Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: File contents are invalid JSONC but parse using JSON5. Support for this will be removed in a future release so please change to a support .json5 file name or ensure correct JSON syntax.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update actions/setup-dotnet action to v4.3.1
• Update dependency DotNet.Glob to 2.1.4
• Update dependency FluentAssertions to 6.12.2
• Update dotnet monorepo (System.Text.Json, dotnet-sdk)
• Update actions/checkout action to v4.3.0
• Update codecov/codecov-action action to v5.5.0
• Update dependency Microsoft.NET.Test.Sdk to 17.14.1
• Update dependency Microsoft.VisualStudio.Threading.Analyzers to 17.14.15
• Update dependency Moq to 4.20.72
• Update dependency morelinq to 4.4.0
• Update dependency Polly to 8.6.2
• Update dependency python to 3.13
• Update dependency Serilog to 4.3.0
• Update dependency Spectre.Console.Cli.Extensions.DependencyInjection to 0.11.0
• Update dependency System.Memory to 4.6.3
• Update dependency Tomlyn.Signed to 0.19.0
• Update dependency yamldotnet to 15.3.0
• Update github/codeql-action action to v3.29.10
• Update mstest monorepo to 3.10.2 (MSTest.Analyzers, MSTest.TestAdapter, MSTest.TestFramework)
• Update nuget monorepo to 6.14.0 (NuGet.ProjectModel, NuGet.Versioning)
• Update shogo82148/actions-upload-release-asset action to v1.9.0
• Update spectre-console monorepo to 0.50.0 (Spectre.Console, Spectre.Console.Cli, Spectre.Console.Testing)
• Update stefanzweifel/git-auto-commit-action action to v5.2.0
• Update actions/checkout action to v5
• Update dependency DotNet.Glob to v3
• Update dependency FluentAssertions to v8
• Update dependency MinVer to v6
• Update dependency Newtonsoft.Json.Schema to v4
• Update dependency SemanticVersioning to v3
• Update dependency Serilog.Extensions.Logging to v9
• Update dependency Serilog.Sinks.Console to v6
• Update dependency Serilog.Sinks.File to v7
• Update dependency Serilog.Sinks.Map to v2
• Update dependency yamldotnet to v16
• Update dotnet monorepo (major) (Microsoft.Extensions.Caching.Memory, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, System.Formats.Asn1, System.Text.Json, System.Threading.Tasks.Dataflow, dotnet-sdk, mcr.microsoft.com/dotnet/runtime-deps, mcr.microsoft.com/dotnet/sdk)
• Update mcr.microsoft.com/vscode/devcontainers/dotnet Docker tag to v9
• Update stefanzweifel/git-auto-commit-action action to v6
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update release-drafter/release-drafter digest to b1476f6

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency FluentAssertions.Analyzers to 0.34.1
• Update dependency packageurl-dotnet to 1.3.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

devcontainer

.devcontainer/devcontainer.json

• mcr.microsoft.com/vscode/devcontainers/dotnet 8.0

dockerfile

Dockerfile

• mcr.microsoft.com/dotnet/sdk 6.0-cbl-mariner2.0@sha256:a153d63a5f0eb33d217e0740d57a97b001f762b14b340f647a0819c82a9552ff
• mcr.microsoft.com/dotnet/runtime-deps 6.0-cbl-mariner2.0@sha256:c3e48fb02e9b6956d0795a3bebd583198978447a8dece82fce1f652759f78b39

github-actions

.github/workflows/build.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.3.0@3951f0dfe7a07e2313ec93c75700083e2005cbab
• codecov/codecov-action v5.4.3@18283e04ce6e62d37312384ff67231eb8fd56d24

.github/workflows/codeql-analysis.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• github/codeql-action v3.28.18@ff0a06e83cb2de871e5a09832bc6a81e7276941f
• github/codeql-action v3.28.18@ff0a06e83cb2de871e5a09832bc6a81e7276941f
• github/codeql-action v3.28.18@ff0a06e83cb2de871e5a09832bc6a81e7276941f

.github/workflows/detector-version-bump-reminder.yml

• mshick/add-pr-comment v2@b8f338c590a895d50bcbfa6c5859251edc8952fc

.github/workflows/gen-docs.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.3.0@3951f0dfe7a07e2313ec93c75700083e2005cbab
• stefanzweifel/git-auto-commit-action v5.0.1@8621497c8c39c72f3e2a999a26b4ca1b5058a842

.github/workflows/ossf-scorecard.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cde
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.28.18@ff0a06e83cb2de871e5a09832bc6a81e7276941f

.github/workflows/release-drafter.yml

• release-drafter/release-drafter v6@3f0f87098bd6b5c5b9a36d49c41d998ea58f9348

.github/workflows/release.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.3.0@3951f0dfe7a07e2313ec93c75700083e2005cbab
• shogo82148/actions-upload-release-asset v1.7.8@8482bd769644976d847e96fb4b9354228885e7b4

.github/workflows/smoke-test.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.3.1@67a3573c9a986a3f9c594539f4ab511d57bb3ce9
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea

.github/workflows/snapshot-publish.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/setup-dotnet v4.3.0@3951f0dfe7a07e2313ec93c75700083e2005cbab
• actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• python 3.10

.github/workflows/snapshot-verify.yml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• actions/github-script v7@60a0d83039c74a4aee543508d2ffcb1c3799cdea
• actions/setup-dotnet v4.3.0@3951f0dfe7a07e2313ec93c75700083e2005cbab
• actions/setup-python v5@a26af69be951a213d495a4c3e4e4022e16d87065
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• python 3.10

nuget

Directory.Build.props

Directory.Packages.props

• System.Formats.Asn1 6.0.1
• Valleysoft.DockerfileModel 1.2.0
• Faker.net 2.0.163
• yamldotnet 15.1.6
• Tomlyn.Signed 0.17.0
• System.Threading.Tasks.Dataflow 8.0.1
• System.Text.Json 8.0.5
• System.Runtime.Loader 4.3.0
• System.Reactive 6.0.1
• System.Memory 4.5.5
• StyleCop.Analyzers 1.2.0-beta.556
• Spectre.Console.Testing 0.49.1
• Spectre.Console.Cli.Extensions.DependencyInjection 0.2.0
• Spectre.Console.Cli 0.49.1
• Spectre.Console 0.49.1
• Serilog.Sinks.Map 1.0.2
• Serilog.Sinks.File 5.0.0
• Serilog.Sinks.Console 5.0.1
• Serilog.Sinks.Async 2.1.0
• Serilog.Extensions.Logging 8.0.0
• Serilog 4.1.0
• SemanticVersioning 2.0.2
• Polly 8.4.0
• packageurl-dotnet 1.0.0
• NuGet.Versioning 6.10.0
• NuGet.ProjectModel 6.10.0
• Newtonsoft.Json.Schema 3.0.16
• Newtonsoft.Json 13.0.3
• Microsoft.NET.Test.Sdk 17.11.1
• MSTest.TestAdapter 3.6.1
• MSTest.Analyzers 3.6.1
• MSTest.TestFramework 3.6.1
• morelinq 4.2.0
• Moq 4.18.4
• MinVer 5.0.0
• DotNet.Glob 2.1.1
• Microsoft.VisualStudio.Threading.Analyzers 17.11.20
• Microsoft.SourceLink.GitHub 8.0.0
• Microsoft.Extensions.Logging 8.0.1
• Microsoft.Extensions.Http 8.0.1
• Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2
• Microsoft.Extensions.DependencyInjection 8.0.1
• Microsoft.Extensions.Caching.Memory 8.0.1
• FluentAssertions.Analyzers 0.32.0
• FluentAssertions 6.12.1
• Docker.DotNet 3.125.15
• CommandLineParser 2.9.1

global.json

• dotnet-sdk 8.0.411

src/Directory.Build.props

src/Microsoft.ComponentDetection.Common/Microsoft.ComponentDetection.Common.csproj

src/Microsoft.ComponentDetection.Contracts/Microsoft.ComponentDetection.Contracts.csproj

src/Microsoft.ComponentDetection.Detectors/Microsoft.ComponentDetection.Detectors.csproj

src/Microsoft.ComponentDetection.Orchestrator/Microsoft.ComponentDetection.Orchestrator.csproj

src/Microsoft.ComponentDetection/Microsoft.ComponentDetection.csproj

test/Directory.Build.props

test/Microsoft.ComponentDetection.Common.Tests/Microsoft.ComponentDetection.Common.Tests.csproj

test/Microsoft.ComponentDetection.Contracts.Tests/Microsoft.ComponentDetection.Contracts.Tests.csproj

test/Microsoft.ComponentDetection.Detectors.Tests/Microsoft.ComponentDetection.Detectors.Tests.csproj

test/Microsoft.ComponentDetection.Orchestrator.Tests/Microsoft.ComponentDetection.Orchestrator.Tests.csproj

test/Microsoft.ComponentDetection.TestsUtilities/Microsoft.ComponentDetection.TestsUtilities.csproj

test/Microsoft.ComponentDetection.VerificationTests/Microsoft.ComponentDetection.VerificationTests.csproj

---

• Check this box to trigger a request for Renovate to run again on this repository