Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update dependency com.statsig:serversdk to v1.36.4
• fix(deps): update dependency io.github.jamsesso:json-logic-java to v1.1.0
• fix(deps): update dependency com.statsig:serversdk to v2
• fix(deps): update dependency io.getunleash:unleash-client-java to v10
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• fix(deps): update dependency com.github.spotbugs:spotbugs to v4.9.3
• fix(deps): update dependency com.github.ben-manes.caffeine:caffeine to v3

Detected dependencies

docker-compose

providers/flagd/docker-compose.yml

git-submodules

.gitmodules

• providers/flagd/schemas main@2852d7772e6b8674681a6ee6b88db10dbe3f6899
• providers/flagd/test-harness v2.8.0@8dca72ca3877e009b3b76664749f3f604403dfd6
• providers/flagd/spec main@bb2dc2ce32cd50d307cb944f0e021734780260b6

github-actions

.github/workflows/ci.yml

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• actions/cache v4@5a3ec84eff668545956fd18022155c47e93e2684

.github/workflows/component-owners.yml

• dyladan/component-owners 58bd86e9814d23f1525d0a970682cead459fa783

.github/workflows/lint-pr.yml

• amannn/action-semantic-pull-request v5@0723387faaf9b38adef4775cd42cfd5155ed6017

.github/workflows/release-please.yml

• googleapis/release-please-action v4@a02a34c4d625f9be7cb89156071d8567266a2445
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• actions/cache v4@5a3ec84eff668545956fd18022155c47e93e2684

maven

hooks/open-telemetry/pom.xml

• io.opentelemetry:opentelemetry-bom 1.51.0
• io.opentelemetry.semconv:opentelemetry-semconv-incubating 1.28.0-alpha

pom.xml

• org.junit:junit-bom 5.13.1
• io.cucumber:cucumber-bom 7.23.0
• org.mockito:mockito-bom 5.18.0
• dev.openfeature:sdk [1.14.1,1.99999)
• org.projectlombok:lombok 1.18.38
• com.github.spotbugs:spotbugs 4.8.6
• org.assertj:assertj-core 3.27.3
• org.junit-pioneer:junit-pioneer 2.3.0
• org.awaitility:awaitility 4.3.0
• org.apache.maven.plugins:maven-toolchains-plugin 3.2.0
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0
• org.apache.maven.plugins:maven-jar-plugin 3.4.2
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3
• org.honton.chas:exists-maven-plugin 0.15.0
• org.apache.maven.plugins:maven-source-plugin 3.3.1
• org.apache.maven.plugins:maven-javadoc-plugin 3.11.2
• org.cyclonedx:cyclonedx-maven-plugin 2.9.1
• org.apache.maven.plugins:maven-gpg-plugin 3.2.7
• org.sonatype.plugins:nexus-staging-maven-plugin 1.7.0
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 10.25.0
• org.apache.maven.plugins:maven-pmd-plugin 3.26.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.3.0
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
• com.github.spotbugs:spotbugs 4.9.0
• com.diffplug.spotless:spotless-maven-plugin 2.44.5
• org.apache.maven.plugins:maven-toolchains-plugin 3.2.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0

providers/configcat/pom.xml

• com.configcat:configcat-java-client 9.4.3
• org.slf4j:slf4j-api 2.0.17
• org.apache.logging.log4j:log4j-slf4j2-impl 2.24.3

providers/env-var/pom.xml

• org.apache.commons:commons-lang3 3.17.0

providers/flagd/pom.xml

• io.grpc:grpc-netty 1.73.0
• io.grpc:grpc-protobuf 1.73.0
• io.grpc:grpc-stub 1.73.0
• io.netty:netty-transport-native-epoll 4.2.2.Final
• com.fasterxml.jackson.core:jackson-databind 2.19.0
• io.github.jamsesso:json-logic-java 1.0.9
• com.google.code.gson:gson 2.13.1
• com.networknt:json-schema-validator 1.5.7
• org.apache.tomcat:annotations-api 6.0.53
• org.apache.commons:commons-collections4 4.5.0
• org.apache.commons:commons-lang3 3.17.0
• io.opentelemetry:opentelemetry-api 1.51.0
• org.semver4j:semver4j 5.7.1
• commons-codec:commons-codec 1.18.0
• org.junit.jupiter:junit-jupiter 5.13.1
• org.testcontainers:testcontainers 1.21.1
• org.testcontainers:junit-jupiter 1.21.1
• io.rest-assured:rest-assured 5.5.5
• org.slf4j:slf4j-simple 2.0.17
• kr.motd.maven:os-maven-plugin 1.7.1
• org.codehaus.mojo:exec-maven-plugin 3.5.1
• org.apache.maven.plugins:maven-resources-plugin 3.3.1
• org.xolstice.maven.plugins:protobuf-maven-plugin 0.6.1
• com.github.spotbugs:spotbugs-maven-plugin 4.9.3.0
• org.codehaus.mojo:exec-maven-plugin 3.5.1

providers/flagsmith/pom.xml

• com.flagsmith:flagsmith-java-client 7.4.3
• com.squareup.okhttp3:okhttp 4.12.0
• com.squareup.okhttp3:mockwebserver 4.12.0

providers/flipt/pom.xml

• io.flipt:flipt-java 1.1.2
• org.slf4j:slf4j-api 2.0.17
• com.fasterxml.jackson.core:jackson-databind 2.19.0
• org.wiremock:wiremock 3.13.0
• com.fasterxml.jackson.core:jackson-core 2.19.0
• com.fasterxml.jackson.core:jackson-databind 2.19.0
• com.fasterxml.jackson.core:jackson-annotations 2.19.0
• org.apache.logging.log4j:log4j-slf4j2-impl 2.24.3

providers/go-feature-flag/pom.xml

• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.0
• com.fasterxml.jackson.core:jackson-databind 2.19.0
• com.squareup.okhttp3:okhttp 4.12.0
• com.squareup.okhttp3:mockwebserver 4.12.0
• com.github.ben-manes.caffeine:caffeine 2.9.3
• org.slf4j:slf4j-api 2.0.17
• io.reactivex.rxjava3:rxjava 3.1.10
• org.apache.logging.log4j:log4j-slf4j2-impl 2.24.3
• com.google.guava:guava 33.4.8-jre

providers/jsonlogic-eval-provider/pom.xml

• io.github.jamsesso:json-logic-java 1.0.9
• org.json:json 20250517
• com.github.spotbugs:spotbugs-annotations 4.9.3

providers/multiprovider/pom.xml

• org.json:json 20250517
• org.apache.logging.log4j:log4j-slf4j2-impl 2.24.3

providers/statsig/pom.xml

• com.statsig:serversdk 1.18.1
• org.slf4j:slf4j-api 2.0.17
• org.apache.logging.log4j:log4j-slf4j2-impl 2.24.3

providers/unleash/pom.xml

• io.getunleash:unleash-client-java 9.3.2
• org.slf4j:slf4j-api 2.0.17
• org.wiremock:wiremock 3.13.0
• org.apache.logging.log4j:log4j-slf4j2-impl 2.24.3

tools/flagd-http-connector/pom.xml

• dev.openfeature.contrib.providers:flagd 0.11.9
• org.apache.commons:commons-lang3 3.17.0
• com.google.code.findbugs:annotations 3.0.1u2

tools/junit-openfeature/pom.xml

• org.apache.commons:commons-lang3 3.17.0
• org.junit-pioneer:junit-pioneer 2.3.0

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.10
• maven-wrapper 3.3.2

renovate-config-presets

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository