Update All patch-minor dependencies

build.gradle

@@ -1,11 +1,11 @@
 plugins {
   id 'application'
   id 'jacoco'
-  id 'io.spring.dependency-management' version '1.0.10.RELEASE'
-  id 'org.springframework.boot' version '2.7.10'
-  id 'com.github.ben-manes.versions' version '0.20.0'
-  id 'org.sonarqube' version '4.4.0.3356'
-  id 'uk.gov.hmcts.java' version '0.12.40'
+  id 'io.spring.dependency-management' version '1.1.4'
+  id 'org.springframework.boot' version '2.7.18'
+  id 'com.github.ben-manes.versions' version '0.50.0'
+  id 'org.sonarqube' version '4.4.1.3373'
+  id 'uk.gov.hmcts.java' version '0.12.50'
 }
 
 group = 'uk.gov.hmcts.reform.ccd'
@@ -138,7 +138,7 @@ repositories {
 }
 
 ext {
-  groovyVersion = '3.0.7'
+  groovyVersion = '3.0.19'
   tomcatVersion = '9.0.75!!'
   jettyVersion = '9.4.53.v20231009'
 }
@@ -152,28 +152,28 @@ ext['snakeyaml.version'] = '2.0'
 // it is important to specify logback classic and core packages explicitly as libraries like spring boot
 // enforces it's own (older) version which is not recommended.
 def versions = [
-  junit           : '5.3.2',
+  junit           : '5.10.1',
   reformLogging   : '6.0.1',
   springBoot      : '3.0',
   springfoxSwagger: '3.0.0',
 ]
 
 
 dependencies {
-  implementation group: 'org.springframework.cloud', name: 'spring-cloud-starter-bootstrap', version: '3.0.1'
+  implementation group: 'org.springframework.cloud', name: 'spring-cloud-starter-bootstrap', version: '3.1.7'
 
-  implementation group: 'com.google.guava', name: 'guava', version:'32.1.2-jre'
-  implementation group: 'org.apache.httpcomponents', name: 'httpclient', version: '4.5.13'
+  implementation group: 'com.google.guava', name: 'guava', version:'32.1.3-jre'
+  implementation group: 'org.apache.httpcomponents', name: 'httpclient', version: '4.5.14'
 
   implementation "org.apache.tomcat.embed:tomcat-embed-core:${tomcatVersion}"
   implementation "org.apache.tomcat.embed:tomcat-embed-el:${tomcatVersion}"
   implementation "org.apache.tomcat.embed:tomcat-embed-websocket:${tomcatVersion}"
 
   // CVE-2021-28170
-  implementation group: 'org.glassfish', name: 'jakarta.el', version: '4.0.1'
+  implementation group: 'org.glassfish', name: 'jakarta.el', version: '4.0.2'
   // CVE-2021-42550
-  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.2.10'
-  implementation group: 'ch.qos.logback', name: 'logback-core', version: '1.2.10'
+  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.4.14'
+  implementation group: 'ch.qos.logback', name: 'logback-core', version: '1.4.14'
 
   implementation group: 'org.springframework.boot', name: 'spring-boot-starter-web'
   implementation group: 'org.springframework.boot', name: 'spring-boot-starter-actuator'
@@ -186,7 +186,7 @@ dependencies {
   }
 
   // https://mvnrepository.com/artifact/com.github.tomakehurst/wiremock
-  implementation(group: 'com.github.tomakehurst', name: 'wiremock-jre8', version: '2.35.0')
+  implementation(group: 'com.github.tomakehurst', name: 'wiremock-jre8', version: '2.35.1')
 // https://mvnrepository.com/artifact/com.github.jknack/handlebars
   implementation group: 'com.github.jknack', name: 'handlebars', version: '4.3.1'
 
@@ -226,18 +226,18 @@ dependencies {
 
   implementation group: 'commons-fileupload', name: 'commons-fileupload', version: '1.5'
   implementation group: 'commons-beanutils', name: 'commons-beanutils', version: '1.9.4'
-  implementation group: 'commons-io', name: 'commons-io', version: '2.8.0'
+  implementation group: 'commons-io', name: 'commons-io', version: '2.15.1'
 
   testImplementation group: 'org.junit.jupiter', name: 'junit-jupiter-api', version: versions.junit
   testImplementation group: 'org.junit.jupiter', name: 'junit-jupiter-params', version: versions.junit
   testRuntimeOnly group: 'org.junit.jupiter', name: 'junit-jupiter-engine', version: versions.junit
 
   testImplementation group: 'org.springframework.boot', name: 'spring-boot-starter-test'
-  testImplementation(group: 'io.rest-assured', name: 'rest-assured', version: '4.3.0') {
+  testImplementation(group: 'io.rest-assured', name: 'rest-assured', version: '4.5.1') {
     exclude group: 'org.apache.sling', module: 'org.apache.sling.javax.activation'
   }
-  testImplementation group: 'io.rest-assured', name: 'json-path', version: '4.3.0'
-  testImplementation(group: 'io.rest-assured', name: 'xml-path', version: '4.3.0') {
+  testImplementation group: 'io.rest-assured', name: 'json-path', version: '4.5.1'
+  testImplementation(group: 'io.rest-assured', name: 'xml-path', version: '4.5.1') {
     exclude group: 'org.apache.sling', module: 'org.apache.sling.javax.activation'
   }
 
@@ -252,9 +252,9 @@ dependencies {
   functionalTestImplementation sourceSets.main.runtimeClasspath
   functionalTestImplementation sourceSets.test.runtimeClasspath
 
-  implementation group: 'junit', name: 'junit', version: '4.13.1'
+  implementation group: 'junit', name: 'junit', version: '4.13.2'
 
-  implementation group: 'net.minidev', name: 'json-smart', version: '2.4.7'
+  implementation group: 'net.minidev', name: 'json-smart', version: '2.5.0'
 
   // CCD-3511 CVE-2020-15522
   implementation group: 'org.bouncycastle', name: 'bcpkix-jdk15on', version: '1.70'
@@ -281,7 +281,7 @@ bootJar {
 
 dependencyManagement {
   imports {
-    mavenBom "org.springframework.cloud:spring-cloud-dependencies:2021.0.1"
+    mavenBom "org.springframework.cloud:spring-cloud-dependencies:2021.0.8"
   }
 }
 

charts/ccd-test-stubs-service/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "1.0"
 description: A Helm chart for ccd-test-stubs-service App
 name: ccd-test-stubs-service
 home: https://github.com/hmcts/ccd-test-stubs-service
-version: 1.2.11
+version: 1.2.12
 maintainers:
   - name: HMCTS CCD Dev Team
     email: [email protected]
 dependencies:
   - name: java
-    version: 5.0.0
+    version: 5.0.2
     repository: 'https://hmctspublic.azurecr.io/helm/v1/repo/'

gradle/wrapper/gradle-wrapper.properties

@@ -1,5 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-7.3-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-7.6.3-bin.zip
+networkTimeout=10000
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists