Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/depscloud/depscloud).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/depscloud/depscloud).

- ⚠️ WARN: Found unsupported npm lockfile version
- ⚠️ WARN: Package lookup failures

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | `@types/cheerio` |  |
| npm | [prom-client](https://redirect.github.com/siimon/prom-client) |  |

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): update cockroachdb/cockroach docker tag to v21.2.10
- [ ] chore(deps): update dependency go to 1.27
- [ ] chore(deps): update dependency typescript to v4.9.5
- [ ] chore(deps): update plugin com.bmuschko.docker-remote-api to v4.10.0
- [ ] chore(deps): update plugin net.ltgt.apt-idea to v0.21
- [ ] chore(deps): update postgres docker tag to v13.23
- [ ] fix(deps): update dependency @grpc/proto-loader to v0.8.1
- [ ] fix(deps): update dependency com.google.guava:guava to v27.1-jre
- [ ] fix(deps): update dependency io.fabric8:kubernetes-client to v4.13.3
- [ ] fix(deps): update dependency io.sundr:builder-annotations to v0.400.0
- [ ] fix(deps): update dependency org.apache.commons:commons-collections4 to v4.6.0
- [ ] fix(deps): update dependency org.apache.commons:commons-text to v1.15.0
- [ ] fix(deps): update jackson monorepo (`com.fasterxml.jackson.core:jackson-databind`, `com.fasterxml.jackson.core:jackson-core`, `com.fasterxml.jackson.core:jackson-annotations`)
- [ ] fix(deps): update junit-framework monorepo to v5.14.4 (`org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] fix(deps): update mockito monorepo to v2.28.2 (`org.mockito:mockito-junit-jupiter`, `org.mockito:mockito-core`)
- [ ] fix(deps): update module github.com/davidji99/bitbucket-go to v0.3.0
- [ ] fix(deps): update module github.com/go-sql-driver/mysql to v1.10.1
- [ ] fix(deps): update module github.com/grpc-ecosystem/go-grpc-middleware to v1.4.0
- [ ] fix(deps): update module github.com/jmoiron/sqlx to v1.4.0
- [ ] fix(deps): update module github.com/jonboulle/clockwork to v0.5.0
- [ ] fix(deps): update module github.com/rs/cors to v1.11.1
- [ ] fix(deps): update module github.com/slok/go-http-metrics to v0.13.0
- [ ] fix(deps): update module github.com/spf13/cobra to v1.10.2
- [ ] fix(deps): update module github.com/stretchr/testify to v1.12.1
- [ ] fix(deps): update module github.com/urfave/cli/v2 to v2.27.7
- [ ] fix(deps): update module github.com/xanzy/go-gitlab to v0.115.0
- [ ] fix(deps): update module go.uber.org/zap to v1.28.0
- [ ] fix(deps): update module golang.org/x/net to v0.59.0
- [ ] fix(deps): update module golang.org/x/oauth2 to v0.37.0
- [ ] fix(deps): update module gorm.io/driver/mysql to v1.6.0
- [ ] fix(deps): update module gorm.io/driver/postgres to v1.6.2
- [ ] fix(deps): update module gorm.io/driver/sqlite to v1.6.0
- [ ] fix(deps): update module gorm.io/gorm to v1.31.2
- [ ] fix(deps): update rust crate bytes to 0.6
- [ ] fix(deps): update rust crate futures to 0.3
- [ ] fix(deps): update rust crate hyper to 0.14.0
- [ ] fix(deps): update rust crate log to 0.4
- [ ] fix(deps): update rust crate ordermap to 0.5
- [ ] fix(deps): update rust crate pretty_env_logger to 0.5
- [ ] fix(deps): update rust crate rand to 0.10
- [ ] fix(deps): update rust crate serde_yaml to 0.9
- [ ] fix(deps): update rust crate tokio-timer to 0.2
- [ ] fix(deps): update spring boot to v2.7.18 (`org.springframework.boot:spring-boot-starter-log4j2`, `org.springframework.boot:spring-boot-starter`)
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update actions/setup-go action to v7
- [ ] chore(deps): update cockroachdb/cockroach docker tag to v26
- [ ] chore(deps): update codecov/codecov-action action to v7
- [ ] chore(deps): update dependency @types/js-yaml to v4
- [ ] chore(deps): update dependency eslint to v10
- [ ] chore(deps): update dependency node to v24
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update docker/setup-buildx-action action to v4
- [ ] chore(deps): update helm release mysql to v14
- [ ] chore(deps): update helm release postgresql to v18
- [ ] chore(deps): update jest monorepo (major) (`@types/jest`, `jest`, `ts-jest`)
- [ ] chore(deps): update mariadb docker tag to v12
- [ ] chore(deps): update mysql docker tag to v26
- [ ] chore(deps): update plugin com.bmuschko.docker-remote-api to v10
- [ ] chore(deps): update postgres docker tag to v18
- [ ] chore(deps): update typescript-eslint monorepo to v8 (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`)
- [ ] fix(deps): update dependency com.google.guava:guava to v33
- [ ] fix(deps): update dependency grpc-health-check to v2
- [ ] fix(deps): update dependency io.fabric8:kubernetes-client to v7
- [ ] fix(deps): update dependency js-yaml to v5
- [ ] fix(deps): update dependency prom-client to v15
- [ ] fix(deps): update dependency toml to v5
- [ ] fix(deps): update junit-framework monorepo to v6 (`org.junit.jupiter:junit-jupiter-engine`, `org.junit.jupiter:junit-jupiter-api`)
- [ ] fix(deps): update mockito monorepo to v5 (`org.mockito:mockito-junit-jupiter`, `org.mockito:mockito-core`)
- [ ] fix(deps): update module github.com/google/go-github/v20 to v91
- [ ] fix(deps): update module github.com/grpc-ecosystem/go-grpc-middleware to v2
- [ ] fix(deps): update module github.com/grpc-ecosystem/grpc-gateway to v2
- [ ] fix(deps): update module github.com/urfave/cli/v2 to v3
- [ ] fix(deps): update rust crate bytes to v1
- [ ] fix(deps): update rust crate clap to v4
- [ ] fix(deps): update rust crate hyper to v1
- [ ] fix(deps): update rust crate ordermap to v1
- [ ] fix(deps): update rust crate url to v2
- [ ] fix(deps): update spring boot to v4 (`org.springframework.boot:spring-boot-starter-log4j2`, `org.springframework.boot:spring-boot-starter`)
- [ ] 🔐 **Create all awaiting schedule PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [chore(deps): update jest monorepo](../pull/390) (`@types/jest`, `jest`)

