specmatic / specmatic/enterprise-sample
Dependency Dashboard
Nobody has claimed this yet.
- Dominant language
- Kotlin
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
Other Branches
The following updates are pending. To force the creation of a PR, click on a checkbox below.
- chore(deps): update actions/checkout action to v7
- chore(deps): update github artifact actions to v7
- chore(deps): lock file maintenance
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- [SECURITY] Update grpcVersion to v1.75.0
- chore(deps): update confluentinc/cp-kafka docker tag to v7.9.10
- chore(deps): update confluentinc/cp-zookeeper docker tag to v7.9.10
- chore(deps): update eclipse-temurin docker tag to v17.0.20_8-jre
- chore(deps): update kotlin to v2.4.20 (
org.jetbrains.kotlin.plugin.spring,org.jetbrains.kotlin.jvm) - chore(deps): update grpc-java monorepo to v1.84.0 (
io.grpc:grpc-core,io.grpc:protoc-gen-grpc-java,io.grpc:grpc-stub,io.grpc:grpc-protobuf) - chore(deps): update confluentinc/cp-kafka docker tag to v8
- chore(deps): update dependency net.devh:grpc-client-spring-boot-starter to v3
- chore(deps): update dependency net.devh:grpc-server-spring-boot-starter to v3
- chore(deps): update eclipse-temurin docker tag to v25
- chore(deps): update gradle to v9
- chore(deps): update protobuf monorepo to v4 (
com.google.protobuf:protoc,com.google.protobuf:protobuf-java) - chore(deps): update spring boot to v4
- Click on this checkbox to rebase all open PRs at once
Vulnerabilities
[!IMPORTANT]
1/1CVEs have Renovate fixes.
gradle
build.gradle.kts
io.grpc:grpc-netty-shaded
- GHSA-prj3-ccx8-p6x4 (fixed in [1.75.0,))
Detected Dependencies
docker-compose (3)
docker-compose.pre.enterprise.test.yml (2)
confluentinc/cp-zookeeper 7.9.8→ [Updates:7.9.10]confluentinc/cp-kafka 7.9.8→ [Updates:7.9.10,8.3.2]docker-compose.test.yml (2)
confluentinc/cp-zookeeper 7.9.8→ [Updates:7.9.10]confluentinc/cp-kafka 7.9.8→ [Updates:7.9.10,8.3.2]docker-compose.yml (2)
confluentinc/cp-zookeeper 7.9.8→ [Updates:7.9.10]confluentinc/cp-kafka 7.9.8→ [Updates:7.9.10,8.3.2]
dockerfile (1)
placeorder-service/Dockerfile (1)
eclipse-temurin 17.0.19_10-jre→ [Updates:17.0.20_8-jre,25.0.4_7-jre]
github-actions (1)
.github/workflows/contract-tests.yml (3)
actions/checkout v4→ [Updates:v7]actions/upload-artifact v6→ [Updates:v7]ctrf-io/github-test-reporter v1
gradle (5)
build.gradle.kts (10)
org.jetbrains.kotlin.jvm 2.4.10→ [Updates:2.4.20]org.jetbrains.kotlin.plugin.spring 2.4.10→ [Updates:2.4.20]org.springframework.boot 3.5.16→ [Updates:4.1.1]io.spring.dependency-management 1.1.7com.google.protobuf 0.10.0io.grpc:grpc-protobuf 1.58.0→ [Updates:1.84.0]io.grpc:grpc-stub 1.58.0→ [Updates:1.84.0]io.grpc:protoc-gen-grpc-java 1.58.0→ [Updates:1.84.0]io.grpc:grpc-netty-shaded 1.58.0→ [Updates:1.75.0]io.grpc:grpc-core 1.58.0→ [Updates:1.84.0]common-proto/build.gradle.kts (3)
com.google.protobuf:protobuf-java 3.25.9→ [Updates:4.36.2]javax.annotation:javax.annotation-api 1.3.2com.google.protobuf:protoc 3.25.9→ [Updates:4.36.2]placeorder-service/build.gradle.kts (2)
net.devh:grpc-client-spring-boot-starter 2.15.0.RELEASE→ [Updates:3.1.0.RELEASE]net.devh:grpc-server-spring-boot-starter 2.15.0.RELEASE→ [Updates:3.1.0.RELEASE]settings.gradle.kts
shared-contract/build.gradle.kts
gradle-wrapper (1)
gradle/wrapper/gradle-wrapper.properties (1)
gradle 8.14.5→ [Updates:9.7.1]
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Renovate Dependency Dashboard and review the linked pull requests before examining build.gradle.kts, common-proto/build.gradle.kts, placeorder-service/build.gradle.kts, the Docker Compose files, and .github/workflows/contract-tests.yml. The dashboard lists multiple pending and already-created dependency updates, so completion requires selecting a specific update and confirming its associated work is finished.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, docker-compose, github-actions, grpc, kafka, kotlin, spring-boot
- Domain
- backend, build-system, ci-cd, devops
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100