Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: No releases satisfy vulnerabilityFixVersion
• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
maven	org.hibernate:hibernate-core

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency org.codehaus.plexus:plexus-archiver to v4.9.2
• Update dependency com.fasterxml.jackson.core:jackson-databind to v2.21.2
• Update dependency commons-codec:commons-codec to v1.22.0
• Update dependency commons-io:commons-io to v2.22.0
• Update dependency joda-time:joda-time to v2.14.1
• Update dependency org.apache.maven.scm:maven-scm-provider-gitexe to v2.2.1
• Update dependency org.hsqldb:hsqldb to v2.7.4
• Update dependency org.jasig.portal:uPortal-spring to v5.17.2
• Update dependency org.jvnet.jaxb2_commons:jaxb2-basics to v0.13.1
• Update dependency org.lesscss:lesscss-maven-plugin to v1.7.0.1.1
• Update actions/checkout action to v6
• Update actions/setup-java action to v5
• Update dependency com.sun.xml.ws:jaxws-rt to v4
• Update dependency jakarta.xml.ws:jakarta.xml.ws-api to v4
• Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3
• Update dependency org.apache.portals.pluto:pluto-taglib to v3
• Update dependency org.jasig.portlet.courses:courses-portlet-dao to v2
• Update dependency org.mnode.ical4j:ical4j to v4
• Update jaxb2basicsVersion (major) (org.jvnet.jaxb2_commons:jaxb2-basics, org.jvnet.jaxb2_commons:jaxb2-basics-runtime)
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package org.osaf:caldav4j: no-result, Failed to look up maven package slide:jakarta-slide-webdavlib: no-result.

Files affected: pom.xml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Replace dependency org.hibernate:hibernate-core with org.hibernate.orm:hibernate-core 7.3.2.Final [SECURITY]
• Update dependency com.sun.xml.bind:jaxb-impl to v2.3.9
• Update dependency commons-httpclient:commons-httpclient to v3.1-osgi
• Update dependency javax.portlet:portlet-api to v2.0-Draft32
• Update dependency net.sourceforge.nekohtml:nekohtml to v1.9.22-atlassian-5
• Update dependency xalan:serializer to v2.7.3-atlassian-hosted
• Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0
• Update dependency org.apache.maven.plugins:maven-release-plugin to v3.3.1
• Update dependency org.apache.maven.plugins:maven-war-plugin to v3.5.1
• Update dependency org.apache.maven.scm:maven-scm-api to v2.2.1
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

github-actions (1)

.github/workflows/CI.yml (2)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]

maven (1)

pom.xml (71)

• org.jasig.portlet:uportal-portlet-parent 48
• xalan:serializer 2.7.3 → [Updates: 2.7.3-atlassian-hosted]
• com.googlecode.cernunnos:cernunnos 1.4.0
• com.thoughtworks.xstream:xstream 1.4.21
• commons-codec:commons-codec 1.15 → [Updates: 1.22.0]
• commons-httpclient:commons-httpclient 3.1 → [Updates: 3.1-osgi]
• org.apache.httpcomponents:httpclient 4.5.14
• commons-io:commons-io 2.14.0 → [Updates: 2.22.0]
• org.hsqldb:hsqldb 2.3.2 → [Updates: 2.7.4]
• org.mnode.ical4j:ical4j 1.0.9 → [Updates: 4.2.5]
• javax.annotation:jsr250-api 1.0
• javax.script:groovy-engine 1.1
• javax.servlet:jstl 1.2
• javax.servlet:javax.servlet-api 4.0.1
• jcifs:jcifs 1.3.17
• joda-time:joda-time 2.12.2 → [Updates: 2.14.1]
• com.fasterxml.jackson.core:jackson-databind 2.13.4.2 → [Updates: 2.21.2]
• org.jasig.cas.client:cas-client-core 3.6.4
• org.jasig.portal:uPortal-spring 5.13.1 → [Updates: 5.17.2]
• org.jasig.resourceserver:resource-server-content 1.5.2
• org.jasig.resourceserver:resource-server-utils 1.5.2
• org.jasig.portal:uportal-search-api 4.3.1
• org.jasypt:jasypt-spring31 1.9.3
• org.hibernate:hibernate-core 3.6.10.Final → [Updates: 7.3.2.Final]
• org.hibernate:hibernate-tools 3.6.2.Final
• org.jasig.portlet.courses:courses-portlet-dao 1.0.1 → [Updates: 2.1.0]
• org.jasig.portlet.utils:portlet-form-resources 1.1.3
• org.jvnet.jaxb2_commons:jaxb2-basics-runtime 0.12.0 → [Updates: 2.0.12]
• org.mockito:mockito-core 5.8.0
• org.osaf:caldav4j 0.7
• org.owasp:antisamy 1.4
• org.springframework:spring-aop 4.3.30.RELEASE
• org.springframework:spring-orm 4.3.30.RELEASE
• org.springframework:spring-test 4.3.30.RELEASE
• org.springframework:spring-web 4.3.30.RELEASE
• org.springframework:spring-webmvc-portlet 4.3.30.RELEASE
• org.springframework.ws:spring-ws-core 2.4.7.RELEASE
• org.springframework.ws:spring-ws-security 2.4.7.RELEASE
• rome:rome 1.0
• slide:jakarta-slide-webdavlib 2.2pre1-httpclient-3.0
• xalan:serializer 2.7.3 → [Updates: 2.7.3-atlassian-hosted]
• xerces:xercesImpl 2.12.2
• javax.xml.bind:jaxb-api 2.3.1
• jakarta.xml.ws:jakarta.xml.ws-api 2.3.3 → [Updates: 4.0.3]
• com.sun.xml.ws:jaxws-rt 2.3.7 → [Updates: 4.0.4]
• net.sourceforge.nekohtml:nekohtml 1.9.22 → [Updates: 1.9.22-atlassian-5]
• org.springframework:spring-jdbc 4.3.30.RELEASE
• org.apache.portals.pluto:pluto-taglib 2.1.0-M3 → [Updates: 3.1.2]
• org.springframework:spring-context 4.3.30.RELEASE
• org.springframework:spring-context-support 4.3.30.RELEASE
• org.springframework:spring-beans 4.3.30.RELEASE
• org.apache.maven.plugins:maven-release-plugin 3.0.0-M7 → [Updates: 3.3.1]
• org.apache.maven.scm:maven-scm-api 2.0.0-M3 → [Updates: 2.2.1]
• org.apache.maven.scm:maven-scm-provider-gitexe 2.0.0-M3 → [Updates: 2.2.1]
• org.apache.maven.plugins:maven-surefire-plugin 2.22.2 → [Updates: 3.5.5]
• org.jasig.resourceserver:resource-server-plugin 1.5.2
• com.sun.xml.bind:jaxb-impl 2.3.3 → [Updates: 2.3.9]
• org.jvnet.jaxb2.maven2:maven-jaxb2-plugin 0.15.3
• org.jvnet.jaxb2_commons:jaxb2-basics 0.12.0 → [Updates: 0.13.1, 1.11.1-PUBLISHED-BY-MISTAKE]
• org.apache.maven.plugins:maven-war-plugin 3.4.0 → [Updates: 3.5.1]
• org.codehaus.plexus:plexus-archiver 4.9.1 → [Updates: 4.9.2]
• org.jasig.portal.maven:uportal-maven-plugin 1.0.1
• javax.servlet:javax.servlet-api 4.0.1
• javax.portlet:portlet-api 2.0 → [Updates: 2.0-Draft32]
• rhino:js 1.7R2
• org.codehaus.mojo:surefire-report-maven-plugin 2.0-beta-1
• org.codehaus.mojo:cobertura-maven-plugin 2.7
• org.codehaus.mojo:findbugs-maven-plugin 3.0.5
• org.lesscss:lesscss-maven-plugin 1.3.3 → [Updates: 1.7.0.1.1]
• org.apache.maven.plugins:maven-javadoc-plugin 3.4.1 → [Updates: 3.12.0]
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0

---

• Check this box to trigger a request for Renovate to run again on this repository