Dependency Dashboard
Ninguém assumiu esta issue ainda.
Avaliação
- Dificuldade
- 5/5
- Tempo estimado
- Mais de uma semana
- Facilidade para iniciantes
- 10/100
- Tipo de issue
- Refatoração
- Clareza
- Precisa de esclarecimento
- Status de atividade
- Estagnada
- Stack de tecnologia
- github-actions, java
- Domínio
- build-system, ci-cd, devops
Direção de pesquisa
Comece pela documentação do Dependency Dashboard e, em seguida, inspecione os arquivos .github/workflows e os arquivos Maven pom.xml listados. A issue agrega muitas atualizações automatizadas de dependências, incluindo atualizações já representadas por pull requests vinculados; para concluí-la, seria necessário determinar quais entradas do dashboard ainda exigem ação e validar as alterações de dependências resultantes.
Escrita pelo modelo de indexação a partir do texto da issue.
Descrição
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Config Migration Needed
- Select this checkbox to let Renovate create an automated Config Migration PR.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- deps: update actions/upload-artifact action to v4.6.2
- deps: update ossf/scorecard-action action to v2.4.4
- deps: update project.appengine.version to v2.0.39 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - build(deps): update dependency com.google.cloud:native-image-shared-config to v1.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
- build(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
- build(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
- build(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3
- build(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
- build(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
- build(deps): update dependency org.apache.maven.plugins:maven-resources-plugin to v3.5.0
- build(deps): update dependency org.apache.maven.plugins:maven-site-plugin to v3.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
- build(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
- build(deps): update dependency org.codehaus.mojo:animal-sniffer-maven-plugin to v1.28
- build(deps): update dependency org.codehaus.mojo:clirr-maven-plugin to v2.9
- build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
- deps: update actions/checkout action to v4.4.0
- deps: update dependency com.google.errorprone:error_prone_annotations to v2.50.0
- deps: update dependency com.google.j2objc:j2objc-annotations to v3.1
- deps: update dependency com.google.protobuf:protobuf-java to v4.36.2
- deps: update dependency commons-codec:commons-codec to v1.22.1
- deps: update github/codeql-action action to v3.38.2
- deps: update actions/checkout action to v7
- deps: update actions/github-script action to v9
- deps: update actions/setup-java action to v6
- deps: update actions/setup-node action to v7
- deps: update actions/upload-artifact action to v7
- deps: update dependency com.puppycrawl.tools:checkstyle to v14
- deps: update dependency java-jdk to v25
- deps: update dependency node to v24
- deps: update dependency ubuntu to v26
- deps: update github/codeql-action action to v4
- deps: update project.appengine.version to v5 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - 🔐 Create all rate-limited PRs at once 🔐
PR Edited (Blocked)
The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.
- deps: update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.3 [security]
- deps: update dependency org.apache.httpcomponents.core5:httpcore5 to v5.4.3 [security]
- build(deps): update dependency com.coveo:fmt-maven-plugin to v2.13
- build(deps): update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.9.0
- deps: update dependency com.google.code.gson:gson to v2.14.0
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- deps: update dependency com.fasterxml.jackson.core:jackson-core to v2.18.8 [security]
- build(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
- build(deps): update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2
- build(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0
- chore(deps): update dependency com.google.cloud:libraries-bom to v26.90.0
- deps: update dependency com.google.googlejavaformat:google-java-format to v1.37.0
- test(deps): update dependency com.google.truth:truth to v1.4.5
- deps: update dependency org.apache.felix:maven-bundle-plugin to v6
- Click on this checkbox to rebase all open PRs at once
Detected Dependencies
github-actions (6)
.github/workflows/approve-readme.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/auto-release.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/ci.yaml (18)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/setup-java v4→ [Updates:v6]java-jdk 8→ [Updates:25]java-jdk 11→ [Updates:25]java-jdk 8→ [Updates:25]java-jdk 21→ [Updates:25]java-jdk 8→ [Updates:25].github/workflows/downstream.yaml (2)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6].github/workflows/renovate_config_check.yaml (4)
actions/checkout v4→ [Updates:v7]actions/setup-node v4→ [Updates:v7]ubuntu 24.04→ [Updates:26.04]node 20→ [Updates:24].github/workflows/scorecard.yml (4)
actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683→ [Updates:v4.4.0,v7.0.1]ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46→ [Updates:v2.4.4]actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08→ [Updates:v4.6.2,v7.0.1]github/codeql-action v3.28.16@28deaeda66b76a05916b6923827895f2b14ab387→ [Updates:v3.38.2,v4.38.2]
maven (21)
google-http-client-android-test/pom.xml (5)
com.jayway.maven.plugins.android.generation2:android-maven-plugin 3.8.2com.google.android:android 4.1.1.4com.google.android:android-test 4.1.1.4com.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTgoogle-http-client-android/pom.xml (1)
com.google.android:android 4.1.1.4google-http-client-apache-v2/pom.xml (2)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]google-http-client-apache-v5/pom.xml (3)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]google-http-client-appengine/pom.xml (1)
org.codehaus.mojo.signature:java17 1.0google-http-client-assembly/pom.xml
google-http-client-bom/pom.xml (16)
com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v5 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-protobuf 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTorg.sonatype.plugins:nexus-staging-maven-plugin 1.7.0org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]com.coveo:fmt-maven-plugin 2.13org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]google-http-client-findbugs/google-http-client-findbugs-test/pom.xml (3)
org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.codehaus.mojo:findbugs-maven-plugin 3.0.5google-http-client-findbugs/pom.xml (2)
com.google.code.findbugs:findbugs 3.0.1com.google.code.findbugs:bcel-findbugs 6.0google-http-client-gson/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-jackson2/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-protobuf/pom.xml (2)
kr.motd.maven:os-maven-plugin 1.7.1org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1google-http-client-test/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-xml/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client/pom.xml (1)
org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]pom.xml (60)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]com.fasterxml.jackson.core:jackson-core 2.18.2→ [Updates:2.18.8]com.google.code.gson:gson 2.11.0→ [Updates:2.14.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]com.google.errorprone:error_prone_annotations 2.36.0→ [Updates:2.50.0]com.google.appengine:appengine-api-1.0-sdk 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-testing 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-api-stubs 2.0.32→ [Updates:2.0.39,5.1.0]xpp3:xpp3 1.1.4ccommons-codec:commons-codec 1.14→ [Updates:1.22.1]org.apache.httpcomponents:httpclient 4.5.14org.apache.httpcomponents:httpcore 4.4.16org.apache.httpcomponents.client5:httpclient5 5.3.1→ [Updates:5.6.3]org.apache.httpcomponents.core5:httpcore5 5.2.5→ [Updates:5.4.3]com.google.code.findbugs:jsr305 3.0.2com.google.protobuf:protobuf-java 4.33.2→ [Updates:4.36.2]com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.j2objc:j2objc-annotations 3.0.0→ [Updates:3.1]io.opencensus:opencensus-api 0.31.1io.opencensus:opencensus-contrib-http-util 0.31.1io.opencensus:opencensus-impl 0.31.1io.opencensus:opencensus-testing 0.31.1org.apache.maven.plugins:maven-assembly-plugin 3.7.1→ [Updates:3.8.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.apache.maven.plugins:maven-surefire-plugin 3.5.2→ [Updates:3.6.0]org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0org.codehaus.mojo:findbugs-maven-plugin 3.0.5org.codehaus.mojo:clirr-maven-plugin 2.8→ [Updates:2.9]org.codehaus.mojo:animal-sniffer-maven-plugin 1.24→ [Updates:1.28]org.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]org.apache.maven.plugins:maven-dependency-plugin 3.8.1→ [Updates:3.11.0]org.apache.maven.plugins:maven-resources-plugin 3.3.1→ [Updates:3.5.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]com.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTorg.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]com.coveo:fmt-maven-plugin 2.9→ [Updates:2.13]com.google.googlejavaformat:google-java-format 1.7→ [Updates:1.37.0]org.codehaus.mojo.signature:java17 1.0net.sf.androidscents.signature:android-api-level-19 4.4.2_r4org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]samples/dailymotion-simple-cmdline-sample/pom.xml (2)
org.codehaus.mojo:exec-maven-plugin 3.5.0→ [Updates:3.6.4]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]samples/install-without-bom/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/pom.xml (2)
org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0samples/snapshot/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/snippets/pom.xml (3)
com.google.cloud:libraries-bom 26.54.0→ [Updates:26.90.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]
regex (3)
.kokoro/presubmit/graalvm-native-a.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-b.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-c.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]
- Check this box to trigger a request for Renovate to run again on this repository
- Linguagem predominante
- Java
- Estrelas
- 1.4k
- Forks
- 476
- Merge médio
- 10h 47min
- PRs com merge (30d)
- 3
Preparar o ambiente
- Sem Dockerfile nem arquivo Docker Compose
- Tem um modelo de pull request
- Ler o guia de contribuição
Primeiros passos
- Leia a issue inteira e depois o guia de contribuição do projeto.
- Comente na issue dizendo que vai assumir — evita que duas pessoas façam o mesmo trabalho.
- Faça um fork do repositório e trabalhe em uma branch.
- Abra um pull request que referencie o número da issue.
Mais de googleapis/google-http-java-client
-
Core: Validate header names and values to prevent CRLF injectionTalvez já em andamento @insaf021 assumiu há 106 dias. Abertapriority: p3
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 78/100
-
Core: XmlPullParser processes external DTD entities (XXE) — disable FEATURE_PROCESS_DOCDECL in Xml#createParser()Talvez já em andamento @insaf021 assumiu há 106 dias. Abertapriority: p3
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 84/100
-
Core: LowLevelHttpResponse not disconnected when HttpResponse construction throws RuntimeExceptionTalvez já em andamento @insaf021 assumiu há 107 dias. Abertapriority: p3
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 84/100
-
type: cleanup
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 68/100
-
org.apache.http.conn.ssl.SSLSocketFactory is deprecatedTalvez livre de novo Um pull request para esta issue foi fechado sem ser mesclado. Abertapriority: p2 type: cleanup
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 65/100
Todas as issues de googleapis/google-http-java-client
Issues semelhantes
-
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 80/100
finos/fluxnova-bpm-platform#387 ·
Mantenedores costumam responder em até 4 dias
-
Dificuldade 1/5 Menos de uma hora Facilidade para iniciantes 88/100
-
Dificuldade 2/5 Menos de uma hora Facilidade para iniciantes 84/100
cpp-best-practices/project_validator#251 ·
Mantenedores costumam responder em até 1 dia
-
backend enhancement
Dificuldade 2/5 Meio dia Facilidade para iniciantes 70/100
damodharg6/payledger#16 ·
-
[Bug]: An initiative list with no current entry logs an error on every changeTalvez já em andamento @dwizard0 assumiu hoje. Aberta
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 75/100
Mantenedores costumam responder em até 1 dia