Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency com.typesafe:config to v1.4.9
• Update spring boot to v3.5.15
• Update spring cloud (org.springframework.cloud:spring-cloud-contract-wiremock, org.springframework.cloud:spring-cloud-starter-openfeign)
• Update dependency com.github.hmcts:idam-java-client to v4
• Update dependency com.github.hmcts:service-auth-provider-java-client to v6
• Update dependency io.rest-assured:rest-assured to v6
• Update dependency io.vavr:vavr to v1
• Update dependency net.logstash.logback:logstash-logback-encoder to v9
• Update dependency org.checkerframework:checker-qual to v4
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update flyway to v12 (org.flywaydb:flyway-core, org.flywaydb.flyway, org.flywaydb:flyway-database-postgresql)
• Update plugin org.sonarqube to v7
• Update shedlock monorepo to v7 (net.javacrumbs.shedlock:shedlock-provider-jdbc, net.javacrumbs.shedlock:shedlock-spring)
• Update spring boot to v4
• Update spring cloud to v5 (org.springframework.cloud:spring-cloud-contract-wiremock, org.springframework.cloud:spring-cloud-starter-openfeign)
• Update versions.reformLogging to v8
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update Terraform azurerm to v4.77.0
• Update terraform monorepo to v1.15.6

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update azure-sdk-for-java monorepo (com.azure:azure-messaging-servicebus, com.azure:azure-storage-blob)
• Update Gradle to v8.14.5
• Update plugin org.owasp.dependencycheck to v12.2.2
• Update servicebus Docker tag to v1.2.2
• Update dependency com.github.hmcts:ccd-case-document-am-client to v1.60.0
• Update plugin com.github.ben-manes.versions to v0.54.0
• Update dependency checkstyle to v13
• Update Gradle to v9
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (2)

docker/database/Dockerfile (1)

• hmctsprod.azurecr.io/imported/postgres 17-alpine

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (2)

.github/workflows/ci.yml (3)

• actions/checkout v6
• actions/cache v5
• actions/setup-java v5

.github/workflows/publish-openapi.yaml (1)

• hmcts/workflow-publish-openapi-spec v1

gradle (2)

build.gradle (45)

• org.postgresql:postgresql 42.7.11
• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 12.8.1]
• io.spring.dependency-management 1.1.7
• org.flywaydb.flyway 11.20.3 → [Updates: 12.8.1]
• org.springframework.boot 3.5.14 → [Updates: 3.5.15, 4.1.0]
• org.owasp.dependencycheck 12.2.1 → [Updates: 12.2.2]
• com.github.ben-manes.versions 0.53.0 → [Updates: 0.54.0]
• org.sonarqube 6.3.1.5724 → [Updates: 7.3.1.8318]
• checkstyle 9.3 → [Updates: 13.5.0]
• pmd 7.25.0
• org.flywaydb:flyway-core 11.20.3 → [Updates: 12.8.1]
• net.javacrumbs.shedlock:shedlock-spring 6.10.0 → [Updates: 7.7.0]
• net.javacrumbs.shedlock:shedlock-provider-jdbc 6.10.0 → [Updates: 7.7.0]
• com.azure:azure-storage-blob 12.30.1 → [Updates: 12.35.0]
• com.azure:azure-messaging-servicebus 7.17.17 → [Updates: 7.17.18]
• com.github.java-json-tools:json-schema-validator 2.2.14
• org.apache.httpcomponents.client5:httpclient5 5.6.1
• org.apache.httpcomponents.core5:httpcore5 5.4.2
• org.apache.httpcomponents.core5:httpcore5-h2 5.4.2
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 → [Updates: 3.0.3]
• com.github.hmcts.java-logging:logging 6.1.9 → [Updates: 8.0.0]
• com.github.hmcts.java-logging:logging-appinsights 6.1.9
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• com.github.hmcts:service-auth-provider-java-client 5.3.4 → [Updates: 6.0.0]
• com.github.hmcts:idam-java-client 3.0.5 → [Updates: 4.0.0]
• com.github.hmcts:ccd-case-document-am-client 1.59.2 → [Updates: 1.60.0]
• org.apache.commons:commons-lang3 3.20.0
• commons-io:commons-io 2.22.0
• io.vavr:vavr 0.11.0 → [Updates: 1.0.1]
• org.apache.commons:commons-csv 1.14.1
• com.github.ben-manes.caffeine:caffeine 3.2.4
• com.launchdarkly:launchdarkly-java-server-sdk 7.14.0
• org.checkerframework:checker-qual 3.55.1 → [Updates: 4.2.0]
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.2 → [Updates: 4.3.3, 5.0.2]
• com.github.hmcts:fortify-client 1.4.10
• org.apiguardian:apiguardian-api 1.1.2
• com.jayway.awaitility:awaitility 1.7.0
• io.github.netmikey.logunit:logunit-core 2.0.0
• com.icegreen:greenmail 2.1.8
• io.github.netmikey.logunit:logunit-logback 2.0.0
• org.springframework.cloud:spring-cloud-contract-wiremock 4.3.3 → [Updates: 4.3.4, 5.0.3]
• org.testcontainers:postgresql 1.21.4
• org.testcontainers:junit-jupiter 1.21.4
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.0]
• com.typesafe:config 1.4.8 → [Updates: 1.4.9]

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 8.14.5, 9.5.1]

helm-values (1)

charts/bulk-scan-processor/values.yaml

helmv3 (1)

charts/bulk-scan-processor/Chart.yaml (3)

• java 5.3.0
• servicebus 1.2.1 → [Updates: 1.2.2]
• blobstorage 2.1.1

renovate-config (1)

.github/renovate.json

terraform (4)

infrastructure/provider.tf

infrastructure/state.tf (2)

• azuread >= 2.38.0
• azurerm 4.44.0 → [Updates: 4.77.0]

infrastructure/tf-db-flexible.tf

infrastructure/versions.tf (1)

• hashicorp/terraform >= 0.13

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.13.2 → [Updates: 1.15.6]

---

• Check this box to trigger a request for Renovate to run again on this repository