Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: gradle manager does not support replacement updates yet
• WARN: Error updating branch: update failure

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
gradle	org.hibernate:hibernate-core
gradle	org.hibernate:hibernate-envers

Errored

These updates encountered an error and will be retried. Click on a checkbox below to force a retry now.

• Replace hibernate core with org.hibernate.orm:hibernate-envers 6.6.5.Final (org.hibernate:hibernate-envers, org.hibernate:hibernate-core)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update plugin org.springframework.boot to v3.4.2
• Update plugin org.owasp.dependencycheck to v12

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency org.apache.commons:commons-lang3 to v3.17.0

Detected dependencies

docker-compose

docker-compose-dev.yml

docker-compose.yml

docker/compose/docker-compose-dm-ports.yml

docker/compose/docker-compose-dm.yml

docker/compose/docker-compose-em-ports.yml

docker/compose/docker-compose-em.yml

docker/compose/docker-compose-idam-ports.yml

docker/compose/docker-compose-idam.yml

docker/docker-compose-base-ports.yml

docker/docker-compose-base.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

docker/database-idam/Dockerfile

• postgres 17.2

gradle

settings.gradle

build.gradle

• org.flywaydb:flyway-database-postgresql 11.2.0
• uk.gov.hmcts.java 0.12.64
• io.spring.dependency-management 1.1.7
• org.springframework.boot 3.4.1
• com.github.ben-manes.versions 0.52.0
• org.sonarqube 6.0.1.5171
• io.freefair.lombok 8.12
• info.solidsoft.pitest 1.15.0
• org.owasp.dependencycheck 11.1.1
• au.com.dius.pact 4.6.16
• org.flywaydb.flyway 11.2.0
• net.serenity-bdd.serenity-gradle-plugin 4.2.13
• com.azure:azure-storage-blob 12.29.0
• org.apache.tika:tika-core 3.0.0
• org.apache.tika:tika-parsers-standard-package 3.0.0
• com.google.guava:guava 33.4.0-jre
• commons-io:commons-io 2.18.0
• com.fasterxml.jackson.core:jackson-annotations 2.18.2
• com.fasterxml.jackson.core:jackson-core 2.18.2
• com.fasterxml.jackson.core:jackson-databind 2.18.2
• com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.18.2
• org.ehcache:ehcache 3.10.8
• org.springframework:spring-context-support 6.2.2
• org.apache.commons:commons-lang3 3.16.0
• org.hibernate:hibernate-core 6.6.5.Final
• org.hibernate:hibernate-envers 6.6.5.Final
• org.postgresql:postgresql 42.7.5
• net.javacrumbs.shedlock:shedlock-spring 6.2.0
• net.javacrumbs.shedlock:shedlock-provider-jdbc-template 6.2.0
• org.flywaydb:flyway-core 11.2.0
• org.flywaydb:flyway-database-postgresql 11.2.0
• com.github.hmcts:service-auth-provider-java-client 5.3.0
• net.logstash.logback:logstash-logback-encoder 8.0
• com.github.hmcts:java-logging 6.1.7
• org.apache.httpcomponents:httpclient 4.5.14
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.2.0
• org.springframework.cloud:spring-cloud-starter-openfeign 4.2.0
• org.springframework.security:spring-security-oauth2-resource-server 6.4.2
• org.springframework.security:spring-security-oauth2-client 6.4.2
• org.springframework.security:spring-security-web 6.4.2
• org.springframework.security:spring-security-oauth2-jose 6.4.2
• org.springframework.security:spring-security-oauth2-core 6.4.2
• org.springframework.security:spring-security-config 6.4.2
• org.springframework.security:spring-security-core 6.4.2
• org.apache.groovy:groovy 4.0.24
• org.springframework.security:spring-security-test 6.4.2
• org.junit.jupiter:junit-jupiter-api 5.11.4
• org.junit.jupiter:junit-jupiter-engine 5.11.4
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.2
• org.glassfish.jaxb:jaxb-runtime 4.0.5
• com.warrenstrange:googleauth 1.5.0
• com.github.stephenc.jcip:jcip-annotations 1.0-1
• org.mockito:mockito-inline 5.2.0
• net.serenity-bdd:serenity-junit5 4.2.13
• com.github.hmcts:em-test-helper 2.1.1
• ch.qos.logback:logback-classic 1.5.16
• ch.qos.logback:logback-core 1.5.16
• com.github.hmcts:fortify-client 1.4.6
• org.testcontainers:postgresql 1.20.4
• au.com.dius.pact.provider:junit5 4.6.16
• au.com.dius.pact.provider:junit5spring 4.6.16
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.3
• org.junit.platform:junit-platform-commons 1.11.4
• checkstyle 10.21.1
• jacoco 0.8.12

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.12

helm-requirements

charts/dm-store/Chart.yaml

• java 5.2.1
• blobstorage 2.0.2
• xui-webapp ~1.0.6
• idam-pr ~2.3.0

helm-values

charts/dm-store/values.yaml

helmv3

charts/dm-store/Chart.yaml

• java 5.2.1
• blobstorage 2.0.2
• xui-webapp ~1.0.6
• idam-pr ~2.3.0

terraform

infrastructure/main.tf

infrastructure/state.tf

• azuread 3.1.0
• azurerm ~> 4.16.0

infrastructure/versions.tf

• hashicorp/terraform >= 0.15

terraform-version

.terraform-version

• hashicorp/terraform 1.10.5

infrastructure/.terraform-version

• hashicorp/terraform 1.10.5

---

• Check this box to trigger a request for Renovate to run again on this repository