Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
maven	org.hibernate:hibernate-core
maven	org.hibernate:hibernate-envers
maven	org.hibernate:hibernate-jpamodelgen
maven	org.hibernate:hibernate-spatial

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): replace dependency org.hibernate:hibernate-envers with org.hibernate.orm:hibernate-envers
• chore(deps): replace dependency org.hibernate:hibernate-jpamodelgen with org.hibernate.orm:hibernate-processor
• fix(deps): replace dependency org.hibernate:hibernate-core with org.hibernate.orm:hibernate-core
• fix(deps): replace dependency org.hibernate:hibernate-spatial with org.hibernate.orm:hibernate-spatial
• fix(deps): update dependency org.codehaus.jettison:jettison from v1.5.4 to v1.5.5
• fix(deps): update dependency org.entur:netex-java-model from v1.0.15 to v1.0.16
• fix(deps): update dependency org.postgresql:postgresql from v42.7.8 to v42.7.10
• fix(deps): update dependency org.projectlombok:lombok from v1.18.42 to v1.18.44
• chore(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin from v3.3.0 to v3.8.0
• chore(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin from v3.4.2 to v3.8.0
• chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin from v3.2.0 to v3.10.0
• chore(deps): update dependency org.apache.maven.plugins:maven-ejb-plugin from v3.1.0 to v3.3.0
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin from v3.3.2 to v3.12.0
• chore(deps): update dependency org.apache.maven.plugins:maven-resources-plugin from v3.2.0 to v3.5.0
• chore(deps): update dependency org.apache.maven.plugins:maven-source-plugin from v3.2.1 to v3.4.0
• chore(deps): update dependency org.apache.maven.plugins:maven-war-plugin from v3.3.2 to v3.5.1
• chore(deps): update dependency org.codehaus.mojo:properties-maven-plugin from v1.0.0 to v1.3.0
• chore(deps): update dependency org.owasp:dependency-check-maven from v12.1.9 to v12.2.0
• fix(deps): update dependency ch.qos.logback:logback-classic from v1.2.13 to v1.5.32
• fix(deps): update dependency com.google.guava:guava from v33.4.8-jre to v33.5.0-jre
• fix(deps): update dependency org.apache.commons:commons-lang3 from v3.18.0 to v3.20.0
• chore(deps): update actions/checkout action from vv4 to v6
• chore(deps): update actions/upload-artifact action from vv4.6.2 to v7
• chore(deps): update cimg/openjdk docker tag to v25
• chore(deps): update dependency org.codehaus.mojo:jaxb2-maven-plugin from v2.5.0 to v4
• chore(deps): update dependency org.hibernate.orm.tooling:hibernate-enhance-maven-plugin from v5.3.28.final to v6
• fix(deps): update dependency net.logstash.logback:logstash-logback-encoder from v8.1 to v9
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update actions/cache action from vv4 to v5

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package org.geotools:gt-jts-wrapper: no-result, Failed to look up maven package org.geotools:gt-epsg-wkt: no-result, Failed to look up maven package org.geotools:gt-epsg-hsql: no-result.

Files affected: pom.xml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency org.hibernate.orm.tooling:hibernate-enhance-maven-plugin from v5.3.28.final to v5.3.38.final
• fix(deps): update hibernate core from v5.3.28.final to v5.3.38.final (patch) (org.hibernate:hibernate-spatial, org.hibernate:hibernate-core, org.hibernate:hibernate-envers, org.hibernate:hibernate-jpamodelgen)
• chore(deps): update dependency org.apache.maven.plugins:maven-clean-plugin from v3.1.0 to v3.5.0
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin from v3.10.0 to v3.15.0
• chore(deps): update dependency org.apache.maven.plugins:maven-ear-plugin from v3.2.0 to v3.4.0
• chore(deps): update dependency org.codehaus.mojo:build-helper-maven-plugin from v3.3.0 to v3.6.1
• chore(deps): update dependency org.easymock:easymock from v5.5.0 to v5.6.0
• chore(deps): update dependency org.geolatte:geolatte-geom from v1.3.0 to v1.11
• chore(deps): update dependency org.hibernate.orm.tooling:hibernate-enhance-maven-plugin from v5.3.28.final to v5.6.15.final
• fix(deps): update dependency com.google.cloud:libraries-bom from v26.54.0 to v26.79.0
• fix(deps): update dependency com.google.cloud.sql:postgres-socket-factory from v1.23.1 to v1.28.2
• fix(deps): update dependency commons-io:commons-io from v2.18.0 to v2.21.0
• fix(deps): update dependency org.apache.commons:commons-compress from v1.27.1 to v1.28.0
• fix(deps): update dependency org.dom4j:dom4j from v2.1.5 to v2.2.0
• chore(deps): update debian docker tag to v13
• fix(deps): update dependency org.wildfly.core:wildfly-embedded from v18.1.2.final to v31
• fix(deps): update entur.helpers.version (major) (org.entur.ror.helpers:hazelcast4-helper, org.entur.ror.helpers:calendar-helper, org.entur.ror.helpers:gcp-storage)
• fix(deps): update hibernate core from v5.3.28.final to v7 (major) (org.hibernate:hibernate-spatial, org.hibernate:hibernate-core, org.hibernate:hibernate-envers, org.hibernate:hibernate-jpamodelgen)
• fix(deps): update postgis.version from v2024.1.0 to v2025 (major) (net.postgis:postgis-jdbc, net.postgis:postgis-geometry)
• fix(deps): update wildfly.version (major) (org.wildfly.bom:wildfly-microprofile, org.wildfly:wildfly-spec-api, org.wildfly:wildfly-dist)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency org.testng:testng from v6.14.3 to v7 [security]
• fix(deps): update dependency org.yaml:snakeyaml from v1.33 to v2 [security]
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin from v3.10.0 to v3.10.1
• chore(deps): update dependency org.apache.maven.plugins:maven-site-plugin from v3.11.0 to v3.21.0
• fix(deps): update dependency org.apache.velocity:velocity-engine-core from v2.3 to v2.4.1
• fix(deps): update hibernate core from v5.3.28.final to v5.6.15.final (minor) (org.hibernate:hibernate-spatial, org.hibernate:hibernate-core, org.hibernate:hibernate-envers, org.hibernate:hibernate-jpamodelgen)
• chore(deps): update dependency org.apache.maven.plugins:maven-install-plugin from v2.5.2 to v3
• chore(deps): update dependency org.apache.maven.wagon:wagon-ssh from v1.0 to v3
• chore(deps): update dependency org.bsc.maven:maven-processor-plugin from v2.2.4 to v5
• chore(deps): update dependency org.codehaus.mojo:sql-maven-plugin from v1.5 to v3
• chore(deps): update dependency org.wildfly.plugins:wildfly-maven-plugin from v3.0.2.final to v5
• chore(deps): update dependency pl.project13.maven:git-commit-id-plugin from v2.2.6 to v4
• chore(deps): update postgis/postgis docker tag to v17
• chore(deps): update version.surefire.plugin from v2.22.2 to v3 (major) (org.apache.maven.plugins:maven-surefire-report-plugin, org.apache.maven.plugins:maven-surefire-plugin)
• fix(deps): update dependency net.sf.saxon:saxon-he from v9.9.1-8 to v12
• fix(deps): update dependency org.entur:netex-java-model from v1.0.15 to v2
• fix(deps): update dependency org.wildfly.arquillian:wildfly-arquillian-container-embedded from v3.0.1.final to v5
• fix(deps): update slf4j monorepo from v1.7.36 to v2 (major) (org.slf4j:slf4j-simple, org.slf4j:jcl-over-slf4j, org.slf4j:log4j-over-slf4j, org.slf4j:slf4j-api)

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• debian 12-slim → [Updates: 13-slim]

github-actions (1)

.github/workflows/push.yml (8)

• actions/checkout v4 → [Updates: v6]
• actions/cache v4 → [Updates: v5]
• actions/upload-artifact v4.6.2 → [Updates: v7.0.0]
• entur/gha-docker v1
• entur/gha-docker v1
• cimg/openjdk 17.0.17 → [Updates: 25.0.1]
• postgis/postgis 13-3.5 → [Updates: 17-3.5]
• ubuntu 24.04

maven (20)

chouette_iev/pom.xml

mobi.chouette.common/pom.xml (1)

• org.threeten:threeten-extra 1.8.0

mobi.chouette.dao.iev/pom.xml

mobi.chouette.dao/pom.xml

mobi.chouette.exchange.gtfs/pom.xml

mobi.chouette.exchange.neptune/pom.xml (2)

• org.codehaus.mojo:properties-maven-plugin 1.0.0 → [Updates: 1.3.0]
• org.codehaus.mojo:jaxb2-maven-plugin 2.5.0 → [Updates: 4.1.0]

mobi.chouette.exchange.netexprofile/pom.xml (1)

• net.sf.saxon:Saxon-HE 9.9.1-8 → [Updates: 12.9]

mobi.chouette.exchange.stopplace/pom.xml

mobi.chouette.exchange.transfer/pom.xml

mobi.chouette.exchange.validator/pom.xml

mobi.chouette.exchange/pom.xml (2)

• org.apache.velocity:velocity-engine-core 2.3 → [Updates: 2.4.1]
• org.apache.velocity.tools:velocity-tools-generic 3.1

mobi.chouette.googlecloudsql/pom.xml (1)

• org.apache.maven.plugins:maven-assembly-plugin 3.4.2 → [Updates: 3.8.0]

mobi.chouette.jdbc/pom.xml

mobi.chouette.model.iev/pom.xml

mobi.chouette.model/pom.xml

mobi.chouette.persistence.hibernate/pom.xml

mobi.chouette.schema.checker/pom.xml

mobi.chouette.service/pom.xml

mobi.chouette.ws/pom.xml

pom.xml (93)

• org.apache.maven.plugins:maven-ear-plugin 3.2.0 → [Updates: 3.4.0]
• org.wildfly.plugins:wildfly-maven-plugin 3.0.2.Final → [Updates: 5.1.5.Final]
• com.vividsolutions:jts-core 1.14.0
• org.dom4j:dom4j 2.1.5 → [Updates: 2.2.0]
• org.dom4j:dom4j 2.1.5 → [Updates: 2.2.0]
• org.hibernate:hibernate-core 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• org.apache.maven.plugins:maven-resources-plugin 3.2.0 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-resources-plugin 3.2.0 → [Updates: 3.5.0]
• org.hibernate:hibernate-core 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• org.apache.maven.plugins:maven-resources-plugin 3.2.0 → [Updates: 3.5.0]
• org.hibernate:hibernate-core 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• org.apache.maven.plugins:maven-resources-plugin 3.2.0 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-resources-plugin 3.2.0 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-resources-plugin 3.2.0 → [Updates: 3.5.0]
• org.hibernate:hibernate-core 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• com.google.cloud.sql:postgres-socket-factory 1.23.1 → [Updates: 1.28.2]
• net.postgis:postgis-jdbc 2024.1.0 → [Updates: 2025.1.1]
• org.hibernate:hibernate-jpamodelgen 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• org.hibernate:hibernate-jpamodelgen 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• org.hibernate.orm.tooling:hibernate-enhance-maven-plugin 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 6.6.47.Final]
• org.entur.ror.helpers:gcp-storage 1.101 → [Updates: 3.0]
• org.apache.maven.plugins:maven-war-plugin 3.3.2 → [Updates: 3.5.1]
• org.apache.maven.wagon:wagon-ssh 1.0 → [Updates: 3.5.3]
• pl.project13.maven:git-commit-id-plugin 2.2.6 → [Updates: 4.9.10]
• org.apache.maven.plugins:maven-site-plugin 3.11.0 → [Updates: 3.21.0]
• org.apache.maven.wagon:wagon-ssh 1.0 → [Updates: 3.5.3]
• org.codehaus.mojo:sql-maven-plugin 1.5 → [Updates: 3.0.0]
• org.postgresql:postgresql 42.7.8 → [Updates: 42.7.10]
• org.apache.maven.plugins:maven-dependency-plugin 3.2.0 → [Updates: 3.10.0]
• org.wildfly:wildfly-dist 26.1.3.Final → [Updates: 39.0.1.Final]
• org.postgresql:postgresql 42.7.8 → [Updates: 42.7.10]
• net.postgis:postgis-jdbc 2024.1.0 → [Updates: 2025.1.1]
• net.postgis:postgis-geometry 2024.1.0 → [Updates: 2025.1.1]
• org.hibernate:hibernate-spatial 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• org.hibernate:hibernate-core 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• org.hibernate:hibernate-envers 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• com.vividsolutions:jts-core 1.14.0
• org.geolatte:geolatte-geom 1.3.0 → [Updates: 1.11]
• org.apache.maven.plugins:maven-resources-plugin 3.2.0 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-surefire-plugin 2.22.2 → [Updates: 3.5.5]
• org.apache.maven.plugins:maven-compiler-plugin 3.10.0 → [Updates: 3.10.1, 3.15.0]
• org.apache.maven.plugins:maven-ejb-plugin 3.1.0 → [Updates: 3.3.0]
• org.projectlombok:lombok-maven-plugin 1.18.20.0
• org.apache.maven.plugins:maven-source-plugin 3.2.1 → [Updates: 3.4.0]
• org.apache.maven.plugins:maven-javadoc-plugin 3.3.2 → [Updates: 3.12.0]
• org.owasp:dependency-check-maven 12.1.9 → [Updates: 12.2.0]
• org.apache.maven.plugins:maven-assembly-plugin 3.3.0 → [Updates: 3.8.0]
• org.codehaus.mojo:build-helper-maven-plugin 3.3.0 → [Updates: 3.6.1]
• org.apache.maven.plugins:maven-clean-plugin 3.1.0 → [Updates: 3.5.0]
• org.apache.maven.plugins:maven-install-plugin 2.5.2 → [Updates: 3.1.4]
• org.bsc.maven:maven-processor-plugin 2.2.4 → [Updates: 5.2-jdk8]
• org.apache.maven.plugins:maven-surefire-report-plugin 2.22.2 → [Updates: 3.5.5]
• com.google.cloud:libraries-bom 26.54.0 → [Updates: 26.79.0]
• org.wildfly.bom:wildfly-jakartaee8-with-tools 26.1.3.Final
• org.wildfly:wildfly-spec-api 26.1.3.Final → [Updates: 39.0.1.Final]
• org.wildfly.bom:wildfly-microprofile 26.1.3.Final → [Updates: 33.0.2.Final]
• org.codehaus.jettison:jettison 1.5.4 → [Updates: 1.5.5]
• org.entur:netex-java-model 1.0.15 → [Updates: 1.0.16, 2.0.16]
• org.entur.ror.helpers:calendar-helper 1.101 → [Updates: 7.1.0]
• org.entur.ror.helpers:hazelcast4-helper 1.101 → [Updates: 7.1.0]
• org.yaml:snakeyaml 1.33 → [Updates: 2.0]
• org.hsqldb:hsqldb 2.7.4
• org.testng:testng 6.14.3 → [Updates: 7.5.1]
• com.beust:jcommander 1.82
• org.easymock:easymock 5.5.0 → [Updates: 5.6.0]
• org.postgresql:postgresql 42.7.8 → [Updates: 42.7.10]
• net.postgis:postgis-jdbc 2024.1.0 → [Updates: 2025.1.1]
• org.hibernate:hibernate-core 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• org.hibernate:hibernate-spatial 5.3.28.Final → [Updates: 5.3.38.Final, 5.6.15.Final, 7.3.0.Final, 7.3.1.Final]
• com.tobedevoured:modelcitizen 0.6.0
• org.wildfly.arquillian:wildfly-arquillian-container-embedded 3.0.1.Final → [Updates: 5.1.0.Final]
• org.wildfly.core:wildfly-embedded 18.1.2.Final → [Updates: 31.0.3.Final]
• org.slf4j:slf4j-api 1.7.36 → [Updates: 2.0.17]
• org.slf4j:slf4j-simple 1.7.36 → [Updates: 2.0.17]
• org.slf4j:log4j-over-slf4j 1.7.36 → [Updates: 2.0.17]
• org.slf4j:jcl-over-slf4j 1.7.36 → [Updates: 2.0.17]
• ch.qos.logback:logback-classic 1.2.13 → [Updates: 1.5.32]
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• org.projectlombok:lombok 1.18.42 → [Updates: 1.18.44]
• com.jamonapi:jamon 2.82
• com.google.guava:guava 33.4.8-jre → [Updates: 33.5.0-jre]
• org.zeroturnaround:zt-zip 1.17
• commons-pool:commons-pool 1.6
• commons-collections:commons-collections 3.2.2
• org.apache.commons:commons-lang3 3.18.0 → [Updates: 3.20.0]
• commons-beanutils:commons-beanutils 1.11.0
• commons-io:commons-io 2.18.0 → [Updates: 2.21.0]
• org.apache.commons:commons-compress 1.27.1 → [Updates: 1.28.0]
• xpp3:xpp3 1.1.3.4.O
• org.geotools:gt-jts-wrapper 19.4
• org.geotools:gt-epsg-wkt 19.4
• org.geotools:gt-epsg-hsql 19.4
• org.slf4j:slf4j-simple 1.7.36 → [Updates: 2.0.17]

---

• Check this box to trigger a request for Renovate to run again on this repository