microservices-demo
microservices-demo copied to clipboard
Dependency Dashboard
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Config Migration Needed
- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.
[!WARNING] These dependencies are deprecated:
| Datasource | Name | Replacement PR? |
|---|---|---|
| npm | @opentelemetry/exporter-otlp-grpc |
Awaiting Schedule
These updates are awaiting their schedule. Click on a checkbox to get an update now.
- [ ] chore(deps): update busybox:latest docker digest to f85340b
Rate-Limited
These updates are currently rate-limited. Click on a checkbox below to force their creation now.
- [ ] chore(deps): update gcr.io/k8s-skaffold/skaffold docker tag to v2.16.0
Open
These updates have all been created already. Click a checkbox below to force a retry/rebase of any.
- [ ] chore(deps): update dependency flask to v3.1.1 [security]
- [ ] chore(deps): update dependency jinja2 to v3.1.6 [security]
- [ ] chore(deps): update dependency requests to v2.32.4 [security]
- [ ] fix(deps): update module golang.org/x/net to v0.38.0 [security]
- [ ] chore(deps): update redis:alpine docker digest to 48501c5
- [ ] chore(deps): update kubevious/cli action to v1.0.64
- [ ] fix(deps): update golang (
cloud.google.com/go/alloydbconn,cloud.google.com/go/compute/metadata,cloud.google.com/go/secretmanager,github.com/go-playground/validator/v10,github.com/jackc/pgx/v5,go,go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc,go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp,go.opentelemetry.io/otel,go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc,go.opentelemetry.io/otel/sdk,google.golang.org/grpc) - [ ] fix(deps): update nodejs (
@google-cloud/profiler,@grpc/grpc-js,@grpc/proto-loader,@opentelemetry/instrumentation-grpc,@opentelemetry/sdk-node,@opentelemetry/semantic-conventions,pino) - [ ] chore(deps): update docker (
alpine,eclipse-temurin,golang,mcr.microsoft.com/dotnet/aspnet,mcr.microsoft.com/dotnet/runtime-deps,mcr.microsoft.com/dotnet/sdk,node,python) - [ ] chore(deps): update dotnet (
Grpc.AspNetCore,Grpc.HealthCheck,Grpc.Net.Client,Microsoft.AspNetCore.TestHost,Microsoft.Extensions.Caching.StackExchangeRedis,Microsoft.NET.Test.Sdk,xunit.runner.visualstudio) - [ ] chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.127.0
- [ ] chore(deps): update terraform google to v6.38.0
- [ ] fix(deps): update java (
gradle,googleJavaFormat,io.netty:netty-tcnative-boringssl-static,com.google.api.grpc:proto-google-common-protos,com.google.protobuf:protoc,com.google.protobuf:protobuf-java,com.fasterxml.jackson.core:jackson-databind,com.fasterxml.jackson.core:jackson-core,io.grpc:protoc-gen-grpc-java,io.grpc:grpc-census,io.grpc:grpc-services,io.grpc:grpc-netty,io.grpc:grpc-stub,io.grpc:grpc-protobuf) - [ ] chore(deps): update dependency faker to v37
- [ ] chore(deps): update dependency google.cloud.spanner.data to v5
- [ ] fix(deps): update opentelemetry-js monorepo to v2 (major) (
@opentelemetry/resources,@opentelemetry/sdk-trace-base) - [ ] chore(deps): refresh pip-compile outputs python (
undefined,google-api-core,google-cloud-secret-manager,grpcio,grpcio-health-checking,langchain,langchain-google-alloydb-pg,langchain-google-genai,locust,opentelemetry-exporter-otlp-proto-grpc,opentelemetry-instrumentation-grpc,pillow,rsa) - [ ] Click on this checkbox to rebase all open PRs at once
Ignored or Blocked
These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.
