FACT-2294 dependancy updates (#3379)

* FACT-2294 dependancy updates

* updated azure api version test

* added more

* added more updates

* downgrade because breaking change

* gradle

* flyway

* poke

* owasp

* poke

* poke

* set directory

* new version of pact

* sonar

Author: justiceia

README.md

@@ -111,3 +111,4 @@ To run migration gradle task expects `FLYWAY_URL` to be present. In case db requ
 ## License
 
 This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details
+

build.gradle

@@ -1,7 +1,7 @@
 buildscript {
   ext {
-    flywayVersion = '10.17.3'
-    postgresqlVersion = '42.7.4'
+    flywayVersion = '10.22.0'
+    postgresqlVersion = '42.7.5'
   }
   dependencies {
     classpath("org.postgresql:postgresql:$postgresqlVersion") // must be compatible with flyway version
@@ -14,14 +14,14 @@ plugins {
   id 'checkstyle'
   id 'pmd'
   id 'jacoco'
-  id 'io.spring.dependency-management' version '1.1.6'
+  id 'io.spring.dependency-management' version '1.1.7'
   id 'org.flywaydb.flyway' version "$flywayVersion"
-  id 'org.springframework.boot' version '3.3.5'
-  id 'org.owasp.dependencycheck' version '9.1.0'
+  id 'org.springframework.boot' version '3.3.9'
+  id 'org.owasp.dependencycheck' version '12.1.0'
   id 'com.github.ben-manes.versions' version '0.51.0'
-  id 'org.sonarqube' version '5.0.0.4638'
+  id 'org.sonarqube' version '6.0.1.5171'
   id 'info.solidsoft.pitest' version '1.15.0'
-  id 'au.com.dius.pact' version '4.6.15'
+  id 'au.com.dius.pact' version '4.7.0-beta.0'
 }
 
 group = 'uk.gov.hmcts.reform'
@@ -276,9 +276,9 @@ dependencies {
   implementation group: 'net.javacrumbs.shedlock', name: 'shedlock-spring', version: '5.14.0'
   implementation group: 'net.javacrumbs.shedlock', name: 'shedlock-provider-jdbc', version: '5.14.0'
 
-  implementation group: 'com.azure', name: 'azure-storage-blob', version: '12.28.1'
+  implementation group: 'com.azure', name: 'azure-storage-blob', version: '12.30.0'
 
-  implementation group: 'com.azure', name: 'azure-messaging-servicebus', version: '7.17.5'
+  implementation group: 'com.azure', name: 'azure-messaging-servicebus', version: '7.17.9'
 
   implementation group: 'org.springframework.boot', name: 'spring-boot-starter-web'
   implementation group: 'org.springframework.boot', name: 'spring-boot-starter-actuator'
@@ -291,13 +291,13 @@ dependencies {
 
 
   implementation group: 'org.springframework.cloud', name: 'spring-cloud-starter-openfeign', version: '4.1.3'
-  implementation group: 'io.github.openfeign', name: 'feign-httpclient', version: '13.3'
-  implementation group: 'io.github.openfeign', name: 'feign-jackson', version: '13.3'
+  implementation group: 'io.github.openfeign', name: 'feign-httpclient', version: '13.5'
+  implementation group: 'io.github.openfeign', name: 'feign-jackson', version: '13.5'
 
   implementation group: 'com.github.java-json-tools', name: 'json-schema-validator', version: '2.2.14', withoutJavaxMailApi
 
   // review following dependency after integrating db structure
-  implementation group: 'io.hypersistence', name: 'hypersistence-utils-hibernate-63', version: '3.8.3'
+  implementation group: 'io.hypersistence', name: 'hypersistence-utils-hibernate-63', version: '3.9.5'
 
 
 
@@ -319,17 +319,17 @@ dependencies {
 
 
   implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.17.0'
-  implementation group: 'commons-io', name: 'commons-io', version: '2.17.0'
+  implementation group: 'commons-io', name: 'commons-io', version: '2.18.0'
   // only used in uk.gov.hmcts.reform.bulkscanprocessor.validation.OcrValidator
   // single import: io.vavr.control.Try
-  implementation group: 'io.vavr', name: 'vavr', version: '0.10.5'
+  implementation group: 'io.vavr', name: 'vavr', version: '0.10.6'
 
-  implementation group: 'org.apache.commons', name: 'commons-csv', version: '1.12.0'
-  implementation group: 'com.github.ben-manes.caffeine', name: 'caffeine', version: '3.1.8'
+  implementation group: 'org.apache.commons', name: 'commons-csv', version: '1.13.0'
+  implementation group: 'com.github.ben-manes.caffeine', name: 'caffeine', version: '3.2.0'
 
-  implementation group: 'io.github.resilience4j', name: 'resilience4j-spring-boot2', version: '2.2.0'
-  implementation group: 'com.launchdarkly', name: 'launchdarkly-java-server-sdk', version: '7.6.0'
-  implementation group: 'com.google.guava', name: 'guava', version: '33.3.1-jre'
+  implementation group: 'io.github.resilience4j', name: 'resilience4j-spring-boot2', version: '2.3.0'
+  implementation group: 'com.launchdarkly', name: 'launchdarkly-java-server-sdk', version: '7.7.0'
+  implementation group: 'com.google.guava', name: 'guava', version: '33.4.0-jre'
 
 
   testImplementation libraries.junit5
@@ -343,24 +343,24 @@ dependencies {
   }
   testImplementation group: 'org.apache.commons', name: 'commons-email', version: '1.6.0'
   testImplementation group: 'io.github.netmikey.logunit', name: 'logunit-core', version: '2.0.0'
-  testImplementation group: 'com.github.hmcts', name: 'fortify-client', version: '1.4.5', classifier: 'all', {
+  testImplementation group: 'com.github.hmcts', name: 'fortify-client', version: '1.4.7', classifier: 'all', {
     exclude group: 'commons-io', module: 'commons-io'
     exclude group: 'org.apache.commons', module: 'commons-lang3'
   }
-  testImplementation group: 'com.icegreen', name: 'greenmail', version: '2.1.0'
+  testImplementation group: 'com.icegreen', name: 'greenmail', version: '2.1.3'
 
   testRuntimeOnly group: 'io.github.netmikey.logunit', name: 'logunit-logback', version: '2.0.0'
 
   integrationTestImplementation sourceSets.main.runtimeClasspath
   integrationTestImplementation sourceSets.test.runtimeClasspath
-  integrationTestImplementation group: 'org.springframework.cloud', name: 'spring-cloud-contract-wiremock', version: '4.1.4', {
+  integrationTestImplementation group: 'org.springframework.cloud', name: 'spring-cloud-contract-wiremock', version: '4.2.0', {
     exclude group: 'com.github.tomakehurst', module: 'wiremock-jre8-standalone'
   }
-  integrationTestImplementation group: 'org.wiremock', name: 'wiremock-standalone', version: '3.9.2'
-  integrationTestImplementation group: 'org.testcontainers', name: 'postgresql', version: '1.19.7', {
+  integrationTestImplementation group: 'org.wiremock', name: 'wiremock-standalone', version: '3.12.1'
+  integrationTestImplementation group: 'org.testcontainers', name: 'postgresql', version: '1.20.6', {
     exclude group: 'junit', module: 'junit'
   }
-  integrationTestImplementation group: 'org.testcontainers', name: 'junit-jupiter', version: '1.20.1'
+  integrationTestImplementation group: 'org.testcontainers', name: 'junit-jupiter', version: '1.20.6'
   integrationTestImplementation group: 'com.revinate', name: 'assertj-json', version: '1.2.0'
 
   functionalTestImplementation sourceSets.main.runtimeClasspath

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.10.2-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.13-all.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME

src/functionalTest/java/uk/gov/hmcts/reform/bulkscanprocessor/controllers/GetSasTokenTest.java

@@ -137,7 +137,7 @@ private void verifySasTokenProperties(Response tokenResponse) throws java.io.IOE
         Date tokenExpiry = DateUtil.parseDatetime(queryParams.get("se"));
         assertThat(tokenExpiry).isNotNull();
         assertThat(queryParams.get("sig")).isNotNull(); //this is a generated hash of the resource string
-        assertThat(queryParams.get("sv")).contains("2024-11-04"); //azure api version is latest
+        assertThat(queryParams.get("sv")).contains("2025-05-05"); //azure api version is latest
         assertThat(queryParams.get("sp")).contains("wl"); //access permissions(write-w,list-l)
     }
 

src/integrationTest/java/uk/gov/hmcts/reform/bulkscanprocessor/controllers/SasTokenControllerTest.java

@@ -67,7 +67,7 @@ private void verifySasTokenProperties(String tokenResponse) throws java.io.IOExc
 
         assertThat(queryParams.get("sig")).isNotNull();//this is a generated hash of the resource string
         assertThat(queryParams.get("se")).startsWith(currentDate);//the expiry date/time for the signature
-        assertThat(queryParams.get("sv")).contains("2024-11-04");//azure api version is latest
+        assertThat(queryParams.get("sv")).contains("2025-05-05");//azure api version is latest
         assertThat(queryParams.get("sp")).contains("wl");//access permissions(write-w,list-l)
     }
 }

src/test/java/uk/gov/hmcts/reform/bulkscanprocessor/services/SasTokenGeneratorServiceTest.java

@@ -60,7 +60,7 @@ void should_generate_sas_token_when_service_configuration_is_available() {
 
         assertThat(queryParams.get("sig")).isNotNull();//this is a generated hash of the resource string
         assertThat(queryParams.get("se")).startsWith(currentDate);//the expiry date/time for the signature
-        assertThat(queryParams.get("sv")).contains("2024-11-04");//azure api version is latest
+        assertThat(queryParams.get("sv")).contains("2025-05-05");//azure api version is latest
         assertThat(queryParams.get("sp")).contains("rwl");//access permissions(write-w,list-l)
     }