Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• Update dependency eslint-plugin-cypress to v4

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update dependency Serilog.AspNetCore to 8.0.3
• Update Terraform azurerm to v4.5.0
• Update aquasecurity/trivy-action action to v0.27.0
• Update dependency Microsoft.Identity.Web to 3.2.2
• Update dependency Microsoft.NET.Test.Sdk to 17.11.1
• Update dependency NetEscapades.AspNetCore.SecurityHeaders to 0.24.0
• Update dependency cypress to v13.15.0
• Update linters (minor) (eslint, eslint-plugin-cypress)
• Update swashbuckle-aspnetcore monorepo to 6.8.1 (minor) (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Update xunit-dotnet monorepo (minor) (xunit, xunit.runner.visualstudio)
• Lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dotnet monorepo (patch) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Http, System.Net.Http.Json)

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• Update dependency hashicorp/terraform to v1.9.8
• Update DFE-Digital/deploy-azure-container-apps-action action to v2.6.0
• Update DFE-Digital/deploy-azure-container-apps-action action to v3

---

Warning

Renovate failed to look up the following dependencies: Failed to look up nuget package DfE.CoreLibs.Caching, Failed to look up nuget package DfE.CoreLibs.Contracts, Failed to look up nuget package DfE.CoreLibs.Http, Failed to look up nuget package DfE.CoreLibs.Testing, Failed to look up nuget package Dfe.Academies.Contracts.

Files affected: Dfe.Academies.Api.Infrastructure/Dfe.Academies.Infrastructure.csproj, Dfe.Academies.Application/Dfe.Academies.Application.csproj, Dfe.Academies.Domain/Dfe.Academies.Domain.csproj, PersonsApi/PersonsApi.csproj, Tests/Dfe.Academies.Tests.Common/Dfe.Academies.Tests.Common.csproj, TramsDataApi.Test/TramsDataApi.Test.csproj, TramsDataApi/TramsDataApi.csproj

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency FluentAssertions to 6.12.1
• Update dependency MediatR to 12.4.1
• Update dependency Moq to 4.20.72
• Update dependency coverlet.collector to 6.0.2
• Update xunit-dotnet monorepo (patch) (xunit, xunit.runner.visualstudio)
• Update dependency FluentValidation to 11.10.0
• Update dependency Microsoft.AspNetCore.Hosting.Abstractions to 2.2.0
• Update dependency Microsoft.Identity.Client to 4.65.0
• Update dotnet monorepo to v9 (major) (mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• mcr.microsoft.com/dotnet/sdk 8.0-bookworm-slim
• mcr.microsoft.com/dotnet/aspnet 8.0-bookworm-slim

Dockerfile.PersonsApi

• mcr.microsoft.com/dotnet/sdk 8.0-bookworm-slim
• mcr.microsoft.com/dotnet/aspnet 8.0-bookworm-slim

github-actions

.github/workflows/build-and-push-image.yml

• actions/checkout v4
• DFE-Digital/deploy-azure-container-apps-action v2.5.0
• actions/checkout v4
• actions/github-script v7

.github/workflows/build-and-push-package.yml

• actions/checkout v4
• actions/setup-dotnet v4

.github/workflows/continuous-integration-dotnet.yml

• actions/checkout v4
• docker/login-action v3
• actions/setup-dotnet v4
• actions/setup-java v4
• actions/cache v4

.github/workflows/continuous-integration-javascript.yml

• actions/checkout v4

.github/workflows/continuous-integration-terraform.yml

• actions/checkout v4
• terraform-docs/gh-actions v1.3.0
• hashicorp/terraform 1.9.7
• hashicorp/terraform 1.9.7
• hashicorp/terraform 1.9.7
• terraform-linters/setup-tflint v4
• aquasecurity/tfsec-pr-commenter-action v1.3.1

.github/workflows/cypress-tests.yml

• actions/checkout v4
• actions/setup-node v4
• actions/upload-artifact v4

.github/workflows/docker-build.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6

.github/workflows/docker-test.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6
• aquasecurity/trivy-action 0.24.0
• github/codeql-action v3

.github/workflows/performance-tests.yml

• actions/checkout v4
• grafana/k6-action v0.3.1
• actions/upload-artifact v4

.github/workflows/security-tests.yml

• actions/checkout v4
• actions/cache v4
• actions/setup-node v4
• azure/login v2
• azure/CLI v2

npm

CypressTests/package.json

• cypress ^13.6.0
• cypress-plugin-api ^2.11.1
• eslint ^9.0.0
• eslint-plugin-cypress ^3.0.0
• zaproxy ^2.0.0-rc.2

nuget

Dfe.Academies.Api.Infrastructure/Dfe.Academies.Infrastructure.csproj

• Microsoft.Identity.Web 3.1.0
• Microsoft.Extensions.Options.ConfigurationExtensions 8.0.0
• Microsoft.EntityFrameworkCore.SqlServer 8.0.8
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore.Design 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.AspNetCore.Authentication.JwtBearer 8.0.8
• DfE.CoreLibs.Caching 1.0.7
• CsvHelper 33.0.1

Dfe.Academies.Application/Dfe.Academies.Application.csproj

• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.1
• Microsoft.Extensions.Configuration.Abstractions 8.0.0
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.AspNetCore.Http.Abstractions 2.2.0
• FluentValidation.AspNetCore 11.3.0
• FluentValidation 11.9.2
• DfE.CoreLibs.Contracts 1.0.5
• DfE.CoreLibs.Caching 1.0.7
• AutoMapper 13.0.1

Dfe.Academies.Domain/Dfe.Academies.Domain.csproj

• MediatR 12.4.0
• DfE.CoreLibs.Contracts 1.0.5

Dfe.PersonsApi.Client/Dfe.PersonsApi.Client.csproj

• Newtonsoft.Json 13.0.3
• Microsoft.Identity.Client 4.61.3
• Microsoft.Extensions.Http 8.0.0
• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.1
• Microsoft.Extensions.DependencyInjection 8.0.0
• Microsoft.Extensions.Configuration.Binder 8.0.2
• Microsoft.Extensions.Configuration.Abstractions 8.0.0

PersonsApi/PersonsApi.csproj

• Newtonsoft.Json 13.0.3
• TimeZoneConverter 6.1.0
• System.Text.Json 8.0.5
• Swashbuckle.AspNetCore.Annotations 6.7.3
• Swashbuckle.AspNetCore 6.7.3
• Serilog.Sinks.ApplicationInsights 4.0.0
• Serilog.AspNetCore 8.0.2
• NSwag.MSBuild 14.1.0
• NSwag.AspNetCore 14.1.0
• NetEscapades.AspNetCore.SecurityHeaders 0.22.0
• Microsoft.FeatureManagement.AspNetCore 3.5.0
• Microsoft.EntityFrameworkCore.SqlServer 8.0.8
• Microsoft.EntityFrameworkCore.Design 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Bcl.AsyncInterfaces 8.0.0
• Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer 5.1.0
• Microsoft.AspNetCore.Mvc.Versioning 5.1.0
• Microsoft.AspNetCore.HeaderPropagation 8.0.8
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 8.0.8
• Microsoft.ApplicationInsights.AspNetCore 2.22.0
• FluentValidation 11.9.2
• DfE.CoreLibs.Http 1.0.5

Tests/Dfe.Academies.Application.Tests/Dfe.Academies.Application.Tests.csproj

• coverlet.collector 6.0.2
• xunit.runner.visualstudio 2.8.2
• xunit 2.9.0
• Microsoft.NET.Test.Sdk 17.10.0
• FluentAssertions 6.12.1
• AutoFixture 4.18.1

Tests/Dfe.Academies.Domain.Tests/Dfe.Academies.Domain.Tests.csproj

• xunit.runner.visualstudio 2.5.3
• xunit 2.5.3
• Microsoft.NET.Test.Sdk 17.8.0
• coverlet.collector 6.0.0

Tests/Dfe.Academies.PersonsApi.Tests.Integration/Dfe.Academies.PersonsApi.Tests.Integration.csproj

• xunit.runner.visualstudio 2.8.2
• xunit 2.9.0
• Microsoft.NET.Test.Sdk 17.8.0
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Data.Sqlite 8.0.8
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• Microsoft.AspNetCore.Hosting.Abstractions 2.1.1
• coverlet.collector 6.0.2

Tests/Dfe.Academies.Tests.Common/Dfe.Academies.Tests.Common.csproj

• NSubstitute 5.1.0
• Moq 4.20.72
• MockQueryable.NSubstitute 7.0.3
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Data.Sqlite.Core 8.0.8
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• DfE.CoreLibs.Testing 1.1.4
• AutoMapper 13.0.1
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1
• AutoFixture 4.18.1

TramsDataApi.Test/TramsDataApi.Test.csproj

• coverlet.collector 6.0.2
• xunit.runner.visualstudio 2.8.2
• xunit 2.9.0
• System.Net.Http.Json 8.0.0
• Newtonsoft.Json 13.0.3
• NBuilder 6.1.0
• Moq 4.20.70
• Microsoft.NET.Test.Sdk 17.10.0
• Microsoft.Extensions.Configuration.UserSecrets 8.0.0
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• FluentAssertions 6.12.0
• Dfe.Academies.Contracts 1.0.10
• AutoFixture.Xunit2 4.18.1
• AutoFixture.Idioms 4.18.1
• AutoFixture.AutoMoq 4.18.1

TramsDataApi/TramsDataApi.csproj

• Newtonsoft.Json 13.0.3
• TimeZoneConverter 6.1.0
• Swashbuckle.AspNetCore.Annotations 6.6.2
• Swashbuckle.AspNetCore 6.6.2
• Serilog.Sinks.ApplicationInsights 4.0.0
• Serilog.AspNetCore 8.0.2
• NetEscapades.AspNetCore.SecurityHeaders 0.22.0
• Microsoft.FeatureManagement.AspNetCore 3.5.0
• Microsoft.EntityFrameworkCore.SqlServer 8.0.8
• Microsoft.EntityFrameworkCore.Design 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Bcl.AsyncInterfaces 8.0.0
• Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer 5.1.0
• Microsoft.AspNetCore.Mvc.Versioning 5.1.0
• Microsoft.AspNetCore.HeaderPropagation 8.0.8
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 8.0.8
• Microsoft.ApplicationInsights.AspNetCore 2.22.0
• FluentValidation 11.9.2
• DfE.CoreLibs.Http 1.0.5
• CsvHelper 33.0.1

terraform

terraform/container-apps-hosting.tf

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v1.14.0

terraform/key-vault-tfvars-secrets.tf

• github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.0

terraform/providers.tf

terraform/statuscake-tls-monitor.tf

• github.com/dfe-digital/terraform-statuscake-tls-monitor v0.1.4

terraform/versions.tf

• azapi >= 1.13.0
• azurerm >= 3.76.0
• statuscake >= 2.1.0
• hashicorp/terraform >= 1.6.1

terraform-version

terraform/.terraform-version

• hashicorp/terraform 1.9.7

---

• Check this box to trigger a request for Renovate to run again on this repository