Update All patch-minor dependencies

Author: renovate[bot]

build.gradle

@@ -4,16 +4,16 @@ plugins {
     id 'idea'
     id 'application'
     id 'io.spring.dependency-management' version '1.1.7'
-    id 'org.springframework.boot' version '3.4.6'
-    id 'org.owasp.dependencycheck' version '12.1.1'
+    id 'org.springframework.boot' version '3.5.3'
+    id 'org.owasp.dependencycheck' version '12.1.3'
     id 'se.patrikerdes.use-latest-versions' version '0.2.18'
-    id 'com.github.ben-manes.versions' version '0.51.0'
+    id 'com.github.ben-manes.versions' version '0.52.0'
     id 'org.sonarqube' version '6.2.0.5505'
     id 'jacoco'
     id "com.github.kt3k.coveralls" version "2.12.2"
-    id 'com.github.spacialcircumstances.gradle-cucumber-reporting' version '0.1.23'
-    id "info.solidsoft.pitest" version '1.9.11'
-    id 'uk.gov.hmcts.java' version '0.12.63'
+    id 'com.github.spacialcircumstances.gradle-cucumber-reporting' version '0.1.25'
+    id "info.solidsoft.pitest" version '1.15.0'
+    id 'uk.gov.hmcts.java' version '0.12.66'
 }
 
 dependencyUpdates.resolutionStrategy {
@@ -115,10 +115,10 @@ java {
 
 ext {
     sl4jVersion = '2.0.17'
-    lombokVersion = '1.18.34'
+    lombokVersion = '1.18.38'
     reformLogging = '6.1.9'
     springCloudVersion = '2024.0.1'
-    springSecurity = '6.4.6'
+    springSecurity = '6.5.1'
     limits = [
             'instruction': 6,
             'branch'     : 8,
@@ -137,7 +137,7 @@ dependencyManagement {
 
 dependencies {
 
-    implementation group: 'org.bouncycastle', name: 'bcprov-jdk18on', version: '1.78'
+    implementation group: 'org.bouncycastle', name: 'bcprov-jdk18on', version: '1.81'
     compileOnly group: 'org.projectlombok', name: 'lombok', version: lombokVersion
     annotationProcessor  group: 'org.projectlombok', name: 'lombok', version: lombokVersion
     implementation group: 'com.github.hmcts.java-logging', name: 'logging', version: reformLogging
@@ -152,21 +152,21 @@ dependencies {
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter-actuator'
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter-web'
 
-    implementation group: 'org.springdoc', name: 'springdoc-openapi-starter-webmvc-ui', version: '2.8.8'
-    implementation "org.flywaydb:flyway-core:9.21.1"
-    implementation group: 'org.yaml', name: 'snakeyaml', version: '2.3'
-    implementation group: 'com.zaxxer', name: 'HikariCP', version: '5.0.1'
-    runtimeOnly group: 'org.postgresql', name: 'postgresql', version: '42.7.6'
+    implementation group: 'org.springdoc', name: 'springdoc-openapi-starter-webmvc-ui', version: '2.8.9'
+    implementation "org.flywaydb:flyway-core:9.22.3"
+    implementation group: 'org.yaml', name: 'snakeyaml', version: '2.4'
+    implementation group: 'com.zaxxer', name: 'HikariCP', version: '5.1.0'
+    runtimeOnly group: 'org.postgresql', name: 'postgresql', version: '42.7.7'
     implementation group: 'com.github.hmcts', name: 'auth-checker-lib', version: '2.1.5'
     constraints {
-        implementation('com.google.guava:guava:33.1.0-jre') {
+        implementation('com.google.guava:guava:33.4.8-jre') {
             because 'previous versions of this transitive dependency have CVEs'
         }
     }
     implementation group: 'javax.inject', name: 'javax.inject', version: '1'
 
-    implementation group: 'commons-fileupload', name: 'commons-fileupload', version: '1.5'
-    implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.13.0'
+    implementation group: 'commons-fileupload', name: 'commons-fileupload', version: '1.6.0'
+    implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.17.0'
     implementation group: 'com.sun.mail', name: 'mailapi', version: '2.0.1'
 
     implementation group: 'org.apache.httpcomponents', name: 'httpclient', version: '4.5.14'
@@ -178,23 +178,23 @@ dependencies {
     implementation group: 'org.springframework.security', name: 'spring-security-web', version: springSecurity
     implementation group: 'org.springframework.security', name: 'spring-security-crypto', version: springSecurity
 
-    aatImplementation 'com.github.hmcts:service-auth-provider-java-client:5.1.0'
+    aatImplementation 'com.github.hmcts:service-auth-provider-java-client:5.3.2'
     codacy 'com.github.codacy:codacy-coverage-reporter:13.13.7'
     testImplementation "org.junit.jupiter:junit-jupiter-api"
     testRuntimeOnly "org.junit.jupiter:junit-jupiter-engine"
     testRuntimeOnly "org.junit.vintage:junit-vintage-engine"
 