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Failed to look up maven package parentGroupId:parentArtifactId: no-result`, `Failed to look up maven package compileGroupId:compileArtifactId: no-result`, `Failed to look up maven package runtimeGroupId:runtimeArtifactId: no-result`, `Failed to look up maven package testGroupId:testArtifactId: no-result`, `Failed to look up maven package systemGroupId:systemArtifactId: no-result`, `Failed to look up maven package providedGroupId:providedArtifactId: no-result`, `Failed to look up npm package @scoped/runtimeDependency: no-result`, `Failed to look up npm package devDependency: no-result`, `Failed to look up npm package optionalDependency: no-result`, `Failed to look up npm package @scoped/peerDependency: no-result`.
>
> Files affected: `services/extractor/src/extractors/testdata/pom.xml`, `services/extractor/src/extractors/testdata/package.json`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [fix(deps): update dependency minimatch to v3.0.5 [security]](../pull/409)
- [ ] [fix(deps): update module github.com/prometheus/client_golang to v1.11.1 [security]](../pull/402)
- [ ] [fix(deps): update dependency @grpc/grpc-js to v1.8.22 [security]](../pull/410)
- [ ] [fix(deps): update dependency express to v4.20.0 [security]](../pull/411)
- [ ] [fix(deps): update dependency log4js to v6.4.0 [security]](../pull/412)
- [ ] [fix(deps): update module github.com/jackc/pgx/v4 to v4.18.2 [security]](../pull/403)
- [ ] [fix(deps): update module google.golang.org/grpc to v1.56.3 [security]](../pull/404)
- [ ] [fix(deps): update module google.golang.org/protobuf to v1.33.0 [security]](../pull/405)
- [ ] [chore(deps): update dependency @types/cheerio to v0.22.35](../pull/388)
- [ ] [chore(deps): update dependency ts-jest to v27.1.5](../pull/389)
- [ ] [fix(deps): update dependency gradle-to-js to v2.0.1](../pull/392)
- [ ] [fix(deps): update module github.com/golang/protobuf to v1.5.4](../pull/413)
- [ ] [fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.52](../pull/414)
- [ ] [chore(deps): update alpine docker tag to v3.24](../pull/397)
- [ ] [fix(deps): update dependency js-yaml to v3.15.2](../pull/406) (`js-yaml`, `@types/js-yaml`)
- [ ] [fix(deps): update dependency cheerio to v1.2.0](../pull/391) (`cheerio`, `@types/cheerio`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [chore(deps): update dependency docopt to v0.6.2](../pull/298)

