Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency org.bouncycastle:bcpkix-jdk18on to v1.84
• Update jackson monorepo (com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-annotations, com.fasterxml.jackson.module:jackson-module-parameter-names, com.fasterxml.jackson.datatype:jackson-datatype-jdk8, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-core)
• Update plugin au.com.dius.pact to v4.7.0
• Update plugin com.github.ben-manes.versions to v0.54.0
• Update dependency io.rest-assured:json-path to v6
• Update dependency io.rest-assured:rest-assured to v6
• Update dependency io.rest-assured:xml-path to v6
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Update dependency net.serenity-bdd:serenity-cucumber to v5
• Update dependency org.elasticsearch:elasticsearch to v9
• Update dependency org.slf4j:slf4j-simple to v2
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update dependency org.springframework:spring-context-support to v7
• Update dependency org.springframework.integration:spring-integration-sftp to v7
• Update dependency uk.gov.service.notify:notifications-java-client to v6
• Update Gradle to v9
• Update org.apache.tomcat.embed:10.1.54 to v11 (major) (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)
• Update plugin org.owasp.dependencycheck to v12
• Update plugin org.sonarqube to v7
• Update spring boot to v4 (major) (org.springframework.boot:spring-boot-starter-quartz, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot:spring-boot-starter-web, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot:spring-boot-dependencies, org.springframework.boot)
• Update spring cloud to v5 (major) (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-contract-wiremock, org.springframework.cloud:spring-cloud-starter-loadbalancer, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Update spring security to v7 (major) (org.springframework.security:spring-security-core, org.springframework.security:spring-security-web, org.springframework.security:spring-security-crypto)
• Update versions.serenity to v5 (major) (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update spring boot to v3.5.14 (org.springframework.boot:spring-boot-starter-quartz, org.springframework.boot:spring-boot-starter-validation, org.springframework.boot:spring-boot-starter-web, org.springframework.boot:spring-boot-starter-aop, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot:spring-boot-dependencies, org.springframework.boot)
• Update spring cloud (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-contract-wiremock, org.springframework.cloud:spring-cloud-starter-loadbalancer, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Update versions.pact (au.com.dius.pact.consumer:java8, au.com.dius.pact.consumer:junit5)
• Update dependency commons-io:commons-io to v2.22.0
• Update dependency com.google.guava:guava to v33
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update plugin info.solidsoft.pitest to v1.19.0
• Update dependency com.github.hmcts:idam-java-client to v3
• Update dependency org.apache.pdfbox:pdfbox to v3

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (1)

.github/workflows/stale.yml (1)

• actions/stale v10

gradle (3)

build.gradle (126)

• net.serenity-bdd:serenity-gradle-plugin 2.4.34
• com.github.ben-manes.versions 0.51.0 → [Updates: 0.54.0]
• info.solidsoft.pitest 1.19.0-rc.3 → [Updates: 1.19.0]
• io.spring.dependency-management 1.1.7
• org.owasp.dependencycheck 11.1.1 → [Updates: 12.2.1]
• org.sonarqube 5.1.0.4882 → [Updates: 7.2.3.7755]
• org.springframework.boot 3.5.13 → [Updates: 3.5.14, 4.0.6]
• au.com.dius.pact 4.2.6 → [Updates: 4.7.0]
• com.github.hmcts.rse-cft-lib 0.19.2106
• org.springframework.boot:spring-boot-dependencies 3.5.13 → [Updates: 3.5.14, 4.0.6]
• com.fasterxml.jackson.core:jackson-core 2.17.2 → [Updates: 2.21.2]
• com.fasterxml.jackson.core:jackson-databind 2.17.2 → [Updates: 2.21.2]
• com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.17.2 → [Updates: 2.21.2]
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.17.2 → [Updates: 2.21.2]
• com.fasterxml.jackson.module:jackson-module-parameter-names 2.17.2 → [Updates: 2.21.2]
• io.netty:netty-buffer 4.2.12.Final
• io.netty:netty-codec 4.2.12.Final
• io.netty:netty-codec-http 4.2.12.Final
• io.netty:netty-common 4.2.12.Final
• io.netty:netty-handler 4.2.12.Final
• io.netty:netty-resolver 4.2.12.Final
• io.netty:netty-transport 4.2.12.Final
• io.netty:netty-transport-native-unix-common 4.2.12.Final
• io.netty:netty-transport-classes-epoll 4.2.12.Final
• commons-beanutils:commons-beanutils 1.11.0
• commons-fileupload:commons-fileupload 1.6.0
• commons-fileupload:commons-fileupload 1.6.0
• org.json:json 20231013
• com.google.guava:guava 32.1.3-jre → [Updates: 33.6.0-jre]
• org.yaml:snakeyaml 2.6
• org.springframework.security:spring-security-crypto 6.5.10 → [Updates: 7.0.5]
• org.apache.tomcat.embed:tomcat-embed-core 10.1.54 → [Updates: 11.0.21]
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.54 → [Updates: 11.0.21]
• org.bouncycastle:bcpkix-jdk18on 1.84
• org.springframework.security:spring-security-rsa 1.1.5
• org.springframework.security:spring-security-crypto 6.5.10 → [Updates: 7.0.5]
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 → [Updates: 3.0.3]
• org.springframework:spring-context-support 6.2.18 → [Updates: 7.0.7]
• org.projectlombok:lombok 1.18.46
• org.mapstruct:mapstruct 1.6.3
• org.mapstruct:mapstruct-processor 1.6.3
• com.sun.xml.bind:jaxb-osgi 4.0.7
• com.github.kirviq:dumbster 1.7.1
• com.puppycrawl.tools:checkstyle 13.4.0
• commons-io:commons-io 2.21.0 → [Updates: 2.22.0]
• jakarta.activation:jakarta.activation-api 2.1.4
• org.apache.commons:commons-lang3 3.20.0
• org.apache.commons:commons-math3 3.6.1
• commons-validator:commons-validator 1.10.1
• org.springframework.boot:spring-boot-starter-actuator 3.5.13 → [Updates: 3.5.14, 4.0.6]
• org.springframework.boot:spring-boot-starter-aop 3.5.13 → [Updates: 3.5.14]
• org.springframework.boot:spring-boot-starter-web 3.5.13 → [Updates: 3.5.14, 4.0.6]
• org.springframework.boot:spring-boot-starter-validation 3.5.13 → [Updates: 3.5.14, 4.0.6]
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.3.0 → [Updates: 4.3.2, 5.0.1]
• org.apache.httpcomponents:fluent-hc 4.5.14
• org.springframework.cloud:spring-cloud-starter-loadbalancer 4.3.0 → [Updates: 4.3.2, 5.0.1]
• org.springframework.retry:spring-retry 2.0.12
• com.github.hmcts:ccd-config-generator 6.7.2
• com.github.hmcts:core-case-data-store-client 5.2.0
• com.github.hmcts.java-logging:logging 8.0.0
• org.apache.logging.log4j:log4j-api 2.25.4
• org.apache.logging.log4j:log4j-to-slf4j 2.25.4
• org.apache.logging.log4j:log4j-core 2.25.4
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• com.github.hmcts:send-letter-client 5.1.1
• uk.gov.service.notify:notifications-java-client 3.19.2-RELEASE → [Updates: 6.0.0-RELEASE]
• org.apache.httpcomponents:httpclient 4.5.14
• org.springframework.boot:spring-boot-starter-quartz 3.5.13 → [Updates: 3.5.14, 4.0.6]
• javax.ws.rs:javax.ws.rs-api 2.1.1
• com.github.hmcts:idam-java-client 2.1.2 → [Updates: 3.0.5]
• com.github.hmcts:ccd-case-document-am-client 1.59.2
• org.apache.pdfbox:pdfbox 2.0.36 → [Updates: 3.0.7]
• org.apache.commons:commons-csv 1.14.1
• com.launchdarkly:launchdarkly-java-server-sdk 7.13.2
• org.elasticsearch:elasticsearch 8.19.14 → [Updates: 9.3.3]
• javax.json:javax.json-api 1.1.4
• org.glassfish:javax.json 1.1.4
• com.sendgrid:sendgrid-java 4.10.3
• commons-net:commons-net 3.13.0
• org.springframework.security:spring-security-web 6.5.10 → [Updates: 7.0.5]
• org.springframework.security:spring-security-core 6.5.10 → [Updates: 7.0.5]
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.0 → [Updates: 4.3.2, 5.0.1]
• commons-beanutils:commons-beanutils 1.11.0
• com.fasterxml.jackson.core:jackson-annotations 2.17.2 → [Updates: 2.21]
• com.google.guava:guava 32.1.3-jre → [Updates: 33.6.0-jre]
• org.bouncycastle:bcpkix-jdk18on 1.83 → [Updates: 1.84]
• org.springframework.security:spring-security-rsa 1.1.5
• io.netty:netty-transport-native-epoll 4.2.12.Final
• com.warrenstrange:googleauth 1.5.0
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• net.logstash.logback:logstash-logback-encoder 7.4 → [Updates: 9.0]
• net.lingala.zip4j:zip4j 2.11.6
• com.opencsv:opencsv 5.12.0
• com.deepoove:poi-tl 1.12.2
• org.springframework.integration:spring-integration-sftp 6.5.8 → [Updates: 7.0.4]
• org.awaitility:awaitility 4.3.0
• org.springframework.cloud:spring-cloud-contract-wiremock 4.3.0 → [Updates: 4.3.3, 5.0.2]
• org.junit:junit-bom 6.0.3
• org.testng:testng 7.12.0
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.0]
• io.rest-assured:json-path 5.5.7 → [Updates: 6.0.0]
• io.rest-assured:xml-path 5.5.7 → [Updates: 6.0.0]
• net.serenity-bdd:serenity-core 4.3.4 → [Updates: 5.3.10]
• net.serenity-bdd:serenity-cucumber 4.3.4 → [Updates: 5.3.10]
• net.serenity-bdd:serenity-junit 4.3.4 → [Updates: 5.3.10]
• net.serenity-bdd:serenity-rest-assured 4.3.4 → [Updates: 5.3.10]
• net.serenity-bdd:serenity-spring 4.3.4 → [Updates: 5.3.10]
• com.github.mifmif:generex 1.0.2
• net.lingala.zip4j:zip4j 2.11.6
• org.apiguardian:apiguardian-api 1.1.2
• com.github.hmcts:fortify-client 1.4.10
• org.slf4j:slf4j-simple 1.7.36 → [Updates: 2.0.17]
• org.pitest:pitest 1.23.1
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.15.0
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• org.instancio:instancio-core 5.5.1
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.20.1 → [Updates: 2.21.2]
• com.mashape.unirest:unirest-java 1.4.9
• org.junit.jupiter:junit-jupiter 6.0.3
• org.skyscreamer:jsonassert 1.5.3
• au.com.dius.pact.consumer:junit5 4.1.11 → [Updates: 4.7.0]
• au.com.dius.pact.consumer:java8 4.1.11 → [Updates: 4.1.43]
• jacoco 0.8.14

gradle.properties

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 9.4.1]

helmv3 (1)

charts/prl-cos/Chart.yaml (1)

• java 5.3.0

renovate-config-presets (1)

.github/renovate.json

terraform (1)

infrastructure/main.tf

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.9

---

• Check this box to trigger a request for Renovate to run again on this repository