Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• Update Terraform azapi to v2
• Update dependency FluentAssertions to v7
• Update dependency Microsoft.FeatureManagement.AspNetCore to v4
• Update dependency eslint-plugin-cypress to v4
• Update swashbuckle-aspnetcore monorepo to v7 (major) (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• Update dependency Microsoft.Identity.Web to 3.5.0
• Update dependency cypress to v13.16.1
• Update dependency hashicorp/terraform to v1.10.1
• Update linters (minor) (eslint, eslint-plugin-cypress)
• Update nswag monorepo to 14.2.0 (minor) (NSwag.AspNetCore, NSwag.MSBuild)
• Update swashbuckle-aspnetcore monorepo to 6.9.0 (minor) (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Update xunit-dotnet monorepo (minor) (xunit, xunit.runner.visualstudio)
• Lock file maintenance

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dotnet monorepo (patch) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore, Microsoft.Extensions.Http, System.Net.Http.Json)

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v1.16.3
• Update Terraform azurerm to v4.14.0
• Update dependency Serilog.AspNetCore to v9

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package "mcr.microsoft.com/dotnet/sdk, Failed to look up docker package "mcr.microsoft.com/dotnet/aspnet, Failed to look up nuget package DfE.CoreLibs.Caching, Failed to look up nuget package DfE.CoreLibs.Contracts, Failed to look up nuget package DfE.CoreLibs.Http, Failed to look up nuget package DfE.CoreLibs.Testing, Failed to look up nuget package Dfe.Academies.Contracts.

Files affected: Dockerfile, Dockerfile.PersonsApi, Dfe.Academies.Api.Infrastructure/Dfe.Academies.Infrastructure.csproj, Dfe.Academies.Application/Dfe.Academies.Application.csproj, Dfe.Academies.Domain/Dfe.Academies.Domain.csproj, PersonsApi/PersonsApi.csproj, Tests/Dfe.Academies.Tests.Common/Dfe.Academies.Tests.Common.csproj, TramsDataApi.Test/TramsDataApi.Test.csproj, TramsDataApi/TramsDataApi.csproj

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency NSubstitute to 5.3.0
• Update dependency NetEscapades.AspNetCore.SecurityHeaders to 0.24.0

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dotnet monorepo to v9 (major) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Bcl.AsyncInterfaces, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.Configuration.UserSecrets, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore, Microsoft.Extensions.Http, Microsoft.Extensions.Options.ConfigurationExtensions, System.Net.Http.Json, System.Text.Json)

Detected dependencies

docker-compose

docker-compose.yml

dockerfile

Dockerfile

• "mcr.microsoft.com/dotnet/sdk 8.0-azurelinux3.0"
• "mcr.microsoft.com/dotnet/aspnet 8.0-azurelinux3.0"

Dockerfile.PersonsApi

• "mcr.microsoft.com/dotnet/sdk 8.0-azurelinux3.0"
• "mcr.microsoft.com/dotnet/aspnet 8.0-azurelinux3.0"

github-actions

.github/workflows/build-and-push-image.yml

• actions/checkout v4
• DFE-Digital/deploy-azure-container-apps-action v3.1.0
• actions/checkout v4
• actions/github-script v7

.github/workflows/build-and-push-package.yml

• actions/checkout v4
• actions/setup-dotnet v4

.github/workflows/continuous-integration-dotnet.yml

• actions/checkout v4
• docker/login-action v3
• actions/setup-dotnet v4
• actions/setup-java v4
• actions/cache v4

.github/workflows/continuous-integration-javascript.yml

• actions/checkout v4

.github/workflows/continuous-integration-terraform.yml

• actions/checkout v4
• terraform-docs/gh-actions v1.3.0
• hashicorp/terraform 1.9.8
• hashicorp/terraform 1.9.8
• hashicorp/terraform 1.9.8
• terraform-linters/setup-tflint v4
• aquasecurity/tfsec-pr-commenter-action v1.3.1

.github/workflows/cypress-tests.yml

• actions/checkout v4
• actions/setup-node v4
• actions/upload-artifact v4

.github/workflows/docker-build.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6

.github/workflows/docker-test.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6
• aquasecurity/trivy-action 0.29.0
• github/codeql-action v3

.github/workflows/performance-tests.yml

• actions/checkout v4
• grafana/k6-action v0.3.1
• actions/upload-artifact v4

.github/workflows/security-tests.yml

• actions/checkout v4
• actions/cache v4
• actions/setup-node v4
• azure/login v2
• azure/CLI v2

npm

CypressTests/package.json

• cypress ^13.6.0
• cypress-plugin-api ^2.11.1
• eslint ^9.0.0
• eslint-plugin-cypress ^3.0.0
• zaproxy ^2.0.0-rc.2

nuget

Dfe.Academies.Api.Infrastructure/Dfe.Academies.Infrastructure.csproj

• Microsoft.Identity.Web 3.4.0
• Microsoft.Extensions.Options.ConfigurationExtensions 8.0.0
• Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore 8.0.8
• Microsoft.EntityFrameworkCore.SqlServer 8.0.8
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore.Design 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.AspNetCore.Authentication.JwtBearer 8.0.8
• DfE.CoreLibs.Caching 1.0.7
• CsvHelper 33.0.1

Dfe.Academies.Application/Dfe.Academies.Application.csproj

• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.1
• Microsoft.Extensions.Configuration.Abstractions 8.0.0
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.AspNetCore.Http.Abstractions 2.2.0
• FluentValidation.AspNetCore 11.3.0
• FluentValidation 11.11.0
• DfE.CoreLibs.Contracts 1.0.5
• DfE.CoreLibs.Caching 1.0.7
• AutoMapper 13.0.1

Dfe.Academies.Domain/Dfe.Academies.Domain.csproj

• MediatR 12.4.1
• DfE.CoreLibs.Contracts 1.0.5

Dfe.PersonsApi.Client/Dfe.PersonsApi.Client.csproj

• Newtonsoft.Json 13.0.3
• Microsoft.Identity.Client 4.66.2
• Microsoft.Extensions.Http 8.0.0
• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.1
• Microsoft.Extensions.DependencyInjection 8.0.0
• Microsoft.Extensions.Configuration.Binder 8.0.2
• Microsoft.Extensions.Configuration.Abstractions 8.0.0

PersonsApi/PersonsApi.csproj

• Newtonsoft.Json 13.0.3
• TimeZoneConverter 6.1.0
• System.Text.Json 8.0.5
• Swashbuckle.AspNetCore.Annotations 6.7.3
• Swashbuckle.AspNetCore 6.7.3
• Serilog.Sinks.ApplicationInsights 4.0.0
• Serilog.AspNetCore 8.0.3
• NSwag.MSBuild 14.1.0
• NSwag.AspNetCore 14.1.0
• NetEscapades.AspNetCore.SecurityHeaders 0.22.0
• Microsoft.FeatureManagement.AspNetCore 3.5.0
• Microsoft.EntityFrameworkCore.SqlServer 8.0.8
• Microsoft.EntityFrameworkCore.Design 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Bcl.AsyncInterfaces 8.0.0
• Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer 5.1.0
• Microsoft.AspNetCore.Mvc.Versioning 5.1.0
• Microsoft.AspNetCore.HeaderPropagation 8.0.8
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 8.0.8
• Microsoft.ApplicationInsights.AspNetCore 2.22.0
• FluentValidation 11.11.0
• DfE.CoreLibs.Http 1.0.5

Tests/Dfe.Academies.Application.Tests/Dfe.Academies.Application.Tests.csproj

• coverlet.collector 6.0.2
• xunit.runner.visualstudio 2.8.2
• xunit 2.9.2
• Microsoft.NET.Test.Sdk 17.12.0
• FluentAssertions 6.12.2
• AutoFixture 4.18.1

Tests/Dfe.Academies.Domain.Tests/Dfe.Academies.Domain.Tests.csproj

• xunit.runner.visualstudio 2.5.8
• xunit 2.5.3
• Microsoft.NET.Test.Sdk 17.12.0
• coverlet.collector 6.0.2

Tests/Dfe.Academies.PersonsApi.Tests.Integration/Dfe.Academies.PersonsApi.Tests.Integration.csproj

• xunit.runner.visualstudio 2.8.2
• xunit 2.9.2
• Microsoft.NET.Test.Sdk 17.12.0
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Data.Sqlite 8.0.8
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• Microsoft.AspNetCore.Hosting.Abstractions 2.2.0
• coverlet.collector 6.0.2

Tests/Dfe.Academies.Tests.Common/Dfe.Academies.Tests.Common.csproj

• NSubstitute 5.1.0
• Moq 4.20.72
• MockQueryable.NSubstitute 7.0.3
• Microsoft.EntityFrameworkCore.Sqlite 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Data.Sqlite.Core 8.0.8
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• DfE.CoreLibs.Testing 1.1.4
• AutoMapper 13.0.1
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1
• AutoFixture 4.18.1

TramsDataApi.Test/TramsDataApi.Test.csproj

• coverlet.collector 6.0.2
• xunit.runner.visualstudio 2.8.2
• xunit 2.9.2
• System.Net.Http.Json 8.0.0
• Newtonsoft.Json 13.0.3
• NBuilder 6.1.0
• Moq 4.20.72
• Microsoft.NET.Test.Sdk 17.12.0
• Microsoft.Extensions.Configuration.UserSecrets 8.0.0
• Microsoft.AspNetCore.Mvc.Testing 8.0.8
• FluentAssertions 6.12.2
• Dfe.Academies.Contracts 1.0.10
• AutoFixture.Xunit2 4.18.1
• AutoFixture.Idioms 4.18.1
• AutoFixture.AutoMoq 4.18.1

TramsDataApi/TramsDataApi.csproj

• Newtonsoft.Json 13.0.3
• TimeZoneConverter 6.1.0
• Swashbuckle.AspNetCore.Annotations 6.6.2
• Swashbuckle.AspNetCore 6.6.2
• Serilog.Sinks.ApplicationInsights 4.0.0
• Serilog.AspNetCore 8.0.3
• NetEscapades.AspNetCore.SecurityHeaders 0.22.0
• Microsoft.FeatureManagement.AspNetCore 3.5.0
• Microsoft.EntityFrameworkCore.SqlServer 8.0.8
• Microsoft.EntityFrameworkCore.Design 8.0.8
• Microsoft.EntityFrameworkCore 8.0.8
• Microsoft.Bcl.AsyncInterfaces 8.0.0
• Microsoft.AspNetCore.Mvc.Versioning.ApiExplorer 5.1.0
• Microsoft.AspNetCore.Mvc.Versioning 5.1.0
• Microsoft.AspNetCore.HeaderPropagation 8.0.8
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 8.0.8
• Microsoft.ApplicationInsights.AspNetCore 2.22.0
• FluentValidation 11.11.0
• DfE.CoreLibs.Http 1.0.5
• CsvHelper 33.0.1

terraform

terraform/container-apps-hosting.tf

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v1.16.2

terraform/key-vault-tfvars-secrets.tf

• github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.1

terraform/providers.tf

terraform/statuscake-tls-monitor.tf

• github.com/dfe-digital/terraform-statuscake-tls-monitor v0.1.5

terraform/versions.tf

• azapi ~> 1.13
• azurerm ~> 4.0
• statuscake ~> 2.1
• hashicorp/terraform ~> 1.9

terraform-version

terraform/.terraform-version

• hashicorp/terraform 1.9.8

---

• Check this box to trigger a request for Renovate to run again on this repository