Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (2)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
mise	aqua:koalaman/shellcheck	2025-08-04
npm	@prettier/plugin-xml	2025-07-08

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• build(deps): update dependency aqua:rvben/rumdl to v0.2.65
• build(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.10.4.1
• build(deps): update nginx docker tag to v1.31.5
• build(deps): update dependency aqua:mvdan/sh to v3.14.0
• build(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
• build(deps): update junit-framework monorepo to v6.1.3 (org.junit.platform:junit-platform-reporting, org.junit:junit-bom)
• build(deps): update actions/checkout action to v7
• build(deps): update actions/setup-java action to v6
• build(deps): update dependency com.puppycrawl.tools:checkstyle to v14
• build(deps): update dependency io.rest-assured:rest-assured-bom to v6
• build(deps): update postgres docker tag to v18
• build(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• build(deps): update apache/kafka-native:latest docker digest to 2885898
• build(deps): update apache/kafka:latest docker digest to 77e3df9
• build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.4
• build(deps): update ghcr.io/diggsweden/wallet-provider docker tag to v0.1.3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• build(deps): update infrastructure images (postgres, traefik)

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

docker-compose (1)

docker-compose.yaml (18)

• ghcr.io/eu-digital-identity-wallet/eudi-srv-verifier-endpoint v0.11.0@sha256:2f2772b1df39a529f3683c7e82d10d03221b475e67da7b2d8cb1b9aebe6f71f9
• ghcr.io/eu-digital-identity-wallet/eudi-srv-trust-validator 0.2.2-alpha@sha256:9a828e2c0149ccd9fbd9ed98cb3f49fcc1ac92bbd827d3d4a35dca28598b2e70
• nginx 1.31.4-alpine-slim@sha256:1870de6d59aafee152589b64404556d2535922cdd998e6dac1c4888c938ed8f9 → [Updates: 1.31.5-alpine-slim]
• ghcr.io/diggsweden/wallet-provider v0.1.2@sha256:7af90ea1898e279aec04b0d8c9d8f853a99e1bd6b4882c3fa164a9a4fad44230 → [Updates: v0.1.3]
• ghcr.io/diggsweden/wallet-verifier-test-web 0.1.13@sha256:b0dbed4ef6569c9100d42c191e58d87c47f687a5df2899819d2f99d08aedc709
• ghcr.io/eu-digital-identity-wallet/eudi-srv-pid-issuer v0.11.0@sha256:90a8d77a27e3dca9fa83386d75400b30f53508c0cc59f7af08f1a44c4c3c394c
• postgres 16@sha256:95206741a5b214807675e14165369d05b93a9cf692223b616d07cca227e74b0b → [Updates: 18, 16]
• postgres 16@sha256:95206741a5b214807675e14165369d05b93a9cf692223b616d07cca227e74b0b → [Updates: 18, 16]
• ghcr.io/diggsweden/wallet-account v0.1.9@sha256:4709083d8693b4999685ead9241249c696baea64d08a650cc575d8a6f3fbe7a7
• valkey/valkey 9.1.1-alpine@sha256:ee91f7a174ac4d6a6b0685b3a60e321f0a9dbbb691f9b0e285be2ba1d1be8328 → [Updates: 9.1.2-alpine, 9.1.1-alpine]
• ghcr.io/diggsweden/wallet-client-gateway v0.6.9@sha256:cadc636ab102d8c4b1f1e69c1c55e216ced4dc65a870e9aab5dfe8ffdbe34760
• quay.io/keycloak/keycloak 26.7.1@sha256:f1f1f01e472c8a78df40d8f2a49a925274eda4d3d80d5f6edbb5c880ee3c01c6 → [Updates: 26.7.3]
• ghcr.io/diggsweden/wallet-r2ps/wallet-bff 0.0.0-dev-main-46bb7f9@sha256:4c4b7f4d73c9e528e83e692ff8a46448c73b359a8b2d33bcea015fe098ee1fb7
• ghcr.io/diggsweden/wallet-r2ps/hsm-worker 0.0.0-dev-main-46bb7f9@sha256:29b2ee806fd1773ce1838abdd1d8abf1a258b3dfc4da34b58603239b8d7c0b3a
• apache/kafka-native latest@sha256:777f2dddec6970003f1f27922a8c317d87140567b0537e801d35669ad9a81faf → [Updates: latest]
• apache/kafka latest@sha256:9516fb7634bad307d17c33b589fde9023003b0cb761374f500002b980a3149b9 → [Updates: latest]
• provectuslabs/kafka-ui latest@sha256:8f2ff02d64b0a7a2b71b6b3b3148b85f66d00ec20ad40c30bdcd415d46d31818
• traefik v3.6@sha256:31267173a15b4944e797a76ffd9c419707c8d8b32fe5b610f80cd0cfa05f372d → [Updates: v3.7]

github-actions (6)

.github/workflows/openssf-scorecard.yml (1)

• diggsweden/reusable-ci v2.8.3@617cb32268cb6aefdfa4117b4159d37e3b47d7b3

.github/workflows/pullrequest-workflow.yml (1)

• diggsweden/reusable-ci v2.8.3@617cb32268cb6aefdfa4117b4159d37e3b47d7b3

.github/workflows/release-workflow.yml (1)

• diggsweden/reusable-ci v2.8.3@617cb32268cb6aefdfa4117b4159d37e3b47d7b3

.github/workflows/reusable-integration.yml (4)

• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 → [Updates: v7.0.1]
• actions/setup-java v5.7.0@b6effb05e454b25005698d916606bdc6ffcbf961 → [Updates: v6.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/sandbox-test.yml (2)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-java v4.9.1@cf277c60eb25467037889841efdb72551f06f6c3 → [Updates: v6.0.0]

.github/workflows/test.yml (2)

• actions/checkout v4.4.0@11d5960a326750d5838078e36cf38b85af677262 → [Updates: v7.0.1]
• actions/setup-java v4.9.1@cf277c60eb25467037889841efdb72551f06f6c3 → [Updates: v6.0.0]

maven (1)

pom.xml (15)

• io.rest-assured:rest-assured-bom 5.5.7 → [Updates: 6.0.1]
• org.junit:junit-bom 6.0.3 → [Updates: 6.1.3]
• com.fasterxml.jackson:jackson-bom 2.22.2
• org.jsoup:jsoup 1.23.2
• org.junit.platform:junit-platform-reporting 6.0.3 → [Updates: 6.1.3]
• org.opentest4j.reporting:open-test-reporting-cli 0.2.7
• com.nimbusds:nimbus-jose-jwt 10.9.1
• org.postgresql:postgresql 42.7.13
• org.apache.maven.plugins:maven-surefire-plugin 3.5.6 → [Updates: 3.6.0]
• org.codehaus.mojo:exec-maven-plugin 3.6.3 → [Updates: 3.6.4]
• net.revelc.code.formatter:formatter-maven-plugin 2.29.0
• com.github.spotbugs:spotbugs-maven-plugin 4.10.4.0 → [Updates: 4.10.4.1]
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 12.3.1 → [Updates: 14.1.0]
• org.apache.maven.plugins:maven-pmd-plugin 3.28.0

mise (1)

.mise.toml (11)

• node 24
• java 25
• maven 3.9
• aqua:casey/just 1.58.0
• aqua:rhysd/actionlint 1.7.12
• aqua:zricethezav/gitleaks 8.30.1
• aqua:rvben/rumdl 0.2.62 → [Updates: 0.2.65]
• aqua:koalaman/shellcheck 0.11.0
• aqua:mvdan/sh 3.13.1 → [Updates: 3.14.0]
• aqua:google/yamlfmt 0.21.0
• pipx:reuse 6.2.0

npm (1)

package.json (2)

• @prettier/plugin-xml 3.4.2
• prettier 3.9.6

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository