open-feature / open-feature/java-sdk-contrib

Dependency Dashboard

Open
#143 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Java
Stars
49
Forks
81
Avg merge
20h 3m
Merged PRs (30d)
6

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (1)
Datasource Package Last Updated
github-actions amannn/action-semantic-pull-request 2025-08-22

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

  • chore(deps): update actions/cache action to v6
  • chore(deps): update actions/checkout action to v7
  • chore(deps): update actions/setup-java action to v6
  • chore(deps): update dependency com.configcat:configcat-java-client to v10
  • chore(deps): update dependency com.flagsmith:flagsmith-java-client to v8
  • chore(deps): update dependency com.puppycrawl.tools:checkstyle to v14
  • chore(deps): update dependency com.squareup.okhttp3:mockwebserver to v5
  • chore(deps): update dependency com.squareup.okhttp3:okhttp to v5
  • chore(deps): update dependency com.statsig:serversdk to v3
  • chore(deps): update dependency io.getunleash:unleash-client-java to v12
  • chore(deps): update googleapis/release-please-action action to v5
  • πŸ” Create all pending approval PRs at once πŸ”

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

  • chore(deps): update dependency io.cucumber:cucumber-bom to v7.34.8
  • chore(deps): update dependency io.github.gzsombor:json-logic-java to v1.1.6
  • chore(deps): update dependency io.reactivex.rxjava3:rxjava to v3.1.12
  • chore(deps): update dependency io.rest-assured:rest-assured to v6.0.1
  • chore(deps): update dependency maven to v3.9.16
  • chore(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
  • chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
  • chore(deps): update dependency org.cyclonedx:cyclonedx-maven-plugin to v2.9.3
  • chore(deps): update dependency org.projectlombok:lombok to v1.18.48
  • chore(deps): update jackson monorepo to v2.22.2 (com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson:jackson-bom, com.fasterxml.jackson.datatype:jackson-datatype-jsr310)
  • chore(deps): update junit-framework monorepo to v5.14.4 (org.junit.jupiter:junit-jupiter, org.junit:junit-bom)
  • chore(deps): update slf4j monorepo to v2.0.19 (org.slf4j:slf4j-simple, org.slf4j:slf4j-api)
  • chore(deps): update testcontainers-java monorepo to v2.0.5 (org.testcontainers:testcontainers-junit-jupiter, org.testcontainers:testcontainers)
  • chore(deps): update actions/cache action to v4.3.0
  • chore(deps): update actions/checkout action to v5.1.0
  • chore(deps): update actions/setup-java action to v5.7.0
  • chore(deps): update amannn/action-semantic-pull-request action to v6.1.1
  • chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3.10.2
  • chore(deps): update dependency com.github.spotbugs:spotbugs to v4.10.4
  • chore(deps): update dependency com.github.spotbugs:spotbugs-annotations to v4.10.4
  • chore(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.10.4.1
  • chore(deps): update dependency com.google.cloud:libraries-bom to v26.88.1
  • chore(deps): update dependency com.google.code.gson:gson to v2.14.0
  • chore(deps): update dependency com.google.guava:guava to v33.7.1-jre
  • chore(deps): update dependency com.optimizely.ab:core-api to v4.6.0
  • chore(deps): update dependency com.optimizely.ab:core-httpclient-impl to v4.6.0
  • chore(deps): update dependency com.squareup.okio:okio-jvm to v3.18.2
  • chore(deps): update dependency com.statsig:serversdk to v1.36.5
  • chore(deps): update dependency commons-codec:commons-codec to v1.22.1
  • chore(deps): update dependency commons-io:commons-io to v2.22.0
  • chore(deps): update dependency commons-validator:commons-validator to v1.11.0
  • chore(deps): update dependency dev.openfeature:sdk to v1.22.1
  • chore(deps): update dependency dev.openfeature.contrib.providers:flagd to v0.14.2
  • chore(deps): update dependency io.flipt:flipt-java to v1.4.0
  • chore(deps): update dependency io.getunleash:unleash-client-java to v11.2.1
  • chore(deps): update dependency org.apache.commons:commons-collections4 to v4.6.0
  • chore(deps): update dependency org.apache.logging.log4j:log4j-slf4j2-impl to v2.26.1
  • chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
  • chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
  • chore(deps): update dependency org.apache.maven.plugins:maven-toolchains-plugin to v3.3.0
  • chore(deps): update dependency org.codehaus.mojo:flatten-maven-plugin to v1.8.0
  • chore(deps): update dependency org.sonatype.central:central-publishing-maven-plugin to v0.11.0
  • chore(deps): update googleapis/release-please-action action to v4.4.1
  • chore(deps): update grpc-java monorepo to v1.84.0 (io.grpc:grpc-stub, io.grpc:grpc-protobuf, io.grpc:grpc-netty-shaded)
  • chore(deps): update opentelemetry-java monorepo to v1.66.0 (io.opentelemetry:opentelemetry-api, io.opentelemetry:opentelemetry-bom)
  • πŸ” Create all rate-limited PRs at once πŸ”

