Update All patch-minor dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		patch	8.14.3 → 8.14.4
hashicorp/terraform		minor	1.12.2 → 1.14.8
microsoft/ApplicationInsights-Java		patch	3.7.3 → 3.7.8
org.assertj:assertj-vavr	dependencies	minor	0.4.3 → 0.5.0
com.github.hmcts:ccd-test-definitions	dependencies	minor	7.25.4 → 7.27.7-prerelease-CME-537
org.apache.httpcomponents.client5:httpclient5 (source)	dependencies	minor	5.5.1 → 5.6
io.vavr:vavr (source)	dependencies	minor	0.10.7 → 0.11.0
io.projectreactor:reactor-core	dependencies	minor	3.7.11 → 3.8.4
com.github.spotbugs:spotbugs-annotations (source)	dependencies	patch	4.9.3 → 4.9.8
com.github.ben-manes.caffeine:caffeine	dependencies	patch	3.2.2 → 3.2.3
com.auth0:java-jwt	dependencies	patch	4.5.0 → 4.5.1
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	dependencies	patch	2.8.13 → 2.8.16
au.com.dius.pact.provider:junit5spring	dependencies	patch	4.6.17 → 4.6.20
au.com.dius.pact.provider:spring	dependencies	patch	4.6.17 → 4.6.20
au.com.dius.pact.provider:junit5	dependencies	patch	4.6.17 → 4.6.20
au.com.dius.pact.consumer:junit5	dependencies	patch	4.6.17 → 4.6.20
org.apache.groovy:groovy-xml (source)	dependencies	patch	4.0.28 → 4.0.31
org.apache.groovy:groovy-json (source)	dependencies	patch	4.0.28 → 4.0.31
org.apache.groovy:groovy (source)	dependencies	patch	4.0.28 → 4.0.31
org.projectlombok:lombok (source)	dependencies	patch	1.18.42 → 1.18.44
org.junit.platform:junit-platform-launcher (source)	dependencies	minor	1.13.4 → 1.14.3
org.junit.platform:junit-platform-engine (source)	dependencies	minor	1.13.4 → 1.14.3
org.junit.platform:junit-platform-commons (source)	dependencies	minor	1.13.4 → 1.14.3
org.junit.jupiter:junit-jupiter-params (source)	dependencies	minor	5.13.4 → 5.14.3
org.junit.jupiter:junit-jupiter-engine (source)	dependencies	minor	5.13.4 → 5.14.3
org.junit.jupiter:junit-jupiter-api (source)	dependencies	minor	5.13.4 → 5.14.3
org.springframework.cloud:spring-cloud-dependencies (source)	dependencies	minor	2025.0.0 → 2025.1.1
uk.gov.hmcts.java	plugin	patch	0.12.67 → 0.12.68
org.springframework.boot	plugin	patch	3.5.8 → 3.5.13
org.sonarqube	plugin	minor	7.1.0.6387 → 7.2.3.7755
org.owasp.dependencycheck	plugin	minor	12.1.3 → 12.2.0
info.solidsoft.pitest	plugin	minor	1.15.0 → 1.19.0
com.github.ben-manes.versions	plugin	minor	0.51.0 → 0.53.0
au.com.dius.pact	plugin	patch	4.6.18 → 4.6.20

---

Release Notes

gradle/gradle (gradle)

v8.14.4

Compare Source

hashicorp/terraform (hashicorp/terraform)

v1.14.8

Compare Source

1.14.8 (March 25, 2026)

BUG FIXES:

• Prevent crash in the display of relevant attributes after provider upgrades (#​38264)

v1.14.7

Compare Source

1.14.7 (March 11, 2026)

NOTES:

• Bump Go version to 1.25.8 to suppress security scanner false positives (#​38249)

v1.14.6

Compare Source

1.14.6 (February 25, 2026)

BUG FIXES:

• terraform test: return error when provider config is invalid (#​38084)

v1.14.5

Compare Source

1.14.5 (February 11, 2026)

BUG FIXES:

• Fixed an issue where terraform stacks validate was failing to resolve relative paths for modules (#​38025)

v1.14.4

Compare Source

1.14.4 (January 28, 2026)

BUG FIXES:

• backend: Fix nil pointer dereference crash during terraform init when the destination backend returns an error (#​38027)

• Fixes an issue where any warning diagnostics generated during terraform query execution failed to render in the cloud backend session (#​38040)

• actions in modules without instances failed the plan graph (#​38089)

v1.14.3

Compare Source

1.14.3 (December 17, 2025)

BUG FIXES:

• stacks: change absolute paths in path.module/path.root to be relative, as documented (#​37982)

v1.14.2

Compare Source

v1.14.1

Compare Source

1.14.1 (December 3, 2025)

BUG FIXES:

• test: allow ephemeral outputs in root modules (#​37813)

• Combinations of replace_triggered_by and -replace could result in some instances not being replaced (#​37833)

• providers lock: include providers required by terraform test (#​37851)

• Set state information in the proto request for the GenerateResourceConfig RPC (#​37896)

• actions: make after_create & after_update actions run after the resource has applied (#​37936)

v1.14.0

Compare Source

1.14.0 (November 19, 2025)

NEW FEATURES:

• List Resources: List resources can be defined in *.tfquery.hcl files and allow querying and filterting existing infrastructure.

• A new Terraform command terraform query: Executes list operations against existing infrastructure and displays the results. The command can optionally generate configuration for importing results into Terraform.

• A new GenerateResourceConfiguration RPC allows providers to create more precise configuration values during import. (#​37515)

• New top-level Actions block: Actions are provider defined and meant to codify use cases outside the normal CRUD model in your Terraform configuration. Providers can define Actions like aws_lambda_invoke or aws_cloudfront_create_invalidation that do something imparative outside of Terraforms normal CRUD model. You can configure such a side-effect with an action block and have actions triggered through the lifecycle of a resource or through passing the -invoke CLI flag. (#​37553)

ENHANCEMENTS:

• terraform test: expected diagnostics will be included in test output when running in verbose mode" (#​37362)

• terraform test: ignore prevent_destroy attribute during when cleaning up tests" (#​37364)

• terraform stacks command support for -help flag (#​37645)

• query: support offline validation of query files via -query flag in the validate command (#​37671)

• Updates to support the AWS European Sovereign Cloud (#​37721)

BUG FIXES:

• Retrieve all workspace variables while doing a terraform import, include variables inherited from variable sets but not overwritten by the workspace. (#​37241)

• Fix OSS backend proxy support by adding a proxy layer for OSS backend operations. Resolves #​36897. (#​36897)

• console and test: return explicit diagnostics when referencing resources that were not included in the most recent operation. (#​37663)

• query: generate unique resource identifiers for results of expanded list resources (#​37681)

• The CLI now summarizes the number of actions invoked during terraform apply, matching the plan output. (#​37689)

• Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#​37854)

• query: improve error handling for missing identity schemas (#​37863)

UPGRADE NOTES:

• The parallelism of Terraform operations within container runtimes may be reduced depending on the CPU bandwidth limit setting. (#​37436)

• Building Terraform 1.14 requires macOS Monterey or later (due to being built on Go 1.25 which imposes these requirements) (#​37436)

Previous Releases

For information on prior major and minor releases, refer to their changelogs:

• v1.13
• v1.12
• v1.11
• v1.10
• v1.9
• v1.8
• v1.7
• v1.6
• v1.5
• v1.4
• v1.3
• v1.2
• v1.1
• v1.0
• v0.15
• v0.14
• v0.13
• v0.12
• v0.11 and earlier

v1.13.5

Compare Source

1.13.5 (November 5, 2025)

BUG FIXES:

• impure functions could cause templatefile to incorrectly fail consistency checks (#​37807)

• Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#​37854)

v1.13.4

Compare Source

1.13.4 (October 15, 2025)

BUG FIXES:

• Fix crash when showing a cloud plan without having a cloud backend (#​37751)

v1.13.3

Compare Source

1.13.3 (September 17, 2025)

BUG FIXES:

• variable validation: keep sensitive and ephemeral metadata when evaluating variable conditions. (#​37595)

v1.13.2

Compare Source

1.13.2 (September 10, 2025)

BUG FIXES:

• test: Fix the order of execution of cleanup nodes (#​37546)

• apply: hide sensitive inputs when values have changed between plan and apply (#​37582)

v1.13.1

Compare Source

1.13.1 (August 27, 2025)

BUG FIXES:

• Fix regression that caused terraform test with zero tests to return a non-zero exit code. (#​37477)

• terraform test: prevent panic when resolving incomplete references (#​37484)

v1.13.0

Compare Source

1.13.0 (August 20, 2025)

NEW FEATURES:

• The new command terraform stacks exposes some stack operations through the cli. Use terraform stacks -usage to see available commands. (#​36931)

ENHANCEMENTS:

• Filesystem functions are now checked for consistent results to catch invalid data during apply (#​37001)

• Allow successful init when provider constraint matches at least one valid version (#​37137)

• Performance fix for evaluating high cardinality resources (#​37154)

• TF Test: Allow parallel execution of teardown operations (#​37169)

• terraform test: Test authors can now specify definitions for external variables that are referenced within test files directly within the test file itself. (#​37195)

• terraform test: File-level variable blocks can now reference run outputs and other variables." (#​37205)

• skip redundant comparisons when comparing planned set changes (#​37280)

• type checking: improve error message on type mismatches. (#​37298)

BUG FIXES:

• Added a missing warning diagnostic that alerts users when child module contains an ignored cloud block. (#​37180)

• Nested module outputs could lose sensitivity, even when marked as such in the configuration (#​37212)

• workspace: Updated validation to reject workspaces named "" (#​37267)

• workspace: Updated the workspace delete command to reject "" as an invalid workspace name (#​37275)

• plan: truncate invalid or dynamic references in the relevant attributes (#​37290)

• Test run Parallelism of 1 should not result in deadlock (#​37292)

• static validation: detect invalid static references via indexes on objects. (#​37298)

• Fixes resource identity being dropped from state in certain cases (#​37396)

NOTES:

• The command terraform rpcapi is now generally available. It is not intended for public consumption, but exposes certain Terraform operations through an RPC interface compatible with go-plugin. (#​37067)

UPGRADE NOTES:

• terraform test: External variables referenced within test files should now be accompanied by a variable definition block within the test file. This is optional, but users with complex external variables may see error diagnostics without the additional variable definition. (#​37195)

Previous Releases

For information on prior major and minor releases, refer to their changelogs:

• v1.12
• v1.11
• v1.10
• v1.9
• v1.8
• v1.7
• v1.6
• v1.5
• v1.4
• v1.3
• v1.2
• v1.1
• v1.0
• v0.15
• v0.14
• v0.13
• v0.12
• v0.11 and earlier

microsoft/ApplicationInsights-Java (microsoft/ApplicationInsights-Java)

v3.7.8

Compare Source

• Update to OpenTelemetry Java Instrumentation 2.26.1
  (#​4648,
  #​4632,
  #​4631)
• Add cgroupv2 support and fix profile upload response body reading
  (#​4592)
• Fix connection string env var precedence over ${file:...} config lookup
  (#​4608)

v3.7.7

Compare Source

Enhancements

• Update to OpenTelemetry Java Instrumentation 2.21.0
  (#​4511)
• Enable Spring Cloud Gateway instrumentation
  (#​4559)
• Add azure_monitor to metrics exporter for AKS
  (#​4575)

v3.7.6

Compare Source

Enhancements

• Run tests against Java 25
  (#​4495, #​4494)

v3.7.5

Compare Source

Enhancements

• Update OpenTelemetry versions
  (#​4429)
• Read environment variables for AKS metrics otlp support
  (#​4458)

v3.7.4

Compare Source

Bug fixes

• Update deprecated EnvironmentResourceProvider reference
  (#​4377)
• Fix null exception message error
  (Azure/azure-sdk-for-java#46001)
• Update to OpenTelemetry Java Instrumentation 2.18.1
  (#​4378)

assertj/assertj-vavr (org.assertj:assertj-vavr)

v0.5.0

Compare Source

What's Changed

• Added VavrInstanceOfAssertFactories helper class by @​edudar in #​207
• Deprecated and not used code by @​mchmielarz in #​213
• Replace assertj-parent-pom with assertj-parent 3.27.6 by @​scordio in #​243
• rework README.MD by @​pivovarit in #​253
• upgrade assertj-parent to 3.27.7 by @​pivovarit in #​252
• fix assertions returning inaccessible types by @​pivovarit in #​254

New Contributors

• @​edudar made their first contribution in #​207
• @​scordio made their first contribution in #​243

Full Changelog: assertj/assertj-vavr@v0.4.3...v0.5.0

hmcts/ccd-test-definitions (com.github.hmcts:ccd-test-definitions)

v7.27.7-prerelease-CME-537

Compare Source

v7.27.1-prerelease-CME-537

Compare Source

v7.27.0-prerelease-CME-537

Compare Source

v7.26.7-prerelease-CCD-5329

Compare Source

CCD-5329 - Gradle modified

v7.25.5_CCD-6146_1

Compare Source

CCD-6146: FT changes
and addition to publish to Azure Artifacts

apache/httpcomponents-client (org.apache.httpcomponents.client5:httpclient5)

v5.6

This is the first ALPHA release in the 5.6 release series. It adds several features
such as transport content decompression and content compression for the async transport,
support for Unix sockets, experimental support for SCRAM-SHA-256 authentication scheme,
and Micrometer/OTel observations & metrics.

Commons Compress, Brotli codec, and ZStd codec are optional dependencies and get
wired into the execution pipeline only if present on the classpath.

Notable changes and features included in the 5.6 series:

• Unix domain socket support.

• Support for pluggable content codecs via Commons-Compress in the classic transport.
  (optional).

• Support for transparent content decompression and content compression with deflate,
  gzip, zstd (optional), and brotli (optional) codecs in the async transport.

• Micrometer/OTel observations & metrics (optinal).

• Off-lock connection disposal by the classic pooling connection manager. Experimental.

• SCRAM-SHA-256 authentication scheme (RFC 7804). Experimental.

• Request Priority support (RFC 9218). Experimental.

Compatibility notes:

• As of this version, HttpClient uses BUILTIN HostnameVerificationPolicy by default, delegating
  host verification to JSSE security manager. One must explicitly configure the TLS strategy
  to continue using the hostname verifier shipped with HttpClient.

• Five-second TCP keep-alive is now enabled by default.

vavr-io/vavr (io.vavr:vavr)

v0.11.0

Compare Source

The day has come - Vavr 0.11.0 is out, marking the first minor release in several years.

From here on, the focus shifts toward Vavr 1.0.0, starting with a significant Java version bump.

The 0.11.x line will continue to receive bugfixes and maintenance updates, but no new features are planned. Roadmap details can be found here.

Huge thanks to everyone who contributed in any form.

Significant Additions

Lazy For() Comprehension (#​3085)

The for-comprehension API has been expanded with lazy, evaluation-friendly signatures that accept functions instead of eagerly-evaluated objects:

Option<Integer> result = API.For(
  calculate1(),
  (r1) -> calculate2(r1),
  (r1, r2) -> calculate3(r1, r2))
  .yield((r1, r2, r3) -> r1 + r2 + r3);

JSpecify Integration (#​3113)

Vavr now integrates JSpecify annotations, enhancing null-safety support in IDEs and modern static analysis tools.

Better Future Cancellation (#​3107)

As a result of internal refactoring, cancellation is now possible for Futures that have not yet started execution.

Various API Additions

• Either/Validation.cond()
• Value.mapTo(U) and Value.mapToVoid()
• Try.toEither(Throwable -> L)

What's Changed

• New feature: Either.cond by @​adamkopec in #​3061
• New feature: Validation.cond by @​adamkopec in #​3062
• New feature: For-comprehensions for Eithers and Validations by @​adamkopec in #​3063
• New feature: .mapTo(U) and .mapToVoid() for Value by @​adamkopec in #​3086, #​3090
• Lazy For() Comprehension Generator by @​pivovarit in #​3085
• New feature: Try.toEither(Throwable -> L) by @​adamkopec in #​3088
• Fix: Missing javadocs for types in For comprehensions by @​adamkopec in #​3089
• Fix: Missing javadocs for pattern matching and other components by @​adamkopec in #​3095
• Fix: flaky tests of set comparison by @​lycoris106 in #​3104
• Remove Future.Computation and streamline task execution/cancellation by @​pivovarit in #​3107
• Lazily-evaluated Iterator.unfoldRight by @​pivovarit in #​3112
• Fix bit indexing in BitSet to use word-relative offsets by @​pivovarit in #​3116
• JSpecify integration by @​pivovarit in #​3113
• Javadocs overhaul by @​pivovarit in #​3125, #​3129, #​3130, #​3110, #​3114
• Fix TreeMultimap Java map conversion by @​pivovarit in #​3132
• ... and many more

New Contributors

• @​adamkopec made their first contribution in #​3061
• @​lycoris106 made their first contribution in #​3104

Full Changelog: vavr-io/vavr@v0.10.7...v0.11.0

reactor/reactor-core (io.projectreactor:reactor-core)

v3.8.4

Reactor Core 3.8.4 is part of the 2025.0.4 Release Train.

What's Changed

✨ New features and improvements

• Bump byteBuddy from 1.18.4 to 1.18.7 by @​dependabot[bot] in #​4214
• Bump Micrometer from 1.16.3 to 1.16.4 by @​chemicL in #​4220

📖 Documentation

• [docs] Add section about subscription patterns by @​chemicL in #​4207

Full Changelog: reactor/reactor-core@v3.8.3...v3.8.4

v3.8.3

Reactor Core 3.8.3 is part of the 2025.0.3 Release Train.

What's Changed

✨ New features and improvements

• Update NullAway to 0.13.0 and ErrorProne to 2.46.0 by @​chemicL in #​4187
• Bump ByteBuddy from 1.18.3 to 1.18.4 by @​dependabot[bot] in #​4183
• Bump Micrometer to 1.16.3 and Micrometer Tracing to 1.6.3 by @​chemicL in #​4202

Full Changelog: reactor/reactor-core@v3.8.2...v3.8.3

v3.8.2

Reactor Core 3.8.2 is part of the 2025.0.2 Release Train.

What's Changed

✨ New features and improvements

• Bump ByteBuddy from 1.18.2 to 1.18.3 by @​dependabot[bot] in #​4169
• Bump BlockHound from 1.0.15.RELEASE to 1.0.16.RELEASE by @​chemicL in #​4181
• Bump Micrometer from 1.16.1 to 1.16.2 by @​chemicL in #​4182

Full Changelog: reactor/reactor-core@v3.8.1...v3.8.2

v3.8.1

Reactor Core 3.8.1 is part of 2025.0.1 Release Train.

What's Changed

✨ New features and improvements

• Bump ByteBuddy from 1.17.8 to 1.18.2 by @​dependabot[bot] in #​4144 and #​4149
• Bump Micrometer to v1.16.1 by @​chemicL in #​4164

🐞 Bug fixes

• Refine Mono#doOnSuccess Consumer nullability by @​chemicL in #​4155

Full Changelog: reactor/reactor-core@v3.8.0...v3.8.1

v3.8.0

Reactor Core 3.8.0 is part of 2025.0.0 Release Train.

3.8.0 Highlights

Enhanced Null Safety using JSpecify

🦺 Reactor Core 3.8.0 introduces JSpecify annotations for comprehensive null safety, replacing the legacy JSR 305-based annotations with a modern, properly specified standard that prevents NullPointerExceptions through build-time checks. This upgrade provides enhanced IDE support, seamless Kotlin integration with automatic translation to Kotlin's null safety system, and more precise nullability declarations including support for arrays, varargs, and generic types — making Reactor APIs safer and more developer-friendly across the entire ecosystem.

⚠️ Nullability annotations from reactor.util.annotation have been deprecated in favour of JSpecify annotations.

📖 Check the refreshed reference documentation section on Null Safety.

⚠️ Note for Kotlin users: While this change is backwards compatible in the Java ecosystem and does not dictate a new generation of Reactor Core, we do appreciate it can appear as breaking changes for Kotlin codebases. The benefits are well defined nullness of the Reactor API and reduction of the ceremony that was required prior to the introduction of JSpecify annotations.

Repeat Spec

Repeat functionality from Reactor Addons has been ported to Reactor Core under the RepeatSpec class and can be used in conjunction with the Flux#repeatWhen() and Mono#repeatWhen() operators. Make sure to check out the Javadoc.

Reactor Core Micrometer version aligned with Reactor Core version

The reactor-core-micrometer library, which is part of the reactor-core repository is always released together with reactor-core, hence we decided to align their versions starting from 3.8.0 (the previous line was 1.2.x corresponding with 3.7.x of reactor-core).

What's Changed

⚠️ Update considerations and deprecations

• Introduce JSpecify for nullability annotations by @​chemicL in #​4091

✨ New features and improvements

• Bump byteBuddy from 1.17.7 to 1.17.8 by @​dependabot[bot] in #​4113
• Bump io.projectreactor.tools:blockhound from 1.0.14.RELEASE to 1.0.15.RELEASE by @​dependabot[bot] in #​4120
• Bump Micrometer to 1.16.0 by @​chemicL in fedfdd2
• Bump Context Propagation to 1.2.0 by @​chemicL in fedfdd2
• Repeat specification for use with repeatWhen operator by @​kwondh5217 in #​4027 and refinement by @​chemicL in b313f57
• Add Hooks#isAutomaticContextPropagationEnabled by @​sdeleuze in #​4090
• Adjust reactor.util.Logger vararg nullability by @​chemicL in #​4098
• Adjust Mono methods: fromCallable and fromSupplier nullability by @​chemicL in #​4116
• Address NullAway warnings and refine StepVerifier nullability by @​chemicL in #​4126
• Nullaway jspecify mode fixes by @​chemicL in #​4127
• Refine StepVerifier nullability reflecting non-null Publisher values by @​chemicL in #​4132
• Unify reactor-core-micrometer version with reactor-core by @​chemicL in #​4136

🐞 Bug fixes

• Fix RetryBackoffSpec multiplier handling of fractional values by @​chemicL in #​4048
• Adjust Flux#map mapper to disallow null return values by @​chemicL in #​4103

📖 Documentation

• [docs] Add Null Safety documentation by @​chemicL in #​4137
• Add more description on tap operator by @​ttddyy in #​4009
• fix doc title displayed as untitled by @​dev-jonghoonpark in #​4008

New Contributors

• @​dev-jonghoonpark made their first contribution in #​4008
• @​kwondh5217 made their first contribution in #​4027
• @​jkonicki made their first contribution in #​4050
• @​georgebanasios made their first contribution in #​4036

Full Changelog: reactor/reactor-core@v3.7.3...v3.8.0

v3.7.17

Reactor Core 3.7.17 is part of the 2024.0.16 Release Train.

What's Changed

✨ New features and improvements

• Bump byteBuddy from 1.18.4 to 1.18.7 by @​dependabot[bot] in #​4214

📖 Documentation

• [docs] Add section about subscription patterns by @​chemicL in #​4207

Full Changelog: reactor/reactor-core@v3.7.16...v3.7.17

v3.7.16

If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.