Dependency Dashboard

[renovate-coveo]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
github-actions	google-github-actions/release-please-action

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): replace all dependencies j:cdx-227 (google-github-actions/release-please-action, step-security/harden-runner, commons-codec:commons-codec)

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): lock file maintenance j:cdx-227

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(deps): update all dependencies j:cdx-227 (major) (@commitlint/config-conventional, @octokit/auth-app, actions/checkout, actions/setup-java, actions/setup-node, actions/upload-artifact, com.diffplug.spotless:spotless-maven-plugin, io.github.resilience4j:resilience4j-retry)

Detected dependencies

github-actions

.github/workflows/build.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-java v4.7.1@c5195efecf7bdfc987ee8bae7a71cb8b11521c00

.github/workflows/codeql.yml

• coveo/public-actions main

.github/workflows/dependency-review.yml

• coveo/public-actions main

.github/workflows/maven-publish.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-java v4.7.1@c5195efecf7bdfc987ee8bae7a71cb8b11521c00

.github/workflows/pr-title-semantic-lint.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955

.github/workflows/release.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020
• actions/setup-java v4.7.1@c5195efecf7bdfc987ee8bae7a71cb8b11521c00
• google-github-actions/release-please-action v4.1.1@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee
• node 18

.github/workflows/scorecards.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.26.13@f779452ac5af1c261dce0346a8f964149f49322b

maven

pom.xml

• org.apache.maven.plugins:maven-source-plugin 3.3.1
• com.diffplug.spotless:spotless-maven-plugin 2.46.1
• org.apache.maven.plugins:maven-javadoc-plugin 3.12.0
• org.apache.maven.plugins:maven-gpg-plugin 3.2.8
• org.apache.logging.log4j:log4j-core 2.25.2
• com.google.code.gson:gson 2.13.2
• io.github.cdimascio:dotenv-java 3.2.0
• joda-time:joda-time 2.14.0
• org.mockito:mockito-core 5.20.0
• junit:junit 4.13.2
• commons-codec:commons-codec 1.19.0
• io.github.resilience4j:resilience4j-retry 1.7.1
• org.apache.maven:maven-model 3.9.11

npm

package.json

• @actions/core ^1.10.0
• @commitlint/config-conventional 19.8.1
• @octokit/auth-app ^7.0.0

renovate-config-presets

renovate.json