Dependency Dashboard
Đang mở
Chưa có ai nhận issue này.
Đánh giá
- Độ khó
- 5/5
- Thời gian dự kiến
- Hơn một tuần
- Mức phù hợp với người mới
- 10/100
- Loại issue
- Tái cấu trúc
- Độ rõ ràng
- Cần làm rõ
- Mức độ hoạt động
- Đình trệ
- Công nghệ
- github-actions, java
- Lĩnh vực
- build-system, ci-cd, devops
Hướng nghiên cứu
Bắt đầu với tài liệu Dependency Dashboard, sau đó kiểm tra các tệp .github/workflows và các tệp Maven pom.xml được liệt kê. Issue này tổng hợp nhiều bản cập nhật dependency tự động, bao gồm cả các bản cập nhật đã được thể hiện bởi các pull request được liên kết; để hoàn thành, cần xác định những mục nào trong dashboard vẫn cần xử lý và xác thực các thay đổi dependency tạo ra.
Do mô hình lập chỉ mục viết ra từ nội dung của issue.
Mô tả
type: process
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Config Migration Needed
- Select this checkbox to let Renovate create an automated Config Migration PR.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- deps: update actions/upload-artifact action to v4.6.2
- deps: update ossf/scorecard-action action to v2.4.4
- deps: update project.appengine.version to v2.0.39 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - build(deps): update dependency com.google.cloud:native-image-shared-config to v1.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
- build(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
- build(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
- build(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3
- build(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
- build(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
- build(deps): update dependency org.apache.maven.plugins:maven-resources-plugin to v3.5.0
- build(deps): update dependency org.apache.maven.plugins:maven-site-plugin to v3.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
- build(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
- build(deps): update dependency org.codehaus.mojo:animal-sniffer-maven-plugin to v1.28
- build(deps): update dependency org.codehaus.mojo:clirr-maven-plugin to v2.9
- build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
- deps: update actions/checkout action to v4.4.0
- deps: update dependency com.google.errorprone:error_prone_annotations to v2.50.0
- deps: update dependency com.google.j2objc:j2objc-annotations to v3.1
- deps: update dependency com.google.protobuf:protobuf-java to v4.36.2
- deps: update dependency commons-codec:commons-codec to v1.22.1
- deps: update github/codeql-action action to v3.38.2
- deps: update actions/checkout action to v7
- deps: update actions/github-script action to v9
- deps: update actions/setup-java action to v6
- deps: update actions/setup-node action to v7
- deps: update actions/upload-artifact action to v7
- deps: update dependency com.puppycrawl.tools:checkstyle to v14
- deps: update dependency java-jdk to v25
- deps: update dependency node to v24
- deps: update dependency ubuntu to v26
- deps: update github/codeql-action action to v4
- deps: update project.appengine.version to v5 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - 🔐 Create all rate-limited PRs at once 🔐
PR Edited (Blocked)
The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.
- deps: update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.3 [security]
- deps: update dependency org.apache.httpcomponents.core5:httpcore5 to v5.4.3 [security]
- build(deps): update dependency com.coveo:fmt-maven-plugin to v2.13
- build(deps): update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.9.0
- deps: update dependency com.google.code.gson:gson to v2.14.0
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- deps: update dependency com.fasterxml.jackson.core:jackson-core to v2.18.8 [security]
- build(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
- build(deps): update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2
- build(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0
- chore(deps): update dependency com.google.cloud:libraries-bom to v26.90.0
- deps: update dependency com.google.googlejavaformat:google-java-format to v1.37.0
- test(deps): update dependency com.google.truth:truth to v1.4.5
- deps: update dependency org.apache.felix:maven-bundle-plugin to v6
- Click on this checkbox to rebase all open PRs at once
Detected Dependencies
github-actions (6)
.github/workflows/approve-readme.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/auto-release.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/ci.yaml (18)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/setup-java v4→ [Updates:v6]java-jdk 8→ [Updates:25]java-jdk 11→ [Updates:25]java-jdk 8→ [Updates:25]java-jdk 21→ [Updates:25]java-jdk 8→ [Updates:25].github/workflows/downstream.yaml (2)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6].github/workflows/renovate_config_check.yaml (4)
actions/checkout v4→ [Updates:v7]actions/setup-node v4→ [Updates:v7]ubuntu 24.04→ [Updates:26.04]node 20→ [Updates:24].github/workflows/scorecard.yml (4)
actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683→ [Updates:v4.4.0,v7.0.1]ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46→ [Updates:v2.4.4]actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08→ [Updates:v4.6.2,v7.0.1]github/codeql-action v3.28.16@28deaeda66b76a05916b6923827895f2b14ab387→ [Updates:v3.38.2,v4.38.2]
maven (21)
google-http-client-android-test/pom.xml (5)
com.jayway.maven.plugins.android.generation2:android-maven-plugin 3.8.2com.google.android:android 4.1.1.4com.google.android:android-test 4.1.1.4com.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTgoogle-http-client-android/pom.xml (1)
com.google.android:android 4.1.1.4google-http-client-apache-v2/pom.xml (2)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]google-http-client-apache-v5/pom.xml (3)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]google-http-client-appengine/pom.xml (1)
org.codehaus.mojo.signature:java17 1.0google-http-client-assembly/pom.xml
google-http-client-bom/pom.xml (16)
com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v5 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-protobuf 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTorg.sonatype.plugins:nexus-staging-maven-plugin 1.7.0org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]com.coveo:fmt-maven-plugin 2.13org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]google-http-client-findbugs/google-http-client-findbugs-test/pom.xml (3)
org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.codehaus.mojo:findbugs-maven-plugin 3.0.5google-http-client-findbugs/pom.xml (2)
com.google.code.findbugs:findbugs 3.0.1com.google.code.findbugs:bcel-findbugs 6.0google-http-client-gson/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-jackson2/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-protobuf/pom.xml (2)
kr.motd.maven:os-maven-plugin 1.7.1org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1google-http-client-test/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-xml/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client/pom.xml (1)
org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]pom.xml (60)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]com.fasterxml.jackson.core:jackson-core 2.18.2→ [Updates:2.18.8]com.google.code.gson:gson 2.11.0→ [Updates:2.14.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]com.google.errorprone:error_prone_annotations 2.36.0→ [Updates:2.50.0]com.google.appengine:appengine-api-1.0-sdk 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-testing 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-api-stubs 2.0.32→ [Updates:2.0.39,5.1.0]xpp3:xpp3 1.1.4ccommons-codec:commons-codec 1.14→ [Updates:1.22.1]org.apache.httpcomponents:httpclient 4.5.14org.apache.httpcomponents:httpcore 4.4.16org.apache.httpcomponents.client5:httpclient5 5.3.1→ [Updates:5.6.3]org.apache.httpcomponents.core5:httpcore5 5.2.5→ [Updates:5.4.3]com.google.code.findbugs:jsr305 3.0.2com.google.protobuf:protobuf-java 4.33.2→ [Updates:4.36.2]com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.j2objc:j2objc-annotations 3.0.0→ [Updates:3.1]io.opencensus:opencensus-api 0.31.1io.opencensus:opencensus-contrib-http-util 0.31.1io.opencensus:opencensus-impl 0.31.1io.opencensus:opencensus-testing 0.31.1org.apache.maven.plugins:maven-assembly-plugin 3.7.1→ [Updates:3.8.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.apache.maven.plugins:maven-surefire-plugin 3.5.2→ [Updates:3.6.0]org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0org.codehaus.mojo:findbugs-maven-plugin 3.0.5org.codehaus.mojo:clirr-maven-plugin 2.8→ [Updates:2.9]org.codehaus.mojo:animal-sniffer-maven-plugin 1.24→ [Updates:1.28]org.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]org.apache.maven.plugins:maven-dependency-plugin 3.8.1→ [Updates:3.11.0]org.apache.maven.plugins:maven-resources-plugin 3.3.1→ [Updates:3.5.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]com.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTorg.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]com.coveo:fmt-maven-plugin 2.9→ [Updates:2.13]com.google.googlejavaformat:google-java-format 1.7→ [Updates:1.37.0]org.codehaus.mojo.signature:java17 1.0net.sf.androidscents.signature:android-api-level-19 4.4.2_r4org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]samples/dailymotion-simple-cmdline-sample/pom.xml (2)
org.codehaus.mojo:exec-maven-plugin 3.5.0→ [Updates:3.6.4]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]samples/install-without-bom/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/pom.xml (2)
org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0samples/snapshot/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/snippets/pom.xml (3)
com.google.cloud:libraries-bom 26.54.0→ [Updates:26.90.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]
regex (3)
.kokoro/presubmit/graalvm-native-a.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-b.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-c.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]
- Check this box to trigger a request for Renovate to run again on this repository
- Ngôn ngữ chính
- Java
- Star
- 1.4k
- Fork
- 476
- Merge trung bình
- 10 giờ 47 phút
- Pull request đã merge (30 ngày)
- 3
Chuẩn bị môi trường
- Không có Dockerfile hay tệp Docker Compose
- Có mẫu pull request
- Đọc hướng dẫn đóng góp
Bắt đầu từ đâu
- Đọc hết issue, rồi đọc hướng dẫn đóng góp của dự án.
- Bình luận trên issue rằng bạn sẽ nhận — tránh hai người làm cùng một việc.
- Fork repository và làm thay đổi trên một nhánh.
- Mở pull request có tham chiếu số hiệu của issue.
Issue khác của googleapis/google-http-java-client
-
Core: Validate header names and values to prevent CRLF injectionCó thể đã có người làm @insaf021 đã nhận 106 ngày trước. Đang mởpriority: p3
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 78/100
-
Core: XmlPullParser processes external DTD entities (XXE) — disable FEATURE_PROCESS_DOCDECL in Xml#createParser()Có thể đã có người làm @insaf021 đã nhận 106 ngày trước. Đang mởpriority: p3
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 84/100
-
Core: LowLevelHttpResponse not disconnected when HttpResponse construction throws RuntimeExceptionCó thể đã có người làm @insaf021 đã nhận 106 ngày trước. Đang mởpriority: p3
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 84/100
-
type: cleanup
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 68/100
-
org.apache.http.conn.ssl.SSLSocketFactory is deprecatedCó thể làm lại được Pull request cho issue này đã bị đóng mà không được merge. Đang mởpriority: p2 type: cleanup
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 65/100
Tất cả issue của googleapis/google-http-java-client
Issue tương tự
-
Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 88/100
-
Độ khó 2/5 Dưới một giờ Mức phù hợp với người mới 84/100
cpp-best-practices/project_validator#251 ·
Maintainer thường phản hồi trong vòng 1 ngày
-
backend enhancement
Độ khó 2/5 Nửa ngày Mức phù hợp với người mới 70/100
damodharg6/payledger#16 ·
-
[Bug]: An initiative list with no current entry logs an error on every changeCó thể đã có người làm @dwizard0 đã nhận hôm nay. Đang mở
Độ khó 2/5 1-3 giờ Mức phù hợp với người mới 75/100
Maintainer thường phản hồi trong vòng 1 ngày
-
Độ khó 1/5 Dưới một giờ Mức phù hợp với người mới 85/100
Maintainer thường phản hồi trong vòng 1 ngày