Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update spring boot to v3.4.0 (org.springframework.boot:spring-boot-starter-tomcat, org.springframework.boot:spring-boot-starter-data-jpa, org.springframework.boot:spring-boot-starter-web, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot)
• Update flyway to v11 (major) (org.flywaydb:flyway-database-hsqldb, org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update plugin org.sonarqube to v6
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update log4j2 monorepo to v2.24.2 (org.apache.logging.log4j:log4j-api, org.apache.logging.log4j:log4j-core)
• Update dependency checkstyle to v10.20.2
• Update dependency pmd to v7.8.0
• Update flyway to v10.22.0 (org.flywaydb:flyway-database-hsqldb, org.flywaydb:flyway-database-postgresql, org.flywaydb:flyway-core, org.flywaydb.flyway)
• Update mockito monorepo to v5.14.2 (org.mockito:mockito-junit-jupiter, org.mockito:mockito-core)
• Update dependency com.github.stefanbirkner:fake-sftp-server-rule to v2
• Update dependency org.apache.tomcat.embed:tomcat-embed-core to v11
• Update dependency org.apache.tomcat.embed:tomcat-embed-jasper to v11
• Update plugin org.owasp.dependencycheck to v11
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api to v3.0.2

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• actions/setup-java v4

.github/workflows/codeql.yml

• actions/checkout v4
• github/codeql-action v3
• actions/setup-java v4
• github/codeql-action v3
• github/codeql-action v3

.github/workflows/publish-openapi.yaml

• hmcts/workflow-publish-openapi-spec v1

gradle

settings.gradle

build.gradle

• org.flywaydb:flyway-database-postgresql 10.21.0
• io.spring.dependency-management 1.1.6
• org.springframework.boot 3.3.5
• com.github.ben-manes.versions 0.51.0
• org.owasp.dependencycheck 10.0.4
• org.sonarqube 5.1.0.4882
• org.flywaydb.flyway 10.21.0
• checkstyle 10.12.7
• pmd 7.6.0
• org.springframework:spring-expression 6.2.0
• org.springframework:spring-aop 6.2.0
• org.springframework:spring-aspects 6.2.0
• org.springframework:spring-jcl 6.2.0
• org.springframework:spring-jdbc 6.2.0
• org.springframework:spring-orm 6.2.0
• org.springframework:spring-webmvc 6.2.0
• org.springframework.boot:spring-boot-starter-actuator 3.3.5
• org.springframework.boot:spring-boot-starter-web 3.3.5
• org.springframework.boot:spring-boot-starter-data-jpa 3.3.5
• org.apache.tomcat.embed:tomcat-embed-jasper 10.1.33
• org.apache.logging.log4j:log4j-core 2.24.1
• org.apache.logging.log4j:log4j-api 2.24.1
• org.javassist:javassist 3.30.2-GA
• org.apache.commons:commons-lang3 3.17.0
• org.apache.openjpa:openjpa-persistence-jdbc 4.0.1
• org.codehaus.castor:castor-codegen 1.4.1
• xalan:serializer 2.7.3
• org.jboss.spec.javax.rmi:jboss-rmi-api_1.0_spec 1.0.6.Final
• org.springframework:spring-core 6.2.0
• org.springframework:spring-beans 6.2.0
• org.springframework:spring-context 6.2.0
• org.springframework.data:spring-data-commons 3.4.0
• org.springframework.data:spring-data-jpa 3.4.0
• org.springframework:spring-tx 6.2.0
• org.springframework:spring-web 6.2.0
• com.hierynomus:sshj 0.39.0
• org.apache.sshd:sshd-common 2.14.0
• org.apache.sshd:sshd-sftp 2.14.0
• org.apache.sshd:sshd-core 2.14.0
• org.apache.commons:commons-vfs2 2.9.0
• org.apache.commons:commons-configuration2 2.11.0
• org.postgresql:postgresql 42.7.4
• net.bytebuddy:byte-buddy 1.15.10
• org.glassfish.web:jakarta.servlet.jsp.jstl 3.0.1
• jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api 3.0.0
• jakarta.el:jakarta.el-api 6.0.1
• org.apache.tomee:openejb-core 9.1.3
• org.slf4j:slf4j-api 2.0.16
• org.apache.hadoop:hadoop-hdfs-client 3.4.1
• org.yaml:snakeyaml 2.3
• org.apache.tomee:jakartaee-api 10.0
• ch.qos.logback:logback-core 1.5.12
• ch.qos.logback:logback-classic 1.5.12
• com.fasterxml.jackson.core:jackson-databind 2.18.2
• com.fasterxml.jackson.core:jackson-core 2.18.2
• org.apache.tomcat.embed:tomcat-embed-core 10.1.33
• com.squareup.okio:okio 3.9.1
• org.flywaydb:flyway-core 10.21.0
• org.flywaydb:flyway-database-postgresql 10.21.0
• org.flywaydb:flyway-database-hsqldb 10.21.0
• com.github.stefanbirkner:fake-sftp-server-rule fake-sftp-server-rule-2.0.0
• de.ppi:fake-sftp-server-extension 1.0.3
• org.junit.jupiter:junit-jupiter 5.11.3
• org.easymock:easymock 5.5.0
• org.mockito:mockito-core 5.2.0
• org.mockito:mockito-inline 5.2.0
• org.mockito:mockito-junit-jupiter 5.3.1
• org.springframework.boot:spring-boot-starter-tomcat 3.3.5
• jakarta.servlet:jakarta.servlet-api 6.1.0
• jakarta.servlet.jsp:jakarta.servlet.jsp-api 4.0.0
• org.bouncycastle:bcprov-jdk18on 1.79

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.11.1

helm-values

charts/pdda-public-display-data-aggregator/values.yaml

helmv3

charts/pdda-public-display-data-aggregator/Chart.yaml

• java 5.2.1

regex

Dockerfile

• microsoft/ApplicationInsights-Java 3.6.2

---

• Check this box to trigger a request for Renovate to run again on this repository