Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency com.azure:azure-messaging-servicebus to v7.17.7
• Update Terraform azurerm to v3.117.0
• Update dependency com.azure:azure-storage-blob to v12.29.0
• Update dependency hashicorp/terraform to v1.10.2
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.7.0
• Update flyway to v10.22.0 (org.flywaydb:flyway-core, org.flywaydb.flyway, org.flywaydb:flyway-database-postgresql)
• Update plugin org.springframework.boot to v3.4.0
• Update shedlock monorepo to v5.16.0 (net.javacrumbs.shedlock:shedlock-provider-jdbc-template, net.javacrumbs.shedlock:shedlock-spring)
• Update testcontainers-java monorepo to v1.20.4 (org.testcontainers:junit-jupiter, org.testcontainers:postgresql)
• Update Terraform azuread to v3
• Update Terraform azurerm to v4
• Update actions/cache action to v4
• Update dependency javax.servlet:javax.servlet-api to v4
• Update dependency pmd to v7
• Update flyway to v11 (major) (org.flywaydb:flyway-core, org.flywaydb.flyway, org.flywaydb:flyway-database-postgresql)
• Update plugin org.owasp.dependencycheck to v11
• Update plugin org.sonarqube to v6
• Update shedlock monorepo to v6 (major) (net.javacrumbs.shedlock:shedlock-provider-jdbc-template, net.javacrumbs.shedlock:shedlock-spring)
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency com.github.hmcts:fortify-client to v1.4.5
• Update dependency com.icegreen:greenmail to v2.1.2
• Update versions.reformLogging to v6.1.7 (com.github.hmcts.java-logging:logging-appinsights, com.github.hmcts.java-logging:logging)
• Update dependency gradle to v8.11.1
• Update dependency org.apache.commons:commons-csv to v1.12.0
• Update dependency org.apache.httpcomponents.client5:httpclient5 to v5.4.1
• Update dependency org.apache.qpid:qpid-jms-client to v1.12.1
• Update dependency org.assertj:assertj-core to v3.26.3
• Update plugin org.sonarqube to v5.1.0.4882
• Update spring cloud to v4.2.0 (org.springframework.cloud:spring-cloud-contract-wiremock, org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency checkstyle to v10
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency org.apache.qpid:qpid-jms-client to v2

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

docker/database/Dockerfile

• hmctspublic.azurecr.io/imported/postgres 16-alpine

docker/storage/Dockerfile

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• actions/cache v3
• actions/setup-java v4

.github/workflows/publish-openapi.yaml

• hmcts/workflow-publish-openapi-spec v1

gradle

build.gradle

• org.postgresql:postgresql 42.7.4
• org.flywaydb:flyway-database-postgresql 10.20.1
• io.spring.dependency-management 1.1.6
• org.springframework.boot 3.3.5
• org.owasp.dependencycheck 9.2.0
• com.github.ben-manes.versions 0.51.0
• org.sonarqube 5.0.0.4638
• org.flywaydb.flyway 10.20.1
• checkstyle 9.3
• pmd 6.55.0
• org.junit.jupiter:junit-jupiter-api 5.11.3
• org.junit.jupiter:junit-jupiter-engine 5.11.3
• org.junit.jupiter:junit-jupiter-params 5.11.3
• org.junit.platform:junit-platform-commons 1.11.3
• org.junit.platform:junit-platform-engine 1.11.3
• org.apiguardian:apiguardian-api 1.1.2
• org.flywaydb:flyway-core 10.20.1
• net.javacrumbs.shedlock:shedlock-spring 5.14.0
• net.javacrumbs.shedlock:shedlock-provider-jdbc-template 5.14.0
• com.azure:azure-storage-blob 12.28.1
• com.azure:azure-messaging-servicebus 7.17.5
• org.apache.qpid:qpid-jms-client 1.11.0
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.1.4
• org.springframework.cloud:spring-cloud-starter-openfeign 4.1.3
• io.github.openfeign:feign-httpclient 13.5
• io.github.openfeign:feign-jackson 13.5
• org.apache.httpcomponents.client5:httpclient5 5.3.1
• javax.jms:javax.jms-api 2.0.1
• javax.servlet:javax.servlet-api 3.1.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0
• com.github.ben-manes.caffeine:caffeine 3.1.8
• com.github.hmcts.java-logging:logging 6.1.6
• com.github.hmcts.java-logging:logging-appinsights 6.1.6
• net.logstash.logback:logstash-logback-encoder 8.0
• com.github.hmcts:service-auth-provider-java-client 4.1.2
• org.apache.commons:commons-csv 1.11.0
• org.apache.commons:commons-lang3 3.17.0
• com.google.guava:guava 33.3.1-jre
• com.github.hmcts:fortify-client 1.4.3
• org.springframework.cloud:spring-cloud-contract-wiremock 4.1.3
• org.testcontainers:postgresql 1.19.3
• org.testcontainers:junit-jupiter 1.19.3
• com.icegreen:greenmail 2.1.0-rc-1
• org.assertj:assertj-core 3.26.3
• com.jayway.awaitility:awaitility 1.7.0
• com.typesafe:config 1.4.3
• org.assertj:assertj-core 3.24.2
• com.typesafe:config 1.4.3

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.7

helm-values

charts/reform-scan-blob-router/values.yaml

helmv3

charts/reform-scan-blob-router/Chart.yaml

• java 5.2.1
• servicebus 1.0.7
• blobstorage 2.0.2
• blobstorage 2.0.2
• blobstorage 2.0.2

terraform

infrastructure/api-mgmt.tf

infrastructure/cft-api-mgmt.tf

infrastructure/providers.tf

• azuread 2.53.1
• azurerm 3.116.0

infrastructure/tf-db-flexible.tf

infrastructure/versions.tf

• hashicorp/terraform >= 0.13

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.9.8

---

• Check this box to trigger a request for Renovate to run again on this repository