Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency net.serenity-bdd:serenity-cucumber to v4.2.11
• Update versions.serenity to v4.2.11 (net.serenity-bdd:serenity-screenplay, net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5.3.0
• Update dependency com.google.guava:guava to v33.4.0-jre
• Update dependency commons-io:commons-io to v2.18.0
• Update dependency commons-validator:commons-validator to v1.9.0
• Update dependency hashicorp/terraform to v1.10.3
• Update dependency io.github.resilience4j:resilience4j-spring-boot3 to v2.3.0
• Update dependency joda-time:joda-time to v2.13.0
• Update dependency net.serenity-bdd:serenity-single-page-report to v2.6.0
• Update dependency org.apache.commons:commons-lang3 to v3.17.0
• Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.4.1
• Update dependency org.apache.logging.log4j:log4j-bom to v2.24.3
• Update dependency org.apache.poi:poi-ooxml to v5.3.0
• Update dependency org.assertj:assertj-core to v3.27.2
• Update dependency org.liquibase:liquibase-core to v4.30.0
• Update dependency org.mockito:mockito-core to v5.15.2
• Update dependency org.owasp.encoder:encoder to v1.3.1
• Update dependency org.pitest:pitest to v1.17.3
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.0
• Update dependency org.springframework.security:spring-security-oauth2-client to v6.4.2
• Update feign monorepo to v13.5 (io.github.openfeign:feign-core, io.github.openfeign:feign-jackson)
• Update jackson monorepo to v2.18.2 (com.fasterxml.jackson.core:jackson-annotations, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-core)
• Update junit5 monorepo to v5.11.4 (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api, org.junit.vintage:junit-vintage-engine)
• Update postgres Docker tag to v16.6
• Update spring boot to v3.4.1 (org.springframework.boot:spring-boot-dependencies, org.springframework.boot)
• Update Terraform azuread to v3
• Update Terraform azurerm to v4
• Update dependency net.logstash.logback:logstash-logback-encoder to v8
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2024
• Update plugin org.owasp.dependencycheck to v11
• Update plugin org.sonarqube to v6
• Update postgres Docker tag to v17
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency com.github.hmcts:auth-checker-lib to v3.0.4
• Update Terraform azurerm to ~> 3.117.0
• Update dependency com.fasterxml.jackson.datatype:jackson-datatype-jdk8 to v2.18.2
• Update dependency com.fasterxml.jackson.datatype:jackson-datatype-jsr310 to v2.18.2
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5.3.0
• Update dependency gradle to v8.12
• Update dependency info.solidsoft.gradle.pitest:gradle-pitest-plugin to v1.15.0
• Update plugin au.com.dius.pact to v4.6.16
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update dependency net.serenity-bdd:serenity-single-page-report to v4
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose.yml

• postgres 16-alpine
• postgres 16-alpine

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

docker/database/Dockerfile

• postgres 16.2

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• actions/setup-java v4
• actions/cache v4

.github/workflows/stale.yml

• actions/stale v9

gradle

cve-resolution-strategy.gradle

settings.gradle

build.gradle

• org.sonarqube 5.1.0.4882
• org.springframework.boot 3.3.4
• io.spring.dependency-management 1.1.7
• org.owasp.dependencycheck 10.0.4
• uk.gov.hmcts.java 0.12.63
• com.gorylenko.gradle-git-properties 2.4.2
• com.github.hmcts:fortify-client 1.4.6
• org.springframework.boot:spring-boot-dependencies 3.3.4
• org.springframework.cloud:spring-cloud-dependencies 2023.0.4
• org.apache.logging.log4j:log4j-bom 2.23.1
• com.fasterxml.jackson.core:jackson-core 2.18.0
• com.fasterxml.jackson.core:jackson-databind 2.18.0
• com.google.guava:guava 33.3.1-jre
• ch.qos.logback:logback-core 1.5.15
• ch.qos.logback:logback-classic 1.5.15
• com.sun.xml.bind:jaxb-osgi 4.0.5
• io.github.openfeign:feign-jackson 13.2.1
• io.github.openfeign:feign-micrometer 13.5
• com.fasterxml.jackson.core:jackson-databind 2.17.1
• com.fasterxml.jackson.core:jackson-annotations 2.17.1
• joda-time:joda-time 2.12.7
• org.jboss.aerogear:aerogear-otp-java 1.0.0
• org.apache.poi:poi-ooxml 5.2.5
• junit:junit 4.13.2
• org.assertj:assertj-core 3.26.3
• org.mockito:mockito-core 5.11.0
• net.sourceforge.findbugs:annotations 1.3.2
• org.owasp.encoder:encoder 1.2.3
• com.github.tomakehurst:wiremock-jre8 3.0.1
• org.projectlombok:lombok 1.18.36
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.17.2
• com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.17.2
• com.github.hmcts:ccd-client 5.0.3

api/liquibase.gradle

api/build.gradle

• net.serenity-bdd:serenity-gradle-plugin 2.5.10
• net.serenity-bdd:serenity-single-page-report 2.1.13
• info.solidsoft.pitest 1.15.0
• au.com.dius.pact 4.1.7
• com.github.hmcts.java-logging:logging 6.1.7
• com.github.hmcts.java-logging:logging-appinsights 6.1.7
• com.github.hmcts:auth-checker-lib 3.0.0
• com.github.hmcts:service-auth-provider-java-client 5.2.0
• org.apache.commons:commons-lang3 3.14.0
• net.logstash.logback:logstash-logback-encoder 8.0
• ch.qos.logback:logback-classic 1.5.15
• ch.qos.logback:logback-core 1.5.15
• xerces:xercesImpl 2.12.2
• org.apache.httpcomponents.client5:httpclient5 5.2
• com.fasterxml.jackson.core:jackson-databind 2.17.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0
• org.liquibase:liquibase-core 4.29.2
• com.microsoft.azure:azure-servicebus-spring-boot-starter 2.2.5
• com.github.ben-manes.caffeine:caffeine 3.1.8
• io.github.openfeign:feign-core 13.2.1
• io.github.resilience4j:resilience4j-spring-boot3 2.0.2
• org.ff4j:ff4j-spring-boot-starter-webmvc 2.1
• commons-fileupload:commons-fileupload 1.5
• org.postgresql:postgresql 42.7.4
• commons-io:commons-io 2.16.1
• com.github.hmcts.ccfr-fees-register-app:fees-register-api-contract 2.4.0
• com.github.hmcts.ccfr-fees-register-app:fees-register-model 2.4.0
• org.springframework.plugin:spring-plugin-core 3.0.0
• org.hamcrest:hamcrest-all 1.3
• org.hsqldb:hsqldb 2.7.4
• com.github.tomakehurst:wiremock-jre8 3.0.1
• org.projectlombok:lombok 1.18.36
• org.testcontainers:postgresql 1.20.4
• org.powermock:powermock-module-junit4 2.0.9
• org.powermock:powermock-api-mockito2 2.0.9
• org.junit.vintage:junit-vintage-engine 5.10.0
• com.github.mifmif:generex 1.0.2
• org.pitest:pitest 1.15.8
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.9.0
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• au.com.dius.pact.provider:junit5 4.6.16
• au.com.dius.pact.provider:spring 4.6.16
• au.com.dius.pact.provider:junit5spring 4.6.16
• au.com.dius.pact.consumer:junit5 4.6.16
• au.com.dius.pact.consumer:java8 4.6.16
• org.junit.jupiter:junit-jupiter-api 5.10.2
• org.junit.jupiter:junit-jupiter-engine 5.10.2
• net.serenity-bdd:serenity-core 4.2.9
• net.serenity-bdd:serenity-cucumber 4.2.9
• net.serenity-bdd:serenity-junit 4.2.9
• net.serenity-bdd:serenity-rest-assured 4.2.9
• net.serenity-bdd:serenity-spring 4.2.9
• net.serenity-bdd:serenity-screenplay 4.2.9
• org.awaitility:awaitility 4.2.2

api-contract/build.gradle

• org.hibernate:hibernate-validator 8.0.2.Final
• jakarta.annotation:jakarta.annotation-api 3.0.0
• jakarta.el:jakarta.el-api 6.0.1
• com.opencsv:opencsv 5.9

case-payment-orders-client/build.gradle

• com.github.hmcts:service-auth-provider-java-client 5.2.0
• org.apache.httpcomponents.client5:httpclient5 5.2
• com.fasterxml.jackson.core:jackson-databind 2.17.0

gov-pay-client/build.gradle

• io.github.resilience4j:resilience4j-spring-boot3 2.2.0
• org.apache.httpcomponents.client5:httpclient5 5.2
• com.github.tomakehurst:wiremock-jre8 3.0.1
• org.powermock:powermock-api-mockito2 2.0.9

model/build.gradle

• com.google.guava:guava 33.3.1-jre
• org.apache.httpcomponents.client5:httpclient5 5.2
• net.logstash.logback:logstash-logback-encoder 7.4
• org.springframework.security:spring-security-oauth2-client 6.0.8
• com.querydsl:querydsl-jpa 5.1.0
• commons-validator:commons-validator 1.8.0
• com.github.hmcts.java-logging:logging-appinsights 6.1.7
• com.github.hmcts:service-auth-provider-java-client 5.2.0
• io.github.resilience4j:resilience4j-spring-boot3 2.2.0
• com.launchdarkly:launchdarkly-java-server-sdk 5.10.9
• com.mmnaseri.utils:spring-data-mock 2.2.0

otp/build.gradle

• com.amdelamar:jotp 1.3.0

reference-data/build.gradle

• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0
• org.testcontainers:postgresql 1.20.4

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.5

helm-values

charts/payment-api/values.yaml

helmv3

charts/payment-api/Chart.yaml

• java 5.2.1
• ccpay-refunds-api 1.0.17
• ccpay-bulkscanning-api 1.0.28
• ccpay-notifications-service 1.0.16

terraform

infrastructure/cft-api-mgmt.tf

infrastructure/main.tf

infrastructure/provider.tf

infrastructure/sdp.tf

infrastructure/state.tf

• azuread 2.53.1
• azurerm ~> 3.112.0

infrastructure/versions.tf

• hashicorp/terraform >= 0.13

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.8.5

---

• Check this box to trigger a request for Renovate to run again on this repository