Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	org.apache.activemq:artemis-jms-server

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update jackson monorepo to v2.21.2 (com.fasterxml.jackson.datatype:jackson-datatype-joda, com.fasterxml.jackson.datatype:jackson-datatype-jsr310)
• Update log4j2 monorepo to v2.25.4 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update plugin net.serenity-bdd.serenity-gradle-plugin to v5.3.9
• Update dependency com.google.guava:guava to v33.6.0-jre
• Update dependency io.opentelemetry:opentelemetry-api to v1.61.0
• Update dependency org.bouncycastle:bcprov-jdk18on to v1.84
• Update dependency org.mockito:mockito-core to v5.23.0
• Update plugin com.github.ben-manes.versions to v0.54.0
• Update plugin org.sonarqube to v7
• Update plugin org.springframework.boot to v4
• Update restAssuredVersion to v6 (major) (io.rest-assured:xml-path, io.rest-assured:json-path, io.rest-assured:rest-assured-common, io.rest-assured:rest-assured)
• Update serenityVersion to v5 (major) (net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit5, net.serenity-bdd:serenity-core)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update logback monorepo to v1.5.32 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update dependency org.apache.activemq:artemis-jms-server to v2.53.0
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.17
• Update flyway to v11.20.3 (org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update plugin org.owasp.dependencycheck to v12.2.1
• Update plugin org.springframework.boot to v3.5.14
• Update dependency checkstyle to v13
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update flyway to v12 (major) (org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update Gradle to v9
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency com.github.hmcts:service-auth-provider-java-client to v5.3.3
• Update dependency checkstyle to v8.45.1
• Update serenityVersion to v4.3.4 (net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit5, net.serenity-bdd:serenity-core)
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2025

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (2)

.github/workflows/ci.yaml (2)

• actions/checkout v6
• actions/setup-java v5

.github/workflows/stale.yml (1)

• actions/stale v10

gradle (1)

build.gradle (43)

• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.3.5 → [Updates: 3.5.14, 4.0.6]
• org.owasp.dependencycheck 12.1.0 → [Updates: 12.2.1]
• com.github.ben-manes.versions 0.53.0 → [Updates: 0.54.0]
• org.sonarqube 6.3.1.5724 → [Updates: 7.2.3.7755]
• com.gorylenko.gradle-git-properties 2.5.7
• org.flywaydb.flyway 11.8.2 → [Updates: 11.20.3, 12.4.0]
• net.serenity-bdd.serenity-gradle-plugin 5.3.3 → [Updates: 5.3.9]
• checkstyle 8.35 → [Updates: 8.45.1, 13.4.0]
• org.springframework.cloud:spring-cloud-dependencies 2023.0.6 → [Updates: 2025.1.1]
• org.bouncycastle:bcpkix-jdk15on 1.75
• org.bouncycastle:bcprov-jdk18on 1.83 → [Updates: 1.84]
• ch.qos.logback:logback-classic 1.5.22 → [Updates: 1.5.32]
• ch.qos.logback:logback-core 1.5.22 → [Updates: 1.5.32]
• com.google.guava:guava 33.4.6-jre → [Updates: 33.6.0-jre]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0 → [Updates: 2.8.17, 3.0.3]
• com.github.hmcts.java-logging:logging 8.0.0
• org.apache.logging.log4j:log4j-api 2.25.3 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-to-slf4j 2.25.3 → [Updates: 2.25.4]
• uk.gov.service.notify:notifications-java-client 6.0.0-RELEASE
• org.flywaydb:flyway-core 11.9.0 → [Updates: 11.20.3, 12.4.0]
• org.flywaydb:flyway-database-postgresql 11.9.0 → [Updates: 11.20.3, 12.4.0]
• org.postgresql:postgresql 42.7.10
• org.apache.commons:commons-collections4 4.5.0
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.21.1 → [Updates: 2.21.2]
• com.fasterxml.jackson.datatype:jackson-datatype-joda 2.21.1 → [Updates: 2.21.2]
• io.opentelemetry:opentelemetry-api 1.59.0 → [Updates: 1.61.0]
• org.apache.activemq:artemis-jms-server 2.40.0 → [Updates: 2.53.0]
• com.github.hmcts:service-auth-provider-java-client 5.3.2 → [Updates: 5.3.3]
• com.github.hmcts:idam-legacy-auth-support 0.1.7
• com.github.hmcts:idam-oidc-auth-support 0.1.3
• com.github.hmcts:idam-user-management-api-client 0.1.2
• org.yaml:snakeyaml 2.6
• org.json:json 20250517
• org.junit:junit-bom 6.0.3
• org.mockito:mockito-core 5.22.0 → [Updates: 5.23.0]
• net.serenity-bdd:serenity-core 4.2.12 → [Updates: 4.3.4, 5.3.10]
• net.serenity-bdd:serenity-junit5 4.2.12 → [Updates: 4.3.4, 5.3.10]
• net.serenity-bdd:serenity-rest-assured 4.2.12 → [Updates: 4.3.4, 5.3.10]
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.0]
• io.rest-assured:rest-assured-common 5.5.7 → [Updates: 6.0.0]
• io.rest-assured:json-path 5.5.7 → [Updates: 6.0.0]
• io.rest-assured:xml-path 5.5.7 → [Updates: 6.0.0]

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 9.4.1]

helm-values (1)

charts/idam-testing-support-api/values.yaml

helmv3 (1)

charts/idam-testing-support-api/Chart.yaml (1)

• java 5.3.0

renovate-config-presets (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository