Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency microsoft/applicationinsights-java to v3.7.8
• fix(deps): update dependency net.bytebuddy:byte-buddy to v1.18.8
• fix(deps): update dependency org.apache.logging.log4j:log4j-api to v2.25.4
• chore(deps): update plugin info.solidsoft.pitest to v1.19.0
• chore(deps): update terraform azuread to v3
• chore(deps): update tibdex/github-app-token action to v2
• fix(deps): update dependency com.github.hmcts:ccd-test-definitions to v97
• fix(deps): update dependency com.github.hmcts.java-logging:logging to v8
• fix(deps): update dependency io.rest-assured:rest-assured to v6
• fix(deps): update dependency io.vavr:vavr to v1
• fix(deps): update dependency org.elasticsearch:elasticsearch to v9
• fix(deps): update dependency org.flywaydb:flyway-core to v12
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• fix(deps): update dependency org.testcontainers:testcontainers to v2
• fix(deps): update junit-framework monorepo to v6 (major) (org.junit.platform:junit-platform-launcher, org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• chore(deps): update dependency hashicorp/terraform to v1.14.8
• chore(deps): update gradle to v9

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update plugin com.github.ben-manes.versions to v0.53.0
• chore(deps): update plugin org.jsonschema2pojo to v1.3.3
• chore(deps): update helm release elasticsearch to v8
• chore(deps): update helm release logstash to v8
• chore(deps): update plugin org.sonarqube to v7
• chore(deps): update plugin org.springframework.boot to v4
• chore(deps): update postgres docker tag to v18
• chore(deps): update stefanzweifel/git-auto-commit-action action to v7
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency com.github.hmcts:ccd-test-definitions to v7.27.7-prerelease-cme-537
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025.1.1

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (2)

docker/database/Dockerfile (1)

• postgres 9.6 → [Updates: 18.3]

Dockerfile (1)

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions (3)

.github/workflows/publish-swagger-specs.yml (3)

• actions/checkout v6
• actions/cache v5
• actions/setup-java v5

.github/workflows/scheduled-dummy-commit.yml (3)

• tibdex/github-app-token v1 → [Updates: v2]
• actions/checkout v6
• stefanzweifel/git-auto-commit-action v4 → [Updates: v7]

.github/workflows/stale.yml (1)

• actions/stale v10

gradle (5)

build.gradle (73)

• org.springframework.boot 3.5.13 → [Updates: 4.0.5]
• com.github.ben-manes.versions 0.51.0 → [Updates: 0.53.0]
• io.spring.dependency-management 1.1.7
• org.sonarqube 6.3.1.5724 → [Updates: 7.2.3.7755]
• com.github.kt3k.coveralls 2.12.2
• com.github.spacialcircumstances.gradle-cucumber-reporting 0.1.25
• org.jetbrains.gradle.plugin.idea-ext 1.4.1
• info.solidsoft.pitest 1.15.0 → [Updates: 1.19.0]
• uk.gov.hmcts.java 0.12.68
• au.com.dius.pact 4.6.20
• org.jsonschema2pojo 1.2.2 → [Updates: 1.3.3]
• org.owasp.dependencycheck 12.2.0
• net.bytebuddy:byte-buddy 1.18.7 → [Updates: 1.18.8]
• org.junit.jupiter:junit-jupiter-api 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-params 5.14.3 → [Updates: 6.0.3]
• org.junit.platform:junit-platform-commons 1.14.3 → [Updates: 6.0.3]
• org.junit.platform:junit-platform-engine 1.14.3 → [Updates: 6.0.3]
• org.junit.platform:junit-platform-launcher 1.14.3 → [Updates: 6.0.3]
• org.apiguardian:apiguardian-api 1.1.2
• org.projectlombok:lombok 1.18.44
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.16 → [Updates: 3.0.2]
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts:idam-java-client 3.0.5
• com.github.hmcts:ccd-case-document-am-client 1.59.2
• com.github.hmcts.java-logging:logging 6.1.9 → [Updates: 8.0.0]
• com.auth0:java-jwt 4.5.1
• com.google.guava:guava 33.5.0-jre
• com.github.ben-manes.caffeine:caffeine 3.2.3
• com.microsoft.azure:applicationinsights-logging-logback 2.6.4
• com.microsoft.azure:applicationinsights-spring-boot-starter 2.6.4
• com.sun.mail:mailapi 2.0.2
• com.vladmihalcea:hibernate-types-60 2.21.1
• commons-validator:commons-validator 1.10.1
• io.jsonwebtoken:jjwt-api 0.13.0
• io.jsonwebtoken:jjwt-impl 0.13.0
• io.jsonwebtoken:jjwt-jackson 0.13.0
• io.searchbox:jest 6.3.1
• io.vavr:vavr 0.11.0 → [Updates: 1.0.1]
• jakarta.inject:jakarta.inject-api 2.0.1
• jakarta.validation:jakarta.validation-api 3.1.1
• org.apache.commons:commons-jexl3 3.6.2
• org.apache.httpcomponents.client5:httpclient5 5.6
• org.apache.httpcomponents.core5:httpcore5 5.4.2
• org.apache.logging.log4j:log4j-api 2.25.3 → [Updates: 2.25.4]
• org.elasticsearch:elasticsearch 7.17.29 → [Updates: 9.3.2]
• org.flywaydb:flyway-core 8.5.13 → [Updates: 12.3.0]
• org.jooq:jool-java-8 0.9.15
• org.mapstruct:mapstruct 1.6.3
• pl.jalokim.propertiestojson:java-properties-to-json 5.3.0
• org.mapstruct:mapstruct-processor 1.6.3
• org.mapstruct:mapstruct-processor 1.6.3
• org.postgresql:postgresql 42.7.10
• com.opentable.components:otj-pg-embedded 1.1.1
• com.xebialabs.restito:restito 1.1.2
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.0]
• org.assertj:assertj-vavr 0.5.0
• org.testcontainers:testcontainers 1.21.4 → [Updates: 2.0.4]
• org.testcontainers:postgresql 1.21.4
• org.testcontainers:elasticsearch 1.21.4
• org.testcontainers:junit-jupiter 1.21.4
• org.openid4java:openid4java 1.0.0
• com.github.hmcts:ccd-test-definitions 7.25.4 → [Updates: 7.27.7-prerelease-CME-537, 97merge]
• com.github.hmcts:befta-fw 9.2.4
• com.github.hmcts:fortify-client 1.4.10
• au.com.dius.pact.provider:junit5 4.6.20
• au.com.dius.pact.provider:spring 4.6.20
• au.com.dius.pact.provider:junit5spring 4.6.20
• io.cucumber:cucumber-java 7.34.3
• io.cucumber:cucumber-junit 7.34.3
• io.cucumber:cucumber-junit-platform-engine 7.34.3
• org.springframework.cloud:spring-cloud-dependencies 2025.0.1 → [Updates: 2025.1.1]

gradle.properties

gradle/libs.versions.toml (1)

• org.mockito:mockito-core 5.23.0

gradle/suppress.gradle

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 9.4.1]

helm-values (1)

charts/ccd-data-store-api/values.yaml

helmv3 (1)

charts/ccd-data-store-api/Chart.yaml (4)

• java 5.3.0
• elasticsearch 7.17.3 → [Updates: 8.5.1]
• logstash 7.17.3 → [Updates: 8.5.1]
• ccd 9.2.2

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.7 → [Updates: 3.7.8]

renovate-config-presets (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf

infrastructure/state.tf (2)

• azuread 2.53.1 → [Updates: 3.8.0]
• azurerm ~> 4.0

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.3 → [Updates: 1.14.8]

---

• Check this box to trigger a request for Renovate to run again on this repository