Dependency Dashboard

未关闭
  • 哪里不对？
#1,715 2 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

维护者通常 1 天内回复

还没有人认领这个 Issue。

评估

难度
5/5
预计耗时
一周以上
新手友好度
15/100
Issue 类型
重构
描述清晰度
需要澄清
活跃度
停滞
技术栈
aws, azure, babel, docker, eslint, gcp, github-actions, go, helm, java, javascript, kubernetes, python, spring, terraform
领域
build-system, ci-cd, cloud, devops, infrastructure

调研方向

该仪表板由 Renovate 生成，没有单一的更改目标。首先检查未勾选的条目及其引用的文件，包括 .github/workflows、Dockerfiles 和 .devcontainer/devcontainer.json；完成这项工作需要选择更新、验证兼容性并通过相关检查。

由索引模型根据 Issue 内容生成。

描述

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

[!WARNING]
The following dependencies are either deprecated or have replacements available.

Datasource Package Replacement PR?
maven org.jruby:jruby-complete Unavailable

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

  • Update dependency bootstrap to v5.3.9
  • Update dependency glob to v14.0.6
  • Update dependency go to v1.27.4
  • Update dependency golang to v1.27.4
  • Update dependency minimatch to v11.0.8
  • Update dependency org.thymeleaf.extras:thymeleaf-extras-springsecurity6 to v3.1.7.RELEASE
  • Update dependency terraform to v1.17.2
  • Update Frontend Dependencies (@babel/eslint-parser, @babel/preset-env)
  • Update go (cloud.google.com/go/auth, cloud.google.com/go/longrunning, github.com/googleapis/enterprise-certificate-proxy, github.com/klauspost/compress, github.com/zclconf/go-cty, golang.org/x/crypto, golang.org/x/mod, golang.org/x/oauth2, golang.org/x/sync, golang.org/x/sys, golang.org/x/text, google.golang.org/api, google.golang.org/genproto, google.golang.org/genproto/googleapis/api, google.golang.org/genproto/googleapis/rpc)
  • Update jruby.version to v10.1.3.0 (org.jruby:jruby-base, org.jruby:jruby-stdlib, org.jruby:jruby, org.jruby:jruby-complete)
  • Update pre-commit (antonbabenko/pre-commit-terraform, renovatebot/pre-commit-hooks)
  • Update aws-java-sdk-v2 monorepo to v2.58.0 (software.amazon.awssdk:ssm, software.amazon.awssdk:sts)
  • Update dependency com.diffplug.spotless:spotless-maven-plugin to v3.11.0
  • Update dependency com.google.cloud:libraries-bom to v26.93.0
  • Update dependency org.codehaus.mojo:tidy-maven-plugin to v1.5.0
  • Update dependency org.springdoc:springdoc-openapi-maven-plugin to v1.6
  • Update docker/dockerfile Docker tag to v1.29
  • Update pre-commit-ci/lite-action action to v1.2.0
  • Update spring security to v7.1.2 (org.springframework.security:spring-security-test, org.springframework.security:spring-security-web, org.springframework.security:spring-security-config)
  • Update Terraform azurerm to v4.81.0
  • Update terraform-aws (aws, terraform-aws-modules/eks/aws, terraform-aws-modules/vpc/aws)
  • Update terraform-gcp to ~> 7.46.0 (google, google-beta)
  • Update azure/setup-helm action to v5
  • Update datatables-net monorepo to v3 (datatables.net, datatables.net-bs5, org.webjars:datatables)
  • Update dependency @commitlint/config-conventional to v21
  • Update dependency com.puppycrawl.tools:checkstyle to v14
  • Update dependency io.github.wimdeblauwe:testcontainers-cypress to v2
  • Update dependency java-jdk to v27
  • Update dependency javascript-obfuscator to v5
  • Update dependency nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect to v4
  • Update dependency org.cyclonedx:cyclonedx-core-java to v13
  • Update dependency org.linguafranca.pwdb:KeePassJava2 to v3
  • Update dependency org.owasp:dependency-check-maven to v13
  • Update dependency org.webjars:jquery to v4
  • Update dependency purgecss to v9
  • Update Docker Actions (major) (docker/build-push-action, docker/login-action, docker/metadata-action, docker/setup-buildx-action)
  • Update eclipse-temurin Docker tag to v27
  • Update eslint (major) (eslint, eslint-plugin-cypress, eslint-plugin-mocha)
  • Update Frontend Dependencies to v8 (@babel/eslint-parser, @babel/preset-env)
  • Update GitHub Actions (major) (actions/cache, actions/checkout, actions/configure-pages, actions/deploy-pages, actions/github-script, actions/setup-java, actions/setup-node, actions/setup-python, actions/upload-artifact, actions/upload-pages-artifact)
  • Update go (major) (github.com/apparentlymart/go-textseg/v15, github.com/gruntwork-io/terratest, go.yaml.in/yaml/v3)
  • Update hashicorp/setup-terraform action to v4
  • Update Java Runtime Images to v27 (bellsoft/liberica-openjre-debian, eclipse-temurin)
  • Update marocchino/sticky-pull-request-comment action to v3
  • Update pre-commit hook eslint/eslint to v10
  • Update Terraform azurerm to v5
  • Update terraform-gcp to v8 (google, google-beta)
  • Update testcontainers-java monorepo to v2 (org.testcontainers:testcontainers, org.testcontainers:testcontainers-bom)
  • Update ubuntu Docker tag to v26
  • 🔐 Create all awaiting schedule PRs at once 🔐

Detected Dependencies

devcontainer (1)
.devcontainer/devcontainer.json (3)
  • ghcr.io/owasp/wrongsecrets-devcontainer 26-resolute
  • ghcr.io/devcontainers/features/common-utils 2
  • ghcr.io/devcontainers/features/docker-in-docker 4.1.3
dockerfile (7)
.devcontainer/Dockerfile (1)
  • eclipse-temurin 26-jdk-resolute → [Updates: 27-jdk-resolute]
Dockerfile (2)
  • bellsoft/liberica-openjre-debian 26-cds → [Updates: 27-cds]
  • eclipse-temurin 26-jre-alpine → [Updates: 27-jre-alpine]
Dockerfile.web (1)
  • jeroenwillemsen/wrongsecrets 1.14.2-no-vault
k8s/challenge53/Dockerfile (1)
  • ubuntu plucky-20251001 → [Updates: 26.04]
k8s/challenge53/Dockerfile.debug (1)
  • ubuntu plucky-20251001 → [Updates: 26.04]
src/main/resources/challenges/challenge-51/Dockerfile_challenge51 (1)
  • docker/dockerfile 1.28 → [Updates: 1.29]
src/main/resources/challenges/challenge-64/Dockerfile_challenge64 (2)
  • docker/dockerfile 1.28 → [Updates: 1.29]
  • alpine 3.24
github-actions (29)
.github/workflows/build-devcontainer.yml (9)
  • actions/checkout v7
  • docker/setup-buildx-action v4
  • docker/login-action v4
  • docker/build-push-action v7
  • devcontainers/ci v0.3
  • aquasecurity/trivy-action v0.36.0
  • github/codeql-action v4
  • docker/setup-buildx-action v4
  • docker/login-action v4
.github/workflows/challenge13.yml (1)
  • actions/checkout v7
.github/workflows/codeclimate_standalone.yml (3)
  • actions/checkout v7
  • erzz/codeclimate-standalone v0.0.5
  • actions/upload-artifact v4 → [Updates: v7]
.github/workflows/codeql-analysis.yml (5)
  • actions/checkout v7
  • github/codeql-action v4
  • actions/setup-java v5 → [Updates: v6]
  • github/codeql-action v4
  • java-jdk 26 → [Updates: 27]
.github/workflows/container_test.yml (5)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/upload-artifact v4 → [Updates: v7]
  • actions/checkout v7
  • java-jdk 26 → [Updates: 27]
.github/workflows/container-alts-test.yml (1)
  • actions/checkout v7
.github/workflows/dast-zap-test.yml (4)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • zaproxy/action-baseline v0.15.0
  • java-jdk 26 → [Updates: 27]
.github/workflows/desktop-container-publish.yml (7)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • docker/setup-buildx-action v3 → [Updates: v4]
  • docker/login-action v3 → [Updates: v4]
  • docker/metadata-action v5 → [Updates: v6]
  • docker/build-push-action v6 → [Updates: v7]
  • java-jdk 26 → [Updates: 27]
.github/workflows/external-repo-preview-instructions.yml (1)
  • actions/github-script v8 → [Updates: v9]
.github/workflows/github-pages-preview.yml (12)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/configure-pages v5 → [Updates: v6]
  • actions/upload-pages-artifact v4 → [Updates: v5]
  • actions/deploy-pages v4 → [Updates: v5]
  • actions/github-script v8 → [Updates: v9]
  • actions/checkout v7
  • actions/configure-pages v5 → [Updates: v6]
  • actions/upload-pages-artifact v4 → [Updates: v5]
  • actions/deploy-pages v4 → [Updates: v5]
  • actions/github-script v8 → [Updates: v9]
  • java-jdk 26 → [Updates: 27]
.github/workflows/heroku_tests.yml (2)
  • actions/checkout v7
  • actions/upload-artifact v4 → [Updates: v7]
.github/workflows/java_swagger_doc.yml (5)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/upload-artifact v4 → [Updates: v7]
  • actions/upload-artifact v4 → [Updates: v7]
  • java-jdk 26 → [Updates: 27]
.github/workflows/link_checker.yml (2)
  • actions/checkout v7
  • lycheeverse/lychee-action v2.9.0
.github/workflows/llama-container-preview.yml (6)
  • actions/checkout v4 → [Updates: v7]
  • docker/setup-buildx-action v3 → [Updates: v4]
  • docker/login-action v3 → [Updates: v4]
  • docker/metadata-action v5 → [Updates: v6]
  • docker/build-push-action v6 → [Updates: v7]
  • marocchino/sticky-pull-request-comment v2 → [Updates: v3.0.5]
.github/workflows/llama-container-publish.yml (5)
  • actions/checkout v7
  • docker/setup-buildx-action v3 → [Updates: v4]
  • docker/login-action v3 → [Updates: v4]
  • docker/metadata-action v5 → [Updates: v6]
  • docker/build-push-action v6 → [Updates: v7]
.github/workflows/main.yml (10)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/upload-artifact v4 → [Updates: v7]
  • java-jdk 26 → [Updates: 27]
  • java-jdk 26 → [Updates: 27]
  • java-jdk 26 → [Updates: 27]
.github/workflows/master-container-publish.yml (7)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • docker/setup-buildx-action v3 → [Updates: v4]
  • docker/login-action v3 → [Updates: v4]
  • docker/metadata-action v5 → [Updates: v6]
  • docker/build-push-action v6 → [Updates: v7]
  • java-jdk 26 → [Updates: 27]
.github/workflows/minikube-k8s-test.yml (2)
  • actions/checkout v7
  • medyagh/setup-minikube master
.github/workflows/minikube-vault-test.yml (9)
  • actions/checkout v7
  • eLco/setup-vault v1.0.4
  • medyagh/setup-minikube master
  • azure/setup-helm v4 → [Updates: v5]
  • actions/checkout v7
  • eLco/setup-vault v1.0.4
  • medyagh/setup-minikube master
  • azure/setup-helm v4 → [Updates: v5]
  • actions/upload-artifact v4 → [Updates: v7]
.github/workflows/pr-preview.yml (19)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • docker/setup-buildx-action v3 → [Updates: v4]
  • docker/login-action v3 → [Updates: v4]
  • docker/metadata-action v5 → [Updates: v6]
  • docker/build-push-action v6 → [Updates: v7]
  • actions/upload-artifact v4 → [Updates: v7]
  • actions/github-script v8 → [Updates: v9]
  • actions/checkout v7
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/setup-java v5 → [Updates: v6]
  • actions/setup-node v6 → [Updates: v7]
  • actions/upload-artifact v4 → [Updates: v7]
  • actions/github-script v8 → [Updates: v9]
  • java-jdk 26 → [Updates: 27]
  • java-jdk 26 → [Updates: 27]
  • java-jdk 26 → [Updates: 27]
  • node 26
.github/workflows/pre-commit.yml (14)
  • actions/checkout v7
  • actions/setup-python v6 → [Updates: v7]
  • psf/black stable
  • actions/setup-node v6 → [Updates: v7]
  • actions/setup-java v5 → [Updates: v6]
  • actions/cache v4 → [Updates: v6]
  • hashicorp/setup-terraform v3 → [Updates: v4]
  • terraform-linters/setup-tflint v6
  • pre-commit/action v3.0.1
  • pre-commit-ci/lite-action v1.1.0 → [Updates: v1.2.0]
  • python 3.15
  • node 26
  • java-jdk 26 → [Updates: 27]
  • terraform v1.17.1 → [Updates: v1.17.2]
.github/workflows/project-management.yml (1)
  • boundfoxstudios/action-unassign-contributor-after-days-of-inactivity main
.github/workflows/review-translate-pages.yml (4)
  • actions/checkout v7
  • actions/configure-pages v5 → [Updates: v6]
  • actions/upload-pages-artifact v4 → [Updates: v5]
  • actions/deploy-pages v4 → [Updates: v5]
.github/workflows/scanner-comparison.yml (15)
  • actions/checkout v7
  • actions/checkout v7
  • actions/checkout v7
  • actions/setup-python v6 → [Updates: v7]
  • actions/checkout v7
  • actions/checkout v7
  • actions/setup-python v6 → [Updates: v7]
  • actions/checkout v7
  • actions/setup-python v6 → [Updates: v7]
  • actions/checkout v7
  • actions/setup-python v6 → [Updates: v7]
  • python 3.15
  • python 3.15
  • python 3.15
  • python 3.15
.github/workflows/scanners.yml (2)
  • actions/checkout v7
  • trufflesecurity/trufflehog main
.github/workflows/sort-contributors-go.yml (3)
  • actions/checkout v7
  • actions/setup-go v7
  • go 1.27.3 → [Updates: 1.27.4]
.github/workflows/terraform.yml (3)
  • actions/checkout v7
  • hashicorp/setup-terraform v3 → [Updates: v4]
  • terraform v1.17.1 → [Updates: v1.17.2]
.github/workflows/version-sync-check.yml (4)
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/github-script v8 → [Updates: v9]
  • java-jdk 26 → [Updates: 27]
.github/workflows/visual-diff.yml (10)
  • actions/checkout v7
  • actions/checkout v7
  • actions/setup-java v5 → [Updates: v6]
  • actions/setup-java v5 → [Updates: v6]
  • actions/setup-node v6 → [Updates: v7]
  • actions/upload-artifact v4 → [Updates: v7]
  • actions/github-script v8 → [Updates: v9]
  • java-jdk 26 → [Updates: 27]
  • java-jdk 26 → [Updates: 27]
  • node 26
gomod (5)
aws/go.mod (32)
  • go 1.26.10
  • github.com/gruntwork-io/terratest v0.56.0 → [Updates: v1.0.1]
  • github.com/agext/levenshtein v1.2.3
  • github.com/apparentlymart/go-textseg/v15 v15.0.0 → [Updates: v17.0.1]
  • github.com/apparentlymart/go-textseg/v17 v17.0.1
  • github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
  • github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-getter/v2 v2.2.6
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-safetemp v1.0.0
  • github.com/hashicorp/go-version v1.9.0
  • github.com/hashicorp/hcl/v2 v2.25.0
  • github.com/hashicorp/terraform-json v0.29.0
  • github.com/jinzhu/copier v0.4.0
  • github.com/klauspost/compress v1.20.3 → [Updates: v1.20.4]
  • github.com/mattn/go-zglob v0.0.8
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/go-testing-interface v1.14.1
  • github.com/mitchellh/go-wordwrap v1.0.1
  • github.com/stretchr/testify v1.12.1
  • github.com/tmccombs/hcl2json v0.6.9
  • github.com/ulikunitz/xz v0.5.17
  • github.com/zclconf/go-cty v1.19.0 → [Updates: v1.20.0]
  • go.yaml.in/yaml/v3 v3.0.6 → [Updates: v4.0.0]
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
  • golang.org/x/mod v0.42.0 → [Updates: v0.43.0]
  • golang.org/x/sync v0.24.0 → [Updates: v0.25.0]
  • golang.org/x/sys v0.49.0 → [Updates: v0.50.0]
  • golang.org/x/text v0.43.0 → [Updates: v0.44.0]
  • golang.org/x/tools v0.52.0
azure/go.mod (32)
  • go 1.26.10
  • github.com/gruntwork-io/terratest v0.56.0 → [Updates: v1.0.1]
  • github.com/agext/levenshtein v1.2.3
  • github.com/apparentlymart/go-textseg/v15 v15.0.0 → [Updates: v17.0.1]
  • github.com/apparentlymart/go-textseg/v17 v17.0.1
  • github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
  • github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-getter/v2 v2.2.6
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-safetemp v1.0.0
  • github.com/hashicorp/go-version v1.9.0
  • github.com/hashicorp/hcl/v2 v2.25.0
  • github.com/hashicorp/terraform-json v0.29.0
  • github.com/jinzhu/copier v0.4.0
  • github.com/klauspost/compress v1.20.3 → [Updates: v1.20.4]
  • github.com/mattn/go-zglob v0.0.8
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/go-testing-interface v1.14.1
  • github.com/mitchellh/go-wordwrap v1.0.1
  • github.com/stretchr/testify v1.12.1
  • github.com/tmccombs/hcl2json v0.6.9
  • github.com/ulikunitz/xz v0.5.17
  • github.com/zclconf/go-cty v1.19.0 → [Updates: v1.20.0]
  • go.yaml.in/yaml/v3 v3.0.6 → [Updates: v4.0.0]
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
  • golang.org/x/mod v0.42.0 → [Updates: v0.43.0]
  • golang.org/x/sync v0.24.0 → [Updates: v0.25.0]
  • golang.org/x/sys v0.49.0 → [Updates: v0.50.0]
  • golang.org/x/text v0.43.0 → [Updates: v0.44.0]
  • golang.org/x/tools v0.52.0
gcp/go.mod (32)
  • go 1.26.10
  • github.com/gruntwork-io/terratest v0.56.0 → [Updates: v1.0.1]
  • github.com/agext/levenshtein v1.2.3
  • github.com/apparentlymart/go-textseg/v15 v15.0.0 → [Updates: v17.0.1]
  • github.com/apparentlymart/go-textseg/v17 v17.0.1
  • github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d@9fd32a8b3d3d
  • github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc@d8f796af33cc
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-getter/v2 v2.2.6
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-safetemp v1.0.0
  • github.com/hashicorp/go-version v1.9.0
  • github.com/hashicorp/hcl/v2 v2.25.0
  • github.com/hashicorp/terraform-json v0.29.0
  • github.com/jinzhu/copier v0.4.0
  • github.com/klauspost/compress v1.20.3 → [Updates: v1.20.4]
  • github.com/mattn/go-zglob v0.0.8
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/go-testing-interface v1.14.1
  • github.com/mitchellh/go-wordwrap v1.0.1
  • github.com/stretchr/testify v1.12.1
  • github.com/tmccombs/hcl2json v0.6.9
  • github.com/ulikunitz/xz v0.5.17
  • github.com/zclconf/go-cty v1.19.0 → [Updates: v1.20.0]
  • go.yaml.in/yaml/v3 v3.0.6 → [Updates: v4.0.0]
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
  • golang.org/x/mod v0.42.0 → [Updates: v0.43.0]
  • golang.org/x/sync v0.24.0 → [Updates: v0.25.0]
  • golang.org/x/sys v0.49.0 → [Updates: v0.50.0]
  • golang.org/x/text v0.43.0 → [Updates: v0.44.0]
  • golang.org/x/tools v0.52.0
scripts/do_translate/go.mod (34)
  • go 1.27.1
  • cloud.google.com/go/translate v1.20.1
  • cloud.google.com/go v0.123.0
  • cloud.google.com/go/auth v0.24.2 → [Updates: v0.24.4]
  • cloud.google.com/go/auth/oauth2adapt v0.3.1
  • cloud.google.com/go/compute/metadata v0.10.0
  • cloud.google.com/go/longrunning v1.4.1 → [Updates: v1.5.0]
  • github.com/cespare/xxhash/v2 v2.3.0
  • github.com/felixge/httpsnoop v1.1.0
  • github.com/go-logr/logr v1.4.4
  • github.com/go-logr/stdr v1.2.2
  • github.com/google/s2a-go v0.1.11
  • github.com/googleapis/enterprise-certificate-proxy v0.3.24 → [Updates: v0.3.25]
  • github.com/googleapis/gax-go/v2 v2.27.0
  • go.opentelemetry.io/auto/sdk v1.2.1
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.72.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.72.0
  • go.opentelemetry.io/otel v1.47.0
  • go.opentelemetry.io/otel/log v1.47.0
  • go.opentelemetry.io/otel/metric v1.47.0
  • go.opentelemetry.io/otel/trace v1.47.0
  • golang.org/x/crypto v0.58.0 → [Updates: v0.59.0]
  • golang.org/x/net v0.62.0
  • golang.org/x/oauth2 v0.37.0 → [Updates: v0.38.0]
  • golang.org/x/sync v0.24.0 → [Updates: v0.25.0]
  • golang.org/x/sys v0.49.0 → [Updates: v0.50.0]
  • golang.org/x/text v0.43.0 → [Updates: v0.44.0]
  • golang.org/x/time v0.16.0
  • google.golang.org/api v0.310.0 → [Updates: v0.314.0]
  • google.golang.org/genproto v0.0.0-20261026165753-2ffab32bce7e@2ffab32bce7e → [Updates: v0.0.0-20261110000943-09e21b237f2c]
  • google.golang.org/genproto/googleapis/api v0.0.0-20261026165753-2ffab32bce7e@2ffab32bce7e → [Updates: v0.0.0-20261110000943-09e21b237f2c]
  • google.golang.org/genproto/googleapis/rpc v0.0.0-20261026165753-2ffab32bce7e@2ffab32bce7e → [Updates: v0.0.0-20261110000943-09e21b237f2c]
  • google.golang.org/grpc v1.85.0
  • google.golang.org/protobuf v1.36.12
scripts/sort_contibutors/go.mod (1)
  • go 1.27.3
maven (1)
pom.xml (51)
  • org.springframework.boot:spring-boot-starter-parent 4.1.2
  • org.springframework.cloud:spring-cloud-dependencies 2025.1.4
  • org.testcontainers:testcontainers-bom 1.21.4 → [Updates: 2.0.5]
  • com.google.cloud:libraries-bom 26.91.0 → [Updates: 26.93.0]
  • com.azure.spring:spring-cloud-azure-dependencies 7.4.0
  • org.projectlombok:lombok 1.18.48
  • nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect 3.4.0 → [Updates: 4.0.1]
  • org.thymeleaf.extras:thymeleaf-extras-springsecurity6 3.1.5.RELEASE → [Updates: 3.1.7.RELEASE]
  • org.springframework.security:spring-security-config 7.0.6 → [Updates: 7.1.2]
  • org.springframework.security:spring-security-web 7.0.6 → [Updates: 7.1.2]
  • org.springframework.security:spring-security-test 7.0.6 → [Updates: 7.1.2]
  • org.testcontainers:testcontainers 1.21.4 → [Updates: 2.0.5]
  • software.amazon.awssdk:sts 2.57.8 → [Updates: 2.58.0]
  • software.amazon.awssdk:ssm 2.57.8 → [Updates: 2.58.0]
  • org.linguafranca.pwdb:KeePassJava2 2.2.6 → [Updates: 3.1.0]
  • org.asciidoctor:asciidoctorj-api 3.0.1
  • org.asciidoctor:asciidoctorj 3.0.1
  • org.jruby:jruby-complete 10.1.2.0 → [Updates: 10.1.3.0]
  • org.jruby:jruby 10.1.2.0 → [Updates: 10.1.3.0]
  • org.jruby:jruby-stdlib 10.1.2.0 → [Updates: 10.1.3.0]
  • org.jruby:jruby-base 10.1.2.0 → [Updates: 10.1.3.0]
  • org.webjars:bootstrap 5.3.8
  • org.webjars.npm:github-buttons 2.14.1
  • org.webjars:datatables 2.3.8 → [Updates: 3.0.4]
  • org.webjars:jquery 3.7.1 → [Updates: 4.0.0]
  • org.springdoc:springdoc-openapi-starter-webmvc-ui 3.2.0
  • uk.org.webcompere:system-stubs-jupiter 2.1.8
  • io.gatling.highcharts:gatling-charts-highcharts 3.16.0
  • org.cyclonedx:cyclonedx-core-java 12.2.0 → [Updates: 13.5.0]
  • org.owasp:dependency-check-maven 12.2.2 → [Updates: 13.0.0]
  • com.tngtech.archunit:archunit-junit5 1.5.1
  • com.github.spotbugs:spotbugs-annotations 4.10.5
  • io.github.wimdeblauwe:testcontainers-cypress 1.10.0 → [Updates: 2.0.0]
  • org.springframework.vault:spring-vault-core 4.1.1
  • org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
  • com.puppycrawl.tools:checkstyle 13.11.0 → [Updates: 14.4.0]
  • com.github.spotbugs:spotbugs-maven-plugin 4.10.5.0
  • com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
  • com.github.spotbugs:spotbugs 4.10.5
  • org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
  • org.asciidoctor:asciidoctor-maven-plugin 3.2.0
  • org.cyclonedx:cyclonedx-maven-plugin 2.9.3
  • org.owasp:dependency-check-maven 12.2.2 → [Updates: 13.0.0]
  • com.github.eirslett:frontend-maven-plugin 2.0.2
  • org.springdoc:springdoc-openapi-maven-plugin 1.5 → [Updates: 1.6]
  • org.apache.maven.plugins:maven-compiler-plugin 3.16.0
  • org.codehaus.mojo:tidy-maven-plugin 1.4.1 → [Updates: 1.5.0]
  • com.diffplug.spotless:spotless-maven-plugin 3.10.4 → [Updates: 3.11.0]
  • io.gatling:gatling-maven-plugin 4.21.12
  • org.apache.maven.plugins:maven-dependency-plugin 3.11.0
  • org.apache.maven.plugins:maven-surefire-plugin 3.6.1
maven-wrapper (3)
.mvn/wrapper/maven-wrapper.properties (1)
  • maven 3.10.0
mvnw (1)
  • maven-wrapper 3.3.4
mvnw.cmd (1)
  • maven-wrapper 3.3.4
npm (2)
js/package.json (11)
  • minimatch >=10.0.1 → [Updates: >=10.0.1]
  • bootstrap ^5.3.3 → [Updates: ^5.3.3]
  • clean-css-cli ^5.6.3
  • datatables.net ^2.1.8 → [Updates: ^3.0.0]
  • datatables.net-bs5 ^2.1.8 → [Updates: ^3.0.0]
  • javascript-obfuscator ^4.1.1 → [Updates: ^5.0.0]
  • minimatch >=10.0.1 → [Updates: >=10.0.1]
  • purgecss ^8.0.0 → [Updates: ^9.0.0]
  • terser ^5.51.2
  • node >=26.0.0
  • glob ^14.0.0 → [Updates: ^14.0.0]
package.json (10)
  • @babel/eslint-parser ^7.25.9 → [Updates: ^7.25.9, ^8.0.0]
  • @babel/preset-env ^7.26.0 → [Updates: ^7.26.0, ^8.0.0]
  • @commitlint/config-conventional ^20.0.0 → [Updates: ^21.0.0]
  • @eslint/eslintrc ^3.1.0
  • eslint ^9.11.1 → [Updates: ^10.0.0]
  • eslint-plugin-chai-friendly ^1.0.1
  • eslint-plugin-cypress ^5.0.0 → [Updates: ^7.0.0]
  • eslint-plugin-mocha ^11.0.0 → [Updates: ^12.0.0]
  • globals ^17.0.0
  • node >=26.0.0
pre-commit (1)
.pre-commit-config.yaml (7)
  • renovatebot/pre-commit-hooks 44.200.0 → [Updates: 44.236.4]
  • eslint/eslint v9.39.5 → [Updates: v10.14.0]
  • pre-commit/pre-commit-hooks v6.0.0
  • antonbabenko/pre-commit-terraform v1.109.4 → [Updates: v1.109.5]
  • alessandrojcm/commitlint-pre-commit-hook v9.27.0
  • ejba/pre-commit-maven v0.3.4
  • psf/black 26.10.1
regex (17)
.devcontainer/Dockerfile (1)
  • eclipse-temurin 26-jdk-resolute → [Updates: 27-jdk-resolute]
.devcontainer/Dockerfile (1)
  • golang 1.27.3 → [Updates: 1.27.4]
.devcontainer/Dockerfile (1)
  • node 26
.github/scripts/docker-create.sh (1)
  • OWASP/wrongsecrets-binaries v0.3.0
.github/workflows/codeql-analysis.yml (1)
  • node 26
.github/workflows/container_test.yml (1)
  • node 26
.github/workflows/dast-zap-test.yml (1)
  • node 26
.github/workflows/desktop-container-publish.yml (1)
  • node 26
.github/workflows/github-pages-preview.yml (1)
  • node 26
.github/workflows/java_swagger_doc.yml (1)
  • node 26
.github/workflows/main.yml (3)
  • node 26
  • node 26
  • node 26
.github/workflows/master-container-publish.yml (1)
  • node 26
.github/workflows/pr-preview.yml (4)
  • node 26
  • node 26
  • node 26
  • node 26
.github/workflows/pre-commit.yml (2)
  • node 26
  • node 26
.github/workflows/version-sync-check.yml (1)
  • node 26
.github/workflows/visual-diff.yml (3)
  • node 26
  • node 26
  • node 26
Dockerfile (2)
  • bellsoft/liberica-openjre-debian 26-cds → [Updates: 27-cds]
  • eclipse-temurin 26-jre-alpine → [Updates: 27-jre-alpine]
terraform (8)
aws/irsa.tf (1)
  • terraform-aws-modules/iam/aws ~> 6.0
aws/main.tf (2)
  • terraform-aws-modules/eks/aws 21.15.1 → [Updates: 21.29.0]
  • terraform-aws-modules/vpc/aws ~> 6.6.0 → [Updates: ~> 6.7.0]
aws/shared-state/main.tf (2)
  • aws ~> 6.0 → [Updates: ~> 6.0]
  • hashicorp/terraform ~> 1.1
aws/versions.tf (4)
  • aws ~> 6.34 → [Updates: ~> 6.34]
  • http ~> 3.6.0
  • random ~> 3.9.0
  • hashicorp/terraform ~> 1.6, >= 1.6
azure/shared-state/main.tf (3)
  • azurerm ~> 4.3 → [Updates: ~> 4.3, ~> 5.0]
  • random ~> 3.0
  • hashicorp/terraform ~> 1.1
azure/versions.tf (4)
  • azurerm ~> 4.73.0 → [Updates: ~> 4.81.0, ~> 5.13.0]
  • http ~> 3.6.0
  • random ~> 3.9.0
  • hashicorp/terraform ~> 1.1
gcp/shared-state/main.tf (3)
  • google ~> 7.0 → [Updates: ~> 7.0, ~> 8.0]
  • random ~> 3.0
  • hashicorp/terraform ~> 1.1
gcp/versions.tf (5)
  • google ~> 7.21.0 → [Updates: ~> 7.46.0, ~> 8.11.0]
  • google-beta ~> 7.21.0 → [Updates: ~> 7.46.0, ~> 8.11.0]
  • http ~> 3.6.0
  • random ~> 3.9.0
  • hashicorp/terraform ~> 1.1
  • Check this box to trigger a request for Renovate to run again on this repository
主要语言
HTML
星标
1.5k
派生
661
平均合并
9 小时 39 分钟
30 天内合并 PR
39

环境准备

在 Codespaces 中打开

在浏览器里用你自己的 GitHub 账号启动这个项目的开发容器。

从这里开始

  1. 先读完整个 Issue，再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库，在一个分支上完成修改。
  4. 提交 Pull Request，并在描述里引用这个 Issue 编号。

OWASP/wrongsecrets 的其他 Issue

查看 OWASP/wrongsecrets 的全部 Issue

相似的 Issue

更多 Build System Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。