Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	npm-run-all

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update ccd-case-document-am-api Docker tag to v1.7.18
• Update dependency chai-as-promised to v7.1.2
• Update dependency com.github.hmcts:idam-java-client to v3.0.5
• Update dependency html-webpack-plugin to v5.6.7
• Update dependency jacoco to v0.8.14
• Update dependency mochawesome to v7.1.4
• Update dependency org.apache.tomcat.embed:tomcat-embed-core to v10.1.54
• Update dependency org.apache.tomcat.embed:tomcat-embed-websocket to v10.1.54
• Update dependency org.elasticsearch:elasticsearch to v8.19.14
• Update dependency org.projectlombok:lombok to v1.18.46
• Update log4j2 monorepo to v2.25.4 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update logback monorepo to v1.5.32 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update postgresql Docker tag to v1.1.1
• Update apache-poi monorepo to v5.5.1 (org.apache.poi:poi-scratchpad, org.apache.poi:poi-ooxml, org.apache.poi:poi)
• Update dependency allure-commandline to v2.38.1
• Update dependency chai to v4.5.0
• Update dependency css-loader to v6.11.0
• Update dependency hashicorp/terraform to v1.14.9
• Update dependency io.github.openfeign:feign-jackson to v11.10
• Update dependency net.javacrumbs.json-unit:json-unit-assertj to v3.5.0
• Update dependency org.apache.commons:commons-lang3 to v3.20.0
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.17
• Update dependency org.springdoc:springdoc-openapi-ui to v1.8.0
• Update dependency org.yaml:snakeyaml to v2.6
• Update dependency org.yaml:snakeyaml to v2.6
• Update dependency pmd to v6.55.0
• Update dependency uk.gov.service.notify:notifications-java-client to v5.2.1-RELEASE
• Update guava monorepo
• Update jackson monorepo (com.fasterxml.jackson.core:jackson-annotations, com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-databind)
• Update junit-framework monorepo (org.junit.platform:junit-platform-commons, org.junit.platform:junit-platform-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update Node.js to v18.20.8
• Update plugin au.com.dius.pact to v4.7.0
• Update plugin com.github.ben-manes.versions to v0.54.0
• Update plugin hmcts.ccd.sdk to v5.6.1
• Update plugin org.owasp.dependencycheck to v9.2.0
• Update plugin org.sonarqube to v5.1.0.4882
• Update plugin org.springframework.boot to v3.5.13
• Update Puppeteer to v23.11.1 (puppeteer, puppeteer-core)
• Update spring cloud (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap, org.springframework.cloud:spring-cloud-dependencies)
• Update versions.serenity to v4.3.4 (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Update dependency axios-debug-log to v1
• Update dependency chai to v6
• Update dependency chai-as-promised to v8
• Update dependency checkstyle to v13
• Update dependency com.github.hmcts:send-letter-client to v5
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency com.google.guava:guava to v33
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update dependency css-loader to v7
• Update dependency io.github.openfeign:feign-jackson to v13
• Update dependency net.javacrumbs.json-unit:json-unit-assertj to v5
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Update dependency nodemon to v3
• Update dependency org.apache.tomcat.embed:tomcat-embed-core to v11
• Update dependency org.apache.tomcat.embed:tomcat-embed-websocket to v11
• Update dependency org.elasticsearch:elasticsearch to v9
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update dependency otplib to v13
• Update dependency pmd to v7
• Update dependency uk.gov.service.notify:notifications-java-client to v6
• Update Gradle to v9
• Update junit-framework monorepo to v6 (major) (org.junit.platform:junit-platform-commons, org.junit.platform:junit-platform-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update Node.js to v24
• Update plugin hmcts.ccd.sdk to v6
• Update plugin org.owasp.dependencycheck to v12
• Update plugin org.sonarqube to v7
• Update plugin org.springframework.boot to v4
• Update Puppeteer to v24 (major) (puppeteer, puppeteer-core)
• Update spring cloud (major) (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap, org.springframework.cloud:spring-cloud-dependencies)
• Update versions.serenity to v5 (major) (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Update webdriverio monorepo to v9 (major) (@wdio/cli, @wdio/sauce-service, webdriverio)
• Update Yarn to v4
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Replace dependency npm-run-all with npm-run-all2 ^5.0.0

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package com.github.hmcts:ccd-client: no-result, Failed to look up maven package com.github.hmcts:java-logging: no-result.

Files affected: build.gradle

---

Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

• Update dependency axios to v1.15.0 [SECURITY]

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency codeceptjs to v3.7.5 [SECURITY]
• Update dependency lodash to v4.18.1 [SECURITY]
• Update dependency playwright to v1.55.1 [SECURITY]
• Update dependency webpack to v5.104.1 [SECURITY]
• Update dependency com.github.hmcts:fortify-client to v1.4.10
• Update plugin com.github.hmcts.rse-cft-lib to v0.19.2098
• Update dependency au.com.dius.pact.consumer:junit5 to v4.7.0
• Update dependency checkstyle to v10.26.1
• Update dependency com.github.ben-manes.caffeine:caffeine to v3.2.3
• Update dependency com.github.hmcts:service-auth-provider-java-client to v4.1.2
• Update dependency com.sendgrid:sendgrid-java to v4.10.3
• Update Gradle to v8.14.4
• Update webdriverio monorepo (@wdio/cli, @wdio/sauce-service, webdriverio)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

gradle (2)

build.gradle (74)

• cz.habarta.typescript-generator:typescript-generator-gradle-plugin 3.2.1263
• org.owasp.dependencycheck 9.1.0 → [Updates: 9.2.0, 12.2.1]
• org.sonarqube 5.0.0.4638 → [Updates: 5.1.0.4882, 7.2.3.7755]
• org.springframework.boot 3.4.11 → [Updates: 3.5.13, 4.0.5]
• com.github.ben-manes.versions 0.51.0 → [Updates: 0.54.0]
• hmcts.ccd.sdk 5.5.19 → [Updates: 5.6.1, 6.7.2]
• com.github.hmcts.rse-cft-lib 0.19.1844 → [Updates: 0.19.2098]
• au.com.dius.pact 4.3.8 → [Updates: 4.7.0]
• checkstyle 10.14.0 → [Updates: 10.26.1, 13.4.0]
• pmd 6.18.0 → [Updates: 6.55.0, 7.23.0]
• jacoco 0.8.13 → [Updates: 0.8.14]
• org.springframework.cloud:spring-cloud-dependencies 2024.0.0 → [Updates: 2024.0.3, 2025.1.1]
• org.bouncycastle:bcpkix-jdk15on 1.70
• com.google.guava:guava 32.0.0-jre → [Updates: 32.1.3-jre, 33.6.0-jre]
• commons-fileupload:commons-fileupload 1.6.0
• org.json:json 20240303
• org.yaml:snakeyaml 2.0 → [Updates: 2.6]
• org.junit.jupiter:junit-jupiter-api 5.10.2 → [Updates: 5.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.10.2 → [Updates: 5.14.3, 6.0.3]
• org.junit.jupiter:junit-jupiter-params 5.10.2 → [Updates: 5.14.3, 6.0.3]
• org.junit.platform:junit-platform-commons 1.10.2 → [Updates: 1.14.3, 6.0.3]
• org.junit.platform:junit-platform-engine 1.10.2 → [Updates: 1.14.3, 6.0.3]
• org.apache.logging.log4j:log4j-api 2.25.3 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-to-slf4j 2.25.3 → [Updates: 2.25.4]
• ch.qos.logback:logback-classic 1.5.18 → [Updates: 1.5.32]
• ch.qos.logback:logback-core 1.5.18 → [Updates: 1.5.32]
• com.google.guava:guava 33.1.0-jre → [Updates: 33.6.0-jre]
• com.fasterxml.jackson.core:jackson-databind 2.15.3 → [Updates: 2.21.2]
• com.fasterxml.jackson.core:jackson-core 2.15.3 → [Updates: 2.21.2]
• com.fasterxml.jackson.core:jackson-annotations 2.15.3 → [Updates: 2.21]
• com.launchdarkly:launchdarkly-java-server-sdk 5.10.9 → [Updates: 7.13.2]
• com.github.hmcts:befta-fw 9.2.4
• com.github.hmcts:ccd-client 4.9.2
• com.github.hmcts:idam-java-client 3.0.4 → [Updates: 3.0.5]
• com.github.hmcts:java-logging 6.1.9
• com.github.hmcts.java-logging:logging-appinsights 6.1.9
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• com.github.hmcts:send-letter-client 4.0.4 → [Updates: 5.1.1]
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts:ccd-case-document-am-client 1.59.2
• org.apache.tomcat.embed:tomcat-embed-core 10.1.52 → [Updates: 10.1.54, 11.0.21]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.5.0 → [Updates: 2.8.17, 3.0.3]
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.3.0 → [Updates: 4.3.2, 5.0.1]
• org.springframework.cloud:spring-cloud-starter-netflix-hystrix 2.2.10.RELEASE
• org.elasticsearch:elasticsearch 8.19.10 → [Updates: 8.19.14, 9.3.3]
• uk.gov.service.notify:notifications-java-client 5.0.1-RELEASE → [Updates: 5.2.1-RELEASE, 6.0.0-RELEASE]
• org.apache.commons:commons-collections4 4.5.0
• commons-validator:commons-validator 1.10.1
• com.github.ben-manes.caffeine:caffeine 3.1.8 → [Updates: 3.2.3]
• org.springdoc:springdoc-openapi-ui 1.6.15 → [Updates: 1.8.0]
• com.sendgrid:sendgrid-java 4.0.1 → [Updates: 4.10.3]
• org.apache.commons:commons-compress 1.28.0
• org.apache.commons:commons-lang3 3.18.0 → [Updates: 3.20.0]
• com.github.hmcts:service-auth-provider-java-client 4.0.2 → [Updates: 4.1.2, 5.3.3]
• org.apache.poi:poi 5.4.1 → [Updates: 5.5.1]
• org.apache.poi:poi-ooxml 5.4.1 → [Updates: 5.5.1]
• org.apache.poi:poi-scratchpad 5.4.1 → [Updates: 5.5.1]
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.52 → [Updates: 10.1.54, 11.0.21]
• org.projectlombok:lombok 1.18.38 → [Updates: 1.18.46]
• com.github.hmcts:fortify-client 1.4.9 → [Updates: 1.4.10]
• org.mockito:mockito-inline 5.2.0
• com.jayway.awaitility:awaitility 1.7.0
• com.github.stefanbirkner:system-lambda 1.2.1
• io.github.openfeign:feign-jackson 11.7 → [Updates: 11.10, 13.12]
• net.serenity-bdd:serenity-core 4.1.6 → [Updates: 4.3.4, 5.3.10]
• net.serenity-bdd:serenity-junit 4.1.6 → [Updates: 4.3.4, 5.3.10]
• net.serenity-bdd:serenity-rest-assured 4.1.6 → [Updates: 4.3.4, 5.3.10]
• net.serenity-bdd:serenity-spring 4.1.6 → [Updates: 4.3.4, 5.3.10]
• org.springframework.cloud:spring-cloud-starter-openfeign 4.2.2 → [Updates: 4.3.2, 5.0.1]
• com.github.hmcts:document-management-client 7.0.1
• net.javacrumbs.json-unit:json-unit-assertj 3.2.7 → [Updates: 3.5.0, 5.1.1]
• au.com.dius.pact.consumer:junit5 4.1.7 → [Updates: 4.7.0]
• org.junit.platform:junit-platform-commons 1.8.1 → [Updates: 1.14.3, 6.0.3]
• org.yaml:snakeyaml 2.0 → [Updates: 2.6]

