fix(deps): update all dependencies by renovate[bot] · Pull Request #113 · jhuebert/iotfsdb

renovate · 2026-02-28T21:33:31Z

This PR contains the following updates:

Package	Type	Update	Change
docker/build-push-action	action	major	`v6` → `v7`
docker/login-action	action	major	`v3` → `v4`
docker/setup-buildx-action	action	major	`v3` → `v4`
gradle (source)		minor	`9.3.1` → `9.4.1`
gradle/actions	action	major	`v5` → `v6`
softprops/action-gh-release	action	major	`v2` → `v3`
no.entur.mapstruct.spi:protobuf-spi-impl	dependencies	minor	`1.52.0` → `1.53.0`
com.google.protobuf:protobuf-java (source)	dependencies	patch	`4.34.0` → `4.34.1`
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	dependencies	patch	`3.0.1` → `3.0.3`
com.google.guava:guava	dependencies	minor	`33.5.0-jre` → `33.6.0-jre`
io.grpc:protoc-gen-grpc-java	dependencies	minor	`1.79.0` → `1.80.0`
com.google.protobuf:protoc (source)	dependencies	patch	`4.34.0` → `4.34.1`
org.springframework.boot	plugin	patch	`4.0.3` → `4.0.5`

Release Notes

docker/build-push-action (docker/build-push-action)

`v7.1.0`

Compare Source

Git context query format support by @crazy-max in #1505
Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in #1505
Bump brace-expansion from 1.1.12 to 1.1.13 in #1500
Bump fast-xml-parser from 5.4.2 to 5.5.7 in #1489
Bump flatted from 3.3.3 to 3.4.2 in #1491
Bump glob from 10.3.12 to 10.5.0 in #1490
Bump handlebars from 4.7.8 to 4.7.9 in #1497
Bump lodash from 4.17.23 to 4.18.1 in #1510
Bump picomatch from 4.0.3 to 4.0.4 in #1496
Bump undici from 6.23.0 to 6.24.1 in #1486
Bump vite from 7.3.1 to 7.3.2 in #1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

`v7.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #1470
Remove deprecated DOCKER_BUILD_NO_SUMMARY and DOCKER_BUILD_EXPORT_RETENTION_DAYS envs by @crazy-max in #1473
Remove legacy export-build tool support for build summary by @crazy-max in #1474
Switch to ESM and update config/test wiring by @crazy-max in #1466
Bump @actions/core from 1.11.1 to 3.0.0 in #1454
Bump @docker/actions-toolkit from 0.62.1 to 0.79.0 in #1453 #1472 #1479
Bump minimatch from 3.1.2 to 3.1.5 in #1463

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

docker/login-action (docker/login-action)

`v4.1.0`

Compare Source

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #483
Remove deprecated inputs/outputs by @crazy-max in #464
Switch to ESM and update config/test wiring by @crazy-max in #481
Bump @actions/core from 1.11.1 to 3.0.0 in #475
Bump @docker/actions-toolkit from 0.63.0 to 0.79.0 in #482 #485
Bump js-yaml from 4.1.0 to 4.1.1 in #452
Bump lodash from 4.17.21 to 4.17.23 in #472
Bump minimatch from 3.1.2 to 3.1.5 in #480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

gradle/gradle (gradle)

`v9.4.1`

Compare Source

`v9.4.0`

Compare Source

gradle/actions (gradle/actions)

`v6.1.0`

Compare Source

New: Basic Cache Provider

A new MIT-licensed Basic Caching provider is now available as an alternative to the proprietary Enhanced Caching provided by gradle-actions-caching. Choose Basic Caching by setting cache-provider: basic on setup-gradle or dependency-submission actions.

Built on @actions/cache -- fully open source
Caches ~/.gradle/caches and ~/.gradle/wrapper directories
Cache key derived from build files (*.gradle*, gradle-wrapper.properties, etc.)
Clean cache on build file changes (no restore keys, preventing stale entry accumulation)

Limitations vs Enhanced Caching: No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.

Revamped Licensing & Distribution Documentation

New DISTRIBUTION.md documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)
Simplified licensing notices in README, docs, and runtime log output
Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos

What's Changed

Use a unique cache entry for wrapper-validation test by @bigdaz in #921
Update Dependencies by @bigdaz in #922
Update dependencies and resolve npm vulnerabilities by @bigdaz in #933
Add open-source 'basic' cache provider and revamp licensing documentation by @bigdaz in #930
Restructure caching documentation for basic and enhanced providers by @bigdaz in #934

Full Changelog: gradle/actions@v6.0.1...v6.1.0

`v6.0.1`

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

The license changes in v6 introduced a gradle-actions-caching license notice that is printed in logs and in each job summary.

With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.

What's Changed

Bump actions used in docs by @Goooler in #792
Add typing information for use by typesafegithub by @bigdaz in #910
Mute license warning when terms are accepted by @bigdaz in #911
Mention explicit license acceptance in notice by @bigdaz in #912
Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by @dependabot[bot] in #907

Full Changelog: gradle/actions@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

Caching functionality of 'gradle-actions' has been extracted into a separate gradle-actions-caching library, and is no longer open-source. See this blog post for more context.
Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in gradle-actions-caching.
Dependencies updated to address security vulnerabilities

[!IMPORTANT]

Licensing notice

The caching functionality in `gradle-actions` has been extracted into `gradle-actions-caching`, a proprietary commercial component that is not covered by the MIT License.
The bundled `gradle-actions-caching` component is licensed and governed by a separate license, available at https://gradle.com/legal/terms-of-use/.

The `gradle-actions-caching` component is used only when caching is enabled and is not loaded or used when caching is disabled.

Use of the `gradle-actions-caching` component is subject to a separate license, available at https://gradle.com/legal/terms-of-use/.
If you do not agree to these license terms, do not use the `gradle-actions-caching` component.

What's Changed

Bump the npm-dependencies group in /sources with 2 updates by @dependabot[bot] in #866
Update known wrapper checksums by @github-actions[bot] in #868
Dependency updates by @bigdaz in #876
Update known wrapper checksums by @github-actions[bot] in #878
Bump @types/node from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by @dependabot[bot] in #877
Bump the github-actions group across 3 directories with 3 updates by @dependabot[bot] in #867
Update known wrapper checksums by @github-actions[bot] in #881
Bump the npm-dependencies group in /sources with 6 updates by @dependabot[bot] in #879
Bump the github-actions group across 3 directories with 5 updates by @dependabot[bot] in #880
Remove configuration-cache support by @bigdaz in #884
Extract caching logic into a separate gradle-actions-caching component by @bigdaz in #885
Update gradle-actions-caching library to v0.3.0 by @bot-githubaction in #899
Avoid windows shutdown bug by @bigdaz in #900
Dependency updates by @bigdaz in #905
Fix critical and high npm vulnerabilities by @bigdaz in #904
Fix rendering of job-disabled message by @bigdaz in #909

Full Changelog: gradle/actions@v5.0.2...v6.0.0

softprops/action-gh-release (softprops/action-gh-release)

`v3.0.0`

Compare Source

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24.
Use v3 on GitHub-hosted runners and self-hosted fleets that already support the
Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on
v2.6.2.

What's Changed

Other Changes 🔄

Move the action runtime and bundle target to Node 24
Update @types/node to the Node 24 line and allow future Dependabot updates
Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

entur/mapstruct-spi-protobuf (no.entur.mapstruct.spi:protobuf-spi-impl)

`v1.53.0`

Compare Source

springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

`v3.0.3`

Compare Source

`v3.0.2`: springdoc-openapi v3.0.2 released!

Added

#3229 – Add support for Spring Framework API Versioning with Functional Endpoints
#3208 – Add springdoc.swagger-ui.document-title property

Changed

Upgrade Spring Boot to version 4.0.3
Upgrade swagger-core to version 2.2.43
Upgrade swagger-ui to version 5.32.0
Upgrade Scalar to version 0.5.55

Fixed

#3232 – Gracefully handle springdoc endpoint paths during API version resolution
#3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
#3226 – Propagate JsonView context when resolving Page<T> schema
#3228 – springdoc-openapi-starter 3.x doesn't depend on org.springframework.boot:spring-boot-starter
#3220 – Reachability metadata not compatible with GraalVM 25
#3195 – Application won't compile when OpenApi and spring-boot-data-rest is present
#3193 – OpenApi field in SpringDocConfigProperties does not comply with camel case naming conventions
#3215 – Type annotation not considered when Kotlin is not present
#3199 – Prevent duplicate _links in allOf child schemas
#3198 – Property resolution for parameter default values
#3206 – Upgrade swagger-core from version 2.2.41 to 2.2.42

Full Changelog: springdoc/springdoc-openapi@v3.0.1...v3.0.2

google/guava (com.google.guava:guava)

`v33.6.0-jre`

`v33.6.0-android`

grpc/grpc-java (io.grpc:protoc-gen-grpc-java)

`v1.80.0`

API Changes

core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b2)

Bug Fixes

core: Fixed the retry backoff jitter range to [0.8, 1.2] to align with the gRPC A6 specification. Retries will now occur more consistently around the calculated backoff interval. (#12639) (024fdd0)
core: Fixed a race condition in RetriableStream where inFlightSubStreams counting could become inconsistent during concurrent retry and deadline events. This ensures that client calls (such as blockingUnaryCall) do not hang indefinitely and correctly receive a close signal. (#12649) (73abb48)

Improvements

api: Trigger R8's ServiceLoader optimization to reduce necessary configuration when using R8 Full Mode (470219f). This allows gRPC to avoid reflection, and the need to specify -keeps for various class’s constructors.
Upgrade to protobuf 33.4 (#12615) (50c18f1)
cronet: Introduced CRONET_READ_BUFFER_SIZE_KEY to allow customizing the read buffer size per-stream via CallOptions. Increasing the buffer size from the 4KB default can significantly improve performance for large messages by reducing JNI and context-switching overhead. (31fdb6c)
api: Moved FlagResetRule to api/testFixtures and updated ManagedChannelRegistry to honor the GRPC_ENABLE_RFC3986_URIS feature flag. This ensures that target parsing is consistent across the library when the new URI parser is enabled. (#12608)
api: Updated NameResolverRegistry to natively support io.grpc.Uri. This is a foundational change that allows gRPC's name resolution system to handle URIs parsed with the new RFC 3986-compliant parser, ensuring more robust target handling. (#12609) (9903488)
xds: Removed the GRPC_EXPERIMENTAL_XDS_SNI feature flag. SNI determination via xDS is now always enabled and follows gRFC A101, where SNI is derived from xDS configurations like auto_host_sni or UpstreamTlsContext.sni. This ensures that no SNI is sent if not explicitly configured, unless the legacy channel authority fallback is enabled. (#12625) (ac44e96)

New Features

core: pick_first shuffling now a weighted shuffle and observes weights from EDS (34dd290). This finishes the gRFC A113 pick_first: Weighted Random Shuffling support
netty: Added RFC 3986 support to the unix: name resolver. This enables proper parsing of Unix domain socket URIs, including correct handling of query and fragment components in both hierarchical (e.g., unix:///path) and opaque (e.g., unix:/path) formats. (#12659)

Thanks to

Configuration

📅 Schedule: (in timezone America/Chicago)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the renovate label Feb 28, 2026

renovate Bot changed the title ~~fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3.0.2~~ fix(deps): update all dependencies Mar 4, 2026

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 4633dae to ea1da2e Compare March 5, 2026 22:00

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 965df13 to 28db049 Compare March 23, 2026 18:17

renovate Bot force-pushed the renovate/all branch 2 times, most recently from fccf7f3 to ef3d651 Compare March 30, 2026 16:44

renovate Bot force-pushed the renovate/all branch 2 times, most recently from a951b3c to 7ed0cfc Compare April 12, 2026 08:39

fix(deps): update all dependencies

b21d00d

renovate Bot force-pushed the renovate/all branch from 7ed0cfc to b21d00d Compare April 15, 2026 14:53

jhuebert merged commit 8416eb2 into main Apr 16, 2026
4 checks passed

jhuebert deleted the renovate/all branch April 16, 2026 18:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all dependencies#113

fix(deps): update all dependencies#113
jhuebert merged 1 commit intomainfrom
renovate/all

renovate Bot commented Feb 28, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Feb 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

New: Basic Cache Provider

Revamped Licensing & Distribution Documentation

What's Changed

Summary

What's Changed

Summary

Licensing notice

What's Changed

What's Changed

Other Changes 🔄

v3.0.2: springdoc-openapi v3.0.2 released!

Added

Changed

Fixed

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Feb 28, 2026 •

edited

Loading

`v3.0.2`: springdoc-openapi v3.0.2 released!