Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency com.github.hmcts.java-logging:logging to v7
• Update dependency nl.jqno.equalsverifier:equalsverifier to v4
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2025
• Update dependency uk.gov.service.notify:notifications-java-client to v6
• Update Gradle to v9
• Update junit-framework monorepo to v6 (major) (org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update plugin org.owasp.dependencycheck to v12
• Update plugin org.sonarqube to v7
• Update plugin org.springframework.boot to v4
• Update restAssured to v6 (major) (io.rest-assured:xml-path, io.rest-assured:json-path, io.rest-assured:rest-assured)
• Update stefanzweifel/git-auto-commit-action action to v7
• Update Terraform azuread to v3
• Update tibdex/github-app-token action to v2
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency jakarta.xml.bind:jakarta.xml.bind-api to v4.0.4

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.15
• Update dependency com.nimbusds:nimbus-jose-jwt to v10.7
• Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6
• Update junit-framework monorepo (org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update plugin org.springframework.boot to v3.5.9
• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update actions/setup-java action to v5
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency com.github.hmcts:ccd-test-definitions to v97

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (1)

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions (2)

.github/workflows/scheduled-dummy-commit.yml (3)

• tibdex/github-app-token v1 → [Updates: v2]
• actions/checkout v3 → [Updates: v6]
• stefanzweifel/git-auto-commit-action v4 → [Updates: v7]

.github/workflows/swagger.yml (3)

• actions/checkout v3 → [Updates: v6]
• actions/cache v3 → [Updates: v5]
• actions/setup-java v4 → [Updates: v5]

gradle (2)

build.gradle (70)

• au.com.dius.pact 4.6.19
• com.github.ben-manes.versions 0.53.0
• com.github.spacialcircumstances.gradle-cucumber-reporting 0.1.25
• io.spring.dependency-management 1.1.7
• org.owasp.dependencycheck 11.1.1 → [Updates: 12.2.0]
• org.sonarqube 6.3.1.5724 → [Updates: 7.2.2.6593]
• org.springframework.boot 3.4.1 → [Updates: 3.5.9, 4.0.1]
• uk.gov.hmcts.java 0.12.67
• org.springframework.cloud:spring-cloud-dependencies 2024.0.3 → [Updates: 2025.1.0]
• org.junit.jupiter:junit-jupiter-api 5.11.4 → [Updates: 5.14.2, 6.0.2]
• org.junit.jupiter:junit-jupiter-engine 5.11.4 → [Updates: 5.14.2, 6.0.2]
• org.junit.jupiter:junit-jupiter-params 5.11.4 → [Updates: 5.14.2, 6.0.2]
• org.junit.platform:junit-platform-commons 1.11.4 → [Updates: 1.14.2, 6.0.2]
• org.junit.platform:junit-platform-engine 1.11.4 → [Updates: 1.14.2, 6.0.2]
• org.apiguardian:apiguardian-api 1.1.2
• ch.qos.logback:logback-classic 1.5.25
• ch.qos.logback:logback-core 1.5.25
• com.auth0:java-jwt 4.5.0
• com.google.code.gson:gson 2.13.2
• com.google.guava:guava 33.5.0-jre
• com.nimbusds:nimbus-jose-jwt 10.6 → [Updates: 10.7]
• commons-fileupload:commons-fileupload 1.6.0
• commons-io:commons-io 2.21.0
• io.github.openfeign:feign-httpclient 13.6
• io.github.openfeign:feign-jackson 13.6
• io.github.openfeign.form:feign-form 3.8.0
• io.github.openfeign.form:feign-form-spring 3.8.0
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.2 → [Updates: 4.0.4]
• javax.xml.bind:jaxb-api 2.3.1
• org.apache.commons:commons-lang3 3.20.0
• org.glassfish.jaxb:jaxb-core 4.0.6
• org.slf4j:slf4j-api 2.0.17
• org.slf4j:jul-to-slf4j 2.0.17
• org.springframework.security:spring-security-rsa 1.1.5
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.14 → [Updates: 2.8.15, 3.0.1]
• com.github.hmcts:idam-java-client 3.0.5
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts.java-logging:logging 6.1.9 → [Updates: 7.0.0]
• com.github.hmcts.java-logging:logging-appinsights 6.1.9
• com.github.ben-manes.caffeine:caffeine 3.2.3
• com.vladmihalcea:hibernate-types-60 2.21.1
• io.jsonwebtoken:jjwt-api 0.13.0
• io.jsonwebtoken:jjwt-impl 0.13.0
• io.jsonwebtoken:jjwt-jackson 0.13.0
• io.projectreactor:reactor-core 3.8.2
• jakarta.inject:jakarta.inject-api 2.0.1
• pl.jalokim.propertiestojson:java-properties-to-json 5.3.0
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• org.apache.httpcomponents.client5:httpclient5 5.5.1 → [Updates: 5.6]
• org.glassfish.jaxb:jaxb-runtime 4.0.6
• org.mapstruct:mapstruct-processor 1.6.3
• org.modelmapper:modelmapper 3.2.6
• org.projectlombok:lombok 1.18.42
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.reactivestreams:reactive-streams 1.0.4
• uk.gov.service.notify:notifications-java-client 3.19.2-RELEASE → [Updates: 6.0.0-RELEASE]
• com.github.hmcts:befta-fw 9.2.4
• com.github.hmcts:ccd-test-definitions 7.27.7-prerelease-CME-537 → [Updates: 97merge]
• com.github.hmcts:fortify-client 1.4.10
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.0]
• io.rest-assured:json-path 5.5.7 → [Updates: 6.0.0]
• io.rest-assured:xml-path 5.5.7 → [Updates: 6.0.0]
• nl.jqno.equalsverifier:equalsverifier 3.19.4 → [Updates: 4.3]
• org.mapstruct:mapstruct-processor 1.6.3
• org.mockito:mockito-core 5.21.0
• org.mockito:mockito-subclass 5.21.0
• au.com.dius.pact.consumer:junit5 4.6.19
• au.com.dius.pact.provider:junit5 4.6.19
• au.com.dius.pact.provider:spring 4.6.19
• au.com.dius.pact.provider:junit5spring 4.6.19

gradle/suppress.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 9.3.0]

helm-values (1)

charts/aac-manage-case-assignment/values.yaml

helmv3 (1)

charts/aac-manage-case-assignment/Chart.yaml (1)

• java 5.3.0

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.6

renovate-config-presets (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf (1)

• github.com/hmcts/terraform-module-application-insights 4.x

infrastructure/state.tf (2)

• azuread 2.53.1 → [Updates: 3.7.0]
• azurerm ~> 4.0

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.3

---

• Check this box to trigger a request for Renovate to run again on this repository