Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	eslint-plugin-node
nuget	Google.Cloud.Diagnostics.AspNetCore

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency handlebars to v4.7.9
• fix(deps): update dependency com.google.cloud.functions:functions-framework-api to v1.1.4
• fix(deps): update dependency mongodb to v4.17.2
• chore(deps): update dependency @google-cloud/aiplatform to v3.35.0
• chore(deps): update dependency com.google.cloud.tools:jib-maven-plugin to v3.5.1
• chore(deps): update dependency eslint-plugin-promise to v6.6.0
• chore(deps): update dependency functions-framework to v3.10.1
• chore(deps): update dependency mocha to v10.8.2
• chore(deps): update dependency mongodb.driver to 2.30.0
• chore(deps): update dependency org.apache.maven.plugins:maven-checkstyle-plugin to v3.6.0
• chore(deps): update dependency python-dateutil to v2.9.0.post0
• chore(deps): update dependency winston to v3.19.0
• chore(deps): update golang docker tag to v1.26
• chore(deps): update python docker tag to v3.14
• fix(deps): update dependency @google/generative-ai to ^0.24.0
• fix(deps): update dependency com.google.code.gson:gson to v2.13.2
• fix(deps): update dependency eslint to v8.57.1
• fix(deps): update dependency moment to v2.30.1
• fix(deps): update dependency org.apache.beam:beam-sdks-java-bom to v2.72.0
• fix(deps): update junit-framework monorepo to v5.14.3 (org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• fix(deps): update module cloud.google.com/go to v0.123.0
• fix(deps): update module github.com/googlecloudplatform/functions-framework-go to v1.9.2
• fix(deps): update module go.mongodb.org/mongo-driver to v1.17.9
• chore(deps): update dependency bleach to v6
• chore(deps): update dependency eslint-config-prettier to v10
• chore(deps): update dependency eslint-plugin-prettier to v5
• chore(deps): update dependency eslint-plugin-promise to v7
• chore(deps): update dependency flask to v3
• chore(deps): update dependency flask-pymongo to v3
• chore(deps): update dependency gaxios to v7
• chore(deps): update dependency microsoft.aspnet.webapi.client to v6
• chore(deps): update dependency mocha to v11
• chore(deps): update dependency mongodb.driver to v3
• chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3
• chore(deps): update dependency prettier to v3
• chore(deps): update dotnet monorepo to v10 (major) (mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk)
• chore(deps): update node.js to v24
• chore(deps): update plugin com.diffplug.spotless to v8
• fix(deps): update dependency @google-cloud/aiplatform to v6
• fix(deps): update dependency @google-cloud/functions-framework to v5
• fix(deps): update dependency com.google.cloud.functions:functions-framework-api to v2
• fix(deps): update dependency com.squareup.okhttp3:okhttp to v5
• fix(deps): update dependency eslint to v10
• fix(deps): update dependency mongodb to v7
• fix(deps): update dependency org.slf4j:slf4j-jdk14 to v2
• fix(deps): update junit-framework monorepo to v6 (major) (org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• fix(deps): update module go.mongodb.org/mongo-driver to v2
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
• chore(deps): update plugin com.diffplug.spotless to v6.25.0

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency django [security] (Django, django)
• fix(deps): update dependency body-parser to v1.20.3 [security]
• fix(deps): update dependency pug to v3.0.3 [security]
• fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 [security]
• chore(deps): update dependency requests to v2.32.2 [security]
• fix(deps): update dependency axios to v1.7.4 [security]
• fix(deps): update dependency express to v4.20.0 [security]
• fix(deps): update dependency mongoose to v6.13.6 [security]
• chore(deps): replace dependency eslint-plugin-node with eslint-plugin-n 14.0.0
• chore(deps): update dependency eslint-config-prettier to v8.10.2
• chore(deps): update dependency eslint-plugin-prettier to v4.2.5
• chore(deps): update dependency psycopg2-binary to v2.9.11
• fix(deps): update dependency org.slf4j:slf4j-jdk14 to v1.7.36
• fix(deps): update autovalueversion to v1.11.1 (com.google.auto.value:auto-value, com.google.auto.value:auto-value-annotations)
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v4
• chore(deps): lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cloudbuild (2)

dotnet/dotnet-guestbook/cloudbuild.yaml

python/cloudbuild.yaml

dockerfile (23)

dotnet/dotnet-cloud-run-hello-world/Dockerfile (2)

• mcr.microsoft.com/dotnet/aspnet 7.0-alpine → [Updates: 10.0-alpine]
• mcr.microsoft.com/dotnet/sdk 7.0-alpine → [Updates: 10.0-alpine]

dotnet/dotnet-guestbook/src/backend/Dockerfile (2)

• mcr.microsoft.com/dotnet/aspnet 7.0-alpine → [Updates: 10.0-alpine]
• mcr.microsoft.com/dotnet/sdk 7.0-alpine → [Updates: 10.0-alpine]

dotnet/dotnet-guestbook/src/frontend/Dockerfile (2)

• mcr.microsoft.com/dotnet/aspnet 7.0-alpine → [Updates: 10.0-alpine]
• mcr.microsoft.com/dotnet/sdk 7.0-alpine → [Updates: 10.0-alpine]

dotnet/dotnet-hello-world/src/Dockerfile (2)

• mcr.microsoft.com/dotnet/aspnet 7.0-alpine → [Updates: 10.0-alpine]
• mcr.microsoft.com/dotnet/sdk 7.0-alpine → [Updates: 10.0-alpine]

golang/go-cloud-run-hello-world/Dockerfile (1)

• golang 1.21 → [Updates: 1.26]

golang/go-guestbook/src/backend/Dockerfile (1)

• golang 1.21 → [Updates: 1.26]

golang/go-guestbook/src/frontend/Dockerfile (1)

• golang 1.21 → [Updates: 1.26]

golang/go-hello-world/Dockerfile (1)

• golang 1.21 → [Updates: 1.26]

java/java-cloud-run-hello-world/Dockerfile (2)

• maven 3-jdk-11-slim
• openjdk 11.0.16-jre-slim

java/java-guestbook/backend/Dockerfile (2)

• maven 3-jdk-11-slim
• openjdk 11.0.16-jre-slim

java/java-guestbook/frontend/Dockerfile (2)

• maven 3-jdk-11-slim
• openjdk 11.0.16-jre-slim

java/java-hello-world/Dockerfile (2)

• maven 3-jdk-11-slim
• openjdk 11.0.16-jre-slim

nodejs/nodejs-cloud-run-hello-world/Dockerfile

nodejs/nodejs-guestbook/src/backend/Dockerfile (1)

• node 19.9.0-alpine → [Updates: 24.14.1-alpine]

nodejs/nodejs-guestbook/src/frontend/Dockerfile

nodejs/nodejs-hello-world/Dockerfile

python/cloud-run-django-hello-world/Dockerfile (1)

• python 3.12-alpine → [Updates: 3.14-alpine]

python/cloud-run-python-hello-world/Dockerfile (1)

• python 3.12-alpine → [Updates: 3.14-alpine]

python/django/python-guestbook/src/Dockerfile (1)

• python 3.12-alpine → [Updates: 3.14-alpine]

python/django/python-hello-world/src/Dockerfile (1)

• python 3.12-alpine → [Updates: 3.14-alpine]

python/python-guestbook/src/backend/Dockerfile (1)

• python 3.12-alpine → [Updates: 3.14-alpine]

python/python-guestbook/src/frontend/Dockerfile (1)

• python 3.12-alpine → [Updates: 3.14-alpine]

python/python-hello-world/src/Dockerfile (1)

• python 3.12-alpine → [Updates: 3.14-alpine]

gomod (5)

golang/cloud-function-hello-world/go.mod (2)

• go 1.16
• github.com/GoogleCloudPlatform/functions-framework-go v1.6.1 → [Updates: v1.9.2]

golang/go-cloud-run-hello-world/go.mod (3)

• go 1.19
• cloud.google.com/go v0.109.0 → [Updates: v0.123.0]
• github.com/hashicorp/go-retryablehttp v0.7.4 → [Updates: v0.7.7]

golang/go-guestbook/src/backend/go.mod (2)

• go 1.19
• go.mongodb.org/mongo-driver v1.13.1 → [Updates: v1.17.9, v2.5.0]

golang/go-guestbook/src/frontend/go.mod (1)

• go 1.19

golang/go-hello-world/go.mod (1)

• go 1.19

gradle (2)

java/java-dataflow-samples/read-pubsub-write-bigquery/build.gradle.kts (7)

• com.diffplug.spotless 6.8.0 → [Updates: 6.25.0, 8.4.0]
• org.apache.beam:beam-sdks-java-bom 2.45.0 → [Updates: 2.72.0]
• org.slf4j:slf4j-jdk14 1.7.32 → [Updates: 1.7.36, 2.0.17]
• com.google.auto.value:auto-value-annotations 1.10 → [Updates: 1.11.1]
• com.google.auto.value:auto-value 1.10 → [Updates: 1.11.1]
• org.junit.jupiter:junit-jupiter-api 5.9.0 → [Updates: 5.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-params 5.9.0 → [Updates: 5.14.3, 6.0.3]

java/java-dataflow-samples/read-pubsub-write-bigquery/settings.gradle.kts

maven (6)

java/cloud-function-hello-world/pom.xml (2)

• com.google.cloud.functions:functions-framework-api 1.1.0 → [Updates: 1.1.4, 2.0.0]
• org.apache.maven.plugins:maven-compiler-plugin 3.8.1 → [Updates: 3.15.0]

java/java-cloud-run-hello-world/pom.xml (5)

• org.springframework.boot:spring-boot-starter-parent 2.7.18 → [Updates: 4.0.5]
• org.springframework.cloud:spring-cloud-gcp-dependencies 1.2.8.RELEASE
• com.squareup.okhttp3:okhttp 4.12.0 → [Updates: 5.3.2]
• com.google.cloud.tools:jib-maven-plugin 3.4.0 → [Updates: 3.5.1]
• org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1 → [Updates: 3.6.0]

java/java-guestbook/backend/pom.xml (5)

• org.springframework.boot:spring-boot-starter-parent 2.7.18 → [Updates: 4.0.5]
• com.google.code.gson:gson 2.10.1 → [Updates: 2.13.2]
• com.google.cloud.tools:jib-maven-plugin 3.4.0 → [Updates: 3.5.1]
• org.apache.maven.plugins:maven-surefire-plugin 2.22.2 → [Updates: 3.5.5]
• org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1 → [Updates: 3.6.0]

java/java-guestbook/frontend/pom.xml (4)

• org.springframework.boot:spring-boot-starter-parent 2.7.18 → [Updates: 4.0.5]
• com.google.cloud.tools:jib-maven-plugin 3.4.0 → [Updates: 3.5.1]
• org.apache.maven.plugins:maven-surefire-plugin 2.22.2 → [Updates: 3.5.5]
• org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1 → [Updates: 3.6.0]

java/java-guestbook/pom.xml (1)

• com.google.cloud.tools:jib-maven-plugin 3.4.0 → [Updates: 3.5.1]

java/java-hello-world/pom.xml (4)

• org.springframework.boot:spring-boot-starter-parent 2.7.18 → [Updates: 4.0.5]
• com.google.cloud.tools:jib-maven-plugin 3.4.0 → [Updates: 3.5.1]
• org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1 → [Updates: 3.6.0]
• org.springframework.cloud:spring-cloud-gcp-dependencies 1.2.8.RELEASE

npm (7)

nodejs/cloud-function-hello-world/package.json (1)

• @google-cloud/functions-framework ^3.1.0 → [Updates: ^5.0.0]

nodejs/gemini-api/package.json (2)

• @google-cloud/aiplatform ^3.0.0 → [Updates: ^3.0.0, ^6.0.0]
• @google/generative-ai ^0.1.0 → [Updates: ^0.24.0]

nodejs/nodejs-cloud-run-hello-world/package.json (11)

• express ^4.17.1 → [Updates: ^4.17.1]
• handlebars ^4.7.4 → [Updates: ^4.7.4]
• eslint 8.54.0 → [Updates: 8.57.1, 10.2.0]
• eslint-config-prettier 8.10.0 → [Updates: 8.10.2, 10.1.8]
• eslint-plugin-node 11.1.0 → [Updates: 14.0.0]
• eslint-plugin-prettier 4.2.1 → [Updates: 4.2.5, 5.5.5]
• eslint-plugin-promise 6.1.1 → [Updates: 6.6.0, 7.2.1]
• gaxios 5.1.3 → [Updates: 7.1.4]
• mocha 10.2.0 → [Updates: 10.8.2, 11.7.5]
• prettier 2.8.8 → [Updates: 3.8.1]
• node >=11.14

nodejs/nodejs-guestbook/package.json (1)

• eslint 8.54.0 → [Updates: 8.57.1, 10.2.0]

nodejs/nodejs-guestbook/src/backend/package.json (4)

• body-parser 1.20.2 → [Updates: 1.20.3]
• mongodb 4.17.1 → [Updates: 4.17.2, 7.1.1]
• express 4.18.2 → [Updates: 4.20.0]
• mongoose 6.11.3 → [Updates: 6.13.6]

nodejs/nodejs-guestbook/src/frontend/package.json (5)

• axios 1.6.2 → [Updates: 1.7.4]
• body-parser 1.20.2 → [Updates: 1.20.3]
• express 4.18.2 → [Updates: 4.20.0]
• moment 2.29.4 → [Updates: 2.30.1]
• pug 3.0.2 → [Updates: 3.0.3]

nodejs/nodejs-hello-world/package.json (5)

• express ^4.16.4 → [Updates: ^4.16.4]
• handlebars ^4.7.4 → [Updates: ^4.7.4]
• eslint 8.54.0 → [Updates: 8.57.1, 10.2.0]
• express-winston 4.2.0
• winston 3.11.0 → [Updates: 3.19.0]

nuget (2)

dotnet/dotnet-guestbook/src/backend/backend.csproj (1)

• MongoDB.Driver 2.22.0 → [Updates: 2.30.0, 3.7.1]

dotnet/dotnet-guestbook/src/frontend/frontend.csproj (2)

• Microsoft.AspNet.WebApi.Client 5.2.9 → [Updates: 6.0.0]
• Google.Cloud.Diagnostics.AspNetCore 4.4.0

pip_requirements (9)

python/cloud-function-hello-world/requirements.txt (1)

• functions-framework ==3.5.0 → [Updates: ==3.10.1]

python/cloud-run-django-hello-world/requirements.txt (2)

• django ==4.2.10 → [Updates: ==4.2.20]
• requests ==2.31.0 → [Updates: ==2.32.2]

python/cloud-run-python-hello-world/requirements.txt (2)

• Flask ==2.3.3 → [Updates: ==3.1.3]
• requests ==2.31.0 → [Updates: ==2.32.2]

python/django/python-guestbook/src/requirements.txt (3)

• Django ==4.2.9 → [Updates: ==4.2.18]
• psycopg2-binary ==2.9.9 → [Updates: ==2.9.11]
• python-dateutil ==2.8.2 → [Updates: ==2.9.0.post0]

python/django/python-hello-world/src/requirements.txt (3)

• Django ==4.2.10 → [Updates: ==4.2.20]
• requests ==2.31.0 → [Updates: ==2.32.2]
• psycopg2-binary ==2.9.9 → [Updates: ==2.9.11]

python/gemini-api/requirements.txt

python/python-guestbook/src/backend/requirements.txt (3)

• Flask ==2.3.3 → [Updates: ==3.1.3]
• Flask-PyMongo ==2.3.0 → [Updates: ==3.0.1]
• bleach ==5.0.1 → [Updates: ==6.3.0]

python/python-guestbook/src/frontend/requirements.txt (3)

• Flask ==2.3.3 → [Updates: ==3.1.3]
• requests ==2.31.0 → [Updates: ==2.32.2]
• python-dateutil ==2.8.2 → [Updates: ==2.9.0.post0]

python/python-hello-world/src/requirements.txt (1)

• Flask ==2.3.3 → [Updates: ==3.1.3]

terraform (4)

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/01.setup/provider.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/02.network/provider.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/03.io/infrastructure.tf

java/java-dataflow-samples/read-pubsub-write-bigquery/infrastructure/03.io/infrastructure/provider.tf

---

• Check this box to trigger a request for Renovate to run again on this repository

[kelsk]

Closing in favor of #958