Dependency Dashboard

[renovate-sh-app]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• fix(deps): update dependency ch.qos.logback:logback-classic to v1.5.24
• fix(deps): update dependency com.gradleup.shadow:shadow-gradle-plugin to v9.3.1
• fix(deps): update junit-framework monorepo to v6.0.2 (org.junit.platform:junit-platform-launcher, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api, org.junit:junit-bom)
• chore(deps): update us-docker.pkg.dev/grafanalabs-global/docker-grafana-opentelemetry-java-prod/grafana-opentelemetry-java docker tag to v2.22.0

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package grafana/shared-workflows).

Files affected: .github/workflows/publish-release.yml

---

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

asdf (1)

.tool-versions (1)

• java 25.0.1+8.0.LTS

dockerfile (3)

Dockerfile (2)

• us-docker.pkg.dev/grafanalabs-global/docker-grafana-opentelemetry-java-prod/grafana-opentelemetry-java 2.21.0@sha256:ec682f4a73ec38f3b13c8a71810aa0628bf7b64abb264d5757d1f98826c5eb4f → [Updates: 2.22.0]
• springio/petclinic sha256:fbb6f32dff6b4b05aa0bb4252a674a2084ecd26137793c88213385e62a6ea171

Dockerfile.production (2)

• us-docker.pkg.dev/grafanalabs-global/docker-grafana-opentelemetry-java-prod/grafana-opentelemetry-java 2.21.0@sha256:ec682f4a73ec38f3b13c8a71810aa0628bf7b64abb264d5757d1f98826c5eb4f → [Updates: 2.22.0]
• springio/petclinic sha256:fbb6f32dff6b4b05aa0bb4252a674a2084ecd26137793c88213385e62a6ea171

scripts/otel_operator/Dockerfile (1)

• busybox sha256:2383baad1860bbe9d8a7a843775048fd07d8afe292b94bd876df64a69aae7cb1

github-actions (7)

.github/workflows/build.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• jdx/mise-action v3.5.1@146a28175021df8ca24f8ee1828cc2a60f980bd5

.github/workflows/markdown-link-check.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• jdx/mise-action v3.5.1@146a28175021df8ca24f8ee1828cc2a60f980bd5

.github/workflows/markdownlint.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ubuntu 24.04

.github/workflows/publish-release.yml (3)

• grafana/shared-workflows v0.2.2@ae92934a14a48b94494dbc06d74a81d47fe08a40
• actions/github-script v8.0.0@ed597411d8f924073f98dfc5c65a23a2325f34cd
• ubuntu 24.04

.github/workflows/release.yml (5)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• jdx/mise-action v3.5.1@146a28175021df8ca24f8ee1828cc2a60f980bd5
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• grafana/shared-workflows push-to-gar-docker/v0.5.2@dc66ed7a5dc1f49848b06068ae024e96e26d4761
• ubuntu 24.04

.github/workflows/scheduled-release.yml (2)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• ubuntu 24.04

.github/workflows/super-linter.yml (3)

• actions/checkout v6.0.1@8e8c483db84b4bee98b60c0593521ed34d9990e8
• super-linter/super-linter v8.3.2@d5b0a2ab116623730dd094f15ddc1b6b25bf7b99
• ubuntu 24.04

gradle (9)

agent/build.gradle

build.gradle (14)

• com.diffplug.spotless:spotless-plugin-gradle 8.1.0
• com.gradleup.shadow:shadow-gradle-plugin 9.3.0 → [Updates: 9.3.1]
• net.bytebuddy:byte-buddy-dep 1.18.3
• com.google.auto.service:auto-service 1.1.1
• com.google.auto.service:auto-service-annotations 1.1.1
• org.assertj:assertj-core 3.27.6
• org.junit:junit-bom 6.0.1 → [Updates: 6.0.2]
• org.junit.jupiter:junit-jupiter-api 6.0.1 → [Updates: 6.0.2]
• org.junit.jupiter:junit-jupiter-params 6.0.1 → [Updates: 6.0.2]
• org.junit.jupiter:junit-jupiter-engine 6.0.1 → [Updates: 6.0.2]
• org.junit.platform:junit-platform-launcher 6.0.1 → [Updates: 6.0.2]
• io.github.netmikey.logunit:logunit-core 2.0.0
• io.github.netmikey.logunit:logunit-jul 2.0.0
• io.opentelemetry.javaagent:opentelemetry-javaagent 2.23.0

custom/build.gradle (1)

• org.owasp.dependencycheck 12.1.9

gradle/checkstyle.gradle (1)

• checkstyle 13.0.0

gradle/instrumentation.gradle

gradle/shadow.gradle

settings.gradle

smoke-tests/build.gradle (7)

• org.testcontainers:testcontainers 2.0.3
• com.fasterxml.jackson.core:jackson-databind 2.20.1
• com.google.protobuf:protobuf-java-util 4.33.2
• com.squareup.okhttp3:okhttp 5.3.2
• io.opentelemetry.proto:opentelemetry-proto 1.3.2-alpha
• ch.qos.logback:logback-classic 1.5.23 → [Updates: 1.5.24]
• org.awaitility:awaitility 4.3.0

testing/agent-for-testing/build.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.2.1

mise (1)

mise.toml (2)

• java 25.0.1+8.0.LTS
• lychee 0.22.0

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.