Dependency Dashboard
Nessuno ha ancora preso questa issue.
Valutazione
- Difficoltà
- 5/5
- Tempo stimato
- Più di una settimana
- Idoneità per principianti
- 15/100
Direzione di ricerca
Inizia dalla documentazione collegata di Renovate Dependency Dashboard, quindi esamina le voci delle dipendenze nei Dockerfiles elencati, nei file di workflow GitHub, in itest/go.mod, nei file Gradle e in gradle-wrapper.properties. La dashboard contiene molti aggiornamenti in sospeso e disponibili non correlati, quindi non definisce né una modifica circoscritta né una condizione chiara di completamento.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Descrizione
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- chore(deps): update actions/checkout action to v6.1.0
- chore(deps): update alpine docker tag to v3.24.2
- chore(deps): update plugin org.jetbrains.kotlin.jvm to v2.4.21
- fix(deps): update dependency org.jetbrains:annotations to v26.1.0
- fix(deps): update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v2.4.21
- chore(deps): update actions/checkout action to v7
- chore(deps): update actions/setup-go action to v7
- chore(deps): update actions/setup-java action to v6
- chore(deps): update ubuntu docker tag to v26
- fix(deps): update dependency com.squareup.okhttp3:okhttp to v5
- chore(deps): lock file maintenance
- 🔐 Create all rate-limited PRs at once 🔐
Pending Status Checks
The following updates await pending status checks. To force their creation now, click on a checkbox below.
- chore(deps): update dependency java-jdk to v25
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- fix(security/unknown/itest): update go toolchain directive to v1.26.9 [security]
- chore(deps): update actions/checkout digest to d23441a
- chore(deps): update actions/setup-go digest to 924ae3a
- chore(deps): update actions/setup-java digest to b6effb0
- chore(deps): update gradle to v8.14.6
- chore(deps): update plugin com.gradleup.shadow to v8.3.11
- fix(deps): update dependency com.google.protobuf:protobuf-java to v4.36.2
- fix(deps): update dependency org.junit.jupiter:junit-jupiter to v5.14.4
- chore(deps): update actions/checkout action to v5.1.0
- chore(deps): update grafana/shared-workflows/get-vault-secrets action to v2.1
- chore(deps): update grafana/shared-workflows/create-github-app-token action to v1.0
- Click on this checkbox to rebase all open PRs at once
PR Closed (Blocked)
The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.
- chore(deps): pin alpine docker tag to 2510918
- chore(deps): update gradle to v9
- chore(deps): update plugin com.gradleup.shadow to v9
- chore(deps): update plugin io.github.gradle-nexus.publish-plugin to v2
- fix(deps): update dependency org.junit.jupiter:junit-jupiter to v6
- fix(deps): update mockito monorepo to v5 (
org.mockito:mockito-junit-jupiter,org.mockito:mockito-core)
Vulnerabilities
[!IMPORTANT]
13/13CVEs have Renovate fixes.
gomod
itest/go.mod
go
- GO-2026-6599 (fixed in >= 1.26.9)
- GO-2026-6600 (fixed in >= 1.26.9)
- GO-2026-6603 (fixed in >= 1.26.9)
- GO-2026-6604 (fixed in >= 1.26.9)
- GO-2026-6605 (fixed in >= 1.26.9)
- GO-2026-6607 (fixed in >= 1.26.9)
- GO-2026-6608 (fixed in >= 1.26.9)
- GO-2026-6609 (fixed in >= 1.26.9)
- GO-2026-6610 (fixed in >= 1.26.9)
- GO-2026-6611 (fixed in >= 1.26.9)
- GO-2026-6612 (fixed in >= 1.26.9)
- GO-2026-6613 (fixed in >= 1.26.9)
- GO-2026-6617 (fixed in >= 1.26.9)
Detected Dependencies
dockerfile (3)
alpine-test.Dockerfile (1)
alpine 3.23.3@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659→ [Updates:3.24.2]itest/bootstrap/Dockerfile (2)
alpine 3.23.3→ [Updates:3.24.2,3.23.3]alpine 3.23.3→ [Updates:3.24.2,3.23.3]ubuntu-test.Dockerfile (1)
ubuntu 18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98→ [Updates:26.04]
github-actions (5)
.github/workflows/build.yml (3)
actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd→ [Updates:v6.1.0,v7.0.1]actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654→ [Updates:v6,v5]actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654→ [Updates:v6,v5].github/workflows/itest.yml (6)
actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd→ [Updates:v6.1.0,v7.0.1]actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c→ [Updates:v7,v6]actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd→ [Updates:v6.1.0,v7.0.1]actions/setup-go v6@4a3601121dd01d1626a1e23e37211e3254c1c06c→ [Updates:v7,v6]go stablego stable.github/workflows/release-please.yml (6)
grafana/shared-workflows create-github-app-token/v0.3.1@46f48da11e78ebdba7a8747ae456b11062fac83e→ [Updates:create-github-app-token/v1.0]googleapis/release-please-action v5@45996ed1f6d02564a971a2fa1b5860e934307cf7grafana/shared-workflows get-vault-secrets/v2.0.1@2e3743a1f8abfd3e921e53a7726ec0744c11bb01→ [Updates:get-vault-secrets/v2.1]actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd→ [Updates:v7,v6]actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654→ [Updates:v6,v5]java-jdk 11→ [Updates:25].github/workflows/test.yml (6)
actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd→ [Updates:v6.1.0,v7.0.1]actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654→ [Updates:v6,v5]actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654→ [Updates:v6,v5]actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd→ [Updates:v6.1.0,v7.0.1]actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654→ [Updates:v6,v5]java-jdk 11→ [Updates:25].github/workflows/verify-async-profiler.yml (1)
actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd→ [Updates:v5.1.0,v7.0.1]
gomod (1)
itest/go.mod (2)
go 1.25.0go 1.26.6→ [Updates:1.26.9]
gradle (5)
agent/build.gradle (9)
com.gradleup.shadow 8.3.9→ [Updates:8.3.11,9.6.1]org.jetbrains:annotations 26.0.2-1→ [Updates:26.1.0]com.squareup.okhttp3:okhttp 4.12.0→ [Updates:5.5.0]com.squareup.moshi:moshi 1.15.2org.jetbrains.kotlin:kotlin-stdlib-jdk8 2.3.0→ [Updates:2.4.21]com.google.protobuf:protobuf-java 4.36.1→ [Updates:4.36.2]org.junit.jupiter:junit-jupiter 5.14.2→ [Updates:5.14.4,6.1.3]org.mockito:mockito-core 3.12.4→ [Updates:5.24.0]org.mockito:mockito-junit-jupiter 3.12.4→ [Updates:5.24.0]build.gradle (1)
io.github.gradle-nexus.publish-plugin 1.3.0→ [Updates:2.0.0]demo/build.gradle (1)
org.jetbrains.kotlin.jvm 2.3.0→ [Updates:2.4.21]gradle.properties
settings.gradle
gradle-wrapper (1)
gradle/wrapper/gradle-wrapper.properties (1)
gradle 8.14.3→ [Updates:8.14.6,9.8.1]
renovate-config (1)
renovate.json
Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.
- Lingua principale
- Java
- Stelle
- 125
- Fork
- 48
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Preparare l'ambiente
Questo progetto non fornisce container di sviluppo, Dockerfile né guida per i contributori, quindi l'ambiente è a tuo carico: parti dal suo README e consulta la nostra guida al primo contributo per i passaggi generali.
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di grafana/pyroscope-java
-
Clean up dead publishing repository config and credentials in subproject build filesForse già presa @arnabnandy7 l’ha presa 25 giorni fa. Aperta
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
grafana/pyroscope-java#294 ·
-
Difficoltà 4/5 3-5 giorni Idoneità per principianti 54/100
grafana/pyroscope-java#371 · 2 reazioni ·
-
Difficoltà 4/5 3-5 giorni Idoneità per principianti 45/100
grafana/pyroscope-java#368 · 1 commento ·
-
improve asprof extractionAperta
Difficoltà 5/5 Più di una settimana Idoneità per principianti 25/100
grafana/pyroscope-java#283 ·
-
libasyncProfiler-linux-x64.so dump in /tmpForse di nuovo libera @korniltsev-grafanista l’ha presa 263 giorni fa e non c’è nessuna pull request aperta. Aperta
grafana/pyroscope-java#250 · 1 commento · 1 assegnatario ·
Tutte le issue di grafana/pyroscope-java
Issue simili
-
bug
Difficoltà 2/5 1-3 ore Idoneità per principianti 72/100
scylladb/scylla-cdc-source-connector#350 ·
I maintainer di solito rispondono entro 1 giorno
-
agent:working documentation enhancement go:build lane:needs-decision
Difficoltà 2/5 1-3 ore Idoneità per principianti 72/100
Sanne/incus-spawn#1435 · 3 commenti ·
I maintainer di solito rispondono entro 1 giorno
-
area:shuffle bug priority:high requires-triage
Difficoltà 2/5 1-3 ore Idoneità per principianti 72/100
apache/datafusion-comet#7062 ·
I maintainer di solito rispondono entro 1 giorno
-
wait for review
Difficoltà 2/5 1-3 ore Idoneità per principianti 68/100
I maintainer di solito rispondono entro 1 giorno
-
enhancement good first issue up-for-grabs
Difficoltà 2/5 1-3 ore Idoneità per principianti 80/100
AnikethTS/ChangeRadar#22 ·
I maintainer di solito rispondono entro 1 giorno