## Detected Dependencies

cargo (1)

services/extractor/src/extractors/testdata/Cargo.toml (18)

- `bytes 0.4` → [Updates: `0.6`, `1.0`]
- `clap 2.24` → [Updates: `4.0`]
- `futures 0.1` → [Updates: `0.3`]
- `hyper 0.11.15` → [Updates: `0.14.0`, `1.0.0`]
- `log 0.3` → [Updates: `0.4`]
- `ordermap 0.2` → [Updates: `0.5`, `1.0`]
- `pretty_env_logger 0.1` → [Updates: `0.5`]
- `rand 0.3` → [Updates: `0.10`]
- `serde 1.0`
- `serde_derive 1.0`
- `serde_json 1.0`
- `serde_yaml 0.7` → [Updates: `0.9`]
- `tacho 0.4.1`
- `tokio-core 0.1`
- `tokio-io 0.1`
- `tokio-service 0.1`
- `tokio-timer 0.1` → [Updates: `0.2`]
- `url 1.4` → [Updates: `2.0`]

composer (1)

services/extractor/src/extractors/testdata/composer.json

docker-compose (5)

docker/cockroachdb/docker-compose.yaml (1)

- `cockroachdb/cockroach v21.1.11` → [Updates: `v21.2.10`, `v26.3.1`]

docker/mariadb/docker-compose.yaml (1)

- `mariadb 10` → [Updates: `12`]

docker/mysql/docker-compose.yaml (1)

- `mysql 8` → [Updates: `26`]

docker/postgres/docker-compose.yaml (1)

- `postgres 13.5` → [Updates: `13.23`, `18.6`]

docker/sqlite/docker-compose.yaml

dockerfile (6)

dockerfiles/base/Dockerfile (1)

- `alpine 3.12` → [Updates: `3.24`]

dockerfiles/devbase/Dockerfile (1)

- `golang 1.16-alpine3.12`

dockerfiles/go-branch/Dockerfile

dockerfiles/go-tag/Dockerfile

dockerfiles/node-branch/Dockerfile (1)

- `node 16` → [Updates: `24`]

dockerfiles/node-tag/Dockerfile (1)

- `node 16` → [Updates: `24`]

github-actions (6)

.github/workflows/branch.yaml (5)

- `actions/setup-go v2` → [Updates: `v7`]
- `actions/checkout v2` → [Updates: `v7`]
- `codecov/codecov-action v1` → [Updates: `v7`]
- `go 1.16` → [Updates: `1.27`]
- `node 16` → [Updates: `24`]

.github/workflows/dockerfiles.yaml (4)

- `actions/checkout v2` → [Updates: `v7`]
- `crazy-max/ghaction-docker-buildx v3`
- `actions/checkout v2` → [Updates: `v7`]
- `crazy-max/ghaction-docker-buildx v3`

.github/workflows/extractor-tag.yaml (4)

- `actions/checkout v2` → [Updates: `v7`]
- `actions/checkout v2` → [Updates: `v7`]
- `docker/setup-buildx-action v1` → [Updates: `v4`]
- `node 16-alpine3.12`

.github/workflows/goreleaser-branch.yaml (2)

- `actions/checkout v2` → [Updates: `v7`]
- `golang 1.16-alpine3.12`

.github/workflows/goreleaser-tag.yaml (4)

- `actions/checkout v2` → [Updates: `v7`]
- `actions/checkout v2` → [Updates: `v7`]
- `docker/setup-buildx-action v1` → [Updates: `v4`]
- `golang 1.16-alpine3.12`

.github/workflows/nightly.yaml (1)

- `actions/checkout v2` → [Updates: `v7`]

gomod (2)

go.mod (35)

- `go 1.16`
- `github.com/davidji99/bitbucket-go v0.2.1` → [Updates: `v0.3.0`]
- `github.com/depscloud/api v0.3.3`
- `github.com/ghodss/yaml v1.0.0`
- `github.com/go-sql-driver/mysql v1.6.0` → [Updates: `v1.10.1`]
- `github.com/golang/protobuf v1.5.2` → [Updates: `v1.5.4`]
- `github.com/google/go-github/v20 v20.0.0` → [Updates: `v91.0.0`]
- `github.com/grpc-ecosystem/go-grpc-middleware v1.3.0` → [Updates: `v1.4.0`, `v2.3.4`]
- `github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0`
- `github.com/grpc-ecosystem/grpc-gateway v1.16.0` → [Updates: `v2.30.0`]
- `github.com/jackc/pgx/v4 v4.11.0` → [Updates: `v4.18.2`]
- `github.com/jmoiron/sqlx v1.3.4` → [Updates: `v1.4.0`]
- `github.com/jonboulle/clockwork v0.2.2` → [Updates: `v0.5.0`]
- `github.com/mattn/go-sqlite3 v1.14.9` → [Updates: `v1.14.52`]
- `github.com/mjpitz/go-gracefully v0.0.6`
- `github.com/nytlabs/gojee v0.0.0-20140331152115-5a79a1542dc0@5a79a1542dc0`
- `github.com/pkg/errors v0.9.1`
- `github.com/prometheus/client_golang v1.11.0` → [Updates: `v1.11.1`]
- `github.com/rs/cors v1.7.0` → [Updates: `v1.11.1`]
- `github.com/slok/go-http-metrics v0.9.0` → [Updates: `v0.13.0`]
- `github.com/spf13/cobra v1.1.3` → [Updates: `v1.10.2`]
- `github.com/stretchr/testify v1.7.0` → [Updates: `v1.12.1`]
- `github.com/urfave/cli/v2 v2.3.0` → [Updates: `v2.27.7`, `v3.11.0`]
- `github.com/xanzy/go-gitlab v0.52.2` → [Updates: `v0.115.0`]
- `go.uber.org/zap v1.17.0` → [Updates: `v1.28.0`]
- `golang.org/x/net v0.0.0-20210525063256-abc453219eb5@abc453219eb5` → [Updates: `v0.59.0`]
- `golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8@d3ed0bb246c8` → [Updates: `v0.37.0`]
- `google.golang.org/grpc v1.38.0` → [Updates: `v1.56.3`]
- `google.golang.org/protobuf v1.26.0` → [Updates: `v1.33.0`]
- `gopkg.in/src-d/go-billy.v4 v4.3.2`
- `gopkg.in/src-d/go-git.v4 v4.13.1`
- `gorm.io/driver/mysql v1.1.2` → [Updates: `v1.6.0`]
- `gorm.io/driver/postgres v1.1.0` → [Updates: `v1.6.2`]
- `gorm.io/driver/sqlite v1.1.4` → [Updates: `v1.6.0`]
- `gorm.io/gorm v1.21.12` → [Updates: `v1.31.2`]

services/extractor/src/extractors/testdata/go.mod (1)

- `go 1.12`

gradle (2)

services/extractor/src/extractors/testdata/build.gradle (18)

- `com.bmuschko.docker-remote-api 4.0.3` → [Updates: `4.10.0`, `10.0.0`]
- `net.ltgt.apt-idea 0.20` → [Updates: `0.21`]
- `io.fabric8:kubernetes-client 4.1.3` → [Updates: `4.13.3`, `7.9.0`]
- `com.google.guava:guava 27.0.1-jre` → [Updates: `27.1-jre`, `33.7.1-jre`]
- `org.apache.commons:commons-collections4 4.2` → [Updates: `4.6.0`]
- `org.apache.commons:commons-text 1.6` → [Updates: `1.15.0`]
- `com.fasterxml.jackson.core:jackson-annotations 2.9.7` → [Updates: `2.22`]
- `com.fasterxml.jackson.core:jackson-core 2.9.7` → [Updates: `2.22.2`]
- `com.fasterxml.jackson.core:jackson-databind 2.9.7` → [Updates: `2.22.2`]
- `org.springframework.boot:spring-boot-starter 2.1.1.RELEASE` → [Updates: `2.7.18`, `4.1.1`]
- `org.springframework.boot:spring-boot-starter-log4j2 2.1.1.RELEASE` → [Updates: `2.7.18`, `4.1.1`]
- `io.sundr:builder-annotations 0.14.7` → [Updates: `0.400.0`]
- `io.fabric8:kubernetes-client 4.1.3` → [Updates: `4.13.3`, `7.9.0`]
- `io.sundr:builder-annotations 0.14.7` → [Updates: `0.400.0`]
- `org.mockito:mockito-core 2.24.0` → [Updates: `2.28.2`, `5.23.0`]
- `org.mockito:mockito-junit-jupiter 2.24.0` → [Updates: `2.28.2`, `5.23.0`]
- `org.junit.jupiter:junit-jupiter-api 5.4.0` → [Updates: `5.14.4`, `6.1.3`]
- `org.junit.jupiter:junit-jupiter-engine 5.4.0` → [Updates: `5.14.4`, `6.1.3`]

services/extractor/src/extractors/testdata/settings.gradle

helmv3 (1)

services/extractor/src/extractors/testdata/Chart.yaml (3)

- `beacon 0.0.2`
- `mysql 8.0.0` → [Updates: `14.0.3`]
- `postgresql 10.1.3` → [Updates: `18.11.1`]

jsonnet-bundler (1)

services/extractor/src/extractors/testdata/jsonnetfile.json

maven (1)

services/extractor/src/extractors/testdata/pom.xml (6)

- `parentGroupId:parentArtifactId 1.0`
- `compileGroupId:compileArtifactId 1.0.0`
- `runtimeGroupId:runtimeArtifactId 1.0.0`
- `testGroupId:testArtifactId 1.0.0`
- `systemGroupId:systemArtifactId 1.0.0`
- `providedGroupId:providedArtifactId 1.0.0`

npm (3)

package.json

services/extractor/package.json (22)

- `@depscloud/api 0.3.3`
- `@grpc/grpc-js 1.4.4` → [Updates: `1.8.22`]
- `@grpc/proto-loader 0.6.6` → [Updates: `0.8.1`]
- `cheerio 1.0.0-rc.5` → [Updates: `1.2.0`]
- `express 4.17.1` → [Updates: `4.20.0`]
- `express-prometheus-middleware 1.2.0`
- `gradle-to-js 2.0.0` → [Updates: `2.0.1`]
- `grpc-health-check 1.8.0` → [Updates: `2.1.0`]
- `js-yaml 3.14.1` → [Updates: `3.15.2`, `5.4.2`]
- `log4js 6.3.0` → [Updates: `6.4.0`]
- `minimatch 3.0.4` → [Updates: `3.0.5`]
- `prom-client 13.2.0` → [Updates: `15.1.3`]
- `toml 3.0.0` → [Updates: `5.0.0`]
- `@types/cheerio 0.22.29` → [Updates: `0.22.35`, `1.0.0`]
- `@types/jest 26.0.23` → [Updates: `26.0.24`, `30.0.0`]
- `@types/js-yaml 3.12.5` → [Updates: `3.12.10`, `4.0.9`]
- `@typescript-eslint/eslint-plugin 4.33.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 4.33.0` → [Updates: `8.70.0`]
- `eslint 7.32.0` → [Updates: `10.10.0`]
- `jest 27.0.6` → [Updates: `27.5.1`, `30.5.1`]
- `ts-jest 27.1.1` → [Updates: `27.1.5`, `29.4.12`]
- `typescript 4.4.4` → [Updates: `4.9.5`, `7.0.2`]

services/extractor/src/extractors/testdata/package.json (4)

- `@scoped/runtimeDependency 1.0.0`
- `devDependency 1.0.0`
- `optionalDependency 1.0.0`
- `@scoped/peerDependency 1.0.0`

pip_requirements (1)

services/extractor/src/extractors/testdata/requirements.txt (4)

- `docopt == 0.6.1` → [Updates: `==0.6.2`]
- `keyring >= 4.1.1`
- `coverage != 3.5`
- `Mopidy-Dirble ~= 1.1`

pipenv (1)

services/extractor/src/extractors/testdata/Pipfile (2)

- `records >0.5.0`
- `unittest2 >=1.0,<3.0`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository