diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
new file mode 100644
index 0000000..3f0dba2
--- /dev/null
+++ b/.gitlab-ci.yml
@@ -0,0 +1,24 @@
+stages:
+  - check
+
+image: maven:3-openjdk-17
+
+verify:
+  stage: check
+  script:
+    - mvn verify
+
+sast:
+  stage: check
+
+cache:
+  key: $CI_JOB_NAME
+  paths:
+    - .m2/repository
+
+variables:
+  MAVEN_OPTS: "-Dmaven.repo.local=.m2/repository"
+  MAVEN_CLI_OPTS: "--batch-mode --errors"
+
+include:
+  - template: Security/SAST.gitlab-ci.yml
diff --git a/pom.xml b/pom.xml
index 2c85c28..de0184b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -60,19 +60,19 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 
-    <compiler-plugin.version>3.10.1</compiler-plugin.version>
+    <compiler-plugin.version>3.11.0</compiler-plugin.version>
     <failsafe-plugin.version>${surefire-plugin.version}</failsafe-plugin.version>
-    <flatten-plugin.version>1.3.0</flatten-plugin.version>
+    <flatten-plugin.version>1.4.0</flatten-plugin.version>
     <google-java-format.version>1.15.0</google-java-format.version>
     <jar-plugin.version>3.3.0</jar-plugin.version>
     <maven-gpg-plugin.version>3.0.1</maven-gpg-plugin.version>
-    <maven-javadoc-plugin.version>3.4.1</maven-javadoc-plugin.version>
+    <maven-javadoc-plugin.version>3.5.0</maven-javadoc-plugin.version>
     <maven-source-plugin.version>3.2.1</maven-source-plugin.version>
     <nexus-staging-plugin.version>1.6.13</nexus-staging-plugin.version>
-    <spotless-plugin.version>2.29.0</spotless-plugin.version>
-    <surefire-plugin.version>3.0.0-M7</surefire-plugin.version>
+    <spotless-plugin.version>2.35.0</spotless-plugin.version>
+    <surefire-plugin.version>3.0.0</surefire-plugin.version>
 
-    <quarkus.version>2.15.1.Final</quarkus.version>
+    <quarkus.version>2.16.5.Final</quarkus.version>
   </properties>
 
   <distributionManagement>
diff --git a/renovate.json b/renovate.json
index f59f762..c031064 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,3 +1,6 @@
 { "$schema": "https://docs.renovatebot.com/renovate-schema.json"
-, "extends": ["local>benkard/.github:renovate-config"]
+, "extends":
+  [ "local>mulk/renovate-config"
+  , ":automergeMinor"
+  ]
 }