Dependency Dashboard

[renovate-wenisch-tech]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository Problems

Renovate tried to run on this repository, but found these problems.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (1)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	irongut/CodeCoverageSummary	2022-07-29

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update mockito monorepo to v5.24.0 (org.mockito:mockito-junit-jupiter, org.mockito:mockito-core)
• chore(deps): update actions/setup-java action to v6
• chore(deps): update mathieudutour/github-tag-action action to v7
• chore(deps): update softprops/action-gh-release action to v3
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-tags package operator-framework/operator-sdk-github-action: no-result, Failed to look up github-tags package aquasecurity/setup-trivy: no-result.

Files affected: .github/workflows/_bundle.yml, .github/workflows/_docker.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update non-major dependencies (actions/attest-build-provenance, actions/checkout, actions/setup-java, eclipse-temurin, maven, org.apache.maven.plugins:maven-surefire-plugin, org.apache.maven.plugins:maven-compiler-plugin, io.quarkiverse.operatorsdk:quarkus-operator-sdk-bom, io.quarkus.platform:quarkus-maven-plugin, io.quarkus.platform:quarkus-bom)
• chore(deps): update actions/checkout action to v7
• chore(deps): update dependabot/fetch-metadata action to v3
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update dorny/test-reporter action to v3
• chore(deps): update eclipse-temurin docker tag to v25
• chore(deps): update marocchino/sticky-pull-request-comment action to v3
• chore(deps): update sigstore/cosign-installer action to v4
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• maven 3.9-eclipse-temurin-17@sha256:32ce79e40d744b18c6ce9fe65d6b58189cbabc938cfeff657a534a359a5d3f92 → [Updates: 3.9-eclipse-temurin-17]
• eclipse-temurin 17.0.19_10-jre-alpine@sha256:b0ae54a36f82e04dc6c45e40ca5c55762e20b9a0858ee457faf557d440a9b571 → [Updates: 17.0.20_8-jre-alpine, 25.0.4_7-jre-alpine, 17.0.19_10-jre-alpine]

github-actions (6)

.github/workflows/_bundle.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• operator-framework/operator-sdk-github-action v1
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]

.github/workflows/_docker.yml (10)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v6, v5]
• docker/setup-buildx-action v3@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4]
• docker/build-push-action v6@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7]
• aquasecurity/setup-trivy v0.2.6
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/github-script v9@3a2844b7e9c422d3c10d287c895573f7108da1b3
• docker/login-action v3@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4]
• sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac → [Updates: v4.1.2]
• actions/attest-build-provenance v4@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 → [Updates: v4]

.github/workflows/_release.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v6, v5]
• sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac → [Updates: v4.1.2]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• softprops/action-gh-release v2@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 → [Updates: v3]

.github/workflows/_test.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• actions/setup-java v5@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v6, v5]
• dorny/test-reporter v1@3eeb9fc888e82e8be2fb356bbeec2750231672bc → [Updates: v3]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• irongut/CodeCoverageSummary v1.3.0@51cc3a756ddcd398d447c044c02cb6aa83fdae95
• marocchino/sticky-pull-request-comment v2 → [Updates: v3.0.5]

.github/workflows/ci.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v7, v6]
• mathieudutour/github-tag-action v6.2@a22cf08638b34d5badda920f9daf6e72c477b07b → [Updates: v7.0.0]

.github/workflows/dependabot-auto-merge.yml (1)

• dependabot/fetch-metadata v2@21025c705c08248db411dc16f3619e6b5f9ea21a → [Updates: v3]

helm-values (1)

helm/chronoreaper/values.yaml

maven (1)

pom.xml (8)

• io.quarkus.platform:quarkus-bom 3.36.0 → [Updates: 3.39.5]
• io.quarkiverse.operatorsdk:quarkus-operator-sdk-bom 7.7.5 → [Updates: 7.8.0]
• org.mockito:mockito-core 5.23.0 → [Updates: 5.24.0]
• org.mockito:mockito-junit-jupiter 5.23.0 → [Updates: 5.24.0]
• org.assertj:assertj-core 3.27.7
• io.quarkus.platform:quarkus-maven-plugin 3.36.0 → [Updates: 3.39.5]
• org.apache.maven.plugins:maven-compiler-plugin 3.15.0 → [Updates: 3.16.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.6 → [Updates: 3.6.0]