Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency com.azure:azure-messaging-servicebus to v7.17.6
• Update dependency com.networknt:json-schema-validator to v1.5.3
• Update dependency io.swagger.core.v3:swagger-annotations to v2.2.26
• Update dependency microsoft/ApplicationInsights-Java to v3.6.2
• Update dependency net.bytebuddy:byte-buddy to v1.15.10
• Update dependency net.bytebuddy:byte-buddy-agent to v1.15.10
• Update dependency org.apache.tomcat.embed:tomcat-embed-core to v9.0.97
• Update dependency org.apache.tomcat.embed:tomcat-embed-websocket to v10.1.33
• Update dependency org.projectlombok:lombok to v1.18.36
• Update jackson monorepo to v2.18.1 (com.fasterxml.jackson.module:jackson-module-kotlin, com.fasterxml.jackson.core:jackson-databind)
• Update log4j2 monorepo to v2.24.2 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update org.apache.tomcat.embed:10.1.31 to v10.1.33 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-core)
• Update plugin com.github.hmcts.rse-cft-lib to v0.19.1474
• Update testcontainers-java monorepo to v1.20.4 (org.testcontainers:junit-jupiter, org.testcontainers:postgresql)
• Update versions.jackson to v2.18.1 (com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-annotations, com.fasterxml.jackson.core:jackson-core)
• Update Node.js to v20.18.1
• Update dependency checkstyle to v10.20.1
• Update dependency com.azure.spring:spring-cloud-azure-dependencies to v5.18.0
• Update dependency com.azure:azure-core to v1.54.1
• Update dependency com.nimbusds:nimbus-jose-jwt to v9.47
• Update dependency org.jdbi:jdbi3-sqlobject to v3.47.0
• Update plugin io.freefair.lombok to v8.11
• Update plugin org.flywaydb.flyway to v10.22.0
• Update spring security (org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-core, org.springframework.security:spring-security-config, org.springframework.security:spring-security-web)
• Update Node.js to v22
• Update dependency net.logstash.logback:logstash-logback-encoder to v8
• Update dependency org.apache.tika:tika-core to v3
• Update dependency org.apache.tomcat.embed:tomcat-embed-core to v11
• Update dependency org.apache.tomcat.embed:tomcat-embed-websocket to v11
• Update org.apache.tomcat.embed:10.1.31 to v11 (major) (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-core)
• Update plugin org.flywaydb.flyway to v11
• Update plugin org.owasp.dependencycheck to v11
• Update plugin org.sonarqube to v6
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update Terraform azurerm to v4.11.0
• Update ch.qos.logback:1.2.13 to v1.5.12 (ch.qos.logback:logback-classic, ch.qos.logback:logback-core)
• Update dependency hashicorp/terraform to v1.9.8
• Update versions.camunda to v7.22.0 (org.camunda.bpm:camunda-engine-rest-core, org.camunda.community.rest:camunda-platform-7-rest-client-spring-boot-starter, org.camunda.bpm:camunda-external-task-client)
• Update Terraform azuread to v3
• Update actions/checkout action to v4
• Update dependency com.github.hmcts:idam-java-client to v3
• Update dependency com.github.hmcts:send-letter-client to v5
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update hibernate core (major) (org.hibernate:hibernate-validator, org.hibernate:hibernate-core)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency jacoco to v0.8.12
• Update dependency com.github.hmcts:ccd-case-document-am-client to v1.59
• Update dependency com.github.hmcts:civil-commons to v1.33_CIV-6122_191023
• Update Helm release ccd to v9
• Update dependency com.github.hmcts:ccd-client to v5
• Update dependency com.github.hmcts:civil-commons to v13814
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update dependency gradle to v8
• Update dependency org.elasticsearch:elasticsearch to v8
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2023
• Update hmctspublic.azurecr.io/base/java Docker tag to v21
• Update kotlin monorepo to v2 (major) (org.jetbrains.kotlin:kotlin-reflect, org.jetbrains.kotlin:kotlin-stdlib, org.jetbrains.kotlin:kotlin-stdlib-jdk8, org.jetbrains.kotlin:kotlin-stdlib-jdk7, org.jetbrains.kotlin:kotlin-stdlib-common)
• Update mockito monorepo to v5 (major) (org.mockito:mockito-inline, org.mockito:mockito-junit-jupiter, org.mockito:mockito-core)
• Update spring boot to v3 (major) (org.springframework.boot:spring-boot-starter-data-jpa, org.springframework.boot)
• Update spring security to v6 (major) (org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-core, org.springframework.security:spring-security-config, org.springframework.security:spring-security-web)

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 17-distroless

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• actions/cache v4
• actions/setup-java v4
• actions/upload-artifact v4

.github/workflows/flyway-migration-files.yml

• actions/checkout v3

.github/workflows/main.yml

.github/workflows/publish-openapi.yaml

• hmcts/workflow-publish-openapi-spec v1

.github/workflows/stale.yml

• actions/stale v9

gradle

settings.gradle

build.gradle

• io.spring.dependency-management 1.1.6
• org.springframework.boot 2.7.18
• org.owasp.dependencycheck 9.2.0
• com.github.ben-manes.versions 0.51.0
• org.sonarqube 5.1.0.4882
• io.freefair.lombok 8.10.2
• com.github.hmcts.rse-cft-lib 0.19.1428
• org.flywaydb.flyway 10.20.1
• checkstyle 10.18.2
• jacoco 0.8.8
• com.google.guava:guava 33.3.1-jre
• org.jetbrains.kotlin:kotlin-stdlib-common 1.9.25
• org.jetbrains.kotlin:kotlin-stdlib-jdk7 1.9.25
• org.jetbrains.kotlin:kotlin-stdlib-jdk8 1.9.25
• org.jetbrains.kotlin:kotlin-stdlib 1.9.25
• org.jetbrains.kotlin:kotlin-reflect 1.9.25
• com.squareup.okhttp3:okhttp 4.12.0
• org.springframework.security:spring-security-crypto 6.2.1
• com.fasterxml.jackson.core:jackson-databind 2.18.0
• com.fasterxml.jackson.core:jackson-core 2.18.0
• com.fasterxml.jackson.core:jackson-annotations 2.18.0
• org.slf4j:slf4j-nop 2.0.16
• org.yaml:snakeyaml 2.3
• org.apache.tomcat.embed:tomcat-embed-core 10.1.31
• org.apache.tomcat.embed:tomcat-embed-el 10.1.31
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.31
• ch.qos.logback:logback-core 1.2.13
• ch.qos.logback:logback-classic 1.2.13
• org.springframework.cloud:spring-cloud-dependencies 2021.0.9
• com.azure.spring:spring-cloud-azure-dependencies 5.17.1
• org.junit.jupiter:junit-jupiter-api 5.11.3
• org.junit.jupiter:junit-jupiter-engine 5.11.3
• org.junit.jupiter:junit-jupiter-params 5.11.3
• org.junit.platform:junit-platform-commons 1.11.3
• org.junit.platform:junit-platform-engine 1.11.3
• com.github.hmcts:civil-commons v1.1.3
• org.springframework.statemachine:spring-statemachine-core 4.0.0
• org.springframework.statemachine:spring-statemachine-test 4.0.0
• org.springdoc:springdoc-openapi-ui 1.8.0
• org.postgresql:postgresql 42.7.4
• org.jdbi:jdbi3-sqlobject 3.46.0
• org.jdbi:jdbi3-spring4 3.19.0
• org.springframework.cloud:spring-cloud-starter-netflix-hystrix 2.2.10.RELEASE
• com.github.hmcts:service-auth-provider-java-client 4.1.2
• org.apache.tika:tika-core 2.9.2
• io.github.openfeign:feign-httpclient 13.5
• com.github.hmcts:java-logging 6.1.7
• com.github.hmcts:ccd-client 4.9.5-SPRING2
• com.github.hmcts:document-management-client 7.0.1
• com.github.hmcts:send-letter-client 3.0.23
• net.logstash.logback:logstash-logback-encoder 7.4
• com.github.hmcts:fees-java-client 0.0.6
• com.github.hmcts:payments-java-client 1.6.7
• uk.gov.service.notify:notifications-java-client 5.2.1-RELEASE
• com.github.hmcts:ccd-case-document-am-client 1.7.1
• com.sendgrid:sendgrid-java 4.10.3
• org.projectlombok:lombok 1.18.34
• com.github.ben-manes.caffeine:caffeine 3.1.8
• org.springframework.security:spring-security-web 5.8.15
• org.springframework.security:spring-security-config 5.8.15
• org.springframework.security:spring-security-core 5.8.15
• org.springframework.security:spring-security-oauth2-resource-server 5.8.15
• org.springframework.security:spring-security-oauth2-client 5.8.15
• org.springframework.security:spring-security-oauth2-jose 5.8.15
• org.springframework.security:spring-security-oauth2-core 5.8.15
• com.nimbusds:nimbus-jose-jwt 9.41.2
• io.jsonwebtoken:jjwt 0.12.6
• com.github.hmcts:idam-java-client 2.1.1
• org.apache.logging.log4j:log4j-api 2.24.1
• org.apache.logging.log4j:log4j-to-slf4j 2.24.1
• org.apache.commons:commons-text 1.12.0
• org.apache.tomcat.embed:tomcat-embed-core 9.0.96
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.31
• org.elasticsearch:elasticsearch 7.17.25
• com.networknt:json-schema-validator 1.5.2
• com.fasterxml.jackson.module:jackson-module-kotlin 2.18.0
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.0
• org.camunda.bpm:camunda-external-task-client 7.20.0
• org.camunda.community.rest:camunda-platform-7-rest-client-spring-boot-starter 7.20.0
• org.camunda.bpm:camunda-engine-rest-core 7.20.0
• org.apiguardian:apiguardian-api 1.1.2
• javax.xml.bind:jaxb-api 2.3.1
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.2
• org.glassfish.jaxb:jaxb-runtime 4.0.5
• com.launchdarkly:launchdarkly-java-server-sdk 6.3.0
• com.azure:azure-core 1.53.0
• com.azure:azure-messaging-servicebus 7.17.5
• com.microsoft.azure:azure-servicebus 3.6.7
• org.mockito:mockito-core 4.11.0
• org.mockito:mockito-junit-jupiter 4.11.0
• org.mockito:mockito-inline 4.11.0
• net.bytebuddy:byte-buddy 1.15.7
• net.bytebuddy:byte-buddy-agent 1.15.7
• org.assertj:assertj-core 3.26.3
• com.github.hmcts:fortify-client 1.4.5
• org.hamcrest:java-hamcrest 2.0.0.0
• org.junit.jupiter:junit-jupiter-api 5.11.3
• org.junit.jupiter:junit-jupiter-engine 5.11.3
• org.junit.jupiter:junit-jupiter-api 5.11.3
• org.junit.jupiter:junit-jupiter-engine 5.11.3
• org.testcontainers:postgresql 1.20.3
• org.testcontainers:junit-jupiter 1.20.3
• com.h2database:h2 2.3.232
• com.opencsv:opencsv 5.9

dashboard-notifications/build.gradle

• org.junit.jupiter:junit-jupiter-api 5.11.3
• org.junit.jupiter:junit-jupiter-engine 5.11.3
• org.junit.jupiter:junit-jupiter-params 5.11.3
• org.junit.platform:junit-platform-commons 1.11.3
• org.junit.platform:junit-platform-engine 1.11.3
• org.hibernate:hibernate-core 5.6.15.Final
• org.hibernate:hibernate-validator 7.0.5.Final
• jakarta.inject:jakarta.inject-api 2.0.1
• javax.validation:validation-api 2.0.1.Final
• org.springframework.boot:spring-boot-starter-data-jpa 2.7.18
• com.vladmihalcea:hibernate-types-52 2.21.1
• org.apache.commons:commons-text 1.12.0
• io.swagger.core.v3:swagger-annotations 2.2.25
• com.github.hmcts:idam-java-client 2.1.1
• org.postgresql:postgresql 42.7.4
• org.mockito:mockito-junit-jupiter 4.11.0

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 7.6.4

helm-values

charts/civil-service/values.yaml

helmv3

charts/civil-service/Chart.yaml

• java 5.2.1
• ccd 8.0.29
• xui-webapp ~1.0.16
• idam-pr ~2.3.0
• camunda-bpm 0.0.47
• aac-manage-case-assignment ~0.2.13
• wiremock 0.0.5

nvm

.nvmrc

• node 20.12.2

regex

Dockerfile

• microsoft/ApplicationInsights-Java 3.6.1

terraform

infrastructure/service-bus.tf

• github.com/hmcts/terraform-module-servicebus-subscription DTSPO-18682

infrastructure/state.tf

• azuread 2.53.1
• azurerm 4.0.1

infrastructure/tf-app-insights.tf

• github.com/hmcts/terraform-module-application-insights 4.x

infrastructure/tf-kv-main.tf

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.8.1

---

• Check this box to trigger a request for Renovate to run again on this repository