Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
nuget	FluentValidation.AspNetCore
nuget	xunit

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (9)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
github-actions	DFE-Digital/rsd-github-actions	2025-02-06
github-actions	terraform-docs/gh-actions	2025-05-13
nuget	AutoFixture	2025-01-21
nuget	AutoFixture.AutoNSubstitute	2025-01-21
nuget	AutoFixture.Xunit2	2025-01-21
nuget	Moq	2024-09-07
nuget	System.Net.Http	2018-10-09
terraform	statuscake	2023-10-20

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/cache action to v5
• Update actions/checkout action to v6
• Update actions/setup-dotnet action to v5
• Update actions/setup-java action to v5
• Update aspnet-api-versioning monorepo to v10 (Asp.Versioning.Mvc, Asp.Versioning.Mvc.ApiExplorer)
• Update dependency AutoMapper to v16
• Update dependency coverlet.collector to v10
• Update dependency FluentAssertions to v7
• Update dependency FluentValidation to v12
• Update dependency MediatR to v14
• Update dependency Microsoft.ApplicationInsights.AspNetCore to v3
• Update dependency Microsoft.FeatureManagement.AspNetCore to v4
• Update dependency Microsoft.Identity.Web to v4
• Update dependency Microsoft.NET.Test.Sdk to v18
• Update dependency MockQueryable.NSubstitute to v10
• Update dependency NetEscapades.AspNetCore.SecurityHeaders to v1
• Update dependency Serilog.AspNetCore to v10
• Update dependency Serilog.Sinks.ApplicationInsights to v5
• Update dependency TimeZoneConverter to v7
• Update dependency xunit.runner.visualstudio to v3
• Update docker/build-push-action action to v7
• Update docker/setup-buildx-action action to v4
• Update dotnet monorepo to v10 (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Bcl.AsyncInterfaces, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.Configuration.Binder, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Http, Microsoft.Extensions.Options.ConfigurationExtensions)
• Update github/codeql-action action to v4
• Update swashbuckle-aspnetcore monorepo to v10 (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Update Terraform azapi to v2
• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2
• Update terraform-linters/setup-tflint action to v6
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Pin dependencies (mcr.microsoft.com/dotnet/aspnet, mcr.microsoft.com/dotnet/sdk)

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency GovUK.Dfe.CoreLibs.Caching to 1.0.13
• Update dependency GovUK.Dfe.CoreLibs.Http to 1.0.11
• Update dependency GovUK.Dfe.CoreLibs.Security to 1.1.26
• Update dependency GovUK.Dfe.CoreLibs.Testing to 1.1.23
• Update DFE-Digital/deploy-azure-container-apps-action action to v5.2.2
• Update dotnet monorepo to 8.0.27 (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore, Microsoft.AspNetCore.HeaderPropagation, Microsoft.AspNetCore.Mvc.Testing, Microsoft.Data.Sqlite, Microsoft.Data.Sqlite.Core, Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Design, Microsoft.EntityFrameworkCore.SqlServer, Microsoft.EntityFrameworkCore.Sqlite)
• Update aquasecurity/trivy-action action to v0.36.0
• Update dependency BenchmarkDotNet to 0.15.8
• Update dependency FluentValidation to 11.12.0
• Update dependency hashicorp/terraform to v1.15.3
• Update dependency MediatR to 12.5.0
• Update dependency Microsoft.ApplicationInsights.AspNetCore to 2.23.0
• Update dependency Microsoft.Identity.Client to 4.84.0
• Update dependency Microsoft.Identity.Web to 3.15.0
• Update dependency Microsoft.NET.Test.Sdk to 17.14.1
• Update dependency Serilog.Sinks.ApplicationInsights to 4.1.0
• Update nswag monorepo to 14.7.1 (NSwag.AspNetCore, NSwag.MSBuild)
• Update swashbuckle-aspnetcore monorepo to 6.9.0 (Swashbuckle.AspNetCore, Swashbuckle.AspNetCore.Annotations)
• Update Terraform azurerm to v4.73.0
• Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v1.20.0
• Update terraform-docs/gh-actions action to v1.4.1
• Lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update Terraform github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars to v0.5.3

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package DFE-Digital/rsd-github-actions), Could not determine new digest for update (github-tags package aquasecurity/trivy-action), Failed to look up nuget package Dfe.Complete.Api.Client: no-result, Failed to look up nuget package Dfe.AcademiesApi.Client: no-result.

Files affected: .github/workflows/deploy.yml, .github/workflows/docker-test.yml, src/Dfe.CaseAggregationService.Infrastructure/Dfe.CaseAggregationService.Infrastructure.csproj

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/cache digest to 0057852
• Update actions/checkout digest to 34e1148
• Update actions/setup-java digest to c1e3236
• Update docker/build-push-action digest to 10e90e3
• Update docker/setup-buildx-action digest to 8d2750c
• Update github/codeql-action digest to 03e4368
• Update aspnet-api-versioning monorepo to 8.1.1 (Asp.Versioning.Mvc, Asp.Versioning.Mvc.ApiExplorer)
• Update dependency FluentValidation.AspNetCore to 11.3.1
• Update dependency GovUK.Dfe.CoreLibs.AsyncProcessing to 1.0.13
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

dockerfile (1)

Dockerfile (2)

• mcr.microsoft.com/dotnet/sdk 8.0-azurelinux3.0 → [Updates: 10.0-azurelinux3.0, 8.0-azurelinux3.0]
• mcr.microsoft.com/dotnet/aspnet 8.0-azurelinux3.0 → [Updates: 10.0-azurelinux3.0, 8.0-azurelinux3.0]

github-actions (5)

.github/workflows/build-and-push-package-template.yml (2)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-dotnet v4@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 → [Updates: v5]

.github/workflows/deploy.yml (8)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• DFE-Digital/rsd-github-actions v1.1.3@5d9289aaafc5d0a591dab9d93a93be27381fc5e5
• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 → [Updates: v5.2.2]
• ubuntu 24.04
• ubuntu 24.04

.github/workflows/docker-test.yml (5)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v4, v3]
• docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 → [Updates: v7, v6]
• aquasecurity/trivy-action 0.32.0@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 → [Updates: v0.36.0]
• github/codeql-action v3@192325c86100d080feab897ff886c34abd4c83a3 → [Updates: v4, v3]

.github/workflows/dotnet-ci.yml (5)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• actions/setup-dotnet v4@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 → [Updates: v5]
• actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 → [Updates: v5, v4]
• actions/cache v4@0400d5f644dc74513175e3cd8d07132dd4860809 → [Updates: v5, v4]
• ubuntu 24.04

.github/workflows/terraform.yml (6)

• actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 → [Updates: v6, v4]
• terraform-docs/gh-actions v1.3.0@aeae0038ed47a547e0c0fca5c059d3335f48fb25 → [Updates: v1.4.1]
• hashicorp/terraform 1.12.2@sha256:f5ac787eee9d292b6a3b97d40f04019ce08189d356233fc73d5ec7ef8529cce2 → [Updates: 1.15.3]
• hashicorp/terraform 1.12.2@sha256:f5ac787eee9d292b6a3b97d40f04019ce08189d356233fc73d5ec7ef8529cce2 → [Updates: 1.15.3]
• hashicorp/terraform 1.12.2@sha256:f5ac787eee9d292b6a3b97d40f04019ce08189d356233fc73d5ec7ef8529cce2 → [Updates: 1.15.3]
• terraform-linters/setup-tflint v4@90f302c255ef959cbfb4bd10581afecdb7ece3e6 → [Updates: v6]

nuget (11)

src/Benchmarks/Dfe.CaseAggregationService.Benchmarks.csproj (1)

• BenchmarkDotNet 0.14.0 → [Updates: 0.15.8]

src/Dfe.CaseAggregationService.Api.Client/Dfe.CaseAggregationService.Api.Client.csproj (7)

• Newtonsoft.Json 13.0.4
• Microsoft.Identity.Client 4.65.0 → [Updates: 4.84.0]
• Microsoft.Extensions.Http 8.0.1 → [Updates: 10.0.8]
• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2 → [Updates: 10.0.8]
• Microsoft.Extensions.DependencyInjection 8.0.1 → [Updates: 10.0.8]
• Microsoft.Extensions.Configuration.Binder 8.0.2 → [Updates: 10.0.8]
• Microsoft.Extensions.Configuration.Abstractions 8.0.0 → [Updates: 10.0.8]

src/Dfe.CaseAggregationService.Api/Dfe.CaseAggregationService.Api.csproj (21)

• Newtonsoft.Json 13.0.4
• TimeZoneConverter 6.1.0 → [Updates: 7.2.0]
• Swashbuckle.AspNetCore.Annotations 6.8.1 → [Updates: 6.9.0, 10.1.7]
• Swashbuckle.AspNetCore 6.8.1 → [Updates: 6.9.0, 10.1.7]
• Serilog.Sinks.ApplicationInsights 4.0.0 → [Updates: 4.1.0, 5.0.1]
• Serilog.AspNetCore 8.0.3 → [Updates: 10.0.0]
• NSwag.MSBuild 14.1.0 → [Updates: 14.7.1]
• NSwag.AspNetCore 14.1.0 → [Updates: 14.7.1]
• NetEscapades.AspNetCore.SecurityHeaders 0.24.0 → [Updates: 1.3.1]
• Microsoft.FeatureManagement.AspNetCore 3.5.0 → [Updates: 4.5.0]
• Microsoft.EntityFrameworkCore.SqlServer 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.EntityFrameworkCore.Design 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.EntityFrameworkCore 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.Bcl.AsyncInterfaces 8.0.0 → [Updates: 10.0.8]
• Microsoft.AspNetCore.HeaderPropagation 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.ApplicationInsights.AspNetCore 2.22.0 → [Updates: 2.23.0, 3.1.1]
• GovUK.Dfe.CoreLibs.Http 1.0.10 → [Updates: 1.0.11]
• FluentValidation 11.10.0 → [Updates: 11.12.0, 12.1.1]
• Asp.Versioning.Mvc.ApiExplorer 8.1.0 → [Updates: 8.1.1, 10.0.0]
• Asp.Versioning.Mvc 8.1.0 → [Updates: 8.1.1, 10.0.0]

src/Dfe.CaseAggregationService.Application/Dfe.CaseAggregationService.Application.csproj (8)

• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2 → [Updates: 10.0.8]
• Microsoft.Extensions.Configuration.Abstractions 8.0.0 → [Updates: 10.0.8]
• Microsoft.EntityFrameworkCore 8.0.25 → [Updates: 8.0.27, 10.0.8]
• FluentValidation.AspNetCore 11.3.0 → [Updates: 11.3.1]
• FluentValidation 11.10.0 → [Updates: 11.12.0, 12.1.1]
• GovUK.Dfe.CoreLibs.Caching 1.0.10 → [Updates: 1.0.13]
• GovUK.Dfe.CoreLibs.AsyncProcessing 1.0.12 → [Updates: 1.0.13]
• AutoMapper 15.1.3 → [Updates: 16.1.1]

src/Dfe.CaseAggregationService.Domain/Dfe.CaseAggregationService.Domain.csproj (3)

• MediatR 12.4.1 → [Updates: 12.5.0, 14.1.0]
• FluentValidation 11.10.0 → [Updates: 11.12.0, 12.1.1]
• GovUK.Dfe.CoreLibs.Caching 1.0.10 → [Updates: 1.0.13]

src/Dfe.CaseAggregationService.Infrastructure/Dfe.CaseAggregationService.Infrastructure.csproj (11)

• Newtonsoft.Json 13.0.4
• Microsoft.Identity.Web 3.9.4 → [Updates: 3.15.0, 4.9.0]
• Microsoft.Extensions.Options.ConfigurationExtensions 8.0.0 → [Updates: 10.0.8]
• Microsoft.EntityFrameworkCore.SqlServer 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.EntityFrameworkCore.Sqlite 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.EntityFrameworkCore.Design 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.EntityFrameworkCore 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.AspNetCore.Authentication.JwtBearer 8.0.25 → [Updates: 8.0.27, 10.0.8]
• GovUK.Dfe.CoreLibs.Security 1.1.24 → [Updates: 1.1.26]
• Dfe.Complete.Api.Client 1.0.6
• Dfe.AcademiesApi.Client 1.0.12

src/Tests/Dfe.CaseAggregationService.Api.Tests.Integration/Dfe.CaseAggregationService.Api.Tests.Integration.csproj (8)

• Microsoft.NET.Test.Sdk 17.11.1 → [Updates: 17.14.1, 18.5.1]
• xunit.runner.visualstudio 2.8.2 → [Updates: 3.1.5]
• xunit 2.9.3
• Microsoft.EntityFrameworkCore.Sqlite 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.EntityFrameworkCore 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.Data.Sqlite 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.AspNetCore.Mvc.Testing 8.0.25 → [Updates: 8.0.27, 10.0.8]
• coverlet.collector 6.0.4 → [Updates: 10.0.0]

src/Tests/Dfe.CaseAggregationService.Application.Tests/Dfe.CaseAggregationService.Application.Tests.csproj (6)

• coverlet.collector 6.0.4 → [Updates: 10.0.0]
• xunit.runner.visualstudio 2.8.2 → [Updates: 3.1.5]
• System.Net.Http 4.3.4
• Microsoft.NET.Test.Sdk 17.11.1 → [Updates: 17.14.1, 18.5.1]
• FluentAssertions 6.12.2 → [Updates: 7.0.0]
• AutoFixture 4.18.1

src/Tests/Dfe.CaseAggregationService.Domain.Tests/Dfe.CaseAggregationService.Domain.Tests.csproj (4)

• Microsoft.NET.Test.Sdk 17.11.1 → [Updates: 17.14.1, 18.5.1]
• xunit.runner.visualstudio 2.8.2 → [Updates: 3.1.5]
• xunit 2.9.3
• coverlet.collector 6.0.4 → [Updates: 10.0.0]

src/Tests/Dfe.CaseAggregationService.Infrastructure.Tests/Dfe.CaseAggregationService.Infrastructure.Tests.csproj (4)

• xunit.runner.visualstudio 2.9.3
• xunit 2.9.3
• Microsoft.NET.Test.Sdk 17.11.1 → [Updates: 17.14.1, 18.5.1]
• coverlet.collector 6.0.4 → [Updates: 10.0.0]

src/Tests/Dfe.CaseAggregationService.Tests.Common/Dfe.CaseAggregationService.Tests.Common.csproj (16)

• xunit.runner.visualstudio 2.8.2 → [Updates: 3.1.5]
• xunit 2.9.3
• NSubstitute 5.3.0
• Moq 4.20.72
• MockQueryable.NSubstitute 7.0.3 → [Updates: 10.0.5]
• Microsoft.NET.Test.Sdk 17.11.1 → [Updates: 17.14.1, 18.5.1]
• Microsoft.EntityFrameworkCore.Sqlite 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.EntityFrameworkCore 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.Data.Sqlite.Core 8.0.25 → [Updates: 8.0.27, 10.0.8]
• Microsoft.AspNetCore.Mvc.Testing 8.0.25 → [Updates: 8.0.27, 10.0.8]
• GovUK.Dfe.CoreLibs.Testing 1.1.21 → [Updates: 1.1.23]
• coverlet.collector 6.0.4 → [Updates: 10.0.0]
• AutoMapper 15.1.3 → [Updates: 16.1.1]
• AutoFixture.Xunit2 4.18.1
• AutoFixture.AutoNSubstitute 4.18.1
• AutoFixture 4.18.1

renovate-config (1)

renovate.json

terraform (4)

terraform/container-apps-hosting.tf (1)

• github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v1.19.1 → [Updates: v1.20.0, v2.6.5]

terraform/key-vault-tfvars-secrets.tf (1)

• github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.2 → [Updates: v0.5.3]

terraform/providers.tf

terraform/versions.tf (4)

• azapi ~> 1.13 → [Updates: ~> 2.0]
• azurerm ~> 4.0 → [Updates: ~> 4.0]
• statuscake ~> 2.1
• hashicorp/terraform ~> 1.9

terraform-version (1)

terraform/.terraform-version (1)

• hashicorp/terraform 1.12.2 → [Updates: 1.15.3]

---

• Check this box to trigger a request for Renovate to run again on this repository