Update All non-major updates

.nvmrc

@@ -1 +1 @@
-22.22.0
+22.22.2

Dockerfile

@@ -1,5 +1,5 @@
 # renovate: datasource=github-releases depName=microsoft/ApplicationInsights-Java
-ARG APP_INSIGHTS_AGENT_VERSION=3.7.7
+ARG APP_INSIGHTS_AGENT_VERSION=3.7.8
 
 # Application image
 

build.gradle

@@ -6,15 +6,15 @@ plugins {
   id 'jacoco'
   id 'io.spring.dependency-management' version '1.1.7'
   id 'org.springframework.boot' version '3.3.7'
-  id 'org.owasp.dependencycheck' version '12.2.0'
+  id 'org.owasp.dependencycheck' version '12.2.1'
   id 'com.github.ben-manes.versions' version '0.53.0'
   id 'org.sonarqube' version '6.3.1.5724'
   id 'au.com.dius.pact' version '4.6.17'
   id "io.freefair.lombok" version "8.14.4"
-  id 'com.github.hmcts.rse-cft-lib' version '0.19.2017'
+  id 'com.github.hmcts.rse-cft-lib' version '0.19.2084'
   id "org.flywaydb.flyway" version "10.22.0"
   id 'maven-publish'
-  id "org.gradle.test-retry" version "1.6.2"
+  id "org.gradle.test-retry" version "1.6.4"
 }
 
 group = 'uk.gov.hmcts.reform'
@@ -28,8 +28,8 @@ def versions = [
   lombok            : '1.18.38',
   camunda           : '7.20.0',
   testcontainers    : '1.21.4',
-  pdfbox            : '3.0.6',
-  tika              : '3.2.3'
+  pdfbox            : '3.0.7',
+  tika              : '3.3.0'
 ]
 
 allprojects {
@@ -104,7 +104,7 @@ allprojects {
   dependencyManagement {
     dependencies {
       //CVE-2018-10237 - Unbounded memory allocation
-      dependencySet(group: 'com.google.guava', version: '33.5.0-jre') {
+      dependencySet(group: 'com.google.guava', version: '33.6.0-jre') {
         entry 'guava'
       }
 
@@ -113,7 +113,7 @@ allprojects {
       // To prevent other libraries using conflicting versions
       dependency group: 'org.slf4j', name: 'slf4j-nop', version: '2.0.17'
 
-      dependencySet(group: 'org.apache.httpcomponents.core5', version: '5.4.1') {
+      dependencySet(group: 'org.apache.httpcomponents.core5', version: '5.4.2') {
         entry 'httpcore5'
         entry 'httpcore5-h2'
       }
@@ -363,8 +363,8 @@ dependencies {
   implementation group: 'org.postgresql', name: 'postgresql', version: '42.7.10'
   implementation group: 'jakarta.persistence', name: 'jakarta.persistence-api', version: '3.1.0'
 
-  implementation group: 'org.jdbi', name: 'jdbi3-sqlobject', version: '3.51.0'
-  implementation group: 'org.jdbi', name: 'jdbi3-spring', version: '3.51.0'
+  implementation group: 'org.jdbi', name: 'jdbi3-sqlobject', version: '3.52.1'
+  implementation group: 'org.jdbi', name: 'jdbi3-spring', version: '3.52.1'
 
   implementation group: 'org.flywaydb', name: 'flyway-core'
 
@@ -373,11 +373,11 @@ dependencies {
   implementation group: 'org.springframework.cloud', name: 'spring-cloud-openfeign-core'
   implementation group: 'com.github.hmcts', name: 'service-auth-provider-java-client', version: '4.1.2'
   implementation group: 'org.apache.tika', name: 'tika-core', version: versions.tika
-  implementation group: 'io.github.openfeign', name: 'feign-httpclient', version: '13.9.3'
+  implementation group: 'io.github.openfeign', name: 'feign-httpclient', version: '13.11'
   implementation group: 'org.springframework.retry', name: 'spring-retry'
 
   implementation group: 'com.github.hmcts.java-logging', name: 'logging', version: '8.0.0'
-  implementation group: 'com.microsoft.azure', name: 'applicationinsights-web', version: '3.7.7'
+  implementation group: 'com.microsoft.azure', name: 'applicationinsights-web', version: '3.7.8'
 
   implementation group: 'commons-lang', name: 'commons-lang', version: '2.6'
   implementation group: 'com.github.hmcts', name: 'core-case-data-store-client', version: '5.2.0'
@@ -408,13 +408,13 @@ dependencies {
   implementation group: 'org.springframework.security', name: 'spring-security-oauth2-client'
   implementation group: 'org.springframework.security', name: 'spring-security-oauth2-jose'
   implementation group: 'org.springframework.security', name: 'spring-security-oauth2-core'
-  implementation group: 'com.nimbusds', name: 'nimbus-jose-jwt', version: '10.8'
+  implementation group: 'com.nimbusds', name: 'nimbus-jose-jwt', version: '10.9'
   implementation group: 'io.jsonwebtoken', name: 'jjwt', version: '0.13.0'
-  implementation group: 'com.github.hmcts', name: 'idam-java-client', version: '3.0.3'
-  implementation group: 'org.apache.logging.log4j', name: 'log4j-api', version: '2.25.3'
-  implementation group: 'org.apache.logging.log4j', name: 'log4j-to-slf4j', version: '2.25.3'
+  implementation group: 'com.github.hmcts', name: 'idam-java-client', version: '3.0.5'
+  implementation group: 'org.apache.logging.log4j', name: 'log4j-api', version: '2.25.4'
+  implementation group: 'org.apache.logging.log4j', name: 'log4j-to-slf4j', version: '2.25.4'
   constraints {
-    implementation('org.apache.logging.log4j:log4j-core:2.25.3') {
+    implementation('org.apache.logging.log4j:log4j-core:2.25.4') {
       because 'CVE-2025-68161 (upgrade to vendor recommended version)'
     }
   }
@@ -434,7 +434,7 @@ dependencies {
 
   // JAX-B dependencies for JDK 9+
   implementation group: 'jakarta.xml.bind', name: 'jakarta.xml.bind-api', version: '4.0.5'
-  implementation group: 'org.glassfish.jaxb', name: 'jaxb-runtime', version: '4.0.6'
+  implementation group: 'org.glassfish.jaxb', name: 'jaxb-runtime', version: '4.0.7'
   implementation group: 'javax.xml.bind', name: 'jaxb-api', version: '2.3.1'
   runtimeOnly group: 'com.sun.xml.bind', name: 'jaxb-impl', version: '2.3.9'
   runtimeOnly group: 'com.sun.activation', name: 'javax.activation', version: '1.2.0'
@@ -458,8 +458,8 @@ dependencies {
   testImplementation group: 'org.mockito', name: 'mockito-core', version: '4.11.0'
   testImplementation group: 'org.mockito', name: 'mockito-junit-jupiter', version: '4.11.0'
   testImplementation group: 'org.mockito', name: 'mockito-inline', version: '4.11.0'
-  testImplementation group: 'net.bytebuddy', name: 'byte-buddy', version: '1.18.7'
-  testImplementation group: 'net.bytebuddy', name: 'byte-buddy-agent', version: '1.18.7'
+  testImplementation group: 'net.bytebuddy', name: 'byte-buddy', version: '1.18.8'
+  testImplementation group: 'net.bytebuddy', name: 'byte-buddy-agent', version: '1.18.8'
 
   testAnnotationProcessor group: 'org.projectlombok', name: 'lombok', version: versions.lombok
   testCompileOnly group: 'org.projectlombok', name: 'lombok', version: versions.lombok

dashboard-notifications/build.gradle

@@ -31,8 +31,8 @@ dependencies {
   implementation 'jakarta.inject:jakarta.inject-api:2.0.1'
   implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
   implementation group: 'org.apache.commons', name: 'commons-text', version: '1.15.0'
-  implementation group: 'io.swagger.core.v3', name: 'swagger-annotations', version: '2.2.44'
-  implementation group: 'com.github.hmcts', name: 'idam-java-client', version: '3.0.3'
+  implementation group: 'io.swagger.core.v3', name: 'swagger-annotations', version: '2.2.48'
+  implementation group: 'com.github.hmcts', name: 'idam-java-client', version: '3.0.5'
 
   runtimeOnly 'org.postgresql:postgresql:42.7.10'
   compileOnly 'org.projectlombok:lombok'

infrastructure/.terraform-version

@@ -1 +1 @@
-1.14.6
+1.14.8