Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency com.github.hmcts:fortify-client to v1.4.4
• Update dependency org.postgresql:postgresql to v42.7.4
• Update dependency org.springframework.security:spring-security-rsa to v1.1.5
• Update reformLoggingVersion to v6.1.6 (com.github.hmcts.java-logging:logging-appinsights, com.github.hmcts.java-logging:logging)
• Update dependency com.fasterxml.jackson.core:jackson-annotations to v2.17.2
• Update dependency com.fasterxml.jackson.core:jackson-core to v2.17.2
• Update dependency com.fasterxml.jackson.core:jackson-databind to v2.17.2
• Update dependency com.google.guava:guava to v33.3.0-jre
• Update dependency com.nimbusds:nimbus-jose-jwt to v9.41.1
• Update dependency com.squareup.okio:okio to v3.9.1
• Update dependency hashicorp/terraform to v1.9.5
• Update dependency io.rest-assured:rest-assured to v5.5.0
• Update dependency org.junit:junit-bom to v5.11.0
• Update dependency org.liquibase:liquibase-core to v4.29.2
• Update dependency org.springdoc:springdoc-openapi-ui to v1.8.0
• Update dependency org.springdoc:springdoc-openapi-webmvc-core to v1.8.0
• Update dependency org.testcontainers:postgresql to v1.20.1
• Update dependency uk.gov.service.notify:notifications-java-client to v5.2.0-RELEASE
• Update log4j2 monorepo to v2.24.0 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update plugin org.owasp.dependencycheck to v9.2.0
• Update Terraform azurerm to v4
• Update dependency net.logstash.logback:logstash-logback-encoder to v8
• Update dependency pmd to v7
• Update plugin org.owasp.dependencycheck to v10
• Update plugin org.sonarqube to v5
• Update versions.serenity to v4 (major) (net.serenity-bdd:serenity-screenplay, net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update Terraform azuread to v2.53.1

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency checkstyle to v8.45.1
• Update actions/setup-java action to v4
• Update dependency checkstyle to v10
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency gradle to v8
• Update dependency net.serenity-bdd:serenity-cucumber to v4
• Update dependency net.serenity-bdd:serenity-single-page-report to v4
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2023
• Update spring boot to v3 (major) (org.springframework.boot:spring-boot-starter-validation, org.springframework.boot)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose.yml

• postgres 16-alpine

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• actions/setup-java v1

.github/workflows/stale.yml

• actions/stale v9

gradle

cve-resolution-strategy.gradle

liquibase.gradle

build.gradle

• net.serenity-bdd:serenity-gradle-plugin 2.5.10
• net.serenity-bdd:serenity-single-page-report 2.6.0
• io.spring.dependency-management 1.1.6
• org.springframework.boot 2.7.18
• org.owasp.dependencycheck 9.0.9
• com.github.ben-manes.versions 0.51.0
• org.sonarqube 4.4.1.3373
• uk.gov.hmcts.java 0.12.63
• info.solidsoft.pitest 1.15.0
• checkstyle 8.29
• pmd 6.55.0
• org.springframework.cloud:spring-cloud-dependencies 2021.0.9
• com.google.guava:guava 33.0.0-jre
• com.squareup.okio:okio 3.8.0
• com.sun.xml.bind:jaxb-osgi 4.0.5
• junit:junit 4.13.2
• org.springframework.security:spring-security-rsa 1.1.3
• org.springframework.boot:spring-boot-starter-validation 2.7.18
• uk.gov.service.notify:notifications-java-client 5.0.0-RELEASE
• org.springdoc:springdoc-openapi-ui 1.7.0
• org.springdoc:springdoc-openapi-webmvc-core 1.7.0
• com.vladmihalcea:hibernate-types-55 2.21.1
• org.liquibase:liquibase-core 4.26.0
• org.postgresql:postgresql 42.7.3
• com.google.guava:guava 33.0.0-jre
• com.github.hmcts.java-logging:logging 6.1.5
• com.github.hmcts.java-logging:logging-appinsights 6.1.5
• net.logstash.logback:logstash-logback-encoder 7.4
• org.apache.logging.log4j:log4j-api 2.23.1
• org.apache.logging.log4j:log4j-to-slf4j 2.23.1
• org.projectlombok:lombok 1.18.34
• com.nimbusds:nimbus-jose-jwt 9.37.3
• org.springframework.security.oauth:spring-security-oauth2 2.5.2.RELEASE
• com.github.hmcts:service-auth-provider-java-client 4.1.2
• com.github.hmcts:idam-java-client 3.0.3
• javax.inject:javax.inject 1
• com.fasterxml.jackson.core:jackson-databind 2.16.1
• com.fasterxml.jackson.core:jackson-core 2.16.1
• com.fasterxml.jackson.core:jackson-annotations 2.16.1
• net.sourceforge.findbugs:annotations 1.3.2
• org.junit:junit-bom 5.10.3
• org.apiguardian:apiguardian-api 1.1.2
• com.github.hmcts:fortify-client 1.4.3
• org.projectlombok:lombok 1.18.34
• org.projectlombok:lombok 1.18.34
• org.testcontainers:postgresql 1.19.6
• io.rest-assured:rest-assured 5.4.0
• org.projectlombok:lombok 1.18.34
• org.projectlombok:lombok 1.18.34
• org.projectlombok:lombok 1.18.34
• org.projectlombok:lombok 1.18.34
• net.serenity-bdd:serenity-core 2.6.0
• net.serenity-bdd:serenity-cucumber 1.9.51
• net.serenity-bdd:serenity-junit 2.6.0
• net.serenity-bdd:serenity-rest-assured 2.6.0
• net.serenity-bdd:serenity-spring 2.6.0
• net.serenity-bdd:serenity-screenplay 2.6.0
• org.jboss.aerogear:aerogear-otp-java 1.0.0

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 7.6.4

helm-values

charts/ccpay-notifications-service/values.yaml

helmv3

charts/ccpay-notifications-service/Chart.yaml

• java 5.2.1

terraform

infrastructure/main.tf

infrastructure/provider.tf

infrastructure/state.tf

• azuread 2.47.0
• azurerm ~> 3.40

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.7.4

---

• Check this box to trigger a request for Renovate to run again on this repository