Dependency Dashboard
還沒有人認領這個 Issue。
評估
- 難度
- 5/5
- 預估耗時
- 一週以上
- 新手友好度
- 10/100
- Issue 類型
- 重構
- 描述清晰度
- 需要釐清
- 活躍度
- 停滯
- 技術堆疊
- github-actions, java
- 領域
- build-system, ci-cd, devops
研究方向
先查看 Dependency Dashboard 文件,然後檢查列出的 .github/workflows 檔案和 Maven pom.xml 檔案。此 issue 彙整了許多自動化相依性更新,包括已由關聯 pull request 表示的更新;要完成此工作,需要確定 dashboard 中哪些項目仍需處理,並驗證由此產生的相依性變更。
由索引模型根據 Issue 內容生成。
描述
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Config Migration Needed
- Select this checkbox to let Renovate create an automated Config Migration PR.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- deps: update actions/upload-artifact action to v4.6.2
- deps: update ossf/scorecard-action action to v2.4.4
- deps: update project.appengine.version to v2.0.39 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - build(deps): update dependency com.google.cloud:native-image-shared-config to v1.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
- build(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
- build(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
- build(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3
- build(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
- build(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
- build(deps): update dependency org.apache.maven.plugins:maven-resources-plugin to v3.5.0
- build(deps): update dependency org.apache.maven.plugins:maven-site-plugin to v3.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
- build(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
- build(deps): update dependency org.codehaus.mojo:animal-sniffer-maven-plugin to v1.28
- build(deps): update dependency org.codehaus.mojo:clirr-maven-plugin to v2.9
- build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
- deps: update actions/checkout action to v4.4.0
- deps: update dependency com.google.errorprone:error_prone_annotations to v2.50.0
- deps: update dependency com.google.j2objc:j2objc-annotations to v3.1
- deps: update dependency com.google.protobuf:protobuf-java to v4.36.2
- deps: update dependency commons-codec:commons-codec to v1.22.1
- deps: update github/codeql-action action to v3.38.2
- deps: update actions/checkout action to v7
- deps: update actions/github-script action to v9
- deps: update actions/setup-java action to v6
- deps: update actions/setup-node action to v7
- deps: update actions/upload-artifact action to v7
- deps: update dependency com.puppycrawl.tools:checkstyle to v14
- deps: update dependency java-jdk to v25
- deps: update dependency node to v24
- deps: update dependency ubuntu to v26
- deps: update github/codeql-action action to v4
- deps: update project.appengine.version to v5 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - 🔐 Create all rate-limited PRs at once 🔐
PR Edited (Blocked)
The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.
- deps: update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.3 [security]
- deps: update dependency org.apache.httpcomponents.core5:httpcore5 to v5.4.3 [security]
- build(deps): update dependency com.coveo:fmt-maven-plugin to v2.13
- build(deps): update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.9.0
- deps: update dependency com.google.code.gson:gson to v2.14.0
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- deps: update dependency com.fasterxml.jackson.core:jackson-core to v2.18.8 [security]
- build(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
- build(deps): update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2
- build(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0
- chore(deps): update dependency com.google.cloud:libraries-bom to v26.90.0
- deps: update dependency com.google.googlejavaformat:google-java-format to v1.37.0
- test(deps): update dependency com.google.truth:truth to v1.4.5
- deps: update dependency org.apache.felix:maven-bundle-plugin to v6
- Click on this checkbox to rebase all open PRs at once
Detected Dependencies
github-actions (6)
.github/workflows/approve-readme.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/auto-release.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/ci.yaml (18)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/setup-java v4→ [Updates:v6]java-jdk 8→ [Updates:25]java-jdk 11→ [Updates:25]java-jdk 8→ [Updates:25]java-jdk 21→ [Updates:25]java-jdk 8→ [Updates:25].github/workflows/downstream.yaml (2)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6].github/workflows/renovate_config_check.yaml (4)
actions/checkout v4→ [Updates:v7]actions/setup-node v4→ [Updates:v7]ubuntu 24.04→ [Updates:26.04]node 20→ [Updates:24].github/workflows/scorecard.yml (4)
actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683→ [Updates:v4.4.0,v7.0.1]ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46→ [Updates:v2.4.4]actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08→ [Updates:v4.6.2,v7.0.1]github/codeql-action v3.28.16@28deaeda66b76a05916b6923827895f2b14ab387→ [Updates:v3.38.2,v4.38.2]
maven (21)
google-http-client-android-test/pom.xml (5)
com.jayway.maven.plugins.android.generation2:android-maven-plugin 3.8.2com.google.android:android 4.1.1.4com.google.android:android-test 4.1.1.4com.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTgoogle-http-client-android/pom.xml (1)
com.google.android:android 4.1.1.4google-http-client-apache-v2/pom.xml (2)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]google-http-client-apache-v5/pom.xml (3)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]google-http-client-appengine/pom.xml (1)
org.codehaus.mojo.signature:java17 1.0google-http-client-assembly/pom.xml
google-http-client-bom/pom.xml (16)
com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v5 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-protobuf 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTorg.sonatype.plugins:nexus-staging-maven-plugin 1.7.0org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]com.coveo:fmt-maven-plugin 2.13org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]google-http-client-findbugs/google-http-client-findbugs-test/pom.xml (3)
org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.codehaus.mojo:findbugs-maven-plugin 3.0.5google-http-client-findbugs/pom.xml (2)
com.google.code.findbugs:findbugs 3.0.1com.google.code.findbugs:bcel-findbugs 6.0google-http-client-gson/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-jackson2/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-protobuf/pom.xml (2)
kr.motd.maven:os-maven-plugin 1.7.1org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1google-http-client-test/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-xml/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client/pom.xml (1)
org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]pom.xml (60)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]com.fasterxml.jackson.core:jackson-core 2.18.2→ [Updates:2.18.8]com.google.code.gson:gson 2.11.0→ [Updates:2.14.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]com.google.errorprone:error_prone_annotations 2.36.0→ [Updates:2.50.0]com.google.appengine:appengine-api-1.0-sdk 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-testing 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-api-stubs 2.0.32→ [Updates:2.0.39,5.1.0]xpp3:xpp3 1.1.4ccommons-codec:commons-codec 1.14→ [Updates:1.22.1]org.apache.httpcomponents:httpclient 4.5.14org.apache.httpcomponents:httpcore 4.4.16org.apache.httpcomponents.client5:httpclient5 5.3.1→ [Updates:5.6.3]org.apache.httpcomponents.core5:httpcore5 5.2.5→ [Updates:5.4.3]com.google.code.findbugs:jsr305 3.0.2com.google.protobuf:protobuf-java 4.33.2→ [Updates:4.36.2]com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.j2objc:j2objc-annotations 3.0.0→ [Updates:3.1]io.opencensus:opencensus-api 0.31.1io.opencensus:opencensus-contrib-http-util 0.31.1io.opencensus:opencensus-impl 0.31.1io.opencensus:opencensus-testing 0.31.1org.apache.maven.plugins:maven-assembly-plugin 3.7.1→ [Updates:3.8.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.apache.maven.plugins:maven-surefire-plugin 3.5.2→ [Updates:3.6.0]org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0org.codehaus.mojo:findbugs-maven-plugin 3.0.5org.codehaus.mojo:clirr-maven-plugin 2.8→ [Updates:2.9]org.codehaus.mojo:animal-sniffer-maven-plugin 1.24→ [Updates:1.28]org.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]org.apache.maven.plugins:maven-dependency-plugin 3.8.1→ [Updates:3.11.0]org.apache.maven.plugins:maven-resources-plugin 3.3.1→ [Updates:3.5.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]com.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTorg.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]com.coveo:fmt-maven-plugin 2.9→ [Updates:2.13]com.google.googlejavaformat:google-java-format 1.7→ [Updates:1.37.0]org.codehaus.mojo.signature:java17 1.0net.sf.androidscents.signature:android-api-level-19 4.4.2_r4org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]samples/dailymotion-simple-cmdline-sample/pom.xml (2)
org.codehaus.mojo:exec-maven-plugin 3.5.0→ [Updates:3.6.4]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]samples/install-without-bom/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/pom.xml (2)
org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0samples/snapshot/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/snippets/pom.xml (3)
com.google.cloud:libraries-bom 26.54.0→ [Updates:26.90.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]
regex (3)
.kokoro/presubmit/graalvm-native-a.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-b.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-c.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]
- Check this box to trigger a request for Renovate to run again on this repository
- 主要語言
- Java
- 星號
- 1.4k
- 分支
- 476
- 平均合併
- 10 小時 47 分鐘
- 30 天內合併 PR
- 3
環境準備
- 沒有 Dockerfile 或 Docker Compose 檔案
- 有 Pull Request 範本
- 閱讀貢獻指南
從這裡開始
- 先讀完整個 Issue,再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫,在一個分支上完成修改。
- 送出 Pull Request,並在描述裡引用這個 Issue 編號。
googleapis/google-http-java-client 的其他 Issue
-
Core: Validate header names and values to prevent CRLF injection可能已有人在做 @insaf021 於 106 天前認領。 未關閉priority: p3
難度 2/5 1-3 小時 新手友好度 78/100
-
Core: XmlPullParser processes external DTD entities (XXE) — disable FEATURE_PROCESS_DOCDECL in Xml#createParser()可能已有人在做 @insaf021 於 106 天前認領。 未關閉priority: p3
難度 2/5 1-3 小時 新手友好度 84/100
-
Core: LowLevelHttpResponse not disconnected when HttpResponse construction throws RuntimeException可能已有人在做 @insaf021 於 107 天前認領。 未關閉priority: p3
難度 2/5 1-3 小時 新手友好度 84/100
-
type: cleanup
難度 2/5 1-3 小時 新手友好度 68/100
-
org.apache.http.conn.ssl.SSLSocketFactory is deprecated可能重新可做 關聯的 PR 已關閉且未合併。 未關閉priority: p2 type: cleanup
難度 2/5 1-3 小時 新手友好度 65/100
查看 googleapis/google-http-java-client 的全部 Issue
相似的 Issue
-
bug
難度 2/5 1-3 小時 新手友好度 72/100
維護者通常 1 天內回覆
-
難度 2/5 1-3 小時 新手友好度 72/100
FasterXML/jackson-databind#6443 ·
維護者通常 1 天內回覆
-
難度 2/5 1-3 小時 新手友好度 80/100
finos/fluxnova-bpm-platform#387 ·
維護者通常 4 天內回覆
-
難度 1/5 1 小時以內 新手友好度 88/100
-
難度 2/5 1 小時以內 新手友好度 84/100
cpp-best-practices/project_validator#251 ·
維護者通常 1 天內回覆