Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/checkout action to v5
• chore(deps): update cypress/included docker tag to v15
• chore(deps): update dependency attrs to v25
• chore(deps): update dependency bcrypt to v5
• chore(deps): update dependency cachetools to v6
• chore(deps): update dependency certifi to v2025
• chore(deps): update dependency cffi to v2
• chore(deps): update dependency cryptography to v46
• chore(deps): update dependency importlib-metadata to v8
• chore(deps): update dependency markupsafe to v3
• chore(deps): update dependency packaging to v25
• chore(deps): update dependency protobuf to v6
• chore(deps): update dependency pytest to v8
• chore(deps): update dependency pytest-cov to v7
• chore(deps): update dependency pytz to v2025
• chore(deps): update dependency ubuntu to v24
• chore(deps): update postgres docker tag to v18
• chore(deps): update terraform google to v7
• chore(deps): update terraform google-beta to v7
• chore(deps): update terraform googlecloudplatform/sql-db/google to v26
• chore(deps): update terraform terraform-google-modules/kubernetes-engine/google to v40
• chore(deps): update terraform terraform-google-modules/network/google to v12
• chore(deps): update terraform terraform-google-modules/project-factory/google to v18
• fix(deps): update dependency com.google.cloud:spring-cloud-gcp-dependencies to v7
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025
• 🔐 Create all pending approval PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update dependency wrapt to v2

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency urllib3 to v2.5.0 [security]
• chore(deps): update bash docker digest to ae4668c
• chore(deps): update postgres:16.10-alpine docker digest to 7898d41
• fix(deps): update java (org.jacoco:jacoco-maven-plugin, com.google.cloud:libraries-bom, com.google.cloud:spring-cloud-gcp-dependencies)
• chore(deps): update docker (cypress/included, postgres, python)
• chore(deps): update terraform google to ~> 5.45.0
• chore(deps): update terraform google-beta to ~> 5.45.0
• chore(deps): refresh pip-compile outputs python (undefined, bcrypt, bleach, cachetools, certifi, click, cryptography, flask, google-api-core, google-auth, google-cloud-core, google-cloud-trace, googleapis-common-protos, grpcio, idna, locust, more-itertools, opentelemetry-exporter-gcp-trace, opentelemetry-instrumentation-flask, opentelemetry-instrumentation-jinja2, opentelemetry-instrumentation-requests, opentelemetry-instrumentation-sqlalchemy, opentelemetry-propagator-gcp, opentelemetry-sdk, pluggy, psycopg2-binary, pyasn1-modules, pycparser, pycryptodome, pyjwt, pyparsing, requests, rsa, six, wcwidth, wrapt, zipp)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency maven-wrapper to v3
• chore(deps): update dependency sqlalchemy to v2
• fix(deps): update dependency com.google.guava:guava to v33

Detected dependencies

cloudbuild

src/accounts/cloudbuild.yaml

• gcr.io/k8s-skaffold/skaffold v2.16.1
• gcr.io/k8s-skaffold/skaffold v2.16.1

src/frontend/cloudbuild.yaml

• gcr.io/k8s-skaffold/skaffold v2.16.1
• gcr.io/k8s-skaffold/skaffold v2.16.1

src/ledger/cloudbuild.yaml

• gcr.io/k8s-skaffold/skaffold v2.16.1
• gcr.io/k8s-skaffold/skaffold v2.16.1

dockerfile

.github/workflows/ui-tests/Dockerfile

• cypress/included 13.16.0@sha256:ba38ee9c44462f140b9df5a5c74f62a50e33ffcee17638a95b78ffbeff8eac1e

src/accounts/accounts-db/Dockerfile

• postgres 16.6-alpine@sha256:56e87f5517713be839c1ce724ec275cb46579fb05edbb0887f26f60faebe7f0d

src/accounts/contacts/Dockerfile

• python 3.12.6-slim@sha256:ad48727987b259854d52241fac3bc633574364867b8e20aec305e6e7f4028b26

