.0
gradle-wrapper (1)
analysis/gradle/wrapper/gradle-wrapper.properties (1)
  • gradle 9.3.1 β†’ [Updates: 9.7.1]
mise (1)
mise.toml (2)
  • java 21 β†’ [Updates: 25]
  • node 24
nodenv (1)
visualization/.node-version (1)
  • node 24.14.0 β†’ [Updates: 24.21.0]
npm (4)
analysis/node-wrapper/package.json (3)
  • makeshift ^1.1.0
  • shelljs ^0.10.0
  • node >=22.19
gh-pages/package.json (5)
  • @astrojs/markdown-remark ^7.3.1
  • @astrojs/starlight ^0.42.0
  • astro ^7.3.2
  • sharp ^0.35.4
  • rehype-external-links ^3.0.0
package.json (7)
  • @biomejs/biome 2.4.4 β†’ [Updates: 2.5.13]
  • @commitlint/cli ^20.0.0 β†’ [Updates: ^21.0.0]
  • @commitlint/config-conventional ^20.0.0 β†’ [Updates: ^21.0.0]
  • badge-maker ^5.0.0 β†’ [Updates: ^6.0.0]
  • husky ^9.0.0
  • lint-staged ^16.0.0 β†’ [Updates: ^17.0.0]
  • node >=22.19
visualization/package.json (65)
  • @angular/animations ^21.1.2 β†’ [Updates: ^22.0.0]
  • @angular/common ^21.1.2 β†’ [Updates: ^21.1.2]
  • @angular/core ^21.1.2 β†’ [Updates: ^21.1.2]
  • @angular/forms ^21.2.8 β†’ [Updates: ^22.0.0]
  • @angular/platform-browser ^21.1.2 β†’ [Updates: ^22.0.0]
  • @angular/platform-browser-dynamic ^21.2.8 β†’ [Updates: ^22.0.0]
  • @angular/router ^21.2.8 β†’ [Updates: ^22.0.0]
  • @fortawesome/fontawesome-free ^7.0.0
  • @ngrx/effects ^21.1.0 β†’ [Updates: ^22.0.0]
  • @ngrx/store ^21.0.1 β†’ [Updates: ^22.0.0]
  • @tailwindcss/postcss ^4.2.2
  • @types/d3 ^7.4.3
  • ajv ^8.17.1
  • color-convert ^3.1.3
  • d3 ^7.9.0
  • d3-hierarchy ^3.1.2
  • dequal ^2.0.3
  • echarts 5.6.0 β†’ [Updates: 6.1.0]
  • echarts-wordcloud 2.1.0
  • electron 40.6.1 β†’ [Updates: 41.10.3]
  • fake-indexeddb ^6.2.5
  • fflate ^0.8.2
  • hotkeys-js ^4.0.3
  • html2canvas-pro ^2.0.2
  • idb ^8.0.3
  • ignore ^7.0.5
  • klona ^2.0.6
  • marked-mangle ^1.1.13
  • material-icons ^1.13.14
  • ngx-color ^10.1.0
  • pako ^2.1.0 β†’ [Updates: ^3.0.0]
  • qrcode ^1.5.4
  • rxjs ^7.5.1
  • safe-stable-stringify ^2.5.0
  • shelljs ^0.10.0
  • tailwindcss ^4.1.15
  • typescript-json-schema 0.67.1 β†’ [Updates: 0.68.0]
  • @angular/build ^21.2.7 β†’ [Updates: ^22.0.0]
  • @angular/cli ^21.2.7 β†’ [Updates: ^22.0.0]
  • @angular/compiler ^21.1.2 β†’ [Updates: ^21.1.2]
  • @angular/compiler-cli ^21.2.8 β†’ [Updates: ^22.0.0]
  • @cyclonedx/cyclonedx-npm ^4.2.1 β†’ [Updates: ^6.0.0]
  • @electron/get ^4.0.3 β†’ [Updates: ^5.0.0]
  • @electron/packager ^19.1.0 β†’ [Updates: ^20.0.0]
  • @playwright/test ^1.59.1
  • @testing-library/angular ^19.2.1
  • @testing-library/user-event ^14.6.1
  • @types/jest ^30.0.0
  • @types/node ^24.12.2
  • bestzip ^2.2.3 β†’ [Updates: ^4.0.0]
  • daisyui ^5.5.19
  • dependency-cruiser ^17.3.10 β†’ [Updates: ^18.0.0]
  • fast-xml-parser ^5.5.12
  • jest ^30.3.0
  • jest-canvas-mock ^2.5.2
  • jest-environment-jsdom ^30.3.0
  • jest-preset-angular 16.1.1 β†’ [Updates: 16.2.0, 17.0.0]
  • knip ^6.25.0
  • marked ^17.0.6 β†’ [Updates: ^18.0.0]
  • patch-package ^8.0.1
  • postcss ^8.5.9
  • typescript 5.9.3 β†’ [Updates: 7.0.2]
  • @rollup/rollup-linux-x64-gnu ^4.24.2
  • node >=22.19
  • yauzl ^3.4.0

  • Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up β€” it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

This is an automated Renovate dashboard rather than a scoped change. Start by reviewing the listed dependency updates and the affected .github/workflows/check-licenses.yml, then inspect the linked open pull requests and repository problems. Done would require a defined subset of updates to be reviewed and applied, with the relevant checks passing.

Written by the indexing model from the issue text.

Assessment

Tech stack
angular, docker, github-actions, java, kotlin, node.js, typescript
Domain
build-system, devops, tooling
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.