fix(deps): update all dependencies

renovate[bot] · web-flow · commit 975173645060 · 2025-10-18T14:12:22.000Z
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
@@ -16,7 +16,7 @@ jobs:
             - name: Checkout
               uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-            - uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+            - uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
             - name: Setup Java
               uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -44,7 +44,7 @@ jobs:
           # https://help.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
           # https://github.community/t/action-does-not-trigger-another-on-push-tag-action/17148/8
           token: ${{ steps.generate_github_token.outputs.token }}
-      - uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+      - uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
       - name: Setup Java
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
@@ -145,7 +145,7 @@ jobs:
         run: ./gradlew codeCoverageReport
 
       - name: Send code coverage report to Codecov.io
-        uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
+        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
         with:
             token: ${{ secrets.CODECOV_TOKEN }}
   docs:
@@ -167,7 +167,7 @@ jobs:
         with:
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+      - uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
       - name: Setup Java
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
@@ -195,6 +195,6 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Generate and submit dependency graph
         if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: gradle/actions/dependency-submission@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+        uses: gradle/actions/dependency-submission@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
         with:
           github-token: ${{ steps.generate_github_token.outputs.token }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -50,11 +50,11 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-    -   uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+    -   uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+      uses: github/codeql-action/init@42213152a85ae7569bdb6bec7bcd74cd691bfe41 # v3.30.9
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+      uses: github/codeql-action/autobuild@42213152a85ae7569bdb6bec7bcd74cd691bfe41 # v3.30.9
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+      uses: github/codeql-action/analyze@42213152a85ae7569bdb6bec7bcd74cd691bfe41 # v3.30.9
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/create-pr.yml b/.github/workflows/create-pr.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+      - uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
       - uses: jenschude/auto-create-pr-action@a5369414c74963e6ec065dab49066d3711b8c1db # v0.3.2
         if: github.ref_name == 'gen-sdk-updates'
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
@@ -54,7 +54,7 @@ jobs:
           distribution: 'temurin'
           java-version: '17'
 
-      - uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+      - uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
       - name: Setup Graphviz
         uses: ts-graphviz/setup-graphviz@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c # v2.0.2
diff --git a/.github/workflows/release-snapshot.yml b/.github/workflows/release-snapshot.yml
@@ -26,7 +26,7 @@ jobs:
         with:
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+      - uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
       - name: Setup Java
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+      - uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
       - name: Setup Java
         uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
@@ -75,7 +75,7 @@ jobs:
             ref: main
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1
+      - uses: gradle/actions/wrapper-validation@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
 
       - run: ./gradlew -Pversion=$REF_NAME writeVersionToExamples writeVersionToReadme setVersion nextMinorVersion snapshotVersion
         env:
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -29,14 +29,14 @@ jobs:
 
         steps:
             - name: Checkout
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+              uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
               with:
                   persist-credentials: false
 
             - name: Run Semgrep
               run: semgrep scan --sarif --output=semgrep.sarif --config=p/auto --config=p/dockerfile --config=p/typescript --config=p/javascript --config=p/java --metrics=off --verbose
             - name: Upload SARIF file for GitHub Advanced Security Dashboard
-              uses: github/codeql-action/upload-sarif@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+              uses: github/codeql-action/upload-sarif@42213152a85ae7569bdb6bec7bcd74cd691bfe41 # v3.30.9
               with:
                   sarif_file: semgrep.sarif
               if: always()
diff --git a/build.gradle b/build.gradle
@@ -66,13 +66,13 @@ allprojects {
 
     configurations {
         taglet {
-            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2025.4")
+            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2025.9")
         }
     }
 
     dependencies {
         taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3'
-        taglet 'com.google.guava:guava:33.4.8-jre'
+        taglet 'com.google.guava:guava:33.5.0-jre'
         taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0'
     }
 }
diff --git a/commercetools/commercetools-apachehttp-client/build.gradle b/commercetools/commercetools-apachehttp-client/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "org.apache.httpcomponents.client5:httpclient5:5.5" version {
+    api "org.apache.httpcomponents.client5:httpclient5:5.5.1" version {
         strictly "[5.4.4,5.99999]"
         prefer "5.5"
     }
diff --git a/commercetools/commercetools-async-http-client/build.gradle b/commercetools/commercetools-async-http-client/build.gradle
@@ -3,10 +3,10 @@ dependencies {
     api project(":rmf:rmf-java-base")
     api "org.asynchttpclient:async-http-client:2.12.4"
     api commons.io version commons.io_version
-    api "io.netty:netty-codec:4.2.2.Final"
-    api "io.netty:netty-codec-http:4.2.2.Final"
-    api "io.netty:netty-codec-socks:4.2.2.Final"
-    api "io.netty:netty-handler-proxy:4.2.2.Final"
-    api "io.netty:netty-handler:4.2.2.Final"
+    api "io.netty:netty-codec:4.2.7.Final"
+    api "io.netty:netty-codec-http:4.2.7.Final"
+    api "io.netty:netty-codec-socks:4.2.7.Final"
+    api "io.netty:netty-handler-proxy:4.2.7.Final"
+    api "io.netty:netty-handler:4.2.7.Final"
     implementation javax.validation
 }
diff --git a/commercetools/commercetools-graphql-api/build.gradle b/commercetools/commercetools-graphql-api/build.gradle
@@ -1,7 +1,7 @@
 import com.commercetools.sdk.plugins.GraphQLPlugin
 
 plugins {
-    id "com.netflix.dgs.codegen" version "8.1.0"
+    id "com.netflix.dgs.codegen" version "8.1.1"
 }
 
 apply plugin:'com.netflix.dgs.codegen'
@@ -22,7 +22,7 @@ dependencies {
     api jackson_core.databind
     api jackson_core.core
     api jackson_core.datatype
-    api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.1.0'
+    api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.1.1'
 
 }
 
diff --git a/commercetools/commercetools-monitoring-datadog/build.gradle b/commercetools/commercetools-monitoring-datadog/build.gradle
@@ -1,7 +1,7 @@
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation "com.datadoghq:java-dogstatsd-client:4.4.4"
-    implementation "com.datadoghq:datadog-api-client:2.38.0"
+    implementation "com.datadoghq:java-dogstatsd-client:4.4.5"
+    implementation "com.datadoghq:datadog-api-client:2.44.0"
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }
diff --git a/commercetools/commercetools-monitoring-newrelic/build.gradle b/commercetools/commercetools-monitoring-newrelic/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'com.newrelic.agent.java:newrelic-api:8.21.0'
+    implementation 'com.newrelic.agent.java:newrelic-api:8.24.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }
diff --git a/commercetools/commercetools-monitoring-opentelemetry/build.gradle b/commercetools/commercetools-monitoring-opentelemetry/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.51.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.55.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }
diff --git a/commercetools/commercetools-okhttp-client3/build.gradle b/commercetools/commercetools-okhttp-client3/build.gradle
@@ -12,7 +12,7 @@ jmh {
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    implementation "com.squareup.okio:okio:3.14.0"
+    implementation "com.squareup.okio:okio:3.16.2"
     api "com.squareup.okhttp3:okhttp:3.14.9" version {
         strictly "[3.0,3.99999]"
         prefer "3.14.9"
diff --git a/commercetools/commercetools-okhttp-client4/build.gradle b/commercetools/commercetools-okhttp-client4/build.gradle
@@ -15,7 +15,7 @@ dependencies {
         strictly '[4.0,4.99999]'
         prefer "4.12.0"
     }
-    implementation "com.squareup.okio:okio:3.14.0"
+    implementation "com.squareup.okio:okio:3.16.2"
 
     implementation javax.validation
 }
diff --git a/commercetools/commercetools-reactornetty-client/build.gradle b/commercetools/commercetools-reactornetty-client/build.gradle
@@ -2,8 +2,8 @@
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    api "io.projectreactor.netty:reactor-netty-http:1.2.8"
-    api "io.projectreactor.netty:reactor-netty-core:1.2.8"
+    api "io.projectreactor.netty:reactor-netty-http:1.2.11"
+    api "io.projectreactor.netty:reactor-netty-core:1.2.11"
 
     implementation javax.validation
 }
diff --git a/commercetools/commercetools-sdk-compat-v1/build.gradle b/commercetools/commercetools-sdk-compat-v1/build.gradle
@@ -21,8 +21,8 @@ dependencies {
     api project(':commercetools:commercetools-sdk-java-api')
     api ctsdkv1.client version ctsdkv1.version
     api ctsdkv1.models version ctsdkv1.version
-    api "io.netty:netty-codec:4.2.2.Final"
-    api "io.netty:netty-codec-http:4.2.2.Final"
+    api "io.netty:netty-codec:4.2.7.Final"
+    api "io.netty:netty-codec-http:4.2.7.Final"
 
     jmhImplementation project(':commercetools:commercetools-async-http-client')
     jmhImplementation project(':commercetools:commercetools-apachehttp-client')
diff --git a/common-plugins/build.gradle b/common-plugins/build.gradle
@@ -1,7 +1,7 @@
 plugins {
     id 'java-gradle-plugin'
     id 'idea'
-    id 'org.jetbrains.kotlin.jvm' version "2.2.0"
+    id 'org.jetbrains.kotlin.jvm' version "2.2.20"
 }
 
 repositories {
@@ -30,7 +30,7 @@ gradlePlugin {
 
 dependencies {
     implementation project(path: ':javaparser', configuration: 'shadow')
-    implementation "com.google.code.gson:gson:2.13.1"
+    implementation "com.google.code.gson:gson:2.13.2"
     implementation 'com.squareup:javapoet:1.13.0'
-    implementation 'com.google.guava:guava:33.4.8-jre'
+    implementation 'com.google.guava:guava:33.5.0-jre'
 }
diff --git a/common-plugins/javaparser/build.gradle b/common-plugins/javaparser/build.gradle
@@ -15,5 +15,5 @@ shadowJar {
 }
 
 dependencies {
-    implementation 'com.github.javaparser:javaparser-core:3.27.0'
+    implementation 'com.github.javaparser:javaparser-core:3.27.1'
 }
diff --git a/gradle-scripts/extensions.gradle b/gradle-scripts/extensions.gradle
@@ -11,9 +11,9 @@ ext {
 
     commons = [
             lang3version: '3.17.0',
-            text: 'org.apache.commons:commons-text:1.13.1',
-            lang3: 'org.apache.commons:commons-lang3:3.18.0',
-            io: 'commons-io:commons-io:2.19.0',
+            text: 'org.apache.commons:commons-text:1.14.0',
+            lang3: 'org.apache.commons:commons-lang3:3.19.0',
+            io: 'commons-io:commons-io:2.20.0',
             io_version: {
                     strictly '[2.8.0,)'
                     prefer '2.16.1'
@@ -31,16 +31,16 @@ ext {
 
     jackson_core = [
             version: '2.19.0',
-            annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.19.1',
-            databind: 'com.fasterxml.jackson.core:jackson-databind:2.19.1',
-            core: 'com.fasterxml.jackson.core:jackson-core:2.19.1',
-            datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.1',
+            annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.20',
+            databind: 'com.fasterxml.jackson.core:jackson-databind:2.20.0',
+            core: 'com.fasterxml.jackson.core:jackson-core:2.20.0',
+            datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.20.0',
     ]
 
     google = [
             findbugsversion: '3.0.2',
             findbugs: 'com.google.code.findbugs:jsr305:3.0.2',
-            gson: 'com.google.code.gson:gson:2.13.1',
+            gson: 'com.google.code.gson:gson:2.13.2',
     ]
 
     graphql = [
@@ -56,14 +56,14 @@ ext {
     ]
 
     junit = [
-            junit: 'org.junit.jupiter:junit-jupiter:5.13.2',
+            junit: 'org.junit.jupiter:junit-jupiter:5.14.0',
             jsonassert: 'org.skyscreamer:jsonassert:1.5.3',
-            assertj: 'org.assertj:assertj-core:3.27.3'
+            assertj: 'org.assertj:assertj-core:3.27.6'
     ]
 
     mockito = [
             inline: 'org.mockito:mockito-inline:5.2.0',
-            junit: 'org.mockito:mockito-junit-jupiter:5.18.0',
+            junit: 'org.mockito:mockito-junit-jupiter:5.20.0',
     ]
 
     failsafe = [
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.2-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.3-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME
diff --git a/package.json b/package.json
@@ -9,10 +9,10 @@
     "node": ">=14.15",
     "npm": ">=5"
   },
-  "packageManager": "yarn@4.9.2",
+  "packageManager": "yarn@4.10.3",
   "dependencies": {
     "husky": "9.1.7",
-    "lint-staged": "16.1.2"
+    "lint-staged": "16.2.4"
   },
   "scripts": {
     "postinstall": "husky install",
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -66,13 +66,13 @@ allprojects {`
`66`	`66`
`67`	`67`	`configurations {`
`68`	`68`	`taglet {`
`69`		`- resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2025.4")`
	`69`	`+ resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2025.9")`
`70`	`70`	`}`
`71`	`71`	`}`
`72`	`72`
`73`	`73`	`dependencies {`
`74`	`74`	`taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3'`
`75`		`- taglet 'com.google.guava:guava:33.4.8-jre'`
	`75`	`+ taglet 'com.google.guava:guava:33.5.0-jre'`
`76`	`76`	`taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0'`
`77`	`77`	`}`
`78`	`78`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`
`2`	`2`	`dependencies {`
`3`	`3`	`api project(":rmf:rmf-java-base")`
`4`		`- api "org.apache.httpcomponents.client5:httpclient5:5.5" version {`
	`4`	`+ api "org.apache.httpcomponents.client5:httpclient5:5.5.1" version {`
`5`	`5`	`strictly "[5.4.4,5.99999]"`
`6`	`6`	`prefer "5.5"`
`7`	`7`	`}`