Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency hashicorp/terraform to v1.9.5
• Update dependency io.jsonwebtoken:jjwt to v0.12.6
• Update Terraform azurerm to ~> 3.116.0
• Update dependency com.github.hmcts:auth-checker-lib to v2.3.0
• Update dependency com.google.guava:guava to v33.3.0-jre
• Update dependency com.nimbusds:nimbus-jose-jwt to v9.41.1
• Update dependency com.querydsl:querydsl-jpa to v4.4.0
• Update dependency joda-time:joda-time to v2.12.7
• Update dependency net.serenity-bdd:serenity-cucumber to v3.9.8
• Update dependency net.serenity-bdd:serenity-single-page-report to v2.6.0
• Update dependency org.apache.commons:commons-lang3 to v3.17.0
• Update dependency org.apache.poi:poi to v5.3.0
• Update dependency org.apache.poi:poi-ooxml-lite to v5.3.0
• Update dependency org.liquibase:liquibase-core to v4.29.2
• Update dependency org.postgresql:postgresql to v42.7.4
• Update dependency org.springdoc:springdoc-openapi-ui to v1.8.0
• Update dependency org.springdoc:springdoc-openapi-webmvc-core to v1.8.0
• Update dependency org.springframework.cloud:spring-cloud-starter-netflix-hystrix to v2.2.10.RELEASE
• Update dependency org.testcontainers:postgresql to v1.20.1
• Update dependency pmd to v6.55.0
• Update feign monorepo to v12.5 (io.github.openfeign:feign-jackson, io.github.openfeign:feign-httpclient)
• Update javaLoggingVersion to v6.1.6 (com.github.hmcts.java-logging:logging-appinsights, com.github.hmcts.java-logging:logging)
• Update junit5 monorepo (org.junit.platform:junit-platform-launcher, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update log4j2 monorepo to v2.24.0 (org.apache.logging.log4j:log4j-core, org.apache.logging.log4j:log4j-api, org.apache.logging.log4j:log4j-bom)
• Update plugin com.github.ben-manes.versions to v0.51.0
• Update plugin io.spring.dependency-management to v1.1.6
• Update plugin org.owasp.dependencycheck to v9.2.0
• Update plugin org.sonarqube to v3.5.0.2730
• Update Terraform azurerm to v4
• Update actions/cache action to v4
• Update actions/checkout action to v4
• Update actions/setup-java action to v4
• Update codecov/codecov-action action to v4
• Update debian Docker tag to v12
• Update dependency checkstyle to v10
• Update dependency com.github.hmcts:auth-checker-lib to v3
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency com.querydsl:querydsl-jpa to v5
• Update dependency com.sun.xml.bind:jaxb-osgi to v4
• Update dependency net.logstash.logback:logstash-logback-encoder to v8
• Update dependency net.serenity-bdd:serenity-cucumber to v4
• Update dependency net.serenity-bdd:serenity-single-page-report to v4
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2023
• Update dependency pmd to v7
• Update feign monorepo to v13 (major) (io.github.openfeign:feign-jackson, io.github.openfeign:feign-httpclient)
• Update hmctspublic.azurecr.io/base/java Docker tag to v21
• Update plugin org.owasp.dependencycheck to v10
• Update plugin org.sonarqube to v5
• Update postgres Docker tag to v16
• Update spring boot to v3 (major) (org.springframework.boot:spring-boot-dependencies, org.springframework.boot)
• Update versions.serenity to v4 (major) (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update Helm release java to v5.2.1
• Update dependency checkstyle to v7.8.2
• Update dependency com.github.hmcts:fortify-client to v1.4.4
• Update dependency com.sun.xml.bind:jaxb-osgi to v2.3.9
• Update dependency jacoco to v0.8.12
• Update dependency org.apache.httpcomponents:httpclient to v4.5.14
• Update dependency org.projectlombok:lombok to v1.18.34
• Update plugin uk.gov.hmcts.java to v0.12.63
• Update plugin info.solidsoft.pitest to v1.15.0
• Update dependency gradle to v8
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose.yml

• postgres 11-alpine

dockerfile

Dockerfile

• debian 10
• hmctspublic.azurecr.io/base/java 17-distroless

github-actions

.github/workflows/ci.yml

• actions/checkout v2
• actions/setup-java v1
• actions/cache v2
• codecov/codecov-action v1

gradle

cve-resolution-strategy.gradle

liquibase.gradle

build.gradle

• net.serenity-bdd:serenity-gradle-plugin 2.5.10
• net.serenity-bdd:serenity-single-page-report 2.1.13
• io.spring.dependency-management 1.0.15.RELEASE
• org.owasp.dependencycheck 9.1.0
• org.springframework.boot 2.7.18
• uk.gov.hmcts.java 0.12.0
• com.github.ben-manes.versions 0.27.0
• org.sonarqube 3.0
• info.solidsoft.pitest 1.9.0
• checkstyle 7.8.1
• pmd 6.18.0
• org.springframework.boot:spring-boot-dependencies 2.7.18
• org.springframework.cloud:spring-cloud-dependencies 2021.0.9
• org.apache.logging.log4j:log4j-bom 2.17.0
• com.sun.xml.bind:jaxb-osgi 2.3.1
• com.google.guava:guava 33.2.0-jre
• org.apache.logging.log4j:log4j-api 2.17.0
• org.apache.logging.log4j:log4j-core 2.17.0
• org.springdoc:springdoc-openapi-ui 1.7.0
• org.springdoc:springdoc-openapi-webmvc-core 1.7.0
• org.springframework.cloud:spring-cloud-starter-netflix-hystrix 2.1.6.RELEASE
• org.apache.httpcomponents:httpclient 4.5.11
• joda-time:joda-time 2.10.5
• org.apache.commons:commons-lang3 3.12.0
• commons-fileupload:commons-fileupload 1.5
• com.querydsl:querydsl-jpa 4.2.2
• org.liquibase:liquibase-core 4.27.0
• org.postgresql:postgresql 42.3.3
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• com.github.hmcts.java-logging:logging 6.0.1
• com.github.hmcts.java-logging:logging-appinsights 6.0.1
• net.logstash.logback:logstash-logback-encoder 7.4
• commons-io:commons-io 2.16.1
• org.apache.poi:poi 5.2.5
• org.apache.poi:poi-ooxml-lite 5.2.5
• com.github.hmcts:auth-checker-lib 2.1.5
• com.github.hmcts:service-auth-provider-java-client 4.1.2
• io.jsonwebtoken:jjwt 0.12.5
• com.github.hmcts:idam-java-client 3.0.3
• com.nimbusds:nimbus-jose-jwt 9.37.3
• io.github.openfeign:feign-httpclient 12.3
• io.github.openfeign:feign-jackson 12.3
• org.jboss.aerogear:aerogear-otp-java 1.0.0
• org.junit.jupiter:junit-jupiter-api 5.5.0
• org.junit.platform:junit-platform-launcher 1.9.3
• org.junit.jupiter:junit-jupiter-engine 5.5.0
• org.testcontainers:postgresql 1.15.1
• com.github.hmcts:fortify-client 1.4.2
• org.projectlombok:lombok 1.18.28
• org.projectlombok:lombok 1.18.28
• org.projectlombok:lombok 1.18.28
• org.projectlombok:lombok 1.18.28
• org.projectlombok:lombok 1.18.28
• org.projectlombok:lombok 1.18.28
• net.serenity-bdd:serenity-core 2.6.0
• net.serenity-bdd:serenity-cucumber 3.0.1
• net.serenity-bdd:serenity-junit 2.6.0
• net.serenity-bdd:serenity-rest-assured 2.6.0
• net.serenity-bdd:serenity-spring 2.6.0
• jacoco 0.8.7

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 7.6.4

helm-values

charts/ccpay-bulkscanning-api/values.yaml

helmv3

charts/ccpay-bulkscanning-api/Chart.yaml

• java 5.2.0

terraform

infrastructure/cft-api-mgmt.tf

infrastructure/main.tf

infrastructure/provider.tf

infrastructure/sdp.tf

infrastructure/state.tf

• azuread 2.53.1
• azurerm ~> 3.110.0

infrastructure/versions.tf

• hashicorp/terraform >= 1.9.0

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.9.0

---

• Check this box to trigger a request for Renovate to run again on this repository