Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dependency htmx.org to v2

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency io.github.jyllands-posten:play-prometheus-filters to v1
• Update dependency org.apache.shiro:shiro-crypto-cipher to v2
• Update dependency sass-loader to v16
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency com.google.inject.extensions:guice-assistedinject to v7
• Update dependency com.typesafe.play:sbt-play-ebean to v7
• Update dependency eslint to v9
• Update dependency org.pac4j:play-pac4j to v12
• Update pac4j to v6 (major) (org.pac4j:pac4j-core, org.pac4j:pac4j-http, org.pac4j:pac4j-oidc, org.pac4j:pac4j-saml)
• Update ubuntu Docker tag to v24

Detected dependencies

devcontainer

.devcontainer/devcontainer.json

• ghcr.io/devcontainers/features/docker-in-docker 2
• ghcr.io/devcontainers/features/sshd 1
• ghcr.io/devcontainers/features/github-cli 1
• ghcr.io/devcontainers/features/java 1.5.0
• ghcr.io/devcontainers/features/node 1
• ghcr.io/devcontainers/features/python 1

docker-compose

browser-test/browser-test-compose.dev.yml

browser-test/browser-test-compose.dev_local.yml

browser-test/browser-test-compose.yml

docker-compose.dev.yml

• postgres 16.3
• dpage/pgadmin4 8.9

docker-compose.yml

• localstack/localstack 3.6.0
• postgres 16.3

env-var-docs/docker-compose.env-var-docs.yml

• python 3.12.4-slim

test-support/prod-simulator-compose.yml

• postgres 16.3

test-support/unit-test-docker-compose.dev.yml

test-support/unit-test-docker-compose.yml

• postgres 16.3

dockerfile

Dockerfile

• docker/dockerfile 1
• eclipse-temurin 17.0.11_9-jdk-alpine
• bellsoft/liberica-openjdk-alpine 17.0.11-10

browser-test/playwright.Dockerfile

• docker/dockerfile 1
• ubuntu 22.04

formatter/formatter.Dockerfile

• docker/dockerfile 1
• eclipse-temurin 17.0.11_9-jdk-alpine
• bellsoft/liberica-openjdk-alpine 17.0.11-10

localstack/localstack.Dockerfile

• docker/dockerfile 1
• localstack/localstack 3.6.0

mock-web-services/mock-web-services.Dockerfile

• docker/dockerfile 1
• python 3.12.4-slim

prod.Dockerfile

• docker/dockerfile 1
• eclipse-temurin 17.0.11_9-jdk-alpine
• eclipse-temurin 17.0.11_9-jre-alpine

test-support/oidc.Dockerfile

• docker/dockerfile 1
• node 21-alpine

github-actions

.github/workflows/assign_issues_to_project.yaml

• actions/add-to-project v1.0.2

.github/workflows/auto-author-assign.yml

• toshimaru/auto-author-assign v2.1.1

.github/workflows/auto_request_review.yml

• necojackarc/auto-request-review v0.13.0

.github/workflows/build-push-image-from-branch.yml

• actions/checkout v4
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3

.github/workflows/build_push_ci.yaml

• actions/checkout v4
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• actions/checkout v4
• tj-actions/changed-files v44
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3

.github/workflows/format.yaml

• actions/checkout v4
• tj-actions/changed-files v44
• docker/setup-buildx-action v3

.github/workflows/generate_env_var_docs_markdown_for_release.yaml

• actions/checkout v4
• actions/checkout v4

.github/workflows/labeler.yaml

• actions/labeler v5

.github/workflows/pr_env_var_docs.yaml

• actions/checkout v4
• actions/setup-python v5
• codecov/codecov-action v4

.github/workflows/regression_test.yaml

• actions/checkout v4
• QAInsights/PerfAction v5.6.2
• actions/upload-artifact v4
• latency-lingo/github-action v0.0.2

.github/workflows/release.yaml

• actions/checkout v4
• docker/login-action v3

.github/workflows/run_jmeter_test.yaml

• actions/checkout v4
• QAInsights/PerfAction v5.6.2
• actions/upload-artifact v4

.github/workflows/sbom_generator.yaml

• anchore/sbom-action v0

.github/workflows/scan_for_secrets.yaml

• actions/checkout v4
• gitleaks/gitleaks-action v2

.github/workflows/scorecards.yaml

• actions/checkout v4
• ossf/scorecard-action v2.4.0
• actions/upload-artifact v4
• github/codeql-action v3

.github/workflows/tests.yaml

• actions/checkout v4
• docker/setup-buildx-action v3
• codecov/codecov-action v4
• actions/checkout v4
• docker/setup-buildx-action v3
• actions/checkout v4
• docker/setup-buildx-action v3
• actions/upload-artifact v4
• actions/upload-artifact v4
• actions/upload-artifact v4
• actions/checkout v4
• docker/setup-buildx-action v3
• actions/upload-artifact v4
• actions/upload-artifact v4
• actions/checkout v4
• docker/setup-buildx-action v3

