Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Found renovate config warnings

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@babel/plugin-proposal-class-properties
npm	govuk-elements-sass

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Renovate Update GitHub Actions (actions/cache, aws-actions/amazon-ecr-login, ministryofjustice/opg-github-actions)
• Renovate Update GitHub Actions (major) (actions/download-artifact, actions/upload-artifact, aws-actions/configure-aws-credentials)
• Renovate Update Minor Updates (actions/setup-go, actions/setup-node, actions/setup-python, aws/aws-sdk-php, babel-jest, boto3, click, github.com/aws/aws-lambda-go, github.com/lib/pq, go, jest-environment-jsdom, jolicode/slack-php-api, localstack/localstack, postgres, python, sass-embedded, symfony/maker-bundle, twig/extra-bundle, twig/intl-extra, webfactory/ssh-agent)
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Renovate Update codecov/codecov-action action to v5
• Renovate Update dependency @ministryofjustice/frontend to v9
• Renovate Update dependency doctrine/collections to v3
• Renovate Update dependency doctrine/doctrine-bundle to v3
• Renovate Update dependency doctrine/doctrine-fixtures-bundle to v4
• Renovate Update dependency doctrine/doctrine-migrations-bundle to v4
• Renovate Update dependency doctrine/orm to v3
• Renovate Update dependency gbprod/uuid-normalizer to v8
• Renovate Update dependency govuk-frontend to v6
• Renovate Update dependency gunicorn to v25
• Renovate Update dependency jquery to v4
• Renovate Update dependency lcobucci/jwt to v5
• Renovate Update dependency monolog/monolog to v3
• Renovate Update dependency pact-foundation/pact-php to v10
• Renovate Update dependency phpunit/phpcov to v12
• Renovate Update dependency phpunit/phpunit to v13
• Renovate Update dependency predis/predis to v3
• Renovate Update dependency ramsey/uuid-doctrine to v2
• Renovate Update dependency rector/rector to v2
• Renovate Update dependency setuptools to v82
• Renovate Update dependency snc/redis-bundle to v4
• Renovate Update dependency squizlabs/php_codesniffer to v4
• Renovate Update dependency standard to v17
• Renovate Update dependency symfony/monolog-bundle to v4
• Renovate Update dependency web-token/jwt-core to v3
• Renovate Update docker/setup-buildx-action action to v4
• Renovate Update github/codeql-action action to v4
• Renovate Update hashicorp/setup-terraform action to v4
• Renovate Update jest monorepo to v30 (major) (@jest/globals, jest)
• Renovate Update pactfoundation/pact-cli Docker tag to v1
• Renovate Update PHPStan packages to v2 (major) (jangregor/phpstan-prophecy, phpstan/phpstan, phpstan/phpstan-mockery, phpstan/phpstan-phpunit)
• Renovate Update postgres Docker tag to v18
• Renovate Update redis Docker tag to v8
• Renovate Update symfony packages to v8 (major) (symfony/asset, symfony/browser-kit, symfony/cache, symfony/config, symfony/console, symfony/debug-bundle, symfony/dependency-injection, symfony/doctrine-bridge, symfony/dotenv, symfony/error-handler, symfony/event-dispatcher, symfony/expression-language, symfony/filesystem, symfony/finder, symfony/form, symfony/framework-bundle, symfony/http-client, symfony/http-foundation, symfony/http-kernel, symfony/intl, symfony/lock, symfony/mime, symfony/options-resolver, symfony/password-hasher, symfony/phpunit-bridge, symfony/process, symfony/property-info, symfony/rate-limiter, symfony/routing, symfony/security-bundle, symfony/security-core, symfony/security-csrf, symfony/security-http, symfony/serializer, symfony/translation, symfony/twig-bundle, symfony/uid, symfony/validator, symfony/var-dumper, symfony/web-profiler-bundle, symfony/yaml)
• Renovate Update Terraform aws to v6
• Renovate Update php:8.4-fpm-alpine3.22 Docker digest to d4d819a
• Renovate Update dependency @babel/preset-env to v7.29.2
• Renovate Update dependency esbuild to v0.27.4
• Renovate Update Minor and Patch Updates Docker (composer, golang, pactfoundation/pact-cli, php, redis)
• Renovate Update Minor and Patch Updates PHP (liuggio/fastest, symfony/http-foundation, symfony/http-kernel)
• Renovate Update Terraform hashicorp/terraform to v1.14.7
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up packagist package ministryofjustice/mink-extension, Could not determine new digest for update (github-tags package actions/setup-python), Failed to look up github-tags package ministryofjustice/opg-terraform-aws-moj-ip-allow-list.

Files affected: api/app/composer.json, .github/workflows/_cycle-secrets.yml, .github/workflows/_ecr-scanning.yml, .github/workflows/_run-terraform.yml, .github/workflows/_slack-notification.yml, .github/workflows/_tests-miscellaneous.yml, .github/workflows/scheduled-disaster-recovery-test.yml, .github/workflows/scheduled-workspace-cleanup.yml, terraform/environment/region/variables.tf

---

Detected Dependencies

composer (3)

api/app/composer.json (68)

• php ^8.4
• aws/aws-sdk-php ^3.368.0 → [Updates: ^3.368.0]
• doctrine/annotations ^2.0.2
• doctrine/doctrine-bundle ^2.18.1 → [Updates: ^3.0.0]
• doctrine/doctrine-migrations-bundle ^3.7 → [Updates: ^4.0]
• doctrine/orm ^2.20.9 → [Updates: ^3.0.0]
• gbprod/uuid-normalizer ^7.0.2 → [Updates: ^8.0.0]
• jms/serializer-bundle ^5.5.2
• lcobucci/jwt ^4.3 → [Updates: ^5.0]
• league/csv ^9.27.1
• monolog/monolog ^1.27.1 → [Updates: ^3.0.0]
• predis/predis ^1.1.10 → [Updates: ^3.0.0]
• ramsey/uuid ^4.9.2
• ramsey/uuid-doctrine ^1.8.2 → [Updates: ^2.0.0]
• snc/redis-bundle ^3.6.0 → [Updates: ^4.0.0]
• stof/doctrine-extensions-bundle ^1.15.1
• symfony/cache ^6.4.30 → [Updates: ^8.0.0]
• symfony/config ^6.4.28 → [Updates: ^8.0.0]
• symfony/console ^6.4.30 → [Updates: ^8.0.0]
• symfony/dependency-injection ^6.4.30 → [Updates: ^8.0.0]
• symfony/doctrine-bridge ^6.4.26 → [Updates: ^8.0.0]
• symfony/dotenv ^6.4.30 → [Updates: ^8.0.0]
• symfony/error-handler ^6.4.26 → [Updates: ^8.0.0]
• symfony/event-dispatcher ^6.4.25 → [Updates: ^8.0.0]
• symfony/expression-language ^6.4.30 → [Updates: ^8.0.0]
• symfony/filesystem ^6.4.30 → [Updates: ^8.0.0]
• symfony/finder ^6.4.27 → [Updates: ^8.0.0]
• symfony/form ^6.4.30 → [Updates: ^8.0.0]
• symfony/framework-bundle ^6.4.30 → [Updates: ^8.0.0]
• symfony/http-foundation 6.4.33 → [Updates: 6.4.35, 8.0.7]
• symfony/http-kernel ^6.4.30 → [Updates: ^8.0.0]
• symfony/monolog-bundle ^3.11.1 → [Updates: ^4.0.0]
• symfony/password-hasher ^6.4.24 → [Updates: ^8.0.0]
• symfony/process ^6.4.26 → [Updates: ^8.0.0]
• symfony/property-info ^6.4.30 → [Updates: ^8.0.0]
• symfony/routing ^6.4.30 → [Updates: ^8.0.0]
• symfony/security-bundle ^6.4.30 → [Updates: ^8.0.0]
• symfony/security-core ^6.4.27 → [Updates: ^8.0.0]
• symfony/security-csrf ^6.4.24 → [Updates: ^8.0.0]
• symfony/security-http ^6.4.30 → [Updates: ^8.0.0]
• symfony/serializer ^6.4.30 → [Updates: ^8.0.0]
• symfony/validator ^6.4.30 → [Updates: ^8.0.0]
• symfony/yaml ^6.4.30 → [Updates: ^8.0.0]
• behat/behat ^3.29
• behat/gherkin ^4.16.1
• behat/mink ^1.13
• behat/mink-browserkit-driver ^2.3.0
• behat/mink-selenium2-driver ^1.7
• doctrine/doctrine-fixtures-bundle ^3.7.3 → [Updates: ^4.0.0]
• fakerphp/faker ^1.24.1
• friends-of-behat/symfony-extension ^2.6.2
• guzzlehttp/guzzle ^7.10
• liuggio/fastest ^1.13 → [Updates: ^1.13]
• ministryofjustice/mink-extension ^2.7.3
• mockery/mockery ^1.6.12
• osteel/openapi-httpfoundation-testing ^0.14.0
• phpspec/prophecy-phpunit ^2.4.0
• phpstan/phpstan ^1.12.32 → [Updates: ^2.0.0]
• phpstan/phpstan-mockery ^1.1.3 → [Updates: ^2.0.0]
• phpstan/phpstan-phpunit ^1.4.2 → [Updates: ^2.0.0]
• phpunit/phpcov ^9.0.2 → [Updates: ^12.0.0]
• phpunit/phpunit ^10.5.60 → [Updates: ^13.0.0]
• symfony/browser-kit ^6.4.28 → [Updates: ^8.0.0]
• symfony/http-client ^6.4.30 → [Updates: ^8.0.0]
• symfony/maker-bundle ^1.65.1 → [Updates: ^1.65.1]
• symfony/mime ^6.4.30 → [Updates: ^8.0.0]
• symfony/phpunit-bridge ^6.4.26 → [Updates: ^8.0.0]
• symfony/var-dumper ^6.4.26 → [Updates: ^8.0.0]

