Dependency Dashboard

[specmatic-builder]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• chore(deps): update s4u/setup-maven-action action to v1.20.0
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/metadata-action action to v6
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update github artifact actions (major) (actions/download-artifact, actions/upload-artifact)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [SECURITY] Update dependency tools.jackson.core:jackson-core to v3.1.1
• chore(deps): update cxf.version to v4.2.1 (org.apache.cxf:cxf-codegen-plugin, org.apache.cxf:cxf-rt-transports-http, org.apache.cxf:cxf-rt-frontend-jaxws)
• chore(deps): update dependency maven to v3.9.16
• chore(deps): update amazoncorretto docker tag to v25
• chore(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• chore(deps): update spring boot to v4 (major) (org.springframework.boot:spring-boot-maven-plugin, org.springframework.boot:spring-boot-starter-logging, org.springframework.boot:spring-boot-starter-test, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-web, org.springframework.boot:spring-boot-starter)
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

1/1 CVEs have Renovate fixes.

maven

pom.xml

tools.jackson.core:jackson-core

• GHSA-2m67-wjpj-xhg9 (fixed in [3.1.1,))

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• amazoncorretto 21.0.11-alpine → [Updates: 25.0.3-alpine]

github-actions (1)

.github/workflows/maven.yml (12)

• actions/checkout v6
• actions/setup-java v5
• s4u/setup-maven-action v1.19.0 → [Updates: v1.20.0]
• actions/upload-artifact v6 → [Updates: v7]
• actions/upload-artifact v6 → [Updates: v7]
• actions/upload-artifact v6 → [Updates: v7]
• actions/upload-artifact v6 → [Updates: v7]
• actions/checkout v6
• actions/download-artifact v7 → [Updates: v8]
• docker/setup-buildx-action v3 → [Updates: v4]
• docker/metadata-action v5 → [Updates: v6]
• docker/build-push-action v6 → [Updates: v7]

gitlabci (1)

.gitlab-ci.yml (2)

• amazoncorretto 17.0.19-alpine → [Updates: 25.0.3-alpine]
• amazoncorretto 17.0.19-alpine → [Updates: 25.0.3-alpine]

maven (1)

pom.xml (27)

• org.jetbrains.kotlin:kotlin-stdlib 2.3.21
• tools.jackson.core:jackson-core 3.1.0 → [Updates: 3.1.1]
• tools.jackson.core:jackson-databind 3.1.3
• com.fasterxml.jackson.core:jackson-annotations 2.21
• org.springframework.boot:spring-boot-starter 3.5.14 → [Updates: 4.0.6]
• org.springframework.boot:spring-boot-starter-web 3.5.14 → [Updates: 4.0.6]
• org.springframework.boot:spring-boot-starter-security 3.5.14 → [Updates: 4.0.6]
• org.springframework.boot:spring-boot-starter-validation 3.5.14 → [Updates: 4.0.6]
• org.springframework.boot:spring-boot-starter-test 3.5.14 → [Updates: 4.0.6]
• org.springframework.boot:spring-boot-starter-logging 3.5.14 → [Updates: 4.0.6]
• org.junit.jupiter:junit-jupiter 6.1.0
• io.specmatic:junit5-support 2.46.1
• org.junit.platform:junit-platform-launcher 6.1.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 → [Updates: 3.0.3]
• org.testcontainers:testcontainers-junit-jupiter 2.0.5
• org.apache.cxf:cxf-rt-frontend-jaxws 4.2.0 → [Updates: 4.2.1]
• org.apache.cxf:cxf-rt-transports-http 4.2.0 → [Updates: 4.2.1]
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.5
• org.glassfish.jaxb:jaxb-runtime 4.0.8
• org.jetbrains.kotlin:kotlin-maven-plugin 2.3.21
• org.jetbrains.kotlin:kotlin-maven-allopen 2.3.21
• org.apache.maven.plugins:maven-compiler-plugin 3.15.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.5
• org.springframework.boot:spring-boot-maven-plugin 3.5.14 → [Updates: 4.0.6]
• org.jacoco:jacoco-maven-plugin 0.8.14
• org.apache.cxf:cxf-codegen-plugin 4.2.0 → [Updates: 4.2.1]
• javax.xml.bind:jaxb-api 2.3.1

maven-wrapper (3)

.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.9.15 → [Updates: 3.9.16]
• maven-wrapper 3.3.4

mvnw (1)

• maven-wrapper 3.3.4

mvnw.cmd (1)

• maven-wrapper 3.3.4