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

Detected Dependencies

git-submodules (1)
.gitmodules (6)
  • providers/flagd/schemas 1daf5ff56b48d582187d59e35d48c6e191c23839 β†’ [Updates: undefined]
  • providers/flagd/test-harness v3.10.1@b308c1bbb12fc4511af6220f1b072a20a1a8831f
  • providers/flagd/spec eefdf439c5a5b69ccde036c3c6959a4a6c17e08c β†’ [Updates: undefined]
  • providers/go-feature-flag/wasm-releases 1eda3b7f5b6696554acf454a488bc33da5f5a062 β†’ [Updates: undefined]
  • tools/flagd-core/schemas 1daf5ff56b48d582187d59e35d48c6e191c23839 β†’ [Updates: undefined]
  • tools/flagd-api-testkit/test-harness v3.10.1@b308c1bbb12fc4511af6220f1b072a20a1a8831f
github-actions (4)
.github/workflows/ci.yml (3)
  • actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 β†’ [Updates: v5.1.0, v7.0.1, v5]
  • actions/setup-java v5@dded0888837ed1f317902acf8a20df0ad188d165 β†’ [Updates: v5.7.0, v6.0.1, v5]
  • actions/cache v4@0400d5f644dc74513175e3cd8d07132dd4860809 β†’ [Updates: v4.3.0, v6.1.0, v4]
.github/workflows/component-owners.yml
.github/workflows/lint-pr.yml (1)
  • amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50 β†’ [Updates: v6.1.1]
.github/workflows/release-please.yml (4)
  • googleapis/release-please-action v4@c2a5a2bd6a758a0937f1ddb1e8950609867ed15c β†’ [Updates: v4.4.1, v5.0.0, v4]
  • actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8 β†’ [Updates: v5.1.0, v7.0.1, v5]
  • actions/setup-java v5@dded0888837ed1f317902acf8a20df0ad188d165 β†’ [Updates: v5.7.0, v6.0.1, v5]
  • actions/cache v4@0400d5f644dc74513175e3cd8d07132dd4860809 β†’ [Updates: v4.3.0, v6.1.0, v4]
maven (22)
hooks/codereadiness/pom.xml (1)
  • org.semver4j:semver4j 5.8.0 β†’ [Updates: 6.0.0]
hooks/open-telemetry/pom.xml (2)
  • io.opentelemetry:opentelemetry-bom 1.63.0 β†’ [Updates: 1.66.0]
  • io.opentelemetry.semconv:opentelemetry-semconv-incubating 1.28.0-alpha
pom.xml (31)
  • org.junit:junit-bom 5.14.3 β†’ [Updates: 5.14.4, 6.1.3]
  • io.cucumber:cucumber-bom 7.34.3 β†’ [Updates: 7.34.8]
  • org.mockito:mockito-bom 5.23.0
  • dev.openfeature:sdk [1.21.0,1.99999)
  • org.projectlombok:lombok 1.18.42 β†’ [Updates: 1.18.48]
  • com.github.spotbugs:spotbugs 4.9.8 β†’ [Updates: 4.10.4]
  • org.assertj:assertj-core 3.27.7
  • org.junit-pioneer:junit-pioneer 2.3.0
  • org.awaitility:awaitility 4.3.0
  • org.apache.maven.plugins:maven-toolchains-plugin 3.2.0 β†’ [Updates: 3.3.0]
  • org.apache.maven.plugins:maven-compiler-plugin 3.15.0 β†’ [Updates: 3.16.0]
  • org.apache.maven.plugins:maven-jar-plugin 3.5.0 β†’ [Updates: 3.5.1]
  • org.apache.maven.plugins:maven-surefire-plugin 3.5.5 β†’ [Updates: 3.6.0]
  • org.codehaus.mojo:flatten-maven-plugin 1.7.0 β†’ [Updates: 1.8.0]
  • org.apache.maven.plugins:maven-resources-plugin 3.5.0
  • org.honton.chas:exists-maven-plugin 0.15.2
  • org.apache.maven.plugins:maven-source-plugin 3.4.0
  • org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
