Renovate Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Maven Central rate limiting detected despite Redis caching.
• ⚠️ WARN: Release interceptor failed

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@types/glob
npm	@types/uuid
terraform	mrparkers/keycloak

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

Note

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (27)

Datasource	Package	Last Updated
npm	@eclipse-dash/nodejs-wrapper	2024-01-29
npm	cross-env	2025-09-29
npm	eslint-plugin-header	2021-02-03
npm	eslint-plugin-import	2025-06-20
npm	eslint-plugin-no-null	2016-09-13
npm	eslint-plugin-react	2025-04-03
npm	express-formidable	2018-10-22
npm	react-scripts	2025-02-14
terraform	keycloak	2024-01-08
terraform	kubectl	2025-01-10

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update eclipse theia to ~1.76.0 (@theia/cli, @theia/core, @theia/editor, @theia/filesystem, @theia/markers, @theia/messages, @theia/monaco, @theia/navigator, @theia/plugin-ext, @theia/preferences, @theia/process, @theia/terminal)
• chore(deps): update actions/checkout action to v7
• chore(deps): update actions/github-script action to v9
• chore(deps): update dependency @kubernetes/client-node to v2
• chore(deps): update dependency @types/glob to v9
• chore(deps): update dependency @types/jest to v30
• chore(deps): update dependency @types/uuid to v11
• chore(deps): update dependency @vscode/vsce to v4
• chore(deps): update dependency cross-env to v10
• chore(deps): update dependency eslint to v10
• chore(deps): update dependency eslint-config-prettier to v10
• chore(deps): update dependency eslint-plugin-prettier to v5
• chore(deps): update dependency eslint-plugin-simple-import-sort to v14
• chore(deps): update dependency express to v5 (express, @types/express)
• chore(deps): update dependency inversify to v8
• chore(deps): update dependency keycloak-js to v26
• chore(deps): update dependency lerna to v10
• chore(deps): update dependency org.junit.jupiter:junit-jupiter to v6
• chore(deps): update dependency prettier to v3
• chore(deps): update dependency typescript to v7
• chore(deps): update dependency web-vitals to v6
• chore(deps): update dependency webpack-cli to v7
• chore(deps): update helm release keycloak to v25
• chore(deps): update node.js to v24 (node, @types/node)
• chore(deps): update react monorepo to v19 (@types/react, @types/react-dom, react, react-dom)
• chore(deps): update testing-library monorepo (major) (@testing-library/jest-dom, @testing-library/react, @testing-library/user-event)
• chore(deps): update typescript-eslint monorepo to v8 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): replace terraform keycloak with keycloak/keycloak 4.5.0
• chore(deps): update npm dependencies (express, inversify)
• chore(deps): update npm dev dependencies (@types/express, @types/node, rimraf, ts-loader, typescript, webpack)
• chore(deps): update java dependencies (maven, maven-wrapper, io.sentry:sentry-maven-plugin, org.codehaus.mojo:flatten-maven-plugin, io.sentry:sentry-okhttp, io.sentry:sentry, io.fabric8:kubernetes-client, io.fabric8:kubernetes-httpclient-okhttp, org.slf4j:slf4j-simple, io.javaoperatorsdk:kubernetes-webhooks-framework-core, org.mockito:mockito-core, org.junit.jupiter:junit-jupiter, org.apache.maven.plugins:maven-failsafe-plugin, org.apache.maven.plugins:maven-surefire-plugin, org.apache.maven.plugins:maven-compiler-plugin, org.apache.maven.plugins:maven-assembly-plugin, org.apache.logging.log4j:log4j-core, org.apache.logging.log4j:log4j-api)
• chore(deps): update quarkus to v3.39.5 (io.quarkus.platform:quarkus-maven-plugin, io.quarkus.platform:quarkus-bom)
• chore(deps): update terraform (cert-manager, ingress-nginx, minikube, theia-cloud, theia-cloud-base, theia-cloud-crds)
• chore(deps): update theiacloud/theia-cloud-demo docker tag to v1.3.0
• chore(deps): refresh
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update eclipse-temurin docker tag to v25
• chore(deps): update fabric8-kubernetes-client monorepo to v8 (io.fabric8:kubernetes-client, io.fabric8:kubernetes-httpclient-okhttp)
• chore(deps): update quay.io/quarkus/quarkus-micro-image docker tag to v2

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• fix(security): Update dependency @theia/workspace to ~1.69.0 [SECURITY]
• fix(security): Update dependency uuid to v14 [SECURITY]
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Important

22/22 CVEs have Renovate fixes.

Detected Dependencies

dockerfile (14)

demo/dockerfiles/demo-operator-custom-template/Dockerfile

demo/dockerfiles/demo-theia-docker/Dockerfile (1)

• ghcr.io/eclipse-theia/theia-ide/theia-ide 1.56.1 → [Updates: 1.75.0]

demo/dockerfiles/demo-theia-monitor-theia/Dockerfile (2)

• node 20-bookworm → [Updates: 24-bookworm]
• node 20-bookworm-slim → [Updates: 24-bookworm-slim]

demo/dockerfiles/demo-theia-monitor-vscode/Dockerfile (2)

• node 18-bullseye-slim → [Updates: 24-bullseye-slim]
• theiacloud/theia-cloud-demo 1.2.0-next → [Updates: 1.3.0-next]

dockerfiles/conversion-webhook/Dockerfile (2)

• eclipse-temurin 21-jdk → [Updates: 25-jdk]
• eclipse-temurin 21-jre-alpine → [Updates: 25-jre-alpine]

dockerfiles/operator/Dockerfile (2)

• eclipse-temurin 21-jdk → [Updates: 25-jdk]
• eclipse-temurin 21-jre-alpine → [Updates: 25-jre-alpine]

dockerfiles/operator/Dockerfile.withcache (2)

• eclipse-temurin 21-jdk → [Updates: 25-jdk]
• eclipse-temurin 21-jre-alpine → [Updates: 25-jre-alpine]

dockerfiles/service/Dockerfile (2)

• eclipse-temurin 21-jdk → [Updates: 25-jdk]
• eclipse-temurin 21-jre-alpine → [Updates: 25-jre-alpine]

dockerfiles/service/Dockerfile.withcache (2)

• eclipse-temurin 21-jdk → [Updates: 25-jdk]
• eclipse-temurin 21-jre-alpine → [Updates: 25-jre-alpine]

dockerfiles/wondershaper/Dockerfile

java/service/org.eclipse.theia.cloud.service/src/main/docker/Dockerfile.jvm (1)

• registry.access.redhat.com/ubi8/openjdk-11 1.11 → [Updates: 1.21-1.1736337912]

java/service/org.eclipse.theia.cloud.service/src/main/docker/Dockerfile.legacy-jar (1)

• registry.access.redhat.com/ubi8/openjdk-11 1.11 → [Updates: 1.21-1.1736337912]

java/service/org.eclipse.theia.cloud.service/src/main/docker/Dockerfile.native (1)

• registry.access.redhat.com/ubi8/ubi-minimal 8.5 → [Updates: 8.10-1790840782]

java/service/org.eclipse.theia.cloud.service/src/main/docker/Dockerfile.native-micro (1)

• quay.io/quarkus/quarkus-micro-image 1.0 → [Updates: 2.0]

github-actions (5)

.github/workflows/auto-assign.yml (1)

• actions/github-script v7 → [Updates: v9]

.github/workflows/build.yml (1)

• EduIDE/.github v1

.github/workflows/dependency-review.yml (1)

• EduIDE/.github v1

.github/workflows/docs-check.yml (1)

• actions/checkout v4 → [Updates: v7]

.github/workflows/tag-format.yml (1)

• EduIDE/.github main

maven (7)

demo/dockerfiles/demo-theia-docker/project/java/pom.xml

java/common/maven-conf/pom.xml (47)

• org.codehaus.mojo:flatten-maven-plugin 1.6.0 → [Updates: 1.8.0]
• com.google.cloud.artifactregistry:artifactregistry-maven-wagon 2.2.5
• io.fabric8:kubernetes-client 7.3.1 → [Updates: 7.9.0, 8.0.0]
• io.fabric8:kubernetes-httpclient-okhttp 7.3.1 → [Updates: 7.6.1, 8.0.0]
• org.json:json 20250517
• org.apache.logging.log4j:log4j-api 2.25.1 → [Updates: 2.25.5]
• org.apache.logging.log4j:log4j-core 2.25.1 → [Updates: 2.25.4]
• org.junit.jupiter:junit-jupiter 5.13.4 → [Updates: 5.14.4, 6.1.3]
• org.mockito:mockito-core 5.18.0 → [Updates: 5.24.0]
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0 → [Updates: 3.16.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3 → [Updates: 3.6.0]
• io.quarkus.platform:quarkus-bom 3.25.1 → [Updates: 3.39.5]
• io.fabric8:kubernetes-client 7.3.1 → [Updates: 7.9.0, 8.0.0]
• io.javaoperatorsdk:kubernetes-webhooks-framework-core 3.0.1 → [Updates: 3.0.5]
• io.quarkus.platform:quarkus-maven-plugin 3.25.1 → [Updates: 3.39.5]
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0 → [Updates: 3.16.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3 → [Updates: 3.6.0]
• org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 → [Updates: 3.6.0]
• org.json:json 20250517
• com.google.inject:guice 7.0.0
• io.fabric8:kubernetes-client 7.3.1 → [Updates: 7.9.0, 8.0.0]
• io.fabric8:kubernetes-httpclient-okhttp 7.3.1 → [Updates: 7.6.1, 8.0.0]
• org.apache.logging.log4j:log4j-api 2.25.1 → [Updates: 2.25.5]
• org.apache.logging.log4j:log4j-core 2.25.1 → [Updates: 2.25.4]
• info.picocli:picocli 4.7.7
• org.slf4j:slf4j-simple 2.0.17 → [Updates: 2.0.20]
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0 → [Updates: 3.16.0]
• org.apache.maven.plugins:maven-assembly-plugin 3.7.1 → [Updates: 3.8.0]
• org.json:json 20250517
• com.google.inject:guice 7.0.0
• io.fabric8:kubernetes-client 7.3.1 → [Updates: 7.9.0, 8.0.0]
• io.fabric8:kubernetes-httpclient-okhttp 7.3.1 → [Updates: 7.6.1, 8.0.0]
• org.apache.logging.log4j:log4j-api 2.25.1 → [Updates: 2.25.5]
• org.apache.logging.log4j:log4j-core 2.25.1 → [Updates: 2.25.4]
• info.picocli:picocli 4.7.7
• org.slf4j:slf4j-simple 2.0.17 → [Updates: 2.0.20]
• org.junit.jupiter:junit-jupiter 5.13.4 → [Updates: 5.14.4, 6.1.3]
• org.mockito:mockito-core 5.18.0 → [Updates: 5.24.0]
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0 → [Updates: 3.16.0]
• io.quarkus.platform:quarkus-bom 3.25.1 → [Updates: 3.39.5]
• io.fabric8:kubernetes-client 7.3.1 → [Updates: 7.9.0, 8.0.0]
• org.apache.logging.log4j:log4j-api 2.25.1 → [Updates: 2.25.5]
• org.apache.logging.log4j:log4j-core 2.25.1 → [Updates: 2.25.4]
• io.quarkus.platform:quarkus-maven-plugin 3.25.1 → [Updates: 3.39.5]
• org.apache.maven.plugins:maven-compiler-plugin 3.14.0 → [Updates: 3.16.0]
• org.apache.maven.plugins:maven-surefire-plugin 3.5.3 → [Updates: 3.6.0]
• org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 → [Updates: 3.6.0]

java/common/org.eclipse.theia.cloud.common/pom.xml (2)