-    testImplementation "org.junit.jupiter:junit-jupiter:5.11.4"
-    testImplementation "org.testcontainers:testcontainers:1.21.1"
-    testImplementation "org.testcontainers:junit-jupiter:1.21.1"
+    testImplementation "org.junit.jupiter:junit-jupiter:5.13.2"
+    testImplementation "org.testcontainers:testcontainers:1.21.2"
+    testImplementation "org.testcontainers:junit-jupiter:1.21.2"
     testImplementation 'org.testcontainers:postgresql'
 
     testImplementation group: 'org.springframework.boot', name: 'spring-boot-starter-test'
 
-    testImplementation group: 'com.github.hmcts', name: 'ccd-test-definitions', version: '7.24.2'
-    testImplementation group: 'com.github.hmcts', name: 'befta-fw', version: '9.2.3'
-    testImplementation 'com.github.hmcts:fortify-client:1.4.8:all'
-    testImplementation 'info.solidsoft.gradle.pitest:gradle-pitest-plugin:1.9.11'
+    testImplementation group: 'com.github.hmcts', name: 'ccd-test-definitions', version: '7.27.7-prerelease-CME-537'
+    testImplementation group: 'com.github.hmcts', name: 'befta-fw', version: '9.2.4'
+    testImplementation 'com.github.hmcts:fortify-client:1.4.9:all'
+    testImplementation 'info.solidsoft.gradle.pitest:gradle-pitest-plugin:1.15.0'
 }
 // end::dependencies[]
 

gradle/wrapper/gradle-wrapper.jar

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.2-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME

gradle/wrapper/gradle-wrapper.properties

@@ -15,6 +15,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
+# SPDX-License-Identifier: Apache-2.0
+#
 
 ##############################################################################
 #
@@ -55,7 +57,7 @@
 #       Darwin, MinGW, and NonStop.
 #
 #   (3) This script is generated from the Groovy template
-#       https://github.com/gradle/gradle/blob/HEAD/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt
+#       https://github.com/gradle/gradle/blob/HEAD/platforms/jvm/plugins-application/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt
 #       within the Gradle project.
 #
 #       You can find Gradle at https://github.com/gradle/gradle/.
@@ -84,7 +86,7 @@ done
 # shellcheck disable=SC2034
 APP_BASE_NAME=${0##*/}
 # Discard cd standard output in case $CDPATH is set (https://github.com/gradle/gradle/issues/25036)
-APP_HOME=$( cd "${APP_HOME:-./}" > /dev/null && pwd -P ) || exit
+APP_HOME=$( cd -P "${APP_HOME:-./}" > /dev/null && printf '%s\n' "$PWD" ) || exit
 
 # Use the maximum available, or set MAX_FD != -1 to use that value.
 MAX_FD=maximum
@@ -112,7 +114,7 @@ case "$( uname )" in                #(
   NONSTOP* )        nonstop=true ;;
 esac
 
-CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar
+CLASSPATH="\\\"\\\""
 
 
 # Determine the Java command to use to start the JVM.
@@ -203,15 +205,15 @@ fi
 DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"'
 
 # Collect all arguments for the java command:
-#   * DEFAULT_JVM_OPTS, JAVA_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments,
+#   * DEFAULT_JVM_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments,
 #     and any embedded shellness will be escaped.
 #   * For example: A user cannot expect ${Hostname} to be expanded, as it is an environment variable and will be
 #     treated as '${Hostname}' itself on the command line.
 
 set -- \
         "-Dorg.gradle.appname=$APP_BASE_NAME" \
         -classpath "$CLASSPATH" \
-        org.gradle.wrapper.GradleWrapperMain \
+        -jar "$APP_HOME/gradle/wrapper/gradle-wrapper.jar" \
         "$@"
 
 # Stop when "xargs" is not available.

gradlew

@@ -13,6 +13,8 @@
 @rem See the License for the specific language governing permissions and
 @rem limitations under the License.
 @rem
+@rem SPDX-License-Identifier: Apache-2.0
+@rem
 
 @if "%DEBUG%"=="" @echo off
 @rem ##########################################################################
@@ -68,11 +70,11 @@ goto fail
 :execute
 @rem Setup the command line
 
-set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar
+set CLASSPATH=
 
 
 @rem Execute Gradle
-"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %*
+"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" -jar "%APP_HOME%\gradle\wrapper\gradle-wrapper.jar" %*
 
 :end
 @rem End local scope for the variables with windows NT shell

gradlew.bat

@@ -1 +1 @@
-1.9.4
+1.12.2