Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bitwarden/passwordless-server).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| nuget | [Microsoft.Azure.Cosmos.Table](http://go.microsoft.com/fwlink/?LinkId=848761) |  |
| nuget | [xunit](https://redirect.github.com/xunit/xunit) |  |

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] [deps]: Update FluentAssertions to v7.2.2
- [ ] [deps]: Update npm minor (`@tailwindcss/forms`, `@tailwindcss/typography`, `autoprefixer`, `es-module-shims`, `postcss`, `tailwindcss`, `vue`)
- [ ] 🔐 **Create all pending approval PRs at once** 🔐

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] [[deps]: Update dotnet monorepo to v11](../pull/831) (`mcr.microsoft.com/dotnet/aspnet`, `mcr.microsoft.com/dotnet/runtime-deps`, `mcr.microsoft.com/dotnet/sdk`)
- [ ] [deps]: Update mcr.microsoft.com/mssql/server Docker tag to v2025

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [[deps]: Pin dependencies](../pull/800) (`AWSSDK.SimpleEmailV2`, `AspNetCore.HealthChecks.SqlServer`, `AspNetCore.HealthChecks.Sqlite`, `AutoFixture`, `AutoFixture.AutoMoq`, `Azure.Extensions.AspNetCore.DataProtection.Keys`, `Azure.Identity`, `Bogus`, `Fido2`, `Fido2.AspNet`, `Fido2.Models`, `HtmlSanitizer`, `Humanizer.Core`, `MailKit`, `MartinCostello.Logging.XUnit`, `MessagePack`, `MessagePackAnalyzer`, `Microsoft.AspNetCore.Cryptography.KeyDerivation`, `Microsoft.AspNetCore.DataProtection.EntityFrameworkCore`, `Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore`, `Microsoft.AspNetCore.Identity`, `Microsoft.AspNetCore.Identity.EntityFrameworkCore`, `Microsoft.AspNetCore.Identity.UI`, `Microsoft.AspNetCore.Mvc.Testing`, `Microsoft.AspNetCore.OpenApi`, `Microsoft.Azure.Cosmos.Table`, `Microsoft.EntityFrameworkCore`, `Microsoft.EntityFrameworkCore.Design`, `Microsoft.EntityFrameworkCore.InMemory`, `Microsoft.EntityFrameworkCore.Relational`, `Microsoft.EntityFrameworkCore.SqlServer`, `Microsoft.EntityFrameworkCore.Sqlite`, `Microsoft.EntityFrameworkCore.Tools`, `Microsoft.Extensions.Configuration.Abstractions`, `Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore`, `Microsoft.Extensions.Logging.Abstractions`, `Microsoft.Extensions.TimeProvider.Testing`, `Microsoft.FeatureManagement.AspNetCore`, `Microsoft.NET.Test.Sdk`, `MinimalApis.Extensions`, `Moq`, `Passwordless.AspNetCore`, `Selenium.WebDriver`, `SendGrid`, `Serilog.AspNetCore`, `Serilog.Enrichers.Environment`, `Serilog.Expressions`, `Serilog.Sinks.Datadog.Logs`, `Serilog.Sinks.Seq`, `Stripe.net`, `Swashbuckle.AspNetCore`, `System.Configuration.ConfigurationManager`, `System.Net.NameResolution`, `Testcontainers.MsSql`, `UAParser`, `bunit`, `coverlet.collector`, `xunit`, `xunit.runner.visualstudio`)
- [ ] [[deps]: Update docker/dockerfile Docker tag to v1.27](../pull/862)
- [ ] [[deps]: Update gh minor](../pull/845) (`actions/checkout`, `actions/create-github-app-token`, `actions/setup-dotnet`, `actions/setup-node`, `codecov/codecov-action`, `docker/setup-buildx-action`, `dorny/test-reporter`)
- [ ] [[deps]: Update actions/checkout action to v7](../pull/863)
- [ ] [[deps]: Update actions/create-github-app-token action to v3](../pull/849)
- [ ] [[deps]: Update actions/setup-dotnet action to v6](../pull/864)
- [ ] [[deps]: Update actions/setup-node action to v7](../pull/865)
- [ ] [[deps]: Update actions/upload-artifact action to v7](../pull/847)
- [ ] [[deps]: Update codecov/codecov-action action to v7](../pull/866)
- [ ] [[deps]: Update docker/setup-buildx-action action to v4](../pull/848)
- [ ] [[deps]: Update dorny/test-reporter action to v3](../pull/850)
- [ ] [[deps]: Update postcss-cli to v12](../pull/867)
- [ ] [[deps]: Update tailwindcss to v4](../pull/808)
- [ ] [[deps]: Lock file maintenance](../pull/796)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

docker-compose (1)

self-host/docker-compose.yml (1)

- `mcr.microsoft.com/mssql/server 2022-latest` → [Updates: `2025-latest`]

dockerfile (2)

Api.dockerfile (2)

- `mcr.microsoft.com/dotnet/sdk 9.0-bookworm-slim`
- `mcr.microsoft.com/dotnet/runtime-deps 9.0` → [Updates: `11.0`]

self-host/Dockerfile (3)

- `docker/dockerfile 1.25` → [Updates: `1.27`]
- `mcr.microsoft.com/dotnet/sdk 9.0-alpine` → [Updates: `11.0-alpine`]
- `mcr.microsoft.com/dotnet/aspnet 9.0-alpine` → [Updates: `11.0-alpine`]

github-actions (3)

.github/workflows/docker.yml (7)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `docker/setup-buildx-action v3.8.0@6524bf65af31da8d45b59e8c27de4bd072b392f5` → [Updates: `v3.12.0`, `v4.3.0`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `docker/setup-buildx-action v3.8.0@6524bf65af31da8d45b59e8c27de4bd072b392f5` → [Updates: `v3.12.0`, `v4.3.0`]
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`

.github/workflows/main.yml (14)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-dotnet v5.0.0@d4c94342e560b34958eacfc5d055d21461ed1c5d` → [Updates: `v5.4.0`, `v6.0.0`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-dotnet v5.0.0@d4c94342e560b34958eacfc5d055d21461ed1c5d` → [Updates: `v5.4.0`, `v6.0.0`]
- `dorny/test-reporter v2.1.1@dc3a92680fcc15842eef52e8c4606ea7ce6bd3f3` → [Updates: `v2.7.0`, `v3.0.0`]
- `codecov/codecov-action v5.3.1@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3` → [Updates: `v5.5.5`, `v7.0.0`]
- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-dotnet v5.0.0@d4c94342e560b34958eacfc5d055d21461ed1c5d` → [Updates: `v5.4.0`, `v6.0.0`]
- `actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238` → [Updates: `v6.5.0`, `v7.0.0`]
- `actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f` → [Updates: `v7.0.1`]
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v2.1.1@a8d616148505b5069dccd32f177bb87d7f39123b` → [Updates: `v2.2.2`, `v3.2.0`]

.github/workflows/migrations.yml (3)

- `actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd` → [Updates: `v6.1.0`, `v7.0.1`]
- `actions/setup-dotnet v5.0.0@d4c94342e560b34958eacfc5d055d21461ed1c5d` → [Updates: `v5.4.0`, `v6.0.0`]
- `actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f` → [Updates: `v7.0.1`]

npm (1)

src/AdminConsole/package.json (11)

- `@passwordlessdev/passwordless-client 1.2.4`
- `apexcharts 4.7.0`
- `es-module-shims 2.6.2` → [Updates: `2.8.4`]
- `vue 3.5.21` → [Updates: `3.5.42`]
- `@tailwindcss/aspect-ratio 0.4.2`
- `@tailwindcss/forms 0.5.10` → [Updates: `0.5.11`]
- `@tailwindcss/typography 0.5.16` → [Updates: `0.5.20`]
- `autoprefixer 10.4.21` → [Updates: `10.5.5`]
- `postcss 8.5.23` → [Updates: `8.5.28`]
- `postcss-cli 11.0.1` → [Updates: `12.0.0`]
- `tailwindcss 3.4.17` → [Updates: `3.4.19`, `4.3.3`]

nuget (10)

global.json

src/AdminConsole/AdminConsole.csproj (16)

- `Stripe.net 41.*` → [Updates: `[52.4.2]`]
- `Passwordless.AspNetCore 2.1.0-beta.4` → [Updates: `[2.1.0-beta.4]`]
- `Microsoft.FeatureManagement.AspNetCore 4.3.0` → [Updates: `[4.7.0]`]
- `Microsoft.Extensions.Logging.Abstractions 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.AspNetCore.Identity.UI 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.Sqlite 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.Tools 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.SqlServer 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.AspNetCore.Identity.EntityFrameworkCore 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.AspNetCore.Identity 2.3.1` → [Updates: `[2.3.13]`]
- `Microsoft.AspNetCore.DataProtection.EntityFrameworkCore 9.0.9` → [Updates: `[10.0.12]`]
- `Humanizer.Core 3.0.1` → [Updates: `[3.0.10]`]
- `Azure.Identity 1.15.0` → [Updates: `[1.21.0]`]
- `Azure.Extensions.AspNetCore.DataProtection.Keys 1.6.1` → [Updates: `[1.6.4]`]

src/Api/Api.csproj (7)

- `UAParser 3.1.47` → [Updates: `[3.1.47]`]
- `MinimalApis.Extensions 0.11.0` → [Updates: `[0.11.0]`]
- `Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.Design 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore 9.0.9` → [Updates: `[10.0.12]`]
- `AspNetCore.HealthChecks.SqlServer 9.0.0` → [Updates: `[9.0.0]`]
- `AspNetCore.HealthChecks.Sqlite 9.0.0` → [Updates: `[9.0.0]`]

src/Common/Common.csproj (15)

- `SendGrid 9.29.3` → [Updates: `[9.29.3]`]
- `AWSSDK.SimpleEmailV2 4.0.5.1` → [Updates: `[4.0.104.2]`]
- `System.Configuration.ConfigurationManager 9.0.9` → [Updates: `[10.0.12]`]
- `Swashbuckle.AspNetCore 9.0.4` → [Updates: `[10.2.3]`]
- `Serilog.Sinks.Seq 9.0.0` → [Updates: `[9.1.0]`]
- `Serilog.Sinks.Datadog.Logs 0.5.6` → [Updates: `[0.6.1]`]
- `Serilog.Expressions 5.0.0` → [Updates: `[5.0.0]`]
- `Serilog.Enrichers.Environment 3.0.1` → [Updates: `[3.0.1]`]
- `Serilog.AspNetCore 9.0.0` → [Updates: `[10.0.0]`]
- `Microsoft.EntityFrameworkCore.Relational 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.AspNetCore.OpenApi 9.0.9` → [Updates: `[10.0.12]`]
- `MailKit 4.16.0` → [Updates: `[4.18.0]`]
- `HtmlSanitizer 9.0.892` → [Updates: `[9.2.1039]`]
- `Fido2.Models 4.0.0` → [Updates: `[4.0.1]`]
- `Fido2 4.0.0` → [Updates: `[4.0.1]`]

src/Service/Service.csproj (16)

- `System.Net.NameResolution 4.3.0` → [Updates: `[4.3.0]`]
- `Microsoft.Extensions.Logging.Abstractions 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.Extensions.Configuration.Abstractions 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.SqlServer 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.InMemory 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.Sqlite 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.Design 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.Azure.Cosmos.Table 1.0.8` → [Updates: `[1.0.8]`]
- `Microsoft.AspNetCore.Cryptography.KeyDerivation 9.0.9` → [Updates: `[10.0.12]`]
- `MessagePackAnalyzer 3.1.7` → [Updates: `[3.1.8]`]
- `MessagePack 3.1.7` → [Updates: `[3.1.8]`]
- `Humanizer.Core 3.0.1` → [Updates: `[3.0.10]`]
- `Fido2.Models 4.0.0` → [Updates: `[4.0.1]`]
- `Fido2.AspNet 4.0.0` → [Updates: `[4.0.1]`]
- `Fido2 4.0.0` → [Updates: `[4.0.1]`]

tests/AdminConsole.Tests/AdminConsole.Tests.csproj (10)

- `coverlet.collector 6.0.4` → [Updates: `[10.0.1]`]
- `xunit.runner.visualstudio 3.1.4` → [Updates: `[4.0.0]`]
- `xunit 2.9.3` → [Updates: `[2.9.3]`]
- `Moq 4.20.72` → [Updates: `[4.20.72]`]
- `Microsoft.NET.Test.Sdk 18.0.0` → [Updates: `[18.10.0]`]
- `Microsoft.Extensions.TimeProvider.Testing 9.8.0` → [Updates: `[10.10.0]`]
- `Microsoft.EntityFrameworkCore.Sqlite 9.0.9` → [Updates: `[10.0.12]`]
- `Microsoft.EntityFrameworkCore.InMemory 9.0.9` → [Updates: `[10.0.12]`]
- `bunit 2.5.3` → [Updates: `[2.11.3]`]
- `AutoFixture 4.18.1` → [Updates: `[4.18.1]`]

tests/Api.IntegrationTests/Api.IntegrationTests.csproj (11)

- `coverlet.collector 6.0.4` → [Updates: `[10.0.1]`]
- `xunit.runner.visualstudio 3.1.4` → [Updates: `[4.0.0]`]
- `xunit 2.9.3` → [Updates: `[2.9.3]`]
- `Testcontainers.MsSql 4.7.0` → [Updates: `[4.15.0]`]
- `Selenium.WebDriver 4.35.0` → [Updates: `[4.49.0]`]
- `Microsoft.NET.Test.Sdk 18.0.0` → [Updates: `[18.10.0]`]
- `Microsoft.Extensions.TimeProvider.Testing 9.8.0` → [Updates: `[10.10.0]`]
- `Microsoft.AspNetCore.Mvc.Testing 9.0.9` → [Updates: `[10.0.12]`]
- `MartinCostello.Logging.XUnit 0.6.0` → [Updates: `[0.7.1]`]
- `FluentAssertions [7.2.0]` → [Updates: `[7.2.2]`]
- `Bogus 35.6.3` → [Updates: `[35.6.5]`]

tests/Api.Tests/Api.Tests.csproj (7)

- `coverlet.collector 6.0.4` → [Updates: `[10.0.1]`]
- `xunit.runner.visualstudio 3.1.4` → [Updates: `[4.0.0]`]
- `xunit 2.9.3` → [Updates: `[2.9.3]`]
- `Moq 4.20.72` → [Updates: `[4.20.72]`]
- `FluentAssertions [7.2.0]` → [Updates: `[7.2.2]`]
- `Microsoft.NET.Test.Sdk 18.0.0` → [Updates: `[18.10.0]`]
- `AutoFixture 4.18.1` → [Updates: `[4.18.1]`]

tests/Common.Tests/Common.Tests.csproj (7)

- `coverlet.collector 6.0.4` → [Updates: `[10.0.1]`]
- `xunit.runner.visualstudio 3.1.4` → [Updates: `[4.0.0]`]
- `xunit 2.9.3` → [Updates: `[2.9.3]`]
- `Moq 4.20.72` → [Updates: `[4.20.72]`]
- `Microsoft.NET.Test.Sdk 18.0.0` → [Updates: `[18.10.0]`]
- `FluentAssertions [7.2.0]` → [Updates: `[7.2.2]`]
- `AutoFixture 4.18.1` → [Updates: `[4.18.1]`]

tests/Service.Tests/Service.Tests.csproj (8)

- `coverlet.collector 6.0.4` → [Updates: `[10.0.1]`]
- `xunit.runner.visualstudio 3.1.4` → [Updates: `[4.0.0]`]
- `xunit 2.9.3` → [Updates: `[2.9.3]`]
- `Moq 4.20.72` → [Updates: `[4.20.72]`]
- `Microsoft.NET.Test.Sdk 18.0.0` → [Updates: `[18.10.0]`]
- `Microsoft.Extensions.TimeProvider.Testing 9.8.0` → [Updates: `[10.10.0]`]
- `FluentAssertions [7.2.0]` → [Updates: `[7.2.2]`]
- `AutoFixture.AutoMoq 4.18.1` → [Updates: `[4.18.1]`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository