Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency hashicorp/terraform to v1.14.9
• Update hibernate-orm monorepo to v6.6.49.Final (org.hibernate.orm:hibernate-envers, org.hibernate.orm:hibernate-core)
• Update spring security to v7.0.5 (org.springframework.security:spring-security-test, org.springframework.security:spring-security-core, org.springframework.security:spring-security-config, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-web, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-oauth2-resource-server)
• Update plugin au.com.dius.pact to v4.7.0
• Update plugin com.github.ben-manes.versions to v0.54.0
• Update plugin io.freefair.lombok to v9.4.0
• Update versions.pact_version to v4.7.0 (au.com.dius.pact.consumer:junit5, au.com.dius.pact.consumer:junit, au.com.dius.pact.provider:spring6, au.com.dius.pact.provider:junit5spring, au.com.dius.pact.provider:junit5)
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package au.com.dius.pact:provider: no-result.

Files affected: build.gradle

---

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update hibernate-orm monorepo to v7 (major) (org.hibernate.orm:hibernate-envers, org.hibernate.orm:hibernate-core)
• Update plugin org.springframework.boot to v4
• Update spring cloud to v5 (major) (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap)

Detected Dependencies

docker-compose (10)

docker-compose-dev.yml

docker-compose.yml

docker/compose/docker-compose-dm-ports.yml

docker/compose/docker-compose-dm.yml

docker/compose/docker-compose-em-ports.yml

docker/compose/docker-compose-em.yml

docker/compose/docker-compose-idam-ports.yml

docker/compose/docker-compose-idam.yml

docker/docker-compose-base-ports.yml

docker/docker-compose-base.yml

dockerfile (2)

docker/database-idam/Dockerfile (1)

• postgres 18.3

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (1)

.github/workflows/publish-openapi.yml (1)

• hmcts/workflow-publish-openapi-spec v1

gradle (2)

build.gradle (75)

• org.flywaydb:flyway-database-postgresql 12.4.0
• uk.gov.hmcts.java 0.12.68
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.13 → [Updates: 4.0.5]
• com.github.ben-manes.versions 0.53.0 → [Updates: 0.54.0]
• org.sonarqube 7.2.3.7755
• io.freefair.lombok 9.2.0 → [Updates: 9.4.0]
• info.solidsoft.pitest 1.19.0
• org.owasp.dependencycheck 12.2.1
• au.com.dius.pact 4.6.20 → [Updates: 4.7.0]
• org.flywaydb.flyway 12.4.0
• net.serenity-bdd.serenity-gradle-plugin 5.3.9
• com.azure:azure-storage-blob 12.33.3
• org.apache.tika:tika-core 3.3.0
• org.apache.tika:tika-parsers-standard-package 3.3.0
• com.google.guava:guava 33.6.0-jre
• commons-io:commons-io 2.21.0
• com.fasterxml.jackson.core:jackson-annotations 2.21
• com.fasterxml.jackson.core:jackson-core 2.21.2
• com.fasterxml.jackson.core:jackson-databind 2.21.2
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.21.2
• org.ehcache:ehcache 3.12.0
• org.springframework:spring-context-support 7.0.7
• org.apache.commons:commons-lang3 3.20.0
• org.hibernate.orm:hibernate-core 6.6.48.Final → [Updates: 6.6.49.Final, 7.3.2.Final]
• org.hibernate.orm:hibernate-envers 6.6.48.Final → [Updates: 6.6.49.Final, 7.3.2.Final]
• org.postgresql:postgresql 42.7.10
• net.javacrumbs.shedlock:shedlock-spring 7.7.0
• net.javacrumbs.shedlock:shedlock-provider-jdbc-template 7.7.0
• org.flywaydb:flyway-core 12.4.0
• org.flywaydb:flyway-database-postgresql 12.4.0
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts:idam-java-client 3.0.5
• net.logstash.logback:logstash-logback-encoder 9.0
• com.github.hmcts.java-logging:logging 8.0.0
• com.microsoft.azure:applicationinsights-core 3.7.8
• org.apache.httpcomponents:httpclient 4.5.14
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.3.2 → [Updates: 5.0.1]
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.2 → [Updates: 5.0.1]
• org.springframework.security:spring-security-oauth2-resource-server 7.0.2 → [Updates: 7.0.5]
• org.springframework.security:spring-security-oauth2-client 7.0.2 → [Updates: 7.0.5]
• org.springframework.security:spring-security-web 7.0.2 → [Updates: 7.0.5]
• org.springframework.security:spring-security-oauth2-jose 7.0.2 → [Updates: 7.0.5]
• org.springframework.security:spring-security-oauth2-core 7.0.2 → [Updates: 7.0.5]
• org.springframework.security:spring-security-config 7.0.2 → [Updates: 7.0.5]
• org.springframework.security:spring-security-core 7.0.2 → [Updates: 7.0.5]
• org.springframework.security:spring-security-test 7.0.2 → [Updates: 7.0.5]
• org.junit.jupiter:junit-jupiter-api 6.0.3
• org.junit.jupiter:junit-jupiter-engine 6.0.3
• org.junit.jupiter:junit-jupiter-params 6.0.3
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.5
• org.glassfish.jaxb:jaxb-runtime 4.0.7
• com.warrenstrange:googleauth 1.5.0
• com.github.stephenc.jcip:jcip-annotations 1.0-1
• org.mockito:mockito-inline 5.2.0
• net.serenity-bdd:serenity-rest-assured 5.3.10
• net.serenity-bdd:serenity-core 5.3.10
• net.serenity-bdd:serenity-junit5 5.3.10
• net.serenity-bdd:serenity-spring 5.3.10
• net.serenity-bdd:serenity-single-page-report 5.3.10
• com.github.hmcts:em-test-helper 3.0.0
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• com.github.hmcts:fortify-client 1.4.10
• org.testcontainers:postgresql 1.21.4
• au.com.dius.pact.provider:junit5 4.6.20 → [Updates: 4.7.0]
• au.com.dius.pact.provider:junit5spring 4.6.20 → [Updates: 4.7.0]
• au.com.dius.pact:provider 4.6.20
• au.com.dius.pact.provider:spring6 4.6.20 → [Updates: 4.7.0]
• au.com.dius.pact.consumer:junit 4.6.20 → [Updates: 4.7.0]
• au.com.dius.pact.consumer:junit5 4.6.20 → [Updates: 4.7.0]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 → [Updates: 3.0.3]
• org.junit.platform:junit-platform-commons 6.0.3
• org.junit.platform:junit-platform-engine 6.0.3
• checkstyle 13.4.0

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.4.1

helm-values (1)

charts/dm-store/values.yaml

helmv3 (1)

charts/dm-store/Chart.yaml (2)

• java 5.3.0
• blobstorage 2.1.1

renovate-config-presets (1)

.github/renovate.json

terraform (3)

infrastructure/main.tf

infrastructure/state.tf (2)

• azuread 3.8.0
• azurerm ~> 4.69.0

infrastructure/versions.tf (1)

• hashicorp/terraform >= 0.15

terraform-version (2)

.terraform-version (1)

• hashicorp/terraform 1.14.8 → [Updates: 1.14.9]

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.8 → [Updates: 1.14.9]

---

• Check this box to trigger a request for Renovate to run again on this repository