Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
gradle	com.github.gmazzo:okhttp-mock
gradle	org.hibernate.orm:hibernate-jpamodelgen

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency org.ehcache:ehcache to v3.12.0
• Update Terraform azurerm to ~> 4.67.0
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update plugin com.github.hmcts.rse-cft-lib to v0.19.2062
• Update spring cloud to v4.3.2 (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update plugin org.owasp.dependencycheck to v12.2.0
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update hibernate-orm monorepo to v7 (major) (org.hibernate.orm:hibernate-jpamodelgen, org.hibernate.orm:hibernate-envers, org.hibernate.orm:hibernate-jcache, org.hibernate.orm:hibernate-core)
• Update plugin org.springframework.boot to v4
• Update shedlock monorepo to v7 (major) (net.javacrumbs.shedlock:shedlock-provider-jdbc-template, net.javacrumbs.shedlock:shedlock-spring)
• Update spring cloud to v5 (major) (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Update spring security to v7 (major) (org.springframework.security:spring-security-core, org.springframework.security:spring-security-config, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-web, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-oauth2-resource-server)

Detected Dependencies

docker-compose (1)

src/cftlib/resources/docker-compose-local.yml

dockerfile (2)

database/Dockerfile (1)

• postgres 18

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (1)

.github/workflows/publish-openapi.yml (1)

• hmcts/workflow-publish-openapi-spec v1

gradle (3)

build.gradle (80)

• org.flywaydb:flyway-database-postgresql 12.3.0
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.13 → [Updates: 4.0.5]
• uk.gov.hmcts.java 0.12.68
• com.github.ben-manes.versions 0.53.0
• org.sonarqube 7.2.3.7755
• info.solidsoft.pitest 1.19.0
• org.owasp.dependencycheck 12.1.6 → [Updates: 12.2.0]
• com.github.hmcts.rse-cft-lib 0.19.2061 → [Updates: 0.19.2062]
• org.flywaydb.flyway 12.3.0
• net.serenity-bdd.serenity-gradle-plugin 5.3.9
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.3.0 → [Updates: 4.3.2, 5.0.1]
• com.google.guava:guava 33.5.0-jre
• org.json:json 20250517
• org.springframework.security:spring-security-oauth2-resource-server 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-oauth2-client 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-web 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-oauth2-jose 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-oauth2-core 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-config 6.5.9 → [Updates: 7.0.4]
• org.springframework.security:spring-security-core 6.5.9 → [Updates: 7.0.4]
• com.squareup.okhttp3:okhttp 5.3.2
• com.fasterxml.jackson.datatype:jackson-datatype-hibernate6 2.21.2
• com.fasterxml.jackson.core:jackson-annotations 2.21
• org.yaml:snakeyaml 2.6
• org.zalando:problem-spring-web 0.29.1
• org.zalando:jackson-datatype-problem 0.27.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.16 → [Updates: 3.0.2]
• org.apache.httpcomponents:httpclient 4.5.14
• org.flywaydb:flyway-core 12.3.0
• org.flywaydb:flyway-database-postgresql 12.3.0
• org.mapstruct:mapstruct-jdk8 1.6.3
• org.postgresql:postgresql 42.7.10
• org.ehcache:ehcache 3.11.1 → [Updates: 3.12.0]
• org.hibernate.orm:hibernate-core 6.6.46.Final → [Updates: 7.3.0.Final]
• org.hibernate.orm:hibernate-jcache 6.6.46.Final → [Updates: 7.3.0.Final]
• org.hibernate.orm:hibernate-envers 6.6.46.Final → [Updates: 7.3.0.Final]
• pl.touk:throwing-function 1.3
• com.zaxxer:HikariCP 7.0.2
• org.apache.commons:commons-lang3 3.20.0
• commons-validator:commons-validator 1.10.1
• org.apache.pdfbox:pdfbox 3.0.7
• net.javacrumbs.shedlock:shedlock-spring 6.10.0 → [Updates: 7.7.0]
• net.javacrumbs.shedlock:shedlock-provider-jdbc-template 6.10.0 → [Updates: 7.7.0]
• org.apache.poi:poi-ooxml 5.5.1
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts:idam-java-client 3.0.5
• com.github.hmcts:ccd-case-document-am-client 1.59.2
• com.github.hmcts.java-logging:logging 8.0.0
• com.vladmihalcea:hibernate-types-60 2.21.1
• org.springframework.cloud:spring-cloud-starter-openfeign 4.2.1 → [Updates: 4.3.2, 5.0.1]
• io.github.openfeign:feign-httpclient 13.11
• org.apache.httpcomponents:httpclient 4.5.14
• org.projectlombok:lombok 1.18.44
• org.mapstruct:mapstruct 1.6.3
• org.mapstruct:mapstruct-processor 1.6.3
• org.hibernate.orm:hibernate-jpamodelgen 6.6.46.Final → [Updates: 7.3.0.Final]
• com.github.gmazzo:okhttp-mock 2.1.0 → [Updates: 2.1.0]
• org.hamcrest:hamcrest-all 1.3
• net.serenity-bdd:serenity-rest-assured 5.3.10
• net.serenity-bdd:serenity-core 5.3.10
• net.serenity-bdd:serenity-junit5 5.3.10
• net.serenity-bdd:serenity-spring 5.3.10
• net.serenity-bdd:serenity-single-page-report 5.3.10
• org.junit.jupiter:junit-jupiter-api 6.0.3
• org.junit.jupiter:junit-jupiter-engine 6.0.3
• org.junit.jupiter:junit-jupiter-params 6.0.3
• org.testcontainers:testcontainers-postgresql 2.0.4
• com.squareup.okhttp3:mockwebserver3-junit5 5.3.2
• com.github.hmcts:fortify-client 1.4.10
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.5
• org.glassfish.jaxb:jaxb-runtime 4.0.7
• com.github.hmcts:em-test-helper 2.3.0
• xerces:xercesImpl 2.12.2
• org.apache.httpcomponents:fluent-hc 4.5.14
• org.apache.commons:commons-compress 1.28.0
• org.json:json 20250517
• org.junit.platform:junit-platform-commons 6.0.3
• org.junit.platform:junit-platform-engine 6.0.3
• checkstyle 13.4.0

gradle.properties

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.4.1

helm-values (1)

charts/em-stitching/values.yaml

helmv3 (1)

charts/em-stitching/Chart.yaml (1)

• java 5.3.0

renovate-config-presets (1)

.github/renovate.json

terraform (3)

infrastructure/main.tf

infrastructure/state.tf (2)

• azuread 3.8.0
• azurerm ~> 4.66.0 → [Updates: ~> 4.67.0]

infrastructure/versions.tf (1)

• hashicorp/terraform >= 0.15

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.8

---

• Check this box to trigger a request for Renovate to run again on this repository