Dependency Dashboard

This is an automated dashboard rather than a single scoped task. Review pom.xml, .github/workflows/ci.yml, .github/workflows/cd.yml, and the Maven wrapper files, then inspect the linked Renovate pull requests to determine which update remains actionable. Done would mean a selected dependency update is applied and the repository's CI and release checks pass.

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

[!WARNING]
The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
maven	com.github.tomakehurst:wiremock-jre8

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• [deps]: Pin java-jdk to 8.0.504+1

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• [deps]: Update gh minor (actions/checkout, actions/setup-java)

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• [deps]: Update java-jdk to v25

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [deps]: Replace com.github.tomakehurst:wiremock-jre8 with org.wiremock:wiremock
• [deps]: Update maven-wrapper minor (maven, maven-wrapper)
• [deps]: Update maven minor (org.sonarsource.scanner.maven:sonar-maven-plugin, org.apache.maven.plugins:maven-gpg-plugin, org.apache.maven.plugins:maven-surefire-plugin, org.apache.maven.plugins:maven-javadoc-plugin, org.apache.maven.plugins:maven-source-plugin, org.apache.maven.plugins:maven-resources-plugin, org.apache.maven.plugins:maven-compiler-plugin, ch.qos.logback:logback-classic, org.junit.jupiter:junit-jupiter-engine, org.slf4j:slf4j-api, com.fasterxml.jackson.datatype:jackson-datatype-jdk8, com.fasterxml.jackson.module:jackson-module-parameter-names, com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-databind, org.apache.httpcomponents.client5:httpclient5, org.projectlombok:lombok)
• [deps]: Update actions/checkout action to v7
• [deps]: Update actions/setup-java action to v6
• [deps]: Update org.junit.jupiter:junit-jupiter-engine to v6
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• [deps]: Update com.github.tomakehurst:wiremock-jre8 to v3

Detected Dependencies

github-actions (2)

.github/workflows/cd.yml (6)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 → [Updates: v4.9.1, v6.0.1]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• java-jdk 8 → [Updates: 8.0.504+1, 25]

.github/workflows/ci.yml (3)

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v4.4.0, v7.0.1]
• actions/setup-java v4.6.0@7a6d8a8234af8eb26422e24e3006232cccaa061b → [Updates: v4.9.1, v6.0.1]
• java-jdk 8 → [Updates: 8.0.504+1, 25]

maven (1)

pom.xml (20)

• org.apache.httpcomponents.client5:httpclient5 5.6.3 → [Updates: 5.6.4]
• com.fasterxml.jackson.core:jackson-databind 2.18.9 → [Updates: 2.22.2]
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.2 → [Updates: 2.22.2]
• com.fasterxml.jackson.module:jackson-module-parameter-names 2.18.2 → [Updates: 2.22.2]
• com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.18.2 → [Updates: 2.22.2]
• org.slf4j:slf4j-api 2.0.16 → [Updates: 2.0.19]
• org.projectlombok:lombok 1.18.38 → [Updates: 1.18.48]
• org.junit.jupiter:junit-jupiter-engine 5.11.4 → [Updates: 5.14.4, 6.1.3]
• org.assertj:assertj-core 3.27.7
• com.github.tomakehurst:wiremock-jre8 2.35.2 → [Updates: 3.0.1]
• ch.qos.logback:logback-classic 1.3.15 → [Updates: 1.3.16]
• org.projectlombok:lombok-maven-plugin 1.18.20.0
• org.apache.maven.plugins:maven-compiler-plugin 3.13.0 → [Updates: 3.16.0]
• org.projectlombok:lombok 1.18.38 → [Updates: 1.18.48]
• org.apache.maven.plugins:maven-resources-plugin 3.3.1 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-source-plugin 3.3.1 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.11.2 → [Updates: 3.12.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.2 → [Updates: 3.6.0]
• org.apache.maven.plugins:maven-gpg-plugin 3.2.7 → [Updates: 3.2.8]
• org.sonarsource.scanner.maven:sonar-maven-plugin 5.0.0.4389 → [Updates: 5.8.0.7211]

maven-wrapper (3)

.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.9.15 → [Updates: 3.9.16]
• maven-wrapper 3.3.4

mvnw (1)

• maven-wrapper 3.2.0 → [Updates: 3.3.4]

mvnw.cmd (1)

• maven-wrapper 3.2.0 → [Updates: 3.3.4]

---

• Check this box to trigger a request for Renovate to run again on this repository