Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/finos/cdm-object-builder).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [@angular-devkit/build-angular](https://redirect.github.com/angular/angular-cli) |  |
| npm | [@angular/animations](https://redirect.github.com/angular/angular) |  |
| npm | [@angular/platform-browser-dynamic](https://redirect.github.com/angular/angular) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update dependency java-jdk to v17.0.20+101
- [ ] Update dependency org.codehaus.plexus:plexus-utils to v3.6.2
- [ ] Update dependency prettier to v3.9.7
- [ ] Update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
- [ ] Update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.9.0
- [ ] Update dependency org.apache.maven.plugins:maven-resources-plugin to v3.5.0
- [ ] Update dependency org.apache.maven.plugins:maven-site-plugin to v3.22.0
- [ ] Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
- [ ] Update xtext.version to v2.44.0 (`org.eclipse.xtext:org.eclipse.xtext`, `org.eclipse.xtext:xtext-dev-bom`)
- [ ] Update actions/cache action to v6
- [ ] Update actions/checkout action to v7
- [ ] Update actions/setup-java action to v6
- [ ] Update actions/setup-node action to v7
- [ ] Update angular monorepo to v22 (`@angular/animations`, `@angular/common`, `@angular/compiler`, `@angular/compiler-cli`, `@angular/core`, `@angular/forms`, `@angular/platform-browser`, `@angular/platform-browser-dynamic`, `@angular/router`)
- [ ] Update angular-cli monorepo to v22 (`@angular-devkit/build-angular`, `@angular/cli`)
- [ ] Update angularmaterial monorepo to v22 (`@angular/cdk`, `@angular/material`, `@angular/material-date-fns-adapter`)
- [ ] Update dependency @babel/runtime to v8
- [ ] Update dependency @fortawesome/angular-fontawesome to v5
- [ ] Update dependency @types/jasmine to v6
- [ ] Update dependency com.google.inject:guice-bom to v7
- [ ] Update dependency date-fns to v4
- [ ] Update dependency jasmine-core to v7
- [ ] Update dependency java-jdk to v25
- [ ] Update dependency org.codehaus.plexus:plexus-utils to v4
- [ ] Update dependency org.finos.cdm:cdm-java to v8
- [ ] Update dependency typescript to v7
- [ ] Update dependency webpack-bundle-analyzer to v5
- [ ] Update nanasess/setup-chromedriver action to v3
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update dependency ch.qos.logback:logback-core to v1.5.34 [SECURITY]](../pull/117)
- [ ] [Update dependency com.fasterxml.jackson:jackson-bom to v2.22.2](../pull/164)
- [ ] [Update dependency ch.qos.logback:logback-classic to v1.6.3](../pull/142)
- [ ] [Update dependency com.google.guava:guava to v33.7.1-jre](../pull/143)
- [ ] [Update dependency org.apache.maven.plugins:maven-clean-plugin to v3.5.0](../pull/144)
- [ ] [Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0](../pull/145)
- [ ] [Update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0](../pull/108)
- [ ] [Update dependency org.apache.maven.plugins:maven-install-plugin to v3.2.0](../pull/130)
- [ ] [Update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.2](../pull/103)
- [ ] [Update dependency org.finos.cdm:cdm-java to v7.3.0](../pull/159)
- [ ] [Update dependency zone.js to ~0.16.0](../pull/152)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (5)

.github/workflows/build-maven.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v3` → [Updates: `v6`]
- `java-jdk 17` → [Updates: `17.0.20+101`, `25.0.4+101.0.LTS`]

.github/workflows/build-node.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `nanasess/setup-chromedriver v2` → [Updates: `v3`]
- `actions/setup-node v4` → [Updates: `v7`]

.github/workflows/cve-scanning.yml (8)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v4` → [Updates: `v6`]
- `actions/cache v4` → [Updates: `v6`]
- `actions/cache v4` → [Updates: `v6`]
- `actions/upload-artifact v7`
- `java-jdk 17` → [Updates: `17.0.20+101`, `25.0.4+101.0.LTS`]

.github/workflows/license-scanning-maven.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v3` → [Updates: `v6`]
- `actions/upload-artifact v7`
- `actions/upload-artifact v7`
- `java-jdk 17` → [Updates: `17.0.20+101`, `25.0.4+101.0.LTS`]

.github/workflows/license-scanning-node.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]

maven (1)

setup/pom.xml (20)

