Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Package lookup failures

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• Update dependency org.postgresql:postgresql to v42.7.3
• Update guava monorepo to v33.2.1-jre (com.google.guava:guava-testlib, com.google.guava:guava)
• Update versions.tomcat to v10.1.25 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency commons-io:commons-io to v2.16.1
• Update dependency hashicorp/terraform to v1.9.1
• Update dependency io.github.openfeign:feign-jackson to v13.3
• Update dependency org.camunda.bpm:camunda-external-task-client to v7.21.0
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.6.0
• Update dependency pmd to v7
• Update hmctspublic.azurecr.io/base/java Docker tag to v21
• Update plugin io.freefair.lombok to v8
• Update plugin net.serenity-bdd.serenity-gradle-plugin to v4
• Update plugin org.owasp.dependencycheck to v10
• Update plugin org.sonarqube to v5
• Update versions.serenity to v4 (major) (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dependency com.github.hmcts:service-auth-provider-java-client to v5.1.3

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package org.springframework.security:spring-boot-starter-security.

Files affected: build.gradle

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update Spring Upgrade - Non Major (org.springframework.security:spring-security-rsa, org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.security:spring-security-web, org.springframework.security:spring-security-test, org.springframework.security:spring-security-taglibs, org.springframework.security:spring-security-saml2-service-provider, org.springframework.security:spring-security-rsocket, org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-oauth2-jose, org.springframework.security:spring-security-oauth2-core, org.springframework.security:spring-security-oauth2-client, org.springframework.security:spring-security-messaging, org.springframework.security:spring-security-ldap, org.springframework.security:spring-security-data, org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-config, org.springframework.security:spring-security-cas, org.springframework.security:spring-security-aspects, org.springframework.security:spring-security-acl, org.springframework.security:spring-security-core, org.springframework.boot, io.spring.dependency-management)
• Update QA & Nightly Checks - Non Major (au.com.dius.pact.provider:junit5spring, au.com.dius.pact.provider:spring, au.com.dius.pact.provider:junit5, au.com.dius.pact.consumer:java8, au.com.dius.pact.consumer:junit5, org.pitest:pitest, net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core, au.com.dius.pact, net.serenity-bdd.serenity-gradle-plugin)
• Update Terraform azuread to v2.53.1
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update dependency org.zalando:logbook-spring-boot-starter to v3
• Update flyway to v10 (major) (org.flywaydb:flyway-core, org.flywaydb.flyway)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency org.zalando:problem-spring-web-starter to v0.29.1
• Update dependency gradle to v8

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 17-distroless

github-actions

.github/workflows/publish-openapi.yml

• hmcts/workflow-publish-openapi-spec v1

.github/workflows/stale.yml

• actions/stale v9

gradle

build.gradle

• io.spring.dependency-management 1.1.4
• org.springframework.boot 3.3.0
• org.owasp.dependencycheck 9.2.0
• com.github.ben-manes.versions 0.51.0
• org.sonarqube 4.4.1.3373
• info.solidsoft.pitest 1.15.0
• io.freefair.lombok 6.6.3
• org.flywaydb.flyway 9.22.3
• net.serenity-bdd.serenity-gradle-plugin 3.2.3
• au.com.dius.pact 4.1.8
• checkstyle 10.17.0
• pmd 6.55.0
• com.google.guava:guava 33.0.0-jre
• ch.qos.logback:logback-classic 1.5.6
• ch.qos.logback:logback-core 1.5.6
• commons-io:commons-io 2.15.1
• org.springframework.security:spring-boot-starter-security 6.0.8
• org.springframework.security:spring-security-core 6.0.8
• org.springframework.security:spring-security-acl 6.0.8
• org.springframework.security:spring-security-aspects 6.0.8
• org.springframework.security:spring-security-cas 6.0.8
• org.springframework.security:spring-security-config 6.0.8
• org.springframework.security:spring-security-crypto 6.0.8
• org.springframework.security:spring-security-data 6.0.8
• org.springframework.security:spring-security-ldap 6.0.8
• org.springframework.security:spring-security-messaging 6.0.8
• org.springframework.security:spring-security-oauth2-client 6.0.8
• org.springframework.security:spring-security-oauth2-core 6.0.8
• org.springframework.security:spring-security-oauth2-jose 6.0.8
• org.springframework.security:spring-security-oauth2-resource-server 6.0.8
• org.springframework.security:spring-security-openid 6.0.8
• org.springframework.security:spring-security-remoting 6.0.8
• org.springframework.security:spring-security-rsocket 6.0.8
• org.springframework.security:spring-security-saml2-service-provider 6.0.8
• org.springframework.security:spring-security-taglibs 6.0.8
• org.springframework.security:spring-security-test 6.0.8
• org.springframework.security:spring-security-web 6.0.8
• org.junit.jupiter:junit-jupiter-api 5.10.3
• org.junit.jupiter:junit-jupiter-engine 5.10.3
• org.junit.jupiter:junit-jupiter-params 5.10.3
• org.junit.platform:junit-platform-commons 1.10.3
• org.junit.platform:junit-platform-engine 1.10.3
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.2.0
• org.springframework.cloud:spring-cloud-starter-openfeign 4.1.1
• org.springframework.security:spring-security-rsa 1.1.1
• org.zalando:logbook-spring-boot-starter 2.16.0
• org.zalando:problem-spring-web-starter 0.27.0
• com.github.hmcts.java-logging:logging 6.1.5
• com.github.hmcts:service-auth-provider-java-client 5.1.2
• io.github.openfeign:feign-jackson 13.2.1
• commons-fileupload:commons-fileupload 1.5
• org.flywaydb:flyway-core 9.22.3
• org.postgresql:postgresql 42.7.2
• org.apache.logging.log4j:log4j-api 2.23.1
• org.apache.logging.log4j:log4j-to-slf4j 2.23.1
• org.apache.tomcat.embed:tomcat-embed-core 10.1.16
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.16
• org.hibernate:hibernate-core 6.5.2.Final
• org.camunda.bpm:camunda-external-task-client 7.20.0
• javax.xml:jaxb-api 2.1
• com.launchdarkly:launchdarkly-java-server-sdk 6.3.0
• com.obsidiandynamics.pojotester:core 0.9.0
• com.google.guava:guava-testlib 33.2.0-jre
• com.jparams:to-string-verifier 1.4.8
• org.junit.vintage:junit-vintage-engine 5.10.3
• com.h2database:h2 2.2.224
• org.testcontainers:postgresql 1.19.8
• org.testcontainers:junit-jupiter 1.19.8
• org.pitest:pitest 1.12.0
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.15.0
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• net.serenity-bdd:serenity-core 3.4.2
• net.serenity-bdd:serenity-junit 3.4.2
• net.serenity-bdd:serenity-rest-assured 3.4.2
• net.serenity-bdd:serenity-spring 3.4.2
• com.github.hmcts:fortify-client 1.4.3
• au.com.dius.pact.consumer:junit5 4.1.7
• au.com.dius.pact.consumer:java8 4.1.7
• au.com.dius.pact.provider:junit5 4.1.7
• au.com.dius.pact.provider:spring 4.1.7
• au.com.dius.pact.provider:junit5spring 4.1.7

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 7.6.4

helm-values

charts/wa-workflow-api/values.yaml

helmv3

charts/wa-workflow-api/Chart.yaml

• java 5.2.1
• wa ~1.0.5
• camunda-bpm 0.0.47

terraform

infrastructure/main.tf

infrastructure/state.tf

• azuread 2.53.0
• azurerm ~> 3.0

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.7.4

---

• Check this box to trigger a request for Renovate to run again on this repository