Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
gradle	org.hibernate.orm:hibernate-jpamodelgen
gradle	org.hibernate:hibernate-spatial

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency com.atlassian.oai:swagger-request-validator-core to v2.46.1
• Update dependency com.azure:azure-sdk-bom to v1.3.5
• Update dependency hashicorp/terraform to v1.14.8
• Update dependency io.github.hakky54:logcaptor to v2.12.6
• Update dependency io.projectreactor:reactor-test to v3.8.4
• Update dependency microsoft/ApplicationInsights-Java to v3.7.8
• Update dependency org.hibernate:hibernate-spatial to v6.6.45.Final
• Update dependency org.openapitools:jackson-databind-nullable to v0.2.10
• Update dependency org.springframework:spring-webflux to v6.2.17
• Update dependency org.springframework.data:spring-data-envers to v3.5.10
• Update dependency org.springframework.security:spring-security-test to v6.5.9
• Update hibernate-orm monorepo to v6.6.45.Final (org.hibernate.orm:hibernate-jpamodelgen, org.hibernate.orm:hibernate-ant)
• Update io.projectreactor.netty:1.3.3 to v1.3.4 (io.projectreactor.netty:reactor-netty-core, io.projectreactor.netty:reactor-netty-http)
• Update log4j2 monorepo to v2.25.4 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update netty monorepo to v4.2.12.Final (io.netty:netty-transport-native-unix-common, io.netty:netty-transport-native-kqueue, io.netty:netty-transport-native-epoll, io.netty:netty-transport-classes-kqueue, io.netty:netty-transport-classes-epoll, io.netty:netty-transport, io.netty:netty-resolver-dns-native-macos, io.netty:netty-resolver-dns-classes-macos, io.netty:netty-resolver-dns, io.netty:netty-resolver, io.netty:netty-handler-proxy, io.netty:netty-handler, io.netty:netty-common, io.netty:netty-codec-socks, io.netty:netty-codec-http2, io.netty:netty-codec-http, io.netty:netty-codec-dns, io.netty:netty-codec, io.netty:netty-buffer)
• Update plugin org.springframework.boot to v3.5.13
• Update redis Docker tag to v8.6.2
• Update tomcatEmbedVersion to v11.0.20 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)
• Update dependency io.github.openfeign:feign-hc5 to v13.11
• Update dependency org.apache.tika:tika-core to v3.3.0
• Update Terraform azurerm to 4.66
• Update dependency org.junit.jupiter:junit-jupiter to v6
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update dependency org.springframework:spring-webflux to v7
• Update dependency org.springframework.data:spring-data-envers to v4
• Update dependency org.testcontainers:testcontainers to v2
• Update dependency uk.gov.service.notify:notifications-java-client to v6
• Update flyway to v12 (major) (org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update github/codeql-action action to v4
• Update Gradle to v9
• Update hibernate-orm monorepo to v7 (major) (org.hibernate.orm:hibernate-jpamodelgen, org.hibernate.orm:hibernate-ant)
• Update mcr.microsoft.com/openjdk/jdk Docker tag to v25
• Update plugin io.freefair.lombok to v9
• Update plugin org.gradle.toolchains.foojay-resolver-convention to v1
• Update plugin org.sonarqube to v7
• Update plugin org.springframework.boot to v4
• Update postgres Docker tag to v18
• Update shedlock monorepo to v7 (major) (net.javacrumbs.shedlock:shedlock-provider-jdbc-template, net.javacrumbs.shedlock:shedlock-spring)
• Update spring cloud to v5 (major) (org.springframework.cloud:spring-cloud-starter-contract-stub-runner, org.springframework.cloud:spring-cloud-starter-openfeign)
• Update spring security to v7 (major) (org.springframework.security:spring-security-test, org.springframework.security:spring-security-oauth2-authorization-server)
• 🔐 Create all rate-limited PRs at once 🔐

PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update dependency org.junit.jupiter:junit-jupiter to v5.14.3

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update plugin io.freefair.lombok to v8.14.4
• Update dependency pmd to v7.23.0
• Update plugin org.openapi.generator to v7.21.0
• Update Terraform azapi to ~> 2.9.0
• Update actions/checkout action to v6
• Update actions/github-script action to v8
• Update actions/setup-java action to v5
• Update dependency io.vavr:vavr to v1
• Update dependency org.hibernate:hibernate-spatial to v7
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (2)

docker-compose-local.yml (2)

• postgres 16-alpine → [Updates: 18-alpine]
• redis 8.6.1-alpine → [Updates: 8.6.2-alpine]

docker-compose.yml

dockerfile (1)

Dockerfile (2)

• mcr.microsoft.com/openjdk/jdk 21-azurelinux → [Updates: 25-azurelinux]
• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (7)

.github/workflows/ado_artifacts_build.yml (2)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]

.github/workflows/auto-label-enable-keep-helm.yml (1)

• actions/github-script v6 → [Updates: v8]

.github/workflows/ci.yml (2)

• actions/checkout v4 → [Updates: v6]
• actions/setup-java v4 → [Updates: v5]

.github/workflows/close-pr.yml

.github/workflows/codeql.yml (5)

• actions/checkout v4 → [Updates: v6]
• github/codeql-action v3 → [Updates: v4]
• actions/setup-java v4 → [Updates: v5]
• github/codeql-action v3 → [Updates: v4]
• github/codeql-action v3 → [Updates: v4]

.github/workflows/flyway-dupe-checker.yml (1)

• actions/checkout v4 → [Updates: v6]

.github/workflows/on-pr.yml

gradle (3)

build.gradle (92)

• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 12.2.0]
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.11 → [Updates: 3.5.13, 4.0.5]
• org.owasp.dependencycheck 12.2.0
• com.github.ben-manes.versions 0.53.0
• org.sonarqube 6.3.1.5724 → [Updates: 7.2.3.7755]
• io.freefair.lombok 8.14 → [Updates: 8.14.4, 9.2.0]
• org.openapi.generator 7.13.0 → [Updates: 7.21.0]
• org.flywaydb.flyway 11.20.3 → [Updates: 12.2.0]
• com.dorongold.task-tree 4.0.1
• jacoco 0.8.14
• pmd 7.16.0 → [Updates: 7.23.0]
• org.springframework:spring-webflux 6.2.16 → [Updates: 6.2.17, 7.0.6]
• org.springframework.security:spring-security-oauth2-authorization-server 1.5.6 → [Updates: 7.0.4]
• commons-io:commons-io 2.21.0
• org.apache.commons:commons-collections4 4.5.0
• org.apache.commons:commons-lang3 3.20.0
• org.apache.commons:commons-csv 1.14.1
• commons-validator:commons-validator 1.10.1
• javax.annotation:javax.annotation-api 1.3.2
• javax.validation:validation-api 2.0.1.Final
• javax.servlet:servlet-api 2.5
• org.openapitools:jackson-databind-nullable 0.2.9 → [Updates: 0.2.10]
• org.zalando:problem-spring-web-starter 0.29.1
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.16 → [Updates: 3.0.2]
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.1 → [Updates: 5.0.1]
• org.springframework.retry:spring-retry 2.0.12
• net.javacrumbs.shedlock:shedlock-spring 6.10.0 → [Updates: 7.7.0]
• net.javacrumbs.shedlock:shedlock-provider-jdbc-template 6.10.0 → [Updates: 7.7.0]
• com.github.hmcts.java-logging:logging 8.0.0
• org.apache.logging.log4j:log4j-api 2.25.3 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-to-slf4j 2.25.3 → [Updates: 2.25.4]
• org.apache.commons:commons-exec 1.6.0
• org.apache.commons:commons-text 1.15.0
• org.apache.tomcat.embed:tomcat-embed-core 11.0.18 → [Updates: 11.0.20]
• org.apache.tomcat.embed:tomcat-embed-websocket 11.0.18 → [Updates: 11.0.20]
• com.azure:azure-sdk-bom 1.3.4 → [Updates: 1.3.5]
• org.flywaydb:flyway-core 11.20.3 → [Updates: 12.2.0]
• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 12.2.0]
• io.hypersistence:hypersistence-utils-hibernate-63 3.15.2
• org.postgresql:postgresql 42.7.10
• uk.gov.service.notify:notifications-java-client 5.2.1-RELEASE → [Updates: 6.0.0-RELEASE]
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• io.vavr:vavr 0.11.0 → [Updates: 1.0.1]
• com.google.guava:guava 33.5.0-jre
• org.mapstruct:mapstruct 1.6.3
• org.apache.tika:tika-core 3.2.3 → [Updates: 3.3.0]
• org.springframework.data:spring-data-envers 3.5.9 → [Updates: 3.5.10, 4.0.4]
• org.hibernate.orm:hibernate-ant 6.6.44.Final → [Updates: 6.6.45.Final, 7.3.0.Final]
• org.hibernate:hibernate-spatial 6.6.44.Final → [Updates: 6.6.45.Final, 7.3.0.Final]
• com.querydsl:querydsl-core 5.1.0
• com.querydsl:querydsl-jpa 5.1.0
• org.mapstruct:mapstruct-processor 1.6.3
• org.hibernate.orm:hibernate-jpamodelgen 6.6.44.Final → [Updates: 6.6.45.Final, 7.3.0.Final]
• com.querydsl:querydsl-apt 5.1.0
• io.github.openfeign:feign-hc5 13.9.3 → [Updates: 13.11]
• org.testcontainers:postgresql 1.21.4
• com.h2database:h2 2.4.240
• org.postgresql:postgresql 42.7.10
• org.mockito:mockito-inline 5.2.0
• org.springframework.cloud:spring-cloud-starter-contract-stub-runner 4.3.1 → [Updates: 5.0.2]
• org.junit.jupiter:junit-jupiter 5.13.4 → [Updates: 5.14.3, 6.0.3]
• io.projectreactor:reactor-test 3.8.3 → [Updates: 3.8.4]
• org.springframework.security:spring-security-test 6.5.8 → [Updates: 6.5.9, 7.0.4]
• org.awaitility:awaitility 4.3.0
• org.awaitility:awaitility-proxy 3.1.6
• io.github.hakky54:logcaptor 2.12.5 → [Updates: 2.12.6]
• org.testcontainers:testcontainers 1.21.4 → [Updates: 2.0.4]
• org.jeasy:easy-random-core 5.0.0
• com.atlassian.oai:swagger-request-validator-core 2.46.0 → [Updates: 2.46.1]
• io.netty:netty-buffer 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-codec 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-codec-dns 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-codec-http 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-codec-http2 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-codec-socks 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-common 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-handler 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-handler-proxy 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-resolver 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-resolver-dns 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-resolver-dns-classes-macos 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-resolver-dns-native-macos 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-transport 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-transport-classes-epoll 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-transport-classes-kqueue 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-transport-native-epoll 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-transport-native-kqueue 4.2.10.Final → [Updates: 4.2.12.Final]
• io.netty:netty-transport-native-unix-common 4.2.10.Final → [Updates: 4.2.12.Final]
• io.projectreactor.netty:reactor-netty-http 1.3.3 → [Updates: 1.3.4]
• io.projectreactor.netty:reactor-netty-core 1.3.3 → [Updates: 1.3.4]

gradle.properties

settings.gradle (1)

• org.gradle.toolchains.foojay-resolver-convention 0.10.0 → [Updates: 1.0.0]

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 8.14.4 → [Updates: 9.4.1]

helm-values (1)

charts/darts-api/values.yaml

helmv3 (1)

charts/darts-api/Chart.yaml (3)

• java 6.0.0
• function 2.6.2
• postgresql 1.1.1

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.7 → [Updates: 3.7.8]

renovate-config-presets (1)

.github/renovate.json

terraform (2)

infrastructure/main.tf (1)

• github.com/hmcts/cnp-module-storage-account 4.x

infrastructure/providers.tf (3)

• azapi ~> 2.5.0 → [Updates: ~> 2.9.0]
• azuread 3.8.0
• azurerm 4.62 → [Updates: 4.66]

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.6 → [Updates: 1.14.8]

---

• Check this box to trigger a request for Renovate to run again on this repository