Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency com.github.hmcts.java-logging:logging to v6.1.8
• Update dependency org.junit:junit-bom to v5.11.4
• Update plugin io.spring.dependency-management to v1.1.7
• Update dependency com.google.guava:guava to v33.4.0-jre
• Update dependency gradle to v8.12.1
• Update plugin com.github.ben-manes.versions to v0.52.0
• Update plugin io.freefair.lombok to v8.12.1
• Update dependency org.json:json to v20250107
• Update plugin org.owasp.dependencycheck to v12
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update plugin org.owasp.dependencycheck to v11.1.1
• Update spring core to v6.2.3 (org.springframework:spring-webmvc, org.springframework:spring-web)
• Update dependency checkstyle to v10.21.2
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5.3.0
• Update dependency hashicorp/terraform to v1.10.5
• Update dependency microsoft/ApplicationInsights-Java to v3.7.0
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.4
• Update log4j2 monorepo to v2.24.3 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update plugin org.springframework.boot to v3.4.2
• Update dependency pmd to v7
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• actions/setup-java v4

.github/workflows/codeql.yml

• actions/checkout v4
• github/codeql-action v3
• actions/setup-java v4
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/publish-openapi.yaml

• hmcts/workflow-publish-openapi-spec v1

gradle

build.gradle

• io.freefair.lombok 8.11
• io.spring.dependency-management 1.1.6
• org.springframework.boot 3.2.7
• org.owasp.dependencycheck 11.1.0
• com.github.ben-manes.versions 0.51.0
• org.sonarqube 6.0.1.5171
• checkstyle 10.12.5
• pmd 6.55.0
• org.springframework.cloud:spring-cloud-starter-openfeign 4.2.0
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.2.0
• io.github.openfeign:feign-jackson 13.5
• io.github.openfeign:feign-httpclient 13.5
• org.json:json 20240303
• com.google.guava:guava 33.3.1-jre
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0
• com.github.hmcts.java-logging:logging 6.1.7
• com.github.hmcts:ccd-client 5.0.3
• com.github.hmcts:service-auth-provider-java-client 5.2.0
• com.github.hmcts:idam-java-client 3.0.3
• org.apache.logging.log4j:log4j-api 2.22.0
• org.apache.logging.log4j:log4j-to-slf4j 2.22.0
• org.junit:junit-bom 5.11.3
• org.springframework:spring-web 6.2.0
• org.springframework:spring-webmvc 6.2.0
• com.fasterxml.jackson.core:jackson-databind 2.18.2
• com.fasterxml.jackson.core:jackson-core 2.18.2
• com.fasterxml.jackson.core:jackson-annotations 2.18.2

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.11.1

helm-values

charts/sscs-cron-trigger/values.yaml

helmv3

charts/sscs-cron-trigger/Chart.yaml

• job 2.1.2

regex

Dockerfile

• microsoft/ApplicationInsights-Java 3.4.18

Dockerfile

• microsoft/ApplicationInsights-Java 3.4.18

terraform

infrastructure/main.tf

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.9.8

---

• Check this box to trigger a request for Renovate to run again on this repository