Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	com.github.tomakehurst:wiremock-jre8-standalone
gradle	org.instancio:instancio

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update plugin com.github.hmcts.rse-cft-lib to v0.19.2289
• Update logback monorepo to v1.6.0 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update plugin com.github.ben-manes.versions to v0.56.0
• Update plugin hmcts.ccd.sdk to v6.29.0
• Update actions/setup-node action to v7
• Update dependency com.github.tomakehurst:wiremock-jre8-standalone to v3
• Update dependency typescript to v7
• Update flyway to v13 (org.flywaydb:flyway-core, org.flywaydb.flyway, org.flywaydb:flyway-database-postgresql)
• Update hmctsprod.azurecr.io/base/java Docker tag to v25
• 🔐 Create all awaiting schedule PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency com.github.hmcts:doc-assembly-client to v2.2.2

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update serenityBddVersion to v5.3.11 (net.serenity-bdd:serenity-junit5, net.serenity-bdd:serenity-core, net.serenity-bdd:serenity-rest-assured)
• Update dependency com.github.hmcts:ccd-case-document-am-client to v1.60.0
• Update dependency com.github.hmcts:core-case-data-store-client to v6
• Update dependency com.github.hmcts:idam-java-client to v4
• Update dependency com.github.hmcts:service-auth-provider-java-client to v6
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update spring boot to v4 (org.springframework.boot:spring-boot-starter-test, org.springframework.boot:spring-boot-starter-data-jpa, org.springframework.boot:spring-boot-starter-oauth2-client, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-json, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot:spring-boot-starter-web, org.springframework.boot)
• Update spring cloud to v5 (org.springframework.cloud:spring-cloud-starter-contract-stub-runner, org.springframework.cloud:spring-cloud-starter-openfeign)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose-wiremock.yml

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless → [Updates: 25-distroless]

github-actions (5)

.github/workflows/ccd-diff.yml (8)

• actions/setup-java v5
• actions/checkout v7
• actions/upload-artifact v7
• actions/setup-node v6 → [Updates: v7]
• actions/download-artifact v8
• actions/download-artifact v8
• actions/upload-artifact v7
• node 24

.github/workflows/codeql.yml (5)

• actions/checkout v7
• github/codeql-action v4
• actions/setup-java v5
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/db-breaking-changes.yml (1)

• actions/checkout v7

.github/workflows/publish-openapi.yaml (1)

• hmcts/workflow-publish-openapi-spec main

.github/workflows/send-team-members.yml

gradle (2)

build.gradle (70)

• org.flywaydb:flyway-database-postgresql 12.11.0 → [Updates: 13.0.0]
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.16 → [Updates: 4.1.0]
• com.github.ben-manes.versions 0.54.0 → [Updates: 0.56.0]
• org.flywaydb.flyway 12.11.0 → [Updates: 13.0.0]
• org.sonarqube 7.3.1.8318
• net.serenity-bdd.serenity-gradle-plugin 5.3.9
• hmcts.ccd.sdk 6.13.0 → [Updates: 6.29.0]
• com.github.hmcts.rse-cft-lib 0.19.2287 → [Updates: 0.19.2289]
• io.freefair.lombok 9.5.0
• au.com.dius.pact 4.7.3
• com.avast.gradle.docker-compose 0.17.21
• uk.gov.hmcts.java 0.12.70
• org.springframework.boot:spring-boot-starter-web 3.5.16 → [Updates: 4.1.0]
• org.springframework.boot:spring-boot-starter-actuator 3.5.16 → [Updates: 4.1.0]
• org.springframework.boot:spring-boot-starter-aop 3.5.16
• org.springframework.boot:spring-boot-starter-json 3.5.16 → [Updates: 4.1.0]
• org.springframework.boot:spring-boot-starter-security 3.5.16 → [Updates: 4.1.0]
• org.springframework.boot:spring-boot-starter-oauth2-client 3.5.16 → [Updates: 4.1.0]
• org.springframework.boot:spring-boot-starter-data-jpa 3.5.16 → [Updates: 4.1.0]
• com.launchdarkly:launchdarkly-java-server-sdk 7.15.0
• org.flywaydb:flyway-core 12.11.0 → [Updates: 13.0.0]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 → [Updates: 3.0.3]
• uk.gov.service.notify:notifications-java-client 6.0.1-RELEASE
• org.modelmapper:modelmapper 3.2.6
• com.github.hmcts.java-logging:logging 8.0.0
• com.github.hmcts:core-case-data-store-client 5.3.0 → [Updates: 6.0.0]
• com.github.hmcts:idam-java-client 3.0.5 → [Updates: 4.0.0]
• com.github.hmcts:doc-assembly-client 2.2.0 → [Updates: 2.2.2]
• com.github.hmcts:ccd-case-document-am-client 1.59.2 → [Updates: 1.60.0]
• com.github.hmcts:send-letter-client 5.1.1
• org.apache.pdfbox:pdfbox 3.0.8
• com.github.hmcts:fees-java-client 0.1.0
• com.github.hmcts:payments-java-client 1.7.0
• org.apache.logging.log4j:log4j-api 2.26.1
• org.apache.logging.log4j:log4j-core 2.26.1
• org.apache.logging.log4j:log4j-to-slf4j 2.26.1
• ch.qos.logback:logback-classic 1.5.38 → [Updates: 1.6.0]
• ch.qos.logback:logback-core 1.5.38 → [Updates: 1.6.0]
• org.postgresql:postgresql 42.7.13
• com.github.hmcts:service-auth-provider-java-client 5.3.5 → [Updates: 6.0.1]
• io.pebbletemplates:pebble 4.1.2
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.3 → [Updates: 5.0.2]
• commons-fileupload:commons-fileupload 1.6.0
• org.apache.commons:commons-lang3 3.20.0
• org.projectlombok:lombok 1.18.46
• com.github.kagkarlsson:db-scheduler-spring-boot-starter 16.12.0
• org.apache.tomcat.embed:tomcat-embed-core 11.0.24
• org.apache.tomcat.embed:tomcat-embed-websocket 11.0.24
• io.rest-assured:rest-assured 6.0.1
• com.github.hmcts:fortify-client 1.4.10
• org.instancio:instancio 5.6.0 → [Updates: 5.6.0]
• com.auth0:java-jwt 4.6.0
• com.github.tomakehurst:wiremock-jre8-standalone 2.35.2 → [Updates: 3.0.1]
• com.github.hmcts:befta-fw 9.2.7
• net.serenity-bdd:serenity-rest-assured 5.3.9 → [Updates: 5.3.11]
• net.serenity-bdd:serenity-core 5.3.9 → [Updates: 5.3.11]
• net.serenity-bdd:serenity-junit5 5.3.9 → [Updates: 5.3.11]
• org.junit.platform:junit-platform-suite-api 6.1.2
• au.com.dius.pact.consumer:junit5 4.7.3
• org.hamcrest:java-hamcrest 2.0.0.0
• org.junit.jupiter:junit-jupiter-api 6.1.2
• org.junit:junit-bom 6.1.2
• org.springframework.security:spring-security-test 7.1.0
• org.springframework.boot:spring-boot-starter-test 3.5.16 → [Updates: 4.1.0]
• org.testcontainers:testcontainers 2.0.5
• org.testcontainers:junit-jupiter 1.21.4
• org.testcontainers:postgresql 1.21.4
• org.springframework.cloud:spring-cloud-starter-contract-stub-runner 4.3.4 → [Updates: 5.0.3]
• org.mockito:mockito-inline 5.2.0

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.6.1

helm-values (1)

charts/pcs-api/values.yaml

helmv3 (1)

charts/pcs-api/Chart.yaml (7)

• java 5.3.0
• servicebus 1.2.2
• ccd 9.2.3
• xui-webapp 1.0.45
• postgresql 1.1.1
• wiremock 0.0.7
• ccd-case-document-am-api 1.7.19

npm (2)

src/e2eTest/package.json (15)

• @axe-core/playwright ^4.10.2
• @hmcts/playwright-common ^1.0.33
• oauth4webapi ^3.5.1
• uuid ^14.0.0
• @playwright/test ^1.58.0
• @types/node ^24.0.0
• allure-commandline ^2.34.1
• allure-js-commons ^3.3.0
• allure-playwright ^3.3.0
• axios ^1.15.0
• simple-git ^3.27.0
• tsx ^4.19.2
• typescript ^6.0.0 → [Updates: ^7.0.0]
• node >=18.0.0
• lighthouse ^13.0.0

tools/postcode-to-epims/package.json (2)

• csv-parse ^7.0.0
• luxon ^3.6.1

nvm (1)

src/e2eTest/.nvmrc (1)

• node 24.18.0

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.9

renovate-config (1)

.github/renovate.json

terraform (2)

infrastructure/database.tf (1)

• github.com/hmcts/terraform-module-postgresql-flexible DTSPO-30107-additional-postgres-admins

infrastructure/main.tf

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.15.8

---

• Check this box to trigger a request for Renovate to run again on this repository