Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	org.hibernate.orm:hibernate-jpamodelgen

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update plugin com.github.hmcts.rse-cft-lib to v0.19.2106
• Update plugin org.springframework.boot to v3.5.14
• Update plugin com.github.ben-manes.versions to v0.54.0
• Update plugin io.freefair.lombok to v9.4.0
• Update Terraform azurerm to ~> 4.70.0
• Update versions.pact_version to v4.7.0 (au.com.dius.pact.provider:junit5spring, au.com.dius.pact.provider:spring, au.com.dius.pact.provider:junit5, au.com.dius.pact.consumer:junit5)
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency com.github.hmcts:em-test-helper to v3
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update hibernate-orm monorepo to v7 (major) (org.hibernate.orm:hibernate-jpamodelgen, org.hibernate.orm:hibernate-envers, org.hibernate.orm:hibernate-jcache, org.hibernate.orm:hibernate-core)
• Update plugin org.springframework.boot to v4
• Update spring cloud to v5 (major) (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Update spring security to v7 (major) (org.springframework.security:spring-security-web, org.springframework.security:spring-security-config, org.springframework.security:spring-security-core, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-oauth2-resource-server)
• Update Terraform azuread to v3

Detected Dependencies

docker-compose (1)

src/cftlib/resources/docker-compose-local.yml

dockerfile (2)

database/Dockerfile (1)

• postgres 18

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (1)

.github/workflows/publish-openapi.yml (1)

• hmcts/workflow-publish-openapi-spec v1

gradle (3)

build.gradle (86)

• org.flywaydb:flyway-database-postgresql 12.4.0
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.13 → [Updates: 3.5.14, 4.0.6]
• uk.gov.hmcts.java 0.12.68
• com.github.ben-manes.versions 0.53.0 → [Updates: 0.54.0]
• org.sonarqube 7.2.3.7755
• au.com.dius.pact 4.7.0
• org.owasp.dependencycheck 12.2.1
• info.solidsoft.pitest 1.19.0
• com.github.hmcts.rse-cft-lib 0.19.2097 → [Updates: 0.19.2106]
• org.flywaydb.flyway 12.4.0
• io.freefair.lombok 9.2.0 → [Updates: 9.4.0]
• net.serenity-bdd.serenity-gradle-plugin 5.3.9
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.3.2 → [Updates: 5.0.1]
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.2 → [Updates: 5.0.1]
• com.google.guava:guava 33.6.0-jre
• org.projectlombok:lombok 1.18.46
• org.apache.pdfbox:pdfbox 3.0.7
• org.apache.pdfbox:pdfbox-io 3.0.7
• org.apache.pdfbox:jbig2-imageio 3.0.4
• com.itextpdf:cleanup 5.0.6
• com.itextpdf:bouncy-castle-adapter 9.6.0
• com.squareup.okhttp3:okhttp 5.3.2
• org.apache.logging.log4j:log4j-core 2.25.4
• org.apache.logging.log4j:log4j-api 2.25.4
• com.fasterxml.jackson.datatype:jackson-datatype-json-org 2.21.2
• com.fasterxml.jackson.module:jackson-module-blackbird 2.21.2
• com.fasterxml.jackson.core:jackson-annotations 2.21
• org.zalando:problem-spring-web 0.29.1
• org.zalando:jackson-datatype-problem 0.27.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 → [Updates: 3.0.3]
• org.springframework.security:spring-security-oauth2-resource-server 6.5.10 → [Updates: 7.0.5]
• org.springframework.security:spring-security-oauth2-client 6.5.10 → [Updates: 7.0.5]
• org.springframework.security:spring-security-oauth2-jose 6.5.10 → [Updates: 7.0.5]
• org.springframework.security:spring-security-core 6.5.10 → [Updates: 7.0.5]
• org.springframework.security:spring-security-config 6.5.10 → [Updates: 7.0.5]
• org.springframework.security:spring-security-web 6.5.10 → [Updates: 7.0.5]
• org.apache.httpcomponents:httpclient 4.5.14
• org.flywaydb:flyway-core 12.4.0
• org.flywaydb:flyway-database-postgresql 12.4.0
• org.postgresql:postgresql 42.7.10
• org.apache.commons:commons-lang3 3.20.0
• commons-beanutils:commons-beanutils 1.11.0
• commons-validator:commons-validator 1.10.1
• org.ehcache:ehcache 3.12.0
• org.hibernate.orm:hibernate-core 6.6.49.Final → [Updates: 7.3.2.Final]
• org.hibernate.orm:hibernate-jcache 6.6.49.Final → [Updates: 7.3.2.Final]
• org.hibernate.orm:hibernate-envers 6.6.49.Final → [Updates: 7.3.2.Final]
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts:idam-java-client 3.0.5
• com.github.hmcts:ccd-case-document-am-client 1.59.2
• org.apache.tika:tika-core 3.3.0
• org.mapstruct:mapstruct 1.6.3
• org.mapstruct:mapstruct-processor 1.6.3
• org.hibernate.orm:hibernate-jpamodelgen 6.6.49.Final → [Updates: 7.3.2.Final]
• com.github.gmazzo.okhttp.mock:mock-client 2.1.0
• org.hamcrest:hamcrest 3.0
• com.github.hmcts.java-logging:logging 8.0.0
• org.junit.jupiter:junit-jupiter-api 6.0.3
• org.junit.jupiter:junit-jupiter-engine 6.0.3
• net.serenity-bdd:serenity-rest-assured 5.3.10
• net.serenity-bdd:serenity-core 5.3.10
• net.serenity-bdd:serenity-junit5 5.3.10
• net.serenity-bdd:serenity-spring 5.3.10
• net.serenity-bdd:serenity-single-page-report 5.3.10
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• com.github.hmcts:fortify-client 1.4.10
• org.testcontainers:postgresql 1.21.4
• com.h2database:h2 2.4.240
• au.com.dius.pact.consumer:junit5 4.6.20 → [Updates: 4.7.0]
• au.com.dius.pact.provider:junit5 4.6.20 → [Updates: 4.7.0]
• au.com.dius.pact.provider:spring 4.6.20 → [Updates: 4.7.0]
• au.com.dius.pact.provider:junit5spring 4.6.20 → [Updates: 4.7.0]
• org.apache.httpcomponents:httpclient 4.5.14
• org.apache.httpcomponents:httpmime 4.5.14
• org.apache.httpcomponents:fluent-hc 4.5.14
• com.github.hmcts:em-test-helper 2.3.1 → [Updates: 3.0.0]
• org.apache.poi:poi 5.5.1
• org.apache.poi:poi-ooxml 5.5.1
• xerces:xercesImpl 2.12.2
• org.apache.httpcomponents:fluent-hc 4.5.14
• org.junit.platform:junit-platform-commons 6.0.3
• org.junit.platform:junit-platform-engine 6.0.3
• org.junit.platform:junit-platform-launcher 6.0.3
• checkstyle 13.4.0

gradle.properties

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.4.1

helm-values (1)

charts/em-npa/values.yaml

helmv3 (1)

charts/em-npa/Chart.yaml (1)

• java 5.3.0

renovate-config-presets (1)

.github/renovate.json

terraform (3)

infrastructure/main.tf

infrastructure/state.tf (2)

• azuread 2.53.1 → [Updates: 3.8.0]
• azurerm ~> 4.68.0 → [Updates: ~> 4.70.0]

infrastructure/versions.tf (1)

• hashicorp/terraform >= 0.15

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.9

---

• Check this box to trigger a request for Renovate to run again on this repository