fix(deps): update all patch and minor versions - #20159
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
Pull request dashboard statusWaiting on reviewers · refreshed 2026-09-15 01:37 UTC Review the latest changes. Status above doesn't look right?
|
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The dependency pins are consistent across their related configuration points, with no unresolved compatibility issues identified.
Pull request overview
Updates build dependencies and lint tooling to current patch/minor releases.
Changes:
- Updates Flint and rumdl tooling.
- Updates Gradle publishing and Sonatype scanning plugins.
- Updates Animal Sniffer annotations and Netty alignment.
File summaries
| File | Description |
|---|---|
settings.gradle.kts |
Updates the plugin-publish plugin. |
mise.toml |
Updates Flint and rumdl. |
gradle-plugins/settings.gradle.kts |
Keeps plugin-publish aligned. |
dependencyManagement/build.gradle.kts |
Updates Animal Sniffer annotations. |
conventions/src/main/kotlin/otel.java-conventions.gradle.kts |
Updates Netty 4.1 alignment. |
conventions/build.gradle.kts |
Updates the Sonatype scan plugin. |
.github/renovate.json5 |
Updates the Flint Renovate preset. |
Review details
- Files reviewed: 7/7 changed files
- Comments generated: 0
- Review effort level: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.22.11→0.22.12v0.22.11→v0.22.120.2.68→0.2.731.27→1.284.1.137.Final→4.1.138.Final4.0.0→4.1.0-022.1.1→2.2.1Release Notes
grafana/flint (aqua:grafana/flint)
v0.22.12Compare Source
Added
Fixed
Other
rvben/rumdl (rumdl)
v0.2.73Compare Source
Fixed
Downloads
Installation
Using uv (Recommended)
Using pip
Using pipx
Direct Download
Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.
v0.2.72Compare Source
Added
Fixed
Downloads
Installation
Using uv (Recommended)
Using pip
Using pipx
Direct Download
Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.
v0.2.71Compare Source
Fixed
Downloads
Installation
Using uv (Recommended)
Using pip
Using pipx
Direct Download
Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.
v0.2.70Compare Source
Fixed
Performance
Downloads
Installation
Using uv (Recommended)
Using pip
Using pipx
Direct Download
Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.
v0.2.69Compare Source
Fixed
Downloads
Installation
Using uv (Recommended)
Using pip
Using pipx
Direct Download
Download the appropriate binary for your platform from the table above, extract it, and add it to your PATH.
mojohaus/animal-sniffer (org.codehaus.mojo:animal-sniffer-annotations)
v1.28📦 Dependency updates
22 changes
sonatype/scan-gradle-plugin (org.sonatype.gradle.plugins:scan-gradle-plugin)
v4.1.0-02Changelog
445a277Release: 4.1.0-02c6ec23eIncrease workflow polling timeout to 30 minutes - INT-10729 (#235)v4.1.0-01Changelog
ae9c8a3Release: 4.1.0-0194c4c24Update developer metadata and revert version to 4.0.1-SNAPSHOT (#234)8df9a0fRelease: 4.1.0-01777b70aAdjust CI release workflow memory configuration - INT-10729 (#233)ffffd7cRelease: 4.1.0-01de33948Fix release job - take 3 (#232)28d316eRelease: 4.1.0-01314348fAdjust Gradle tasks and artifact paths in release job - INT-10729 (#231)3d64391Fix release job and try again - INT-10584 (#230)f1f1104Release: 4.1.0-0206fb9fbRelease: 4.1.0-0102f8058Fix release job - INT-10729 (#229)d08035dRelease: 4.1.0-01449f9fdFix release job - INT-10729 (#228)956c2abChangelog update for version 4.1.0 (#227)b919604Pin Log4j version to 2.26.1 to address sonatype-2026-006746 (#226)e9bea1aSuppress TrueZIP startup logs by setting log level to SEVERE - INT-10670 (#225)7bcabd4Add support for Gradle 9, up to version 9.7.1 - INT-10712 (#224)b79d739Public user docs updates - INT-10583 (#223)7f6053eCreate jekyll-gh-pages.yml - INT-10583 (#222)f8350bdTemporarily remove GitHub Pages workflow for Gradle Plugin - INT-10583 (#221)64e23f5Updated CHANGELOG.md, compatibility.md and support.md - INT-10582 (#220)d559541Replace nexus-platform-api with direct dependencies - INT-10670 (#219)cf4959fSet up CI builds 2 - INT-10581 (#218)e2276a0Set up CI builds - part one - INT-10581 (#217)d96d754Replace Apache license with Sonatype Integration Terms EULA - INT-10580 (#216)4de8db6Merge pull request #214 from sonatype-nexus-community/bump-up-project-versionc092f3aBump version to 4.0.1-SNAPSHOT9f78f1fMerge pull request #213 from sonatype-nexus-community/INT-10539-upgrade-vulnerable-take-278c2dedMinor upodatesf9613a2Drop Gradle 5.x, 6.x, and 8.3 support, upgrade to Java 17, and update dependencies and workflows731398bBump up the project version (#208)11b918fUpdate docs and greet indicating this is an official plugin (#209)9a1d83bExclude groovy asm so older versions of groovy do not conflict (#207)e16bfdaUpdate README.md (#205)bb3639dBump up the project versiond0c9f5fRelocate apache-commons to avoid classpath conflicts (#204)b263c1fBump up the project version6d3c696Enable publishing to Gradle Plugins portal2310814Removes publishPlugins temporarlyed88c33Changed nexus-platform-api version to support Java 21 hashing (#202)4b1a60eBump up the project version5dfee8eRemove CircleCI in favour for GitHub Actions (#177)6df93deUse the Shadow plugin to shade and relocate ASM (#199)635a78eBump up the project versione7cfb90Delete .circleci directory as we now use GitHub actions9a4c2f4Bump up version to test publishingd89966bSet Gradle plugin portal credentials in the right place62975a6Include the Gradle plugins portals credentials as env vars3b2a221Only process Java-related configurations (#195)f4606c5Fix double deployment of unwanted plugin marker to Maven Central (#187)62420c6Issue #175 Improves variant and artifacts selection (#194)50e4434Include new integration tests807d046Tests on Gradle 8.11, 8.12 and 8.13fc712d5Fix pubishing to the Gradle Plugins portal (#190)8d9a813ignore local test config filese002923Try using .vars and rename for jreleaser (#184)3c2cb60Make the plugin available at the Gradle plugins portalcb8bb54Add values to all POM files generatedb2cc2f6Fix Env Variables (#182)bb57885BNR-1226-Jreleaser (#181)7fe108bAdded Jreleaser (#174)683811achore(ci): update CI workflowa4aa299Sherlock Trunks - Version 3 (#171)0ccf60aCI build using GitHub Actions. (#169)43e71bcupdate local circleci notes to work with latest circleci (#168)78e6261Bump up to 2.8.4-SNAPSHOT3738319Restore publishing to Gradle plugins portalc865955Bump up to 2.8.319a3fa2Temporary skips publishing to Gradle plugins portal063a01bCheck if a child dependency was already included as compileOnly (#162)e965eff[skip ci] [Gradle Release Plugin] - new version commit: '2.8.3-SNAPSHOT'.c11214c[skip ci] [Gradle Release Plugin] - pre tag commit: '2.8.2'.82461e1Bump up dependencies versions7d8e0a4Update README.md2e0cea3#155 add failOnDetection plugin configuration to generate OSS Index report without failing build (#158)ba31077Update README.mdd00d4ce[skip ci] [Gradle Release Plugin] - new version commit: '2.8.2-SNAPSHOT'.2c5e377[skip ci] [Gradle Release Plugin] - pre tag commit: '2.8.1'.a308d32Upgrade to safe version of JGit (#157)6715e94[skip ci] [Gradle Release Plugin] - new version commit: '2.8.1-SNAPSHOT'.41898ec[skip ci] [Gradle Release Plugin] - pre tag commit: '2.8.0'.b924342New configuration to exclude compileOnly dependencies (#156)295afb3[skip ci] [Gradle Release Plugin] - new version commit: '2.7.1-SNAPSHOT'.03701e2[skip ci] [Gradle Release Plugin] - pre tag commit: '2.7.0'.b0af68b#139 Allows to set additional scan targets for IQ evaluations (#150)3625cda[skip ci] [Gradle Release Plugin] - new version commit: '2.6.3-SNAPSHOT'.07fc913[skip ci] [Gradle Release Plugin] - pre tag commit: '2.6.2'.74deeb8#148 Uses the Legacy Violations text in log output (#149)88eaa09Update first-interaction.yml435ce8bUpdate first-interaction.yml758ba51Update gradle.propertiesdc73a2aDelete .muse.toml1d64880#140 Set this tasks as Not Compatible with configuration cache (#142)977db62Update gradle.propertiesb410effUpdate README.md501abe8Update CVSS Threshold limit (#138)410d787[skip ci] [Gradle Release Plugin] - new version commit: '2.5.6-SNAPSHOT'.bd13bbf[skip ci] [Gradle Release Plugin] - pre tag commit: '2.5.5'.b897c25Allow to set attributes to match a variant after a conflict (#136)983740fUpdate first-interaction.ymlfc00901Upgrade first-interaction to v1.1.15b9f6d6[skip ci] [Gradle Release Plugin] - new version commit: '2.5.5-SNAPSHOT'.1c1576d[skip ci] [Gradle Release Plugin] - pre tag commit: '2.5.4'.25bd223Update README.md6255e3f#128 Improves handling of project dependencies with variants (#132)1d27ef7[skip ci] [Gradle Release Plugin] - new version commit: '2.5.4-SNAPSHOT'.163801b[skip ci] [Gradle Release Plugin] - pre tag commit: '2.5.3'.e273102Update README.md09d0129Add parent ID to module xml (#129)de25b5e[skip ci] [Gradle Release Plugin] - new version commit: '2.5.3-SNAPSHOT'.160c02a[skip ci] [Gradle Release Plugin] - pre tag commit: '2.5.2'.5b0c970#124 Creates applications under organizations using the new nexus-platform-api method (#130)eedba86[skip ci] version bump68b0efd[skip ci] [Gradle Release Plugin] - new version commit: '2.5.2-SNAPSHOT'.a117424[skip ci] [Gradle Release Plugin] - pre tag commit: '2.5.1'.7ccfee3#126 Improves the error message when it's related to IQ API calls. (#127)2fe1c31[skip ci] [Gradle Release Plugin] - new version commit: '2.5.1-SNAPSHOT'.15b9987[skip ci] [Gradle Release Plugin] - pre tag commit: '2.5.0'.3ec31d8#121 Adios nexus-platform-api - Hello nexus-plaform-api (#122)e131520Skip unresolvable dependencies (#120)8030c4asmaller banner (#119)[
c99cfe3Configuration
📅 Schedule: (UTC)
* 0-7 * * 2)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.