Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
nuget	xunit

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (8)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	cypress-file-upload	2021-11-14
npm	cypress-multi-reporters	2025-01-27
nuget	AutoFixture.AutoNSubstitute	2025-01-21
nuget	AutoFixture.Xunit2	2025-01-21
terraform	github.com/dfe-digital/terraform-statuscake-tls-monitor	2024-12-10
terraform	statuscake	2023-10-20

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/setup-dotnet action to v5
• Update actions/setup-java action to v5
• Update actions/upload-artifact action to v7
• Update cypress-io/github-action action to v7
• Update cypress/browsers Docker tag to v26
• Update dependency coverlet.collector to v10
• Update dependency GovUk.Frontend.AspNetCore to v4
• Update dependency Markdig to v1
• Update dependency Microsoft.ApplicationInsights.AspNetCore to v3
• Update dependency Microsoft.NET.Test.Sdk to v18
• Update dependency uuid to v14
• Update dependency xunit.runner.visualstudio to v3
• Update docker/build-push-action action to v7
• Update docker/setup-buildx-action action to v4
• Update dotnet monorepo (major) (Microsoft.AspNetCore.Http.Features, Microsoft.Extensions.DependencyInjection.Abstractions)
• Update github/codeql-action action to v4
• Update Terraform azapi to v2
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update actions/setup-java digest to c1e3236
• Update docker/build-push-action digest to 10e90e3
• Update docker/setup-buildx-action digest to 8d2750c
• Update dependency coverlet.collector to 6.0.4
• Update dependency GovUK.Dfe.CoreLibs.Caching to 1.0.13
• Update dependency GovUK.Dfe.CoreLibs.Contracts to 1.0.64
• Update dependency GovUK.Dfe.CoreLibs.Security to 1.1.27
• Update dependency GovUK.Dfe.ExternalApplications.Api.Client to 0.1.49
• Update dependency GovUk.Frontend.AspNetCore to 3.2.3
• Update dependency hashicorp/terraform to v1.14.9
• Update dependency Newtonsoft.Json to 13.0.4
• Update dependency xunit.runner.visualstudio to 2.5.8
• Update DFE-Digital/deploy-azure-container-apps-action action to v5.2.2
• Update dotnet monorepo (patch) (Microsoft.AspNetCore.Http.Extensions, Microsoft.AspNetCore.Http.Features, Microsoft.AspNetCore.Mvc.Abstractions, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Options)
• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2.6.6
• Update Terraform github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars to v0.5.4
• Update aquasecurity/trivy-action action to v0.36.0
• Update cypress/browsers Docker tag to v22.21.0
• Update dependency GovUk.Frontend.AspNetCore to 3.5.1
• Update dependency Markdig to 0.45.0
• Update dependency Microsoft.NET.Test.Sdk to 17.14.1
• Update Terraform azurerm to v4.79.0
• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2.8.1
• Update xunit-dotnet monorepo (minor) (xunit, xunit.runner.visualstudio)
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/docker.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Pin dependencies (DFE-Digital/rsd-github-actions, DFE-Digital/terraform-linting-actions, actions/checkout, cypress, cypress-axe, cypress-file-upload, cypress-multi-reporters, mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk, typescript)
• Pin dependencies (@eslint/js, eslint, eslint-plugin-cypress, typescript-eslint)
• Pin dependencies (mochawesome, mochawesome-merge, mochawesome-report-generator)
• Update actions/cache digest to 0057852
• Update actions/checkout digest to 34e1148
• Update github/codeql-action digest to 411c4c9
• Update dependency hashicorp/terraform to v1.15.7
• Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• mcr.microsoft.com/dotnet/sdk 10.0-azurelinux3.0 → [Updates: 10.0-azurelinux3.0]
• mcr.microsoft.com/dotnet/aspnet 10.0-azurelinux3.0 → [Updates: 10.0-azurelinux3.0]

github-actions (6)

.github/workflows/continuous-integration-terraform.yml (2)

• actions/checkout v5 → [Updates: v7, v5]
• DFE-Digital/terraform-linting-actions v1.2.1 → [Updates: v1.2.1]

.github/workflows/deploy.yml (8)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• DFE-Digital/rsd-github-actions v1 → [Updates: v1]
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/docker.yml (6)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7, v6]
• aquasecurity/trivy-action 0.34.2@97e0b3872f55f89b95b2f65b3dbab56962816478 → [Updates: v0.36.0]
• github/codeql-action v3@181d5eefc20863364f96762470ba6f862bdef56b → [Updates: v4, v3]
• ubuntu 24.04

.github/workflows/dotnet-ci.yml (5)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v7, v4]
• actions/setup-dotnet v4@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 → [Updates: v5]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• actions/cache v4@5a3ec84eff668545956fd18022155c47e93e2684 → [Updates: v6, v4]
• ubuntu 24.04

.github/workflows/environment-matrix-dashboard.yml

.github/workflows/test-automated-ui.yml (5)

• actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 → [Updates: v7, v4]
• cypress-io/github-action v6 → [Updates: v7.4.0]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 → [Updates: v7]
• cypress/browsers 22.14.0@sha256:5fedacf2c6b1fab4f2d2d24a1cb2054af6d0103e0b163cd5064e523f45ca1a88 → [Updates: 22.21.0, 26.0.0]

npm (1)

src/Tests/DfE.ExternalApplications.CypressTests/package.json (15)

• @eslint/js ^10.0.1 → [Updates: 10.0.1]
• cypress ^15.8.1 → [Updates: 15.18.0]
• cypress-axe ^1.7.0 → [Updates: 1.7.0]
• cypress-file-upload ^5.0.8 → [Updates: 5.0.8]
• cypress-multi-reporters ^2.0.4 → [Updates: 2.0.5]
• eslint ^10.6.0 → [Updates: 10.6.0]
• eslint-plugin-cypress ^6.4.2 → [Updates: 6.4.2]
• mochawesome ^7.1.4 → [Updates: 7.1.4]
• mochawesome-merge ^5.1.1 → [Updates: 5.1.1]
• mochawesome-report-generator ^6.0.1 → [Updates: 6.3.2]
• typescript ^6.0.3 → [Updates: 6.0.3]
• typescript-eslint ^8.15.0 → [Updates: 8.62.1]
• diff ^9.0.0
• serialize-javascript ^7.0.7
• uuid ^11.1.1 → [Updates: ^14.0.0]

nuget (6)

src/DfE.ExternalApplications.Application/DfE.ExternalApplications.Application.csproj (4)

• Microsoft.Extensions.DependencyInjection.Abstractions 9.0.0 → [Updates: 9.0.17, 10.0.9]
• Microsoft.AspNetCore.Mvc.Abstractions 2.3.0 → [Updates: 2.3.11]
• Microsoft.AspNetCore.Http.Features 2.3.0 → [Updates: 2.3.11, 3.1.32]
• GovUK.Dfe.ExternalApplications.Api.Client 0.1.48-prerelease.14 → [Updates: 0.1.49]

src/DfE.ExternalApplications.Domain/DfE.ExternalApplications.Domain.csproj (1)

• GovUK.Dfe.CoreLibs.Contracts 1.0.47 → [Updates: 1.0.64]

src/DfE.ExternalApplications.Infrastructure/DfE.ExternalApplications.Infrastructure.csproj (5)

• Microsoft.AspNetCore.Http.Extensions 2.3.0 → [Updates: 2.3.11]
• GovUK.Dfe.CoreLibs.Messaging.MassTransit 0.1.3
• GovUK.Dfe.CoreLibs.Messaging.Contracts 0.1.5
• Microsoft.Extensions.Options 10.0.0 → [Updates: 10.0.9]
• GovUK.Dfe.CoreLibs.Caching 1.0.12 → [Updates: 1.0.13]

src/DfE.ExternalApplications.Web/DfE.ExternalApplications.Web.csproj (6)

• Newtonsoft.Json 13.0.3 → [Updates: 13.0.4]
• Microsoft.ApplicationInsights.AspNetCore 2.22.0 → [Updates: 3.1.2]
• Markdig 0.42.0 → [Updates: 0.45.0, 1.3.2]
• HtmlSanitizer 9.0.892
• GovUk.Frontend.AspNetCore 3.2.2 → [Updates: 3.2.3, 3.5.1, 4.2.1]
• GovUK.Dfe.CoreLibs.Security 1.1.27-prerelease-4 → [Updates: 1.1.27]

src/Tests/DfE.ExternalApplications.Infrastructure.UnitTests/DfE.ExternalApplications.Infrastructure.UnitTests.csproj (6)

• xunit.runner.visualstudio 2.5.3 → [Updates: 2.5.8, 2.8.2, 3.1.5]
• xunit 2.5.3 → [Updates: 2.9.3]
• NSubstitute 5.3.0
• coverlet.collector 6.0.0 → [Updates: 6.0.4, 10.0.1]
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1

src/Tests/Dfe.ExternalApplications.Web.UnitTests/Dfe.ExternalApplications.Web.UnitTests.csproj (6)

• xunit.runner.visualstudio 2.5.3 → [Updates: 2.5.8, 2.8.2, 3.1.5]
• xunit 2.5.3 → [Updates: 2.9.3]
• Microsoft.NET.Test.Sdk 17.8.0 → [Updates: 17.14.1, 18.7.0]
• coverlet.collector 6.0.0 → [Updates: 6.0.4, 10.0.1]
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1

renovate-config (1)

renovate.json

terraform (9)

terraform-python-lsrp/container-apps-hosting.tf (1)

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v2.6.3 → [Updates: v2.6.6, v2.8.1]

terraform-python-lsrp/key-vault-tfvars-secrets.tf (1)

• github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.2 → [Updates: v0.5.4]

terraform-python-lsrp/providers.tf

terraform-python-lsrp/versions.tf (3)

• azapi ~> 1.13 → [Updates: ~> 2.0]
• azurerm ~> 4.0 → [Updates: ~> 4.0]
• hashicorp/terraform ~> 1.14

terraform/container-apps-hosting.tf (1)

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v2.8.1

terraform/key-vault-tfvars-secrets.tf (1)

• github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.3 → [Updates: v0.5.4]

terraform/providers.tf

terraform/statuscake-tls-monitor.tf (1)

• github.com/dfe-digital/terraform-statuscake-tls-monitor v0.1.5

terraform/versions.tf (4)

• azapi ~> 1.13 → [Updates: ~> 2.0]
• azurerm ~> 4.0 → [Updates: ~> 4.0]
• statuscake ~> 2.1
• hashicorp/terraform ~> 1.9

terraform-version (2)

terraform-python-lsrp/.terraform-version (1)

• hashicorp/terraform 1.14.3 → [Updates: 1.14.9, 1.15.7]

terraform/.terraform-version (1)

• hashicorp/terraform 1.10.5 → [Updates: 1.15.7]

---

• Check this box to trigger a request for Renovate to run again on this repository