Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	npm-run-all

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency axios to v1.7.9
• Update dependency chai-as-promised to v7.1.2
• Update dependency com.github.hmcts:java-logging to v6.1.7
• Update dependency html-webpack-plugin to v5.6.3
• Update dependency jacoco to v0.8.12
• Update dependency org.apache.tomcat.embed:tomcat-embed-websocket to v9.0.98
• Update dependency org.elasticsearch:elasticsearch to v7.17.26
• Update dependency org.projectlombok:lombok to v1.18.36
• Update logback monorepo to v1.5.14 (ch.qos.logback:logback-core, ch.qos.logback:logback-classic)
• Update plugin com.github.hmcts.rse-cft-lib to v0.19.1512
• Update plugin hmcts.ccd.sdk to v5.5.16
• Update versions.reformsJavaLogging to v5.1.9 (com.github.hmcts.java-logging:logging-spring, com.github.hmcts.java-logging:logging-appinsights)
• Update Node.js to v18.20.5
• Update apache-poi monorepo to v5.3.0 (org.apache.poi:poi-scratchpad, org.apache.poi:poi-ooxml, org.apache.poi:poi)
• Update dependency allure-commandline to v2.32.0
• Update dependency chai to v4.5.0
• Update dependency checkstyle to v10.21.0
• Update dependency codeceptjs to v3.6.10
• Update dependency com.github.hmcts:befta-fw to v9.2.0
• Update dependency com.github.hmcts:ccd-case-document-am-client to v1.59
• Update dependency com.github.hmcts:ccd-case-document-am-client to v1.59
• Update dependency com.github.hmcts:idam-java-client to v2.1.1
• Update dependency com.github.hmcts:service-auth-provider-java-client to v4.1.2
• Update dependency com.sendgrid:sendgrid-java to v4.10.3
• Update dependency commons-validator:commons-validator to v1.9.0
• Update dependency css-loader to v6.11.0
• Update dependency hashicorp/terraform to v1.10.3
• Update dependency io.github.openfeign:feign-jackson to v11.10
• Update dependency net.javacrumbs.json-unit:json-unit-assertj to v3.5.0
• Update dependency org.apache.commons:commons-compress to v1.27.1
• Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.7.0
• Update dependency org.springdoc:springdoc-openapi-ui to v1.8.0
• Update dependency org.yaml:snakeyaml to v2.3
• Update dependency org.yaml:snakeyaml to v2.3
• Update dependency playwright to v1.49.1
• Update dependency pmd to v6.55.0
• Update dependency puppeteer to v23.11.1
• Update dependency puppeteer-core to v23.11.1
• Update dependency uk.gov.service.notify:notifications-java-client to v5.2.1-RELEASE
• Update dependency webpack to v5.97.1
• Update guava monorepo
• Update jackson monorepo to v2.18.2 (com.fasterxml.jackson.core:jackson-annotations, com.fasterxml.jackson.core:jackson-core, com.fasterxml.jackson.core:jackson-databind)
• Update junit5 monorepo (org.junit.platform:junit-platform-commons, org.junit.platform:junit-platform-engine, org.junit.jupiter:junit-jupiter-params, org.junit.jupiter:junit-jupiter-engine, org.junit.jupiter:junit-jupiter-api)
• Update log4j2 monorepo to v2.24.3 (org.apache.logging.log4j:log4j-to-slf4j, org.apache.logging.log4j:log4j-api)
• Update plugin au.com.dius.pact to v4.6.16
• Update plugin org.owasp.dependencycheck to v9.2.0
• Update plugin org.sonarqube to v5.1.0.4882
• Update plugin org.springframework.boot to v3.4.1
• Update spring cloud to v4.2.0 (org.springframework.cloud:spring-cloud-starter-openfeign, org.springframework.cloud:spring-cloud-starter-bootstrap)
• Update versions.serenity to v4.2.9 (net.serenity-bdd:serenity-spring, net.serenity-bdd:serenity-rest-assured, net.serenity-bdd:serenity-junit, net.serenity-bdd:serenity-core)
• Update Node.js to v22
• Update Yarn to v4
• Update dependency axios-debug-log to v1
• Update dependency chai to v5
• Update dependency chai-as-promised to v8
• Update dependency com.github.hmcts.java-logging:logging-appinsights to v6
• Update dependency com.github.hmcts:befta-fw to v20
• Update dependency com.github.hmcts:ccd-client to v5
• Update dependency com.github.hmcts:idam-java-client to v3
• Update dependency com.github.hmcts:send-letter-client to v5
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5
• Update dependency com.google.guava:guava to v33
• Update dependency com.launchdarkly:launchdarkly-java-server-sdk to v7
• Update dependency css-loader to v7
• Update dependency io.github.openfeign:feign-jackson to v13
• Update dependency net.javacrumbs.json-unit:json-unit-assertj to v4
• Update dependency nodemon to v3
• Update dependency org.apache.tomcat.embed:tomcat-embed-websocket to v11
• Update dependency org.elasticsearch:elasticsearch to v8
• Update dependency pmd to v7
• Update plugin org.owasp.dependencycheck to v11
• Update plugin org.sonarqube to v6
• Update webdriverio monorepo to v9 (major) (@wdio/cli, @wdio/sauce-service, webdriverio)
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Replace dependency npm-run-all with npm-run-all2 ^5.0.0
• Update Helm release ccd to v9.2.1
• Update Yarn to v3.8.7
• Update dependency com.github.hmcts:ccd-client to v4.9.5-SPRING2
• Update dependency com.github.hmcts:document-management-client to v7.0.1
• Update dependency com.github.hmcts:fortify-client to v1.4.6
• Update dependency au.com.dius.pact.consumer:junit5 to v4.6.16
• Update dependency com.github.hmcts:service-auth-provider-java-client to v5.3.0
• Update dependency gradle to v8.12
• Update webdriverio monorepo (@wdio/cli, @wdio/sauce-service, webdriverio)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• hmctspublic.azurecr.io/base/java 21-distroless

github-actions

.github/workflows/ci.yml

• actions/checkout v4
• actions/setup-java v4

gradle

settings.gradle

build.gradle

• cz.habarta.typescript-generator:typescript-generator-gradle-plugin 3.2.1263
• org.owasp.dependencycheck 9.1.0
• org.sonarqube 5.0.0.4638
• org.springframework.boot 3.2.4
• com.github.ben-manes.versions 0.51.0
• hmcts.ccd.sdk 5.5.2
• com.github.hmcts.rse-cft-lib 0.19.1218
• au.com.dius.pact 4.3.8
• checkstyle 10.14.0
• pmd 6.18.0
• jacoco 0.8.11
• org.bouncycastle:bcpkix-jdk15on 1.70
• com.google.guava:guava 32.0.0-jre
• commons-fileupload:commons-fileupload 1.5
• org.json:json 20240303
• org.yaml:snakeyaml 2.0
• org.junit.jupiter:junit-jupiter-api 5.10.2
• org.junit.jupiter:junit-jupiter-engine 5.10.2
• org.junit.jupiter:junit-jupiter-params 5.10.2
• org.junit.platform:junit-platform-commons 1.10.2
• org.junit.platform:junit-platform-engine 1.10.2
• org.apache.logging.log4j:log4j-api 2.23.1
• org.apache.logging.log4j:log4j-to-slf4j 2.23.1
• ch.qos.logback:logback-classic 1.5.6
• ch.qos.logback:logback-core 1.5.6
• com.google.guava:guava 33.1.0-jre
• com.fasterxml.jackson.core:jackson-databind 2.15.3
• com.fasterxml.jackson.core:jackson-core 2.15.3
• com.fasterxml.jackson.core:jackson-annotations 2.15.3
• com.launchdarkly:launchdarkly-java-server-sdk 5.10.9
• com.github.hmcts:befta-fw 9.1.0
• com.github.hmcts:ccd-client 4.9.2
• com.github.hmcts:idam-java-client 3.0.3
• com.github.hmcts:java-logging 6.1.4
• com.github.hmcts.java-logging:logging-appinsights 5.1.7
• com.github.hmcts.java-logging:logging-spring 5.1.7
• com.github.hmcts:send-letter-client 4.0.4
• com.github.hmcts:service-auth-provider-java-client 5.1.2
• com.github.hmcts:ccd-case-document-am-client 1.7.3
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.5.0
• org.springframework.cloud:spring-cloud-starter-bootstrap 4.1.2
• org.springframework.cloud:spring-cloud-starter-netflix-hystrix 2.2.10.RELEASE
• org.elasticsearch:elasticsearch 7.17.20
• uk.gov.service.notify:notifications-java-client 5.0.1-RELEASE
• org.apache.commons:commons-collections4 4.4
• commons-validator:commons-validator 1.8.0
• com.github.ben-manes.caffeine:caffeine 3.1.8
• org.springdoc:springdoc-openapi-ui 1.6.15
• com.sendgrid:sendgrid-java 4.0.1
• org.apache.commons:commons-compress 1.26.0
• com.github.hmcts:idam-java-client 2.0.1
• com.github.hmcts:service-auth-provider-java-client 4.0.2
• org.apache.poi:poi 5.2.5
• org.apache.poi:poi-ooxml 5.2.5
• org.apache.poi:poi-scratchpad 5.2.4
• org.apache.tomcat.embed:tomcat-embed-websocket 9.0.83
• com.github.hmcts:ccd-case-document-am-client 1.7.3
• org.projectlombok:lombok 1.18.32
• com.github.hmcts:fortify-client 1.4.1
• org.mockito:mockito-inline 5.2.0
• com.jayway.awaitility:awaitility 1.7.0
• com.github.stefanbirkner:system-lambda 1.2.1
• io.github.openfeign:feign-jackson 11.7
• net.serenity-bdd:serenity-core 4.1.6
• net.serenity-bdd:serenity-junit 4.1.6
• net.serenity-bdd:serenity-rest-assured 4.1.6
• net.serenity-bdd:serenity-spring 4.1.6
• org.springframework.cloud:spring-cloud-starter-openfeign 4.1.1
• com.github.hmcts:document-management-client 7.0.0
• net.javacrumbs.json-unit:json-unit-assertj 3.2.7
• au.com.dius.pact.consumer:junit5 4.1.7
• org.junit.platform:junit-platform-commons 1.8.1
• org.yaml:snakeyaml 2.0

gradle-wrapper

gradle/wrapper/gradle-wrapper.properties

• gradle 8.7

helm-values

charts/adoption-cos-api/values.yaml

helmv3

charts/adoption-cos-api/Chart.yaml

• java 5.2.1
• ccd 9.2.0
• xui-webapp ~1.0.0
• ccd-case-document-am-api 1.7.14
• idam-pr 2.3.0
• postgresql 1.0.2

npm

package.json

• axios ^1.7.4
• @wdio/cli ^8.10.5
• @wdio/sauce-service ^8.22.1
• allure-commandline ^2.17.2
• axios-debug-log ^0.8.4
• chai ^4.3.6
• chai-as-promised ^7.1.1
• codeceptjs ^3.4.1
• css-loader ^6.7.1
• html-webpack-plugin ^5.5.0
• lodash ^4.17.21
• mocha >=2.2.0 <7 || >=9
• mocha-junit-reporter ^2.0.0
• mocha-multi ^1.1.6
• mochawesome ^7.1.3
• moment ^2.29.3
• nodemon ^2.0.21
• npm-run-all ^4.1.2
• otplib ^12.0.1
• playwright ^1.22.2
• puppeteer ^23.3.0
• puppeteer-core ^23.3.0
• webdriverio ^7.19.7
• webpack ^5.94.0
• node >=18.16.1
• minimist ^1.2.6
• axios ^1.7.4
• yarn 3.8.6

nvm

.nvmrc

• node 18.16.1

terraform

infrastructure/main.tf

terraform-version

infrastructure/.terraform-version

• hashicorp/terraform 1.3.6

---

• Check this box to trigger a request for Renovate to run again on this repository