Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
maven	org.hibernate:hibernate-c3p0
maven	org.hibernate:hibernate-core
maven	org.hibernate:hibernate-jpamodelgen

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): replace dependency org.hibernate:hibernate-c3p0 with org.hibernate.orm:hibernate-c3p0
• fix(deps): replace dependency org.hibernate:hibernate-core with org.hibernate.orm:hibernate-core
• fix(deps): replace dependency org.hibernate:hibernate-jpamodelgen with org.hibernate.orm:hibernate-processor
• fix(deps): update dependency com.amazonaws:aws-java-sdk-s3 to v1.12.797
• fix(deps): update dependency org.glassfish.jaxb:jaxb-runtime to v2.3.9
• fix(deps): update dependency org.projectlombok:lombok to v1.18.44
• fix(deps): update dependency org.slf4j:slf4j-api to v2.0.17
• chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.2
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
• chore(deps): update dependency org.apache.maven.plugins:maven-release-plugin to v3.3.1
• chore(deps): update dependency org.apache.maven.scm:maven-scm-provider-gitexe to v2.2.1
• fix(deps): update dependency ch.qos.logback:logback-classic to v1.5.32
• fix(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.21.1
• fix(deps): update dependency commons-codec:commons-codec to v1.21.0
• fix(deps): update dependency commons-io:commons-io to v2.21.0
• fix(deps): update dependency org.apache.commons:commons-collections4 to v4.5.0
• fix(deps): update dependency org.apache.maven.plugins:maven-war-plugin to v3.5.1
• fix(deps): update portletmvc4spring.version to v5.3.4 (com.liferay.portletmvc4spring:com.liferay.portletmvc4spring.security, com.liferay.portletmvc4spring:com.liferay.portletmvc4spring.framework)
• fix(deps): update uportal-libs.version to v5.17.1 (org.jasig.portal:uPortal-api-search, org.jasig.portal:uPortal-spring)
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/setup-java action to v5
• fix(deps): update dependency javax.portlet:portlet-api to v3
• fix(deps): update dependency javax.servlet:javax.servlet-api to v4
• fix(deps): update dependency org.apache.portals.pluto:pluto-taglib to v3
• fix(deps): update dependency org.glassfish.jaxb:jaxb-runtime to v4
• fix(deps): update dependency org.springframework.data:spring-data-jpa to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency org.codehaus.plexus:plexus-archiver to v4.8.0 [security]
• fix(deps): update dependency com.fasterxml.jackson.core:jackson-core to v2.18.6 [security]
• fix(deps): update dependency commons-fileupload:commons-fileupload to v1.6.0 [security]
• fix(deps): update spring.version to v6 [security] (major) (org.springframework:spring-webmvc, org.springframework:spring-web)
• fix(deps): update dependency org.springframework.data:spring-data-jpa to v2.7.18
• fix(deps): update spring core to v5.3.39 (org.springframework:spring-tx, org.springframework:spring-test, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-core, org.springframework:spring-aop)
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0
• fix(deps): update resource-server.version to v1.5.0 (org.jasig.resourceserver:resource-server-plugin, org.jasig.resourceserver:resource-server-utils, org.jasig.resourceserver:resource-server-content)
• fix(deps): update dependency jakarta.xml.bind:jakarta.xml.bind-api to v4
• fix(deps): update dependency org.mockito:mockito-core to v5
• fix(deps): update hibernate core to v7 (major) (org.hibernate:hibernate-c3p0, org.hibernate:hibernate-jpamodelgen, org.hibernate:hibernate-core)
• fix(deps): update spring core to v7 (major) (org.springframework:spring-tx, org.springframework:spring-test, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-core, org.springframework:spring-aop)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (1)

.github/workflows/CI.yml (2)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]

maven (1)

pom.xml (64)

• org.jasig.parent:jasig-parent 41
• com.amazonaws:aws-java-sdk-s3 1.12.780 → [Updates: 1.12.797]
• commons-codec:commons-codec 1.15 → [Updates: 1.21.0]
• org.apache.commons:commons-collections4 4.4 → [Updates: 4.5.0]
• commons-fileupload:commons-fileupload 1.5 → [Updates: 1.6.0]
• commons-io:commons-io 2.18.0 → [Updates: 2.21.0]
• org.hsqldb:hsqldb 2.7.4
• com.fasterxml.jackson.core:jackson-core 2.14.2 → [Updates: 2.18.6]
• com.fasterxml.jackson.core:jackson-databind 2.14.2 → [Updates: 2.21.1]
• org.hibernate:hibernate-core 5.6.15.Final → [Updates: 7.3.0.Final]
• org.hibernate:hibernate-entitymanager 5.6.15.Final
• org.hibernate:hibernate-jpamodelgen 5.6.15.Final → [Updates: 7.3.0.Final]
• org.hibernate:hibernate-tools 5.6.15.Final
• javax.servlet:jstl 1.1.2
• javax.annotation:javax.annotation-api 1.3.2
• javax.portlet:portlet-api 2.0 → [Updates: 3.0.1]
• javax.persistence:javax.persistence-api 2.2
• javax.servlet:javax.servlet-api 3.1.0 → [Updates: 4.0.1]
• junit:junit 4.13.2
• org.jasig.resourceserver:resource-server-content 1.3.1 → [Updates: 1.5.0]
• org.jasig.resourceserver:resource-server-utils 1.3.1 → [Updates: 1.5.0]
• org.jasig.portal:uPortal-spring 5.13.1 → [Updates: 5.17.1]
• org.jasig.portal:uPortal-api-search 5.13.1 → [Updates: 5.17.1]
• org.jasypt:jasypt-spring31 1.9.3
• org.mockito:mockito-core 3.12.4 → [Updates: 5.23.0]
• org.owasp:antisamy 1.4
• org.springframework:spring-aop 5.3.28 → [Updates: 5.3.39, 7.0.6]
• org.springframework:spring-core 5.3.28 → [Updates: 5.3.39, 7.0.6]
• org.springframework:spring-context 5.3.28 → [Updates: 5.3.39, 7.0.6]
• org.springframework:spring-beans 5.3.28 → [Updates: 5.3.39, 7.0.6]
• org.springframework.data:spring-data-jpa 2.7.15 → [Updates: 2.7.18, 4.0.4]
• org.springframework:spring-test 5.3.28 → [Updates: 5.3.39, 7.0.6]
• org.springframework:spring-web 5.3.28 → [Updates: 6.0.0]
• org.springframework:spring-webmvc 5.3.28 → [Updates: 6.0.0]
• org.springframework:spring-tx 5.3.28 → [Updates: 5.3.39, 7.0.6]
• com.liferay.portletmvc4spring:com.liferay.portletmvc4spring.framework 5.2.0 → [Updates: 5.3.4]
• com.liferay.portletmvc4spring:com.liferay.portletmvc4spring.security 5.2.0 → [Updates: 5.3.4]
• taglibs:standard 1.1.2
• org.hibernate:hibernate-c3p0 5.6.15.Final → [Updates: 7.3.0.Final]
• org.slf4j:slf4j-api 2.0.16 → [Updates: 2.0.17]
• ch.qos.logback:logback-classic 1.3.12 → [Updates: 1.5.32]
• org.webjars.bower:fine-uploader 5.13.0
• org.webjars.npm:pdfobject 2.2.4
• org.projectlombok:lombok 1.18.36 → [Updates: 1.18.44]
• org.apache.maven.plugins:maven-war-plugin 3.4.0 → [Updates: 3.5.1]
• jakarta.xml.bind:jakarta.xml.bind-api 2.3.3 → [Updates: 4.0.5]
• org.glassfish.jaxb:jaxb-runtime 2.3.3 → [Updates: 2.3.9, 4.0.7]
• org.apache.portals.pluto:pluto-taglib 2.1.0-M3 → [Updates: 3.1.2]
• org.apache.maven.plugins:maven-javadoc-plugin 3.5.0 → [Updates: 3.12.0]
• org.apache.maven.plugins:maven-release-plugin 3.1.1 → [Updates: 3.3.1]
• org.apache.maven.scm:maven-scm-provider-gitexe 2.1.0 → [Updates: 2.2.1]
• org.apache.maven.plugins:maven-enforcer-plugin 3.1.0 → [Updates: 3.6.2]
• org.apache.maven.plugins:maven-compiler-plugin 3.10.1 → [Updates: 3.15.0]
• org.apache.maven.plugins:maven-war-plugin 3.4.0 → [Updates: 3.5.1]
• org.codehaus.plexus:plexus-archiver 4.4.0 → [Updates: 4.8.0]
• org.glassfish.jaxb:jaxb-runtime 2.3.3 → [Updates: 2.3.9, 4.0.7]
• org.jasig.resourceserver:resource-server-plugin 1.3.1 → [Updates: 1.5.0]
• jakarta.xml.bind:jakarta.xml.bind-api 2.3.3 → [Updates: 4.0.5]
• org.glassfish.jaxb:jaxb-runtime 2.3.3 → [Updates: 2.3.9, 4.0.7]
• org.jasig.portal.maven:uportal-maven-plugin 1.0.1
• javax.servlet:servlet-api 3.1.0
• javax.portlet:portlet-api 2.0 → [Updates: 3.0.1]
• jakarta.xml.bind:jakarta.xml.bind-api 2.3.3 → [Updates: 4.0.5]
• org.glassfish.jaxb:jaxb-runtime 2.3.3 → [Updates: 2.3.9, 4.0.7]

---

• Check this box to trigger a request for Renovate to run again on this repository