Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	eslint-import-resolver-oxc

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• [frontend] Update dependency react-router to v7.6.0 (release/current)
• [backend] Update dependency io.pyroscope:agent to v2.1.2 (release/current)
• [backend] Update dependency net.javacrumbs.json-unit:json-unit-assertj to v4.1.1 (release/current)
• [frontend] Update dependency @types/node to v22.15.17 (release/current)
• [frontend] Update dependency @xyflow/react to v12.6.1 (release/current)
• [frontend] Update dependency esbuild to v0.25.4 (release/current)
• [frontend] Update dependency html-react-parser to v5.2.5 (release/current)
• [frontend] Update dependency immutable to v5.1.2 (release/current)
• [frontend] Update dependency pdfmake to v0.2.20 (release/current)
• [frontend] Update dependency react-hook-form to v7.56.3 (release/current)
• [frontend] Update dependency tss-react to v4.9.18 (release/current)
• [frontend] Update dependency vite to v6.3.5 (release/current)
• [frontend] Update dependency vitest to v3.1.3 (release/current)
• [frontend] Update dependency zod to v3.24.4 (release/current)
• [frontend] Update react monorepo (release/current) (@types/react, @types/react-dom)
• [frontend] Update typescript-eslint monorepo to v8.32.1 (release/current) (@typescript-eslint/utils, typescript-eslint)
• [tool] Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v8.18.1 (release/current)
• [tool] Update docker.elastic.co/kibana/kibana Docker tag to v8.18.1 (release/current)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package io.openbas:openbas-framework, Failed to look up maven package io.openbas:openbas-model.

Files affected: openbas-api/pom.xml, openbas-framework/pom.xml

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [backend] Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.8 (release/current)
• [backend] Update spring boot to v3.4.5 (release/current) (org.springframework.boot:spring-boot-starter-oauth2-client, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-parent)
• [backend] Update dependency co.elastic.clients:elasticsearch-java to v9 (release/current)
• [tool] Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v9 (release/current)
• [tool] Update docker.elastic.co/kibana/kibana Docker tag to v9 (release/current)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

Branch release/current

circleci

.circleci/config.yml

• slack 5.1.1
• kubernetes 2.0.0
• maven 3.9.9-eclipse-temurin-21
• maven 3.9.9-eclipse-temurin-21-alpine
• maven 3.9.9-eclipse-temurin-21
• maven 3.9.9-eclipse-temurin-21

docker-compose

openbas-dev/docker-compose.yml

• postgres 17-alpine
• postgres 17-alpine
• rabbitmq 4.1-management
• openbas/caldera-server 5.1.0
• docker.elastic.co/elasticsearch/elasticsearch 8.18.0
• docker.elastic.co/kibana/kibana 8.18.0

dockerfile

Dockerfile

• node 22.15.0-alpine3.20
• maven 3.9.9-eclipse-temurin-21
• eclipse-temurin 21.0.7_6-jre

Dockerfile_circleci

• maven 3.9.9-eclipse-temurin-21
• eclipse-temurin 21.0.7_6-jre

Dockerfile_ga

• openjdk 21-jdk-slim-bookworm

droneci

.drone.yml

• maven 3.9.9-eclipse-temurin-22
• node 22.15.0-alpine
• maven 3.9.9-eclipse-temurin-22
• node 22.15.0
• node 22.15.0
• postgres 17-alpine
• postgres 17-alpine
• docker.elastic.co/elasticsearch/elasticsearch 8.18.0

github-actions

.github/workflows/auto-close-add-solved.yml

• actions/github-script v7
• actions/github-script v7
• actions/github-script v7

.github/workflows/auto-set-label.yml

• actions/checkout v4
• FiligranHQ/auto-label 1.0.0

.github/workflows/codeql.yml

• actions/checkout v4
• actions/setup-java v4
• github/codeql-action v3
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/release.yml

• actions/checkout v4
• actions/setup-python v5

.github/workflows/test-feature-branch.yml

• actions/checkout v4
• jirutka/setup-alpine v1
• docker/metadata-action v5
• docker/login-action v3
• docker/build-push-action v6
• docker/metadata-action v5

maven

openbas-api/pom.xml

• io.opentelemetry:opentelemetry-bom 1.50.0
• io.openbas:openbas-framework 1.16.1
• co.elastic.clients:elasticsearch-java 8.18.1
• com.rabbitmq:amqp-client 5.25.0
• org.springframework.boot:spring-boot-starter-security 3.2.11
• org.springframework.boot:spring-boot-starter-oauth2-client 3.2.11
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0
• org.bouncycastle:bcpg-jdk18on 1.80
• org.apache.commons:commons-collections4 4.5.0
• com.cronutils:cron-utils 9.2.1
• org.apache.poi:poi 5.4.1
• org.apache.poi:poi-ooxml 5.4.1
• io.opentelemetry.semconv:opentelemetry-semconv 1.32.0
• ch.qos.logback:logback-classic 1.5.18
• ch.qos.logback:logback-core 1.5.18
• ch.qos.logback.contrib:logback-json-classic 0.1.5
• ch.qos.logback.contrib:logback-jackson 0.1.5
• net.javacrumbs.json-unit:json-unit-assertj 4.1.0
• org.apache.maven.plugins:maven-resources-plugin 3.3.1
• org.springdoc:springdoc-openapi-maven-plugin 1.5

openbas-framework/pom.xml

• io.openbas:openbas-model 1.16.1
• com.rabbitmq:amqp-client 5.25.0

openbas-model/pom.xml

• io.hypersistence:hypersistence-utils-hibernate-63 3.9.10
• co.elastic.clients:elasticsearch-java 8.18.1
• io.swagger.core.v3:swagger-annotations-jakarta 2.2.30

