Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: File contents are invalid JSON but parse using JSON5. Support for this will be removed in a future release so please change to a support .json5 file name or ensure correct JSON syntax.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update actions/setup-python digest to 4237552
• Update release-drafter/release-drafter digest to b1476f6
• Update dependency DotNet.Glob to 2.1.4
• Update dependency FluentAssertions to 6.12.2
• Update ossf/scorecard-action action to v2.4.1
• Update shogo82148/actions-upload-release-asset action to v1.7.9
• Update actions/setup-dotnet action to v4.3.1
• Update actions/upload-artifact action to v4.6.2
• Update danhellem/github-actions-issue-to-work-item action to v2.4
• Update dependency Microsoft.NET.Test.Sdk to 17.13.0
• Update dependency Microsoft.VisualStudio.Threading.Analyzers to 17.13.61
• Update dependency Moq to 4.20.72
• Update dependency Polly to 8.5.2
• Update dependency Serilog to 4.2.0
• Update dependency Spectre.Console.Cli.Extensions.DependencyInjection to 0.6.0
• Update dependency System.Memory to 4.6.2
• Update dependency Tomlyn.Signed to 0.19.0
• Update dependency morelinq to 4.4.0
• Update dependency python to 3.13
• Update dependency yamldotnet to 15.3.0
• Update github/codeql-action action to v3.28.12
• Update mstest monorepo to 3.8.3 (MSTest.Analyzers, MSTest.TestAdapter, MSTest.TestFramework)
• Update nuget monorepo to 6.13.2 (NuGet.ProjectModel, NuGet.Versioning)
• Update stefanzweifel/git-auto-commit-action action to v5.1.0
• Update codecov/codecov-action action to v5
• Update dependency DotNet.Glob to v3
• Update dependency FluentAssertions to v8
• Update dependency MinVer to v6
• Update dependency Newtonsoft.Json.Schema to v4
• Update dependency SemanticVersioning to v3
• Update dependency Serilog.Extensions.Logging to v9
• Update dependency Serilog.Sinks.Console to v6
• Update dependency Serilog.Sinks.File to v6
• Update dependency Serilog.Sinks.Map to v2
• Update dependency yamldotnet to v16
• Update dotnet monorepo (major) (Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, System.Formats.Asn1, System.Text.Json, System.Threading.Tasks.Dataflow, dotnet-sdk, mcr.microsoft.com/dotnet/runtime-deps, mcr.microsoft.com/dotnet/sdk)
• Update mcr.microsoft.com/vscode/devcontainers/dotnet Docker tag to v9
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update dependency packageurl-dotnet to 1.3.0

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dotnet monorepo (Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, System.Threading.Tasks.Dataflow, dotnet-sdk, mcr.microsoft.com/dotnet/runtime-deps, mcr.microsoft.com/dotnet/sdk)
• Update dependency FluentAssertions.Analyzers to 0.34.1

Detected dependencies

devcontainer

.devcontainer/devcontainer.json

• mcr.microsoft.com/vscode/devcontainers/dotnet 8.0

dockerfile

Dockerfile

• mcr.microsoft.com/dotnet/sdk 6.0-cbl-mariner2.0@sha256:0a55184c1bea8da25a6b9ff0333f5e72aca18a4e76c85e8bcec3ebcf789f1bed
• mcr.microsoft.com/dotnet/runtime-deps 6.0-cbl-mariner2.0@sha256:150acf1b3bcda669d82f069c92eb846937661c79314d1b53154a8787934b5911

github-actions

.github/workflows/build.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.1.0@3e891b0cb619bf60e2c25674b222b8940e2c1c25
• codecov/codecov-action v4.6.0@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238

.github/workflows/codeql-analysis.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action v3.27.0@662472033e021d55d94146f66f6058822b0b39fd
• github/codeql-action v3.27.0@662472033e021d55d94146f66f6058822b0b39fd
• github/codeql-action v3.27.0@662472033e021d55d94146f66f6058822b0b39fd

.github/workflows/detector-version-bump-reminder.yml

• mshick/add-pr-comment v2@b8f338c590a895d50bcbfa6c5859251edc8952fc

.github/workflows/gen-docs.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.1.0@3e891b0cb619bf60e2c25674b222b8940e2c1c25
• stefanzweifel/git-auto-commit-action v5.0.1@8621497c8c39c72f3e2a999a26b4ca1b5058a842

.github/workflows/ossf-scorecard.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.27.0@662472033e021d55d94146f66f6058822b0b39fd

.github/workflows/release-drafter.yml

• release-drafter/release-drafter v6@3f0f87098bd6b5c5b9a36d49c41d998ea58f9348

.github/workflows/release.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.1.0@3e891b0cb619bf60e2c25674b222b8940e2c1c25
• shogo82148/actions-upload-release-asset v1.7.8@8482bd769644976d847e96fb4b9354228885e7b4

.github/workflows/smoke-test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.1.0@3e891b0cb619bf60e2c25674b222b8940e2c1c25
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/snapshot-publish.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.1.0@3e891b0cb619bf60e2c25674b222b8940e2c1c25
• actions/setup-python v5@0b93645e9fea7318ecaed2b359559ac225c90a2b
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• python 3.10

.github/workflows/snapshot-verify.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea
• actions/setup-dotnet v4.1.0@3e891b0cb619bf60e2c25674b222b8940e2c1c25
• actions/setup-python v5@0b93645e9fea7318ecaed2b359559ac225c90a2b
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• python 3.10

.github/workflows/sync-issues.yml

• danhellem/github-actions-issue-to-work-item v2.3@e077ff031c704672afb932c8718370df12b90f08

nuget

Directory.Build.props

Directory.Packages.props

• System.Formats.Asn1 6.0.1
• Valleysoft.DockerfileModel 1.2.0
• Faker.net 2.0.163
• yamldotnet 15.1.6
• Tomlyn.Signed 0.17.0
• System.Threading.Tasks.Dataflow 8.0.0
• System.Text.Json 8.0.5
• System.Runtime.Loader 4.3.0
• System.Reactive 6.0.1
• System.Memory 4.5.5
• StyleCop.Analyzers 1.2.0-beta.556
• Spectre.Console.Testing 0.49.1
• Spectre.Console.Cli.Extensions.DependencyInjection 0.2.0
• Spectre.Console.Cli 0.49.1
• Spectre.Console 0.49.1
• Serilog.Sinks.Map 1.0.2
• Serilog.Sinks.File 5.0.0
• Serilog.Sinks.Console 5.0.1
• Serilog.Sinks.Async 2.1.0
• Serilog.Extensions.Logging 8.0.0
• Serilog 4.1.0
• SemanticVersioning 2.0.2
• Polly 8.4.0
• packageurl-dotnet 1.0.0
• NuGet.Versioning 6.10.0
• NuGet.ProjectModel 6.10.0
• Newtonsoft.Json.Schema 3.0.16
• Newtonsoft.Json 13.0.3
• Microsoft.NET.Test.Sdk 17.11.1
• MSTest.TestAdapter 3.6.1
• MSTest.Analyzers 3.6.1
• MSTest.TestFramework 3.6.1
• morelinq 4.2.0
• Moq 4.18.4
• MinVer 5.0.0
• DotNet.Glob 2.1.1
• Microsoft.VisualStudio.Threading.Analyzers 17.11.20
• Microsoft.SourceLink.GitHub 8.0.0
• Microsoft.Extensions.Logging 8.0.0
• Microsoft.Extensions.Http 8.0.0
• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2
• Microsoft.Extensions.DependencyInjection 8.0.0
• Microsoft.Extensions.Caching.Memory 8.0.1
• FluentAssertions.Analyzers 0.32.0
• FluentAssertions 6.12.1
• Docker.DotNet 3.125.15
• CommandLineParser 2.9.1

global.json

• dotnet-sdk 8.0.303

src/Directory.Build.props

src/Microsoft.ComponentDetection.Common/Microsoft.ComponentDetection.Common.csproj

src/Microsoft.ComponentDetection.Contracts/Microsoft.ComponentDetection.Contracts.csproj

src/Microsoft.ComponentDetection.Detectors/Microsoft.ComponentDetection.Detectors.csproj

src/Microsoft.ComponentDetection.Orchestrator/Microsoft.ComponentDetection.Orchestrator.csproj

src/Microsoft.ComponentDetection/Microsoft.ComponentDetection.csproj

test/Directory.Build.props

test/Microsoft.ComponentDetection.Common.Tests/Microsoft.ComponentDetection.Common.Tests.csproj

test/Microsoft.ComponentDetection.Contracts.Tests/Microsoft.ComponentDetection.Contracts.Tests.csproj

test/Microsoft.ComponentDetection.Detectors.Tests/Microsoft.ComponentDetection.Detectors.Tests.csproj

test/Microsoft.ComponentDetection.Orchestrator.Tests/Microsoft.ComponentDetection.Orchestrator.Tests.csproj

test/Microsoft.ComponentDetection.TestsUtilities/Microsoft.ComponentDetection.TestsUtilities.csproj

test/Microsoft.ComponentDetection.VerificationTests/Microsoft.ComponentDetection.VerificationTests.csproj

---

• Check this box to trigger a request for Renovate to run again on this repository