Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update actions/setup-dotnet digest to c2fa09f
• chore(deps): update src/openfeature.contrib.providers.flagd/flagd-testbed digest to 3bff4b7
• chore(deps): update dependency newtonsoft.json to 13.0.4
• chore(deps): update dependency openfeature.providers.ofrep to 0.1.5
• chore(deps): update dotnet monorepo (Microsoft.AspNetCore.Mvc.Testing, Microsoft.AspNetCore.TestHost, Microsoft.Bcl.TimeProvider, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.Diagnostics.Testing, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, Microsoft.Extensions.TimeProvider.Testing, System.Net.Http.WinHttpHandler, System.Text.Json, dotnet-sdk)
• chore(deps): update dependency configcat.client to 9.4.3
• chore(deps): update dependency google.protobuf to 3.34.0
• chore(deps): update dependency grpc.net.client to 2.76.0
• chore(deps): update dependency grpc.tools to 2.78.0
• chore(deps): update dependency jsonlogic to 5.5.0
• chore(deps): update dependency microsoft.featuremanagement to 4.4.0
• chore(deps): update dependency njsonschema to 11.5.2
• chore(deps): update dependency openfeature to 2.11.1
• chore(deps): update dependency openfeature.hosting to 2.11.1
• chore(deps): update dependency statsig to 2.4.1
• chore(deps): update dependency flagsmith to v9
• chore(deps): update dependency jsonlogic to v6
• chore(deps): update dotnet monorepo to v10 (major) (Microsoft.AspNetCore.Mvc.Testing, Microsoft.AspNetCore.TestHost, Microsoft.Bcl.TimeProvider, Microsoft.Extensions.Configuration, Microsoft.Extensions.Configuration.EnvironmentVariables, Microsoft.Extensions.Configuration.Json, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.Diagnostics.Testing, Microsoft.Extensions.Http, Microsoft.Extensions.Logging, Microsoft.Extensions.TimeProvider.Testing, System.Net.Http.Json, System.Net.Http.WinHttpHandler, System.Text.Json)
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update src/openfeature.contrib.providers.flagd/schemas digest to 9f823b5

Detected Dependencies

devcontainer (1)

.devcontainer/devcontainer.json (1)

• mcr.microsoft.com/devcontainers/dotnet 10.0

git-submodules (1)

.gitmodules (4)

• src/OpenFeature.Contrib.Providers.Flagd/schemas a0b8e85d4bca83728bfbf62d320936960926a262 → [Updates: undefined]
• spec eefdf439c5a5b69ccde036c3c6959a4a6c17e08c
• src/OpenFeature.Contrib.Providers.Flagd/flagd-testbed ecb3d096c82c52424eeb545cf481f2f1d4794d21 → [Updates: undefined]
• src/OpenFeature.Providers.GOFeatureFlag/wasm-releases a18dba9985c82ceb20b5910697a347769ddf151e

github-actions (6)

.github/workflows/ci.yml (9)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309 → [Updates: v5]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309 → [Updates: v5]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309 → [Updates: v5]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• actions/upload-artifact v7.0.0@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f

.github/workflows/component-owners.yml (1)

• dyladan/component-owners 7ff2b343629407c4dbe1c28ae66f55f723543d2b

.github/workflows/dco-merge-group.yml

.github/workflows/dotnet-format.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309 → [Updates: v5]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306

.github/workflows/lint-pr.yml (3)

• amannn/action-semantic-pull-request v6@48f256284bd46cdaab1048c3721360e808335d50
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405
• marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405

.github/workflows/release.yml (8)

• googleapis/release-please-action v4@16a9c90856f42705d54a6fda1823352bdc62cf38
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• actions/setup-dotnet v5@baa11fbfe1d6520db94683bd5c7a3818018e4309 → [Updates: v5]
• actions/cache v5.0.3@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
• NuGet/login v1@d22cc5f58ff5b88bf9bd452535b4335137e24544
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26
• CycloneDX/gh-dotnet-generate-sbom v1.0.1@c183e4ac30e5b99354cb9a98c38548e07c538346
• actions/attest v4.1.0@59d89421af93a897026c735860bf21b6eb4f7b26

nuget (23)

build/Common.props (1)

