Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update tomcatEmbedVersion to v11.0.20 (org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-core)
• Update wiremock Docker tag to v0.0.7
• Update xui-webapp Docker tag to v1.0.41
• Update dependency allure-commandline to v2.38.1
• Update dependency allure-js-commons to v3.6.0
• Update dependency allure-playwright to v3.6.0
• Update dependency com.azure.spring:spring-cloud-azure-dependencies to v6.2.0
• Update dependency csv-parse to v6.2.1
• Update Gradle to v9.4.1
• Update serenityBddVersion to v5.3.7 (net.serenity-bdd:serenity-junit5, net.serenity-bdd:serenity-core, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd.serenity-gradle-plugin)
• Update dependency com.azure.spring:spring-cloud-azure-dependencies to v7
• Update dependency typescript to v6
• Update GitHub Artifact Actions (major) (actions/download-artifact, actions/upload-artifact)
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency com.github.hmcts:doc-assembly-client to v2.2.2
• Update spring boot to v3.5.13 (org.springframework.boot:spring-boot-starter-test, org.springframework.boot:spring-boot-starter-data-jpa, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-json, org.springframework.boot:spring-boot-starter-aop, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot:spring-boot-starter-web, org.springframework.boot)
• Update flyway to v12 (major) (org.flywaydb:flyway-core, org.flywaydb.flyway, org.flywaydb:flyway-database-postgresql)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• Update dependency io.rest-assured:rest-assured to v6
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• Update spring boot to v4 (major) (org.springframework.boot:spring-boot-starter-test, org.springframework.boot:spring-boot-starter-data-jpa, org.springframework.boot:spring-boot-starter-security, org.springframework.boot:spring-boot-starter-json, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot:spring-boot-starter-web, org.springframework.boot)
• Update spring cloud to v5 (major) (org.springframework.cloud:spring-cloud-starter-contract-stub-runner, org.springframework.cloud:spring-cloud-starter-openfeign)

Detected Dependencies

dockerfile (1)

Dockerfile (1)

• hmctsprod.azurecr.io/base/java 21-distroless

github-actions (4)

.github/workflows/ccd-diff.yml (8)

• actions/setup-java v5
• actions/checkout v6
• actions/upload-artifact v6 → [Updates: v7]
• actions/setup-node v6
• actions/download-artifact v7 → [Updates: v8]
• actions/download-artifact v7 → [Updates: v8]
• actions/upload-artifact v6 → [Updates: v7]
• node 24

.github/workflows/codeql.yml (5)

• actions/checkout v6
• github/codeql-action v4
• actions/setup-java v5
• github/codeql-action v4
• github/codeql-action v4

.github/workflows/publish-openapi.yaml (1)

• hmcts/workflow-publish-openapi-spec main

.github/workflows/send-team-members.yml

gradle (2)

build.gradle (63)

• org.flywaydb:flyway-database-postgresql 11.20.3 → [Updates: 12.2.0]
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.5.10 → [Updates: 3.5.13, 4.0.5]
• com.github.ben-manes.versions 0.53.0
• org.flywaydb.flyway 11.20.3 → [Updates: 12.2.0]
• org.sonarqube 7.2.3.7755
• net.serenity-bdd.serenity-gradle-plugin 5.2.2 → [Updates: 5.3.7]
• hmcts.ccd.sdk 6.7.2
• com.github.hmcts.rse-cft-lib 0.19.2049
• io.freefair.lombok 9.2.0
• au.com.dius.pact 4.6.20
• uk.gov.hmcts.java 0.12.68
• org.springframework.boot:spring-boot-starter-web 3.5.10 → [Updates: 3.5.13, 4.0.5]
• org.springframework.boot:spring-boot-starter-actuator 3.5.10 → [Updates: 3.5.13, 4.0.5]
• org.springframework.boot:spring-boot-starter-aop 3.5.10 → [Updates: 3.5.13]
• org.springframework.boot:spring-boot-starter-json 3.5.10 → [Updates: 3.5.13, 4.0.5]
• org.springframework.boot:spring-boot-starter-security 3.5.10 → [Updates: 3.5.13, 4.0.5]
• org.springframework.boot:spring-boot-starter-data-jpa 3.5.10 → [Updates: 3.5.13, 4.0.5]
• org.flywaydb:flyway-core 11.20.3 → [Updates: 12.2.0]
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.16 → [Updates: 3.0.2]
• uk.gov.service.notify:notifications-java-client 6.0.0-RELEASE
• com.azure.spring:spring-cloud-azure-dependencies 6.1.0 → [Updates: 6.2.0, 7.1.0]
• org.modelmapper:modelmapper 3.2.6
• com.github.hmcts.java-logging:logging 8.0.0
• com.github.hmcts:core-case-data-store-client 5.2.0
• com.github.hmcts:idam-java-client 3.0.5
• com.github.hmcts:doc-assembly-client 2.2.0 → [Updates: 2.2.2]
• com.github.hmcts:fees-java-client 0.1.0
• com.github.hmcts:payments-java-client 1.6.8
• org.apache.logging.log4j:log4j-api 2.25.3
• org.apache.logging.log4j:log4j-core 2.25.3
• org.apache.logging.log4j:log4j-to-slf4j 2.25.3
• ch.qos.logback:logback-classic 1.5.32
• ch.qos.logback:logback-core 1.5.32
• org.postgresql:postgresql 42.7.10
• com.github.hmcts:service-auth-provider-java-client 5.3.3
• io.pebbletemplates:pebble 4.1.1
• org.springframework.cloud:spring-cloud-starter-openfeign 4.3.1 → [Updates: 5.0.1]
• commons-fileupload:commons-fileupload 1.6.0
• org.apache.commons:commons-lang3 3.20.0
• org.projectlombok:lombok 1.18.44
• com.github.kagkarlsson:db-scheduler-spring-boot-starter 16.7.1
• org.apache.tomcat.embed:tomcat-embed-core 11.0.18 → [Updates: 11.0.20]
• org.apache.tomcat.embed:tomcat-embed-websocket 11.0.18 → [Updates: 11.0.20]
• io.rest-assured:rest-assured 5.5.7 → [Updates: 6.0.0]
• com.github.hmcts:fortify-client 1.4.10
• org.instancio:instancio 1.0.4
• com.github.hmcts:befta-fw 9.2.4
• net.serenity-bdd:serenity-rest-assured 5.2.2 → [Updates: 5.3.7]
• net.serenity-bdd:serenity-core 5.2.2 → [Updates: 5.3.7]
• net.serenity-bdd:serenity-junit5 5.2.2 → [Updates: 5.3.7]
• org.junit.platform:junit-platform-suite-api 6.0.3
• au.com.dius.pact.consumer:junit5 4.6.20
• org.hamcrest:java-hamcrest 2.0.0.0
• org.junit.jupiter:junit-jupiter-api 6.0.3
• org.junit:junit-bom 6.0.3
• org.springframework.security:spring-security-test 7.0.4
• org.springframework.boot:spring-boot-starter-test 3.5.10 → [Updates: 3.5.13, 4.0.5]
• org.testcontainers:testcontainers 2.0.4
• org.testcontainers:junit-jupiter 1.21.4
• org.testcontainers:postgresql 1.21.4
• org.springframework.cloud:spring-cloud-starter-contract-stub-runner 4.3.1 → [Updates: 5.0.2]
• org.mockito:mockito-inline 5.2.0

settings.gradle

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

• gradle 9.3.1 → [Updates: 9.4.1]

helm-values (1)

charts/pcs-api/values.yaml

helmv3 (1)

charts/pcs-api/Chart.yaml (6)

• java 5.3.0
• servicebus 1.2.2
• ccd 9.2.2
• xui-webapp 1.0.39 → [Updates: 1.0.41]
• postgresql 1.1.1
• wiremock 0.0.6 → [Updates: 0.0.7]

npm (2)

src/e2eTest/package.json (15)

• @axe-core/playwright ^4.10.2
• @hmcts/playwright-common ^1.0.33
• oauth4webapi ^3.5.1
• uuid ^13.0.0
• @playwright/test ^1.49.0
• @types/node ^24.0.0
• allure-commandline ^2.34.1 → [Updates: ^2.34.1]
• allure-js-commons ^3.3.0 → [Updates: ^3.3.0]
• allure-playwright ^3.3.0 → [Updates: ^3.3.0]
• axios ^1.11.0
• simple-git ^3.27.0
• tsx ^4.19.2
• typescript ^5.7.2 → [Updates: ^6.0.0]
• node >=18.0.0
• lighthouse ^13.0.0

tools/postcode-to-epims/package.json (2)

• csv-parse ^6.0.0 → [Updates: ^6.0.0]
• luxon ^3.6.1

nvm (1)

src/e2eTest/.nvmrc (1)

• node 24.14.1

regex (1)

Dockerfile (1)

• microsoft/ApplicationInsights-Java 3.7.7

renovate-config-presets (1)

.github/renovate.json

terraform (2)

infrastructure/database.tf

infrastructure/main.tf

terraform-version (1)

infrastructure/.terraform-version (1)

• hashicorp/terraform 1.14.8

---

• Check this box to trigger a request for Renovate to run again on this repository