client/app/composer.json (67)

• php ^8.4
• alphagov/notifications-php-client ^7.0.0
• aws/aws-sdk-php 3.368.0 → [Updates: 3.373.5]
• doctrine/annotations ^2.0.2
• doctrine/collections ^2.6.0 → [Updates: ^3.0.0]
• egulias/email-validator ^4.0.4
• fakerphp/faker ^1.24.1
• gbprod/uuid-normalizer ^7.0.2 → [Updates: ^8.0.0]
• guzzlehttp/guzzle ^7.10.0
• jms/serializer-bundle ^5.5.2
• jolicode/slack-php-api ^4.8 → [Updates: ^4.8]
• lcobucci/jwt ^4.3 → [Updates: ^5.0]
• league/mime-type-detection ^1.16
• monolog/monolog ^1.27.1 → [Updates: ^3.0.0]
• orbitale/imagemagick-php ^3.3.5
• php-http/guzzle7-adapter ^1.1
• predis/predis ^2.4.1 → [Updates: ^3.0.0]
• ramsey/uuid ^4.9.2
• symfony/asset ^6.4.32 → [Updates: ^8.0.0]
• symfony/cache ^6.4.33 → [Updates: ^8.0.0]
• symfony/config ^6.4.32 → [Updates: ^8.0.0]
• symfony/console ^6.4.32 → [Updates: ^8.0.0]
• symfony/debug-bundle ^6.4.27 → [Updates: ^8.0.0]
• symfony/dependency-injection ^6.4.32 → [Updates: ^8.0.0]
• symfony/dotenv ^6.4.30 → [Updates: ^8.0.0]
• symfony/error-handler ^6.4.32 → [Updates: ^8.0.0]
• symfony/event-dispatcher ^6.4.32 → [Updates: ^8.0.0]
• symfony/expression-language ^6.4.32 → [Updates: ^8.0.0]
• symfony/form ^6.4.32 → [Updates: ^8.0.0]
• symfony/framework-bundle ^6.4.33 → [Updates: ^8.0.0]
• symfony/http-client ^6.4.33 → [Updates: ^8.0.0]
• symfony/http-foundation ^6.4.33 → [Updates: ^8.0.0]
• symfony/http-kernel ^6.4.33 → [Updates: ^6.4.33, ^8.0.0]
• symfony/intl ^6.4.32 → [Updates: ^8.0.0]
• symfony/lock ^6.4.33 → [Updates: ^8.0.0]
• symfony/mime ^6.4.32 → [Updates: ^8.0.0]
• symfony/monolog-bundle ^3.11.1 → [Updates: ^4.0.0]
• symfony/options-resolver ^6.4.30 → [Updates: ^8.0.0]
• symfony/property-info ^6.4.33 → [Updates: ^8.0.0]
• symfony/rate-limiter ^6.4.33 → [Updates: ^8.0.0]
• symfony/routing ^6.4.32 → [Updates: ^8.0.0]
• symfony/security-bundle ^6.4.32 → [Updates: ^8.0.0]
• symfony/security-core ^6.4.31 → [Updates: ^8.0.0]
• symfony/security-csrf ^6.4.31 → [Updates: ^8.0.0]
• symfony/security-http ^6.4.31 → [Updates: ^8.0.0]
• symfony/serializer ^6.4.33 → [Updates: ^8.0.0]
• symfony/translation ^6.4.32 → [Updates: ^8.0.0]
• symfony/twig-bundle ^6.4.32 → [Updates: ^8.0.0]
• symfony/uid ^6.4.32 → [Updates: ^8.0.0]
• symfony/validator ^6.4.33 → [Updates: ^8.0.0]
• symfony/web-profiler-bundle ^6.4.32 → [Updates: ^8.0.0]
• twig/extra-bundle ^3.23 → [Updates: ^3.23]
• twig/intl-extra ^3.23 → [Updates: ^3.23]
• web-token/jwt-core ^2.2.11 → [Updates: ^3.0.0]
• jangregor/phpstan-prophecy ^1.0.2 → [Updates: ^2.0.0]
• mockery/mockery ^1.6.12
• pact-foundation/pact-php ^8.1 → [Updates: ^10.0]
• phpspec/prophecy-phpunit ^2.5
• phpstan/phpstan ^1.12.32 → [Updates: ^2.0.0]
• phpstan/phpstan-mockery ^1.1.3 → [Updates: ^2.0.0]
• phpstan/phpstan-phpunit ^1.4.2 → [Updates: ^2.0.0]
• phpunit/phpcov 8.2.1 → [Updates: 12.0.0]
• phpunit/phpunit ^9.6.34 → [Updates: ^13.0.0]
• rector/rector ^1.2.10 → [Updates: ^2.0.0]
• symfony/maker-bundle ^1.66.0 → [Updates: ^1.66.0]
• symfony/phpunit-bridge ^6.4.26 → [Updates: ^8.0.0]
• symfony/var-dumper ^6.4.32 → [Updates: ^8.0.0]

composer.json (3)

• php ^8.3
• phpstan/phpstan ^2.1.39
• squizlabs/php_codesniffer ^3.13.5 → [Updates: ^4.0.0]

docker-compose (4)

docker-compose.cachegrind.yml

docker-compose.commands.yml

docker-compose.override.yml

docker-compose.yml (6)

• postgres 14.21 → [Updates: 14.22, 18.3]
• redis 6.2.12 → [Updates: 6.2.21, 8.6.1]
• redis 6.2.12 → [Updates: 6.2.21, 8.6.1]
• pactfoundation/pact-cli 0.56.0.6 → [Updates: 0.56.0.8, 1.5.0.4]
• stoplight/prism 5.14.3
• composer 2.9.4 → [Updates: 2.9.5]

dockerfile (17)

api/docker/app/Dockerfile (2)

• composer 2.9.4@sha256:22a95bd2bc3cf6ff19550a246208138d35f0015602db3d67dc6841945324acc1 → [Updates: 2.9.5]
• php 8.4.18-fpm-alpine3.22 → [Updates: 8.5.4-fpm-alpine3.22]

api/docker/web/Dockerfile

client/docker/app/Dockerfile (2)

• composer 2.9.4@sha256:22a95bd2bc3cf6ff19550a246208138d35f0015602db3d67dc6841945324acc1 → [Updates: 2.9.5]
• php 8.4-fpm-alpine3.22@sha256:a8b3d2c3e09c8f4552bc4b3739f0c74bf14c751e8116262efefdc707239d1595 → [Updates: 8.5-fpm-alpine3.22, 8.4-fpm-alpine3.22]

client/docker/app/Dockerfile-dev

client/docker/resources/Dockerfile

client/docker/web/Dockerfile

disaster-recovery/backup/Dockerfile (1)

• python 3.12-alpine3.22 → [Updates: 3.14-alpine3.22]

disaster-recovery/restore/Dockerfile (1)

• python 3.12-alpine3.22 → [Updates: 3.14-alpine3.22]

file-scanner/Dockerfile (2)

• golang 1.26.0-alpine3.23@sha256:d4c4845f5d60c6a974c6000ce58ae079328d03ab7f721a0734277e69905473e5 → [Updates: 1.26.1-alpine3.23]
• alpine 3.23

htmltopdf/Dockerfile (1)

• python 3.12-alpine3.22 → [Updates: 3.14-alpine3.22]

lambdas/functions/custom_sql_query/Dockerfile (1)

• python 3.14-alpine3.23

local-resources/local-load-balancer/Dockerfile (1)

• nginx 1.29

local-resources/localstack/Dockerfile (1)

• localstack/localstack 4.13.1 → [Updates: 4.14.0]

mock-sirius/Dockerfile (1)

• muonsoft/openapi-mock 0.3.9

orchestration/Dockerfile (2)

• golang 1.26.0-alpine3.23@sha256:d4c4845f5d60c6a974c6000ce58ae079328d03ab7f721a0734277e69905473e5 → [Updates: 1.26.1-alpine3.23]
• alpine 3.23

scripts/custom_sql_query/Dockerfile (1)

• python 3.12-alpine3.22 → [Updates: 3.14-alpine3.22]

wait-for-it/Dockerfile (1)

• alpine 3.23

github-actions (26)

.github/workflows/_build-and-push.yml (10)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.4]
• unfor19/install-aws-cli-action v1@f5b46b7f32cf5e7ebd652656c5036bf83dd1e60c
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076 → [Updates: v2.0.2]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1
• github/codeql-action v2.28.1@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 → [Updates: v4.34.1]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/_codecov.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• codecov/codecov-action v3@ab904c41d6ece82784817410c45d8b8c02684457 → [Updates: v5]
• codecov/codecov-action v3@ab904c41d6ece82784817410c45d8b8c02684457 → [Updates: v5]
• codecov/codecov-action v3@ab904c41d6ece82784817410c45d8b8c02684457 → [Updates: v5]

.github/workflows/_cycle-secrets.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python 6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c → [Updates: 6.2.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• python 3.11 → [Updates: 3.14]

.github/workflows/_ecr-scanning.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python 6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c → [Updates: 6.2.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• python 3.10 → [Updates: 3.14]

.github/workflows/_integration-tests-api.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.4]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/_latest-deployed-image.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4.0.0]
• webfactory/ssh-agent v0.9.1@a6f90b1f127823b31d4d4a8d96047790581349bd → [Updates: v0.10.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]

.github/workflows/_lint-terraform.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4.0.0]
• webfactory/ssh-agent v0.9.1@a6f90b1f127823b31d4d4a8d96047790581349bd → [Updates: v0.10.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• aws-actions/amazon-ecr-login v2.0.1@062b18b96a7aff071d4dc91bc00c4c1a7945b076 → [Updates: v2.0.2]
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1

.github/workflows/_phpcs.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• thenabeel/action-phpcs 23e2a47a8d16fd6ae7f000ac6d3ff97d02f0758d

.github/workflows/_phpstan-api.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.4]

.github/workflows/_phpstan-client.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.4]

.github/workflows/_run-task.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• unfor19/install-aws-cli-action v1@f5b46b7f32cf5e7ebd652656c5036bf83dd1e60c
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4.0.0]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.4]
• webfactory/ssh-agent v0.9.1@a6f90b1f127823b31d4d4a8d96047790581349bd → [Updates: v0.10.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]

.github/workflows/_run-terraform.yml (11)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• unfor19/install-aws-cli-action v1@f5b46b7f32cf5e7ebd652656c5036bf83dd1e60c
• actions/setup-python 6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c → [Updates: 6.2.0]
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4.0.0]
• actions/setup-go v6.2.0@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 → [Updates: v6.3.0]
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]
• webfactory/ssh-agent v0.9.1@a6f90b1f127823b31d4d4a8d96047790581349bd → [Updates: v0.10.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• python 3.11 → [Updates: 3.14]
• go 1.25.5 → [Updates: 1.26.1]

.github/workflows/_scale-services.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• unfor19/install-aws-cli-action v1@f5b46b7f32cf5e7ebd652656c5036bf83dd1e60c
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]

.github/workflows/_secret-scan-on-push.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• aquasecurity/trivy-action 0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1

.github/workflows/_slack-notification.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python 6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c → [Updates: 6.2.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• python 3.11 → [Updates: 3.14]

.github/workflows/_tag-release.yml (1)

• aws-actions/configure-aws-credentials v4@7474bc4690e29a8392af63c5b98e7449536d5c3a → [Updates: v6]

.github/workflows/_test-js.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/_tests-miscellaneous.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python 6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c → [Updates: 6.2.0]
• python 3.11 → [Updates: 3.14]

.github/workflows/_unit-tests-api.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.4]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/_unit-tests-client.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• actions/download-artifact v7.0.0@37930b1c2abaa49bbe596cd826c3c89aef350131 → [Updates: v8.0.1]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.4]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/_web-resources.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-node v6.2.0@6044e13b5dc448c55e2357c09f80417699197238 → [Updates: v6.3.0]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 → [Updates: v5.0.4]
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f → [Updates: v7.0.0]

.github/workflows/scheduled-disaster-recovery-test.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python 6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c → [Updates: 6.2.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-python 6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c → [Updates: 6.2.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• python 3.11 → [Updates: 3.14]
• python 3.11 → [Updates: 3.14]

.github/workflows/scheduled-workspace-cleanup.yml (8)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4.0.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• actions/setup-python 6.0.0@e797f83bcb11b83ae66e0230d6156d7c80228e7c → [Updates: 6.2.0]
• webfactory/ssh-agent v0.9.1@a6f90b1f127823b31d4d4a8d96047790581349bd → [Updates: v0.10.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]
• python 3.10 → [Updates: 3.14]

.github/workflows/workflow-destroy-on-merge.yml (6)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]
• hashicorp/setup-terraform v3.1.2@b9cd54a3c349d3f38e8881555d616ced269862dd → [Updates: v4.0.0]
• webfactory/ssh-agent v0.9.1@a6f90b1f127823b31d4d4a8d96047790581349bd → [Updates: v0.10.0]
• aws-actions/configure-aws-credentials v5.1.1@61815dcd50bd041e203e49132bacad1fd04d2708 → [Updates: v6.0.0]

.github/workflows/workflow-path-to-live.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]

.github/workflows/workflow-pull-request-path.yml (3)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ministryofjustice/opg-github-actions v4.3.10@b8868247a908f74fafe1905701391580575a6d35 → [Updates: v4.3.11]
• actions/labeler main

gomod (4)

file-scanner/go.mod (1)

• go 1.25.5

orchestration/anonymisation/go.mod (5)

• go 1.25.5
• github.com/DATA-DOG/go-sqlmock v1.5.2
• github.com/go-faker/faker/v4 v4.7.0
• github.com/lib/pq v1.11.2 → [Updates: v1.12.0]
• github.com/stretchr/testify v1.11.1

orchestration/sleep_mode/go.mod (2)

• go 1.25.5
• github.com/aws/aws-sdk-go v1.55.8

terraform/account/region/go_redeployer/go.mod (3)

• go 1.25.5
• github.com/aws/aws-lambda-go v1.52.0 → [Updates: v1.53.0]
• github.com/aws/aws-sdk-go v1.55.8

npm (1)

client/resources/package.json (17)

• @ministryofjustice/frontend ^6.0.0 → [Updates: ^9.0.0]
• govuk-elements-sass ^3.1.0
• govuk-frontend ^5.13.0 → [Updates: ^6.0.0]
• jquery ^3.6.0 → [Updates: ^4.0.0]
• @babel/plugin-proposal-class-properties ^7.18.6
• @babel/plugin-transform-classes ^7.28.4
• @babel/preset-env ^7.28.5 → [Updates: ^7.28.5]
• @jest/globals ^29.3.1 → [Updates: ^30.0.0]
• babel-jest ^30.2.0 → [Updates: ^30.2.0]
• esbuild ^0.27.0 → [Updates: ^0.27.0]
• jest ^29.3.1 → [Updates: ^30.0.0]
• jest-environment-jsdom ^30.2.0 → [Updates: ^30.2.0]
• jest-fetch-mock ^3.0.3
• sass-embedded ^1.93.3 → [Updates: ^1.93.3]
• standard ^16.0.4 → [Updates: ^17.0.0]
• @testing-library/dom ^10.0.0
• @testing-library/user-event ^14.4.3

pip_requirements (10)

disaster-recovery/backup/requirements.txt (1)

• boto3 ~=1.34

disaster-recovery/restore/requirements.txt (2)

• boto3 ~=1.34
• click ==8.1.3 → [Updates: ==8.3.1]

htmltopdf/requirements.txt (6)

• executor ==23.2
• gunicorn ==23.0.0 → [Updates: ==25.1.0]
• setuptools ==78.1.1 → [Updates: ==82.0.1]
• weasyprint ==68.1
• werkzeug ==3.1.6
• wheel ==0.46.3

lambdas/functions/block_ips_lambda/requirements.txt

lambdas/functions/custom_sql_query/requirements.txt (3)

• awslambdaric ~=4.0.0
• boto3 ~=1.42.65
• psycopg2 ~=2.9.11

lambdas/functions/monitor_notify_lambda/requirements.txt

scripts/custom_sql_query/requirements.txt (2)

• boto3 ~=1.35.20 → [Updates: ~=1.42.70]
• requests ~=2.32.3

scripts/pipeline/cleanup_task_definitions/requirements.txt (1)

• boto3 ~=1.34

scripts/pipeline/ecrscan/requirements.txt

terraform/environment/scripts/cycle_secrets/requirements.txt (1)

• boto3 ~=1.34

terraform (57)

terraform/account/provider.tf

terraform/account/region.tf

terraform/account/region/kms_service_anomoly.tf

terraform/account/region/kms_service_backup.tf

terraform/account/region/kms_service_dynamo.tf

terraform/account/region/kms_service_logs.tf

terraform/account/region/kms_service_s3.tf

terraform/account/region/kms_service_secrets.tf

terraform/account/region/kms_service_sns.tf

terraform/account/region/modules/environment_secrets/versions.tf (2)

• aws >= 6.0.0 → [Updates: >= 6.0.0]
• hashicorp/terraform >=1.5.0

terraform/account/region/modules/kms_key/versions.tf (2)

• aws >= 6.0.0 → [Updates: >= 6.0.0]
• hashicorp/terraform >=1.5.0

terraform/account/region/modules/ssm_ec2_instance/versions.tf (2)

• aws >= 6.0.0 → [Updates: >= 6.0.0]
• hashicorp/terraform >=1.5.0

terraform/account/region/network.tf (1)

• github.com/ministryofjustice/opg-terraform-aws-firewalled-network v1.1.0

terraform/account/region/secrets.tf

terraform/account/region/ssm_ec2_instance.tf

terraform/account/region/versions.tf (3)

• archive >= 2.4.0
• aws >= 5.0.0 → [Updates: >= 5.0.0]
• hashicorp/terraform >= 1.0.0

terraform/account/region/vpc_endpoints.tf

terraform/account/versions.tf (2)

• aws >= 6.0.0 → [Updates: >= 6.0.0]
• hashicorp/terraform 1.14.6 → [Updates: 1.14.7]

terraform/environment/provider.tf

terraform/environment/region.tf

terraform/environment/region/disaster_recovery.tf

terraform/environment/region/ecs_autoscaling.tf

terraform/environment/region/ecs_service_admin_sg.tf

terraform/environment/region/ecs_service_api_sg.tf

terraform/environment/region/ecs_service_api.tf

terraform/environment/region/ecs_service_front_sg.tf

terraform/environment/region/ecs_service_htmltopdf_sg.tf

terraform/environment/region/ecs_service_mock_sirius_sg.tf

terraform/environment/region/ecs_service_scan_sg.tf

terraform/environment/region/ecs_service_sirius_files_sync.tf

terraform/environment/region/ecs_task_analyse.tf

terraform/environment/region/ecs_task_backup.tf

terraform/environment/region/ecs_task_check_csv_upload.tf

terraform/environment/region/ecs_task_integration_tests.tf

terraform/environment/region/ecs_task_performance_data.tf

terraform/environment/region/ecs_task_reset_database.tf

terraform/environment/region/ecs_task_resilience_tests.tf

terraform/environment/region/ecs_task_restore_from_production.tf

terraform/environment/region/ecs_task_restore.tf

terraform/environment/region/ecs_task_shared_sg.tf

terraform/environment/region/ecs_task_sleep_mode.tf

terraform/environment/region/ecs_task_smoke_tests.tf

terraform/environment/region/fault_injections_simulator_experiments.tf

terraform/environment/region/load_balancer_admin_sg.tf

terraform/environment/region/load_balancer_front_sg.tf

terraform/environment/region/modules/aurora/terraform.tf (2)

• aws >= 5.0.0 → [Updates: >= 5.0.0]
• hashicorp/terraform >= 1.0.0

terraform/environment/region/modules/disaster_recovery/ecs_sg.tf

terraform/environment/region/modules/disaster_recovery/terraform.tf (2)

• aws >= 5.0.0 → [Updates: >= 5.0.0]
• hashicorp/terraform >= 1.0.0

terraform/environment/region/modules/fault_injection_simulator_experiments/versions.tf (2)

• aws >= 5.0.0 → [Updates: >= 5.0.0]
• hashicorp/terraform >= 1.5.0

terraform/environment/region/modules/s3_bucket/terraform.tf (1)

• hashicorp/terraform >= 1.0.0

terraform/environment/region/modules/task/versions.tf (2)

• aws >= 5.0.0 → [Updates: >= 5.0.0]
• hashicorp/terraform >= 1.0.0

terraform/environment/region/rds_sg.tf

terraform/environment/region/rds.tf

terraform/environment/region/s3_bucket.tf

terraform/environment/region/variables.tf (1)

• github.com/ministryofjustice/opg-terraform-aws-moj-ip-allow-list v3.0.3

terraform/environment/region/versions.tf (3)

• archive >= 2.4
• aws >= 5.0.0 → [Updates: >= 5.0.0]
• hashicorp/terraform >= 1.0.0

terraform/environment/versions.tf (3)

• archive >= 2.4
• aws >= 6.0.0 → [Updates: >= 6.0.0]
• hashicorp/terraform 1.14.6 → [Updates: 1.14.7]

---

• Check this box to trigger a request for Renovate to run again on this repository