Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update sigstore/community digest to 8e6cd1a
• fix(deps): update dependency org.eclipse.jetty:jetty-server to v11.0.25
• fix(deps): update dependency org.junit:junit-bom to v5.12.1
• fix(deps): update dependency org.mockito:mockito-bom to v5.16.1
• chore(deps): update dependency go to 1.24.x
• fix(deps): update dependency com.google.oauth-client:google-oauth-client-bom to v1.39.0
• fix(deps): update protobuf_grpc (io.grpc:protoc-gen-grpc-java, com.google.protobuf:protoc, io.grpc:grpc-bom, com.google.protobuf:protobuf-bom)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.15.1
• fix(deps): update dependency no.nav.security:mock-oauth2-server to v2
• fix(deps): update dependency org.eclipse.jetty:jetty-server to v12
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update plugin org.jsonschema2dataclass to v6

Detected dependencies

github-actions

.github/workflows/byob-slsa.yaml

.github/workflows/ci.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• actions/setup-go v5.3.0@f111f3307d8850f501ac008e886eec1fd1932a34
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b
• go 1.21.x

.github/workflows/cifuzz.yaml

• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1

.github/workflows/conformance.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• sigstore/sigstore-conformance v0.0.17@640e7dfb715518eeeb492910c6d244cedcc6cfea

.github/workflows/depsreview.yml

• sigstore/community f1c21e9d643d12ca60bb921c6e135073e96ef8e7

.github/workflows/examples.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b

.github/workflows/gradle-wrapper-validation.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b

.github/workflows/release-sigstore-gradle-plugin-from-tag.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b

.github/workflows/release-sigstore-java-from-tag.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b

.github/workflows/tuf-conformance.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• gradle/actions v4.3.0@94baf225fe0a508e581a564467443d0e2379123b
• actions/setup-java v4.7.0@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
• theupdateframework/tuf-conformance v2.3.0@9bfc222a371e30ad5511eb17449f68f855fb9d8f

gradle

gradle.properties

• dev.sigstore:sigstore-java 1.4.0

settings.gradle.kts

build.gradle.kts

build-logic/gradle.properties

build-logic/settings.gradle.kts

build-logic/build.gradle.kts

build-logic-commons/gradle.properties

build-logic-commons/settings.gradle.kts

build-logic-commons/gradle-plugin/build.gradle.kts

build-logic-commons/gradle-plugin/src/main/kotlin/build-logic.kotlin-dsl-gradle-plugin.gradle.kts

build-logic/basics/build.gradle.kts

build-logic/basics/src/main/kotlin/build-logic.repositories.gradle.kts

build-logic/basics/src/main/kotlin/build-logic.reproducible-builds.gradle.kts

build-logic/build-parameters/build.gradle.kts

• org.gradlex.build-parameters 1.4.4

build-logic/jvm/build.gradle.kts

• com.diffplug.spotless:com.diffplug.spotless.gradle.plugin 7.0.2
• com.github.vlsi.gradle-extensions:com.github.vlsi.gradle-extensions.gradle.plugin 1.90
• de.thetaphi.forbiddenapis:de.thetaphi.forbiddenapis.gradle.plugin 3.8
• org.jetbrains.dokka:org.jetbrains.dokka.gradle.plugin 2.0.0
• com.github.autostyle:com.github.autostyle.gradle.plugin 4.0
• net.ltgt.errorprone:net.ltgt.errorprone.gradle.plugin 4.1.0

build-logic/jvm/src/main/kotlin/build-logic.build-info.gradle.kts

build-logic/jvm/src/main/kotlin/build-logic.dokka-javadoc.gradle.kts

build-logic/jvm/src/main/kotlin/build-logic.errorprone.gradle.kts

• com.google.errorprone:error_prone_core 2.36.0
• com.google.guava:guava-beta-checker 1.0

build-logic/jvm/src/main/kotlin/build-logic.forbidden-apis.gradle.kts

build-logic/jvm/src/main/kotlin/build-logic.java-library.gradle.kts

build-logic/jvm/src/main/kotlin/build-logic.java.gradle.kts

build-logic/jvm/src/main/kotlin/build-logic.kotlin.gradle.kts

build-logic/jvm/src/main/kotlin/build-logic.spotless-base.gradle.kts

build-logic/jvm/src/main/kotlin/build-logic.test-junit5.gradle.kts

build-logic/jvm/src/main/kotlin/build-logic.testing.gradle.kts

build-logic/publishing/build.gradle.kts

• dev.sigstore:sigstore-gradle-sign-plugin 1.3.0
• com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin 1.3.1

build-logic/publishing/src/main/kotlin/build-logic.depends-on-local-sigstore-java-repo.gradle.kts

build-logic/publishing/src/main/kotlin/build-logic.depends-on-local-sigstore-maven-plugin-repo.gradle.kts

build-logic/publishing/src/main/kotlin/build-logic.java-published-library.gradle.kts

build-logic/publishing/src/main/kotlin/build-logic.kotlin-dsl-published-gradle-plugin.gradle.kts

build-logic/publishing/src/main/kotlin/build-logic.publish-to-central.gradle.kts

build-logic/publishing/src/main/kotlin/build-logic.publish-to-tmp-maven-repo.gradle.kts

build-logic/publishing/src/main/kotlin/build-logic.signing.gradle.kts

build-logic/root-build/build.gradle.kts

build-logic/root-build/src/main/kotlin/build-logic.root-build.gradle.kts

fuzzing/build.gradle.kts

• com.code-intelligence:jazzer-api 0.24.0
• com.google.guava:guava 33.4.0-jre

sandbox/settings.gradle.kts

sandbox/gradle-precompiled-plugin/build.gradle.kts

sandbox/gradle-precompiled-plugin/src/main/kotlin/sigstore-conventions.gradle.kts

sandbox/gradle-sign-file/build.gradle.kts

sandbox/gradle-sign-java-library/build.gradle.kts

sigstore-cli/build.gradle.kts

• info.picocli:picocli 4.7.6
• com.google.guava:guava 33.4.0-jre
• com.google.oauth-client:google-oauth-client-bom 1.38.0
• info.picocli:picocli-codegen 4.7.6

sigstore-gradle/sigstore-gradle-sign-base-plugin/build.gradle.kts

sigstore-gradle/sigstore-gradle-sign-base-plugin/src/main/kotlin/dev.sigstore.sign-base.gradle.kts

sigstore-gradle/sigstore-gradle-sign-plugin/build.gradle.kts

sigstore-gradle/sigstore-gradle-sign-plugin/src/main/kotlin/dev.sigstore.sign.gradle.kts

sigstore-java/build.gradle.kts

• org.jsonschema2dataclass 5.0.0
• com.google.protobuf 0.9.4
• org.immutables:gson 2.10.1
• org.immutables:value-annotations 2.10.1
• org.immutables:value 2.10.1
• com.google.http-client:google-http-client-bom 1.46.3
• io.github.erdtman:java-json-canonicalization 1.1
• dev.sigstore:protobuf-specs 0.4.0
• com.google.protobuf:protobuf-bom 4.29.3
• io.grpc:grpc-bom 1.70.0
• org.apache.tomcat:annotations-api 6.0.53
• commons-codec:commons-codec 1.18.0
• com.google.code.gson:gson 2.12.1
• org.bouncycastle:bcutil-jdk18on 1.80
• org.bouncycastle:bcpkix-jdk18on 1.80
• com.google.oauth-client:google-oauth-client-bom 1.38.0
• org.junit:junit-bom 5.12.0
• org.mockito:mockito-bom 5.16.0
• no.nav.security:mock-oauth2-server 0.5.10
• com.squareup.okhttp3:mockwebserver 4.12.0
• net.sourceforge.htmlunit:htmlunit 2.70.0
• org.eclipse.jetty:jetty-server 11.0.24
• io.github.netmikey.logunit:logunit-core 2.0.0
• io.github.netmikey.logunit:logunit-jul 2.0.0
• com.google.protobuf:protoc 4.29.3
• io.grpc:protoc-gen-grpc-java 1.70.0

sigstore-maven-plugin/build.gradle.kts

• de.benediktritter.maven-plugin-development 0.4.3
• org.apache.maven:maven-plugin-api 3.9.9
• org.apache.maven:maven-core 3.9.9
• org.apache.maven.plugin-tools:maven-plugin-annotations 3.14.0
• org.bouncycastle:bcutil-jdk18on 1.80
• org.apache.maven.plugins:maven-gpg-plugin 3.2.7
• org.apache.maven.shared:maven-verifier 1.8.0

sigstore-testkit/build.gradle.kts

• com.google.code.gson:gson 2.12.1
• com.google.guava:guava 33.4.0-jre
• org.junit:junit-bom 5.12.0
• org.assertj:assertj-core 3.27.3

tuf-cli/build.gradle.kts

• info.picocli:picocli 4.7.6
• com.google.guava:guava 33.4.0-jre
• com.google.oauth-client:google-oauth-client-bom 1.38.0
• info.picocli:picocli-codegen 4.7.6

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.13

sandbox/gradle/wrapper/gradle-wrapper.properties

• gradle 8.13

---

• Check this box to trigger a request for Renovate to run again on this repository