Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. You can view the repository logs in the Renovate App Dashboard and read the Dependency Dashboard docs to learn more.

Rate Limited

These updates are currently rate limited. Click on a checkbox below to force their creation now.

• [ ] Update dependency nginx to v1.23.0
• [ ] Update dependency openjdk to v20

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [ ] Update actions/cache action to v2.1.7
• [ ] Update dependency cglib:cglib-nodep to v2.2.2
• [ ] Update dependency com.google.guava:guava to v30.1.1-jre
• [ ] Update dependency com.thoughtworks.xstream:xstream to v1.4.19
• [ ] Update dependency openjdk to v11.0.3
• [ ] Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.0.0-M7
• [ ] Update dependency org.bitbucket.b_c:jose4j to v0.7.12
• [ ] Update dependency org.codehaus.mojo:flatten-maven-plugin to v1.2.7
• [ ] Update dependency org.glassfish.jaxb:jaxb-runtime to v2.3.6
• [ ] Update dependency org.webjars:bootstrap to v3.4.1
• [ ] Update actions/checkout action to v2.4.2
• [ ] Update cirrus-actions/rebase action to v1.7
• [ ] Update dependency com.nulab-inc:zxcvbn to v1.7.0
• [ ] Update dependency commons-io:commons-io to v2.11.0
• [ ] Update dependency io.github.bonigarcia:webdrivermanager to v4.4.3
• [ ] Update dependency org.apache.maven.plugins:maven-antrun-plugin to v3.1.0
• [ ] Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.10.1
• [ ] Update dependency org.apache.maven.plugins:maven-pmd-plugin to v3.17.0
• [ ] Update dependency org.asciidoctor:asciidoctor-maven-plugin to v1.6.0
• [ ] Update dependency org.asciidoctor:asciidoctorj to v2.5.4
• [ ] Update dependency org.jsoup:jsoup to v1.15.2
• [ ] Update dependency org.owasp:dependency-check-maven to v6.5.3
• [ ] Update dependency org.springframework.boot:spring-boot-starter-parent to v2.7.1
• [ ] Update dependency org.springframework.security:spring-security-test to v5.7.2
• [ ] Update dependency org.webjars:jquery to v3.6.0
• [ ] Update docker/build-push-action action to v2.10.0
• [ ] Update docker/login-action action to v1.14.1
• [ ] Update docker/setup-qemu-action action to v1.2.0
• [ ] Update Node.js to v18
• [ ] Update actions/cache action to v3
• [ ] Update actions/checkout action to v3
• [ ] Update actions/setup-java action to v3
• [ ] Update dependency cglib:cglib-nodep to v3
• [ ] Update dependency com.google.guava:guava to v31
• [ ] Update dependency io.github.bonigarcia:webdrivermanager to v5
• [ ] Update dependency org.asciidoctor:asciidoctor-maven-plugin to v2
• [ ] Update dependency org.glassfish.jaxb:jaxb-runtime to v4
• [ ] Update dependency org.owasp:dependency-check-maven to v7
• [ ] Update dependency org.webjars:bootstrap to v5
• [ ] Update docker/build-push-action action to v3
• [ ] Update docker/login-action action to v2
• [ ] Update docker/setup-buildx-action action to v2
• [ ] Update docker/setup-qemu-action action to v2
• [ ] Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

docker/Dockerfile

- `openjdk 16-slim`

dockerfile

- `node 12-alpine`

webgoat-server/Dockerfile

- `openjdk 11.0.1-jre-slim-stretch`

webwolf/Dockerfile

- `openjdk 11.0.1-jre-slim-stretch`

github-actions

.github/workflows/build.yml

- `actions/checkout v2` - `actions/setup-java v2` - `actions/cache v2.1.5` - `Gamesight/slack-workflow-status master`

.github/workflows/rebase.yml

- `actions/checkout v2` - `cirrus-actions/rebase 1.4`

.github/workflows/release.yml

- `actions/checkout v2.3.4` - `dawidd6/action-get-tag v1` - `actions/setup-java v2` - `actions/cache v2.1.5` - `softprops/action-gh-release v1` - `docker/setup-qemu-action v1.1.0` - `docker/setup-buildx-action v1` - `docker/login-action v1.9.0` - `docker/build-push-action v2.4.0` - `actions/checkout v2.3.4` - `actions/setup-java v2`

.github/workflows/welcome.yml

- `actions/first-interaction v1.1.0`

kubernetes

nginx.yaml

- `nginx 1.14.2`

maven

docker/pom.xml

- `org.owasp.webgoat:webgoat-parent 8.2.1-SNAPSHOT` - `org.apache.maven.plugins:maven-antrun-plugin 3.0.0`

pom.xml

- `org.springframework.boot:spring-boot-starter-parent 2.4.3` - `org.apache.commons:commons-exec 1.3` - `org.codehaus.mojo:flatten-maven-plugin 1.2.5` - `org.apache.maven.plugins:maven-compiler-plugin 3.8.0` - `org.apache.maven.plugins:maven-checkstyle-plugin 3.1.2` - `org.apache.maven.plugins:maven-pmd-plugin 3.14.0` - `org.owasp:dependency-check-maven 6.1.3` - `javax.activation:activation 1.1.1` - `org.apache.maven.plugins:maven-surefire-plugin 3.0.0-M4` - `com.google.guava:guava 30.1-jre` - `commons-io:commons-io 2.7`

webgoat-container/pom.xml

- `org.owasp.webgoat:webgoat-parent 8.2.1-SNAPSHOT` - `org.asciidoctor:asciidoctorj 2.4.3`

webgoat-integration-tests/pom.xml

- `org.owasp.webgoat:webgoat-parent 8.2.1-SNAPSHOT` - `io.github.bonigarcia:webdrivermanager 4.3.1` - `org.owasp.webgoat:webgoat-server ${project.version}` - `org.owasp.webgoat:webgoat-server ${project.version}` - `org.owasp.webgoat:webwolf ${project.version}` - `org.owasp.webgoat:webwolf ${project.version}`

webgoat-lessons/auth-bypass/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/bypass-restrictions/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/challenge/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT` - `io.jsonwebtoken:jjwt 0.9.1`

webgoat-lessons/chrome-dev-tools/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/cia/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/client-side-filtering/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/cross-site-scripting/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT` - `org.jsoup:jsoup 1.14.2` - `org.asciidoctor:asciidoctor-maven-plugin 1.5.3`

webgoat-lessons/crypto/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/csrf/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/html-tampering/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/http-basics/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/http-proxies/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/idor/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/insecure-deserialization/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/insecure-login/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/jwt/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT` - `io.jsonwebtoken:jjwt 0.9.1` - `org.springframework.security:spring-security-test 5.4.5`

webgoat-lessons/missing-function-ac/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/password-reset/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/path-traversal/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/pom.xml

- `org.owasp.webgoat:webgoat-parent 8.2.1-SNAPSHOT` - `org.owasp.webgoat:webgoat-container ${project.version}` - `org.owasp.webgoat:webgoat-container ${project.version}` - `org.owasp.webgoat:webgoat-container ${project.version}`

webgoat-lessons/secure-passwords/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT` - `com.nulab-inc:zxcvbn 1.4.0`

webgoat-lessons/sql-injection/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/ssrf/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/vulnerable-components/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT` - `com.thoughtworks.xstream:xstream 1.4.5` - `cglib:cglib-nodep 2.2` - `ant:ant-launcher 1.6.5` - `ant:ant 1.6.5` - `xml-resolver:xml-resolver 1.2`

webgoat-lessons/webgoat-introduction/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/webgoat-lesson-template/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/webwolf-introduction/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT`

webgoat-lessons/xxe/pom.xml

- `org.owasp.webgoat.lesson:webgoat-lessons-parent 8.2.1-SNAPSHOT` - `commons-lang:commons-lang 2.6` - `org.glassfish.jaxb:jaxb-runtime 2.3.0` - `com.github.tomakehurst:wiremock 2.27.2`

webgoat-server/pom.xml

- `org.owasp.webgoat:webgoat-parent 8.2.1-SNAPSHOT` - `org.owasp.webgoat:webgoat-container ${project.version}` - `org.owasp.webgoat.lesson:challenge ${project.version}` - `org.owasp.webgoat.lesson:bypass-restrictions ${project.version}` - `org.owasp.webgoat.lesson:client-side-filtering ${project.version}` - `org.owasp.webgoat.lesson:crypto ${project.version}` - `org.owasp.webgoat.lesson:cross-site-scripting ${project.version}` - `org.owasp.webgoat.lesson:html-tampering ${project.version}` - `org.owasp.webgoat.lesson:http-basics ${project.version}` - `org.owasp.webgoat.lesson:http-proxies ${project.version}` - `org.owasp.webgoat.lesson:cia ${project.version}` - `org.owasp.webgoat.lesson:chrome-dev-tools ${project.version}` - `org.owasp.webgoat.lesson:idor ${project.version}` - `org.owasp.webgoat.lesson:csrf ${project.version}` - `org.owasp.webgoat.lesson:insecure-login ${project.version}` - `org.owasp.webgoat.lesson:insecure-deserialization ${project.version}` - `org.owasp.webgoat.lesson:jwt ${project.version}` - `org.owasp.webgoat.lesson:path-traversal ${project.version}` - `org.owasp.webgoat.lesson:sql-injection ${project.version}` - `org.owasp.webgoat.lesson:vulnerable-components ${project.version}` - `org.owasp.webgoat.lesson:xxe ${project.version}` - `org.owasp.webgoat.lesson:auth-bypass ${project.version}` - `org.owasp.webgoat.lesson:webgoat-introduction ${project.version}` - `org.owasp.webgoat.lesson:webwolf-introduction ${project.version}` - `org.owasp.webgoat.lesson:missing-function-ac ${project.version}` - `org.owasp.webgoat.lesson:password-reset ${project.version}` - `org.owasp.webgoat.lesson:ssrf ${project.version}` - `org.owasp.webgoat.lesson:secure-passwords ${project.version}` - `org.owasp.webgoat.lesson:webgoat-lesson-template ${project.version}`

webwolf/pom.xml

- `org.owasp.webgoat:webgoat-parent 8.2.1-SNAPSHOT` - `org.bitbucket.b_c:jose4j 0.7.6` - `org.webjars:bootstrap 3.4.0` - `org.webjars:jquery 3.5.1`

---

• [x] Check this box to trigger a request for Renovate to run again on this repository

[github-actions[bot]]

Thanks for submitting your first issue, we will have a look as quickly as possible.