Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	org.lz4:lz4-java
npm	npm-run-all

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency org.apache.pdfbox:pdfbox to v3.0.7
• Update dependency org.iban4j:iban4j to v3.2.13-RELEASE
• Update eclipse-temurin Docker tag
• Update Gradle to v8.14.4
• Update dependency org.mockito:mockito-core to v5.23.0
• Update jackson monorepo (com.fasterxml.jackson.dataformat:jackson-dataformat-yaml, com.fasterxml.jackson.dataformat:jackson-dataformat-csv, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-annotations)
• Update madrapps/jacoco-report action to v1.6
• Update dependency highcharts to v12
• Update dependency org.barfuin.gradle.taskinfo:gradle-taskinfo to v3
• Update dependency org.hamcrest:hamcrest to v3
• Update dependency react-bootstrap to v2
• Update dependency react-redux to v9
• Update dependency react-scripts to v5
• Update dependency redux to v5
• Update dependency redux-thunk to v3
• Update eclipse-temurin Docker tag to v25
• Update github/codeql-action action to v4
• Update Gradle to v9
• Update junit-framework monorepo to v6 (major) (org.junit.platform:junit-platform-launcher, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api, org.junit.jupiter:junit-jupiter)
• Update plugin org.springframework.boot to v4
• Update react monorepo to v19 (major) (react, react-dom, react-test-renderer)
• Update react-router monorepo to v7 (major) (react-router, react-router-dom)
• Update spark_version to v4 (major) (org.apache.spark:spark-sql_2.13, org.apache.spark:spark-core_2.13)
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package com.ibm.research.drl.dpt:data-privacy-toolkit: no-result.

Files affected: docker/build.gradle, rest/build.gradle, spark/build.gradle

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency pytest to v9 [SECURITY]
• Replace dependency npm-run-all with npm-run-all2 ^5.0.0
• Update junit-framework monorepo (org.junit.platform:junit-platform-launcher, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api, org.junit.jupiter:junit-jupiter)
• Update log4j2 monorepo to v2.25.4 (org.apache.logging.log4j:log4j-core, org.apache.logging.log4j:log4j-api)
• Update dependency org.apache.commons:commons-text to v1.15.0
• Update dependency org.apache.opennlp:opennlp-tools to v2.5.8
• Update dependency org.apache.poi:poi-ooxml to v5.5.1
• Update plugin io.spring.dependency-management to v1.1.7
• Update spark_version to v3.5.8 (org.apache.spark:spark-sql_2.13, org.apache.spark:spark-core_2.13)
• Update dependency bootstrap to v5
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (2)

docker/Dockerfile (1)

• eclipse-temurin 11 → [Updates: 25]

rest/Dockerfile (3)

• node 18-alpine3.16
• eclipse-temurin 17.0.17_10-jdk → [Updates: 17.0.18_8-jdk, 25.0.2_10-jdk]
• eclipse-temurin 17.0.17_10-jre → [Updates: 17.0.18_8-jre, 25.0.2_10-jre]

github-actions (8)

.github/workflows/codeql.yml (3)

• actions/checkout v6
• github/codeql-action v2 → [Updates: v4]
• github/codeql-action v2 → [Updates: v4]

.github/workflows/coverage.yml (3)

• actions/checkout v6
• actions/setup-java v5
• madrapps/jacoco-report v1.3 → [Updates: v1.6]

.github/workflows/deploy-library.yml (2)

• actions/checkout v6
• actions/setup-java v5

.github/workflows/deploy-toolkit.yml (3)

• actions/checkout v6
• actions/setup-java v5
• redhat-actions/push-to-registry v2

.github/workflows/library.yml (2)

• actions/checkout v6
• actions/setup-java v5

.github/workflows/rest.yml (2)

• actions/checkout v6
• actions/setup-java v5

.github/workflows/spark.yml (4)

• actions/checkout v6
• actions/setup-java v5
• actions/checkout v6
• actions/setup-java v5

.github/workflows/toolkit.yml (6)

• actions/checkout v6
• actions/setup-java v5
• actions/checkout v6
• actions/setup-java v5
• actions/setup-python v6
• python 3.14

gradle (8)

docker/build.gradle (14)

• com.github.johnrengelman.shadow 8.1.1
• com.ibm.research.drl.dpt:data-privacy-toolkit 6.0.0-SNAPSHOT
• org.apache.logging.log4j:log4j-api 2.25.2 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-core 2.25.2 → [Updates: 2.25.4]
• com.fasterxml.jackson.core:jackson-databind 2.20.1 → [Updates: 2.21.2]
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.20.1 → [Updates: 2.21.2]
• com.fasterxml.jackson.dataformat:jackson-dataformat-csv 2.20.1 → [Updates: 2.21.2]
• commons-cli:commons-cli 1.11.0
• commons-io:commons-io 2.21.0
• org.junit.jupiter:junit-jupiter 5.14.1 → [Updates: 5.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-api 5.14.1 → [Updates: 5.14.3, 6.0.3]
• org.hamcrest:hamcrest 3.0
• org.junit.platform:junit-platform-launcher 1.14.1 → [Updates: 1.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.14.1 → [Updates: 5.14.3, 6.0.3]

docker/settings.gradle

library/build.gradle (23)

• org.barfuin.gradle.taskinfo:gradle-taskinfo 2.2.1 → [Updates: 3.0.2]
• com.fasterxml.jackson.dataformat:jackson-dataformat-csv 2.20.1 → [Updates: 2.21.2]
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.20.1 → [Updates: 2.21.2]
• org.apache.commons:commons-lang3 3.20.0
• org.apache.commons:commons-csv 1.14.1
• org.apache.commons:commons-math3 3.6.1
• commons-validator:commons-validator 1.10.1
• org.apache.logging.log4j:log4j-api 2.25.2 → [Updates: 2.25.4]
• org.apache.poi:poi-ooxml 5.3.0 → [Updates: 5.5.1]
• org.apache.pdfbox:pdfbox 3.0.6 → [Updates: 3.0.7]
• ca.uhn.hapi:hapi-base 2.6.0
• ca.uhn.hapi:hapi-structures-v22 2.6.0
• ca.uhn.hapi:hapi-structures-v23 2.6.0
• org.iban4j:iban4j 3.2.11-RELEASE → [Updates: 3.2.13-RELEASE]
• org.apache.opennlp:opennlp-tools 2.2.0 → [Updates: 2.5.8]
• org.apache.logging.log4j:log4j-core 2.25.2 → [Updates: 2.25.4]
• org.junit.jupiter:junit-jupiter 5.14.1 → [Updates: 5.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-api 5.14.1 → [Updates: 5.14.3, 6.0.3]
• org.mockito:mockito-core 5.21.0 → [Updates: 5.23.0]
• org.hamcrest:hamcrest 3.0
• org.beer30:jdefault 2.0.0
• org.junit.platform:junit-platform-launcher 1.14.1 → [Updates: 1.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.14.1 → [Updates: 5.14.3, 6.0.3]

library/settings.gradle

rest/build.gradle (5)

• org.springframework.boot 2.7.18 → [Updates: 4.0.5]
• io.spring.dependency-management 1.0.15.RELEASE → [Updates: 1.1.7]
• com.fasterxml.jackson.dataformat:jackson-dataformat-csv 2.20.1 → [Updates: 2.21.2]
• org.apache.commons:commons-csv 1.14.1
• com.ibm.research.drl.dpt:data-privacy-toolkit 6.0.0-SNAPSHOT

rest/settings.gradle

spark/build.gradle (20)

• com.ibm.research.drl.dpt:data-privacy-toolkit 6.0.0-SNAPSHOT
• com.fasterxml.jackson.core:jackson-annotations 2.20.1 → [Updates: 2.21]
• com.fasterxml.jackson.core:jackson-core 2.20.1 → [Updates: 2.21.2]
• com.fasterxml.jackson.core:jackson-databind 2.20.1 → [Updates: 2.21.2]
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.20.1 → [Updates: 2.21.2]
• com.fasterxml.jackson.dataformat:jackson-dataformat-csv 2.20.1 → [Updates: 2.21.2]
• org.lz4:lz4-java 1.8.1 → [Updates: 1.8.1]
• commons-cli:commons-cli 1.11.0
• org.apache.commons:commons-csv 1.14.1
• org.apache.spark:spark-core_2.13 3.2.3 → [Updates: 3.5.8, 4.1.1]
• org.apache.spark:spark-sql_2.13 3.2.3 → [Updates: 3.5.8, 4.1.1]
• org.apache.commons:commons-text 1.14.0 → [Updates: 1.15.0]
• org.apache.logging.log4j:log4j-core 2.25.2 → [Updates: 2.25.4]
• org.junit.jupiter:junit-jupiter 5.14.1 → [Updates: 5.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-api 5.14.1 → [Updates: 5.14.3, 6.0.3]
• org.mockito:mockito-core 5.21.0 → [Updates: 5.23.0]
• org.hamcrest:hamcrest 2.2 → [Updates: 3.0]
• org.beer30:jdefault 2.0.0
• org.junit.platform:junit-platform-launcher 1.14.1 → [Updates: 1.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.14.1 → [Updates: 5.14.3, 6.0.3]

spark/settings.gradle

gradle-wrapper (4)

docker/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 8.14.4, 9.4.1]

library/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 8.14.4, 9.4.1]

rest/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 8.14.4, 9.4.1]

spark/gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 8.14.4, 9.4.1]

npm (1)

rest/front-end/package.json (26)

• FileSaver ^0.10.0
• bootstrap ^3.3.7 → [Updates: ^5.0.0]
• bootstrap-sass ^3.3.7
• font-awesome-sass ^4.7.0
• highcharts ^6.0.2 → [Updates: ^12.0.0]
• lodash ^4.17.4
• lz-string ^1.4.4
• react ^16.2.0 → [Updates: ^19.0.0]
• react-bootstrap ^0.33.0 → [Updates: ^2.0.0]
• react-dom ^16.2.0 → [Updates: ^19.0.0]
• react-redux ^5.0.6 → [Updates: ^9.0.0]
• react-router ^4.2.0 → [Updates: ^7.0.0]
• react-router-dom ^4.2.2 → [Updates: ^7.0.0]
• react-router-redux ^5.0.0-alpha.6
• redux ^3.7.2 → [Updates: ^5.0.0]
• redux-logger ^3.0.6
• redux-thunk ^2.2.0 → [Updates: ^3.0.0]
• sass ^1.55.0
• treant-js ^1.0.1
• underscore ^1.9.1
• enzyme ^3.3.0
• enzyme-adapter-react-16 ^1.1.1
• npm-run-all ^4.1.1 → [Updates: ^5.0.0]
• react-scripts ^1.0.13 → [Updates: ^5.0.0]
• react-test-renderer ^16.0.0 → [Updates: ^19.0.0]
• standard *

pip_requirements (1)

docker/requirements-dev.txt (1)

• pytest ==7.4.4 → [Updates: ==9.0.3]

---

• Check this box to trigger a request for Renovate to run again on this repository