OWASP / OWASP/wrongsecrets

Dependency Dashboard

Open
#1,715 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
HTML
Stars
1.5k
Forks
625
Avg merge
14h 21m
Merged PRs (30d)
44

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

[!WARNING]
The following dependencies are either deprecated or have replacements available.

Datasource Package Replacement PR?
maven org.jruby:jruby-complete Unavailable

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • Update dependency @babel/eslint-parser to v7.29.9
  • Update ghcr.io/devcontainers/features/docker-in-docker Docker tag to v4.1.1
  • Update go (github.com/mattn/go-zglob, github.com/ulikunitz/xz)
  • Update aws-java-sdk-v2 monorepo to v2.55.1 (software.amazon.awssdk:ssm, software.amazon.awssdk:sts)
  • Update dependency com.google.cloud:libraries-bom to v26.88.1
  • Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
  • Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
  • Update dependency OWASP/wrongsecrets-binaries to v0.3.0
  • Update dependency terraform to v1.16.3
  • Update docker/dockerfile Docker tag to v1.27
  • Update pre-commit hook antonbabenko/pre-commit-terraform to v1.109.1
  • Update spring security to v7.1.1 (org.springframework.security:spring-security-test, org.springframework.security:spring-security-web, org.springframework.security:spring-security-config)
  • Update Terraform azurerm to v4.81.0
  • Update terraform-aws (aws, terraform-aws-modules/eks/aws, terraform-aws-modules/vpc/aws)
  • Update terraform-gcp to ~> 7.46.0 (google, google-beta)
  • Update azure/setup-helm action to v5
  • Update bellsoft/liberica-openjre-debian Docker tag to v27
  • Update dependency @babel/preset-env to v8
  • Update dependency @commitlint/config-conventional to v21
  • Update dependency com.puppycrawl.tools:checkstyle to v14
  • Update dependency javascript-obfuscator to v5
  • Update dependency nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect to v4
  • Update dependency org.cyclonedx:cyclonedx-core-java to v13
  • Update dependency org.owasp:dependency-check-maven to v13
  • Update dependency org.webjars:datatables to v3
  • Update dependency org.webjars:jquery to v4
  • Update Docker Actions (major) (docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
  • Update eslint (major) (eslint, eslint-plugin-cypress, eslint-plugin-mocha)
  • Update GitHub Actions (major) (actions/cache, actions/configure-pages, actions/deploy-pages, actions/github-script, actions/setup-java, actions/setup-node, actions/setup-python, actions/upload-artifact, actions/upload-pages-artifact)
  • Update go (major) (github.com/apparentlymart/go-textseg/v15, github.com/gruntwork-io/terratest)
  • Update hashicorp/setup-terraform action to v4
  • Update pre-commit (major) (eslint/eslint, psf/black, renovatebot/pre-commit-hooks)
  • Update Terraform azurerm to v5
  • Update terraform-gcp to v8 (google, google-beta)
  • Update testcontainers-java monorepo to v2 (org.testcontainers:testcontainers, org.testcontainers:testcontainers-bom)
  • Update ubuntu Docker tag to v26
  • πŸ” Create all awaiting schedule PRs at once πŸ”

Detected Dependencies

devcontainer (1)
.devcontainer/devcontainer.json (3)
  • ghcr.io/owasp/wrongsecrets-devcontainer 26-resolute
  • ghcr.io/devcontainers/features/common-utils 2
  • ghcr.io/devcontainers/features/docker-in-docker 4.1.0 β†’ [Updates: 4.1.1]
dockerfile (9)
.devcontainer/Dockerfile (1)
  • eclipse-temurin 26-jdk-resolute
Dockerfile (2)
  • bellsoft/liberica-openjre-debian 26-cds β†’ [Updates: 27-cds]
  • eclipse-temurin 26-jre-alpine
Dockerfile_webdesktop
Dockerfile_webdesktopk8s
Dockerfile.web (1)
  • jeroenwillemsen/wrongsecrets 1.14.0RC6-no-vault
k8s/challenge53/Dockerfile (1)
  • ubuntu plucky-20251001 β†’ [Updates: 26.04]
k8s/challenge53/Dockerfile.debug (1)
  • ubuntu plucky-20251001 β†’ [Updates: 26.04]
src/main/resources/challenges/challenge-51/Dockerfile_challenge51 (1)
  • docker/dockerfile 1.26 β†’ [Updates: 1.27]
src/main/resources/challenges/challenge-64/Dockerfile_challenge64 (2)
  • docker/dockerfile 1.26 β†’ [Updates: 1.27]
  • alpine 3.24
github-actions (25)
.github/workflows/build-devcontainer.yml (9)
  • actions/checkout v7
  • docker/setup-buildx-action v4
  • docker/login-action v4
  • docker/build-push-action v7
  • devcontainers/ci v0.3
  • aquasecurity/trivy-action v0.36.0
  • github/codeql-action v4
  • docker/setup-buildx-action v4
  • docker/login-action v4
.github/workflows/challenge13.yml (1)
  • actions/checkout v7
.github/workflows/codeclimate_standalone.yml (3)
  • actions/checkout v7
  • erzz/codeclimate-standalone v0.0.5
  • actions/upload-artifact v4 β†’ [Updates: v7]
.github/workflows/codeql-analysis.yml (5)
  • actions/checkout v7
  • github/codeql-action v4
  • actions/setup-java v5 β†’ [Updates: v6]
  • github/codeql-action v4
  • java-jdk 26
.github/workflows/container_test.yml (5)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/upload-artifact v4 β†’ [Updates: v7]
  • actions/checkout v7
  • java-jdk 26
.github/workflows/container-alts-test.yml (1)
  • actions/checkout v7
.github/workflows/dast-zap-test.yml (4)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • zaproxy/action-baseline v0.15.0
  • java-jdk 26
.github/workflows/desktop-container-publish.yml (7)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • docker/setup-buildx-action v3 β†’ [Updates: v4]
  • docker/login-action v3 β†’ [Updates: v4]
  • docker/metadata-action v5 β†’ [Updates: v6]
  • docker/build-push-action v6 β†’ [Updates: v7]
  • java-jdk 26
.github/workflows/github-pages-preview.yml (12)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/configure-pages v5 β†’ [Updates: v6]
  • actions/upload-pages-artifact v4 β†’ [Updates: v5]
  • actions/deploy-pages v4 β†’ [Updates: v5]
  • actions/github-script v8 β†’ [Updates: v9]
  • actions/checkout v7
  • actions/configure-pages v5 β†’ [Updates: v6]
  • actions/upload-pages-artifact v4 β†’ [Updates: v5]
  • actions/deploy-pages v4 β†’ [Updates: v5]
  • actions/github-script v8 β†’ [Updates: v9]
  • java-jdk 26
.github/workflows/heroku_tests.yml (2)
  • actions/checkout v7
  • actions/upload-artifact v4 β†’ [Updates: v7]
.github/workflows/java_swagger_doc.yml (5)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/upload-artifact v4 β†’ [Updates: v7]
  • actions/upload-artifact v4 β†’ [Updates: v7]
  • java-jdk 26
.github/workflows/link_checker.yml (2)
  • actions/checkout v7
  • lycheeverse/lychee-action v2.9.0
.github/workflows/main.yml (10)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/upload-artifact v4 β†’ [Updates: v7]
  • java-jdk 26
  • java-jdk 26
  • java-jdk 26
.github/workflows/master-container-publish.yml (7)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • docker/setup-buildx-action v3 β†’ [Updates: v4]
  • docker/login-action v3 β†’ [Updates: v4]
  • docker/metadata-action v5 β†’ [Updates: v6]
  • docker/build-push-action v6 β†’ [Updates: v7]
  • java-jdk 26
.github/workflows/minikube-k8s-test.yml (2)
  • actions/checkout v7
  • medyagh/setup-minikube master
.github/workflows/minikube-vault-test.yml (9)
  • actions/checkout v7
  • eLco/setup-vault v1.0.4