src/accounts/userservice/Dockerfile

• python 3.12.6-slim@sha256:ad48727987b259854d52241fac3bc633574364867b8e20aec305e6e7f4028b26

src/frontend/Dockerfile

• python 3.12.6-slim@sha256:ad48727987b259854d52241fac3bc633574364867b8e20aec305e6e7f4028b26

src/ledger/ledger-db/Dockerfile

• postgres 16.6-alpine@sha256:56e87f5517713be839c1ce724ec275cb46579fb05edbb0887f26f60faebe7f0d

src/loadgenerator/Dockerfile

• python 3.12.6-slim@sha256:ad48727987b259854d52241fac3bc633574364867b8e20aec305e6e7f4028b26

github-actions

.github/workflows/terraform-validate-ci.yaml

• actions/checkout v4
• ubuntu 22.04

helm-values

extras/postgres-hpa/helm-postgres-ha/values.yaml

• gcr.io/google-containers/prometheus-to-sd v0.9.2

kubernetes

extras/backup/kubernetes-manifests/accounts-db.yaml

• us-central1-docker.pkg.dev/bank-of-anthos-ci/bank-of-anthos/accounts-db v0.6.7@sha256:d1f7b4b42fbbad5b3f8c85c67a15f4e27cc9a054ae8bc2379e3f0319e313ce9d
• StatefulSet apps/v1

extras/backup/kubernetes-manifests/ingress.yaml

• Ingress networking.k8s.io/v1

extras/backup/kubernetes-manifests/ledger-db.yaml

• us-central1-docker.pkg.dev/bank-of-anthos-ci/bank-of-anthos/ledger-db v0.6.7@sha256:9b4009cfd17929ee165d55326bcf8ccf0f65039b1a467b847197c8404f462b7d
• StatefulSet apps/v1

extras/cloudsql/kubernetes-manifests/balance-reader.yaml

• gcr.io/bank-of-anthos-ci/balancereader v0.5.11@sha256:4d48c9ab8abe3da595f5f11005045068dcb9068deb42e04c06c9f7b15c96e89b
• gcr.io/cloudsql-docker/gce-proxy 1.37.9@sha256:bd268141d0d13400925a4b3e991268b8bbf237dfdd20c6aa35b9caa363b3f9df
• Deployment apps/v1

extras/cloudsql/kubernetes-manifests/contacts.yaml

• gcr.io/bank-of-anthos-ci/contacts v0.5.11@sha256:0648c1d1222813f19e641b0070b697597abdbbfbd24a5da1708ebb2796553df0
• gcr.io/cloudsql-docker/gce-proxy 1.37.9@sha256:bd268141d0d13400925a4b3e991268b8bbf237dfdd20c6aa35b9caa363b3f9df
• Deployment apps/v1

extras/cloudsql/kubernetes-manifests/frontend.yaml

• gcr.io/bank-of-anthos-ci/frontend v0.5.11@sha256:db94f51b613214d8999bbd2318a4ccad54f44fea319da55f17d80186424df646
• Deployment apps/v1

extras/cloudsql/kubernetes-manifests/ledger-writer.yaml

• gcr.io/bank-of-anthos-ci/ledgerwriter v0.5.11@sha256:35a610bba642516bc5deee963f76ac013c791a1be08c3a50d5cc839a69f13a19
• gcr.io/cloudsql-docker/gce-proxy 1.37.9@sha256:bd268141d0d13400925a4b3e991268b8bbf237dfdd20c6aa35b9caa363b3f9df
• Deployment apps/v1

extras/cloudsql/kubernetes-manifests/loadgenerator.yaml

• gcr.io/bank-of-anthos-ci/loadgenerator v0.5.11@sha256:7fa44f9bfefd29eacfd62fed4308b8b057cf454ec1f423106303294e6b2d90e4
• Deployment apps/v1

