Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
gradle	org.hibernate.orm:hibernate-jpamodelgen

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency org.ehcache:ehcache to v3.12.0
• Update Terraform azurerm to ~> 4.67.0
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package au.com.dius.pact:provider: no-result.

Files affected: build.gradle

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update plugin com.github.hmcts.rse-cft-lib to v0.19.2062
• Update spring cloud to v4.3.2 (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update plugin org.owasp.dependencycheck to v12.2.0
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update hibernate-orm monorepo to v7 (major) (org.hibernate.orm:hibernate-jpamodelgen, org.hibernate.orm:hibernate-envers, org.hibernate.orm:hibernate-jcache, org.hibernate.orm:hibernate-core)
• Update plugin org.springframework.boot to v4
• Update spring cloud to v5 (major) (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Update spring security to v7 (major) (org.springframework.security:spring-security-config, org.springframework.security:spring-security-core, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-web, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-oauth2-resource-server)

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (1)

.github/workflows/publish-openapi.yml (1)

• hmcts/workflow-publish-openapi-spec v1

gradle (3)

build.gradle (85)

• org.flywaydb:flyway-database-postgresql 12.3.0
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.13 → [Updates: 4.0.5]
• uk.gov.hmcts.java 0.12.68
• org.owasp.dependencycheck 12.1.6 → [Updates: 12.2.0]
• com.github.ben-manes.versions 0.53.0
• org.sonarqube 7.2.3.7755
• au.com.dius.pact 4.6.20
• info.solidsoft.pitest 1.19.0
• net.serenity-bdd.serenity-gradle-plugin 5.3.9
• com.github.hmcts.rse-cft-lib 0.19.2061 → [Updates: 0.19.2062]
• org.flywaydb.flyway 12.3.0
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.3.1 → [Updates: 4.3.2, 5.0.1]
• org.springframework.cloud:spring-cloud-openfeign 4.3.1 → [Updates: 4.3.2, 5.0.1]
• com.fasterxml.jackson.datatype:jackson-datatype-json-org 2.21.2
• com.fasterxml.jackson.datatype:jackson-datatype-hppc 2.21.2
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.21.2
• com.fasterxml.jackson.datatype:jackson-datatype-hibernate6 2.21.2
• com.fasterxml.jackson.core:jackson-annotations 2.21
• com.fasterxml.jackson.core:jackson-databind 2.21.2
• com.fasterxml.jackson.core:jackson-core 2.21.2
• com.fasterxml.jackson.module:jackson-module-blackbird 2.21.2
• org.zalando:problem-spring-web 0.29.1
• org.zalando:jackson-datatype-problem 0.27.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.16 → [Updates: 3.0.2]
• com.google.guava:guava 33.5.0-jre
• org.apache.httpcomponents:httpclient 4.5.14
• org.flywaydb:flyway-core 12.3.0
• org.flywaydb:flyway-database-postgresql 12.3.0
• org.postgresql:postgresql 42.7.10
• org.apache.commons:commons-lang3 3.20.0
• commons-beanutils:commons-beanutils 1.11.0
• commons-validator:commons-validator 1.10.1
• org.ehcache:ehcache 3.11.1 → [Updates: 3.12.0]
• org.hibernate.orm:hibernate-core 6.6.46.Final → [Updates: 7.3.0.Final]
• org.hibernate.orm:hibernate-jcache 6.6.46.Final → [Updates: 7.3.0.Final]
• org.hibernate.orm:hibernate-envers 6.6.46.Final → [Updates: 7.3.0.Final]
• com.github.hmcts.java-logging:logging 8.0.0
• org.mapstruct:mapstruct 1.6.3
• org.springframework.security:spring-security-oauth2-resource-server 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-oauth2-client 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-web 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-oauth2-jose 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-core 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-config 6.5.9 → [Updates: 7.0.4]
• com.github.hmcts:core-case-data-store-client 5.2.0
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts:idam-java-client 3.0.5
• com.jayway.jsonpath:json-path 3.0.0
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.1 → [Updates: 4.3.2, 5.0.1]
• org.projectlombok:lombok 1.18.44
• org.projectlombok:lombok 1.18.44
• org.mapstruct:mapstruct-processor 1.6.3
• org.hibernate.orm:hibernate-jpamodelgen 6.6.46.Final → [Updates: 7.3.0.Final]
• org.hamcrest:hamcrest-all 1.3
• com.warrenstrange:googleauth 1.5.0
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.5
• org.glassfish.jaxb:jaxb-runtime 4.0.7
• org.junit.jupiter:junit-jupiter-api 6.0.3
• org.junit.jupiter:junit-jupiter-engine 6.0.3
• net.serenity-bdd:serenity-rest-assured 5.3.10
• net.serenity-bdd:serenity-spring 5.3.10
• net.serenity-bdd:serenity-single-page-report 5.3.10
• net.serenity-bdd:serenity-junit5 5.3.10
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• com.github.hmcts:fortify-client 1.4.10
• org.testcontainers:postgresql 1.21.4
• org.mockito:mockito-inline 5.2.0
• au.com.dius.pact.consumer:junit 4.6.20
• au.com.dius.pact.consumer:junit5 4.6.20
• au.com.dius.pact:provider 4.6.20
• au.com.dius.pact.provider:junit5 4.6.20
• au.com.dius.pact.provider:spring6 4.6.20
• au.com.dius.pact.provider:junit5spring 4.6.20
• org.json:json 20250517
• com.github.hmcts:em-test-helper 2.3.0
• xerces:xercesImpl 2.12.2
• org.apache.httpcomponents:fluent-hc 4.5.14
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• org.junit.platform:junit-platform-commons 6.0.3
• org.junit.platform:junit-platform-engine 6.0.3
• org.junit.platform:junit-platform-launcher 6.0.3
• checkstyle 13.4.0

gradle.properties

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.4.1

helm-values (1)

charts/em-anno/values.yaml

helmv3 (1)

charts/em-anno/Chart.yaml (1)

• java 5.3.0

renovate-config-presets (1)

.github/renovate.json

terraform (3)

infrastructure/main.tf

infrastructure/state.tf (2)

• azuread 3.8.0
• azurerm ~> 4.66.0 → [Updates: ~> 4.67.0]

infrastructure/versions.tf (1)

• hashicorp/terraform >= 0.15

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.8

---

• Check this box to trigger a request for Renovate to run again on this repository