Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/finos/symphony-bdk-java).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| gradle | [org.slf4j:slf4j-log4j12](https://redirect.github.com/qos-ch/slf4j) |  |

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] Update dependency com.github.jknack:handlebars to v4.5.5
- [ ] Update dependency info.picocli:picocli to v4.7.7
- [ ] Update dependency io.swagger:swagger-annotations to v1.6.16
- [ ] Update dependency java-jdk to v25.0.4+101.0.LTS
- [ ] Update dependency net.bytebuddy:byte-buddy to v1.18.14-jdk5
- [ ] Update dependency org.apache.opennlp:opennlp-tools to v2.5.12
- [ ] Update dependency org.glassfish.jersey:jersey-bom to v4.0.2
- [ ] Update dependency org.glassfish.jersey.connectors:jersey-apache5-connector to v4.0.2
- [ ] Update dependency org.jspecify:jspecify to v1.0.1
- [ ] Update dependency org.projectlombok:lombok to v1.18.48
- [ ] Update dependency tools.jackson:jackson-bom to v3.2.2
- [ ] Update slf4j monorepo to v2.0.19 (`org.slf4j:slf4j-log4j12`, `org.slf4j:slf4j-api`)
- [ ] Update dependency com.hazelcast:hazelcast to v5.7.0
- [ ] Update dependency commons-codec:commons-codec to v1.22.1
- [ ] Update dependency commons-io:commons-io to v2.22.0
- [ ] Update dependency commons-logging:commons-logging to v1.4.0
- [ ] Update dependency de.undercouch:gradle-download-task to v5.7.0
- [ ] Update dependency dev.langchain4j:langchain4j-bom to v1.20.0
- [ ] Update dependency io.github.resilience4j:resilience4j-retry to v2.4.0
- [ ] Update dependency jekyll to "~> 4.4.0"
- [ ] Update dependency just-the-docs to v0.12.0
- [ ] Update dependency org.apache.commons:commons-lang3 to v3.20.0
- [ ] Update dependency org.apache.commons:commons-text to v1.15.0
- [ ] Update dependency org.bouncycastle:bcpkix-jdk18on to v1.86
- [ ] Update dependency org.mock-server:mockserver-netty to v7.6.0
- [ ] Update dependency org.openapitools:openapi-generator-gradle-plugin to v7.25.0
- [ ] Update dependency ruby to v3.4.10
- [ ] Update Gradle to v9.7.1
- [ ] Update gradle/gradle-build-action action to v2.12.0
- [ ] Update actions/cache action to v6
- [ ] Update actions/checkout action to v7
- [ ] Update actions/configure-pages action to v6
- [ ] Update actions/deploy-pages action to v5
- [ ] Update actions/setup-java action to v6
- [ ] Update actions/upload-pages-artifact action to v5
- [ ] Update dependency com.google.guava:guava to v33
- [ ] Update dependency org.mock-server:mockserver-netty to v8
- [ ] Update dependency ruby to v4
- [ ] Update dependency ubuntu to v24
- [ ] Update gradle/actions action to v6
- [ ] Update gradle/gradle-build-action action to v3
- [ ] Update plugin io.github.gradle-nexus.publish-plugin to v2
- [ ] Update plugin org.owasp.dependencycheck to v13
- [ ] Update plugin org.springframework.boot to v4
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Detected Dependencies

bundler (1)

docs/Gemfile (2)

- `jekyll "~> 4.3.2"` → [Updates: `"~> 4.4.0"`]
- `just-the-docs "0.5.2"` → [Updates: `"0.12.0"`]

docker-compose (2)

symphony-bdk-examples/bdk-core-examples/src/main/resources/proxy/withBasicAuthentication/docker-compose.yaml

symphony-bdk-examples/bdk-core-examples/src/main/resources/proxy/withoutAuthentication/docker-compose.yaml

dockerfile (1)

symphony-bdk-examples/bdk-core-examples/src/main/resources/proxy/withBasicAuthentication/Dockerfile

github-actions (6)

.github/workflows/build.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v3` → [Updates: `v6`]
- `gradle/gradle-build-action v2.4.2` → [Updates: `v2.12.0`, `v3.5.0`]
- `gradle/gradle-build-action v2.4.2` → [Updates: `v2.12.0`, `v3.5.0`]
- `java-jdk 25` → [Updates: `25.0.4+101.0.LTS`]

.github/workflows/cve-scanning-gradle.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v4` → [Updates: `v6`]
- `gradle/actions v3` → [Updates: `v6`]
- `actions/cache v4` → [Updates: `v6`]
- `java-jdk 25` → [Updates: `25.0.4+101.0.LTS`]

.github/workflows/docs.yml (7)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/configure-pages v4` → [Updates: `v6`]
- `actions/upload-pages-artifact v3` → [Updates: `v5`]
- `actions/deploy-pages v2` → [Updates: `v5`]
- `ruby 3.1` → [Updates: `3.4.10`, `4.0.7`]
- `ruby 3.1` → [Updates: `3.4.10`, `4.0.7`]

.github/workflows/gradle-wrapper-validation.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `gradle/actions v4` → [Updates: `v6`]

.github/workflows/release.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v4` → [Updates: `v6`]
- `java-jdk 25` → [Updates: `25.0.4+101.0.LTS`]

.github/workflows/semgrep.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `ubuntu 20.04` → [Updates: `24.04`]

gradle (35)

build.gradle (2)

- `io.github.gradle-nexus.publish-plugin 1.3.0` → [Updates: `2.0.0`]
- `org.owasp.dependencycheck 12.2.2` → [Updates: `13.0.0`]

buildSrc/build.gradle (3)

- `org.openapitools:openapi-generator-gradle-plugin 7.14.0` → [Updates: `7.25.0`]
- `de.undercouch:gradle-download-task 5.0.2` → [Updates: `5.7.0`]
- `com.github.ben-manes:gradle-versions-plugin 0.54.0`

buildSrc/src/main/groovy/bdk.java-codegen-conventions.gradle

buildSrc/src/main/groovy/bdk.java-common-conventions.gradle (1)

- `jacoco 0.8.15`

buildSrc/src/main/groovy/bdk.java-library-conventions.gradle

buildSrc/src/main/groovy/bdk.java-publish-conventions.gradle

settings.gradle

symphony-bdk-bom/build.gradle (37)

- `org.springframework.boot:spring-boot-dependencies 4.1.1`
- `tools.jackson:jackson-bom 3.2.1` → [Updates: `3.2.2`]
- `org.glassfish.jersey:jersey-bom 4.0.0` → [Updates: `4.0.2`]
- `org.apache.logging.log4j:log4j-bom 2.26.1`
- `io.netty:netty-bom 4.2.18.Final`
- `org.projectlombok:lombok 1.18.46` → [Updates: `1.18.48`]
- `org.glassfish.jersey.connectors:jersey-apache5-connector 4.0.0` → [Updates: `4.0.2`]
- `org.apache.httpcomponents.client5:httpclient5 5.6.4`
- `org.apache.httpcomponents.core5:httpcore5 5.4.3`
- `org.apache.httpcomponents.core5:httpcore5-h2 5.4.3`
- `org.apiguardian:apiguardian-api 1.1.2`
- `org.slf4j:slf4j-api 2.0.9` → [Updates: `2.0.19`]
- `org.slf4j:slf4j-log4j12 2.0.9` → [Updates: `2.0.19`]
- `commons-io:commons-io 2.20.0` → [Updates: `2.22.0`]
- `commons-codec:commons-codec 1.19.0` → [Updates: `1.22.1`]
- `commons-beanutils:commons-beanutils 1.11.0`
- `org.apache.commons:commons-lang3 3.18.0` → [Updates: `3.20.0`]
- `org.apache.commons:commons-text 1.14.0` → [Updates: `1.15.0`]
- `commons-logging:commons-logging 1.3.5` → [Updates: `1.4.0`]
- `com.brsanthu:migbase64 2.2`
- `io.jsonwebtoken:jjwt-api 0.13.0`
- `io.jsonwebtoken:jjwt-impl 0.13.0`
- `org.bouncycastle:bcpkix-jdk18on 1.79` → [Updates: `1.86`]
- `com.google.code.findbugs:jsr305 3.0.2`
- `org.jspecify:jspecify 1.0.0` → [Updates: `1.0.1`]
- `io.github.resilience4j:resilience4j-retry 2.3.0` → [Updates: `2.4.0`]
- `io.swagger:swagger-annotations 1.6.14` → [Updates: `1.6.16`]
- `org.openapitools:jackson-databind-nullable 0.2.11`
- `org.freemarker:freemarker 2.3.35`
- `com.github.jknack:handlebars 4.5.1` → [Updates: `4.5.5`]
- `org.reflections:reflections 0.10.2`
- `info.picocli:picocli 4.7.6` → [Updates: `4.7.7`]
- `com.tngtech.archunit:archunit-junit5 1.5.0`
- `org.apache.tomcat.embed:tomcat-embed-core 11.0.26`
- `org.apache.tomcat.embed:tomcat-embed-websocket 11.0.26`
- `org.mock-server:mockserver-netty 7.5.0` → [Updates: `7.6.0`, `8.0.0`]
- `org.assertj:assertj-core 3.27.7`

symphony-bdk-cli/build.gradle

symphony-bdk-config/build.gradle

symphony-bdk-core/build.gradle (3)

- `org.mapstruct:mapstruct 1.6.3`
- `net.bytebuddy:byte-buddy 1.18.11` → [Updates: `1.18.14-jdk5`]
- `org.mapstruct:mapstruct-processor 1.6.3`

symphony-bdk-examples/bdk-ai-agent-example/build.gradle (2)

- `dev.langchain4j:langchain4j-bom 1.17.2` → [Updates: `1.20.0`]
- `org.apache.opennlp:opennlp-tools 2.5.11` → [Updates: `2.5.12`]

symphony-bdk-examples/bdk-app-spring-boot-example/build.gradle (1)

- `org.springframework.boot 3.5.16` → [Updates: `4.1.1`]

symphony-bdk-examples/bdk-core-examples/build.gradle

symphony-bdk-examples/bdk-group-example/build.gradle

symphony-bdk-examples/bdk-multi-instances-example/build.gradle (1)

- `com.hazelcast:hazelcast 5.3.6` → [Updates: `5.7.0`]

symphony-bdk-examples/bdk-spring-boot-example/build.gradle (1)

- `org.springframework.boot 3.5.16` → [Updates: `4.1.1`]

symphony-bdk-extension-api/build.gradle

symphony-bdk-extensions/build.gradle

symphony-bdk-extensions/symphony-group-extension/build.gradle

symphony-bdk-http/build.gradle

symphony-bdk-http/symphony-bdk-http-api/build.gradle

symphony-bdk-http/symphony-bdk-http-jdk/build.gradle

symphony-bdk-http/symphony-bdk-http-jersey/build.gradle (1)

- `com.google.guava:guava 31.1-jre` → [Updates: `33.7.1-jre`]

symphony-bdk-http/symphony-bdk-http-webclient/build.gradle (1)

- `com.google.guava:guava 31.1-jre` → [Updates: `33.7.1-jre`]

symphony-bdk-spring/build.gradle

symphony-bdk-spring/symphony-bdk-app-spring-boot-starter/build.gradle

symphony-bdk-spring/symphony-bdk-core-spring-boot-starter/build.gradle

symphony-bdk-template/build.gradle

symphony-bdk-template/symphony-bdk-template-api/build.gradle

symphony-bdk-template/symphony-bdk-template-freemarker/build.gradle

symphony-bdk-template/symphony-bdk-template-handlebars/build.gradle

symphony-bdk-test/build.gradle

symphony-bdk-test/symphony-bdk-test-jupiter/build.gradle

symphony-bdk-test/symphony-bdk-test-spring-boot/build.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 9.6.1` → [Updates: `9.7.1`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository