Dependency Dashboard

[forking-renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update docker (eclipse-temurin, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/runtime-deps, mcr.microsoft.com/dotnet/sdk, node, python)
• chore(deps): update redis:alpine docker digest to a21f7b1
• chore(deps): update dotnet to v8.0.5 (Microsoft.AspNetCore.TestHost, Microsoft.Extensions.Caching.StackExchangeRedis)
• fix(deps): update java (com.google.api.grpc:proto-google-common-protos, io.grpc:protoc-gen-grpc-java, io.grpc:grpc-census, io.grpc:grpc-services, io.grpc:grpc-netty, io.grpc:grpc-stub, io.grpc:grpc-protobuf)
• fix(deps): update nodejs (@grpc/grpc-js, pino)
• chore(deps): update gcr.io/k8s-skaffold/skaffold docker tag to v2.12.0
• chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.100.0
• chore(deps): update terraform google to v5.29.1
• fix(deps): update golang (cloud.google.com/go/alloydbconn, google.golang.org/grpc)
• chore(deps): refresh pip-compile outputs python (undefined, faker, locust, langchain, langchain-google-genai)

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update dependency jinja2 to v3.1.4 [security]
• fix(deps): update protocversion to v4 (major) (com.google.protobuf:protoc, com.google.protobuf:protobuf-java)

Detected dependencies

cloudbuild

cloudbuild.yaml

• gcr.io/k8s-skaffold/skaffold v2.11.1

dockerfile

src/adservice/Dockerfile

• eclipse-temurin 21@sha256:17f4e7fc9aedb22147ff7271b1fac98a5b0e5daf003183610b466fbcce17095a
• eclipse-temurin 21.0.3_9-jre-alpine@sha256:23467b3e42617ca197f43f58bc5fb03ca4cb059d68acd49c67128bfded132d67

src/cartservice/src/Dockerfile

• mcr.microsoft.com/dotnet/sdk 8.0.204@sha256:03476e8b974ca8e5084bf63742d85f04a5f53df0ae37c82d31bae228eb297e6c
• mcr.microsoft.com/dotnet/runtime-deps 8.0.4-alpine3.18-amd64@sha256:1fd5e6015ca8b6778a19339a921363370c2ab5cf91dc3421df5f29f4caa07440

src/cartservice/src/Dockerfile.debug

• mcr.microsoft.com/dotnet/sdk 8.0@sha256:03476e8b974ca8e5084bf63742d85f04a5f53df0ae37c82d31bae228eb297e6c
• mcr.microsoft.com/dotnet/aspnet 8.0@sha256:acb8f8e836ae3ba350d37edcfdfafb7bb6e583630672faadecf873d4921f3b8d

src/checkoutservice/Dockerfile

• golang 1.22.2-alpine@sha256:cdc86d9f363e8786845bea2040312b4efa321b828acdeb26f393faa864d887b0

src/currencyservice/Dockerfile

• node 20.12.2-alpine@sha256:7a91aa397f2e2dfbfcdad2e2d72599f374e0b0172be1d86eeb73f1d33f36a4b2
• alpine 3.19.1@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b

src/emailservice/Dockerfile

• python 3.12.3-slim@sha256:2be8daddbb82756f7d1f2c7ece706aadcb284bf6ab6d769ea695cc3ed6016743

src/frontend/Dockerfile

• golang 1.22.2-alpine@sha256:cdc86d9f363e8786845bea2040312b4efa321b828acdeb26f393faa864d887b0

src/loadgenerator/Dockerfile

• python 3.12.3-slim@sha256:2be8daddbb82756f7d1f2c7ece706aadcb284bf6ab6d769ea695cc3ed6016743

src/paymentservice/Dockerfile

• node 20.12.2-alpine@sha256:7a91aa397f2e2dfbfcdad2e2d72599f374e0b0172be1d86eeb73f1d33f36a4b2
• alpine 3.19.1@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b

src/productcatalogservice/Dockerfile

• golang 1.22.2-alpine@sha256:cdc86d9f363e8786845bea2040312b4efa321b828acdeb26f393faa864d887b0

src/recommendationservice/Dockerfile

• python 3.12.3-slim@sha256:2be8daddbb82756f7d1f2c7ece706aadcb284bf6ab6d769ea695cc3ed6016743

src/shippingservice/Dockerfile

• golang 1.22.2-alpine@sha256:cdc86d9f363e8786845bea2040312b4efa321b828acdeb26f393faa864d887b0

src/shoppingassistantservice/Dockerfile

• python 3.12.3-slim@sha256:2be8daddbb82756f7d1f2c7ece706aadcb284bf6ab6d769ea695cc3ed6016743

github-actions

.github/workflows/ci-main.yaml

• actions/checkout v4
• actions/setup-dotnet v4
• actions/setup-go v5
• actions/checkout v4

.github/workflows/ci-pr.yaml

• actions/checkout v4
• actions/setup-dotnet v4
• actions/setup-go v5
• actions/checkout v4

.github/workflows/helm-chart-ci.yaml

• actions/checkout v4
• ubuntu 22.04

.github/workflows/kubevious-manifests-ci.yaml

• actions/checkout v4
• kubevious/cli v1.0.60
• kubevious/cli v1.0.60
• kubevious/cli v1.0.60
• kubevious/cli v1.0.60
• ubuntu 22.04

.github/workflows/kustomize-build-ci.yaml

• actions/checkout v4
• ubuntu 22.04

.github/workflows/push-deploy.yaml

• actions/checkout v4

.github/workflows/terraform-validate-ci.yaml

• actions/checkout v4
• ubuntu 22.04

gomod

src/checkoutservice/go.mod

• go 1.21
• go 1.22.3
• cloud.google.com/go/profiler v0.4.0
• github.com/golang/protobuf v1.5.4
• github.com/google/uuid v1.6.0
• github.com/pkg/errors v0.9.1
• github.com/sirupsen/logrus v1.9.3
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.51.0
• go.opentelemetry.io/otel v1.26.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.26.0
• go.opentelemetry.io/otel/sdk v1.26.0
• golang.org/x/net v0.25.0
• google.golang.org/grpc v1.63.2

src/frontend/go.mod

• go 1.22
• cloud.google.com/go/compute/metadata v0.3.0
• cloud.google.com/go/profiler v0.4.0
• github.com/go-playground/validator/v10 v10.20.0
• github.com/golang/protobuf v1.5.4
• github.com/google/uuid v1.6.0
• github.com/gorilla/mux v1.8.1
• github.com/pkg/errors v0.9.1
• github.com/sirupsen/logrus v1.9.3
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.51.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.51.0
• go.opentelemetry.io/otel v1.26.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.26.0
• go.opentelemetry.io/otel/sdk v1.26.0
• golang.org/x/net v0.25.0
• google.golang.org/grpc v1.63.2

src/productcatalogservice/go.mod

• go 1.22
• cloud.google.com/go/alloydbconn v1.9.0
• cloud.google.com/go/profiler v0.4.0
• cloud.google.com/go/secretmanager v1.13.0
• github.com/golang/protobuf v1.5.4
• github.com/jackc/pgx/v5 v5.5.5
• github.com/pkg/errors v0.9.1
• github.com/sirupsen/logrus v1.9.3
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.51.0
• go.opentelemetry.io/otel v1.26.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.26.0
• go.opentelemetry.io/otel/sdk v1.26.0
• golang.org/x/net v0.25.0
• google.golang.org/grpc v1.63.2

src/shippingservice/go.mod

• go 1.19
• cloud.google.com/go/profiler v0.4.0
• github.com/golang/protobuf v1.5.4
• github.com/sirupsen/logrus v1.9.3
• golang.org/x/net v0.25.0
• google.golang.org/grpc v1.63.2

gradle

src/adservice/settings.gradle

src/adservice/build.gradle

• com.google.protobuf 0.9.4
• com.github.sherter.google-java-format 0.9
• com.google.api.grpc:proto-google-common-protos 2.39.0
• javax.annotation:javax.annotation-api 1.3.2
• io.grpc:grpc-protobuf 1.63.0
• io.grpc:grpc-stub 1.63.0
• io.grpc:grpc-netty 1.63.0
• io.grpc:grpc-services 1.63.0
• io.grpc:grpc-census 1.63.0
• org.apache.logging.log4j:log4j-core 2.23.1
• com.google.protobuf:protobuf-java 3.25.3
• com.fasterxml.jackson.core:jackson-core 2.17.1
• com.fasterxml.jackson.core:jackson-databind 2.17.1
• io.netty:netty-tcnative-boringssl-static 2.0.65.Final
• com.google.protobuf:protoc 3.25.3
• io.grpc:protoc-gen-grpc-java 1.63.0
• googleJavaFormat 1.22.0

gradle-wrapper

src/adservice/gradle/wrapper/gradle-wrapper.properties

• gradle 8.7

kubernetes

.github/release-cluster/frontend-ingress.yaml

• Ingress networking.k8s.io/v1

helm-chart/templates/adservice.yaml

helm-chart/templates/cartservice.yaml

• redis alpine@sha256:a40e29800d387e3cf9431902e1e7a362e4d819233d68ae39380532c3310091ac

helm-chart/templates/checkoutservice.yaml

helm-chart/templates/common.yaml

• NetworkPolicy networking.k8s.io/v1

helm-chart/templates/currencyservice.yaml

helm-chart/templates/emailservice.yaml

helm-chart/templates/frontend.yaml

helm-chart/templates/loadgenerator.yaml

• busybox latest@sha256:5eef5ed34e1e1ff0a4ae850395cbf665c4de6b4b83a32a0bc7bcb998e24e7bbb

helm-chart/templates/opentelemetry-collector.yaml

• busybox latest@sha256:5eef5ed34e1e1ff0a4ae850395cbf665c4de6b4b83a32a0bc7bcb998e24e7bbb
• otel/opentelemetry-collector-contrib 0.99.0@sha256:42d938c88a19388fc6a37dca64a3643874aba92b88df8ca985eeda3421c8cc80
• Deployment apps/v1
• NetworkPolicy networking.k8s.io/v1

helm-chart/templates/paymentservice.yaml

helm-chart/templates/productcatalogservice.yaml

helm-chart/templates/recommendationservice.yaml

helm-chart/templates/shippingservice.yaml

kubernetes-manifests/adservice.yaml

• Deployment apps/v1

kubernetes-manifests/cartservice.yaml

• Deployment apps/v1
• Deployment apps/v1

kubernetes-manifests/checkoutservice.yaml

• Deployment apps/v1

kubernetes-manifests/currencyservice.yaml

• Deployment apps/v1

kubernetes-manifests/emailservice.yaml

• Deployment apps/v1

kubernetes-manifests/frontend.yaml

• Deployment apps/v1

kubernetes-manifests/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

kubernetes-manifests/loadgenerator.yaml

• Deployment apps/v1

kubernetes-manifests/paymentservice.yaml

• Deployment apps/v1

kubernetes-manifests/productcatalogservice.yaml

• Deployment apps/v1

kubernetes-manifests/recommendationservice.yaml

• Deployment apps/v1

kubernetes-manifests/shippingservice.yaml

• Deployment apps/v1

kustomize/components/google-cloud-operations/otel-collector.yaml

• busybox latest@sha256:5eef5ed34e1e1ff0a4ae850395cbf665c4de6b4b83a32a0bc7bcb998e24e7bbb
• otel/opentelemetry-collector-contrib 0.99.0@sha256:42d938c88a19388fc6a37dca64a3643874aba92b88df8ca985eeda3421c8cc80
• Deployment apps/v1

kustomize/components/network-policies/network-policy-adservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-cartservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-checkoutservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-currencyservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-deny-all.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-emailservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-frontend.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-loadgenerator.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-paymentservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-productcatalogservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-recommendationservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-redis.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/network-policies/network-policy-shippingservice.yaml

• NetworkPolicy networking.k8s.io/v1

kustomize/components/shopping-assistant/shoppingassistantservice.yaml

• Deployment apps/v1

kustomize/components/without-loadgenerator/delete-loadgenerator.patch.yaml

• Deployment apps/v1

kustomize/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

kustomize/tests/memorystore-with-all-components/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

kustomize/tests/service-mesh-istio-with-all-components/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

kustomize/tests/spanner-with-all-components/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

skaffold.yaml

kustomize

kustomize/components/container-images-registry/kustomization.yaml

kustomize/components/container-images-tag/kustomization.yaml

npm

src/currencyservice/package.json

• @google-cloud/profiler 6.0.1
• @google-cloud/trace-agent 8.0.0
• @grpc/grpc-js 1.10.7
• @grpc/proto-loader 0.7.13
• async 3.2.5
• google-protobuf 3.21.2
• @opentelemetry/api 1.8.0
• @opentelemetry/exporter-otlp-grpc 0.26.0
• @opentelemetry/instrumentation-grpc 0.51.1
• @opentelemetry/resources 1.24.1
• @opentelemetry/semantic-conventions 1.24.1
• @opentelemetry/sdk-trace-base 1.24.1
• @opentelemetry/sdk-node 0.51.1
• pino 9.0.0
• xml2js 0.6.2

src/paymentservice/package.json

• @google-cloud/profiler 6.0.1
• @grpc/grpc-js 1.10.7
• @grpc/proto-loader 0.7.13
• @opentelemetry/api 1.8.0
• @opentelemetry/exporter-otlp-grpc 0.26.0
• @opentelemetry/instrumentation-grpc 0.51.1
• @opentelemetry/sdk-trace-base 1.24.1
• @opentelemetry/sdk-node 0.51.1
• @opentelemetry/resources 1.24.1
• @opentelemetry/semantic-conventions 1.24.1
• pino 9.0.0
• simple-card-validator ^1.1.0
• uuid ^9.0.0

nuget

src/cartservice/src/cartservice.csproj

• Google.Cloud.SecretManager.V1 2.4.0
• Npgsql 8.0.3
• Google.Cloud.Spanner.Data 4.6.0
• Microsoft.Extensions.Caching.StackExchangeRedis 8.0.4
• Grpc.HealthCheck 2.62.0
• Grpc.AspNetCore 2.62.0

src/cartservice/tests/cartservice.tests.csproj

• xunit.runner.visualstudio 2.8.0
• xunit 2.8.0
• Microsoft.NET.Test.Sdk 17.9.0
• Microsoft.AspNetCore.TestHost 8.0.4
• Grpc.Net.Client 2.62.0

pip-compile

src/shoppingassistantservice/requirements.in

• flask ==3.0.3
• langchain-google-genai ==1.0.3
• langchain ==0.1.17
• pillow ==10.3.0
• langchain-google-alloydb-pg ==0.2.2
• google-cloud-secret-manager ==2.20.0

src/recommendationservice/requirements.in

• google-api-core ==2.19.0
• google-cloud-profiler ==4.1.0
• grpcio-health-checking ==1.63.0
• python-json-logger ==2.0.7
• requests ==2.31.0
• rsa ==4.9
• opentelemetry-distro ==0.41b0
• opentelemetry-instrumentation-grpc ==0.45b0
• opentelemetry-exporter-otlp-proto-grpc ==1.24.0

src/loadgenerator/requirements.in

• locust ==2.26.0
• faker ==25.0.1

src/emailservice/requirements.in

• google-api-core ==2.19.0
• grpcio-health-checking ==1.63.0
• grpcio ==1.63.0
• jinja2 ==3.1.4
• python-json-logger ==2.0.7
• google-cloud-profiler ==4.1.0
• google-cloud-trace ==1.13.3
• requests ==2.31.0
• opentelemetry-distro ==0.41b0
• opentelemetry-instrumentation-grpc ==0.45b0
• opentelemetry-exporter-otlp-proto-grpc ==1.24.0

terraform

.github/terraform/main.tf

• terraform-google-modules/project-factory/google ~> 15.0

.github/terraform/versions.tf

• google ~> 5.4
• hashicorp/terraform >= 0.13

terraform/main.tf

• terraform-google-modules/project-factory/google ~> 15.0
• terraform-google-modules/gcloud/google ~> 3.0

terraform/providers.tf

• google 5.28.0

---

• Check this box to trigger a request for Renovate to run again on this repository