Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
gradle	com.github.tomakehurst:wiremock
gradle	org.hibernate:hibernate-validator

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Replace dependency com.github.tomakehurst:wiremock with org.wiremock:wiremock
• Replace dependency org.hibernate:hibernate-validator with org.hibernate.validator:hibernate-validator
• Update dependency commons-beanutils:commons-beanutils to v1.10.1
• Update dependency info.solidsoft.gradle.pitest:gradle-pitest-plugin to v1.15.0
• Update dependency junit:junit to v4.13.2
• Update dependency net.serenity-bdd:serenity-cucumber to v3.9.8
• Update dependency net.serenity-bdd:serenity-single-page-report to v2.6.0
• Update dependency org.assertj:assertj-core to v3.27.3
• Update dependency org.liquibase:liquibase-core to v4.31.1
• Update dependency org.pitest:pitest to v1.19.0
• Update dependency org.postgresql:postgresql to v42.7.5
• Update dependency org.projectlombok:lombok to v1.18.38
• Update dependency org.springdoc:springdoc-openapi-ui to v1.8.0
• Update dependency org.springdoc:springdoc-openapi-webmvc-core to v1.8.0
• Update javaLoggingVersion to v6.1.8 (com.github.hmcts.java-logging:logging-appinsights, com.github.hmcts.java-logging:logging)
• Update plugin info.solidsoft.pitest to v1.15.0
• Update plugin io.spring.dependency-management to v1.1.7
• Update plugin org.owasp.dependencycheck to v9.2.0
• Update plugin org.sonarqube to v3.5.0.2730
• Update postgres Docker tag to v11.16
• Update resilience4j to v0.17.0 (io.github.resilience4j:resilience4j-retry, io.github.resilience4j:resilience4j-circuitbreaker)
• Update Terraform azuread to v3
• Update actions/checkout action to v4
• Update dependency com.github.hmcts:auth-checker-lib to v3
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency com.github.tomakehurst:wiremock to v3
• Update dependency com.sun.xml.bind:jaxb-osgi to v4
• Update dependency net.serenity-bdd:serenity-cucumber to v4
• Update dependency net.serenity-bdd:serenity-single-page-report to v4
• Update dependency org.ff4j:ff4j-store-springjdbc to v2
• Update dependency org.hibernate.validator:hibernate-validator to v8
• Update dependency org.hibernate:hibernate-validator to v8
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2024
• Update dependency org.springframework.hateoas:spring-hateoas to v2
• Update dependency org.springframework.plugin:spring-plugin-core to v3
• Update hmctspublic.azurecr.io/base/java Docker tag to v21
• Update plugin org.owasp.dependencycheck to v12
• Update plugin org.sonarqube to v6
• Update postgres Docker tag to v17
• Update resilience4j to v2 (major) (io.github.resilience4j:resilience4j-retry, io.github.resilience4j:resilience4j-circuitbreaker)
• Update spring boot to v3 (major) (org.springframework.boot:spring-boot-dependencies, org.springframework.boot)
• Update versions.serenity to v4 (major) (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency com.github.hmcts:fortify-client to v1.4.8
• Update dependency org.projectlombok:lombok to v1.18.38
• Update dependency org.springframework.security:spring-security-rsa to v1.1.5
• Update plugin org.springframework.boot to v2.7.18
• Update plugin uk.gov.hmcts.java to v0.12.65
• Update dependency com.github.tomakehurst:wiremock to v2.27.2
• Update dependency com.google.guava:guava to v33.4.6-jre
• Update dependency hashicorp/terraform to v1.11.3
• Update plugin com.gorylenko.gradle-git-properties to v2.5.0
• Update dependency gradle to v8
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update Helm release java to v5.2.1
• Update dependency com.github.hmcts:service-auth-provider-java-client to v3.1.4
• Update dependency com.sun.xml.bind:jaxb-osgi to v2.3.9
• Update dependency org.apache.httpcomponents:httpclient to v4.5.14
• Update dependency com.github.hmcts:auth-checker-lib to v2.3.0

Detected dependencies

docker-compose

docker-compose.yml

• postgres 11-alpine
• postgres 11-alpine

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 17-distroless

docker/database/Dockerfile

• postgres 11.0

github-actions

.github/workflows/ci.yml

• actions/checkout v2
• actions/setup-java v4
• actions/cache v4

.github/workflows/stale.yml

• actions/stale v9

gradle

cve-resolution-strategy.gradle

settings.gradle

build.gradle

• org.springframework.boot 2.7.15
• io.spring.dependency-management 1.0.15.RELEASE
• org.owasp.dependencycheck 9.1.0
• uk.gov.hmcts.java 0.12.43
• com.gorylenko.gradle-git-properties 2.4.1
• org.sonarqube 3.0
• org.springframework.boot:spring-boot-dependencies 2.7.18
• org.springframework.cloud:spring-cloud-dependencies 2021.0.9
• org.liquibase:liquibase-core 4.27.0
• org.postgresql:postgresql 42.3.2
• commons-beanutils:commons-beanutils 1.9.3
• org.springframework.security:spring-security-rsa 1.1.3
• com.sun.xml.bind:jaxb-osgi 2.3.1
• com.github.hmcts:auth-checker-lib 2.1.4
• org.projectlombok:lombok 1.16.16
• com.google.code.findbugs:annotations 3.0.1
• org.apache.httpcomponents:httpcore 4.4.16
• org.apache.httpcomponents:httpclient 4.5.13
• junit:junit 4.12
• org.assertj:assertj-core 3.8.0
• com.tngtech.java:junit-dataprovider 1.13.1
• org.projectlombok:lombok 1.18.28
• com.github.hmcts:fortify-client 1.4.1

api/liquibase.gradle

api/build.gradle

• net.serenity-bdd:serenity-gradle-plugin 2.5.10
• net.serenity-bdd:serenity-single-page-report 2.1.13
• info.solidsoft.pitest 1.9.0
• com.github.hmcts.java-logging:logging 6.0.1
• com.github.hmcts.java-logging:logging-appinsights 6.0.1
• com.github.hmcts.java-logging:java-logging-spring 5.1.5
• com.github.hmcts:service-auth-provider-java-client 3.1.1
• org.springdoc:springdoc-openapi-ui 1.7.0
• org.springdoc:springdoc-openapi-webmvc-core 1.7.0
• org.ff4j:ff4j-spring-boot-web-api 1.9
• org.ff4j:ff4j-store-springjdbc 1.9
• io.github.resilience4j:resilience4j-circuitbreaker 0.14.1
• io.github.resilience4j:resilience4j-retry 0.14.1
• com.github.hmcts:auth-checker-lib 2.1.4
• com.google.guava:guava 33.2.0-jre
• org.hibernate.validator:hibernate-validator 6.2.5.Final
• org.springframework.plugin:spring-plugin-core 1.2.0.RELEASE
• org.springframework.hateoas:spring-hateoas 1.5.6
• com.github.tomakehurst:wiremock 2.6.0
• javax.ws.rs:javax.ws.rs-api 2.1.1
• net.serenity-bdd:serenity-core 2.6.0
• net.serenity-bdd:serenity-cucumber 3.0.1
• net.serenity-bdd:serenity-junit 2.6.0
• net.serenity-bdd:serenity-rest-assured 2.6.0
• net.serenity-bdd:serenity-spring 2.6.0
• org.pitest:pitest 1.9.0
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.9.0
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• org.projectlombok:lombok 1.18.22

api-contract/build.gradle

• org.hibernate:hibernate-validator 6.2.5.Final

client/build.gradle

• com.github.tomakehurst:wiremock 2.6.0

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 7.6.4

helm-values

charts/bar-api/values.yaml

helmv3

charts/bar-api/Chart.yaml

• java 5.2.0

terraform

infrastructure/main.tf

infrastructure/provider.tf

infrastructure/sdp.tf

infrastructure/state.tf

• azuread 2.53.1
• azurerm ~> 4.0

infrastructure/versions.tf

• hashicorp/terraform >= 1.4.0

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.4.0

---

• Check this box to trigger a request for Renovate to run again on this repository