Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
maven	mysql:mysql-connector-java

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency org.projectlombok:lombok to v1.18.42
• fix(deps): update actuator.admin.version to v2.7.16 (de.codecentric:spring-boot-admin-starter-client, de.codecentric:spring-boot-admin-starter-server)
• fix(deps): update dependency cn.hutool:hutool-all to v5.8.43
• fix(deps): update dependency com.aliyun.openservices:aliyun-log-logback-appender to v0.1.31
• fix(deps): update dependency com.qcloud:cos_api to v5.6.261
• fix(deps): update dependency org.codehaus.janino:janino to v3.1.12
• fix(deps): update dependency org.elasticsearch.client:elasticsearch-rest-high-level-client to v7.17.29
• fix(deps): update dependency org.slf4j:slf4j-api to v2.0.17
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2021.0.9
• fix(deps): update druid.version to v1.2.27 (com.alibaba:druid-spring-boot-starter, com.alibaba:druid)
• fix(deps): update mybatis.plus.version to v3.5.16 (com.baomidou:mybatis-plus-annotation, com.baomidou:mybatis-plus-extension, com.baomidou:mybatis-plus-boot-starter)
• fix(deps): update spring boot to v2.7.18 (org.springframework.boot:spring-boot-maven-plugin, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot:spring-boot-dependencies)
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.1
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
• chore(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
• chore(deps): update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v3.11.0.3922
• chore(deps): update dependency org.sonatype.plugins:nexus-staging-maven-plugin to v1.7.0
• fix(deps): update dependency com.aliyun.oss:aliyun-sdk-oss to v3.18.4
• fix(deps): update dependency com.fasterxml:classmate to v1.7.3
• fix(deps): update dependency com.fasterxml.jackson.module:jackson-modules-java8 to v2.21.0
• fix(deps): update dependency com.rabbitmq:amqp-client to v5.28.0
• fix(deps): update dependency io.grpc:grpc-bom to v1.78.0
• fix(deps): update dependency io.springfox:springfox-swagger2 to v2.10.5
• fix(deps): update dependency org.mybatis.spring.boot:mybatis-spring-boot-starter to v2.3.2
• fix(deps): update mapstruct monorepo to v1.6.3 (org.mapstruct:mapstruct-processor, org.mapstruct:mapstruct)
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-java action to v5
• chore(deps): update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5
• chore(deps): update dependency ubuntu to v24
• fix(deps): update dependency com.github.ulisesbocchio:jasypt-spring-boot-starter to v4
• fix(deps): update dependency com.google.guava:guava to v33
• fix(deps): update dependency io.springfox:springfox-swagger2 to v3
• fix(deps): update dependency net.logstash.logback:logstash-logback-encoder to v9
• fix(deps): update dependency org.flywaydb:flyway-core to v11
• fix(deps): update dependency org.mybatis.spring.boot:mybatis-spring-boot-starter to v4
• fix(deps): update dependency org.slf4j:slf4j-api to v2
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025
• fix(deps): update dependency org.springframework.plugin:spring-plugin-core to v4
• fix(deps): update dependency org.springframework.plugin:spring-plugin-metadata to v3
• fix(deps): update kotlin monorepo to v2 (major) (org.jetbrains.kotlin:kotlin-maven-lombok, org.jetbrains.kotlin:kotlin-maven-plugin, org.jetbrains.kotlin:kotlin-stdlib, org.jetbrains.kotlin:kotlin-test-junit, org.jetbrains.kotlin:kotlin-reflect, org.jetbrains.kotlin:kotlin-stdlib-jdk8)
• fix(deps): update redisson.version to v4 (major) (org.redisson:redisson-spring-data-21, org.redisson:redisson-spring-boot-starter)
• fix(deps): update spring boot to v4 (major) (org.springframework.boot:spring-boot-maven-plugin, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot:spring-boot-dependencies)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): replace dependency mysql:mysql-connector-java with com.mysql:mysql-connector-j [security]
• fix(deps): update dependency ch.qos.logback:logback-classic to v1.2.13 [security]
• fix(deps): update dependency ch.qos.logback:logback-core to v1.5.25 [security]
• fix(deps): update dependency io.springfox:springfox-swagger-ui to v2.10.0 [security]
• fix(deps): update dependency mysql:mysql-connector-java to v8 [security]
• fix(deps): update dependency com.amazonaws:aws-java-sdk-s3 to v1.12.797
• fix(deps): update kotlin monorepo to v1.9.25 (org.jetbrains.kotlin:kotlin-maven-lombok, org.jetbrains.kotlin:kotlin-maven-plugin, org.jetbrains.kotlin:kotlin-stdlib, org.jetbrains.kotlin:kotlin-test-junit, org.jetbrains.kotlin:kotlin-reflect, org.jetbrains.kotlin:kotlin-stdlib-jdk8)
• fix(deps): update dependency org.apache.curator:curator-recipes to v5.9.0
• fix(deps): update redisson.version to v3.52.0 (org.redisson:redisson-spring-data-21, org.redisson:redisson-spring-boot-starter)
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3
• fix(deps): update actuator.admin.version to v3 (major) (de.codecentric:spring-boot-admin-starter-client, de.codecentric:spring-boot-admin-starter-server)
• fix(deps): update dependency com.alibaba.cloud:spring-cloud-alibaba-dependencies to v2025
• fix(deps): update dependency io.github.openfeign:feign-core to v13
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update anapsix/alpine-java docker tag to v8u92b14_server
• fix(deps): update dependency com.github.ulisesbocchio:jasypt-spring-boot-starter to v3.0.5
• fix(deps): update dependency io.github.openfeign.opentracing:feign-opentracing to v0.4.1

Detected Dependencies

dockerfile (1)

custom-test/Dockerfile (1)

• anapsix/alpine-java 8_server-jre_unlimited → [Updates: 8u92b14_server-jre_unlimited]

github-actions (4)

.github/workflows/build-common-api.yml (3)

• actions/checkout v3 → [Updates: v6]
• actions/setup-java v3 → [Updates: v5]
• actions/cache v3 → [Updates: v5]

.github/workflows/commit-msg-checker.yml (2)

• ahmadnassri/action-commit-lint v2.1.17
• ubuntu 20.04 → [Updates: 24.04]

.github/workflows/release.yml (3)

• actions/checkout v3 → [Updates: v6]
• actions/setup-java v1 → [Updates: v5]
• samuelmeuli/action-maven-publish v1

.github/workflows/sonar.yml (4)

• actions/checkout v3 → [Updates: v6]
• actions/setup-java v3 → [Updates: v5]
• actions/cache v3 → [Updates: v5]
• actions/cache v3 → [Updates: v5]

maven (41)

common-actuator/common-actuator-client/pom.xml (1)

• io.github.alice52:common-actuator 0.0.5

common-actuator/pom.xml

common-api-inject/pom.xml

common-core/pom.xml

common-crypt/pom.xml

common-database/database-common/pom.xml (1)

• io.github.alice52:common-database 0.0.5

common-database/database-mybatis-plus/pom.xml (1)

• io.github.alice52:common-database 0.0.5

common-database/database-mybatis/pom.xml (1)

• io.github.alice52:common-database 0.0.5

common-database/pom.xml (1)

• p6spy:p6spy 3.9.1

common-feign/pom.xml (2)

• io.opentracing.contrib:opentracing-spring-jaeger-web-starter 3.3.1
• io.github.openfeign.opentracing:feign-opentracing 0.4.0 → [Updates: 0.4.1]

common-http/pom.xml

common-log/pom.xml (1)

• io.opentracing.contrib:opentracing-spring-jaeger-web-starter 3.3.1

common-mq/common-mq-api/pom.xml (1)

• io.github.alice52:common-mq 0.0.5

common-mq/common-mq-receiver/pom.xml (1)

• io.github.alice52:common-mq 0.0.5

common-mq/common-mq-sender/pom.xml (2)

• io.github.alice52:common-mq 0.0.5
• io.github.alice52:common-uid 0.0.5

common-mq/pom.xml

common-openapi/pom.xml

common-oss/pom.xml (2)

• com.aliyun.oss:aliyun-sdk-oss 3.17.2 → [Updates: 3.18.4]
• com.tencent.cloud:cos-sts-java 3.0.8

common-redis/pom.xml

common-security/pom.xml (2)

• org.springframework.cloud:spring-cloud-starter-security 2.2.5.RELEASE
• org.springframework.security.oauth.boot:spring-security-oauth2-autoconfigure 2.6.8

common-swagger/pom.xml

common-swagger/swagger-2/pom.xml (1)

• io.github.alice52:common-swagger 0.0.5

common-swagger/swagger-3/pom.xml (9)

• io.github.alice52:common-swagger 0.0.5
• io.springfox:springfox-oas 3.0.0
• io.springfox:springfox-data-rest 3.0.0
• io.springfox:springfox-bean-validators 3.0.0
• io.springfox:springfox-swagger-ui 3.0.0
• com.fasterxml:classmate 1.6.0 → [Updates: 1.7.3]
• org.slf4j:slf4j-api 2.0.3 → [Updates: 2.0.17]
• org.springframework.plugin:spring-plugin-core 2.0.0.RELEASE → [Updates: 4.0.0]
• org.springframework.plugin:spring-plugin-metadata 2.0.0.RELEASE → [Updates: 3.0.0]

common-test/pom.xml

common-token/pom.xml

common-uid/pom.xml

custom-test/custom-common/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-kotlin/pom.xml (6)

• io.github.alice52:custom-test 0.0.5
• org.jetbrains.kotlin:kotlin-stdlib-jdk8 1.9.20 → [Updates: 1.9.25, 2.3.0]
• org.jetbrains.kotlin:kotlin-reflect 1.9.20 → [Updates: 1.9.25, 2.3.0]
• org.jetbrains.kotlin:kotlin-test-junit 1.9.20 → [Updates: 1.9.25, 2.3.0]
• org.jetbrains.kotlin:kotlin-maven-plugin 1.9.20 → [Updates: 1.9.25, 2.3.0]
• org.jetbrains.kotlin:kotlin-maven-lombok 1.9.20 → [Updates: 1.9.25, 2.3.0]

custom-test/custom-oss/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-syntax/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-test-crypt/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-test-database/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-test-http/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-test-log/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-test-mq/custom-test-mq-sender/pom.xml (1)

• io.github.alice52:custom-test-mq 0.0.5

custom-test/custom-test-mq/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-test-openapi/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-test-redis/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/custom-test-uid/pom.xml (1)

• io.github.alice52:custom-test 0.0.5

custom-test/pom.xml

pom.xml (57)

