Dependency Dashboard
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 10/100
- Issue type
- Refactor
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- github-actions, java
- Domain
- build-system, ci-cd, devops
Research direction
Start with the Dependency Dashboard documentation, then inspect the listed .github/workflows files and Maven pom.xml files. The issue aggregates many automated dependency updates, including updates already represented by linked pull requests; completion would require determining which dashboard entries still need action and validating the resulting dependency changes.
Written by the indexing model from the issue text.
Description
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Config Migration Needed
- Select this checkbox to let Renovate create an automated Config Migration PR.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- deps: update actions/upload-artifact action to v4.6.2
- deps: update ossf/scorecard-action action to v2.4.4
- deps: update project.appengine.version to v2.0.39 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - build(deps): update dependency com.google.cloud:native-image-shared-config to v1.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
- build(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
- build(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
- build(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3
- build(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
- build(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
- build(deps): update dependency org.apache.maven.plugins:maven-resources-plugin to v3.5.0
- build(deps): update dependency org.apache.maven.plugins:maven-site-plugin to v3.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
- build(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
- build(deps): update dependency org.codehaus.mojo:animal-sniffer-maven-plugin to v1.28
- build(deps): update dependency org.codehaus.mojo:clirr-maven-plugin to v2.9
- build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
- deps: update actions/checkout action to v4.4.0
- deps: update dependency com.google.errorprone:error_prone_annotations to v2.50.0
- deps: update dependency com.google.j2objc:j2objc-annotations to v3.1
- deps: update dependency com.google.protobuf:protobuf-java to v4.36.2
- deps: update dependency commons-codec:commons-codec to v1.22.1
- deps: update github/codeql-action action to v3.38.2
- deps: update actions/checkout action to v7
- deps: update actions/github-script action to v9
- deps: update actions/setup-java action to v6
- deps: update actions/setup-node action to v7
- deps: update actions/upload-artifact action to v7
- deps: update dependency com.puppycrawl.tools:checkstyle to v14
- deps: update dependency java-jdk to v25
- deps: update dependency node to v24
- deps: update dependency ubuntu to v26
- deps: update github/codeql-action action to v4
- deps: update project.appengine.version to v5 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - 🔐 Create all rate-limited PRs at once 🔐
PR Edited (Blocked)
The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.
- deps: update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.3 [security]
- deps: update dependency org.apache.httpcomponents.core5:httpcore5 to v5.4.3 [security]
- build(deps): update dependency com.coveo:fmt-maven-plugin to v2.13
- build(deps): update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.9.0
- deps: update dependency com.google.code.gson:gson to v2.14.0
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- deps: update dependency com.fasterxml.jackson.core:jackson-core to v2.18.8 [security]
- build(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
- build(deps): update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2
- build(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0
- chore(deps): update dependency com.google.cloud:libraries-bom to v26.90.0
- deps: update dependency com.google.googlejavaformat:google-java-format to v1.37.0
- test(deps): update dependency com.google.truth:truth to v1.4.5
- deps: update dependency org.apache.felix:maven-bundle-plugin to v6
- Click on this checkbox to rebase all open PRs at once
Detected Dependencies
github-actions (6)
.github/workflows/approve-readme.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/auto-release.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/ci.yaml (18)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/setup-java v4→ [Updates:v6]java-jdk 8→ [Updates:25]java-jdk 11→ [Updates:25]java-jdk 8→ [Updates:25]java-jdk 21→ [Updates:25]java-jdk 8→ [Updates:25].github/workflows/downstream.yaml (2)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6].github/workflows/renovate_config_check.yaml (4)
actions/checkout v4→ [Updates:v7]actions/setup-node v4→ [Updates:v7]ubuntu 24.04→ [Updates:26.04]node 20→ [Updates:24].github/workflows/scorecard.yml (4)
actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683→ [Updates:v4.4.0,v7.0.1]ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46→ [Updates:v2.4.4]actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08→ [Updates:v4.6.2,v7.0.1]github/codeql-action v3.28.16@28deaeda66b76a05916b6923827895f2b14ab387→ [Updates:v3.38.2,v4.38.2]
maven (21)
google-http-client-android-test/pom.xml (5)
com.jayway.maven.plugins.android.generation2:android-maven-plugin 3.8.2com.google.android:android 4.1.1.4com.google.android:android-test 4.1.1.4com.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTgoogle-http-client-android/pom.xml (1)
com.google.android:android 4.1.1.4google-http-client-apache-v2/pom.xml (2)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]google-http-client-apache-v5/pom.xml (3)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]google-http-client-appengine/pom.xml (1)
org.codehaus.mojo.signature:java17 1.0google-http-client-assembly/pom.xml
google-http-client-bom/pom.xml (16)
com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v5 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-protobuf 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTorg.sonatype.plugins:nexus-staging-maven-plugin 1.7.0org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]com.coveo:fmt-maven-plugin 2.13org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]google-http-client-findbugs/google-http-client-findbugs-test/pom.xml (3)
org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.codehaus.mojo:findbugs-maven-plugin 3.0.5google-http-client-findbugs/pom.xml (2)
com.google.code.findbugs:findbugs 3.0.1com.google.code.findbugs:bcel-findbugs 6.0google-http-client-gson/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-jackson2/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-protobuf/pom.xml (2)
kr.motd.maven:os-maven-plugin 1.7.1org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1google-http-client-test/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-xml/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client/pom.xml (1)
org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]pom.xml (60)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]com.fasterxml.jackson.core:jackson-core 2.18.2→ [Updates:2.18.8]com.google.code.gson:gson 2.11.0→ [Updates:2.14.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]com.google.errorprone:error_prone_annotations 2.36.0→ [Updates:2.50.0]com.google.appengine:appengine-api-1.0-sdk 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-testing 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-api-stubs 2.0.32→ [Updates:2.0.39,5.1.0]xpp3:xpp3 1.1.4ccommons-codec:commons-codec 1.14→ [Updates:1.22.1]org.apache.httpcomponents:httpclient 4.5.14org.apache.httpcomponents:httpcore 4.4.16org.apache.httpcomponents.client5:httpclient5 5.3.1→ [Updates:5.6.3]org.apache.httpcomponents.core5:httpcore5 5.2.5→ [Updates:5.4.3]com.google.code.findbugs:jsr305 3.0.2com.google.protobuf:protobuf-java 4.33.2→ [Updates:4.36.2]com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.j2objc:j2objc-annotations 3.0.0→ [Updates:3.1]io.opencensus:opencensus-api 0.31.1io.opencensus:opencensus-contrib-http-util 0.31.1io.opencensus:opencensus-impl 0.31.1io.opencensus:opencensus-testing 0.31.1org.apache.maven.plugins:maven-assembly-plugin 3.7.1→ [Updates:3.8.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.apache.maven.plugins:maven-surefire-plugin 3.5.2→ [Updates:3.6.0]org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0org.codehaus.mojo:findbugs-maven-plugin 3.0.5org.codehaus.mojo:clirr-maven-plugin 2.8→ [Updates:2.9]org.codehaus.mojo:animal-sniffer-maven-plugin 1.24→ [Updates:1.28]org.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]org.apache.maven.plugins:maven-dependency-plugin 3.8.1→ [Updates:3.11.0]org.apache.maven.plugins:maven-resources-plugin 3.3.1→ [Updates:3.5.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]com.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTorg.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]com.coveo:fmt-maven-plugin 2.9→ [Updates:2.13]com.google.googlejavaformat:google-java-format 1.7→ [Updates:1.37.0]org.codehaus.mojo.signature:java17 1.0net.sf.androidscents.signature:android-api-level-19 4.4.2_r4org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]samples/dailymotion-simple-cmdline-sample/pom.xml (2)
org.codehaus.mojo:exec-maven-plugin 3.5.0→ [Updates:3.6.4]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]samples/install-without-bom/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/pom.xml (2)
org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0samples/snapshot/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/snippets/pom.xml (3)
com.google.cloud:libraries-bom 26.54.0→ [Updates:26.90.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]
regex (3)
.kokoro/presubmit/graalvm-native-a.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-b.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-c.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]
- Check this box to trigger a request for Renovate to run again on this repository
- Dominant language
- Java
- Stars
- 1.4k
- Forks
- 476
- Avg merge
- 10h 47m
- Merged PRs (30d)
- 3
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from googleapis/google-http-java-client
-
Core: Validate header names and values to prevent CRLF injectionPossibly taken @insaf021 claimed this 106 days ago. Openpriority: p3
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
Core: XmlPullParser processes external DTD entities (XXE) — disable FEATURE_PROCESS_DOCDECL in Xml#createParser()Possibly taken @insaf021 claimed this 106 days ago. Openpriority: p3
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
Core: LowLevelHttpResponse not disconnected when HttpResponse construction throws RuntimeExceptionPossibly taken @insaf021 claimed this 106 days ago. Openpriority: p3
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
type: cleanup
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
org.apache.http.conn.ssl.SSLSocketFactory is deprecatedMay be free again A pull request for this issue was closed without being merged. Openpriority: p2 type: cleanup
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
All issues in googleapis/google-http-java-client
Similar issues
-
Difficulty 1/5 Under an hour Newbie friendliness 88/100
-
Difficulty 2/5 Under an hour Newbie friendliness 84/100
cpp-best-practices/project_validator#251 ·
Maintainers usually reply within 1 day
-
backend enhancement
Difficulty 2/5 Half a day Newbie friendliness 70/100
damodharg6/payledger#16 ·
-
[Bug]: An initiative list with no current entry logs an error on every changePossibly taken @dwizard0 claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
Maintainers usually reply within 1 day