Skip to content

Update all dependencies - #140

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-dependencies
Open

Update all dependencies#140
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-dependencies

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
docker/login-action action minor v3.6.0 → v3.7.0 age confidence
docker/metadata-action action minor v5.8.0 → v5.10.0 age confidence
eclipse-temurin (source) final patch 21.0.8_9-jre-alpine → 21.0.12_8-jre-alpine age confidence
gradle (source) patch 8.14.3 → 8.14.6 age confidence
madrapps/jacoco-report action minor v1.6 → v1.8 age confidence
dev.detekt:detekt-rules-ktlint-wrapper (source) dependencies patch 2.0.0-alpha.2 → 2.0.0-alpha.6 age confidence
io.netty:netty-resolver-dns-native-macos (source) dependencies patch 4.2.7.Final → 4.2.19.Final age confidence
com.expediagroup:graphql-kotlin-spring-client dependencies minor 10.0.0-alpha.2 → 10.2.2 age confidence
org.springframework.cloud:spring-cloud-starter-openfeign (source) dependencies patch 5.0.1 → 5.0.3 age confidence
org.springframework.cloud:spring-cloud-dependencies (source) dependencies patch 2025.1.1 → 2025.1.3 age confidence
org.jetbrains.kotlin.plugin.spring (source) plugin minor 2.3.0 → 2.4.21 age confidence
org.jetbrains.kotlin.jvm (source) plugin minor 2.3.0 → 2.4.21 age confidence
dev.detekt (source) plugin patch 2.0.0-alpha.2 → 2.0.0-alpha.6 age confidence
com.expediagroup.graphql plugin minor 10.0.0-alpha.2 → 10.2.2 age confidence
org.springframework.boot (source) plugin minor 4.0.5 → 4.1.1 age confidence

Release Notes

docker/login-action

v3.7.0

Compare Source

Full Changelog: docker/login-action@v3.6.0...v3.7.0

docker/metadata-action

v5.10.0

Compare Source

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Compare Source

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

gradle/gradle (gradle)

v8.14.6: 8.14.6

Compare Source

The Gradle team is excited to announce Gradle 8.14.6.

Here are the highlights of this release:

  • Java 24 support
  • GraalVM Native Image toolchain selection
  • Enhancements to test reporting
  • Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.6 by updating your wrapper:

./gradlew :wrapper --gradle-version=8.14.6 && ./gradlew :wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.5: 8.14.5

Compare Source

The Gradle team is excited to announce Gradle 8.14.5.

Here are the highlights of this release:

  • Java 24 support
  • GraalVM Native Image toolchain selection
  • Enhancements to test reporting
  • Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.5 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.4: 8.14.4

Compare Source

This is a patch release for 8.14. We recommend using 8.14.4 instead of 8.14.

This release addresses two security vulnerabilities:

It also fixes the following issues:

  • #​34365 [Backport] Gradle doesn't stop forked processes
  • #​35125 [Backport] Precompiled script plugin with @​file annotation loses package and breaks
  • #​35184 [Backport] Different fingerprints in the compile classpath for the same dependency
  • #​35228 [Backport] Fix dependency resolution issues
  • #​35288 [Backport] Include GradleDslBaseScriptModel in 8.x
  • #​36326 [Backport] Improve repository disabling logic
  • #​36396 [Backport] Add partial cgroups v2 support
  • #​36420 [Backport] Improve Java 25 support in Gradle 8.14

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 8.14.4 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.4 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

madrapps/jacoco-report

v1.8.0

Compare Source

What's Changed

Full Changelog: Madrapps/jacoco-report@v1.7.2...v1.8.0

v1.7.2

Compare Source

What's Changed

Full Changelog: Madrapps/jacoco-report@v1.7.1...v1.7.2

v1.7.1

Compare Source

What's Changed
New Contributors

Full Changelog: Madrapps/jacoco-report@v1.7.0...v1.7.1

v1.7.0

Compare Source

What's Changed
  • Nothing major has changed since v1.7.0-alpha , apart from documentation update and more lint checks

Full Changelog: Madrapps/jacoco-report@v1.7.0-alpha...v1.7.0

detekt/detekt (dev.detekt:detekt-rules-ktlint-wrapper)

v2.0.0-alpha.6

2.0.0-alpha.6 - 2026-08-04

This is an alpha release of Detekt 2.0.0. It's built against Kotlin 2.4.10, Gradle 9.6.1, AGP 9.3.1 and is tested against JDK 25.

Notable Changes
  • detekt-rules-ktlint-wrapper now targets JVM 17, in preparation for the next ktlint major release which requires JVM 17+, the rest of detekt still targets JVM 8+ - #​9453
Changelog
  • feat(rules): add ignoreSealedClasses option to AbstractClassCanBeInterface - #​9557
  • docs: drop stale Android compile classpath warning note - #​9550
  • Recommend to use Locale.ROOT instead of Locale.US - #​9532
  • Recognize params swallowed by KDoc lexer in OutdatedDocumentation - #​9529
  • Fix UnusedPrivateProperty false negative for constructor properties - #​9491
  • Fix MissingSuperCall false positive when annotation is in grandparent - #​9469
  • Fix UseDataClass false positive for properties with a custom accessor - #​9462
  • Fix a potential bug on Config.getListOrDefault - #​9461
  • Fix UnusedPrivateFunction false positive for overloaded private extension functions with a Java (or generated) receiver type - #​9450
  • Fix CanBeNonNullable false negative on local variables - #​9432
  • Fix CognitiveComplexMethod false positive for object literal methods - #​9431
  • Fix ReturnCount/ThrowsCount false positive where a guard clause following a local variable declaration was still counted (with excludeGuardClauses enabled) - #​9424
  • Extend PropertyUsedBeforeDeclaration to follow private init calls - #​9334
  • Add configuration ignoredFullyQualifiedNames to UnnecessaryFullyQualifiedName rule - #​9301
  • Expose multiline parameter in ClassSignature - #​9084
Dependency Updates
Housekeeping & Refactorings
  • Reduce scope of @Suppress("UNCHECKED_CAST") - #​9459
  • Remove irrelevant test for YamlConfig - #​9457
  • fix: handle trailing commas in @​Configuration annotation parsing in JS generator - #​9447
  • Production code should not depend on fixtures - #​9439
Contributors

We would like to thank the following contributors that made this release possible: @​3flex, @​BraisGabin, @​ChristophyBarth, @​FilippoVigani, @​Phoenix1808, @​ShubhamWorks02, @​cortinico, @​e5l, @​eyupcanakman, @​iuryeng, @​loganrosen, @​marpalat, @​roian6, @​sahilpatel2521, @​tonytonycoder11

See all issues at: 2.0.0

v2.0.0-alpha.5

2.0.0-alpha.5 - 2026-06-17

This is a hotfix release for 2.0.0-alpha.4 where we fixed 2 bugs that were preventing detekt from running correctly.

Changelog
  • fix: stop leaking ktlint-repackage as a transitive dependency - #​9391
  • fix: exclude gradle-public-api from published POM - #​9408
  • Stop accepting unsupported API or language versions passed to CLI - #​9410

v2.0.0-alpha.4

2.0.0-alpha.4 - 2026-06-13

This is an alpha release of Detekt 2.0.0. Is built against Kotlin 2.4.0, Gradle 9.5.1, AGP 9.2.1 and is tested against JDK 25.

