Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/apollographql/federation-jvm-spring-example).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update ghcr.io/apollographql/router docker tag to v1.61.13
- [ ] chore(deps): update ghcr.io/apollographql/router docker tag to v2
- [ ] chore(deps): update plugin org.springframework.boot to v4
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency secops to v2.0.9](../pull/97)
- [ ] [chore(deps): update plugin io.spring.dependency-management to v1.1.7](../pull/72)
- [ ] [chore(deps): update gradle to v8.14.5](../pull/50)
- [ ] [chore(deps): update plugin org.springframework.boot to v3.5.16](../pull/83)
- [ ] [chore(deps): update actions/checkout action to v7](../pull/99)
- [ ] [chore(deps): update actions/setup-java action to v6](../pull/101)
- [ ] [chore(deps): update github artifact actions (major)](../pull/78) (`actions/download-artifact`, `actions/upload-artifact`)
- [ ] [chore(deps): update gradle to v9](../pull/89)
- [ ] [chore(deps): update gradle/gradle-build-action action to v3](../pull/79)
- [ ] [chore(deps): update gradle/wrapper-validation-action action to v3](../pull/81)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

circleci (1)

.circleci/config.yml (1)

- `secops 2.0.7` → [Updates: `2.0.9`]

docker-compose (1)

docker-compose.yaml (1)

- `ghcr.io/apollographql/router v1.32.0` → [Updates: `v1.61.13`, `v2.17.0`]

dockerfile (2)

products-subgraph/Dockerfile (1)

- `openjdk 17`

reviews-subgraph/Dockerfile (1)

- `openjdk 17`

github-actions (1)

.github/workflows/continuous-integration.yaml (16)

- `actions/checkout v3` → [Updates: `v7`]
- `gradle/wrapper-validation-action v1` → [Updates: `v3`]
- `actions/setup-java v3` → [Updates: `v6`]
- `gradle/gradle-build-action v2` → [Updates: `v3`]
- `actions/upload-artifact v3` → [Updates: `v7`]
- `actions/checkout v3` → [Updates: `v7`]
- `gradle/wrapper-validation-action v1` → [Updates: `v3`]
- `actions/setup-java v3` → [Updates: `v6`]
- `gradle/gradle-build-action v2` → [Updates: `v3`]
- `actions/upload-artifact v3` → [Updates: `v7`]
- `actions/checkout v3` → [Updates: `v7`]
- `actions/upload-artifact v3` → [Updates: `v7`]
- `actions/checkout v3` → [Updates: `v7`]
- `actions/download-artifact v3` → [Updates: `v8`]
- `actions/download-artifact v3` → [Updates: `v8`]
- `actions/download-artifact v3` → [Updates: `v8`]

gradle (4)

gradle.properties

products-subgraph/build.gradle.kts (2)

- `org.springframework.boot 3.3.0` → [Updates: `3.5.16`, `4.1.1`]
- `io.spring.dependency-management 1.1.3` → [Updates: `1.1.7`]

reviews-subgraph/build.gradle.kts (2)

- `org.springframework.boot 3.3.0` → [Updates: `3.5.16`, `4.1.1`]
- `io.spring.dependency-management 1.1.3` → [Updates: `1.1.7`]

settings.gradle.kts

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 8.1` → [Updates: `8.14.5`, `9.7.1`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Renovate Dependency Dashboard and review .circleci/config.yml, docker-compose.yaml, both subgraph Dockerfiles, .github/workflows/continuous-integration.yaml, the two build.gradle.kts files, and gradle/wrapper/gradle-wrapper.properties. Compare the listed updates with the already-open pull requests and repository checks; done means the selected dependency updates are applied and CI remains passing.

Written by the indexing model from the issue text.