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.7 → [Updates: 8.14.4, 9.4.1]

helm-values (1)

charts/adoption-cos-api/values.yaml

helmv3 (1)

charts/adoption-cos-api/Chart.yaml (4)

• java 5.3.0
• ccd 9.2.2
• ccd-case-document-am-api 1.7.17 → [Updates: 1.7.18]
• postgresql 1.1.0 → [Updates: 1.1.1]

npm (1)

package.json (28)

• axios ^1.13.5 → [Updates: ^1.13.5]
• @wdio/cli ^8.10.5 → [Updates: ^8.10.5, ^9.0.0]
• @wdio/sauce-service ^8.22.1 → [Updates: ^8.22.1, ^9.0.0]
• allure-commandline ^2.17.2 → [Updates: ^2.17.2]
• axios-debug-log ^0.8.4 → [Updates: ^1.0.0]
• chai ^4.3.6 → [Updates: ^4.3.6, ^6.0.0]
• chai-as-promised ^7.1.1 → [Updates: ^7.1.1, ^8.0.0]
• codeceptjs ^3.4.1 → [Updates: ^3.4.1]
• css-loader ^6.7.1 → [Updates: ^6.7.1, ^7.0.0]
• html-webpack-plugin ^5.5.0 → [Updates: ^5.5.0]
• lodash ^4.17.21 → [Updates: ^4.17.21]
• mocha >=2.2.0 <7 || >=9
• mocha-junit-reporter ^2.0.0
• mocha-multi ^1.1.6
• mochawesome ^7.1.3 → [Updates: ^7.1.3]
• moment ^2.29.3
• nodemon ^2.0.21 → [Updates: ^3.0.0]
• npm-run-all ^4.1.2 → [Updates: ^5.0.0]
• otplib ^12.0.1 → [Updates: ^13.0.0]
• playwright ^1.22.2 → [Updates: ^1.22.2]
• puppeteer ^23.3.0 → [Updates: ^23.3.0, ^24.0.0]
• puppeteer-core ^23.3.0 → [Updates: ^23.3.0, ^24.0.0]
• webdriverio ^7.19.7 → [Updates: ^7.19.7, ^9.0.0]
• webpack ^5.94.0 → [Updates: ^5.94.0]
• node >=18.16.1
• minimist ^1.2.6
• axios ^1.13.5 → [Updates: ^1.13.5]
• yarn 3.8.7 → [Updates: 4.14.1]

nvm (1)

.nvmrc (1)

• node 18.16.1 → [Updates: 18.20.8, 24.15.0]

renovate-config-presets (1)

.github/renovate.json

terraform (1)

infrastructure/main.tf

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.3.6 → [Updates: 1.14.9]

---

• Check this box to trigger a request for Renovate to run again on this repository