• org.jetbrains.kotlin:kotlin-stdlib 1.9.20 → [Updates: 1.9.25, 2.3.0]
• org.springframework.cloud:spring-cloud-dependencies 2021.0.4 → [Updates: 2021.0.9, 2025.1.0]
• com.alibaba.cloud:spring-cloud-alibaba-dependencies 2021.1 → [Updates: 2025.0.0.0]
• io.github.openfeign:feign-core 11.10 → [Updates: 13.6]
• org.slf4j:slf4j-api 1.7.36 → [Updates: 2.0.17]
• ch.qos.logback:logback-core 1.2.9 → [Updates: 1.5.25]
• ch.qos.logback:logback-classic 1.2.3 → [Updates: 1.2.13]
• org.codehaus.janino:janino 3.1.9 → [Updates: 3.1.12]
• com.aliyun.openservices:aliyun-log-logback-appender 0.1.23 → [Updates: 0.1.31]
• net.logstash.logback:logstash-logback-encoder 7.4 → [Updates: 9.0]
• org.projectlombok:lombok 1.18.30 → [Updates: 1.18.42]
• cn.hutool:hutool-all 5.8.23 → [Updates: 5.8.43]
• com.github.ulisesbocchio:jasypt-spring-boot-starter 3.0.4 → [Updates: 3.0.5, 4.0.4]
• org.mapstruct:mapstruct 1.5.3.Final → [Updates: 1.6.3]
• javax.validation:validation-api 2.0.1.Final
• com.google.guava:guava 32.1.3-jre → [Updates: 33.5.0-jre]
• com.xkcoding.justauth:justauth-spring-boot-starter 1.4.0
• net.jodah:expiringmap 0.5.11
• com.github.axet:kaptcha 0.0.9
• com.amazonaws:aws-java-sdk-s3 1.12.593 → [Updates: 1.12.797]
• com.fasterxml.jackson.module:jackson-modules-java8 2.16.0 → [Updates: 2.21.0]
• org.springframework.boot:spring-boot-dependencies 2.7.17 → [Updates: 2.7.18, 4.0.2]
• org.springframework.boot:spring-boot-starter-validation 2.7.17 → [Updates: 2.7.18, 4.0.2]
• org.springframework.security.oauth:spring-security-oauth2 2.5.2.RELEASE
• de.codecentric:spring-boot-admin-starter-server 2.7.13 → [Updates: 2.7.16, 3.5.7]
• de.codecentric:spring-boot-admin-starter-client 2.7.13 → [Updates: 2.7.16, 3.5.7]
• junit:junit 4.13.2
• mysql:mysql-connector-java 5.1.49 → [Updates: 8.0.28, 8.0.33]
• com.alibaba:druid 1.2.20 → [Updates: 1.2.27]
• com.alibaba:druid-spring-boot-starter 1.2.20 → [Updates: 1.2.27]
• org.mybatis.spring.boot:mybatis-spring-boot-starter 2.2.2 → [Updates: 2.3.2, 4.0.1]
• com.baomidou:mybatis-plus-boot-starter 3.5.4.1 → [Updates: 3.5.16]
• com.baomidou:mybatis-plus-extension 3.5.4.1 → [Updates: 3.5.16]
• com.baomidou:mybatis-plus-annotation 3.5.4.1 → [Updates: 3.5.16]
• org.elasticsearch.client:elasticsearch-rest-high-level-client 7.17.15 → [Updates: 7.17.29]
• org.redisson:redisson-spring-boot-starter 3.17.7 → [Updates: 3.52.0, 4.1.0]
• org.redisson:redisson-spring-data-21 3.17.7 → [Updates: 3.52.0, 4.1.0]
• org.flywaydb:flyway-core 5.2.4 → [Updates: 11.20.3]
• io.springfox:springfox-swagger-ui 2.9.2 → [Updates: 2.10.0]
• io.springfox:springfox-swagger2 2.9.2 → [Updates: 2.10.5, 3.0.0]
• com.github.xiaoymin:knife4j-spring-boot-starter 3.0.3
• io.springfox:springfox-boot-starter 3.0.0
• io.grpc:grpc-bom 1.59.0 → [Updates: 1.78.0]
• org.apache.curator:curator-recipes 5.4.0 → [Updates: 5.9.0]
• com.rabbitmq:amqp-client 5.20.0 → [Updates: 5.28.0]
• com.qcloud:cos_api 5.6.187 → [Updates: 5.6.261]
• org.sonarsource.scanner.maven:sonar-maven-plugin 3.10.0.2594 → [Updates: 3.11.0.3922, 5.5.0.6356]
• org.springframework.boot:spring-boot-maven-plugin 2.7.17 → [Updates: 2.7.18, 4.0.2]
• org.apache.maven.plugins:maven-compiler-plugin 3.11.0 → [Updates: 3.14.1]
• org.projectlombok:lombok 1.18.30 → [Updates: 1.18.42]
• org.mapstruct:mapstruct-processor 1.5.3.Final → [Updates: 1.6.3]
• org.jetbrains.kotlin:kotlin-maven-plugin 1.9.20 → [Updates: 1.9.25, 2.3.0]
• org.jetbrains.kotlin:kotlin-maven-lombok 1.9.20 → [Updates: 1.9.25, 2.3.0]
• org.apache.maven.plugins:maven-source-plugin 3.3.0 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 2.10.4 → [Updates: 3.12.0]
• org.apache.maven.plugins:maven-gpg-plugin 3.1.0 → [Updates: 3.2.8]
• org.sonatype.plugins:nexus-staging-maven-plugin 1.6.8 → [Updates: 1.7.0]

---

• Check this box to trigger a request for Renovate to run again on this repository