DFE-Digital / DFE-Digital/external-applications-web

Dependency Dashboard

Open
#2 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C#
Stars
0
Forks
1
Avg merge
3d 6h
Merged PRs (30d)
1

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

[!WARNING]
The following dependencies are either deprecated or have replacements available.

Datasource Package Replacement PR?
nuget xunit Unavailable

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (7)
Datasource Package Last Updated
npm cypress-axe 2025-08-29
npm cypress-file-upload 2021-11-14
npm cypress-multi-reporters 2025-01-27
nuget AutoFixture.Xunit2 2025-01-21
terraform github.com/dfe-digital/terraform-statuscake-tls-monitor 2024-12-10
terraform statuscake 2023-10-20

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

  • Update actions/cache action to v6
  • Update actions/checkout action to v7
  • Update actions/setup-dotnet action to v6
  • Update actions/setup-java action to v6
  • Update actions/upload-artifact action to v7
  • Update cypress-io/github-action action to v7
  • Update cypress/browsers Docker tag to v26
  • Update dependency coverlet.collector to v10
  • Update dependency cypress to v16
  • Update dependency eslint-plugin-cypress to v7
  • Update dependency GovUk.Frontend.AspNetCore to v4
  • Update dependency Markdig to v1
  • Update dependency Microsoft.ApplicationInsights.AspNetCore to v3
  • Update dependency Microsoft.NET.Test.Sdk to v18
  • Update dependency mochawesome to v8
  • Update dependency NSubstitute to v6
  • Update dependency typescript to v7
  • Update dependency uuid to v14
  • Update dependency xunit.runner.visualstudio to v4
  • Update docker/build-push-action action to v7
  • Update docker/setup-buildx-action action to v4
  • Update dotnet monorepo (major) (Microsoft.AspNetCore.Http.Features, Microsoft.Extensions.DependencyInjection.Abstractions)
  • Update github/codeql-action action to v4
  • Update Terraform azapi to v2
  • Update Terraform azurerm to v5
  • πŸ” Create all pending approval PRs at once πŸ”

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

  • Update docker/setup-buildx-action digest to 8d2750c
  • Update dependency coverlet.collector to 6.0.4
  • Update dependency cypress to ^15.18.0
  • Update dependency GovUK.Dfe.CoreLibs.Caching to 1.0.13
  • Update dependency GovUK.Dfe.CoreLibs.Contracts to 1.0.103
  • Update dependency GovUK.Dfe.CoreLibs.Security to 1.1.30
  • Update dependency GovUK.Dfe.ExternalApplications.Api.Client to 0.1.53
  • Update dependency GovUk.Frontend.AspNetCore to 3.2.3
  • Update dependency hashicorp/terraform to v1.14.9
  • Update dependency HtmlSanitizer to 9.0.967
  • Update dependency Newtonsoft.Json to 13.0.4
  • Update dependency xunit.runner.visualstudio to 2.5.8
  • Update DFE-Digital/deploy-azure-container-apps-action action to v5.2.2
  • Update dotnet monorepo (patch) (Microsoft.AspNetCore.DataProtection.StackExchangeRedis, Microsoft.AspNetCore.Http.Extensions, Microsoft.AspNetCore.Http.Features, Microsoft.AspNetCore.Mvc.Abstractions, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Options)
  • Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2.6.6
  • Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2.8.2
  • Update Terraform github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars to v0.5.4
  • Update aquasecurity/trivy-action action to v0.36.0
  • Update cypress/browsers Docker tag to v22.21.0
  • Update dependency cypress to ^15.18.0
  • Update dependency GovUk.Frontend.AspNetCore to 3.5.1
  • Update dependency HtmlSanitizer to 9.2.1039
  • Update dependency Markdig to 0.45.0
  • Update dependency Microsoft.NET.Test.Sdk to 17.14.1
  • Update dependency serialize-javascript to v7.1.1
  • Update Terraform azurerm to v4.81.0
  • Update Terraform github.com/DFE-Digital/terraform-azurerm-container-apps-hosting to v2.10.0
  • Update xunit-dotnet monorepo (minor) (xunit, xunit.runner.visualstudio)
  • πŸ” Create all rate-limited PRs at once πŸ”

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

[!WARNING]
Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package aquasecurity/trivy-action).

Files affected: .github/workflows/docker.yml

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

Detected Dependencies

dockerfile (2)
Dockerfile (2)
  • mcr.microsoft.com/dotnet/sdk 10.0-azurelinux3.0 β†’ [Updates: 11.0-azurelinux3.0, 10.0-azurelinux3.0]
  • mcr.microsoft.com/dotnet/aspnet 10.0-azurelinux3.0 β†’ [Updates: 11.0-azurelinux3.0, 10.0-azurelinux3.0]
src/DfE.ExternalApplications.Web/Dockerfile (2)
  • mcr.microsoft.com/dotnet/aspnet 10.0 β†’ [Updates: 11.0, 10.0]
  • mcr.microsoft.com/dotnet/sdk 10.0 β†’ [Updates: 11.0, 10.0]
github-actions (6)
.github/workflows/continuous-integration-terraform.yml (2)
  • actions/checkout v5 β†’ [Updates: v7, v5]
  • DFE-Digital/terraform-linting-actions v1.2.1 β†’ [Updates: v1.2.1]
.github/workflows/deploy.yml (8)
  • actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 β†’ [Updates: v7, v4]
  • DFE-Digital/rsd-github-actions v1 β†’ [Updates: v1]
  • actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 β†’ [Updates: v7, v4]
  • DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 β†’ [Updates: v5.2.2]
  • DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 β†’ [Updates: v5.2.2]
  • DFE-Digital/deploy-azure-container-apps-action v5.2.1@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 β†’ [Updates: v5.2.2]
  • ubuntu 24.04 β†’ [Updates: 26.04]
  • ubuntu 24.04 β†’ [Updates: 26.04]
.github/workflows/docker.yml (6)
  • actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 β†’ [Updates: v7, v4]
  • docker/setup-buildx-action v3@e468171a9de216ec08956ac3ada2f0791b6bd435 β†’ [Updates: v4, v3]
  • docker/build-push-action v6@263435318d21b8e681c14492fe198d362a7d2c83 β†’ [Updates: v7, v6]
  • aquasecurity/trivy-action 0.34.2@97e0b3872f55f89b95b2f65b3dbab56962816478 β†’ [Updates: v0.36.0]
  • github/codeql-action v3@181d5eefc20863364f96762470ba6f862bdef56b β†’ [Updates: v4, v3]
  • ubuntu 24.04 β†’ [Updates: 26.04]
.github/workflows/dotnet-ci.yml (5)
  • actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683 β†’ [Updates: v7, v4]
  • actions/setup-dotnet v4@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 β†’ [Updates: v6]
  • actions/setup-java v4@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 β†’ [Updates: v6, v4]
  • actions/cache v4@5a3ec84eff668545956fd18022155c47e93e2684 β†’ [Updates: v6, v4]
  • ubuntu 24.04 β†’ [Updates: 26.04]
.github/workflows/environment-matrix-dashboard.yml (1)
  • actions/checkout v4 β†’ [Updates: v7, v4]
.github/workflows/test-automated-ui.yml (5)
  • actions/checkout v4@08eba0b27e820071cde6df949e0beb9ba4906955 β†’ [Updates: v7, v4]
  • cypress-io/github-action v6 β†’ [Updates: v7.4.3]
  • actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 β†’ [Updates: v7]
  • actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02 β†’ [Updates: v7]
  • cypress/browsers 22.14.0@sha256:5fedacf2c6b1fab4f2d2d24a1cb2054af6d0103e0b163cd5064e523f45ca1a88 β†’ [Updates: 22.21.0, 26.0.0]
npm (1)
src/Tests/DfE.ExternalApplications.CypressTests/package.json (15)
  • @eslint/js ^10.0.1 β†’ [Updates: 10.0.1]
  • cypress ^15.8.1 β†’ [Updates: 15.18.0, ^15.18.0, ^16.0.0]
  • cypress-axe ^1.7.0 β†’ [Updates: 1.7.0]
  • cypress-file-upload ^5.0.8 β†’ [Updates: 5.0.8]
  • cypress-multi-reporters ^2.0.4 β†’ [Updates: 2.0.5]
  • eslint ^10.6.0 β†’ [Updates: 10.6.0, ^10.6.0]
  • eslint-plugin-cypress ^6.4.2 β†’ [Updates: 6.4.2, ^7.0.0]
  • mochawesome ^7.1.4 β†’ [Updates: 7.1.4, ^8.0.0]
  • mochawesome-merge ^5.1.1 β†’ [Updates: 5.1.1]
  • mochawesome-report-generator ^6.0.1 β†’ [Updates: 6.3.2]
  • typescript ^6.0.3 β†’ [Updates: 6.0.3, ^7.0.0]
  • typescript-eslint ^8.15.0 β†’ [Updates: 8.62.1, ^8.70.0]
  • diff ^9.0.0
  • serialize-javascript ^7.0.7 β†’ [Updates: ^7.0.7]
  • uuid ^11.1.1 β†’ [Updates: ^14.0.0]
nuget (6)
src/DfE.ExternalApplications.Application/DfE.ExternalApplications.Application.csproj (4)
  • Microsoft.Extensions.DependencyInjection.Abstractions 9.0.0 β†’ [Updates: 9.0.20, 10.0.12]
  • Microsoft.AspNetCore.Mvc.Abstractions 2.3.0 β†’ [Updates: 2.3.13]
  • Microsoft.AspNetCore.Http.Features 2.3.0 β†’ [Updates: 2.3.13, 3.1.32]
  • GovUK.Dfe.ExternalApplications.Api.Client 0.1.51 β†’ [Updates: 0.1.53]
src/DfE.ExternalApplications.Domain/DfE.ExternalApplications.Domain.csproj (1)
  • GovUK.Dfe.CoreLibs.Contracts 1.0.73 β†’ [Updates: 1.0.103]
src/DfE.ExternalApplications.Infrastructure/DfE.ExternalApplications.Infrastructure.csproj (5)
  • Microsoft.AspNetCore.Http.Extensions 2.3.0 β†’ [Updates: 2.3.13]
  • GovUK.Dfe.CoreLibs.Messaging.MassTransit 0.1.3
  • GovUK.Dfe.CoreLibs.Messaging.Contracts 0.1.5
  • Microsoft.Extensions.Options 10.0.0 β†’ [Updates: 10.0.12]
  • GovUK.Dfe.CoreLibs.Caching 1.0.12 β†’ [Updates: 1.0.13]
src/DfE.ExternalApplications.Web/DfE.ExternalApplications.Web.csproj (8)
  • Newtonsoft.Json 13.0.3 β†’ [Updates: 13.0.4]
  • Microsoft.VisualStudio.Azure.Containers.Tools.Targets 1.23.0
  • Microsoft.AspNetCore.DataProtection.StackExchangeRedis 10.0.11 β†’ [Updates: 10.0.12]
  • Microsoft.ApplicationInsights.AspNetCore 2.22.0 β†’ [Updates: 3.1.2]
  • Markdig 0.42.0 β†’ [Updates: 0.45.0, 1.3.2]
  • HtmlSanitizer 9.0.892 β†’ [Updates: 9.0.967, 9.2.1039]
  • GovUk.Frontend.AspNetCore 3.2.2 β†’ [Updates: 3.2.3, 3.5.1, 4.4.0]
  • GovUK.Dfe.CoreLibs.Security 1.1.27-prerelease-4 β†’ [Updates: 1.1.30]
src/Tests/DfE.ExternalApplications.Infrastructure.UnitTests/DfE.ExternalApplications.Infrastructure.UnitTests.csproj (6)
  • xunit.runner.visualstudio 2.5.3 β†’ [Updates: 2.5.8, 2.8.2, 4.0.0]
  • xunit 2.5.3 β†’ [Updates: 2.9.3]
  • NSubstitute 5.3.0 β†’ [Updates: 6.2.0]
  • coverlet.collector 6.0.0 β†’ [Updates: 6.0.4, 10.0.1]
  • AutoFixture.Xunit2 4.18.1
  • AutoFixture.AutoNSubstitute 4.18.1
src/Tests/Dfe.ExternalApplications.Web.UnitTests/Dfe.ExternalApplications.Web.UnitTests.csproj (6)
  • xunit.runner.visualstudio 2.5.3 β†’ [Updates: 2.5.8, 2.8.2, 4.0.0]
  • xunit 2.5.3 β†’ [Updates: 2.9.3]
  • Microsoft.NET.Test.Sdk 17.8.0 β†’ [Updates: 17.14.1, 18.10.0]
  • coverlet.collector 6.0.0 β†’ [Updates: 6.0.4, 10.0.1]
  • AutoFixture.Xunit2 4.18.1
  • AutoFixture.AutoNSubstitute 4.18.1
renovate-config (1)
renovate.json
terraform (9)
terraform-python-lsrp/container-apps-hosting.tf (1)
  • github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v2.6.3 β†’ [Updates: v2.6.6, v2.10.0]
terraform-python-lsrp/key-vault-tfvars-secrets.tf (1)
  • github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.2 β†’ [Updates: v0.5.4]
terraform-python-lsrp/providers.tf
terraform-python-lsrp/versions.tf (3)
  • azapi ~> 1.13 β†’ [Updates: ~> 2.0]
  • azurerm ~> 4.0 β†’ [Updates: ~> 4.0, ~> 5.0]
  • hashicorp/terraform ~> 1.14
terraform/container-apps-hosting.tf (1)
  • github.com/DFE-Digital/terraform-azurerm-container-apps-hosting v2.8.1 β†’ [Updates: v2.8.2, v2.10.0]
terraform/key-vault-tfvars-secrets.tf (1)
  • github.com/DFE-Digital/terraform-azurerm-key-vault-tfvars v0.5.3 β†’ [Updates: v0.5.4]
terraform/providers.tf
terraform/statuscake-tls-monitor.tf (1)
  • github.com/dfe-digital/terraform-statuscake-tls-monitor v0.1.5
terraform/versions.tf (4)
  • azapi ~> 1.13 β†’ [Updates: ~> 2.0]
  • azurerm ~> 4.0 β†’ [Updates: ~> 4.0, ~> 5.0]
  • statuscake ~> 2.1
  • hashicorp/terraform ~> 1.9
terraform-version (2)
terraform-python-lsrp/.terraform-version (1)
  • hashicorp/terraform 1.14.3 β†’ [Updates: 1.14.9, 1.16.2]
terraform/.terraform-version (1)
  • hashicorp/terraform 1.10.5 β†’ [Updates: 1.16.2]
  • Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up β€” it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

This is a Renovate-generated dashboard rather than a scoped change. Start with .github/workflows/docker.yml and the listed Dockerfile and workflow entries, then review the linked Renovate documentation; no single completion criterion is stated, so a maintainer would need to select one dependency update.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp, cypress, docker, eslint, github-actions, terraform, typescript
Domain
build-system, ci-cd, devops, tooling
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
10/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.