.github/workflows/tests_skip.yaml

npm

browser-test/package.json

• @axe-core/playwright 4.9.1
• @playwright/test 1.45.3
• @types/node 20.14.12
• @typescript-eslint/eslint-plugin 7.17.0
• @typescript-eslint/parser 7.17.0
• axe-core 4.9.1
• eslint 8.57.0
• eslint-plugin-no-unsanitized ^4.0.2
• eslint-plugin-playwright 1.6.2
• playwright 1.45.3
• sharp 0.33.4
• ts-node 10.9.2
• ts-node-dev 2.0.0
• typescript 5.5.4

formatter/package.json

• @typescript-eslint/eslint-plugin 7.17.0
• @typescript-eslint/parser 7.17.0
• eslint 8.57.0
• eslint-config-google 0.14.0
• eslint-config-prettier 9.1.0
• eslint-plugin-no-unsanitized ^4.0.2
• eslint-plugin-playwright 1.6.2
• prettier 3.3.3
• typescript 5.5.4

server/package.json

• @uswds/uswds ^3.6.0
• cleave.js 1.6.0
• dompurify 3.1.6
• markdown-it 14.1.0
• @tailwindcss/line-clamp 0.4.4
• @tsconfig/recommended 1.0.7
• @types/cleave.js 1.4.12
• @types/dompurify 3.0.5
• @types/jest 29.5.12
• @types/markdown-it 14.1.2
• @typescript-eslint/eslint-plugin 7.17.0
• @typescript-eslint/parser 7.17.0
• autoprefixer ^10.4.16
• css-loader ^7.0.0
• eslint 8.57.0
• eslint-plugin-no-unsanitized ^4.0.2
• htmx.org ^1.8.6
• jest 29.7.0
• jest-environment-jsdom 29.7.0
• mini-css-extract-plugin ^2.7.6
• postcss 8.4.40
• postcss-loader ^8.0.0
• sass ^1.68.0
• sass-loader ^14.0.0
• tailwindcss ^3.4.1
• ts-jest 29.2.3
• ts-loader 9.5.1
• typescript 5.5.4
• webpack 5.93.0
• webpack-cli 5.1.4

test-support/package.json

• oidc-provider 8.5.1

pep621

env-var-docs/parser-package/pyproject.toml

• jinja2 ==3.1.4
• test/mypy ==1.11.0
• test/pytest-cov ==5.0.0
• setuptools >=61.0

pip_requirements

mock-web-services/requirements.txt

• Flask ==3.0.3

sbt

server/build.sbt

• scala 2.13.14
• com.google.guava:guava 33.2.1-jre
• com.google.auto:auto-common 1.2.2
• com.jayway.jsonpath:json-path 2.9.0
• com.fasterxml.jackson.datatype:jackson-datatype-guava 2.17.2
• com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.17.2
• com.fasterxml.jackson.module:jackson-module-scala 2.17.2
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.17.2
• com.google.inject.extensions:guice-assistedinject 6.0.0
• com.j2html:j2html 1.6.0
• org.thymeleaf:thymeleaf 3.1.2.RELEASE
• org.commonmark:commonmark 0.22.0
• org.commonmark:commonmark-ext-autolink 0.22.0
• com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer 20240325.1
• software.amazon.awssdk:s3 2.26.25
• software.amazon.awssdk:ses 2.26.25
• com.azure:azure-identity 1.13.1
• com.azure:azure-storage-blob 12.27.0
• org.postgresql:postgresql 42.7.3
• com.h2database:h2 2.3.230
• io.github.jyllands-posten:play-prometheus-filters 0.6.1
• pl.pragmatists:JUnitParams 1.1.1
• org.assertj:assertj-core 3.26.3
• org.mockito:mockito-inline 5.2.0
• org.assertj:assertj-core 3.26.3
• com.google.guava:guava-testlib 33.2.1-jre
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.2
• jakarta.activation:jakarta.activation-api 2.1.3
• org.glassfish.jaxb:jaxb-runtime 4.0.5
• org.pac4j:play-pac4j 11.1.0-PLAY2.8
• org.pac4j:pac4j-core 5.7.6
• org.pac4j:pac4j-http 5.7.6
• org.pac4j:pac4j-oidc 5.7.6
• org.pac4j:pac4j-saml 5.7.6
• org.apache.shiro:shiro-crypto-cipher 1.13.0
• com.google.auto.value:auto-value-annotations 1.11.0
• com.google.auto.value:auto-value 1.11.0
• com.google.errorprone:error_prone_core 2.29.2
• org.checkerframework:dataflow-errorprone 3.45.0
• org.apache.commons:commons-csv 1.11.0
• commons-validator:commons-validator 1.9.0
• com.itextpdf:itextpdf 5.5.13.4
• com.googlecode.libphonenumber:libphonenumber 8.13.42
• com.github.slugify:slugify 3.0.7
• commons-net:commons-net 3.11.1
• com.linkedin.urls:url-detector 0.1.17
• ch.qos.logback:logback-classic 1.5.6
• com.fasterxml.jackson.core:jackson-databind 2.17.2
• com.fasterxml.jackson.core:jackson-core 2.17.2
• com.fasterxml.jackson.core:jackson-annotations 2.17.2

server/project/build.properties

• sbt/sbt 1.10.1

server/project/plugins.sbt

• com.typesafe.play:sbt-plugin 2.9.5
• com.typesafe.play:sbt-play-ebean 6.2.0
• net.virtual-void:sbt-dependency-graph 0.10.0-RC1
• com.typesafe.sbteclipse:sbteclipse-plugin 5.2.4
• com.github.sbt:sbt-digest 2.0.0
• com.github.sbt:sbt-gzip 2.0.0
• com.github.sbt:sbt-jacoco 3.5.0
• org.scalameta:sbt-scalafmt 2.5.2

---

• Check this box to trigger a request for Renovate to run again on this repository

[gwendolyngoetz]

To anyone looking at this in the future. Renovatebot will automatically reopen this if you close it. It is part of that process and should just be left alone.

[gwendolyngoetz]

Link to the renovate portal https://developer.mend.io/