Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	org.camunda.community.rest:camunda-platform-7-rest-client-spring-boot-starter

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency org.projectlombok:lombok to v1.18.46
• Update Helm chart updates (aac-manage-case-assignment, camunda-bpm, em-stitching)
• Update Terraform azurerm to v4.69.0
• Update dependency org.elasticsearch:elasticsearch to v9
• Update dependency uk.gov.service.notify:notifications-java-client to v6
• Update flyway to v12 (major) (org.flywaydb:flyway-database-postgresql, org.flywaydb.flyway)
• Update Gradle to v9
• Update junit-framework monorepo to v6 (major) (org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api, org.junit.platform:junit-platform-launcher, org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params)
• Update mockito monorepo to v5 (major) (org.mockito:mockito-inline, org.mockito:mockito-junit-jupiter, org.mockito:mockito-core)
• Update Node.js to v24
• Update plugin io.freefair.lombok to v9
• Update plugin org.sonarqube to v7
• Update postgres Docker tag to v18
• Update Spring Boot and related updates (major) (org.springdoc:springdoc-openapi-starter-webmvc-ui, com.azure.spring:spring-cloud-azure-dependencies, org.springframework.cloud:spring-cloud-dependencies, org.springframework.boot)
• Update Terraform azuread to v3
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update All non-major updates (hashicorp/terraform, org.apache.httpcomponents.client5:httpclient5, io.github.openfeign:feign-httpclient, com.github.hmcts.rse-cft-lib, com.github.ben-manes.versions)
• Update Spring Boot and related updates (jakarta.persistence:jakarta.persistence-api, org.springdoc:springdoc-openapi-starter-webmvc-ui, com.azure.spring:spring-cloud-azure-dependencies, org.camunda.community.rest:camunda-platform-7-rest-client-spring-boot-starter, org.springframework.statemachine:spring-statemachine-test, org.springframework.statemachine:spring-statemachine-core, org.springframework.boot)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency com.networknt:json-schema-validator to v3
• Update dependency com.sun.xml.bind:jaxb-impl to v4
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update actions/deploy-pages action to v5
• Update actions/setup-python action to v6
• Update actions/upload-artifact action to v7
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (9)

.github/workflows/ado_artifacts_build.yml (2)

• actions/checkout v6
• actions/setup-java v5

.github/workflows/ci.yml (5)

• actions/checkout v6
• actions/cache v5
• actions/setup-java v5
• actions/upload-artifact v4 → [Updates: v7]
• postgres 15 → [Updates: 18]

.github/workflows/deploy-email-docs.yml (3)

• actions/checkout v6
• actions/upload-pages-artifact v5
• actions/deploy-pages v4 → [Updates: v5]

.github/workflows/email-notifications.yml (4)

• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/checkout v6

.github/workflows/flyway-migration-files.yml (1)

• actions/checkout v6

.github/workflows/publish-openapi.yaml (1)

• hmcts/workflow-publish-openapi-spec v1

.github/workflows/stale.yml (1)

• actions/stale v10

.github/workflows/stateflow-diagrams.yml (4)

• actions/checkout v6
• actions/setup-java v5
• actions/setup-node v6
• node 18 → [Updates: 24]

.github/workflows/update-email-docs.yml (5)

• actions/checkout v6
• actions/checkout v6
• actions/checkout v6
• actions/setup-python v5 → [Updates: v6]
• python 3.x

gradle (3)

build.gradle (95)

• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.3.7 → [Updates: 3.5.13, 4.0.5]
• org.owasp.dependencycheck 12.2.1
• com.github.ben-manes.versions 0.53.0 → [Updates: 0.54.0]
• org.sonarqube 6.3.1.5724 → [Updates: 7.2.3.7755]
• io.freefair.lombok 8.14.4 → [Updates: 9.4.0]
• com.github.hmcts.rse-cft-lib 0.19.2084 → [Updates: 0.19.2097]
• org.flywaydb.flyway 10.22.0 → [Updates: 12.4.0]
• org.gradle.test-retry 1.6.4
• checkstyle 13.4.0
• jacoco 0.8.14
• com.google.guava:guava 33.6.0-jre
• com.squareup.okhttp3:okhttp 5.3.2
• org.slf4j:slf4j-nop 2.0.17
• org.apache.httpcomponents.core5:httpcore5 5.4.2
• org.apache.httpcomponents.core5:httpcore5-h2 5.4.2
• org.springframework.cloud:spring-cloud-dependencies 2023.0.6 → [Updates: 2025.1.1]
• com.azure.spring:spring-cloud-azure-dependencies 5.24.1 → [Updates: 5.25.0, 7.2.0]
• org.junit.jupiter:junit-jupiter-api 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-params 5.14.3 → [Updates: 6.0.3]
• org.junit.platform:junit-platform-commons 1.14.3 → [Updates: 6.0.3]
• org.junit.platform:junit-platform-engine 1.14.3 → [Updates: 6.0.3]
• jakarta.inject:jakarta.inject-api 2.0.1
• org.springframework.statemachine:spring-statemachine-core 4.0.0 → [Updates: 4.0.1]
• org.springframework.statemachine:spring-statemachine-test 4.0.0 → [Updates: 4.0.1]
• commons-beanutils:commons-beanutils 1.11.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0 → [Updates: 2.8.17, 3.0.3]
• org.postgresql:postgresql 42.7.10
• jakarta.persistence:jakarta.persistence-api 3.1.0 → [Updates: 3.2.0]
• org.jdbi:jdbi3-sqlobject 3.52.1
• org.jdbi:jdbi3-spring 3.52.1
• org.flywaydb:flyway-database-postgresql 10.22.0 → [Updates: 12.4.0]
• com.github.hmcts:service-auth-provider-java-client 4.1.2 → [Updates: 5.3.3]
• org.apache.tika:tika-core 3.3.0
• io.github.openfeign:feign-httpclient 13.11 → [Updates: 13.12]
• com.github.hmcts.java-logging:logging 8.0.0
• com.microsoft.azure:applicationinsights-web 3.7.8
• commons-lang:commons-lang 2.6
• com.github.hmcts:core-case-data-store-client 5.2.0
• com.github.hmcts:document-management-client 7.0.1
• com.github.hmcts:send-letter-client 5.1.1
• net.logstash.logback:logstash-logback-encoder 7.4 → [Updates: 9.0]
• com.github.hmcts:fees-java-client 0.1.0
• com.github.hmcts:payments-java-client 1.6.7 → [Updates: 1.7.0]
• uk.gov.service.notify:notifications-java-client 5.2.1-RELEASE → [Updates: 6.0.0-RELEASE]
• com.github.hmcts:ccd-case-document-am-client 1.59.2
• com.sendgrid:sendgrid-java 4.10.3
• org.projectlombok:lombok 1.18.38 → [Updates: 1.18.46]
• com.github.ben-manes.caffeine:caffeine 3.2.3
• com.nimbusds:nimbus-jose-jwt 10.9
• io.jsonwebtoken:jjwt 0.13.0
• com.github.hmcts:idam-java-client 3.0.5
• org.apache.logging.log4j:log4j-api 2.25.4
• org.apache.logging.log4j:log4j-to-slf4j 2.25.4
• org.apache.logging.log4j:log4j-core 2.25.4
• org.apache.commons:commons-text 1.15.0
• org.elasticsearch:elasticsearch 7.17.29 → [Updates: 9.3.3]
• com.networknt:json-schema-validator 1.5.9 → [Updates: 3.0.2]
• org.camunda.bpm:camunda-external-task-client 7.20.0 → [Updates: 7.24.0]
• org.camunda.community.rest:camunda-platform-7-rest-client-spring-boot-starter 7.20.0 → [Updates: 7.24.1, 2025.12.2]
• org.camunda.bpm:camunda-engine-rest-core 7.20.0 → [Updates: 7.24.0]
• org.apiguardian:apiguardian-api 1.1.2
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.5
• org.glassfish.jaxb:jaxb-runtime 4.0.7
• javax.xml.bind:jaxb-api 2.3.1
• com.sun.xml.bind:jaxb-impl 2.3.9 → [Updates: 4.0.7]
• com.sun.activation:javax.activation 1.2.0
• com.launchdarkly:launchdarkly-java-server-sdk 6.3.0 → [Updates: 7.13.2]
• com.azure:azure-core 1.57.1
• com.azure:azure-messaging-servicebus 7.17.17
• org.apache.pdfbox:pdfbox 3.0.7
• org.apache.pdfbox:pdfbox-io 3.0.7
• com.github.hmcts:auth-checker-lib 3.1.1 → [Updates: 3.2.0]
• org.apache.poi:poi 5.5.1
• org.apache.poi:poi-ooxml 5.5.1
• org.apache.httpcomponents.client5:httpclient5 5.6 → [Updates: 5.6.1]
• org.apache.pdfbox:preflight 3.0.7
• org.mockito:mockito-core 4.11.0 → [Updates: 5.23.0]
• org.mockito:mockito-junit-jupiter 4.11.0 → [Updates: 5.23.0]
• org.mockito:mockito-inline 4.11.0 → [Updates: 5.2.0]
• net.bytebuddy:byte-buddy 1.18.8
• net.bytebuddy:byte-buddy-agent 1.18.8
• org.junit.platform:junit-platform-launcher 1.14.3 → [Updates: 6.0.3]
• org.assertj:assertj-core 3.27.7
• com.github.hmcts:fortify-client 1.4.10
• org.hamcrest:java-hamcrest 2.0.0.0
• org.junit.jupiter:junit-jupiter-api 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-api 5.14.3 → [Updates: 6.0.3]
• org.junit.jupiter:junit-jupiter-engine 5.14.3 → [Updates: 6.0.3]
• org.testcontainers:postgresql 1.21.4
• org.testcontainers:junit-jupiter 1.21.4
• com.h2database:h2 2.4.240
• com.opencsv:opencsv 5.12.0

gradle.properties

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 9.4.1]

helm-values (1)

charts/civil-service/values.yaml

helmv3 (1)

charts/civil-service/Chart.yaml (9)

• java 5.3.0
• ccd 9.2.2
• xui-webapp 1.0.43
• camunda-bpm 0.0.48 → [Updates: 0.0.50]
• aac-manage-case-assignment 0.2.22 → [Updates: 0.2.24]
• wiremock 0.0.7
• ccd-case-document-am-api 1.7.18
• em-ccdorc 2.1.2
• em-stitching 1.1.3 → [Updates: 1.1.4]

nvm (1)

.nvmrc (1)

• node 22.22.2 → [Updates: 24.15.0]

regex (2)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.8

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.8

renovate-config-presets (1)

.github/renovate.json

terraform (4)

infrastructure/service-bus.tf (1)

• github.com/hmcts/terraform-module-servicebus-subscription DTSPO-18682

infrastructure/state.tf (2)

• azuread 2.53.1 → [Updates: 3.8.0]
• azurerm 4.68.0 → [Updates: 4.69.0]

infrastructure/tf-app-insights.tf (1)

• github.com/hmcts/terraform-module-application-insights 4.x

infrastructure/tf-kv-main.tf

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.8 → [Updates: 1.14.9]

---

• Check this box to trigger a request for Renovate to run again on this repository

[zhanglin2603]

I reviewed #2251 and I'm ready to handle it.

• My read: this is documentation-focused work for "Dependency Dashboard".
• I will focus on these issue-specific points first: dependency, dashboard, lists.
• Confirm audience and acceptance criteria, then draft reproducible steps.
• Add concrete examples and edge cases so contributors can follow directly.
• Keep progress updates clear (24h for first patch, 48h for final polish).
  If this scope looks good, I can begin right away.

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.