Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency com.auth0:java-jwt to v4.6.1
• Update dependency io.dropwizard.metrics:metrics-core to v4.2.40
• Update dependency io.dropwizard.metrics:metrics-jmx to v4.2.40
• Update dependency java-jdk to v21.0.12+101.0.LTS
• Update dependency org.apache.ant:ant to v1.10.18
• Update dependency org.checkerframework:checker-qual to v4.2.3
• Update dependency org.codehaus.mojo:buildnumber-maven-plugin to v3.3.1
• Update dependency org.jsoup:jsoup to v1.23.2
• Update dependency org.liquibase:liquibase-core to v5.0.4
• Update dependency com.twelvemonkeys.imageio:imageio-webp to v3.15.1
• Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0
• Update dependency org.bouncycastle:bcprov-jdk18on to v1.86
• Update dependency org.yaml:snakeyaml to v2.7
• Update github/codeql-action action to v4.38.0
• Update actions/setup-java action to v6
• Update dependency java-jdk to v25
• Update eclipse-temurin Docker tag to v25
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package org.airsonic.player:airsonic: no-result, Failed to look up maven package com.hoodcomputing:natpmp: no-result, Failed to look up maven package org.airsonic.player:airsonic-main: no-result.

Files affected: airsonic-main/pom.xml, airsonic-sonos-api/pom.xml, install/docker/pom.xml, integration-test/pom.xml, subsonic-rest-api/pom.xml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency org.jupnp:org.jupnp to v3.0.5
• Update dependency org.jupnp:org.jupnp.support to v3.0.5
• Update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.1
• Update github/codeql-action action to v4.37.9
• Update logback monorepo to v1.6.3 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update dependency com.google.guava:guava to v33.7.1-jre
• Update dependency com.puppycrawl.tools:checkstyle to v13.11.0
• Update dependency com.github.junrar:junrar to v8
• Update dependency com.mysql:mysql-connector-j to v26
• Update dependency com.puppycrawl.tools:checkstyle to v14
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (2)

install/compose/docker-compose.hsqldb.yaml

install/compose/docker-compose.postgres.yaml

dockerfile (1)

install/docker/Dockerfile (2)

• eclipse-temurin 21-jdk-resolute → [Updates: 25-jdk-resolute]
• eclipse-temurin 21-jre-resolute → [Updates: 25-jre-resolute]

github-actions (12)

.github/workflows/codeql.yml (5)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• github/codeql-action v4.37.6 → [Updates: v4.37.9, v4.38.0]
• github/codeql-action v4.37.6 → [Updates: v4.37.9, v4.38.0]
• java-jdk 21 → [Updates: 21.0.12+101.0.LTS, 25.0.4+101.0.LTS]

.github/workflows/edge.yml (25)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• actions/cache v6
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• actions/setup-java v5 → [Updates: v6]
• docker/setup-qemu-action v4
• actions/cache v6
• docker/metadata-action v6
• docker/setup-buildx-action v4
• docker/login-action v4.6.0
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• actions/download-artifact v8
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4.6.0
• softprops/action-gh-release v3
• java-jdk 21 → [Updates: 21.0.12+101.0.LTS, 25.0.4+101.0.LTS]

.github/workflows/ondem_build_docker.yml (19)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• actions/cache v6
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• actions/setup-java v5 → [Updates: v6]
• docker/metadata-action v6
• actions/cache v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4.6.0
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4.6.0
• java-jdk 21 → [Updates: 21.0.12+101.0.LTS, 25.0.4+101.0.LTS]

.github/workflows/pr_build_docker_from_fork.yml (19)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• actions/cache v6
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• actions/setup-java v5 → [Updates: v6]
• docker/metadata-action v6
• actions/cache v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4.6.0
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4.6.0
• java-jdk 21 → [Updates: 21.0.12+101.0.LTS, 25.0.4+101.0.LTS]

.github/workflows/pr_build_docker.yml (19)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• actions/cache v6
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• actions/setup-java v5 → [Updates: v6]
• docker/metadata-action v6
• actions/cache v6
• docker/setup-qemu-action v4
• docker/setup-buildx-action v4
• docker/login-action v4.6.0
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4.6.0
• java-jdk 21 → [Updates: 21.0.12+101.0.LTS, 25.0.4+101.0.LTS]

.github/workflows/pr_build_war from_fork.yml (5)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• actions/cache v6
• actions/upload-artifact v7
• java-jdk 21 → [Updates: 21.0.12+101.0.LTS, 25.0.4+101.0.LTS]

.github/workflows/pr_build_war.yml (5)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• actions/cache v6
• actions/upload-artifact v7
• java-jdk 21 → [Updates: 21.0.12+101.0.LTS, 25.0.4+101.0.LTS]

.github/workflows/pr_ci.yml (3)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• actions/cache v6

.github/workflows/snyk-security.yml (3)

• actions/checkout v7
• snyk/actions master
• github/codeql-action v4.37.6 → [Updates: v4.37.9, v4.38.0]

.github/workflows/stable.yml (19)

• actions/checkout v7
• actions/setup-java v5 → [Updates: v6]
• docker/setup-qemu-action v4
• actions/cache v6
• docker/setup-buildx-action v4
• docker/login-action v4.6.0
• docker/metadata-action v6
• docker/build-push-action v7
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/upload-artifact v7
• actions/checkout v7
• actions/download-artifact v8
• actions/download-artifact v8
• actions/download-artifact v8
• docker/setup-buildx-action v4
• docker/metadata-action v6
• docker/login-action v4.6.0
• softprops/action-gh-release v3

.github/workflows/sync.yml (1)

• actions/checkout v7

.github/workflows/trivy_scan.yml (3)

• actions/checkout v7
• aquasecurity/trivy-action v0.36.0
• github/codeql-action v4.37.6 → [Updates: v4.37.9, v4.38.0]

maven (6)

airsonic-main/pom.xml (39)

• org.airsonic.player:airsonic 11.1.5-SNAPSHOT
• io.dropwizard.metrics:metrics-jmx 4.2.39 → [Updates: 4.2.40]
• org.aspectj:aspectjrt 1.9.25.1
• com.auth0:java-jwt 4.6.0 → [Updates: 4.6.1]
• org.bouncycastle:bcprov-jdk18on 1.85.2 → [Updates: 1.86]
• commons-io:commons-io 2.22.0
• org.apache.commons:commons-compress 1.28.0
• org.tukaani:xz 1.12
• com.github.junrar:junrar 7.6.1 → [Updates: 8.1.1]
• com.google.code.findbugs:jsr305 3.0.2
• com.google.re2j:re2j 1.8
• org.apache.httpcomponents:httpcore 4.4.16
• org.apache.httpcomponents:httpclient 4.5.14
• org.apache.httpcomponents.client5:httpclient5 5.6.4
• org.hsqldb:hsqldb 2.7.4
• com.vdurmont:semver4j 3.1.0
• net.jthink:jaudiotagger 3.0.1
• org.jdom:jdom2 2.0.6.1
• com.hoodcomputing:natpmp 0.1
• org.mockito:mockito-inline 5.2.0
• org.jupnp:org.jupnp 3.0.3 → [Updates: 3.0.5]
• org.jupnp:org.jupnp.support 3.0.3 → [Updates: 3.0.5]
• de.u-mass:lastfm-java 0.1.2
• de.triology.recaptchav2-java:recaptchav2-java 1.0.4
• org.apache.commons:commons-configuration2 2.15.1
• com.mattbertolini:liquibase-slf4j 5.1.0
• commons-beanutils:commons-beanutils 1.11.0
• org.liquibase:liquibase-core 5.0.3 → [Updates: 5.0.4]
• org.apache.maven:maven-artifact 3.9.16
• com.github.muff1nman.chameleon:core 2.0.0-RELEASE
• com.github.muff1nman.chameleon:playlist-xspf 2.0.0-RELEASE
• com.github.muff1nman.chameleon:playlist-all 2.0.0-RELEASE
• com.ibm.icu:icu4j 78.3
• org.digitalmediaserver:cuelib-core 2.0.0
• com.mysql:mysql-connector-j 9.7.0 → [Updates: 26.7.0]
• com.twelvemonkeys.imageio:imageio-webp 3.14.0 → [Updates: 3.15.1]
• dev.aspectj:aspectj-maven-plugin 1.14.1
• org.aspectj:aspectjtools 1.9.25.1
• org.apache.maven.plugins:maven-jxr-plugin 3.6.0

airsonic-sonos-api/pom.xml (1)

