Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update github/codeql-action digest to 45cbd0c
• chore(deps): update dependency newtonsoft.json to 13.0.4
• chore(deps): update dependency openfeature.providers.ofrep to 0.1.5
• chore(deps): update dotnet monorepo (Microsoft.AspNetCore.Mvc.Testing, Microsoft.AspNetCore.TestHost, Microsoft.Bcl.TimeProvider, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.Diagnostics.Testing, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, Microsoft.Extensions.TimeProvider.Testing, System.Net.Http.WinHttpHandler, System.Text.Json, dotnet-sdk)
• chore(deps): update dependency configcat.client to 9.4.3
• chore(deps): update dependency google.protobuf to 3.33.5
• chore(deps): update dependency grpc.net.client to 2.76.0
• chore(deps): update dependency grpc.tools to 2.76.0
• chore(deps): update dependency jsonlogic to 5.5.0
• chore(deps): update dependency microsoft.featuremanagement to 4.4.0
• chore(deps): update dependency njsonschema to 11.5.2
• chore(deps): update dependency openfeature to 2.11.1
• chore(deps): update dependency openfeature.hosting to 2.11.1
• chore(deps): update dependency statsig to 2.4.1
• chore(deps): update dependency flagsmith to v9
• chore(deps): update dependency jsonlogic to v6
• chore(deps): update dotnet monorepo to v10 (major) (Microsoft.AspNetCore.Mvc.Testing, Microsoft.AspNetCore.TestHost, Microsoft.Bcl.TimeProvider, Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.EnvironmentVariables, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.Diagnostics.Testing, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, Microsoft.Extensions.TimeProvider.Testing, System.Net.Http.Json, System.Net.Http.WinHttpHandler, System.Text.Json)
• 🔐 Create all pending approval PRs at once 🔐

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• mcr.microsoft.com/devcontainers/dotnet 10.0

git-submodules (1)

.gitmodules (4)

• src/OpenFeature.Contrib.Providers.Flagd/schemas a0b8e85d4bca83728bfbf62d320936960926a262
• spec 1115b785d2cd08d16d63e96bdb6a0ac78a65e6ee
• src/OpenFeature.Contrib.Providers.Flagd/flagd-testbed ecb3d096c82c52424eeb545cf481f2f1d4794d21
• src/OpenFeature.Providers.GOFeatureFlag/wasm-releases 3b3053380a9518fb66ef2b9f95ca4dcd334734fa

github-actions (7)

.github/workflows/ci.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• actions/upload-artifact v6.0.0@b7c566a772e6b6bfb58ed0dc250532a479d7789f

.github/workflows/codeql-analysis.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• github/codeql-action v4@6bc82e05fd0ea64601dd4b465378bbcf57de0314 → [Updates: v4]
• github/codeql-action v4@6bc82e05fd0ea64601dd4b465378bbcf57de0314 → [Updates: v4]

.github/workflows/component-owners.yml (1)

• dyladan/component-owners 7ff2b343629407c4dbe1c28ae66f55f723543d2b

.github/workflows/dco-merge-group.yml

.github/workflows/dotnet-format.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306

.github/workflows/lint-pr.yml (3)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405

.github/workflows/release.yml (8)

• googleapis/release-please-action v4@16a9c90856f42705d54a6fda1823352bdc62cf38
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• NuGet/login v1@d22cc5f58ff5b88bf9bd452535b4335137e24544
• actions/attest-build-provenance v3.2.0@96278af6caaf10aea03fd8d33a09a777ca52d62f
• CycloneDX/gh-dotnet-generate-sbom v1.0.1@c183e4ac30e5b99354cb9a98c38548e07c538346
• actions/attest-sbom v3.0.0@4651f806c01d8637787e274ac3bdf724ef169f34

nuget (23)

build/Common.props (1)

• Microsoft.NETFramework.ReferenceAssemblies 1.0.3

build/Common.tests.props

global.json (1)

• dotnet-sdk 10.0.100 → [Updates: 10.0.102]

src/OpenFeature.Contrib.Providers.ConfigCat/OpenFeature.Contrib.Providers.ConfigCat.csproj (2)

• OpenFeature [2.0,3.0)
• ConfigCat.Client 9.3.2 → [Updates: 9.4.3]

src/OpenFeature.Contrib.Providers.EnvVar/OpenFeature.Contrib.Providers.EnvVar.csproj (1)

• OpenFeature [2.0,3.0)

src/OpenFeature.Contrib.Providers.FeatureManagement/OpenFeature.Contrib.Providers.FeatureManagement.csproj (2)

• OpenFeature [2.0,3.0)
• Microsoft.FeatureManagement 4.0.0 → [Updates: 4.4.0]

src/OpenFeature.Contrib.Providers.Flagd/OpenFeature.Contrib.Providers.Flagd.csproj (11)

• System.Net.Http.WinHttpHandler 8.0.2 → [Updates: 8.0.3, 10.0.2]
• OpenFeature.Hosting [2.9,2.99999]
• OpenFeature [2.9,2.99999]
• Microsoft.CSharp 4.7.0
• Grpc.Tools 2.71.0 → [Updates: 2.76.0]
• Grpc.Net.Client 2.71.0 → [Updates: 2.76.0]
• Google.Protobuf 3.30.2 → [Updates: 3.33.5]
• Semver 3.0.0
• NJsonSchema 11.0.0 → [Updates: 11.5.2]
• murmurhash 1.0.3
• JsonLogic 5.4.0 → [Updates: 5.5.0, 6.0.0]

src/OpenFeature.Contrib.Providers.Flagsmith/OpenFeature.Contrib.Providers.Flagsmith.csproj (3)

• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.2]
• OpenFeature [2.0,3.0)
• Flagsmith 5.4.3 → [Updates: 9.0.0]

src/OpenFeature.Contrib.Providers.Flipt/OpenFeature.Contrib.Providers.Flipt.csproj (5)

• OpenFeature [2.0,3.0)
• System.ComponentModel.Annotations 5.0.0
• NSwag.MSBuild 14.6.3
• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.2]
• System.Net.Http 4.3.4

src/OpenFeature.Contrib.Providers.Statsig/OpenFeature.Contrib.Providers.Statsig.csproj (2)

• OpenFeature [2.0,3.0)
• Statsig 2.3.1 → [Updates: 2.4.1]

src/OpenFeature.Providers.GOFeatureFlag/OpenFeature.Providers.GOFeatureFlag.csproj (5)

• System.Net.Http 4.3.4
• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.2]
• Wasmtime 34.0.2
• OpenFeature.Providers.Ofrep 0.1.1 → [Updates: 0.1.5]
• OpenFeature 2.7.0 → [Updates: 2.11.1]

src/OpenFeature.Providers.Ofrep/OpenFeature.Providers.Ofrep.csproj (6)

• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.2]
• System.Net.Http.Json 8.0.1 → [Updates: 10.0.2]
• System.Net.Http 4.3.4
• Microsoft.Bcl.TimeProvider 8.0.0 → [Updates: 8.0.1, 10.0.2]
• Microsoft.Extensions.Http 8.0.0 → [Updates: 8.0.1, 10.0.2]
• Microsoft.Extensions.Logging 8.0.0 → [Updates: 8.0.1, 10.0.2]

test/OpenFeature.Contrib.Providers.ConfigCat.Test/OpenFeature.Contrib.Providers.ConfigCat.Test.csproj (1)

• AutoFixture.Xunit2 4.18.1

test/OpenFeature.Contrib.Providers.EnvVar.Test/OpenFeature.Contrib.Providers.EnvVar.Test.csproj (1)

• AutoFixture.Xunit2 4.18.1

test/OpenFeature.Contrib.Providers.FeatureManagement.Test/OpenFeature.Contrib.Providers.FeatureManagement.Test.csproj (2)

• Microsoft.Extensions.DependencyInjection 8.0.1 → [Updates: 10.0.2]
• Microsoft.Extensions.Configuration.Json 8.0.1 → [Updates: 10.0.2]

test/OpenFeature.Contrib.Providers.Flagd.E2e.Common/OpenFeature.Contrib.Providers.Flagd.E2e.Common.csproj (5)

• Testcontainers 4.10.0
• Reqnroll.xUnit 3.3.3
• Microsoft.Extensions.Configuration.Json 8.0.0 → [Updates: 8.0.1, 10.0.2]
• Microsoft.Extensions.Configuration.EnvironmentVariables 8.0.0 → [Updates: 10.0.2]
• Microsoft.Extensions.Configuration 8.0.0 → [Updates: 10.0.2]

test/OpenFeature.Contrib.Providers.Flagd.E2e.ProcessTest/OpenFeature.Contrib.Providers.Flagd.E2e.ProcessTest.csproj (1)

• Reqnroll.xUnit 3.3.3

test/OpenFeature.Contrib.Providers.Flagd.E2e.RpcTest/OpenFeature.Contrib.Providers.Flagd.E2e.RpcTest.csproj (1)

• Reqnroll.xUnit 3.3.3

test/OpenFeature.Contrib.Providers.Flagd.Test/OpenFeature.Contrib.Providers.Flagd.Test.csproj (2)

• Microsoft.Extensions.Diagnostics.Testing 9.4.0 → [Updates: 9.10.0, 10.2.0]
• Grpc 2.46.6

test/OpenFeature.Contrib.Providers.Flipt.Test/OpenFeature.Contrib.Providers.Flipt.Test.csproj (2)

• Moq 4.20.72
• System.Net.Http 4.3.4

test/OpenFeature.Contrib.Providers.Statsig.Test/OpenFeature.Contrib.Providers.Statsig.Test.csproj (1)

• AutoFixture.Xunit2 4.18.1

test/OpenFeature.Providers.GOFeatureFlag.Test/OpenFeature.Providers.GOFeatureFlag.Test.csproj (3)

• Newtonsoft.Json 13.0.3 → [Updates: 13.0.4]
• RichardSzalay.MockHttp 7.0.0
• Wasmtime 34.0.2

test/OpenFeature.Providers.Ofrep.Test/OpenFeature.Providers.Ofrep.Test.csproj (5)

• OpenFeature.Hosting 2.9.0 → [Updates: 2.11.1]
• Microsoft.AspNetCore.TestHost 9.0.9 → [Updates: 9.0.12, 10.0.2]
• Microsoft.AspNetCore.Mvc.Testing 9.0.9 → [Updates: 9.0.12, 10.0.2]
• Microsoft.Extensions.Configuration 8.0.0 → [Updates: 10.0.2]
• Microsoft.Extensions.TimeProvider.Testing 9.9.0 → [Updates: 9.10.0, 10.2.0]

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository

[hoerup]

Looks like renovate hasn't run in quite a while

@askpt is renovate disabled on purpose or is it broken ?

[askpt]

Looks like renovate hasn't run in quite a while

@askpt is renovate disabled on purpose or is it broken ?

@hoerup Thanks for bringing this to my attention. The PRs for the dependencies are manually triggered by us. I will have a look later to see which ones we can trigger.

[hoerup]

Another thing that caught my eye

These 2 PR's were closed without merge
#442
#441

But you use
"recreateWhen": "never"

So renovate will never try to perform these updates again - is that also on purpose ?

[askpt]

Another thing that caught my eye

These 2 PR's were closed without merge #442 #441

But you use "recreateWhen": "never"

So renovate will never try to perform these updates again - is that also on purpose ?

@hoerup It is on purpose. We had some issues with the dependencies being recreated when we "closed" them. For packages, we don't want to force consumers to "bump" the transient dependencies, except in the event of a security incident.

For example, if you are using Ofrep v1, which has DepA v1.2. If your application uses DepA directly with v1.1, it may encounter dependency restoration issues. By targeting the lowest possible, we ensure you can control the version you want. Similar to this implementation: https://github.com/App-vNext/Polly/blob/0fb7b9822fecfa56a5306f9bb03579560c3ffbbd/Directory.Packages.props#L45