Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	com.github.tomakehurst:wiremock
npm	@types/react-datepicker

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): update patch, pin, image digest versions (@types/react, gradle, postcss, react-router-dom, swr, org.springframework.modulith:spring-modulith-bom, org.postgresql:postgresql, io.swagger.core.v3:swagger-annotations, io.mockk:mockk, org.apache.groovy:groovy-all, jacoco)
• chore(deps): update dependency autoprefixer to v10.5.3
• chore(deps): update dependency msw to v2.15.0
• chore(deps): update dependency prettier to v3.9.5
• chore(deps): update dependency prettier-plugin-tailwindcss to v0.8.1
• chore(deps): update docker.io/alpine docker tag to v3.24
• chore(deps): update istio monorepo to v1.30.3 (base, cni, gateway, istiod)
• chore(deps): update locustio/locust docker tag to v2.45.0
• chore(deps): update nginx docker tag to v1.31.3
• chore(deps): update plugin org.openapi.generator to v7.23.0
• fix(deps): update dependency au.com.dius.pact.provider:junit5spring to v4.7.3
• fix(deps): update node.js to v24.18.0 (node, @types/node)
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/github-script action to v9
• chore(deps): update actions/setup-node action to v7
• chore(deps): update actions/setup-python action to v6
• chore(deps): update azul/zulu-openjdk docker tag to v25
• chore(deps): update codecov/codecov-action action to v7
• chore(deps): update dependency @semantic-release/exec to v7
• chore(deps): update dependency @types/react-datepicker to v7
• chore(deps): update dependency @vitejs/plugin-react to v6
• chore(deps): update dependency @vitest/coverage-v8 to v4
• chore(deps): update dependency env-cmd to v11
• chore(deps): update dependency jsdom to v29
• chore(deps): update dependency license-checker-rseidelsohn to v5
• chore(deps): update dependency tailwindcss to v4
• chore(deps): update dependency vite-plugin-svgr to v5
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update docker/setup-qemu-action action to v4
• chore(deps): update dorny/test-reporter action to v3
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)
• chore(deps): update gradle to v9
• chore(deps): update gradle/actions action to v6
• chore(deps): update helm release kafka to v32
• chore(deps): update helm release keycloakx to v7
• chore(deps): update helm release postgresql to v18
• chore(deps): update kotlin monorepo to v2 (org.jetbrains.kotlin.plugin.spring, org.jetbrains.kotlin.jvm)
• chore(deps): update plugin com.diffplug.spotless to v8
• chore(deps): update plugin com.github.jk1.dependency-license-report to v3
• chore(deps): update plugin io.freefair.lombok to v9
• chore(deps): update plugin org.flywaydb.flyway to v12
• chore(deps): update plugin org.liquibase.gradle to v3
• chore(deps): update plugin org.springframework.boot to v4
• chore(deps): update quay.io/keycloak/keycloak docker tag to v26
• chore(deps): update softprops/action-gh-release action to v3
• fix(deps): update dependency @headlessui/react to v2
• fix(deps): update dependency @icons-pack/react-simple-icons to v13
• fix(deps): update dependency com.ninja-squad:springmockk to v5
• fix(deps): update dependency com.squareup.okhttp3:okhttp to v5
• fix(deps): update dependency date-fns to v4
• fix(deps): update dependency de.codecentric:chaos-monkey-spring-boot to v4
• fix(deps): update dependency de.codecentric:chaos-monkey-spring-boot to v4
• fix(deps): update dependency io.kubernetes:client-java-extended to v27
• fix(deps): update dependency net.lbruun.springboot:preliquibase-spring-boot-starter to v2
• fix(deps): update dependency org.apache.groovy:groovy-all to v5
• fix(deps): update dependency org.liquibase:liquibase-core to v5
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• fix(deps): update dependency org.springframework.modulith:spring-modulith-bom to v2
• fix(deps): update dependency org.testcontainers:testcontainers-bom to v2
• fix(deps): update dependency react-datepicker to v9
• fix(deps): update dependency react-oidc-context to v3
• fix(deps): update dependency react-router-dom to v7
• fix(deps): update dependency simple-icons to v16
• fix(deps): update dependency typescript to v7
• fix(deps): update dependency web-vitals to v5
• fix(deps): update react monorepo to v19 (@types/react, @types/react-dom, react, react-dom)
• fix(deps): update versions.restassured to v6 (io.rest-assured:xml-path, io.rest-assured:rest-assured, io.rest-assured:json-path)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency vite to v6 [security]
• chore(deps): update dependency vitest to v3 [security]
• chore(deps): update plugin org.springframework.boot to v3.5.16
• fix(deps): update dependency @icons-pack/react-simple-icons to v9.7.0
• fix(deps): update dependency net.lbruun.springboot:preliquibase-spring-boot-starter to v1.6.1
• fix(deps): update dependency org.liquibase:liquibase-core to v4.33.0
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.17
• chore(deps): update actions/setup-java action to v5
• fix(deps): update dependency oidc-client-ts to v3
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency @heroicons/react to v2

Detected Dependencies

docker-compose (6)

infrastructure/docker/docker-compose.yml (4)

• quay.io/keycloak/keycloak 21.1.2 → [Updates: 26.7.0]
• bitnami/postgresql 15
• bitnami/postgresql 15
• bitnami/postgresql 15

services/gateway/docker-compose.yml (4)

• quay.io/keycloak/keycloak 21.1.2 → [Updates: 26.7.0]
• bitnami/postgresql 15
• bitnami/postgresql 15
• bitnami/postgresql 15

services/habit/docker-compose.yml (1)

• bitnami/postgresql 15

services/report/docker-compose.yaml (2)

• rodolpheche/wiremock 2.31.0-alpine
• rodolpheche/wiremock 2.31.0-alpine

services/track/docker-compose.yml (1)

• bitnami/postgresql 15

test/lpt-locust/docker-compose.yml

dockerfile (6)

services/gateway/Dockerfile (1)

• azul/zulu-openjdk 21-jre-latest → [Updates: 25-jre-latest]

services/habit/Dockerfile (1)

• azul/zulu-openjdk 21-jre-latest → [Updates: 25-jre-latest]

services/report/Dockerfile (1)

• azul/zulu-openjdk 21-jre-latest → [Updates: 25-jre-latest]

services/track/Dockerfile (1)

• azul/zulu-openjdk 21-jre-latest → [Updates: 25-jre-latest]

services/ui/Dockerfile (1)

• nginx 1.29.5 → [Updates: 1.31.3]

test/lpt-locust/Dockerfile (1)

• locustio/locust 2.43.4 → [Updates: 2.45.0]

github-actions (8)

.github/workflows/build-docker.yaml (5)

• actions/checkout v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]
• docker/setup-qemu-action v3 → [Updates: v4]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/login-action v3 → [Updates: v4]

.github/workflows/build-java-service.yaml (7)

• actions/checkout v4 → [Updates: v7]
• actions/setup-java v4 → [Updates: v5]
• gradle/actions v5 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]
• codecov/codecov-action v3 → [Updates: v7]

.github/workflows/lpt-locust.yaml (4)

• actions/checkout v4 → [Updates: v7]
• actions/setup-python v5 → [Updates: v6]
• actions/upload-artifact v4 → [Updates: v7]
• python 3.14

.github/workflows/parse-jest-results.yaml (1)

• dorny/test-reporter v1 → [Updates: v3]

.github/workflows/parse-junit-results.yaml (1)

• dorny/test-reporter v1 → [Updates: v3]

.github/workflows/prepare-release.yaml (2)

• actions/checkout v4 → [Updates: v7]
• actions/setup-node v4 → [Updates: v7]

.github/workflows/release.yaml (4)

• actions/checkout v4 → [Updates: v7]
• actions/download-artifact v4 → [Updates: v8]
• actions/github-script v7 → [Updates: v9]
• softprops/action-gh-release v1 → [Updates: v3]

.github/workflows/ui.yaml (6)

• actions/checkout v4 → [Updates: v7]
• actions/setup-node v4 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]
• codecov/codecov-action v3 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]
• actions/upload-artifact v4 → [Updates: v7]

gradle (16)

services/gateway/build.gradle (9)

• org.springframework.boot 3.1.8 → [Updates: 3.5.16, 4.1.0]
• com.diffplug.spotless 6.25.0 → [Updates: 8.8.0]
• io.freefair.lombok 8.14.4 → [Updates: 9.5.0]
• com.github.jk1.dependency-license-report 2.9 → [Updates: 3.1.4]
• lombok 1.18.46
• io.rest-assured:json-path 5.5.7 → [Updates: 6.0.1]
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.1]
• io.rest-assured:xml-path 5.5.7 → [Updates: 6.0.1]
• org.springframework.cloud:spring-cloud-dependencies 2022.0.5 → [Updates: 2025.1.2]

services/gateway/gradle/jacoco.gradle

services/gateway/settings.gradle

services/gradle/intTest.gradle

services/gradle/jacoco.gradle (1)

• jacoco 0.8.14 → [Updates: 0.8.15]

services/gradle/licenses.gradle

services/habit/build.gradle (17)

• org.springframework.boot 3.1.8 → [Updates: 3.5.16, 4.1.0]
• org.liquibase.gradle 2.2.2 → [Updates: 3.1.0]
• com.diffplug.spotless 6.25.0 → [Updates: 8.8.0]
• io.freefair.lombok 8.14.4 → [Updates: 9.5.0]
• com.github.jk1.dependency-license-report 2.9 → [Updates: 3.1.4]
• lombok 1.18.46
• org.springframework.modulith:spring-modulith-bom 1.4.11 → [Updates: 1.4.12, 2.1.0]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0 → [Updates: 2.8.17, 3.0.3]
• org.postgresql:postgresql 42.7.10 → [Updates: 42.7.13]
• org.liquibase:liquibase-core 4.29.2 → [Updates: 4.33.0, 5.0.3]
• de.codecentric:chaos-monkey-spring-boot 3.3.0 → [Updates: 4.0.0]
• net.lbruun.springboot:preliquibase-spring-boot-starter 1.5.1 → [Updates: 1.6.1, 2.0.0]
• au.com.dius.pact.provider:junit5spring 4.6.19 → [Updates: 4.7.3]
• io.rest-assured:json-path 5.5.7 → [Updates: 6.0.1]
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.1]
• io.rest-assured:xml-path 5.5.7 → [Updates: 6.0.1]
• org.testcontainers:testcontainers-bom 1.21.4 → [Updates: 2.0.5]

services/habit/gradle/jacoco.gradle

services/habit/settings.gradle

services/report/build.gradle.kts (12)

• org.openapi.generator 7.19.0 → [Updates: 7.23.0]
• com.github.jk1.dependency-license-report 2.9 → [Updates: 3.1.4]
• org.springframework.boot 3.1.8 → [Updates: 3.5.16, 4.1.0]
• com.diffplug.spotless 6.25.0 → [Updates: 8.8.0]
• org.jetbrains.kotlin.jvm 1.9.25 → [Updates: 2.4.10]
• org.jetbrains.kotlin.plugin.spring 1.9.25 → [Updates: 2.4.10]
• io.swagger.core.v3:swagger-annotations 2.2.48 → [Updates: 2.2.52]
• com.squareup.moshi:moshi 1.15.2
• de.codecentric:chaos-monkey-spring-boot 3.3.0 → [Updates: 4.0.0]
• io.mockk:mockk 1.14.9 → [Updates: 1.14.11]
• com.ninja-squad:springmockk 4.0.2 → [Updates: 5.0.1]
• com.github.tomakehurst:wiremock 3.0.1 → [Updates: 3.0.1]

services/report/settings.gradle.kts

services/track/build.gradle (14)

• org.springframework.boot 3.1.8 → [Updates: 3.5.16, 4.1.0]
• org.flywaydb.flyway 10.22.0 → [Updates: 12.11.0]
• com.diffplug.spotless 6.25.0 → [Updates: 8.8.0]
• io.freefair.lombok 8.14.4 → [Updates: 9.5.0]
• com.github.jk1.dependency-license-report 2.9 → [Updates: 3.1.4]
• lombok 1.18.46
• org.springframework.modulith:spring-modulith-bom 1.4.11 → [Updates: 1.4.12, 2.1.0]
• org.postgresql:postgresql 42.7.10 → [Updates: 42.7.13]
• de.codecentric:chaos-monkey-spring-boot 3.3.0 → [Updates: 4.0.0]
• org.reflections:reflections 0.10.2
• io.rest-assured:json-path 5.5.7 → [Updates: 6.0.1]
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.1]
• io.rest-assured:xml-path 5.5.7 → [Updates: 6.0.1]
• org.testcontainers:testcontainers-bom 1.21.4 → [Updates: 2.0.5]

services/track/gradle/jacoco.gradle

services/track/settings.gradle

test/infra-tests/build.gradle (4)

• org.apache.groovy:groovy-all 4.0.31 → [Updates: 4.0.32, 5.0.7]
• org.spockframework:spock-bom 2.4-groovy-5.0
• com.squareup.okhttp3:okhttp 4.12.0 → [Updates: 5.4.0]
• io.kubernetes:client-java-extended 19.0.3 → [Updates: 27.0.0]

test/infra-tests/settings.gradle

gradle-wrapper (5)

services/gateway/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 8.14.5, 9.6.1]

services/habit/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 8.14.5, 9.6.1]

services/report/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 8.14.5, 9.6.1]

services/track/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 8.14.5, 9.6.1]

test/infra-tests/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 8.14.5, 9.6.1]

helm-values (5)

services/gateway/helm/gateway/values.yaml

services/habit/helm/habit/values.yaml (1)

• docker.io/alpine 3.23 → [Updates: 3.24]

services/report/helm/report/values.yaml

services/track/helm/track/values.yaml (1)

