Update all non major Gradle dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.mockito.kotlin:mockito-kotlin	6.2.3 → 6.3.0
uk.gov.justice.service.hmpps:hmpps-subject-access-request-test-support	2.0.4 → 2.1.0
uk.gov.justice.service.hmpps:hmpps-kotlin-spring-boot-starter-test	2.0.2 → 2.1.0
aws.sdk.kotlin:s3	1.6.34 → 1.6.40
io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations	2.25.0 → 2.26.0
uk.gov.justice.service.hmpps:hmpps-sqs-spring-boot-starter	7.0.1 → 7.1.0
org.springframework.data:spring-data-envers (source)	4.0.3 → 4.0.4
uk.gov.justice.service.hmpps:hmpps-kotlin-spring-boot-starter	2.0.2 → 2.1.0
io.sentry.jvm.gradle	6.1.0 → 6.2.0
org.jetbrains.kotlin.plugin.jpa	2.3.10 → 2.3.20
org.jetbrains.kotlin.plugin.spring	2.3.10 → 2.3.20
uk.gov.justice.hmpps.gradle-spring-boot	10.0.5 → 10.1.0

---

Release Notes

mockito/mockito-kotlin (org.mockito.kotlin:mockito-kotlin)

v6.3.0

^{Changelog generated by Shipkit Changelog Gradle Plugin}

6.3.0

• 2026-03-19 - 2 commit(s) by Joshua Selbo
• Add first-class support for mocking object singletons (#​587)
• Add helper to mock module-level extension functions (#​586)

aws/aws-sdk-kotlin (aws.sdk.kotlin:s3)

v1.6.40

Features

• (batch) AWS Batch now supports quota management, enabling administrators to allocate shared compute resources across teams and projects through quota shares with capacity limits, resource-sharing strategies, and priority-based preemption - currently available for SageMaker Training job queues.
• (bedrockagentcore) This release includes SDK support for the following new features on AgentCore Built In Tools. 1. Enterprise Policies for AgentCore Browser Tool. 2. Root CA Configuration Support for AgentCore Browser Tool and Code Interpreter. 3. API changes to AgentCore Browser Profile APIs
• (bedrockagentcorecontrol) Adds support for the following new features. 1. Enterprise Policies support for AgentCore Browser Tool. 2. Root CA Configuration support for AgentCore Browser Tool and Code Interpreter.
• (ec2) Amazon EC2 Fleet instant mode now supports launching instances into Interruptible Capacity Reservations, enabling customers to use spare capacity shared by Capacity Reservation owners within their AWS Organization.
• (observabilityadmin) Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field
• (polly) Added bi-directional streaming functionality through a new API, StartSpeechSynthesisStream. This API allows streaming input text through inbound events and receiving audio as part of an output stream simultaneously.

v1.6.39

Features

• (ec2) The DescribeInstanceTypes API now returns default connection tracking timeout values for TCP, UDP, and UDP stream via the new connectionTrackingConfiguration field on NetworkInfo.
• (mediaconvert) This update adds additional bitrate options for Dolby AC-4 audio outputs.

v1.6.38

Features

• (bedrockagentcorecontrol) Deprecating namespaces field and adding namespaceTemplates.
• (emr) Add S3LoggingConfiguration to Control LogUploads
• (glue) Provide approval to overwrite existing Lake Formation permissions on all child resources with the default permissions specified in 'CreateTableDefaultPermissions' and 'CreateDatabaseDefaultPermissions' when updating catalog. Allowed values are ["Accept","Deny"] .

v1.6.37

Features

• (bedrock) You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations.
• (bedrockagentcore) Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API
• (bedrockagentcorecontrol) Supporting hosting of public ECR Container Images in AgentCore Runtime
• (ecs) Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances.

v1.6.36

Features

• (apigateway) API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography
• (configservice) Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule.
• (connect) Deprecating PredefinedNotificationID field
• (gameliftstreams) Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS.
• (glue) Add QuerySessionContext to BatchGetPartitionRequest
• (ivsrealtime) Updates maximum reconnect window seconds from 60 to 300 for participant replication
• (mediaconvert) This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output.
• (mgn) Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows.
• (quicksight) The change adds a new capability named ManageSharedFolders in Custom Permissions

Documentation

• (medialive) Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value.

v1.6.35

Features

• (datasync) DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret.
• (ecr) Add Chainguard to PTC upstreamRegistry enum
• (s3) Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets.

open-telemetry/opentelemetry-java-instrumentation (io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations)

v2.26.0

⚠️ Breaking changes to non-stable APIs

• Remove deprecated AWS Lambda v2.2 wrappers and forceFlush(int, TimeUnit) overload
  (#​16170)
• Remove deprecated HTTP client/server methods
  (#​16167)
• Remove deprecated database instrumentation methods and classes
  (#​16164)
• Remove deprecated peer-service mapping APIs
  (#​16165)
• Make runtime-telemetry deprecated classes now internal
  (#​16173)
• Remove AttributesExtractorUtil
  (#​16152)
• Remove marker interface from SqlClientAttributesGetter
  (#​16205)
• Merge network/server getter methods into DB attribute getters
  (#​16264,
  #​16268)
• Rename SQL sanitizer classes to SQL analyzer
  (#​16269)
• Rename internal common module packages to follow new naming convention
  (#​16284,
  #​16308,
  #​16327,
  #​16341,
  #​16373)

🚫 Deprecations

• Deprecated individual runtime-telemetry module classes in favor of unified module
  (#​16087)
• Deprecated old HTTP server query parameter methods in favor of sensitive query param handling
  (#​16097)
• Deprecated old RPC attributes getter methods in favor of new ones supporting stable semantic
  conventions
  (#​16130)
• Deprecated old ClickHouse instrumentation methods as part of simplification
  (#​16206)
• Deprecated old R2DBC methods in favor of ones supporting db.system.name
  (#​16251)
• Deprecated old DbClientAttributesGetter methods; added getErrorType() with implementations
  (#​16276)
• Deprecated old RPC metrics methods in favor of ones supporting stable semantic conventions
  (#​16298)
• Deprecated old DbClientAttributesGetter methods; added getDbName() to better support
  old/stable semconv split
  (#​16318)

📈 Enhancements

• Add server address and port attributes for Spymemcached
  (#​15242)
• Add Kafka Connect as a built-in JMX metrics target
  (#​15561)
• Convert Lettuce instrumentation to use Instrumenter
  (#​15838)
• OpenSearch Java client: capture sanitized search query bodies
  (#​15634)
• Apply stable semantic conventions to Camel JMX metrics
  (#​16088)
• Add jvm.file_descriptor.limit metric
  (#​16174)
• Run gRPC client callbacks with parent context
  (#​16175)
• SQL summary: handle EXPLAIN statements
  (#​16184)
• Simplify InfluxDB instrumentation
  (#​16207)
• Update histogram buckets for db.client.operation.duration
  (#​16222)
• SQL summary: support Oracle dblink syntax
  (#​16230)
• Add instrumentation for ZIO HTTP server route
  (#​16232)
• Remove network attributes under database stable semconv flag
  (#​16257)
• Support Javalin 7
  (#​16261)
• gRPC: initial stable semconv support
  (#​16304)
• Populate os.version resource attribute
  (#​16311)
• Camel: don't emit db spans under stable semconv
  (#​16275)
• Dubbo: stable semconv support
  (#​16352)
• Update the OpenTelemetry SDK version to 1.60.0
  (#​16407)
• Use new stable LogRecordBuilder.setException()
  (#​16423)
• Configure semconv-stability.opt-in with declarative config API
  (#​16443)
• Support otel.event.name
  (#​16220)

🛠️ Bug fixes

• SQL sanitizer now treats double-quoted fragments as string literals by default
  (#​15582)
• Clear recorded exception when request completes
  (#​16138)
• Clear URL connection state after ending span
  (#​16155)
• Fix Spring declarative config with environment variable substitution
  (#​15775)
• Fix Ktor server send pipeline error handling
  (#​16192)
• Logging appenders: KeyValue attributes should take priority over MDC
  (#​16239)
• Create new PekkoRouteHolder for each request
  (#​16258)
• Tomcat JMX: ignore negative thread and session limits
  (#​16355)
• server.port is required on HTTP client spans
  (#​16388)
• Fix Ktor server instrumentation resolving peer address
  (#​16392)
• Fix class cast exception in servlet instrumentation
  (#​16403)
• Fix empty response body on Jetty HttpClient 9.4.24–9.4.43
  (#​16406)

getsentry/sentry-android-gradle-plugin (io.sentry.jvm.gradle)

v6.2.0

Compare Source

Features

• (Experimental) Wire VCS info extension to snapshot uploads for git metadata support (#​1102)

Dependencies

• Bump CLI from v3.3.2 to v3.3.3 (#​1101)
  • changelog
  • diff
• Bump Android SDK from v8.34.1 to v8.36.0 (#​1104, #​1111)
  • changelog
  • diff

---

Configuration

📅 Schedule: Branch creation - "after 9am every weekday,before 5pm every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.