Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• Update dependency com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter to v0.12.8
• Update dependency com.github.hmcts:fortify-client to v1.4.5
• Update dependency hashicorp/terraform to v1.9.8
• Update dependency org.junit:junit-bom to v5.11.3
• Update dependency uk.gov.service.notify:notifications-java-client to v5.2.1-RELEASE
• Update plugin org.springframework.boot to v3.3.5
• Update reformLogging to v6.1.7 (com.github.hmcts.java-logging:logging-appinsights, com.github.hmcts.java-logging:logging)
• Update Terraform azurerm to v4.9.0
• Update dependency checkstyle to v10.20.1
• Update dependency com.azure.spring:spring-cloud-azure-starter-active-directory to v5.18.0
• Update dependency gradle to v8.11
• Update dependency org.redisson:redisson to v3.38.1
• Update dependency pmd to v7.7.0
• Update log4j2 monorepo to v2.24.1 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update plugin org.owasp.dependencycheck to v11

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update plugin org.owasp.dependencycheck to v10.0.4

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions

.github/workflows/terraform_format.yml

• actions/checkout v4
• dflook/terraform-fmt v1
• stefanzweifel/git-auto-commit-action v5

gradle

build.gradle

• io.spring.dependency-management 1.1.6
• org.springframework.boot 3.3.3
• org.owasp.dependencycheck 10.0.3
• com.github.ben-manes.versions 0.51.0
• org.sonarqube 5.1.0.4882
• io.freefair.lombok 8.10.2
• checkstyle 10.18.2
• pmd 7.6.0
• com.azure.spring:spring-cloud-azure-starter-active-directory 5.16.0
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.6.0
• com.github.hmcts.java-logging:logging 6.1.6
• com.github.hmcts.java-logging:logging-appinsights 6.1.6
• org.apache.logging.log4j:log4j-api 2.24.1
• org.apache.logging.log4j:log4j-to-slf4j 2.24.1
• net.logstash.logback:logstash-logback-encoder 8.0
• uk.gov.service.notify:notifications-java-client 5.2.0-RELEASE
• com.github.hmcts:pip-data-models 2.1.31
• org.apache.logging.log4j:log4j-api 2.23.1
• org.apache.logging.log4j:log4j-to-slf4j 2.23.1
• com.opencsv:opencsv 5.9
• org.apache.poi:poi-ooxml 5.3.0
• org.redisson:redisson 3.37.0
• com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter 0.12.7
• org.junit:junit-bom 5.11.2
• com.squareup.okhttp3:mockwebserver 4.12.0
• com.squareup.okhttp3:okhttp 4.12.0
• com.squareup.okhttp3:okhttp-tls 4.12.0
• org.apache.pdfbox:pdfbox 3.0.3
• com.redis:testcontainers-redis 2.2.2
• io.github.hakky54:logcaptor 2.9.3
• com.github.hmcts:fortify-client 1.4.4

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.10.2

helm-values

charts/pip-publication-services/values.yaml

helmv3

charts/pip-publication-services/Chart.yaml

• java 5.2.1

terraform

infrastructure/providers.tf

• azurerm 4.3.0

infrastructure/tf-apim-api.tf

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.9.7

---

• Check this box to trigger a request for Renovate to run again on this repository