Merge pull request #115 from hmcts/feat/amp-150-update-dependency

fix:amp-150 update dependency

Author: baranipek

.github/workflows/ci-build-publish.yml

@@ -37,7 +37,7 @@ jobs:
       artefact_version: ${{ inputs.is_release && steps.artefact.outputs.release_version || steps.artefact.outputs.draft_version }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -59,7 +59,7 @@ jobs:
       artefact_name: ${{ steps.repo_vars.outputs.artefact_name }}
     steps:
       - name: Checkout source code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up JDK
         uses: actions/setup-java@v5
@@ -117,7 +117,7 @@ jobs:
           echo "artefact_name=${repo_name}-${{ needs.Artefact-Version.outputs.artefact_version }}" >> $GITHUB_OUTPUT
 
       - name: Upload JAR Artefact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: app.jar
           path: build/libs/${{ steps.repo_vars.outputs.artefact_name }}.jar
@@ -130,10 +130,10 @@ jobs:
       name: ${{ inputs.environment }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Download JAR Artefact
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: app.jar
           path: build/libs

.github/workflows/code-analysis.yml

@@ -10,7 +10,7 @@ jobs:
   pmd-analysis:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/codeql.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
@@ -73,7 +73,7 @@ jobs:
         # - It's available to download and inspect from the GitHub Actions UI
       - name: Upload SBOM
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: sbom
           path: build/resources/main/META-INF/sbom/application.cdx.json

.github/workflows/secret-scanning.yml

@@ -12,7 +12,7 @@ jobs:
   scan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

build.gradle

@@ -5,9 +5,8 @@ plugins {
     id 'org.springframework.boot' version '4.0.0'
     id 'jacoco'
     id 'maven-publish'
-    id "com.github.ben-manes.versions" version "0.52.0"
-    id "org.cyclonedx.bom" version "2.3.1"
-    id 'com.gorylenko.gradle-git-properties' version '2.5.4'
+    id "com.github.ben-manes.versions" version "0.53.0"
+    id "org.cyclonedx.bom" version "3.1.0"
 }
 
 group = 'uk.gov.hmcts.cp'
@@ -30,11 +29,14 @@ ext {
     logbackVersion = "1.5.18"
     lombokVersion = "1.18.38"
 }
-
+cyclonedxBom {
+    schemaVersion = org.cyclonedx.Version.VERSION_16
+    componentVersion = project.version.toString()
+}
 dependencies {
     implementation "uk.gov.hmcts.cp:api-cp-caseadmin-case-urn-mapper:$apiCaseUrnMapperVersion"
     implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:3.0.0'
-    implementation 'io.swagger.core.v3:swagger-core:2.2.36'
+    implementation 'io.swagger.core.v3:swagger-core:2.2.41'
     implementation 'javax.xml.bind:jaxb-api:2.3.1'
     implementation 'org.springframework.boot:spring-boot-starter-cache'
 
@@ -48,16 +50,13 @@ dependencies {
     implementation 'io.micrometer:micrometer-tracing'
     implementation 'io.micrometer:micrometer-tracing-bridge-otel'
     // Spring Boot 4 will auto-configure OpenTelemetry when management.tracing.enabled=true
-    implementation 'io.micrometer:micrometer-registry-azure-monitor'
-    implementation 'com.azure:azure-monitor-opentelemetry-autoconfigure:1.3.0'
-
-    implementation 'net.logstash.logback:logstash-logback-encoder:8.1'
-
-    implementation group: 'io.rest-assured', name: 'rest-assured', version: '5.5.6'
-    implementation 'org.hibernate.validator:hibernate-validator:9.0.1.Final'
-    implementation 'org.apache.commons:commons-text:1.14.0'
+    implementation 'com.azure:azure-monitor-opentelemetry-autoconfigure:1.4.0'
+    implementation 'net.logstash.logback:logstash-logback-encoder:9.0'
+    implementation group: 'io.rest-assured', name: 'rest-assured', version: '6.0.0'
+    implementation 'org.hibernate.validator:hibernate-validator:9.1.0.Final'
 
-    implementation 'com.fasterxml.jackson.core:jackson-databind:2.20.0'
+    implementation 'org.apache.commons:commons-text:1.15.0'
+    implementation 'com.fasterxml.jackson.core:jackson-databind:2.20.1'
     implementation("org.owasp.encoder:encoder:1.4.0")
     compileOnly group: 'org.projectlombok', name: 'lombok', version: lombokVersion
     annotationProcessor group: 'org.projectlombok', name: 'lombok', version: lombokVersion
@@ -66,7 +65,7 @@ dependencies {
     integrationTestCompileOnly group: 'org.projectlombok', name: 'lombok', version: lombokVersion
     integrationTestAnnotationProcessor group: 'org.projectlombok', name: 'lombok', version: lombokVersion
 
-    testImplementation(platform('org.junit:junit-bom:5.13.4'))
+    testImplementation(platform('org.junit:junit-bom:6.0.1'))
     testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine'
     testImplementation group: 'org.springframework.boot', name: 'spring-boot-starter-test', version: '4.0.0', {
         exclude group: 'junit', module: 'junit'

gradle/integration.gradle

@@ -65,10 +65,3 @@ tasks.named('build') {
     dependsOn tasks.named('test')
     dependsOn tasks.named('integration')
 }
-cyclonedxBom {
-    includeConfigs = ["runtimeClasspath"]
-    skipConfigs = ["compileClasspath", "testImplementation"]
-    schemaVersion = "1.6"
-    componentVersion = providers.provider { project.version.toString() }
-    destination = file("$buildDir/reports")
-}