Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency hashicorp/terraform to v1.14.7
• Update dependency com.zaxxer:HikariCP to v7
• Update dependency io.rest-assured:rest-assured to v6
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Update dependency org.flywaydb:flyway-core to v12
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update dependency org.springframework.cloud:spring-cloud-starter-openfeign to v5
• Update dependency org.testcontainers:testcontainers-bom to v2
• Update dependency pmd to v7
• Update guava monorepo to v33 (major) (com.google.guava:guava-testlib, com.google.guava:guava)
• Update junit-framework monorepo to v6 (major) (org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.vintage:junit-vintage-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update plugin io.freefair.lombok to v9
• Update plugin org.sonarqube to v7
• Update spring boot to v4 (major) (org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot)
• Update spring security to v7 (major) (org.springframework.security:spring-security-web, org.springframework.security:spring-security-test, org.springframework.security:spring-security-taglibs, org.springframework.security:spring-security-saml2-service-provider, org.springframework.security:spring-security-rsocket, org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-messaging, org.springframework.security:spring-security-ldap, org.springframework.security:spring-security-data, org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-config, org.springframework.security:spring-security-cas, org.springframework.security:spring-security-aspects, org.springframework.security:spring-security-acl, org.springframework.security:spring-security-core)
• Update versions.logbook to v4 (major) (org.zalando:logbook-httpclient5, org.zalando:logbook-spring-boot-starter, org.zalando:logbook-core)
• Update versions.tomcat to v11 (major) (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update Gradle to v9

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.16
• Update spring security to v6.5.9 (org.springframework.security:spring-security-web, org.springframework.security:spring-security-test, org.springframework.security:spring-security-taglibs, org.springframework.security:spring-security-saml2-service-provider, org.springframework.security:spring-security-rsocket, org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-messaging, org.springframework.security:spring-security-ldap, org.springframework.security:spring-security-data, org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-config, org.springframework.security:spring-security-cas, org.springframework.security:spring-security-aspects, org.springframework.security:spring-security-acl, org.springframework.security:spring-security-core)
• Update dependency com.github.hmcts.java-logging:logging to v8
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency io.netty:netty-all to v4.2.10.Final
• Update dependency com.fasterxml.jackson.datatype:jackson-datatype-jsr310 to v2.21.1
• Update dependency com.github.hmcts:core-case-data-store-client to v5.2.0
• Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6
• Update dependency org.springframework.cloud:spring-cloud-starter-openfeign to v4.3.1
• Update dependency pmd to v6.55.0
• Update plugin org.owasp.dependencycheck to v12.2.0
• Update spring boot to v3.5.11 (org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot)

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (1)

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions (2)

.github/workflows/stale.yml (1)

• actions/stale v10

.github/workflows/swagger.yml (2)

• actions/checkout v6
• actions/setup-java v5

gradle (1)

build.gradle (90)

• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.3.4 → [Updates: 3.5.11, 4.0.3]
• org.owasp.dependencycheck 12.1.3 → [Updates: 12.2.0]
• com.github.ben-manes.versions 0.53.0
• uk.gov.hmcts.java 0.12.68
• org.sonarqube 5.1.0.4882 → [Updates: 7.2.3.7755]
• io.freefair.lombok 8.14.4 → [Updates: 9.2.0]
• checkstyle 13.3.0
• pmd 6.40.0 → [Updates: 6.55.0, 7.22.0]
• com.github.docker-java:docker-java 3.7.0
• com.google.guava:guava 32.1.3-jre → [Updates: 33.5.0-jre]
• commons-fileupload:commons-fileupload 1.6.0
• commons-io:commons-io 2.21.0
• net.minidev:json-smart 2.6.0
• org.glassfish:jakarta.el 4.0.2
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• io.netty:netty-all 4.2.6.Final → [Updates: 4.2.10.Final]
• org.seleniumhq.selenium:selenium-java 4.41.0
• org.seleniumhq.selenium:selenium-remote-driver 4.41.0
• org.seleniumhq.selenium:selenium-firefox-driver 4.41.0
• org.seleniumhq.selenium:selenium-chrome-driver 4.41.0
• org.seleniumhq.selenium:selenium-safari-driver 4.41.0
• org.seleniumhq.selenium:selenium-edge-driver 4.41.0
• org.seleniumhq.selenium:selenium-api 4.41.0
• org.seleniumhq.selenium:selenium-support 4.41.0
• org.springframework.security:spring-security-core 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-acl 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-aspects 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-cas 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-config 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-crypto 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-data 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-ldap 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-messaging 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-oauth2-client 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-oauth2-core 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-oauth2-jose 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-oauth2-resource-server 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-openid 6.0.8
• org.springframework.security:spring-security-remoting 6.0.8
• org.springframework.security:spring-security-rsocket 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-saml2-service-provider 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-taglibs 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-test 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.springframework.security:spring-security-web 6.0.8 → [Updates: 6.5.9, 7.0.4]
• org.junit.jupiter:junit-jupiter-api 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-params 5.14.3 → [Updates: 6.0.3]
• org.junit.platform:junit-platform-commons 1.14.3 → [Updates: 6.0.3]
• org.junit.platform:junit-platform-engine 1.14.3 → [Updates: 6.0.3]
• org.testcontainers:testcontainers-bom 1.21.4 → [Updates: 2.0.3]
• org.springframework.boot:spring-boot-starter-validation 3.3.0 → [Updates: 3.5.11, 4.0.3]
• org.springframework.security:spring-security-rsa 1.1.5
• org.springframework.boot:spring-boot-starter-security 3.3.0 → [Updates: 3.5.11, 4.0.3]
• org.springframework.retry:spring-retry 2.0.12
• org.springframework.cloud:spring-cloud-starter-openfeign 4.1.1 → [Updates: 4.3.1, 5.0.1]
• org.apache.httpcomponents.client5:httpclient5 5.3.1 → [Updates: 5.6]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0 → [Updates: 2.8.16, 3.0.2]
• org.zalando:logbook-core 3.12.3 → [Updates: 4.0.2]
• org.zalando:logbook-spring-boot-starter 3.12.3 → [Updates: 4.0.2]
• org.zalando:logbook-httpclient5 3.12.3 → [Updates: 4.0.2]
• com.github.hmcts.java-logging:logging 6.1.9 → [Updates: 8.0.0]
• com.github.hmcts.java-logging:logging-appinsights 6.1.9
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts:core-case-data-store-client 5.0.5 → [Updates: 5.2.0]
• com.azure:azure-messaging-servicebus 7.17.17
• io.projectreactor.netty:reactor-netty-http 1.3.4
• io.projectreactor.netty:reactor-netty-core 1.3.4
• org.apache.tomcat.embed:tomcat-embed-core 10.1.52 → [Updates: 11.0.18]
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.52 → [Updates: 11.0.18]
• org.camunda.bpm:camunda-external-task-client 7.24.0
• com.launchdarkly:launchdarkly-java-server-sdk 6.3.0 → [Updates: 7.13.0]
• org.apache.commons:commons-lang3 3.20.0
• com.github.ben-manes.caffeine:caffeine 3.2.3
• net.logstash.logback:logstash-logback-encoder 7.4 → [Updates: 9.0]
• commons-codec:commons-codec 1.21.0
• org.junit.vintage:junit-vintage-engine 5.14.3 → [Updates: 6.0.3]
• com.obsidiandynamics.pojotester:core 0.9.0
• com.jparams:to-string-verifier 1.4.8
• com.google.guava:guava-testlib 32.1.3-jre → [Updates: 33.5.0-jre]
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.0]
• org.testcontainers:postgresql 1.21.4
• org.testcontainers:junit-jupiter 1.21.4
• com.github.hmcts:fortify-client 1.4.10
• com.github.hmcts:document-management-client 7.0.1
• org.flywaydb:flyway-core 9.22.3 → [Updates: 12.1.0]
• com.zaxxer:HikariCP 5.1.0 → [Updates: 7.0.2]
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.20.0 → [Updates: 2.21.1]
• org.postgresql:postgresql 42.7.10

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 9.4.0]

helm-values (1)

charts/wa-case-event-handler/values.yaml

helmv3 (1)

charts/wa-case-event-handler/Chart.yaml (1)

• java 5.3.0

renovate-config-presets (1)

.github/renovate.json

terraform (3)

infrastructure/main.tf

infrastructure/state.tf (2)

• azuread 3.8.0
• azurerm ~> 4.0

infrastructure/versions.tf (1)

• hashicorp/terraform >= 1.3.4

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.6 → [Updates: 1.14.7]

---

• Check this box to trigger a request for Renovate to run again on this repository