Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Invalid cron schedule. No next run is possible

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update cucumber to v7.34.4 (io.cucumber:cucumber-junit-platform-engine, io.cucumber:cucumber-junit, io.cucumber:cucumber-java)
• Update dependency com.auth0:java-jwt to v4.5.2
• Update dependency com.github.hmcts:befta-fw to v9.2.7_CCD-7454
• Update dependency microsoft/ApplicationInsights-Java to v3.7.9
• Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.6.2
• Update dependency org.apache.httpcomponents.core5:httpcore5 to v5.4.3
• Update dependency org.apache.logging.log4j:log4j-api to v2.26.1
• Update dependency org.hibernate.orm:hibernate-core to v6.6.54.Final
• Update dependency org.postgresql:postgresql to v42.7.13
• Update dependency org.slf4j:slf4j-api to v2.0.18
• Update logback monorepo to v1.5.38 (ch.qos.logback:logback-classic, ch.qos.logback:logback-core)
• Update pactProviderVersion to v4.7.3 (au.com.dius.pact.provider:junit5spring, au.com.dius.pact.provider:spring, au.com.dius.pact.provider:junit5)
• Update plugin au.com.dius.pact to v4.7.3
• Update plugin org.owasp.dependencycheck to v12.2.2
• Update plugin org.sonarqube to v7.3.1.8318
• Update plugin org.springframework.boot to v3.5.16
• Update spring cloud (org.springframework.cloud:spring-cloud-contract-wiremock, org.springframework.cloud:spring-cloud-starter-contract-stub-runner, org.springframework.cloud:spring-cloud-starter-loadbalancer, org.springframework.cloud:spring-cloud-dependencies)
• Update dependency com.google.code.gson:gson to v2.14.0
• Update dependency com.google.guava:guava to v33.6.0-jre
• Update dependency com.nimbusds:nimbus-jose-jwt to v10.9.1
• Update dependency commons-io:commons-io to v2.22.0
• Update dependency hashicorp/terraform to v1.15.8
• Update dependency jakarta.persistence:jakarta.persistence-api to v3.2.0
• Update dependency org.apache.commons:commons-jexl3 to v3.7.0
• Update feign monorepo to v13.13 (io.github.openfeign:feign-jackson, io.github.openfeign:feign-httpclient)
• Update Gradle to v9.6.1
• Update mockito monorepo to v5.23.0 (org.mockito:mockito-junit-jupiter, org.mockito:mockito-core)
• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update dependency com.github.hmcts:idam-java-client to v4
• Update dependency com.github.hmcts:service-auth-provider-java-client to v6
• Update dependency com.jayway.jsonpath:json-path to v3
• Update dependency com.zaxxer:HikariCP to v7
• Update dependency io.vavr:vavr to v1
• Update dependency org.flywaydb:flyway-core to v12
• Update dependency org.hibernate.orm:hibernate-core to v7
• Update dependency org.json:json to v20250517
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update junit-framework monorepo to v6 (org.junit.platform:junit-platform-launcher, org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update spring cloud to v5 (org.springframework.cloud:spring-cloud-contract-wiremock, org.springframework.cloud:spring-cloud-starter-contract-stub-runner, org.springframework.cloud:spring-cloud-starter-loadbalancer)
• Update Terraform azuread to v3
• Update tibdex/github-app-token action to v2
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency com.github.hmcts:service-auth-provider-java-client to v5.3.4
• Update dependency net.bytebuddy:byte-buddy to v1.18.11-jdk5
• Update dependency org.assertj:assertj-vavr to v0.5.1
• Update plugin uk.gov.hmcts.java to v0.12.70
• Update dependency com.github.hmcts:ccd-case-document-am-client to v1.60.0
• Update dependency com.github.hmcts:ccd-test-definitions to v7.27.7-prerelease-CME-537
• Update elasticVersion to v9.4.3 (org.elasticsearch.client:elasticsearch-rest-client, co.elastic.clients:elasticsearch-java, org.elasticsearch:elasticsearch)
• Update plugin org.jsonschema2pojo to v1.3.3
• Update dependency com.github.hmcts:ccd-test-definitions to v97
• Update dependency io.rest-assured:rest-assured to v6
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update plugin org.springframework.boot to v4

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (2)

docker/database/Dockerfile (1)

• postgres 18.4

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (3)

.github/workflows/publish-swagger-specs.yml (3)

• actions/checkout v6 → [Updates: v7]
• actions/cache v5 → [Updates: v6]
• actions/setup-java v5

.github/workflows/scheduled-dummy-commit.yml (3)

• tibdex/github-app-token v1 → [Updates: v2]
• actions/checkout v6 → [Updates: v7]
• stefanzweifel/git-auto-commit-action v7

.github/workflows/stale.yml (1)

• actions/stale v10

gradle (5)

build.gradle (102)

• org.springframework.boot 3.5.14 → [Updates: 3.5.16, 4.1.0]
• com.github.ben-manes.versions 0.54.0
• io.spring.dependency-management 1.1.7
• org.sonarqube 7.3.0.8198 → [Updates: 7.3.1.8318]
• com.github.kt3k.coveralls 2.12.2
• com.github.spacialcircumstances.gradle-cucumber-reporting 0.1.25
• org.jetbrains.gradle.plugin.idea-ext 1.4.1
• info.solidsoft.pitest 1.19.0
• uk.gov.hmcts.java 0.12.68 → [Updates: 0.12.70]
• au.com.dius.pact 4.7.1 → [Updates: 4.7.3]
• org.jsonschema2pojo 1.2.2 → [Updates: 1.3.3]
• org.owasp.dependencycheck 12.2.1 → [Updates: 12.2.2]
• net.bytebuddy:byte-buddy 1.18.8 → [Updates: 1.18.11-jdk5]
• org.junit.jupiter:junit-jupiter-api 5.14.4 → [Updates: 6.1.2]
• org.junit.jupiter:junit-jupiter-engine 5.14.4 → [Updates: 6.1.2]
• org.junit.jupiter:junit-jupiter-params 5.14.4 → [Updates: 6.1.2]
• org.junit.platform:junit-platform-commons 1.14.4 → [Updates: 6.1.2]
• org.junit.platform:junit-platform-engine 1.14.4 → [Updates: 6.1.2]
• org.junit.platform:junit-platform-launcher 1.14.4 → [Updates: 6.1.2]
• org.apiguardian:apiguardian-api 1.1.2
• com.auth0:java-jwt 4.5.0 → [Updates: 4.5.2]
• com.google.code.gson:gson 2.13.2 → [Updates: 2.14.0]
• com.google.guava:guava 33.5.0-jre → [Updates: 33.6.0-jre]
• com.jayway.jsonpath:json-path 2.10.0 → [Updates: 3.0.0]
• com.nimbusds:nimbus-jose-jwt 10.7 → [Updates: 10.9.1]
• com.zaxxer:HikariCP 6.3.3 → [Updates: 7.1.0]
• org.slf4j:slf4j-api 2.0.17 → [Updates: 2.0.18]
• ch.qos.logback:logback-core 1.5.27 → [Updates: 1.5.38]
• ch.qos.logback:logback-classic 1.5.27 → [Updates: 1.5.38]
• commons-beanutils:commons-beanutils 1.11.0
• commons-fileupload:commons-fileupload 1.6.0
• commons-io:commons-io 2.21.0 → [Updates: 2.22.0]
• io.github.openfeign:feign-httpclient 13.6 → [Updates: 13.13]
• io.github.openfeign:feign-jackson 13.6 → [Updates: 13.13]
• io.github.openfeign.form:feign-form-spring 3.8.0
• jakarta.inject:jakarta.inject-api 2.0.1
• jakarta.persistence:jakarta.persistence-api 3.1.0 → [Updates: 3.2.0]
• jakarta.servlet:jakarta.servlet-api 6.1.0
• net.minidev:json-smart 2.6.0
• org.apache.commons:commons-lang3 3.20.0
• org.hibernate.orm:hibernate-core 6.6.42.Final → [Updates: 6.6.54.Final, 7.4.5.Final]
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.1]
• org.json:json 20250107 → [Updates: 20250517]
• org.assertj:assertj-core 3.27.7
• org.mockito:mockito-core 5.21.0 → [Updates: 5.23.0]
• org.mockito:mockito-junit-jupiter 5.21.0 → [Updates: 5.23.0]
• org.projectlombok:lombok 1.18.46
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.springframework.cloud:spring-cloud-starter-loadbalancer 4.3.2 → [Updates: 4.3.3, 5.0.2]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 → [Updates: 3.0.3]
• com.github.hmcts:service-auth-provider-java-client 5.3.3 → [Updates: 5.3.4, 6.0.0]
• com.github.hmcts:idam-java-client 3.0.5 → [Updates: 4.0.0]
• com.github.hmcts:ccd-case-document-am-client 1.59.2 → [Updates: 1.60.0]
• com.github.hmcts.java-logging:logging 8.0.0
• com.auth0:java-jwt 4.5.2
• com.google.guava:guava 33.6.0-jre
• com.github.ben-manes.caffeine:caffeine 3.2.4
• com.microsoft.azure:applicationinsights-logging-logback 2.6.4
• com.microsoft.azure:applicationinsights-spring-boot-starter 2.6.4
• com.sun.mail:mailapi 2.0.2
• com.vladmihalcea:hibernate-types-60 2.21.1
• commons-validator:commons-validator 1.10.1
• io.jsonwebtoken:jjwt-api 0.13.0
• io.jsonwebtoken:jjwt-impl 0.13.0
• io.jsonwebtoken:jjwt-jackson 0.13.0
• io.searchbox:jest 6.3.1
• io.vavr:vavr 0.11.0 → [Updates: 1.0.1]
• jakarta.inject:jakarta.inject-api 2.0.1
• jakarta.validation:jakarta.validation-api 3.1.1
• org.apache.commons:commons-jexl3 3.6.2 → [Updates: 3.7.0]
• org.apache.httpcomponents.client5:httpclient5 5.6.1 → [Updates: 5.6.2]
• org.apache.httpcomponents.core5:httpcore5 5.4.2 → [Updates: 5.4.3]
• org.apache.logging.log4j:log4j-api 2.26.0 → [Updates: 2.26.1]
• org.elasticsearch:elasticsearch 9.2.4 → [Updates: 9.4.3]
• co.elastic.clients:elasticsearch-java 9.2.4 → [Updates: 9.4.3]
• org.elasticsearch.client:elasticsearch-rest-client 9.2.4 → [Updates: 9.4.3]
• org.flywaydb:flyway-core 8.5.13 → [Updates: 12.11.0]
• org.jooq:jool-java-8 0.9.15
• org.mapstruct:mapstruct 1.6.3
• pl.jalokim.propertiestojson:java-properties-to-json 5.3.0
• org.mapstruct:mapstruct-processor 1.6.3
• org.mapstruct:mapstruct-processor 1.6.3
• org.postgresql:postgresql 42.7.11 → [Updates: 42.7.13]
• com.xebialabs.restito:restito 1.1.2
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.1]
• org.assertj:assertj-vavr 0.5.0 → [Updates: 0.5.1]
• org.springframework.cloud:spring-cloud-starter-contract-stub-runner 4.3.3 → [Updates: 4.3.4, 5.0.3]
• org.testcontainers:testcontainers 2.0.5
• org.testcontainers:testcontainers-postgresql 2.0.5
• org.testcontainers:testcontainers-elasticsearch 2.0.5
• org.openid4java:openid4java 1.0.0
• com.github.hmcts:ccd-test-definitions 7.26.7 → [Updates: 7.27.7-prerelease-CME-537, 97merge]
• com.github.hmcts:befta-fw 9.2.6 → [Updates: 9.2.7_CCD-7454]
• com.github.hmcts:fortify-client 1.4.10
• org.springframework.cloud:spring-cloud-contract-wiremock 4.3.3 → [Updates: 4.3.4, 5.0.3]
• au.com.dius.pact.provider:junit5 4.7.1 → [Updates: 4.7.3]
• au.com.dius.pact.provider:spring 4.7.1 → [Updates: 4.7.3]
• au.com.dius.pact.provider:junit5spring 4.7.1 → [Updates: 4.7.3]
• io.cucumber:cucumber-java 7.34.3 → [Updates: 7.34.4]
• io.cucumber:cucumber-junit 7.34.3 → [Updates: 7.34.4]
• io.cucumber:cucumber-junit-platform-engine 7.34.3 → [Updates: 7.34.4]
• org.springframework.cloud:spring-cloud-dependencies 2025.1.1 → [Updates: 2025.1.2]

gradle.properties

gradle/libs.versions.toml (1)

• org.mockito:mockito-core 5.23.0

gradle/suppress.gradle

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.4.1 → [Updates: 9.6.1]

helm-values (1)

charts/ccd-data-store-api/values.yaml

helmv3 (1)

charts/ccd-data-store-api/Chart.yaml (4)

• java 5.3.0
• elasticsearch 8.5.1
• logstash 8.5.1
• ccd 9.2.3

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.8 → [Updates: 3.7.9]

renovate-config (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf (1)

• github.com/hmcts/terraform-module-postgresql-flexible DTSPO-30107-additional-postgres-admins

infrastructure/state.tf (2)

• azuread 2.53.1 → [Updates: 3.9.0]
• azurerm ~> 4.0

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.3 → [Updates: 1.15.8]

---

• Check this box to trigger a request for Renovate to run again on this repository