Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update dependency com.github.hmcts:befta-fw to v9.2.7
• Update spring boot to v3.5.15
• Update terraform monorepo to v1.15.6
• Update spring security to v6.5.11 (org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-web, org.springframework.security:spring-security-config, org.springframework.security:spring-security-core)
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update plugin org.owasp.dependencycheck to v12.2.2
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3

---

Warning

Renovate failed to look up the following dependencies: Failed to look up maven package net.jcip:jcip-annotations: no-result, Failed to look up maven package com.github.codacy:codacy-coverage-reporter: no-result.

Files affected: build.gradle

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update plugin info.solidsoft.pitest to v1.19.0
• Update spring cloud to v2025.1.2
• Update dependency com.github.hmcts:service-auth-provider-java-client to v6
• Update Gradle to v9
• Update spring boot to v4
• Update Terraform azuread to v3
• Update tibdex/github-app-token action to v2
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency com.github.hmcts:ccd-test-definitions to v7.27.7-prerelease-CME-537
• Update dependency com.github.hmcts:auth-checker-lib to v3
• Update dependency com.github.hmcts:ccd-test-definitions to v97
• Update spring security to v7 (org.springframework.security:spring-security-crypto, org.springframework.security:spring-security-web, org.springframework.security:spring-security-config, org.springframework.security:spring-security-core)

Detected Dependencies

docker-compose (1)

docker-compose.yml

dockerfile (2)

docker/database/Dockerfile (1)

• postgres 18

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (3)

.github/workflows/scheduled-dummy-commit.yml (3)

• tibdex/github-app-token v1 → [Updates: v2]
• actions/checkout v6
• stefanzweifel/git-auto-commit-action v7

.github/workflows/stale.yml (1)

• actions/stale v10

.github/workflows/swagger.yml (3)

• actions/checkout v6
• actions/cache v5
• actions/setup-java v5

gradle (3)

build.gradle (44)

• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.14 → [Updates: 3.5.15, 4.1.0]
• se.patrikerdes.use-latest-versions 0.2.19
• com.github.ben-manes.versions 0.54.0
• org.sonarqube 7.3.1.8318
• com.github.kt3k.coveralls 2.12.2
• com.github.spacialcircumstances.gradle-cucumber-reporting 0.1.25
• info.solidsoft.pitest 1.15.0 → [Updates: 1.19.0]
• org.owasp.dependencycheck 12.2.1 → [Updates: 12.2.2]
• uk.gov.hmcts.java 0.12.70
• org.springframework.cloud:spring-cloud-dependencies 2025.0.1 → [Updates: 2025.1.2]
• org.bouncycastle:bcprov-jdk18on 1.84
• org.projectlombok:lombok 1.18.46
• com.github.hmcts.java-logging:logging 8.0.0
• net.logstash.logback:logstash-logback-encoder 9.0
• org.slf4j:slf4j-api 2.0.18
• org.slf4j:jcl-over-slf4j 2.0.18
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 → [Updates: 3.0.3]
• org.flywaydb:flyway-core 12.8.1
• org.flywaydb:flyway-database-postgresql 12.8.1
• org.yaml:snakeyaml 2.6
• com.zaxxer:HikariCP 7.0.2
• org.postgresql:postgresql 42.7.11
• com.github.hmcts:auth-checker-lib 2.1.5 → [Updates: 3.2.1]
• com.google.guava:guava 33.6.0-jre
• javax.inject:javax.inject 1
• commons-fileupload:commons-fileupload 1.6.0
• org.apache.commons:commons-lang3 3.20.0
• com.sun.mail:mailapi 2.0.2
• org.apache.httpcomponents:httpclient 4.5.14
• net.jcip:jcip-annotations 1.0
• org.springframework.security:spring-security-core 6.4.13 → [Updates: 6.5.11, 7.1.0]
• org.springframework.security:spring-security-config 6.4.13 → [Updates: 6.5.11, 7.1.0]
• org.springframework.security:spring-security-web 6.4.13 → [Updates: 6.5.11, 7.1.0]
• org.springframework.security:spring-security-crypto 6.4.13 → [Updates: 6.5.11, 7.1.0]
• com.github.hmcts:service-auth-provider-java-client 5.3.4 → [Updates: 6.0.0]
• com.github.codacy:codacy-coverage-reporter 13.13.7
• org.junit.jupiter:junit-jupiter 6.1.0
• org.testcontainers:testcontainers 2.0.5
• org.testcontainers:junit-jupiter 1.21.4
• com.github.hmcts:ccd-test-definitions 7.25.4 → [Updates: 7.27.7-prerelease-CME-537, 97merge]
• com.github.hmcts:befta-fw 9.2.6 → [Updates: 9.2.7]
• com.github.hmcts:fortify-client 1.4.10
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.15.0

gradle/suppress.gradle

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.5 → [Updates: 9.5.1]

helm-values (1)

charts/ccd-user-profile-api/values.yaml

helmv3 (1)

charts/ccd-user-profile-api/Chart.yaml (1)

• java 5.3.0

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.8

renovate-config (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf

infrastructure/state.tf (2)

• azuread 2.53.1 → [Updates: 3.8.0]
• azurerm ~> 4.0

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.15.5 → [Updates: 1.15.6]

---

• Check this box to trigger a request for Renovate to run again on this repository