Notable Changes
  • Support Kotlin 2.4.0 - #​9218
  • Add new rule LeakingSessionBoundType - #​9242
  • Apply the indent_style configuration to all the ktlint wrapper rules (previsouly this was applied only to the Indentation rule) - #​9315
Breaking Changes
  • Expose Glob-to-Regex functions in psi-utils - #​9340
  • Make Detektion immutable - #​8583
Changelog
  • fix: prevent ArrayPrimitive crash on unresolved types - #​9364
  • Update ktlint documentation links - #​9354
  • Fix PrintStackTrace nested call detection - #​9352
  • Fix unused import false positive for companion object member extension properties - #​9349
  • Accept punctuation after a link - #​9341
  • Fixes UnnecessaryFullyQualifiedName false positive with explicit import shadowing - #​9329
  • docs: fix KMP type resolution task names - #​9316
  • Stop publishing ktlint-repackage - #​9314
  • Stop exposing ktlint's StandardRule to detekt-rules-ktlint-wrapper consumers - #​9313
  • Include ktlint-repackage in ktlint-wrapper JAR - #​9312
  • Declare DGP compatibility with Gradle's configuration cache - #​9311
  • Forward languageVersionSettings to KotlinAnalysisApiEngine.compile - #​9305
  • docs: add ForbiddenImport configuration example - #​9302
  • Fix UnnecessaryFullyQualifiedName clashes with kotlin package name - #​9289
  • Remove excludeImportStatements from Deprecation rule - #​9287
  • Improve repackaging of Analysis API dependencies - #​9285
  • MaxChainedCallsOnSameLine - Fix AA type leaks - #​9261
  • SuspendFunSwallowedCancellation - Fix AA type leaks - #​9256
  • feat: Add exhaustive option to OutdatedDocumentation rule, also improve error messages - #​9255
  • Excluding generated sources by default - #​9251
  • Move FileProcessListenerExtensions to :detekt-test - #​9212
  • Improve SuspendFunSwallowedCancellation - #​9208
  • Cli filters - #​9200
  • Allow single-argument Boolean generics in NonBooleanPropertyPrefixedWithIs - #​9173
  • Remove Config.parentPath - #​9036
Dependency Updates
Housekeeping & Refactorings
  • Update test to avoid typealias to compiler-required annotation - #​9361
  • Remove unnecessary compileOnly dependencies - #​9318
Contributors

We would like to thank the following contributors that made this release possible: @​3flex, @​BraisGabin, @​ChristophyBarth, @​FletchMcKee, @​Lucas-FManager, @​ShubhamWorks02, @​Will-thom, @​e5l, @​fru1tworld, @​jonapoul, @​luanpotter, @​matejdro, @​mirkoalicastro, @​nchen000, @​ninebolt6, @​paulkagiri, @​travisMiehm

v2.0.0-alpha.3

2.0.0-alpha.3 - 2026-04-24

This is an alpha release of Detekt 2.0.0. Is built against Kotlin 2.3.21, Gradle 9.3.1, AGP 9.1.1 and is tested against JDK 25.

As of this release, the workaround of disabling the new DSL and built-in Kotlin via gradle.properties for AGP 9.x projects is no longer required.

Notable Changes
  • Bump Kotlin to v2.3.21 - #​9272
  • Bump AGP to v9.1.1 - #​9244
  • Add support for AGP 9 built-in Kotlin - #​9100
  • Rule UnnecessaryFullyQualifiedName now requires full mode to run - #​9061
  • Add new rule: UnnecessaryRun - #​7428
Breaking Changes
  • Remove DetektProgressListener from our public API - #​9221
  • Remove InvalidConfigurationError from our public API - #​8994
Changelog
  • UseOrEmpty - Fix AA type leaks - #​9263
  • ForbiddenNamedParam - Fix AA type leaks - #​9262
  • UnusedVariable - Fix AA type leaks - #​9260
  • UnnecessaryNotNullOperator - Fix AA type leaks - #​9259
  • Deprecation - Fix AA type leaks - #​9258
  • NestedScopeFunctions - Fix AA type leaks - #​9257
  • Suggest similar property names for misspelled config properties - #​9250
  • MagicNumber DslGradleRunner test fix - #​9245
  • Don't forbid use of java.lang.annotation.Inherited annotation by default - #​9224
  • Fixes #​9017 - false positive with name collisions - #​9223
  • Optimize how we get project statistics - #​9217
  • Rename ProjectComplexityProcessor to ProjectCyclomaticComplexityProcessor - #​9213
  • Add ignoreClass config to MissingUseCall - #​9205
  • Remove LicenseHeaderLoaderExtension from the list of processors - #​9204
  • cli: Improve messages and exception types of --report - #​9203
  • Validate --classpath with JCommander - #​9202
  • System-dependent path separators - #​9199
  • Do not report IgnoredReturnValue on lambda invocation that returns Unit - #​9192
  • Point to valOrVarKeyword for reporting the issue - #​9191
  • Check Throwable class - #​9190
  • Do no report when parent has class - #​9189
  • Add support of indent_style in ktlint Indention rule - #​9180
  • Add severity to different md, html reports - #​9167
  • Check local class which can't be converted to interface - #​9166
  • Inline yaml config in the test - #​9154
  • Tests: Don't check compilation errors with compile-test-snippets=false - #​9153
  • YamlConfig.load returns YamlConfig instead of Config - #​9151
  • Generator: The --config flag value should be a directory or it shouldn't exist - #​9131
  • Fix broken test JvmSpec - #​9129
  • Performance improvement - consolidated KaLibraryModules - #​9127
  • Print cli arguments with debug = true - #​9126
  • MissingUseCall: Fix false negative for checkNotNull/requireNotNull - #​9123
  • Make functionalTest os dependent - #​9098
  • Fix false positive for ExplicitCollectionElementAccessMethod with lambdas - #​9096
  • Expose only LanguageVersionSettings instead of CompilerConfiguration - #​9092
  • Remove project from EnvironmentFacade - #​9089
  • Ensure that AA knows types of excluded files - #​9082
  • Updated to using Gradle's lazy APIs - #​9080
  • Simplify KotlinEnvironmentContainer - #​9077
  • Reduce calls to analyze in MapGetWithNotNullAssertionOperator - #​9067
  • Report MapGetWithNonNullAssertionOperator violations on MutableMaps - #​9065
  • Fix ExplicitCollectionElementAccessMethodSpec for unresolved types - #​9059
  • Allow external dependencies in analysis tests - #​9051
  • Improve exception handling on YamlConfig - #​9048
  • Remove YamlConfig.load(Path) - #​9047
  • Refine AbstractClassCanBeInterface treatment of open properties - #​9043
  • rename Claude.md to CLAUDE.md for cross-platform compatibility - #​9033
  • Clarify CommentOverPrivate... renames in detekt 2 - #​9025
  • Exclude generated sources from default sources - #​9019
  • fix(UnusedVariable): recognize destructured lambda parameters as used - #​9015
  • Replace Lifecycle.bindingProvider by a private function and rename it to validateClasspath - #​9003
  • Remove unnecessary interface - #​9002
  • Remove dependecy of :detekt-test with :detekt-core - #​8987
  • Move yamlConfig functions to :detekt-core - #​8976
  • Only print paths of reports when detektion fails - #​8560
Dependency Updates
  • Bump Kotlin 2.3.20 - #​8959
  • Bump AGP to v9.1.0 - #​9110
  • Add coroutinesCore Intellij to the classpath - #​9176
  • chore: update Kotlin 2.3.20-RC2 → 2.3.20 - #​9160
  • chore(deps): update plugin dev.drewhamilton.poko to v0.22.0 - #​9159
  • Make KotlinAnalysisApiEngine AutoCloseable - #​9144
  • fix(deps): update kotlin monorepo to v2.3.10 - #​9037
Housekeeping & Refactorings
  • Don't use paths to read files from resources/ - #​9175
  • Remove unnecessary test nesting - #​9150
Contributors

We would like to thank the following contributors that made this release possible: @​3flex, @​BraisGabin, @​FletchMcKee, @​TWiStErRob, @​UnguidedFreedom, @​atulgpt, @​cortinico, @​fru1tworld, @​jonapoul, @​matejdro, @​mirkoalicastro, @​picklebento, @​t-kameyama, @​travisMiehm

ExpediaGroup/graphql-kotlin (com.expediagroup:graphql-kotlin-spring-client)

v10.2.2

Compare Source

Other Changes
  • Fix dropped properties from multiple fragment selections (#​2210

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner November 1, 2025 01:07
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch from f5e66ba to 0404cd6 Compare November 9, 2025 15:31
@renovate renovate Bot changed the title Update all dependencies to v2.2.21 Update all dependencies Nov 9, 2025
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch from 0404cd6 to 1ffd4a4 Compare November 14, 2025 03:10
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 3 times, most recently from 17b0684 to 7d3a644 Compare December 2, 2025 15:49
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 5 times, most recently from ebaf52b to 49121cc Compare December 23, 2025 14:42
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 3 times, most recently from 6609dc9 to f985645 Compare January 28, 2026 18:26
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 3 times, most recently from 135257d to 2dfe6ec Compare February 3, 2026 18:35
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from dc66aa5 to 3276026 Compare February 11, 2026 03:49
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch from 3276026 to c219723 Compare February 24, 2026 17:22
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch from c219723 to a7b0671 Compare March 21, 2026 10:13
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from ac5c3b7 to cc64a33 Compare April 28, 2026 18:09
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch from cc64a33 to 346c692 Compare May 5, 2026 12:31
@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown

LeanIX GitHub Agent Code Coverage

Overall Project 64.09% 🍏

There is no coverage information present for the Files changed

@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from baafea5 to ac6b144 Compare May 10, 2026 02:25
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from 3b9fb40 to 358b44a Compare May 24, 2026 01:57
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch from 358b44a to 7049f78 Compare May 25, 2026 23:05
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 4 times, most recently from 564fcf5 to 09b9e32 Compare June 8, 2026 08:16
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 4 times, most recently from 1030c6e to b85aafb Compare June 22, 2026 23:46
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 3 times, most recently from ad5b994 to 013a284 Compare June 27, 2026 23:27
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 3 times, most recently from f280372 to 8cc11b3 Compare July 6, 2026 19:43
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch from 8cc11b3 to bc8bdc9 Compare July 12, 2026 04:01
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch from bc8bdc9 to 502fc34 Compare July 19, 2026 12:40
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from 0d22a65 to b011cf4 Compare August 9, 2026 22:37
@renovate
renovate Bot force-pushed the renovate/all-dependencies branch 2 times, most recently from ab3afb0 to 2a95601 Compare August 15, 2026 19:13

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@geoandri geoandri Awaiting requested review from geoandri geoandri is a code owner automatically assigned from leanix/team-cider
@alfredo-mfaria alfredo-mfaria Awaiting requested review from alfredo-mfaria alfredo-mfaria is a code owner automatically assigned from leanix/team-cider
@mohamedlajmileanix mohamedlajmileanix Awaiting requested review from mohamedlajmileanix mohamedlajmileanix is a code owner automatically assigned from leanix/team-cider
@YauheniyaBasaranovichLeanIX YauheniyaBasaranovichLeanIX Awaiting requested review from YauheniyaBasaranovichLeanIX YauheniyaBasaranovichLeanIX is a code owner automatically assigned from leanix/team-cider
@AlperCezibarakLeanix AlperCezibarakLeanix Awaiting requested review from AlperCezibarakLeanix AlperCezibarakLeanix is a code owner automatically assigned from leanix/team-cider
@ahmed-ali-55 ahmed-ali-55 Awaiting requested review from ahmed-ali-55 ahmed-ali-55 is a code owner automatically assigned from leanix/team-cider
@benedek-pakai-leanix benedek-pakai-leanix Awaiting requested review from benedek-pakai-leanix benedek-pakai-leanix is a code owner automatically assigned from leanix/team-cider
@henriq-amaral-leanix henriq-amaral-leanix Awaiting requested review from henriq-amaral-leanix henriq-amaral-leanix is a code owner automatically assigned from leanix/team-cider

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants