Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update Node.js to v18.20.6
• Update babel monorepo (@babel/core, @babel/eslint-parser)
• Update dependency @types/lodash to v4.17.15
• Update dependency com.github.hmcts:auth-checker-lib to v3.0.6
• Update dependency hashicorp/terraform to v1.10.5
• Update dependency org.apache.pdfbox:pdfbox to v2.0.33
• Update dependency org.postgresql:postgresql to v42.7.5
• Update plugin com.github.hmcts.rse-cft-lib to v0.19.1558
• Update spring cloud (org.springframework.cloud:spring-cloud-dependencies, org.springframework.cloud:spring-cloud-starter-openfeign)
• Update dependency @playwright/test to v1.50.0
• Update dependency com.github.ben-manes.caffeine:caffeine to v3.2.0
• Update dependency com.github.hmcts:ccd-case-document-am-client to v1.59
• Update dependency com.google.guava:guava to v33.4.0-jre
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7.7.0
• Update dependency com.microsoft.azure:applicationinsights-core to v3.7.0
• Update dependency com.microsoft.azure:applicationinsights-web to v3.7.0
• Update dependency net.javacrumbs.json-unit:json-unit-assertj to v3.5.0
• Update dependency org.apache.commons:commons-csv to v1.13.0
• Update dependency org.apache.commons:commons-lang3 to v3.17.0
• Update dependency org.apache.commons:commons-text to v1.13.0
• Update dependency org.pitest:pitest to v1.17.4
• Update dependency qs to v6.14.0 (qs, @types/qs)
• Update dependency typescript to v5.7.3
• Update dependency webdriverio to v8.41.0
• Update eslint monorepo (@eslint/js, eslint)
• Update flyway to v10.22.0 (org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core)
• Update log4j2 monorepo to v2.24.3 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update mockito monorepo to v5.15.2 (org.mockito:mockito-junit-jupiter, org.mockito:mockito-core)
• Update plugin com.github.ben-manes.versions to v0.52.0
• Update plugin org.springframework.boot to v3.4.2
• Update spring security to v6.4.2 (org.springframework.security:spring-security-oauth2-resource-server, org.springframework.security:spring-security-oauth2-jose)
• Update versions.serenity to v4.2.14 (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Update Node.js to v22 (node, @types/node)
• Update Terraform azuread to v3
• Update Terraform azurerm to v4
• Update Yarn to v4
• Update dependency com.github.hmcts:core-case-data-store-client to v5
• Update dependency com.github.hmcts:send-letter-client to v5
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency dateformat to v5
• Update dependency eslint to v9
• Update dependency glob to v11
• Update dependency gradle to v8
• Update dependency husky to v9
• Update dependency mocha to v11
• Update dependency mochawesome to v7
• Update dependency net.javacrumbs.json-unit:json-unit-assertj to v4
• Update dependency node-fetch to v3
• Update dependency node-gyp to v11
• Update dependency org.apache.pdfbox:pdfbox to v3
• Update dependency org.springframework.cloud:spring-cloud-dependencies to v2024
• Update dependency webdriverio to v9
• Update dependency yargs-parser to v21
• Update flyway to v11 (major) (org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core)
• Update hmctspublic.azurecr.io/base/java Docker tag to v21
• Update plugin org.owasp.dependencycheck to v12
• Update plugin org.sonarqube to v6
• Update versions.reformLogging to v6 (major) (com.github.hmcts.java-logging:logging-appinsights, com.github.hmcts:java-logging)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update Terraform azuread to v2.53.1
• Update Terraform azurerm to v3.117.0
• Update dependency checkstyle to v10.21.2

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update Yarn to v3.8.7
• Update dependency @types/node to v20.17.16
• Update logback monorepo to v1.5.16 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update plugin io.spring.dependency-management to v1.1.7
• Update versions.pact_version (au.com.dius.pact.consumer:java8, au.com.dius.pact.consumer:junit5)
• Update dependency au.com.dius.pact.provider:gradle to v4.6.16
• Update dependency com.github.hmcts:core-case-data-store-client to v4.9.2
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update Helm release java to v5.2.1
• Update actions/labeler action to v5

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 17-distroless

github-actions

.github/workflows/label.yml

• actions/checkout v4
• actions/labeler v4

gradle

settings.gradle

build.gradle

• org.owasp.dependencycheck 11.1.1

service/gradle.properties

service/build.gradle

• net.serenity-bdd:serenity-gradle-plugin 2.4.34
• au.com.dius.pact.provider:gradle 4.1.41
• io.spring.dependency-management 1.1.6
• org.springframework.boot 3.3.5
• com.github.ben-manes.versions 0.51.0
• org.sonarqube 5.1.0.4882
• info.solidsoft.pitest 1.15.0
• com.github.hmcts.rse-cft-lib 0.19.1516
• checkstyle 10.14.0
• org.projectlombok:lombok 1.18.36
• org.springframework.security:spring-security-oauth2-jose 6.2.3
• org.springframework.security:spring-security-oauth2-resource-server 6.2.3
• org.bitbucket.b_c:jose4j 0.9.6
• org.apache.pdfbox:pdfbox 2.0.32
• org.apache.commons:commons-text 1.12.0
• org.apache.commons:commons-csv 1.11.0
• org.apache.commons:commons-lang3 3.12.0
• com.launchdarkly:launchdarkly-java-server-sdk 7.6.0
• com.github.ben-manes.caffeine:caffeine 3.1.8
• org.flywaydb:flyway-core 10.15.2
• org.flywaydb:flyway-database-postgresql 10.15.2
• com.github.hmcts:java-logging 5.1.9
• com.github.hmcts.java-logging:logging-appinsights 5.1.9
• commons-fileupload:commons-fileupload 1.5
• com.github.hmcts:idam-java-client 3.0.3
• com.github.hmcts:document-management-client 7.0.1
• com.github.hmcts:core-case-data-store-client 4.7.6
• com.github.hmcts:service-auth-provider-java-client 4.1.2
• com.github.hmcts:auth-checker-lib 3.0.4
• com.github.hmcts:send-letter-client 4.0.4
• uk.gov.service.notify:notifications-java-client 5.2.1-RELEASE
• com.github.hmcts:ccd-case-document-am-client 1.7.3
• com.google.guava:guava 33.3.1-jre
• com.fasterxml.jackson.datatype:jackson-datatype-joda 2.18.2
• com.github.hmcts.java-logging:logging 6.1.7
• org.apache.logging.log4j:log4j-api 2.23.1
• org.apache.logging.log4j:log4j-to-slf4j 2.23.1
• ch.qos.logback:logback-classic 1.5.14
• ch.qos.logback:logback-core 1.5.14
• com.microsoft.azure:applicationinsights-core 3.6.2
• com.microsoft.azure:applicationinsights-web 3.6.2
• org.postgresql:postgresql 42.7.4
• org.pitest:pitest 1.16.1
• info.solidsoft.gradle.pitest:gradle-pitest-plugin 1.15.0
• org.pitest:pitest-junit5-plugin 1.2.1
• org.apache.commons:commons-text 1.12.0
• org.awaitility:awaitility 4.2.2
• org.mockito:mockito-core 5.2.0
• org.mockito:mockito-junit-jupiter 5.2.0
• org.mockito:mockito-inline 5.2.0
• com.github.hmcts:fortify-client 1.4.6
• net.serenity-bdd:serenity-core 4.1.6
• net.serenity-bdd:serenity-junit 4.1.6
• net.serenity-bdd:serenity-rest-assured 4.1.6
• net.serenity-bdd:serenity-spring 4.1.6
• net.javacrumbs.json-unit:json-unit-assertj 3.2.7
• au.com.dius.pact.consumer:junit5 4.1.7
• au.com.dius.pact.consumer:java8 4.1.7
• org.junit.jupiter:junit-jupiter-api 5.11.4
• org.junit.jupiter:junit-jupiter-engine 5.11.4
• org.junit.platform:junit-platform-commons 1.11.4
• com.fasterxml.jackson.core:jackson-databind 2.18.2
• com.fasterxml.jackson.core:jackson-core 2.18.2
• com.fasterxml.jackson.core:jackson-annotations 2.18.2
• org.springframework.cloud:spring-cloud-starter-openfeign 4.1.4
• com.github.hmcts:core-case-data-store-client 4.7.6
• com.google.guava:guava 33.3.1-jre
• org.springframework.cloud:spring-cloud-dependencies 2023.0.4

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 7.6.4

helm-values

charts/fpl-case-service/values.yaml

helmv3

charts/fpl-case-service/Chart.yaml

• java 5.2.0
• ccd 9.2.1
• xui-webapp ~1.0.12
• xui-mo-webapp ~1.1.0
• idam-pr 2.3.0
• aac-manage-case-assignment ~0.2.16
• ccd-case-document-am-api 1.7.14
• postgresql 1.0.2
• servicebus 1.0.7
• wa ~1.0.5
• ccd-message-publisher ~0.1.11

npm

package.json

• @axe-core/playwright ^4.8.5
• @types/lodash ^4.14.202
• dotenv ^16.4.1
• @babel/core ^7.11.0
• @babel/eslint-parser ^7.17.0
• @eslint/js ^9.0.0
• @playwright/test ^1.43.1
• @types/node ^20.10.7
• @types/qs ^6.9.11
• axios ^1.6.7
• codeceptjs 3.6.10
• dateformat ^4.6.3
• debug 4.4.0
• eslint ^8.0.0
• eslint-plugin-codeceptjs ^1.3.0
• glob ^7.2.3
• html_codesniffer ^2.5.1
• husky ^7.0.4
• interpolate-json ^3.0.0
• lodash ^4.17.21
• mocha ^10.2.0
• mocha-junit-reporter ^2.2.0
• mocha-multi ^1.1.7
• mochawesome ^6.3.1
• moment 2.30.1
• node-fetch ^2.6.9
• node-gyp ^9.4.0
• qs ^6.11.2
• typescript ^5.4.5
• webdriverio 8.36.1
• debug 4.4.0
• mocha-junit-reporter ^2.2.0
• mocha-multi ^1.1.7
• mochawesome ^6.3.1
• node >=18.0.0
• yargs-parser ^20.2.9
• yarn 3.8.6

nvm

.nvmrc

• node 18.20.5

terraform

infrastructure/alerts.tf

• fpl-action-group undefined
• fpl-exceptions-alert undefined
• fpl-health-failure-alert undefined
• fpl-performance-alert undefined
• fpl-summary-tab-job-alert undefined
• fpl-upcoming-hearings-job-alert undefined

infrastructure/main.tf

• azuread 2.50.0
• azurerm 3.105.0

terraform-version

.terraform-version

• hashicorp/terraform 1.10.3

infrastructure/.terraform-version

• hashicorp/terraform 1.10.3

---

• Check this box to trigger a request for Renovate to run again on this repository