Merge pull request #1025 from hmcts/renovate-c

upgrade renovate

build.gradle

@@ -5,10 +5,10 @@ plugins {
   id 'io.spring.dependency-management' version '1.0.11.RELEASE'
   id 'uk.gov.hmcts.java' version '0.12.12'
   id 'org.springframework.boot' version '2.3.5.RELEASE'
-  id 'com.github.ben-manes.versions' version '0.39.0'
-  id 'org.owasp.dependencycheck' version '8.0.2'
-  id 'org.sonarqube' version '3.3'
-  id "info.solidsoft.pitest" version '1.7.0'
+  id 'com.github.ben-manes.versions' version '0.46.0'
+  id 'org.owasp.dependencycheck' version '8.1.2'
+  id 'org.sonarqube' version '4.0.0.2929'
+  id "info.solidsoft.pitest" version '1.9.11'
 }
 
 group = 'uk.gov.hmcts.reform'
@@ -210,7 +210,7 @@ dependencyManagement {
     dependency group: 'org.apache.logging.log4j', name: 'log4j-to-slf4j', version: '2.19.0'
 
       // CVE-2022-41881, CVE-2022-41915
-      dependencySet(group: 'io.netty', version: '4.1.86.Final') {
+      dependencySet(group: 'io.netty', version: '4.1.89.Final') {
         entry 'netty-buffer'
         entry 'netty-common'
         entry 'netty-codec'
@@ -277,7 +277,7 @@ dependencyManagement {
 
     // CVE-2019-12086, CVE-2020-36518, CVE-2022-42004
     // remove once spring manager incorporates this changes
-    dependencySet(group: 'com.fasterxml.jackson.core', version: '2.14.1') {
+    dependencySet(group: 'com.fasterxml.jackson.core', version: '2.14.2') {
         entry 'jackson-databind'
         entry 'jackson-core'
         entry 'jackson-annotations'