Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• Update Terraform azapi to v2
• Update dependency FluentAssertions to v7
• Update dependency Microsoft.FeatureManagement.AspNetCore to v4
• Update dependency Serilog.AspNetCore to v9
• Update dependency TimeZoneConverter to v7
• Update dependency cypress to v14
• Update dependency eslint-plugin-cypress to v4
• Update dependency xunit.runner.visualstudio to v3
• Update swashbuckle-aspnetcore monorepo to v7 (major) (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• 🔐 Create all pending approval PRs at once 🔐

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v1.16.6
• Update dependency zaproxy to v2.0.0-rc.6
• Update Terraform azurerm to v4.17.0
• Update dependency Microsoft.Identity.Client to 4.67.2
• Update dependency Microsoft.NET.Test.Sdk to 17.12.0
• Update dotnet monorepo to 2.3.0 (minor) (Microsoft.AspNetCore.Hosting.Abstractions, Microsoft.AspNetCore.Http.Abstractions)
• Update swashbuckle-aspnetcore monorepo to 6.9.0 (minor) (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dotnet monorepo (patch) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore, Microsoft.Extensions.Http, System.Net.Http.Json)

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• Update DFE-Digital/rsd-github-actions action to v1.1.2

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package "mcr.microsoft.com/dotnet/sdk, Failed to look up docker package "mcr.microsoft.com/dotnet/aspnet, Failed to look up nuget package DfE.CoreLibs.Caching, Failed to look up nuget package DfE.CoreLibs.Contracts, Failed to look up nuget package DfE.CoreLibs.Testing, Failed to look up nuget package Dfe.Academies.Contracts, Failed to look up nuget package DfE.CoreLibs.Http.

Files affected: Dockerfile, Dfe.Academies.Api.Infrastructure/Dfe.Academies.Infrastructure.csproj, Dfe.Academies.Application/Dfe.Academies.Application.csproj, Dfe.Academies.Domain/Dfe.Academies.Domain.csproj, Tests/Dfe.Academies.Tests.Common/Dfe.Academies.Tests.Common.csproj, TramsDataApi.Test/TramsDataApi.Test.csproj, TramsDataApi/TramsDataApi.csproj

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency coverlet.collector to 6.0.4
• Update dependency xunit to 2.9.3
• Update cypress/browsers Docker tag to v22.13.0
• Update dependency Microsoft.Identity.Web to 3.6.2
• Update dependency NSubstitute to 5.3.0
• Update dependency NetEscapades.AspNetCore.SecurityHeaders to 0.24.0
• Update dependency cypress to v13.17.0
• Update dependency hashicorp/terraform to v1.10.5
• Update linters (minor) (eslint, eslint-plugin-cypress)
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dotnet monorepo to v9 (major) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Bcl.AsyncInterfaces, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore, Microsoft.Extensions.Http, Microsoft.Extensions.Options.ConfigurationExtensions, System.Net.Http.Json)

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• "mcr.microsoft.com/dotnet/sdk 8.0-azurelinux3.0"
• "mcr.microsoft.com/dotnet/aspnet 8.0-azurelinux3.0"
• "mcr.microsoft.com/dotnet/aspnet 8.0-azurelinux3.0"

github-actions

.github/workflows/build-and-push-image.yml

• actions/checkout v4
• DFE-Digital/rsd-github-actions v1.1.1
• DFE-Digital/deploy-azure-container-apps-action v4.1.0
• DFE-Digital/deploy-azure-container-apps-action v4.1.0
• DFE-Digital/deploy-azure-container-apps-action v4.1.0
• actions/checkout v4
• actions/github-script v7
• actions/github-script v7
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/build-and-push-package.yml

• actions/checkout v4
• actions/setup-dotnet v4

.github/workflows/continuous-integration-dotnet.yml

• actions/checkout v4
• docker/login-action v3
• actions/setup-dotnet v4
• actions/setup-java v4
• actions/cache v4

.github/workflows/continuous-integration-javascript.yml

• actions/checkout v4

.github/workflows/continuous-integration-terraform.yml

• actions/checkout v4
• terraform-docs/gh-actions v1.3.0
• hashicorp/terraform 1.9.8
• hashicorp/terraform 1.9.8
• hashicorp/terraform 1.9.8
• terraform-linters/setup-tflint v4
• aquasecurity/tfsec-pr-commenter-action v1.3.1

.github/workflows/cypress-tests.yml

• actions/checkout v4
• cypress-io/github-action v6
• actions/upload-artifact v4
• actions/upload-artifact v4
• cypress/browsers 22.12.0

.github/workflows/docker-build.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6

.github/workflows/docker-test.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6
• aquasecurity/trivy-action 0.29.0
• github/codeql-action v3

.github/workflows/performance-tests.yml

• actions/checkout v4
• grafana/k6-action v0.3.1
• actions/upload-artifact v4

.github/workflows/security-tests.yml

• actions/checkout v4
• actions/cache v4
• actions/setup-node v4
• azure/login v2
• azure/CLI v2

npm

CypressTests/package.json

• cypress ^13.6.0
• cypress-multi-reporters ^2.0.5
• cypress-plugin-api ^2.11.1
• cypress-slack-reporter ^1.5.4
• eslint ^9.0.0
• eslint-plugin-cypress ^3.0.0
• mocha ^11.1.0
• mochawesome ^7.1.3
• mochawesome-merge ^5.0.0
• mochawesome-report-generator ^6.2.0
• zaproxy ^2.0.0-rc.2

nuget

Dfe.Academies.Api.Infrastructure/Dfe.Academies.Infrastructure.csproj

• Microsoft.Identity.Web 3.4.0
• Microsoft.Extensions.Options.ConfigurationExtensions 8.0.0
• Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore 8.0.8
• Microsoft.EntityFrameworkCore.SqlServer 8.0.8
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore.Design 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.AspNetCore.Authentication.JwtBearer 8.0.8
• DfE.CoreLibs.Caching 1.0.7
• CsvHelper 33.0.1

Dfe.Academies.Application/Dfe.Academies.Application.csproj

• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.1
• Microsoft.Extensions.Configuration.Abstractions 8.0.0
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.AspNetCore.Http.Abstractions 2.2.0
• FluentValidation.AspNetCore 11.3.0
• FluentValidation 11.11.0
• DfE.CoreLibs.Contracts 1.0.5
• DfE.CoreLibs.Caching 1.0.7
• AutoMapper 13.0.1

Dfe.Academies.Domain/Dfe.Academies.Domain.csproj

• MediatR 12.4.1
• DfE.CoreLibs.Contracts 1.0.5

Dfe.Academies.TramsDataApi.Tests.Integration/Dfe.Academies.TramsDataApi.Tests.Integration.csproj

• xunit.runner.visualstudio 2.8.2
• xunit 2.9.2
• Microsoft.NET.Test.Sdk 17.8.0
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Data.Sqlite 8.0.8
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• Microsoft.AspNetCore.Hosting.Abstractions 2.2.0
• coverlet.collector 6.0.2

Dfe.AcademiesApi.Client/Dfe.AcademiesApi.Client.csproj

• Newtonsoft.Json 13.0.3
• Microsoft.Identity.Client 4.66.2
• Microsoft.Extensions.Http 8.0.0
• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.1
• Microsoft.Extensions.DependencyInjection 8.0.0
• Microsoft.Extensions.Configuration.Binder 8.0.2
• Microsoft.Extensions.Configuration.Abstractions 8.0.0

Tests/Dfe.Academies.Application.Tests/Dfe.Academies.Application.Tests.csproj

• coverlet.collector 6.0.2
• xunit.runner.visualstudio 2.8.2
• xunit 2.9.2
• Microsoft.NET.Test.Sdk 17.12.0
• FluentAssertions 6.12.2
• AutoFixture 4.18.1

Tests/Dfe.Academies.Tests.Common/Dfe.Academies.Tests.Common.csproj

• NSubstitute 5.1.0
• Moq 4.20.72
• MockQueryable.NSubstitute 7.0.3
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Data.Sqlite.Core 8.0.8
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• DfE.CoreLibs.Testing 1.1.4
• Bogus 35.6.1
• AutoMapper 13.0.1
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1
• AutoFixture 4.18.1

TramsDataApi.Test/TramsDataApi.Test.csproj

• coverlet.collector 6.0.2
• xunit.runner.visualstudio 2.8.2
• xunit 2.9.2
• System.Net.Http.Json 8.0.0
• Newtonsoft.Json 13.0.3
• NBuilder 6.1.0
• Moq 4.20.72
• Microsoft.NET.Test.Sdk 17.12.0
• Microsoft.Extensions.Configuration.UserSecrets 8.0.0
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• FluentAssertions 6.12.2
• Dfe.Academies.Contracts 1.0.10
• AutoFixture.Xunit2 4.18.1
• AutoFixture.Idioms 4.18.1
• AutoFixture.AutoMoq 4.18.1

TramsDataApi/TramsDataApi.csproj

• Newtonsoft.Json 13.0.3
• TimeZoneConverter 6.1.0
• Swashbuckle.AspNetCore.Annotations 6.7.3
• Swashbuckle.AspNetCore 6.7.3
• Serilog.Sinks.ApplicationInsights 4.0.0
• Serilog.AspNetCore 8.0.3
• NetEscapades.AspNetCore.SecurityHeaders 0.22.0
• Microsoft.FeatureManagement.AspNetCore 3.5.0
• Microsoft.EntityFrameworkCore.SqlServer 8.0.8
• Microsoft.EntityFrameworkCore.Design 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• NSwag.MSBuild 14.2.0
• NSwag.AspNetCore 14.2.0
• Microsoft.Bcl.AsyncInterfaces 8.0.0
• Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer 5.1.0
• Microsoft.AspNetCore.Mvc.Versioning 5.1.0
• Microsoft.AspNetCore.HeaderPropagation 8.0.8
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 8.0.8
• Microsoft.ApplicationInsights.AspNetCore 2.22.0
• FluentValidation 11.11.0
• DfE.CoreLibs.Http 1.0.5
• CsvHelper 33.0.1

terraform

terraform/container-apps-hosting.tf

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v1.16.5

terraform/key-vault-tfvars-secrets.tf

• github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.1

terraform/providers.tf

terraform/statuscake-tls-monitor.tf

• github.com/dfe-digital/terraform-statuscake-tls-monitor v0.1.5

terraform/versions.tf

• azapi ~> 1.13
• azurerm ~> 4.0
• statuscake ~> 2.1
• hashicorp/terraform ~> 1.9

terraform-version

terraform/.terraform-version

• hashicorp/terraform 1.9.8

---

• Check this box to trigger a request for Renovate to run again on this repository