Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	com.github.tomakehurst:wiremock-jre8-standalone

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency io.rest-assured:rest-assured to v5.5.7
• Update dependency io.rest-assured:rest-assured-common to v5.5.7
• Update dependency jacoco to v0.8.15
• Update dependency org.postgresql:postgresql to v42.7.13
• Update dependency org.projectlombok:lombok to v1.18.46
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.17
• Update dependency org.springframework.retry:spring-retry to v2.0.13
• Update Gradle to v8.14.5
• Update jackson monorepo to v2.22.1 (com.fasterxml.jackson.module:jackson-module-parameter-names, com.fasterxml.jackson.dataformat:jackson-dataformat-yaml, com.fasterxml.jackson.dataformat:jackson-dataformat-toml, com.fasterxml.jackson.datatype:jackson-datatype-jdk8, com.fasterxml.jackson.datatype:jackson-datatype-jsr310, com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-core)
• Update log4j2 monorepo to v2.26.1 (org.apache.logging.log4j:log4j-core, org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j, org.apache.logging.log4j:log4j-api)
• Update logback monorepo to v1.5.37 (ch.qos.logback:logback-classic, ch.qos.logback:logback-core)
• Update org.apache.tomcat.embed:10.1.56 to v10.1.57 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-core)
• Update plugin org.springframework.boot to v3.5.16
• Update spring cloud (org.springframework.cloud:spring-cloud-contract-wiremock, org.springframework.cloud:spring-cloud-dependencies)
• Update dependency com.google.guava:guava to v33.6.0-jre
• Update dependency com.nimbusds:nimbus-jose-jwt to v10.9.1
• Update dependency net.bytebuddy:byte-buddy to v1.18.11
• Update dependency net.bytebuddy:byte-buddy-agent to v1.18.11
• Update dependency org.bouncycastle:bcpkix-jdk18on to v1.84
• Update dependency org.yaml:snakeyaml to v2.6
• Update dependency pmd to v7.26.0
• Update feign monorepo to v13.13 (io.github.openfeign:feign-jackson, io.github.openfeign:feign-httpclient)
• Update mockito monorepo to v5.23.0 (org.mockito:mockito-junit-jupiter, org.mockito:mockito-core)
• Update plugin au.com.dius.pact to v4.7.3
• Update plugin info.solidsoft.pitest to v1.19.0
• Update plugin net.serenity-bdd.serenity-gradle-plugin to v4.3.2
• Update plugin org.sonarqube to v7.3.1.8318
• Update Terraform azuread to v3.9.0
• Update versions.pact_version to v4.7.3 (au.com.dius.pact.provider:junit5spring, au.com.dius.pact.provider:spring, au.com.dius.pact.provider:junit5, au.com.dius.pact.consumer:junit5)
• Update versions.serenity to v4.3.4 (net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-rest-assured)
• Update dependency checkstyle to v13
• Update dependency com.github.hmcts:idam-java-client to v4
• Update dependency com.github.hmcts:service-auth-provider-java-client to v6
• Update dependency io.rest-assured:rest-assured to v6
• Update dependency io.rest-assured:rest-assured-common to v6
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update dependency org.springframework.cloud:spring-cloud-contract-wiremock to v5
• Update org.apache.tomcat.embed:10.1.56 to v11 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-core)
• Update plugin net.serenity-bdd.serenity-gradle-plugin to v5
• Update plugin org.springframework.boot to v4
• Update spring core to v7 (org.springframework:spring-webmvc, org.springframework:spring-web, org.springframework:spring-tx, org.springframework:spring-orm, org.springframework:spring-jdbc, org.springframework:spring-expression, org.springframework:spring-core, org.springframework:spring-context-support, org.springframework:spring-context, org.springframework:spring-beans, org.springframework:spring-aspects, org.springframework:spring-aop)
• Update versions.serenity to v5 (net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-rest-assured)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency com.auth0:java-jwt to v4.5.2
• Update dependency com.github.hmcts:rd-commons-lib to v0.1.4
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5.3.4
• Update dependency hashicorp/terraform to v1.15.8
• Update dependency io.jsonwebtoken:jjwt to v0.13.0
• Update junit-framework monorepo to v6.1.1 (org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api, org.junit.jupiter:junit-jupiter)
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update dependency org.testcontainers:testcontainers to v2
• Update flyway to v12 (org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update Gradle to v9

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (2)

database/Dockerfile (1)

• postgres 18

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (4)

.github/workflows/autoupdate.yml (2)

• chinthakagodawita/autoupdate-action v1
• ubuntu 24.04

.github/workflows/combine-prs.yml (2)

• hmcts/am-github-actions master
• ubuntu 24.04

.github/workflows/stale.yml (1)

• actions/stale v10

.github/workflows/swagger.yml (1)

• hmcts/workflow-publish-openapi-spec v1

gradle (1)

build.gradle (101)

• uk.gov.hmcts.java 0.12.70
• com.github.ben-manes.versions 0.54.0
• info.solidsoft.pitest 1.15.0 → [Updates: 1.19.0]
• io.spring.dependency-management 1.1.7
• org.sonarqube 7.0.1.6134 → [Updates: 7.3.1.8318]
• org.springframework.boot 3.5.15 → [Updates: 3.5.16, 4.1.0]
• org.flywaydb.flyway 9.22.3 → [Updates: 12.10.0]
• au.com.dius.pact 4.6.17 → [Updates: 4.7.3]
• org.owasp.dependencycheck 12.2.2
• net.serenity-bdd.serenity-gradle-plugin 4.2.34 → [Updates: 4.3.2, 5.3.9]
• pmd 7.17.0 → [Updates: 7.26.0]
• checkstyle 12.3.1 → [Updates: 13.7.0]
• jacoco 0.8.14 → [Updates: 0.8.15]
• jakarta.validation:jakarta.validation-api 3.1.1
• org.springframework.retry:spring-retry 2.0.12 → [Updates: 2.0.13]
• io.rest-assured:rest-assured 5.5.6 → [Updates: 5.5.7, 6.0.0]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.14 → [Updates: 2.8.17, 3.0.3]
• com.github.ben-manes.caffeine:caffeine 3.2.4
• com.github.hmcts:service-auth-provider-java-client 5.3.3 → [Updates: 5.3.4, 6.0.0]
• com.auth0:java-jwt 4.5.0 → [Updates: 4.5.2]
• io.jsonwebtoken:jjwt 0.9.1 → [Updates: 0.13.0]
• jakarta.inject:jakarta.inject-api 2.0.1
• com.github.hmcts:idam-java-client 3.0.5 → [Updates: 4.0.0]
• com.nimbusds:nimbus-jose-jwt 10.5 → [Updates: 10.9.1]
• com.launchdarkly:launchdarkly-java-server-sdk 5.10.9 → [Updates: 7.14.0]
• org.flywaydb:flyway-core 9.22.3 → [Updates: 12.10.0]
• org.postgresql:postgresql 42.7.11 → [Updates: 42.7.13]
• com.google.guava:guava 33.5.0-jre → [Updates: 33.6.0-jre]
• jakarta.el:jakarta.el-api 6.0.1
• org.bouncycastle:bcpkix-jdk18on 1.82 → [Updates: 1.84]
• ch.qos.logback:logback-core 1.5.20 → [Updates: 1.5.37]
• ch.qos.logback:logback-classic 1.5.20 → [Updates: 1.5.37]
• org.apache.logging.log4j:log4j-api 2.26.0 → [Updates: 2.26.1]
• org.apache.logging.log4j:log4j 2.26.0 → [Updates: 2.26.1]
• org.apache.logging.log4j:log4j-to-slf4j 2.26.0 → [Updates: 2.26.1]
• org.yaml:snakeyaml 2.5 → [Updates: 2.6]
• io.github.openfeign.form:feign-form 3.8.0
• io.github.openfeign.form:feign-form-spring 3.8.0
• io.github.openfeign:feign-httpclient 13.6 → [Updates: 13.13]
• org.apache.logging.log4j:log4j-core 2.26.0 → [Updates: 2.26.1]
• com.github.hmcts.java-logging:logging 8.0.0
• org.apache.commons:commons-lang3 3.20.0
• commons-fileupload:commons-fileupload 1.6.0
• com.github.hmcts:rd-commons-lib 0.1.3 → [Updates: 0.1.4]
• org.projectlombok:lombok 1.18.42 → [Updates: 1.18.46]
• org.hamcrest:hamcrest-junit 2.0.0.0
• io.rest-assured:rest-assured 5.5.6 → [Updates: 5.5.7, 6.0.0]
• io.rest-assured:rest-assured-common 5.5.6 → [Updates: 5.5.7, 6.0.0]
• com.github.tomakehurst:wiremock-jre8-standalone 3.0.1 → [Updates: 3.0.1]
• org.mockito:mockito-core 5.20.0 → [Updates: 5.23.0]
• org.mockito:mockito-inline 5.2.0
• net.bytebuddy:byte-buddy 1.17.8 → [Updates: 1.18.11]
• net.bytebuddy:byte-buddy-agent 1.17.8 → [Updates: 1.18.11]
• org.mockito:mockito-junit-jupiter 5.20.0 → [Updates: 5.23.0]
• org.powermock:powermock-api-mockito2 2.0.9
• io.github.openfeign:feign-jackson 13.6 → [Updates: 13.13]
