Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency org.apache.httpcomponents.core5:httpcore5 to v5.3.2
• Update dependency org.cyclonedx:cyclonedx-maven-plugin to v2.9.1
• Update dependency org.testcontainers:testcontainers to v1.20.4
• Update dependency org.thymeleaf.extras:thymeleaf-extras-springsecurity6 to v3.1.3.RELEASE
• Update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.2
• Update dependency org.bouncycastle:bcprov-jdk18on to v1.80
• Update dependency org.springframework.security:spring-security-test to v6.4.2
• Update spring boot to v3.4.1 (org.springframework.boot:spring-boot-maven-plugin, org.springframework.boot:spring-boot-devtools, org.springframework.boot:spring-boot-starter-test, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot:spring-boot-starter-web, org.springframework.boot:spring-boot-starter-thymeleaf, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-parent)
• Update zaproxy/action-baseline action to v0.14.0
• Update actions/attest-build-provenance action to v2
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose-prod.yml

docker-compose.yml

• maven 3.9.9-amazoncorretto-21
• maven 3.9.9-amazoncorretto-21

dockerfile

Dockerfile

• eclipse-temurin 21

shibboleth/Dockerfile

• rockylinux/rockylinux 9

github-actions

.github/workflows/addIssueToProject.yml

• actions/add-to-project v1.0.2

.github/workflows/dependency-track-deploy-action.yml

• actions/checkout v4

.github/workflows/release-docker-images.yml

• actions/checkout v4
• actions/setup-java v4
• docker/login-action v3
• docker/build-push-action v6
• docker/build-push-action v6
• actions/attest-build-provenance v1
• actions/attest-build-provenance v1
• actions/checkout v4
• actions/setup-node v4
• supplypike/setup-bin v4
• ubuntu 24.04

.github/workflows/sonarqube-deploy-action.yml

• actions/checkout v4
• actions/setup-java v4

.github/workflows/test-action.yml

• actions/checkout v4
• actions/setup-java v4
• ubuntu 24.04

.github/workflows/test-security-zap.yml

• actions/checkout v4
• actions/setup-java v4
• zaproxy/action-baseline v0.13.0

.github/workflows/validate-formatting-action.yml

• actions/checkout v4
• actions/setup-java v4
• ubuntu 24.04

maven

pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.3.5
• org.springframework.boot:spring-boot-starter-security 3.3.5
• org.springframework.boot:spring-boot-starter-thymeleaf 3.3.5
• org.springframework.boot:spring-boot-starter-web 3.3.5
• org.thymeleaf.extras:thymeleaf-extras-springsecurity6 3.1.2.RELEASE
• org.bouncycastle:bcprov-jdk18on 1.79
• org.apache.commons:commons-lang3 3.17.0
• org.springframework.boot:spring-boot-starter-validation 3.3.5
• nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.3.0
• org.springframework.boot:spring-boot-starter-test 3.3.5
• org.springframework.security:spring-security-test 6.3.4
• org.testcontainers:testcontainers 1.20.3
• org.apache.httpcomponents.client5:httpclient5 5.4.1
• org.apache.httpcomponents.core5:httpcore5 5.3.1
• com.tngtech.archunit:archunit-junit5 1.3.0
• org.springframework.boot:spring-boot-devtools 3.3.5
• org.springframework:springloaded 1.2.8.RELEASE
• com.fizzed:fizzed-watcher-maven-plugin 1.0.6
• org.springframework.boot:spring-boot-maven-plugin 3.3.5
• org.sonarsource.scanner.maven:sonar-maven-plugin 5.0.0.4389
• org.jacoco:jacoco-maven-plugin 0.8.12
• com.diffplug.spotless:spotless-maven-plugin 2.43.0
• org.codehaus.mojo:properties-maven-plugin 1.2.1
• org.cyclonedx:cyclonedx-maven-plugin 2.9.0

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.9
• maven-wrapper 3.3.2

---

• Check this box to trigger a request for Renovate to run again on this repository