• io.sentry:sentry 8.0.0 → [Updates: 8.58.0]
• io.sentry:sentry-okhttp 8.0.0 → [Updates: 8.58.0]

java/conversion/org.eclipse.theia.cloud.conversion/pom.xml

java/operator/org.eclipse.theia.cloud.defaultoperator/pom.xml (1)

• io.sentry:sentry-maven-plugin 0.10.0 → [Updates: 0.11.0]

java/operator/org.eclipse.theia.cloud.operator/pom.xml (3)

• io.sentry:sentry 8.0.0 → [Updates: 8.58.0]
• io.sentry:sentry-okhttp 8.0.0 → [Updates: 8.58.0]
• io.sentry:sentry-maven-plugin 0.10.0 → [Updates: 0.11.0]

java/service/org.eclipse.theia.cloud.service/pom.xml (1)

• io.sentry:sentry-maven-plugin 0.10.0 → [Updates: 0.11.0]

maven-wrapper (2)

java/conversion/org.eclipse.theia.cloud.conversion/.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.9.3 → [Updates: 3.10.0]
• maven-wrapper 3.2.0 → [Updates: 3.3.4]

java/service/org.eclipse.theia.cloud.service/.mvn/wrapper/maven-wrapper.properties (2)

• maven 3.8.4 → [Updates: 3.10.0]
• maven-wrapper 3.1.0 → [Updates: 3.3.4]

npm (11)

demo/dockerfiles/demo-theia-docker/project/web/package.json

node/common/package.json (3)

• @types/uuid ^8.3.4 → [Updates: ^11.0.0]
• axios ^1.13.6
• uuid ^8.3.2 → [Updates: ^14.0.0]

node/e2e-tests/package.json (5)

• @kubernetes/client-node ^1.4.0 → [Updates: ^2.0.0]
• @playwright/test ^1.41.2
• @theia/playwright ^1.64.0
• @types/node ^20.10.0 → [Updates: ^24.0.0]
• cross-env ^7.0.3 → [Updates: ^10.0.0]

node/monitor/package.json (12)

• express ^4.22.1 → [Updates: ^4.22.1, ^5.0.0]
• express-formidable ^1.2.0
• @types/express ^4.17.13 → [Updates: ^4.17.13, ^5.0.0]
• @types/express-formidable ^1.2.0
• @types/glob ^7.2.0 → [Updates: ^9.0.0]
• @typescript-eslint/eslint-plugin ^6.7.0 → [Updates: ^8.0.0]
• @typescript-eslint/parser ^6.7.0 → [Updates: ^8.0.0]
• eslint ^8.26.0 → [Updates: ^10.0.0]
• ts-loader ^9.3.1 → [Updates: ^9.3.1]
• @vscode/vsce ^2.22.0 → [Updates: ^4.0.0]
• webpack ^5.105.4 → [Updates: ^5.105.4]
• webpack-cli ^4.10.0 → [Updates: ^7.0.0]

node/package.json (14)

• @eclipse-dash/nodejs-wrapper ^0.0.1
• @types/node ^20.10.0 → [Updates: ^20.10.0, ^24.0.0]
• @typescript-eslint/eslint-plugin ^6.18.1 → [Updates: ^8.0.0]
• @typescript-eslint/parser ^6.18.1 → [Updates: ^8.0.0]
• eslint ^8.20.0 → [Updates: ^10.0.0]
• eslint-config-prettier ^8.5.0 → [Updates: ^10.0.0]
• eslint-plugin-header ^3.1.1
• eslint-plugin-import ^2.26.0
• eslint-plugin-no-null ^1.0.2
• eslint-plugin-prettier ^4.0.0 → [Updates: ^5.0.0]
• eslint-plugin-react ^7.29.4
• eslint-plugin-simple-import-sort ^7.0.0 → [Updates: ^14.0.0]
• prettier ^2.6.2 → [Updates: ^3.0.0]
• typescript ^5.3.3 → [Updates: ^7.0.0]

node/testing-page/package.json (11)

• keycloak-js ^17.0.1 → [Updates: ^26.0.0]
• react ^18.2.0 → [Updates: ^19.0.0]
• react-dom ^18.2.0 → [Updates: ^19.0.0]
• react-scripts 5.0.1
• web-vitals ^2.1.4 → [Updates: ^6.0.0]
• @types/jest ^27.5.2 → [Updates: ^30.0.0]
• @types/react ^18.0.27 → [Updates: ^19.0.0]
• @types/react-dom ^18.0.10 → [Updates: ^19.0.0]
• @testing-library/jest-dom ^5.16.5 → [Updates: ^7.0.0]
• @testing-library/react ^13.4.0 → [Updates: ^16.0.0]
• @testing-library/user-event ^13.5.0 → [Updates: ^14.0.0]

theia/examples/browser-app/package.json (13)

• @theia/core ~1.64.0 → [Updates: ~1.76.0]
• @theia/editor ~1.64.0 → [Updates: ~1.76.0]
• @theia/filesystem ~1.64.0 → [Updates: ~1.76.0]
• @theia/markers ~1.64.0 → [Updates: ~1.76.0]
• @theia/messages ~1.64.0 → [Updates: ~1.76.0]
• @theia/monaco ~1.64.0 → [Updates: ~1.76.0]
• @theia/navigator ~1.64.0 → [Updates: ~1.76.0]
• @theia/plugin-ext ~1.64.0 → [Updates: ~1.76.0]
• @theia/preferences ~1.64.0 → [Updates: ~1.76.0]
• @theia/process ~1.64.0 → [Updates: ~1.76.0]
• @theia/terminal ~1.64.0 → [Updates: ~1.76.0]
• @theia/workspace ~1.64.0 → [Updates: ~1.69.0]
• @theia/cli ~1.64.0 → [Updates: ~1.76.0]

theia/examples/config-store-example/package.json (3)

• rimraf ^6.0.1 → [Updates: ^6.0.1]
• typescript ~5.4.5 → [Updates: ~5.9.0, ~7.0.0]
• @theia/core ^1.64.0

theia/extensions/config-store/package.json (3)

• rimraf ^6.0.1 → [Updates: ^6.0.1]
• typescript ~5.4.5 → [Updates: ~5.9.0, ~7.0.0]
• @theia/core ^1.64.0

theia/extensions/monitor-theia/package.json (4)

• rimraf ^6.0.1 → [Updates: ^6.0.1]
• typescript ~5.4.5 → [Updates: ~5.9.0, ~7.0.0]
• @theia/core ^1.64.0
• @theia/plugin-ext ^1.64.0

theia/package.json (16)

• @eclipse-dash/nodejs-wrapper ^0.0.1
• @types/node ^20.10.0 → [Updates: ^20.10.0, ^24.0.0]
• @typescript-eslint/eslint-plugin ^6.18.1 → [Updates: ^8.0.0]
• @typescript-eslint/parser ^6.18.1 → [Updates: ^8.0.0]
• eslint ^8.20.0 → [Updates: ^10.0.0]
• eslint-config-prettier ^8.5.0 → [Updates: ^10.0.0]
• eslint-plugin-header ^3.1.1
• eslint-plugin-import ^2.26.0
• eslint-plugin-no-null ^1.0.2
• eslint-plugin-prettier ^4.0.0 → [Updates: ^5.0.0]
• eslint-plugin-react ^7.29.4
• eslint-plugin-simple-import-sort ^7.0.0 → [Updates: ^14.0.0]
• lerna ^8.1.9 → [Updates: ^10.0.0]
• prettier ^2.6.2 → [Updates: ^3.0.0]
• typescript ~5.4.5 → [Updates: ~5.9.0, ~7.0.0]
• inversify 6.0.3 → [Updates: 6.2.2, 8.2.3]

renovate-config (1)

renovate.json

terraform (23)

terraform/ci-configurations/e2e_tests.tf

terraform/ci-configurations/versions.tf (5)

• helm >= 3.0.2
• keycloak >= 4.4.0 → [Updates: 4.5.0]
• kubectl >= 1.19.0
• kubernetes >= 2.38.0
• hashicorp/terraform >= 1.12.2

terraform/configurations/gke_getting_started/gke_getting_started.tf

terraform/configurations/gke_getting_started/versions.tf (4)

• helm >= 3.0.2
• keycloak >= 4.4.0 → [Updates: 4.5.0]
• kubectl >= 1.19.0
• hashicorp/terraform >= 1.12.2

terraform/configurations/minikube_getting_started/minikube_getting_started.tf

terraform/configurations/minikube_getting_started/versions.tf (6)

• helm >= 3.0.2
• keycloak >= 4.4.0 → [Updates: 4.5.0]
• kubectl >= 1.19.0
• kubernetes >= 2.38.0
• minikube 0.6.0 → [Updates: 0.8.0]
• hashicorp/terraform >= 1.12.2

terraform/modules/cluster_creation/gke/versions.tf (2)

• google >= 6.47.0
• hashicorp/terraform >= 1.12.2

terraform/modules/cluster_creation/minikube/versions.tf (2)

• minikube 0.6.0 → [Updates: 0.8.0]
• hashicorp/terraform >= 1.12.2

terraform/modules/helm/main.tf (6)

• cert-manager v1.17.4 → [Updates: v1.21.2]
• keycloak 15.1.8 → [Updates: 25.2.0]
• ingress-nginx 4.13.0 → [Updates: 4.15.1]
• theia-cloud 1.1.3 → [Updates: 1.2.0]
• theia-cloud-base 1.1.2 → [Updates: 1.2.0]
• theia-cloud-crds 1.1.2 → [Updates: 1.2.0]

terraform/modules/helm/versions.tf (3)

• helm >= 3.0.2
• kubectl >= 1.19.0
• hashicorp/terraform >= 1.12.2

terraform/modules/keycloak/versions.tf (2)

• keycloak >= 4.4.0 → [Updates: 4.5.0]
• hashicorp/terraform >= 1.12.2

terraform/test-configurations/0_minikube-setup/minikube_test_cluster.tf

terraform/test-configurations/0_minikube-setup/versions.tf (6)

• helm >= 3.0.2
• keycloak >= 4.4.0 → [Updates: 4.5.0]
• kubectl >= 1.19.0
• kubernetes >= 2.38.0
• minikube 0.6.0 → [Updates: 0.8.0]
• hashicorp/terraform >= 1.12.2

terraform/test-configurations/1_theia-cloud-base/theia_cloud_base.tf

terraform/test-configurations/1_theia-cloud-base/versions.tf (2)

• helm >= 3.0.2
• hashicorp/terraform >= 1.12.2

terraform/test-configurations/2-01_try-now/theia_cloud.tf

terraform/test-configurations/2-01_try-now/versions.tf (3)

• helm >= 3.0.2
• kubectl >= 1.19.0
• hashicorp/terraform >= 1.12.2

terraform/test-configurations/2-02_monitor/theia_cloud.tf

terraform/test-configurations/2-02_monitor/versions.tf (2)

• helm >= 3.0.2
• hashicorp/terraform >= 1.12.2

terraform/test-configurations/2-03_try-now_paths/theia_cloud.tf

terraform/test-configurations/2-03_try-now_paths/versions.tf (3)

• helm >= 3.0.2
• kubectl >= 1.19.0
• hashicorp/terraform >= 1.12.2

terraform/test-configurations/2-04_try-now_paths_eager-start/theia_cloud.tf

terraform/test-configurations/2-04_try-now_paths_eager-start/versions.tf (3)

• helm >= 3.0.2
• kubectl >= 1.19.0
• hashicorp/terraform >= 1.12.2

---

• Check this box to trigger a request for Renovate to run again on this repository