pom.xml

• commons-io:commons-io 2.19.0
• commons-validator:commons-validator 1.9.0
• org.jacoco:jacoco-maven-plugin 0.8.13
• commons-io:commons-io 2.19.0
• org.jacoco:jacoco-maven-plugin 0.8.13
• io.minio:minio 8.5.17
• commons-validator:commons-validator 1.9.0
• org.springframework.boot:spring-boot-starter-parent 3.3.7
• org.postgresql:postgresql 42.7.5
• io.pyroscope:agent 2.1.0
• org.springframework.security:spring-security-crypto 6.4.5
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0
• com.diffplug.spotless:spotless-maven-plugin 2.44.4

npm

openbas-front/package.json

• @ckeditor/ckeditor5-react 9.5.0
• @dagrejs/dagre 1.1.4
• @emotion/react 11.14.0
• @emotion/styled 11.14.0
• @fontsource/geologica 5.2.5
• @fontsource/ibm-plex-sans 5.2.5
• @hookform/resolvers 5.0.1
• @microsoft/fetch-event-source 2.0.1
• @mui/icons-material 7.1.0
• @mui/lab 7.0.0-beta.12
• @mui/material 7.1.0
• @mui/system 7.1.0
• @mui/x-date-pickers 8.3.0
• @redux-devtools/extension 3.3.0
• @uiw/react-md-editor 4.0.6
• @xyflow/react 12.6.0
• apexcharts 4.7.0
• axios 1.9.0
• ckeditor5 45.0.0
• classcat 5.0.5
• cronstrue 2.61.0
• d3-hierarchy 3.1.2
• date-fns 4.1.0
• dompurify 3.2.5
• final-form 4.20.10
• final-form-arrays 3.1.0
• html-react-parser 5.2.3
• html-to-image 1.11.13
• http-proxy-middleware 3.0.5
• i18n-auto-translation 2.2.1
• immutable 5.1.1
• js-file-download 0.4.12
• mdi-material-ui 7.9.4
• moment 2.30.1
• moment-timezone 0.5.48
• normalizr 3.6.2
• pdfmake 0.2.19
• prop-types 15.8.1
• qs 6.14.0
• ramda 0.30.1
• react 19.1.0
• react-color 2.19.3
• react-csv 2.2.2
• react-dom 19.1.0
• react-final-form 6.5.9
• react-final-form-arrays 3.1.4
• react-grid-layout 1.5.1
• react-hook-form 7.56.1
• react-intl 7.1.11
• react-markdown 10.1.0
• react-redux 9.2.0
• react-router 7.5.3
• react-syntax-highlighter 15.6.1
• redux 5.0.1
• redux-thunk 3.1.0
• remark-flexible-markers 1.2.1
• remark-gfm 4.0.1
• remark-parse 11.0.0
• rxjs 7.8.2
• tss-react 4.9.16
• usehooks-ts 3.1.1
• uuid 11.1.0
• zod 3.24.3
• zustand 5.0.4
• @eslint/js 9.26.0
• @faker-js/faker 9.7.0
• @playwright/test 1.52.0
• @stylistic/eslint-plugin 4.2.0
• @testing-library/dom 10.4.0
• @testing-library/react 16.3.0
• @types/d3-hierarchy 3.1.7
• @types/node 22.15.3
• @types/pdfmake 0.2.11
• @types/qs 6
• @types/react 19.1.2
• @types/react-csv 1.1.10
• @types/react-dom 19.1.3
• @types/react-grid-layout ^1
• @types/react-syntax-highlighter 15
• @typescript-eslint/utils 8.32.0
• @vitejs/plugin-react 4.4.1
• @vitest/eslint-plugin 1.1.44
• chokidar 4.0.3
• cross-env 7.0.3
• esbuild 0.25.3
• eslint 9.26.0
• eslint-import-resolver-oxc 0.14.0
• eslint-plugin-i18next 6.1.1
• eslint-plugin-import 2.31.0
• eslint-plugin-playwright 2.2.0
• eslint-plugin-react 7.37.5
• eslint-plugin-react-refresh 0.4.20
• eslint-plugin-simple-import-sort 12.1.1
• express 5.1.0
• fs-extra 11.3.0
• globals 16.1.0
• jsdom 26.1.0
• monocart-coverage-reports 2.12.4
• monocart-reporter 2.9.18
• swagger-typescript-api 13.1.3
• typescript 5.8.3
• typescript-eslint 8.32.0
• vite 6.3.4
• vitest 3.1.2
• node >= 22.11.0
• @types/react 19.1.2
• yarn 4.9.1

openbas-front/packages/eslint-plugin-custom-rules/package.json

• requireindex 1.2.0
• eslint >=7

pip_requirements

scripts/requirements.txt

Branch master

circleci

.circleci/config.yml

docker-compose

openbas-dev/docker-compose.yml

dockerfile

Dockerfile

Dockerfile_circleci

Dockerfile_ga

droneci

.drone.yml

github-actions

.github/workflows/auto-close-add-solved.yml

.github/workflows/auto-set-label.yml

.github/workflows/codeql.yml

.github/workflows/release.yml

.github/workflows/test-feature-branch.yml

maven

openbas-api/pom.xml

openbas-framework/pom.xml

openbas-model/pom.xml

pom.xml

npm

openbas-front/package.json

openbas-front/packages/eslint-plugin-custom-rules/package.json

pip_requirements

scripts/requirements.txt

---

• Check this box to trigger a request for Renovate to run again on this repository