• docker.io/alpine 3.23 → [Updates: 3.24]

services/ui/helm/ui/values.yaml

helmfile (10)

infrastructure/istio/helmfile.d/00-namespaces.yaml

infrastructure/istio/helmfile.d/05-istio-base.yaml (1)

• base 1.28.3 → [Updates: 1.30.3]

infrastructure/istio/helmfile.d/06-istio-cni.yaml (1)

• cni 1.28.3 → [Updates: 1.30.3]

infrastructure/istio/helmfile.d/10-istiod.yaml (1)

• istiod 1.28.3 → [Updates: 1.30.3]

infrastructure/istio/helmfile.d/11-istio-ingress.yaml (1)

• gateway 1.28.3 → [Updates: 1.30.3]

infrastructure/istio/helmfile.d/20-addons.yaml

infrastructure/kubernetes/helmfile.d/00-namespaces.yaml

infrastructure/kubernetes/helmfile.d/10-keycloak.yaml (2)

• postgresql 11.9.13 → [Updates: 18.8.0]
• keycloakx 1.7.0 → [Updates: 7.2.2]

infrastructure/kubernetes/helmfile.d/15-kafka.yaml (1)

• kafka 25.3.5 → [Updates: 32.4.3]

infrastructure/kubernetes/helmfile.d/20-habitcentric.yaml

helmv3 (2)

services/habit/helm/habit/Chart.yaml (1)

• postgresql 12.12.10 → [Updates: 18.8.0]

services/track/helm/track/Chart.yaml (1)

• postgresql 12.12.10 → [Updates: 18.8.0]

npm (2)

package.json (2)

• @semantic-release/exec 6.0.3 → [Updates: 7.1.0]
• semantic-release-plus 20.0.0

services/ui/package.json (40)

• @headlessui/react 1.7.19 → [Updates: 2.2.10]
• @heroicons/react 1.0.6 → [Updates: 2.2.0]
• @icons-pack/react-simple-icons 9.4.1 → [Updates: 9.7.0, 13.13.0]
• @popperjs/core 2.11.8
• @tailwindcss/forms 0.5.11
• @types/node 24.10.11 → [Updates: 24.13.3]
• @types/react 18.3.28 → [Updates: 18.3.31, 19.2.17]
• @types/react-dom 18.3.7 → [Updates: 19.2.3]
• date-fns 2.30.0 → [Updates: 4.4.0]
• oidc-client-ts 2.5.0 → [Updates: 3.5.0]
• react 18.3.1 → [Updates: 19.2.7]
• react-datepicker 4.25.0 → [Updates: 9.1.0]
• react-dom 18.3.1 → [Updates: 19.2.7]
• react-oidc-context 2.4.0 → [Updates: 3.3.1]
• react-popper 2.3.0
• react-router-dom 6.30.3 → [Updates: 6.30.4, 7.18.1]
• react-simple-icons 1.0.0-beta.5
• simple-icons 11.15.0 → [Updates: 16.26.0]
• swr 2.4.1 → [Updates: 2.4.2]
• typescript 5.9.3 → [Updates: 7.0.2]
• web-vitals 3.5.2 → [Updates: 5.3.0]
• @testing-library/jest-dom 6.9.1
• @testing-library/react 16.3.2
• @testing-library/user-event 14.6.1
• @types/react-datepicker 4.19.6 → [Updates: 7.0.0]
• @vitejs/plugin-react ^4.0.0 → [Updates: ^6.0.0]
• @vitest/coverage-v8 ^1.0.0 → [Updates: ^4.0.0]
• autoprefixer 10.4.24 → [Updates: 10.5.3]
• env-cmd 10.1.0 → [Updates: 11.0.0]
• jsdom ^23.0.0 → [Updates: ^29.0.0]
• license-checker-rseidelsohn 4.4.2 → [Updates: 5.0.1]
• msw 2.12.8 → [Updates: 2.15.0]
• postcss 8.5.10 → [Updates: 8.5.19]
• prettier 3.8.3 → [Updates: 3.9.5]
• prettier-plugin-tailwindcss 0.7.3 → [Updates: 0.8.1]
• tailwindcss 3.4.19 → [Updates: 4.3.2]
• vite ^5.0.0 → [Updates: ^6.0.0]
• vite-plugin-svgr ^4.2.0 → [Updates: ^5.0.0]
• vitest ^1.0.0 → [Updates: ^3.0.0]
• typescript ^5 → [Updates: ^7.0.0]

nvm (1)

services/ui/.nvmrc (1)

• node 24.13.0 → [Updates: 24.18.0]

pip_requirements (1)

test/lpt-locust/src/requirements.txt

---

• Check this box to trigger a request for Renovate to run again on this repository