Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/finos/fluxnova-examples).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update dependency eslint-plugin-react-refresh to v0.5.6
- [ ] Update dependency org.springframework.ai:spring-ai-bom to v1.1.8
- [ ] Update eslint monorepo to v9.39.5 (`@eslint/js`, `eslint`)
- [ ] Update react monorepo (`@types/react`, `@types/react-dom`, `eslint-plugin-react-hooks`, `react`, `react-dom`)
- [ ] Update dependency @vitejs/plugin-react to v6.1.1
- [ ] Update dependency bpmn-js to v18.28.0
- [ ] Update dependency com.h2database:h2 to v2.5.250
- [ ] Update dependency commons-codec:commons-codec to v1.22.1
- [ ] Update dependency globals to v17.12.0
- [ ] Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
- [ ] Update dependency org.openjdk.nashorn:nashorn-core to v15.7
- [ ] Update dependency org.springframework.cloud:spring-cloud-starter-contract-stub-runner to v2.2.8.RELEASE
- [ ] Update dependency vite to v8.2.2
- [ ] Update fluxnova.version (`org.finos.fluxnova.bpm:fluxnova-bom`, `org.finos.fluxnova.connect:fluxnova-connect-connectors-all`, `org.finos.fluxnova.bpm:fluxnova-engine-rest-core-jakarta`, `org.finos.fluxnova.spin:fluxnova-spin-dataformat-all`, `org.finos.fluxnova.bpm:fluxnova-engine-plugin-spin`, `org.finos.fluxnova.bpm:fluxnova-engine-plugin-connect`, `org.finos.fluxnova.connect:fluxnova-connect-soap-http-client`, `org.finos.fluxnova.connect:fluxnova-connect-http-client`, `org.finos.fluxnova.bpm.springboot:fluxnova-bpm-spring-boot-starter-webapp`, `org.finos.fluxnova.connect:fluxnova-connect-bom`)
- [ ] Update actions/cache action to v6
- [ ] Update actions/checkout action to v7
- [ ] Update actions/setup-java action to v6
- [ ] Update dependency com.mysql:mysql-connector-j to v26
- [ ] Update dependency org.codehaus.mojo:exec-maven-plugin to v3
- [ ] Update dependency org.codenarc:CodeNarc to v4
- [ ] Update dependency org.finos.fluxnova.bpm:fluxnova-bom to v3
- [ ] Update dependency org.springframework.ai:spring-ai-bom to v2
- [ ] Update dependency org.springframework.cloud:spring-cloud-starter-contract-stub-runner to v5
- [ ] Update drools.version to v10 (`org.kie:kie-internal`, `org.kie:kie-api`, `org.drools:drools-mvel`, `org.drools:drools-compiler`, `org.drools:drools-core`)
- [ ] Update eclipse-temurin Docker tag to v25
- [ ] Update eslint monorepo to v10 (`@eslint/js`, `eslint`)
- [ ] Update jaxb-ri monorepo to v4 (`com.sun.xml.bind:jaxb-impl`, `com.sun.xml.bind:jaxb-core`)
- [ ] Update peter-evans/create-pull-request action to v8
- [ ] Update spring boot to v4 (`org.springframework.boot:spring-boot-maven-plugin`, `org.springframework.boot:spring-boot-dependencies`, `org.springframework.boot:spring-boot-starter-parent`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Failed to look up maven package org.finos.fluxnova.ai.mcp:mcp-fluxnova-extension: no-result`.
>
> Files affected: `ai/fluxnova-mcp-ai-demo/fluxnova-service/pom.xml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update amazoncorretto Docker tag to v21.0.12](../pull/31)
- [ ] [Update dependency com.sun.xml.bind:jaxb-impl to v2.3.9](../pull/47)
- [ ] [Update dependency org.postgresql:postgresql to v42.7.13](../pull/32)
- [ ] [Update dependency com.mysql:mysql-connector-j to v9.7.0](../pull/22)
- [ ] [Update dependency org.codenarc:CodeNarc to v3.7.0-groovy-4.0](../pull/8)
- [ ] [Update graalvm.version](../pull/9) (`org.graalvm.js:js-scriptengine`, `org.graalvm.js:js`, `org.graalvm.sdk:graal-sdk`)
- [ ] [Update spring boot](../pull/10) (`org.springframework.boot:spring-boot-maven-plugin`, `org.springframework.boot:spring-boot-dependencies`, `org.springframework.boot:spring-boot-starter-parent`)
- [ ] [Update amazoncorretto Docker tag to v25](../pull/14)
- [ ] [Update docker/setup-buildx-action action to v4](../pull/27)
- [ ] [Update graalvm.version to v25](../pull/15) (`org.graalvm.js:js-scriptengine`, `org.graalvm.js:js`, `org.graalvm.sdk:graal-sdk`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

docker-compose (1)

ai/fluxnova-mcp-ai-demo/docker-compose.yml

dockerfile (3)

ai/fluxnova-mcp-ai-demo/fluxnova-service/Dockerfile (2)

