Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• Update Terraform azuread to v3
• Update actions/cache action to v4
• Update actions/checkout action to v4
• Update dependency com.github.hmcts:befta-fw to v20
• Update dependency com.github.hmcts:ccd-test-definitions to v8
• Update dependency com.google.guava:guava to v33
• Update dependency org.flywaydb:flyway-core to v10
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2023
• Update plugin org.owasp.dependencycheck to v11
• Update postgres Docker tag to v17
• Update stefanzweifel/git-auto-commit-action action to v5
• Update tibdex/github-app-token action to v2
• Update versions.tomcatEmbedded to v11 (major) (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-core)
• 🔐 Create all pending approval PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update All patch-minor dependencies (azurerm, gradle, hashicorp/terraform, java, microsoft/ApplicationInsights-Java, org.postgresql:postgresql, com.github.hmcts:fortify-client, com.sun.xml.bind:jaxb-osgi, com.github.hmcts:befta-fw, com.github.hmcts:ccd-test-definitions, org.springframework.cloud:spring-cloud-starter-contract-stub-runner, org.apache.groovy:groovy, commons-io:commons-io, commons-validator:commons-validator, org.apache.commons:commons-lang3, org.flywaydb:flyway-core, com.nimbusds:nimbus-jose-jwt, net.minidev:json-smart, org.hibernate:hibernate-envers, io.jsonwebtoken:jjwt, com.github.ben-manes.caffeine:caffeine, com.github.hmcts:idam-java-client, com.github.hmcts:service-auth-provider-java-client, org.springdoc:springdoc-openapi-starter-webmvc-api, org.springdoc:springdoc-openapi-starter-webmvc-ui, org.springdoc:springdoc-openapi-starter-common, org.springframework.boot:spring-boot-starter-oauth2-resource-server, org.springframework.boot:spring-boot-starter-oauth2-client, org.bouncycastle:bcpkix-jdk15to18, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-core, org.testcontainers:postgresql, org.springframework.cloud:spring-cloud-dependencies, ch.qos.logback:logback-core, ch.qos.logback:logback-classic, com.microsoft.azure:applicationinsights-spring-boot-starter, com.microsoft.azure:applicationinsights-logging-logback, com.github.hmcts.java-logging:logging, org.mapstruct:mapstruct-processor, org.mapstruct:mapstruct, org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api, org.owasp.dependencycheck, org.springframework.boot, io.spring.dependency-management)

Detected dependencies

docker-compose

docker-compose.yml

• postgres 15

dockerfile

Dockerfile

• eclipse-temurin 21
• hmctspublic.azurecr.io/base/java 21-distroless

github-actions

.github/workflows/dependency-check.yml

• tibdex/github-app-token v1
• actions/checkout v3
• actions/cache v3
• actions/setup-java v4
• stefanzweifel/git-auto-commit-action v4

.github/workflows/dummy.yml

• actions/checkout v2
• stefanzweifel/git-auto-commit-action v4

.github/workflows/swagger.yml

• actions/checkout v1
• actions/cache v1
• actions/setup-java v4

gradle

build.gradle

• io.spring.dependency-management 1.1.0
• org.springframework.boot 3.1.0
• org.owasp.dependencycheck 8.2.1
• com.github.ben-manes.versions 0.51.0
• com.github.spacialcircumstances.gradle-cucumber-reporting 0.1.25
• org.sonarqube 5.1.0.4882
• uk.gov.hmcts.java 0.12.63
• org.bouncycastle:bcpkix-jdk15to18 1.77
• com.google.guava:guava 30.1.1-jre
• org.springframework.cloud:spring-cloud-dependencies 2022.0.3
• org.junit.jupiter:junit-jupiter-api 5.9.3
• org.junit.jupiter:junit-jupiter-engine 5.9.3
• org.junit.jupiter:junit-jupiter-params 5.9.3
• org.junit.platform:junit-platform-commons 1.9.3
• org.junit.platform:junit-platform-engine 1.9.3
• org.springframework.boot:spring-boot-starter-oauth2-client 3.1.0
• org.springframework.boot:spring-boot-starter-oauth2-resource-server 3.1.0
• org.springdoc:springdoc-openapi-starter-common 2.1.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.1.0
• org.springdoc:springdoc-openapi-starter-webmvc-api 2.1.0
• com.github.hmcts.java-logging:logging 6.0.1
• com.microsoft.azure:applicationinsights-logging-logback 2.4.1
• com.microsoft.azure:applicationinsights-spring-boot-starter 2.4.1
• com.github.hmcts:service-auth-provider-java-client 5.1.0
• com.github.hmcts:idam-java-client 3.0.1
• com.github.ben-manes.caffeine:caffeine 3.1.6
• com.auth0:java-jwt 4.4.0
• io.jsonwebtoken:jjwt 0.9.1
• org.hibernate:hibernate-envers 6.2.4.Final
• net.minidev:json-smart 2.4.11
• ch.qos.logback:logback-classic 1.4.7
• ch.qos.logback:logback-core 1.4.7
• org.apache.tomcat.embed:tomcat-embed-core 10.1.26
• org.apache.tomcat.embed:tomcat-embed-el 10.1.26
• org.apache.tomcat.embed:tomcat-embed-websocket 10.1.26
• com.nimbusds:nimbus-jose-jwt 9.31
• org.flywaydb:flyway-core 9.19.1
• org.apache.commons:commons-lang3 3.12.0
• commons-validator:commons-validator 1.7
• commons-fileupload:commons-fileupload 1.5
• commons-io:commons-io 2.12.0
• org.projectlombok:lombok 1.18.34
• org.mapstruct:mapstruct 1.5.5.Final
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.mapstruct:mapstruct-processor 1.5.5.Final
• com.google.code.findbugs:jsr305 3.0.2
• org.apache.groovy:groovy 4.0.12
• org.springframework.cloud:spring-cloud-starter-contract-stub-runner 4.0.3
• org.testcontainers:postgresql 1.20.2
• com.github.hmcts:ccd-test-definitions 7.19.12
• com.github.hmcts:befta-fw 8.7.11
• commons-lang:commons-lang 2.6
• com.sun.xml.bind:jaxb-osgi 4.0.2
• com.github.hmcts:fortify-client 1.3.0
• org.postgresql:postgresql 42.6.1
• org.dom4j:dom4j 2.1.4
• xerces:xercesImpl 2.12.2

gradle/suppress.gradle

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.10.2

helm-values

charts/cpo-case-payment-orders-api/values.yaml

helmv3

charts/cpo-case-payment-orders-api/Chart.yaml

• java 5.2.0

regex

Dockerfile

• microsoft/ApplicationInsights-Java 3.4.13

terraform

infrastructure/main.tf

• github.com/hmcts/terraform-module-application-insights 4.x

infrastructure/state.tf

• azuread 2.53.1
• azurerm ~> 4.0.0

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.7.3

---

• Check this box to trigger a request for Renovate to run again on this repository