Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency codeceptjs to v3.7.9
• Update dependency commons-io:commons-io to v2.22.0
• Update feign monorepo to v13.12 (io.github.openfeign:feign-okhttp, io.github.openfeign:feign-jackson)
• Update spring boot to v4 (major) (org.springframework.boot:spring-boot-dependencies, org.springframework.boot)
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency com.google.guava:guava to v33.6.0-jre
• Update dependency org.bouncycastle:bcutil-jdk18on to v1.84
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency mochawesome to v7.1.4
• Update dependency deep-equal-in-any-order to v2.2.0
• Update dependency notifications-node-client to v8.3.2
• Update dependency org.springframework.data:spring-data-redis to v2.7.18
• Update dependency org.springframework.security:spring-security-taglibs to v5.8.17-atlassian-1
• Update dependency pa11y to v9.1.1
• Update dependency puppeteer to v23.11.1
• Update dependency webdriverio to v8.46.0
• Update plugin pitest to v1.19.0
• Update dependency jwt-decode to v4
• Update dependency node-fetch to v3
• Update dependency org.apache.tomcat.embed:tomcat-embed-core to v11
• Update dependency org.apache.tomcat.embed:tomcat-embed-el to v11
• Update dependency org.apache.tomcat.embed:tomcat-embed-jasper to v11
• Update dependency org.springframework.cloud:spring-cloud-starter-openfeign to v5
• Update dependency org.springframework.data:spring-data-redis to v4
• Update dependency org.springframework.security:spring-security-taglibs to v7
• Update dependency org.springframework.session:spring-session-data-redis to v4
• Update dependency puppeteer to v24
• Update dependency webdriverio to v9
• Update Gradle to v9

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (1)

.github/workflows/stale.yml (1)

• actions/stale v10

gradle (4)

build.gradle (18)

• org.bouncycastle:bcprov-jdk18on 1.84
• org.bouncycastle:bcpkix-jdk18on 1.84
• org.bouncycastle:bcutil-jdk18on 1.83 → [Updates: 1.84]
• com.squareup.okio:okio 3.17.0
• org.springframework.session:spring-session-data-redis 2.7.4 → [Updates: 4.0.3]
• org.springframework.data:spring-data-redis 2.6.10 → [Updates: 2.7.18, 4.0.5]
• org.springframework.cloud:spring-cloud-starter-netflix-zuul 2.2.10.RELEASE
• com.netflix.servo:servo-core 0.13.2
• org.springframework.security:spring-security-taglibs 5.7.14 → [Updates: 5.8.17-atlassian-1, 7.0.5]
• org.apache.tomcat.embed:tomcat-embed-jasper 9.0.117 → [Updates: 11.0.21]
• org.apache.tomcat.embed:tomcat-embed-core 9.0.117 → [Updates: 11.0.21]
• org.apache.tomcat.embed:tomcat-embed-el 9.0.117 → [Updates: 11.0.21]
• org.apache.tomcat.embed:tomcat-embed-websocket 11.0.21
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.15.0
• org.owasp.encoder:encoder-jsp 1.4.0
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• com.github.hmcts:fortify-client 1.4.10
• pl.pragmatists:JUnitParams 1.1.1

gradle/jira.gradle (1)

• com.atlassian.jira:jira-rest-java-client-app 7.0.1

gradle/libs.versions.toml (20)

• com.github.hmcts.java-logging:logging 8.0.0
• commons-fileupload:commons-fileupload 1.6.0
• commons-io:commons-io 2.21.0 → [Updates: 2.22.0]
• org.apache.commons:commons-lang3 3.20.0
• org.apache.commons:commons-text 1.15.0
• io.github.openfeign:feign-jackson 13.11 → [Updates: 13.12]
• io.github.openfeign:feign-okhttp 13.11 → [Updates: 13.12]
• com.google.code.findbugs:jsr305 3.0.2
• com.google.guava:guava 33.5.0-jre → [Updates: 33.6.0-jre]
• com.github.hmcts:idam-api-spec 4.1.0
• org.yaml:snakeyaml 2.6
• org.springframework.cloud:spring-cloud-starter-openfeign 3.1.9 → [Updates: 5.0.1]
• me.champeau.jmh 0.7.3
• io.spring.dependency-management 1.1.7
• org.springframework.boot 2.7.18 → [Updates: 4.0.6]
• org.owasp.dependencycheck 12.2.1
• org.sonarqube 7.2.3.7755
• info.solidsoft.pitest 1.15.0 → [Updates: 1.19.0]
• com.gorylenko.gradle-git-properties 2.5.7
• org.springframework.boot:spring-boot-dependencies 2.7.18 → [Updates: 4.0.6]

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 9.4.1]

helm-values (1)

charts/idam-web-public/values.yaml

helmv3 (1)

charts/idam-web-public/Chart.yaml (1)

• java 5.3.0

npm (1)

package.json (18)

• chai ^6.0.0
• codeceptjs ^3.6.4 → [Updates: ^3.6.4]
• deep-equal-in-any-order ^2.0.0 → [Updates: ^2.0.0]
• electron ^41.0.0
• html_codesniffer ^2.5.1
• jwt-decode ^3.1.2 → [Updates: ^4.0.0]
• mocha-junit-reporter ^2.0.0
• mocha-multi ^1.1.3
• mochawesome ^7.0.0 → [Updates: ^7.0.0]
• nightmare ^3.0.2
• node-fetch ^2.6.1 → [Updates: ^3.0.0]
• notifications-node-client ^8.0.0 → [Updates: ^8.0.0]
• pa11y ^9.0.0 → [Updates: ^9.0.0]
• proxy-agent ^8.0.0
• puppeteer ^23.0.1 → [Updates: ^23.0.1, ^24.0.0]
• webdriverio ^8.0.0 → [Updates: ^8.0.0, ^9.0.0]
• node >=12.20.0
• electron ^41.0.0

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.8

renovate-config-presets (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository