Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Replace dependency faker with @faker-js/faker
• Update dependency @types/react-helmet to v6.1.11
• Update dependency @types/sinon to v10.0.20
• Update dependency WireMock.Net to v1.5.53
• Update dependency coverlet.collector to v6.0.2
• Update dependency cypress-plugin-api to v2.11.1
• Update dependency date-fns-tz to v2.0.1
• Update dependency istanbul-lib-coverage to v3.2.2
• Update dependency react-router-dom to v5.3.4
• Update dependency serve to v14.2.3
• Update dependency uuid to v9.0.1
• Update react monorepo (@types/react, @types/react-dom)
• Update Terraform azapi to v1.13.1
• Update Terraform azuread to v2.48.0
• Update Terraform azurerm to v3.102.0
• Update Terraform random to v3.6.1
• Update Terraform restapi to v1.19.1
• Update actions/checkout action to v3.6.0
• Update dependency @cypress/code-coverage to v3.12.39
• Update dependency @testing-library/jest-dom to v5.17.0
• Update dependency FluentAssertions to v6.12.0
• Update dependency Microsoft.Azure.WebJobs.Extensions.DurableTask to v2.13.2
• Update dependency Microsoft.NET.Test.Sdk to v17.9.0
• Update dependency cypress to v12.17.4
• Update dependency cypress-hmr-restarter to v2.1.1
• Update dependency cypress-real-events to v1.12.0
• Update dependency cypress-terminal-report to v5.3.12
• Update dependency date-fns to v2.30.0
• Update dependency govuk-frontend to v4.8.0
• Update dependency msw to ^0.49.0
• Update dependency qs to v6.12.1 (qs, @types/qs)
• Update dependency react-hook-form to v7.51.4
• Update dependency react-rnd to v10.4.10
• Update dependency sass to ~1.77.0
• Update dependency sinon to v15.2.0
• Update dependency typescript to v4.9.5
• Update dependency xunit-viewer to v10.6.1
• Update github/codeql-action action to v2.25.4
• Update xunit-dotnet monorepo to v2.8.0 (xunit, xunit.runner.visualstudio)
• Update actions/checkout action to v4
• Update dependency @azure/msal-browser to v3
• Update dependency @azure/msal-react to v2
• Update dependency @microsoft/applicationinsights-react-js to v17
• Update dependency @microsoft/applicationinsights-web to v3
• Update dependency @types/jest to v29
• Update dependency @types/node to v20
• Update dependency @types/uuid to v9
• Update dependency Ardalis.SmartEnum to v8
• Update dependency Aspose.Email to v24
• Update dependency Aspose.Imaging to v24
• Update dependency Aspose.Slides.NET to v24
• Update dependency Microsoft.Azure.Core.NewtonsoftJson to v2
• Update dependency cypress to v13
• Update dependency cypress-terminal-report to v6
• Update dependency cypress-wait-until to v3
• Update dependency date-fns to v3
• Update dependency date-fns-tz to v3
• Update dependency del to v7
• Update dependency faker to v6 (faker, @types/faker)
• Update dependency fast-csv to v5
• Update dependency govuk-frontend to v5
• Update dependency jest-junit to v16
• Update dependency lint-staged to v15
• Update dependency msw to v2
• Update dependency prettier to v3
• Update dependency react-router-dom to v6
• Update dependency rimraf to v5
• Update dependency sinon to v17 (sinon, @types/sinon)
• Update dependency typescript to v5
• Update dependency web-vitals to v3
• Update dotnet monorepo to v8 (major) (Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.Abstractions, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.DependencyModel, Microsoft.Extensions.Http, Microsoft.Extensions.Http.Polly, Microsoft.Extensions.Logging.Abstractions, Microsoft.Extensions.Logging.Console, Microsoft.Extensions.Options)
• Update dotnet-azure-ad-identitymodel-extensions monorepo to v7 (major) (Microsoft.IdentityModel.Protocols, Microsoft.IdentityModel.Protocols.OpenIdConnect)
• Update github/codeql-action action to v3
• Update react monorepo to v18 (major) (@types/react, @types/react-dom, react, react-dom)
• Update testing-library monorepo (major) (@testing-library/cypress, @testing-library/jest-dom, @testing-library/react, @testing-library/react-hooks, @testing-library/user-event)
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update azure azure-sdk-for-net monorepo (Azure.Identity, Azure.ResourceManager, Azure.ResourceManager.Compute, Azure.ResourceManager.OperationalInsights)
• Update dependency @azure/msal-browser to v2.38.4
• Update dependency @azure/msal-react to v1.5.13
• Update dependency @microsoft/applicationinsights-react-js to v3.4.3
• Update dependency @microsoft/applicationinsights-web to v2.8.18
• Update dependency @microsoft/microsoft-graph-client to v3.0.7
• Update dependency @types/fs-extra to v11.0.4
• Update dependency @types/jsonwebtoken to v9.0.6
• Update dependency @types/lodash.debounce to v4.0.9
• Update dependency @types/node to v12.20.55
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency pdfjs-dist to v4 [SECURITY]

Detected dependencies

github-actions

.github/workflows/codeql.yml

• actions/checkout v3
• github/codeql-action v2
• github/codeql-action v2
• github/codeql-action v2

.github/workflows/security-scan.yml

• actions/checkout v3.5.3@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
• github/codeql-action v2.21.4@a09933a12a80f87b87005513f0abb1494c27a716
• actions/checkout v3.5.3@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
• bridgecrewio/checkov-action v12
• github/codeql-action v2

.github/workflows/security.yml

npm

polaris-e2e/package.json

• @testing-library/cypress ^9.0.0
• @types/fs-extra ^11.0.2
• @types/jsonwebtoken ^9.0.3
• cypress-plugin-api ^2.11.0
• cypress-wait-until ^1.7.2
• @cypress/grep ^4.0.1
• jsonwebtoken ^9.0.2
• cypress ^12.17.3
• cypress-terminal-report ^5.2.0
• cypress-timestamps ^1.2.3
• typescript ^4.9.5

polaris-ui/package.json

• @azure/msal-browser ^2.38.0
• @azure/msal-react ^1.5.3
• @cypress/code-coverage ^3.9.11
• @cypress/instrument-cra ^1.4.0
• @microsoft/applicationinsights-react-js ^3.4.2
• @microsoft/applicationinsights-web ^2.8.14
• @microsoft/microsoft-graph-client ^3.0.0
• @testing-library/cypress ^9.0.0
• @testing-library/jest-dom ^5.11.4
• @testing-library/react ^11.1.0
• @testing-library/react-hooks ^7.0.2
• @testing-library/user-event ^12.1.10
• @types/faker ^5.5.9
• @types/jest ^26.0.15
• @types/lodash.debounce ^4.0.6
• @types/node ^12.0.0
• @types/pdfjs-dist ^2.7.4
• @types/qs ^6.9.7
• @types/react ^17.0.66
• @types/react-dom ^17.0.0
• @types/react-router-dom ^5.3.2
• @types/uuid ^8.3.4
• cypress ^12.5.1
• cypress-hmr-restarter ^2.0.3
• cypress-real-events ^1.9.1
• date-fns ^2.25.0
• date-fns-tz ^2.0.0
• del ^6.0.0
• env-cmd ^10.1.0
• faker 5.5.3
• fast-csv ^4.3.6
• govuk_frontend_toolkit ^9.0.1
• govuk-frontend ^4.0.1
• govuk-react-jsx ^7.1.0
• istanbul-lib-coverage ^3.2.0
• jest-junit ^13.1.0
• lint-staged ^13.3.0
• lodash ^4.17.21
• lodash.debounce ^4.0.8
• msw ^0.35.0
• nyc ^15.1.0
• pdfjs-dist 2.11.338
• prettier ^2.8.8
• qs ^6.10.1
• react ^17.0.2
• react-dom ^17.0.2
• react-helmet ^6.1.0
• react-hook-form ^7.48.2
• react-rnd ^10.3.7
• react-router-dom ^5.3.0
• react-scripts 5.0.1
• rimraf ^3.0.2
• sass ~1.68.0
• serve ^14.2.0
• start-server-and-test ^2.0.3
• typescript ^4.6.3
• use-reducer-async ^2.1.1
• uuid ^9.0.0
• web-vitals ^1.0.1
• xunit-viewer ^10.3.0
• @types/react-helmet ^6.1.8
• @types/sinon ^10.0.13
• cypress-axe ^1.5.0
• cypress-wait-until ^3.0.1
• jest-fetch-mock ^3.0.3
• sinon ^15.0.3

nuget

polaris-analytics/app/polaris-analytics.csproj

• Azure.ResourceManager.OperationalInsights 1.2.0-beta.1
• Azure.ResourceManager.Compute 1.2.0
• Azure.ResourceManager 1.7.0
• Azure.Identity 1.11.0

polaris-ddei-mock/polaris-ddei-mock.csproj

• WireMock.Net 1.5.52
• Newtonsoft.Json 13.0.3
• Microsoft.Extensions.Logging.Console 6.0.0
• AutoFixture 4.18.1

polaris-gateway.tests/polaris-gateway.tests.csproj

• AutoFixture 4.18.1
• FluentAssertions 6.12.0
• Moq 4.20.70
• coverlet.collector 6.0.2
• xunit.runner.visualstudio 2.8.0
• xunit 2.8.0
• Newtonsoft.Json 13.0.3
• Microsoft.NET.Test.Sdk 17.9.0
• coverlet.msbuild 6.0.2
• AutoFixture.Idioms 4.18.1

polaris-gateway/polaris-gateway.csproj

• Newtonsoft.Json 13.0.3
• Microsoft.IdentityModel.Protocols.OpenIdConnect 6.35.0
• Microsoft.IdentityModel.Protocols 6.35.0
• Microsoft.Identity.Client 4.60.3
• Microsoft.Azure.Functions.Extensions 1.1.0
• Microsoft.NET.Sdk.Functions 4.3.0

polaris-integration.tests/polaris-integration.tests.csproj

• coverlet.collector 6.0.0
• xunit.runner.visualstudio 2.5.0
• xunit 2.5.0
• Microsoft.NET.Test.Sdk 17.5.0
• Microsoft.IdentityModel.Clients.ActiveDirectory 5.3.0
• Microsoft.Identity.Client 4.60.3
• FluentAssertions 6.11.0

polaris-pipeline/Common.tests/Common.tests.csproj

• Microsoft.NET.Test.Sdk 17.9.0
• xunit.runner.visualstudio 2.8.0
• xunit 2.8.0
• Newtonsoft.Json 13.0.3
• Moq 4.20.70
• Microsoft.AspNetCore.Http.Abstractions 2.2.0
• FluentAssertions 6.12.0
• coverlet.msbuild 6.0.2
• coverlet.collector 6.0.2
• AutoFixture.Idioms 4.18.1
• AutoFixture.AutoMoq 4.18.1
• AutoFixture 4.18.1
• Ardalis.SmartEnum 2.1.0

polaris-pipeline/Common/Common.csproj

• WindowsAzure.Storage 9.3.3
• Newtonsoft.Json 13.0.3
• Microsoft.Extensions.Logging.Abstractions 6.0.4
• Microsoft.Extensions.Http 6.0.0
• Microsoft.Extensions.Configuration.Abstractions 6.0.0
• Microsoft.Extensions.Azure 1.7.3
• Microsoft.Azure.WebJobs.Extensions.Http 3.2.0
• Microsoft.Azure.Functions.Extensions 1.1.0
• Microsoft.Azure.Core.NewtonsoftJson 1.0.0
• Microsoft.Azure.CognitiveServices.Vision.ComputerVision 7.0.1
• Microsoft.AspNetCore.Mvc.Abstractions 2.2.0
• Microsoft.ApplicationInsights 2.22.0
• Mapster 7.4.0
• FluentValidation 11.9.1
• Azure.Storage.Common 12.18.1
• Azure.Storage.Blobs 12.19.1
• Ardalis.SmartEnum 2.1.0

polaris-pipeline/DdeiClient.tests/DdeiClient.tests.csproj

• Microsoft.NET.Test.Sdk 17.9.0
• xunit.runner.visualstudio 2.8.0
• xunit 2.8.0
• Newtonsoft.Json 13.0.3
• Moq 4.20.70
• Microsoft.AspNetCore.Http.Abstractions 2.2.0
• FluentAssertions 6.12.0
• coverlet.msbuild 6.0.2
• coverlet.collector 6.0.2
• AutoFixture.Idioms 4.18.1
• AutoFixture.AutoMoq 4.18.1
• AutoFixture 4.18.1
• Ardalis.SmartEnum 2.1.0

polaris-pipeline/DdeiClient/DdeiClient.csproj

• Polly.Contrib.WaitAndRetry 1.1.1
• Newtonsoft.Json 13.0.3
• Microsoft.Extensions.Options 6.0.0
• Microsoft.Extensions.Http.Polly 6.0.29

polaris-pipeline/coordinator.tests/coordinator.tests.csproj

• Microsoft.NET.Test.Sdk 17.9.0
• AutoFixture 4.18.1
• xunit.runner.visualstudio 2.8.0
• FluentAssertions 6.12.0
• xunit 2.8.0
• Polly.Testing 8.3.1
• Newtonsoft.Json 13.0.3
• Moq 4.20.70
• coverlet.msbuild 6.0.2
• coverlet.collector 6.0.2
• Ardalis.SmartEnum 2.1.0

polaris-pipeline/coordinator/coordinator.csproj

• System.Threading.AccessControl 8.0.0
• System.Runtime.InteropServices.WindowsRuntime 4.3.0
• RazorLight 2.3.1
• Polly.Core 8.3.1
• Newtonsoft.Json 13.0.3
• Microsoft.NET.Sdk.Functions 4.3.0
• Microsoft.IdentityModel.Protocols.OpenIdConnect 6.35.0
• Microsoft.IdentityModel.Protocols 6.35.0
• Microsoft.Extensions.DependencyModel 6.0.0
• Microsoft.Extensions.DependencyInjection 6.0.1
• Microsoft.Extensions.Azure 1.7.3
• Microsoft.Azure.WebJobs.Extensions.Http 3.2.0
• Microsoft.Azure.WebJobs.Extensions.DurableTask 2.12.0
• Microsoft.Azure.Functions.Extensions 1.1.0
• Microsoft.Azure.Core.NewtonsoftJson 1.0.0
• Microsoft.ApplicationInsights.WorkerService 2.22.0
• FluentValidation 11.9.1
• Mapster 7.4.0
• Azure.Storage.Queues 12.17.1
• Azure.Storage.Files.Shares 12.17.1
• Azure.Storage.Blobs 12.19.1
• AutoFixture 4.18.1

polaris-pipeline/pdf-generator.test-harness/pdf-generator.test-harness.csproj

• Microsoft.Extensions.Hosting 8.0.0
• Microsoft.ApplicationInsights 2.22.0

polaris-pipeline/pdf-generator.tests/pdf-generator.tests.csproj

• Newtonsoft.Json 13.0.3
• AutoFixture 4.18.1
• Moq 4.20.70
• FluentAssertions 6.12.0
• Microsoft.NET.Test.Sdk 17.9.0
• xunit.runner.visualstudio 2.8.0
• xunit 2.8.0
• FluentValidation 11.9.1
• coverlet.msbuild 6.0.2
• coverlet.collector 6.0.2
• Ardalis.SmartEnum 7.0.0

polaris-pipeline/pdf-generator/pdf-generator.csproj

• System.Text.RegularExpressions 4.3.1
• Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.2.1
• Newtonsoft.Json 13.0.3
• Microsoft.Azure.Functions.Worker 1.22.0
• Microsoft.Azure.Functions.Worker.Sdk 1.17.2
• Microsoft.Azure.Functions.Worker.Extensions.Http 3.1.0
• Microsoft.Extensions.Logging.Abstractions 8.0.1
• Microsoft.Extensions.Http 8.0.0
• Microsoft.Extensions.Azure 1.7.3
• Microsoft.Azure.Functions.Worker.Extensions.Abstractions 1.3.0
• Microsoft.Azure.Functions.Worker.ApplicationInsights 1.2.0
• Aspose.Email 23.12.0
• Aspose.Diagram 24.4.0
• Aspose.Imaging 23.12.0
• Aspose.Slides.NET 23.12.0
• Aspose.Cells 24.4.0
• Azure.Storage.Blobs 12.19.1
• MediaTypeMap.Core 2.3.3
• Microsoft.Azure.Functions.Extensions 1.1.0
• Microsoft.Azure.Core.NewtonsoftJson 2.0.0
• Microsoft.Azure.CognitiveServices.Vision.ComputerVision 7.0.1
• Microsoft.ApplicationInsights.WorkerService 2.22.0
• FluentValidation 11.9.1
• Azure.Core 1.39.0
• Aspose.Words 24.5.0
• Aspose.PDF.Drawing 24.4.0
• Ardalis.SmartEnum 7.0.0

polaris-pipeline/pdf-redactor.integration.tests/pdf-redactor.integration.tests.csproj

• Codeuctivity.ImageSharpCompare 4.0.258

polaris-pipeline/pdf-redactor.tests/pdf-redactor.tests.csproj

• Newtonsoft.Json 13.0.3
• AutoFixture 4.18.1
• Moq 4.20.70
• FluentAssertions 6.12.0
• Microsoft.NET.Test.Sdk 17.9.0
• xunit.runner.visualstudio 2.8.0
• xunit 2.8.0
• FluentValidation 11.9.1
• coverlet.msbuild 6.0.2
• coverlet.collector 6.0.2
• Ardalis.SmartEnum 7.0.0

polaris-pipeline/pdf-redactor/pdf-redactor.csproj

• System.Text.RegularExpressions 4.3.1
• Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.2.1
• Newtonsoft.Json 13.0.3
• Microsoft.Azure.Functions.Worker 1.22.0
• Microsoft.Azure.Functions.Worker.Sdk 1.17.2
• Microsoft.Azure.Functions.Worker.Extensions.Http 3.1.0
• Microsoft.Extensions.Logging.Abstractions 8.0.1
• Microsoft.Extensions.Http 8.0.0
• Microsoft.Extensions.Azure 1.7.3
• Microsoft.Azure.Functions.Worker.Extensions.Abstractions 1.3.0
• Microsoft.Azure.Functions.Worker.ApplicationInsights 1.2.0
• Aspose.Email 23.12.0
• Aspose.Diagram 24.4.0
• Aspose.Imaging 23.12.0
• Aspose.Slides.NET 23.12.0
• Aspose.Cells 24.4.0
• Azure.Storage.Blobs 12.19.1
• MediaTypeMap.Core 2.3.3
• Microsoft.Azure.Functions.Extensions 1.1.0
• Microsoft.Azure.Core.NewtonsoftJson 2.0.0
• Microsoft.Azure.CognitiveServices.Vision.ComputerVision 7.0.1
• Microsoft.ApplicationInsights.WorkerService 2.22.0
• FluentValidation 11.9.1
• Azure.Core 1.39.0
• Aspose.Words 24.5.0
• Aspose.PDF.Drawing 24.4.0
• Ardalis.SmartEnum 7.0.0

polaris-pipeline/text-extractor.test-harness/text-extractor.test-harness.csproj

• Microsoft.Extensions.Configuration 6.0.1

polaris-pipeline/text-extractor.tests/text-extractor.tests.csproj

• AutoFixture 4.18.1
• FluentAssertions 6.12.0
• Moq 4.20.70
• xunit 2.8.0
• xunit.runner.visualstudio 2.8.0
• Polly.Testing 8.3.1
• Polly.Extensions 8.3.1
• Newtonsoft.Json 13.0.3
• Microsoft.NET.Test.Sdk 17.9.0
• coverlet.msbuild 6.0.2
• coverlet.collector 6.0.2
• AutoFixture.AutoMoq 4.18.1
• Ardalis.SmartEnum 2.1.0

polaris-pipeline/text-extractor/text-extractor.csproj

• FuzzySharp 2.0.2
• Newtonsoft.Json 13.0.3
• Microsoft.NET.Sdk.Functions 4.3.0
• Microsoft.Azure.WebJobs.Extensions.EventGrid 3.4.1
• Azure.Search.Documents 11.5.1
• Azure.Messaging.EventGrid 4.24.0

terraform

polaris-terraform/networking-terraform/main.tf

• azuread 2.45.0
• azurerm 3.87.0
• hashicorp/terraform >= 1.5.3

polaris-terraform/pipeline-events-terraform/main.tf

• azuread 2.45.0
• azurerm 3.87.0
• hashicorp/terraform >= 1.5.3

polaris-terraform/pipeline-terraform/functions-coordinator.tf

polaris-terraform/pipeline-terraform/functions-pdf-generator.tf

polaris-terraform/pipeline-terraform/functions-pdf-redactor.tf

polaris-terraform/pipeline-terraform/functions-text-extractor.tf

polaris-terraform/pipeline-terraform/main.tf

• azapi 1.10.0
• azuread 2.45.0
• azurerm 3.87.0
• random 3.5.1
• restapi 1.18.2
• hashicorp/terraform >= 1.5.3

polaris-terraform/pipeline-terraform/modules/terraform-azurerm-azure_ad_application_preauthorized/provider.tf

• azuread 2.45.0
• azurerm 3.87.0
• hashicorp/terraform >= 1.5.3

polaris-terraform/pipeline-terraform/modules/terraform-azurerm-azuread-app-registration/provider.tf

• azuread 2.45.0
• azurerm 3.87.0
• random 3.5.1
• hashicorp/terraform >= 1.5.3

polaris-terraform/pipeline-terraform/modules/terraform-azurerm-azuread_service_principal/provider.tf

• azuread 2.45.0
• azurerm 3.87.0
• hashicorp/terraform >= 1.5.3

polaris-terraform/pipeline-terraform/search-index.tf

polaris-terraform/ui-events-terraform/main.tf

• azuread 2.45.0
• azurerm 3.87.0
• restapi 1.18.2
• hashicorp/terraform >= 1.5.3

polaris-terraform/ui-terraform/gateway-function.tf

polaris-terraform/ui-terraform/main.tf

• azapi 1.5.0
• azuread 2.45.0
• azurerm 3.87.0
• random 3.5.1
• hashicorp/terraform >= 1.5.3

polaris-terraform/ui-terraform/modules/terraform-azurerm-azuread-app-registration/provider.tf

• azuread 2.45.0
• azurerm 3.87.0
• random 3.5.1
• hashicorp/terraform >= 1.5.3

polaris-terraform/ui-terraform/modules/terraform-azurerm-azuread_service_principal/provider.tf

• azuread 2.45.0
• azurerm 3.87.0
• hashicorp/terraform >= 1.5.3

polaris-terraform/ui-terraform/proxy.tf

polaris-terraform/ui-terraform/spa.tf

---

• Check this box to trigger a request for Renovate to run again on this repository