Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency com.github.hmcts:fortify-client to v1.4.6
• Update dependency hashicorp/terraform to v1.10.3
• Update dependency io.netty:netty-all to v4.1.116.Final
• Update dependency io.projectreactor.netty:reactor-netty-http to v1.2.1
• Update logback monorepo to v1.5.16 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update versions.tomcat to v10.1.34 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)
• Update dependency com.github.docker-java:docker-java to v3.4.1
• Update dependency gradle to v8.12
• Update org.seleniumhq.selenium:4.26.0 to v4.27.0 (org.seleniumhq.selenium:selenium-support, org.seleniumhq.selenium:selenium-api, org.seleniumhq.selenium:selenium-edge-driver, org.seleniumhq.selenium:selenium-safari-driver, org.seleniumhq.selenium:selenium-chrome-driver, org.seleniumhq.selenium:selenium-firefox-driver, org.seleniumhq.selenium:selenium-remote-driver, org.seleniumhq.selenium:selenium-java)
• Update plugin io.freefair.lombok to v8.11
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update dependency com.zaxxer:HikariCP to v6
• Update dependency net.logstash.logback:logstash-logback-encoder to v8
• Update dependency org.flywaydb:flyway-core to v11
• Update dependency pmd to v7
• Update guava monorepo to v33 (major) (com.google.guava:guava-testlib, com.google.guava:guava)
• Update plugin net.serenity-bdd.serenity-gradle-plugin to v4
• Update plugin org.owasp.dependencycheck to v11
• Update plugin org.sonarqube to v6
• Update versions.serenity to v4 (major) (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Update versions.tomcat to v11 (major) (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dependency org.camunda.bpm:camunda-external-task-client to v7.22.0

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update Spring Upgrade - Non Major (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.retry:spring-retry, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-validation, org.springframework.security:spring-security-web, org.springframework.security:spring-security-test, org.springframework.security:spring-security-taglibs, org.springframework.security:spring-security-saml2-service-provider, org.springframework.security:spring-security-rsocket, org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-messaging, org.springframework.security:spring-security-ldap, org.springframework.security:spring-security-data, org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-config, org.springframework.security:spring-security-cas, org.springframework.security:spring-security-aspects, org.springframework.security:spring-security-acl, org.springframework.security:spring-security-core, org.springframework.boot, io.spring.dependency-management)
• Update Testing Dependencies - Non Major (org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.vintage:junit-vintage-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update QA & Nightly Checks - Non Major (org.pitest:pitest, info.solidsoft.gradle.pitest:gradle-pitest-plugin)
• Update dependency checkstyle to v8.45.1
• Update Terraform azuread to v3
• Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.4.1
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.1
• Update dependency checkstyle to v10
• Update dependency com.github.hmcts:core-case-data-store-client to v5
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency net.minidev:json-smart to v2.5.1
• Update dependency pmd to v6.55.0

