Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
gradle	com.github.tomakehurst:wiremock-jre8
gradle	org.hibernate:hibernate-core
gradle	org.hibernate:hibernate-validator

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Replace dependency com.github.tomakehurst:wiremock-jre8 with org.wiremock:wiremock
• Replace hibernate core with org.hibernate.validator:hibernate-validator (org.hibernate:hibernate-validator, org.hibernate:hibernate-core)
• Update dependency org.postgresql:postgresql to v42.7.5
• Update dependency com.auth0:java-jwt to v4.5.0
• Update dependency com.github.ben-manes.caffeine:caffeine to v3.2.0
• Update dependency commons-beanutils:commons-beanutils to v1.10.0
• Update dependency gradle to v8.12.1
• Update dependency pmd to v6.55.0
• Update logback monorepo to v1.5.16 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update mapstruct monorepo to v1.6.3 (org.mapstruct:mapstruct-processor, org.mapstruct:mapstruct-jdk8)
• Update org.seleniumhq.selenium:4.2.2 to v4.28.1 (org.seleniumhq.selenium:selenium-support, org.seleniumhq.selenium:selenium-api, org.seleniumhq.selenium:selenium-edge-driver, org.seleniumhq.selenium:selenium-safari-driver, org.seleniumhq.selenium:selenium-chrome-driver, org.seleniumhq.selenium:selenium-firefox-driver, org.seleniumhq.selenium:selenium-remote-driver, org.seleniumhq.selenium:selenium-java)
• Update plugin com.github.ben-manes.versions to v0.52.0
• Update plugin io.freefair.lombok to v8.12
• Update plugin org.flywaydb.flyway to v9.22.3
• Update dependency com.github.hmcts:core-case-data-store-client to v5
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency com.github.tomakehurst:wiremock-jre8 to v3
• Update dependency com.google.guava:guava-testlib to v33
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update dependency com.microsoft.azure:applicationinsights-core to v3
• Update dependency org.springframework.cloud:spring-cloud-starter-openfeign to v4
• Update dependency org.zalando:logbook-spring-boot-starter to v3
• Update dependency pmd to v7
• Update flyway to v11 (major) (org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update hibernate core (major) (org.hibernate:hibernate-validator, org.hibernate:hibernate-core)
• Update plugin net.serenity-bdd.serenity-gradle-plugin to v4
• Update plugin org.owasp.dependencycheck to v12
• Update plugin org.sonarqube to v6
• Update spring boot to v3 (major) (org.springframework.boot:spring-boot-starter-oauth2-client, org.springframework.boot)
• Update spring security to v6 (major) (org.springframework.security:spring-security-web, org.springframework.security:spring-security-test, org.springframework.security:spring-security-taglibs, org.springframework.security:spring-security-saml2-service-provider, org.springframework.security:spring-security-rsocket, org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-messaging, org.springframework.security:spring-security-ldap, org.springframework.security:spring-security-data, org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-config, org.springframework.security:spring-security-cas, org.springframework.security:spring-security-aspects, org.springframework.security:spring-security-acl, org.springframework.security:spring-security-core)
• Update versions.serenity to v4 (major) (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Update versions.tomcat to v11 (major) (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update QA & Nightly Checks - Non Major (au.com.dius.pact.provider:junit5spring, au.com.dius.pact.provider:spring, au.com.dius.pact.provider:junit5, au.com.dius.pact.consumer:junit, au.com.dius.pact.consumer:junit5, org.pitest:pitest, net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core, net.serenity-bdd.serenity-gradle-plugin, au.com.dius.pact)
• Update dependency checkstyle to v10.21.2

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update Spring Upgrade - Non Major (org.springframework.security:spring-security-rsa, org.springframework.boot:spring-boot-starter-oauth2-client, org.springframework.security:spring-security-web, org.springframework.security:spring-security-test, org.springframework.security:spring-security-taglibs, org.springframework.security:spring-security-saml2-service-provider, org.springframework.security:spring-security-rsocket, org.springframework.security:spring-security-remoting, org.springframework.security:spring-security-openid, org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-messaging, org.springframework.security:spring-security-ldap, org.springframework.security:spring-security-data, org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-config, org.springframework.security:spring-security-cas, org.springframework.security:spring-security-aspects, org.springframework.security:spring-security-acl, org.springframework.security:spring-security-core, io.spring.dependency-management)
• Update Logging Dependencies to v2.24.3 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update Testing Dependencies - Non Major (org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.vintage:junit-vintage-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update Terraform Upgrades (major) (azuread, azurerm)
• Update dependency com.github.hmcts:fortify-client to v1.4.6
• Update dependency commons-io:commons-io to v2.18.0
• Update dependency hashicorp/terraform to v1.10.5
• Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.4.2
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency org.zalando:problem-spring-web-starter to v0.29.1

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions

.github/workflows/publish-openapi.yml

• hmcts/workflow-publish-openapi-spec v1

.github/workflows/stale.yml

• actions/stale v9

gradle

gradle.properties

build.gradle

• io.spring.dependency-management 1.1.4
• org.springframework.boot 2.7.18
• org.owasp.dependencycheck 10.0.4
• com.github.ben-manes.versions 0.42.0
• org.sonarqube 5.1.0.4882
• info.solidsoft.pitest 1.15.0
• io.freefair.lombok 8.10.2
• au.com.dius.pact 4.3.12
• net.serenity-bdd.serenity-gradle-plugin 3.2.3
• org.flywaydb.flyway 9.3.0
• checkstyle 10.9.3
• pmd 6.40.0
• commons-io:commons-io 2.17.0
• org.springframework.security:spring-security-core 5.8.9
• org.springframework.security:spring-security-acl 5.8.9
• org.springframework.security:spring-security-aspects 5.8.9
• org.springframework.security:spring-security-cas 5.8.9
• org.springframework.security:spring-security-config 5.8.9
• org.springframework.security:spring-security-crypto 5.8.9
• org.springframework.security:spring-security-data 5.8.9
• org.springframework.security:spring-security-ldap 5.8.9
• org.springframework.security:spring-security-messaging 5.8.9
• org.springframework.security:spring-security-oauth2-client 5.8.9
• org.springframework.security:spring-security-oauth2-core 5.8.9
• org.springframework.security:spring-security-oauth2-jose 5.8.9
• org.springframework.security:spring-security-oauth2-resource-server 5.8.9
• org.springframework.security:spring-security-openid 5.8.9
• org.springframework.security:spring-security-remoting 5.8.9
• org.springframework.security:spring-security-rsocket 5.8.9
• org.springframework.security:spring-security-saml2-service-provider 5.8.9
• org.springframework.security:spring-security-taglibs 5.8.9
• org.springframework.security:spring-security-test 5.8.9
• org.springframework.security:spring-security-web 5.8.9
• org.seleniumhq.selenium:selenium-java 4.2.2
• org.seleniumhq.selenium:selenium-remote-driver 4.2.2
• org.seleniumhq.selenium:selenium-firefox-driver 4.2.2
• org.seleniumhq.selenium:selenium-chrome-driver 4.2.2
• org.seleniumhq.selenium:selenium-safari-driver 4.2.2
• org.seleniumhq.selenium:selenium-edge-driver 4.2.2
• org.seleniumhq.selenium:selenium-api 4.2.2
• org.seleniumhq.selenium:selenium-support 4.2.2
• ch.qos.logback:logback-classic 1.2.13
• ch.qos.logback:logback-core 1.2.13
• org.junit.jupiter:junit-jupiter-api 5.11.3
• org.junit.jupiter:junit-jupiter-engine 5.11.3
• org.junit.jupiter:junit-jupiter-params 5.11.3
• org.junit.platform:junit-platform-commons 1.11.3
• org.junit.platform:junit-platform-engine 1.11.3
• org.mapstruct:mapstruct-jdk8 1.3.0.Final
• org.mapstruct:mapstruct-processor 1.3.0.Final
• org.springframework.boot:spring-boot-starter-oauth2-client 2.7.15
• org.springframework.cloud:spring-cloud-starter-openfeign 3.1.9
• org.apache.httpcomponents.client5:httpclient5 5.3.1
• org.springframework.security:spring-security-rsa 1.1.1
• org.springdoc:springdoc-openapi-ui 1.8.0
• org.zalando:logbook-spring-boot-starter 2.16.0
• org.zalando:problem-spring-web-starter 0.26.2
• net.minidev:json-smart 2.5.1
• com.launchdarkly:launchdarkly-java-server-sdk 6.3.0
• org.apache.commons:commons-lang3 3.17.0
• commons-fileupload:commons-fileupload 1.5
• commons-beanutils:commons-beanutils 1.9.4
• com.github.hmcts.java-logging:logging 6.1.7
• org.hibernate:hibernate-core 5.6.15.Final
• org.hibernate:hibernate-validator 7.0.5.Final
• org.apache.logging.log4j:log4j-api 2.24.2
• org.apache.logging.log4j:log4j-to-slf4j 2.24.2
• org.apache.tomcat.embed:tomcat-embed-core 9.0.98
• org.apache.tomcat.embed:tomcat-embed-websocket 9.0.98
• com.github.hmcts:service-auth-provider-java-client 3.1.4
• com.github.hmcts:core-case-data-store-client 4.9.2
• com.auth0:java-jwt 4.4.0
• com.fasterxml.jackson.module:jackson-module-paranamer 2.18.2
• org.flywaydb:flyway-core 8.5.13
• org.postgresql:postgresql 42.7.4
• com.vladmihalcea:hibernate-types-52 2.21.1
• org.awaitility:awaitility 4.2.2
• com.microsoft.azure:applicationinsights-core 2.6.4
• com.github.ben-manes.caffeine:caffeine 3.1.8
• org.testcontainers:postgresql 1.20.4
• org.testcontainers:junit-jupiter 1.20.4
• com.h2database:h2 2.3.232
• com.github.tomakehurst:wiremock-jre8 2.35.2
• com.github.hmcts:document-management-client 7.0.1
• org.pitest:pitest 1.16.1
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.15.0
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• net.serenity-bdd:serenity-core 3.1.20
• net.serenity-bdd:serenity-junit 3.1.20
• net.serenity-bdd:serenity-rest-assured 3.1.20
• net.serenity-bdd:serenity-spring 3.1.20
• org.junit.vintage:junit-vintage-engine 5.11.3
• com.obsidiandynamics.pojotester:core 0.9.0
• com.github.hmcts:fortify-client 1.4.5
• com.google.guava:guava-testlib 32.1.3-jre
• com.vladsch.flexmark:flexmark-all 0.64.8
• au.com.dius.pact.consumer:junit5 4.3.4
• au.com.dius.pact.consumer:junit 4.3.4
• au.com.dius.pact.provider:junit5 4.3.4
• au.com.dius.pact.provider:spring 4.3.4
• au.com.dius.pact.provider:junit5spring 4.3.4

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.11.1

helm-values

charts/wa-task-management-api/values.yaml

helmv3

charts/wa-task-management-api/Chart.yaml

• java 5.2.1

terraform

infrastructure/main.tf

infrastructure/sdp.tf

infrastructure/state.tf

• azuread 2.53.1
• azurerm ~> 3.0

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.9.8

---

• Check this box to trigger a request for Renovate to run again on this repository