Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	com.atlassian.oai:swagger-request-validator-core
gradle	org.hibernate.orm:hibernate-jpamodelgen
gradle	org.hibernate:hibernate-spatial

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency hashicorp/terraform to v1.15.8
• Update dependency org.postgresql:postgresql to v42.7.13
• Update logback monorepo to v1.5.38 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update netty monorepo to v4.2.16.Final (io.netty:netty-transport-native-unix-common, io.netty:netty-transport-native-kqueue, io.netty:netty-transport-native-epoll, io.netty:netty-transport-classes-kqueue, io.netty:netty-transport-classes-epoll, io.netty:netty-transport, io.netty:netty-resolver-dns-native-macos, io.netty:netty-resolver-dns-classes-macos, io.netty:netty-resolver-dns, io.netty:netty-resolver, io.netty:netty-handler-proxy, io.netty:netty-handler, io.netty:netty-common, io.netty:netty-codec-socks, io.netty:netty-codec-http2, io.netty:netty-codec-http, io.netty:netty-codec-dns, io.netty:netty-codec, io.netty:netty-buffer)
• Update tomcatEmbedVersion to v11.0.24 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)
• Update flyway to v12 (org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update github/codeql-action action to v4
• Update Gradle to v9
• Update hibernate-orm monorepo to v7 (org.hibernate.orm:hibernate-jpamodelgen, org.hibernate.orm:hibernate-ant)
• Update mcr.microsoft.com/openjdk/jdk Docker tag to v25
• Update plugin io.freefair.lombok to v9
• Update plugin org.gradle.toolchains.foojay-resolver-convention to v1
• Update plugin org.sonarqube to v7
• Update plugin org.springframework.boot to v4
• Update postgres Docker tag to v18
• Update shedlock monorepo to v7 (net.javacrumbs.shedlock:shedlock-provider-jdbc-template, net.javacrumbs.shedlock:shedlock-spring)
• Update spring cloud to v5 (org.springframework.cloud:spring-cloud-starter-contract-stub-runner, org.springframework.cloud:spring-cloud-starter-openfeign)
• Update spring security to v7 (org.springframework.security:spring-security-test, org.springframework.security:spring-security-oauth2-authorization-server)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.17

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update plugin io.freefair.lombok to v8.14.4
• Update plugin org.openapi.generator to v7.23.0
• Update dependency com.atlassian.oai:swagger-request-validator-core to v3
• Update dependency org.junit.jupiter:junit-jupiter to v6
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update dependency org.springframework:spring-webflux to v7
• Update dependency org.springframework.data:spring-data-envers to v4
• Update dependency org.testcontainers:testcontainers to v2
• Update dependency uk.gov.service.notify:notifications-java-client to v6
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency pmd to v7.26.0
• Update Terraform azapi to ~> 2.10.0
• Update actions/checkout action to v7
• Update actions/github-script action to v9
• Update actions/setup-java action to v5
• Update dependency org.hibernate:hibernate-spatial to v7

Detected Dependencies

docker-compose (2)

docker-compose-local.yml (2)

• postgres 16-alpine → [Updates: 18-alpine]
• redis 8.8.0-alpine

docker-compose.yml

dockerfile (1)

Dockerfile (2)

• mcr.microsoft.com/openjdk/jdk 21-azurelinux → [Updates: 25-azurelinux]
• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (7)

.github/workflows/ado_artifacts_build.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/setup-java v4 → [Updates: v5]

.github/workflows/auto-label-enable-keep-helm.yml (1)

• actions/github-script v6 → [Updates: v9]

.github/workflows/ci.yml (2)

• actions/checkout v4 → [Updates: v7]
• actions/setup-java v4 → [Updates: v5]

.github/workflows/close-pr.yml

.github/workflows/codeql.yml (5)

• actions/checkout v4 → [Updates: v7]
• github/codeql-action v3 → [Updates: v4]
• actions/setup-java v4 → [Updates: v5]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]

.github/workflows/flyway-dupe-checker.yml (1)

• actions/checkout v4 → [Updates: v7]

.github/workflows/on-pr.yml

gradle (3)

build.gradle (92)

• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 12.11.0]
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.16 → [Updates: 4.1.0]
• org.owasp.dependencycheck 12.2.2
• com.github.ben-manes.versions 0.54.0
• org.sonarqube 6.3.1.5724 → [Updates: 7.3.1.8318]
• io.freefair.lombok 8.14 → [Updates: 8.14.4, 9.5.0]
• org.openapi.generator 7.13.0 → [Updates: 7.23.0]
• org.flywaydb.flyway 11.20.3 → [Updates: 12.11.0]
• com.dorongold.task-tree 4.0.1
• jacoco 0.8.15
• pmd 7.16.0 → [Updates: 7.26.0]
• org.springframework:spring-webflux 6.2.19 → [Updates: 7.0.8]
• org.springframework.security:spring-security-oauth2-authorization-server 1.5.8 → [Updates: 7.1.0]
• commons-io:commons-io 2.22.0
• org.apache.commons:commons-collections4 4.5.0
• org.apache.commons:commons-lang3 3.20.0
• org.apache.commons:commons-csv 1.14.1
• commons-validator:commons-validator 1.10.1
• javax.annotation:javax.annotation-api 1.3.2
• javax.validation:validation-api 2.0.1.Final
• javax.servlet:servlet-api 2.5
• org.openapitools:jackson-databind-nullable 0.2.10
• org.zalando:problem-spring-web-starter 0.29.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.16 → [Updates: 2.8.17, 3.0.3]
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.3 → [Updates: 5.0.2]
• org.springframework.retry:spring-retry 2.0.13
• net.javacrumbs.shedlock:shedlock-spring 6.10.0 → [Updates: 7.7.0]
• net.javacrumbs.shedlock:shedlock-provider-jdbc-template 6.10.0 → [Updates: 7.7.0]
• com.github.hmcts.java-logging:logging 8.0.0
• org.apache.logging.log4j:log4j-api 2.26.1
• org.apache.logging.log4j:log4j-to-slf4j 2.26.1
• org.apache.commons:commons-exec 1.6.0
• org.apache.commons:commons-text 1.15.0
• org.apache.tomcat.embed:tomcat-embed-core 11.0.23 → [Updates: 11.0.24]
• org.apache.tomcat.embed:tomcat-embed-websocket 11.0.23 → [Updates: 11.0.24]
• com.azure:azure-sdk-bom 1.3.7
• org.flywaydb:flyway-core 11.20.3 → [Updates: 12.11.0]
• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 12.11.0]
• io.hypersistence:hypersistence-utils-hibernate-63 3.15.4
• org.postgresql:postgresql 42.7.12 → [Updates: 42.7.13]
• uk.gov.service.notify:notifications-java-client 5.2.1-RELEASE → [Updates: 6.0.1-RELEASE]
• ch.qos.logback:logback-classic 1.5.37 → [Updates: 1.5.38]
• ch.qos.logback:logback-core 1.5.37 → [Updates: 1.5.38]
• io.vavr:vavr 1.0.1
• com.google.guava:guava 33.6.0-jre
• org.mapstruct:mapstruct 1.6.3
• org.apache.tika:tika-core 3.3.1
• org.springframework.data:spring-data-envers 3.5.13 → [Updates: 4.1.0]
• org.hibernate.orm:hibernate-ant 6.6.54.Final → [Updates: 7.4.4.Final]
• org.hibernate:hibernate-spatial 6.6.54.Final → [Updates: 7.4.4.Final]
• com.querydsl:querydsl-core 5.1.0
• com.querydsl:querydsl-jpa 5.1.0
• org.mapstruct:mapstruct-processor 1.6.3
• org.hibernate.orm:hibernate-jpamodelgen 6.6.54.Final → [Updates: 7.4.4.Final]
• com.querydsl:querydsl-apt 5.1.0
• io.github.openfeign:feign-hc5 13.13
• org.testcontainers:postgresql 1.21.4
• com.h2database:h2 2.4.240
• org.postgresql:postgresql 42.7.12 → [Updates: 42.7.13]
• org.mockito:mockito-inline 5.2.0
• org.springframework.cloud:spring-cloud-starter-contract-stub-runner 4.3.4 → [Updates: 5.0.3]
• org.junit.jupiter:junit-jupiter 5.14.4 → [Updates: 6.1.1]
• io.projectreactor:reactor-test 3.8.6
• org.springframework.security:spring-security-test 6.5.11 → [Updates: 7.1.0]
• org.awaitility:awaitility 4.3.0
• org.awaitility:awaitility-proxy 3.1.6
• io.github.hakky54:logcaptor 2.12.6
• org.testcontainers:testcontainers 1.21.4 → [Updates: 2.0.5]
• org.jeasy:easy-random-core 5.0.0
• com.atlassian.oai:swagger-request-validator-core 2.46.1 → [Updates: 3.0.0]
• io.netty:netty-buffer 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-codec 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-codec-dns 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-codec-http 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-codec-http2 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-codec-socks 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-common 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-handler 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-handler-proxy 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-resolver 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-resolver-dns 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-resolver-dns-classes-macos 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-resolver-dns-native-macos 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-transport 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-transport-classes-epoll 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-transport-classes-kqueue 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-transport-native-epoll 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-transport-native-kqueue 4.2.15.Final → [Updates: 4.2.16.Final]
• io.netty:netty-transport-native-unix-common 4.2.15.Final → [Updates: 4.2.16.Final]
• io.projectreactor.netty:reactor-netty-http 1.3.6
• io.projectreactor.netty:reactor-netty-core 1.3.6

gradle.properties

settings.gradle (1)

• org.gradle.toolchains.foojay-resolver-convention 0.10.0 → [Updates: 1.0.0]

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.5 → [Updates: 9.6.1]

helm-values (1)

charts/darts-api/values.yaml

helmv3 (1)

charts/darts-api/Chart.yaml (3)

• java 6.0.0
• function 2.6.3
• postgresql 1.1.1

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.9

renovate-config (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf (1)

• github.com/hmcts/cnp-module-storage-account 4.x

infrastructure/providers.tf (3)

• azapi ~> 2.5.0 → [Updates: ~> 2.10.0]
• azuread 3.9.0
• azurerm 4.80

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.15.7 → [Updates: 1.15.8]

---

• Check this box to trigger a request for Renovate to run again on this repository