Dependency Dashboard
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 10/100
- Issue 类型
- 重构
- 描述清晰度
- 需要澄清
- 活跃度
- 停滞
- 技术栈
- github-actions, java
- 领域
- build-system, ci-cd, devops
调研方向
先查看 Dependency Dashboard 文档,然后检查列出的 .github/workflows 文件和 Maven pom.xml 文件。该 issue 汇总了许多自动化依赖项更新,包括已由关联 pull request 表示的更新;要完成此工作,需要确定 dashboard 中哪些条目仍需处理,并验证由此产生的依赖项更改。
由索引模型根据 Issue 内容生成。
描述
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Config Migration Needed
- Select this checkbox to let Renovate create an automated Config Migration PR.
Rate-Limited
The following updates are currently rate-limited. To force their creation now, click on a checkbox below.
- deps: update actions/upload-artifact action to v4.6.2
- deps: update ossf/scorecard-action action to v2.4.4
- deps: update project.appengine.version to v2.0.39 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - build(deps): update dependency com.google.cloud:native-image-shared-config to v1.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0
- build(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0
- build(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
- build(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.3
- build(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1
- build(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
- build(deps): update dependency org.apache.maven.plugins:maven-resources-plugin to v3.5.0
- build(deps): update dependency org.apache.maven.plugins:maven-site-plugin to v3.22.0
- build(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0
- build(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
- build(deps): update dependency org.codehaus.mojo:animal-sniffer-maven-plugin to v1.28
- build(deps): update dependency org.codehaus.mojo:clirr-maven-plugin to v2.9
- build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
- deps: update actions/checkout action to v4.4.0
- deps: update dependency com.google.errorprone:error_prone_annotations to v2.50.0
- deps: update dependency com.google.j2objc:j2objc-annotations to v3.1
- deps: update dependency com.google.protobuf:protobuf-java to v4.36.2
- deps: update dependency commons-codec:commons-codec to v1.22.1
- deps: update github/codeql-action action to v3.38.2
- deps: update actions/checkout action to v7
- deps: update actions/github-script action to v9
- deps: update actions/setup-java action to v6
- deps: update actions/setup-node action to v7
- deps: update actions/upload-artifact action to v7
- deps: update dependency com.puppycrawl.tools:checkstyle to v14
- deps: update dependency java-jdk to v25
- deps: update dependency node to v24
- deps: update dependency ubuntu to v26
- deps: update github/codeql-action action to v4
- deps: update project.appengine.version to v5 (
com.google.appengine:appengine-api-stubs,com.google.appengine:appengine-testing,com.google.appengine:appengine-api-1.0-sdk) - 🔐 Create all rate-limited PRs at once 🔐
PR Edited (Blocked)
The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.
- deps: update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.3 [security]
- deps: update dependency org.apache.httpcomponents.core5:httpcore5 to v5.4.3 [security]
- build(deps): update dependency com.coveo:fmt-maven-plugin to v2.13
- build(deps): update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.9.0
- deps: update dependency com.google.code.gson:gson to v2.14.0
Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
- deps: update dependency com.fasterxml.jackson.core:jackson-core to v2.18.8 [security]
- build(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8
- build(deps): update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2
- build(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0
- chore(deps): update dependency com.google.cloud:libraries-bom to v26.90.0
- deps: update dependency com.google.googlejavaformat:google-java-format to v1.37.0
- test(deps): update dependency com.google.truth:truth to v1.4.5
- deps: update dependency org.apache.felix:maven-bundle-plugin to v6
- Click on this checkbox to rebase all open PRs at once
Detected Dependencies
github-actions (6)
.github/workflows/approve-readme.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/auto-release.yaml (1)
actions/github-script v7→ [Updates:v9].github/workflows/ci.yaml (18)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6]actions/setup-java v4→ [Updates:v6]java-jdk 8→ [Updates:25]java-jdk 11→ [Updates:25]java-jdk 8→ [Updates:25]java-jdk 21→ [Updates:25]java-jdk 8→ [Updates:25].github/workflows/downstream.yaml (2)
actions/checkout v4→ [Updates:v7]actions/setup-java v4→ [Updates:v6].github/workflows/renovate_config_check.yaml (4)
actions/checkout v4→ [Updates:v7]actions/setup-node v4→ [Updates:v7]ubuntu 24.04→ [Updates:26.04]node 20→ [Updates:24].github/workflows/scorecard.yml (4)
actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683→ [Updates:v4.4.0,v7.0.1]ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46→ [Updates:v2.4.4]actions/upload-artifact v4.6.0@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08→ [Updates:v4.6.2,v7.0.1]github/codeql-action v3.28.16@28deaeda66b76a05916b6923827895f2b14ab387→ [Updates:v3.38.2,v4.38.2]
maven (21)
google-http-client-android-test/pom.xml (5)
com.jayway.maven.plugins.android.generation2:android-maven-plugin 3.8.2com.google.android:android 4.1.1.4com.google.android:android-test 4.1.1.4com.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTgoogle-http-client-android/pom.xml (1)
com.google.android:android 4.1.1.4google-http-client-apache-v2/pom.xml (2)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]google-http-client-apache-v5/pom.xml (3)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]google-http-client-appengine/pom.xml (1)
org.codehaus.mojo.signature:java17 1.0google-http-client-assembly/pom.xml
google-http-client-bom/pom.xml (16)
com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v5 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-protobuf 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTorg.sonatype.plugins:nexus-staging-maven-plugin 1.7.0org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]com.coveo:fmt-maven-plugin 2.13org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]google-http-client-findbugs/google-http-client-findbugs-test/pom.xml (3)
org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.codehaus.mojo:findbugs-maven-plugin 3.0.5google-http-client-findbugs/pom.xml (2)
com.google.code.findbugs:findbugs 3.0.1com.google.code.findbugs:bcel-findbugs 6.0google-http-client-gson/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-jackson2/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-protobuf/pom.xml (2)
kr.motd.maven:os-maven-plugin 1.7.1org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1google-http-client-test/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client-xml/pom.xml (1)
org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]google-http-client/pom.xml (1)
org.apache.felix:maven-bundle-plugin 5.1.9→ [Updates:6.2.0]pom.xml (60)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]com.fasterxml.jackson.core:jackson-core 2.18.2→ [Updates:2.18.8]com.google.code.gson:gson 2.11.0→ [Updates:2.14.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]com.google.errorprone:error_prone_annotations 2.36.0→ [Updates:2.50.0]com.google.appengine:appengine-api-1.0-sdk 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-testing 2.0.32→ [Updates:2.0.39,5.1.0]com.google.appengine:appengine-api-stubs 2.0.32→ [Updates:2.0.39,5.1.0]xpp3:xpp3 1.1.4ccommons-codec:commons-codec 1.14→ [Updates:1.22.1]org.apache.httpcomponents:httpclient 4.5.14org.apache.httpcomponents:httpcore 4.4.16org.apache.httpcomponents.client5:httpclient5 5.3.1→ [Updates:5.6.3]org.apache.httpcomponents.core5:httpcore5 5.2.5→ [Updates:5.4.3]com.google.code.findbugs:jsr305 3.0.2com.google.protobuf:protobuf-java 4.33.2→ [Updates:4.36.2]com.google.http-client:google-http-client 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-apache-v2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-appengine 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-android 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-gson 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-jackson2 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-xml 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTcom.google.http-client:google-http-client-test 2.2.1-SNAPSHOTcom.google.j2objc:j2objc-annotations 3.0.0→ [Updates:3.1]io.opencensus:opencensus-api 0.31.1io.opencensus:opencensus-contrib-http-util 0.31.1io.opencensus:opencensus-impl 0.31.1io.opencensus:opencensus-testing 0.31.1org.apache.maven.plugins:maven-assembly-plugin 3.7.1→ [Updates:3.8.0]org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-jar-plugin 3.4.2→ [Updates:3.5.1]org.apache.maven.plugins:maven-surefire-plugin 3.5.2→ [Updates:3.6.0]org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0org.codehaus.mojo:findbugs-maven-plugin 3.0.5org.codehaus.mojo:clirr-maven-plugin 2.8→ [Updates:2.9]org.codehaus.mojo:animal-sniffer-maven-plugin 1.24→ [Updates:1.28]org.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]org.apache.maven.plugins:maven-site-plugin 3.21.0→ [Updates:3.22.0]org.apache.maven.plugins:maven-dependency-plugin 3.8.1→ [Updates:3.11.0]org.apache.maven.plugins:maven-resources-plugin 3.3.1→ [Updates:3.5.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]org.apache.maven.plugins:maven-source-plugin 3.3.1→ [Updates:3.4.0]org.apache.maven.plugins:maven-enforcer-plugin 3.5.0→ [Updates:3.6.3]com.google.http-client:google-http-client-findbugs 2.2.1-SNAPSHOTorg.apache.maven.plugins:maven-project-info-reports-plugin 3.6.2→ [Updates:3.9.0]com.coveo:fmt-maven-plugin 2.9→ [Updates:2.13]com.google.googlejavaformat:google-java-format 1.7→ [Updates:1.37.0]org.codehaus.mojo.signature:java17 1.0net.sf.androidscents.signature:android-api-level-19 4.4.2_r4org.apache.maven.plugins:maven-compiler-plugin 3.13.0→ [Updates:3.16.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]org.apache.maven.plugins:maven-gpg-plugin 3.2.7→ [Updates:3.2.8]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]org.apache.maven.plugins:maven-javadoc-plugin 3.11.2→ [Updates:3.12.0]samples/dailymotion-simple-cmdline-sample/pom.xml (2)
org.codehaus.mojo:exec-maven-plugin 3.5.0→ [Updates:3.6.4]com.puppycrawl.tools:checkstyle 9.3→ [Updates:14.3.0]samples/install-without-bom/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/pom.xml (2)
org.apache.maven.plugins:maven-deploy-plugin 3.1.3→ [Updates:3.2.0]org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0samples/snapshot/pom.xml (3)
junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]org.codehaus.mojo:build-helper-maven-plugin 3.6.0→ [Updates:3.6.2]samples/snippets/pom.xml (3)
com.google.cloud:libraries-bom 26.54.0→ [Updates:26.90.0]junit:junit 4.13.2com.google.truth:truth 1.1.3→ [Updates:1.4.5]
regex (3)
.kokoro/presubmit/graalvm-native-a.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-b.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0].kokoro/presubmit/graalvm-native-c.cfg (1)
com.google.cloud:native-image-shared-config 1.17.0→ [Updates:1.22.0]
- Check this box to trigger a request for Renovate to run again on this repository
- 主要语言
- Java
- 星标
- 1.4k
- 派生
- 476
- 平均合并
- 10 小时 47 分钟
- 30 天内合并 PR
- 3
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
googleapis/google-http-java-client 的其他 Issue
-
Core: Validate header names and values to prevent CRLF injection可能已有人在做 @insaf021 于 106 天前认领。 未关闭priority: p3
难度 2/5 1-3 小时 新手友好度 78/100
-
Core: XmlPullParser processes external DTD entities (XXE) — disable FEATURE_PROCESS_DOCDECL in Xml#createParser()可能已有人在做 @insaf021 于 106 天前认领。 未关闭priority: p3
难度 2/5 1-3 小时 新手友好度 84/100
-
Core: LowLevelHttpResponse not disconnected when HttpResponse construction throws RuntimeException可能已有人在做 @insaf021 于 106 天前认领。 未关闭priority: p3
难度 2/5 1-3 小时 新手友好度 84/100
-
type: cleanup
难度 2/5 1-3 小时 新手友好度 68/100
-
org.apache.http.conn.ssl.SSLSocketFactory is deprecated可能重新可做 关联的 PR 已关闭且未合并。 未关闭priority: p2 type: cleanup
难度 2/5 1-3 小时 新手友好度 65/100
查看 googleapis/google-http-java-client 的全部 Issue
相似的 Issue
-
难度 1/5 1 小时以内 新手友好度 88/100
-
难度 2/5 1 小时以内 新手友好度 84/100
cpp-best-practices/project_validator#251 ·
维护者通常 1 天内回复
-
backend enhancement
难度 2/5 半天 新手友好度 70/100
damodharg6/payledger#16 ·
-
[Bug]: An initiative list with no current entry logs an error on every change可能已有人在做 @dwizard0 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 75/100
维护者通常 1 天内回复
-
难度 1/5 1 小时以内 新手友好度 85/100
维护者通常 1 天内回复