• com.github.mifmif:generex 1.0.2
• com.github.hmcts:fortify-client 1.4.10
• org.codehaus.sonar-plugins:sonar-pitest-plugin 0.5
• org.springframework.cloud:spring-cloud-contract-wiremock 4.3.0 → [Updates: 4.3.4, 5.0.3]
• org.testcontainers:postgresql 1.21.4
• org.testcontainers:junit-jupiter 1.21.4
• org.testcontainers:testcontainers 1.21.4 → [Updates: 2.0.5]
• org.skyscreamer:jsonassert 1.5.3
• org.junit.jupiter:junit-jupiter 6.0.0 → [Updates: 6.1.1]
• net.serenity-bdd:serenity-rest-assured 4.2.34 → [Updates: 4.3.4, 5.3.10]
• net.serenity-bdd:serenity-junit 4.2.34 → [Updates: 4.3.4, 5.3.10]
• org.junit.jupiter:junit-jupiter-api 6.0.0 → [Updates: 6.1.1]
• org.junit.jupiter:junit-jupiter-engine 6.0.0 → [Updates: 6.1.1]
• org.junit.jupiter:junit-jupiter-params 6.0.0 → [Updates: 6.1.1]
• org.junit.platform:junit-platform-commons 6.0.0 → [Updates: 6.1.1]
• org.junit.platform:junit-platform-engine 6.0.0 → [Updates: 6.1.1]
• au.com.dius.pact.consumer:junit5 4.6.17 → [Updates: 4.7.3]
• au.com.dius.pact.provider:junit5 4.6.17 → [Updates: 4.7.3]
• au.com.dius.pact.provider:spring 4.6.17 → [Updates: 4.7.3]
• au.com.dius.pact.provider:junit5spring 4.6.17 → [Updates: 4.7.3]
• org.springframework.cloud:spring-cloud-dependencies 2025.0.0 → [Updates: 2025.1.2]
• org.apache.tomcat.embed:tomcat-embed-core 10.1.56 → [Updates: 10.1.57, 11.0.24]
• org.apache.tomcat.embed:tomcat-embed-el 10.1.56 → [Updates: 10.1.57, 11.0.24]
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.56 → [Updates: 10.1.57, 11.0.24]
• commons-io:commons-io 2.22.0
• org.springframework:spring-aop 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-aspects 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-beans 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-context 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-context-support 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-core 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-expression 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-jcl 6.2.19
• org.springframework:spring-jdbc 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-orm 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-tx 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-web 6.2.19 → [Updates: 7.0.8]
• org.springframework:spring-webmvc 6.2.19 → [Updates: 7.0.8]
• com.fasterxml.jackson.core:jackson-core 2.22.0 → [Updates: 2.22.1]
• com.fasterxml.jackson.core:jackson-databind 2.22.0 → [Updates: 2.22.1]
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.22.0 → [Updates: 2.22.1]
• com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.22.0 → [Updates: 2.22.1]
• com.fasterxml.jackson.dataformat:jackson-dataformat-toml 2.22.0 → [Updates: 2.22.1]
• com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.22.0 → [Updates: 2.22.1]
• com.fasterxml.jackson.module:jackson-module-parameter-names 2.22.0 → [Updates: 2.22.1]

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.3 → [Updates: 8.14.5, 9.6.1]

helm-values (1)

charts/rd-location-ref-api/values.yaml

helmv3 (1)

charts/rd-location-ref-api/Chart.yaml (1)

• java 5.3.0

renovate-config (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf

infrastructure/terraform.tf (2)

• azuread 3.6.0 → [Updates: 3.9.0]
• azurerm ~> 4.0

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.13.4 → [Updates: 1.15.8]

---

• Check this box to trigger a request for Renovate to run again on this repository