Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
gradle	org.hibernate:hibernate-jpamodelgen

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency microsoft/applicationinsights-java to v3.7.8
• chore(deps): update dependency sbt/sbt to v1.12.8
• chore(deps): update plugin org.springframework.boot to v3.5.13
• fix(deps): update dependency org.apache.tomcat:tomcat-annotations-api to v11.0.20
• fix(deps): update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.20
• fix(deps): update dependency org.apache.tomcat.embed:tomcat-embed-el to v11.0.20
• fix(deps): update dependency org.apache.tomcat.embed:tomcat-embed-websocket to v11.0.20
• fix(deps): update dependency org.hibernate:hibernate-jpamodelgen to v6.6.46.final
• fix(deps): update dependency org.openapitools:jackson-databind-nullable to v0.2.10
• fix(deps): update dependency org.springframework.integration:spring-integration-bom to v6.5.8
• fix(deps): update log4j2 monorepo to v2.25.4 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• fix(deps): update dependency org.hibernate:hibernate-jpamodelgen to v7
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency hashicorp/terraform to v1.14.8
• chore(deps): update plugin uk.gov.hmcts.java to v0.12.68
• fix(deps): update dependency org.projectlombok:lombok to v1.18.44
• fix(deps): update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7.13.1
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025.1.1
• chore(deps): update plugin org.springframework.boot to v4
• fix(deps): update dependency com.jayway.jsonpath:json-path to v3
• fix(deps): update dependency com.networknt:json-schema-validator to v3
• fix(deps): update dependency org.springframework.integration:spring-integration-bom to v7
• fix(deps): update flyway to v12 (major) (org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core, org.flywaydb.flyway)
• fix(deps): update serenityversion to v5 (major) (net.serenity-bdd:serenity-ensure, net.serenity-bdd:serenity-cucumber, net.serenity-bdd:serenity-report-resources, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-core)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (4)

docker-compose.base.yml

docker-compose.local.yml

docker-compose.master.yml

docker-compose.yml

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (3)

.github/workflows/ci.yml (2)

• actions/checkout v6
• actions/setup-java v5

.github/workflows/codeql.yml (5)

• actions/checkout v6
• github/codeql-action v4
• actions/setup-java v5
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/publish-openapi.yaml (1)

• hmcts/workflow-publish-openapi-spec v1

gradle (1)

build.gradle (57)

• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 12.2.0]
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.11 → [Updates: 3.5.13, 4.0.5]
• com.github.ben-manes.versions 0.53.0
• org.sonarqube 7.2.3.7755
• uk.gov.hmcts.java 0.12.67 → [Updates: 0.12.68]
• org.flywaydb.flyway 11.20.3 → [Updates: 12.2.0]
• net.serenity-bdd.serenity-gradle-plugin 5.3.9
• org.openapi.generator 7.21.0
• io.cucumber:cucumber-core 7.23.0
• io.cucumber:cucumber-java 7.23.0
• io.cucumber:cucumber-junit 7.23.0
• org.springframework.integration:spring-integration-bom 6.5.7 → [Updates: 6.5.8, 7.0.4]
• org.springframework.cloud:spring-cloud-dependencies 2025.0.0 → [Updates: 2025.1.1]
• com.google.guava:guava 33.5.0-jre
• uk.gov.hmcts:opal-common-lib 0.2.6
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.16
• com.github.hmcts.java-logging:logging 8.0.0
• org.apache.logging.log4j:log4j-api 2.25.3 → [Updates: 2.25.4]
• org.apache.logging.log4j:log4j-to-slf4j 2.25.3 → [Updates: 2.25.4]
• com.google.guava:guava 33.5.0-jre
• com.launchdarkly:launchdarkly-java-server-sdk 7.12.0 → [Updates: 7.13.1]
• com.networknt:json-schema-validator 2.0.1 → [Updates: 3.0.1]
• com.jayway.jsonpath:json-path 2.10.0 → [Updates: 3.0.0]
• org.flywaydb:flyway-core 11.20.3 → [Updates: 12.2.0]
• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 12.2.0]
• org.projectlombok:lombok 1.18.42 → [Updates: 1.18.44]
• org.projectlombok:lombok 1.18.42 → [Updates: 1.18.44]
• org.hibernate:hibernate-jpamodelgen 6.6.44.Final → [Updates: 6.6.46.Final, 7.3.0.Final]
• org.projectlombok:lombok 1.18.42 → [Updates: 1.18.44]
• org.projectlombok:lombok 1.18.42 → [Updates: 1.18.44]
• org.projectlombok:lombok 1.18.42 → [Updates: 1.18.44]
• org.projectlombok:lombok 1.18.42 → [Updates: 1.18.44]
• org.mapstruct:mapstruct 1.6.3
• org.mapstruct:mapstruct-processor 1.6.3
• com.networknt:json-schema-validator 1.5.9 → [Updates: 3.0.1]
• com.jayway.jsonpath:json-path 2.10.0 → [Updates: 3.0.0]
• com.auth0:java-jwt 4.5.1
• org.testcontainers:junit-jupiter 1.21.4
• org.junit:junit-bom 6.0.3
• org.junit.platform:junit-platform-suite 6.0.3
• io.cucumber:cucumber-junit-platform-engine 7.23.0
• net.serenity-bdd:serenity-core 4.3.4 → [Updates: 5.3.10]
• net.serenity-bdd:serenity-rest-assured 4.3.4 → [Updates: 5.3.10]
• net.serenity-bdd:serenity-report-resources 4.3.4 → [Updates: 5.3.10]
• net.serenity-bdd:serenity-cucumber 4.3.4 → [Updates: 5.3.10]
• net.serenity-bdd:serenity-ensure 4.3.4 → [Updates: 5.3.10]
• org.openapitools:jackson-databind-nullable 0.2.9 → [Updates: 0.2.10]
• io.swagger.parser.v3:swagger-parser 2.1.39
• io.swagger.core.v3:swagger-models 2.2.45
• io.swagger.core.v3:swagger-core 2.2.45
• com.fasterxml.jackson:jackson-bom 2.21.2
• org.apache.tomcat.embed:tomcat-embed-core 11.0.18 → [Updates: 11.0.20]
• org.apache.tomcat.embed:tomcat-embed-websocket 11.0.18 → [Updates: 11.0.20]
• org.apache.tomcat.embed:tomcat-embed-el 11.0.18 → [Updates: 11.0.20]
• org.apache.tomcat:tomcat-annotations-api 11.0.18 → [Updates: 11.0.20]
• org.apache.commons:commons-lang3 3.20.0

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.4.1

helm-values (1)

charts/opal-user-service/values.yaml

helmv3 (1)

charts/opal-user-service/Chart.yaml (1)

• java 5.3.0

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.7 → [Updates: 3.7.8]

renovate-config-presets (1)

.github/renovate.json

sbt (2)

openapi/templates/project/build.properties (1)

• sbt/sbt 1.12.5 → [Updates: 1.12.8]

openapi/templates/project/plugins.sbt (6)

• com.eed3si9n:sbt-assembly 2.3.1
• com.github.siasia:xsbt-web-plugin 0.12.0-0.2.11.1
• com.github.siasia:xsbt-web-plugin 0.12.0-0.2.11.1
• com.github.siasia:xsbt-web-plugin 0.12.0-0.2.11.1
• com.github.siasia:xsbt-web-plugin 0.12.0-0.2.11.1
• com.github.siasia:xsbt-web-plugin 0.12.0-0.2.11.1

terraform (1)

infrastructure/main.tf

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.6 → [Updates: 1.14.8]

---

• Check this box to trigger a request for Renovate to run again on this repository