Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: No docker auth found - returning
• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
nuget	FluentValidation.AspNetCore
nuget	Microsoft.AspNetCore.Mvc.Versioning
nuget	Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer
nuget	xunit

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (9)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	terraform-docs/gh-actions	2025-05-13
nuget	AutoFixture	2025-01-21
nuget	AutoFixture.AutoNSubstitute	2025-01-21
nuget	AutoFixture.Xunit2	2025-01-21
nuget	CsvHelper	2025-06-02
nuget	Moq	2024-09-07
terraform	github.com/dfe-digital/terraform-statuscake-tls-monitor	2024-12-10
terraform	statuscake	2023-10-20

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/github-script action to v9
• Update actions/setup-dotnet action to v6
• Update actions/setup-java action to v5
• Update dependency coverlet.collector to v10
• Update dependency FluentAssertions to v7
• Update dependency FluentValidation to v12
• Update dependency MediatR to v14
• Update dependency Microsoft.ApplicationInsights.AspNetCore to v3
• Update dependency Microsoft.FeatureManagement.AspNetCore to v4
• Update dependency Microsoft.Identity.Web to v4
• Update dependency Microsoft.NET.Test.Sdk to v18
• Update dependency MockQueryable.NSubstitute to v10
• Update dependency NetEscapades.AspNetCore.SecurityHeaders to v1
• Update dependency NSubstitute to v6
• Update dependency Serilog.AspNetCore to v10
• Update dependency Serilog.Sinks.ApplicationInsights to v5
• Update dependency TimeZoneConverter to v7
• Update dependency xunit.runner.visualstudio to v3
• Update docker/build-push-action action to v7
• Update docker/setup-buildx-action action to v4
• Update dotnet monorepo to v10 (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Bcl.AsyncInterfaces, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore, Microsoft.Extensions.Http, Microsoft.Extensions.Options.ConfigurationExtensions, System.Text.Json)
• Update github/codeql-action action to v4
• Update swashbuckle-aspnetcore monorepo to v10 (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Update Terraform azapi to v2
• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2
• Update terraform-linters/setup-tflint action to v6
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency FluentValidation.AspNetCore to 11.3.1
• Update dependency GovUK.Dfe.CoreLibs.Contracts to 1.0.77
• Update dependency GovUK.Dfe.CoreLibs.Http to 1.0.11
• Update dependency GovUK.Dfe.CoreLibs.Testing to 1.1.23
• Update dependency Microsoft.Identity.Web to 3.8.4
• Update dependency Newtonsoft.Json to 13.0.4
• Update DFE-Digital/deploy-azure-container-apps-action action to v5.2.2
• Update dotnet monorepo (patch) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Hosting.Abstractions, Microsoft.AspNetCore.Http.Abstractions, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore, System.Text.Json)
• Update Terraform github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars to v0.5.4
• Update aquasecurity/trivy-action action to v0.36.0
• Update dependency CsvHelper to 33.1.0
• Update dependency FluentValidation to 11.12.0
• Update dependency Microsoft.Identity.Client to 4.86.1
• Update dependency Microsoft.Identity.Web to 3.15.1
• Update dependency Microsoft.NET.Test.Sdk to 17.14.1
• Update dependency NetEscapades.AspNetCore.SecurityHeaders to 0.24.0
• Update dependency Serilog.Sinks.ApplicationInsights to 4.1.0
• Update nswag monorepo to 14.7.1 (NSwag.AspNetCore, NSwag.MSBuild)
• Update swashbuckle-aspnetcore monorepo to 6.9.0 (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Update Terraform azurerm to v4.81.0
• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v1.20.0
• Update terraform-docs/gh-actions action to v1.4.1
• Update xunit-dotnet monorepo (minor) (xunit, xunit.runner.visualstudio)
• Lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/docker-test.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency AutoMapper to v15 [SECURITY]
• Pin dependencies (DFE-Digital/deploy-azure-container-apps-action, DFE-Digital/rsd-github-actions, actions/cache, actions/checkout, actions/setup-dotnet, actions/setup-java, gittools/actions, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk)
• Update actions/cache digest to 0057852
• Update actions/checkout digest to 11d5960
• Update actions/github-script digest to f28e40c
• Update actions/setup-java digest to c1e3236
• Update docker/build-push-action digest to 10e90e3
• Update docker/setup-buildx-action digest to 8d2750c
• Update github/codeql-action digest to 4187e74
• Update dependency hashicorp/terraform to v1.15.8
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (1)

docker-compose.yml (1)

• ghcr.io/dfe-digital/trams-development-database latest

dockerfile (1)

Dockerfile (2)

• mcr.microsoft.com/dotnet/sdk 8.0-azurelinux3.0 → [Updates: 10.0-azurelinux3.0, 8.0-azurelinux3.0]
• mcr.microsoft.com/dotnet/aspnet 8.0-azurelinux3.0 → [Updates: 10.0-azurelinux3.0, 8.0-azurelinux3.0]

github-actions (7)

