grpc-ecosystem / grpc-ecosystem/grpc-spring

Dependency Dashboard

Open
#669 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
3.7k
Forks
858
PR merge metrics
No merged PRs in 30d

Description

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/grpc-ecosystem/grpc-spring).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update dependency com.google.guava:guava-bom to v33.7.1-jre
- [ ] Update dependency org.junit:junit-bom to v5.14.4
- [ ] Update plugin com.github.ben-manes.versions to v0.63.1
- [ ] Update plugin io.freefair.lombok to v8.14.4
- [ ] Update actions/checkout action to v7
- [ ] Update actions/setup-java action to v6
- [ ] Update dependency com.alibaba.cloud:spring-cloud-alibaba-dependencies to v2025
- [ ] Update dependency com.google.protobuf:protobuf-bom to v4
- [ ] Update dependency org.junit:junit-bom to v6
- [ ] Update dependency org.springframework.cloud:spring-cloud-dependencies to v2025
- [ ] Update Gradle to v9
- [ ] Update gradle/actions action to v6
- [ ] Update plugin com.diffplug.spotless to v8
- [ ] Update plugin io.freefair.lombok to v9
- [ ] Update plugin net.nemerosa.versioning to v4
- [ ] Update spring boot to v4 (`org.springframework.boot:spring-boot-starter-parent`, `org.springframework.boot`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update dependency com.alibaba.cloud:spring-cloud-alibaba-dependencies to v2023.0.3.4](../pull/1147)
- [ ] [Update dependency com.google.protobuf:protobuf-bom to v3.25.9](../pull/1162)
- [ ] [Update dependency org.springframework.cloud:spring-cloud-dependencies to v2023.0.6](../pull/1118)
- [ ] [Update kotlin monorepo to v1.9.25](../pull/1106) (`org.jetbrains.kotlin:kotlin-bom`, `org.jetbrains.kotlin.jvm`)
- [ ] [Update plugin io.spring.dependency-management to v1.1.7](../pull/1163)
- [ ] [Update dependency io.grpc:grpc-bom to v1.84.0](../pull/1112)
- [ ] [Update Gradle to v8.14.5](../pull/1120)
- [ ] [Update plugin com.google.protobuf to v0.10.0](../pull/1186)
- [ ] [Update spring boot to v3.5.16](../pull/1117) (`org.springframework.boot:spring-boot-starter-parent`, `org.springframework.boot`)
- [ ] [Update kotlin monorepo to v2](../pull/1116) (`org.jetbrains.kotlin:kotlin-bom`, `org.jetbrains.kotlin.jvm`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (2)

.github/workflows/build-master.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `gradle/wrapper-validation-action v3`
- `actions/setup-java v4` → [Updates: `v6`]
- `gradle/actions v3` → [Updates: `v6`]
- `gradle/actions v3` → [Updates: `v6`]

.github/workflows/pull-request.yml (5)

- `actions/checkout v4` → [Updates: `v7`]
- `gradle/wrapper-validation-action v3`
- `actions/setup-java v4` → [Updates: `v6`]
- `gradle/actions v3` → [Updates: `v6`]
- `gradle/actions v3` → [Updates: `v6`]

gradle (7)

build.gradle (16)

- `org.springframework.boot 3.2.5` → [Updates: `3.5.16`, `4.1.1`]
- `io.spring.dependency-management 1.1.6` → [Updates: `1.1.7`]
- `net.nemerosa.versioning 3.1.0` → [Updates: `4.0.1`]
- `com.google.protobuf 0.9.4` → [Updates: `0.10.0`]
- `io.freefair.lombok 8.6` → [Updates: `8.14.4`, `9.5.0`]
- `com.github.ben-manes.versions 0.51.0` → [Updates: `0.63.1`]
- `com.diffplug.spotless 6.25.0` → [Updates: `8.10.2`]
- `org.jetbrains.kotlin.jvm 1.9.23` → [Updates: `1.9.25`, `2.4.20`]
- `org.springframework.boot:spring-boot-starter-parent 3.2.5` → [Updates: `3.5.16`, `4.1.1`]
- `org.springframework.cloud:spring-cloud-dependencies 2023.0.1` → [Updates: `2023.0.6`, `2025.1.3`]
- `com.alibaba.cloud:spring-cloud-alibaba-dependencies 2023.0.1.0` → [Updates: `2023.0.3.4`, `2025.1.0.0`]
- `com.google.protobuf:protobuf-bom 3.25.3` → [Updates: `3.25.9`, `4.36.1`]
- `com.google.guava:guava-bom 33.2.1-jre` → [Updates: `33.7.1-jre`]
- `io.grpc:grpc-bom 1.63.0` → [Updates: `1.84.0`]
- `org.junit:junit-bom 5.10.2` → [Updates: `5.14.4`, `6.1.3`]
- `org.jetbrains.kotlin:kotlin-bom 1.9.23` → [Updates: `1.9.25`, `2.4.20`]

deploy.gradle

gradle.properties

grpc-client-spring-boot-starter/build.gradle (1)

- `javax.inject:javax.inject 1`

grpc-common-spring-boot/build.gradle

grpc-server-spring-boot-starter/build.gradle

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 8.7` → [Updates: `8.14.5`, `9.7.1`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

Open the contributing guide

Research direction

This is an automated Renovate dashboard rather than a single scoped task. Review build.gradle, gradle/wrapper/gradle-wrapper.properties, and the .github/workflows files, then inspect the linked open pull requests; completion would require selecting and validating specific dependency updates, but no single update or acceptance target is defined here.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, java, kotlin, spring-boot
Domain
build-system, ci-cd
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
10/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.