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions

.github/workflows/stale.yml

• actions/stale v9

.github/workflows/swagger.yml

• actions/checkout v4
• actions/setup-java v4

gradle

build.gradle

• io.spring.dependency-management 1.1.6
• org.springframework.boot 3.3.4
• org.owasp.dependencycheck 10.0.4
• com.github.ben-manes.versions 0.51.0
• uk.gov.hmcts.java 0.12.63
• org.sonarqube 5.1.0.4882
• info.solidsoft.pitest 1.15.0
• io.freefair.lombok 8.10.2
• net.serenity-bdd.serenity-gradle-plugin 3.9.8
• checkstyle 8.29
• pmd 6.40.0
• com.github.docker-java:docker-java 3.3.3
• com.google.guava:guava 32.1.3-jre
• commons-fileupload:commons-fileupload 1.5
• commons-io:commons-io 2.18.0
• net.minidev:json-smart 2.5.0
• org.glassfish:jakarta.el 4.0.2
• ch.qos.logback:logback-classic 1.5.12
• ch.qos.logback:logback-core 1.5.12
• io.netty:netty-all 4.1.115.Final
• org.seleniumhq.selenium:selenium-java 4.26.0
• org.seleniumhq.selenium:selenium-remote-driver 4.26.0
• org.seleniumhq.selenium:selenium-firefox-driver 4.26.0
• org.seleniumhq.selenium:selenium-chrome-driver 4.26.0
• org.seleniumhq.selenium:selenium-safari-driver 4.26.0
• org.seleniumhq.selenium:selenium-edge-driver 4.26.0
• org.seleniumhq.selenium:selenium-api 4.26.0
• org.seleniumhq.selenium:selenium-support 4.26.0
• org.springframework.security:spring-security-core 6.0.8
• org.springframework.security:spring-security-acl 6.0.8
• org.springframework.security:spring-security-aspects 6.0.8
• org.springframework.security:spring-security-cas 6.0.8
• org.springframework.security:spring-security-config 6.0.8
• org.springframework.security:spring-security-crypto 6.0.8
• org.springframework.security:spring-security-data 6.0.8
• org.springframework.security:spring-security-ldap 6.0.8
• org.springframework.security:spring-security-messaging 6.0.8
• org.springframework.security:spring-security-oauth2-client 6.0.8
• org.springframework.security:spring-security-oauth2-core 6.0.8
• org.springframework.security:spring-security-oauth2-jose 6.0.8
• org.springframework.security:spring-security-oauth2-resource-server 6.0.8
• org.springframework.security:spring-security-openid 6.0.8
• org.springframework.security:spring-security-remoting 6.0.8
• org.springframework.security:spring-security-rsocket 6.0.8
• org.springframework.security:spring-security-saml2-service-provider 6.0.8
• org.springframework.security:spring-security-taglibs 6.0.8
• org.springframework.security:spring-security-test 6.0.8
• org.springframework.security:spring-security-web 6.0.8
• org.junit.jupiter:junit-jupiter-api 5.11.3
• org.junit.jupiter:junit-jupiter-engine 5.11.3
• org.junit.jupiter:junit-jupiter-params 5.11.3
• org.junit.platform:junit-platform-commons 1.11.3
• org.junit.platform:junit-platform-engine 1.11.3
• org.springframework.boot:spring-boot-starter-validation 3.3.0
• org.springframework.security:spring-security-rsa 1.1.5
• org.springframework.boot:spring-boot-starter-security 3.3.0
• org.springframework.retry:spring-retry 2.0.7
• org.springframework.cloud:spring-cloud-starter-openfeign 4.1.1
• org.apache.httpcomponents.client5:httpclient5 5.3.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0
• org.zalando:logbook-core 3.10.0
• org.zalando:logbook-spring-boot-starter 3.10.0
• org.zalando:logbook-httpclient5 3.10.0
• com.github.hmcts.java-logging:logging 6.1.7
• com.github.hmcts.java-logging:logging-appinsights 6.1.7
• com.github.hmcts:service-auth-provider-java-client 5.3.0
• com.github.hmcts:core-case-data-store-client 4.9.2
• com.azure:azure-messaging-servicebus 7.17.7
• io.projectreactor.netty:reactor-netty-http 1.2.0
• io.projectreactor.netty:reactor-netty-core 1.2.1
• org.apache.tomcat.embed:tomcat-embed-core 10.1.33
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.33
• org.camunda.bpm:camunda-external-task-client 7.19.0
• com.launchdarkly:launchdarkly-java-server-sdk 6.3.0
• org.apache.commons:commons-lang3 3.17.0
• com.github.ben-manes.caffeine:caffeine 3.1.8
• net.logstash.logback:logstash-logback-encoder 7.4
• org.junit.vintage:junit-vintage-engine 5.11.3
• com.obsidiandynamics.pojotester:core 0.9.0
• com.jparams:to-string-verifier 1.4.8
• com.google.guava:guava-testlib 32.1.3-jre
• net.serenity-bdd:serenity-core 3.9.8
• net.serenity-bdd:serenity-junit 3.9.8
• net.serenity-bdd:serenity-rest-assured 3.9.8
• io.rest-assured:rest-assured 5.5.0
• net.serenity-bdd:serenity-spring 3.9.8
• org.testcontainers:postgresql 1.20.4
• org.testcontainers:junit-jupiter 1.20.4
• org.pitest:pitest 1.15.0
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.9.11
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• com.github.hmcts:fortify-client 1.4.5
• com.github.hmcts:document-management-client 7.0.1
• org.flywaydb:flyway-core 9.22.3
• com.zaxxer:HikariCP 5.1.0
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.2
• org.postgresql:postgresql 42.7.4

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.11.1

helm-values

charts/wa-case-event-handler/values.yaml

helmv3

charts/wa-case-event-handler/Chart.yaml

• java 5.2.1

terraform

infrastructure/main.tf

infrastructure/state.tf

• azuread 2.53.1
• azurerm ~> 4.0

infrastructure/versions.tf

• hashicorp/terraform >= 1.3.4

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.10.2

---

• Check this box to trigger a request for Renovate to run again on this repository