Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• Update dependency com.github.hmcts:fortify-client to v1.4.2
• Update dependency com.google.guava:guava to v33.2.1-jre
• Update plugin uk.gov.hmcts.java to v0.12.63
• Update dependency pmd to v7.2.0

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency hashicorp/terraform to v1.8.4
• Update dependency jacoco to v0.8.12
• Update Terraform azuread to v2.50.0
• Update Terraform azurerm to ~> 3.106.0
• Update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations to v2.4.0
• Update junit5 monorepo to v5.10.2 (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-api)
• Update plugin org.owasp.dependencycheck to v9.2.0
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update versions.serenity to v4 (major) (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency com.github.hmcts:service-auth-provider-java-client to v4.1.2
• Update versions.logbackVersion to v1.5.6 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update versions.serenity to v2.6.0 (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency gradle to v8
• Update dependency io.rest-assured:rest-assured to v5
• Update dependency org.springframework.cloud:spring-cloud-starter-openfeign to v4
• Update hmctspublic.azurecr.io/base/java Docker tag to v21
• Update spring boot to v3 (major) (org.springframework.boot:spring-boot-starter-test, org.springframework.boot:spring-boot-starter-data-jpa, org.springframework.boot)
• Update spring core to v6 (major) (org.springframework:spring-webmvc, org.springframework:spring-web, org.springframework:spring-tx, org.springframework:spring-orm, org.springframework:spring-jdbc, org.springframework:spring-jcl, org.springframework:spring-expression, org.springframework:spring-aspects, org.springframework:spring-aop, org.springframework:spring-context, org.springframework:spring-beans, org.springframework:spring-core)
• Update spring security to v6 (major) (org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-config, org.springframework.security:spring-security-core, org.springframework.security:spring-security-web)
• Update versions.tomcat to v10 (major) (org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket)

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 17-distroless

github-actions

.github/workflows/combine-prs.yml

• ubuntu 22.04

gradle

build.gradle

• net.serenity-bdd:serenity-gradle-plugin 2.4.34
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.15.0
• uk.gov.hmcts.java 0.12.62
• org.springframework.boot 2.7.18
• info.solidsoft.pitest 1.15.0
• io.spring.dependency-management 1.1.5
• com.github.ben-manes.versions 0.51.0
• org.sonarqube 5.0.0.4638
• org.owasp.dependencycheck 9.1.0
• pmd 7.1.0
• jacoco 0.8.8
• org.springframework.boot:spring-boot-starter-data-jpa 2.7.18
• org.springframework:spring-core 5.3.36
• org.springframework:spring-beans 5.3.36
• org.springframework:spring-context 5.3.36
• org.springframework.security:spring-security-web 5.8.12
• org.springframework.security:spring-security-core 5.8.12
• org.springframework.security:spring-security-config 5.8.12
• org.springframework.security:spring-security-crypto 5.8.12
• org.springframework.cloud:spring-cloud-starter-netflix-hystrix 2.2.10.RELEASE
• org.springframework.cloud:spring-cloud-starter-openfeign 3.1.9
• com.google.guava:guava 33.2.0-jre
• com.github.hmcts:service-auth-provider-java-client 4.0.2
• com.github.hmcts.java-logging:logging 6.1.4
• org.postgresql:postgresql 42.7.3
• org.apache.httpcomponents:httpclient 4.5.14
• com.github.hmcts:properties-volume-spring-boot-starter 0.1.1
• commons-io:commons-io 20030203.000550
• org.apache.tomcat.embed:tomcat-embed-websocket 9.0.89
• org.apache.tomcat.embed:tomcat-embed-core 9.0.89
• com.fasterxml.jackson.core:jackson-databind 2.17.1
• com.fasterxml.jackson:jackson-bom 2.17.1
• com.github.hmcts:idam-java-client 3.0.3
• javax.inject:javax.inject 1
• com.launchdarkly:launchdarkly-java-server-sdk 5.10.9
• org.jetbrains:annotations 24.1.0
• org.springframework:spring-aop 5.3.36
• org.springframework:spring-aspects 5.3.36
• org.springframework:spring-expression 5.3.36
• org.springframework:spring-jcl 5.3.36
• org.springframework:spring-jdbc 5.3.36
• org.springframework:spring-orm 5.3.36
• org.springframework:spring-tx 5.3.36
• org.springframework:spring-web 5.3.36
• org.springframework:spring-webmvc 5.3.36
• commons-fileupload:commons-fileupload 1.5
• io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations 2.3.0
• com.microsoft.azure:applicationinsights-spring-boot-starter 2.6.4
• org.slf4j:slf4j-api 2.0.13
• org.springframework.batch:spring-batch-test 5.1.2
• org.springframework.boot:spring-boot-starter-test 2.7.18
• org.pitest:pitest-junit5-plugin 1.2.1
• org.junit.jupiter:junit-jupiter-api 5.9.3
• org.junit.jupiter:junit-jupiter-params 5.9.3
• org.junit.jupiter:junit-jupiter-engine 5.9.3
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• org.pitest:pitest 1.16.1
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.15.0
• org.pitest:pitest-junit5-plugin 1.2.1
• io.rest-assured:rest-assured 3.3.0
• io.github.openfeign:feign-jackson 13.2.1
• com.opentable.components:otj-pg-embedded 1.0.3
• com.github.hmcts:fortify-client 1.4.1
• org.projectlombok:lombok 1.18.32
• net.serenity-bdd:serenity-core 2.2.12
• net.serenity-bdd:serenity-junit 2.2.12
• net.serenity-bdd:serenity-rest-assured 2.2.12
• net.serenity-bdd:serenity-spring 2.2.12
• org.apache.logging.log4j:log4j-api 2.23.1
• org.apache.logging.log4j:log4j-to-slf4j 2.23.1
• ch.qos.logback:logback-classic 1.2.13
• ch.qos.logback:logback-core 1.2.13
• com.fasterxml.jackson.core:jackson-core 2.17.1
• com.fasterxml.jackson.core:jackson-annotations 2.17.1

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 7.6.4

helm-values

charts/am-role-assignment-refresh-batch/values.yaml

helmv3

charts/am-role-assignment-refresh-batch/Chart.yaml

• job ~2.1.1

regex

Dockerfile

• microsoft/ApplicationInsights-Java 3.5.2

terraform

infrastructure/terraform.tf

• azuread 2.49.1
• azurerm ~> 3.103.0

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.8.3

---

• Check this box to trigger a request for Renovate to run again on this repository