Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
nuget	FluentValidation.AspNetCore
nuget	xunit

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (10)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
nuget	AutoFixture	2025-01-21
nuget	AutoFixture.AutoNSubstitute	2025-01-21
nuget	AutoFixture.Xunit2	2025-01-21
nuget	Moq	2024-09-07
terraform	github.com/dfe-digital/terraform-statuscake-tls-monitor	2024-12-10
terraform	statuscake	2023-10-20

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/setup-dotnet action to v6
• Update actions/setup-java action to v5
• Update aspnet-api-versioning monorepo to v10 (Asp.Versioning.Mvc, Asp.Versioning.Mvc.ApiExplorer)
• Update dependency coverlet.collector to v10
• Update dependency MediatR to v14
• Update dependency Microsoft.ApplicationInsights.AspNetCore to v3
• Update dependency Microsoft.AspNetCore.Authentication.OpenIdConnect to v10
• Update dependency Microsoft.NET.Test.Sdk to v18
• Update dependency MockQueryable.NSubstitute to v10
• Update dependency Scrutor to v7
• Update dependency TimeZoneConverter to v7
• Update docker/build-push-action action to v7
• Update docker/setup-buildx-action action to v4
• Update github/codeql-action action to v4
• Update Terraform azapi to v2
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update aspnet-api-versioning monorepo to 8.1.1 (Asp.Versioning.Mvc, Asp.Versioning.Mvc.ApiExplorer)
• Update dependency Azure.Messaging.ServiceBus to 7.20.2
• Update dependency GovUK.Dfe.CoreLibs.AsyncProcessing to 1.0.13
• Update dependency GovUK.Dfe.CoreLibs.Http to 1.0.11
• Update dependency Microsoft.NET.Test.Sdk to 17.14.1
• Update dependency Newtonsoft.Json to 13.0.4
• Update dependency Serilog.Sinks.ApplicationInsights to 5.0.1
• Update dependency xunit.runner.visualstudio to 3.1.5
• Update DFE-Digital/deploy-azure-container-apps-action action to v5.2.2
• Update dotnet monorepo (patch) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Authentication.OpenIdConnect, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.AspNetCore.SignalR.Client, Microsoft.Bcl.AsyncInterfaces, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.InMemory, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Caching.Abstractions, Microsoft.Extensions.Options.ConfigurationExtensions)
• Update swashbuckle-aspnetcore monorepo to 10.1.7 (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2.8.2
• Update aquasecurity/trivy-action action to v0.36.0
• Update dependency BenchmarkDotNet to 0.15.8
• Update dependency FluentValidation to 12.1.1
• Update dependency hashicorp/terraform to v1.15.8
• Update dependency Microsoft.Extensions.Azure to 1.14.0
• Update dependency Microsoft.FeatureManagement.AspNetCore to 4.6.0
• Update dependency Microsoft.Playwright to 1.61.0
• Update dependency NetEscapades.AspNetCore.SecurityHeaders to 1.3.1
• Update gittools/actions action to v4.7.0
• Update nswag monorepo to 14.7.1 (NSwag.AspNetCore, NSwag.MSBuild)
• Update swashbuckle-aspnetcore monorepo to 10.2.3 (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2.9.1

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/docker-test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency Microsoft.OpenApi to 2.7.6 [SECURITY]
• Update dependency AutoMapper to v15 [SECURITY]
• Pin dependencies (DFE-Digital/rsd-github-actions, DFE-Digital/terraform-linting-actions, actions/cache, actions/checkout, actions/setup-dotnet, actions/setup-java, gittools/actions, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk)
• Update actions/cache digest to 0057852
• Update actions/checkout digest to 11d5960
• Update actions/setup-java digest to c1e3236
• Update docker/build-push-action digest to 10e90e3
• Update docker/setup-buildx-action digest to 8d2750c
• Update github/codeql-action digest to 4187e74
• Update dependency FluentValidation.AspNetCore to 11.3.1
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (3)

• mcr.microsoft.com/dotnet/sdk 10.0-noble → [Updates: 10.0-noble]
• mcr.microsoft.com/dotnet/aspnet 10.0-azurelinux3.0 → [Updates: 10.0-azurelinux3.0]
• mcr.microsoft.com/dotnet/aspnet 10.0-noble → [Updates: 10.0-noble]

github-actions (6)

.github/workflows/build-test-template.yml (4)

• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-dotnet v4 → [Updates: v6, v4]
• actions/setup-java v4 → [Updates: v5, v4]
• actions/cache v4 → [Updates: v6, v4]

.github/workflows/continuous-integration-terraform.yml (2)

• actions/checkout v5 → [Updates: v7, v5]
• DFE-Digital/terraform-linting-actions v1.2.1 → [Updates: v1.2.1]

.github/workflows/deploy.yml (8)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• DFE-Digital/rsd-github-actions v1 → [Updates: v1]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• ubuntu 24.04
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/docker-test.yml (5)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7, v6]
• aquasecurity/trivy-action 0.34.2@97e0b3872f55f89b95b2f65b3dbab56962816478 → [Updates: v0.36.0]
• github/codeql-action v3@181d5eefc20863364f96762470ba6f862bdef56b → [Updates: v4, v3]

.github/workflows/pack-template.yml (3)

• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-dotnet v4 → [Updates: v6, v4]
• gittools/actions v4.5.0 → [Updates: v4.7.0, v4.5.0]

.github/workflows/test-solution.yml (6)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• actions/setup-dotnet v4@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 → [Updates: v6]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• actions/cache v4@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v6, v4]
• actions/cache v4@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v6, v4]
• ubuntu 24.04

nuget (11)

src/Benchmarks/DfE.ExternalApplications.Benchmarks.csproj (1)

• BenchmarkDotNet 0.14.0 → [Updates: 0.15.8]

src/DfE.ExternalApplications.Api/DfE.ExternalApplications.Api.csproj (23)

• TimeZoneConverter 6.1.0 → [Updates: 7.2.0]
• Swashbuckle.AspNetCore.Annotations 10.1.4 → [Updates: 10.1.7, 10.2.3]
• Swashbuckle.AspNetCore 10.1.4 → [Updates: 10.1.7, 10.2.3]
• Microsoft.OpenApi 2.4.1 → [Updates: 2.7.6]
• Serilog.Sinks.ApplicationInsights 5.0.0 → [Updates: 5.0.1]
• Serilog.AspNetCore 10.0.0
• NSwag.MSBuild 14.6.3 → [Updates: 14.7.1]
• NSwag.AspNetCore 14.6.3 → [Updates: 14.7.1]
• NetEscapades.AspNetCore.SecurityHeaders 1.1.0 → [Updates: 1.3.1]
• Microsoft.FeatureManagement.AspNetCore 4.4.0 → [Updates: 4.6.0]
• Microsoft.Extensions.Azure 1.13.0 → [Updates: 1.14.0]
• Microsoft.EntityFrameworkCore.SqlServer 10.0.3 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore.Design 10.0.3 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore 10.0.3 → [Updates: 10.0.10]
• Microsoft.Bcl.AsyncInterfaces 10.0.3 → [Updates: 10.0.10]
• Microsoft.Azure.SignalR 1.32.0
• Microsoft.AspNetCore.HeaderPropagation 10.0.3 → [Updates: 10.0.10]
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 10.0.3 → [Updates: 10.0.10]
• Microsoft.ApplicationInsights.AspNetCore 2.23.0 → [Updates: 3.1.2]
• GovUK.Dfe.CoreLibs.Http 1.0.10 → [Updates: 1.0.11]
• Azure.Messaging.ServiceBus 7.20.1 → [Updates: 7.20.2]
• Asp.Versioning.Mvc.ApiExplorer 8.1.0 → [Updates: 8.1.1, 10.0.0]
• Asp.Versioning.Mvc 8.1.0 → [Updates: 8.1.1, 10.0.0]

src/DfE.ExternalApplications.Application/DfE.ExternalApplications.Application.csproj (14)

• Scrutor 4.2.2 → [Updates: 7.0.0]
• Microsoft.EntityFrameworkCore 10.0.3 → [Updates: 10.0.10]
• FluentValidation.AspNetCore 11.3.0 → [Updates: 11.3.1]
• FluentValidation 12.0.0 → [Updates: 12.1.1]
• GovUK.Dfe.CoreLibs.Utilities 1.0.16
• GovUK.Dfe.CoreLibs.Testing 1.1.23
• GovUK.Dfe.CoreLibs.Security 1.1.28
• GovUK.Dfe.CoreLibs.Notifications 0.1.6
• GovUK.Dfe.CoreLibs.Messaging.MassTransit 0.1.3
• GovUK.Dfe.CoreLibs.Messaging.Contracts 0.1.5
• GovUK.Dfe.CoreLibs.FileStorage 0.1.5
• GovUK.Dfe.CoreLibs.Email 0.1.1
• GovUK.Dfe.CoreLibs.AsyncProcessing 1.0.12 → [Updates: 1.0.13]
• AutoMapper 14.0.0 → [Updates: 15.1.3]

src/DfE.ExternalApplications.Domain/DfE.ExternalApplications.Domain.csproj (6)

• Newtonsoft.Json 13.0.4
• Microsoft.Extensions.Caching.Abstractions 10.0.0 → [Updates: 10.0.10]
• MediatR 12.5.0 → [Updates: 14.2.0]
• GovUK.Dfe.CoreLibs.Contracts 1.0.78
• FluentValidation 12.0.0 → [Updates: 12.1.1]
• GovUK.Dfe.CoreLibs.Caching 1.0.13

src/DfE.ExternalApplications.Infrastructure/DfE.ExternalApplications.Infrastructure.csproj (9)

• Microsoft.Playwright 1.49.0 → [Updates: 1.61.0]
• Microsoft.Extensions.Options.ConfigurationExtensions 10.0.0 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore.SqlServer 10.0.3 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore.Sqlite 10.0.3 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore.Design 10.0.3 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore 10.0.3 → [Updates: 10.0.10]
• Microsoft.AspNetCore.Authentication.JwtBearer 10.0.3 → [Updates: 10.0.10]
• GovUK.Dfe.CoreLibs.Testing 1.1.23
• GovUK.Dfe.CoreLibs.Security 1.1.28

src/GovUK.Dfe.ExternalApplications.Api.Client/GovUK.Dfe.ExternalApplications.Api.Client.csproj (6)

• Microsoft.AspNetCore.Authentication.OpenIdConnect 10.0.3 → [Updates: 10.0.10]
• Microsoft.AspNetCore.Authentication.OpenIdConnect 8.0.14 → [Updates: 8.0.29, 10.0.10]
• Newtonsoft.Json 13.0.3 → [Updates: 13.0.4]
• GovUK.Dfe.CoreLibs.Security 1.1.28
• GovUK.Dfe.CoreLibs.Http 1.0.11
• GovUK.Dfe.CoreLibs.Contracts 1.0.78

src/Tests/DfE.ExternalApplications.Api.Tests.Integration/DfE.ExternalApplications.Api.Tests.Integration.csproj (5)

• Microsoft.AspNetCore.SignalR.Client 10.0.3 → [Updates: 10.0.10]
• xunit.runner.visualstudio 3.1.0 → [Updates: 3.1.5]
• Microsoft.Data.Sqlite 10.0.3 → [Updates: 10.0.10]
• coverlet.collector 6.0.4 → [Updates: 10.0.1]
• xunit 2.9.3

src/Tests/DfE.ExternalApplications.Api.Tests/DfE.ExternalApplications.Api.Tests.csproj (6)

• xunit.runner.visualstudio 3.1.0 → [Updates: 3.1.5]
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1
• AutoFixture 4.18.1
• xunit 2.9.3
• coverlet.collector 6.0.4 → [Updates: 10.0.1]

src/Tests/DfE.ExternalApplications.Application.Tests/DfE.ExternalApplications.Application.Tests.csproj (6)

• xunit.runner.visualstudio 3.1.0 → [Updates: 3.1.5]
• FluentAssertions 7.0.0
• AutoFixture 4.18.1
• xunit 2.9.3
• Microsoft.EntityFrameworkCore.InMemory 10.0.3 → [Updates: 10.0.10]
• coverlet.collector 6.0.4 → [Updates: 10.0.1]

src/Tests/DfE.ExternalApplications.Domain.Tests/DfE.ExternalApplications.Domain.Tests.csproj (3)

• xunit.runner.visualstudio 3.1.0 → [Updates: 3.1.5]
• xunit 2.9.3
• coverlet.collector 6.0.4 → [Updates: 10.0.1]

src/Tests/DfE.ExternalApplications.Tests.Common/DfE.ExternalApplications.Tests.Common.csproj (12)

• xunit 2.9.3
• Moq 4.20.72
• MockQueryable.NSubstitute 7.0.3 → [Updates: 10.0.8]
• Microsoft.NET.Test.Sdk 17.14.0 → [Updates: 17.14.1, 18.8.1]
• Microsoft.EntityFrameworkCore.Sqlite 10.0.3 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore 10.0.3 → [Updates: 10.0.10]
• Microsoft.Data.Sqlite.Core 10.0.3 → [Updates: 10.0.10]
• Microsoft.AspNetCore.Mvc.Testing 10.0.3 → [Updates: 10.0.10]
• GovUK.Dfe.CoreLibs.Testing 1.1.23
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1
• AutoFixture 4.18.1

renovate-config (1)

renovate.json

terraform (5)

terraform/container-apps-hosting.tf (1)

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v2.8.1 → [Updates: v2.8.2, v2.9.1]

terraform/data-protection.tf (1)

• github.com/DFE-Digital/terraform-azurerm-aspnet-data-protection v1.4.0

terraform/providers.tf

terraform/statuscake-tls-monitor.tf (1)

• github.com/dfe-digital/terraform-statuscake-tls-monitor v0.1.5

terraform/versions.tf (4)

• azapi ~> 1.13 → [Updates: ~> 2.0]
• azurerm ~> 4.0
• statuscake ~> 2.1
• hashicorp/terraform ~> 1.9

terraform-version (1)

terraform/.terraform-version (1)

• hashicorp/terraform 1.10.5 → [Updates: 1.15.8]

---

• Check this box to trigger a request for Renovate to run again on this repository