- `com.google.guava:guava 33.3.1-jre` → [Updates: `33.7.1-jre`]
- `junit:junit 4.13.2`
- `org.finos.cdm:cdm-java 7.0.0` → [Updates: `7.3.0`, `8.0.0-dev.5`]
- `com.google.inject:guice-bom 6.0.0` → [Updates: `7.0.0`]
- `org.eclipse.xtext:xtext-dev-bom 2.38.0` → [Updates: `2.44.0`]
- `org.eclipse.xtext:org.eclipse.xtext 2.38.0` → [Updates: `2.44.0`]
- `ch.qos.logback:logback-classic 1.4.14` → [Updates: `1.6.3`]
- `ch.qos.logback:logback-core 1.4.14` → [Updates: `1.5.34`]
- `com.fasterxml.jackson:jackson-bom 2.22.1` → [Updates: `2.22.2`]
- `org.codehaus.plexus:plexus-utils 3.6.1` → [Updates: `3.6.2`, `4.1.0`]
- `org.apache.maven.plugins:maven-clean-plugin 3.3.2` → [Updates: `3.5.0`]
- `org.apache.maven.plugins:maven-resources-plugin 3.3.1` → [Updates: `3.5.0`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.12.1` → [Updates: `3.16.0`]
- `org.apache.maven.plugins:maven-surefire-plugin 3.2.5` → [Updates: `3.6.0`]
- `org.apache.maven.plugins:maven-jar-plugin 3.3.0` → [Updates: `3.5.1`]
- `org.apache.maven.plugins:maven-install-plugin 3.1.1` → [Updates: `3.2.0`]
- `org.apache.maven.plugins:maven-deploy-plugin 3.1.1` → [Updates: `3.2.0`]
- `org.apache.maven.plugins:maven-site-plugin 3.12.1` → [Updates: `3.22.0`]
- `org.apache.maven.plugins:maven-project-info-reports-plugin 3.5.0` → [Updates: `3.9.0`]
- `org.apache.maven.plugins:maven-shade-plugin 3.5.1` → [Updates: `3.6.2`]

npm (1)

ui/package.json (37)

- `@angular/animations ^20.3.31` → [Updates: `^22.0.0`]
- `@angular/cdk ^20.2.14` → [Updates: `^22.0.0`]
- `@angular/common ^20.3.31` → [Updates: `^22.0.0`]
- `@angular/compiler ^20.3.31` → [Updates: `^22.0.0`]
- `@angular/core ^20.3.31` → [Updates: `^22.0.0`]
- `@angular/forms ^20.3.31` → [Updates: `^22.0.0`]
- `@angular/material ^20.2.14` → [Updates: `^22.0.0`]
- `@angular/material-date-fns-adapter ^20.2.14` → [Updates: `^22.0.0`]
- `@angular/platform-browser ^20.3.31` → [Updates: `^22.0.0`]
- `@angular/platform-browser-dynamic ^20.3.31` → [Updates: `^22.0.0`]
- `@angular/router ^20.3.31` → [Updates: `^22.0.0`]
- `@babel/runtime ^7.26.10` → [Updates: `^8.0.0`]
- `@fortawesome/angular-fontawesome ^3.0.0` → [Updates: `^5.0.0`]
- `@fortawesome/fontawesome-svg-core ^7.1.0`
- `@fortawesome/free-brands-svg-icons ^7.1.0`
- `@fortawesome/free-regular-svg-icons ^7.1.0`
- `@fortawesome/free-solid-svg-icons ^7.1.0`
- `date-fns ^2.29.2` → [Updates: `^4.0.0`]
- `lodash-es ^4.18.0`
- `rxjs ^7.8.1`
- `tslib ^2.3.0`
- `zone.js ~0.15.1` → [Updates: `~0.16.0`]
- `@angular-devkit/build-angular ^20.3.31` → [Updates: `^22.0.0`]
- `@angular/cli ~20.3.31` → [Updates: `~22.1.0`]
- `@angular/compiler-cli ^20.3.31` → [Updates: `^22.0.0`]
- `@types/jasmine ^5.0.0` → [Updates: `^6.0.0`]
- `@types/lodash-es ^4.17.6`
- `jasmine-core ^5.1.0` → [Updates: `^7.0.0`]
- `jasmine-marbles ^0.9.2`
- `karma ^6.4.2`
- `karma-chrome-launcher ^3.2.0`
- `karma-coverage ~2.2.0`
- `karma-jasmine ^5.1.0`
- `karma-jasmine-html-reporter ^2.1.0`
- `prettier ^3.5.2` → [Updates: `^3.5.2`]
- `typescript ^5.8.3` → [Updates: `^7.0.0`]
- `webpack-bundle-analyzer ^4.6.1` → [Updates: `^5.0.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start by reviewing the automated dashboard, then inspect setup/pom.xml, ui/package.json, and the listed .github/workflows files to understand the pending dependency updates. Existing pull requests cover several updates, while many others span major JavaScript, Angular, Java, and GitHub Actions changes; completion would require deciding which updates are appropriate and validating them.

Written by the indexing model from the issue text.