Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update github/codeql-action digest to b44b19f
• Update dependency org.apache.commons:commons-csv to v1.13.0

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency org.openstreetmap.osmosis:osmosis-pbf2 to v0.49.2
• Update dependency com.google.protobuf:protobuf-java to v4

Detected dependencies

dockerfile

Dockerfile

• eclipse-temurin 21-alpine

github-actions

.github/workflows/dev-build.yml

• step-security/harden-runner cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout 85e6279cec87321a52edac9c87bce653a07cf6c2
• actions/setup-java 28b532bcb39ad928b00bc3cbce25c94d11654854
• actions/cache 36f1e144e1c8edb0a652766b484448563d8baf46
• actions/cache 36f1e144e1c8edb0a652766b484448563d8baf46
• codecov/codecov-action 5a605bd92782ce0810fa3b8acc235c921b497052

.github/workflows/docker.yml

• step-security/harden-runner cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout 85e6279cec87321a52edac9c87bce653a07cf6c2
• actions/setup-java 28b532bcb39ad928b00bc3cbce25c94d11654854
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/build-push-action v6

.github/workflows/main-build.yml

• step-security/harden-runner cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout 85e6279cec87321a52edac9c87bce653a07cf6c2
• actions/setup-java 28b532bcb39ad928b00bc3cbce25c94d11654854
• actions/cache 36f1e144e1c8edb0a652766b484448563d8baf46
• actions/cache 36f1e144e1c8edb0a652766b484448563d8baf46
• codecov/codecov-action 5a605bd92782ce0810fa3b8acc235c921b497052

.github/workflows/manual-docker.yml

.github/workflows/manual-main-build.yml

.github/workflows/manual-release.yml

.github/workflows/merge.yml

• step-security/harden-runner cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout 85e6279cec87321a52edac9c87bce653a07cf6c2
• actions/setup-java 28b532bcb39ad928b00bc3cbce25c94d11654854
• github/codeql-action f89b8a7d5239ba6d1a0f243ead94ea9ca5775ae1
• github/codeql-action f89b8a7d5239ba6d1a0f243ead94ea9ca5775ae1

.github/workflows/release.yml

• step-security/harden-runner cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout 85e6279cec87321a52edac9c87bce653a07cf6c2
• actions/setup-java 28b532bcb39ad928b00bc3cbce25c94d11654854
• Roang-zero1/github-create-release-action 57eb9bdce7a964e48788b9e78b5ac766cb684803

.github/workflows/scheduled-release.yml

.github/workflows/update.yml

• step-security/harden-runner cb605e52c26070c328afc4562f0b4ada7618a84e
• actions/checkout 85e6279cec87321a52edac9c87bce653a07cf6c2
• actions/setup-python d0b4fc497a1daddb64da40799d80949aa3a0c559

maven

pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.4.1
• org.apache.commons:commons-csv 1.12.0
• commons-io:commons-io 2.18.0
• org.iban4j:iban4j 3.2.10-RELEASE
• org.openstreetmap.osmosis:osmosis-pbf2 0.48.3
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.3
• com.talanlabs:avatar-generator-8bit 1.1.0
• au.com.dius.pact.provider:junit5spring 4.6.16
• io.cucumber:cucumber-java 7.20.1
• io.cucumber:cucumber-spring 7.20.1
• io.cucumber:cucumber-junit-platform-engine 7.20.1
• com.microsoft.playwright:playwright 1.49.0
• com.google.protobuf:protobuf-java 3.25.5
• com.google.guava:guava 33.4.0-jre
• org.apache.commons:commons-compress 1.27.1
• commons-logging:commons-logging 1.3.4
• org.gaul:modernizer-maven-plugin 3.1.0
• org.apache.maven.plugins:maven-release-plugin 3.1.1
• org.apache.maven.plugins:maven-site-plugin 3.21.0
• org.jacoco:jacoco-maven-plugin 0.8.12
• org.cyclonedx:cyclonedx-maven-plugin 2.9.1
• org.apache.maven.plugins:maven-project-info-reports-plugin 3.8.0
• org.apache.maven.plugins:maven-javadoc-plugin 3.11.2
• org.codehaus.mojo:versions-maven-plugin 2.18.0
• org.apache.maven.plugins:maven-surefire-report-plugin 3.5.2
• org.apache.maven.plugins:maven-changelog-plugin 2.3
• org.apache.maven.plugins:maven-jxr-plugin 3.6.0
• org.codehaus.mojo:taglist-maven-plugin 3.2.1

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.9

npm

src/tools/package.json

• @octokit/rest ^21.0.0

pip_requirements

src/tools/requirements.txt

• lxml ==5.3.0
• requests ==2.32.3
• setuptools ==75.8.0

---

• Check this box to trigger a request for Renovate to run again on this repository