  • org.cyclonedx:cyclonedx-maven-plugin 2.9.1 β†’ [Updates: 2.9.3]
  • org.apache.maven.plugins:maven-gpg-plugin 3.2.8
  • org.sonatype.central:central-publishing-maven-plugin 0.10.0 β†’ [Updates: 0.11.0]
  • org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
  • com.puppycrawl.tools:checkstyle 12.3.1 β†’ [Updates: 14.1.0]
  • org.apache.maven.plugins:maven-pmd-plugin 3.28.0
  • com.github.spotbugs:spotbugs-maven-plugin 4.9.8.3 β†’ [Updates: 4.10.4.1]
  • com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
  • com.github.spotbugs:spotbugs 4.9.8 β†’ [Updates: 4.10.4]
  • com.diffplug.spotless:spotless-maven-plugin 3.4.0 β†’ [Updates: 3.10.2]
  • org.apache.maven.plugins:maven-toolchains-plugin 3.2.0 β†’ [Updates: 3.3.0]
  • org.apache.maven.plugins:maven-surefire-plugin 3.5.5 β†’ [Updates: 3.6.0]
  • org.apache.maven.plugins:maven-compiler-plugin 3.15.0 β†’ [Updates: 3.16.0]
providers/configcat/pom.xml (3)
  • com.configcat:configcat-java-client 9.4.3 β†’ [Updates: 9.4.4, 10.0.1]
  • org.slf4j:slf4j-api 2.0.17 β†’ [Updates: 2.0.19]
  • org.apache.logging.log4j:log4j-slf4j2-impl 2.25.2 β†’ [Updates: 2.26.1]
providers/env-var/pom.xml (1)
  • org.apache.commons:commons-lang3 3.20.0
providers/flagd/pom.xml (20)
  • dev.openfeature.contrib.tools:flagd-core [2.0.0,3.0.0)
  • io.grpc:grpc-netty-shaded 1.82.0 β†’ [Updates: 1.84.0]
  • io.grpc:grpc-protobuf 1.82.0 β†’ [Updates: 1.84.0]
  • io.grpc:grpc-stub 1.82.0 β†’ [Updates: 1.84.0]
  • org.apache.tomcat:annotations-api 6.0.53
  • org.apache.commons:commons-collections4 4.5.0 β†’ [Updates: 4.6.0]
  • io.opentelemetry:opentelemetry-api 1.63.0 β†’ [Updates: 1.66.0]
  • org.junit.jupiter:junit-jupiter 5.14.3 β†’ [Updates: 5.14.4, 6.1.3]
  • org.testcontainers:testcontainers 2.0.4 β†’ [Updates: 2.0.5]
  • org.testcontainers:testcontainers-junit-jupiter 2.0.4 β†’ [Updates: 2.0.5]
  • io.rest-assured:rest-assured 6.0.0 β†’ [Updates: 6.0.1]
  • commons-io:commons-io 2.21.0 β†’ [Updates: 2.22.0]
  • org.slf4j:slf4j-simple 2.0.17 β†’ [Updates: 2.0.19]
  • com.vmlens:api 1.2.28
  • kr.motd.maven:os-maven-plugin 1.7.1
  • org.codehaus.mojo:exec-maven-plugin 3.6.3 β†’ [Updates: 3.6.4]
  • org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1
  • com.github.spotbugs:spotbugs-maven-plugin 4.9.8.3 β†’ [Updates: 4.10.4.1]
  • com.vmlens:vmlens-maven-plugin 1.2.28
  • org.codehaus.mojo:exec-maven-plugin 3.6.3 β†’ [Updates: 3.6.4]
providers/flagsmith/pom.xml (3)
  • com.flagsmith:flagsmith-java-client 7.4.3 β†’ [Updates: 8.1.1]
  • com.squareup.okhttp3:okhttp 4.12.0 β†’ [Updates: 5.5.0]
  • com.squareup.okhttp3:mockwebserver 4.12.0 β†’ [Updates: 5.5.0]
providers/flipt/pom.xml (8)
  • io.flipt:flipt-java 1.1.2 β†’ [Updates: 1.4.0]
  • org.slf4j:slf4j-api 2.0.17 β†’ [Updates: 2.0.19]
  • com.fasterxml.jackson.core:jackson-databind 2.22.1 β†’ [Updates: 2.22.2]
  • org.wiremock:wiremock 3.13.2
  • com.fasterxml.jackson.core:jackson-core 2.22.1 β†’ [Updates: 2.22.2]
  • com.fasterxml.jackson.core:jackson-databind 2.22.1 β†’ [Updates: 2.22.2]
  • com.fasterxml.jackson.core:jackson-annotations 2.22
  • org.apache.logging.log4j:log4j-slf4j2-impl 2.25.2 β†’ [Updates: 2.26.1]
providers/gcp/pom.xml (6)
  • com.google.cloud:libraries-bom 26.83.0 β†’ [Updates: 26.88.1]
  • com.fasterxml.jackson:jackson-bom 2.22.0 β†’ [Updates: 2.22.2]
  • org.slf4j:slf4j-api 2.0.17 β†’ [Updates: 2.0.19]
  • org.apache.logging.log4j:log4j-slf4j2-impl 2.25.0 β†’ [Updates: 2.26.1]
  • com.vmlens:api 1.2.28
  • com.vmlens:vmlens-maven-plugin 1.2.27 β†’ [Updates: 1.2.28]
providers/go-feature-flag/pom.xml (13)
  • com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.22.0 β†’ [Updates: 2.22.2]
  • com.fasterxml.jackson.core:jackson-core 2.22.1 β†’ [Updates: 2.22.2]
  • com.fasterxml.jackson.core:jackson-databind 2.22.1 β†’ [Updates: 2.22.2]
  • com.fasterxml.jackson.core:jackson-annotations 2.22
  • org.slf4j:slf4j-api 2.0.17 β†’ [Updates: 2.0.19]
  • io.reactivex.rxjava3:rxjava 3.1.10 β†’ [Updates: 3.1.12]
  • org.apache.logging.log4j:log4j-slf4j2-impl 2.25.2 β†’ [Updates: 2.26.1]
  • com.dylibso.chicory:wasi 1.7.5
  • com.squareup.okhttp3:mockwebserver 4.12.0 β†’ [Updates: 5.5.0]
  • com.squareup.okhttp3:okhttp 4.12.0 β†’ [Updates: 5.5.0]
  • com.squareup.okio:okio-jvm 3.15.0 β†’ [Updates: 3.18.2]
  • com.github.spotbugs:spotbugs-annotations 4.9.8 β†’ [Updates: 4.10.4]
  • com.dylibso.chicory:chicory-compiler-maven-plugin 1.7.5
providers/jsonlogic-eval-provider/pom.xml (3)
  • io.github.gzsombor:json-logic-java 1.1.5 β†’ [Updates: 1.1.6]
  • org.json:json 20250517
  • com.github.spotbugs:spotbugs-annotations 4.9.8 β†’ [Updates: 4.10.4]
providers/multiprovider/pom.xml (2)
  • org.json:json 20250517
  • org.apache.logging.log4j:log4j-slf4j2-impl 2.25.2 β†’ [Updates: 2.26.1]
providers/ofrep/pom.xml (8)
  • com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.22.0 β†’ [Updates: 2.22.2]
  • com.fasterxml.jackson.core:jackson-core 2.22.1 β†’ [Updates: 2.22.2]
  • com.fasterxml.jackson.core:jackson-databind 2.22.1 β†’ [Updates: 2.22.2]
  • com.fasterxml.jackson.core:jackson-annotations 2.22
  • org.slf4j:slf4j-api 2.0.17 β†’ [Updates: 2.0.19]
  • commons-validator:commons-validator 1.10.1 β†’ [Updates: 1.11.0]
  • com.google.guava:guava 33.4.8-jre β†’ [Updates: 33.7.1-jre]
  • com.squareup.okhttp3:mockwebserver 4.12.0 β†’ [Updates: 5.5.0]
providers/optimizely/pom.xml (4)
  • com.optimizely.ab:core-api 4.2.2 β†’ [Updates: 4.6.0]
  • com.optimizely.ab:core-httpclient-impl 4.2.2 β†’ [Updates: 4.6.0]
  • org.slf4j:slf4j-api 2.0.17 β†’ [Updates: 2.0.19]
  • org.apache.logging.log4j:log4j-slf4j2-impl 2.25.2 β†’ [Updates: 2.26.1]
providers/statsig/pom.xml (3)
  • com.statsig:serversdk 1.18.1 β†’ [Updates: 1.36.5, 3.2.0]
  • org.slf4j:slf4j-api 2.0.17 β†’ [Updates: 2.0.19]
  • org.apache.logging.log4j:log4j-slf4j2-impl 2.25.2 β†’ [Updates: 2.26.1]
providers/unleash/pom.xml (4)
  • io.getunleash:unleash-client-java 11.0.2 β†’ [Updates: 11.2.1, 12.3.0]
  • org.slf4j:slf4j-api 2.0.17 β†’ [Updates: 2.0.19]
  • org.wiremock:wiremock 3.13.2
  • org.apache.logging.log4j:log4j-slf4j2-impl 2.25.2 β†’ [Updates: 2.26.1]
samples/gcp/pom.xml (4)
  • dev.openfeature.contrib.providers:gcp 0.0.2
  • dev.openfeature:sdk 1.12.1 β†’ [Updates: 1.22.1]
  • org.slf4j:slf4j-simple 2.0.17 β†’ [Updates: 2.0.19]
  • org.codehaus.mojo:exec-maven-plugin 3.5.0 β†’ [Updates: 3.6.4]
tools/flagd-api-testkit/pom.xml (5)
  • dev.openfeature.contrib.tools:flagd-api [0.0.1,)
  • org.assertj:assertj-core 3.27.7
  • com.fasterxml.jackson.core:jackson-databind 2.22.1 β†’ [Updates: 2.22.2]
  • org.codehaus.mojo:exec-maven-plugin 3.6.3 β†’ [Updates: 3.6.4]
  • org.apache.maven.plugins:maven-resources-plugin 3.5.0
tools/flagd-api/pom.xml
tools/flagd-core/pom.xml (13)
  • dev.openfeature.contrib.tools:flagd-api [1.0.0,2.0.0)
  • com.fasterxml.jackson.core:jackson-databind 2.22.1 β†’ [Updates: 2.22.2]
  • io.github.gzsombor:json-logic-java 1.1.5 β†’ [Updates: 1.1.6]
  • com.google.code.gson:gson 2.13.1 β†’ [Updates: 2.14.0]
  • com.networknt:json-schema-validator 1.5.9 β†’ [Updates: 3.0.7]
  • org.apache.commons:commons-lang3 3.20.0
  • org.semver4j:semver4j 5.8.0 β†’ [Updates: 6.0.0]
  • commons-codec:commons-codec 1.21.0 β†’ [Updates: 1.22.1]
  • org.junit.jupiter:junit-jupiter 5.14.3 β†’ [Updates: 5.14.4, 6.1.3]
  • org.assertj:assertj-core 3.27.7
  • dev.openfeature.contrib.tools:flagd-api-testkit [0.0.1,)
  • org.codehaus.mojo:exec-maven-plugin 3.6.3 β†’ [Updates: 3.6.4]
  • org.apache.maven.plugins:maven-resources-plugin 3.5.0
tools/flagd-http-connector/pom.xml (3)
  • dev.openfeature.contrib.providers:flagd 0.11.20 β†’ [Updates: 0.14.2]
  • org.apache.commons:commons-lang3 3.20.0
  • com.google.code.findbugs:annotations 3.0.1u2
tools/junit-openfeature/pom.xml (2)
  • org.apache.commons:commons-lang3 3.20.0
  • org.junit-pioneer:junit-pioneer 2.3.0
maven-wrapper (3)
.mvn/wrapper/maven-wrapper.properties (1)
  • maven 3.9.14 β†’ [Updates: 3.9.16]
mvnw (1)
  • maven-wrapper 3.3.4
mvnw.cmd (1)
  • maven-wrapper 3.3.4
renovate-config (1)
renovate.json
  • Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up β€” it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linked Renovate Dependency Dashboard documentation, then inspect the pending, rate-limited, open, and blocked update sections and their referenced pull requests. This issue names no single source file or bounded change; completion would require selecting and implementing a specific dependency update rather than changing the dashboard itself.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, java
Domain
build-system, ci-cd, devops
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
10/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.