Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/maven-branch-ci.yml (github-actions)
• .github/workflows/maven-master-cicd.yml (github-actions)
• pom.xml (maven)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Pin all dependency versions except peerDependencies.
• Special rules covering major version updates.
• Rules governing github actions.
• Weekly schedule on early Monday mornings.
• Base Renovate configuration for Expedia Group projects
• Run Renovate on following schedule: before 4am on Monday

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 54 Pull Requests:

feat(deps): update provided junit:junit from v4.12 to v4.13.1 [security]

• Branch name: renovate/maven-junit-junit-vulnerability
• Merge into: master
• Upgrade junit:junit to 4.13.1

feat(deps): update provided org.jenkins-ci.main:jenkins-core from v2.102 to v2.319.2 [security]

• Branch name: renovate/maven-org.jenkins-ci.main-jenkins-core-vulnerability
• Merge into: master
• Upgrade org.jenkins-ci.main:jenkins-core to 2.319.2

feat(deps): update provided org.jenkins-ci.plugins.workflow:workflow-cps from v2.36 to v2.79 [security]

• Branch name: renovate/maven-org.jenkins-ci.plugins.workflow-workflow-cps-vulnerability
• Merge into: master
• Upgrade org.jenkins-ci.plugins.workflow:workflow-cps to 2.79

fix(deps): update build org.apache.maven.plugins:maven-surefire-plugin from v2.22.0 to v2.22.2

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/surefire.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 2.22.2

fix(deps): update compile io.github.classgraph:classgraph from v4.8.104 to v4.8.175

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/io.github.classgraph-classgraph-4.x
• Merge into: master
• Upgrade io.github.classgraph:classgraph to 4.8.175

fix(deps): update slf4j monorepo from v1.7.25 to v1.7.36

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/slf4j-monorepo
• Merge into: master
• Upgrade org.slf4j:slf4j-api to 1.7.36
• Upgrade org.slf4j:jcl-over-slf4j to 1.7.36
• Upgrade org.slf4j:log4j-over-slf4j to 1.7.36

feat(deps): update build org.apache.maven.doxia:doxia-module-markdown from v1.3 to v1.12.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.apache.maven.doxia-doxia-module-markdown-1.x
• Merge into: master
• Upgrade org.apache.maven.doxia:doxia-module-markdown to 1.12.0

feat(deps): update build org.apache.maven.plugins:maven-assembly-plugin from v3.1.0 to v3.7.1

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/assembly.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-assembly-plugin to 3.7.1

feat(deps): update build org.apache.maven.plugins:maven-clean-plugin from v3.1.0 to v3.4.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/clean.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-clean-plugin to 3.4.0

feat(deps): update build org.apache.maven.plugins:maven-compiler-plugin from v3.8.0 to v3.13.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/compiler.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.13.0

feat(deps): update build org.apache.maven.plugins:maven-enforcer-plugin from v3.0.0-m2 to v3.5.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/enforcer.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-enforcer-plugin to 3.5.0

feat(deps): update build org.apache.maven.plugins:maven-gpg-plugin from v1.5 to v1.6

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/gpg.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-gpg-plugin to 1.6

feat(deps): update build org.apache.maven.plugins:maven-invoker-plugin from v3.2.1 to v3.8.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/invoker.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-invoker-plugin to 3.8.0

feat(deps): update build org.apache.maven.plugins:maven-jar-plugin from v3.1.0 to v3.4.2

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/jar.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-jar-plugin to 3.4.2

feat(deps): update build org.apache.maven.plugins:maven-javadoc-plugin from v3.0.1 to v3.10.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/javadoc.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-javadoc-plugin to 3.10.0

feat(deps): update build org.apache.maven.plugins:maven-resources-plugin from v3.1.0 to v3.3.1

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/resources.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-resources-plugin to 3.3.1

feat(deps): update build org.apache.maven.plugins:maven-scm-plugin from v1.11.2 to v1.13.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/scm.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-scm-plugin to 1.13.0

feat(deps): update build org.apache.maven.plugins:maven-site-plugin from v3.7.1 to v3.20.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/site.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-site-plugin to 3.20.0

feat(deps): update build org.apache.maven.plugins:maven-source-plugin from v2.2.1 to v2.4

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/source.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-source-plugin to 2.4

feat(deps): update build org.codehaus.gmavenplus:gmavenplus-plugin from v1.6.1 to v1.13.1

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/groovy.gmaven.pluginversion
• Merge into: master
• Upgrade org.codehaus.gmavenplus:gmavenplus-plugin to 1.13.1

feat(deps): update build org.sonatype.plugins:nexus-staging-maven-plugin from v1.6.7 to v1.7.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/nexusstaging.pluginversion
• Merge into: master
• Upgrade org.sonatype.plugins:nexus-staging-maven-plugin to 1.7.0

feat(deps): update compile cglib:cglib-nodep from v3.2.7 to v3.3.0

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/cglib.version
• Merge into: master
• Upgrade cglib:cglib-nodep to 3.3.0

feat(deps): update compile org.codehaus.groovy:groovy-all from v2.4.11 to v2.5.23

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/groovy-monorepo
• Merge into: master
• Upgrade org.codehaus.groovy:groovy-all to 2.5.23

feat(deps): update compile org.reflections:reflections from v0.9.12 to v0.10.2

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.reflections-reflections-0.x
• Merge into: master
• Upgrade org.reflections:reflections to 0.10.2

feat(deps): update compile org.spockframework:spock-core from v1.1-groovy-2.4 to v1.3-groovy-2.5

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/spock-monorepo
• Merge into: master
• Upgrade org.spockframework:spock-core to 1.3-groovy-2.5

feat(deps): update log.logback.version from v1.2.3 to v1.5.8

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/log.logback.version
• Merge into: master
• Upgrade ch.qos.logback:logback-classic to 1.5.8
• Upgrade ch.qos.logback:logback-core to 1.5.8

feat(deps): update provided org.jenkins-ci.plugins.workflow:workflow-step-api from v2.10 to v2.24

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/jenkins.workflow.step.version
• Merge into: master
• Upgrade org.jenkins-ci.plugins.workflow:workflow-step-api to 2.24

feat(deps): update provided org.jenkins-ci:symbol-annotation from v1.10 to v1.24

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/jenkins.symbol.version
• Merge into: master
• Upgrade org.jenkins-ci:symbol-annotation to 1.24

feat(deps): update test org.jenkins-ci.plugins.workflow:workflow-basic-steps from v2.6 to v2.24

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.jenkins-ci.plugins.workflow-workflow-basic-steps-2.x
• Merge into: master
• Upgrade org.jenkins-ci.plugins.workflow:workflow-basic-steps to 2.24

feat(deps): update test org.jenkins-ci.plugins.workflow:workflow-durable-task-step from v2.17 to v2.40

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.jenkins-ci.plugins.workflow-workflow-durable-task-step-2.x
• Merge into: master
• Upgrade org.jenkins-ci.plugins.workflow:workflow-durable-task-step to 2.40

feat(deps): update test org.jenkins-ci.plugins:docker-workflow from v1.14 to v1.29

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.jenkins-ci.plugins-docker-workflow-1.x
• Merge into: master
• Upgrade org.jenkins-ci.plugins:docker-workflow to 1.29

feat(deps): update test org.jenkins-ci.plugins:pipeline-stage-step from v2.3 to v2.5

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.jenkins-ci.plugins-pipeline-stage-step-2.x
• Merge into: master
• Upgrade org.jenkins-ci.plugins:pipeline-stage-step to 2.5

chore(deps): update actions/checkout action from vv1 to v4

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: master
• Upgrade actions/checkout to v4

chore(deps): update actions/setup-java action from vv1 to v4

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/actions-setup-java-4.x
• Merge into: master
• Upgrade actions/setup-java to v4

feat(deps): update build org.apache.maven.plugins:maven-deploy-plugin from v2.8.2 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-deploy.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-deploy-plugin to 3.1.3

feat(deps): update build org.apache.maven.plugins:maven-gpg-plugin from v1.5 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-gpg.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-gpg-plugin to 3.2.6

feat(deps): update build org.apache.maven.plugins:maven-install-plugin from v2.5.2 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-install.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-install-plugin to 3.1.3

feat(deps): update build org.apache.maven.plugins:maven-release-plugin from v2.5.3 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-release.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-release-plugin to 3.1.1

feat(deps): update build org.apache.maven.plugins:maven-scm-plugin from v1.11.2 to v2