• org.airsonic.player:airsonic 11.1.5-SNAPSHOT

install/docker/pom.xml (3)

• org.airsonic.player:airsonic 11.1.5-SNAPSHOT
• org.airsonic.player:airsonic-main 11.1.5-SNAPSHOT
• org.apache.maven.plugins:maven-dependency-plugin 3.11.0

integration-test/pom.xml (1)

• org.airsonic.player:airsonic 11.1.5-SNAPSHOT

pom.xml (42)

• org.yaml:snakeyaml 2.6 → [Updates: 2.7]
• org.apache.cxf:cxf-spring-boot-autoconfigure 4.2.3
• org.apache.cxf:cxf-codegen-plugin 4.2.3
• org.springframework.boot:spring-boot-starter-parent 4.1.0 → [Updates: 4.1.1]
• ch.qos.logback:logback-classic 1.6.1 → [Updates: 1.6.3]
• ch.qos.logback:logback-core 1.6.1 → [Updates: 1.6.3]
• org.apache.cxf:cxf-bom 4.2.3
• org.apache.cxf:cxf-core 4.2.3
• org.ow2.asm:asm 9.10.1
• org.apache.commons:commons-lang3 3.20.0
• org.apache.commons:commons-text 1.15.0
• commons-io:commons-io 2.22.0
• com.google.guava:guava 33.6.0-jre → [Updates: 33.7.1-jre]
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.5
• javax.xml.bind:jaxb-api 2.3.1
• org.glassfish.jaxb:jaxb-runtime 4.0.9
• org.apache.ant:ant 1.10.17 → [Updates: 1.10.18]
• org.jvnet.staxex:stax-ex 2.1.0
• org.jsoup:jsoup 1.23.1 → [Updates: 1.23.2]
• com.sun.activation:jakarta.activation 2.0.1
• org.checkerframework:checker-qual 4.2.2 → [Updates: 4.2.3]
• com.google.j2objc:j2objc-annotations 3.1
• com.google.errorprone:error_prone_annotations 2.50.0
• net.java.dev.jna:jna 5.19.1
• net.java.dev.jna:jna-platform 5.19.1
• org.apache.lucene:lucene-core 10.5.1
• org.apache.lucene:lucene-analysis-common 10.5.1
• org.apache.commons:commons-collections4 4.6.0
• org.apache.lucene:lucene-backward-codecs 10.5.1
• io.dropwizard.metrics:metrics-core 4.2.39 → [Updates: 4.2.40]
• org.eclipse.persistence:org.eclipse.persistence.moxy 5.0.1
• org.codehaus.mojo:buildnumber-maven-plugin 3.3.0 → [Updates: 3.3.1]
• org.apache.cxf:cxf-codegen-plugin 4.2.3
• org.jvnet.jaxb2.maven2:maven-jaxb2-plugin 0.15.3
• io.fabric8:docker-maven-plugin 0.49.0
• org.apache.maven.plugins:maven-war-plugin 3.5.1
• org.apache.maven.plugins:maven-checkstyle-plugin 3.6.0
• com.puppycrawl.tools:checkstyle 13.10.0 → [Updates: 13.11.0, 14.1.0]
• org.apache.maven.plugins:maven-pmd-plugin 3.28.0
• org.apache.maven.plugins:maven-surefire-plugin 3.5.6 → [Updates: 3.6.0]
• net.nicoulaj.maven.plugins:checksum-maven-plugin 1.11
• org.apache.maven.plugins:maven-dependency-plugin 3.11.0

subsonic-rest-api/pom.xml (2)

• org.airsonic.player:airsonic 11.1.5-SNAPSHOT
• org.apache.cxf:cxf-xjc-plugin 4.2.0

---

• Check this box to trigger a request for Renovate to run again on this repository