Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• Update Terraform azapi to v2
• Update cypress/base Docker tag to v22
• Update dependency @types/node to v22
• Update dependency @types/uuid to v10
• Update dependency Ardalis.GuardClauses to v5
• Update dependency DocumentFormat.OpenXml to v3
• Update dependency FluentAssertions to v7
• Update dependency Microsoft.FeatureManagement.AspNetCore to v4
• Update dependency Scrutor to v6
• Update dependency Serilog.AspNetCore to v9
• Update dependency TimeZoneConverter to v7
• Update dependency accessible-autocomplete to v3
• Update dependency copy-webpack-plugin to v12
• Update dependency css-loader to v7
• Update dependency cypress to v14
• Update dependency cypress-multi-reporters to v2
• Update dependency sass-loader to v16
• Update dependency style-loader to v4
• Update dependency uuid to v11
• Update dependency webpack-cli to v6
• Update dependency xunit.runner.visualstudio to v3
• Update dotnet monorepo (major) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Http.Features, Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Bcl.AsyncInterfaces, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Hosting, Microsoft.Extensions.Http, Microsoft.Extensions.Logging.Abstractions, Microsoft.Extensions.Options.ConfigurationExtensions, System.Net.Http.Json)
• Update linters (major) (@typescript-eslint/eslint-plugin, eslint, eslint-plugin-cypress)
• Update swashbuckle-aspnetcore monorepo to v7 (major) (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Update test packages (major) (mocha, mochawesome-merge)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• Update dependency csv-stringify to v6.4.6
• Update dependency cypress-localstorage-commands to v2.2.7
• Update dependency cypress-multi-reporters to v1.6.4
• Update dependency cypress-slack-reporter to v1.5.4
• Update dependency zaproxy to v2.0.0-rc.6
• Update dotnet monorepo to 8.0.12 (patch) (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite)
• Update Terraform azurerm to v4.17.0
• Update aquasecurity/trivy-action action to v0.29.0
• Update azure azure-sdk-for-net monorepo (minor) (Azure.Core, Azure.Extensions.AspNetCore.DataProtection.Blobs, Azure.Identity, Azure.Storage.Blobs)
• Update cypress/base Docker tag to v20.18.0
• Update cypress/browsers Docker tag to v22.13.0
• Update dependency @types/node to v20.17.16
• Update dependency Ardalis.GuardClauses to 4.6.0
• Update dependency ExcelDataReader to 3.7.0
• Update dependency ExcelDataReader.DataSet to 3.7.0
• Update dependency GovUk.Frontend.AspNetCore to 2.8.0
• Update dependency NetEscapades.AspNetCore.SecurityHeaders to 0.24.0
• Update dependency NetEscapades.AspNetCore.SecurityHeaders.TagHelpers to 0.24.0
• Update dependency axe-core to v4.10.2
• Update dependency csv-stringify to v6.5.2
• Update dependency cypress to v13.17.0
• Update dependency cypress-axe to v1.6.0
• Update dependency hashicorp/terraform to v1.10.5
• Update dependency typescript to v5.7.3
• Update dependency xunit to 2.9.3
• Update dotnet monorepo to 2.3.0 (minor) (Microsoft.AspNetCore.Http, Microsoft.AspNetCore.Http.Abstractions, Microsoft.AspNetCore.Http.Features)
• Update dotnet-azure-ad-microsoft-identity-web monorepo to 3.6.2 (minor) (Microsoft.Identity.Web, Microsoft.Identity.Web.UI)
• Update linters (minor) (@typescript-eslint/eslint-plugin, eslint, eslint-plugin-cypress, prettier)
• Update test packages (minor) (mocha, mochawesome-merge)
• Lock file maintenance

Pending Status Checks

These updates await pending status checks. To force their creation now, click the checkbox below.

• Update DFE-Digital/rsd-github-actions action to v1.1.2
• Update dependency Microsoft.Identity.Client to 4.68.0
• Update github/codeql-action action to v3

---

Warning

Renovate failed to look up the following dependencies: Failed to look up docker package "node, Failed to look up docker package "mcr.microsoft.com/dotnet/sdk, Failed to look up docker package "mcr.microsoft.com/dotnet/aspnet, Failed to look up nuget package DfE.CoreLibs.Http, Failed to look up nuget package DfE.CoreLibs.Caching, Failed to look up nuget package DfE.CoreLibs.AsyncProcessing, Failed to look up nuget package Dfe.AcademiesApi.Client, Failed to look up nuget package DfE.CoreLibs.Security, Failed to look up nuget package DfE.CoreLibs.Testing.

Files affected: Dockerfile, src/Api/Dfe.Complete.Api/Dfe.Complete.Api.csproj, src/Core/Dfe.Complete.Application/Dfe.Complete.Application.csproj, src/Core/Dfe.Complete.Domain/Dfe.Complete.Domain.csproj, src/Core/Dfe.Complete.Infrastructure/Dfe.Complete.Infrastructure.csproj, src/Frontend/Dfe.Complete/Dfe.Complete.csproj, src/Tests/Dfe.Complete.Tests.Common/Dfe.Complete.Tests.Common.csproj, src/Tests/Dfe.Complete.Tests/Dfe.Complete.Tests.csproj

---

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency FluentAssertions to 6.12.2
• Update dependency Microsoft.Identity.Client to 4.67.2

Detected dependencies

docker-compose

src/Tests/Dfe.Complete.CypressTests/docker-compose.yml

dockerfile

Dockerfile

• "node 22-bullseye-slim"
• "mcr.microsoft.com/dotnet/sdk 8.0-azurelinux3.0"
• "mcr.microsoft.com/dotnet/aspnet 8.0-azurelinux3.0"

src/Tests/Dfe.Complete.CypressTests/Dockerfile

• cypress/base 20.9.0

github-actions

.github/workflows/build-and-push-image.yml

• actions/checkout v4
• DFE-Digital/rsd-github-actions v1.1.1
• DFE-Digital/deploy-azure-container-apps-action v4.1.0
• actions/checkout v4
• actions/github-script v7

.github/workflows/build-and-push-package-template.yml

• actions/checkout v4
• actions/setup-dotnet v4

.github/workflows/cypress-lint.yml

• actions/checkout v4
• actions/setup-node v4

.github/workflows/cypress.yml

• actions/checkout v4
• cypress-io/github-action v6
• actions/upload-artifact v4
• actions/upload-artifact v4
• cypress/browsers 22.12.0

.github/workflows/docker-build.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6

.github/workflows/docker-test.yml

• actions/checkout v4
• docker/setup-buildx-action v3
• docker/build-push-action v6
• aquasecurity/trivy-action 0.24.0
• github/codeql-action v2

.github/workflows/dotnet-build.yml

• actions/checkout v4
• actions/setup-dotnet v4
• actions/setup-java v4
• actions/cache v4

.github/workflows/terraform.yml

• actions/checkout v4
• terraform-docs/gh-actions v1.3.0
• hashicorp/terraform 1.9.8
• hashicorp/terraform 1.9.8
• hashicorp/terraform 1.9.8
• terraform-linters/setup-tflint v4
• aquasecurity/tfsec-pr-commenter-action v1.3.1

npm

src/Frontend/Dfe.Complete/wwwroot/package.json

• @ministryofjustice/frontend ^3.3.1
• accessible-autocomplete ^2.0.4
• dfe-frontend ^2.0.1
• govuk-frontend ^5.8.0
• jquery ^3.6.1
• copy-webpack-plugin ^11.0.0
• css-loader ^6.0.0
• file-loader ^6.2.0
• mini-css-extract-plugin ^2.0.0
• sass ^1.56.0
• sass-loader ^13.0.0
• style-loader ^3.0.0
• webpack ^5.74.0
• webpack-cli ^5.0.0

src/Tests/Dfe.Complete.CypressTests/package.json

• @types/node ^20.4.7
• @types/uuid ^9.0.2
• @typescript-eslint/eslint-plugin ^6.2.1
• axe-core ^4.6.3
• csv-stringify ^6.4.0
• cypress ^13.6.6
• cypress-axe ^1.4.0
• cypress-localstorage-commands ^2.0.0
• cypress-multi-reporters ^1.5.0
• cypress-slack-reporter ^1.5.3
• eslint ^8.41.0
• eslint-plugin-cypress ^2.13.3
• mocha ^10.0.0
• mochawesome ^7.0.1
• mochawesome-merge ^4.2.1
• mochawesome-report-generator ^6.0.1
• prettier ^3.0.1
• typescript ^5.0.0
• uuid ^9.0.0
• xlsx ^0.18.5
• zaproxy ^2.0.0-rc.2

nuget

src/Api/Dfe.Complete.Api.Client/Dfe.Complete.Api.Client.csproj

• Newtonsoft.Json 13.0.3
• Microsoft.Identity.Client 4.67.1
• Microsoft.Extensions.Http 8.0.1
• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2
• Microsoft.Extensions.DependencyInjection 8.0.1
• Microsoft.Extensions.Configuration.Binder 8.0.2
• Microsoft.Extensions.Configuration.Abstractions 8.0.0

src/Api/Dfe.Complete.Api/Dfe.Complete.Api.csproj

• Newtonsoft.Json 13.0.3
• TimeZoneConverter 6.1.0
• Swashbuckle.AspNetCore.Annotations 6.9.0
• Swashbuckle.AspNetCore 6.9.0
• Serilog.Sinks.ApplicationInsights 4.0.0
• Serilog.AspNetCore 8.0.3
• NSwag.MSBuild 14.2.0
• NSwag.AspNetCore 14.2.0
• NetEscapades.AspNetCore.SecurityHeaders 0.24.0
• Microsoft.FeatureManagement.AspNetCore 3.5.0
• Microsoft.EntityFrameworkCore.SqlServer 8.0.11
• Microsoft.EntityFrameworkCore.Design 8.0.11
• Microsoft.EntityFrameworkCore 8.0.11
• Microsoft.Bcl.AsyncInterfaces 8.0.0
• Microsoft.AspNetCore.HeaderPropagation 8.0.11
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 8.0.11
• Microsoft.ApplicationInsights.AspNetCore 2.22.0
• FluentValidation 11.11.0
• DfE.CoreLibs.Http 1.0.5
• Asp.Versioning.Mvc.ApiExplorer 8.1.0
• Asp.Versioning.Mvc 8.1.0

src/Core/Dfe.Complete.Application/Dfe.Complete.Application.csproj

• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2
• Microsoft.Extensions.Configuration.Abstractions 8.0.0
• Microsoft.EntityFrameworkCore 8.0.11
• FluentValidation.AspNetCore 11.3.0
• FluentValidation 11.11.0
• DfE.CoreLibs.Caching 1.0.7
• DfE.CoreLibs.AsyncProcessing 1.0.5
• Dfe.AcademiesApi.Client 1.0.5
• AutoMapper 13.0.1

src/Core/Dfe.Complete.Domain/Dfe.Complete.Domain.csproj

• Newtonsoft.Json 13.0.3
• MediatR 12.4.1
• FluentValidation 11.11.0
• DfE.CoreLibs.Caching 1.0.7

src/Core/Dfe.Complete.Infrastructure/Dfe.Complete.Infrastructure.csproj

• Microsoft.Identity.Web 3.5.0
• Microsoft.Extensions.Options.ConfigurationExtensions 8.0.0
• Microsoft.EntityFrameworkCore.SqlServer 8.0.11
• Microsoft.EntityFrameworkCore.Sqlite 8.0.11
• Microsoft.EntityFrameworkCore.Design 8.0.11
• Microsoft.EntityFrameworkCore 8.0.11
• Microsoft.AspNetCore.Authentication.JwtBearer 8.0.11
• DfE.CoreLibs.Security 1.0.6

src/Frontend/Dfe.Complete.Logging/Dfe.Complete.Logging.csproj

• Microsoft.Extensions.Logging.Abstractions 7.0.1
• Microsoft.AspNetCore.Http.Abstractions 2.2.0
• Ardalis.GuardClauses 4.1.2

src/Frontend/Dfe.Complete.UserContext/Dfe.Complete.UserContext.csproj

• Microsoft.AspNetCore.Http.Features 2.2.0
• Ardalis.GuardClauses 4.1.2

src/Frontend/Dfe.Complete/Dfe.Complete.csproj

• Azure.Storage.Blobs 12.19.1
• Azure.Identity 1.11.4
• Azure.Core 1.40.0
• System.Net.Http.Json 7.0.1
• Serilog.AspNetCore 7.0.0
• Scrutor 4.2.2
• Newtonsoft.Json 13.0.3
• NetEscapades.AspNetCore.SecurityHeaders.TagHelpers 0.20.0
• NetEscapades.AspNetCore.SecurityHeaders 0.21.0
• Microsoft.Identity.Web.UI 3.5.0
• Microsoft.Identity.Web 3.5.0
• Microsoft.FeatureManagement.AspNetCore 2.6.1
• Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation 8.0.11
• Microsoft.ApplicationInsights.AspNetCore 2.22.0
• GovUk.Frontend.AspNetCore 2.2.0
• FluentValidation 11.11.0
• ExcelDataReader.DataSet 3.6.0
• ExcelDataReader 3.6.0
• DocumentFormat.OpenXml 2.20.0
• DfE.CoreLibs.Security 1.0.6
• Dfe.AcademiesApi.Client 1.0.5
• Azure.Extensions.AspNetCore.DataProtection.Blobs 1.3.4

src/Tests/Dfe.Complete.Api.Tests.Integration/Dfe.Complete.Api.Tests.Integration.csproj

• Microsoft.NET.Test.Sdk 17.12.0
• xunit.runner.visualstudio 2.8.2
• xunit 2.5.3
• Microsoft.EntityFrameworkCore.Sqlite 8.0.11
• Microsoft.EntityFrameworkCore 8.0.11
• Microsoft.Data.Sqlite 8.0.11
• Microsoft.AspNetCore.Mvc.Testing 8.0.11
• coverlet.collector 6.0.4

src/Tests/Dfe.Complete.Application.Tests/Dfe.Complete.Application.Tests.csproj

• coverlet.collector 6.0.4
• xunit.runner.visualstudio 2.8.2
• System.Net.Http 4.3.4
• Microsoft.NET.Test.Sdk 17.12.0
• FluentAssertions 6.12.2
• AutoFixture 4.18.1

src/Tests/Dfe.Complete.Domain.Tests/Dfe.Complete.Domain.Tests.csproj

• Microsoft.NET.Test.Sdk 17.12.0
• xunit.runner.visualstudio 2.8.2
• xunit 2.5.3
• coverlet.collector 6.0.4

src/Tests/Dfe.Complete.Tests.Common/Dfe.Complete.Tests.Common.csproj

• xunit.runner.visualstudio 2.8.2
• xunit 2.5.3
• NSubstitute 5.3.0
• Moq 4.20.72
• MockQueryable.NSubstitute 7.0.3
• Microsoft.NET.Test.Sdk 17.12.0
• Microsoft.EntityFrameworkCore.Sqlite 8.0.11
• Microsoft.EntityFrameworkCore 8.0.11
• Microsoft.Data.Sqlite.Core 8.0.11
• Microsoft.AspNetCore.Mvc.Testing 8.0.11
• DfE.CoreLibs.Testing 1.1.4
• coverlet.collector 6.0.4
• AutoMapper 13.0.1
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1
• AutoFixture 4.18.1

src/Tests/Dfe.Complete.Tests/Dfe.Complete.Tests.csproj

• coverlet.collector 6.0.4
• xunit.runner.visualstudio 2.8.2
• xunit 2.5.3
• NSubstitute 5.3.0
• Moq 4.20.72
• Microsoft.NET.Test.Sdk 17.12.0
• Microsoft.Extensions.Hosting 8.0.1
• Microsoft.AspNetCore.Http 2.2.2
• FluentAssertions 6.12.0
• DfE.CoreLibs.Testing 1.1.14
• AutoFixture 4.18.1

src/Tests/Dfe.Complete.UserContext.Tests/Dfe.Complete.UserContext.Tests.csproj

• coverlet.collector 6.0.4
• xunit.runner.visualstudio 2.8.2
• xunit 2.5.3
• Microsoft.NET.Test.Sdk 17.12.0
• FluentAssertions 6.12.0
• AutoFixture.Xunit2 4.18.1
• AutoFixture.Idioms 4.18.1
• AutoFixture.AutoMoq 4.18.1
• AutoFixture 4.18.1

terraform

terraform/container-apps-hosting.tf

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v1.16.6

terraform/key-vault-tfvars-secrets.tf

• github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.1

terraform/providers.tf

terraform/statuscake-tls-monitor.tf

• github.com/dfe-digital/terraform-statuscake-tls-monitor v0.1.5

terraform/versions.tf

• azapi ~> 1.13
• azurerm ~> 4.0
• statuscake ~> 2.1
• hashicorp/terraform ~> 1.9

terraform-version

terraform/.terraform-version

• hashicorp/terraform 1.9.8

---

• Check this box to trigger a request for Renovate to run again on this repository