Update All patch-minor dependencies

build.gradle

@@ -1,11 +1,11 @@
 plugins {
   id 'application'
   id 'jacoco'
-  id 'io.spring.dependency-management' version '1.0.10.RELEASE'
+  id 'io.spring.dependency-management' version '1.1.6'
   id 'org.springframework.boot' version '2.7.18'
-  id 'com.github.ben-manes.versions' version '0.20.0'
-  id 'org.sonarqube' version '4.4.0.3356'
-  id 'uk.gov.hmcts.java' version '0.12.40'
+  id 'com.github.ben-manes.versions' version '0.51.0'
+  id 'org.sonarqube' version '4.4.1.3373'
+  id 'uk.gov.hmcts.java' version '0.12.63'
 }
 
 group = 'uk.gov.hmcts.reform.ccd'
@@ -138,9 +138,9 @@ repositories {
 }
 
 ext {
-  groovyVersion = '3.0.7'
-  tomcatVersion = '9.0.83'
-  jettyVersion = '9.4.53.v20231009'
+  groovyVersion = '3.0.22'
+  tomcatVersion = '9.0.91'
+  jettyVersion = '9.4.55.v20240627'
 }
 
 ext['spring-framework.version'] = '5.3.27'
@@ -152,27 +152,27 @@ ext['snakeyaml.version'] = '2.0'
 // it is important to specify logback classic and core packages explicitly as libraries like spring boot
 // enforces it's own (older) version which is not recommended.
 def versions = [
-  junit           : '5.3.2',
-  reformLogging   : '6.0.1',
+  junit           : '5.10.3',
+  reformLogging   : '6.1.5',
   springBoot      : '3.0',
   springfoxSwagger: '3.0.0',
 ]
 
 
 dependencies {
   implementation group: 'org.springframework.cloud', name: 'spring-cloud-starter-bootstrap', version: '3.1.8'
-  implementation group: 'com.google.guava', name: 'guava', version:'32.1.2-jre'
-  implementation group: 'org.apache.httpcomponents', name: 'httpclient', version: '4.5.13'
+  implementation group: 'com.google.guava', name: 'guava', version:'32.1.3-jre'
+  implementation group: 'org.apache.httpcomponents', name: 'httpclient', version: '4.5.14'
 
   implementation "org.apache.tomcat.embed:tomcat-embed-core:${tomcatVersion}"
   implementation "org.apache.tomcat.embed:tomcat-embed-el:${tomcatVersion}"
   implementation "org.apache.tomcat.embed:tomcat-embed-websocket:${tomcatVersion}"
 
   // CVE-2021-28170
-  implementation group: 'org.glassfish', name: 'jakarta.el', version: '4.0.1'
+  implementation group: 'org.glassfish', name: 'jakarta.el', version: '4.0.2'
   // CVE-2021-42550
-  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.2.13'
-  implementation group: 'ch.qos.logback', name: 'logback-core', version: '1.2.13'
+  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.5.6'
+  implementation group: 'ch.qos.logback', name: 'logback-core', version: '1.5.6'
 
   implementation group: 'org.springframework.boot', name: 'spring-boot-starter-web'
   implementation group: 'org.springframework.boot', name: 'spring-boot-starter-actuator'
@@ -187,7 +187,7 @@ dependencies {
   // https://mvnrepository.com/artifact/com.github.tomakehurst/wiremock
   implementation(group: 'com.github.tomakehurst', name: 'wiremock-jre8', version: '2.35.2')
 // https://mvnrepository.com/artifact/com.github.jknack/handlebars
-  implementation group: 'com.github.jknack', name: 'handlebars', version: '4.3.1'
+  implementation group: 'com.github.jknack', name: 'handlebars', version: '4.4.0'
 
   implementation group: 'org.eclipse.jetty', name: 'jetty-server', version: jettyVersion
   implementation group: 'org.eclipse.jetty', name: 'jetty-alpn-client', version: jettyVersion
@@ -225,23 +225,23 @@ dependencies {
 
   implementation group: 'commons-fileupload', name: 'commons-fileupload', version: '1.5'
   implementation group: 'commons-beanutils', name: 'commons-beanutils', version: '1.9.4'
-  implementation group: 'commons-io', name: 'commons-io', version: '2.8.0'
+  implementation group: 'commons-io', name: 'commons-io', version: '2.16.1'
 
   testImplementation group: 'org.junit.jupiter', name: 'junit-jupiter-api', version: versions.junit
   testImplementation group: 'org.junit.jupiter', name: 'junit-jupiter-params', version: versions.junit
   testRuntimeOnly group: 'org.junit.jupiter', name: 'junit-jupiter-engine', version: versions.junit
 
   testImplementation group: 'org.springframework.boot', name: 'spring-boot-starter-test'
-  testImplementation(group: 'io.rest-assured', name: 'rest-assured', version: '4.3.0') {
+  testImplementation(group: 'io.rest-assured', name: 'rest-assured', version: '4.5.1') {
     exclude group: 'org.apache.sling', module: 'org.apache.sling.javax.activation'
   }
-  testImplementation group: 'io.rest-assured', name: 'json-path', version: '4.3.0'
-  testImplementation(group: 'io.rest-assured', name: 'xml-path', version: '4.3.0') {
+  testImplementation group: 'io.rest-assured', name: 'json-path', version: '4.5.1'
+  testImplementation(group: 'io.rest-assured', name: 'xml-path', version: '4.5.1') {
     exclude group: 'org.apache.sling', module: 'org.apache.sling.javax.activation'
   }
 
   testImplementation group: 'org.hamcrest', name: 'hamcrest', version: '2.2'
-  testImplementation 'com.github.hmcts:fortify-client:1.3.0:all'
+  testImplementation 'com.github.hmcts:fortify-client:1.4.3:all'
   integrationTestImplementation sourceSets.main.runtimeClasspath
   integrationTestImplementation sourceSets.test.runtimeClasspath
 
@@ -251,12 +251,12 @@ dependencies {
   functionalTestImplementation sourceSets.main.runtimeClasspath
   functionalTestImplementation sourceSets.test.runtimeClasspath
 
-  implementation group: 'junit', name: 'junit', version: '4.13.1'
+  implementation group: 'junit', name: 'junit', version: '4.13.2'
 
-  implementation group: 'net.minidev', name: 'json-smart', version: '2.4.7'
+  implementation group: 'net.minidev', name: 'json-smart', version: '2.5.1'
 
   // CCD-3511 CVE-2020-15522
-  implementation group: 'org.bouncycastle', name: 'bcpkix-jdk15to18', version: '1.77'
+  implementation group: 'org.bouncycastle', name: 'bcpkix-jdk15to18', version: '1.78.1'
 
   implementation 'org.springframework.cloud:spring-cloud-starter-bootstrap:3.1.8'
   implementation('org.springframework.cloud:spring-cloud-starter'){
@@ -305,7 +305,7 @@ bootJar {
 
 dependencyManagement {
   imports {
-    mavenBom "org.springframework.cloud:spring-cloud-dependencies:2021.0.1"
+    mavenBom "org.springframework.cloud:spring-cloud-dependencies:2021.0.9"
   }
 }
 

charts/ccd-test-stubs-service/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "1.0"
 description: A Helm chart for ccd-test-stubs-service App
 name: ccd-test-stubs-service
 home: https://github.com/hmcts/ccd-test-stubs-service
-version: 1.2.12
+version: 1.2.13
 maintainers:
   - name: HMCTS CCD Dev Team
     email: [email protected]
 dependencies:
   - name: java
-    version: 5.2.0
+    version: 5.2.1
     repository: 'https://hmctspublic.azurecr.io/helm/v1/repo/'

gradle/wrapper/gradle-wrapper.properties

@@ -1,5 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-7.3-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-7.6.4-bin.zip
+networkTimeout=10000
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists