Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/kit-data-manager/pit-service).

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update actions/checkout digest to d23441a
- [ ] chore(deps): update docker/login-action digest to dbcb813
- [ ] chore(deps): update gradle/actions digest to 9c97196
- [ ] chore(deps): update plugin org.springframework.boot to v3.5.16
- [ ] fix(deps): update dependency lombok to v1.18.48
- [ ] fix(deps): update dependency com.google.guava:guava to v33.7.1-jre
- [ ] fix(deps): update springdocversion to v2.9.1 (`org.springdoc:springdoc-openapi-starter-webmvc-api`, `org.springdoc:springdoc-openapi-starter-webmvc-ui`)
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update actions/setup-java action to v6
- [ ] chore(deps): update plugin com.gorylenko.gradle-git-properties to v4
- [ ] chore(deps): update plugin org.owasp.dependencycheck to v13
- [ ] chore(deps): lock file maintenance
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [chore(deps): update gradle to v9](../pull/372)

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update docker/build-push-action digest to c3c9e26
- [ ] [chore(deps): update docker/setup-buildx-action digest to f87e599](../pull/391)
- [ ] [chore(deps): update docker/setup-docker-action digest to 2bf61fb](../pull/370)
- [ ] chore(deps): update docker/setup-qemu-action digest to 9901266
- [ ] chore(deps): update eclipse-temurin docker tag to v25

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): pin actions/setup-java action to b6effb0](../pull/379)
- [ ] [chore(deps): update docker/metadata-action digest to dc80280](../pull/390)
- [ ] [chore(deps): update github/codeql-action digest to b96794f](../pull/393)
- [ ] [chore(deps): update plugin org.springframework.boot to v4](../pull/375)
- [ ] [fix(deps): update dependency com.jayway.jsonpath:json-path to v3](../pull/376)
- [ ] [fix(deps): update dependency org.junit:junit-bom to v6](../pull/377)
- [ ] [fix(deps): update springdocversion to v3](../pull/378) (`org.springdoc:springdoc-openapi-starter-webmvc-api`, `org.springdoc:springdoc-openapi-starter-webmvc-ui`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (2)

docker/Dockerfile-build-in-image (2)

- `eclipse-temurin 21` → [Updates: `25`, `21`]
- `eclipse-temurin 21` → [Updates: `25`, `21`]

docker/Dockerfile-reuse-local-build (1)

- `eclipse-temurin 21` → [Updates: `25`, `21`]

github-actions (3)

.github/workflows/codeql-analysis.yml (5)

- `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`, `v6`]
- `github/codeql-action v4@7211b7c8077ea37d8641b6271f6a365a22a5fbfa` → [Updates: `v4`]
- `actions/setup-java v5` → [Updates: `v6`, `v5`]
- `gradle/actions v6@3f131e8634966bd73d06cc69884922b02e6faf92` → [Updates: `v6`]
- `github/codeql-action v4@7211b7c8077ea37d8641b6271f6a365a22a5fbfa` → [Updates: `v4`]

.github/workflows/docker-publish.yml (18)

- `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`, `v6`]
- `actions/setup-java v5` → [Updates: `v6`, `v5`]
- `gradle/actions v6@3f131e8634966bd73d06cc69884922b02e6faf92` → [Updates: `v6`]
- `docker/setup-docker-action v5@b2189fbf2a6592b51fee7cdd93ee2bfaeba733db` → [Updates: `v5`]
- `docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0` → [Updates: `v4`]
- `docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8` → [Updates: `v4`]
- `docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5` → [Updates: `v4`]
- `docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9` → [Updates: `v6`]
- `docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` → [Updates: `v7`]
- `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`, `v6`]
- `actions/setup-java v5` → [Updates: `v6`, `v5`]
- `gradle/actions v6@3f131e8634966bd73d06cc69884922b02e6faf92` → [Updates: `v6`]
- `docker/setup-docker-action v5@b2189fbf2a6592b51fee7cdd93ee2bfaeba733db` → [Updates: `v5`]
- `docker/login-action v4@af1e73f918a031802d376d3c8bbc3fe56130a9b0` → [Updates: `v4`]
- `docker/setup-qemu-action v4@96fe6ef7f33517b61c61be40b68a1882f3264fb8` → [Updates: `v4`]
- `docker/setup-buildx-action v4@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5` → [Updates: `v4`]
- `docker/metadata-action v6@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9` → [Updates: `v6`]
- `docker/build-push-action v7@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a` → [Updates: `v7`]

.github/workflows/gradle.yml (3)

- `actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10` → [Updates: `v7`, `v6`]
- `actions/setup-java v5` → [Updates: `v6`, `v5`]
- `gradle/actions v6@3f131e8634966bd73d06cc69884922b02e6faf92` → [Updates: `v6`]

gradle (4)

build.gradle (21)

- `org.springframework.boot 3.5.14` → [Updates: `3.5.16`, `4.1.1`]
- `io.spring.dependency-management 1.1.7`
- `io.freefair.lombok 9.5.0`
- `net.researchgate.release 3.1.0`
- `com.github.kt3k.coveralls 2.12.2`
- `org.owasp.dependencycheck 12.2.2` → [Updates: `13.0.0`]
- `com.gorylenko.gradle-git-properties 2.5.7` → [Updates: `4.0.1`]
- `lombok 1.18.46` → [Updates: `1.18.48`]
- `jacoco 0.8.15`
- `edu.kit.datamanager:service-base 1.3.6`
- `edu.kit.datamanager:repo-core 1.2.7`
- `com.google.guava:guava 33.6.0-jre` → [Updates: `33.7.1-jre`]
- `jakarta.transaction:jakarta.transaction-api 2.0.1`
- `org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17` → [Updates: `2.9.1`, `3.1.1`]
- `org.springdoc:springdoc-openapi-starter-webmvc-api 2.8.17` → [Updates: `2.9.1`, `3.1.1`]
- `com.github.everit-org.json-schema:org.everit.json.schema 1.14.6`
- `org.apache.httpcomponents:httpclient 4.5.14`
- `org.apache.httpcomponents:httpclient-cache 4.5.14`
- `net.handle:handle-client 9.3.2`
- `org.junit:junit-bom 5.14.4` → [Updates: `6.1.3`]
- `com.jayway.jsonpath:json-path 2.10.0` → [Updates: `3.0.0`]

gradle.properties

gradle/updateCff.gradle

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 8.14.5` → [Updates: `9.7.1`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the dependency entries in build.gradle, gradle/wrapper/gradle-wrapper.properties, the Dockerfiles, and the listed .github/workflows files. Review the linked Renovate pull requests and pending updates first; done would require selecting a specific update, confirming its checks pass, and avoiding work already covered by an open PR.

Written by the indexing model from the issue text.