• Microsoft.NETFramework.ReferenceAssemblies 1.0.3

build/Common.tests.props

global.json (1)

• dotnet-sdk 10.0.100 → [Updates: 10.0.103]

src/OpenFeature.Contrib.Providers.ConfigCat/OpenFeature.Contrib.Providers.ConfigCat.csproj (2)

• OpenFeature [2.0,3.0)
• ConfigCat.Client 9.3.2 → [Updates: 9.4.3]

src/OpenFeature.Contrib.Providers.EnvVar/OpenFeature.Contrib.Providers.EnvVar.csproj (1)

• OpenFeature [2.0,3.0)

src/OpenFeature.Contrib.Providers.FeatureManagement/OpenFeature.Contrib.Providers.FeatureManagement.csproj (2)

• OpenFeature [2.0,3.0)
• Microsoft.FeatureManagement 4.0.0 → [Updates: 4.4.0]

src/OpenFeature.Contrib.Providers.Flagd/OpenFeature.Contrib.Providers.Flagd.csproj (11)

• System.Net.Http.WinHttpHandler 8.0.2 → [Updates: 8.0.3, 10.0.3]
• OpenFeature.Hosting [2.9,2.99999]
• OpenFeature [2.9,2.99999]
• Microsoft.CSharp 4.7.0
• Grpc.Tools 2.71.0 → [Updates: 2.78.0]
• Grpc.Net.Client 2.71.0 → [Updates: 2.76.0]
• Google.Protobuf 3.30.2 → [Updates: 3.34.0]
• Semver 3.0.0
• NJsonSchema 11.0.0 → [Updates: 11.5.2]
• murmurhash 1.0.3
• JsonLogic 5.4.0 → [Updates: 5.5.0, 6.0.0]

src/OpenFeature.Contrib.Providers.Flagsmith/OpenFeature.Contrib.Providers.Flagsmith.csproj (3)

• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.3]
• OpenFeature [2.0,3.0)
• Flagsmith 5.4.3 → [Updates: 9.0.0]

src/OpenFeature.Contrib.Providers.Flipt/OpenFeature.Contrib.Providers.Flipt.csproj (5)

• OpenFeature [2.0,3.0)
• System.ComponentModel.Annotations 5.0.0
• NSwag.MSBuild 14.6.3
• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.3]
• System.Net.Http 4.3.4

src/OpenFeature.Contrib.Providers.Statsig/OpenFeature.Contrib.Providers.Statsig.csproj (2)

• OpenFeature [2.0,3.0)
• Statsig 2.3.1 → [Updates: 2.4.1]

src/OpenFeature.Providers.GOFeatureFlag/OpenFeature.Providers.GOFeatureFlag.csproj (5)

• System.Net.Http 4.3.4
• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.3]
• Wasmtime 34.0.2
• OpenFeature.Providers.Ofrep 0.1.1 → [Updates: 0.1.5]
• OpenFeature 2.7.0 → [Updates: 2.11.1]

src/OpenFeature.Providers.Ofrep/OpenFeature.Providers.Ofrep.csproj (6)

• System.Text.Json 8.0.5 → [Updates: 8.0.6, 10.0.3]
• System.Net.Http.Json 8.0.1 → [Updates: 10.0.3]
• System.Net.Http 4.3.4
• Microsoft.Bcl.TimeProvider 8.0.0 → [Updates: 8.0.1, 10.0.3]
• Microsoft.Extensions.Http 8.0.0 → [Updates: 8.0.1, 10.0.3]
• Microsoft.Extensions.Logging 8.0.0 → [Updates: 8.0.1, 10.0.3]

test/OpenFeature.Contrib.Providers.ConfigCat.Test/OpenFeature.Contrib.Providers.ConfigCat.Test.csproj (1)

• AutoFixture.Xunit2 4.18.1

test/OpenFeature.Contrib.Providers.EnvVar.Test/OpenFeature.Contrib.Providers.EnvVar.Test.csproj (1)

• AutoFixture.Xunit2 4.18.1

test/OpenFeature.Contrib.Providers.FeatureManagement.Test/OpenFeature.Contrib.Providers.FeatureManagement.Test.csproj (2)

• Microsoft.Extensions.DependencyInjection 8.0.1 → [Updates: 10.0.3]
• Microsoft.Extensions.Configuration.Json 8.0.1 → [Updates: 10.0.3]

test/OpenFeature.Contrib.Providers.Flagd.E2e.Common/OpenFeature.Contrib.Providers.Flagd.E2e.Common.csproj (5)

• Testcontainers 4.10.0
• Reqnroll.xUnit 3.3.3
• Microsoft.Extensions.Configuration.Json 8.0.0 → [Updates: 8.0.1, 10.0.3]
• Microsoft.Extensions.Configuration.EnvironmentVariables 8.0.0 → [Updates: 10.0.3]
• Microsoft.Extensions.Configuration 8.0.0 → [Updates: 10.0.3]

test/OpenFeature.Contrib.Providers.Flagd.E2e.ProcessTest/OpenFeature.Contrib.Providers.Flagd.E2e.ProcessTest.csproj (1)

• Reqnroll.xUnit 3.3.3

test/OpenFeature.Contrib.Providers.Flagd.E2e.RpcTest/OpenFeature.Contrib.Providers.Flagd.E2e.RpcTest.csproj (1)

• Reqnroll.xUnit 3.3.3

test/OpenFeature.Contrib.Providers.Flagd.Test/OpenFeature.Contrib.Providers.Flagd.Test.csproj (2)

• Microsoft.Extensions.Diagnostics.Testing 9.4.0 → [Updates: 9.10.0, 10.3.0]
• Grpc 2.46.6

test/OpenFeature.Contrib.Providers.Flipt.Test/OpenFeature.Contrib.Providers.Flipt.Test.csproj (2)

• Moq 4.20.72
• System.Net.Http 4.3.4

test/OpenFeature.Contrib.Providers.Statsig.Test/OpenFeature.Contrib.Providers.Statsig.Test.csproj (1)

• AutoFixture.Xunit2 4.18.1

test/OpenFeature.Providers.GOFeatureFlag.Test/OpenFeature.Providers.GOFeatureFlag.Test.csproj (3)

• Newtonsoft.Json 13.0.3 → [Updates: 13.0.4]
• RichardSzalay.MockHttp 7.0.0
• Wasmtime 34.0.2

test/OpenFeature.Providers.Ofrep.Test/OpenFeature.Providers.Ofrep.Test.csproj (5)

• OpenFeature.Hosting 2.9.0 → [Updates: 2.11.1]
• Microsoft.AspNetCore.TestHost 9.0.9 → [Updates: 9.0.13, 10.0.3]
• Microsoft.AspNetCore.Mvc.Testing 9.0.9 → [Updates: 9.0.13, 10.0.3]
• Microsoft.Extensions.Configuration 8.0.0 → [Updates: 10.0.3]
• Microsoft.Extensions.TimeProvider.Testing 9.9.0 → [Updates: 9.10.0, 10.3.0]

renovate-config-presets (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository

[hoerup]

Looks like renovate hasn't run in quite a while

@askpt is renovate disabled on purpose or is it broken ?

[askpt]

Looks like renovate hasn't run in quite a while

@askpt is renovate disabled on purpose or is it broken ?

@hoerup Thanks for bringing this to my attention. The PRs for the dependencies are manually triggered by us. I will have a look later to see which ones we can trigger.

[hoerup]

Another thing that caught my eye

These 2 PR's were closed without merge
#442
#441

But you use
"recreateWhen": "never"

So renovate will never try to perform these updates again - is that also on purpose ?

[askpt]

Another thing that caught my eye

These 2 PR's were closed without merge #442 #441

But you use "recreateWhen": "never"

So renovate will never try to perform these updates again - is that also on purpose ?

@hoerup It is on purpose. We had some issues with the dependencies being recreated when we "closed" them. For packages, we don't want to force consumers to "bump" the transient dependencies, except in the event of a security incident.

For example, if you are using Ofrep v1, which has DepA v1.2. If your application uses DepA directly with v1.1, it may encounter dependency restoration issues. By targeting the lowest possible, we ensure you can control the version you want. Similar to this implementation: https://github.com/App-vNext/Polly/blob/0fb7b9822fecfa56a5306f9bb03579560c3ffbbd/Directory.Packages.props#L45