- `maven 3.9-eclipse-temurin-21`
- `eclipse-temurin 21-jre-alpine` → [Updates: `25-jre-alpine`]

ai/fluxnova-mcp-ai-demo/mcp-client/Dockerfile (2)

- `maven 3.9-eclipse-temurin-21`
- `eclipse-temurin 21-jre-alpine` → [Updates: `25-jre-alpine`]

fluxnova-springboot-example/Dockerfile (2)

- `amazoncorretto 21.0.10` → [Updates: `21.0.12`, `25.0.4`]
- `amazoncorretto 21.0.10` → [Updates: `21.0.12`, `25.0.4`]

github-actions (4)

.github/actions/build-publish-image/action.yml (3)

- `docker/setup-buildx-action v3` → [Updates: `v4`]
- `docker/login-action v4`
- `docker/build-push-action v7`

.github/actions/java-setup/action.yml (2)

- `actions/setup-java v4` → [Updates: `v6`]
- `actions/cache v4` → [Updates: `v6`]

.github/workflows/build-publish.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `catchpoint/workflow-telemetry-action v2`

.github/workflows/update-version.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `peter-evans/create-pull-request v6` → [Updates: `v8`]

maven (4)

ai/fluxnova-mcp-ai-demo/fluxnova-service/pom.xml (5)

- `org.springframework.boot:spring-boot-starter-parent 3.5.7` → [Updates: `3.5.16`, `4.1.1`]
- `org.springframework.ai:spring-ai-bom 1.1.2` → [Updates: `1.1.8`, `2.0.1`]
- `org.finos.fluxnova.bpm:fluxnova-bom 1.0.0` → [Updates: `1.1.0`, `3.0.1`]
- `org.finos.fluxnova.ai.mcp:mcp-fluxnova-extension 0.1.0`
- `org.openjdk.nashorn:nashorn-core 15.4` → [Updates: `15.7`]

ai/fluxnova-mcp-ai-demo/mcp-client/pom.xml (2)

- `org.springframework.boot:spring-boot-starter-parent 3.4.0` → [Updates: `3.5.16`, `4.1.1`]
- `org.springframework.ai:spring-ai-bom 1.1.2` → [Updates: `1.1.8`, `2.0.1`]

fluxnova-springboot-example/pom.xml (20)

- `org.springframework.boot:spring-boot-dependencies 4.0.5` → [Updates: `4.1.1`]
- `org.finos.fluxnova.bpm:fluxnova-bom 3.0.0` → [Updates: `3.0.1`]
- `org.finos.fluxnova.connect:fluxnova-connect-bom 3.0.0` → [Updates: `3.0.1`]
- `org.finos.fluxnova.bpm.springboot:fluxnova-bpm-spring-boot-starter-webapp 3.0.0` → [Updates: `3.0.1`]
- `org.finos.fluxnova.connect:fluxnova-connect-http-client 3.0.0` → [Updates: `3.0.1`]
- `org.finos.fluxnova.connect:fluxnova-connect-soap-http-client 3.0.0` → [Updates: `3.0.1`]
- `org.finos.fluxnova.bpm:fluxnova-engine-plugin-connect 3.0.0` → [Updates: `3.0.1`]
- `org.finos.fluxnova.bpm:fluxnova-engine-plugin-spin 3.0.0` → [Updates: `3.0.1`]
- `org.finos.fluxnova.spin:fluxnova-spin-dataformat-all 3.0.0` → [Updates: `3.0.1`]
- `org.postgresql:postgresql 42.7.10` → [Updates: `42.7.13`]
- `com.mysql:mysql-connector-j 9.5.0` → [Updates: `9.7.0`, `26.7.0`]
- `org.finos.fluxnova.bpm:fluxnova-engine-rest-core-jakarta 3.0.0` → [Updates: `3.0.1`]
- `org.graalvm.js:js 23.0.5` → [Updates: `23.0.13.1`, `25.3.4.1`]
- `org.graalvm.js:js-scriptengine 23.0.5` → [Updates: `23.1.12.1`, `25.3.4.1`]
- `org.json:json 20250517`
- `org.codenarc:CodeNarc 3.5.0-groovy-4.0` → [Updates: `3.7.0-groovy-4.0`, `4.0.0`]
- `org.finos.fluxnova.connect:fluxnova-connect-connectors-all 3.0.0` → [Updates: `3.0.1`]
- `org.apache.httpcomponents:httpclient 4.5.14`
- `org.springframework.boot:spring-boot-maven-plugin 4.0.5` → [Updates: `4.1.1`]
- `org.apache.maven.plugins:maven-deploy-plugin 3.1.4`

