Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
gradle	org.hibernate.orm:hibernate-jpamodelgen

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency com.microsoft.azure:applicationinsights-core to v3.7.9
• Update dependency microsoft/ApplicationInsights-Java to v3.7.9
• Update job Docker tag to v2.2.1
• Update spring cloud to v4.3.3 (org.springframework.cloud:spring-cloud-starter-loadbalancer, org.springframework.cloud:spring-cloud-starter-openfeign)
• Update spring security to v6.5.11 (org.springframework.security:spring-security-web, org.springframework.security:spring-security-test)
• Update dependency com.auth0:java-jwt to v4.6.0
• Update dependency com.microsoft.graph:microsoft-graph to v6.67.0
• Update dependency io.hypersistence:hypersistence-utils-hibernate-63 to v3.15.4
• Update dependency org.apache.commons:commons-exec to v1.6.0
• Update dependency pmd to v7.26.0
• Update feign monorepo to v13.13 (io.github.openfeign:feign-jackson, io.github.openfeign:feign-slf4j, io.github.openfeign:feign-gson)
• Update Gradle to v9.6.1
• Update jackson monorepo (com.fasterxml.jackson.core:jackson-annotations, com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-databind)
• Update plugin org.flywaydb.flyway to v12.11.0
• Update postgres Docker tag to v18.4
• Update Terraform azurerm to v4.81.0
• Update actions/checkout action to v7
• Update actions/setup-node action to v7
• Update dependency checkstyle to v13
• Update dependency com.azure.spring:spring-cloud-azure-starter-active-directory to v7
• Update dependency io.rest-assured:rest-assured to v6
• Update dependency node to v24
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update dependency org.springframework.hateoas:spring-hateoas to v3
• Update dependency org.testcontainers:testcontainers-bom to v2
• Update dependency uk.gov.service.notify:notifications-java-client to v6
• Update flyway to v13 (org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update hmctsprod.azurecr.io/base/java Docker tag to v25
• Update junit-framework monorepo to v6 (org.junit.platform:junit-platform-launcher, org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update plugin org.sonarqube to v7
• Update plugin org.springframework.boot to v4
• Update spring cloud to v5 (org.springframework.cloud:spring-cloud-starter-loadbalancer, org.springframework.cloud:spring-cloud-starter-openfeign)
• Update spring security to v7 (org.springframework.security:spring-security-web, org.springframework.security:spring-security-test)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update azure-sdk-for-java monorepo (com.azure:azure-identity, com.azure:azure-core-serializer-json-jackson, com.azure:azure-storage-blob, com.azure.spring:spring-cloud-azure-starter-active-directory)
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.17

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency org.hibernate.orm:hibernate-jpamodelgen to v6.6.54.Final
• Update dependency org.postgresql:postgresql to v42.7.13
• Update dependency org.springframework.hateoas:spring-hateoas to v2.5.3
• Update junit-framework monorepo (org.junit.platform:junit-platform-launcher, org.junit.platform:junit-platform-engine, org.junit.platform:junit-platform-commons, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update plugin org.owasp.dependencycheck to v12.2.2
• Update spring boot to v3.5.16 (org.springframework.boot:spring-boot-starter-aop, org.springframework.boot)
• Update dependency hashicorp/terraform to v1.15.8
• Update dependency requests to v2.34.2
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency org.hibernate.orm:hibernate-jpamodelgen to v7

Detected Dependencies

docker-compose (1)

docker-compose.yml (1)

• postgres 18.0-alpine → [Updates: 18.4-alpine]

dockerfile (2)

docker/database/Dockerfile (1)

• postgres 18.0-alpine → [Updates: 18.4-alpine]

Dockerfile (2)

• hmctsprod.azurecr.io/imported/eclipse-temurin 21
• hmctsprod.azurecr.io/base/java 21-distroless → [Updates: 25-distroless]

github-actions (3)

.github/workflows/codeql.yml (5)

• actions/checkout v5 → [Updates: v7]
• github/codeql-action v4
• actions/setup-java v5
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/commit-docs-to-cnp-api-repo.yaml (1)

• actions/checkout v5 → [Updates: v7]

.github/workflows/update-openapi-specs.yaml (4)

• actions/checkout v5 → [Updates: v7]
• actions/setup-java v5
• actions/setup-node v6 → [Updates: v7]
• node 22 → [Updates: 24]

gradle (1)

build.gradle (52)

• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 13.0.0]
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.6 → [Updates: 3.5.16, 4.1.0]
• org.owasp.dependencycheck 12.2.0 → [Updates: 12.2.2]
• com.github.ben-manes.versions 0.54.0
• org.sonarqube 6.3.1.5724 → [Updates: 7.3.1.8318]
• io.freefair.lombok 9.5.0
• org.flywaydb.flyway 12.7.0 → [Updates: 12.11.0, 13.0.0]
• info.solidsoft.pitest 1.19.0
• checkstyle 11.1.0 → [Updates: 13.8.0]
• pmd 7.17.0 → [Updates: 7.26.0]
• org.junit.jupiter:junit-jupiter-api 5.14.2 → [Updates: 5.14.4, 6.1.2]
• org.junit.jupiter:junit-jupiter-engine 5.14.2 → [Updates: 5.14.4, 6.1.2]
• org.junit.jupiter:junit-jupiter-params 5.14.2 → [Updates: 5.14.4, 6.1.2]
• org.junit.platform:junit-platform-commons 1.14.2 → [Updates: 1.14.4, 6.1.2]
• org.junit.platform:junit-platform-engine 1.14.2 → [Updates: 1.14.4, 6.1.2]
• org.junit.platform:junit-platform-launcher 1.14.2 → [Updates: 1.14.4, 6.1.2]
• org.testcontainers:testcontainers-bom 1.21.4 → [Updates: 2.0.5]
• com.microsoft.azure:applicationinsights-core 3.7.8 → [Updates: 3.7.9]
• org.springframework.boot:spring-boot-starter-aop 3.5.14 → [Updates: 3.5.16]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.15 → [Updates: 2.8.17, 3.0.3]
• org.springframework.hateoas:spring-hateoas 2.5.1 → [Updates: 2.5.3, 3.1.1]
• com.azure.spring:spring-cloud-azure-starter-active-directory 6.3.0 → [Updates: 6.4.0, 7.3.0]
• org.apache.commons:commons-exec 1.5.0 → [Updates: 1.6.0]
• org.flywaydb:flyway-core 11.20.3 → [Updates: 13.0.0]
• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 13.0.0]
• org.postgresql:postgresql 42.7.10 → [Updates: 42.7.13]
• io.hypersistence:hypersistence-utils-hibernate-63 3.11.0 → [Updates: 3.15.4]
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.1]
• io.github.openfeign:feign-gson 13.6 → [Updates: 13.13]
• io.github.openfeign:feign-slf4j 13.6 → [Updates: 13.13]
• io.github.openfeign:feign-jackson 13.6 → [Updates: 13.13]
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.2 → [Updates: 4.3.3, 5.0.2]
• org.springframework.cloud:spring-cloud-starter-loadbalancer 4.3.2 → [Updates: 4.3.3, 5.0.2]
• com.fasterxml.jackson.core:jackson-databind 2.20.0 → [Updates: 2.22.1]
• com.fasterxml.jackson.core:jackson-core 2.20.0 → [Updates: 2.22.1]
• com.fasterxml.jackson.core:jackson-annotations 2.20 → [Updates: 2.22]
• com.opencsv:opencsv 5.12.0
• com.azure:azure-storage-blob 12.33.3 → [Updates: 12.35.0]
• com.azure:azure-core-serializer-json-jackson 1.6.4 → [Updates: 1.6.5]
• com.azure.resourcemanager:azure-resourcemanager-mediaservices 2.4.0
• org.testcontainers:postgresql 1.21.4
• com.auth0:java-jwt 4.5.2 → [Updates: 4.6.0]
• uk.gov.service.notify:notifications-java-client 5.2.1-RELEASE → [Updates: 6.0.1-RELEASE]
• com.microsoft.graph:microsoft-graph 6.24.0 → [Updates: 6.67.0]
• com.azure:azure-identity 1.18.3 → [Updates: 1.18.4]
• org.jsoup:jsoup 1.22.2
• org.hibernate.orm:hibernate-jpamodelgen 6.6.49.Final → [Updates: 6.6.54.Final, 7.4.5.Final]
• com.github.hmcts:fortify-client 1.4.10
• org.springframework.security:spring-security-test 6.5.8 → [Updates: 6.5.11, 7.1.0]
• org.springframework.security:spring-security-web 6.5.8 → [Updates: 6.5.11, 7.1.0]
• org.testcontainers:junit-jupiter 1.21.4

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.0.0 → [Updates: 9.6.1]

helm-values (1)

charts/pre-api/values.yaml

helmv3 (1)

charts/pre-api/Chart.yaml (2)

• java 5.3.0
• job 2.2.0 → [Updates: 2.2.1]

pip_requirements (1)

scripts/requirements.txt (1)

• requests ==2.33.0 → [Updates: ==2.34.2]

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.8 → [Updates: 3.7.9]

renovate-config (1)

.github/renovate.json

terraform (4)

infrastructure/exception-alert.tf (1)

• pre-api-exception-alert unknown version

infrastructure/liveness-alert.tf (1)

• pre-api-liveness-alert unknown version

infrastructure/main.tf

infrastructure/state.tf (1)

• azurerm 4.21.0 → [Updates: 4.81.0]

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.13.3 → [Updates: 1.15.8]

---

• Check this box to trigger a request for Renovate to run again on this repository