.github/workflows/build-and-push-image.yml (8)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• DFE-Digital/rsd-github-actions v1 → [Updates: v1]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1 → [Updates: v5.2.2, v5.2.1]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1 → [Updates: v5.2.2, v5.2.1]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1 → [Updates: v5.2.2, v5.2.1]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea → [Updates: v9, v7]
• ubuntu 24.04

.github/workflows/build-test-template.yml (4)

• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-dotnet v4 → [Updates: v6, v4]
• actions/setup-java v4 → [Updates: v5, v4]
• actions/cache v4 → [Updates: v6, v4]

.github/workflows/docker-build.yml (3)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• docker/setup-buildx-action v3@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 → [Updates: v4, v3]
• docker/build-push-action v6@14487ce63c7a62a4a324b0bfb37086795e31c6c1 → [Updates: v7, v6]

.github/workflows/docker-test.yml (5)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• docker/setup-buildx-action v3@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 → [Updates: v4, v3]
• docker/build-push-action v6@14487ce63c7a62a4a324b0bfb37086795e31c6c1 → [Updates: v7, v6]
• aquasecurity/trivy-action 0.30.0@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 → [Updates: v0.36.0]
• github/codeql-action v3@60168efe1c415ce0f5521ea06d5c2062adbeed1b → [Updates: v4, v3]

.github/workflows/dotnet-build.yml (4)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• actions/setup-dotnet v4@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 → [Updates: v6]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• actions/cache v4@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v6, v4]

.github/workflows/pack-template.yml (3)

• actions/checkout v4 → [Updates: v7, v4]
• actions/setup-dotnet v4 → [Updates: v6, v4]
• gittools/actions v4.7.0 → [Updates: v4.7.0]

.github/workflows/terraform.yml (6)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• terraform-docs/gh-actions v1.3.0@aeae0038ed47a547e0c0fca5c059d3335f48fb25 → [Updates: v1.4.1]
• hashicorp/terraform 1.9.8@sha256:18f9986038bbaf02cf49db9c09261c778161c51dcc7fb7e355ae8938459428cd → [Updates: 1.15.8]
• hashicorp/terraform 1.9.8@sha256:18f9986038bbaf02cf49db9c09261c778161c51dcc7fb7e355ae8938459428cd → [Updates: 1.15.8]
• hashicorp/terraform 1.9.8@sha256:18f9986038bbaf02cf49db9c09261c778161c51dcc7fb7e355ae8938459428cd → [Updates: 1.15.8]
• terraform-linters/setup-tflint v4@90f302c255ef959cbfb4bd10581afecdb7ece3e6 → [Updates: v6]

nuget (9)

src/Dfe.PersonsApi.Application/Dfe.PersonsApi.Application.csproj (9)

• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2 → [Updates: 10.0.10]
• Microsoft.Extensions.Configuration.Abstractions 8.0.0 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.AspNetCore.Http.Abstractions 2.2.0 → [Updates: 2.3.11]
• GovUK.Dfe.CoreLibs.Contracts 1.0.49 → [Updates: 1.0.77]
• GovUK.Dfe.CoreLibs.Caching 1.0.13
• FluentValidation.AspNetCore 11.3.0 → [Updates: 11.3.1]
• FluentValidation 11.11.0 → [Updates: 11.12.0, 12.1.1]
• AutoMapper 13.0.1 → [Updates: 15.1.3]

src/Dfe.PersonsApi.Domain/Dfe.PersonsApi.Domain.csproj (2)

• MediatR 12.5.0 → [Updates: 14.2.0]
• GovUK.Dfe.CoreLibs.Contracts 1.0.49 → [Updates: 1.0.77]

src/Dfe.PersonsApi.Infrastructure/Dfe.PersonsApi.Infrastructure.csproj (10)

• Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.Identity.Web 3.8.3 → [Updates: 3.8.4, 3.15.1, 4.13.2]
• Microsoft.Extensions.Options.ConfigurationExtensions 8.0.0 → [Updates: 10.0.10]
• Microsoft.EntityFrameworkCore.SqlServer 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.EntityFrameworkCore.Sqlite 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.EntityFrameworkCore.Design 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.EntityFrameworkCore 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.AspNetCore.Authentication.JwtBearer 8.0.15 → [Updates: 8.0.29, 10.0.10]
• GovUK.Dfe.CoreLibs.Caching 1.0.13
• CsvHelper 33.0.1 → [Updates: 33.1.0]

src/GovUK.Dfe.PersonsApi.Client/GovUK.Dfe.PersonsApi.Client.csproj (7)

• Newtonsoft.Json 13.0.3 → [Updates: 13.0.4]
• Microsoft.Identity.Client 4.70.1 → [Updates: 4.86.1]
• Microsoft.Extensions.Http 8.0.1 → [Updates: 10.0.10]
• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2 → [Updates: 10.0.10]
• Microsoft.Extensions.DependencyInjection 8.0.1 → [Updates: 10.0.10]
• Microsoft.Extensions.Configuration.Binder 8.0.2 → [Updates: 10.0.10]
• Microsoft.Extensions.Configuration.Abstractions 8.0.0 → [Updates: 10.0.10]

src/PersonsApi/PersonsApi.csproj (22)

• Newtonsoft.Json 13.0.3 → [Updates: 13.0.4]
• TimeZoneConverter 6.1.0 → [Updates: 7.2.0]
• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.10]
• Swashbuckle.AspNetCore.Annotations 6.7.3 → [Updates: 6.9.0, 10.2.3]
• Swashbuckle.AspNetCore 6.7.3 → [Updates: 6.9.0, 10.2.3]
• Serilog.Sinks.ApplicationInsights 4.0.0 → [Updates: 4.1.0, 5.0.1]
• Serilog.AspNetCore 8.0.3 → [Updates: 10.0.0]
• NSwag.MSBuild 14.1.0 → [Updates: 14.7.1]
• NSwag.AspNetCore 14.1.0 → [Updates: 14.7.1]
• NetEscapades.AspNetCore.SecurityHeaders 0.22.0 → [Updates: 0.24.0, 1.3.1]
• Microsoft.FeatureManagement.AspNetCore 3.5.0 → [Updates: 4.6.0]
• Microsoft.EntityFrameworkCore.SqlServer 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.EntityFrameworkCore.Design 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.EntityFrameworkCore 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.Bcl.AsyncInterfaces 8.0.0 → [Updates: 10.0.10]
• Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer 5.1.0
• Microsoft.AspNetCore.Mvc.Versioning 5.1.0
• Microsoft.AspNetCore.HeaderPropagation 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.ApplicationInsights.AspNetCore 2.22.0 → [Updates: 3.1.2]
• GovUK.Dfe.CoreLibs.Http 1.0.10 → [Updates: 1.0.11]
• FluentValidation 11.11.0 → [Updates: 11.12.0, 12.1.1]

src/Tests/Dfe.PersonsApi.Application.Tests/Dfe.PersonsApi.Application.Tests.csproj (6)

• coverlet.collector 6.0.4 → [Updates: 10.0.1]
• xunit.runner.visualstudio 2.8.2 → [Updates: 3.1.5]
• xunit 2.9.3
• Microsoft.NET.Test.Sdk 17.10.0 → [Updates: 17.14.1, 18.8.1]
• FluentAssertions 6.12.2 → [Updates: 7.0.0]
• AutoFixture 4.18.1

src/Tests/Dfe.PersonsApi.Domain.Tests/Dfe.PersonsApi.Domain.Tests.csproj (4)

• xunit.runner.visualstudio 2.5.8 → [Updates: 2.8.2, 3.1.5]
• xunit 2.5.3 → [Updates: 2.9.3]
• Microsoft.NET.Test.Sdk 17.8.0 → [Updates: 17.14.1, 18.8.1]
• coverlet.collector 6.0.4 → [Updates: 10.0.1]

src/Tests/Dfe.PersonsApi.Tests.Common/Dfe.PersonsApi.Tests.Common.csproj (12)

• NSubstitute 5.3.0 → [Updates: 6.0.0]
• Moq 4.20.72
• MockQueryable.NSubstitute 7.0.3 → [Updates: 10.0.8]
• Microsoft.EntityFrameworkCore.Sqlite 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.EntityFrameworkCore 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.Data.Sqlite.Core 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.AspNetCore.Mvc.Testing 8.0.15 → [Updates: 8.0.29, 10.0.10]
• GovUK.Dfe.CoreLibs.Testing 1.1.21 → [Updates: 1.1.23]
• AutoMapper 14.0.0 → [Updates: 15.1.3]
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1
• AutoFixture 4.18.1

src/Tests/Dfe.PersonsApi.Tests.Integration/Dfe.PersonsApi.Tests.Integration.csproj (9)

• xunit.runner.visualstudio 2.8.2 → [Updates: 3.1.5]
• xunit 2.9.3
• Microsoft.NET.Test.Sdk 17.8.0 → [Updates: 17.14.1, 18.8.1]
• Microsoft.EntityFrameworkCore.Sqlite 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.EntityFrameworkCore 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.Data.Sqlite 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.AspNetCore.Mvc.Testing 8.0.15 → [Updates: 8.0.29, 10.0.10]
• Microsoft.AspNetCore.Hosting.Abstractions 2.2.0 → [Updates: 2.3.11]
• coverlet.collector 6.0.4 → [Updates: 10.0.1]

renovate-config (1)

renovate.json

terraform (5)

terraform/container-apps-hosting.tf (1)

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v1.19.1 → [Updates: v1.20.0, v2.8.2]

terraform/key-vault-tfvars-secrets.tf (1)

• github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.1 → [Updates: v0.5.4]

terraform/providers.tf

terraform/statuscake-tls-monitor.tf (1)

• github.com/dfe-digital/terraform-statuscake-tls-monitor v0.1.5

terraform/versions.tf (4)

• azapi ~> 1.13 → [Updates: ~> 2.0]
• azurerm ~> 4.0 → [Updates: ~> 4.0]
• statuscake ~> 2.1
• hashicorp/terraform ~> 1.9

terraform-version (1)

terraform/.terraform-version (1)

• hashicorp/terraform 1.9.8 → [Updates: 1.15.8]

---

• Check this box to trigger a request for Renovate to run again on this repository