Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
maven	org.hibernate:hibernate-c3p0
maven	org.hibernate:hibernate-core
maven	org.hibernate:hibernate-jpamodelgen

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): replace hibernate core with org.hibernate.orm:hibernate-c3p0 (org.hibernate:hibernate-c3p0, org.hibernate:hibernate-jpamodelgen, org.hibernate:hibernate-core)
• fix(deps): update dependency com.amazonaws:aws-java-sdk-s3 to v1.12.792
• fix(deps): update dependency org.glassfish.jaxb:jaxb-runtime to v2.3.9
• fix(deps): update dependency org.projectlombok:lombok to v1.18.42
• fix(deps): update dependency org.slf4j:slf4j-api to v2.0.17
• chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.2
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
• chore(deps): update dependency org.apache.maven.scm:maven-scm-provider-gitexe to v2.2.1
• fix(deps): update dependency ch.qos.logback:logback-classic to v1.5.19
• fix(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.20.0
• fix(deps): update dependency commons-codec:commons-codec to v1.19.0
• fix(deps): update dependency commons-io:commons-io to v2.20.0
• fix(deps): update dependency org.apache.commons:commons-collections4 to v4.5.0
• fix(deps): update portletmvc4spring.version to v5.3.4 (com.liferay.portletmvc4spring:com.liferay.portletmvc4spring.security, com.liferay.portletmvc4spring:com.liferay.portletmvc4spring.framework)
• fix(deps): update uportal-libs.version to v5.17.1 (org.jasig.portal:uPortal-api-search, org.jasig.portal:uPortal-spring)
• chore(deps): update actions/checkout action to v5
• chore(deps): update actions/setup-java action to v5
• fix(deps): update dependency javax.portlet:portlet-api to v3
• fix(deps): update dependency javax.servlet:javax.servlet-api to v4
• fix(deps): update dependency org.apache.portals.pluto:pluto-taglib to v3
• fix(deps): update dependency org.glassfish.jaxb:jaxb-runtime to v4
• fix(deps): update dependency org.springframework.data:spring-data-jpa to v3
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency org.codehaus.plexus:plexus-archiver to v4.8.0 [security]
• fix(deps): update dependency com.fasterxml.jackson.core:jackson-core to v2.15.0 [security]
• fix(deps): update dependency commons-fileupload:commons-fileupload to v1.6.0 [security]
• fix(deps): update spring.version to v6 [security] (major) (org.springframework:spring-webmvc, org.springframework:spring-web)
• fix(deps): update dependency org.springframework.data:spring-data-jpa to v2.7.18
• fix(deps): update spring core to v5.3.39 (org.springframework:spring-tx, org.springframework:spring-test, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-core, org.springframework:spring-aop)
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.1
• fix(deps): update resource-server.version to v1.5.0 (org.jasig.resourceserver:resource-server-plugin, org.jasig.resourceserver:resource-server-utils, org.jasig.resourceserver:resource-server-content)
• fix(deps): update dependency jakarta.xml.bind:jakarta.xml.bind-api to v4
• fix(deps): update dependency org.mockito:mockito-core to v5
• fix(deps): update hibernate core to v7 (major) (org.hibernate:hibernate-c3p0, org.hibernate:hibernate-jpamodelgen, org.hibernate:hibernate-core)
• fix(deps): update spring core to v6 (major) (org.springframework:spring-tx, org.springframework:spring-test, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-core, org.springframework:spring-aop)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/workflows/CI.yml

• actions/checkout v4
• actions/setup-java v4

maven

pom.xml

• org.jasig.parent:jasig-parent 41
• com.amazonaws:aws-java-sdk-s3 1.12.780
• commons-codec:commons-codec 1.15
• org.apache.commons:commons-collections4 4.4
• commons-fileupload:commons-fileupload 1.5
• commons-io:commons-io 2.18.0
• org.hsqldb:hsqldb 2.7.4
• com.fasterxml.jackson.core:jackson-core 2.14.2
• com.fasterxml.jackson.core:jackson-databind 2.14.2
• org.hibernate:hibernate-core 5.6.15.Final
• org.hibernate:hibernate-entitymanager 5.6.15.Final
• org.hibernate:hibernate-jpamodelgen 5.6.15.Final
• org.hibernate:hibernate-tools 5.6.15.Final
• javax.servlet:jstl 1.1.2
• javax.annotation:javax.annotation-api 1.3.2
• javax.portlet:portlet-api 2.0
• javax.persistence:javax.persistence-api 2.2
• javax.servlet:javax.servlet-api 3.1.0
• junit:junit 4.13.2
• org.jasig.resourceserver:resource-server-content 1.3.1
• org.jasig.resourceserver:resource-server-utils 1.3.1
• org.jasig.portal:uPortal-spring 5.13.1
• org.jasig.portal:uPortal-api-search 5.13.1
• org.jasypt:jasypt-spring31 1.9.3
• org.mockito:mockito-core 3.12.4
• org.owasp:antisamy 1.4
• org.springframework:spring-aop 5.3.28
• org.springframework:spring-core 5.3.28
• org.springframework:spring-context 5.3.28
• org.springframework:spring-beans 5.3.28
• org.springframework.data:spring-data-jpa 2.7.15
• org.springframework:spring-test 5.3.28
• org.springframework:spring-web 5.3.28
• org.springframework:spring-webmvc 5.3.28
• org.springframework:spring-tx 5.3.28
• com.liferay.portletmvc4spring:com.liferay.portletmvc4spring.framework 5.2.0
• com.liferay.portletmvc4spring:com.liferay.portletmvc4spring.security 5.2.0
• taglibs:standard 1.1.2
• org.hibernate:hibernate-c3p0 5.6.15.Final
• org.slf4j:slf4j-api 2.0.16
• ch.qos.logback:logback-classic 1.3.12
• org.webjars.bower:fine-uploader 5.13.0
• org.webjars.npm:pdfobject 2.2.4
• org.projectlombok:lombok 1.18.36
• org.apache.maven.plugins:maven-war-plugin 3.4.0
• jakarta.xml.bind:jakarta.xml.bind-api 2.3.3
• org.glassfish.jaxb:jaxb-runtime 2.3.3
• org.apache.portals.pluto:pluto-taglib 2.1.0-M3
• org.apache.maven.plugins:maven-javadoc-plugin 3.5.0
• org.apache.maven.plugins:maven-release-plugin 3.1.1
• org.apache.maven.scm:maven-scm-provider-gitexe 2.1.0
• org.apache.maven.plugins:maven-enforcer-plugin 3.1.0
• org.apache.maven.plugins:maven-compiler-plugin 3.10.1
• org.apache.maven.plugins:maven-war-plugin 3.4.0
• org.codehaus.plexus:plexus-archiver 4.4.0
• org.glassfish.jaxb:jaxb-runtime 2.3.3
• org.jasig.resourceserver:resource-server-plugin 1.3.1
• jakarta.xml.bind:jakarta.xml.bind-api 2.3.3
• org.glassfish.jaxb:jaxb-runtime 2.3.3
• org.jasig.portal.maven:uportal-maven-plugin 1.0.1
• javax.servlet:servlet-api 3.1.0
• javax.portlet:portlet-api 2.0
• jakarta.xml.bind:jakarta.xml.bind-api 2.3.3
• org.glassfish.jaxb:jaxb-runtime 2.3.3

---

• Check this box to trigger a request for Renovate to run again on this repository