extras/cloudsql/kubernetes-manifests/transaction-history.yaml

• gcr.io/bank-of-anthos-ci/transactionhistory v0.5.11@sha256:943b40c612648f9dde24466c70158373122b380f70bce1cbdaefe087288d7876
• gcr.io/cloudsql-docker/gce-proxy 1.37.9@sha256:bd268141d0d13400925a4b3e991268b8bbf237dfdd20c6aa35b9caa363b3f9df
• Deployment apps/v1

extras/cloudsql/kubernetes-manifests/userservice.yaml

• gcr.io/bank-of-anthos-ci/userservice v0.5.11@sha256:1559cbd3a9c937c84d067c5599e38c68fb4357215fd9d8de9c80ae81bbba863a
• gcr.io/cloudsql-docker/gce-proxy 1.37.9@sha256:bd268141d0d13400925a4b3e991268b8bbf237dfdd20c6aa35b9caa363b3f9df
• Deployment apps/v1

extras/cloudsql/populate-jobs/populate-accounts-db.yaml

• bash sha256:cc444a5a327f8e42318b2772b392f8dd1a9dcb9e00d3c847cc9e419eefa20419
• postgres 16.10-alpine@sha256:1c6d2f6e4d30d49c529e09a627e8178db5011dde88d955eb08db2e135e64aa09
• gcr.io/cloudsql-docker/gce-proxy 1.37.9@sha256:bd268141d0d13400925a4b3e991268b8bbf237dfdd20c6aa35b9caa363b3f9df

extras/cloudsql/populate-jobs/populate-ledger-db.yaml

• bash sha256:cc444a5a327f8e42318b2772b392f8dd1a9dcb9e00d3c847cc9e419eefa20419
• postgres 16.10-alpine@sha256:1c6d2f6e4d30d49c529e09a627e8178db5011dde88d955eb08db2e135e64aa09
• gcr.io/cloudsql-docker/gce-proxy 1.37.9@sha256:bd268141d0d13400925a4b3e991268b8bbf237dfdd20c6aa35b9caa363b3f9df

extras/postgres-hpa/hpa/frontend.yaml

• HorizontalPodAutoscaler autoscaling/v2

extras/postgres-hpa/hpa/postgresql-hpa.yaml

• HorizontalPodAutoscaler autoscaling/v2

extras/postgres-hpa/hpa/userservice.yaml

• HorizontalPodAutoscaler autoscaling/v2

extras/postgres-hpa/kubernetes-manifests/balance-reader.yaml

• gcr.io/bank-of-anthos-ci/balancereader v0.5.11@sha256:4d48c9ab8abe3da595f5f11005045068dcb9068deb42e04c06c9f7b15c96e89b
• Deployment apps/v1

extras/postgres-hpa/kubernetes-manifests/contacts.yaml

• gcr.io/bank-of-anthos-ci/contacts v0.5.11@sha256:0648c1d1222813f19e641b0070b697597abdbbfbd24a5da1708ebb2796553df0
• Deployment apps/v1
• HorizontalPodAutoscaler autoscaling/v2

extras/postgres-hpa/kubernetes-manifests/frontend.yaml

• gcr.io/bank-of-anthos-ci/frontend v0.5.11@sha256:db94f51b613214d8999bbd2318a4ccad54f44fea319da55f17d80186424df646
• Deployment apps/v1
• Ingress networking.k8s.io/v1

extras/postgres-hpa/kubernetes-manifests/ledger-writer.yaml

• gcr.io/bank-of-anthos-ci/ledgerwriter v0.5.11@sha256:35a610bba642516bc5deee963f76ac013c791a1be08c3a50d5cc839a69f13a19
• Deployment apps/v1

extras/postgres-hpa/kubernetes-manifests/pgpool-operator.yaml

• python 3.13-bullseye@sha256:f58f33e0563f2ba81c7afe6259cd912f0c33413da93c75cc3a70a941c17afa8c
• ClusterRole rbac.authorization.k8s.io/v1
• Role rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• RoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

extras/postgres-hpa/kubernetes-manifests/transaction-history.yaml

• gcr.io/bank-of-anthos-ci/transactionhistory v0.5.11@sha256:943b40c612648f9dde24466c70158373122b380f70bce1cbdaefe087288d7876
• Deployment apps/v1

extras/postgres-hpa/kubernetes-manifests/userservice.yaml

• gcr.io/bank-of-anthos-ci/userservice v0.5.11@sha256:1559cbd3a9c937c84d067c5599e38c68fb4357215fd9d8de9c80ae81bbba863a
• Deployment apps/v1

extras/postgres-hpa/loadgenerator.yaml

• gcr.io/bank-of-anthos-ci/loadgenerator v0.5.11@sha256:7fa44f9bfefd29eacfd62fed4308b8b057cf454ec1f423106303294e6b2d90e4
• Deployment apps/v1

extras/prometheus/gmp/blackbox-exporter.yaml

• quay.io/prometheus/blackbox-exporter v0.27.0@sha256:a50c4c0eda297baa1678cd4dc4712a67fdea713b832d43ce7fcc5f9bea05094d
• Deployment apps/v1

extras/tls-domain-managedcerts/managed-certificates.yaml

• Ingress extensions/v1beta1

extras/tls-ip-selfsigned/frontend-ingress.yaml

• Ingress extensions/v1beta1

iac/acm-multienv-cicd-anthos-autopilot/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

iac/acm-multienv-cicd-anthos-autopilot/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

iac/acm-multienv-cicd-anthos-autopilot/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

skaffold-e2e.yaml

src/accounts/accounts-db/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/accounts-db/k8s/components/init-db-job/init-db-job.yaml

• postgres 16.10-alpine@sha256:1c6d2f6e4d30d49c529e09a627e8178db5011dde88d955eb08db2e135e64aa09

src/accounts/accounts-db/k8s/overlays/development/accounts-db.yaml

• StatefulSet apps/v1

src/accounts/accounts-db/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/accounts-db/k8s/overlays/init-db-production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/accounts-db/k8s/overlays/init-db-production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/accounts-db/k8s/overlays/init-db-staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/accounts-db/k8s/overlays/production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/accounts-db/k8s/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/accounts-db/k8s/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/accounts-db/skaffold.yaml

src/accounts/contacts/k8s/base/contacts.yaml

• Deployment apps/v1

src/accounts/contacts/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/contacts/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/contacts/k8s/overlays/production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/contacts/k8s/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/contacts/k8s/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/contacts/skaffold.yaml

src/accounts/userservice/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/userservice/k8s/base/userservice.yaml

• Deployment apps/v1

src/accounts/userservice/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/userservice/k8s/overlays/production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/userservice/k8s/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/userservice/k8s/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/accounts/userservice/skaffold.yaml

src/frontend/k8s/base/frontend.yaml

• Deployment apps/v1

src/frontend/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/frontend/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/frontend/k8s/overlays/production-fwi-ingress/frontend-ingress.yaml

• Ingress networking.k8s.io/v1

src/frontend/k8s/overlays/production-fwi-ingress/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/frontend/k8s/overlays/production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/frontend/k8s/overlays/production/frontend-ingress.yaml

• Ingress networking.k8s.io/v1

src/frontend/k8s/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/frontend/k8s/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/frontend/skaffold.yaml

src/ledger/balancereader/k8s/base/balancereader.yaml

• Deployment apps/v1

src/ledger/balancereader/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/balancereader/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/balancereader/k8s/overlays/production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/balancereader/k8s/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/balancereader/k8s/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/balancereader/skaffold.yaml

src/ledger/ledger-db/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledger-db/k8s/components/init-db-job/init-db-job.yaml

• postgres 16.10-alpine@sha256:1c6d2f6e4d30d49c529e09a627e8178db5011dde88d955eb08db2e135e64aa09

src/ledger/ledger-db/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledger-db/k8s/overlays/development/ledger-db.yaml

• StatefulSet apps/v1

src/ledger/ledger-db/k8s/overlays/init-db-production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledger-db/k8s/overlays/init-db-production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledger-db/k8s/overlays/init-db-staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledger-db/k8s/overlays/production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledger-db/k8s/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledger-db/k8s/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledger-db/skaffold.yaml

src/ledger/ledgerwriter/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledgerwriter/k8s/base/ledgerwriter.yaml

• Deployment apps/v1

src/ledger/ledgerwriter/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledgerwriter/k8s/overlays/production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledgerwriter/k8s/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledgerwriter/k8s/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/ledgerwriter/skaffold.yaml

src/ledger/transactionhistory/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/transactionhistory/k8s/base/transactionhistory.yaml

• Deployment apps/v1

src/ledger/transactionhistory/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/transactionhistory/k8s/overlays/production-fwi/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/transactionhistory/k8s/overlays/production/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/transactionhistory/k8s/overlays/staging/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/ledger/transactionhistory/skaffold.yaml

src/loadgenerator/k8s/base/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/loadgenerator/k8s/base/loadgenerator.yaml

• Deployment apps/v1

src/loadgenerator/k8s/overlays/development/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

src/loadgenerator/skaffold.yaml

maven

pom.xml

• com.google.cloud.tools:jib-maven-plugin 3.4.6
• org.apache.maven.plugins:maven-compiler-plugin 3.14.1
• org.jacoco:jacoco-maven-plugin 0.8.13

src/ledger/balancereader/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.6
• com.google.cloud:spring-cloud-gcp-dependencies 5.13.5
• org.springframework.cloud:spring-cloud-dependencies 2022.0.5
• com.google.cloud:libraries-bom 26.69.0
• io.micrometer:micrometer-bom 1.15.4
• io.micrometer:micrometer-registry-stackdriver 1.15.4
• org.apache.logging.log4j:log4j-api 2.25.2
• org.apache.logging.log4j:log4j-core 2.25.2
• com.google.guava:guava 32.1.3-jre
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• io.lettuce:lettuce-core 6.8.1.RELEASE
• com.auth0:java-jwt 4.5.0
• org.mockito:mockito-core 5.20.0
• com.google.cloud.tools:jib-maven-plugin 3.4.6
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.jacoco:jacoco-maven-plugin 0.8.13

src/ledger/ledgerwriter/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.6
• com.google.cloud:spring-cloud-gcp-dependencies 5.13.5
• org.springframework.cloud:spring-cloud-dependencies 2022.0.5
• com.google.cloud:libraries-bom 26.69.0
• io.micrometer:micrometer-bom 1.15.4
• io.micrometer:micrometer-registry-stackdriver 1.15.4
• org.apache.logging.log4j:log4j-api 2.25.2
• org.apache.logging.log4j:log4j-core 2.25.2
• com.google.guava:guava 32.1.3-jre
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• io.lettuce:lettuce-core 6.8.1.RELEASE
• com.auth0:java-jwt 4.5.0
• org.mockito:mockito-core 5.20.0
• com.google.cloud.tools:jib-maven-plugin 3.4.6
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.jacoco:jacoco-maven-plugin 0.8.13

src/ledger/transactionhistory/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.6
• com.google.cloud:spring-cloud-gcp-dependencies 5.13.5
• org.springframework.cloud:spring-cloud-dependencies 2022.0.5
• com.google.cloud:libraries-bom 26.69.0
• io.micrometer:micrometer-bom 1.15.4
• io.micrometer:micrometer-registry-stackdriver 1.15.4
• org.apache.logging.log4j:log4j-api 2.25.2
• org.apache.logging.log4j:log4j-core 2.25.2
• com.google.guava:guava 32.1.3-jre
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• io.lettuce:lettuce-core 6.8.1.RELEASE
• com.auth0:java-jwt 4.5.0
• org.mockito:mockito-core 5.20.0
• com.google.cloud.tools:jib-maven-plugin 3.4.6
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.jacoco:jacoco-maven-plugin 0.8.13

src/ledgermonolith/pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.5.6
• com.google.cloud:spring-cloud-gcp-dependencies 5.13.5
• org.springframework.cloud:spring-cloud-dependencies 2022.0.5
• com.google.cloud:libraries-bom 26.69.0
• org.apache.logging.log4j:log4j-api 2.25.2
• org.apache.logging.log4j:log4j-core 2.25.2
• com.google.guava:guava 32.1.3-jre
• com.fasterxml.jackson.core:jackson-databind 2.20.0
• io.lettuce:lettuce-core 6.8.1.RELEASE
• com.auth0:java-jwt 4.5.0
• org.mockito:mockito-core 5.20.0
• com.google.cloud.tools:jib-maven-plugin 3.4.6
• org.apache.maven.plugins:maven-surefire-plugin 3.5.4
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• org.jacoco:jacoco-maven-plugin 0.8.13

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.11
• maven-wrapper 0.5.5

pip-compile

src/accounts/contacts/requirements.in

• attrs ==23.2.0
• bcrypt ==4.2.0
• bleach ==6.1.0
• cachetools ==5.5.0
• certifi ==2024.8.30
• cffi ==1.17.1
• chardet ==5.2.0
• click ==8.1.7
• cryptography ==44.0.1
• flask ==3.0.3
• google-api-core ==2.20.0
• google-auth ==2.35.0
• google-cloud-core ==2.4.1
• google-cloud-trace ==1.13.5
• googleapis-common-protos ==1.65.0
• grpcio ==1.66.1
• gunicorn ==23.0.0
• idna ==3.10
• importlib-metadata ==6.11.0
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• markupsafe ==2.1.5
• more-itertools ==10.5.0
• opentelemetry-sdk ==1.27.0
• opentelemetry-exporter-gcp-trace ==1.7.0
• opentelemetry-propagator-gcp ==1.7.0
• opentelemetry-instrumentation-flask ==0.48b0
• opentelemetry-instrumentation-sqlalchemy ==0.48b0
• packaging ==23.2
• pluggy ==1.5.0
• protobuf ==4.25.8
• psycopg2-binary ==2.9.9
• py ==1.11.0
• pyasn1 ==0.6.1
• pyasn1-modules ==0.4.1
• pycparser ==2.22
• pycryptodome ==3.20.0
• pyjwt ==2.9.0
• pyparsing ==3.1.4
• pytest ==7.4.4
• pytest-cov ==4.1.0
• pytz ==2023.4
• requests ==2.32.4
• rsa ==4.9
• six ==1.16.0
• sqlalchemy ==1.4.54
• urllib3 ==2.2.3
• wcwidth ==0.2.13
• webencodings ==0.5.1
• wrapt ==1.16.0
• zipp ==3.20.2

src/accounts/userservice/requirements.in

• attrs ==23.2.0
• bcrypt ==4.2.0
• bleach ==6.1.0
• cachetools ==5.5.0
• certifi ==2024.8.30
• cffi ==1.17.1
• chardet ==5.2.0
• click ==8.1.7
• cryptography ==44.0.1
• flask ==3.0.3
• google-api-core ==2.20.0
• google-auth ==2.35.0
• google-cloud-core ==2.4.1
• google-cloud-trace ==1.13.5
• googleapis-common-protos ==1.65.0
• grpcio ==1.66.1
• gunicorn ==23.0.0
• idna ==3.10
• importlib-metadata ==6.11.0
• itsdangerous ==2.2.0
• jinja2 ==3.1.6
• markupsafe ==2.1.5
• more-itertools ==10.5.0
• opentelemetry-sdk ==1.27.0
• opentelemetry-exporter-gcp-trace ==1.7.0
• opentelemetry-propagator-gcp ==1.7.0
• opentelemetry-instrumentation-flask ==0.48b0
• opentelemetry-instrumentation-sqlalchemy ==0.48b0
• packaging ==23.2
• pluggy ==1.5.0
• protobuf ==4.25.8
• psycopg2-binary ==2.9.9
• py ==1.11.0
• pyasn1 ==0.6.1
• pyasn1-modules ==0.4.1
• pycparser ==2.22
• pycryptodome ==3.20.0
• pyjwt ==2.9.0
• pyparsing ==3.1.4
• pytest ==7.4.4
• pytest-cov ==4.1.0
• pytz ==2023.4
• requests ==2.32.4
• rsa ==4.9
• six ==1.16.0
• sqlalchemy ==1.4.54
• urllib3 ==2.2.3
• wcwidth ==0.2.13
• webencodings ==0.5.1
• wrapt ==1.16.0
• zipp ==3.20.2

src/frontend/requirements.in

• flask ==3.0.3
• requests ==2.32.4
• urllib3 ==2.2.3
• pyjwt ==2.9.0
• cryptography ==44.0.1
• gunicorn ==23.0.0
• google-auth ==2.35.0
• opentelemetry-sdk ==1.27.0
• opentelemetry-exporter-gcp-trace ==1.7.0
• opentelemetry-propagator-gcp ==1.7.0
• opentelemetry-instrumentation-flask ==0.48b0
• opentelemetry-instrumentation-jinja2 ==0.48b0
• opentelemetry-instrumentation-requests ==0.48b0

src/loadgenerator/requirements.in

• locust ==2.31.7

renovate-config-presets

.github/renovate.json5

terraform

iac/tf-anthos-gke/acm.tf

• terraform-google-modules/kubernetes-engine/google ~> 29.0

iac/tf-anthos-gke/asm.tf

• terraform-google-modules/kubernetes-engine/google ~> 29.0

iac/tf-anthos-gke/boa.tf

iac/tf-anthos-gke/gke.tf

• terraform-google-modules/kubernetes-engine/google ~> 29.0

iac/tf-anthos-gke/main.tf

• terraform-google-modules/project-factory/google ~> 14.5.0

iac/tf-anthos-gke/providers.tf

• google ~> 5.4
• google-beta ~> 5.4
• hashicorp/terraform >= 0.14

iac/tf-multienv-cicd-anthos-autopilot/apis.tf

• terraform-google-modules/project-factory/google ~> 14.5.0

iac/tf-multienv-cicd-anthos-autopilot/artifact-registry.tf

iac/tf-multienv-cicd-anthos-autopilot/env-development.tf

• terraform-google-modules/kubernetes-engine/google 29.0.0

iac/tf-multienv-cicd-anthos-autopilot/env-production.tf

• GoogleCloudPlatform/sql-db/google ~> 20.2.0
• terraform-google-modules/kubernetes-engine/google 29.0.0

iac/tf-multienv-cicd-anthos-autopilot/env-staging.tf

• GoogleCloudPlatform/sql-db/google ~> 20.2.0
• terraform-google-modules/kubernetes-engine/google 29.0.0

iac/tf-multienv-cicd-anthos-autopilot/main.tf

• google ~> 5.40.0
• google-beta ~> 5.40.0

iac/tf-multienv-cicd-anthos-autopilot/nat.tf

iac/tf-multienv-cicd-anthos-autopilot/network.tf

• terraform-google-modules/network/google ~> 8.1.0

iac/tf-multienv-cicd-anthos-autopilot/pipelines.tf

iac/tf-multienv-cicd-anthos-autopilot/project-iam-bindings.tf

---

• Check this box to trigger a request for Renovate to run again on this repository

[bourgeoisor]

Commenting to reset SLO -- this is a "forever" issue anyway.

[mathieu-benoit]

Down to 3 now! Let's keep those 3 open and see when the dependencies issues will be resolved as we will merge main into the associated branches.

• chore(deps): update dependency opentelemetry-api to v1.12.0 #916
• chore(deps): update dependency opentelemetry-sdk to v1.12.0 #917
• chore(deps): update dependency pyzmq to v23 #931