process-examples/financial-services/feewaiver-ai/feewaiver-sb/pom.xml (21)

- `org.springframework.boot:spring-boot-dependencies 3.5.7` → [Updates: `3.5.16`, `4.1.1`]
- `org.finos.fluxnova.bpm:fluxnova-bom 1.0.0` → [Updates: `1.1.0`, `3.0.1`]
- `com.h2database:h2 2.1.214` → [Updates: `2.5.250`]
- `org.drools:drools-core 8.44.0.Final` → [Updates: `10.2.0`]
- `org.drools:drools-compiler 8.44.0.Final` → [Updates: `10.2.0`]
- `org.drools:drools-mvel 8.44.0.Final` → [Updates: `10.2.0`]
- `org.kie:kie-api 8.44.0.Final` → [Updates: `10.2.0`]
- `org.kie:kie-internal 8.44.0.Final` → [Updates: `10.2.0`]
- `org.json:json 20170516`
- `commons-codec:commons-codec 1.12` → [Updates: `1.22.1`]
- `org.springframework.cloud:spring-cloud-starter-contract-stub-runner 2.1.4.RELEASE` → [Updates: `2.2.8.RELEASE`, `5.0.3`]
- `javax.xml.bind:jaxb-api 2.3.1`
- `com.sun.xml.bind:jaxb-core 2.3.0.1` → [Updates: `4.0.9`]
- `com.sun.xml.bind:jaxb-impl 2.3.2` → [Updates: `2.3.9`, `4.0.9`]
- `javax.activation:activation 1.1.1`
- `org.graalvm.sdk:graal-sdk 23.0.8` → [Updates: `23.1.12.1`, `25.3.4.1`]
- `org.graalvm.js:js 23.0.8` → [Updates: `23.0.13.1`, `25.3.4.1`]
- `org.graalvm.js:js-scriptengine 23.0.8` → [Updates: `23.1.12.1`, `25.3.4.1`]
- `org.springframework.boot:spring-boot-maven-plugin 3.5.7` → [Updates: `3.5.16`, `4.1.1`]
- `org.apache.maven.plugins:maven-compiler-plugin 3.8.0` → [Updates: `3.16.0`]
- `org.codehaus.mojo:exec-maven-plugin 1.6.0` → [Updates: `3.6.3`]

npm (1)

process-examples/financial-services/feewaiver-ai/feewaiver-ui/package.json (12)

- `bpmn-js ^18.14.0` → [Updates: `^18.14.0`]
- `react ^19.2.4` → [Updates: `^19.2.4`]
- `react-dom ^19.2.4` → [Updates: `^19.2.4`]
- `@eslint/js ^9.39.4` → [Updates: `^9.39.4`, `^10.0.0`]
- `@types/react ^19.2.14` → [Updates: `^19.2.14`]
- `@types/react-dom ^19.2.3` → [Updates: `^19.2.3`]
- `@vitejs/plugin-react ^6.0.1` → [Updates: `^6.0.1`]
- `eslint ^9.39.4` → [Updates: `^9.39.4`, `^10.0.0`]
- `eslint-plugin-react-hooks ^7.0.1` → [Updates: `^7.0.1`]
- `eslint-plugin-react-refresh ^0.5.2` → [Updates: `^0.5.2`]
- `globals ^17.4.0` → [Updates: `^17.4.0`]
- `vite ^8.0.1` → [Updates: `^8.0.1`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

This is a Renovate dashboard rather than a scoped change; start by reviewing the listed open pull requests and the affected pom.xml, Dockerfile, and GitHub Actions files. Choose one dependency update only after checking its context; done means the selected update is applied and the relevant project validation passes.

Written by the indexing model from the issue text.