  • medyagh/setup-minikube master
  • azure/setup-helm v4 β†’ [Updates: v5]
  • actions/checkout v7
  • eLco/setup-vault v1.0.4
  • medyagh/setup-minikube master
  • azure/setup-helm v4 β†’ [Updates: v5]
  • actions/upload-artifact v4 β†’ [Updates: v7]
.github/workflows/pr-preview.yml (19)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • docker/setup-buildx-action v3 β†’ [Updates: v4]
  • docker/login-action v3 β†’ [Updates: v4]
  • docker/metadata-action v5 β†’ [Updates: v6]
  • docker/build-push-action v6 β†’ [Updates: v7]
  • actions/upload-artifact v4 β†’ [Updates: v7]
  • actions/github-script v8 β†’ [Updates: v9]
  • actions/checkout v7
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/upload-artifact v4 β†’ [Updates: v7]
  • actions/github-script v8 β†’ [Updates: v9]
  • java-jdk 26
  • java-jdk 26
  • java-jdk 26
  • node 26
.github/workflows/pre-commit.yml (14)
  • actions/checkout v7
  • actions/setup-python v6 β†’ [Updates: v7]
  • psf/black stable
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/cache v4 β†’ [Updates: v6]
  • hashicorp/setup-terraform v3 β†’ [Updates: v4]
  • terraform-linters/setup-tflint v6
  • pre-commit/action v3.0.1
  • pre-commit-ci/lite-action v1.1.0
  • python 3.14
  • node 26
  • java-jdk 26
  • terraform 1.9.8 β†’ [Updates: v1.16.3]
.github/workflows/project-management.yml (1)
  • boundfoxstudios/action-unassign-contributor-after-days-of-inactivity main
.github/workflows/scanner-comparison.yml (15)
  • actions/checkout v7
  • actions/checkout v7
  • actions/checkout v7
  • actions/setup-python v6 β†’ [Updates: v7]
  • actions/checkout v7
  • actions/checkout v7
  • actions/setup-python v6 β†’ [Updates: v7]
  • actions/checkout v7
  • actions/setup-python v6 β†’ [Updates: v7]
  • actions/checkout v7
  • actions/setup-python v6 β†’ [Updates: v7]
  • python 3.14
  • python 3.14
  • python 3.14
  • python 3.14
.github/workflows/scanners.yml (2)
  • actions/checkout v7
  • trufflesecurity/trufflehog main
.github/workflows/sort-contributors-go.yml (3)
  • actions/checkout v7
  • actions/setup-go v7
  • go 1.27.1
.github/workflows/terraform.yml (3)
  • actions/checkout v7
  • hashicorp/setup-terraform v3 β†’ [Updates: v4]
  • terraform 1.9.8 β†’ [Updates: v1.16.3]
.github/workflows/version-sync-check.yml (4)
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/github-script v8 β†’ [Updates: v9]
  • java-jdk 26
.github/workflows/visual-diff.yml (10)
  • actions/checkout v7
  • actions/checkout v7
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/setup-java v5 β†’ [Updates: v6]
  • actions/setup-node v6 β†’ [Updates: v7]
  • actions/upload-artifact v4 β†’ [Updates: v7]
  • actions/github-script v8 β†’ [Updates: v9]
  • java-jdk 26
  • java-jdk 26
  • node 26
gomod (4)
aws/go.mod (37)
  • go 1.26.8
  • github.com/gruntwork-io/terratest v0.56.0 β†’ [Updates: v1.0.1]
  • github.com/agext/levenshtein v1.2.3
  • github.com/apparentlymart/go-textseg/v15 v15.0.0 β†’ [Updates: v17.0.1]
  • github.com/apparentlymart/go-textseg/v17 v17.0.1
  • github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
  • github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-getter/v2 v2.2.4
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-safetemp v1.0.0
  • github.com/hashicorp/go-version v1.9.0
  • github.com/hashicorp/hcl/v2 v2.25.0
  • github.com/hashicorp/terraform-json v0.28.0
  • github.com/jinzhu/copier v0.4.0
  • github.com/klauspost/compress v1.20.0
  • github.com/kr/pretty v0.3.1
  • github.com/mattn/go-zglob v0.0.7 β†’ [Updates: v0.0.8]
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/go-testing-interface v1.14.1
  • github.com/mitchellh/go-wordwrap v1.0.1
  • github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
  • github.com/rogpeppe/go-internal v1.16.0
  • github.com/stretchr/testify v1.12.1
  • github.com/tmccombs/hcl2json v0.6.9
  • github.com/ulikunitz/xz v0.5.16 β†’ [Updates: v0.5.17]
  • github.com/zclconf/go-cty v1.19.0
  • go.yaml.in/yaml/v3 v3.0.5
  • golang.org/x/crypto v0.57.0
  • golang.org/x/mod v0.41.0
  • golang.org/x/sync v0.23.0
  • golang.org/x/sys v0.48.0
  • golang.org/x/text v0.42.0
  • golang.org/x/tools v0.50.0
  • gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
  • gopkg.in/yaml.v3 v3.0.1
azure/go.mod (37)
  • go 1.26.8
  • github.com/gruntwork-io/terratest v0.56.0 β†’ [Updates: v1.0.1]
  • github.com/agext/levenshtein v1.2.3
  • github.com/apparentlymart/go-textseg/v15 v15.0.0 β†’ [Updates: v17.0.1]
  • github.com/apparentlymart/go-textseg/v17 v17.0.1
  • github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
  • github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-getter/v2 v2.2.4
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-safetemp v1.0.0
  • github.com/hashicorp/go-version v1.9.0
  • github.com/hashicorp/hcl/v2 v2.25.0
  • github.com/hashicorp/terraform-json v0.28.0
  • github.com/jinzhu/copier v0.4.0
  • github.com/klauspost/compress v1.20.0
  • github.com/kr/pretty v0.3.1
  • github.com/mattn/go-zglob v0.0.7 β†’ [Updates: v0.0.8]
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/go-testing-interface v1.14.1
  • github.com/mitchellh/go-wordwrap v1.0.1
  • github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
  • github.com/rogpeppe/go-internal v1.16.0
  • github.com/stretchr/testify v1.12.1
  • github.com/tmccombs/hcl2json v0.6.9
  • github.com/ulikunitz/xz v0.5.16 β†’ [Updates: v0.5.17]
  • github.com/zclconf/go-cty v1.19.0
  • go.yaml.in/yaml/v3 v3.0.5
  • golang.org/x/crypto v0.57.0
  • golang.org/x/mod v0.41.0
  • golang.org/x/sync v0.23.0
  • golang.org/x/sys v0.48.0
  • golang.org/x/text v0.42.0
  • golang.org/x/tools v0.50.0
  • gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
  • gopkg.in/yaml.v3 v3.0.1
gcp/go.mod (38)
  • go 1.26.8
  • github.com/gruntwork-io/terratest v0.56.0 β†’ [Updates: v1.0.1]
  • github.com/agext/levenshtein v1.2.3
  • github.com/apparentlymart/go-textseg/v15 v15.0.0 β†’ [Updates: v17.0.1]
  • github.com/apparentlymart/go-textseg/v17 v17.0.1
  • github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
  • github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-getter/v2 v2.2.4
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-safetemp v1.0.0
  • github.com/hashicorp/go-version v1.9.0
  • github.com/hashicorp/hcl/v2 v2.25.0
  • github.com/hashicorp/terraform-json v0.28.0
  • github.com/jinzhu/copier v0.4.0
  • github.com/klauspost/compress v1.20.0
  • github.com/kr/pretty v0.3.1
  • github.com/mattn/go-zglob v0.0.7 β†’ [Updates: v0.0.8]
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/go-testing-interface v1.14.1
  • github.com/mitchellh/go-wordwrap v1.0.1
  • github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2@5d4384ee4fb2
  • github.com/rogpeppe/go-internal v1.16.0
  • github.com/stretchr/testify v1.12.1
  • github.com/tmccombs/hcl2json v0.6.9
  • github.com/ulikunitz/xz v0.5.16 β†’ [Updates: v0.5.17]
  • github.com/zclconf/go-cty v1.19.0
  • go.yaml.in/yaml/v3 v3.0.5
  • golang.org/x/crypto v0.57.0
  • golang.org/x/mod v0.41.0
  • golang.org/x/net v0.59.0
  • golang.org/x/sync v0.23.0
  • golang.org/x/sys v0.48.0
  • golang.org/x/text v0.42.0
  • golang.org/x/tools v0.50.0
  • gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c@10cb98267c6c
  • gopkg.in/yaml.v3 v3.0.1
scripts/sort_contibutors/go.mod (1)
  • go 1.27.1
maven (1)
pom.xml (52)
  • org.springframework.boot:spring-boot-starter-parent 4.1.1
  • org.springframework.cloud:spring-cloud-dependencies 2025.1.3
  • org.testcontainers:testcontainers-bom 1.21.4 β†’ [Updates: 2.0.5]
  • com.google.cloud:libraries-bom 26.87.0 β†’ [Updates: 26.88.1]
  • com.azure.spring:spring-cloud-azure-dependencies 7.4.0
  • org.projectlombok:lombok 1.18.48
  • nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.4.0 β†’ [Updates: 4.0.1]
  • org.thymeleaf.extras:thymeleaf-extras-springsecurity6 3.1.5.RELEASE
  • org.springframework.security:spring-security-config 7.0.6 β†’ [Updates: 7.1.1]
  • org.springframework.security:spring-security-web 7.0.6 β†’ [Updates: 7.1.1]
  • org.springframework.security:spring-security-test 7.0.6 β†’ [Updates: 7.1.1]
  • org.testcontainers:testcontainers 1.21.4 β†’ [Updates: 2.0.5]
  • software.amazon.awssdk:sts 2.54.18 β†’ [Updates: 2.55.1]
  • software.amazon.awssdk:ssm 2.54.18 β†’ [Updates: 2.55.1]
  • org.linguafranca.pwdb:KeePassJava2 2.2.4
  • org.asciidoctor:asciidoctorj-api 3.0.1
  • org.asciidoctor:asciidoctorj 3.0.1
  • org.jruby:jruby-complete 10.1.1.0 β†’ [Updates: 10.1.1.0]
  • org.jruby:jruby 10.1.1.0
  • org.jruby:jruby-stdlib 10.1.1.0
  • org.jruby:jruby-base 10.1.1.0
  • org.webjars:bootstrap 5.3.8
  • org.webjars.npm:github-buttons 2.14.1
  • org.webjars:datatables 2.3.8 β†’ [Updates: 3.0.4]
  • org.webjars:jquery 3.7.1 β†’ [Updates: 4.0.0]
  • org.springdoc:springdoc-openapi-starter-webmvc-ui 3.1.1
  • uk.org.webcompere:system-stubs-jupiter 2.1.8
  • io.gatling.highcharts:gatling-charts-highcharts 3.15.1
  • org.cyclonedx:cyclonedx-core-java 12.2.0 β†’ [Updates: 13.2.0]
  • org.owasp:dependency-check-maven 12.2.2 β†’ [Updates: 13.0.0]
  • com.tngtech.archunit:archunit-junit5 1.5.0
  • com.github.spotbugs:spotbugs-annotations 4.10.4
  • io.github.wimdeblauwe:testcontainers-cypress 1.10.0
  • org.springframework.vault:spring-vault-core 4.1.0
  • org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
  • com.puppycrawl.tools:checkstyle 13.11.0 β†’ [Updates: 14.1.0]
  • com.github.spotbugs:spotbugs-maven-plugin 4.10.4.1
  • com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
  • com.github.spotbugs:spotbugs 4.10.4
  • org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
  • org.asciidoctor:asciidoctor-maven-plugin 3.2.0
  • org.cyclonedx:cyclonedx-maven-plugin 2.9.3
  • org.owasp:dependency-check-maven 12.2.2 β†’ [Updates: 13.0.0]
  • com.github.eirslett:frontend-maven-plugin 2.0.2
  • org.springdoc:springdoc-openapi-maven-plugin 1.5
  • org.codehaus.mojo:exec-maven-plugin 3.6.4
  • org.apache.maven.plugins:maven-compiler-plugin 3.15.0 β†’ [Updates: 3.16.0]
  • org.codehaus.mojo:tidy-maven-plugin 1.4.1
  • com.diffplug.spotless:spotless-maven-plugin 3.10.2
  • io.gatling:gatling-maven-plugin 4.21.12
  • org.apache.maven.plugins:maven-dependency-plugin 3.11.0
  • org.apache.maven.plugins:maven-surefire-plugin 3.5.6 β†’ [Updates: 3.6.0]
maven-wrapper (3)
.mvn/wrapper/maven-wrapper.properties (1)
  • maven 3.9.16
mvnw (1)
  • maven-wrapper 3.3.4
mvnw.cmd (1)
  • maven-wrapper 3.3.4
npm (2)
js/package.json (4)
  • minimatch >=10.0.1
  • minimatch >=10.0.1
  • javascript-obfuscator ^4.1.1 β†’ [Updates: ^5.0.0]
  • node >=26.0.0
package.json (10)
  • @babel/eslint-parser ^7.25.9 β†’ [Updates: ^7.25.9]
  • @babel/preset-env ^7.26.0 β†’ [Updates: ^8.0.0]
  • @commitlint/config-conventional ^20.0.0 β†’ [Updates: ^21.0.0]
  • @eslint/eslintrc ^3.1.0
  • eslint ^9.11.1 β†’ [Updates: ^10.0.0]
  • eslint-plugin-chai-friendly ^1.0.1
  • eslint-plugin-cypress ^5.0.0 β†’ [Updates: ^7.0.0]
  • eslint-plugin-mocha ^11.0.0 β†’ [Updates: ^12.0.0]
  • globals ^17.0.0
  • node >=26.0.0
pre-commit (1)
.pre-commit-config.yaml (7)
  • renovatebot/pre-commit-hooks 42.95.1 β†’ [Updates: 44.103.2]
  • eslint/eslint v9.39.5 β†’ [Updates: v10.11.0]
  • pre-commit/pre-commit-hooks v6.0.0
  • antonbabenko/pre-commit-terraform v1.108.1 β†’ [Updates: v1.109.1]
  • alessandrojcm/commitlint-pre-commit-hook v9.26.0
  • ejba/pre-commit-maven v0.3.4
  • psf/black 25.12.0 β†’ [Updates: 26.5.1]
regex (16)
.devcontainer/Dockerfile (1)
  • eclipse-temurin 26-jdk-resolute
.github/scripts/docker-create.sh (1)
  • OWASP/wrongsecrets-binaries 0.2.1 β†’ [Updates: v0.3.0]
.github/workflows/codeql-analysis.yml (1)
  • node 26
.github/workflows/container_test.yml (1)
  • node 26
.github/workflows/dast-zap-test.yml (1)
  • node 26
.github/workflows/desktop-container-publish.yml (1)
  • node 26
.github/workflows/github-pages-preview.yml (1)
  • node 26
.github/workflows/java_swagger_doc.yml (1)
  • node 26
.github/workflows/main.yml (3)
  • node 26
  • node 26
  • node 26
.github/workflows/master-container-publish.yml (1)
  • node 26
.github/workflows/pr-preview.yml (4)
  • node 26
  • node 26
  • node 26
  • node 26
.github/workflows/pre-commit.yml (2)
  • node 26
  • node 26
.github/workflows/scanner-comparison.yml
.github/workflows/version-sync-check.yml (1)
  • node 26
.github/workflows/visual-diff.yml (3)
  • node 26
  • node 26
  • node 26
Dockerfile (2)
  • bellsoft/liberica-openjre-debian 26-cds β†’ [Updates: 27-cds]
  • eclipse-temurin 26-jre-alpine
terraform (11)
aws/irsa.tf (1)
  • terraform-aws-modules/iam/aws ~> 6.0
aws/main.tf (2)
  • terraform-aws-modules/eks/aws 21.15.1 β†’ [Updates: 21.25.1]
  • terraform-aws-modules/vpc/aws ~> 6.6.0 β†’ [Updates: ~> 6.7.0]
aws/shared-state/main.tf (2)
  • aws ~> 6.0 β†’ [Updates: ~> 6.0]
  • hashicorp/terraform ~> 1.1
aws/versions.tf (4)
  • aws ~> 6.34 β†’ [Updates: ~> 6.34]
  • http ~> 3.6.0
  • random ~> 3.9.0
  • hashicorp/terraform ~> 1.6, >= 1.6
azure/main.tf
azure/providers.tf
azure/shared-state/main.tf (3)
  • azurerm ~> 4.3 β†’ [Updates: ~> 4.3, ~> 5.0]
  • random ~> 3.0
  • hashicorp/terraform ~> 1.1
azure/versions.tf (4)
  • azurerm ~> 4.73.0 β†’ [Updates: ~> 4.81.0, ~> 5.6.0]
  • http ~> 3.6.0
  • random ~> 3.9.0
  • hashicorp/terraform ~> 1.1
gcp/main.tf
gcp/shared-state/main.tf (3)
  • google ~> 7.0 β†’ [Updates: ~> 7.0, ~> 8.0]
  • random ~> 3.0
  • hashicorp/terraform ~> 1.1
gcp/versions.tf (5)
  • google ~> 7.21.0 β†’ [Updates: ~> 7.46.0, ~> 8.3.0]
  • google-beta ~> 7.21.0 β†’ [Updates: ~> 7.46.0, ~> 8.3.0]
  • http ~> 3.6.0
  • random ~> 3.9.0
  • hashicorp/terraform ~> 1.1
  • Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up β€” it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The dashboard is generated by Renovate and has no single change target. Start by reviewing the unchecked entries and their referenced files, including .github/workflows, Dockerfiles, and .devcontainer/devcontainer.json; done would require selecting updates, validating compatibility, and passing the relevant checks.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, azure, babel, docker, eslint, gcp, github-actions, go, helm, java, javascript, kubernetes, python, spring, terraform
Domain
build-system, ci-cd, cloud, devops, infrastructure
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.