- [ ] chore(deps): update node.js to v22
Detected dependencies
cloudbuild
cloudbuild.yaml
gcr.io/k8s-skaffold/skaffold v2.14.1
dockerfile
src/adservice/Dockerfile
eclipse-temurin 21.0.5_11-jdk@sha256:a20cfa6afdbf57ff2c4de77ae2d0e3725a6349f1936b5ad7c3d1b06f6d1b840aeclipse-temurin 21.0.5_11-jre-alpine@sha256:4300bfe1e11f3dfc3e3512f39939f9093cf18d0e581d1ab1ccd0512f32fe33f0src/cartservice/src/Dockerfile
mcr.microsoft.com/dotnet/sdk 9.0.101-noble@sha256:1f13e67d295e02abdfd187c341f887442bad611eda536766172ced401fc8b9famcr.microsoft.com/dotnet/runtime-deps 9.0.1-noble-chiseled@sha256:6f7466eda39e24efaf7eab2325e15d776a685d13cc93b4ea0cde9ee4f7982210src/cartservice/src/Dockerfile.debug
mcr.microsoft.com/dotnet/sdk 9.0@sha256:7d24e90a392e88eb56093e4eb325ff883ad609382a55d42f17fd557b997022camcr.microsoft.com/dotnet/aspnet 9.0@sha256:372b16214ae67e3626a5b1513ade4a530eae10c172d56ce696163b046565fa46src/checkoutservice/Dockerfile
golang 1.23.4-alpine@sha256:c23339199a08b0e12032856908589a6d41a0dab141b8b3b21f156fc571a3f1d3src/currencyservice/Dockerfile
node 20.18.1-alpine@sha256:24fb6aa7020d9a20b00d6da6d1714187c45ed00d1eb4adb01395843c338b9372alpine 3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4asrc/emailservice/Dockerfile
python 3.12.8-alpine@sha256:54bec49592c8455de8d5983d984efff76b6417a6af9b5dcc8d0237bf6ad3bd20src/frontend/Dockerfile
golang 1.23.4-alpine@sha256:c23339199a08b0e12032856908589a6d41a0dab141b8b3b21f156fc571a3f1d3src/loadgenerator/Dockerfile
python 3.12.8-alpine@sha256:54bec49592c8455de8d5983d984efff76b6417a6af9b5dcc8d0237bf6ad3bd20src/paymentservice/Dockerfile
node 20.18.1-alpine@sha256:24fb6aa7020d9a20b00d6da6d1714187c45ed00d1eb4adb01395843c338b9372alpine 3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4asrc/productcatalogservice/Dockerfile
golang 1.23.4-alpine@sha256:c23339199a08b0e12032856908589a6d41a0dab141b8b3b21f156fc571a3f1d3src/recommendationservice/Dockerfile
python 3.12.8-alpine@sha256:54bec49592c8455de8d5983d984efff76b6417a6af9b5dcc8d0237bf6ad3bd20src/shippingservice/Dockerfile
golang 1.23.4-alpine@sha256:c23339199a08b0e12032856908589a6d41a0dab141b8b3b21f156fc571a3f1d3src/shoppingassistantservice/Dockerfile
python 3.12.8-slim@sha256:123be5684f39d8476e64f47a5fddf38f5e9d839baff5c023c815ae5bdfae0df7
github-actions
.github/workflows/ci-main.yaml
actions/checkout v4actions/setup-dotnet v4actions/setup-go v5actions/checkout v4go 1.24.github/workflows/ci-pr.yaml
actions/checkout v4actions/setup-dotnet v4actions/setup-go v5actions/checkout v4go 1.24.github/workflows/helm-chart-ci.yaml
actions/checkout v4ubuntu 24.04.github/workflows/kubevious-manifests-ci.yaml
actions/checkout v4kubevious/cli v1.0.62kubevious/cli v1.0.62kubevious/cli v1.0.62ubuntu 24.04.github/workflows/kustomize-build-ci.yaml
actions/checkout v4ubuntu 24.04.github/workflows/terraform-validate-ci.yaml
actions/checkout v4hashicorp/setup-terraform v3ubuntu 24.04
gomod
src/checkoutservice/go.mod
go 1.23cloud.google.com/go/profiler v0.4.2github.com/google/uuid v1.6.0github.com/pkg/errors v0.9.1github.com/sirupsen/logrus v1.9.3go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0go.opentelemetry.io/otel v1.35.0go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0go.opentelemetry.io/otel/sdk v1.35.0google.golang.org/grpc v1.71.0google.golang.org/protobuf v1.36.6src/frontend/go.mod
go 1.23cloud.google.com/go/compute/metadata v0.6.0cloud.google.com/go/profiler v0.4.2github.com/go-playground/validator/v10 v10.25.0github.com/google/uuid v1.6.0github.com/gorilla/mux v1.8.1github.com/pkg/errors v0.9.1github.com/sirupsen/logrus v1.9.3go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0go.opentelemetry.io/otel v1.35.0go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0go.opentelemetry.io/otel/sdk v1.35.0google.golang.org/grpc v1.71.0google.golang.org/protobuf v1.36.6src/productcatalogservice/go.mod
go 1.23.0go 1.24.1cloud.google.com/go/alloydbconn v1.15.0cloud.google.com/go/profiler v0.4.2cloud.google.com/go/secretmanager v1.14.6github.com/golang/protobuf v1.5.4github.com/jackc/pgx/v5 v5.7.4github.com/pkg/errors v0.9.1github.com/sirupsen/logrus v1.9.3go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0go.opentelemetry.io/otel v1.35.0go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0go.opentelemetry.io/otel/sdk v1.35.0google.golang.org/grpc v1.71.0google.golang.org/protobuf v1.36.6src/shippingservice/go.mod
go 1.23cloud.google.com/go/profiler v0.4.2github.com/sirupsen/logrus v1.9.3golang.org/x/net v0.35.0google.golang.org/grpc v1.71.0google.golang.org/protobuf v1.36.6
gradle
src/adservice/settings.gradle
src/adservice/build.gradle
com.google.protobuf 0.9.4com.github.sherter.google-java-format 0.9com.google.api.grpc:proto-google-common-protos 2.54.1javax.annotation:javax.annotation-api 1.3.2io.grpc:grpc-protobuf 1.71.0io.grpc:grpc-stub 1.71.0io.grpc:grpc-netty 1.71.0io.grpc:grpc-services 1.71.0io.grpc:grpc-census 1.71.0org.apache.logging.log4j:log4j-core 2.24.3com.google.protobuf:protobuf-java 4.30.1com.fasterxml.jackson.core:jackson-core 2.18.3com.fasterxml.jackson.core:jackson-databind 2.18.3io.netty:netty-tcnative-boringssl-static 2.0.70.Finalcom.google.protobuf:protoc 4.30.1io.grpc:protoc-gen-grpc-java 1.71.0googleJavaFormat 1.25.2
gradle-wrapper
src/adservice/gradle/wrapper/gradle-wrapper.properties
gradle 8.13
kubernetes
.github/release-cluster/frontend-ingress.yaml
Ingress networking.k8s.io/v1helm-chart/templates/cartservice.yaml
redis alpine@sha256:02419de7eddf55aa5bcf49efb74e88fa8d931b4d77c07eff8a6b2144472b6952helm-chart/templates/common.yaml
NetworkPolicy networking.k8s.io/v1helm-chart/templates/loadgenerator.yaml
busybox latest@sha256:37f7b378a29ceb4c551b1b5582e27747b855bbfaa73fa11914fe0df028dc581fhelm-chart/templates/opentelemetry-collector.yaml
busybox latest@sha256:37f7b378a29ceb4c551b1b5582e27747b855bbfaa73fa11914fe0df028dc581fotel/opentelemetry-collector-contrib 0.122.1@sha256:0076e6c250bef16968e29e8f94177b87b5a851c79ce14b270e657f5f655b9e04Deployment apps/v1NetworkPolicy networking.k8s.io/v1kubernetes-manifests/adservice.yaml
Deployment apps/v1kubernetes-manifests/cartservice.yaml
Deployment apps/v1Deployment apps/v1kubernetes-manifests/checkoutservice.yaml
Deployment apps/v1kubernetes-manifests/currencyservice.yaml
Deployment apps/v1kubernetes-manifests/emailservice.yaml
Deployment apps/v1kubernetes-manifests/frontend.yaml
Deployment apps/v1kubernetes-manifests/kustomization.yaml
Kustomization kustomize.config.k8s.io/v1beta1kubernetes-manifests/loadgenerator.yaml
Deployment apps/v1kubernetes-manifests/paymentservice.yaml
Deployment apps/v1kubernetes-manifests/productcatalogservice.yaml
Deployment apps/v1kubernetes-manifests/recommendationservice.yaml
Deployment apps/v1kubernetes-manifests/shippingservice.yaml
Deployment apps/v1kustomize/components/google-cloud-operations/otel-collector.yaml
busybox latest@sha256:37f7b378a29ceb4c551b1b5582e27747b855bbfaa73fa11914fe0df028dc581fotel/opentelemetry-collector-contrib 0.122.1@sha256:0076e6c250bef16968e29e8f94177b87b5a851c79ce14b270e657f5f655b9e04Deployment apps/v1kustomize/components/network-policies/network-policy-adservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-cartservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-checkoutservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-currencyservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-deny-all.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-emailservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-frontend.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-loadgenerator.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-paymentservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-productcatalogservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-recommendationservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-redis.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/network-policies/network-policy-shippingservice.yaml
NetworkPolicy networking.k8s.io/v1kustomize/components/shopping-assistant/shoppingassistantservice.yaml
Deployment apps/v1kustomize/components/without-loadgenerator/delete-loadgenerator.patch.yaml
Deployment apps/v1kustomize/kustomization.yaml
Kustomization kustomize.config.k8s.io/v1beta1kustomize/tests/memorystore-with-all-components/kustomization.yaml
Kustomization kustomize.config.k8s.io/v1beta1kustomize/tests/service-mesh-istio-with-all-components/kustomization.yaml
Kustomization kustomize.config.k8s.io/v1beta1kustomize/tests/spanner-with-all-components/kustomization.yaml
Kustomization kustomize.config.k8s.io/v1beta1skaffold.yaml
kustomize
kustomize/components/container-images-registry/kustomization.yaml
kustomize/components/container-images-tag/kustomization.yaml
npm
src/currencyservice/package.json
@google-cloud/profiler 6.0.2@google-cloud/trace-agent 8.0.0@grpc/grpc-js 1.13.1@grpc/proto-loader 0.7.13async 3.2.6google-protobuf 3.21.4@opentelemetry/api 1.9.0@opentelemetry/exporter-otlp-grpc 0.26.0@opentelemetry/instrumentation-grpc 0.200.0@opentelemetry/resources 1.30.1@opentelemetry/semantic-conventions 1.30.0@opentelemetry/sdk-trace-base 1.30.1@opentelemetry/sdk-node 0.200.0pino 9.6.0xml2js 0.6.2src/paymentservice/package.json
@google-cloud/profiler 6.0.2@grpc/grpc-js 1.13.1@grpc/proto-loader 0.7.13@opentelemetry/api 1.9.0@opentelemetry/exporter-otlp-grpc 0.26.0@opentelemetry/instrumentation-grpc 0.200.0@opentelemetry/sdk-trace-base 1.30.1@opentelemetry/sdk-node 0.200.0@opentelemetry/resources 1.30.1@opentelemetry/semantic-conventions 1.30.0pino 9.6.0simple-card-validator ^1.1.0uuid ^11.0.0
nuget
src/cartservice/src/cartservice.csproj
Google.Cloud.SecretManager.V1 2.5.0Npgsql 9.0.3Google.Cloud.Spanner.Data 4.6.0Microsoft.Extensions.Caching.StackExchangeRedis 9.0.2Grpc.HealthCheck 2.70.0Grpc.AspNetCore 2.70.0src/cartservice/tests/cartservice.tests.csproj
xunit.runner.visualstudio 3.0.2xunit 2.9.3Microsoft.NET.Test.Sdk 17.13.0Microsoft.AspNetCore.TestHost 9.0.3Grpc.Net.Client 2.70.0
pip-compile
src/shoppingassistantservice/requirements.in
flask ==3.1.0langchain-google-genai ==2.1.1langchain ==0.3.21pillow ==11.1.0langchain-google-alloydb-pg ==0.10.0google-cloud-secret-manager ==2.23.2src/recommendationservice/requirements.in
google-api-core ==2.24.2google-cloud-profiler ==4.1.0grpcio-health-checking ==1.71.0python-json-logger ==3.3.0requests ==2.32.2rsa ==4.9opentelemetry-distro ==0.41b0opentelemetry-instrumentation-grpc ==0.52b1opentelemetry-exporter-otlp-proto-grpc ==1.31.1src/loadgenerator/requirements.in
locust ==2.33.2faker ==35.2.2src/emailservice/requirements.in
google-api-core ==2.24.2grpcio-health-checking ==1.71.0grpcio ==1.71.0jinja2 ==3.1.5python-json-logger ==3.3.0google-cloud-profiler ==4.1.0google-cloud-trace ==1.16.1requests ==2.32.2opentelemetry-distro ==0.41b0opentelemetry-instrumentation-grpc ==0.52b1opentelemetry-exporter-otlp-proto-grpc ==1.31.1
renovate-config-presets
.github/renovate.json5
terraform
.github/terraform/main.tf
terraform-google-modules/project-factory/google ~> 18.0.github/terraform/versions.tf
google ~> 6.0hashicorp/terraform >= 0.13terraform/main.tf
terraform-google-modules/project-factory/google ~> 18.0terraform-google-modules/gcloud/google ~> 3.0terraform/providers.tf
google 6.26.0
- [ ] Check this box to trigger a request for Renovate to run again on this repository