Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
The parent configuration is located in jenkinsci/renovate-config; Renovate logs for debug here.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Abandoned Dependencies

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (11)

Datasource	Package	Last Updated
github-actions	eps1lon/actions-label-merge-conflict	2025-01-06
github-actions	roots/discourse-topic-github-release-action	2024-02-22
npm	clean-webpack-plugin	2021-09-01
npm	handlebars	2023-08-01
npm	handlebars-loader	2022-12-08
npm	postcss-scss	2023-09-28
npm	style-loader	2024-04-08
npm	tippy.js	2021-11-10
npm	webpack-cli	2024-12-20
npm	window-handle	2016-08-22
regex	@webcomponents/webcomponentsjs	2023-03-30

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency eslint to v10.0.3

---

Warning

Renovate failed to look up the following dependencies: Can't find version matching 1.1.4c for maven package xpp3:xpp3.

Files affected: core/pom.xml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency commons-logging:commons-logging to v1.3.6
• Update dependency postcss to v8.5.8
• Update Winstone and Jetty (org.eclipse.jetty.ee9:jetty-ee9-maven-plugin, org.jenkins-ci:winstone)
• Update dependency babel-loader to v10.1.0
• Update release-drafter/release-drafter action to v6.4.0
• Update dependency css-minimizer-webpack-plugin to v8
• Update dependency hotkeys-js to v4
• Update dependency org.springframework:spring-framework-bom to v7
• Update dependency org.springframework.security:spring-security-bom to v7
• Update stapler.version to v2078 (major) (org.kohsuke.stapler:stapler-groovy, org.kohsuke.stapler:stapler)
• Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency hotkeys-js to v3.13.15

Detected Dependencies

github-actions (7)

.github/workflows/announce-lts-rc.yml (2)

• roots/discourse-topic-github-release-action v1.0.1@c30dc233349b7c6f24f52fb1c659cc64f13b5474
• dawidd6/action-send-mail v11@ba302ba66e88942841281c984a6b31ca6d6289e6

.github/workflows/changelog.yml (5)

• release-drafter/release-drafter v6.2.0@6db134d15f3909ccc9eefd369f02bd1e9cffdf97 → [Updates: v6.4.0]
• jenkinsci/core-changelog-generator v2.2.2@feb124ed2262f8586ac4561348436afb965812e1
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
• actions/create-github-app-token v2.2.1@29824e69f54612133e76f7eaac726eef6c875baf
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/label-conflicting-pr.yml (1)

• eps1lon/actions-label-merge-conflict v3.0.3@1df065ebe6e3310545d4f4c4e862e43bdca146f0

.github/workflows/label-lts-prs.yml (1)

• actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd

.github/workflows/publish-release-artifact.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-java 1d018f9b8b9b505bb578a83b230fabcce01af93b
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b
• softprops/action-gh-release v2.5.0@a06a81a03ee405af7f2048a818ed3f03bbf83c7b

.github/workflows/require-changelog-label.yml (1)

• mheap/github-action-required-labels v5.5.1@8afbe8ae6ab7647d0c9f0cfa7c2f939650d22509

.github/workflows/run-since-updater.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• peter-evans/create-pull-request v8.1.0@c0f553fe549906ede9cf27b5156039d195d2ece0

maven (10)

.mvn/extensions.xml (1)

• io.jenkins.tools.incrementals:git-changelist-maven-extension 1.13

bom/pom.xml (46)

• com.google.inject:guice-bom 6.0.0
• org.slf4j:slf4j-bom 2.0.17
• org.springframework:spring-framework-bom 6.2.16 → [Updates: 7.0.5]
• org.springframework.security:spring-security-bom 6.5.8 → [Updates: 7.0.3]
• args4j:args4j 2.37
• com.google.guava:guava 33.5.0-jre
• com.sun.xml.txw2:txw2 20110809
• com.thoughtworks.xstream:xstream 1.4.21
• commons-beanutils:commons-beanutils 1.11.0
• commons-codec:commons-codec 1.21.0
• commons-collections:commons-collections 3.2.2
• commons-io:commons-io 2.21.0
• commons-lang:commons-lang 2.6
• jaxen:jaxen 2.0.0
• net.java.dev.jna:jna 5.18.1
• net.java.sezpoz:sezpoz 1.13
• org.apache.ant:ant 1.10.15
• org.apache.commons:commons-fileupload2 2.0.0-M5
• org.apache.commons:commons-fileupload2-core 2.0.0-M5
• org.apache.commons:commons-fileupload2-distribution 2.0.0-M5
• org.apache.commons:commons-fileupload2-jakarta-servlet5 2.0.0-M5
• org.apache.commons:commons-fileupload2-jakarta-servlet6 2.0.0-M5
• org.apache.commons:commons-fileupload2-javax 2.0.0-M5
• org.apache.commons:commons-fileupload2-portlet 2.0.0-M5
• org.codehaus.groovy:groovy-all 2.4.21
• org.jenkins-ci:annotation-indexer 1.213.v92788b_1f0a_21
• org.jenkins-ci:commons-jelly 1.1-jenkins-20250731
• org.jenkins-ci:commons-jelly-tags-fmt 1.1-jenkins-20250731
• org.jenkins-ci:commons-jelly-tags-xml 1.1-jenkins-20250731
• org.jenkins-ci:commons-jexl 1.1-jenkins-20111212
• org.jenkins-ci:crypto-util 1.11
• org.jenkins-ci:memory-monitor 1.13
• org.jenkins-ci:symbol-annotation 1.26
• org.jenkins-ci:task-reactor 1.10
• org.jenkins-ci:version-number 1.14
• org.jvnet.hudson:commons-jelly-tags-define 1.1-jenkins-20250731
• org.jvnet.localizer:localizer 1.31
• org.jvnet.winp:winp 1.31
• org.kohsuke:windows-package-checker 1.2
• org.kohsuke.metainf-services:metainf-services 1.11
• org.kohsuke.stapler:json-lib 2.4-jenkins-15
• org.kohsuke.stapler:stapler 2076.v1b_a_c12445eb_e → [Updates: 2078.v086a_0a_0535dc]
• org.kohsuke.stapler:stapler-adjunct-codemirror 1.3
• org.kohsuke.stapler:stapler-groovy 2076.v1b_a_c12445eb_e → [Updates: 2078.v086a_0a_0535dc]
• org.ow2.asm:asm 9.9.1
• commons-logging:commons-logging 1.3.5 → [Updates: 1.3.6]

cli/pom.xml (5)

• org.apache.sshd:sshd-common 2.17.1
• org.apache.sshd:sshd-core 2.17.1
• org.bouncycastle:bcprov-jdk18on 1.83
• org.glassfish.tyrus.bundles:tyrus-standalone-client-jdk 2.2.2
• org.apache.maven.plugins:maven-shade-plugin 3.6.2

core/pom.xml (5)

• org.xmlunit:xmlunit-bom 2.11.0
• jline:jline 2.14.6
• xpp3:xpp3 1.1.4c
• org.jenkins-ci:core-annotation-processors 59.ve181f58722c6
• com.sun.winsw:winsw 2.9.0

coverage/pom.xml

pom.xml (17)

• org.antlr:antlr4-runtime 4.13.2
• org.jenkins-ci.main:remoting 3355.v388858a_47b_33
• org.kohsuke:access-modifier-annotation 1.35
• io.jenkins.tools:bridge-method-annotation 1.32
• org.jenkins-ci:jenkins 2.1328.vfd10e2339a_19
• org.apache.maven.plugins:maven-jarsigner-plugin 3.1.0
• org.kohsuke:access-modifier-checker 1.35
• org.jvnet.hudson.tools:maven-encoding-plugin 1.1
• io.jenkins.tools:bridge-method-injector 1.32
• org.antlr:antlr4-maven-plugin 4.13.2
• com.puppycrawl.tools:checkstyle 13.3.0
• org.jacoco:jacoco-maven-plugin 0.8.14
• com.github.eirslett:frontend-maven-plugin 2.0.0
• com.github.eirslett:frontend-maven-plugin 2.0.0
• com.github.eirslett:frontend-maven-plugin 2.0.0
• org.jenkins-ci:winstone 8.1033.v23d2f156e821 → [Updates: 8.1034.v0b_9170f90e17]
• org.jenkins-ci:winstone 8.1033.v23d2f156e821 → [Updates: 8.1034.v0b_9170f90e17]

test/pom.xml (32)

• io.jenkins.plugins:caffeine-api 3.2.3-194.v31a_b_f7a_b_5a_81
• io.jenkins.plugins:commons-lang3-api 3.20.0-109.ve43756e2d2b_4
• io.jenkins.plugins:commons-text-api 1.15.0-218.va_61573470393
• io.jenkins.plugins:font-awesome-api 7.2.0-965.ve3840b_696418
• io.jenkins.plugins:ionicons-api 94.vcc3065403257
• io.jenkins.plugins:javax-activation-api 1.2.0-8
• io.jenkins.plugins:plugin-util-api 6.1192.v30fe6e2837ff
• org.jenkins-ci.plugins:ant 520.vd082ecfb_16a_9
• org.jenkins-ci.plugins:bouncycastle-api 2.30.1.83-289.v8426fcd19371
• org.jenkins-ci.plugins:display-url-api 2.217.va_6b_de84cc74b_
• org.jenkins-ci.plugins:scm-api 728.vc30dcf7a_0df5
• org.jenkins-ci.plugins:script-security 1399.ve6a_66547f6e1
• org.jenkins-ci.plugins.workflow:workflow-api 1398.v67030756d3fb_
• org.jenkins-ci.plugins.workflow:workflow-step-api 710.v3e456cc85233
• org.jenkins-ci.plugins.workflow:workflow-support 1015.v785e5a_b_b_8b_22
• io.jenkins.plugins:javax-mail-api 1.6.2-11
• org.awaitility:awaitility 4.3.0
• org.jenkins-ci.main:jenkins-test-harness 2555.vfe887ed7e86f
• org.jenkins-ci.main:jenkins-test-harness-tools 2.2
• org.jenkins-ci.modules:instance-identity 203.v15e81a_1b_7a_38
• org.jenkins-ci.plugins:antisamy-markup-formatter 173.v680e3a_b_69ff3
• org.jenkins-ci.plugins:cloudbees-folder 6.1079.vc0975c2de294
• org.jenkins-ci.plugins:credentials 1491.v6d6145e96e1c
• org.jenkins-ci.plugins:junit 1402.va_87fd3d15dc3
• org.jenkins-ci.plugins:mailer 525.v2458b_d8a_1a_71
• org.jenkins-ci.plugins:matrix-auth 3.2.9
• org.jenkins-ci.plugins:matrix-project 870.v9db_fcfc2f45b_
• org.jenkins-ci.plugins:structs 362.va_b_695ef4fdf9
• org.jenkins-ci.plugins:variant 70.va_d9f17f859e0
• io.jenkins.plugins:design-library 417.vce0571393f5b_
• io.jenkins.plugins:prism-api 1.30.0-703.v116fb_3b_5b_b_a_a_
• io.jenkins.plugins:bootstrap5-api 5.3.8-895.v4d0d8e47fea_d

war/pom.xml (48)

• org.jenkins-ci.plugins:display-url-api 2.217.va_6b_de84cc74b_
• org.jenkins-ci.plugins:mailer 525.v2458b_d8a_1a_71
• org.jenkins-ci.plugins:matrix-auth 3.2.9
• org.jenkins-ci.plugins:antisamy-markup-formatter 173.v680e3a_b_69ff3
• org.jenkins-ci.plugins:matrix-project 870.v9db_fcfc2f45b_
• org.jenkins-ci.plugins:script-security 1399.ve6a_66547f6e1
• org.jenkins-ci.plugins:junit 1402.va_87fd3d15dc3
• org.jenkins-ci.plugins.workflow:workflow-api 1398.v67030756d3fb_
• io.jenkins.plugins:plugin-util-api 6.1192.v30fe6e2837ff
• io.jenkins.plugins:bootstrap5-api 5.3.8-895.v4d0d8e47fea_d
• io.jenkins.plugins:checks-api 402.vca_263b_f200e3
• io.jenkins.plugins:prism-api 1.30.0-703.v116fb_3b_5b_b_a_a_
• org.jenkins-ci.plugins.workflow:workflow-support 1015.v785e5a_b_b_8b_22
• org.jenkins-ci.plugins:jackson2-api 2.21.1-428.vf8dd988fa_d8d
• io.jenkins.plugins:jackson3-api 3.1.0-64.v37e742c35905
• io.jenkins.plugins:snakeyaml-engine-api 3.0.1-5.vd98ea_ff3b_92e
• io.jenkins.plugins:echarts-api 6.0.0-1165.vd1283a_3e37d4
• io.jenkins.plugins:eddsa-api 0.3.0.1-29.v67e9a_1c969b_b_
• io.jenkins.plugins:snakeyaml-api 2.5-149.v72471e9c6371
• io.jenkins.plugins:jakarta-xml-bind-api 4.0.6-12.vb_1833c1231d3
• io.jenkins.plugins:caffeine-api 3.2.3-194.v31a_b_f7a_b_5a_81
• io.jenkins.plugins:jquery3-api 3.7.1-619.vdb_10e002501a_
• io.jenkins.plugins:font-awesome-api 7.2.0-965.ve3840b_696418
• org.jenkins-ci.plugins.workflow:workflow-step-api 710.v3e456cc85233
• org.jenkins-ci.plugins:scm-api 728.vc30dcf7a_0df5
• org.jenkins-ci.plugins:structs 362.va_b_695ef4fdf9
• org.jenkins-ci.plugins:bouncycastle-api 2.30.1.83-289.v8426fcd19371
• org.jenkins-ci.plugins:command-launcher 123.v37cfdc92ef67
• org.jenkins-ci.plugins:jdk-tool 83.v417146707a_3d
• io.jenkins.plugins:jaxb 2.3.9-143.v5979df3304e6
• org.jenkins-ci.modules:sshd 3.384.vc89b_5e138cf9
• org.jenkins-ci.plugins:trilead-api 2.284.v1974ea_324382
• io.jenkins.plugins:javax-activation-api 1.2.0-8
• io.jenkins.plugins:javax-mail-api 1.6.2-11
• org.jenkins-ci.modules:instance-identity 203.v15e81a_1b_7a_38
• org.jenkins-ci.plugins:apache-httpcomponents-client-4-api 4.5.14-269.vfa_2321039a_83
• io.jenkins.plugins:asm-api 9.9.1-189.vb_5ef2964da_91
• io.jenkins.plugins:commons-lang3-api 3.20.0-109.ve43756e2d2b_4
• io.jenkins.plugins:commons-text-api 1.15.0-218.va_61573470393
• io.jenkins.plugins:gson-api 2.13.2-173.va_a_092315913c
• io.jenkins.plugins:ionicons-api 94.vcc3065403257
• io.jenkins.plugins:jakarta-activation-api 2.1.4-1
• io.jenkins.plugins:jakarta-mail-api 2.1.5-1
• io.jenkins.plugins:json-api 20250517-173.v596efb_962a_31
• io.jenkins.plugins.mina-sshd-api:mina-sshd-api-common 2.16.0-167.va_269f38cc024
• io.jenkins.plugins.mina-sshd-api:mina-sshd-api-core 2.16.0-167.va_269f38cc024
• io.jenkins.lib:support-log-formatter 123.v72513b_f61500
• org.eclipse.jetty.ee9:jetty-ee9-maven-plugin 12.1.6 → [Updates: 12.1.7]

websocket/jetty12-ee9/pom.xml

websocket/spi/pom.xml

npm (1)

package.json (37)

• handlebars 4.7.8
• hotkeys-js 3.12.2 → [Updates: 3.13.15, 4.0.2]
• jquery 4.0.0
• lodash 4.17.23
• sortablejs 1.15.7
• tippy.js 6.3.7
• window-handle 1.0.1
• @babel/cli 7.28.6
• @babel/core 7.29.0
• @babel/preset-env 7.29.0
• @eslint/js 10.0.1
• babel-loader 10.0.0 → [Updates: 10.1.0]
• clean-webpack-plugin 4.0.0
• css-loader 7.1.4
• css-minimizer-webpack-plugin 7.0.4 → [Updates: 8.0.0]
• eslint 10.0.2 → [Updates: 10.0.3]
• eslint-config-prettier 10.1.8
• eslint-formatter-checkstyle 9.0.1
• globals 17.4.0
• handlebars-loader 1.7.3
• mini-css-extract-plugin 2.10.0
• postcss 8.5.6 → [Updates: 8.5.8]
• postcss-loader 8.2.1
• postcss-preset-env 11.2.0
• postcss-scss 4.0.9
• prettier 3.8.1
• sass 1.97.3
• sass-loader 16.0.7
• style-loader 4.0.0
• stylelint 17.4.0
• stylelint-checkstyle-reporter 1.1.1
• stylelint-config-standard-scss 17.0.0
• webpack 5.105.4
• webpack-cli 6.0.1
• webpack-remove-empty-scripts 1.1.1
• node >=24.0.0
• yarn 4.12.0

regex (5)

ath.sh (1)

• jenkins/ath 6587.v2a_7493c89346

core/src/site/site.xml (1)

• lit 3.3.2

core/src/site/site.xml (1)

• @webcomponents/webcomponentsjs 2.8.0

core/src/site/site.xml (1)

• org.apache.maven.skins:maven-fluido-skin 2.1.0

pom.xml (1)

• node 24.14.0

renovate-config-presets (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository