Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency mise to 2026.6.2

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency Microsoft.Extensions.Logging to 9.0.17
• Update dependency Microsoft.NETFramework.ReferenceAssemblies to 1.0.3
• Update dependency Microsoft.NETFramework.ReferenceAssemblies.net472 to 1.0.3
• Update dependency Newtonsoft.Json to 13.0.4
• Update dependency System.Collections.Immutable to 9.0.17
• Update dependency System.Composition.AttributedModel to 9.0.17
• Update dependency coverlet.collector to 3.2.0
• Update dependency coverlet.msbuild to 3.2.0
• Update dependency FluentAssertions to 6.12.2
• Update dependency Microsoft.NET.Test.Sdk to 16.11.0
• Update dependency Moq to 4.20.72
• Update dependency MSTest.TestAdapter to 3.11.1
• Update dependency MSTest.TestFramework to 3.11.1
• Update dependency NUnit to 3.14.0
• Update dependency NUnit3TestAdapter to 3.17.0
• Update dependency org.awaitility:awaitility to v4.3.0
• Update dependency org.codehaus.woodstox:stax2-api to v4.3.0
• Update dependency org.mockito:mockito-core to v4.11.0
• Update dependency SQLitePCLRaw.core to 2.1.11
• Update dependency System.Reactive to 6.1.0
• Update github actions (SonarSource/ci-github-actions, SonarSource/gh-action_release, SonarSource/release-github-actions, SonarSource/unified-dogfooding-actions, SonarSource/vault-action-wrapper, actions/checkout, actions/download-artifact, actions/upload-artifact)
• Update dependency coverlet.collector to v10
• Update dependency coverlet.msbuild to v10
• Update dependency FluentAssertions to v8
• Update dependency Microsoft.Extensions.Logging to v10
• Update dependency Microsoft.NET.Test.Sdk to v18
• Update dependency MSTest.TestAdapter to v4
• Update dependency MSTest.TestFramework to v4
• Update dependency NUnit to v4
• Update dependency NUnit3TestAdapter to v6
• Update dependency org.mockito:mockito-core to v5
• Update dependency SQLitePCLRaw.core to v3
• Update dependency System.Collections.Immutable to v10
• Update dependency System.Composition.AttributedModel to v10
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update dependency ch.qos.logback:logback-classic to v1.5.34
• Update dependency org.slf4j:slf4j-api to v2.0.18
• Update analyzer.version (org.sonarsource.dotnet:sonar-csharp-plugin, org.sonarsource.sonarlint.core:sonarlint-plugin-api, org.sonarsource.sonarlint.core:sonarlint-rpc-java-client, org.sonarsource.sonarlint.core:sonarlint-rpc-impl, org.sonarsource.sonarlint.core:sonarlint-rpc-protocol, org.sonarsource.sonarlint.core:sonarlint-java-client-utils, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api, org.sonarsource.sonarqube:sonar-plugin-api-impl, org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures, org.sonarsource.api.plugin:sonar-plugin-api, org.sonarsource.analyzer-commons:sonar-analyzer-commons)
• Update dependency com.google.code.gson:gson to v2.14.0
• Update dependency commons-io:commons-io to v2.22.0
• Update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.11.0
• Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6
• Update github actions (major) (actions/checkout, actions/download-artifact, actions/upload-artifact, jdx/mise-action)
• Update junit.version to v6 (org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)

Detected Dependencies

github-actions (10)

.github/workflows/build.yml (28)

• actions/checkout v5 → [Updates: v5.0.1, v6]
• jdx/mise-action v2.4.4@c37c93293d6b742fc901e1406b8f764f6fb19dac → [Updates: v4.1.0]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• SonarSource/ci-github-actions 1.4.0@9456e3aab93a6c6d0c459b977aaa594bda102e29 → [Updates: 1.6.0]
• actions/checkout v5 → [Updates: v5.0.1, v6]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• actions/upload-artifact v4 → [Updates: v4.6.2, v7]
• actions/checkout v5 → [Updates: v5.0.1, v6]
• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.1.0]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• SonarSource/ci-github-actions 1.4.0@9456e3aab93a6c6d0c459b977aaa594bda102e29 → [Updates: 1.6.0]
• actions/upload-artifact v4 → [Updates: v4.6.2, v7]
• actions/checkout v5 → [Updates: v5.0.1, v6]
• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.1.0]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• SonarSource/ci-github-actions 1.4.0@9456e3aab93a6c6d0c459b977aaa594bda102e29 → [Updates: 1.6.0]
• actions/upload-artifact v4 → [Updates: v4.6.2, v7]
• actions/checkout v5 → [Updates: v5.0.1, v6]
• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.1.0]
• actions/download-artifact v5 → [Updates: v5.0.0, v8]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• SonarSource/ci-github-actions 1.4.0@9456e3aab93a6c6d0c459b977aaa594bda102e29 → [Updates: 1.6.0]
• actions/checkout v5 → [Updates: v5.0.1, v6]
• jdx/mise-action v3.6.3@5228313ee0372e111a38da051671ca30fc5a96db → [Updates: v4.1.0]
• actions/download-artifact v5 → [Updates: v5.0.0, v8]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• SonarSource/ci-github-actions 1.4.0@9456e3aab93a6c6d0c459b977aaa594bda102e29 → [Updates: 1.6.0]
• SonarSource/ci-github-actions 1.4.0@9456e3aab93a6c6d0c459b977aaa594bda102e29 → [Updates: 1.6.0]

.github/workflows/full-release.yml (3)

• SonarSource/release-github-actions 1.5.10@baea6012647dfc12521bb994b97a2a9438412e6d → [Updates: 1.7.2]
• SonarSource/release-github-actions 1.5.10@baea6012647dfc12521bb994b97a2a9438412e6d → [Updates: 1.7.2]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]

.github/workflows/notify-failure.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• slackapi/slack-github-action v3.0.3@45a88b9581bfab2566dc881e2cd66d334e621e2c

.github/workflows/pr-cleanup.yml (1)

• SonarSource/ci-github-actions 1.4.0@9456e3aab93a6c6d0c459b977aaa594bda102e29 → [Updates: 1.6.0]

.github/workflows/PullRequestClosed.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• sonarsource/gh-action-lt-backlog v2

.github/workflows/PullRequestCreated.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• sonarsource/gh-action-lt-backlog v2

.github/workflows/release.yml (1)

• SonarSource/gh-action_release 7.0.1@95ca260926950eedcc8c69437f9f12b6f0584de4 → [Updates: 7.4.0]

.github/workflows/RequestReview.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• sonarsource/gh-action-lt-backlog v2

.github/workflows/shadow_scans.yml (8)

• actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v6.0.3]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• jdx/mise-action v2.4.4@c37c93293d6b742fc901e1406b8f764f6fb19dac → [Updates: v4.1.0]
• SonarSource/ci-github-actions 1.4.0@9456e3aab93a6c6d0c459b977aaa594bda102e29 → [Updates: 1.6.0]
• SonarSource/unified-dogfooding-actions 1.0.0@54cee68ff08f10645c757675c59d232063e0b947 → [Updates: 1.1.0]
• actions/checkout v5 → [Updates: v5.0.1, v6]
• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• SonarSource/unified-dogfooding-actions 1.0.0@54cee68ff08f10645c757675c59d232063e0b947 → [Updates: 1.1.0]

.github/workflows/SubmitReview.yml (2)

• SonarSource/vault-action-wrapper 3.4.0@c154b4a417b51cb98dd71137f49bf20e77c56820 → [Updates: 3.6.1]
• sonarsource/gh-action-lt-backlog v2

maven (3)

its/pom.xml (4)

• com.google.code.findbugs:jsr305 3.0.2
• org.apache.maven.plugins:maven-surefire-plugin 3.0.0-M7 → [Updates: 3.5.6]
• com.googlecode.maven-download-plugin:download-maven-plugin 1.13.0
• org.apache.maven.plugins:maven-dependency-plugin 3.6.1 → [Updates: 3.11.0]

omnisharp-plugin/pom.xml (12)

• org.sonarsource.api.plugin:sonar-plugin-api 13.5.0.4319 → [Updates: 13.8.0.4399]
• com.google.code.findbugs:jsr305 3.0.2
• org.sonarsource.analyzer-commons:sonar-analyzer-commons 2.22.0.4796 → [Updates: 2.24.0.4903]
• com.google.code.gson:gson 2.8.9 → [Updates: 2.14.0]
• org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures 13.5.0.4319 → [Updates: 13.8.0.4399]
• org.sonarsource.sonarqube:sonar-plugin-api-impl 26.4.0.121862 → [Updates: 26.6.0.123539]
• org.slf4j:slf4j-api 2.0.17 → [Updates: 2.0.18]
• ch.qos.logback:logback-classic 1.5.25 → [Updates: 1.5.34]
• org.awaitility:awaitility 4.1.0 → [Updates: 4.3.0]
• org.codehaus.woodstox:stax2-api 4.2.1 → [Updates: 4.3.0]
• org.codehaus.staxmate:staxmate 2.0.1
• org.apache.commons:commons-lang3 3.20.0

pom.xml (15)

• org.sonarsource.sonarlint.core:sonarlint-java-client-utils 11.1.0.85284 → [Updates: 11.4.0.85676]
• org.sonarsource.sonarlint.core:sonarlint-rpc-protocol 11.1.0.85284 → [Updates: 11.4.0.85676]
• org.sonarsource.sonarlint.core:sonarlint-rpc-impl 11.1.0.85284 → [Updates: 11.4.0.85676]
• org.sonarsource.sonarlint.core:sonarlint-rpc-java-client 11.1.0.85284 → [Updates: 11.4.0.85676]
• org.sonarsource.dotnet:sonar-csharp-plugin 10.24.0.138807 → [Updates: 10.27.0.140913]
• org.sonarsource.sonarlint.core:sonarlint-plugin-api 11.1.0.85284 → [Updates: 11.4.0.85676]
• org.sonarsource.dotnet:sonar-csharp-plugin 10.24.0.138807 → [Updates: 10.27.0.140913]
• org.sonarsource.parent:parent 87.0.0.3057
• org.junit.jupiter:junit-jupiter-api 5.9.1 → [Updates: 5.14.4, 6.1.0]
• org.junit.jupiter:junit-jupiter-engine 5.9.1 → [Updates: 5.14.4, 6.1.0]
• org.junit.jupiter:junit-jupiter-params 5.9.1 → [Updates: 5.14.4, 6.1.0]
• org.assertj:assertj-core 3.27.7
• org.mockito:mockito-core 4.8.0 → [Updates: 4.11.0, 5.23.0]
• commons-io:commons-io 2.18.0 → [Updates: 2.22.0]
• com.googlecode.maven-download-plugin:download-maven-plugin 1.13.0

mise (1)

mise.toml (1)

• maven 3.9

nuget (3)

its/src/test/projects/ConsoleApp1WithTestProject/TestProject1/TestProject1.csproj (3)

• Microsoft.NET.Test.Sdk 16.5.0 → [Updates: 16.11.0, 18.6.0]
• NUnit3TestAdapter 3.16.1 → [Updates: 3.17.0, 6.2.0]
• NUnit 3.12.0 → [Updates: 3.14.0, 4.6.1]

omnisharp-dotnet/src/Services.UnitTests/SonarLint.OmniSharp.DotNet.Services.UnitTests.csproj (10)

• SQLitePCLRaw.core 2.0.7 → [Updates: 2.1.11, 3.0.3]
• MSTest.TestFramework 3.10.4 → [Updates: 3.11.1, 4.2.3]
• MSTest.TestAdapter 3.10.4 → [Updates: 3.11.1, 4.2.3]
• Moq 4.14.5 → [Updates: 4.20.72]
• Microsoft.NETFramework.ReferenceAssemblies.net472 1.0.0 → [Updates: 1.0.3]
• Microsoft.NETFramework.ReferenceAssemblies 1.0.0 → [Updates: 1.0.3]
• Microsoft.NET.Test.Sdk 16.6.1 → [Updates: 16.11.0, 18.6.0]
• FluentAssertions 6.3.0 → [Updates: 6.12.2, 8.10.0]
• coverlet.msbuild 3.0.3 → [Updates: 3.2.0, 10.0.1]
• coverlet.collector 3.0.3 → [Updates: 3.2.0, 10.0.1]

omnisharp-dotnet/src/Services/SonarLint.OmniSharp.DotNet.Services.csproj (5)

• System.Reactive 6.0.0 → [Updates: 6.1.0]
• System.Collections.Immutable 9.0.0 → [Updates: 9.0.17, 10.0.9]
• System.Composition.AttributedModel 9.0.0 → [Updates: 9.0.17, 10.0.9]
• Microsoft.Extensions.Logging 9.0.0 → [Updates: 9.0.17, 10.0.9]
• Newtonsoft.Json 13.0.3 → [Updates: 13.0.4]

regex (2)

.github/workflows/build.yml (5)

• mise 2025.9.12 → [Updates: 2026.6.2]
• mise 2025.9.12 → [Updates: 2026.6.2]
• mise 2025.9.12 → [Updates: 2026.6.2]
• mise 2025.9.12 → [Updates: 2026.6.2]
• mise 2025.9.12 → [Updates: 2026.6.2]

.github/workflows/shadow_scans.yml (1)

• mise 2025.7.12 → [Updates: 2026.6.2]

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository