Renovate Combined Pull Request (#888)

* Update spring security to v5.8.15

* Update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations to v2.9.0

* Update plugin org.owasp.dependencycheck to v11

* Update dependency pmd to v7.7.0

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: github-actions <[email protected]>
Co-authored-by: mikebrownccd <[email protected]>

build.gradle

@@ -21,7 +21,7 @@ plugins {
     id 'java'
     id 'com.github.ben-manes.versions' version '0.51.0'
     id 'org.sonarqube' version '5.1.0.4882'
-    id 'org.owasp.dependencycheck' version '10.0.3'
+    id 'org.owasp.dependencycheck' version '11.0.0'
 }
 
 apply plugin: "info.solidsoft.pitest"
@@ -44,7 +44,7 @@ def versions = [
         springBoot     : '2.7.18',
         springHystrix  : '2.1.1.RELEASE',
         spring         : '5.3.39',
-        springSecurity : '5.8.14',
+        springSecurity : '5.8.15',
         tomcat         : '9.0.96',
         rest_assured   : '3.3.0',
         feign_jackson  : '13.5',
@@ -58,7 +58,7 @@ mainClassName = 'uk.gov.hmcts.reform.roleassignmentrefresh.RoleAssignmentRefresh
 def jarName = 'am-role-assignment-refresh-batch.jar'
 
 pmd {
-    toolVersion = '7.6.0'
+    toolVersion = '7.7.0'
     sourceSets = []
 }
 
@@ -265,7 +265,7 @@ dependencies {
     implementation group: 'org.springframework', name: 'spring-webmvc', version: versions.spring
     implementation group: 'commons-fileupload', name: 'commons-fileupload', version: '1.5'
 
-    implementation group: 'io.opentelemetry.instrumentation', name: 'opentelemetry-instrumentation-annotations', version: '2.8.0'
+    implementation group: 'io.opentelemetry.instrumentation', name: 'opentelemetry-instrumentation-annotations', version: '2.9.0'
 
     implementation group: 'com.microsoft.azure', name: 'applicationinsights-spring-boot-starter', version: '2.6.4'