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-scm.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-scm-plugin to 2.1.0

feat(deps): update build org.apache.maven.plugins:maven-scm-publish-plugin from v1.1 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.apache.maven.plugins-maven-scm-publish-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-scm-publish-plugin to 3.3.0

feat(deps): update build org.apache.maven.plugins:maven-source-plugin from v2.2.1 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-source.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-source-plugin to 3.3.1

feat(deps): update build org.apache.maven.plugins:maven-surefire-plugin from v2.22.0 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-surefire.pluginversion
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 3.5.0

feat(deps): update build org.codehaus.gmavenplus:gmavenplus-plugin from v1.6.1 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-groovy.gmaven.pluginversion
• Merge into: master
• Upgrade org.codehaus.gmavenplus:gmavenplus-plugin to 3.0.2

feat(deps): update build org.codehaus.mojo:exec-maven-plugin from v1.6.0 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-exec.pluginversion
• Merge into: master
• Upgrade org.codehaus.mojo:exec-maven-plugin to 3.4.1

feat(deps): update compile org.codehaus.groovy:groovy-all from v2.4.11 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-groovy-monorepo
• Merge into: master
• Upgrade org.codehaus.groovy:groovy-all to 3.0.22

feat(deps): update compile org.objenesis:objenesis from v2.6 to v3

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-objenesis.version
• Merge into: master
• Upgrade org.objenesis:objenesis to 3.4

feat(deps): update compile org.spockframework:spock-core from v1.1-groovy-2.4 to v2

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-spock-monorepo
• Merge into: master
• Upgrade org.spockframework:spock-core to 2.3-groovy-4.0

feat(deps): update provided javax.servlet:javax.servlet-api from v3.1.0 to v4

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-jenkins.servlet.version
• Merge into: master
• Upgrade javax.servlet:javax.servlet-api to 4.0.1

feat(deps): update provided org.jenkins-ci.plugins.workflow:workflow-step-api from v2.10 to v678

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-jenkins.workflow.step.version
• Merge into: master
• Upgrade org.jenkins-ci.plugins.workflow:workflow-step-api to 678.v3ee58b_469476

feat(deps): update slf4j monorepo from v1.7.25 to v2 (major)

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/major-slf4j-monorepo
• Merge into: master
• Upgrade org.slf4j:slf4j-api to 2.0.16
• Upgrade org.slf4j:jcl-over-slf4j to 2.0.16
• Upgrade org.slf4j:log4j-over-slf4j to 2.0.16

feat(deps): update test org.jenkins-ci.plugins.workflow:workflow-basic-steps from v2.6 to v1058

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.jenkins-ci.plugins.workflow-workflow-basic-steps-1058.x
• Merge into: master
• Upgrade org.jenkins-ci.plugins.workflow:workflow-basic-steps to 1058.vcb_fc1e3a_21a_9

feat(deps): update test org.jenkins-ci.plugins.workflow:workflow-durable-task-step from v2.17 to v1371

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.jenkins-ci.plugins.workflow-workflow-durable-task-step-1371.x
• Merge into: master
• Upgrade org.jenkins-ci.plugins.workflow:workflow-durable-task-step to 1371.vb_7cec8f3b_95e

feat(deps): update test org.jenkins-ci.plugins:docker-workflow from v1.14 to v580

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.jenkins-ci.plugins-docker-workflow-580.x
• Merge into: master
• Upgrade org.jenkins-ci.plugins:docker-workflow to 580.vc0c340686b_54

feat(deps): update test org.jenkins-ci.plugins:pipeline-stage-step from v2.3 to v312

• Schedule: ["before 4am on Monday"]
• Branch name: renovate/org.jenkins-ci.plugins-pipeline-stage-step-312.x
• Merge into: master
• Upgrade org.jenkins-ci.plugins:pipeline-stage-step to 312.v8cd10304c27a_

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.