[java-cloud-bom] Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/googleapis/java-cloud-bom).

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Failed to look up maven package com.google.cloud:java-cloud-bom-root: no-result`.
>
> Files affected: `libraries-release-data/pom.xml`, `release-note-generation/pom.xml`, `tests/validate-bom/pom.xml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [deps: update dependency org.codehaus.plexus:plexus-utils to v3.6.1 [security]](../pull/7473)
- [ ] [build(deps): update dependency org.apache.maven:maven-artifact to v3.9.16](../pull/7064)
- [ ] [build(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8](../pull/7106)
- [ ] [build(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6](../pull/7199)
- [ ] [build(deps): update dependency org.apache.maven.resolver:maven-resolver-api to v1.9.27](../pull/7102)
- [ ] [chore(deps): update dependency com.google.cloud:google-cloud-bom to v0.266.0](../pull/7504)
- [ ] [build(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3](../pull/7107)
- [ ] [build(deps): update dependency org.apache.maven.plugins:maven-site-plugin to v3.22.0](../pull/7491)
- [ ] [build(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0](../pull/7288)
- [ ] [build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.3](../pull/7469)
- [ ] [deps: update dependency com.google.cloud:first-party-dependencies to v3.64.0](../pull/7505)
- [ ] [deps: update dependency com.google.cloud:gapic-libraries-bom to v1.88.0](../pull/7506)
- [ ] [deps: update dependency com.google.cloud:google-cloud-spanner-jdbc to v2.41.0](../pull/7507)
- [ ] [deps: update dependency com.google.googlejavaformat:google-java-format to v1.35.0](../pull/7002)
- [ ] [deps: update dependency commons-cli:commons-cli to v1.11.0](../pull/7145)
- [ ] [deps: update dependency commons-io:commons-io to v2.22.0](../pull/7055)
- [ ] [deps: update dependency python to 3.14](../pull/6978)
- [ ] [deps: update actions/checkout action to v7](../pull/7503)
- [ ] [deps: update actions/github-script action to v9](../pull/7445)
- [ ] [deps: update actions/setup-node action to v6](../pull/7242)
- [ ] [deps: update dependency node to v24](../pull/7264)
- [ ] [deps: update stcarolas/setup-maven action to v5](../pull/7464)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [build(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.1.4](../pull/6963)
- [ ] [test(deps): update dependency junit:junit to v4.13.2](../pull/5689)
- [ ] [build(deps): update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.9.0](../pull/6968)
- [ ] [build(deps): update dependency org.apache.maven.resolver:maven-resolver-api to v2](../pull/6677)

## Detected Dependencies

github-actions (10)

.github/workflows/approve-readme.yaml (1)

- `actions/github-script v8` → [Updates: `v9`]

.github/workflows/bom-content-test.yaml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`

.github/workflows/ci-release-note-generation.yaml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`

.github/workflows/ci-validate-bom.yaml (1)

- `actions/checkout v4` → [Updates: `v7`]

.github/workflows/ci.yaml (15)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`

.github/workflows/dashboard.yaml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`

.github/workflows/release-note-generation.yaml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-java v5`

.github/workflows/renovate_config_check.yaml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v5` → [Updates: `v6`]
- `ubuntu 24.04`
- `node 22` → [Updates: `24`]

.github/workflows/update-readme-table.yaml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-python v6`
- `python 3.9` → [Updates: `3.14`]

tests/validate-bom/action.yml (2)

- `actions/setup-java v5`
- `stCarolas/setup-maven v4.5` → [Updates: `v5.1`]

maven (10)

dashboard/pom.xml (12)

- `com.google.cloud.tools:dependencies-parent 1.5.15`
- `com.google.guava:guava-bom 33.6.0-jre`
- `org.freemarker:freemarker 2.3.34`
- `org.apache.maven.resolver:maven-resolver-api 1.9.23` → [Updates: `1.9.27`, `2.0.20`]
- `org.codehaus.plexus:plexus-utils 3.6.0` → [Updates: `3.6.1`]
- `junit:junit 4.13.2`
- `com.google.truth:truth 1.4.5`
- `commons-cli:commons-cli 1.9.0` → [Updates: `1.11.0`]
- `commons-io:commons-io 2.17.0` → [Updates: `2.22.0`]
- `com.google.cloud.tools:dependencies 1.5.15`
- `com.google.code.findbugs:jsr305 3.0.2`
- `org.apache.maven:maven-artifact 3.9.9` → [Updates: `3.9.16`]

google-cloud-bom/pom.xml (11)

- `com.google.cloud:gapic-libraries-bom 1.87.1` → [Updates: `1.88.0`]
- `com.google.cloud:google-cloud-pubsublite-bom 1.17.0`
- `com.google.cloud:google-cloud-spanner-jdbc 2.40.0` → [Updates: `2.41.0`]
- `com.google.cloud:google-cloud-vertexai-bom 1.48.0`
- `org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0`
- `org.apache.maven.plugins:maven-site-plugin 3.21.0` → [Updates: `3.22.0`]
- `com.coveo:fmt-maven-plugin 2.13`
- `com.google.googlejavaformat:google-java-format 1.24.0` → [Updates: `1.35.0`]
- `org.apache.maven.plugins:maven-project-info-reports-plugin 3.8.0` → [Updates: `3.9.0`]
- `org.apache.maven.plugins:maven-gpg-plugin 3.2.7` → [Updates: `3.2.8`]
- `org.apache.maven.plugins:maven-source-plugin 3.3.1` → [Updates: `3.4.0`]

libraries-bom/pom.xml (5)

- `com.google.cloud:first-party-dependencies 3.63.0` → [Updates: `3.64.0`]
- `com.google.cloud:google-cloud-bom 0.266.0-SNAPSHOT` → [Updates: `0.266.0`]
- `org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0`
- `org.apache.maven.plugins:maven-gpg-plugin 3.2.7` → [Updates: `3.2.8`]
- `org.apache.maven.plugins:maven-source-plugin 3.3.1` → [Updates: `3.4.0`]

libraries-release-data/pom.xml (2)

- `com.google.cloud:java-cloud-bom-root 0.1.0`
- `com.google.cloud.tools:dependencies 1.5.15`

pom.xml (2)

- `org.apache.maven.plugins:maven-deploy-plugin 3.1.3` → [Updates: `3.1.4`]
- `org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0`

release-note-generation/pom.xml (6)

- `com.google.cloud:java-cloud-bom-root 0.1.0`
- `com.google.cloud.tools:dependencies 1.5.15`
- `junit:junit 4.13.1` → [Updates: `4.13.2`]
- `com.google.truth:truth 1.4.5`
- `com.google.guava:guava 33.6.0-jre`
- `org.codehaus.mojo:exec-maven-plugin 3.1.0` → [Updates: `3.6.3`]

tests/dependency-convergence/pom.xml (3)

- `com.google.cloud:google-cloud-bom 0.266.0-SNAPSHOT` → [Updates: `0.266.0`]
- `org.checkerframework:checker-compat-qual 2.5.6`
- `org.apache.maven.plugins:maven-enforcer-plugin 3.5.0` → [Updates: `3.6.3`]

tests/pom.xml (5)

- `com.google.guava:guava-bom 33.6.0-jre`
- `com.google.cloud.tools:dependencies 1.5.15`
- `com.google.truth:truth 1.4.5`
- `junit:junit 4.13.2`
- `org.apache.maven.plugins:maven-surefire-plugin 3.5.3` → [Updates: `3.5.6`]

tests/validate-bom/pom.xml (4)

- `com.google.cloud:java-cloud-bom-root 0.1.0`
- `com.google.cloud.tools:dependencies 1.5.15`
- `junit:junit 4.13.1` → [Updates: `4.13.2`]
- `com.google.truth:truth 1.4.5`

tests/validate-bom/src/main/resources/template.pom.xml

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository